last executing test programs: 14.880516505s ago: executing program 0 (id=1987): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d0000000003000000030000000000000003000000040000"], 0x0, 0x5e, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0xa5, &(0x7f0000000300)=""/165}, 0x94) 14.520104763s ago: executing program 0 (id=1989): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ca000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) execveat(r1, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x1000) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0xfffffffffffffffc, 0x1, 0x0, 0xfffffffffffe, 0x5, 0xfffffffffffffffa}, {0x0, 0x6, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0xa, @in=@empty, 0x3505, 0x1, 0x1, 0x0, 0x0, 0x8007c, 0xfffffffe}}, 0xe8) sendto$inet6(r6, 0x0, 0x0, 0x20000401, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, 0x5}, 0x1c) timer_settime(r5, 0x1, &(0x7f0000000180)={{0x77359400}}, &(0x7f0000000280)) preadv(r6, &(0x7f0000002380)=[{0x0}], 0x1, 0x0, 0x0) mq_notify(r6, &(0x7f00000000c0)={0x0, 0x0, 0x2, @thr={&(0x7f0000000340)="400aca734f588898262d6f67d16f7eabc35ee1a000361f4025e46e234379736618547d47d9bcf1f70bdd8e5de5fca86c2d63924d9b7f51cee8620564eda2cef7f6b30fe105e2ca0d43ba7b7830fc8c2ec37d58d8f7b8d7c5d3262def758f835bb4fe3728619bbc863b342b798e3016e1a3a6d6cfa22adae0dffdd4d0682b27d27cad349f8f77170ed65cb4398f622b8228980475b75b1a970e280583923a85731b442be7370d8d9b19f9785d28d8ec48baaa78d2", &(0x7f0000000400)="bc600727790f2cf426604675079ca2ee9c06e6ca28"}}) 12.596592582s ago: executing program 0 (id=1990): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x934e700, 0x0, 0x0, 0x0, 0x0, 0x0) 12.59561797s ago: executing program 3 (id=1991): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x5, 0x4, 0x0, &(0x7f0000000380)="25a688a8", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="050f5600030a1003000a00010701"]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 11.177970201s ago: executing program 0 (id=1995): socket$nl_crypto(0x10, 0x3, 0x15) r0 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) open_by_handle_at(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="10000000f10000000300"/19], 0x644040) 9.930452234s ago: executing program 0 (id=1998): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x1001) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9.700322688s ago: executing program 1 (id=2001): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x280081, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x8000203d}) 9.69785173s ago: executing program 3 (id=2002): io_uring_setup(0x3c50, &(0x7f0000000bc0)={0x0, 0xcb44, 0x3040, 0x0, 0x26e}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x1d, 0x2, 0x6) epoll_create(0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x500}, 0x1, 0x0, 0x0, 0x41}, 0x0) 8.461053477s ago: executing program 2 (id=2004): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) 8.345515217s ago: executing program 1 (id=2005): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) unlinkat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000, 0x40000000}], 0x0) 8.28737432s ago: executing program 3 (id=2006): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioperm(0x7, 0x4, 0x7) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24005000) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'veth0_to_batadv\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) 8.222495741s ago: executing program 4 (id=2007): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001400000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, 0x0) 6.902459572s ago: executing program 1 (id=2008): socket$nl_crypto(0x10, 0x3, 0x15) r0 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) open_by_handle_at(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="10000000f10000000300"/19], 0x644040) 5.737270313s ago: executing program 3 (id=2009): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 5.220959624s ago: executing program 0 (id=2010): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.709354272s ago: executing program 2 (id=2011): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="257fd3cbb7ba7feb35295a62cd27", 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.306069574s ago: executing program 4 (id=2012): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c040}, 0x4008850) 4.305830915s ago: executing program 2 (id=2013): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3.703770821s ago: executing program 4 (id=2014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000008680)={{0x14}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10}}, 0x54}}, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 3.503057536s ago: executing program 2 (id=2015): sync() 3.094104784s ago: executing program 4 (id=2016): io_uring_setup(0x3c50, &(0x7f0000000bc0)={0x0, 0xcb44, 0x3040, 0x0, 0x26e}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x1d, 0x2, 0x6) epoll_create(0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xffffeffffffffffc, 0x0, 0x6}, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x500}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.092439718s ago: executing program 1 (id=2017): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000190011002cbd7000000000001c141400fe030001000000000f3a881fc9d1c894b03e872a5e0c1aa93524377c8d89e9d35b0bdb1441ab87400a6df01289c29bc993b164c2fff93acb8e3280f54ca272fdb00e7e80d2d88d27faabdf026c707c7e75a2f95cb2c89ae0371db2031fb176b8cb8bb66e2e"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.684062607s ago: executing program 4 (id=2018): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) unlinkat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000, 0x40000000}], 0x0) 2.632741987s ago: executing program 2 (id=2019): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioperm(0x7, 0x4, 0x7) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24005000) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'veth0_to_batadv\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) 2.587039034s ago: executing program 1 (id=2020): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x1001) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.556325339s ago: executing program 3 (id=2021): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) 1.181945833s ago: executing program 4 (id=2022): openat$random(0xffffffffffffff9c, &(0x7f0000002080), 0x28000, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000000)=0x55) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x3, 0x3, 0x203) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r6, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a3a00002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 192.005468ms ago: executing program 1 (id=2023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x200000, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x0, 0x12, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20004080}, 0x4001004) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x6, @media='udp\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xa1}, 0x24000810) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) sendmsg$FOU_CMD_ADD(r1, 0x0, 0x40010) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x6000002}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x22004801}, 0x4040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000240)=""/153}, 0x90) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x2201}], 0x1, 0x7f) r6 = syz_genetlink_get_family_id$ipvs(0x0, r0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x44, r6, 0x508, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x24008002) 79.296792ms ago: executing program 3 (id=2024): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c040}, 0x4008850) 0s ago: executing program 2 (id=2025): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): nterface 1 has no altsetting 0 [ 634.772613][ T5890] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 634.772642][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.772662][ T5890] usb 1-1: Product: syz [ 634.772676][ T5890] usb 1-1: Manufacturer: syz [ 634.772690][ T5890] usb 1-1: SerialNumber: syz [ 634.918354][ T5741] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 635.150517][ T5890] usb 1-1: selecting invalid altsetting 0 [ 635.171063][ T5890] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 635.171093][ T5890] uvcvideo 1-1:220.0: No valid video chain found. [ 635.223293][ T5890] usb 1-1: selecting invalid altsetting 0 [ 635.223329][ T5890] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 635.254891][ T5890] usb 1-1: USB disconnect, device number 14 [ 637.107479][ T5741] corsair-cpro 0003:1B1C:0C10.0001: probe with driver corsair-cpro failed with error -110 [ 637.146133][ T5741] usb 4-1: USB disconnect, device number 36 [ 640.343138][ T36] audit: type=1326 audit(1779710954.374:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8233 comm="syz.3.826" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f879f8dce59 code=0x0 [ 643.498508][ T8263] binder: 8262:8263 ioctl 4018620d 0 returned -22 [ 650.708346][ T36] audit: type=1326 audit(1779710964.734:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8314 comm="syz.4.861" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f10836ece59 code=0x0 [ 652.215062][ T8321] 9p: Bad value for 'wfdno' [ 659.284165][ T8365] 9p: Bad value for 'wfdno' [ 660.360376][ T5890] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 660.608289][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 660.611110][ T5890] usb 1-1: unable to get BOS descriptor or descriptor too short [ 660.614424][ T5890] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 660.614439][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.614450][ T5890] usb 1-1: Product: syz [ 660.614457][ T5890] usb 1-1: Manufacturer: syz [ 660.614464][ T5890] usb 1-1: SerialNumber: syz [ 664.278149][ T5890] usb 1-1: failed waiting for Axe-Fx III to boot: -71 [ 664.278192][ T5890] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 664.361381][ T5890] usb 1-1: USB disconnect, device number 15 [ 669.304927][ T8410] 9p: Bad value for 'wfdno' [ 673.804634][ T8442] binder: 8441:8442 ioctl 4018620d 0 returned -22 [ 677.408126][ T5890] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 677.567192][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 677.571242][ T5890] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 677.571267][ T5890] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 677.571287][ T5890] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 677.571306][ T5890] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 677.571324][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 677.571343][ T5890] usb 5-1: config 0 has no interface number 0 [ 677.572590][ T5890] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 677.572622][ T5890] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 677.572644][ T5890] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 677.590938][ T5890] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 677.590969][ T5890] usb 5-1: config 0 interface 125 has no altsetting 0 [ 677.590986][ T5890] usb 5-1: config 0 interface 125 has no altsetting 2 [ 677.606744][ T5890] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 677.606770][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.606788][ T5890] usb 5-1: Product: syz [ 677.606801][ T5890] usb 5-1: Manufacturer: syz [ 677.606813][ T5890] usb 5-1: SerialNumber: syz [ 677.643901][ T5890] usb 5-1: config 0 descriptor?? [ 677.786847][ T5890] usb 5-1: can't set config #0, error -71 [ 677.817212][ T5890] usb 5-1: USB disconnect, device number 22 [ 679.241928][ T8460] binder: 8459:8460 ioctl c0306201 0 returned -14 [ 680.332831][ T8468] 9p: Bad value for 'rfdno' [ 686.449960][ T8498] 9p: Bad value for 'rfdno' [ 687.859412][ T8495] netlink: 68 bytes leftover after parsing attributes in process `syz.2.923'. [ 687.963649][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.963718][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.060227][ T8504] binder: 8501:8504 ioctl 4018620d 0 returned -22 [ 688.346536][ T5739] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 688.516950][ T5739] usb 2-1: Using ep0 maxpacket: 16 [ 688.521749][ T5739] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 688.521774][ T5739] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 688.521794][ T5739] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 688.521812][ T5739] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 688.521830][ T5739] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 688.521849][ T5739] usb 2-1: config 0 has no interface number 0 [ 688.521891][ T5739] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 688.521917][ T5739] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 688.521938][ T5739] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 688.521970][ T5739] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 688.521996][ T5739] usb 2-1: config 0 interface 125 has no altsetting 0 [ 688.522013][ T5739] usb 2-1: config 0 interface 125 has no altsetting 2 [ 688.535316][ T5739] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 688.535342][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.535361][ T5739] usb 2-1: Product: syz [ 688.535374][ T5739] usb 2-1: Manufacturer: syz [ 688.535387][ T5739] usb 2-1: SerialNumber: syz [ 688.541178][ T5739] usb 2-1: config 0 descriptor?? [ 688.545835][ T5739] usb 2-1: selecting invalid altsetting 2 [ 689.794828][ T5739] get_1284_register timeout [ 689.812317][ C1] usb 2-1: async_complete: urb error -104 [ 689.812414][ C1] usb 2-1: async_complete: urb error -104 [ 689.812498][ C1] usb 2-1: async_complete: urb error -104 [ 689.812695][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 691.106823][ T5866] usb 2-1: USB disconnect, device number 15 [ 692.785682][ T8540] 9p: Bad value for 'rfdno' [ 696.961952][ T8546] netlink: 68 bytes leftover after parsing attributes in process `syz.0.937'. [ 698.137574][ T8572] binder: 8571:8572 ioctl 4018620d 0 returned -22 [ 703.470387][ T8599] netlink: 68 bytes leftover after parsing attributes in process `syz.2.952'. [ 704.798579][ T8608] binder: 8604:8608 ioctl c0306201 0 returned -14 [ 712.514768][ T8650] binder: 8649:8650 ioctl 4018620d 0 returned -22 [ 712.985801][ T8655] binder: 8654:8655 ioctl c0306201 0 returned -14 [ 714.142973][ T8658] binder: 8657:8658 ioctl c0306201 0 returned -14 [ 715.586498][ T5890] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 715.996688][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 715.998631][ T5890] usb 2-1: unable to get BOS descriptor or descriptor too short [ 716.002500][ T5890] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 716.002515][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.002526][ T5890] usb 2-1: Product: syz [ 716.002533][ T5890] usb 2-1: Manufacturer: syz [ 716.002540][ T5890] usb 2-1: SerialNumber: syz [ 720.816468][ T5890] usb 2-1: failed waiting for Axe-Fx III to boot: -71 [ 720.816511][ T5890] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 720.876122][ T5890] usb 2-1: USB disconnect, device number 16 [ 721.197940][ T5742] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 722.406647][ T5742] usb 1-1: device descriptor read/64, error -71 [ 722.496513][ T8699] binder: 8698:8699 ioctl c0306201 0 returned -14 [ 722.916479][ T5742] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 722.971349][ T8702] binder: 8701:8702 ioctl c0306201 0 returned -14 [ 724.240784][ T5890] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 724.627692][ T5742] usb 1-1: device descriptor read/64, error -71 [ 724.651814][ T5890] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 724.651843][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.651863][ T5890] usb 4-1: Product: syz [ 724.651877][ T5890] usb 4-1: Manufacturer: syz [ 724.651891][ T5890] usb 4-1: SerialNumber: syz [ 724.666859][ T5890] usb 4-1: config 0 descriptor?? [ 724.734893][ T4916] Bluetooth: hci5: urb ffff888036677400 submission failed (2) [ 724.748096][ T5742] usb usb1-port1: attempt power cycle [ 724.899362][ T5890] usb 4-1: USB disconnect, device number 37 [ 727.816528][ T5765] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 727.966507][ T5765] usb 5-1: Using ep0 maxpacket: 16 [ 727.971945][ T5765] usb 5-1: unable to get BOS descriptor or descriptor too