last executing test programs: 12.977416996s ago: executing program 4 (id=1081): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182395"], 0x0}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000500)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 11.005758963s ago: executing program 4 (id=1086): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='usbip-vudc.0\n', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='3', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)='-1', 0x2) 10.824339669s ago: executing program 4 (id=1088): socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESOCT=r0], 0x44}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 10.806672012s ago: executing program 2 (id=1089): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0}}], 0x1, 0x80) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 9.341206902s ago: executing program 4 (id=1093): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x1dcd6500}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='\x00\x00\x00\x00\x00\x00', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) 7.982304389s ago: executing program 2 (id=1096): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182395"], 0x0}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000500)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6.64811457s ago: executing program 0 (id=1101): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, 0x0, 0x0) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) 6.504335966s ago: executing program 0 (id=1102): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000800)={"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xffffffffffffffff, 0xfff], 0x200000, 0x1c6017}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 6.42353348s ago: executing program 0 (id=1103): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000008c0)=ANY=[], 0x0, 0x3f, 0x0, 0x0, 0xb}, 0x28) syz_open_dev$dvb_demux(0x0, 0x0, 0x41) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, 0x0) 6.303053581s ago: executing program 2 (id=1104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x18) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0xffffffffffffffff}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') read$FUSE(r2, &(0x7f0000004800)={0x2020}, 0x2020) 5.855830528s ago: executing program 1 (id=1107): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) kcmp(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x2, 'veth0_vlan\x00', {0x2}, 0xa}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) 4.867433317s ago: executing program 1 (id=1108): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000180), 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002680)=[{}, {{&(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000002500)=[{&(0x7f0000000280)="2c9bbc262b6f", 0x6}, {0x0}, {&(0x7f0000000400)="8a120be4448668ddf883e5d676f201a0457d35fc812532b7516d5953dba90dc165d16cc4d7b1527beee9acd6", 0x2c}, {&(0x7f0000000440)}, {&(0x7f0000000540)="31cbbc94dca7d34134c1e415423a9409c1528f52649086c59680d933340aeb2b2c91c9172f03f472a8825da6e1e5ea28afd40748236087cd284fd2e84299dd05f004fff3f9a0e85852fd2c807a6997b3238e94329ad45abfa6f9b503e8b5d08f5ae3a6968abd95b9a322f745", 0x6c}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="ba4831fc8335b03ac767e3341af1931c1e5f6c2036758649dcf8989ea6d8f084225742a4cbad6087ef82473c540a42bda358e5a8dc1145dc088632", 0x3b}], 0x7, &(0x7f0000002580)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffff8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @broadcast}}}], 0x88}}], 0x2, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x2}) 4.841321941s ago: executing program 3 (id=1109): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='usbip-vudc.0\n', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='3', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)='-1', 0x2) 4.028802651s ago: executing program 0 (id=1110): socket$can_raw(0x1d, 0x3, 0x1) dup(0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x8}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4126}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.86018234s ago: executing program 3 (id=1111): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 3.800887242s ago: executing program 2 (id=1112): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, 0x0, 0x0) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) 2.780725111s ago: executing program 0 (id=1113): socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESOCT=r0], 0x44}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2.670011132s ago: executing program 2 (id=1114): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182395"], 0x0}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000500)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.669384857s ago: executing program 4 (id=1115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) socket(0x400000000010, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f00000007c0)={0x8, {{0xa, 0x4e20, 0x2, @remote}}, {{0xa, 0x4e23, 0xc, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffffff9}}}, 0x108) 2.390840782s ago: executing program 1 (id=1116): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x8}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.208772968s ago: executing program 1 (id=1117): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x311000, 0x1000, 0x40000, 0x1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r3}, 0x38) 1.688607678s ago: executing program 3 (id=1118): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) kcmp(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x2, 'veth0_vlan\x00', {0x2}, 0xa}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) 984.252615ms ago: executing program 1 (id=1119): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0}}], 0x1, 0x80) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 928.850431ms ago: executing program 0 (id=1120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000008c0)=ANY=[], 0x0, 0x3f, 0x0, 0x0, 0xb}, 0x28) syz_open_dev$dvb_demux(0x0, 0x0, 0x41) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, 0x0) 659.674861ms ago: executing program 3 (id=1121): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='usbip-vudc.0\n', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='3\n', 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000640)='-1', 0x2) 623.509136ms ago: executing program 4 (id=1122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x18) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0xffffffffffffffff}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') read$FUSE(r2, &(0x7f0000004800)={0x2020}, 0x2020) 524.5797ms ago: executing program 2 (id=1123): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x1dcd6500}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='0\x00', 0x2) close(r2) 233.340557ms ago: executing program 3 (id=1124): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, 0x0, 0x0) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) 23.909545ms ago: executing program 3 (id=1125): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0}}], 0x1, 0x80) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb5", 0x89) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 0s ago: executing program 1 (id=1126): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x1dcd6500}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='\x00\x00\x00\x00\x00\x00', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 58.949708][ T5257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.974462][ T5257] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts. syzkaller login: [ 85.844847][ T5582] cgroup: Unknown subsys name 'net' [ 86.087362][ T5582] cgroup: Unknown subsys name 'cpuset' [ 86.140824][ T5582] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.924344][ T5582] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.349657][ T1839] cfg80211: failed to load regulatory.db [ 91.619154][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.673517][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.683046][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.684878][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.685725][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.686429][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.693178][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.695014][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.695241][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.697780][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.708291][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.722145][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.724699][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.736326][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.773023][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.773218][ T5605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.857824][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.863795][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.867985][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.870713][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.905351][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.912193][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.925687][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.944110][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.950418][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.771732][ T60] Bluetooth: hci1: command tx timeout [ 93.840143][ T60] Bluetooth: hci2: command tx timeout [ 93.840152][ T5607] Bluetooth: hci0: command tx timeout [ 93.920751][ T5607] Bluetooth: hci3: command tx timeout [ 94.000155][ T5607] Bluetooth: hci4: command tx timeout [ 94.304293][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.305225][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.305378][ T5602] bridge_slave_0: entered allmulticast mode [ 94.307781][ T5602] bridge_slave_0: entered promiscuous mode [ 94.365567][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.365635][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.365789][ T5602] bridge_slave_1: entered allmulticast mode [ 94.367870][ T5602] bridge_slave_1: entered promiscuous mode [ 94.499660][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.499798][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.499920][ T5600] bridge_slave_0: entered allmulticast mode [ 94.506527][ T5600] bridge_slave_0: entered promiscuous mode [ 94.547072][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.574064][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.574179][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.574359][ T5600] bridge_slave_1: entered allmulticast mode [ 94.575796][ T5600] bridge_slave_1: entered promiscuous mode [ 94.576660][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.576750][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.577035][ T5604] bridge_slave_0: entered allmulticast mode [ 94.578368][ T5604] bridge_slave_0: entered promiscuous mode [ 94.595528][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.654185][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.654279][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.654384][ T5604] bridge_slave_1: entered allmulticast mode [ 94.655747][ T5604] bridge_slave_1: entered promiscuous mode [ 94.674449][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.674562][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.674710][ T5601] bridge_slave_0: entered allmulticast mode [ 94.677383][ T5601] bridge_slave_0: entered promiscuous mode [ 94.787951][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.788143][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.788308][ T5601] bridge_slave_1: entered allmulticast mode [ 94.789921][ T5601] bridge_slave_1: entered promiscuous mode [ 94.798552][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.798665][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.798856][ T5613] bridge_slave_0: entered allmulticast mode [ 94.804649][ T5613] bridge_slave_0: entered promiscuous mode [ 94.818569][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.849896][ T5602] team0: Port device team_slave_0 added [ 94.870308][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.870402][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.870578][ T5613] bridge_slave_1: entered allmulticast mode [ 94.874111][ T5613] bridge_slave_1: entered promiscuous mode [ 94.877248][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.900632][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.907050][ T5602] team0: Port device team_slave_1 added [ 94.961557][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.980414][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.040734][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.044133][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.047117][ T5600] team0: Port device team_slave_0 added [ 95.075171][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.075188][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.075214][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.104383][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.124198][ T5600] team0: Port device team_slave_1 added [ 95.127727][ T5604] team0: Port device team_slave_0 added [ 95.129870][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.129884][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.129908][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.211770][ T5604] team0: Port device team_slave_1 added [ 95.231262][ T5601] team0: Port device team_slave_0 added [ 95.270979][ T5601] team0: Port device team_slave_1 added [ 95.272608][ T5613] team0: Port device team_slave_0 added [ 95.273415][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.273428][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.273451][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.317525][ T5613] team0: Port device team_slave_1 added [ 95.318422][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.318434][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.318460][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.352623][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.352638][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.352661][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.433467][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.433483][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.433506][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.434513][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.434522][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.434534][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.507310][ T5602] hsr_slave_0: entered promiscuous mode [ 95.508820][ T5602] hsr_slave_1: entered promiscuous mode [ 95.525425][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.525442][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.525465][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.527622][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.527637][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.527661][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.557305][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.557322][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.557347][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.682323][ T5600] hsr_slave_0: entered promiscuous mode [ 95.689192][ T5600] hsr_slave_1: entered promiscuous mode [ 95.691113][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 95.691231][ T5600] Cannot create hsr debugfs directory [ 95.754411][ T5604] hsr_slave_0: entered promiscuous mode [ 95.755444][ T5604] hsr_slave_1: entered promiscuous mode [ 95.755968][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 95.755987][ T5604] Cannot create hsr debugfs directory [ 95.840215][ T5607] Bluetooth: hci1: command tx timeout [ 95.920239][ T5607] Bluetooth: hci0: command tx timeout [ 95.920274][ T5607] Bluetooth: hci2: command tx timeout [ 96.000149][ T60] Bluetooth: hci3: command tx timeout [ 96.080365][ T60] Bluetooth: hci4: command tx timeout [ 96.277075][ T5601] hsr_slave_0: entered promiscuous mode [ 96.277832][ T5601] hsr_slave_1: entered promiscuous mode [ 96.278342][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 96.278358][ T5601] Cannot create hsr debugfs directory [ 96.326255][ T5613] hsr_slave_0: entered promiscuous mode [ 96.327221][ T5613] hsr_slave_1: entered promiscuous mode [ 96.328004][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 96.328024][ T5613] Cannot create hsr debugfs directory [ 97.047075][ T5602] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.103369][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.108874][ T5602] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.135566][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.148080][ T5602] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.176086][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.201302][ T5602] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.234399][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.364865][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.397632][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.403219][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.448670][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.457591][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.486722][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.518811][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.547588][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.676145][ T5601] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.715418][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.732325][ T5601] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.775170][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.779608][ T5601] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.824810][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.847242][ T5601] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.884642][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.921319][ T60] Bluetooth: hci1: command tx timeout [ 98.000152][ T60] Bluetooth: hci2: command tx timeout [ 98.000185][ T60] Bluetooth: hci0: command tx timeout [ 98.068273][ T5604] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.080359][ T60] Bluetooth: hci3: command tx timeout [ 98.105033][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.123348][ T5604] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.160470][ T60] Bluetooth: hci4: command tx timeout [ 98.179375][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.200587][ T5604] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.247154][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.281865][ T5604] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.326157][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.381691][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.468828][ T5600] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.504749][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.518780][ T5600] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.543245][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.562737][ T5600] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.584534][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.605570][ T5600] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.655375][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.677896][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.736593][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.736758][ T3328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.750962][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.795832][ T1924] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.795945][ T1924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.898136][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.929491][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.955831][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.955948][ T3328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.034614][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.034687][ T3328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.095573][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.178169][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.178293][ T3328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.266551][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.282053][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.282244][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.425264][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.493651][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.525398][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.525502][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.579068][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.579270][ T3328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.665192][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.769516][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.769591][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.884086][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.884286][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.010217][ T60] Bluetooth: hci1: command tx timeout [ 100.080099][ T60] Bluetooth: hci2: command tx timeout [ 100.091752][ T60] Bluetooth: hci0: command tx timeout [ 100.170623][ T60] Bluetooth: hci3: command tx timeout [ 100.240432][ T60] Bluetooth: hci4: command tx timeout [ 100.389078][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.889578][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.053372][ T5602] veth0_vlan: entered promiscuous mode [ 101.127713][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.188107][ T5602] veth1_vlan: entered promiscuous mode [ 101.356235][ T5613] veth0_vlan: entered promiscuous mode [ 101.416628][ T5613] veth1_vlan: entered promiscuous mode [ 101.449064][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.538312][ T5602] veth0_macvtap: entered promiscuous mode [ 101.610920][ T5602] veth1_macvtap: entered promiscuous mode [ 101.735155][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.737094][ T5613] veth0_macvtap: entered promiscuous mode [ 101.769600][ T5613] veth1_macvtap: entered promiscuous mode [ 101.779014][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.814007][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.843919][ T680] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.855838][ T680] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.878499][ T680] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.894785][ T680] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.902587][ T5604] veth0_vlan: entered promiscuous mode [ 101.937322][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.037558][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.039912][ T5601] veth0_vlan: entered promiscuous mode [ 102.058691][ T5604] veth1_vlan: entered promiscuous mode [ 102.135088][ T1029] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.153234][ T1029] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.212049][ T1029] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.253165][ T1029] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.256136][ T5601] veth1_vlan: entered promiscuous mode [ 102.686035][ T5600] veth0_vlan: entered promiscuous mode [ 102.737331][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.737356][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.864630][ T5604] veth0_macvtap: entered promiscuous mode [ 102.898127][ T5600] veth1_vlan: entered promiscuous mode [ 102.919649][ T5604] veth1_macvtap: entered promiscuous mode [ 102.949366][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.949387][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.000869][ T5601] veth0_macvtap: entered promiscuous mode [ 103.043660][ T5601] veth1_macvtap: entered promiscuous mode [ 103.058472][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.058491][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.116912][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.133594][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.133612][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.183545][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.253098][ T69] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.263731][ T69] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.272969][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.277549][ T69] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.278301][ T5600] veth0_macvtap: entered promiscuous mode [ 103.306890][ T1029] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.314239][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.345327][ T5600] veth1_macvtap: entered promiscuous mode [ 103.486451][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.488397][ T42] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.532502][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.559677][ T69] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.669360][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.988918][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.138645][ T1029] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.232060][ T1029] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.371052][ T1029] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.476163][ T1029] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.540799][ T3328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.540821][ T3328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.926790][ T3328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.926808][ T3328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.083240][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.083260][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.477322][ T680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.477341][ T680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.507836][ T5807] process 'syz.1.8' launched './file2' with NULL argv: empty string added [ 109.718644][ T3334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.719411][ T3334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.144227][ T3334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.144291][ T3334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.988090][ T5827] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.054304][ T36] audit: type=1800 audit(1785202978.025:2): pid=5823 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.13" name="start_block" dev="configfs" ino=8052 res=0 errno=0 [ 111.708096][ T5837] bridge0: port 3(syz_tun) entered blocking state [ 111.708221][ T5837] bridge0: port 3(syz_tun) entered disabled state [ 111.708471][ T5837] syz_tun: entered allmulticast mode [ 111.755665][ T5837] syz_tun: entered promiscuous mode [ 111.814054][ T5837] bridge0: port 3(syz_tun) entered blocking state [ 111.814197][ T5837] bridge0: port 3(syz_tun) entered forwarding state [ 111.846784][ T5838] bridge0: port 3(syz_tun) entered blocking state [ 111.847047][ T5838] bridge0: port 3(syz_tun) entered disabled state [ 111.848780][ T5838] syz_tun: entered allmulticast mode [ 111.962464][ T5838] syz_tun: entered promiscuous mode [ 111.981663][ T5838] bridge0: port 3(syz_tun) entered blocking state [ 111.981826][ T5838] bridge0: port 3(syz_tun) entered forwarding state [ 112.355626][ T5843] netlink: 'syz.1.15': attribute type 12 has an invalid length. [ 112.355648][ T5843] netlink: 'syz.1.15': attribute type 29 has an invalid length. [ 112.355736][ T5843] netlink: 148 bytes leftover after parsing attributes in process `syz.1.15'. [ 112.355917][ T5843] Zero length message leads to an empty skb [ 112.551175][ T5852] openvswitch: netlink: Message has 8 unknown bytes. [ 112.551216][ T5852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.690047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.710142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.720027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.730040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.740040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.750066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.760022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.770037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.780016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.790025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.061176][ T5871] 9p: Bad value for 'port' [ 117.303776][ T5883] 9pnet_fd: p9_fd_create_tcp (5883): problem connecting socket to 127.0.0.1 [ 119.652133][ T5886] syz.0.34 (5886) used greatest stack depth: 17832 bytes left [ 119.946752][ T5888] openvswitch: netlink: Message has 8 unknown bytes. [ 119.946785][ T5888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.172149][ T5909] gtp0: entered promiscuous mode [ 123.653752][ T5923] 9pnet_fd: p9_fd_create_tcp (5923): problem connecting socket to 127.0.0.1 [ 124.286249][ T5925] Bluetooth: MGMT ver 1.23 [ 124.931393][ T5931] 9pnet_fd: p9_fd_create_tcp (5931): problem connecting socket to 127.0.0.1 [ 127.376504][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.630218][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 127.704277][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.704321][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 127.704339][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.822072][ T5729] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 127.876333][ T9] usb 5-1: config 0 descriptor?? [ 127.979264][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 127.999002][ T5729] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 127.999032][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.168176][ T5729] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 128.417085][ T5729] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 128.417113][ T5729] usb 2-1: Falling back to sysfs fallback for: emi26/loader.fw [ 128.987932][ T5973] openvswitch: netlink: Message has 8 unknown bytes. [ 128.987965][ T5973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.544832][ T5714] usb 5-1: USB disconnect, device number 2 [ 130.106061][ T6001] zram0: detected capacity change from 0 to 24 [ 130.112654][ T6004] netlink: 'syz.0.68': attribute type 13 has an invalid length. [ 130.968737][ T6013] Config c/1 of g1 needs at least one function. [ 130.969209][ T6013] udc dummy_udc.0: failed to start g1: -22 [ 130.969232][ T6013] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 130.985644][ T6013] UDC core: g1: couldn't find an available UDC or it's busy [ 131.203276][ T822] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 131.209251][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.231394][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.390265][ T822] usb 4-1: Using ep0 maxpacket: 32 [ 131.396221][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.396247][ T822] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 131.396260][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.476466][ T822] usb 4-1: config 0 descriptor?? [ 131.518491][ T822] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 131.705490][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.723504][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.683097][ T42] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.697082][ T42] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.697132][ T42] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.697165][ T42] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.043656][ T5787] usb 4-1: USB disconnect, device number 2 [ 135.084820][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.084917][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.704874][ T822] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 138.457257][ T822] usb 4-1: Using ep0 maxpacket: 32 [ 138.729339][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.729371][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.729407][ T822] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 138.729428][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.852511][ T822] usb 4-1: config 0 descriptor?? [ 138.950252][ T5728] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 139.138551][ T5728] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 139.138589][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.303258][ T5728] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 139.332673][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 139.333090][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 139.333494][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 139.333650][ T822] usbhid 4-1:0.0: can't add hid device: -32 [ 139.333765][ T822] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 139.426621][ T822] usb 4-1: USB disconnect, device number 3 [ 139.563973][ T5728] usb 1-1: Direct firmware load for emi26/bitstream.fw failed with error -2 [ 139.564001][ T5728] usb 1-1: Falling back to sysfs fallback for: emi26/bitstream.fw [ 143.398105][ T6127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.465401][ T6127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.487925][ T6127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.440092][ T822] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 145.432650][ T822] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 145.432679][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.591926][ T822] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 155.440283][ T6251] 9pnet_fd: p9_fd_create_tcp (6251): problem connecting socket to 127.0.0.1 [ 160.075414][ T6290] 9pnet_fd: p9_fd_create_tcp (6290): problem connecting socket to 127.0.0.1 [ 164.954070][ T6306] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 166.960829][ T6333] 9pnet_fd: p9_fd_create_tcp (6333): problem connecting socket to 127.0.0.1 [ 168.161048][ T6339] gtp0: entered promiscuous mode [ 178.204139][ T6402] openvswitch: netlink: Message has 8 unknown bytes. [ 178.204175][ T6402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.627095][ T6440] openvswitch: netlink: Duplicate or invalid key (type 0). [ 182.627131][ T6440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.261244][ T5715] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 183.479497][ T5715] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 183.479527][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.559308][ T5715] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 185.477135][ T6479] openvswitch: netlink: Duplicate or invalid key (type 0). [ 185.477156][ T6479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.476329][ T6516] openvswitch: netlink: Duplicate or invalid key (type 0). [ 187.476362][ T6516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.280260][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 188.434625][ T31] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 188.434654][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.483519][ T31] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 193.086627][ T6593] (syz.4.263,6593,0):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 193.086966][ T6593] (syz.4.263,6593,0):o2hb_region_dev_store:1850 ERROR: status = -5 [ 194.424757][ T6615] gtp0: entered promiscuous mode [ 195.934140][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.934206][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.536563][ T6625] vivid-005: kernel_thread() failed [ 198.619308][ T6647] (syz.0.279,6647,1):o2hb_bio_end_io:499 ERROR: IO Error 10 [ 198.619400][ T6647] (syz.0.279,6647,1):o2hb_region_dev_store:1850 ERROR: status = -5 [ 199.231566][ T6654] lo speed is unknown, defaulting to 1000 [ 199.249493][ T6654] lo speed is unknown, defaulting to 1000 [ 199.262127][ T6654] lo speed is unknown, defaulting to 1000 [ 199.471782][ T6669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.283'. [ 199.586458][ T6670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.605899][ T6672] usbip-vudc usbip-vudc.0: gadget not bound [ 199.607622][ T6672] usbip-vudc usbip-vudc.0: gadget not bound [ 199.918864][ T198] lo speed is unknown, defaulting to 1000 [ 199.927099][ T6654] infiniband syz2: set down [ 199.927120][ T6654] infiniband syz2: added lo [ 199.949786][ T6676] Config c/1 of g1 needs at least one function. [ 199.961579][ T6676] udc usbip-vudc.0: failed to start g1: -22 [ 199.961609][ T6676] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 200.018111][ T6676] UDC core: g1: couldn't find an available UDC or it's busy [ 200.035776][ T6654] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 200.035813][ T6654] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 200.035864][ T6654] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 200.122166][ T6654] RDS/IB: syz2: added [ 200.125083][ T6654] smc: adding ib device syz2 with port count 1 [ 200.125326][ T6654] smc: ib device syz2 port 1 has no pnetid [ 200.128010][ T10] lo speed is unknown, defaulting to 1000 [ 200.139587][ T6654] lo speed is unknown, defaulting to 1000 [ 201.029238][ T31] usb 5-1: emi26_load_firmware - request_firmware() failed [ 201.029260][ T31] usb 5-1: emi26_load_firmware - error loading firmware: error = -2 [ 201.029346][ T31] emi26 - firmware loader 5-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 201.029417][ T822] usb 4-1: emi26_load_firmware - request_firmware() failed [ 201.029431][ T822] usb 4-1: emi26_load_firmware - error loading firmware: error = -2 [ 201.029509][ T822] emi26 - firmware loader 4-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 201.030078][ T5729] usb 2-1: emi26_load_firmware - request_firmware() failed [ 201.030096][ T5729] usb 2-1: emi26_load_firmware - error loading firmware: error = -2 [ 201.030178][ T5729] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 201.031927][ T5715] usb 3-1: emi26_load_firmware - request_firmware() failed [ 201.031945][ T5715] usb 3-1: emi26_load_firmware - error loading firmware: error = -2 [ 201.032025][ T5715] emi26 - firmware loader 3-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 201.161899][ T6704] usbip-vudc usbip-vudc.0: gadget not bound [ 201.169361][ T6704] usbip-vudc usbip-vudc.0: gadget not bound [ 201.285882][ T31] usb 5-1: USB disconnect, device number 3 [ 201.288985][ T5728] usb 1-1: emi26_load_firmware - request_firmware() failed [ 201.289005][ T5728] usb 1-1: emi26_load_firmware - error loading firmware: error = -110 [ 201.316658][ T5728] emi26 - firmware loader 1-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 201.356940][ T822] usb 4-1: USB disconnect, device number 4 [ 201.462857][ T5729] usb 2-1: USB disconnect, device number 3 [ 201.514683][ T5715] usb 3-1: USB disconnect, device number 2 [ 201.651269][ T5728] usb 1-1: USB disconnect, device number 2 [ 201.708387][ T6711] Config c/1 of g1 needs at least one function. [ 201.733455][ T6711] udc usbip-vudc.0: failed to start g1: -22 [ 201.733484][ T6711] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 201.801144][ T6711] UDC core: g1: couldn't find an available UDC or it's busy [ 201.836839][ T6720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.301'. [ 201.857057][ T6720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.085699][ T6654] lo speed is unknown, defaulting to 1000 [ 202.521670][ T5715] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 202.550129][ T5729] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 202.670191][ T5715] usb 3-1: Using ep0 maxpacket: 32 [ 202.673217][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.673247][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.673269][ T5715] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 202.673280][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.684418][ T5715] usb 3-1: config 0 descriptor?? [ 202.733964][ T5729] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 202.733992][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.810228][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 202.832168][ T6742] usbip-vudc usbip-vudc.0: gadget not bound [ 202.832665][ T6742] usbip-vudc usbip-vudc.0: gadget not bound [ 202.922983][ T5729] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 202.957148][ T5729] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 202.957165][ T5729] usb 2-1: Falling back to sysfs fallback for: emi26/loader.fw [ 202.981993][ T10] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 202.982076][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.149039][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 203.149387][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 203.149668][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 203.149774][ T5715] usbhid 3-1:0.0: can't add hid device: -32 [ 203.149882][ T5715] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 203.227418][ T5715] usb 3-1: USB disconnect, device number 3 [ 203.313600][ T10] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 203.452933][ T6654] lo speed is unknown, defaulting to 1000 [ 203.489431][ T6751] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 203.493966][ T10] usb 4-1: emi26_load_firmware - request_firmware() failed [ 203.493987][ T10] usb 4-1: emi26_load_firmware - error loading firmware: error = -2 [ 203.494047][ T10] emi26 - firmware loader 4-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 203.550771][ T5729] usb 2-1: emi26_load_firmware - request_firmware() failed [ 203.550808][ T5729] usb 2-1: emi26_load_firmware - error loading firmware: error = -2 [ 203.550869][ T5729] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 203.677029][ T5729] usb 2-1: USB disconnect, device number 4 [ 203.743323][ T6754] Config c/1 of g1 needs at least one function. [ 203.743459][ T6754] udc usbip-vudc.0: failed to start g1: -22 [ 203.743486][ T6754] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 203.782280][ T6754] UDC core: g1: couldn't find an available UDC or it's busy [ 203.936899][ T31] usb 4-1: USB disconnect, device number 5 [ 204.144685][ T6767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.317'. [ 204.204205][ T6770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.499803][ T6654] lo speed is unknown, defaulting to 1000 [ 204.538392][ T6779] usbip-vudc usbip-vudc.0: gadget not bound [ 204.539198][ T6779] usbip-vudc usbip-vudc.0: gadget not bound [ 205.090094][ T5715] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 205.192261][ T6801] Config c/1 of g1 needs at least one function. [ 205.226951][ T6801] udc usbip-vudc.0: failed to start g1: -22 [ 205.226981][ T6801] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 205.248988][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 205.256368][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.256398][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.256434][ T5715] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 205.256455][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.325003][ T6801] UDC core: g1: couldn't find an available UDC or it's busy [ 205.384551][ T5715] usb 4-1: config 0 descriptor?? [ 205.603000][ T6654] lo speed is unknown, defaulting to 1000 [ 205.630089][ T5729] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 205.660117][ T5728] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 205.802368][ T5715] usbhid 4-1:0.0: can't add hid device: -71 [ 205.802490][ T5715] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 205.831277][ T5728] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 205.831305][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.841069][ T5729] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 205.841098][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.961035][ T5715] usb 4-1: USB disconnect, device number 6 [ 205.989500][ T5728] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 205.989546][ T5729] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 206.014852][ T5728] usb 3-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 206.014876][ T5728] usb 3-1: Falling back to sysfs fallback for: emi26/loader.fw [ 206.096891][ T6821] usbip-vudc usbip-vudc.0: gadget not bound [ 206.097410][ T6821] usbip-vudc usbip-vudc.0: gadget not bound [ 206.214606][ T5729] usb 2-1: Direct firmware load for emi26/bitstream.fw failed with error -2 [ 206.214634][ T5729] usb 2-1: Falling back to sysfs fallback for: emi26/bitstream.fw [ 206.847210][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 206.887159][ T6844] Config c/1 of g1 needs at least one function. [ 206.887274][ T6844] udc usbip-vudc.0: failed to start g1: -22 [ 206.887287][ T6844] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 206.887848][ T6844] UDC core: g1: couldn't find an available UDC or it's busy [ 206.905018][ T6847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.081725][ T6855] usbip-vudc usbip-vudc.0: gadget not bound [ 207.082738][ T6855] usbip-vudc usbip-vudc.0: gadget not bound [ 207.756666][ T6879] rdma_rxe: rxe_newlink: failed to add lo [ 207.801061][ T6885] Config c/1 of g1 needs at least one function. [ 207.801199][ T6885] udc usbip-vudc.0: failed to start g1: -22 [ 207.801219][ T6885] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 207.854483][ T6884] usbip-vudc usbip-vudc.0: gadget not bound [ 207.855153][ T6884] usbip-vudc usbip-vudc.0: gadget not bound [ 207.871921][ T6885] UDC core: g1: couldn't find an available UDC or it's busy [ 208.210449][ T5714] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 208.233052][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 208.363660][ T5714] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 208.363690][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.392220][ T31] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 208.392250][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.428361][ T5714] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 208.485754][ T31] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 208.492765][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 208.505556][ T6908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.901801][ T6919] rdma_rxe: rxe_newlink: failed to add lo [ 208.951937][ T6921] usbip-vudc usbip-vudc.0: gadget not bound [ 208.952537][ T6921] usbip-vudc usbip-vudc.0: gadget not bound [ 209.036484][ T6923] Config c/1 of g1 needs at least one function. [ 209.053973][ T6923] udc usbip-vudc.0: failed to start g1: -22 [ 209.054002][ T6923] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 209.057075][ T6923] UDC core: g1: couldn't find an available UDC or it's busy [ 209.071415][ T6923] usbip-vudc usbip-vudc.0: gadget not bound [ 209.074188][ T6923] usbip-vudc usbip-vudc.0: gadget not bound [ 209.669167][ T6947] rdma_rxe: rxe_newlink: failed to add lo [ 209.850642][ T6952] usbip-vudc usbip-vudc.0: gadget not bound [ 209.852734][ T6952] usbip-vudc usbip-vudc.0: gadget not bound [ 209.919122][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 209.933769][ T6956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.017277][ T6958] Config c/1 of g1 needs at least one function. [ 210.017476][ T6958] udc usbip-vudc.0: failed to start g1: -22 [ 210.017497][ T6958] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 210.035922][ T6958] UDC core: g1: couldn't find an available UDC or it's busy [ 210.101199][ T6963] usbip-vudc usbip-vudc.0: gadget not bound [ 210.120886][ T6958] usbip-vudc usbip-vudc.0: gadget not bound [ 210.257414][ T6967] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 210.257672][ T6967] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 210.419818][ T6973] syz2: rxe_newlink: already configured on lo [ 210.664928][ T6984] usbip-vudc usbip-vudc.0: gadget not bound [ 210.667204][ T6984] usbip-vudc usbip-vudc.0: gadget not bound [ 210.947527][ T6994] Config c/1 of g1 needs at least one function. [ 210.951525][ T6994] udc usbip-vudc.0: failed to start g1: -22 [ 210.951553][ T6994] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 210.954856][ T6994] UDC core: g1: couldn't find an available UDC or it's busy [ 210.969161][ T6994] usbip-vudc usbip-vudc.0: gadget not bound [ 210.969782][ T6994] usbip-vudc usbip-vudc.0: gadget not bound [ 211.032638][ T6998] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 211.239132][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 211.262582][ T7006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.343314][ T7008] rdma_rxe: rxe_newlink: failed to add lo [ 211.751768][ T7022] usbip-vudc usbip-vudc.0: gadget not bound [ 211.758098][ T7022] usbip-vudc usbip-vudc.0: gadget not bound [ 211.992363][ T7030] Config c/1 of g1 needs at least one function. [ 211.992449][ T7030] udc usbip-vudc.0: failed to start g1: -22 [ 211.992461][ T7030] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 211.993017][ T7030] UDC core: g1: couldn't find an available UDC or it's busy [ 211.997085][ T7030] usbip-vudc usbip-vudc.0: gadget not bound [ 211.997534][ T7030] usbip-vudc usbip-vudc.0: gadget not bound [ 212.088976][ T7032] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 212.235269][ T7038] rdma_rxe: rxe_newlink: failed to add lo [ 212.451535][ T7048] usbip-vudc usbip-vudc.0: gadget not bound [ 212.452136][ T7048] usbip-vudc usbip-vudc.0: gadget not bound [ 212.567279][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 212.587685][ T7053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.814617][ T7061] Config c/1 of g1 needs at least one function. [ 212.814757][ T7061] udc usbip-vudc.0: failed to start g1: -22 [ 212.814777][ T7061] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 212.819879][ T7061] UDC core: g1: couldn't find an available UDC or it's busy [ 212.832269][ T7061] usbip-vudc usbip-vudc.0: gadget not bound [ 212.832790][ T7061] usbip-vudc usbip-vudc.0: gadget not bound [ 212.949375][ T7063] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 213.082599][ T7067] rdma_rxe: rxe_newlink: failed to add lo [ 213.806238][ T7095] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 213.872441][ T7100] rdma_rxe: rxe_newlink: failed to add lo [ 213.874005][ T7097] Config c/1 of g1 needs at least one function. [ 213.876092][ T7097] udc usbip-vudc.0: failed to start g1: -22 [ 213.876119][ T7097] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 213.877133][ T7097] UDC core: g1: couldn't find an available UDC or it's busy [ 213.989384][ T7097] usbip-vudc usbip-vudc.0: gadget not bound [ 213.990204][ T7097] usbip-vudc usbip-vudc.0: gadget not bound [ 214.032386][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.441'. [ 214.046001][ T7103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.450182][ T6633] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 214.603465][ T6633] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 214.603495][ T6633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.686188][ T6633] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 214.754939][ T7128] rdma_rxe: rxe_newlink: failed to add lo [ 214.772516][ T7133] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 215.016664][ T7139] Config c/1 of g1 needs at least one function. [ 215.040343][ T7139] udc usbip-vudc.0: failed to start g1: -22 [ 215.040375][ T7139] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 215.046006][ T7142] usbip-vudc usbip-vudc.0: gadget not bound [ 215.046677][ T7139] UDC core: g1: couldn't find an available UDC or it's busy [ 215.089914][ T7139] usbip-vudc usbip-vudc.0: gadget not bound [ 215.499521][ T7159] rdma_rxe: rxe_newlink: failed to add lo [ 215.520663][ T7160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.016219][ T7178] Config c/1 of g1 needs at least one function. [ 216.016375][ T7178] udc usbip-vudc.0: failed to start g1: -22 [ 216.016397][ T7178] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 216.018671][ T7178] UDC core: g1: couldn't find an available UDC or it's busy [ 216.065294][ T7178] usbip-vudc usbip-vudc.0: gadget not bound [ 216.068739][ T7178] usbip-vudc usbip-vudc.0: gadget not bound [ 216.410603][ T7189] rdma_rxe: rxe_newlink: failed to add lo [ 216.808125][ T7210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.885151][ T7213] Config c/1 of g1 needs at least one function. [ 216.885243][ T7213] udc usbip-vudc.0: failed to start g1: -22 [ 216.885257][ T7213] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 216.886000][ T7213] UDC core: g1: couldn't find an available UDC or it's busy [ 216.926352][ T7213] usbip-vudc usbip-vudc.0: gadget not bound [ 216.926889][ T7213] usbip-vudc usbip-vudc.0: gadget not bound [ 217.467502][ T7231] rdma_rxe: rxe_newlink: failed to add lo [ 217.566814][ T7235] usbip-vudc usbip-vudc.0: gadget not bound [ 217.569200][ T7235] usbip-vudc usbip-vudc.0: gadget not bound [ 218.021657][ T7256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.414989][ T5612] Bluetooth: hci1: command 0x0406 tx timeout [ 218.415030][ T5612] Bluetooth: hci0: command 0x0406 tx timeout [ 218.456598][ T5612] Bluetooth: hci3: command 0x0406 tx timeout [ 218.456630][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 