last executing test programs: 8.129679408s ago: executing program 1 (id=257): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)={0x40, 0x16, 0x3, "ddaad1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000380)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0}) 7.006039318s ago: executing program 2 (id=263): ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000100)={{0x12, 0x1, 0x6a0, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1021, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xb, 0x40, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x64, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x6, 0x4, {0x7, 0x25, 0x1, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x68, 0x5, 0x18, {0x7, 0x25, 0x1, 0x8, 0x4, 0x4}}}}}}}}]}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e110b07"], 0xec) 5.039390306s ago: executing program 1 (id=271): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a080001010000000001090212000101008032090400"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0\x00', 0x2) 4.059474685s ago: executing program 3 (id=275): r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r1 = dup(r0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3.943859793s ago: executing program 2 (id=276): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000300), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x100, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r3, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 3.896270396s ago: executing program 3 (id=277): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.81075036s ago: executing program 3 (id=278): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@local, 0x40, r2}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$tun(r0, &(0x7f0000000500)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0x18, 0x33, 0x40, @remote, @local, {[], "3b010000000004d20000000100"/24}}}, 0x40) 3.794752761s ago: executing program 2 (id=279): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)={0x40, 0x16, 0x3, "ddaad1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000380)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0}) 3.657925537s ago: executing program 1 (id=280): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x5b15, 0x0) 3.400934168s ago: executing program 3 (id=284): ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000100)={{0x12, 0x1, 0x6a0, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1021, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xb, 0x40, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x64, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x6, 0x4, {0x7, 0x25, 0x1, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x68, 0x5, 0x18, {0x7, 0x25, 0x1, 0x8, 0x4, 0x4}}}}}}}}]}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e110b07"], 0xec) 3.169521175s ago: executing program 0 (id=286): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.116604403s ago: executing program 0 (id=287): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000300), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x100, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r3, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 3.050795982s ago: executing program 0 (id=288): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a080001010000000001090212000101008032090400"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0\x00', 0x2) 1.809384989s ago: executing program 0 (id=289): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%+C\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x9fs\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x805}, 0x2400c004) 1.687474091s ago: executing program 0 (id=290): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000003000/0x4000)=nil, &(0x7f0000168000/0x4000)=nil], &(0x7f0000000100)=[0x1, 0x1], &(0x7f00000001c0), 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e471c, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7fffffff, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000000c0)={0x0, 0x70}, 0x1, 0x7}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x7f, 0x2d7, 0x7d, 0x8000000000000000, 0x5, 0xfffffffffffffffc, 0x9, 0x401, 0x2, 0x2, 0x8d], 0xeeee8000, 0x201e87}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 709.559551ms ago: executing program 2 (id=291): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, 0x0, 0x0) 644.639291ms ago: executing program 2 (id=292): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@local, 0x40, r2}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$tun(r0, &(0x7f0000000500)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0x18, 0x33, 0x40, @remote, @local, {[], "3b010000000004d20000000100"/24}}}, 0x40) 543.377369ms ago: executing program 1 (id=293): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000500)="000000020104", 0x6) read(r2, &(0x7f0000000310), 0x6) sendto$inet(r0, &(0x7f0000000300), 0x22, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 448.022739ms ago: executing program 1 (id=294): r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r1 = dup(r0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 171.871932ms ago: executing program 3 (id=295): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 123.48815ms ago: executing program 0 (id=296): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x100, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 96.75103ms ago: executing program 1 (id=297): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0\x00', 0x2) 92.753855ms ago: executing program 2 (id=298): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 0s ago: executing program 3 (id=299): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)={0x40, 0x16, 0x3, "ddaad1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000380)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. [ 85.774255][ T5578] cgroup: Unknown subsys name 'net' [ 86.015459][ T5578] cgroup: Unknown subsys name 'cpuset' [ 86.090908][ T5578] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.024531][ T5578] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.599933][ T5593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.618519][ T5593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.619230][ T5593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.620282][ T5593] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.645728][ T5593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.765334][ T5593] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.777490][ T5593] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.789425][ T5593] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.810887][ T5593] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.815167][ T5593] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.864602][ T4906] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.869637][ T4906] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.877936][ T4906] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.903146][ T5593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.911895][ T4906] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.919033][ T4906] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.923348][ T4906] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.924579][ T4906] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.978406][ T5604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.989966][ T4906] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.917033][ T32] cfg80211: failed to load regulatory.db [ 92.762831][ T60] Bluetooth: hci0: command tx timeout [ 92.911079][ T60] Bluetooth: hci2: command tx timeout [ 92.936598][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.937559][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.937752][ T5591] bridge_slave_0: entered allmulticast mode [ 92.940361][ T5591] bridge_slave_0: entered promiscuous mode [ 92.991544][ T60] Bluetooth: hci3: command tx timeout [ 93.026297][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.026532][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.026753][ T5591] bridge_slave_1: entered allmulticast mode [ 93.029205][ T5591] bridge_slave_1: entered promiscuous mode [ 93.071047][ T60] Bluetooth: hci1: command tx timeout [ 93.132875][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.133174][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.133365][ T5597] bridge_slave_0: entered allmulticast mode [ 93.135927][ T5597] bridge_slave_0: entered promiscuous mode [ 93.192933][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.193256][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.193439][ T5597] bridge_slave_1: entered allmulticast mode [ 93.195826][ T5597] bridge_slave_1: entered promiscuous mode [ 93.206486][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.286835][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.358022][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.358237][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.358409][ T5596] bridge_slave_0: entered allmulticast mode [ 93.362524][ T5596] bridge_slave_0: entered promiscuous mode [ 93.388132][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.388419][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.388709][ T5600] bridge_slave_0: entered allmulticast mode [ 93.396617][ T5600] bridge_slave_0: entered promiscuous mode [ 93.428184][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.453788][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.454142][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.454437][ T5596] bridge_slave_1: entered allmulticast mode [ 93.457011][ T5596] bridge_slave_1: entered promiscuous mode [ 93.532222][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.532484][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.532703][ T5600] bridge_slave_1: entered allmulticast mode [ 93.535059][ T5600] bridge_slave_1: entered promiscuous mode [ 93.541624][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.569355][ T5591] team0: Port device team_slave_0 added [ 93.635499][ T5591] team0: Port device team_slave_1 added [ 93.708031][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.723293][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.726934][ T5597] team0: Port device team_slave_0 added [ 93.760312][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.773250][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.776459][ T5597] team0: Port device team_slave_1 added [ 93.778249][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.778263][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.778280][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.883699][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.883710][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.883727][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.979911][ T5596] team0: Port device team_slave_0 added [ 93.988130][ T5600] team0: Port device team_slave_0 added [ 93.989937][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.989946][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.989964][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.036397][ T5596] team0: Port device team_slave_1 added [ 94.048068][ T5600] team0: Port device team_slave_1 added [ 94.049774][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.049784][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.049803][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.196458][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.196469][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.196485][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.198653][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.198662][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.198678][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.238621][ T5591] hsr_slave_0: entered promiscuous mode [ 94.246744][ T5591] hsr_slave_1: entered promiscuous mode [ 94.269573][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.269613][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.269724][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.280828][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.280867][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.280918][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.427074][ T5597] hsr_slave_0: entered promiscuous mode [ 94.428764][ T5597] hsr_slave_1: entered promiscuous mode [ 94.430308][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 94.431007][ T5597] Cannot create hsr debugfs directory [ 94.831831][ T60] Bluetooth: hci0: command tx timeout [ 94.888463][ T5596] hsr_slave_0: entered promiscuous mode [ 94.889991][ T5596] hsr_slave_1: entered promiscuous mode [ 94.893373][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 94.893395][ T5596] Cannot create hsr debugfs directory [ 94.927236][ T5600] hsr_slave_0: entered promiscuous mode [ 94.929676][ T5600] hsr_slave_1: entered promiscuous mode [ 94.936496][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 94.936558][ T5600] Cannot create hsr debugfs directory [ 94.990781][ T60] Bluetooth: hci2: command tx timeout [ 95.070659][ T60] Bluetooth: hci3: command tx timeout [ 95.161772][ T60] Bluetooth: hci1: command tx timeout [ 95.726797][ T5591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.785455][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.799976][ T5591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.839143][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.848730][ T5591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.878784][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.902486][ T5591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.927580][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.106472][ T5600] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.135839][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.139651][ T5600] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.165199][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.190151][ T5600] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.236094][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.239125][ T5600] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.278012][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.426647][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.456359][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.481559][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.514829][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.519518][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.567017][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.607996][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.649296][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.800905][ T5597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.848804][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.868728][ T5597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.895551][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.898387][ T5597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.918034][ T60] Bluetooth: hci0: command tx timeout [ 96.939491][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.949744][ T5597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.977471][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.035712][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.070614][ T60] Bluetooth: hci2: command tx timeout [ 97.161500][ T60] Bluetooth: hci3: command tx timeout [ 97.166058][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.221256][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.221528][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.235343][ T60] Bluetooth: hci1: command tx timeout [ 97.266322][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.306766][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.306919][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.427318][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.476740][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.476903][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.503449][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.541710][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.541835][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.673631][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.736162][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.773283][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.773463][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.844392][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.844511][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.956538][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.021639][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.023346][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.097171][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.098578][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.834440][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.990576][ T60] Bluetooth: hci0: command tx timeout [ 99.150515][ T60] Bluetooth: hci2: command tx timeout [ 99.208861][ T5591] veth0_vlan: entered promiscuous mode [ 99.230673][ T60] Bluetooth: hci3: command tx timeout [ 99.293505][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.321024][ T60] Bluetooth: hci1: command tx timeout [ 99.365781][ T5591] veth1_vlan: entered promiscuous mode [ 99.527979][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.679976][ T5591] veth0_macvtap: entered promiscuous mode [ 99.722049][ T5591] veth1_macvtap: entered promiscuous mode [ 99.735253][ T5600] veth0_vlan: entered promiscuous mode [ 99.774077][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.822135][ T5600] veth1_vlan: entered promiscuous mode [ 99.870247][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.903301][ T5596] veth0_vlan: entered promiscuous mode [ 99.916017][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.968103][ T4424] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.983913][ T4424] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.989119][ T5596] veth1_vlan: entered promiscuous mode [ 100.012349][ T4424] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.018332][ T4424] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.141905][ T5600] veth0_macvtap: entered promiscuous mode [ 100.232151][ T5600] veth1_macvtap: entered promiscuous mode [ 100.304199][ T5597] veth0_vlan: entered promiscuous mode [ 100.416951][ T5597] veth1_vlan: entered promiscuous mode [ 100.437978][ T5596] veth0_macvtap: entered promiscuous mode [ 100.470002][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.519456][ T5596] veth1_macvtap: entered promiscuous mode [ 100.549447][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.590115][ T4424] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.607934][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.607951][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.609321][ T4424] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.642124][ T4424] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.682343][ T4424] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.714813][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.814846][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.912279][ T5597] veth0_macvtap: entered promiscuous mode [ 100.950710][ T4419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.950731][ T4419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.953816][ T1178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.012616][ T1178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.034840][ T1178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.039985][ T5597] veth1_macvtap: entered promiscuous mode [ 101.103388][ T1178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.412662][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.480063][ T4424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.480081][ T4424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.722871][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.818726][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.818745][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.819989][ T156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.873757][ T156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.901636][ T156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.932007][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.949645][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.949660][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.277488][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.277505][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.959229][ T5745] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 102.991632][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.991652][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.124934][ T5323] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.235654][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.235675][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.424216][ T5323] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 103.424245][ T5323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.119584][ T5695] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.219485][ T5323] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 104.281615][ T5695] usb 3-1: device descriptor read/64, error -71 [ 104.307802][ T5323] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 104.307824][ T5323] usb 2-1: Falling back to sysfs fallback for: emi26/loader.fw [ 104.358280][ T5758] overlayfs: overlapping lowerdir path [ 104.530734][ T5695] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.671149][ T5695] usb 3-1: device descriptor read/64, error -71 [ 104.782434][ T5695] usb usb3-port1: attempt power cycle [ 105.083971][ T32] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.163887][ T5695] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.203799][ T5695] usb 3-1: device descriptor read/8, error -71 [ 105.282268][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 105.292543][ T32] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 105.292568][ T32] usb 4-1: config 0 has no interface number 0 [ 105.292613][ T32] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 105.292637][ T32] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 105.378603][ T32] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 105.378634][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.378655][ T32] usb 4-1: Product: syz [ 105.378669][ T32] usb 4-1: Manufacturer: syz [ 105.378683][ T32] usb 4-1: SerialNumber: syz [ 105.436916][ T32] usb 4-1: config 0 descriptor?? [ 105.472187][ T5762] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.472323][ T5762] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.563357][ T5695] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.594661][ T5695] usb 3-1: device descriptor read/8, error -71 [ 105.712810][ T5695] usb usb3-port1: unable to enumerate USB device [ 105.717127][ T5762] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.717313][ T5762] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.859091][ T5772] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.950375][ T32] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 107.104255][ T5323] usb 2-1: emi26_load_firmware - request_firmware() failed [ 107.104280][ T5323] usb 2-1: emi26_load_firmware - error loading firmware: error = -12 [ 107.104343][ T5323] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 107.306639][ T5323] usb 2-1: USB disconnect, device number 2 [ 107.618204][ T32] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 107.636323][ T32] asix 4-1:0.34: probe with driver asix failed with error -71 [ 107.693416][ T32] usb 4-1: USB disconnect, device number 2 [ 107.840561][ T1263] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 107.950918][ T5323] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.993676][ T1263] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.994324][ T1263] usb 1-1: not running at top speed; connect to a high speed hub [ 107.995829][ T1263] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 104, changing to 4 [ 107.998275][ T1263] usb 1-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 107.998302][ T1263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.998315][ T1263] usb 1-1: Product: syz [ 107.998325][ T1263] usb 1-1: Manufacturer: syz [ 107.998334][ T1263] usb 1-1: SerialNumber: syz [ 108.111418][ T5323] usb 2-1: device descriptor read/64, error -71 [ 108.354969][ T5323] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.397412][ T60] Bluetooth: hci1: unknown advertising packet type: 0x09 [ 108.512320][ T5323] usb 2-1: device descriptor read/64, error -71 [ 108.634881][ T5323] usb usb2-port1: attempt power cycle [ 109.043187][ T5323] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.062083][ T5323] usb 2-1: device descriptor read/8, error -71 [ 109.303183][ T5323] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.325026][ T5323] usb 2-1: device descriptor read/8, error -71 [ 109.439388][ T5323] usb usb2-port1: unable to enumerate USB device [ 110.459912][ T5784] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 110.460079][ T5784] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.513480][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 110.771059][ T5784] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.864626][ T5784] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.865249][ T5784] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.944139][ T5784] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.030204][ T5784] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.030340][ T5784] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.139960][ T5784] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.203274][ T5784] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.203385][ T5784] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.262667][ T5784] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.576543][ T1263] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 111.599652][ T1263] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 