last executing test programs:
5.869935955s ago: executing program 3 (id=41):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
getdents64(r0, &(0x7f0000000080), 0x400)
4.659265643s ago: executing program 3 (id=43):
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408680630b0000000000010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
nanosleep(&(0x7f0000000500)={0x1}, 0x0)
4.569768762s ago: executing program 1 (id=44):
mkdir(&(0x7f0000001a00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/acls/naa.1234567890abcdef\x00', 0x1ff)
4.505635787s ago: executing program 1 (id=45):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ed)
mount(&(0x7f0000000140)=@filename='sysfs\x00', &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/module/dvb_as102/parameters/fw_upload\x00', 0x1, 0x0)
write(r0, &(0x7f0000000380)='0\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vidtv/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='vidtv.0\x00', 0x7)
4.199302316s ago: executing program 1 (id=48):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000440)='./config\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1/bmAttributes\x00', 0x1, 0x0)
write(r0, &(0x7f0000000640)='0x80', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/MaxPower\x00', 0x1, 0x0)
write(r1, &(0x7f00000006c0)='500', 0x3)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000740)='dummy_udc.0', 0xb)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./dev\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000880)='./dev\x00', &(0x7f00000008c0)='devtmpfs\x00', 0x0, 0x0)
nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0)
nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0)
nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0)
nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/devices\x00', 0x0, 0x0)
read(r3, &(0x7f0000000000)=""/1024, 0x400)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/bus/usb/005/002\x00', 0x2, 0x0)
ioctl(r4, 0x80045505, &(0x7f0000000300)="01000000")
close(r4)
3.49004478s ago: executing program 1 (id=52):
syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501dc6600001010203010902190001010080320904000001ff00000007058102400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x1, 0x0)
write(r0, &(0x7f0000000380)='0\x00', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0)
write(r1, &(0x7f0000000480)='auto\x00', 0x5)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/autosuspend_delay_ms\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='0\x00', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/1-1/power/control\x00', 0x1, 0x0)
write(r3, &(0x7f0000000480)='auto\x00', 0x5)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x1, 0x0)
write(r4, &(0x7f0000000380)='0\x00', 0x2)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0)
write(r5, &(0x7f0000000480)='auto\x00', 0x5)
close(r5)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0)
write(r6, &(0x7f0000000580)='on\x00', 0x3)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/1-1/power/control\x00', 0x1, 0x0)
write(r7, &(0x7f0000000580)='on\x00', 0x3)
close(r7)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0)
write(r8, &(0x7f0000000580)='on\x00', 0x3)
close(r8)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r9, &(0x7f0000000600), 0x0)
close(r9)
3.489839993s ago: executing program 2 (id=53):
mkdir(&(0x7f0000001a00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/acls/naa.1234567890abcdef\x00', 0x1ff)
3.436598419s ago: executing program 2 (id=54):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12)
read(r0, &(0x7f0000000900), 0x100)
read(r0, &(0x7f0000000b00), 0x100)
read(r0, &(0x7f0000000d00), 0x100)
read(r0, &(0x7f0000000f00), 0x100)
write(r0, &(0x7f0000000a00), 0x0)
write(r1, &(0x7f0000000800)='AAAA', 0x4)
2.508641594s ago: executing program 2 (id=57):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x8}, @nested_create_vm={0x12d, 0x8}, @nested_load_code={0x12e, 0x18, {0x0, "f4"}}, @nested_vmlaunch={0x12f, 0x8}], 0x61})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae08)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
2.34833854s ago: executing program 2 (id=58):
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff)
mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0)
write(r0, &(0x7f0000001600)='1', 0x1)
2.288307993s ago: executing program 2 (id=59):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10)
listen(r0, 0x5)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000040)={0x0, 0x5f5e100}, 0x0)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000780)='127.0.0.1:6789:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000740)='mount_timeout\x00', &(0x7f0000000790)='1\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept$inet(r0, 0x0, 0x0)
write(r2, &(0x7f00000002c0)="6365706820763032370000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000070100000000000000000000000000000001000000010000000000000000000000000000000100"/346, 0x170)
2.09900059s ago: executing program 3 (id=60):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./lower1/dir1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./lower1/file1\x00', 0x42, 0x1ff)
mount(0x0, &(0x7f00000002c0)='./mnt\x00', 0x0, 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00')
close(0xffffffffffffffff)
renameat2(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file1\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./mnt/file2\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/dir2\x00', 0x0)
umount2(&(0x7f0000000600)='./mnt\x00', 0x0)
mount(0x0, &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)='overlay\x00', 0x0, &(0x7f00000006c0)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00')
1.929177465s ago: executing program 3 (id=62):
mkdir(&(0x7f0000001a00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/acls/naa.1234567890abcdef\x00', 0x1ff)
1.839390108s ago: executing program 3 (id=63):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/x86\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/x86/sched_itmt_enabled\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='1', 0x1)
1.73822504s ago: executing program 3 (id=65):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
chdir(&(0x7f0000000000)='.\x00')
1.611205416s ago: executing program 1 (id=67):
syz_emit_vhci(0x0, 0x4)
nanosleep(0x0, 0x0)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e0a01091000001122334455"], 0xd)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0c010320004000000000000000"], 0xf)
nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0)
1.462269002s ago: executing program 1 (id=68):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022d000100000000090400000903000000092100000001222200090581030800000000090502030800000000"], 0x0)
syz_usb_ep_read(r1, 0x81, 0x1f, &(0x7f0000000080)=""/31)
syz_usb_ep_write(r1, 0x2, 0x24, &(0x7f00000000c0)="000005021f00000053595a20202020204449534b202020202020202020202020312e3020")
syz_usb_ep_write(r1, 0x2, 0xd, &(0x7f0000000100)="55534253010000000000000000")
1.389520789s ago: executing program 0 (id=70):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x10000})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000200)={0x1000, 0x10000, 0x8})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000340)={0x1000, 0x10000}) (async, rerun: 64)
close(r2) (async, rerun: 64)