short [ 727.976074][ T5765] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 727.976100][ T5765] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.976119][ T5765] usb 5-1: Product: syz [ 727.976134][ T5765] usb 5-1: Manufacturer: syz [ 727.976148][ T5765] usb 5-1: SerialNumber: syz [ 735.154979][ T5765] usb 5-1: failed waiting for Axe-Fx III to boot: -71 [ 735.155022][ T5765] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 735.587803][ T5765] usb 5-1: USB disconnect, device number 23 [ 736.126122][ T8744] binder: 8742:8744 ioctl c0306201 0 returned -14 [ 736.556538][ T5765] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 737.373010][ T5765] usb 5-1: Using ep0 maxpacket: 16 [ 737.437323][ T5765] usb 5-1: no configurations [ 737.437341][ T5765] usb 5-1: can't read configurations, error -22 [ 738.479628][ T5890] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 738.486662][ T5765] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 738.766654][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 738.769518][ T5890] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 738.769542][ T5890] usb 1-1: config 0 has no interface number 0 [ 738.786477][ T5765] usb 5-1: Using ep0 maxpacket: 16 [ 738.790555][ T5765] usb 5-1: no configurations [ 738.790570][ T5765] usb 5-1: can't read configurations, error -22 [ 738.798508][ T5765] usb usb5-port1: attempt power cycle [ 738.824013][ T5890] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 738.824038][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.824057][ T5890] usb 1-1: Product: syz [ 738.824070][ T5890] usb 1-1: Manufacturer: syz [ 738.824084][ T5890] usb 1-1: SerialNumber: syz [ 738.862641][ T5890] usb 1-1: config 0 descriptor?? [ 739.156514][ T5765] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 739.278031][ T5890] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 739.278061][ T5890] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 739.366504][ T5765] usb 5-1: device not accepting address 26, error -71 [ 740.856488][ T5890] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 740.856816][ T5890] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 740.913116][ T5890] usb 1-1: USB disconnect, device number 19 [ 742.096565][ T5783] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 742.160833][ T8777] binder: 8776:8777 ioctl c0306201 0 returned -14 [ 742.496533][ T5783] usb 4-1: Using ep0 maxpacket: 8 [ 742.498478][ T5783] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 742.498514][ T5783] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 742.498548][ T5783] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 742.498561][ T5783] usb 4-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 742.498575][ T5783] usb 4-1: config 168 interface 0 has no altsetting 0 [ 742.507191][ T5783] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 742.507226][ T5783] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 742.507263][ T5783] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 742.507288][ T5783] usb 4-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 742.507313][ T5783] usb 4-1: config 168 interface 0 has no altsetting 0 [ 742.511421][ T5783] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 742.511455][ T5783] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 742.511491][ T5783] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 742.511516][ T5783] usb 4-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 742.511548][ T5783] usb 4-1: config 168 interface 0 has no altsetting 0 [ 742.535177][ T5783] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 742.535201][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.535220][ T5783] usb 4-1: Product: syz [ 742.535233][ T5783] usb 4-1: Manufacturer: syz [ 742.535246][ T5783] usb 4-1: SerialNumber: syz [ 743.640479][ T5783] adutux 4-1:168.0: interrupt endpoints not found [ 743.652284][ T5783] usb 4-1: USB disconnect, device number 38 [ 744.086645][ T8775] Bluetooth: hci4: command 0x0406 tx timeout [ 749.065995][ T8818] binder: 8817:8818 ioctl c0306201 0 returned -14 [ 749.978433][ T8738] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 750.136530][ T8738] usb 3-1: Using ep0 maxpacket: 16 [ 750.143926][ T8738] usb 3-1: unable to get BOS descriptor or descriptor too short [ 750.145702][ T8738] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.145731][ T8738] usb 3-1: config 0 has no interfaces? [ 750.179071][ T8738] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05 [ 750.179097][ T8738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.179116][ T8738] usb 3-1: Product: syz [ 750.179129][ T8738] usb 3-1: Manufacturer: syz [ 750.179143][ T8738] usb 3-1: SerialNumber: syz [ 750.190508][ T8738] usb 3-1: config 0 descriptor?? [ 750.226729][ T5765] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 750.236503][ T5742] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 750.376501][ T5765] usb 1-1: Using ep0 maxpacket: 16 [ 750.379191][ T5765] usb 1-1: no configurations [ 750.379206][ T5765] usb 1-1: can't read configurations, error -22 [ 750.406897][ T5742] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.406946][ T5742] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 750.406968][ T5742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.415845][ T5742] usb 5-1: config 0 descriptor?? [ 750.463238][ T5742] pwc: Askey VC010 type 2 USB webcam detected. [ 750.516849][ T5765] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 750.666635][ T5765] usb 1-1: Using ep0 maxpacket: 16 [ 750.667761][ T5765] usb 1-1: no configurations [ 750.667776][ T5765] usb 1-1: can't read configurations, error -22 [ 750.668805][ T5765] usb usb1-port1: attempt power cycle [ 750.832903][ T5742] pwc: recv_control_msg error -32 req 02 val 2b00 [ 750.833618][ T5742] pwc: recv_control_msg error -32 req 02 val 2700 [ 750.834154][ T5742] pwc: recv_control_msg error -32 req 02 val 2c00 [ 750.834679][ T5742] pwc: recv_control_msg error -32 req 04 val 1000 [ 750.835192][ T5742] pwc: recv_control_msg error -32 req 04 val 1300 [ 750.835745][ T5742] pwc: recv_control_msg error -32 req 04 val 1400 [ 750.836256][ T5742] pwc: recv_control_msg error -32 req 02 val 2000 [ 750.861258][ T5742] pwc: recv_control_msg error -32 req 02 val 2100 [ 750.876168][ T5742] pwc: recv_control_msg error -32 req 04 val 1500 [ 751.710910][ T5765] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 751.726754][ T5742] pwc: recv_control_msg error -71 req 02 val 2400 [ 751.729275][ T5742] pwc: recv_control_msg error -71 req 02 val 2600 [ 751.731236][ T5742] pwc: recv_control_msg error -71 req 02 val 2900 [ 751.733175][ T5742] pwc: recv_control_msg error -71 req 02 val 2800 [ 751.738930][ T5765] usb 1-1: Using ep0 maxpacket: 16 [ 751.739739][ T5765] usb 1-1: no configurations [ 751.739752][ T5765] usb 1-1: can't read configurations, error -22 [ 751.757941][ T5742] pwc: recv_control_msg error -71 req 04 val 1100 [ 751.771703][ T5742] pwc: recv_control_msg error -71 req 04 val 1200 [ 751.804458][ T5742] pwc: Registered as video103. [ 751.828845][ T5742] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 751.865830][ T5757] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 751.869051][ T5765] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 751.890215][ T5765] usb 1-1: Using ep0 maxpacket: 16 [ 751.891000][ T5765] usb 1-1: no configurations [ 751.891015][ T5765] usb 1-1: can't read configurations, error -22 [ 751.892783][ T5765] usb usb1-port1: unable to enumerate USB device [ 751.940358][ T5742] usb 5-1: USB disconnect, device number 28 [ 752.029930][ T5757] usb 4-1: Using ep0 maxpacket: 8 [ 752.031583][ T5757] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 752.031619][ T5757] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 752.031644][ T5757] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 752.031657][ T5757] usb 4-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 752.031681][ T5757] usb 4-1: config 168 interface 0 has no altsetting 0 [ 752.032915][ T5757] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 752.032944][ T5757] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 752.032971][ T5757] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 752.032985][ T5757] usb 4-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 752.032998][ T5757] usb 4-1: config 168 interface 0 has no altsetting 0 [ 752.058593][ T5757] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 752.058630][ T5757] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 752.058666][ T5757] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 752.058691][ T5757] usb 4-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 752.058717][ T5757] usb 4-1: config 168 interface 0 has no altsetting 0 [ 752.064020][ T5757] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 752.064043][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.064062][ T5757] usb 4-1: Product: syz [ 752.064075][ T5757] usb 4-1: Manufacturer: syz [ 752.064088][ T5757] usb 4-1: SerialNumber: syz [ 752.104247][ T31] usb 3-1: USB disconnect, device number 12 [ 752.248912][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.248977][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.372684][ T5757] adutux 4-1:168.0: interrupt endpoints not found [ 752.425367][ T5757] usb 4-1: USB disconnect, device number 39 [ 754.269759][ T8856] binder: 8855:8856 ioctl c0306201 0 returned -14 [ 754.978971][ T5757] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 755.139178][ T5757] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x34, changing to 0x4 [ 755.139214][ T5757] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 755.168113][ T5757] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 755.168140][ T5757] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 755.168158][ T5757] usb 1-1: Manufacturer: syz [ 755.168165][ T5757] usb 1-1: SerialNumber: syz [ 756.424950][ T5757] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 756.497203][ T5757] usb 1-1: USB disconnect, device number 24 [ 757.647109][ T8878] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 757.647130][ T8878] IPv6: NLM_F_CREATE should be set when creating new route [ 758.809605][ T5765] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 758.990227][ T8888] binder: 8887:8888 ioctl c0306201 0 returned -14 [ 759.857252][ T5765] usb 2-1: Using ep0 maxpacket: 16 [ 759.857940][ T5765] usb 2-1: no configurations [ 759.857956][ T5765] usb 2-1: can't read configurations, error -22 [ 759.990828][ T5765] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 760.346574][ T5765] usb 2-1: device not accepting address 19, error -71 [ 760.347493][ T5765] usb usb2-port1: attempt power cycle [ 763.916513][ T8738] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 764.050059][ T8738] usb 5-1: device descriptor read/64, error -71 [ 764.210731][ T8919] binder: 8918:8919 ioctl c0306201 0 returned -14 [ 765.266496][ T8738] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 765.416551][ T8738] usb 5-1: device descriptor read/64, error -71 [ 765.538416][ T8738] usb usb5-port1: attempt power cycle [ 765.587835][ T5783] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 765.762600][ T5783] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.762654][ T5783] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 765.762677][ T5783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.804766][ T5783] usb 2-1: config 0 descriptor?? [ 765.816262][ T5783] pwc: Askey VC010 type 2 USB webcam detected. [ 765.876643][ T8738] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 765.910696][ T8738] usb 5-1: device descriptor read/8, error -71 [ 766.556963][ T8738] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 766.672122][ T8738] usb 5-1: device descriptor read/8, error -71 [ 766.781107][ T8738] usb usb5-port1: unable to enumerate USB device [ 766.955017][ T5783] pwc: recv_control_msg error -32 req 02 val 2b00 [ 766.955754][ T5783] pwc: recv_control_msg error -32 req 02 val 2700 [ 766.970106][ T5783] pwc: recv_control_msg error -32 req 02 val 2c00 [ 766.971312][ T5783] pwc: recv_control_msg error -32 req 04 val 1000 [ 766.972651][ T5783] pwc: recv_control_msg error -32 req 04 val 1300 [ 766.973341][ T5783] pwc: recv_control_msg error -32 req 04 val 1400 [ 766.974020][ T5783] pwc: recv_control_msg error -32 req 02 val 2000 [ 766.974685][ T5783] pwc: recv_control_msg error -32 req 02 val 2100 [ 766.975335][ T5783] pwc: recv_control_msg error -32 req 04 val 1500 [ 767.186038][ T5783] pwc: recv_control_msg error -71 req 02 val 2400 [ 767.186618][ T5783] pwc: recv_control_msg error -71 req 02 val 2600 [ 767.187062][ T5783] pwc: recv_control_msg error -71 req 02 val 2900 [ 767.187504][ T5783] pwc: recv_control_msg error -71 req 02 val 2800 [ 767.188113][ T5783] pwc: recv_control_msg error -71 req 04 val 1100 [ 767.189559][ T5783] pwc: recv_control_msg error -71 req 04 val 1200 [ 767.234682][ T5783] pwc: Registered as video103. [ 767.254029][ T5783] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 767.296463][ T5783] usb 2-1: USB disconnect, device number 21 [ 767.402278][ T5765] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 768.166614][ T5765] usb 3-1: Using ep0 maxpacket: 16 [ 768.170824][ T5765] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 768.170867][ T5765] usb 3-1: can't read configurations, error -61 [ 768.296510][ T5765] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 769.277950][ T5765] usb 3-1: Using ep0 maxpacket: 16 [ 769.323368][ T5765] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 769.323404][ T5765] usb 3-1: can't read configurations, error -61 [ 769.341926][ T5765] usb usb3-port1: attempt power cycle [ 769.676540][ T5765] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 769.707360][ T5765] usb 3-1: Using ep0 maxpacket: 16 [ 769.710661][ T5765] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 769.710693][ T5765] usb 3-1: can't read configurations, error -61 [ 769.846549][ T5765] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 769.877224][ T5765] usb 3-1: Using ep0 maxpacket: 16 [ 769.884003][ T5765] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 769.884037][ T5765] usb 3-1: can't read configurations, error -61 [ 769.884385][ T5765] usb usb3-port1: unable to enumerate USB device [ 771.325217][ T8973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1072'. [ 772.456062][ T36] audit: type=1804 audit(1779711086.454:6): pid=8983 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1075" name="/newroot/225/file0" dev="tmpfs" ino=1190 res=1 errno=0 [ 775.469320][ T9009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1086'. [ 775.829493][ T5741] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 776.009824][ T5741] usb 2-1: Using ep0 maxpacket: 16 [ 776.025243][ T5741] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 776.025279][ T5741] usb 2-1: can't read configurations, error -61 [ 776.937913][ T5741] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 778.237184][ T36] audit: type=1804 audit(1779711092.274:7): pid=9029 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1093" name="/newroot/211/file0" dev="tmpfs" ino=1117 res=1 errno=0 [ 778.387554][ T5741] usb 2-1: Using ep0 maxpacket: 16 [ 778.390374][ T5741] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 778.390408][ T5741] usb 2-1: can't read configurations, error -61 [ 778.390740][ T5741] usb usb2-port1: attempt power cycle [ 779.132923][ T9042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1100'. [ 780.786860][ T5783] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 780.846512][ T31] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 780.940375][ T5783] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.940427][ T5783] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 780.940440][ T5783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.957810][ T5783] usb 2-1: config 0 descriptor?? [ 780.996223][ T5783] pwc: Askey VC010 type 2 USB webcam detected. [ 781.006518][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 781.021636][ T31] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 781.021660][ T31] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 781.021680][ T31] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 781.021699][ T31] usb 1-1: config 0 has no interface number 1 [ 781.021756][ T31] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 