last executing test programs: 36.454478067s ago: executing program 3 (id=313): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x14) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f00000002c0)="28d3") 33.407180152s ago: executing program 3 (id=334): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) close(0x3) 32.489639314s ago: executing program 3 (id=340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2c02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x800) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f20e06635400000000f22e00f237e3e660f124bfab853058ec80f01ca0f20d86635080000000f22d80f01cad838ddeff20f58f3", 0xfffffffffffffe3c}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32.39026996s ago: executing program 3 (id=343): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x99, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 32.330317015s ago: executing program 3 (id=345): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x4, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x6, 0xe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x8, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000a00)=ANY=[@ANYBLOB="20312800000028054fb5e1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 30.400630106s ago: executing program 3 (id=351): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, 0x0) 15.421525376s ago: executing program 32 (id=351): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, 0x0) 8.080879733s ago: executing program 2 (id=447): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) read$FUSE(0xffffffffffffffff, &(0x7f0000002680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x10000000000c, 0xa, 0x1, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53049c4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e746572000400028014"], 0xe4}}, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x7, 0xfffffffe, 0xe3, 0x3ff, 0x2}}]}}}]}, 0x78}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x3ac, 0x0, 0x2cc, 0xe0, 0x2cc, 0x2cc, 0x2cc, 0x4, 0x0, {[{{@arp={@multicast1, @empty, 0x0, 0xffffff00, 0xc, 0x0, {@mac=@local, {[0xff, 0x80, 0x0, 0x1fe, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xdfe, 0x2, 0x7, 0xe, 0xfa, 0x8a5c, 'batadv0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x12}, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x20, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@arp={@empty, @multicast1, 0xff, 0x0, 0x4, 0x2, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0x101]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x5, 0x5, 0x2, 0x7, 0xa7c, 'wlan0\x00', 'bond_slave_0\x00', {}, {0xb50cca1d00497645}, 0x0, 0x202}, 0xbc, 0xe0, 0x10000f0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0xfff}}}, {{@arp={@multicast1, @remote, 0xff, 0xff000000, 0xa, 0x6, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x1, 0x10, 0x3, 0x5, 0x4, 0x9e, 'gre0\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x8}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @rand_addr=0x64010100, 0x2}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3f8) socketpair$unix(0x1, 0x1, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) 7.050174171s ago: executing program 2 (id=454): socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x80000) pipe2(&(0x7f00000003c0), 0x4880) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000104010100000000000000000a00000406000640000400004c87701dbce397f8c175639a963a20a6dc4082e4d507e3fa6ec2307caf6e866d51e367aaeda5a8dc42fdb6e848fa171d939801f1ae961eab6abceff41f8aa7bbb08d5f97e4c9187c46a31f06b45c40cf2badab46d1d3b55c42801cd3c5eac5226577cca997e642c80fbf1a99c16dd7d8da998bedfd96c0a94306538c81ccdda95d2d5207b29c300cca38433f1ad94ffc1b8947d8883ec0fc8ab9caf03dc22ef9303c28ce4fee61c32fab9b1075fbf32204b8"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b01, &(0x7f0000000040)) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c0, 0x36, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x29b, 0x1, 0x0, 0x1, [@generic="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"]}, @typed={0xb, 0x2, 0x0, 0x0, @binary="62095244a4b07e"}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 6.060367876s ago: executing program 2 (id=461): sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000880), 0xf504, r0, 0x0, 0x80000880}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) 5.878826525s ago: executing program 2 (id=464): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d492000100010902"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, 0x0) 5.579525278s ago: executing program 0 (id=468): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000072000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 5.578813144s ago: executing program 4 (id=469): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef64bd465b9780e2bbe408ccc58187feb0e3d43347f98e1a298327e6f9b312ecb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259620618c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a30536455bb774f7f154263178151ea93f5774b56a7142047326f940e95b8489e1c5650f5c61299a295f79c88456521cffdef93e29f10f4a11f0ca134a375a7ecfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d9823659d1945258fc668950e5aacfa06e1a212661b3f57a266c90e64efc8d8f730867202a9ee94e6a1f851337c2c9671d98a19bdc132c153b3ad843bdd308a07ba8f50a20cfd2c8b94e86ea0af0a9e0e9789ffd38f9b86da101e2266700"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6faa, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x3e0}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x93}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x3505}}, 0xe4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, 0x0) r6 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2503, 0x0) r7 = gettid() sendmsg$nl_generic(r6, &(0x7f0000002cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000001a40)={0x122c, 0x3a, 0x400, 0x70bd27, 0x25dfdbfb, {0x1e}, [@typed={0x4, 0x98}, @nested={0x109e, 0x143, 0x0, 0x1, [@typed={0x8, 0x87, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x119, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x3c}, @typed={0x1004, 0xab, 0x0, 0x0, @binary="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"}, @typed={0xc, 0xd9, 0x0, 0x0, @u64}, @typed={0x8, 0x14a, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x17}, @generic="9867dd1bfdc83053843457777dba8374f8d609cfb0a03702feec7cb9d23b657c824cb9e316f489c9f4a695f1bfd473e4345a74701d746e52d44db1ef6ceb458e761eb2883dc141de8e359689eb6d892ce2551ae3a463e32b3e2242639c00687e01885696a9582501c3f3"]}, @nested={0x4e, 0x12e, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x41}}, @typed={0x8, 0x16b, 0x0, 0x0, @fd=r5}, @generic="10eb694661bb5da8e52952e56084e429ff29b9e25bb8e3905eb3eb59793fe2fd853b1b2de479ee78f5cdab9f90e0fde271cde9b58bec", @nested={0x4, 0x46}]}, @generic="bbcaf096e5bf020b68540a61b379cb40c23398cd8e4b0e48b1062d8f5b3e173d05aa48ac6823df13", @generic="70d2ce35c98d53c8623d0c18e4e2832dfcde743dc2ed4bd195b669ec57d9828c9ef7b6680474ed1ab4c39ee10bc5f7bb33f52ff7d7b83c9b4adfd6f21502011d9c3769c40710ec9bd90cf38fd0fc19edbeecc2bdcb72344ca75c59f08e8830cc9c4063698fc1bd6378cd677519f535e97e16c26495", @typed={0x4, 0x89, 0x0, 0x0, @binary}, @nested={0x80, 0x70, 0x0, 0x1, [@generic="19b80586285753299596438448945e736e3aa890f3be4f46f95aad07c2314c9905604739c9f3c62dc3ab51e5d2c26daadef525758ea0d67314dc73aa5a48b9aeb0f992445ae4b0c60aa59b6ffc3da3a49c6617461d9f49f671512782b16890fe6ad437eb121c3b46486eced304124e93a151d1d2", @nested={0x4, 0xdb}, @nested={0x4, 0xf3}]}]}, 0x122c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000140)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 5.441072358s ago: executing program 0 (id=470): socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x80000) pipe2(&(0x7f00000003c0), 0x4880) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000104010100000000000000000a00000406000640000400004c87701dbce397f8c175639a963a20a6dc4082e4d507e3fa6ec2307caf6e866d51e367aaeda5a8dc42fdb6e848fa171d939801f1ae961eab6abceff41f8aa7bbb08d5f97e4c9187c46a31f06b45c40cf2badab46d1d3b55c42801cd3c5eac5226577cca997e642c80fbf1a99c16dd7d8da998bedfd96c0a94306538c81ccdda95d2d5207b29c300cca38433f1ad94ffc1b8947d8883ec0fc8ab9caf03dc22ef9303c28ce4fee61c32fab9b1075fbf32204b8"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b01, &(0x7f0000000040)) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c0, 0x36, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x29b, 0x1, 0x0, 0x1, [@generic="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"]}, @typed={0xb, 0x2, 0x0, 0x0, @binary="62095244a4b07e"}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 4.87409719s ago: executing program 1 (id=473): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r0, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0xfb, 0x7fffffff, 0x1c, @loopback, @rand_addr=' \x01\x00', 0x8, 0x40, 0x6, 0xc}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000005c0)={0x0, @initdev, @multicast2}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08002dbd7000fcdbdf250d000000680001800800030002000000140002007665746830000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="1400020076657468315f746f5f6272696467650008000300000000001400020065737370616e30000000000000000000080e00000100000008000100", @ANYRES32=r5, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x4001) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r6) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r11, r12, r13, r14, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) syz_io_uring_submit(r8, r9, r14, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) io_uring_enter(r7, 0x1, 0x1, 0x5, 0x0, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32], 0x1c}}, 0x200040c4) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2209006, 0x0) 4.648323033s ago: executing program 4 (id=474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000002000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000180)=r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.647429298s ago: executing program 1 (id=475): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @desc3}, &(0x7f0000000600)={0x0, "af90151a5dd598c6a6f07a701cc150dd4f2639568ea6baa1edc5b8c720c51d5c438f08f1377c60f83d32830646581c116f58f00751fea1d8862e29ad015b0985", 0x28}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x61, 0x30, 0x30, 0x30, 0x65, 0x39, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000440)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccdd000000000100000066778899aabbccddeeff", 0x43}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 4.590310144s ago: executing program 0 (id=476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r3 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000140)=""/20, 0x62}], 0x1, 0x81000001, 0x10000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 4.589756993s ago: executing program 1 (id=477): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x10000, 0xcf) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x20, &(0x7f0000000500)=ANY=[@ANYBLOB="c0da5f6f74615f626c6f636b5f686172646c696d69743d6f3b256d32702c6e6f737761702c67727071756f74615f696e6f64655f686172646c696d69743d312d322c697a652c6d61736b3d5e4d41595f415050454e442c6d61736b3d5e4d41595f524541442c00d45ea35dd49668ab338dad35b1ab4e441b1f7b2bbfae307f4abfebdfcaa4012acaaac1fdad188631477fc845130a868466d467514aff73e955"]) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) syz_open_procfs(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x11e05, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000aa004500fde10000000000119078ffffffff0000000007004e22fdcd9078c000000080000000609a49ad"], 0x0) (async) syz_emit_ethernet(0x11e05, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000aa004500fde10000000000119078ffffffff0000000007004e22fdcd9078c000000080000000609a49ad"], 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104801700"/20, @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128009000100626f6e640000000010000280080007000e00000004000880"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104801700"/20, @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128009000100626f6e640000000010000280080007000e00000004000880"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x15) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x15) ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000240)={0x4, 0x1, 0xe, 0x5, 0x11, "3e0000000100"}) (async) ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000240)={0x4, 0x1, 0xe, 0x5, 0x11, "3e0000000100"}) chroot(0x0) (async) chroot(0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x0) 3.589866849s ago: executing program 1 (id=478): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x4002) syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0xe10c, 0x4005, 0x0, 0x40, 0x0, 0x0}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000000)) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) openat$mice(0xffffff9c, &(0x7f0000000040), 0x41) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e1b, 0x80000040, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2e, &(0x7f0000000080)=0x200004, 0x4) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000480)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000540)}}) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffff) socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r9, 0x0, 0x31, &(0x7f0000000040), &(0x7f0000000080)=0x30) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, 