1.295968145s ago: executing program 2 (id=71):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000040405e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000200)={0x1}, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x101301)
1.184565022s ago: executing program 0 (id=72):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='dev_mnt\x00', 0x1ff)
mount(&(0x7f00000001c0)=@filename='none\x00', &(0x7f0000000200)='dev_mnt\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='dict0\x00', 0x42, 0x1ff)
write(r0, &(0x7f00000002c0)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x100)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0)
write(r1, &(0x7f0000000380)='zstd', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='algo=zstd dict=dict0 level=11', 0x1d)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0)
write(r3, &(0x7f0000000480)='10485760', 0x8)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='dev_mnt/zram0\x00', 0x2, 0x0)
write(r4, &(0x7f0000000500)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40)
close(r4)
1.116423944s ago: executing program 0 (id=73):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='dev_mnt\x00', 0x1ff)
mount(&(0x7f00000001c0)=@filename='none\x00', &(0x7f0000000200)='dev_mnt\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='dict0\x00', 0x42, 0x1ff)
write(r0, &(0x7f00000002c0)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x100)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0)
write(r1, &(0x7f0000000380)='zstd', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='algo=zstd dict=dict0 level=11', 0x1d)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0)
write(r3, &(0x7f0000000480)='10485760', 0x8)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='dev_mnt/zram0\x00', 0x2, 0x0)
write(r4, &(0x7f0000000500)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40)
close(r4)
1.038519634s ago: executing program 0 (id=74):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/dbc\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='enable\x00', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/xhci_hcd/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='0000:00:03.0\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='0000:00:03.0\x00', 0xd)
882.549021ms ago: executing program 0 (id=75):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ed)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='0x1d6b\n\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='0x0102\n\x00', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed)
symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='dummy_udc.0\n\x00', 0xc)
close(r2)
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
syz_open_dev$video(&(0x7f0000000440), 0x0, 0x2)
0s ago: executing program 0 (id=76):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/dummy_udc.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='reg-fixed-voltage\x00', 0x12)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='dummy_udc.0\x00', 0xb)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/drivers/reg-fixed-voltage/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='dummy_udc.0\x00', 0xb)
close(r2)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts.
[ 73.048715][ T5602] cgroup: Unknown subsys name 'net'
[ 73.166872][ T5602] cgroup: Unknown subsys name 'cpuset'
[ 73.175690][ T5602] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 74.624222][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 78.154011][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 78.155543][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 78.158614][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 78.159711][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 78.160197][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 78.161198][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 78.161815][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 78.179858][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 78.188200][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 78.189946][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 78.198386][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 78.198619][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 78.205330][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 78.208025][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 78.209545][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 78.209873][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 78.211017][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 78.211323][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 78.227176][ T4932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 78.240255][ T4932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 79.539970][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.540749][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.540897][ T5619] bridge_slave_0: entered allmulticast mode
[ 79.546182][ T5619] bridge_slave_0: entered promiscuous mode
[ 79.579823][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.579935][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.580066][ T5619] bridge_slave_1: entered allmulticast mode
[ 79.582495][ T5619] bridge_slave_1: entered promiscuous mode
[ 79.699942][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 79.712376][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.713031][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.713179][ T5618] bridge_slave_0: entered allmulticast mode
[ 79.714866][ T5618] bridge_slave_0: entered promiscuous mode
[ 79.729044][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 79.754600][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.754739][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.754866][ T5618] bridge_slave_1: entered allmulticast mode
[ 79.756550][ T5618] bridge_slave_1: entered promiscuous mode
[ 79.819477][ T5619] team0: Port device team_slave_0 added
[ 79.829612][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 79.833240][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 79.847547][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.847711][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.847825][ T5620] bridge_slave_0: entered allmulticast mode
[ 79.849508][ T5620] bridge_slave_0: entered promiscuous mode
[ 79.855330][ T5619] team0: Port device team_slave_1 added
[ 79.887946][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.888364][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.888513][ T5620] bridge_slave_1: entered allmulticast mode
[ 79.890493][ T5620] bridge_slave_1: entered promiscuous mode
[ 79.920684][ T5618] team0: Port device team_slave_0 added
[ 79.932203][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 79.933023][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 79.933050][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 79.953288][ T5618] team0: Port device team_slave_1 added
[ 79.968579][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 79.968595][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 79.968619][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 79.981717][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.981836][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.981946][ T5617] bridge_slave_0: entered allmulticast mode