781.021783][ T31] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 781.021806][ T31] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 781.021839][ T31] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 781.021867][ T31] usb 1-1: config 0 interface 125 has no altsetting 0 [ 781.052262][ T31] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 781.052290][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.052309][ T31] usb 1-1: Product: syz [ 781.052322][ T31] usb 1-1: Manufacturer: syz [ 781.052336][ T31] usb 1-1: SerialNumber: syz [ 781.150491][ T31] usb 1-1: config 0 descriptor?? [ 781.349971][ T9073] 9p: Could not find request transport: fd0x0000000000000004 [ 781.410396][ T5783] pwc: recv_control_msg error -32 req 02 val 2b00 [ 781.415979][ T5783] pwc: recv_control_msg error -32 req 02 val 2700 [ 781.417261][ T5866] usb 1-1: USB disconnect, device number 25 [ 781.441272][ T5783] pwc: recv_control_msg error -32 req 02 val 2c00 [ 781.442954][ T5783] pwc: recv_control_msg error -32 req 04 val 1000 [ 781.443679][ T5783] pwc: recv_control_msg error -32 req 04 val 1300 [ 781.446841][ T5783] pwc: recv_control_msg error -32 req 04 val 1400 [ 781.473720][ T5783] pwc: recv_control_msg error -32 req 02 val 2000 [ 781.474846][ T5783] pwc: recv_control_msg error -32 req 02 val 2100 [ 781.475747][ T5783] pwc: recv_control_msg error -32 req 04 val 1500 [ 781.678864][ T5783] pwc: recv_control_msg error -71 req 02 val 2400 [ 781.679342][ T5783] pwc: recv_control_msg error -71 req 02 val 2600 [ 781.679878][ T5783] pwc: recv_control_msg error -71 req 02 val 2900 [ 781.680340][ T5783] pwc: recv_control_msg error -71 req 02 val 2800 [ 781.681000][ T5783] pwc: recv_control_msg error -71 req 04 val 1100 [ 781.681458][ T5783] pwc: recv_control_msg error -71 req 04 val 1200 [ 781.692447][ T5783] pwc: Registered as video103. [ 781.730156][ T5783] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 781.761101][ T5783] usb 2-1: USB disconnect, device number 25 [ 781.792576][ T9078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1112'. [ 784.292769][ T9103] 9p: Could not find request transport: fd0x0000000000000004 [ 784.418557][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 784.693124][ T9121] netlink: 'syz.1.1130': attribute type 1 has an invalid length. [ 784.693145][ T9121] netlink: 'syz.1.1130': attribute type 2 has an invalid length. [ 784.816526][ T5783] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 784.838139][ T5742] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 784.982154][ T5783] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.982211][ T5783] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 784.982235][ T5783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.997798][ T5783] usb 1-1: config 0 descriptor?? [ 785.012405][ T5742] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.012458][ T5742] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 785.012537][ T5742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.028637][ T5742] usb 3-1: config 0 descriptor?? [ 785.036168][ T5783] pwc: Askey VC010 type 2 USB webcam detected. [ 785.171646][ T5742] pwc: Askey VC010 type 2 USB webcam detected. [ 786.242441][ T5742] pwc: recv_control_msg error -32 req 02 val 2b00 [ 786.243392][ T5742] pwc: recv_control_msg error -32 req 02 val 2700 [ 786.246074][ T5742] pwc: recv_control_msg error -32 req 02 val 2c00 [ 786.251336][ T5742] pwc: recv_control_msg error -32 req 04 val 1000 [ 786.280270][ T5742] pwc: recv_control_msg error -32 req 04 val 1300 [ 786.282470][ T5742] pwc: recv_control_msg error -32 req 04 val 1400 [ 786.283914][ T5742] pwc: recv_control_msg error -32 req 02 val 2000 [ 786.285337][ T5742] pwc: recv_control_msg error -32 req 02 val 2100 [ 786.295042][ T5742] pwc: recv_control_msg error -32 req 04 val 1500 [ 786.351050][ T5783] pwc: recv_control_msg error -32 req 02 val 2b00 [ 786.366276][ T5783] pwc: recv_control_msg error -32 req 02 val 2700 [ 786.376266][ T5783] pwc: recv_control_msg error -32 req 02 val 2c00 [ 786.383907][ T5783] pwc: recv_control_msg error -32 req 04 val 1000 [ 786.384692][ T5783] pwc: recv_control_msg error -32 req 04 val 1300 [ 786.386078][ T5783] pwc: recv_control_msg error -32 req 04 val 1400 [ 786.405107][ T5783] pwc: recv_control_msg error -32 req 02 val 2000 [ 786.414618][ T5783] pwc: recv_control_msg error -71 req 02 val 2100 [ 786.415563][ T5783] pwc: recv_control_msg error -71 req 04 val 1500 [ 786.428812][ T5783] pwc: recv_control_msg error -71 req 02 val 2500 [ 786.437724][ T5783] pwc: recv_control_msg error -71 req 02 val 2400 [ 786.438835][ T5783] pwc: recv_control_msg error -71 req 02 val 2600 [ 786.439654][ T5783] pwc: recv_control_msg error -71 req 02 val 2900 [ 786.440618][ T5783] pwc: recv_control_msg error -71 req 02 val 2800 [ 786.443634][ T5783] pwc: recv_control_msg error -71 req 04 val 1100 [ 786.444259][ T5783] pwc: recv_control_msg error -71 req 04 val 1200 [ 786.495943][ T5783] pwc: Registered as video103. [ 786.508906][ T5783] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 786.511006][ T5742] pwc: recv_control_msg error -71 req 02 val 2400 [ 786.511430][ T5742] pwc: recv_control_msg error -71 req 02 val 2600 [ 786.513112][ T5742] pwc: recv_control_msg error -71 req 02 val 2900 [ 786.513541][ T5742] pwc: recv_control_msg error -71 req 02 val 2800 [ 786.514165][ T5742] pwc: recv_control_msg error -71 req 04 val 1100 [ 786.514625][ T5742] pwc: recv_control_msg error -71 req 04 val 1200 [ 786.514718][ T5742] videodev: could not get a free minor [ 786.514726][ T5742] pwc: Failed to register as video device (-23). [ 786.515856][ T5742] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -23 [ 786.754241][ T5742] usb 3-1: USB disconnect, device number 17 [ 786.756193][ T5783] usb 1-1: USB disconnect, device number 26 [ 787.514261][ T9143] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1136'. [ 788.956908][ T9150] 9p: Could not find request transport: fd0x0000000000000004 [ 789.265264][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1140'. [ 790.134347][ T36] audit: type=1804 audit(1779711104.164:8): pid=9172 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1146" name="/newroot/223/file0" dev="tmpfs" ino=1186 res=1 errno=0 [ 791.277289][ T5742] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 792.439662][ T5742] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.439714][ T5742] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 792.439738][ T5742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.442544][ T5742] usb 1-1: config 0 descriptor?? [ 792.457808][ T5742] pwc: Askey VC010 type 2 USB webcam detected. [ 792.555488][ T9194] 9pnet_fd: Insufficient options for proto=fd [ 792.866407][ T5742] pwc: recv_control_msg error -32 req 02 val 2b00 [ 792.868267][ T5742] pwc: recv_control_msg error -32 req 02 val 2700 [ 792.870378][ T5742] pwc: recv_control_msg error -32 req 02 val 2c00 [ 792.871041][ T5742] pwc: recv_control_msg error -32 req 04 val 1000 [ 792.872959][ T5742] pwc: recv_control_msg error -32 req 04 val 1300 [ 792.873608][ T5742] pwc: recv_control_msg error -32 req 04 val 1400 [ 792.874602][ T5742] pwc: recv_control_msg error -32 req 02 val 2000 [ 792.874992][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 792.875118][ T5742] pwc: recv_control_msg error -32 req 02 val 2100 [ 792.875467][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 792.875597][ T5742] pwc: recv_control_msg error -32 req 04 val 1500 [ 792.875952][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 792.876079][ T5742] pwc: recv_control_msg error -32 req 02 val 2500 [ 792.876519][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 792.879424][ T5742] pwc: recv_control_msg error -32 req 02 val 2400 [ 792.879762][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 792.879887][ T5742] pwc: recv_control_msg error -32 req 02 val 2600 [ 792.880231][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 792.880462][ T5742] pwc: recv_control_msg error -32 req 02 val 2900 [ 792.880806][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 792.881219][ T5742] pwc: recv_control_msg error -32 req 02 val 2800 [ 792.881765][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 792.882359][ T5742] pwc: recv_control_msg error -32 req 04 val 1100 [ 792.882691][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 792.883140][ T5742] pwc: recv_control_msg error -32 req 04 val 1200 [ 792.913299][ T5742] pwc: Registered as video103. [ 792.919922][ T5742] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input20 [ 792.953123][ T5742] usb 1-1: USB disconnect, device number 27 [ 792.980043][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1157'. [ 794.677875][ T36] audit: type=1804 audit(1779711108.714:9): pid=9213 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1160" name="/newroot/245/file0" dev="tmpfs" ino=1291 res=1 errno=0 [ 796.246958][ T9230] 9pnet_fd: Insufficient options for proto=fd [ 797.924892][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 800.188317][ T5742] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 800.351517][ T5742] usb 3-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 800.351567][ T5742] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 800.351594][ T5742] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 800.351621][ T5742] usb 3-1: config 0 interface 0 has no altsetting 0 [ 800.351653][ T5742] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 800.351676][ T5742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.371642][ T5742] usb 3-1: config 0 descriptor?? [ 800.392310][ T9247] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 800.434768][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 800.794685][ T9265] 9pnet_fd: Insufficient options for proto=fd [ 800.823250][ T5742] usbhid 3-1:0.0: can't add hid device: -71 [ 800.832077][ T5742] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 800.849894][ T5742] usb 3-1: USB disconnect, device number 18 [ 801.607712][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 802.492398][ T5765] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 803.308998][ T5765] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.309052][ T5765] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 803.309076][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.313657][ T5765] usb 2-1: config 0 descriptor?? [ 803.352288][ T5765] pwc: Askey VC010 type 2 USB webcam detected. [ 805.473752][ T5765] pwc: recv_control_msg error -32 req 02 val 2b00 [ 805.483544][ T5765] pwc: recv_control_msg error -32 req 02 val 2700 [ 805.496400][ T5765] pwc: recv_control_msg error -32 req 02 val 2c00 [ 805.497175][ T5765] pwc: recv_control_msg error -32 req 04 val 1000 [ 805.500970][ T5765] pwc: recv_control_msg error -32 req 04 val 1300 [ 805.502594][ T5765] pwc: recv_control_msg error -32 req 04 val 1400 [ 805.503581][ T5765] pwc: recv_control_msg error -32 req 02 val 2000 [ 805.505868][ T5765] pwc: recv_control_msg error -32 req 02 val 2100 [ 805.513653][ T5765] pwc: recv_control_msg error -32 req 04 val 1500 [ 805.720688][ T5765] pwc: recv_control_msg error -71 req 02 val 2400 [ 805.721178][ T5765] pwc: recv_control_msg error -71 req 02 val 2600 [ 805.721658][ T5765] pwc: recv_control_msg error -71 req 02 val 2900 [ 805.722121][ T5765] pwc: recv_control_msg error -71 req 02 val 2800 [ 805.725267][ T5765] pwc: recv_control_msg error -71 req 04 val 1100 [ 805.725721][ T5765] pwc: recv_control_msg error -71 req 04 val 1200 [ 805.774486][ T5765] pwc: Registered as video103. [ 805.789798][ T5765] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21 [ 805.808365][ T5765] usb 2-1: USB disconnect, device number 26 [ 806.377642][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1194'. [ 806.776536][ T5890] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 806.832389][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'. [ 806.928787][ T5890] usb 2-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 806.928821][ T5890] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 806.928835][ T5890] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 806.928849][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0 [ 806.928867][ T5890] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 806.928878][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.932392][ T5890] usb 2-1: config 0 descriptor?? [ 806.934726][ T9310] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 807.079566][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1190'. [ 807.179582][ T9323] 9pnet_fd: Insufficient options for proto=fd [ 807.364777][ T5890] usbhid 2-1:0.0: can't add hid device: -71 [ 807.364894][ T5890] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 807.382907][ T5890] usb 2-1: USB disconnect, device number 27 [ 807.426874][ T5742] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 807.858836][ T5742] usb 1-1: Using ep0 maxpacket: 32 [ 807.996653][ T5742] usb 1-1: no configurations [ 807.996673][ T5742] usb 1-1: can't read configurations, error -22 [ 809.261876][ T5742] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 809.406504][ T5742] usb 1-1: Using ep0 maxpacket: 32 [ 809.409874][ T5742] usb 1-1: no configurations [ 809.409890][ T5742] usb 1-1: can't read configurations, error -22 [ 809.410370][ T5742] usb usb1-port1: attempt power cycle [ 810.573733][ T9347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1207'. [ 812.040823][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1211'. [ 812.112650][ T9362] 9pnet_fd: Insufficient options for proto=fd [ 812.416522][ T5742] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 813.581819][ T5742] usb 1-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 813.581860][ T5742] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 813.581875][ T5742] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 813.581889][ T5742] usb 1-1: config 0 interface 0 has no altsetting 0 [ 813.581906][ T5742] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 813.581918][ T5742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.668868][ T5742] usb 1-1: config 0 descriptor?? [ 813.669648][ T9366] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 813.693137][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.693200][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.771350][ T9375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.084477][ T5742] usbhid 1-1:0.0: can't add hid device: -71 [ 814.084590][ T5742] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 814.103891][ T5742] usb 1-1: USB disconnect, device number 31 [ 814.561558][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1221'. [ 815.487762][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1224'. [ 822.786499][ T5783] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 822.940193][ T9484] netlink: 'syz.0.1253': attribute type 3 has an invalid length. [ 822.940329][ T9484] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1253'. [ 822.940713][ T5783] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.940784][ T5783] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 822.940808][ T5783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.001574][ T5783] usb 2-1: config 0 descriptor?? [ 823.014024][ T5783] pwc: Askey VC010 type 2 USB webcam detected. [ 823.156509][ T5742] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 823.330769][ T5742] usb 3-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 823.331015][ T5742] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 823.331052][ T5742] usb 3-1: config 220 interface 0 has no altsetting 0 [ 823.334949][ T5742] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 823.334976][ T5742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.335218][ T5742] usb 3-1: Product: syz [ 823.335232][ T5742] usb 3-1: Manufacturer: syz [ 823.335246][ T5742] usb 3-1: SerialNumber: syz [ 824.025075][ T5783] pwc: recv_control_msg error -32 req 02 val 2b00 [ 824.026996][ T5783] pwc: recv_control_msg error -32 req 02 val 2700 [ 824.028347][ T5783] pwc: recv_control_msg error -32 req 02 val 2c00 [ 824.029135][ T5783] pwc: recv_control_msg error -32 req 04 val 1000 [ 824.037533][ T5783] pwc: recv_control_msg error -32 req 04 val 1300 [ 824.045523][ T5783] pwc: recv_control_msg error -32 req 04 val 1400 [ 824.064449][ T5783] pwc: recv_control_msg error -32 req 