218.456649][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 218.539695][ T7272] rdma_rxe: rxe_newlink: failed to add lo [ 218.610365][ T7274] usbip-vudc usbip-vudc.0: gadget not bound [ 218.611116][ T7274] usbip-vudc usbip-vudc.0: gadget not bound [ 219.495973][ T7309] usbip-vudc usbip-vudc.0: gadget not bound [ 219.498285][ T7309] usbip-vudc usbip-vudc.0: gadget not bound [ 219.596952][ T7311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.690670][ T7315] rdma_rxe: rxe_newlink: failed to add lo [ 220.232626][ T7341] usbip-vudc usbip-vudc.0: gadget not bound [ 220.233653][ T7341] usbip-vudc usbip-vudc.0: gadget not bound [ 220.468746][ T7349] rdma_rxe: rxe_newlink: failed to add lo [ 220.819386][ T7365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.843463][ T7366] usbip-vudc usbip-vudc.0: gadget not bound [ 220.843891][ T7366] usbip-vudc usbip-vudc.0: gadget not bound [ 220.917128][ T7368] usbip-vudc usbip-vudc.0: gadget not bound [ 220.917932][ T7368] usbip-vudc usbip-vudc.0: gadget not bound [ 221.280741][ T7382] rdma_rxe: rxe_newlink: failed to add lo [ 221.644879][ T7398] usbip-vudc usbip-vudc.0: gadget not bound [ 221.645876][ T7398] usbip-vudc usbip-vudc.0: gadget not bound [ 221.673448][ T7400] usbip-vudc usbip-vudc.0: gadget not bound [ 221.673937][ T7400] usbip-vudc usbip-vudc.0: gadget not bound [ 221.921106][ T7411] rdma_rxe: rxe_newlink: failed to add lo [ 222.315264][ T7426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.460165][ T7431] usbip-vudc usbip-vudc.0: gadget not bound [ 222.462068][ T7431] usbip-vudc usbip-vudc.0: gadget not bound [ 222.504066][ T7433] usbip-vudc usbip-vudc.0: gadget not bound [ 222.504577][ T7433] usbip-vudc usbip-vudc.0: gadget not bound [ 222.605981][ T7435] syz2: rxe_newlink: already configured on lo [ 223.206377][ T7461] usbip-vudc usbip-vudc.0: gadget not bound [ 223.207209][ T7461] usbip-vudc usbip-vudc.0: gadget not bound [ 223.261788][ T7462] usbip-vudc usbip-vudc.0: gadget not bound [ 223.262286][ T7462] usbip-vudc usbip-vudc.0: gadget not bound [ 223.397727][ T7467] syz2: rxe_newlink: already configured on lo [ 223.531670][ T7471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.838077][ T7488] netlink: 32 bytes leftover after parsing attributes in process `syz.4.589'. [ 223.838101][ T7488] openvswitch: netlink: Flow key attr not present in new flow. [ 223.988066][ T7492] usbip-vudc usbip-vudc.0: gadget not bound [ 223.992116][ T7492] usbip-vudc usbip-vudc.0: gadget not bound [ 224.060773][ T7494] usbip-vudc usbip-vudc.0: gadget not bound [ 224.062536][ T7494] usbip-vudc usbip-vudc.0: gadget not bound [ 224.122304][ T7496] syz2: rxe_newlink: already configured on lo [ 224.423959][ T7510] netlink: 32 bytes leftover after parsing attributes in process `syz.4.600'. [ 224.423981][ T7510] openvswitch: netlink: Flow key attr not present in new flow. [ 224.715329][ T7523] UDC core: g1: couldn't find an available UDC or it's busy [ 224.738865][ T7523] usbip-vudc usbip-vudc.0: gadget not bound [ 224.748537][ T7523] usbip-vudc usbip-vudc.0: gadget not bound [ 224.779406][ T7526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.868211][ T7528] rdma_rxe: rxe_newlink: failed to add lo [ 224.988642][ T7532] usbip-vudc usbip-vudc.0: gadget not bound [ 224.989262][ T7532] usbip-vudc usbip-vudc.0: gadget not bound [ 225.214899][ T7542] netlink: 32 bytes leftover after parsing attributes in process `syz.2.611'. [ 225.214914][ T7542] openvswitch: netlink: Flow key attr not present in new flow. [ 225.438455][ T7550] UDC core: g1: couldn't find an available UDC or it's busy [ 225.449321][ T7550] usbip-vudc usbip-vudc.0: gadget not bound [ 225.451303][ T7550] usbip-vudc usbip-vudc.0: gadget not bound [ 225.608831][ T7558] rdma_rxe: rxe_newlink: failed to add lo [ 225.878288][ T7568] usbip-vudc usbip-vudc.0: gadget not bound [ 225.883884][ T7568] usbip-vudc usbip-vudc.0: gadget not bound [ 226.071992][ T7576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.624'. [ 226.072018][ T7576] openvswitch: netlink: Flow actions attr not present in new flow. [ 226.181757][ T7578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.271911][ T7584] UDC core: g1: couldn't find an available UDC or it's busy [ 226.278375][ T7584] usbip-vudc usbip-vudc.0: gadget not bound [ 226.278993][ T7584] usbip-vudc usbip-vudc.0: gadget not bound [ 226.315696][ T7586] rdma_rxe: rxe_newlink: failed to add lo [ 226.732506][ T7601] usbip-vudc usbip-vudc.0: gadget not bound [ 226.734355][ T7601] usbip-vudc usbip-vudc.0: gadget not bound [ 226.956225][ T7610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.638'. [ 226.956248][ T7610] openvswitch: netlink: Flow actions attr not present in new flow. [ 227.157521][ T7618] UDC core: g1: couldn't find an available UDC or it's busy [ 227.164875][ T7618] usbip-vudc usbip-vudc.0: gadget not bound [ 227.165998][ T7618] usbip-vudc usbip-vudc.0: gadget not bound [ 227.225264][ T7622] rdma_rxe: rxe_newlink: failed to add lo [ 227.432915][ T7630] usbip-vudc usbip-vudc.0: gadget not bound [ 227.435178][ T7630] usbip-vudc usbip-vudc.0: gadget not bound [ 227.435586][ T7628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.856305][ T7649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.651'. [ 227.856322][ T7649] openvswitch: netlink: Flow actions attr not present in new flow. [ 227.987509][ T7653] UDC core: g1: couldn't find an available UDC or it's busy [ 227.998969][ T7653] usbip-vudc usbip-vudc.0: gadget not bound [ 228.003249][ T7653] usbip-vudc usbip-vudc.0: gadget not bound [ 228.115927][ T7659] rdma_rxe: rxe_newlink: failed to add lo [ 228.235256][ T7661] usbip-vudc usbip-vudc.0: gadget not bound [ 228.235744][ T7661] usbip-vudc usbip-vudc.0: gadget not bound [ 228.715802][ T7686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.795445][ T7688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.799096][ T7690] UDC core: g1: couldn't find an available UDC or it's busy [ 228.812137][ T7690] usbip-vudc usbip-vudc.0: gadget not bound [ 228.812855][ T7690] usbip-vudc usbip-vudc.0: gadget not bound [ 228.987159][ T7694] syz2: rxe_newlink: already configured on lo [ 229.168385][ T7702] usbip-vudc usbip-vudc.0: gadget not bound [ 229.168807][ T7702] usbip-vudc usbip-vudc.0: gadget not bound [ 229.389641][ T7710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.505258][ T7715] Config c/1 of g1 needs at least one function. [ 229.505395][ T7715] udc usbip-vudc.0: failed to start g1: -22 [ 229.505415][ T7715] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 229.516017][ T7715] UDC core: g1: couldn't find an available UDC or it's busy [ 229.523363][ T7715] usbip-vudc usbip-vudc.0: gadget not bound [ 229.525447][ T7715] usbip-vudc usbip-vudc.0: gadget not bound [ 229.806535][ T7727] syz2: rxe_newlink: already configured on lo [ 229.925553][ T7733] usbip-vudc usbip-vudc.0: gadget not bound [ 229.926054][ T7733] usbip-vudc usbip-vudc.0: gadget not bound [ 230.213553][ T7743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.284801][ T7747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.284879][ T7746] Config c/1 of g1 needs at least one function. [ 230.285014][ T7746] udc usbip-vudc.0: failed to start g1: -22 [ 230.285034][ T7746] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 230.295563][ T7746] UDC core: g1: couldn't find an available UDC or it's busy [ 230.304084][ T7746] usbip-vudc usbip-vudc.0: gadget not bound [ 230.306669][ T7746] usbip-vudc usbip-vudc.0: gadget not bound [ 230.470936][ T7754] rdma_rxe: rxe_newlink: failed to add lo [ 230.828187][ T7770] usbip-vudc usbip-vudc.0: gadget not bound [ 230.828758][ T7770] usbip-vudc usbip-vudc.0: gadget not bound [ 231.031120][ T7778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.139516][ T7782] Config c/1 of g1 needs at least one function. [ 231.139664][ T7782] udc usbip-vudc.0: failed to start g1: -22 [ 231.139684][ T7782] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 231.163993][ T7782] UDC core: g1: couldn't find an available UDC or it's busy [ 231.166642][ T7782] usbip-vudc usbip-vudc.0: gadget not bound [ 231.167150][ T7782] usbip-vudc usbip-vudc.0: gadget not bound [ 231.234317][ T7784] rdma_rxe: rxe_newlink: failed to add lo [ 231.447205][ T7792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.567190][ T7798] usbip-vudc usbip-vudc.0: gadget not bound [ 231.570803][ T7798] usbip-vudc usbip-vudc.0: gadget not bound [ 231.906483][ T7813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.964145][ T7815] rdma_rxe: rxe_newlink: failed to add lo [ 232.076328][ T7817] Config c/1 of g1 needs at least one function. [ 232.076469][ T7817] udc usbip-vudc.0: failed to start g1: -22 [ 232.076490][ T7817] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 232.077410][ T7817] UDC core: g1: couldn't find an available UDC or it's busy [ 232.125369][ T7817] usbip-vudc usbip-vudc.0: gadget not bound [ 232.315860][ T7827] usbip-vudc usbip-vudc.0: gadget not bound [ 232.316491][ T7827] usbip-vudc usbip-vudc.0: gadget not bound [ 232.753836][ T7848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.819770][ T7850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.852131][ T7852] rdma_rxe: rxe_newlink: failed to add lo [ 232.894772][ T7854] Config c/1 of g1 needs at least one function. [ 232.894906][ T7854] udc usbip-vudc.0: failed to start g1: -22 [ 232.894926][ T7854] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 232.896972][ T7854] UDC core: g1: couldn't find an available UDC or it's busy [ 232.933765][ T7854] usbip-vudc usbip-vudc.0: gadget not bound [ 233.217101][ T7862] usbip-vudc usbip-vudc.0: gadget not bound [ 233.217573][ T7862] usbip-vudc usbip-vudc.0: gadget not bound [ 233.829342][ T7887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.829380][ T7885] Config c/1 of g1 needs at least one function. [ 233.829507][ T7885] udc usbip-vudc.0: failed to start g1: -22 [ 233.829527][ T7885] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 233.863141][ T7888] rdma_rxe: rxe_newlink: failed to add lo [ 233.868007][ T7885] UDC core: g1: couldn't find an available UDC or it's busy [ 233.872805][ T7885] usbip-vudc usbip-vudc.0: gadget not bound [ 233.973760][ T7892] usbip-vudc usbip-vudc.0: gadget not bound [ 233.974187][ T7892] usbip-vudc usbip-vudc.0: gadget not bound [ 234.167261][ T7897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.689944][ T7922] netlink: 'syz.0.757': attribute type 4 has an invalid length. [ 234.764366][ T7924] Config c/1 of g1 needs at least one function. [ 234.764488][ T7924] udc usbip-vudc.0: failed to start g1: -22 [ 234.764507][ T7924] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 