[ 79.984967][ T5617] bridge_slave_0: entered promiscuous mode
[ 80.006968][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 80.013336][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.013436][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[ 80.013851][ T5617] bridge_slave_1: entered allmulticast mode
[ 80.015851][ T5617] bridge_slave_1: entered promiscuous mode
[ 80.057761][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 80.106102][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 80.106142][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 80.107284][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 80.144317][ T5619] hsr_slave_0: entered promiscuous mode
[ 80.145374][ T5619] hsr_slave_1: entered promiscuous mode
[ 80.147666][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 80.147678][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 80.147702][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 80.194442][ T5618] hsr_slave_0: entered promiscuous mode
[ 80.196047][ T5618] hsr_slave_1: entered promiscuous mode
[ 80.196754][ T5618] debugfs: 'hsr0' already exists in 'hsr'
[ 80.196850][ T5618] Cannot create hsr debugfs directory
[ 80.224238][ T52] Bluetooth: hci3: command tx timeout
[ 80.224415][ T5624] Bluetooth: hci2: command tx timeout
[ 80.231081][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 80.234289][ T5620] team0: Port device team_slave_0 added
[ 80.238125][ T5620] team0: Port device team_slave_1 added
[ 80.272360][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 80.303732][ T52] Bluetooth: hci1: command tx timeout
[ 80.309352][ T5624] Bluetooth: hci0: command tx timeout
[ 80.361046][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 80.361203][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 80.361228][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 80.380757][ T5617] team0: Port device team_slave_0 added
[ 80.382385][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 80.382400][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 80.382423][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 80.405639][ T5617] team0: Port device team_slave_1 added
[ 80.515117][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 80.522136][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 80.522169][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 80.557572][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 80.557596][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 80.557620][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 80.574616][ T5620] hsr_slave_0: entered promiscuous mode
[ 80.575638][ T5620] hsr_slave_1: entered promiscuous mode
[ 80.576253][ T5620] debugfs: 'hsr0' already exists in 'hsr'
[ 80.576271][ T5620] Cannot create hsr debugfs directory
[ 80.688595][ T5617] hsr_slave_0: entered promiscuous mode
[ 80.689600][ T5617] hsr_slave_1: entered promiscuous mode
[ 80.690219][ T5617] debugfs: 'hsr0' already exists in 'hsr'
[ 80.690236][ T5617] Cannot create hsr debugfs directory
[ 80.892556][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 80.904581][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 80.905899][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 80.918189][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 80.944360][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 80.953249][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 80.954802][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 80.965073][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 81.059093][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 81.072207][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 81.075404][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 81.083372][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 81.085789][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 81.097368][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 81.110605][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 81.120740][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 81.199670][ T5620] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 81.210530][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 81.213754][ T5620] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 81.226795][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 81.229166][ T5620] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 81.238058][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 81.250848][ T5620] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 81.259868][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 81.345920][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0
[ 81.356049][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 81.366811][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 81.378727][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 81.390724][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 81.406065][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 81.415868][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 81.426398][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 81.430650][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 81.481614][ T5618] 8021q: adding VLAN 0 to HW filter on device team0
[ 81.506825][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.506932][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 81.564075][ T115] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.564151][ T115] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 81.649338][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0
[ 81.721174][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[ 81.747344][ T5619] 8021q: adding VLAN 0 to HW filter on device team0
[ 81.790080][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.790192][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 81.810524][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[ 81.831667][ T39] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.831796][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 81.874517][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.874635][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 81.891710][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.891826][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 81.898944][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[ 81.979578][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[ 82.037123][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.037239][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 82.061182][ T59] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.061295][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 82.306175][ T52] Bluetooth: hci3: command tx timeout
[ 82.306288][ T5624] Bluetooth: hci2: command tx timeout
[ 82.385291][ T52] Bluetooth: hci1: command tx timeout
[ 82.385386][ T5624] Bluetooth: hci0: command tx timeout
[ 82.744528][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 82.880089][ T5618] veth0_vlan: entered promiscuous mode
[ 82.908545][ T5618] veth1_vlan: entered promiscuous mode
[ 83.002166][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 83.017198][ T5618] veth0_macvtap: entered promiscuous mode
[ 83.032596][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 83.042015][ T5618] veth1_macvtap: entered promiscuous mode