02 val 2000 [ 824.088161][ T5783] pwc: recv_control_msg error -71 req 02 val 2100 [ 824.096004][ T5783] pwc: recv_control_msg error -71 req 04 val 1500 [ 824.096614][ T5783] pwc: recv_control_msg error -71 req 02 val 2500 [ 824.097223][ T5783] pwc: recv_control_msg error -71 req 02 val 2400 [ 824.097760][ T5783] pwc: recv_control_msg error -71 req 02 val 2600 [ 824.120580][ T5783] pwc: recv_control_msg error -71 req 02 val 2900 [ 824.136267][ T5783] pwc: recv_control_msg error -71 req 02 val 2800 [ 824.145121][ T5783] pwc: recv_control_msg error -71 req 04 val 1100 [ 824.152833][ T5783] pwc: recv_control_msg error -71 req 04 val 1200 [ 824.205718][ T5783] pwc: Registered as video103. [ 824.228604][ T5783] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 824.280450][ T5742] uvcvideo 3-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 824.280484][ T5742] uvcvideo 3-1:220.0: No valid video chain found. [ 824.304543][ T5742] usb 3-1: USB disconnect, device number 19 [ 824.338273][ T5783] usb 2-1: USB disconnect, device number 28 [ 824.766625][ T8738] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 824.918871][ T8738] usb 5-1: Using ep0 maxpacket: 8 [ 824.922520][ T8738] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 824.922545][ T8738] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 824.922592][ T8738] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 824.922615][ T8738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.553881][ T9508] program syz.3.1258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 828.162348][ T5742] usb 5-1: USB disconnect, device number 33 [ 829.266575][ T5742] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 829.416954][ T5742] usb 2-1: Using ep0 maxpacket: 16 [ 829.422199][ T5742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.422229][ T5742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.422265][ T5742] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 829.422288][ T5742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.475364][ T5742] usb 2-1: config 0 descriptor?? [ 831.771287][ T5742] hid (null): bogus close delimiter [ 831.971532][ T5742] usb 2-1: string descriptor 0 read error: -71 [ 832.002095][ T5742] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 832.002144][ T5742] letsketch 0003:6161:4D15.0002: probe with driver letsketch failed with error -32 [ 832.027810][ T5742] usb 2-1: USB disconnect, device number 29 [ 832.036895][ T5890] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 832.193121][ T5890] usb 3-1: config 0 has an invalid interface number: 159 but max is 0 [ 832.193149][ T5890] usb 3-1: config 0 has no interface number 0 [ 832.193200][ T5890] usb 3-1: config 0 interface 159 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 832.193211][ T5890] usb 3-1: config 0 interface 159 altsetting 7 has an endpoint descriptor with address 0xB8, changing to 0x88 [ 832.193225][ T5890] usb 3-1: config 0 interface 159 altsetting 7 endpoint 0x88 has invalid maxpacket 35498, setting to 64 [ 832.193239][ T5890] usb 3-1: config 0 interface 159 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 832.193253][ T5890] usb 3-1: config 0 interface 159 has no altsetting 0 [ 832.206781][ T5890] usb 3-1: New USB device found, idVendor=045e, idProduct=0407, bcdDevice=47.7e [ 832.206808][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.206828][ T5890] usb 3-1: Product: syz [ 832.206841][ T5890] usb 3-1: Manufacturer: syz [ 832.206855][ T5890] usb 3-1: SerialNumber: syz [ 832.214061][ T5890] usb 3-1: config 0 descriptor?? [ 832.232680][ T9560] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 832.477487][ T5890] usb 3-1: USB disconnect, device number 20 [ 832.769822][ T9581] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 835.366534][ T5742] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 835.516507][ T5742] usb 3-1: Using ep0 maxpacket: 16 [ 835.520299][ T5742] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 835.520326][ T5742] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 835.520347][ T5742] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 835.520367][ T5742] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 835.520387][ T5742] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 835.520407][ T5742] usb 3-1: config 0 has no interface number 0 [ 835.520453][ T5742] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 835.520480][ T5742] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 835.520503][ T5742] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 835.520537][ T5742] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 835.520565][ T5742] usb 3-1: config 0 interface 125 has no altsetting 0 [ 835.520583][ T5742] usb 3-1: config 0 interface 125 has no altsetting 2 [ 835.523090][ T5742] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 835.523120][ T5742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.523141][ T5742] usb 3-1: Product: syz [ 835.523155][ T5742] usb 3-1: Manufacturer: syz [ 835.523169][ T5742] usb 3-1: SerialNumber: syz [ 835.681232][ T5742] usb 3-1: config 0 descriptor?? [ 835.715408][ T5742] usb 3-1: selecting invalid altsetting 2 [ 836.285674][ T9626] process 'syz.3.1301' launched './file0' with NULL argv: empty string added [ 836.298674][ T9626] Invalid argument reading file caps for ./file0 [ 837.032735][ T5742] usb 3-1: USB disconnect, device number 21 [ 837.332552][ T9636] binder: 9635:9636 ioctl 4018620d 0 returned -22 [ 837.526538][ T5757] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 837.678873][ T5757] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 837.678899][ T5757] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 837.678935][ T5757] usb 2-1: config 220 interface 0 has no altsetting 0 [ 837.682508][ T5757] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 837.682534][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.682554][ T5757] usb 2-1: Product: syz [ 837.682566][ T5757] usb 2-1: Manufacturer: syz [ 837.682573][ T5757] usb 2-1: SerialNumber: syz [ 837.971201][ T5757] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 837.971234][ T5757] uvcvideo 2-1:220.0: No valid video chain found. [ 838.011901][ T5757] usb 2-1: USB disconnect, device number 30 [ 839.676505][ T5757] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 839.868403][ T5757] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.868436][ T5757] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 839.868449][ T5757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.871335][ T5757] usb 2-1: config 0 descriptor?? [ 839.913541][ T5757] pwc: Askey VC010 type 2 USB webcam detected. [ 840.046578][ T8947] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 840.196505][ T8947] usb 4-1: Using ep0 maxpacket: 16 [ 840.198662][ T8947] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 840.198688][ T8947] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 840.198708][ T8947] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 840.198727][ T8947] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 840.198747][ T8947] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 840.198767][ T8947] usb 4-1: config 0 has no interface number 0 [ 840.198804][ T8947] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 840.198818][ T8947] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 840.198890][ T8947] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 840.198924][ T8947] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 840.198952][ T8947] usb 4-1: config 0 interface 125 has no altsetting 0 [ 840.198970][ T8947] usb 4-1: config 0 interface 125 has no altsetting 2 [ 840.201262][ T8947] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 840.201288][ T8947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.201308][ T8947] usb 4-1: Product: syz [ 840.201322][ T8947] usb 4-1: Manufacturer: syz [ 840.201336][ T8947] usb 4-1: SerialNumber: syz [ 840.207445][ T8947] usb 4-1: config 0 descriptor?? [ 840.277460][ T8947] usb 4-1: selecting invalid altsetting 2 [ 840.303218][ T5757] pwc: recv_control_msg error -32 req 02 val 2b00 [ 840.326176][ T5757] pwc: recv_control_msg error -32 req 02 val 2700 [ 840.360374][ T5757] pwc: recv_control_msg error -32 req 02 val 2c00 [ 840.377993][ T5757] pwc: recv_control_msg error -32 req 04 val 1000 [ 840.386502][ T5757] pwc: recv_control_msg error -32 req 04 val 1300 [ 840.387236][ T5757] pwc: recv_control_msg error -32 req 04 val 1400 [ 840.754430][ T5757] pwc: recv_control_msg error -71 req 02 val 2100 [ 840.755941][ T5757] pwc: recv_control_msg error -71 req 04 val 1500 [ 840.762300][ T5757] pwc: recv_control_msg error -71 req 02 val 2500 [ 840.776964][ T5757] pwc: recv_control_msg error -71 req 02 val 2400 [ 840.777986][ T5757] pwc: recv_control_msg error -71 req 02 val 2600 [ 840.779006][ T5757] pwc: recv_control_msg error -71 req 02 val 2900 [ 840.780998][ T5757] pwc: recv_control_msg error -71 req 02 val 2800 [ 840.781565][ T5757] pwc: recv_control_msg error -71 req 04 val 1100 [ 840.781947][ T5757] pwc: recv_control_msg error -71 req 04 val 1200 [ 840.785930][ T5757] pwc: Registered as video103. [ 841.612526][ T5757] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 841.654374][ T5757] usb 2-1: USB disconnect, device number 31 [ 841.825316][ T8947] get_1284_register timeout [ 841.842390][ C0] usb 4-1: async_complete: urb error -104 [ 842.896565][ T9698] binder: 9697:9698 ioctl 4018620d 0 returned -22 [ 843.180049][ T5890] usb 4-1: USB disconnect, device number 40 [ 846.294429][ T9714] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 847.527971][ T4916] Bluetooth: hci0: command 0x0406 tx timeout [ 848.506489][ T5742] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 848.659677][ T5742] usb 3-1: Using ep0 maxpacket: 16 [ 848.662057][ T5742] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 848.662082][ T5742] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 848.662102][ T5742] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 848.662122][ T5742] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 848.662141][ T5742] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 848.662161][ T5742] usb 3-1: config 0 has no interface number 0 [ 848.662204][ T5742] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 848.662231][ T5742] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 848.662254][ T5742] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 848.662288][ T5742] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 848.662315][ T5742] usb 3-1: config 0 interface 125 has no altsetting 0 [ 848.662333][ T5742] usb 3-1: config 0 interface 125 has no altsetting 2 [ 848.675018][ T5742] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 848.675044][ T5742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.675063][ T5742] usb 3-1: Product: syz [ 848.675076][ T5742] usb 3-1: Manufacturer: syz [ 848.675090][ T5742] usb 3-1: SerialNumber: syz [ 848.694486][ T5742] usb 3-1: config 0 descriptor?? [ 848.705302][ T5742] usb 3-1: selecting invalid altsetting 2 [ 848.722709][ T9745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 850.251790][ T5742] get_1284_register timeout [ 850.257700][ C0] usb 3-1: async_complete: urb error -104 [ 850.257792][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 852.372805][ T8738] usb 3-1: USB disconnect, device number 22 [ 854.046583][ T8738] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 854.196491][ T8738] usb 2-1: Using ep0 maxpacket: 8 [ 854.198407][ T8738] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 854.198460][ T8738] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 854.198483][ T8738] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 854.198506][ T8738] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 854.198614][ T8738] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 854.198657][ T8738] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 854.198679][ T8738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.268449][ T9791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 855.389818][ T8738] usb 2-1: GET_CAPABILITIES returned 0 [ 855.389867][ T8738] usbtmc 2-1:16.0: can't read capabilities [ 856.246796][ T31] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 856.616486][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 856.636523][ T31] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 856.636710][ T31] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 856.636733][ T31] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 856.636752][ T31] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 856.636772][ T31] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 856.636791][ T31] usb 1-1: config 0 has no interface number 0 [ 856.636987][ T31] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 856.637016][ T31] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 856.637038][ T31] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 856.637073][ T31] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 856.637997][ T31] usb 1-1: config 0 interface 125 has no altsetting 0 [ 856.638019][ T31] usb 1-1: config 0 interface 125 has no altsetting 2 [ 856.646081][ T31] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 856.646235][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.646256][ T31] usb 1-1: Product: syz [ 856.646270][ T31] usb 1-1: Manufacturer: syz [ 856.646283][ T31] usb 1-1: SerialNumber: syz [ 857.502903][ T31] usb 1-1: config 0 descriptor?? [ 857.516514][ T5783] usb 2-1: USB disconnect, device number 32 [ 857.551756][ T31] usb 1-1: selecting invalid altsetting 2 [ 858.691964][ T31] get_1284_register timeout [ 858.696358][ C1] usb 1-1: async_complete: urb error -104 [ 858.696481][ C1] usb 1-1: async_complete: urb error -104 [ 858.696547][ C1] usb 1-1: async_complete: urb error -104 [ 859.860848][ T5866] usb 1-1: USB disconnect, device number 32 [ 860.080354][ T9839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 860.691579][ T9855] netlink: 'syz.2.1377': attribute type 3 has an invalid length. [ 860.691600][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1377'. [ 863.918297][ T8738] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 864.087634][ T8738] usb 4-1: Using ep0 maxpacket: 16 [ 864.090568][ T8738] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 864.090595][ T8738] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 864.090616][ T8738] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 864.090635][ T8738] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 864.090654][ T8738] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 864.090675][ T8738] usb 4-1: config 0 has no interface number 0 [ 864.090719][ T8738] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 864.090745][ T8738] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 864.090767][ T8738] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 864.090800][ T8738] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 864.090827][ T8738] usb 4-1: config 0 interface 125 has no altsetting 0 [ 864.090844][ T8738] usb 4-1: config 0 interface 125 has no altsetting 2 [ 864.095640][ T8738] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 864.095666][ T8738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.095686][ T8738] usb 4-1: Product: syz [ 864.095700][ T8738] usb 4-1: Manufacturer: syz [ 864.095714][ T8738] usb 4-1: SerialNumber: syz [ 864.252595][ T8738] usb 4-1: config 0 descriptor?? [ 864.279996][ T8738] usb 4-1: selecting invalid altsetting 2 [ 865.310387][ T8738] usb 4-1: USB disconnect, device number 41 [ 870.157995][ T5742] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 870.461299][ T5742] usb 4-1: Using ep0 maxpacket: 16 [ 870.739923][ T5742] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 870.740002][ T5742] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 870.740047][ T5742] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 870.740091][ T5742] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 870.740218][ T5742] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 870.740264][ T5742] usb 4-1: config 0 has no interface number 0 [ 870.740627][ T5742] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 870.740681][ T5742] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 870.740752][ T5742] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 870.740909][ T5742] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 870.740961][ T5742] usb 4-1: config 0 interface 125 has no altsetting 0 [ 870.741004][ T5742] usb 4-1: config 0 interface 125 has no altsetting 2 [ 870.899456][ T5742] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 870.899485][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.899506][ T5742] usb 4-1: Product: syz [ 870.899520][ T5742] usb 4-1: Manufacturer: syz [ 870.899534][ T5742] usb 4-1: SerialNumber: syz [ 871.093610][ T5742] usb 4-1: config 0 descriptor?? [ 871.105914][ T5742] usb 4-1: selecting invalid altsetting 2 [ 872.300720][ T5742] get_1284_register timeout [ 872.300841][ C0] usb 4-1: async_complete: urb error -104 [ 872.300999][ C0] usb 4-1: async_complete: urb error -104 [ 873.746618][ T8738] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 873.897299][ T8738] usb 3-1: Using ep0 maxpacket: 16 [ 873.903930][ T8738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.903961][ T8738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.904001][ T8738] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 873.904024][ T8738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.935470][ T8738] usb 3-1: config 0 descriptor?? [ 873.979508][ T9975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1425'. [ 874.394817][ T8738] usbhid 3-1:0.0: can't add hid device: -71 [ 874.394939][ T8738] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 874.429481][ T8738] usb 3-1: USB disconnect, device number 23 [ 874.705228][ T5890] usb 4-1: USB disconnect, device number 42 [ 875.346612][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.346680][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.245655][T10022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 880.051882][ T5630] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 880.108473][ T31] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 880.167594][ T8738] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 880.225812][T10044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1448'. [ 880.226662][T10044] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1448'. [ 880.226728][T10044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1448'. [ 880.237710][T10044] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1448'. [ 880.790985][ T31] usb 1-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 880.791042][ T31] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 880.791070][ T31] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 880.791116][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 880.791149][ T31] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 880.791172][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.884164][ T31] usb 1-1: config 0 descriptor?? [ 880.885032][T10038] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 880.899584][ T8738] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 880.919664][ T8738] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 880.919691][ T8738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.919710][ T8738] usb 3-1: Product: syz [ 880.919725][ T8738] usb 3-1: Manufacturer: syz [ 880.919739][ T8738] usb 3-1: SerialNumber: syz [ 880.976504][ T5630] usb 5-1: Using ep0 maxpacket: 16 [ 880.978904][ T5630] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 880.978928][ T5630] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 880.978949][ T5630] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 880.978968][ T5630] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 880.978987][ T5630] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 880.979008][ T5630] usb 5-1: config 0 has no interface number 0 [ 880.979050][ T5630] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 880.979077][ T5630] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 880.979100][ T5630] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 880.979134][ T5630] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 880.979161][ T5630] usb 5-1: config 0 interface 125 has no altsetting 0 [ 880.979179][ T5630] usb 5-1: config 0 interface 125 has no altsetting 2 [ 880.983262][ T5630] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 880.983284][ T5630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.983301][ T5630] usb 5-1: Product: syz [ 880.983320][ T5630] usb 5-1: Manufacturer: syz [ 880.983331][ T5630] usb 5-1: SerialNumber: syz [ 881.157777][ T5630] usb 5-1: config 0 descriptor?? [ 881.157844][ T8738] usb 3-1: config 0 descriptor?? [ 881.167231][ T5630] usb 5-1: selecting invalid altsetting 2 [ 881.185345][ T8738] pegasus_notetaker 3-1:0.0: Invalid number of endpoints [ 881.185488][ T8738] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 881.307156][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 881.307546][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 881.307929][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 881.308085][ T31] usbhid 1-1:0.0: can't add hid device: -32 [ 881.308193][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 881.337802][T10046] netlink: 'syz.3.1450': attribute type 1 has an invalid length. [ 881.337820][T10046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1450'. [ 881.376904][ T31] usb 1-1: USB disconnect, device number 33 [ 881.464959][ T5742] usb 3-1: USB disconnect, device number 24 [ 882.056488][ T5742] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 882.206329][ T5758] usb 5-1: USB disconnect, device number 34 [ 882.229014][ T5742] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 882.229044][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.229063][ T5742] usb 4-1: Product: syz [ 882.229076][ T5742] usb 4-1: Manufacturer: syz [ 882.229090][ T5742] usb 4-1: SerialNumber: syz [ 882.284290][T10061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 882.327112][ T5742] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 882.349025][ T5866] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 883.537481][ T5742] usb 4-1: USB disconnect, device number 43 [ 883.595411][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 884.140238][T10078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1461'. [ 884.140262][T10078] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1461'. [ 884.140279][T10078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1461'. [ 884.140510][T10078] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1461'. [ 884.572751][ T5866] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 884.636643][ T5866] ath9k_htc: Failed to initialize the device [ 884.637403][ T5742] usb 4-1: ath9k_htc: USB layer deinitialized [ 884.879486][ T31] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 884.916435][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1471'. [ 885.248273][ T31] usb 3-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 885.248885][ T31] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 885.249014][ T31] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 885.249115][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 885.249578][ T31] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 885.249718][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.444175][ T31] usb 3-1: config 0 descriptor?? [ 885.522710][T10088] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 886.294367][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 886.296089][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 886.296204][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 886.714393][ T31] usb 3-1: USB disconnect, device number 25 [ 888.146572][ T8738] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 888.220240][T10111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1475'. [ 888.220263][T10111] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1475'. [ 888.220279][T10111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1475'. [ 888.220480][T10111] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1475'. [ 888.296489][ T8738] usb 2-1: Using ep0 maxpacket: 16 [ 888.300694][ T8738] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 888.300718][ T8738] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 888.300737][ T8738] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 888.300756][ T8738] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 888.300775][ T8738] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 888.300795][ T8738] usb 2-1: config 0 has no interface number 0 [ 888.300839][ T8738] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 888.300867][ T8738] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 888.300888][ T8738] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 888.300921][ T8738] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 888.300947][ T8738] usb 2-1: config 0 interface 125 has no altsetting 0 [ 888.300965][ T8738] usb 2-1: config 0 interface 125 has no altsetting 2 [ 888.304910][ T8738] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 888.304926][ T8738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.304936][ T8738] usb 2-1: Product: syz [ 888.304944][ T8738] usb 2-1: Manufacturer: syz [ 888.304951][ T8738] usb 2-1: SerialNumber: syz [ 888.450738][ T8738] usb 2-1: config 0 descriptor?? [ 888.454434][ T8738] usb 2-1: selecting invalid altsetting 2 [ 889.526835][ T8738] get_1284_register timeout [ 889.526993][ C1] usb 2-1: async_complete: urb error -104 [ 891.640657][ T5757] usb 2-1: USB disconnect, device number 33 [ 892.122333][T10144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1488'. [ 892.122357][T10144] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1488'. [ 892.122374][T10144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1488'. [ 892.122588][T10144] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1488'. [ 896.226550][ T5742] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 896.358097][ T5742] usb 5-1: device descriptor read/64, error -71 [ 896.596522][ T5742] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 896.726536][ T5742] usb 5-1: device descriptor read/64, error -71 [ 896.837040][ T5742] usb usb5-port1: attempt power cycle [ 897.176564][ T5742] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 897.928894][ T5742] usb 5-1: device descriptor read/8, error -71 [ 903.343518][ T5783] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 903.806514][ T5783] usb 2-1: device descriptor read/64, error -71 [ 904.048524][ T5783] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 904.176496][ T5783] usb 2-1: device descriptor read/64, error -71 [ 904.286806][ T5783] usb usb2-port1: attempt power cycle [ 906.027240][ T5783] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 906.027418][ T5630] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 906.060943][ T5783] usb 2-1: device descriptor read/8, error -71 [ 906.178971][ T5630] usb 4-1: config 36 has an invalid interface number: 52 but max is 0 [ 906.178998][ T5630] usb 4-1: config 36 has an invalid descriptor of length 10, skipping remainder of the config [ 906.179019][ T5630] usb 4-1: config 36 has no interface number 0 [ 906.184070][ T5630] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 906.184097][ T5630] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 906.184117][ T5630] usb 4-1: Manufacturer: syz [ 906.184132][ T5630] usb 4-1: SerialNumber: syz [ 906.471816][ T5630] usb 4-1: USB disconnect, device number 44 [ 908.456958][ T5783] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 908.608200][ T5783] usb 2-1: Using ep0 maxpacket: 16 [ 908.610694][ T5783] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 908.610720][ T5783] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 908.610740][ T5783] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 908.610760][ T5783] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 908.610778][ T5783] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 908.610798][ T5783] usb 2-1: config 0 has no interface number 0 [ 908.610851][ T5783] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 908.610878][ T5783] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 908.610900][ T5783] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 908.610935][ T5783] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 908.610962][ T5783] usb 2-1: config 0 interface 125 has no altsetting 0 [ 908.610980][ T5783] usb 2-1: config 0 interface 125 has no altsetting 2 [ 908.613513][ T5783] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 908.613540][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.613560][ T5783] usb 2-1: Product: syz [ 908.613574][ T5783] usb 2-1: Manufacturer: syz [ 908.613589][ T5783] usb 2-1: SerialNumber: syz [ 908.765019][ T5783] usb 2-1: config 0 descriptor?? [ 908.776922][ T5783] usb 2-1: selecting invalid altsetting 2 [ 909.268155][ T4916] Bluetooth: hci4: unexpected event for opcode 0x0c1b [ 910.015848][ T8947] usb 2-1: USB disconnect, device number 38 [ 910.136533][ T5783] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 910.288084][ T5783] usb 4-1: no configurations [ 910.288096][ T5783] usb 4-1: can't read configurations, error -22 [ 910.443989][ T5783] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 911.567395][ T5783] usb 4-1: no configurations [ 911.567416][ T5783] usb 4-1: can't read configurations, error -22 [ 911.570219][ T5783] usb usb4-port1: attempt power cycle [ 911.907021][ T5783] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 911.928119][ T5783] usb 4-1: no configurations [ 911.928135][ T5783] usb 4-1: can't read configurations, error -22 [ 912.036660][ T8738] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 912.076528][ T5783] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 912.099383][ T5783] usb 4-1: no configurations [ 912.099393][ T5783] usb 4-1: can't read configurations, error -22 [ 912.100945][ T5783] usb usb4-port1: unable to enumerate USB device [ 912.188598][ T8738] usb 1-1: config 36 has an invalid descriptor of length 10, skipping remainder of the config [ 912.188649][ T8738] usb 1-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 912.190404][ T8738] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 912.190430][ T8738] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 912.190450][ T8738] usb 1-1: Manufacturer: syz [ 912.190464][ T8738] usb 1-1: SerialNumber: syz [ 912.438252][ T8738] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 912.446687][ T8738] usb 1-1: USB disconnect, device number 34 [ 913.338709][T10336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 915.064933][ T36] audit: type=1804 audit(1779711229.094:10): pid=10350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1567" name="/newroot/299/file0" dev="tmpfs" ino=1584 res=1 errno=0 [ 915.246486][ T5765] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 915.407603][ T5765] usb 3-1: no configurations [ 915.407621][ T5765] usb 3-1: can't read configurations, error -22 [ 915.546477][ T5765] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 915.636478][ T5757] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 915.699958][ T5765] usb 3-1: no configurations [ 915.699976][ T5765] usb 3-1: can't read configurations, error -22 [ 915.700329][ T5765] usb usb3-port1: attempt power cycle [ 915.800375][ T5757] usb 2-1: config 36 has an invalid descriptor of length 10, skipping remainder of the config [ 915.800425][ T5757] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 915.802008][ T5757] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 915.802033][ T5757] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 915.802044][ T5757] usb 2-1: Manufacturer: syz [ 915.802052][ T5757] usb 2-1: SerialNumber: syz [ 916.055241][ T5757] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 916.056582][ T5765] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 916.062838][ T5757] usb 2-1: USB disconnect, device number 39 [ 916.078417][ T5765] usb 3-1: no configurations [ 916.078433][ T5765] usb 3-1: can't read configurations, error -22 [ 916.206563][ T5765] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 916.240276][ T5765] usb 3-1: no configurations [ 916.240294][ T5765] usb 3-1: can't read configurations, error -22 [ 916.240645][ T5765] usb usb3-port1: unable to enumerate USB device [ 916.487147][ T31] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 916.660030][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.660087][ T31] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 916.660112][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.707238][ T31] usb 1-1: config 0 descriptor?? [ 916.720919][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 916.948120][T10370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 917.119947][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 917.120829][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 917.121384][ T31] pwc: recv_control_msg error -32 req 02 val 2c00 [ 917.121962][ T31] pwc: recv_control_msg error -32 req 04 val 1000 [ 917.124107][ T31] pwc: recv_control_msg error -32 req 04 val 1300 [ 917.124622][ T31] pwc: recv_control_msg error -32 req 04 val 1400 [ 917.332373][ T31] pwc: recv_control_msg error -71 req 02 val 2100 [ 917.334218][ T31] pwc: recv_control_msg error -71 req 04 val 1500 [ 917.334687][ T31] pwc: recv_control_msg error -71 req 02 val 2500 [ 917.335134][ T31] pwc: recv_control_msg error -71 req 02 val 2400 [ 917.335592][ T31] pwc: recv_control_msg error -71 req 02 val 2600 [ 917.336039][ T31] pwc: recv_control_msg error -71 req 02 val 2900 [ 917.338502][ T31] pwc: recv_control_msg error -71 req 02 val 2800 [ 917.340238][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 917.343379][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 917.388152][ T31] pwc: Registered as video103. [ 917.396056][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24 [ 917.420757][ T31] usb 1-1: USB disconnect, device number 35 [ 919.180621][T10390] 9p: Bad value for 'wfdno' [ 920.447026][T10414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 920.476745][ T31] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 920.629105][ T31] usb 4-1: no configurations [ 920.629124][ T31] usb 4-1: can't read configurations, error -22 [ 920.766521][ T31] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 920.927785][ T31] usb 4-1: no configurations [ 920.927802][ T31] usb 4-1: can't read configurations, error -22 [ 920.928583][ T31] usb usb4-port1: attempt power cycle [ 921.277280][ T31] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 921.299104][ T31] usb 4-1: no configurations [ 921.299128][ T31] usb 4-1: can't read configurations, error -22 [ 921.317247][T10421] 9p: Bad value for 'wfdno' [ 921.426511][ T31] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 921.458049][ T31] usb 4-1: no configurations [ 921.458068][ T31] usb 4-1: can't read configurations, error -22 [ 921.458597][ T31] usb usb4-port1: unable to enumerate USB device [ 921.916506][ T31] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 922.072255][ T31] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 922.072285][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.072306][ T31] usb 1-1: Product: syz [ 922.072320][ T31] usb 1-1: Manufacturer: syz [ 922.072335][ T31] usb 1-1: SerialNumber: syz [ 922.111116][ T31] usb 1-1: config 0 descriptor?? [ 922.136078][ T31] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 922.526608][ T31] gspca_m5602: Failed to find a sensor [ 922.526622][ T31] ALi m5602 1-1:0.0: ALi m5602 webcam failed [ 922.533013][ T31] usb 1-1: USB disconnect, device number 36 [ 923.786103][T10446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 926.708896][T10472] random: crng reseeded on system resumption [ 926.737158][T10472] Restarting kernel threads ... [ 926.738701][T10472] Done restarting kernel threads. [ 927.226780][ T5890] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 927.376806][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 927.380949][ T5890] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 927.380976][ T5890] usb 1-1: config 0 has no interface number 0 [ 927.381020][ T5890] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 927.381046][ T5890] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 927.385125][ T5890] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 927.385178][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.385223][ T5890] usb 1-1: Product: syz [ 927.385238][ T5890] usb 1-1: Manufacturer: syz [ 927.385253][ T5890] usb 1-1: SerialNumber: syz [ 927.480338][ T5890] usb 1-1: config 0 descriptor?? [ 927.481461][T10481] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 927.481646][T10481] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 927.696921][T10481] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 927.697100][T10481] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 927.899327][ T5890] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 930.711134][T10501] loop2: detected capacity change from 0 to 7 [ 930.824589][T10501] Dev loop2: unable to read RDB block 7 [ 930.824637][T10501] loop2: unable to read partition table [ 930.824812][T10501] loop2: partition table beyond EOD, truncated [ 930.827080][T10501] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 930.848043][ T5630] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 931.000026][ T5630] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 931.000053][ T5630] usb 5-1: config 0 has no interfaces? [ 931.000083][ T5630] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 931.000108][ T5630] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.267778][ T5630] usb 5-1: config 0 descriptor?? [ 931.371364][T10506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1626'. [ 931.373035][T10506] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1626'. [ 931.373107][T10506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1626'. [ 931.377686][T10506] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1626'. [ 932.117243][ T5890] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 932.117514][ T5890] asix 1-1:0.34: probe with driver asix failed with error -71 [ 932.134703][ T5890] usb 1-1: USB disconnect, device number 37 [ 933.919649][ T5783] usb 5-1: USB disconnect, device number 39 [ 937.353271][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.353340][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.940808][T10559] fuse: Bad value for 'fd' [ 938.014997][T10561] loop2: detected capacity change from 0 to 7 [ 938.035953][T10561] Dev loop2: unable to read RDB block 7 [ 938.035995][T10561] loop2: unable to read partition table [ 938.036226][T10561] loop2: partition table beyond EOD, truncated [ 938.036243][T10561] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 940.736510][ T5757] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 940.896454][ T5757] usb 5-1: Using ep0 maxpacket: 16 [ 940.898867][ T5757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.898884][ T5757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.898905][ T5757] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 940.898917][ T5757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.921720][ T5757] usb 5-1: config 0 descriptor?? [ 941.471173][T10583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 941.564145][ T5757] usb 5-1: string descriptor 0 read error: -71 [ 941.587657][ T5757] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 941.587743][ T5757] letsketch 0003:6161:4D15.0003: probe with driver letsketch failed with error -32 [ 941.621137][ T5757] usb 5-1: USB disconnect, device number 40 [ 943.900903][T10599] fuse: Bad value for 'fd' [ 948.946515][ T5765] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 950.026530][ T5765] usb 4-1: Using ep0 maxpacket: 16 [ 950.035729][ T5765] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.035774][ T5765] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.035813][ T5765] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 950.035835][ T5765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.060425][ T5765] usb 4-1: config 0 descriptor?? [ 950.566539][ T5630] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 951.433426][ T5630] usb 3-1: Using ep0 maxpacket: 32 [ 951.449542][ T5630] usb 3-1: unable to get BOS descriptor or descriptor too short [ 951.453507][ T5630] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 951.453537][ T5630] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 951.453560][ T5630] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 951.576751][ T5630] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 951.576778][ T5630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.576797][ T5630] usb 3-1: Product: syz [ 951.576811][ T5630] usb 3-1: Manufacturer: syz [ 951.576825][ T5630] usb 3-1: SerialNumber: syz [ 951.577185][ T5765] usb 4-1: string descriptor 0 read error: -71 [ 951.598760][ T5765] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 951.598839][ T5765] letsketch 0003:6161:4D15.0004: probe with driver letsketch failed with error -32 [ 951.603700][ T5765] usb 4-1: USB disconnect, device number 53 [ 953.030727][T10655] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 953.031482][T10655] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 953.317619][ T5630] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 953.340954][ T5630] usb 3-1: USB disconnect, device number 30 [ 956.718401][ T4916] Bluetooth: hci4: unexpected event for opcode 0x0c1b [ 959.016487][ T5742] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 959.146515][ T5742] usb 5-1: device descriptor read/64, error -71 [ 959.447398][ T5742] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 959.916524][ T5757] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 960.076625][ T5757] usb 3-1: Using ep0 maxpacket: 32 [ 960.080440][ T5757] usb 3-1: unable to get BOS descriptor or descriptor too short [ 960.081515][ T5757] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 960.081544][ T5757] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 960.081567][ T5757] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 960.083705][ T5757] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 960.083731][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.083751][ T5757] usb 3-1: Product: syz [ 960.083764][ T5757] usb 3-1: Manufacturer: syz [ 960.083774][ T5757] usb 3-1: SerialNumber: syz [ 960.108538][T10715] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 960.108776][T10715] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 960.226509][ T5742] usb 5-1: device descriptor read/64, error -71 [ 960.330487][ T5757] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 960.344980][ T5742] usb usb5-port1: attempt power cycle [ 960.375499][ T5757] usb 3-1: USB disconnect, device number 31 [ 961.827778][ T5742] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 962.036524][ T5742] usb 5-1: device not accepting address 43, error -71 [ 965.676503][ T5757] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 965.850704][ T5757] usb 2-1: config index 0 descriptor too short (expected 178, got 92) [ 965.850731][ T5757] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 965.850750][ T5757] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 965.850794][ T5757] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 965.853266][ T5757] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 965.853293][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.853313][ T5757] usb 2-1: Product: syz [ 965.853326][ T5757] usb 2-1: Manufacturer: syz [ 965.853339][ T5757] usb 2-1: SerialNumber: syz [ 965.881793][ T5757] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 965.881840][ T5757] cdc_ncm 2-1:1.0: bind() failure [ 966.066520][ T5742] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 966.091866][ T8738] usb 2-1: USB disconnect, device number 40 [ 966.216491][ T5742] usb 5-1: Using ep0 maxpacket: 16 [ 966.218851][ T5742] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.218883][ T5742] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.218920][ T5742] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 966.218943][ T5742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.320919][ T5742] usb 5-1: config 0 descriptor?? [ 966.428483][T10760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1713'. [ 966.428589][T10760] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1713'. [ 966.428649][T10760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1713'. [ 967.646504][ T5742] usb 5-1: string descriptor 0 read error: -71 [ 967.673463][ T5742] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 967.673512][ T5742] letsketch 0003:6161:4D15.0005: probe with driver letsketch failed with error -32 [ 967.679661][ T5742] usb 5-1: USB disconnect, device number 45 [ 967.700281][ T8738] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 968.007881][ T8738] usb 1-1: device descriptor read/64, error -71 [ 968.396721][ T8738] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 968.526512][ T8738] usb 1-1: device descriptor read/64, error -71 [ 968.636891][ T8738] usb usb1-port1: attempt power cycle [ 969.097254][ T8738] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 969.119271][ T8738] usb 1-1: device descriptor read/8, error -71 [ 969.378165][ T8738] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 969.418010][ T8738] usb 1-1: device descriptor read/8, error -71 [ 969.626621][ T8738] usb usb1-port1: unable to enumerate USB device [ 971.586525][ T8947] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 971.738170][ T8947] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.738223][ T8947] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 971.738247][ T8947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.742813][ T8947] usb 1-1: config 0 descriptor?? [ 971.749916][ T8947] pwc: Askey VC010 type 2 USB webcam detected. [ 972.915959][ T8947] pwc: recv_control_msg error -32 req 02 val 2b00 [ 972.917383][ T8947] pwc: recv_control_msg error -32 req 02 val 2700 [ 972.918027][ T8947] pwc: recv_control_msg error -32 req 02 val 2c00 [ 972.918810][ T8947] pwc: recv_control_msg error -32 req 04 val 1000 [ 972.919436][ T8947] pwc: recv_control_msg error -32 req 04 val 1300 [ 972.920293][ T8947] pwc: recv_control_msg error -32 req 04 val 1400 [ 973.124106][ T8947] pwc: recv_control_msg error -71 req 02 val 2100 [ 973.129842][ T8947] pwc: recv_control_msg error -71 req 04 val 1500 [ 973.130327][ T8947] pwc: recv_control_msg error -71 req 02 val 2500 [ 973.130783][ T8947] pwc: recv_control_msg error -71 req 02 val 2400 [ 973.131228][ T8947] pwc: recv_control_msg error -71 req 02 val 2600 [ 973.131693][ T8947] pwc: recv_control_msg error -71 req 02 val 2900 [ 973.133932][ T8947] pwc: recv_control_msg error -71 req 02 val 2800 [ 973.135422][ T8947] pwc: recv_control_msg error -71 req 04 val 1100 [ 973.138109][ T8947] pwc: recv_control_msg error -71 req 04 val 1200 [ 974.178961][ T8947] pwc: Registered as video103. [ 974.186141][ T8947] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25 [ 975.887672][ T8947] usb 1-1: USB disconnect, device number 42 [ 978.500563][ T5630] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 978.586175][T10837] 9p: Bad value for 'wfdno' [ 978.626675][ T5630] usb 1-1: device descriptor read/64, error -71 [ 979.076592][ T5630] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 979.121422][T10844] capability: warning: `syz.2.1747' uses 32-bit capabilities (legacy support in use) [ 981.896813][ T5757] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 982.134623][ T5757] usb 3-1: Using ep0 maxpacket: 8 [ 982.541689][ T5757] usb 3-1: config 2 has an invalid interface number: 118 but max is 0 [ 982.541723][ T5757] usb 3-1: config 2 has no interface number 0 [ 982.541776][ T5757] usb 3-1: config 2 interface 118 has no altsetting 0 [ 982.568072][ T5757] usb 3-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice=d9.fa [ 982.568101][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.568122][ T5757] usb 3-1: Product: syz [ 982.568136][ T5757] usb 3-1: Manufacturer: syz [ 982.568151][ T5757] usb 3-1: SerialNumber: syz [ 982.861872][ T5757] usb 3-1: unsupported MDLM descriptors [ 982.883152][ T5757] usb 3-1: USB disconnect, device number 32 [ 986.022554][ T5757] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 986.022749][ T5765] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 986.157123][ T5757] usb 4-1: device descriptor read/64, error -71 [ 987.550810][ T5765] usb 2-1: not running at top speed; connect to a high speed hub [ 987.554379][ T5765] usb 2-1: config 10 has an invalid interface number: 43 but max is 0 [ 987.554395][ T5765] usb 2-1: config 10 has no interface number 0 [ 987.554421][ T5765] usb 2-1: config 10 interface 43 has no altsetting 0 [ 