last executing test programs: 7.150467843s ago: executing program 3 (id=4): syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040490d007001000102030109022700010100c03209040000030806500007058102000200070502020002000705830302000a"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x4, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x5, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x6, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x7, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x8, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x9, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0x1, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0x3, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0x4, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0x6, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0x7, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0x8, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0x9, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000600), 0x0) 6.679559355s ago: executing program 1 (id=2): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040109710780000000000010902270001010080320904000003ff000000070581020002000705020200020007058303400001"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.512977195s ago: executing program 0 (id=1): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='0\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='auto\x00', 0x5) close(r2) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)='on\x00', 0x3) close(r3) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000700)='\x00'/16) (async) read$char_usb(r4, &(0x7f0000000600)=""/64, 0x40) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='0\x00', 0x2) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/1-1/power/control\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='auto\x00', 0x5) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/1-1/power/control\x00', 0x1, 0x0) write(r7, &(0x7f0000000580)='on\x00', 0x3) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/2-1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r8, &(0x7f0000000380)='0\x00', 0x2) close(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/2-1/power/control\x00', 0x1, 0x0) write(r9, &(0x7f0000000480)='auto\x00', 0x5) close(r9) r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/2-1/power/control\x00', 0x1, 0x0) write(r10, &(0x7f0000000580)='on\x00', 0x3) close(r10) 6.206988511s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/firmware/timeout\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) 6.07030774s ago: executing program 2 (id=5): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_RESET(r0, 0x5514) 4.595172022s ago: executing program 3 (id=6): r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109715770001010203010902350001010080320904000005ff0000000705810240000007050102400000070582024000000705020240000007058303400001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_in(r1, 0x708b, &(0x7f0000000200)) write$char_usb(r1, &(0x7f0000000300)="001122334455", 0x6) read$char_usb(r1, &(0x7f0000000400), 0x6) ioctl$int_in(r1, 0x40047091, &(0x7f0000000500)) ioctl$int_in(r1, 0x708c, &(0x7f0000000600)) 3.125374516s ago: executing program 0 (id=7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x100000, 0x1000, &(0x7f0000c00000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x4b564d04, 0x0, 0x100001}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.919648091s ago: executing program 0 (id=8): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x1, 0x1b0, [0x7f0000000100, 0x7f0000000190, 0x7f0000000220], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffe, 0x1, [{0x1, 0x0, 0x0, '\x00', '\x00', '\x00', '\x00', @empty, [], @empty, [], 0x90, 0x90, 0xb0, [@m802_3={{'802_3\x00', 0x0, 0x4}}], [], @common=@ERROR={'ERROR\x00', 0x20}}]}, {0x0, '\x00', 0x0, 0xfffffffe}, {0x0, '\x00', 0x0, 0xfffffffe}]}, 0x1ee) 2.838293s ago: executing program 2 (id=9): mount(&(0x7f0000000000)=@filename='nodev\x00', &(0x7f0000000100)='proc/self/root/sys/kernel/debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1234, 0x5678, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200, 0xa}}]}}]}}]}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='proc/self/root/sys/kernel/debug/usb/devices\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/2000, 0x7d0) 2.748200799s ago: executing program 0 (id=10): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={&(0x7f0000000000), 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000314050000000000000000000900020073797a30000000000800410072786500070033006c6f0000"], 0x2c}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) 1.742083719s ago: executing program 1 (id=11): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[@enable_nested={0x12c, 0x18}], 0x18}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000200)=@vmx={0x3, 0x0, 0x2080, {0x1000, 0x2000}, {"d07ee511000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000021000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000007261000400000000000000000000000000000000000000fb6d03000000000000000000000000fb910000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001800000000001000"}}) 1.537649623s ago: executing program 1 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/devices/regulatory.0/driver_override\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/devices/microcode/driver_override\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/platform/devices/i8042/driver_override\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/platform/devices/rtc_cmos/driver_override\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/platform/devices/kgdboc/driver_override\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/platform/devices/acpi-fan/driver_override\x00', 0x1, 0x0) 1.404092293s ago: executing program 1 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000800000/0x10000)=nil, 0x10000, 0x3, 0x11, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f000080c120)='\n03U', 0x4) write(r2, &(0x7f0000000240)='dwc3-pci\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/dwc3-pci/bind\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='0000:00:03.