[ 83.074647][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 83.102116][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 83.130903][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 83.156738][ T5617] veth0_vlan: entered promiscuous mode
[ 83.190757][ T5619] veth0_vlan: entered promiscuous mode
[ 83.197622][ T5617] veth1_vlan: entered promiscuous mode
[ 83.245203][ T5620] veth0_vlan: entered promiscuous mode
[ 83.251553][ T5619] veth1_vlan: entered promiscuous mode
[ 83.289219][ T5620] veth1_vlan: entered promiscuous mode
[ 83.346469][ T5617] veth0_macvtap: entered promiscuous mode
[ 83.365616][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.368049][ T5617] veth1_macvtap: entered promiscuous mode
[ 83.380524][ T5619] veth0_macvtap: entered promiscuous mode
[ 83.386933][ T5619] veth1_macvtap: entered promiscuous mode
[ 83.396258][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.403485][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.403805][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.420383][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.424398][ T5620] veth0_macvtap: entered promiscuous mode
[ 83.440246][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 83.458260][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 83.458620][ T5620] veth1_macvtap: entered promiscuous mode
[ 83.512261][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.515085][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 83.529978][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.536398][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 83.537613][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.537653][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.537687][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.537721][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.537754][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.559952][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 83.564596][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 83.573037][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.573083][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.573117][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.573149][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.656684][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.676165][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.768174][ T5618] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 83.813318][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.813349][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.903715][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.903755][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.905254][ T185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.962070][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.962106][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.011718][ T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.019734][ T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.079550][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.079585][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.105542][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.135540][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.135585][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.214657][ T2236] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 84.328701][ T5770] smpboot: CPU 1 is now offline
[ 84.347657][ T1234] cfg80211: failed to load regulatory.db
[ 84.354463][ T52] Bluetooth: hci2: command tx timeout
[ 84.359909][ T5624] Bluetooth: hci3: command tx timeout
[ 84.394479][ T52] Bluetooth: hci0: command tx timeout
[ 84.399964][ T5624] Bluetooth: hci1: command tx timeout
[ 84.410894][ T2236] usb 3-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00
[ 84.440393][ T2236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 84.440420][ T2236] usb 3-1: Product: syz
[ 84.440438][ T2236] usb 3-1: Manufacturer: syz
[ 84.440448][ T2236] usb 3-1: SerialNumber: syz
[ 84.502029][ T5771] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 84.651733][ T2236] hso 3-1:1.0: Can't find INT IN endpoint
[ 84.668217][ T5775] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[ 84.742381][ T5777] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 84.758473][ T5774] Rounding down aligned max_sectors from 4294967295 to 4294967288
[ 84.791017][ T5774] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[ 84.994883][ T5787] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[ 85.218109][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 85.245771][ T5797] lo speed is unknown, defaulting to 1000
[ 85.245869][ T5797] lo speed is unknown, defaulting to 1000
[ 85.248526][ T5797] lo speed is unknown, defaulting to 1000
[ 85.250704][ T5797] smbdirect: ib_dev[sz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[ 85.250738][ T5797] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[ 85.250805][ T5797] smbdirect: ib_dev[sz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[ 85.256758][ T5797] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 85.323784][ T5797] infiniband sz1: RDMA CMA: cma_listen_on_dev, error -98
[ 85.352999][ T5788] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 85.366868][ T5797] lo speed is unknown, defaulting to 1000
[ 85.370568][ T5797] lo speed is unknown, defaulting to 1000
[ 85.374120][ T10] usb 1-1: Using ep0 maxpacket: 32
[ 85.377167][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 85.378995][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 85.379022][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 85.379081][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 85.386599][ T5797] lo speed is unknown, defaulting to 1000
[ 85.396443][ T10] usb 1-1: config 0 descriptor??
[ 85.411785][ T5797] lo speed is unknown, defaulting to 1000
[ 85.421527][ T10] hub 1-1:0.0: USB hub found
[ 85.505337][ T5788] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 0.00
[ 85.511873][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 85.511900][ T5788] usb 2-1: Product: syz
[ 85.511913][ T5788] usb 2-1: Manufacturer: syz
[ 85.512568][ T5788] usb 2-1: SerialNumber: syz
[ 85.547345][ T5788] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[ 85.612168][ T10] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 85.751332][ T5788] mos7840 2-1:1.0: probe with driver mos7840 failed with error -71
[ 85.791797][ T5788] usb 2-1: USB disconnect, device number 2
[ 85.821128][ T5624] Bluetooth: hci3: unexpected subevent 0x01 length: 20 > 18
[ 85.822353][ T5624] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[ 85.822400][ T5624] CPU: 0 UID: 0 PID: 5624 Comm: kworker/u9:2 Tainted: G S syzkaller #0 PREEMPT(full)
[ 85.822427][ T5624] Tainted: [S]=CPU_OUT_OF_SPEC
[ 85.822437][ T5624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 85.822450][ T5624] Workqueue: hci3 hci_rx_work
[ 85.822495][ T5624] Call Trace:
[ 85.822506][ T5624]
[ 85.822514][ T5624] dump_stack_lvl+0xe8/0x150
[ 85.822542][ T5624] sysfs_create_dir_ns+0x271/0x2a0
[ 85.822576][ T5624] ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 85.822611][ T5624] ? do_raw_spin_unlock+0xf5/0x200
[ 85.822638][ T5624] kobject_add_internal+0x622/0xcd0
[ 85.822663][ T5624] kobject_add+0x163/0x240