234.769695][ T7924] UDC core: g1: couldn't find an available UDC or it's busy [ 234.819840][ T7924] usbip-vudc usbip-vudc.0: gadget not bound [ 234.917397][ T7928] usbip-vudc usbip-vudc.0: gadget not bound [ 234.918112][ T7928] usbip-vudc usbip-vudc.0: gadget not bound [ 235.042669][ T7932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.375850][ T7944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.377408][ T7948] netlink: 'syz.0.769': attribute type 4 has an invalid length. [ 235.695265][ T7958] Config c/1 of g1 needs at least one function. [ 235.695404][ T7958] udc usbip-vudc.0: failed to start g1: -22 [ 235.695425][ T7958] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 235.708078][ T7958] UDC core: g1: couldn't find an available UDC or it's busy [ 235.719299][ T7958] usbip-vudc usbip-vudc.0: gadget not bound [ 235.861766][ T7964] usbip-vudc usbip-vudc.0: gadget not bound [ 235.862313][ T7964] usbip-vudc usbip-vudc.0: gadget not bound [ 236.070492][ T7970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.202325][ T7975] netlink: 'syz.2.780': attribute type 4 has an invalid length. [ 236.462981][ T7989] Config c/1 of g1 needs at least one function. [ 236.463092][ T7989] udc usbip-vudc.0: failed to start g1: -22 [ 236.463113][ T7989] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 236.476468][ T7989] UDC core: g1: couldn't find an available UDC or it's busy [ 236.572732][ T7989] usbip-vudc usbip-vudc.0: gadget not bound [ 236.820531][ T8002] usbip-vudc usbip-vudc.0: gadget not bound [ 236.821691][ T8002] usbip-vudc usbip-vudc.0: gadget not bound [ 236.840726][ T7999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.108569][ T8014] netlink: 'syz.2.794': attribute type 4 has an invalid length. [ 237.244419][ T8018] Config c/1 of g1 needs at least one function. [ 237.244504][ T8018] udc usbip-vudc.0: failed to start g1: -22 [ 237.244516][ T8018] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 237.245172][ T8018] UDC core: g1: couldn't find an available UDC or it's busy [ 237.248057][ T8018] usbip-vudc usbip-vudc.0: gadget not bound [ 237.666523][ T8033] usbip-vudc usbip-vudc.0: gadget not bound [ 237.667502][ T8033] usbip-vudc usbip-vudc.0: gadget not bound [ 237.847204][ T8041] netlink: 'syz.1.805': attribute type 4 has an invalid length. [ 238.005031][ T8049] Config c/1 of g1 needs at least one function. [ 238.005197][ T8049] udc usbip-vudc.0: failed to start g1: -22 [ 238.005219][ T8049] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 238.006187][ T8049] UDC core: g1: couldn't find an available UDC or it's busy [ 238.044833][ T8049] usbip-vudc usbip-vudc.0: gadget not bound [ 238.103505][ T8050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.139000][ T8073] ubi0: attaching mtd0 [ 239.208285][ T8073] ubi0: scanning is finished [ 239.208328][ T8073] ubi0: empty MTD device detected [ 239.722044][ T8076] usbip-vudc usbip-vudc.0: gadget not bound [ 239.727645][ T8076] usbip-vudc usbip-vudc.0: gadget not bound [ 239.862659][ T8073] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 239.877695][ T8081] netlink: 'syz.2.818': attribute type 4 has an invalid length. [ 240.132751][ T8088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.733244][ T8097] 9pnet_fd: p9_fd_create_tcp (8097): problem connecting socket to 127.0.0.1 [ 242.114385][ T8113] usbip-vudc usbip-vudc.0: gadget not bound [ 242.130955][ T8113] usbip-vudc usbip-vudc.0: gadget not bound [ 242.236703][ T8115] netlink: 'syz.4.829': attribute type 4 has an invalid length. [ 244.957136][ T8137] 9pnet_fd: p9_fd_create_tcp (8137): problem connecting socket to 127.0.0.1 [ 246.181768][ T8149] netlink: 'syz.0.841': attribute type 4 has an invalid length. [ 249.494786][ T8181] netlink: 'syz.1.853': attribute type 4 has an invalid length. [ 249.648561][ T8185] usbip-vudc usbip-vudc.0: gadget not bound [ 249.649135][ T8185] usbip-vudc usbip-vudc.0: gadget not bound [ 251.044397][ T8203] 9pnet_virtio: no channels available for device 127.0.0.1 [ 252.489693][ T8211] netlink: 'syz.3.864': attribute type 4 has an invalid length. [ 252.629379][ T8215] usbip-vudc usbip-vudc.0: gadget not bound [ 252.637336][ T8215] usbip-vudc usbip-vudc.0: gadget not bound [ 255.266088][ T8254] netlink: 'syz.4.878': attribute type 4 has an invalid length. [ 255.417817][ T8256] usbip-vudc usbip-vudc.0: gadget not bound [ 255.418383][ T8256] usbip-vudc usbip-vudc.0: gadget not bound [ 257.287915][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.287985][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.149344][ T8282] netlink: 'syz.3.889': attribute type 4 has an invalid length. [ 258.329447][ T8287] usbip-vudc usbip-vudc.0: gadget not bound [ 258.336802][ T8287] usbip-vudc usbip-vudc.0: gadget not bound [ 261.242854][ T8325] usbip-vudc usbip-vudc.0: gadget not bound [ 261.246738][ T8325] usbip-vudc usbip-vudc.0: gadget not bound [ 263.422844][ T8355] usbip-vudc usbip-vudc.0: gadget not bound [ 263.423373][ T8355] usbip-vudc usbip-vudc.0: gadget not bound [ 267.690417][ T5728] usb 3-1: emi26_load_firmware - request_firmware() failed [ 267.690439][ T5728] usb 3-1: emi26_load_firmware - error loading firmware: error = -2 [ 267.690524][ T5728] emi26 - firmware loader 3-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 267.692729][ T31] usb 5-1: emi26_load_firmware - request_firmware() failed [ 267.692751][ T31] usb 5-1: emi26_load_firmware - error loading firmware: error = -2 [ 267.692819][ T31] emi26 - firmware loader 5-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 267.694540][ T5714] usb 4-1: emi26_load_firmware - request_firmware() failed [ 267.694561][ T5714] usb 4-1: emi26_load_firmware - error loading firmware: error = -2 [ 267.694631][ T5714] emi26 - firmware loader 4-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 267.697558][ T6633] usb 1-1: emi26_load_firmware - request_firmware() failed [ 267.697578][ T6633] usb 1-1: emi26_load_firmware - error loading firmware: error = -2 [ 267.697662][ T6633] emi26 - firmware loader 1-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 267.873459][ T5729] usb 2-1: emi26_load_firmware - request_firmware() failed [ 267.873482][ T5729] usb 2-1: emi26_load_firmware - error loading firmware: error = -110 [ 267.873688][ T5729] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 267.913054][ T31] usb 5-1: USB disconnect, device number 4 [ 267.958730][ T5728] usb 3-1: USB disconnect, device number 4 [ 268.008671][ T6633] usb 1-1: USB disconnect, device number 3 [ 268.039113][ T5714] usb 4-1: USB disconnect, device number 7 [ 268.411008][ T5729] usb 2-1: USB disconnect, device number 5 [ 269.410109][ T5728] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 269.570082][ T5714] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 269.708930][ T5728] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 269.708958][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.741545][ T5714] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 269.741651][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.827807][ T5714] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 269.939163][ T5714] usb 4-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 269.939191][ T5714] usb 4-1: Falling back to sysfs fallback for: emi26/loader.fw [ 274.071886][ T5728] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 279.458077][ T8492] usbip-vudc usbip-vudc.0: gadget not bound [ 279.458553][ T8492] usbip-vudc usbip-vudc.0: gadget not bound [ 279.540157][ T5609] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 279.692678][ T5609] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 279.692707][ T5609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.782325][ T5609] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 279.800090][ T5715] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 281.527845][ T5715] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 281.527903][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.994102][ T5715] usb 2-1: can't set config #1, error -71 [ 283.455272][ T8537] ubi0: attaching mtd0 [ 283.561621][ T8537] ubi0: scanning is finished [ 283.733492][ T5715] usb 2-1: USB disconnect, device number 6 [ 285.666562][ T8537] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 290.235769][ T8577] usbip-vudc usbip-vudc.0: gadget not bound [ 295.190316][ T6309] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 296.088907][ T8600] ubi0: attaching mtd0 [ 296.091914][ T8600] ubi0: scanning is finished [ 297.462754][ T8614] usbip-vudc usbip-vudc.0: gadget not bound [ 299.889078][ T8600] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 299.910991][ T822] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 300.130113][ T5715] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 300.277312][ T822] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 300.277342][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.374316][ T822] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 300.412279][ T5715] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 300.412308][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.445348][ T5715] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 300.500521][ T8648] usbip-vudc usbip-vudc.0: gadget not bound [ 300.637734][ T822] usb 2-1: Firmware "emi26/loader.fw" not valid IHEX records [ 300.637795][ T822] usb 2-1: emi26_load_firmware - request_firmware() failed [ 300.637810][ T822] usb 2-1: emi26_load_firmware - error loading firmware: error = -22 [ 300.637869][ T822] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 300.638409][ T5728] usb 3-1: Firmware "emi26/loader.fw" not valid IHEX records [ 300.638447][ T5715] usb 1-1: Firmware "emi26/loader.fw" not valid IHEX records [ 300.638492][ T5715] usb 1-1: emi26_load_firmware - request_firmware() failed [ 300.638505][ T5715] usb 1-1: emi26_load_firmware - error loading firmware: error = -22 [ 300.638516][ T5609] usb 5-1: Firmware "emi26/loader.fw" not valid IHEX records [ 300.638558][ T5609] usb 5-1: emi26_load_firmware - request_firmware() failed [ 300.638559][ T5715] emi26 - firmware loader 1-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 300.638573][ T5609] usb 5-1: emi26_load_firmware - error loading firmware: error = -22 [ 300.638624][ T5609] emi26 - firmware loader 5-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 300.638773][ T5728] usb 3-1: emi26_load_firmware - request_firmware() failed [ 300.638788][ T5728] usb 3-1: emi26_load_firmware - error loading firmware: error = -22 [ 300.638843][ T5728] emi26 - firmware loader 3-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 300.842451][ T5714] usb 4-1: Firmware "emi26/loader.fw" not valid IHEX records [ 300.842866][ T5714] usb 4-1: emi26_load_firmware - request_firmware() failed [ 300.842883][ T5714] usb 4-1: emi26_load_firmware - error loading firmware: error = -22 [ 300.842941][ T5714] emi26 - firmware loader 4-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 301.019691][ T5609] usb 5-1: USB disconnect, device number 5 [ 301.099617][ T5714] usb 4-1: USB disconnect, device number 8 [ 301.109601][ T5728] usb 3-1: USB disconnect, device number 5 [ 301.151028][ T5715] usb 2-1: USB disconnect, device number 8 [ 301.194655][ T5729] usb 1-1: USB disconnect, device number 4 [ 303.184636][ T8680] usbip-vudc usbip-vudc.0: gadget not bound [ 304.935861][ T8688] ubi0: attaching mtd0 [ 304.938866][ T8688] ubi0: scanning is finished [ 305.931084][ T5715] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 306.105409][ T5715] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 306.105438][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.183305][ T5715] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 306.187169][ T5715] usb 5-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 306.187194][ T5715] usb 5-1: Falling back to sysfs fallback for: emi26/loader.fw [ 307.369095][ T8688] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 309.429630][ T8726] usbip-vudc usbip-vudc.0: gadget not bound [ 313.122128][ T8755] ubi0: attaching mtd0 [ 313.124887][ T8755] ubi0: scanning is finished [ 314.057272][ T8755] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 314.400952][ T5728] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 314.567422][ T8779] usbip-vudc usbip-vudc.0: gadget not bound [ 314.623173][ T5728] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 314.623203][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.681925][ T5728] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 317.582285][ T8817] ubi0: attaching mtd0 [ 317.585058][ T8817] ubi0: scanning is finished [ 318.817592][ T8824] usbip-vudc usbip-vudc.0: gadget not bound [ 318.932357][ T8817] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 319.177828][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.177893][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.855560][ T8862] usbip-vudc usbip-vudc.0: gadget not bound [ 323.236215][ T8876] ubi0: attaching mtd0 [ 323.239459][ T8876] ubi0: scanning is finished [ 325.323521][ T8876] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 325.757180][ T8899] usbip-vudc usbip-vudc.0: gadget not bound [ 326.860182][ T5729] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 327.017699][ T5729] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 327.017727][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.066959][ T5729] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 329.819516][ T8940] ubi0: attaching mtd0 [ 329.824183][ T8940] ubi0: scanning is finished [ 330.537757][ T8944] usbip-vudc usbip-vudc.0: gadget not bound [ 330.538420][ T8944] usbip-vudc usbip-vudc.0: gadget not bound [ 330.777570][ T8940] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 333.801051][ T8978] usbip-vudc usbip-vudc.0: gadget not bound [ 333.801705][ T8978] usbip-vudc usbip-vudc.0: gadget not bound [ 336.736063][ T9012] usbip-vudc usbip-vudc.0: gadget not bound [ 336.736582][ T9012] usbip-vudc usbip-vudc.0: gadget not bound [ 340.907474][ T9057] usbip-vudc usbip-vudc.0: gadget not bound [ 341.350250][ T5714] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 341.503992][ T5714] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 341.504022][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.580701][ T5714] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 341.811064][ T5728] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 341.811088][ T5728] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 341.811138][ T5728] CPU: 1 UID: 0 PID: 5728 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 341.811160][ T5728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 341.811173][ T5728] Workqueue: usb_hub_wq hub_event [ 341.811324][ T5728] RIP: 0010:emi26_probe+0x283/0x1690 [ 341.811381][ T5728] Code: ff 89 de e8 ef af 97 00 85 db 0f 84 d9 01 00 00 e8 e2 ab 97 00 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 341.811396][ T5728] RSP: 0018:ffffc90004dced60 EFLAGS: 00010247 [ 341.811410][ T5728] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 341.811422][ T5728] RDX: ffffc9001c73f000 RSI: 000000000000dd79 RDI: 0000000000000004 [ 341.811432][ T5728] RBP: ffffc90004dcee90 R08: 0000000000000000 R09: 0000000000000000 [ 341.811449][ T5728] R10: dffffc0000000000 R11: fffffbfff1f5f2e7 R12: fffffffffffffffa [ 341.811461][ T5728] R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff [ 341.811472][ T5728] FS: 0000000000000000(0000) GS:ffff888125d41000(0000) knlGS:0000000000000000 [ 341.811484][ T5728] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 341.811494][ T5728] CR2: 00007fa5fa27b580 CR3: 00000000322ba000 CR4: 00000000003526f0 [ 341.811507][ T5728] Call Trace: [ 341.811512][ T5728] [ 341.811523][ T5728] ? __pfx_emi26_probe+0x10/0x10 [ 341.811549][ T5728] ? __pm_runtime_set_status+0x977/0xc40 [ 341.811620][ T5728] usb_probe_interface+0x653/0xc60 [ 341.811664][ T5728] ? __pfx_usb_probe_interface+0x10/0x10 [ 341.811681][ T5728] really_probe+0x254/0xae0 [ 341.811749][ T5728] __driver_probe_device+0x1e8/0x360 [ 341.811770][ T5728] driver_probe_device+0x4f/0x240 [ 341.811791][ T5728] __device_attach_driver+0x270/0x410 [ 341.811821][ T5728] bus_for_each_drv+0x25b/0x2f0 [ 341.811837][ T5728] ? __pfx___device_attach_driver+0x10/0x10 [ 341.811857][ T5728] ? __pfx_bus_for_each_drv+0x10/0x10 [ 341.811874][ T5728] ? __rcu_read_unlock+0x83/0xe0 [ 341.811945][ T5728] __device_attach+0x2c7/0x450 [ 341.811964][ T5728] ? rt_spin_unlock+0x157/0x200 [ 341.812069][ T5728] ? __pfx___device_attach+0x10/0x10 [ 341.812091][ T5728] device_initial_probe+0xa1/0xd0 [ 341.812111][ T5728] bus_probe_device+0x12d/0x220 [ 341.812127][ T5728] device_add+0x7d7/0xb80 [ 341.812171][ T5728] usb_set_configuration+0x1ad8/0x2180 [ 341.812196][ T5728] usb_generic_driver_probe+0x8d/0x150 [ 341.812243][ T5728] usb_probe_device+0x1c3/0x3b0 [ 341.812256][ T5728] ? __pfx_usb_probe_device+0x10/0x10 [ 341.812267][ T5728] really_probe+0x254/0xae0 [ 341.812282][ T5728] __driver_probe_device+0x1e8/0x360 [ 341.812297][ T5728] driver_probe_device+0x4f/0x240 [ 341.812314][ T5728] __device_attach_driver+0x270/0x410 [ 341.812328][ T5728] bus_for_each_drv+0x25b/0x2f0 [ 341.812338][ T5728] ? __pfx___device_attach_driver+0x10/0x10 [ 341.812351][ T5728] ? __pfx_bus_for_each_drv+0x10/0x10 [ 341.812361][ T5728] ? rt_spin_unlock+0x163/0x200 [ 341.812377][ T5728] __device_attach+0x2c7/0x450 [ 341.812389][ T5728] ? __pfx___device_attach+0x10/0x10 [ 341.812403][ T5728] device_initial_probe+0xa1/0xd0 [ 341.812416][ T5728] bus_probe_device+0x12d/0x220 [ 341.812427][ T5728] device_add+0x7d7/0xb80 [ 341.812438][ T5728] usb_new_device+0x98d/0x1610 [ 341.812480][ T5728] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 341.812494][ T5728] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 341.812508][ T5728] ? __pfx_usb_new_device+0x10/0x10 [ 341.812525][ T5728] hub_event+0x28cf/0x4cf0 [ 341.812545][ T5728] ? __pfx_hub_event+0x10/0x10 [ 341.812555][ T5728] ? process_scheduled_works+0xa20/0x14e0 [ 341.812605][ T5728] ? rcu_is_watching+0x15/0xb0 [ 341.812640][ T5728] ? process_scheduled_works+0xa20/0x14e0 [ 341.812651][ T5728] process_scheduled_works+0xa8e/0x14e0 [ 341.812670][ T5728] ? __pfx_process_scheduled_works+0x10/0x10 [ 341.812687][ T5728] ? assign_work+0x3cf/0x5d0 [ 341.812699][ T5728] worker_thread+0xa47/0xfb0 [ 341.812713][ T5728] ? __kthread_parkme+0x71/0x1f0 [ 341.812753][ T5728] kthread+0x388/0x470 [ 341.812767][ T5728] ? __pfx_worker_thread+0x10/0x10 [ 341.812778][ T5728] ? __pfx_kthread+0x10/0x10 [ 341.812792][ T5728] ret_from_fork+0x514/0xb70 [ 341.812969][ T5728] ? __pfx_ret_from_fork+0x10/0x10 [ 341.812985][ T5728] ? __switch_to+0xc89/0x1420 [ 341.813041][ T5728] ? __pfx_kthread+0x10/0x10 [ 341.813057][ T5728] ret_from_fork_asm+0x1a/0x30 [ 341.813093][ T5728] [ 341.813098][ T5728] Modules linked in: [ 341.813150][ T5728] ---[ end trace 0000000000000000 ]--- [ 341.813150][ T5729] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#2] SMP KASAN PTI [ 341.813170][ T5729] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 341.813191][ T5729] CPU: 0 UID: 0 PID: 5729 Comm: kworker/0:6 Tainted: G D syzkaller #0 PREEMPT_{RT,(full)} [ 341.813219][ T5729] Tainted: [D]=DIE [ 341.813225][ T5729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 341.813230][ T5728] RIP: 0010:emi26_probe+0x283/0x1690 [ 341.813243][ T5729] Workqueue: usb_hub_wq hub_event [ 341.813259][ T5728] Code: ff 89 de e8 ef af 97 00 85 db 0f 84 d9 01 00 00 e8 e2 ab 97 00 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 341.813266][ T5729] RIP: 0010:emi26_probe+0x283/0x1690 [ 341.813276][ T5728] RSP: 0018:ffffc90004dced60 EFLAGS: 00010247 [ 341.813289][ T5729] Code: ff 89 de e8 ef af 97 00 85 db 0f 84 d9 01 00 00 e8 e2 ab 97 00 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 341.813293][ T5728] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 341.813305][ T5729] RSP: 0018:ffffc90004dded60 EFLAGS: 00010247 [ 341.813307][ T5728] RDX: ffffc9001c73f000 RSI: 000000000000dd79 RDI: 0000000000000004 [ 341.813320][ T5729] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 341.813328][ T5728] RBP: ffffc90004dcee90 R08: 0000000000000000 R09: 0000000000000000 [ 341.813334][ T5729] RDX: ffffc9001bf3e000 RSI: 000000000000df20 RDI: 0000000000000004 [ 341.813347][ T5728] R10: dffffc0000000000 R11: fffffbfff1f5f2e7 R12: fffffffffffffffa [ 341.813352][ T5729] RBP: ffffc90004ddee90 R08: 0000000000000000 R09: 0000000000000000 [ 341.813363][ T5728] R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff [ 341.813365][ T5729] R10: dffffc0000000000 R11: fffffbfff1f5f2e7 R12: fffffffffffffffa [ 341.813378][ T5728] FS: 0000000000000000(0000) GS:ffff888125d41000(0000) knlGS:0000000000000000 [ 341.813380][ T5729] R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff [ 341.813395][ T5728] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 341.813395][ T5729] FS: 0000000000000000(0000) GS:ffff888125c41000(0000) knlGS:0000000000000000 [ 341.813409][ T5728] CR2: 00007fa5fa27b580 CR3: 00000000322ba000 CR4: 00000000003526f0 [ 341.813411][ T5729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 341.813424][ T5729] CR2: 000000110c2f0b87 CR3: 0000000025a6c000 CR4: 00000000003526f0 [ 341.813428][ T5728] Kernel panic - not syncing: Fatal exception [ 341.813968][ T5728] Kernel Offset: disabled