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='0000:00:02.0\x00', 0xd) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000810000/0x10000)=nil, 0x10000, 0x3, 0x11, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r6, &(0x7f000081c120)='\n03U', 0x4) write(r6, &(0x7f0000000440)='dwc3-pci\x00', 0x9) write(r3, &(0x7f0000000480)='0000:00:02.0\x00', 0xd) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/platform/devices/dwc3.0.auto/power/control\x00', 0x1, 0x0) write(r7, &(0x7f0000000580)='auto\x00', 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/bus/platform/devices/dwc3.1.auto/power/control\x00', 0x1, 0x0) write(r8, &(0x7f0000000600)='auto\x00', 0x5) r9 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pci/devices/0000:00:03.0/power/control\x00', 0x1, 0x0) write(r9, &(0x7f0000000680)='auto\x00', 0x5) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) write(r7, &(0x7f0000000740)='on\x00', 0x3) write(r8, &(0x7f0000000780)='on\x00', 0x3) write(r9, &(0x7f00000007c0)='on\x00', 0x3) 1.403936028s ago: executing program 2 (id=14): r0 = syz_usb_connect(0x0, 0x31, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000040501d6f600000000000010902200001010080fa0904000002ff0000000705810240000007050202400000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) syz_usb_ep_write(r0, 0x81, 0x20, &(0x7f0000000400)='\x00'/32) 512.060525ms ago: executing program 3 (id=15): syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040490d007001000102030109022700010100c03209040000030806500007058102000200070502020002000705830302000a"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x4, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x5, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x6, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x7, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x8, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x9, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0x1, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0x3, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0x4, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0x6, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0x7, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0x8, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0x9, 0x0) 7.116205ms ago: executing program 3 (id=16): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='0\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='auto\x00', 0x5) close(r2) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)='on\x00', 0x3) close(r3) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000700)='\x00'/16) (async) read$char_usb(r4, &(0x7f0000000600)=""/64, 0x40) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='0\x00', 0x2) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/1-1/power/control\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='auto\x00', 0x5) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/1-1/power/control\x00', 0x1, 0x0) write(r7, &(0x7f0000000580)='on\x00', 0x3) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/2-1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r8, &(0x7f0000000380)='0\x00', 0x2) close(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/2-1/power/control\x00', 0x1, 0x0) write(r9, &(0x7f0000000480)='auto\x00', 0x5) close(r9) r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/2-1/power/control\x00', 0x1, 0x0) write(r10, &(0x7f0000000580)='on\x00', 0x3) close(r10) 0s ago: executing program 0 (id=24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000001000)="f4", 0x1}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000040)={0x0, 0x10000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. [ 74.978449][ T5604] cgroup: Unknown subsys name 'net' [ 75.088141][ T5604] cgroup: Unknown subsys name 'cpuset' [ 75.096754][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.724316][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.035185][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.035834][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.054281][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.054984][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.055332][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.064488][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.064744][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.065170][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.066622][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.070168][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.070658][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.071564][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.072602][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.073723][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.074516][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.074928][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.082958][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.084339][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.145400][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.160932][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.725081][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.725276][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.726214][ T5615] bridge_slave_0: entered allmulticast mode [ 80.728225][ T5615] bridge_slave_0: entered promiscuous mode [ 80.772825][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.772966][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.773092][ T5615] bridge_slave_1: entered allmulticast mode [ 80.775667][ T5615] bridge_slave_1: entered promiscuous mode [ 80.810717][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.845316][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.869284][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.869483][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.869891][ T5613] bridge_slave_0: entered allmulticast mode [ 80.872168][ T5613] bridge_slave_0: entered promiscuous mode [ 80.876010][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.876115][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.876246][ T5613] bridge_slave_1: entered allmulticast mode [ 80.878437][ T5613] bridge_slave_1: entered promiscuous mode [ 80.964323][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.981485][ T5615] team0: Port device team_slave_0 added [ 80.987640][ T5615] team0: Port device team_slave_1 added [ 80.988180][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.988282][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.988415][ T5614] bridge_slave_0: entered allmulticast mode [ 80.990727][ T5614] bridge_slave_0: entered promiscuous mode [ 80.997175][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.016808][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.016918][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.017060][ T5616] bridge_slave_0: entered allmulticast mode [ 81.019329][ T5616] bridge_slave_0: entered promiscuous mode [ 81.053552][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.053703][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.053830][ T5614] bridge_slave_1: entered allmulticast mode [ 81.062080][ T5614] bridge_slave_1: entered promiscuous mode [ 81.081718][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.081855][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.081974][ T5616] bridge_slave_1: entered allmulticast mode [ 81.085758][ T5616] bridge_slave_1: entered promiscuous mode [ 81.121093][ T5613] team0: Port device team_slave_0 added [ 81.145518][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.145582][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.145626][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.151776][ T5613] team0: Port device team_slave_1 added [ 81.178379][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.180142][ T54] Bluetooth: hci2: command tx timeout [ 81.180152][ T5617] Bluetooth: hci1: command tx timeout [ 81.180373][ T54] Bluetooth: hci0: command tx timeout [ 81.181829][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.181843][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.181866][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.236774][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.236793][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.236815][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.240664][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.258055][ T5628] Bluetooth: hci3: command tx timeout [ 81.268758][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.270729][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.270746][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.270786][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.396666][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.444319][ T5614] team0: Port device team_slave_0 added [ 81.464247][ T5616] team0: Port device team_slave_0 added [ 81.472542][ T5615] hsr_slave_0: entered promiscuous mode [ 81.475598][ T5615] hsr_slave_1: entered promiscuous mode [ 81.482212][ T5614] team0: Port device team_slave_1 added [ 81.486444][ T5616] team0: Port device team_slave_1 added [ 81.587701][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.587793][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.587817][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.597699][ T5613] hsr_slave_0: entered promiscuous mode [ 81.599357][ T5613] hsr_slave_1: entered promiscuous mode [ 81.600070][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 81.600143][ T5613] Cannot create hsr debugfs directory [ 81.601016][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.601029][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.601050][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.603232][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.603244][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.603265][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.628625][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.628644][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.628666][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.796402][ T5616] hsr_slave_0: entered promiscuous mode [ 81.803973][ T5616] hsr_slave_1: entered promiscuous mode [ 81.805205][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 81.805226][ T5616] Cannot create hsr debugfs directory [ 81.852570][ T5614] hsr_slave_0: entered promiscuous mode [ 81.853800][ T5614] hsr_slave_1: entered promiscuous mode [ 81.855200][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 81.855223][ T5614] Cannot create hsr debugfs directory [ 