111.620544][ T5695] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 111.622085][ T1263] usb 1-1: unable to issue vendor read request (ret = -71) [ 111.623672][ T1263] usb 1-1: unable to issue vendor read request (ret = -71) [ 111.624631][ T1263] usb 1-1: unable to issue vendor read request (ret = -71) [ 111.625207][ T1263] usb 1-1: unable to issue vendor read request (ret = -71) [ 111.687318][ T1263] usb 1-1: unable to issue vendor read request (ret = -71) [ 111.687895][ T1263] usb 1-1: unable to issue vendor read request (ret = -71) [ 111.688520][ T1263] usb 1-1: unable to issue vendor read request (ret = -71) [ 111.690254][ T1263] usb 1-1: unable to issue vendor read request (ret = -71) [ 111.810717][ T5695] usb 3-1: device descriptor read/64, error -71 [ 111.948834][ T5822] syz.1.27 uses obsolete (PF_INET,SOCK_PACKET) [ 112.002902][ T1263] usb 1-1: USB disconnect, device number 2 [ 112.245816][ T5668] udevd[5668]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.481289][ T1263] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.590677][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.621540][ T1263] usb 1-1: device descriptor read/64, error -71 [ 112.860543][ T1263] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.922981][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.031690][ T1263] usb 1-1: device descriptor read/64, error -71 [ 113.080619][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.142705][ T1263] usb usb1-port1: attempt power cycle [ 113.230896][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.320631][ T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 113.460873][ T5695] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.477964][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 113.478742][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 113.481797][ T1263] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 113.488755][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 104, changing to 4 [ 113.507325][ T5856] syzkaller1: entered promiscuous mode [ 113.512356][ T5856] syzkaller1: entered allmulticast mode [ 113.522298][ T9] usb 2-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 113.522324][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.522342][ T9] usb 2-1: Product: syz [ 113.522356][ T9] usb 2-1: Manufacturer: syz [ 113.522369][ T9] usb 2-1: SerialNumber: syz [ 113.591210][ T1263] usb 1-1: device descriptor read/8, error -71 [ 113.620664][ T5695] usb 4-1: Using ep0 maxpacket: 8 [ 113.623543][ T5695] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 113.623568][ T5695] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 113.623622][ T5695] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 113.623647][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.838088][ T60] Bluetooth: hci0: unknown advertising packet type: 0x09 [ 113.840595][ T1263] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.865480][ T1263] usb 1-1: device descriptor read/8, error -71 [ 113.974510][ T1263] usb usb1-port1: unable to enumerate USB device [ 114.002687][ T5859] process 'syz.2.43' launched '/dev/fd/4' with NULL argv: empty string added [ 115.000608][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.152050][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.312103][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.030596][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.030698][ T5846] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 116.041349][ T5846] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 116.043495][ T5846] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 116.051139][ T5846] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 116.157999][ T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 116.183072][ T9] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 116.185818][ T9] usb 2-1: unable to issue vendor read request (ret = -71) [ 116.186422][ T9] usb 2-1: unable to issue vendor read request (ret = -71) [ 116.187000][ T9] usb 2-1: unable to issue vendor read request (ret = -71) [ 116.187542][ T9] usb 2-1: unable to issue vendor read request (ret = -71) [ 116.188750][ T9] usb 2-1: unable to issue vendor read request (ret = -71) [ 116.189373][ T9] usb 2-1: unable to issue vendor read request (ret = -71) [ 116.189980][ T9] usb 2-1: unable to issue vendor read request (ret = -71) [ 116.295795][ T9] usb 2-1: unable to issue vendor read request (ret = -71) [ 116.330556][ T5695] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 116.409108][ T9] usb 2-1: USB disconnect, device number 7 [ 116.486070][ T5323] usb 4-1: USB disconnect, device number 3 [ 116.544043][ T5695] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 116.544068][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.791114][ T5695] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 116.794417][ T5695] usb 1-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 116.794439][ T5695] usb 1-1: Falling back to sysfs fallback for: emi26/loader.fw [ 117.106153][ T5668] udevd[5668]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.510632][ T32] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.651725][ T32] usb 4-1: device descriptor read/64, error -71 [ 117.830560][ T38] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 117.890569][ T32] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.983391][ T38] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.984060][ T38] usb 3-1: not running at top speed; connect to a high speed hub [ 117.985400][ T38] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 104, changing to 4 [ 117.987994][ T38] usb 3-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 117.988022][ T38] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.988041][ T38] usb 3-1: Product: syz [ 117.988056][ T38] usb 3-1: Manufacturer: syz [ 117.988074][ T38] usb 3-1: SerialNumber: syz [ 118.025700][ T32] usb 4-1: device descriptor read/64, error -71 [ 118.113121][ T4906] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.113225][ T4906] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.113286][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.131476][ T32] usb usb4-port1: attempt power cycle [ 118.249790][ T5902] syzkaller1: entered promiscuous mode [ 118.249817][ T5902] syzkaller1: entered allmulticast mode [ 118.358577][ T5604] Bluetooth: hci2: unknown advertising packet type: 0x09 [ 118.490592][ T32] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.518909][ T32] usb 4-1: device descriptor read/8, error -71 [ 118.751740][ T32] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 