0x0, 0x0) connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001300010029bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="073000000904000008001300", @ANYRES32=0x0, @ANYBLOB="6763efe48edd4b47d6442b14d6a1e52bb6ceb40697e06680d7c23ab85e965fd3b9b6d788b0cd4d074b020db1091184e17f311f68d963c757d6948719b9100dff66ed6d19c73ac66dec5bc5dc4fd328ff26bdef73d1aee164d3fe9b83fa538ecc786fc87d60d7377dfbcd9586a44ff032eed345702857d82b01683db0fb7703e65e62e19856e7915e623c5a31f72c07b879167a5f287022d7ed88ba1ce18d99e6f53e02b725bcdf1e909dac6c27f4374acc00"/191], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 3.589588327s ago: executing program 4 (id=479): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000072000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 3.510028822s ago: executing program 4 (id=480): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r3 = openat2$dir(0xffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x10000, 0x88, 0x5}, 0x18) openat(r3, &(0x7f00000003c0)='./file0\x00', 0x10200, 0x3) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x40, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 3.359999619s ago: executing program 0 (id=481): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) socket(0x10, 0x803, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000240)={0xd, {0x81, 0x6, 0x4, 0x4}}) writev(0xffffffffffffffff, &(0x7f0000000840), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 3.229890211s ago: executing program 0 (id=482): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef64bd465b9780e2bbe408ccc58187feb0e3d43347f98e1a298327e6f9b312ecb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259620618c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a30536455bb774f7f154263178151ea93f5774b56a7142047326f940e95b8489e1c5650f5c61299a295f79c88456521cffdef93e29f10f4a11f0ca134a375a7ecfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d9823659d1945258fc668950e5aacfa06e1a212661b3f57a266c90e64efc8d8f730867202a9ee94e6a1f851337c2c9671d98a19bdc132c153b3ad843bdd308a07ba8f50a20cfd2c8b94e86ea0af0a9e0e9789ffd38f9b86da101e2266700"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6faa, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x3e0}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x93}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x3505}}, 0xe4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, 0x0) r6 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2503, 0x0) r7 = gettid() sendmsg$nl_generic(r6, &(0x7f0000002cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000001a40)={0x122c, 0x3a, 0x400, 0x70bd27, 0x25dfdbfb, {0x1e}, [@typed={0x4, 0x98}, @nested={0x109e, 0x143, 0x0, 0x1, [@typed={0x8, 0x87, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x119, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x3c}, @typed={0x1004, 0xab, 0x0, 0x0, @binary="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"}, @typed={0xc, 0xd9, 0x0, 0x0, @u64}, @typed={0x8, 0x14a, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x17}, @generic="9867dd1bfdc83053843457777dba8374f8d609cfb0a03702feec7cb9d23b657c824cb9e316f489c9f4a695f1bfd473e4345a74701d746e52d44db1ef6ceb458e761eb2883dc141de8e359689eb6d892ce2551ae3a463e32b3e2242639c00687e01885696a9582501c3f3"]}, @nested={0x4e, 0x12e, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x41}}, @typed={0x8, 0x16b, 0x0, 0x0, @fd=r5}, @generic="10eb694661bb5da8e52952e56084e429ff29b9e25bb8e3905eb3eb59793fe2fd853b1b2de479ee78f5cdab9f90e0fde271cde9b58bec", @nested={0x4, 0x46}]}, @generic="bbcaf096e5bf020b68540a61b379cb40c23398cd8e4b0e48b1062d8f5b3e173d05aa48ac6823df13", @generic="70d2ce35c98d53c8623d0c18e4e2832dfcde743dc2ed4bd195b669ec57d9828c9ef7b6680474ed1ab4c39ee10bc5f7bb33f52ff7d7b83c9b4adfd6f21502011d9c3769c40710ec9bd90cf38fd0fc19edbeecc2bdcb72344ca75c59f08e8830cc9c4063698fc1bd6378cd677519f535e97e16c26495", @typed={0x4, 0x89, 0x0, 0x0, @binary}, @nested={0x80, 0x70, 0x0, 0x1, [@generic="19b80586285753299596438448945e736e3aa890f3be4f46f95aad07c2314c9905604739c9f3c62dc3ab51e5d2c26daadef525758ea0d67314dc73aa5a48b9aeb0f992445ae4b0c60aa59b6ffc3da3a49c6617461d9f49f671512782b16890fe6ad437eb121c3b46486eced304124e93a151d1d2", @nested={0x4, 0xdb}, @nested={0x4, 0xf3}]}]}, 0x122c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000140)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 3.070239673s ago: executing program 1 (id=483): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000003c0)={0x3}) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x42020054, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='security.selinux\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0xa, 0x3, {0x0, 0x2000000}}]}}, 0x0, 0x3e}, 0x28) syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000000)=""/26, 0xfffffffffffffdb9}, 0x7068}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/111, 0xffffffe2}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001a00)=""/171}], 0x0, &(0x7f00000018c0)=""/176, 0x7}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) ioctl(r2, 0x3b76, &(0x7f00000003c0)) write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2) 2.790414893s ago: executing program 2 (id=484): socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x80000) pipe2(&(0x7f00000003c0), 0x4880) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000104010100000000000000000a00000406000640000400004c87701dbce397f8c175639a963a20a6dc4082e4d507e3fa6ec2307caf6e866d51e367aaeda5a8dc42fdb6e848fa171d939801f1ae961eab6abceff41f8aa7bbb08d5f97e4c9187c46a31f06b45c40cf2badab46d1d3b55c42801cd3c5eac5226577cca997e642c80fbf1a99c16dd7d8da998bedfd96c0a94306538c81ccdda95d2d5207b29c300cca38433f1ad94ffc1b8947d8883ec0fc8ab9caf03dc22ef9303c28ce4fee61c32fab9b1075fbf32204b8"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b01, &(0x7f0000000040)) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c0, 0x36, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x29b, 0x1, 0x0, 0x1, [@generic="7d88a116a3bf647d6dfcc76cceac143493251ce847ff23b4ea4ec73d0f80beec67b4b715255c02e166dc915532bfd828ca94fd0ab7cd8a4cd08c0103df3d1d0ef9a86734ed6b19eaadd35a65c6f4aca4214d8b19e22a71cde632cb474572c3f75b54c69de2b172880f85428b136100aa616813ab88185dceda8df8f697dc00651baea42a762daf1d80b915e5a0cc899f44afeba5f0807ebbe9c7699a43e83889818c48b4b1768a90a031c7c1dd703bfebf3e6171d679dd888c365ad6713aff911a3a7c4b18718c0d5226034e839d3d0e2b7a1f2c46b2b7ae4a3ee2acbd9364951588241aa5c10e820ad8d34a34f323bdf72522312dd6ad9a80a3895ddea35ac0db1c6ffb834eec59b9ac4b2ce3013515cd6abbb409b324fa79bd7e6bd2d010ea623ce8ec8b917c984b7b7b09980174568402e704264802b2eb50c849dec0e65098cacedd2103ed5ffa0ca8fc2eb2089501101dcf7951dba816318407c63ad9e954db47a368770f9a006850b5b252fac6eeff3ddcecbf4f41018b5b750db04569a502c8405575714884795fde1c06ae7d72c94984ab8b4dbd063c9b17bf43a0a1b9e4c029bf4140c11050b47ee332eb4762539fc3504842948628691e62c86bd560c990a51586f732d22410f886c9fbc48b799c16b9a9a2f0af25ebbe14b7464ec784ec737956eb05f12bc2cff20088e4c5d8ca0360cf8590df5b20ae97bb8f4a8fc43f5a951be12f87908c47f5e0fb28b6f53147e6a6f7f97cb0db7fb332aecc4abf515939e136110afc99e00fc3b139d7812027e71b2ae15da023cbd51275544ba509c536f2dda1a3efc942ec222332a277ef2f5ae9f86766c617bd0c03d5851da326c08fdecf48a5dd9e53b3da6f6d0e71c48ea38b2cf9e8c8a55f35703e617ba5146238eea0b61e93e08d35e6d910fda20c800ddfc2"]}, @typed={0xb, 0x2, 0x0, 0x0, @binary="62095244a4b07e"}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2.30961588s ago: executing program 0 (id=485): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b19, &(0x7f0000000040)) 2.204283556s ago: executing program 4 (id=486): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x14) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f00000002c0)="28d3") 1.899706243s ago: executing program 2 (id=487): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0', 0x1) 199.489117ms ago: executing program 4 (id=488): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff000000"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0\x00', 0x2) 0s ago: executing program 1 (id=489): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) read$FUSE(0xffffffffffffffff, &(0x7f0000002680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x10000000000c, 0xa, 0x1, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53049c4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c00"], 0xe4}}, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x7, 0xfffffffe, 0xe3, 0x3ff, 0x2}}]}}}]}, 0x78}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x3ac, 0x0, 0x2cc, 0xe0, 0x2cc, 0x2cc, 0x2cc, 0x4, 0x0, {[{{@arp={@multicast1, @empty, 0x0, 0xffffff00, 0xc, 0x0, {@mac=@local, {[0xff, 0x80, 0x0, 0x1fe, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xdfe, 0x2, 0x7, 0xe, 0xfa, 0x8a5c, 'batadv0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x12}, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x20, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@arp={@empty, @multicast1, 0xff, 0x0, 0x4, 0x2, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0x101]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x5, 0x5, 0x2, 0x7, 0xa7c, 'wlan0\x00', 'bond_slave_0\x00', {}, {0xb50cca1d00497645}, 0x0, 0x202}, 0xbc, 0xe0, 0x10000f0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0xfff}}}, {{@arp={@multicast1, @remote, 0xff, 0xff000000, 0xa, 0x6, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x1, 0x10, 0x3, 0x5, 0x4, 0x9e, 'gre0\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x8}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @rand_addr=0x64010100, 0x2}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3f8) socketpair$unix(0x1, 0x1, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:30988' (ED25519) to the list of known hosts. [ 41.571123][ T5721] cgroup: Unknown subsys name 'net' [ 41.719398][ T5721] cgroup: Unknown subsys name 'cpuset' [ 41.724228][ T5721] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.629468][ T5721] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.729186][ T5759] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.730274][ T5758] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.731788][ T5759] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.736256][ T5758] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.737587][ T5759] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.739651][ T5758] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.741398][ T5759] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.741416][ T5760] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.742407][ T5760] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.743085][ T5760] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.744065][ T5758] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.744574][ T5758] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.745043][ T5758] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.746818][ T5759] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.747087][ T5762] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.747356][ T5758] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.748185][ T5758] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.748857][ T5760] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.752147][ T5105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.754956][ T5762] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.409636][ T5752] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.414889][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.418784][ T5752] bridge_slave_0: entered allmulticast mode [ 47.423211][ T5752] bridge_slave_0: entered promiscuous mode [ 47.463179][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.467221][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.470403][ T5752] bridge_slave_1: entered allmulticast mode [ 47.474404][ T5752] bridge_slave_1: entered promiscuous mode [ 47.477726][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.480240][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.482576][ T5745] bridge_slave_0: entered allmulticast mode [ 47.485208][ T5745] bridge_slave_0: entered promiscuous mode [ 47.489127][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.491931][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.494309][ T5747] bridge_slave_0: entered allmulticast mode [ 47.497005][ T5747] bridge_slave_0: entered promiscuous mode [ 47.500225][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.502554][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.504815][ T5747] bridge_slave_1: entered allmulticast mode [ 47.507591][ T5747] bridge_slave_1: entered promiscuous mode [ 47.510257][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.512577][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.514846][ T5746] bridge_slave_0: entered allmulticast mode [ 47.517690][ T5746] bridge_slave_0: entered promiscuous mode [ 47.525756][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.528212][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.530484][ T5745] bridge_slave_1: entered allmulticast mode [ 47.533147][ T5745] bridge_slave_1: entered promiscuous mode [ 47.547719][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.550936][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.554027][ T5746] bridge_slave_1: entered allmulticast mode [ 47.558137][ T5746] bridge_slave_1: entered promiscuous mode [ 47.606082][ T5752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.611522][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.617887][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.622434][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.626607][ T5752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.636774][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.640962][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.645168][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.688871][ T5752] team0: Port device team_slave_0 added [ 47.692782][ T5746] team0: Port device team_slave_0 added [ 47.709081][ T5752] team0: Port device team_slave_1 added [ 47.711906][ T5746] team0: Port device team_slave_1 added [ 47.714698][ T5745] team0: Port device team_slave_0 added [ 47.717978][ T5747] team0: Port device team_slave_0 added [ 47.726801][ T5747] team0: Port device team_slave_1 added [ 47.736352][ T5745] team0: Port device team_slave_1 added [ 47.757974][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.760294][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.768586][ T5752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.791911][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.794186][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.802189][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.806575][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.809077][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.819580][ T5752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.832257][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.834543][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.843268][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.847632][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.850419][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.860891][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.866181][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.868520][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.877070][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.887472][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.890444][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.900985][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.906389][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.909406][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.920119][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.983856][ T5747] hsr_slave_0: entered promiscuous mode [ 47.989079][ T5747] hsr_slave_1: entered promiscuous mode [ 48.007249][ T5746] hsr_slave_0: entered promiscuous mode [ 48.010422][ T5746] hsr_slave_1: entered promiscuous mode [ 48.013417][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 48.015933][ T5746] Cannot create hsr debugfs directory [ 48.026147][ T5752] hsr_slave_0: entered promiscuous mode [ 48.028684][ T5752] hsr_slave_1: entered promiscuous mode [ 48.030955][ T5752] debugfs: 'hsr0' already exists in 'hsr' [ 48.032870][ T5752] Cannot create hsr debugfs directory [ 48.040713][ T5745] hsr_slave_0: entered promiscuous mode [ 48.043905][ T5745] hsr_slave_1: entered promiscuous mode [ 48.047292][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 48.049792][ T5745] Cannot create hsr debugfs directory [ 48.415406][ T5746] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.423989][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.427368][ T5746] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.432308][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.435030][ T5746] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.439475][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.442364][ T5746] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.449973][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.510768][ T5745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.515471][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.518803][ T5745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.525444][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.528716][ T5745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.533641][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.549847][ T5745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.557706][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.607580][ T5752] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.612856][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.615971][ T5752] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.623060][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.626919][ T5752] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.632975][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.641805][ T5752] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.649083][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.739630][ T5747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.744522][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.752300][ T5747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.756327][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.759975][ T5747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.764640][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.768368][ T5747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.772166][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.788090][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.788313][ T64] Bluetooth: hci3: command tx timeout [ 48.788321][ T5105] Bluetooth: hci0: command tx timeout [ 48.788536][ T5105] Bluetooth: hci1: command tx timeout [ 48.839142][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.852076][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.854463][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.867425][ T64] Bluetooth: hci2: command tx timeout [ 48.870658][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.888861][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.891839][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.909989][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.922974][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.925399][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.938221][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.940638][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.949365][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.975038][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.991006][ T5752] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.000425][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.020312][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.023395][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.028084][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.030640][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.046645][ T219] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.049747][ T219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.054807][ T219] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.058023][ T219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.114094][ T5752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.143396][ T5747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.369521][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.382812][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.437146][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.443544][ T5746] veth0_vlan: entered promiscuous mode [ 49.448718][ T5745] veth0_vlan: entered promiscuous mode [ 49.463225][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.475307][ T5745] veth1_vlan: entered promiscuous mode [ 49.488110][ T5746] veth1_vlan: entered promiscuous mode [ 49.500970][ T5747] veth0_vlan: entered promiscuous mode [ 49.516092][ T5747] veth1_vlan: entered promiscuous mode [ 49.522003][ T5752] veth0_vlan: entered promiscuous mode [ 49.538746][ T5745] veth0_macvtap: entered promiscuous mode [ 49.544258][ T5752] veth1_vlan: entered promiscuous mode [ 49.547892][ T5746] veth0_macvtap: entered promiscuous mode [ 49.553013][ T5746] veth1_macvtap: entered promiscuous mode [ 49.561553][ T5745] veth1_macvtap: entered promiscuous mode [ 49.578842][ T5747] veth0_macvtap: entered promiscuous mode [ 49.585264][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.591276][ T5747] veth1_macvtap: entered promiscuous mode [ 49.598687][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.605048][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.614296][ T5752] veth0_macvtap: entered promiscuous mode [ 49.631764][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.634766][ T5799] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.638504][ T5799] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.645249][ T5752] veth1_macvtap: entered promiscuous mode [ 49.648736][ T5799] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.651490][ T5799] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.661398][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.673784][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.678056][ T5799] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.681337][ T5799] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.688090][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.694007][ T5799] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.709400][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.714508][ T5799] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.722942][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.727856][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.728671][ T5799] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.733490][ T5799] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.751091][ T5799] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.754569][ T5799] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.769296][ T5799] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.772980][ T5799] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.779862][ T219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.785583][ T219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.793052][ T5799] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.797592][ T5799] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.838940][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.843808][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.953813][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.957465][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.969835][ T5746] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.992448][ T5746] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.002718][ T5746] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.006024][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.010604][ T5746] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.012893][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.027226][ T5746] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.038650][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.042065][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.084377][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.091881][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.110774][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.116397][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.219787][ T5901] kvm: user requested TSC rate below hardware speed [ 50.229182][ T5901] kvm: vcpu 1: requested 128 ns lapic timer period limited to 200000 ns [ 50.232227][ T5901] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 50.250762][ T5905] Zero length message leads to an empty skb [ 50.866859][ T64] Bluetooth: hci1: command tx timeout [ 50.866904][ T5757] Bluetooth: hci0: command tx timeout [ 50.871541][ T64] Bluetooth: hci3: command tx timeout [ 50.957281][ T5757] Bluetooth: hci2: command tx timeout [ 51.174233][ T3270] cfg80211: failed to load regulatory.db [ 52.876540][ T1481] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.946655][ T5757] Bluetooth: hci3: command tx timeout [ 52.957187][ T64] Bluetooth: hci1: command tx timeout [ 52.960573][ T5757] Bluetooth: hci0: command tx timeout [ 52.978526][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 53.026664][ T64] Bluetooth: hci2: command tx timeout [ 53.028907][ T1481] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.032668][ T1481] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.039819][ T1481] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 53.042895][ T1481] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.045730][ T1481] usb 5-1: Product: syz [ 53.048013][ T1481] usb 5-1: Manufacturer: syz [ 53.049498][ T1481] usb 5-1: SerialNumber: syz [ 53.272775][ T1481] usb 5-1: 0:1 : does not exist [ 53.275540][ T1481] usb 5-1: unit 4 not found! [ 53.277203][ T1481] usb 5-1: unit 51 not found! [ 53.308734][ T1481] usb 5-1: USB disconnect, device number 2 [ 53.353019][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 53.468915][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 53.686814][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 53.840141][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.843541][ T9] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 53.847568][ T9] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 53.850437][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.862778][ T5976] kvm: user requested