82.227345][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.243693][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.246719][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.255719][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.269364][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.279058][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.291756][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.306863][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.412772][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.427331][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.441772][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.458022][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.469044][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.480893][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.489887][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.502587][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.654790][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.670422][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.678914][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.690627][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.707995][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.718611][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.719545][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.729036][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.831674][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.869564][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.879595][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.897092][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.907195][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.913640][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.919209][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.926659][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.937554][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.948175][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.959406][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.959711][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.994256][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.994948][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.042877][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.092989][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.122418][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.130322][ T4677] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.130442][ T4677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.152778][ T4677] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.153475][ T4677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.226097][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.255172][ T5628] Bluetooth: hci0: command tx timeout [ 83.255272][ T5628] Bluetooth: hci1: command tx timeout [ 83.255754][ T5628] Bluetooth: hci2: command tx timeout [ 83.273245][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.273373][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.323894][ T4677] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.324024][ T4677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.332567][ T5613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.340550][ T54] Bluetooth: hci3: command tx timeout [ 83.440365][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.532113][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.552955][ T4693] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.553094][ T4693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.571164][ T4693] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.571286][ T4693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.198447][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.382958][ T5615] veth0_vlan: entered promiscuous mode [ 84.416218][ T5615] veth1_vlan: entered promiscuous mode [ 84.466396][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.517543][ T5615] veth0_macvtap: entered promiscuous mode [ 84.547160][ T5615] veth1_macvtap: entered promiscuous mode [ 84.617587][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.656830][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.679647][ T5613] veth0_vlan: entered promiscuous mode [ 84.724310][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.753726][ T5613] veth1_vlan: entered promiscuous mode [ 84.855840][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.878775][ T1029] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.915141][ T1003] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.915218][ T1003] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.915255][ T1003] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.921613][ T5616] veth0_vlan: entered promiscuous mode [ 84.935205][ T5616] veth1_vlan: entered promiscuous mode [ 84.968304][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.968355][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.997566][ T5616] veth0_macvtap: entered promiscuous mode [ 85.029268][ T5613] veth0_macvtap: entered promiscuous mode [ 85.035504][ T5616] veth1_macvtap: entered promiscuous mode [ 85.069626][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.069673][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.081378][ T5613] veth1_macvtap: entered promiscuous mode [ 85.128245][ T5614] veth0_vlan: entered promiscuous mode [ 85.137463][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.169706][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.179360][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.183757][ T5614] veth1_vlan: entered promiscuous mode [ 85.201774][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.216189][ T5615] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.248543][ T1003] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.308473][ T1003] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.308950][ T1003] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.309150][ T1003] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.309340][ T1003] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.338244][ T54] Bluetooth: hci0: command tx timeout [ 85.344795][ T54] Bluetooth: hci2: command tx timeout [ 85.344829][ T54] Bluetooth: hci1: command tx timeout [ 85.425383][ T5628] Bluetooth: hci3: command tx timeout [ 85.485951][ T5614] veth0_macvtap: entered promiscuous mode [ 85.520679][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.528876][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.548274][ T5614] veth1_macvtap: entered promiscuous mode [ 85.585527][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.599239][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.626166][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.626205][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.678307][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.688347][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.689762][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.709830][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.764704][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.808914][ T1029] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.809842][ T1029] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.809885][ T1029] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.809919][ T1029] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.809952][ T1029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.809985][ T1029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.810017][ T1029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.956793][ T10] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 85.985514][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.985563][ T10] usb 4-1: Product: syz [ 85.985603][ T10] usb 4-1: Manufacturer: syz [ 85.985623][ T10] usb 4-1: SerialNumber: syz [ 86.017952][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.017992][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.076023][ T10] ums-onetouch 4-1:1.0: USB Mass Storage device detected [ 86.147096][ T10] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 86.162487][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.162985][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.184386][ T10] scsi host1: usb-storage 4-1:1.0 [ 86.218826][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.366165][ T25] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 0.00 [ 86.367535][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.395635][ T5768] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.411355][ T25] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 86.549319][ T5768] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 86.553410][ T5768] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.553436][ T5768] usb 1-1: Product: syz [ 86.553449][ T5768] usb 1-1: Manufacturer: syz [ 86.553489][ T5768] usb 1-1: SerialNumber: syz [ 86.694763][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.846174][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 86.855462][ T10] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 86.867262][ T10] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 86.876657][ T10] usb 3-1: config 0 has no interface number 0 [ 86.876718][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.881533][ T10] usb 3-1: config 0 descriptor?? [ 87.006982][ T10] viperboard 3-1:0.143: version 0.00 found at bus 003 address 002 [ 87.074068][ T10] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 87.074164][ T10] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 87.275665][ T5779] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 87.327595][ C0] input input5: can't resubmit intr, dummy_hcd.3-1/input0, retval -19 [ 87.336078][ T10] usb 4-1: USB disconnect, device number 2 [ 87.417344][ T976] cfg80211: failed to load regulatory.db [ 87.425575][ T5628] Bluetooth: hci1: command tx timeout [ 87.425658][ T5628] Bluetooth: hci2: command tx timeout [ 87.425682][ T5628] Bluetooth: hci0: command tx timeout [ 87.506927][ T54] Bluetooth: hci3: command tx timeout [ 88.394617][ T5774] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 88.709764][ T25] usb 2-1: Moschip 7840/7820 USB Serial Driver converter now attached to ttyUSB0 [ 89.094771][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.245873][ T10] usb 4-1: New USB device found, idVendor=9710, idProduct=7715, bcdDevice= 1.00 [ 89.247359][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 89.247387][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 89.247408][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 89.247429][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 89.250013][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.250034][ T10] usb 4-1: Product: syz [ 89.250047][ T10] usb 4-1: Manufacturer: syz [ 89.250061][ T10] usb 4-1: SerialNumber: syz [ 89.267986][ T5789] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.268141][ T5789] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.270131][ T5789] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.270285][ T5789] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.287972][ T10] mos7720 4-1:1.0: Moschip 2 port adapter converter detected [ 89.395514][ T5793] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.518741][ T2266] usb 1-1: USB disconnect, device number 2 [ 89.585525][ T5765] usb 3-1: USB disconnect, device number 2 [ 89.771614][ T5801] lo speed is unknown, defaulting to 1000 [ 89.782865][ T5801] lo speed is unknown, defaulting to 1000 [ 89.788156][ T5801] lo speed is unknown, defaulting to 1000 [ 89.990427][ T5801] infiniband syz0: set active [ 89.991139][ T5715] lo speed is unknown, defaulting to 1000 [ 89.991265][ T5801] infiniband syz0: added lo [ 90.010391][ T5801] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 90.010443][ T5801] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 