[ 85.822696][ T5624] ? __pfx_kobject_add+0x10/0x10
[ 85.822731][ T5624] ? get_device_parent+0x366/0x3a0
[ 85.822770][ T5624] device_add+0x3fa/0xb80
[ 85.822799][ T5624] hci_conn_add_sysfs+0xd5/0x210
[ 85.822825][ T5624] le_conn_complete_evt+0xfb7/0x1690
[ 85.822863][ T5624] ? __pfx_le_conn_complete_evt+0x10/0x10
[ 85.822893][ T5624] ? __mutex_unlock_slowpath+0x731/0x900
[ 85.822923][ T5624] ? skb_pull_data+0xf0/0x200
[ 85.822951][ T5624] hci_le_conn_complete_evt+0x187/0x470
[ 85.822985][ T5624] hci_event_packet+0x67a/0xf10
[ 85.823014][ T5624] ? __pfx_hci_le_meta_evt+0x10/0x10
[ 85.823039][ T5624] ? __pfx_hci_event_packet+0x10/0x10
[ 85.823067][ T5624] ? audit_filter_rules+0x44c0/0x5d10
[ 85.823091][ T5624] ? hci_send_to_monitor+0xe2/0x590
[ 85.823113][ T5624] hci_rx_work+0x3ee/0x1020
[ 85.823144][ T5624] ? process_scheduled_works+0x97a/0x1630
[ 85.823165][ T5624] process_scheduled_works+0xc3d/0x1630
[ 85.823217][ T5624] ? __pfx_process_scheduled_works+0x10/0x10
[ 85.823245][ T5624] ? assign_work+0x3cf/0x5d0
[ 85.823270][ T5624] worker_thread+0xa47/0xfb0
[ 85.823319][ T5624] kthread+0x38b/0x480
[ 85.823346][ T5624] ? __pfx_worker_thread+0x10/0x10
[ 85.823366][ T5624] ? __pfx_kthread+0x10/0x10
[ 85.823393][ T5624] ret_from_fork+0x514/0xb70
[ 85.823422][ T5624] ? __pfx_ret_from_fork+0x10/0x10
[ 85.823448][ T5624] ? __switch_to+0xc89/0x1420
[ 85.823474][ T5624] ? __pfx_kthread+0x10/0x10
[ 85.823502][ T5624] ret_from_fork_asm+0x1a/0x30
[ 85.823543][ T5624]
[ 85.826249][ T5624] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 85.826289][ T5624] Bluetooth: hci3: failed to register connection device
[ 85.890075][ T5624] Bluetooth: Frame is too long (len 15, expected len 11)
[ 85.997264][ T5624] Bluetooth: hci3: unexpected event 0x08 length: 6 > 4
[ 86.029624][ T2236] usb 3-1: USB disconnect, device number 2
[ 86.054548][ T5624] Bluetooth: Frame is too long (len 20, expected len 16)
[ 86.107005][ T5624] Bluetooth: Frame is too long (len 22, expected len 18)
[ 86.336021][ T10] usbhid 1-1:0.0: can't add hid device: -71
[ 86.336141][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 86.357047][ T10] usb 1-1: USB disconnect, device number 2
[ 86.384283][ T52] Bluetooth: hci2: command tx timeout
[ 86.384348][ T5624] Bluetooth: hci3: command tx timeout
[ 86.451355][ T5812] db_root: cannot be changed because it's in use
[ 86.462507][ T5812] se_dev->se_dev_ptr already set for storage object
[ 86.463205][ T52] Bluetooth: hci0: command tx timeout
[ 86.463248][ T5624] Bluetooth: hci1: command tx timeout
[ 86.598687][ T5816] db_root: cannot be changed because it's in use
[ 86.619601][ T5818] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[ 86.845424][ T5827] smpboot: CPU 1 is now offline
[ 86.922391][ T5830] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 86.926270][ T5711] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 86.966669][ T5827] cgroup: Unknown subsys name 'cpuset'
[ 87.097778][ T5711] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[ 87.099004][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 87.127558][ T5836] db_root: cannot be changed because it's in use
[ 87.138089][ T5836] se_dev->se_dev_ptr already set for storage object
[ 87.142197][ T5711] as10x_usb: device has been detected
[ 87.147893][ T5711] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[ 87.215155][ T5711] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[ 87.231845][ T5711] Registered device Abilis Systems DVB-Titan
[ 87.252947][ T2236] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 87.268903][ T5838] db_root: cannot be changed because it's in use
[ 87.327954][ T5711] usb 3-1: USB disconnect, device number 3
[ 87.374398][ T5711] Unregistered device Abilis Systems DVB-Titan
[ 87.377965][ T5711] as10x_usb: device has been disconnected
[ 87.433048][ T2236] usb 1-1: Using ep0 maxpacket: 8
[ 87.440369][ T2236] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[ 87.441797][ T2236] usb 1-1: config 0 has an invalid interface number: 143 but max is 0
[ 87.441820][ T2236] usb 1-1: config 0 has no interface number 0
[ 87.441859][ T2236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 87.448476][ T5844] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[ 87.451655][ T2236] usb 1-1: config 0 descriptor??
[ 87.543330][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 87.564083][ T2236] viperboard 1-1:0.143: version 0.00 found at bus 001 address 003
[ 87.630880][ T2236] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[ 87.630937][ T2236] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[ 87.669034][ T5832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 87.678844][ T5832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 87.687403][ T2236] usb 1-1: USB disconnect, device number 3
[ 87.695996][ T10] usb 4-1: Using ep0 maxpacket: 8
[ 87.698431][ T10] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[ 87.700552][ T10] usb 4-1: config 0 has an invalid interface number: 143 but max is 0
[ 87.700575][ T10] usb 4-1: config 0 has no interface number 0
[ 87.700622][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 87.715837][ T10] usb 4-1: config 0 descriptor??
[ 87.827556][ T10] viperboard 4-1:0.143: version 0.00 found at bus 004 address 002
[ 87.843737][ T5711] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 87.848863][ T10] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[ 87.848891][ T10] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[ 87.928041][ T2236] usb 4-1: USB disconnect, device number 2
[ 88.033825][ T5711] usb 2-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 1.00
[ 88.047347][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 88.055644][ T5711] usb 2-1: Product: syz
[ 88.061685][ T5711] usb 2-1: Manufacturer: syz
[ 88.100268][ T5851] NFSD: Failed to start, no listeners configured.
[ 88.501557][ T5859] db_root: cannot be changed because it's in use
[ 88.506111][ T5859] se_dev->se_dev_ptr already set for storage object
[ 88.515897][ T5697] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[ 88.548444][ T5711] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:046D:C299.0001/input/input5
[ 88.617234][ T5863] db_root: cannot be changed because it's in use
[ 88.659188][ T5711] logitech 0003:046D:C299.0001: input,hidraw0: USB HID v1.10 Joystick [syz syz] on usb-dummy_hcd.1-1/input0
[ 88.676694][ T5711] logitech 0003:046D:C299.0001: Force feedback support for Logitech Gaming Wheels
[ 88.831946][ T5870] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[ 88.843283][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 89.007808][ T25] usb 3-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice= 0.00
[ 89.019704][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 89.037697][ T25] r8152-cfgselector 3-1: Unknown version 0x0000
[ 89.363023][ T2236] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 89.385762][ T25] r8152-cfgselector 3-1: reset high-speed USB device number 4 using dummy_hcd
[ 89.512952][ T2236] usb 4-1: Using ep0 maxpacket: 8
[ 89.513720][ T2236] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[ 89.515050][ T2236] usb 4-1: config 0 has an invalid interface number: 143 but max is 0
[ 89.515073][ T2236] usb 4-1: config 0 has no interface number 0
[ 89.515134][ T2236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 89.519472][ T2236] usb 4-1: config 0 descriptor??