TSC rate below hardware speed [ 53.875697][ T5976] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 54.079355][ T5856] usb 6-1: USB disconnect, device number 2 [ 54.194463][ T5981] syz.2.27 uses obsolete (PF_INET,SOCK_PACKET) [ 54.807549][ T5997] ======================================================= [ 54.807549][ T5997] WARNING: The mand mount option has been deprecated and [ 54.807549][ T5997] and is ignored by this kernel. Remove the mand [ 54.807549][ T5997] option from the mount to silence this warning. [ 54.807549][ T5997] ======================================================= [ 54.983668][ T34] kernel read not supported for file /18/net/xfrm_stat (pid: 34 comm: kworker/3:0) [ 55.028359][ T64] Bluetooth: hci1: command tx timeout [ 55.029089][ T5757] Bluetooth: hci3: command tx timeout [ 55.029104][ T5105] Bluetooth: hci0: command tx timeout [ 55.106899][ T5757] Bluetooth: hci2: command tx timeout [ 55.657127][ T6011] capability: warning: `syz.3.38' uses 32-bit capabilities (legacy support in use) [ 56.857664][ T61] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.006718][ T61] usb 8-1: Using ep0 maxpacket: 8 [ 57.011721][ T61] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 57.015115][ T61] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 57.019707][ T61] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 57.023507][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.746536][ T5835] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 57.896577][ T5835] usb 6-1: Using ep0 maxpacket: 16 [ 57.900787][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.905227][ T5835] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 57.910889][ T5835] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 57.915109][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.921392][ T5835] usb 6-1: config 0 descriptor?? [ 58.333663][ T5835] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 58.339494][ T5835] HID 045e:07da: Invalid code 65791 type 1 [ 58.342235][ T5835] HID 045e:07da: Invalid code 768 type 1 [ 58.344015][ T5835] HID 045e:07da: Invalid code 769 type 1 [ 58.345771][ T5835] HID 045e:07da: Invalid code 770 type 1 [ 58.347785][ T5835] HID 045e:07da: Invalid code 771 type 1 [ 58.349541][ T5835] HID 045e:07da: Invalid code 772 type 1 [ 58.351786][ T5835] HID 045e:07da: Invalid code 773 type 1 [ 58.353539][ T5835] HID 045e:07da: Invalid code 774 type 1 [ 58.355297][ T5835] HID 045e:07da: Invalid code 775 type 1 [ 58.358588][ T5835] HID 045e:07da: Invalid code 776 type 1 [ 58.372783][ T5835] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:045E:07DA.0002/input/input5 [ 58.452786][ T5835] microsoft 0003:045E:07DA.0002: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 58.533760][ T3270] usb 6-1: USB disconnect, device number 3 [ 59.379085][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'. [ 59.476559][ T5856] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 59.629065][ T9] usb 8-1: USB disconnect, device number 2 [ 59.646535][ T5856] usb 7-1: Using ep0 maxpacket: 8 [ 59.653368][ T5856] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 59.658436][ T5856] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 59.661915][ T5856] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 59.668454][ T5856] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 59.671640][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.674302][ T5856] usb 7-1: Product: syz [ 59.676712][ T5856] usb 7-1: Manufacturer: syz [ 59.679211][ T5856] usb 7-1: SerialNumber: syz [ 59.687727][ T5856] usb 7-1: config 0 descriptor?? [ 59.691062][ T6081] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 59.756659][ T5856] rc_core: IR keymap rc-streamzap not found [ 59.759969][ T5856] Registered IR keymap rc-empty [ 59.763626][ T5856] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 59.770111][ T5856] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input6 [ 59.899738][ T60] usb 7-1: USB disconnect, device number 2 [ 60.471312][ T42] audit: type=1107 audit(1785295987.763:2): pid=6106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 60.986984][ T848] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 61.146534][ T848] usb 8-1: Using ep0 maxpacket: 32 [ 61.150749][ T848] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 61.153721][ T848] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.157119][ T848] usb 8-1: config 0 has no interface number 0 [ 61.159081][ T848] usb 8-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.163449][ T848] usb 8-1: config 0 interface 184 has no altsetting 0 [ 61.167129][ T848] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 61.170016][ T848] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.172605][ T848] usb 8-1: Product: syz [ 61.173952][ T848] usb 8-1: Manufacturer: syz [ 61.175417][ T848] usb 8-1: SerialNumber: syz [ 61.178250][ T848] usb 8-1: config 0 descriptor?? [ 61.181447][ T848] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 61.185107][ T848] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -22 [ 61.896136][ T60] usb 8-1: USB disconnect, device number 3 [ 62.472067][ T6159] [ 62.706607][ T60] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.822073][ T6163] futex_wake_op: syz.1.90 tries to shift op by 144; fix this program [ 62.879810][ T60] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 62.885566][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.891483][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.897968][ T60] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 62.905797][ T60] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 62.909441][ T60] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 62.912143][ T60] usb 5-1: Manufacturer: syz [ 62.917143][ T60] usb 5-1: config 0 descriptor?? [ 63.329672][ T60] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 63.341073][ T60] appleir 0003:05AC:8243.0003: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 65.029383][ T848] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 65.077192][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 65.256560][ T3270] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 65.316558][ T6187] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 65.420505][ T3270] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9756, setting to 64 [ 65.439098][ T3270] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 65.450819][ T6201] netlink: 'syz.3.101': attribute type 16 has an invalid length. [ 65.453479][ T6201] netlink: 'syz.3.101': attribute type 17 has an invalid length. [ 65.455135][ T3270] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.456214][ T6201] netlink: 'syz.3.101': attribute type 27 has an invalid length. [ 65.462893][ T6191] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 65.467508][ T3270] hub 7-1:4.0: USB hub found [ 65.467883][ T6187] usb 6-1: Using ep0 maxpacket: 16 [ 65.476042][ T6187] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.479405][ T6187] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.485304][ T6187] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 65.489583][ T6187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.493032][ T6187] usb 6-1: Product: syz [ 65.495659][ T6187] usb 6-1: Manufacturer: syz [ 65.501734][ T6187] usb 6-1: SerialNumber: syz [ 65.515010][ T6187] usb 6-1: 0:2 : does not exist [ 65.632889][ T6207] loop6: detected capacity change from 0 to 8 [ 65.672562][ T3270] hub 7-1:4.0: config failed, can't read hub descriptor (err -22) [ 65.708479][ T3270] usb 7-1: USB disconnect, device number 3 [ 65.723162][ T6187] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 65.758302][ T6187] usb 6-1: USB disconnect, device number 4 [ 65.782769][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 65.820484][ T6207] Dev loop6: unable to read RDB block 8 [ 65.823744][ T6207] loop6: unable to read partition table [ 65.826126][ T6207] loop6: partition table beyond EOD, truncated [ 65.828635][ T6207] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 66.336556][ T848] usb 5-1: device descriptor read/64, error -71 [ 66.500030][ T6227] futex_wake_op: syz.3.110 tries to shift op by 144; fix this program [ 66.606600][ T848] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 66.757291][ T848] usb 5-1: device firmware changed [ 66.761931][ T61] usb 5-1: USB disconnect, device number 3 [ 66.906646][ T61] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 67.061027][ T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.065524][ T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.069623][ T61] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 67.073321][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.079990][ T61] usb 5-1: config 0 descriptor?? [ 67.165916][ T6231] binder: 6230:6231 ioctl c0306201 0 returned -14 [ 67.172002][ T6231] binder: 6230:6231 ioctl c0306201 80000640 returned -11 [ 67.314442][ T6236] tipc: Started in network mode [ 67.316097][ T6236] tipc: Node identity 4, cluster identity 4711 [ 67.318251][ T6236] tipc: Node number set to 4 [ 67.506431][ T61] usbhid 5-1:0.0: can't add hid device: -71 [ 67.508567][ T61] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 67.527834][ T61] usb 5-1: USB disconnect, device number 4 [ 70.798190][ T6314] input: syz1 as /devices/virtual/input/input7 [ 70.868357][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.870930][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.796569][ T3270] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 71.949096][ T3270] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 71.953159][ T3270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.957465][ T3270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.960739][ T3270] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 71.965648][ T3270] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 71.968726][ T3270] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 71.971368][ T3270] usb 5-1: Manufacturer: syz [ 71.981126][ T3270] usb 5-1: config 0 descriptor?? [ 72.716588][ T848] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 72.732800][ T6365] capability: warning: `syz.1.160' uses deprecated v2 capabilities in a way that may be insecure [ 72.866699][ T848] usb 8-1: Using ep0 maxpacket: 16 [ 72.876181][ T848] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.881872][ T848] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.897676][ T848] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 72.900629][ T848] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.903127][ T848] usb 8-1: Product: syz [ 72.904539][ T848] usb 8-1: Manufacturer: syz [ 72.906229][ T848] usb 8-1: SerialNumber: syz [ 72.930913][ T848] usb 8-1: 0:2 : does not exist [ 73.127391][ T848] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 73.158584][ T848] usb 8-1: USB disconnect, device number 4 [ 73.179732][ T6199] udevd[6199]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 73.956602][ T5856] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 74.108087][ T5856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.112698][ T5856] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 74.117696][ T5856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.123870][ T5856] usb 6-1: config 0 descriptor?? [ 74.331674][ T5856] usbhid 6-1:0.0: can't add hid device: -71 [ 74.333628][ T5856] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 74.337391][ T5856] usb 6-1: USB disconnect, device number 5 [ 74.776576][ T61] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 74.906612][ T29] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 74.936543][ T61] usb 6-1: Using ep0 maxpacket: 32 [ 74.940385][ T61] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.944329][ T61] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 74.947548][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.951295][ T61] usb 6-1: config 0 descriptor?? [ 74.954639][ T61] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 74.960809][ T61] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 75.056543][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 75.059618][ T29] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 75.062212][ T29] usb 7-1: config 0 has no interface number 0 [ 75.066199][ T29] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 75.069134][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.071651][ T29] usb 7-1: Product: syz [ 75.073064][ T29] usb 7-1: Manufacturer: syz [ 75.074550][ T29] usb 7-1: SerialNumber: syz [ 75.077984][ T29] usb 7-1: config 0 descriptor?? [ 75.199061][ T3270] usbhid 5-1:0.0: can't add hid device: -71 [ 75.200997][ T3270] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 75.204848][ T3270] usb 5-1: USB disconnect, device number 5 [ 75.409794][ T1481] usb 6-1: USB disconnect, device number 6 [ 75.421008][ T1481] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 76.092229][ T29] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 76.098171][ T29] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 76.101985][ T29] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 76.105659][ T29] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 76.112911][ T29] usb 7-1: USB disconnect, device number 4 [ 77.057040][ T5834] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 77.207915][ T5834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.214043][ T5834] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 77.217163][ T5834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.221395][ T5834] usb 8-1: config 0 descriptor?? [ 77.914014][ T5834] usbhid 8-1:0.0: can't add hid device: -71 [ 77.923576][ T6440] syz.1.185 (6440) used greatest stack depth: 19104 bytes left [ 78.150471][ T5834] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 78.160844][ T5834] usb 8-1: USB disconnect, device number 5 [ 78.457974][ T5834] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 78.606602][ T5834] usb 8-1: Using ep0 maxpacket: 32 [ 78.612885][ T5834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.616574][ T5834] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 78.620038][ T5834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.627953][ T5834] usb 8-1: config 0 descriptor?? [ 78.635367][ T5834] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 78.650512][ T5834] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 78.824835][ T6450] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 78.828745][ T6450] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 78.838108][ T6450] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 78.841932][ T6450] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 78.844659][ T6450] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 78.848075][ T6450] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 78.853203][ T6450] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 78.855298][ T6450] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 78.858807][ T6450] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 78.862322][ T6450] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 78.864806][ T6450] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 78.868845][ T6450] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.086892][ T60] usb 8-1: USB disconnect, device number 6 [ 79.091326][ T60] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 79.814006][ T6483] input: syz1 as /devices/virtual/input/input9 [ 79.866720][ T60] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 80.037817][ T60] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.043770][ T60] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.047465][ T60] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 80.050251][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 80.052682][ T60] usb 8-1: SerialNumber: syz [ 80.066602][ T5757] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.126574][ T5834] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 80.263487][ T60] usb 8-1: 0:2 : does not exist [ 80.278862][ T5834] usb 7-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 80.284931][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.287843][ T60] usb 8-1: USB disconnect, device number 7 [ 80.293522][ T5834] emi26 - firmware loader 7-1:1.0: emi26_probe start [ 80.298422][ T5834] usb 7-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 80.301503][ T5834] usb 7-1: Falling back to sysfs fallback for: emi26/loader.fw [ 80.311024][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.497190][ T6486] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 80.504295][ T5834] usb 7-1: emi26_load_firmware - request_firmware() failed [ 80.507181][ T5834] usb 7-1: emi26_load_firmware - error loading firmware: error = -2 [ 80.510150][ T5834] emi26 - firmware loader 7-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 80.514931][ T5834] usb 7-1: USB disconnect, device number 5 [ 80.717767][ T60] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 80.867747][ T5757] Bluetooth: hci3: command 0x0c1a tx timeout [ 80.867787][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 80.869986][ T5105] Bluetooth: hci1: command 0x0c1a tx timeout [ 80.887732][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.891279][ T60] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 80.894100][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.898058][ T60] usb 5-1: config 0 descriptor?? [ 81.032255][ T6504] syz.3.212 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 81.110138][ T60] usbhid 5-1:0.0: can't add hid device: -71 [ 81.112158][ T60] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 81.115793][ T60] usb 5-1: USB disconnect, device number 6 [ 81.547134][ T60] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 81.706514][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 81.706550][ T29] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 81.709628][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.714580][ T60] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 81.717473][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.722167][ T60] usb 5-1: config 0 descriptor?? [ 81.727327][ T60] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 81.734142][ T60] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 81.859371][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 81.863530][ T29] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 81.869784][ T29] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 81.872526][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.875044][ T29] usb 6-1: Product: syz [ 81.876642][ T29] usb 6-1: Manufacturer: syz [ 81.878087][ T29] usb 6-1: SerialNumber: syz [ 82.087522][ T29] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 82.146601][ T5105] Bluetooth: hci0: command 0x0c1a tx timeout [ 82.186539][ T10] usb 5-1: USB disconnect, device number 7 [ 82.191263][ T10] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 82.288592][ T29] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 82.292327][ T29] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 82.505475][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 82.688660][ T29] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 82.710446][ T29] usb 6-1: USB disconnect, device number 7 [ 82.727609][ T3270] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 82.733806][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.775703][ T6538] netlink: 72 bytes leftover after parsing attributes in process `syz.0.224'. [ 82.877907][ T3270] usb 8-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 82.880784][ T3270] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.888028][ T3270] emi26 - firmware loader 8-1:1.0: emi26_probe start [ 82.890980][ T3270] usb 8-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 82.894214][ T3270] usb 8-1: Falling back to sysfs fallback for: emi26/loader.fw [ 82.946585][ T5105] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.956664][ T5105] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.956831][ T5757] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.089171][ T6529] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 83.093117][ T3270] usb 8-1: emi26_load_firmware - request_firmware() failed [ 83.095427][ T3270] usb 8-1: emi26_load_firmware - error loading firmware: error = -2 [ 83.098454][ T3270] emi26 - firmware loader 8-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 83.104520][ T3270] usb 8-1: USB disconnect, device number 8 [ 84.226705][ T5757] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.388310][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 84.537334][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 84.549924][ T10] usb 7-1: no configurations [ 84.551766][ T10] usb 7-1: can't read configurations, error -22 [ 84.686579][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 84.826554][ T848] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 84.836545][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 84.838812][ T10] usb 7-1: no configurations [ 84.840393][ T10] usb 7-1: can't read configurations, error -22 [ 84.844180][ T10] usb usb7-port1: attempt power cycle [ 84.935517][ T6627] mmap: syz.0.240 (6627) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.998346][ T848] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 85.004468][ T848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.014604][ T848] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 85.018796][ T848] usb 6-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 85.022930][ T848] usb 6-1: Falling back to sysfs fallback for: emi26/loader.fw [ 85.036649][ T5757] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.038174][ T5105] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.038814][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.176586][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 85.196985][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 85.199329][ T10] usb 7-1: no configurations [ 85.201998][ T10] usb 7-1: can't read configurations, error -22 [ 85.219693][ T848] usb 6-1: emi26_load_firmware - request_firmware() failed [ 85.228348][ T848] usb 6-1: emi26_load_firmware - error loading firmware: error = -12 [ 85.231881][ T848] emi26 - firmware loader 6-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 85.240753][ T848] usb 6-1: USB disconnect, device number 8 [ 85.326614][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 85.352108][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 85.358044][ T10] usb 7-1: no configurations [ 85.359950][ T10] usb 7-1: can't read configurations, error -22 [ 85.362777][ T10] usb usb7-port1: unable to enumerate USB device [ 86.186599][ T6651] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.196586][ T61] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 86.366590][ T61] usb 5-1: Using ep0 maxpacket: 16 [ 86.370204][ T61] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.374273][ T61] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.380017][ T61] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.383532][ T61] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.386434][ T61] usb 5-1: Product: syz [ 86.388105][ T61] usb 5-1: Manufacturer: syz [ 86.390022][ T61] usb 5-1: SerialNumber: syz [ 86.399937][ T61] usb 5-1: 0:2 : does not exist [ 86.506559][ T3270] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 86.603139][ T61] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 86.633685][ T61] usb 5-1: USB disconnect, device number 8 [ 86.657316][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.678623][ T3270] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 86.681517][ T3270] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.688431][ T3270] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 86.690955][ T3270] usb 6-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 86.693503][ T3270] usb 6-1: Falling back to sysfs fallback for: emi26/loader.fw [ 87.137188][ T6666] : renamed from bond_slave_0 (while UP) [ 87.566794][ T61] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 87.736594][ T61] usb 8-1: Using ep0 maxpacket: 8 [ 87.740695][ T61] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 87.743315][ T61] usb 8-1: can't read configurations, error -61 [ 87.876694][ T61] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 88.047716][ T61] usb 8-1: Using ep0 maxpacket: 8 [ 88.051953][ T61] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 88.054942][ T61] usb 8-1: can't read configurations, error -61 [ 88.058363][ T61] usb usb8-port1: attempt power cycle [ 88.396582][ T61] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 88.416994][ T61] usb 8-1: Using ep0 maxpacket: 8 [ 88.420496][ T61] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 88.423022][ T61] usb 8-1: can't read configurations, error -61 [ 88.576570][ T61] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 88.597046][ T61] usb 8-1: Using ep0 maxpacket: 8 [ 88.600677][ T61] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 88.603393][ T61] usb 8-1: can't read configurations, error -61 [ 88.606098][ T61] usb usb8-port1: unable to enumerate USB device [ 88.877391][ T6690] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.879427][ T6690] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.881438][ T6690] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.883422][ T6690] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.156550][ T60] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 89.307902][ T60] usb 7-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 89.310772][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.318328][ T60] emi26 - firmware loader 7-1:1.0: emi26_probe start [ 90.146589][ T5105] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.676575][ T5833] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 90.838935][ T5833] usb 5-1: unable to get BOS descriptor or descriptor too short [ 90.842501][ T5833] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 90.847998][ T5833] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 90.850773][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.853298][ T5833] usb 5-1: Product: syz [ 90.854585][ T5833] usb 5-1: Manufacturer: syz [ 90.856056][ T5833] usb 5-1: SerialNumber: syz [ 90.946666][ T5105] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.949208][ T5757] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.949280][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.066507][ T5833] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 91.264105][ T5833] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 91.267364][ T5833] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 91.666714][ T5833] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 91.669469][ T5833] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 91.756555][ T5834] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 91.868400][ T5833] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 91.893384][ T5833] usb 5-1: USB disconnect, device number 9 [ 91.916026][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.926518][ T5834] usb 8-1: Using ep0 maxpacket: 8 [ 91.932554][ T5834] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 91.937021][ T5834] usb 8-1: can't read configurations, error -61 [ 92.066594][ T5834] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 92.226633][ T5834] usb 8-1: Using ep0 maxpacket: 8 [ 92.231407][ T5834] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 92.234728][ T5834] usb 8-1: can't read configurations, error -61 [ 92.238065][ T5834] usb usb8-port1: attempt power cycle [ 92.576545][ T5834] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 92.596982][ T5834] usb 8-1: Using ep0 maxpacket: 8 [ 92.600670][ T5834] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 92.603435][ T5834] usb 8-1: can't read configurations, error -61 [ 92.726598][ T5834] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 92.747287][ T5834] usb 8-1: Using ep0 maxpacket: 8 [ 92.751498][ T5834] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 92.754851][ T5834] usb 8-1: can't read configurations, error -61 [ 92.758571][ T5834] usb usb8-port1: unable to enumerate USB device [ 93.716565][ T61] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 93.876553][ T61] usb 5-1: Using ep0 maxpacket: 32 [ 93.879952][ T61] usb 5-1: no configurations [ 93.881427][ T61] usb 5-1: can't read configurations, error -22 [ 94.030806][ T6807] netlink: 44 bytes leftover after parsing attributes in process `syz.1.299'. [ 94.036164][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'. [ 94.039134][ T61] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 94.196577][ T61] usb 5-1: Using ep0 maxpacket: 32 [ 94.198953][ T61] usb 5-1: no configurations [ 94.200466][ T61] usb 5-1: can't read configurations, error -22 [ 94.202957][ T61] usb usb5-port1: attempt power cycle [ 94.537275][ T61] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 94.556968][ T61] usb 5-1: Using ep0 maxpacket: 32 [ 94.559431][ T61] usb 5-1: no configurations [ 94.563012][ T61] usb 5-1: can't read configurations, error -22 [ 94.686624][ T61] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 94.707441][ T61] usb 5-1: Using ep0 maxpacket: 32 [ 94.709466][ T61] usb 5-1: no configurations [ 94.710945][ T61] usb 5-1: can't read configurations, error -22 [ 94.713209][ T61] usb usb5-port1: unable to enumerate USB device [ 96.392080][ T6827] netlink: 136 bytes leftover after parsing attributes in process `syz.0.307'. [ 96.656595][ T848] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 96.816663][ T848] usb 5-1: Using ep0 maxpacket: 16 [ 96.820636][ T848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.825171][ T848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.828875][ T848] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.833264][ T848] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 96.836157][ T848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.839982][ T848] usb 5-1: config 0 descriptor?? [ 97.263058][ T848] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:045E:07DA.0004/input/input10 [ 97.279585][ T848] microsoft 0003:045E:07DA.0004: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 97.449515][ T5835] usb 5-1: USB disconnect, device number 14 [ 97.644275][ T6839] fido_id[6839]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/report_descriptor': No such file or directory [ 98.245740][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'. [ 98.276596][ T6187] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 98.416561][ T6187] usb 8-1: device descriptor read/64, error -71 [ 98.516534][ T5833] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 98.656609][ T6187] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 98.678331][ T5833] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 98.681828][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.687815][ T5833] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 98.788057][ T6187] usb 8-1: device descriptor read/64, error -71 [ 98.907758][ T6187] usb usb8-port1: attempt power cycle [ 99.246597][ T6187] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 99.269305][ T6187] usb 8-1: device descriptor read/8, error -71 [ 99.526741][ T6187] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 99.557217][ T6187] usb 8-1: device descriptor read/8, error -71 [ 99.717136][ T6187] usb usb8-port1: unable to enumerate USB device [ 102.287829][ T6927] netlink: 72 bytes leftover after parsing attributes in process `syz.2.346'. [ 102.290844][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 102.356529][ T29] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 102.508362][ T29] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 102.511815][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 102.513934][ T29] usb 8-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.00 [ 102.516768][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.523885][ T29] usb 8-1: config 0 descriptor?? [ 103.518242][ T29] apple 0003:05AC:024C.0005: global environment stack underflow [ 103.526516][ T29] apple 0003:05AC:024C.0005: item 0 1 1 11 parsing failed [ 103.529097][ T29] apple 0003:05AC:024C.0005: parse failed [ 103.531302][ T29] apple 0003:05AC:024C.0005: probe with driver apple failed with error -22 [ 103.537667][ T29] usb 8-1: USB disconnect, device number 21 [ 104.657602][ T6953] netlink: 27 bytes leftover after parsing attributes in process `syz.1.355'. [ 104.678228][ T6956] netlink: 200 bytes leftover after parsing attributes in process `syz.2.356'. [ 104.689499][ T6953] /dev/sr0: Can't open blockdev [ 104.693532][ T6953] usb usb9: usbfs: process 6953 (syz.1.355) did not claim interface 0 before use [ 104.700315][ T6953] netlink: 'syz.1.355': attribute type 1 has an invalid length. [ 104.703668][ T6953] netlink: 224 bytes leftover after parsing attributes in process `syz.1.355'. [ 105.100775][ T6964] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 105.103170][ T6964] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 105.108585][ T6964] vhci_hcd vhci_hcd.0: Device attached [ 105.160406][ T6968] 9p: Bad value for 'wfdno' [ 105.234600][ T6970] random: crng reseeded on system resumption [ 105.358428][ T6973] netlink: 'syz.0.361': attribute type 3 has an invalid length. [ 105.407569][ T5855] usb 40-1: SetAddress Request (2) to port 0 [ 105.409825][ T5855] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 105.423073][ T6972] syz.0.361 (6972): drop_caches: 2 [ 105.504675][ T6956] orangefs_mount: mount request failed with -4 [ 105.544920][ T6975] netlink: 'syz.0.362': attribute type 24 has an invalid length. [ 105.623856][ T6981] tmpfs: Unknown parameter 'grpquotas/usb/drivers/usbip-host/match_busid' [ 105.722282][ T6965] vhci_hcd: connection reset by peer [ 105.731758][ T5826] vhci_hcd vhci_hcd.1: stop threads [ 105.733977][ T5826] vhci_hcd vhci_hcd.1: release socket [ 105.736292][ T5826] vhci_hcd vhci_hcd.1: disconnect device [ 106.458165][ T6997] 9p: Bad value for 'wfdno' [ 106.495537][ T6999] binder: 6998:6999 ioctl c00c6211 0 returned -14 [ 106.538712][ T7001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.371'. [ 106.554135][ T7001] team0 (unregistering): Port device team_slave_0 removed [ 106.561416][ T7001] team0 (unregistering): Port device team_slave_1 removed [ 106.663905][ T7001] warning: `syz.2.371' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.681543][ T7001] netlink: 'syz.2.371': attribute type 1 has an invalid length. [ 106.686251][ T7001] netlink: 'syz.2.371': attribute type 2 has an invalid length. [ 109.895932][ T7017] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.435058][ T7027] 9p: Bad value for 'wfdno' [ 110.467863][ T5855] usb 40-1: device descriptor read/8, error -110 [ 110.592694][ T7038] netlink: 27 bytes leftover after parsing attributes in process `syz.2.382'. [ 110.624824][ T7038] /dev/sr0: Can't open blockdev [ 110.678735][ T7038] usb usb9: usbfs: process 7038 (syz.2.382) did not claim interface 0 before use [ 110.688063][ T7038] netlink: 'syz.2.382': attribute type 1 has an invalid length. [ 110.693894][ T7038] netlink: 224 bytes leftover after parsing attributes in process `syz.2.382'. [ 110.766237][ T7041] XFS (nbd2): SB validate failed with error -5. [ 110.858482][ T5855] usb usb40-port1: attempt power cycle [ 110.860000][ T7049] input: syz0 as /devices/virtual/input/input11 [ 110.919179][ T7051] input: syz0 as /devices/virtual/input/input12 [ 110.960895][ T7053] input: syz0 as /devices/virtual/input/input13 [ 111.417994][ T5855] usb usb40-port1: unable to enumerate USB device [ 113.574054][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 115.095931][ T7099] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 115.098120][ T7099] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 115.101232][ T7099] vhci_hcd vhci_hcd.0: Device attached [ 115.227078][ T7100] vhci_hcd: connection closed [ 115.228620][ T5826] vhci_hcd vhci_hcd.2: stop threads [ 115.232955][ T5826] vhci_hcd vhci_hcd.2: release socket [ 115.235776][ T5826] vhci_hcd vhci_hcd.2: disconnect device [ 115.792127][ T7104] input: syz0 as /devices/virtual/input/input14 [ 115.872631][ T7107] XFS (nbd0): SB validate failed with error -5. [ 116.012601][ T7116] veth0_macvtap: left promiscuous mode [ 116.077142][ T7116] ŽÂ: renamed from macvtap0 [ 116.963801][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'. [ 117.262758][ T7137] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 117.264849][ T7137] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 117.267626][ T7137] vhci_hcd vhci_hcd.0: Device attached [ 117.275925][ T7139] vhci_hcd: connection closed [ 117.276247][ T5826] vhci_hcd vhci_hcd.2: stop threads [ 117.280542][ T5826] vhci_hcd vhci_hcd.2: release socket [ 117.282767][ T5826] vhci_hcd vhci_hcd.2: disconnect device [ 117.957771][ T7144] input: syz0 as /devices/virtual/input/input15 [ 119.112984][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.119053][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.122457][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.125418][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.128462][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.504092][ T7150] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.507766][ T7150] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.510993][ T7150] bridge_slave_0: entered allmulticast mode [ 119.514416][ T7150] bridge_slave_0: entered promiscuous mode [ 119.541206][ T7150] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.544395][ T7150] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.547284][ T7150] bridge_slave_1: entered allmulticast mode [ 119.551067][ T7150] bridge_slave_1: entered promiscuous mode [ 119.582854][ T7150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.593024][ T7150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.626601][ T7150] team0: Port device team_slave_0 added [ 119.630664][ T7150] team0: Port device team_slave_1 added [ 119.648049][ T7150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.650519][ T7150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.659137][ T7150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.664308][ T7150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.666836][ T7150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.675590][ T7150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.695755][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'. [ 119.701689][ T7150] hsr_slave_0: entered promiscuous mode [ 119.704128][ T7150] hsr_slave_1: entered promiscuous mode [ 119.707020][ T7150] debugfs: 'hsr0' already exists in 'hsr' [ 119.708962][ T7150] Cannot create hsr debugfs directory [ 119.998283][ T7177] binder: 7176:7177 ioctl c00c6211 0 returned -14 [ 120.044192][ T7150] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.172751][ T7150] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.187335][ T7150] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.398593][ T7150] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.453074][ T7150] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.458750][ T7150] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.461444][ T7150] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.467608][ T7150] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.513293][ T7150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.526349][ T7150] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.542144][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.544502][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.572766][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.575221][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.673046][ T7191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.414'. [ 120.684527][ T7191] team0 (unregistering): Port device team_slave_0 removed [ 120.690208][ T7191] team0 (unregistering): Port device team_slave_1 removed [ 120.791438][ T7191] netlink: 'syz.0.414': attribute type 1 has an invalid length. [ 120.793973][ T7191] netlink: 'syz.0.414': attribute type 2 has an invalid length. [ 