118.772228][ T32] usb 4-1: device descriptor read/8, error -71 [ 118.901196][ T32] usb usb4-port1: unable to enumerate USB device [ 120.351174][ T5604] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.357185][ T5898] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 120.590004][ T5898] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.597653][ T5898] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.597823][ T5898] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 120.694641][ T38] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 120.703012][ T38] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 120.714045][ T38] usb 3-1: unable to issue vendor read request (ret = -71) [ 120.717351][ T38] usb 3-1: unable to issue vendor read request (ret = -71) [ 120.763927][ T38] usb 3-1: unable to issue vendor read request (ret = -71) [ 120.766770][ T38] usb 3-1: unable to issue vendor read request (ret = -71) [ 120.771755][ T38] usb 3-1: unable to issue vendor read request (ret = -71) [ 120.776220][ T38] usb 3-1: unable to issue vendor read request (ret = -71) [ 120.786027][ T38] usb 3-1: unable to issue vendor read request (ret = -71) [ 120.798112][ T38] usb 3-1: unable to issue vendor read request (ret = -71) [ 121.048158][ T5932] syzkaller1: entered promiscuous mode [ 121.048183][ T5932] syzkaller1: entered allmulticast mode [ 121.211606][ T38] usb 3-1: USB disconnect, device number 8 [ 121.436003][ T5937] overlayfs: failed to resolve './file2': -2 [ 121.476898][ T5937] overlayfs: overlapping lowerdir path [ 121.750591][ T38] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 121.890669][ T1263] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 121.912491][ T38] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 121.912516][ T38] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.943349][ T38] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 122.030664][ T1263] usb 2-1: device descriptor read/64, error -71 [ 122.271222][ T1263] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 122.401504][ T1263] usb 2-1: device descriptor read/64, error -71 [ 122.430565][ T5604] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.511815][ T1263] usb usb2-port1: attempt power cycle [ 122.670654][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.670705][ T5604] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.731815][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 122.808686][ T5956] overlayfs: failed to resolve './file2': -2 [ 122.831914][ T5956] overlayfs: overlapping lowerdir path [ 122.850559][ T1263] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 122.880586][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 122.890182][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 122.890210][ T9] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 122.890263][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 122.890342][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.897449][ T1263] usb 2-1: device descriptor read/8, error -71 [ 123.160516][ T1263] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 123.182698][ T1263] usb 2-1: device descriptor read/8, error -71 [ 123.293301][ T1263] usb usb2-port1: unable to enumerate USB device [ 123.894043][ T5968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.81'. [ 125.174889][ T5986] overlayfs: failed to resolve './file2': -2 [ 125.202545][ T5986] overlayfs: overlapping lowerdir path [ 125.302113][ T5988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.90'. [ 125.527380][ T5756] usb 4-1: USB disconnect, device number 8 [ 125.770630][ T5696] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 125.922674][ T5696] usb 2-1: unable to get BOS descriptor or descriptor too short [ 125.923289][ T5696] usb 2-1: not running at top speed; connect to a high speed hub [ 125.924643][ T5696] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 104, changing to 4 [ 125.927032][ T5696] usb 2-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 125.927055][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.927071][ T5696] usb 2-1: Product: syz [ 125.927087][ T5696] usb 2-1: Manufacturer: syz [ 125.927096][ T5696] usb 2-1: SerialNumber: syz [ 125.930523][ T5756] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 126.110540][ T5756] usb 4-1: device descriptor read/64, error -71 [ 126.297105][ T5604] Bluetooth: hci0: unknown advertising packet type: 0x09 [ 126.360479][ T5756] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 126.491346][ T5756] usb 4-1: device descriptor read/64, error -71 [ 126.606208][ T5756] usb usb4-port1: attempt power cycle [ 126.907379][ T6006] overlayfs: overlapping lowerdir path [ 126.962039][ T5756] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 126.995023][ T5756] usb 4-1: device descriptor read/8, error -71 [ 127.031614][ T6008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.99'. [ 127.230699][ T5756] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 127.251359][ T5756] usb 4-1: device descriptor read/8, error -71 [ 127.360772][ T5756] usb usb4-port1: unable to enumerate USB device [ 128.352924][ T5994] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 128.362193][ T5604] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.485991][ T5994] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.486239][ T5994] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.486561][ T5994] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.558472][ T5696] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 128.559255][ T5696] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 128.574165][ T5696] usb 2-1: unable to issue vendor read request (ret = -71) [ 128.582115][ T5696] usb 2-1: unable to issue vendor read request (ret = -71) [ 128.582749][ T5696] usb 2-1: unable to issue vendor read request (ret = -71) [ 128.584055][ T5696] usb 2-1: unable to issue vendor read request (ret = -71) [ 128.584991][ T5696] usb 2-1: unable to issue vendor read request (ret = -71) [ 128.585608][ T5696] usb 2-1: unable to issue vendor read request (ret = -71) [ 128.586261][ T5696] usb 2-1: unable to issue vendor read request (ret = -71) [ 128.586893][ T5696] usb 2-1: unable to issue vendor read request (ret = -71) [ 128.764615][ T5696] usb 2-1: USB disconnect, device number 12 [ 129.218170][ T6034] overlayfs: overlapping lowerdir path [ 129.236347][ T6036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.108'. [ 129.572272][ T5696] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 129.744688][ T5696] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 