[ 89.633394][ T2236] viperboard 4-1:0.143: version 0.00 found at bus 004 address 003
[ 89.655235][ T2236] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[ 89.655308][ T2236] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[ 89.685607][ T5697] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[ 89.698605][ T5697] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 89.698656][ T5697] usb 1-1: can't read configurations, error -71
[ 89.735624][ T2236] usb 4-1: USB disconnect, device number 3
[ 89.821214][ T10] usb 2-1: USB disconnect, device number 3
[ 90.584473][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 90.671654][ T5888] vidtv vidtv.0: Successfully removed vidtv
[ 90.726472][ T25] r8152 3-1:1.0: USB reset failed, errno=-19
[ 90.735640][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00
[ 90.747313][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 90.800965][ T25] r8152-cfgselector 3-1: USB disconnect, device number 4
[ 90.958923][ T5904] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[ 91.611559][ T5921] gadgetfs: bound to dummy_udc driver
[ 91.733226][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 91.853049][ T2236] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[ 91.853337][ C0] gadgetfs: connected
[ 91.854397][ T2236] gadgetfs: disconnected
[ 91.883419][ T25] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.00
[ 91.896222][ T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 91.908331][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 91.916589][ T25] usb 2-1: Product: syz
[ 91.920859][ T25] usb 2-1: Manufacturer: syz
[ 91.920900][ T25] usb 2-1: SerialNumber: syz
[ 91.926283][ T5919] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 92.013115][ C0] gadgetfs: connected
[ 92.015067][ T2236] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[ 92.015524][ T2236] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 92.015560][ T2236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 92.020188][ C0] gadgetfs: configuration #1
[ 92.368640][ T5927] gadgetfs: suspended from state 4
[ 92.368922][ T5927] gadgetfs: disconnected
[ 92.373448][ T2236] usb 3-1: can't set config #1, error -71
[ 92.377759][ T2236] usb 3-1: USB disconnect, device number 5
[ 92.616876][ T5939] filp_open(./my_dbroot/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed
[ 92.751522][ T25] usb 2-1: USB disconnect, device number 4
[ 93.504538][ T5970] misc userio: Invalid payload size
[ 93.506754][ T5970] misc userio: No port type given on /dev/userio
[ 93.520657][ T1219] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER)
[ 93.535391][ T5943] ceph: No mds server is up or the cluster is laggy
[ 93.692934][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 93.791741][ T5977] zram0: detected capacity change from 0 to 20480
[ 93.853778][ T25] usb 2-1: Using ep0 maxpacket: 16
[ 93.854556][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 93.855512][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 93.855539][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 93.855577][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 93.865751][ T5979] zram: Cannot change disksize for initialized device
[ 93.869838][ T25] usb 2-1: config 0 descriptor??
[ 93.913111][ T1219] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 94.079845][ T1219] usb 3-1: Using ep0 maxpacket: 16
[ 94.082167][ T1219] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 94.083307][ T1219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 94.083334][ T1219] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 94.083372][ T1219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 94.087426][ T1219] usb 3-1: config 0 descriptor??
[ 94.312761][ T25] HID 045e:07da: Invalid code 65791 type 1
[ 94.325031][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input6
[ 94.333996][ T25] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[ 94.474010][ T5711] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 94.503216][ T1219] HID 045e:07da: Invalid code 65791 type 1
[ 94.518579][ T1219] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input7
[ 94.538670][ T1219] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[ 94.643976][ T5711] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0102, bcdDevice= 7.02
[ 94.644681][ T5711] usb 1-1: Dual-Role OTG device on HNP port
[ 94.645007][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 95.005052][ T25] usb 1-1: USB disconnect, device number 6
[ 95.125054][ T2236] usb 2-1: USB disconnect, device number 5
[ 95.229831][