987.577464][ T5765] usb 2-1: string descriptor 0 read error: -22 [ 987.577598][ T5765] usb 2-1: New USB device found, idVendor=16ab, idProduct=7802, bcdDevice=7f.8f [ 987.577621][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.617815][ T5765] usb 2-1: Could not find all expected endpoints [ 987.947724][ T5742] usb 2-1: USB disconnect, device number 41 [ 993.388791][T10932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1773'. [ 993.388897][T10932] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1773'. [ 993.388957][T10932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1773'. [ 993.391465][T10932] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1773'. [ 994.407723][ T5630] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 994.536577][ T5630] usb 5-1: device descriptor read/64, error -71 [ 994.788376][ T5630] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 994.916523][ T5630] usb 5-1: device descriptor read/64, error -71 [ 995.027049][ T5630] usb usb5-port1: attempt power cycle [ 995.366513][ T5630] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 995.393018][ T5630] usb 5-1: device descriptor read/8, error -71 [ 995.483376][T10937] ALSA: mixer_oss: invalid OSS volume '' [ 995.536486][ T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 995.626499][ T5630] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 995.647329][ T5630] usb 5-1: device descriptor read/8, error -71 [ 995.745158][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.745190][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.745226][ T10] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 995.745248][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.768624][ T5630] usb usb5-port1: unable to enumerate USB device [ 995.801751][ T10] usb 4-1: config 0 descriptor?? [ 996.975368][ T10] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 996.975408][ T10] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 996.975435][ T10] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 996.975461][ T10] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 996.975487][ T10] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 996.975512][ T10] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 996.975537][ T10] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 996.975562][ T10] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 996.975588][ T10] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 996.975614][ T10] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 997.158260][ T10] asus 0003:0B05:1ABE.0006: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.3-1/input0 [ 997.262466][ T10] usb 4-1: USB disconnect, device number 56 [ 997.493514][T10963] fido_id[10963]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 999.002365][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.002434][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.516518][ T5630] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1002.657739][ T5630] usb 5-1: device descriptor read/64, error -71 [ 1002.916529][ T5630] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1004.282173][ T5630] usb 5-1: device descriptor read/64, error -71 [ 1004.386936][ T5630] usb usb5-port1: attempt power cycle [ 1004.746523][ T5630] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 1004.768249][ T5630] usb 5-1: device descriptor read/8, error -71 [ 1005.016561][ T5630] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 1005.141099][ T5630] usb 5-1: device descriptor read/8, error -71 [ 1005.258684][ T5630] usb usb5-port1: unable to enumerate USB device [ 1010.706538][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1010.876544][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1010.878941][ T10] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1010.878967][ T10] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1010.878987][ T10] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1010.879006][ T10] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1010.879026][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1010.879047][ T10] usb 5-1: config 0 has no interface number 0 [ 1010.879100][ T10] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1010.879127][ T10] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1010.879149][ T10] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1010.879183][ T10] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1010.879210][ T10] usb 5-1: config 0 interface 125 has no altsetting 0 [ 1010.879228][ T10] usb 5-1: config 0 interface 125 has no altsetting 2 [ 1010.882187][ T10] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1010.882215][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.882235][ T10] usb 5-1: Product: syz [ 1010.882249][ T10] usb 5-1: Manufacturer: syz [ 1010.882263][ T10] usb 5-1: SerialNumber: syz [ 1011.042502][ T10] usb 5-1: config 0 descriptor?? [ 1011.072528][ T10] usb 5-1: selecting invalid altsetting 2 [ 1013.547448][ T10] get_1284_register timeout [ 1013.547614][ C0] usb 5-1: async_complete: urb error -104 [ 1013.698452][ T5783] usb 5-1: USB disconnect, device number 54 [ 1014.407150][ T10] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1015.317268][ T10] usb 3-1: no configurations [ 1015.317293][ T10] usb 3-1: can't read configurations, error -22 [ 1015.446535][ T10] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1015.619521][ T10] usb 3-1: no configurations [ 1015.619588][ T10] usb 3-1: can't read configurations, error -22 [ 1016.095508][ T10] usb usb3-port1: attempt power cycle [ 1016.538049][ T10] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1016.570273][ T10] usb 3-1: no configurations [ 1016.570289][ T10] usb 3-1: can't read configurations, error -22 [ 1016.727472][ T10] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1016.762531][ T10] usb 3-1: no configurations [ 1016.762542][ T10] usb 3-1: can't read configurations, error -22 [ 1016.763750][ T10] usb usb3-port1: unable to enumerate USB device [ 1016.896536][ T5630] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1016.944306][ T4916] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 1017.046479][ T5630] usb 5-1: Using ep0 maxpacket: 32 [ 1017.048947][ T5630] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1017.048973][ T5630] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.053831][ T5630] usb 5-1: config 0 descriptor?? [ 1017.090583][ T5630] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1019.810108][ T5630] gspca_sunplus: reg_w_riv err -110 [ 1019.810205][ T5630] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 1019.992439][ T10] usb 5-1: USB disconnect, device number 55 [ 1021.264361][ T4916] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1021.264527][ T4916] Bluetooth: hci4: Injecting HCI hardware error event [ 1021.273491][ T4916] Bluetooth: hci4: hardware error 0x00 [ 1022.042736][T11133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1843'. [ 1022.042770][T11133] netlink: 'syz.0.1843': attribute type 7 has an invalid length. [ 1022.042783][T11133] netlink: 'syz.0.1843': attribute type 8 has an invalid length. [ 1022.042795][T11133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1843'. [ 1022.226516][ T5630] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1022.387626][ T5630] usb 4-1: no configurations [ 1022.387645][ T5630] usb 4-1: can't read configurations, error -22 [ 1022.516468][ T5630] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 1022.818998][ T5630] usb 4-1: no configurations [ 1022.819017][ T5630] usb 4-1: can't read configurations, error -22 [ 1022.819368][ T5630] usb usb4-port1: attempt power cycle [ 1024.124808][ T4916] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1024.436481][ T5630] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 1024.459298][ T5630] usb 4-1: no configurations [ 1024.459314][ T5630] usb 4-1: can't read configurations, error -22 [ 1024.624611][ T5630] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 1024.638068][ T5630] usb 4-1: no configurations [ 1024.638086][ T5630] usb 4-1: can't read configurations, error -22 [ 1024.638434][ T5630] usb usb4-port1: unable to enumerate USB device [ 1026.146546][ T5630] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1026.309521][ T5630] usb 2-1: Using ep0 maxpacket: 16 [ 1026.313208][ T5630] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1026.323281][ T5630] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1026.323297][ T5630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.323307][ T5630] usb 2-1: Product: syz [ 1026.323315][ T5630] usb 2-1: Manufacturer: syz [ 1026.323323][ T5630] usb 2-1: SerialNumber: syz [ 1029.783507][ T5630] usb 2-1: failed waiting for Axe-Fx III to boot: -71 [ 1029.783552][ T5630] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1029.825128][ T5630] usb 2-1: USB disconnect, device number 42 [ 1032.128409][ T10] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1032.278613][ T10] usb 2-1: no configurations [ 1032.278631][ T10] usb 2-1: can't read configurations, error -22 [ 1032.406661][ T10] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 1032.557894][ T10] usb 2-1: no configurations [ 1032.557913][ T10] usb 2-1: can't read configurations, error -22 [ 1032.558251][ T10] usb usb2-port1: attempt power cycle [ 1032.898279][ T10] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1032.921197][ T10] usb 2-1: no configurations [ 1032.921215][ T10] usb 2-1: can't read configurations, error -22 [ 1033.056532][ T10] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 1033.078030][ T10] usb 2-1: no configurations [ 1033.078047][ T10] usb 2-1: can't read configurations, error -22 [ 1033.078392][ T10] usb usb2-port1: unable to enumerate USB device [ 1039.027039][T11280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1900'. [ 1039.245450][T11286] dlm: non-version read from control device 145 [ 1042.118623][T11325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1918'. [ 1049.767645][T11393] loop5: detected capacity change from 0 to 6 [ 1049.775531][T11393] Dev loop5: unable to read RDB block 6 [ 1049.775558][T11393] loop5: unable to read partition table [ 1049.775670][T11393] loop5: partition table beyond EOD, truncated [ 1049.775700][T11393] loop_reread_partitions: partition scan of loop5 (þ被x^—ŸÑà–c) failed (rc=-5) [ 1049.997981][ T4916] Bluetooth: hci0: unexpected subevent 0x0a length: 2 < 30 [ 1050.106512][ T5630] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 1050.311143][ T5630] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 1050.311198][ T5630] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 1050.311227][ T5630] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1050.311259][ T5630] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1050.311282][ T5630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.373507][ T5630] usb 4-1: config 0 descriptor?? [ 1050.724699][T11405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1950'. [ 1050.729639][T11405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1950'. [ 1050.729837][T11405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1950'. [ 1050.813232][ T5630] hid_parser_main: 437 callbacks suppressed [ 1050.813254][ T5630] lenovo 0003:17EF:60EE.0007: unknown main item tag 0x2 [ 1050.813283][ T5630] lenovo 0003:17EF:60EE.0007: unknown main item tag 0x6 [ 1050.813354][ T5630] lenovo 0003:17EF:60EE.0007: ignoring exceeding usage max [ 1050.856573][ T5630] lenovo 0003:17EF:60EE.0007: hidraw0: USB HID v0.81 Device [HID 17ef:60ee] on usb-dummy_hcd.3-1/input0 [ 1051.552695][ T5630] lenovo 0003:17EF:60EE.0007: Sensitivity setting failed: -71 [ 1051.663138][ T5630] usb 4-1: USB disconnect, device number 61 [ 1052.726852][ T5630] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1052.899614][ T5630] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1052.899638][ T5630] usb 4-1: config 0 has no interface number 0 [ 1052.899681][ T5630] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.899706][ T5630] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.899729][ T5630] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1052.899770][ T5630] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1052.899793][ T5630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.978045][ T5630] usb 4-1: config 0 descriptor?? [ 1053.646995][ T5630] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.0008/input/input26 [ 1053.806837][ T5630] uclogic 0003:28BD:0042.0008: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 1054.685463][ T5890] usb 4-1: USB disconnect, device number 62 [ 1056.907959][ T5630] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1057.069650][ T5630] usb 1-1: Using ep0 maxpacket: 16 [ 1057.072093][ T5630] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.072125][ T5630] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1057.072162][ T5630] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1057.072185][ T5630] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.083070][ T5630] usb 1-1: config 0 descriptor?? [ 1057.522118][ T5630] hid (null): bogus close delimiter [ 1057.796502][ T5630] usb 1-1: string descriptor 0 read error: -71 [ 1057.879277][ T5630] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 1057.879324][ T5630] letsketch 0003:6161:4D15.0009: probe with driver letsketch failed with error -32 [ 1057.896562][ T5630] usb 1-1: USB disconnect, device number 45 [ 1059.451317][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.451386][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.856509][ T31] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1064.966839][ T8738] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1065.010004][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.010056][ T31] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1065.010080][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.022495][ T31] usb 5-1: config 0 descriptor?? [ 1065.038056][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 1065.116511][ T8738] usb 4-1: Using ep0 maxpacket: 16 [ 1065.120130][ T8738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.120147][ T8738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1065.120167][ T8738] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1065.120179][ T8738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.138502][ T8738] usb 4-1: config 0 descriptor?? [ 1065.432323][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1065.433292][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 1065.434510][ T31] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1065.435441][ T31] pwc: recv_control_msg error -32 req 04 val 1000 [ 1065.437033][ T31] pwc: recv_control_msg error -32 req 04 val 1300 [ 1065.493897][ T31] pwc: recv_control_msg error -32 req 04 val 1400 [ 1065.494637][ T31] pwc: recv_control_msg error -32 req 02 val 2000 [ 1065.495932][ T31] pwc: recv_control_msg error -32 req 02 val 2100 [ 1065.501130][ T31] pwc: recv_control_msg error -32 req 04 val 1500 [ 1065.502256][ T31] pwc: recv_control_msg error -32 req 02 val 2500 [ 1065.624940][ T8738] hid (null): bogus close delimiter [ 1065.704000][ T31] pwc: recv_control_msg error -71 req 02 val 2600 [ 1065.705361][ T31] pwc: recv_control_msg error -71 req 02 val 2900 [ 1065.709314][ T31] pwc: recv_control_msg error -71 req 02 val 2800 [ 1065.710242][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 1065.710753][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 1065.772896][ T31] pwc: Registered as video103. [ 1065.784349][ T8738] usb 4-1: string descriptor 0 read error: -71 [ 1065.787460][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input27 [ 1065.799906][ T31] usb 5-1: USB disconnect, device number 56 [ 1065.811096][ T8738] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 1065.811235][ T8738] letsketch 0003:6161:4D15.000A: probe with driver letsketch failed with error -32 [ 1065.827736][ T8738] usb 4-1: USB disconnect, device number 63 [ 1069.039021][T11550] ======================================================= [ 1069.039021][T11550] WARNING: The mand mount option has been deprecated and [ 1069.039021][T11550] and is ignored by this kernel. Remove the mand [ 1069.039021][T11550] option from the mount to silence this warning. [ 1069.039021][T11550] ======================================================= [ 1069.041393][T11550] overlayfs: failed to resolve './file1/file0': -2 [ 1071.210627][ T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1071.376604][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1071.378908][ T10] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1071.378936][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.792906][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1072.148876][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1072.156249][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1072.156326][ T10] usb 5-1: media controller created [ 1072.364585][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1072.755213][ T10] az6027: usb out operation failed. (-71) [ 1072.763074][ T10] az6027: usb out operation failed. (-71) [ 1072.763088][ T10] stb0899_attach: Driver disabled by Kconfig [ 1072.763097][ T10] az6027: no front-end attached [ 1072.763097][ T10] [ 1072.763480][ T10] az6027: usb out operation failed. (-71) [ 1072.763500][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1072.768770][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 1072.775987][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 1072.776005][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1072.795867][ T10] usb 5-1: USB disconnect, device number 57 [ 1073.678838][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1074.764788][T11595] overlayfs: failed to resolve './file1/file0': -2 [ 1075.768701][ T5742] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1076.869574][ T5742] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.869653][ T5742] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1076.869676][ T5742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.896895][ T5742] usb 1-1: config 0 descriptor?? [ 1076.919296][ T5742] pwc: Askey VC010 type 2 USB webcam detected. [ 1078.603407][ T8775] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1078.603455][ T8775] CPU: 1 UID: 0 PID: 8775 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1078.603479][ T8775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1078.603493][ T8775] Workqueue: hci0 hci_rx_work [ 1078.603532][ T8775] Call Trace: [ 1078.603541][ T8775] [ 1078.603550][ T8775] dump_stack_lvl+0xe8/0x150 [ 1078.603569][ T8775] sysfs_create_dir_ns+0x271/0x2a0 [ 1078.603587][ T8775] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1078.603602][ T8775] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1078.603636][ T8775] ? rt_spin_unlock+0x160/0x200 [ 1078.603662][ T8775] kobject_[ 1078.603662][ T8775] kobject_add_internal+0x631/0xd10 [ 1078.603692][ T8775] kobject_add+0x163/0x240 [ 1078.603721][ T8775] ? __pfx_kobject_add+0x10/0x10 [ 1078.603742][ T8775] ? get_device_parent+0x370/0x3a0 [ 1078.603758][ T8775] device_add+0x408/0xbb0 [ 1078.603772][ T8775] hci_conn_add_sysfs+0xd5/0x210 [ 1078.603800][ T8775] le_conn_complete_evt+0x10e6/0x16b0 [ 1078.603832][ T8775] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1078.603855][ T8775] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1078.603885][ T8775] ? lockdep_hardirqs_on+0x7a/0x110 [ 1078.603907][ T8775] ? skb_pull_data+0xfb/0x200 [ 1078.603921][ T8775] hci_le_conn_complete_evt+0x187/0x470 [ 1078.603942][ T8775] hci_event_packet+0x659/0xef0 [ 1078.603968][ T8775] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1078.603990][ T8775] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1078.604020][ T8775] ? __pfx_hci_event_packet+0x10/0x10 [ 1078.604047][ T8775] ? rt_spin_unlock+0x14f/0x200 [ 1078.604075][ T8775] ? hci_send_to_monitor+0xe2/0x590 [ 1078.604089][ T8775] hci_rx_work+0x3ee/0x1040 [ 1078.604107][ T8775] ? process_scheduled_works+0xa70/0x1860 [ 1078.604127][ T8775] process_scheduled_works+0xb5d/0x1860 [ 1078.604148][ T8775] ? __lock_acquire+0x6b5/0x2cf0 [ 1078.604204][ T8775] ? __pfx_process_scheduled_works+0x10/0x10 [ 1078.604235][ T8775] ? assign_work+0x3d5/0x5e0 [ 1078.604262][ T8775] worker_thread+0xa53/0xfc0 [ 1078.604292][ T8775] kthread+0x388/0x470 [ 1078.604306][ T8775] ? __pfx_worker_thread+0x10/0x10 [ 1078.604317][ T8775] ? __pfx_kthread+0x10/0x10 [ 1078.604343][ T8775] ret_from_fork+0x514/0xb70 [ 1078.604370][ T8775] ? __pfx_ret_from_fork+0x10/0x10 [ 1078.604393][ T8775] ? __switch_to+0xc79/0x1410 [ 1078.604434][ T8775] ? __pfx_kthread+0x10/0x10 [ 1078.604452][ T8775] ret_from_fork_asm+0x1a/0x30 [ 1078.604474][ T8775] [ 1078.604759][ T8775] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1078.604800][ T8775] Bluetooth: hci0: failed to register connection device [ 1078.748339][ T8775] ================================================================== [ 1078.748353][ T8775] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x902/0x1560 [ 1078.748385][ T8775] Read of size 8 at addr ffff88803b91a500 by task kworker/u9:2/8775 [ 1078.748408][ T8775] [ 1078.748416][ T8775] CPU: 1 UID: 0 PID: 8775 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1078.748429][ T8775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1078.748437][ T8775] Workqueue: hci0 hci_rx_work [ 1078.748453][ T8775] Call Trace: [ 1078.748458][ T8775] [ 1078.748463][ T8775] dump_stack_lvl+0xe8/0x150 [ 1078.748476][ T8775] print_address_description+0x55/0x1e0 [ 1078.748496][ T8775] ? l2cap_connect_cfm+0x902/0x1560 [ 1078.748517][ T8775] print_report+0x58/0x70 [ 1078.748537][ T8775] kasan_report+0x117/0x150 [ 1078.748562][ T8775] ? l2cap_connect_cfm+0x902/0x1560 [ 1078.748589][ T8775] l2cap_connect_cfm+0x902/0x1560 [ 1078.748605][ T8775] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1078.748617][ T8775] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1078.748632][ T8775] ? lockdep_hardirqs_on+0x7a/0x110 [ 1078.748645][ T8775] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1078.748668][ T8775] ? mutex_lock_nested+0x152/0x1d0 [ 1078.748688][ T8775] ? hci_connect_cfm+0x2c/0x140 [ 1078.748706][ T8775] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1078.748729][ T8775] hci_connect_cfm+0x95/0x140 [ 1078.748749][ T8775] le_conn_complete_evt+0x1134/0x16b0 [ 1078.748774][ T8775] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1078.748786][ T8775] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1078.748799][ T8775] ? lockdep_hardirqs_on+0x7a/0x110 [ 1078.748813][ T8775] ? skb_pull_data+0xfb/0x200 [ 1078.748825][ T8775] hci_le_conn_complete_evt+0x187/0x470 [ 1078.748859][ T8775] hci_event_packet+0x659/0xef0 [ 1078.748888][ T8775] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1078.748911][ T8775] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1078.748940][ T8775] ? __pfx_hci_event_packet+0x10/0x10 [ 1078.748955][ T8775] ? rt_spin_unlock+0x14f/0x200 [ 1078.748967][ T8775] ? hci_send_to_monitor+0xe2/0x590 [ 1078.748979][ T8775] hci_rx_work+0x3ee/0x1040 [ 1078.748996][ T8775] ? process_scheduled_works+0xa70/0x1860 [ 1078.749017][ T8775] process_scheduled_works+0xb5d/0x1860 [ 1078.749038][ T8775] ? __lock_acquire+0x6b5/0x2cf0 [ 1078.749078][ T8775] ? __pfx_process_scheduled_works+0x10/0x10 [ 1078.749103][ T8775] ? assign_work+0x3d5/0x5e0 [ 1078.749124][ T8775] worker_thread+0xa53/0xfc0 [ 1078.749156][ T8775] kthread+0x388/0x470 [ 1078.749182][ T8775] ? __pfx_worker_thread+0x10/0x10 [ 1078.749203][ T8775] ? __pfx_kthread+0x10/0x10 [ 1078.749227][ T8775] ret_from_fork+0x514/0xb70 [ 1078.749250][ T8775] ? __pfx_ret_from_fork+0x10/0x10 [ 1078.749271][ T8775] ? __switch_to+0xc79/0x1410 [ 1078.749301][ T8775] ? __pfx_kthread+0x10/0x10 [ 1078.749320][ T8775] ret_from_fork_asm+0x1a/0x30 [ 1078.749351][ T8775] [ 1078.749358][ T8775] [ 1078.749369][ T8775] Allocated by task 8775: [ 1078.749380][ T8775] kasan_save_track+0x3e/0x80 [ 1078.749398][ T8775] __kasan_kmalloc+0x93/0xb0 [ 1078.749424][ T8775] __kmalloc_cache_noprof+0x3a6/0x690 [ 1078.749441][ T8775] l2cap_chan_create+0x51/0x7a0 [ 1078.749452][ T8775] l2cap_sock_new_connection_cb+0x191/0x2f0 [ 1078.749465][ T8775] l2cap_connect_cfm+0x368/0x1560 [ 1078.749476][ T8775] hci_connect_cfm+0x95/0x140 [ 1078.749486][ T8775] le_conn_complete_evt+0x1134/0x16b0 [ 1078.749503][ T8775] hci_le_conn_complete_evt+0x187/0x470 [ 1078.749530][ T8775] hci_event_packet+0x659/0xef0 [ 1078.749553][ T8775] hci_rx_work+0x3ee/0x1040 [ 1078.749577][ T8775] process_scheduled_works+0xb5d/0x1860 [ 1078.749596][ T8775] worker_thread+0xa53/0xfc0 [ 1078.749610][ T8775] kthread+0x388/0x470 [ 1078.749621][ T8775] ret_from_fork+0x514/0xb70 [ 1078.749630][ T8775] ret_from_fork_asm+0x1a/0x30 [ 1078.749642][ T8775] [ 1078.749644][ T8775] Freed by task 11607: [ 1078.749649][ T8775] kasan_save_track+0x3e/0x80 [ 1078.749664][ T8775] kasan_save_free_info+0x46/0x50 [ 1078.749688][ T8775] __kasan_slab_free+0x5c/0x80 [ 1078.749706][ T8775] kfree+0x1c5/0x6c0 [ 1078.749727][ T8775] l2cap_sock_destruct+0x97/0x2c0 [ 1078.749749][ T8775] __sk_destruct+0x8d/0x9d0 [ 1078.749773][ T8775] l2cap_sock_cleanup_listen+0x1d9/0x580 [ 1078.749784][ T8775] l2cap_sock_release+0x6e/0x270 [ 1078.749794][ T8775] sock_close+0xc3/0x240 [ 1078.749802][ T8775] __fput+0x461/0xa70 [ 1078.749809][ T8775] task_work_run+0x1d9/0x270 [ 1078.749824][ T8775] exit_to_user_mode_loop+0xf3/0x4d0 [ 1078.749846][ T8775] do_syscall_64+0x33e/0x560 [ 1078.749872][ T8775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.749890][ T8775] [ 1078.749895][ T8775] The buggy address belongs to the object at ffff88803b91a000 [ 1078.749895][ T8775] which belongs to the cache kmalloc-2k of size 2048 [ 1078.749913][ T8775] The buggy address is located 1280 bytes inside of [ 1078.749913][ T8775] freed 2048-byte region [ffff88803b91a000, ffff88803b91a800) [ 1078.749934][ T8775] [ 1078.749938][ T8775] The buggy address belongs to the physical page: [ 1078.749950][ T8775] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803b91d000 pfn:0x3b918 [ 1078.749961][ T8775] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1078.749971][ T8775] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 1078.749986][ T8775] page_type: f5(slab) [ 1078.750004][ T8775] raw: 0080000000000240 ffff88801a011000 ffffea00017ca410 ffffea0000acfc10 [ 1078.750022][ T8775] raw: ffff88803b91d000 0000000800080007 00000000f5000000 0000000000000000 [ 1078.750041][ T8775] head: 0080000000000240 ffff88801a011000 ffffea00017ca410 ffffea0000acfc10 [ 1078.750059][ T8775] head: ffff88803b91d000 0000000800080007 00000000f5000000 0000000000000000 [ 1078.750077][ T8775] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1078.750094][ T8775] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1078.750105][ T8775] page dumped because: kasan: bad access detected [ 1078.750117][ T8775] page_owner tracks the page as allocated [ 1078.750121][ T8775] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5653, tgid 5653 (syz-executor), ts 323700883745, free_ts 323698531228 [ 1078.750140][ T8775] post_alloc_hook+0x22d/0x280 [ 1078.750151][ T8775] get_page_from_freelist+0x27c8/0x2840 [ 1078.750170][ T8775] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1078.750192][ T8775] allocate_slab+0x77/0x660 [ 1078.750217][ T8775] refill_objects+0x33c/0x3d0 [ 1078.750241][ T8775] __pcs_replace_empty_main+0x373/0x720 [ 1078.750268][ T8775] __kmalloc_node_track_caller_noprof+0x60b/0x7e0 [ 1078.750288][ T8775] pskb_expand_head+0x230/0x1390 [ 1078.750315][ T8775] netlink_trim+0x1b3/0x2c0 [ 1078.750335][ T8775] netlink_broadcast_filtered+0x80/0xea0 [ 1078.750357][ T8775] nlmsg_notify+0xf0/0x1a0 [ 1078.750379][ T8775] __dev_notify_flags+0xf2/0x310 [ 1078.750408][ T8775] rtnl_configure_link+0x22c/0x350 [ 1078.750426][ T8775] veth_newlink+0x52f/0xb70 [ 1078.750443][ T8775] rtnl_newlink_create+0x329/0xb70 [ 1078.750466][ T8775] rtnl_newlink+0x166a/0x1bb0 [ 1078.750487][ T8775] page last free pid 5653 tgid 5653 stack trace: [ 1078.750498][ T8775] __free_frozen_pages+0xfa6/0x10f0 [ 1078.750518][ T8775] __slab_free+0x252/0x2a0 [ 1078.750537][ T8775] qlist_free_all+0x99/0x100 [ 1078.750553][ T8775] kasan_quarantine_reduce+0x148/0x160 [ 1078.750569][ T8775] __kasan_slab_alloc+0x22/0x80 [ 1078.750586][ T8775] __kmalloc_cache_noprof+0x338/0x690 [ 1078.750605][ T8775] kset_create_and_add+0x5a/0x180 [ 1078.750622][ T8775] netdev_register_kobject+0x1a2/0x310 [ 1078.750639][ T8775] register_netdevice+0x146d/0x1ed0 [ 1078.750663][ T8775] veth_newlink+0x4a4/0xb70 [ 1078.750680][ T8775] rtnl_newlink_create+0x329/0xb70 [ 1078.750704][ T8775] rtnl_newlink+0x166a/0x1bb0 [ 1078.750725][ T8775] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1078.750744][ T8775] netlink_rcv_skb+0x232/0x4b0 [ 1078.750766][ T8775] netlink_unicast+0x780/0x920 [ 1078.750786][ T8775] netlink_sendmsg+0x813/0xb40 [ 1078.750809][ T8775] [ 1078.750814][ T8775] Memory state around the buggy address: [ 1078.750824][ T8775] ffff88803b91a400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1078.750838][ T8775] ffff88803b91a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1078.750851][ T8775] >ffff88803b91a500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1078.750861][ T8775] ^ [ 1078.750871][ T8775] ffff88803b91a580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1078.750883][ T8775] ffff88803b91a600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1078.750893][ T8775] ================================================================== [ 1078.752852][ T8775] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1078.752871][ T8775] CPU: 1 UID: 0 PID: 8775 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1078.752895][ T8775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1078.752908][ T8775] Workqueue: hci0 hci_rx_work [ 1078.752936][ T8775] Call Trace: [ 1078.752944][ T8775] [ 1078.752952][ T8775] vpanic+0x56c/0xa60 [ 1078.752978][ T8775] ? __pfx_vpanic+0x10/0x10 [ 1078.753006][ T8775] panic+0xc5/0xd0 [ 1078.753028][ T8775] ? __pfx_panic+0x10/0x10 [ 1078.753055][ T8775] ? preempt_schedule_thunk+0x16/0x30 [ 1078.753085][ T8775] ? l2cap_connect_cfm+0x902/0x1560 [ 1078.753106][ T8775] ? preempt_schedule_thunk+0x16/0x30 [ 1078.753135][ T8775] ? l2cap_connect_cfm+0x902/0x1560 [ 1078.753156][ T8775] check_panic_on_warn+0x89/0xb0 [ 1078.753184][ T8775] ? l2cap_connect_cfm+0x902/0x1560 [ 1078.753204][ T8775] end_report+0x73/0x170 [ 1078.753226][ T8775] ? l2cap_connect_cfm+0x902/0x1560 [ 1078.753246][ T8775] kasan_report+0x128/0x150 [ 1078.753268][ T8775] ? l2cap_connect_cfm+0x902/0x1560 [ 1078.753293][ T8775] l2cap_connect_cfm+0x902/0x1560 [ 1078.753319][ T8775] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1078.753340][ T8775] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1078.753368][ T8775] ? lockdep_hardirqs_on+0x7a/0x110 [ 1078.753394][ T8775] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1078.753434][ T8775] ? mutex_lock_nested+0x152/0x1d0 [ 1078.753454][ T8775] ? hci_connect_cfm+0x2c/0x140 [ 1078.753472][ T8775] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1078.753494][ T8775] hci_connect_cfm+0x95/0x140 [ 1078.753513][ T8775] le_conn_complete_evt+0x1134/0x16b0 [ 1078.753538][ T8775] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1078.753559][ T8775] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1078.753587][ T8775] ? lockdep_hardirqs_on+0x7a/0x110 [ 1078.753613][ T8775] ? skb_pull_data+0xfb/0x200 [ 1078.753634][ T8775] hci_le_conn_complete_evt+0x187/0x470 [ 1078.753667][ T8775] hci_event_packet+0x659/0xef0 [ 1078.753696][ T8775] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1078.753717][ T8775] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1078.753746][ T8775] ? __pfx_hci_event_packet+0x10/0x10 [ 1078.753771][ T8775] ? rt_spin_unlock+0x14f/0x200 [ 1078.753796][ T8775] ? hci_send_to_monitor+0xe2/0x590 [ 1078.753819][ T8775] hci_rx_work+0x3ee/0x1040 [ 1078.753847][ T8775] ? process_scheduled_works+0xa70/0x1860 [ 1078.753869][ T8775] process_scheduled_works+0xb5d/0x1860 [ 1078.753889][ T8775] ? __lock_acquire+0x6b5/0x2cf0 [ 1078.753928][ T8775] ? __pfx_process_scheduled_works+0x10/0x10 [ 1078.753952][ T8775] ? assign_work+0x3d5/0x5e0 [ 1078.753974][ T8775] worker_thread+0xa53/0xfc0 [ 1078.754005][ T8775] kthread+0x388/0x470 [ 1078.754029][ T8775] ? __pfx_worker_thread+0x10/0x10 [ 1078.754049][ T8775] ? __pfx_kthread+0x10/0x10 [ 1078.754074][ T8775] ret_from_fork+0x514/0xb70 [ 1078.754096][ T8775] ? __pfx_ret_from_fork+0x10/0x10 [ 1078.754117][ T8775] ? __switch_to+0xc79/0x1410 [ 1078.754147][ T8775] ? __pfx_kthread+0x10/0x10 [ 1078.754173][ T8775] ret_from_fork_asm+0x1a/0x30 [ 1078.754204][ T8775] [ 1078.754547][ T8775] Kernel Offset: disabled