90.010485][ T5801] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 90.048692][ T5801] RDS/IB: syz0: added [ 90.049029][ T5801] smc: adding ib device syz0 with port count 1 [ 90.049111][ T5801] smc: ib device syz0 port 1 has no pnetid [ 90.050108][ T5715] lo speed is unknown, defaulting to 1000 [ 90.056360][ T5801] lo speed is unknown, defaulting to 1000 [ 90.090036][ T5765] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.245483][ T5765] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.01 [ 90.256943][ T5765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.307979][ T10] usb 4-1: mos7720: usb_control_msg() failed: -32 [ 90.324157][ T10] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 90.326402][ T5801] lo speed is unknown, defaulting to 1000 [ 90.399665][ T10] usb 4-1: USB disconnect, device number 3 [ 90.429414][ T10] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 90.437994][ T10] mos7720 4-1:1.0: device disconnected [ 90.489961][ T5765] usb 3-1: USB disconnect, device number 3 [ 90.604567][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.671417][ T5801] lo speed is unknown, defaulting to 1000 [ 90.699791][ T5765] usb 2-1: USB disconnect, device number 2 [ 90.756992][ T5765] mos7840 ttyUSB0: Moschip 7840/7820 USB Serial Driver converter now disconnected from ttyUSB0 [ 90.772062][ T5765] mos7840 2-1:1.0: device disconnected [ 91.270036][ T1971] device offline error, dev sda, sector 741694 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 91.270101][ T1971] EXT4-fs warning (device sda1): ext4_end_bio:364: I/O error 16 writing to inode 2019 starting block 92711) [ 91.270832][ T52] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2019, error -5) [ 91.270960][ T52] Buffer I/O error on device sda1, logical block 92673 [ 91.271539][ T1971] device offline error, dev sda, sector 745782 op 0x1:(WRITE) flags 0x4000 phys_seg 49 prio class 2 [ 91.271619][ T1971] device offline error, dev sda, sector 746288 op 0x1:(WRITE) flags 0x4000 phys_seg 62 prio class 2 [ 91.271716][ T1971] device offline error, dev sda, sector 746800 op 0x1:(WRITE) flags 0x4000 phys_seg 63 prio class 2 [ 91.271781][ T1971] device offline error, dev sda, sector 747312 op 0x1:(WRITE) flags 0x4000 phys_seg 33 prio class 2 [ 91.271872][ T1971] device offline error, dev sda, sector 747824 op 0x1:(WRITE) flags 0x4000 phys_seg 13 prio class 2 [ 91.271936][ T1971] device offline error, dev sda, sector 748336 op 0x1:(WRITE) flags 0x4000 phys_seg 17 prio class 2 [ 91.272025][ T1971] device offline error, dev sda, sector 748848 op 0x1:(WRITE) flags 0x4000 phys_seg 5 prio class 2 [ 91.272504][ T4693] device offline error, dev sda, sector 749360 op 0x1:(WRITE) flags 0x4000 phys_seg 5 prio class 2 [ 91.272706][ T4693] device offline error, dev sda, sector 749872 op 0x1:(WRITE) flags 0x4000 phys_seg 5 prio class 2 [ 91.283831][ T4693] EXT4-fs warning (device sda1): ext4_end_bio:364: I/O error 16 writing to inode 2021 starting block 93798) [ 91.318347][ T1971] EXT4-fs warning (device sda1): ext4_end_bio:364: I/O error 16 writing to inode 2021 starting block 94289) [ 91.318393][ T1971] EXT4-fs warning (device sda1): ext4_end_bio:364: I/O error 16 writing to inode 2021 starting block 94316) [ 91.318475][ T1971] EXT4-fs warning (device sda1): ext4_end_bio:364: I/O error 16 writing to inode 2022 starting block 96294) [ 91.318686][ T1971] EXT4-fs warning (device sda1): ext4_end_bio:364: I/O error 16 writing to inode 2022 starting block 96298) [ 91.318799][ T1971] EXT4-fs warning (device sda1): ext4_end_bio:364: I/O error 16 writing to inode 2022 starting block 96380) [ 91.318827][ T1971] EXT4-fs warning (device sda1): ext4_end_bio:364: I/O error 16 writing to inode 2022 starting block 96410) [ 91.318854][ T1971] EXT4-fs warning (device sda1): ext4_end_bio:364: I/O error 16 writing to inode 2022 starting block 96415) [ 91.320798][ T4693] EXT4-fs warning (device sda1): ext4_end_bio:364: I/O error 16 writing to inode 2022 starting block 96438) [ 91.328885][ T1003] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2021, error -5) [ 91.328944][ T1003] Buffer I/O error on device sda1, logical block 94278 [ 91.328970][ T1003] Buffer I/O error on device sda1, logical block 94279 [ 91.328987][ T1003] Buffer I/O error on device sda1, logical block 94280 [ 91.329003][ T1003] Buffer I/O error on device sda1, logical block 94281 [ 91.329019][ T1003] Buffer I/O error on device sda1, logical block 94282 [ 91.329035][ T1003] Buffer I/O error on device sda1, logical block 94283 [ 91.329163][ T1003] Buffer I/O error on device sda1, logical block 94284 [ 91.329180][ T1003] Buffer I/O error on device sda1, logical block 94285 [ 91.329197][ T1003] Buffer I/O error on device sda1, logical block 94286 [ 91.370794][ T1003] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 91.370934][ T1003] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 91.371184][ T1003] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 91.373865][ T1003] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 91.374017][ T1003] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 91.376170][ T1003] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 91.387885][ T1003] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 91.388170][ T1003] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 91.419328][ T5715] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.471967][ T4947] Aborting journal on device sda1-8. [ 91.472793][ T1971] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 91.473660][ T4947] JBD2: I/O error when updating journal superblock for sda1-8. [ 91.480260][ T5813] EXT4-fs error (device sda1): ext4_journal_check_start:94: comm syz.1.13: Detected aborted journal [ 91.484362][ T5801] lo speed is