** replaying previous printk message **
[ 95.229831][ T5993] ==================================================================
[ 95.229848][ T5993] BUG: KASAN: slab-out-of-bounds in reg_fixed_voltage_probe+0xb3b/0xe10
[ 95.229881][ T5993] Read of size 4 at addr ffff8880296fed34 by task syz.0.76/5993
[ 95.229897][ T5993]
[ 95.229909][ T5993] CPU: 0 UID: 0 PID: 5993 Comm: syz.0.76 Tainted: G S syzkaller #0 PREEMPT(full)
[ 95.229939][ T5993] Tainted: [S]=CPU_OUT_OF_SPEC
[ 95.229946][ T5993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 95.229958][ T5993] Call Trace:
[ 95.229965][ T5993]
[ 95.229972][ T5993] dump_stack_lvl+0xe8/0x150
[ 95.229997][ T5993] print_address_description+0x55/0x1e0
[ 95.230024][ T5993] ? reg_fixed_voltage_probe+0xb3b/0xe10
[ 95.230048][ T5993] print_report+0x58/0x70
[ 95.230067][ T5993] kasan_report+0x117/0x150
[ 95.230082][ T5993] ? reg_fixed_voltage_probe+0xb3b/0xe10
[ 95.230096][ T5993] reg_fixed_voltage_probe+0xb3b/0xe10
[ 95.230111][ T5993] ? __pfx_reg_fixed_voltage_probe+0x10/0x10
[ 95.230126][ T5993] ? is_acpi_device_node+0x26/0x70
[ 95.230140][ T5993] ? acpi_dev_pm_attach+0xe9/0x240
[ 95.230151][ T5993] ? dev_pm_domain_attach+0xbd/0xf0
[ 95.230164][ T5993] ? __pfx_reg_fixed_voltage_probe+0x10/0x10
[ 95.230183][ T5993] platform_probe+0xf9/0x190
[ 95.230208][ T5993] ? __pfx_platform_probe+0x10/0x10
[ 95.230232][ T5993] really_probe+0x254/0xae0
[ 95.230262][ T5993] __driver_probe_device+0x1e8/0x360
[ 95.230278][ T5993] device_driver_attach+0xe0/0x1d0
[ 95.230293][ T5993] bind_store+0x1d0/0x220
[ 95.230307][ T5993] ? __pfx_sysfs_kf_write+0x10/0x10
[ 95.230322][ T5993] kernfs_fop_write_iter+0x3a4/0x540
[ 95.230336][ T5993] vfs_write+0x612/0xba0
[ 95.230353][ T5993] ? __pfx_vfs_write+0x10/0x10
[ 95.230370][ T5993] ? __fget_files+0x2a/0x420
[ 95.230386][ T5993] ksys_write+0x150/0x270
[ 95.230395][ T5993] ? __pfx_ksys_write+0x10/0x10
[ 95.230407][ T5993] do_syscall_64+0x166/0x520
[ 95.230419][ T5993] ? trace_irq_disable+0x3b/0x140
[ 95.230434][ T5993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.230444][ T5993] ? clear_bhb_loop+0x70/0xc0
[ 95.230456][ T5993] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.230466][ T5993] RIP: 0033:0x7f874199e0d9
[ 95.230487][ T5993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.230496][ T5993] RSP: 002b:00007f8742806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.230509][ T5993] RAX: ffffffffffffffda RBX: 00007f8741c26090 RCX: 00007f874199e0d9
[ 95.230517][ T5993] RDX: 000000000000000b RSI: 0000200000000700 RDI: 0000000000000003
[ 95.230523][ T5993] RBP: 00007f8741a35024 R08: 0000000000000000 R09: 0000000000000000
[ 95.230530][ T5993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.230536][ T5993] R13: 00007f8741c26128 R14: 00007f8741c26090 R15: 00007ffcf634f0e8
[ 95.230554][ T5993]
[ 95.230558][ T5993]
[ 95.230560][ T5993] Allocated by task 1:
[ 95.230566][ T5993] kasan_save_track+0x3e/0x80
[ 95.230577][ T5993] __kasan_kmalloc+0x93/0xb0
[ 95.230587][ T5993] __kmalloc_node_track_caller_noprof+0x4b4/0x720
[ 95.230598][ T5993] kmemdup_noprof+0x2b/0x70
[ 95.230608][ T5993] platform_device_add_data+0x2e/0xa0
[ 95.230621][ T5993] dummy_hcd_init+0x49f/0xd00
[ 95.230632][ T5993] do_one_initcall+0x250/0x870
[ 95.230643][ T5993] do_initcall_level+0x10a/0x1a0
[ 95.230653][ T5993] do_initcalls+0x59/0xa0
[ 95.230662][ T5993] kernel_init_freeable+0x29d/0x3e0
[ 95.230672][ T5993] kernel_init+0x22/0x1d0
[ 95.230680][ T5993] ret_from_fork+0x514/0xb70
[ 95.230692][ T5993] ret_from_fork_asm+0x1a/0x30
[ 95.230704][ T5993]
[ 95.230706][ T5993] The buggy address belongs to the object at ffff8880296fed20
[ 95.230706][ T5993] which belongs to the cache kmalloc-8 of size 8
[ 95.230714][ T5993] The buggy address is located 12 bytes to the right of
[ 95.230714][ T5993] allocated 8-byte region [ffff8880296fed20, ffff8880296fed28)
[ 95.230725][ T5993]
[ 95.230727][ T5993] The buggy address belongs to the physical page:
[ 95.230740][ T5993] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x296fe
[ 95.230750][ T5993] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 95.230762][ T5993] page_type: f5(slab)
[ 95.230775][ T5993] raw: 00fff00000000000 ffff88813ff11500 dead000000000100 dead000000000122
[ 95.230784][ T5993] raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000
[ 95.230789][ T5993] page dumped because: kasan: bad access detected
[ 95.230797][ T5993] page_owner tracks the page as allocated
[ 95.230800][ T5993] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6734167253