121.009765][ T7199] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 121.011859][ T7199] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 121.015230][ T7199] vhci_hcd vhci_hcd.0: Device attached [ 121.028242][ T7202] vhci_hcd: connection closed [ 121.028378][ T5826] vhci_hcd vhci_hcd.1: stop threads [ 121.031724][ T5826] vhci_hcd vhci_hcd.1: release socket [ 121.033423][ T5826] vhci_hcd vhci_hcd.1: disconnect device [ 121.038690][ T7150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.181160][ T7150] veth0_vlan: entered promiscuous mode [ 121.186602][ T64] Bluetooth: hci4: command tx timeout [ 121.190283][ T7150] veth1_vlan: entered promiscuous mode [ 121.206063][ T7150] veth0_macvtap: entered promiscuous mode [ 121.211336][ T7150] veth1_macvtap: entered promiscuous mode [ 121.221734][ T7150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.227591][ T7150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.238895][ T5799] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.241825][ T5799] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.245002][ T5799] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.249593][ T5799] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.306956][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.312735][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.325884][ T637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.330915][ T637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.447946][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 121.633020][ T7231] netlink: 20 bytes leftover after parsing attributes in process `syz.0.421'. [ 121.637081][ T7231] netlink: 20 bytes leftover after parsing attributes in process `syz.0.421'. [ 121.641618][ T7231] netlink: 20 bytes leftover after parsing attributes in process `syz.0.421'. [ 121.646411][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 121.687027][ T7235] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 121.692638][ T7233] IPVS: stopping master sync thread 7235 ... [ 121.698781][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 121.736548][ T29] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 121.858974][ T7239] netlink: 20 bytes leftover after parsing attributes in process `syz.1.423'. [ 121.896539][ T29] usb 9-1: Using ep0 maxpacket: 8 [ 121.901040][ T29] usb 9-1: config 0 has no interfaces? [ 121.903720][ T29] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 121.907051][ T29] usb 9-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 121.909686][ T29] usb 9-1: Product: syz [ 121.919365][ T29] usb 9-1: config 0 descriptor?? [ 122.414501][ T847] usb 9-1: USB disconnect, device number 2 [ 122.465706][ T7245] Bluetooth: MGMT ver 1.23 [ 122.830745][ T7250] binder: 7249:7250 ioctl c00c6211 0 returned -14 [ 122.889903][ T7253] __nla_validate_parse: 3 callbacks suppressed [ 122.889916][ T7253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.428'. [ 123.027301][ T7253] netlink: 'syz.0.428': attribute type 1 has an invalid length. [ 123.029982][ T7253] netlink: 'syz.0.428': attribute type 2 has an invalid length. [ 123.240333][ T7264] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 123.246192][ T7262] IPVS: stopping master sync thread 7264 ... [ 123.269045][ T64] Bluetooth: hci4: command tx timeout [ 123.278699][ T7258] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 123.281127][ T7258] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 123.283786][ T7258] vhci_hcd vhci_hcd.0: Device attached [ 123.382431][ T7265] vhci_hcd: connection closed [ 123.382827][ T12] vhci_hcd vhci_hcd.4: stop threads [ 123.390833][ T12] vhci_hcd vhci_hcd.4: release socket [ 123.397902][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 123.806663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 123.863775][ T7278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.435'. [ 123.997242][ T7279] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 123.999328][ T7279] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 124.008279][ T7279] vhci_hcd vhci_hcd.0: Device attached [ 124.276587][ T29] usb 42-1: SetAddress Request (2) to port 0 [ 124.278613][ T29] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 124.426824][ T7288] netlink: 20 bytes leftover after parsing attributes in process `syz.4.437'. [ 124.651691][ T7280] vhci_hcd: connection reset by peer [ 124.658734][ T12] vhci_hcd vhci_hcd.2: stop threads [ 124.661416][ T12] vhci_hcd vhci_hcd.2: release socket [ 124.665272][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 124.877547][ T7298] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 124.878318][ T7296] IPVS: stopping master sync thread 7298 ... [ 124.940170][ T7300] binder: 7299:7300 ioctl c00c6211 0 returned -14 [ 125.325543][ T7305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.443'. [ 125.339364][ T7305] team0 (unregistering): Port device team_slave_0 removed [ 125.347204][ T64] Bluetooth: hci4: command tx timeout [ 125.348967][ T7305] team0 (unregistering): Port device team_slave_1 removed [ 125.468550][ T7305] netlink: 'syz.4.443': attribute type 1 has an invalid length. [ 125.471876][ T7305] netlink: 'syz.4.443': attribute type 2 has an invalid length. [ 126.529041][ T7314] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 126.531128][ T7314] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 126.533682][ T7314] vhci_hcd vhci_hcd.0: Device attached [ 126.539889][ T7320] vhci_hcd: connection closed [ 126.540220][ T5799] vhci_hcd vhci_hcd.4: stop threads [ 126.546581][ T5799] vhci_hcd vhci_hcd.4: release socket [ 126.548435][ T5799] vhci_hcd vhci_hcd.4: disconnect device [ 126.568332][ T7322] netlink: 20 bytes leftover after parsing attributes in process `syz.2.447'. [ 126.732392][ T7328] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 126.737684][ T7326] IPVS: stopping master sync thread 7328 ... [ 126.878565][ T7332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.450'. [ 126.882207][ T7332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.450'. [ 127.275730][ T7338] binder: 7337:7338 ioctl c00c6211 0 returned -14 [ 127.426567][ T64] Bluetooth: hci4: command tx timeout [ 127.435921][ T7341] netlink: 20 bytes leftover after parsing attributes in process `syz.2.454'. [ 127.510468][ T7342] netlink: 'syz.2.454': attribute type 1 has an invalid length. [ 127.513075][ T7342] netlink: 'syz.2.454': attribute type 2 has an invalid length. [ 127.682531][ T7344] netlink: 'syz.0.455': attribute type 1 has an invalid length. [ 127.756422][ T64] Bluetooth: hci0: unexpected event for opcode 0x202d [ 128.052557][ T7356] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 128.058580][ T7354] IPVS: stopping master sync thread 7356 ... [ 128.061019][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.458'. [ 128.369057][ T7358] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 128.371123][ T7358] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 128.373646][ T7358] vhci_hcd vhci_hcd.0: Device attached [ 128.379971][ T7362] vhci_hcd: connection closed [ 128.380170][ T5799] vhci_hcd vhci_hcd.1: stop threads [ 128.385179][ T5799] vhci_hcd vhci_hcd.1: release socket [ 128.386997][ T5799] vhci_hcd vhci_hcd.1: disconnect device [ 128.573977][ T7370] ntfs3(nullb0): Primary boot signature is not NTFS. [ 128.583047][ T7370] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 128.840953][ T7384] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 128.844873][ T7382] IPVS: stopping master sync thread 7384 ... [ 128.848391][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'. [ 128.900320][ T7388] binder: 7387:7388 ioctl c00c6211 0 returned -14 [ 128.932132][ T7390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.470'. [ 129.000996][ T7391] netlink: 'syz.0.470': attribute type 1 has an invalid length. [ 129.004380][ T7391] netlink: 'syz.0.470': attribute type 2 has an invalid length. [ 129.346739][ T29] usb 42-1: device descriptor read/8, error -110 [ 129.536820][ T7397] binder: 7396:7397 unknown command 1078485781 [ 129.538809][ T7397] binder: 7396:7397 ioctl c0306201 80000300 returned -22 [ 129.770275][ T29] usb usb42-port1: attempt power cycle [ 129.880599][ T7402] syzkaller0: entered promiscuous mode [ 129.882515][ T7402] syzkaller0: entered allmulticast mode [ 130.362216][ T29] usb usb42-port1: unable to enumerate USB device [ 130.819118][ T7408] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 130.821302][ T7409] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 131.076576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 131.161799][ T7418] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 131.163928][ T7418] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 131.166528][ T7418] vhci_hcd vhci_hcd.0: Device attached [ 131.173960][ T7422] vhci_hcd: connection closed [ 131.174246][ T5799] vhci_hcd vhci_hcd.4: stop threads [ 131.177983][ T5799] vhci_hcd vhci_hcd.4: release socket [ 131.183314][ T5799] vhci_hcd vhci_hcd.4: disconnect device [ 131.227605][ T7425] binder: 7424:7425 ioctl c00c6211 0 returned -14 [ 131.308230][ T7429] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 131.313338][ T7427] IPVS: stopping master sync thread 7429 ... [ 131.316383][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 131.669256][ T7438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.484'. [ 131.755638][ T7440] netlink: 'syz.2.484': attribute type 1 has an invalid length. [ 131.758229][ T7440] netlink: 'syz.2.484': attribute type 2 has an invalid length. [ 132.324133][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.506539][ T41] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 132.657979][ T41] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.664874][ T41] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 132.670833][ T41] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 132.675418][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.682827][ T41] usb 9-1: config 0 descriptor?? [ 132.887888][ T41] usb 9-1: USB disconnect, device number 3 [ 133.326623][ T41] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 133.476538][ T41] usb 9-1: Using ep0 maxpacket: 32 [ 133.480382][ T41] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.483595][ T41] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 133.486280][ T41] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 133.489164][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.493275][ T41] usb 9-1: config 0 descriptor?? [ 133.698367][ T10] usb 9-1: USB disconnect, device number 4 [ 134.476584][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 134.557171][ T7452] netlink: 20 bytes leftover after parsing attributes in process `syz.1.489'. [ 134.562664][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 134.629231][ T10] usb 9-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 134.632330][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.639426][ T10] emi26 - firmware loader 9-1:1.0: emi26_probe start [ 134.843652][ T60] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 134.847400][ T60] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 134.850032][ T60] CPU: 2 UID: 0 PID: 60 Comm: kworker/2:1 Not tainted syzkaller #0 PREEMPT(full) [ 134.853100][ T60] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.856315][ T60] Workqueue: usb_hub_wq hub_event [ 134.857924][ T60] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 134.860137][ T60] Code: 48 89 04 24 e8 f3 79 b7 00 4c 39 24 24 0f 82 94 00 00 00 e8 e4 79 b7 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 134.866440][ T60] RSP: 0000:ffffc900007beec8 EFLAGS: 00010202 [ 134.868347][ T60] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81523207 [ 134.870947][ T60] RDX: ffff8880219ea540 RSI: 0000000000000004 RDI: 0000000000000004 [ 134.873542][ T60] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 134.876172][ T60] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 134.878683][ T60] R13: ffff88806d8a50c0 R14: ffffc900007befe8 R15: dffffc0000000000 [ 134.881344][ T60] FS: 0000000000000000(0000) GS:ffff888096de3000(0000) knlGS:0000000000000000 [ 134.884104][ T60] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.886509][ T60] CR2: 00000000800f3018 CR3: 000000006fd85000 CR4: 0000000000352ef0 [ 134.888999][ T60] Call Trace: [ 134.890079][ T60] [ 134.891194][ T60] ? __pfx_request_ihex_firmware.constprop.0+0x10/0x10 [ 134.893300][ T60] ? emi26_probe+0x114/0xe30 [ 134.894692][ T60] emi26_probe+0x13c/0xe30 [ 134.896037][ T60] ? _raw_spin_lock_irqsave+0x52/0x60 [ 134.897681][ T60] ? find_held_lock+0x2b/0x80 [ 134.899167][ T60] ? __pfx_emi26_probe+0x10/0x10 [ 134.900827][ T60] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 134.902745][ T60] ? lockdep_hardirqs_on+0x78/0x100 [ 134.904401][ T60] ? __pm_runtime_set_status+0x13c/0x970 [ 134.906187][ T60] usb_probe_interface+0x303/0x8f0 [ 134.907827][ T60] ? __pfx_usb_probe_interface+0x10/0x10 [ 134.909614][ T60] really_probe+0x241/0xa60 [ 134.911284][ T60] __driver_probe_device+0x20e/0x450 [ 134.913073][ T60] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.914876][ T60] driver_probe_device+0x4a/0x140 [ 134.916472][ T60] __device_attach_driver+0x1df/0x320 [ 134.918172][ T60] ? __pfx___device_attach_driver+0x10/0x10 [ 134.920032][ T60] bus_for_each_drv+0x159/0x1e0 [ 134.921674][ T60] ? __pfx_bus_for_each_drv+0x10/0x10 [ 134.923390][ T60] ? lockdep_hardirqs_on+0x78/0x100 [ 134.924967][ T60] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 134.926782][ T60] __device_attach+0x1e4/0x4d0 [ 134.928254][ T60] ? __pfx___device_attach+0x10/0x10 [ 134.929899][ T60] ? do_raw_spin_unlock+0x145/0x1e0 [ 134.931534][ T60] device_initial_probe+0xaf/0xd0 [ 134.933140][ T60] bus_probe_device+0x64/0x160 [ 134.934574][ T60] device_add+0x121d/0x1970 [ 134.935958][ T60] ? __pfx_device_add+0x10/0x10 [ 134.937444][ T60] ? mark_held_locks+0x40/0x70 [ 134.938893][ T60] usb_set_configuration+0xd97/0x1c60 [ 134.940576][ T60] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 134.942760][ T60] usb_generic_driver_probe+0xa1/0xe0 [ 134.944369][ T60] usb_probe_device+0xef/0x400 [ 134.945823][ T60] ? __pfx_usb_probe_device+0x10/0x10 [ 134.947408][ T60] really_probe+0x241/0xa60 [ 134.948787][ T60] __driver_probe_device+0x20e/0x450 [ 134.950420][ T60] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.952330][ T60] driver_probe_device+0x4a/0x140 [ 134.953864][ T60] __device_attach_driver+0x1df/0x320 [ 134.955529][ T60] ? __pfx___device_attach_driver+0x10/0x10 [ 134.957384][ T60] bus_for_each_drv+0x159/0x1e0 [ 134.958927][ T60] ? __pfx_bus_for_each_drv+0x10/0x10 [ 134.960704][ T60] ? lockdep_hardirqs_on+0x78/0x100 [ 134.962551][ T60] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 134.964374][ T60] __device_attach+0x1e4/0x4d0 [ 134.965901][ T60] ? __pfx___device_attach+0x10/0x10 [ 134.967573][ T60] ? do_raw_spin_unlock+0x145/0x1e0 [ 134.969203][ T60] device_initial_probe+0xaf/0xd0 [ 134.970941][ T60] bus_probe_device+0x64/0x160 [ 134.972650][ T60] device_add+0x121d/0x1970 [ 134.974103][ T60] ? __pfx_device_add+0x10/0x10 [ 134.975640][ T60] ? usb_detect_static_quirks+0x335/0x3e0 [ 134.977398][ T60] usb_new_device.cold+0x685/0x115c [ 134.978837][ T60] ? _mutex_trylock_nest_lock+0x241/0x310 [ 134.980420][ T60] ? do_raw_spin_lock+0x128/0x260 [ 134.982130][ T60] ? __pfx_usb_new_device+0x10/0x10 [ 134.983773][ T60] ? mark_held_locks+0x40/0x70 [ 134.985280][ T60] hub_event+0x30a3/0x4a60 [ 134.986716][ T60] ? __pfx_hub_event+0x10/0x10 [ 134.988334][ T60] ? debug_object_deactivate+0x2e4/0x3b0 [ 134.990199][ T60] ? rcu_is_watching+0x12/0xc0 [ 134.991783][ T60] process_one_work+0xa23/0x1940 [ 134.993356][ T60] ? __pfx_process_one_work+0x10/0x10 [ 134.995037][ T60] ? __pfx_hub_event+0x10/0x10 [ 134.996553][ T60] worker_thread+0x5ef/0xe50 [ 134.998034][ T60] ? __pfx_worker_thread+0x10/0x10 [ 134.999653][ T60] ? kthread+0x13a/0x450 [ 135.001062][ T60] ? __pfx_worker_thread+0x10/0x10 [ 135.002676][ T60] kthread+0x370/0x450 [ 135.003969][ T60] ? __pfx_kthread+0x10/0x10 [ 135.005421][ T60] ret_from_fork+0x72b/0xd50 [ 135.006850][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 135.008471][ T60] ? __switch_to+0x800/0x10f0 [ 135.009969][ T60] ? __pfx_kthread+0x10/0x10 [ 135.011499][ T60] ret_from_fork_asm+0x1a/0x30 [ 135.013047][ T60] [ 135.014024][ T60] Modules linked in: [ 135.015255][ T5833] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#2] SMP KASAN NOPTI [ 135.016221][ C2] hpet: Lost 10 RTC interrupts [ 135.019880][ T5833] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 135.022495][ T60] ---[ end trace 0000000000000000 ]--- [ 135.024856][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: kworker/1:4 Tainted: G D syzkaller #0 PREEMPT(full) [ 135.024879][ T5833] Tainted: [D]=DIE [ 135.024885][ T5833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.024897][ T5833] Workqueue: usb_hub_wq hub_event [ 135.024923][ T5833] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 135.024947][ T5833] Code: 48 89 04 24 e8 f3 79 b7 00 4c 39 24 24 0f 82 94 00 00 00 e8 e4 79 b7 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 135.024963][ T5833] RSP: 0018:ffffc90004e76ec8 EFLAGS: 00010202 [ 135.024977][ T5833] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81523207 [ 135.024988][ T5833] RDX: ffff8880249e2540 RSI: 0000000000000004 RDI: 0000000000000004 [ 135.024998][ T5833] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 135.025006][ T5833] R10: 0000000000000000 R11: ffffffff81d5692c R12: 0000000000000000 [ 135.025013][ T5833] R13: ffff88802a5ab640 R14: ffffc90004e76fe8 R15: dffffc0000000000 [ 135.025020][ T5833] FS: 0000000000000000(0000) GS:ffff888096ce3000(0000) knlGS:0000000000000000 [ 135.025042][ T5833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.025051][ T5833] CR2: 000000000c31e0b3 CR3: 00000000696be000 CR4: 0000000000352ef0 [ 135.025058][ T5833] Call Trace: [ 135.025063][ T5833] [ 135.025071][ T5833] ? __pfx_request_ihex_firmware.constprop.0+0x10/0x10 [ 135.025092][ T5833] ? emi26_probe+0x114/0xe30 [ 135.025112][ T5833] emi26_probe+0x13c/0xe30 [ 135.025130][ T5833] ? _raw_spin_lock_irqsave+0x52/0x60 [ 135.025145][ T5833] ? find_held_lock+0x2b/0x80 [ 135.025158][ T5833] ? __pfx_emi26_probe+0x10/0x10 [ 135.025172][ T5833] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 135.025188][ T5833] ? lockdep_hardirqs_on+0x78/0x100 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 135.025208][ T5833] ? __pm_runtime_set_status+0x13c/0x970 [ 135.025233][ T5833] usb_probe_interface+0x303/0x8f0 [ 135.025256][ T5833] ? __pfx_usb_probe_interface+0x10/0x10 [ 135.025280][ T5833] really_probe+0x241/0xa60 [ 135.025303][ T5833] __driver_probe_device+0x20e/0x450 [ 135.025324][ T5833] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 135.025347][ T5833] driver_probe_device+0x4a/0x140 [ 135.025368][ T5833] __device_attach_driver+0x1df/0x320 [ 135.025388][ T5833] ? __pfx___device_attach_driver+0x10/0x10 [ 135.025409][ T5833] bus_for_each_drv+0x159/0x1e0 [ 135.025427][ T5833] ? __pfx_bus_for_each_drv+0x10/0x10 [ 135.025468][ T5833] ? lockdep_hardirqs_on+0x78/0x100 [ 135.025480][ T5833] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 135.025492][ T5833] __device_attach+0x1e4/0x4d0 [ 135.025508][ T5833] ? __pfx___device_attach+0x10/0x10 [ 135.025529][ T5833] ? do_raw_spin_unlock+0x145/0x1e0 [ 135.025548][ T5833] device_initial_probe+0xaf/0xd0 [ 135.025570][ T5833] bus_probe_device+0x64/0x160 [ 135.025587][ T5833] device_add+0x121d/0x1970 [ 135.025616][ T5833] ? __pfx_device_add+0x10/0x10 [ 135.025640][ T5833] ? mark_held_locks+0x40/0x70 [ 135.025761][ T5833] usb_set_configuration+0xd97/0x1c60 [ 135.025781][ T5833] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 135.025793][ T5833] usb_generic_driver_probe+0xa1/0xe0 [ 135.025807][ T5833] usb_probe_device+0xef/0x400 [ 135.025827][ T5833] ? __pfx_usb_probe_device+0x10/0x10 [ 135.025850][ T5833] really_probe+0x241/0xa60 [ 135.025871][ T5833] __driver_probe_device+0x20e/0x450 [ 135.025889][ T5833] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 135.025904][ T5833] driver_probe_device+0x4a/0x140 [ 135.025919][ T5833] __device_attach_driver+0x1df/0x320 [ 135.025941][ T5833] ? __pfx___device_attach_driver+0x10/0x10 [ 135.025963][ T5833] bus_for_each_drv+0x159/0x1e0 [ 135.025980][ T5833] ? __pfx_bus_for_each_drv+0x10/0x10 [ 135.025995][ T5833] ? lockdep_hardirqs_on+0x78/0x100 [ 135.026006][ T5833] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 135.026018][ T5833] __device_attach+0x1e4/0x4d0 [ 135.026032][ T5833] ? __pfx___device_attach+0x10/0x10 [ 135.026050][ T5833] ? do_raw_spin_unlock+0x145/0x1e0 [ 135.026068][ T5833] device_initial_probe+0xaf/0xd0 [ 135.026090][ T5833] bus_probe_device+0x64/0x160 [ 135.026110][ T5833] device_add+0x121d/0x1970 [ 135.026130][ T5833] ? __pfx_device_add+0x10/0x10 [ 135.026153][ T5833] ? usb_detect_static_quirks+0x335/0x3e0 [ 135.026175][ T5833] usb_new_device.cold+0x685/0x115c [ 135.184509][ T5833] ? _mutex_trylock_nest_lock+0x241/0x310 [ 135.186681][ T5833] ? do_raw_spin_lock+0x128/0x260 [ 135.188708][ T5833] ? __pfx_usb_new_device+0x10/0x10 [ 135.190684][ T5833] ? mark_held_locks+0x40/0x70 [ 135.192614][ T5833] hub_event+0x30a3/0x4a60 [ 135.194351][ T5833] ? __pfx_hub_event+0x10/0x10 [ 135.196161][ T5833] ? debug_object_deactivate+0x2e4/0x3b0 [ 135.198381][ T5833] ? rcu_is_watching+0x12/0xc0 [ 135.200180][ T5833] process_one_work+0xa23/0x1940 [ 135.202326][ T5833] ? __pfx_process_one_work+0x10/0x10 [ 135.204474][ T5833] ? __pfx_hub_event+0x10/0x10 [ 135.206495][ T5833] worker_thread+0x5ef/0xe50 [ 135.208272][ T5833] ? __pfx_worker_thread+0x10/0x10 [ 135.210351][ T5833] ? kthread+0x13a/0x450 [ 135.212136][ T5833] ? __pfx_worker_thread+0x10/0x10 [ 135.214237][ T5833] kthread+0x370/0x450 [ 135.215902][ T5833] ? __pfx_kthread+0x10/0x10 [ 135.217816][ T5833] ret_from_fork+0x72b/0xd50 [ 135.219681][ T5833] ? __pfx_ret_from_fork+0x10/0x10 [ 135.221981][ T5833] ? __switch_to+0x800/0x10f0 [ 135.223845][ T5833] ? __pfx_kthread+0x10/0x10 [ 135.225799][ T5833] ret_from_fork_asm+0x1a/0x30 [ 135.227677][ T5833] [ 135.228945][ T5833] Modules linked in: [ 135.230490][ T10] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#3] SMP KASAN NOPTI [ 135.231460][ T5833] ---[ end trace 0000000000000000 ]--- [ 135.234906][ T10] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 135.234928][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G D syzkaller #0 PREEMPT(full) [ 135.234952][ T10] Tainted: [D]=DIE [ 135.234957][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.234971][ T10] Workqueue: usb_hub_wq hub_event [ 135.234997][ T10] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 135.235022][ T10] Code: 48 89 04 24 e8 f3 79 b7 00 4c 39 24 24 0f 82 94 00 00 00 e8 e4 79 b7 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 135.235038][ T10] RSP: 0018:ffffc900001c6ec8 EFLAGS: 00010202 [ 135.235052][ T10] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81523207 [ 135.235063][ T10] RDX: ffff88801c712540 RSI: 0000000000000004 RDI: 0000000000000004 [ 135.235074][ T10] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 135.235084][ T10] R10: 0000000000000000 R11: ffffffff81d5692c R12: 0000000000000000 [ 135.235094][ T10] R13: ffff888029b84540 R14: ffffc900001c6fe8 R15: dffffc0000000000 [ 135.235106][ T10] FS: 0000000000000000(0000) GS:ffff888096be3000(0000) knlGS:0000000000000000 [ 135.235138][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.235152][ T10] CR2: 0000000033f12ff8 CR3: 000000006fd8b000 CR4: 0000000000352ef0 [ 135.235163][ T10] Call Trace: [ 135.235170][ T10] [ 135.235178][ T10] ? __pfx_request_ihex_firmware.constprop.0+0x10/0x10 [ 135.235202][ T10] ? emi26_probe+0x114/0xe30 [ 135.235223][ T10] emi26_probe+0x13c/0xe30 [ 135.235243][ T10] ? _raw_spin_lock_irqsave+0x52/0x60 [ 135.235260][ T10] ? find_held_lock+0x2b/0x80 [ 135.235280][ T10] ? __pfx_emi26_probe+0x10/0x10 [ 135.235298][ T10] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 135.235316][ T10] ? lockdep_hardirqs_on+0x78/0x100 [ 135.235336][ T10] ? __pm_runtime_set_status+0x13c/0x970 [ 135.235362][ T10] usb_probe_interface+0x303/0x8f0 [ 135.237860][ T3270] usb 6-1: emi26_load_firmware - request_firmware() failed [ 135.240193][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 135.240224][ T10] really_probe+0x241/0xa60 [ 135.244533][ T3270] usb 6-1: emi26_load_firmware - error loading firmware: error = -12 [ 135.245634][ T10] __driver_probe_device+0x20e/0x450 [ 135.249642][ T3270] emi26 - firmware loader 6-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 135.251572][ T10] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 135.259652][ T3270] usb 6-1: USB disconnect, device number 9 [ 135.260213][ T10] driver_probe_device+0x4a/0x140 [ 135.267720][ T5833] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 135.268086][ T10] __device_attach_driver+0x1df/0x320 [ 135.271256][ T5833] Code: 48 89 04 24 e8 f3 79 b7 00 4c 39 24 24 0f 82 94 00 00 00 e8 e4 79 b7 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 135.273631][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 135.277313][ T5833] RSP: 0000:ffffc900007beec8 EFLAGS: 00010202 [ 135.279498][ T10] bus_for_each_drv+0x159/0x1e0 [ 135.279514][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 135.279526][ T10] ? lockdep_hardirqs_on+0x78/0x100 [ 135.282157][ T5833] [ 135.284967][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 135.286291][ T5833] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81523207 [ 135.287423][ T10] __device_attach+0x1e4/0x4d0 [ 135.287452][ T10] ? __pfx___device_attach+0x10/0x10 [ 135.287475][ T10] ? do_raw_spin_unlock+0x145/0x1e0 [ 135.290227][ T5833] RDX: ffff8880219ea540 RSI: 0000000000000004 RDI: 0000000000000004 [ 135.292018][ T10] device_initial_probe+0xaf/0xd0 [ 135.293811][ T5833] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 135.295909][ T10] bus_probe_device+0x64/0x160 [ 135.297412][ T5833] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 135.299389][ T10] device_add+0x121d/0x1970 [ 135.301250][ T5833] R13: ffff88806d8a50c0 R14: ffffc900007befe8 R15: dffffc0000000000 [ 135.302805][ T10] ? __pfx_device_add+0x10/0x10 [ 135.304641][ T5833] FS: 0000000000000000(0000) GS:ffff888096ce3000(0000) knlGS:0000000000000000 [ 135.306225][ T10] ? mark_held_locks+0x40/0x70 [ 135.308659][ T5833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.310228][ T10] usb_set_configuration+0xd97/0x1c60 [ 135.311746][ T5833] CR2: 000000000c31e0b3 CR3: 00000000670a3000 CR4: 0000000000352ef0 [ 135.314231][ T10] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 135.314249][ T10] usb_generic_driver_probe+0xa1/0xe0 [ 135.315916][ T5833] Kernel panic - not syncing: Fatal exception [ 135.384840][ T5833] Kernel Offset: disabled [ 135.386157][ T5833] Rebooting in 86400 seconds..