unknown, defaulting to 1000 [ 91.490807][ T5814] Buffer I/O error on dev sda1, logical block 0, lost async page write [ 91.493943][ T1971] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 91.497779][ T5814] Buffer I/O error on dev sda1, logical block 129, lost async page write [ 91.497898][ T5814] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 91.497922][ T5814] Buffer I/O error on dev sda1, logical block 138, lost async page write [ 91.497950][ T5814] Buffer I/O error on dev sda1, logical block 145, lost async page write [ 91.497978][ T5814] Buffer I/O error on dev sda1, logical block 150, lost async page write [ 91.498004][ T5814] Buffer I/O error on dev sda1, logical block 159, lost async page write [ 91.498031][ T5814] Buffer I/O error on dev sda1, logical block 224, lost async page write [ 91.561560][ T5715] usb 3-1: device descriptor read/64, error -71 [ 91.797152][ T5715] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 91.910279][ T5814] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 91.944521][ T5715] usb 3-1: device descriptor read/64, error -71 [ 92.058316][ T5715] usb usb3-port1: attempt power cycle [ 92.423173][ T5715] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 92.448041][ T5715] usb 3-1: device descriptor read/8, error -71 [ 92.486836][ T5765] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 92.498764][ T5765] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 92.507388][ T5765] CPU: 0 UID: 0 PID: 5765 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 92.516801][ T5765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.527074][ T5765] Workqueue: sync_wq local_pci_probe_callback [ 92.533386][ T5765] RIP: 0010:software_node_register+0x30/0x1f0 [ 92.539881][ T5765] Code: 57 41 56 41 55 41 54 53 50 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 df 0a 8d fb 4c 8d 63 08 4c 89 e0 48 c1 e8 03 48 89 04 24 <42> 80 3c 30 00 74 08 4c 89 e7 e8 11 85 fb fb 49 8b 2c 24 48 85 ed [ 92.560142][ T5765] RSP: 0018:ffffc90004bef8c0 EFLAGS: 00010202 [ 92.566352][ T5765] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff88801ebdddc0 [ 92.574449][ T5765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.582545][ T5765] RBP: ffffc90004befa90 R08: 0000000000000200 R09: ffffffff8cc6cac0 [ 92.590550][ T5765] R10: 000000000000c03f R11: 000000000000c000 R12: 0000000000000008 [ 92.598643][ T5765] R13: ffff88802c65e010 R14: dffffc0000000000 R15: 0000000000000000 [ 92.606718][ T5765] FS: 0000000000000000(0000) GS:ffff8881248ab000(0000) knlGS:0000000000000000 [ 92.615758][ T5765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.622365][ T5765] CR2: 00007f94d27556c8 CR3: 0000000026606000 CR4: 00000000003526f0 [ 92.630464][ T5765] Call Trace: [ 92.633763][ T5765] [ 92.636699][ T5765] device_add_software_node+0x1a0/0x300 [ 92.642265][ T5765] dwc3_pci_probe+0x542/0xad0 [ 92.646979][ T5765] ? __pfx_dwc3_pci_probe+0x10/0x10 [ 92.652284][ T5765] ? do_raw_spin_lock+0x12b/0x2f0 [ 92.657431][ T5765] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 92.663348][ T5765] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 92.669346][ T5765] ? __pfx_dwc3_pci_probe+0x10/0x10 [ 92.674867][ T5765] local_pci_probe_callback+0x120/0x1e0 [ 92.680426][ T5765] ? process_scheduled_works+0x97a/0x1630 [ 92.684755][ T5715] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 92.693865][ T5765] process_scheduled_works+0xc3d/0x1630 [ 92.699704][ T5765] ? __pfx_process_scheduled_works+0x10/0x10 [ 92.705728][ T5765] ? assign_work+0x3cf/0x5d0 [ 92.710361][ T5765] worker_thread+0xa47/0xfb0 [ 92.714980][ T5765] ? __kthread_parkme+0x71/0x1f0 [ 92.720060][ T5765] kthread+0x38b/0x480 [ 92.724160][ T5765] ? __pfx_worker_thread+0x10/0x10 [ 92.729500][ T5765] ? __pfx_kthread+0x10/0x10 SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 92.734227][ T5765] ret_from_fork+0x514/0xb70 [ 92.738865][ T5765] ? __pfx_ret_from_fork+0x10/0x10 [ 92.744263][ T5765] ? __switch_to+0xc89/0x1420 [ 92.748965][ T5765] ? __pfx_kthread+0x10/0x10 [ 92.753723][ T5765] ret_from_fork_asm+0x1a/0x30 [ 92.758526][ T5765] [ 92.761572][ T5765] Modules linked in: Aug 17 22:10:29 [ 92.766479][ T5765] ---[ end trace 0000000000000000 ]--- syzkaller kern.a[ 92.772986][ T5715] usb 3-1: device descriptor read/8, error -71 lert kernel: [ 92.498764][ T5765] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 92.792196][ T1029] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.879477][ T5715] usb usb3-port1: unable to enumerate USB device [ 92.890123][ T1029] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.9 ** replaying previous printk message ** [ 92.921544][ T5765] RIP: 0010:software_node_register+0x30/0x1f0 [ 92.921617][ T5765] Code: 57 41 56 41 55 41 54 53 50 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 df 0a 8d fb 4c 8d 63 08 4c 89 e0 48 c1 e8 03 48 89 04 24 <42> 80 3c 30 00 74 08 4c 89 e7 e8 11 85 fb fb 49 8b 2c 24 48 85 ed [ 92.921635][ T5765] RSP: 0018:ffffc90004bef8c0 EFLAGS: 00010202 [ 92.921653][ T5765] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff88801ebdddc0 [ 92.921665][ T5765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.921675][ T5765] RBP: ffffc90004befa90 R08: 0000000000000200 R09: ffffffff8cc6cac0 [ 92.921688][ T5765] R10: 000000000000c03f R11: 000000000000c000 R12: 0000000000000008 [ 92.921700][ T5765] R13: ffff88802c65e010 R14: dffffc0000000000 R15: 0000000000000000 [ 92.921712][ T5765] FS: 0000000000000000(0000) GS:ffff8881248ab000(0000) knlGS:0000000000000000 [ 92.921727][ T5765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.921740][ T5765] CR2: 00007f9710170bd0 CR3: 0000000074ef2000 CR4: 00000000003526f0 [ 92.921760][ T5765] Kernel panic - not syncing: Fatal exception [ 93.028647][ T5765] Kernel Offset: disabled [ 93.033103][ T5765] Rebooting in 86400 seconds..