[ 95.230817][ T5993] post_alloc_hook+0x1f9/0x250
[ 95.230832][ T5993] get_page_from_freelist+0x2209/0x2280
[ 95.230842][ T5993] __alloc_frozen_pages_noprof+0x217/0x5a0
[ 95.230853][ T5993] allocate_slab+0x7d/0x620
[ 95.230865][ T5993] refill_objects+0x2d5/0x350
[ 95.230878][ T5993] __pcs_replace_empty_main+0x2c8/0x6c0
[ 95.230890][ T5993] __kmalloc_node_track_caller_noprof+0x548/0x720
[ 95.230899][ T5993] kvasprintf+0xeb/0x1a0
[ 95.230908][ T5993] kasprintf+0xe2/0x140
[ 95.230915][ T5993] module_add_driver+0x19c/0x320
[ 95.230924][ T5993] bus_add_driver+0x391/0x670
[ 95.230935][ T5993] driver_register+0x23a/0x320
[ 95.230943][ T5993] do_one_initcall+0x250/0x870
[ 95.230954][ T5993] do_initcall_level+0x10a/0x1a0
[ 95.230963][ T5993] do_initcalls+0x59/0xa0
[ 95.230972][ T5993] kernel_init_freeable+0x29d/0x3e0
[ 95.230982][ T5993] page_owner free stack trace missing
[ 95.230988][ T5993]
[ 95.230990][ T5993] Memory state around the buggy address:
[ 95.230996][ T5993] ffff8880296fec00: 00 fc fc fc 00 fc fc fc 00 fc fc fc 00 fc fc fc
[ 95.231002][ T5993] ffff8880296fec80: 00 fc fc fc 00 fc fc fc 00 fc fc fc 00 fc fc fc
[ 95.231009][ T5993] >ffff8880296fed00: 00 fc fc fc 00 fc fc fc 00 fc fc fc 05 fc fc fc
[ 95.231014][ T5993] ^
[ 95.231019][ T5993] ffff8880296fed80: 00 fc fc fc 00 fc fc fc 00 fc fc fc 00 fc fc fc
[ 95.231025][ T5993] ffff8880296fee00: fa fc fc fc fa fc fc fc 05 fc fc fc 05 fc fc fc
[ 95.231030][ T5993] ==================================================================
[ 95.234056][ T5993] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 95.850235][ T5993] CPU: 0 UID: 0 PID: 5993 Comm: syz.0.76 Tainted: G S syzkaller #0 PREEMPT(full)
[ 95.860907][ T5993] Tainted: [S]=CPU_OUT_OF_SPEC
[ 95.865654][ T5993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 95.875699][ T5993] Call Trace:
[ 95.878974][ T5993]
[ 95.881911][ T5993] vpanic+0x56d/0xa60
[ 95.885918][ T5993] ? __pfx_vpanic+0x10/0x10
[ 95.890439][ T5993] panic+0xc5/0xd0
[ 95.894168][ T5993] ? __pfx_panic+0x10/0x10
[ 95.898585][ T5993] ? preempt_schedule_thunk+0x16/0x40
[ 95.903958][ T5993] ? reg_fixed_voltage_probe+0xb3b/0xe10
[ 95.909590][ T5993] ? preempt_schedule_thunk+0x16/0x40
[ 95.914963][ T5993] ? reg_fixed_voltage_probe+0xb3b/0xe10
[ 95.920592][ T5993] check_panic_on_warn+0x89/0xb0
[ 95.925539][ T5993] ? reg_fixed_voltage_probe+0xb3b/0xe10
[ 95.931195][ T5993] end_report+0x73/0x170
[ 95.935445][ T5993] ? reg_fixed_voltage_probe+0xb3b/0xe10
[ 95.941081][ T5993] kasan_report+0x128/0x150
[ 95.945586][ T5993] ? reg_fixed_voltage_probe+0xb3b/0xe10
[ 95.951223][ T5993] reg_fixed_voltage_probe+0xb3b/0xe10
[ 95.956688][ T5993] ? __pfx_reg_fixed_voltage_probe+0x10/0x10
[ 95.962664][ T5993] ? is_acpi_device_node+0x26/0x70
[ 95.967776][ T5993] ? acpi_dev_pm_attach+0xe9/0x240
[ 95.972890][ T5993] ? dev_pm_domain_attach+0xbd/0xf0
[ 95.978091][ T5993] ? __pfx_reg_fixed_voltage_probe+0x10/0x10
[ 95.984070][ T5993] platform_probe+0xf9/0x190
[ 95.988659][ T5993] ? __pfx_platform_probe+0x10/0x10
[ 95.993852][ T5993] really_probe+0x254/0xae0
[ 95.998362][ T5993] __driver_probe_device+0x1e8/0x360
[ 96.003653][ T5993] device_driver_attach+0xe0/0x1d0
[ 96.008766][ T5993] bind_store+0x1d0/0x220
[ 96.013097][ T5993] ? __pfx_sysfs_kf_write+0x10/0x10
[ 96.018293][ T5993] kernfs_fop_write_iter+0x3a4/0x540
[ 96.023585][ T5993] vfs_write+0x612/0xba0
[ 96.027845][ T5993] ? __pfx_vfs_write+0x10/0x10
[ 96.032618][ T5993] ? __fget_files+0x2a/0x420
[ 96.037215][ T5993] ksys_write+0x150/0x270
[ 96.041539][ T5993] ? __pfx_ksys_write+0x10/0x10
[ 96.046389][ T5993] do_syscall_64+0x166/0x520
[ 96.050976][ T5993] ? trace_irq_disable+0x3b/0x140
[ 96.056001][ T5993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.062066][ T5993] ? clear_bhb_loop+0x70/0xc0
[ 96.066735][ T5993] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.072621][ T5993] RIP: 0033:0x7f874199e0d9
[ 96.077033][ T5993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 96.096643][ T5993] RSP: 002b:00007f8742806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.105083][ T5993] RAX: ffffffffffffffda RBX: 00007f8741c26090 RCX: 00007f874199e0d9
[ 96.113052][ T5993] RDX: 000000000000000b RSI: 0000200000000700 RDI: 0000000000000003
[ 96.121022][ T5993] RBP: 00007f8741a35024 R08: 0000000000000000 R09: 0000000000000000
[ 96.128992][ T5993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.136962][ T5993] R13: 00007f8741c26128 R14: 00007f8741c26090 R15: 00007ffcf634f0e8
[ 96.144933][ T5993]
[ 96.148194][ T5993] Kernel Offset: disabled
[ 96.152503][ T5993] Rebooting in 86400 seconds..