129.744719][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.795627][ T5696] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 129.940588][ T5756] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 130.094304][ T5756] usb 2-1: unable to get BOS descriptor or descriptor too short [ 130.095308][ T5756] usb 2-1: not running at top speed; connect to a high speed hub [ 130.097360][ T5756] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 104, changing to 4 [ 130.128162][ T5756] usb 2-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 130.128198][ T5756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.128229][ T5756] usb 2-1: Product: syz [ 130.128250][ T5756] usb 2-1: Manufacturer: syz [ 130.128273][ T5756] usb 2-1: SerialNumber: syz [ 130.430917][ T5604] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.439687][ T5604] Bluetooth: hci0: unknown advertising packet type: 0x09 [ 130.510938][ T5604] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.510978][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.024238][ T6063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.117'. [ 131.114899][ T6065] overlayfs: overlapping lowerdir path [ 132.510577][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.511884][ T6046] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 132.694169][ T6046] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.694466][ T6046] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 132.694761][ T6046] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.781410][ T5756] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 132.783256][ T5756] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 132.786225][ T5756] usb 2-1: unable to issue vendor read request (ret = -71) [ 132.786762][ T5756] usb 2-1: unable to issue vendor read request (ret = -71) [ 132.787323][ T5756] usb 2-1: unable to issue vendor read request (ret = -71) [ 132.787883][ T5756] usb 2-1: unable to issue vendor read request (ret = -71) [ 132.789849][ T5756] usb 2-1: unable to issue vendor read request (ret = -71) [ 132.794605][ T5756] usb 2-1: unable to issue vendor read request (ret = -71) [ 132.851447][ T5756] usb 2-1: unable to issue vendor read request (ret = -71) [ 132.853303][ T5756] usb 2-1: unable to issue vendor read request (ret = -71) [ 132.854569][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.854712][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.955969][ T5756] usb 2-1: USB disconnect, device number 13 [ 133.063387][ T5668] udevd[5668]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.333955][ T6090] netlink: 16 bytes leftover after parsing attributes in process `syz.1.126'. [ 133.467012][ T6094] overlayfs: overlapping lowerdir path [ 134.594871][ T5604] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.754783][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.754846][ T5604] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.790523][ T6099] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 135.791647][ T5604] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.453085][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'. [ 136.559772][ T6124] overlayfs: overlapping lowerdir path [ 136.617614][ T6099] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.624071][ T6099] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.640653][ T6099] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 137.724228][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 137.817289][ T6145] overlayfs: overlapping lowerdir path [ 137.872321][ T5604] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.670561][ T5604] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.670572][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 140.190497][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.190820][ T6156] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 140.440055][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 140.508184][ T6177] overlayfs: missing 'lowerdir' [ 140.542761][ T6177] overlayfs: overlapping lowerdir path [ 141.083869][ T6156] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.087268][ T6156] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.088069][ T6156] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.399896][ T6195] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 141.445235][ T5696] usb 4-1: emi26_load_firmware - request_firmware() failed [ 141.445257][ T5696] usb 4-1: emi26_load_firmware - error loading firmware: error = -2 [ 141.445316][ T5696] emi26 - firmware loader 4-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 141.446329][ T38] usb 3-1: emi26_load_firmware - request_firmware() failed [ 141.446347][ T38] usb 3-1: emi26_load_firmware - error loading firmware: error = -2 [ 141.446402][ T38] emi26 - firmware loader 3-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 141.523631][ T5696] usb 4-1: USB disconnect, device number 13 [ 141.523673][ T5323] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 141.536475][ T5695] usb 1-1: emi26_load_firmware - request_firmware() failed [ 141.536523][ T5695] usb 1-1: emi26_load_firmware - error loading firmware: error = -2 [ 141.536676][ T5695] emi26 - firmware loader 1-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 141.598864][ T38] usb 3-1: USB disconnect, device number 9 [ 141.625415][ T5695] usb 1-1: USB disconnect, device number 7 [ 141.670583][ T5323] usb 2-1: Using ep0 maxpacket: 16 [ 141.675502][ T5323] usb 2-1: config 0 has no interfaces? [ 141.678966][ T5323] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 141.678990][ T5323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.679012][ T5323] usb 2-1: Product: syz [ 141.679022][ T5323] usb 2-1: Manufacturer: syz [ 141.679032][ T5323] usb 2-1: SerialNumber: syz [ 141.756368][ T5323] usb 2-1: config 0 descriptor?? [ 141.890560][ T5696] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 141.930634][ T38] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 141.983405][ T6203] overlayfs: missing 'lowerdir' [ 142.011667][ T6203] overlayfs: overlapping lowerdir path [ 142.042489][ T5696] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 142.042517][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.081043][ T38] usb 3-1: Using ep0 maxpacket: 8 [ 142.082802][ T38] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 142.082824][ T38] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 142.082864][ T38] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.082885][ T38] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.082906][ T38] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 142.082942][ T38] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 142.082964][ T38] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.099628][ T5696] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 142.105267][ T5696] usb 4-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 142.105332][ T5696] usb 4-1: Falling back to sysfs fallback for: emi26/loader.fw [ 142.194109][ T38] usbtmc 3-1:16.0: bulk endpoints not found [ 142.272049][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.150536][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.150578][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.263486][ T38] usb 2-1: USB disconnect, device number 14 [ 144.351109][ T5604] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.352278][ T9] usb 3-1: USB disconnect, device number 10 [ 144.354096][ T6205] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 145.241983][ T6205] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 145.245570][ T6205] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 145.245961][ T6205] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 145.408186][ T6231] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 145.451718][ T5696] usb 4-1: emi26_load_firmware - request_firmware() failed [ 145.451742][ T5696] usb 4-1: emi26_load_firmware - error loading firmware: error = -2 [ 145.451805][ T5696] emi26 - firmware loader 4-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 145.570557][ T5696] usb 4-1: USB disconnect, device number 14 [ 145.579183][ T6238] overlayfs: missing 'lowerdir' [ 145.680212][ T6238] overlayfs: overlapping lowerdir path [ 146.110699][ T5696] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 146.120523][ T38] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 146.202260][ T5323] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 146.262646][ T5696] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 146.262675][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.271550][ T38] usb 3-1: Using ep0 maxpacket: 8 [ 146.279880][ T38] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 146.279903][ T38] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 146.279944][ T38] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.279964][ T38] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 146.279984][ T38] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 146.280020][ T38] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 146.280040][ T38] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.369601][ T5696] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 146.377808][ T5696] usb 1-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 146.377832][ T5696] usb 1-1: Falling back to sysfs fallback for: emi26/loader.fw [ 146.418409][ T38] usbtmc 3-1:16.0: bulk endpoints not found [ 146.432076][ T5604] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.440750][ T5323] usb 4-1: Using ep0 maxpacket: 16 [ 146.445723][ T5323] usb 4-1: config 0 has no interfaces? [ 146.448390][ T5323] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 146.448417][ T5323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.448436][ T5323] usb 4-1: Product: syz [ 146.448451][ T5323] usb 4-1: Manufacturer: syz [ 146.448471][ T5323] usb 4-1: SerialNumber: syz [ 146.509206][ T5323] usb 4-1: config 0 descriptor?? [ 146.530599][ T5756] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 146.755766][ T5604] Bluetooth: hci0: unknown advertising packet type: 0x09 [ 147.310534][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.310545][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.750540][ T6253] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 148.750547][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.898459][ T5695] usb 3-1: USB disconnect, device number 11 [ 148.964491][ T6267] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 148.987207][ T5696] usb 1-1: emi26_load_firmware - request_firmware() failed [ 148.987228][ T5696] usb 1-1: emi26_load_firmware - error loading firmware: error = -2 [ 148.987286][ T5696] emi26 - firmware loader 1-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 149.035612][ T5696] usb 1-1: USB disconnect, device number 8 [ 149.193526][ T6253] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 149.208282][ T5695] usb 4-1: USB disconnect, device number 15 [ 149.225662][ T6253] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 149.225962][ T6253] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 149.444225][ T5756] usb 2-1: unable to get BOS descriptor or descriptor too short [ 149.447414][ T5756] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 149.447448][ T5756] usb 2-1: can't read configurations, error -71 [ 149.587393][ T6277] overlayfs: missing 'lowerdir' [ 149.613565][ T6277] overlayfs: overlapping lowerdir path [ 150.001709][ T5696] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 150.091560][ T5756] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 150.160921][ T5696] usb 1-1: Using ep0 maxpacket: 8 [ 150.164485][ T5696] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 150.164509][ T5696] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 150.164555][ T5696] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.164577][ T5696] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.164599][ T5696] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 150.164637][ T5696] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.164659][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.222292][ T38] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 150.262224][ T5756] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 150.262252][ T5756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.268080][ T5696] usbtmc 1-1:16.0: bulk endpoints not found [ 150.328939][ T5756] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 150.330161][ T5756] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 150.330184][ T5756] usb 2-1: Falling back to sysfs fallback for: emi26/loader.fw [ 150.390529][ T38] usb 4-1: Using ep0 maxpacket: 16 [ 150.392476][ T38] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.394325][ T38] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 150.394344][ T38] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.394357][ T38] usb 4-1: Product: syz [ 150.394367][ T38] usb 4-1: Manufacturer: syz [ 150.394377][ T38] usb 4-1: SerialNumber: syz [ 150.398655][ T38] usb 4-1: config 0 descriptor?? [ 150.590670][ T5695] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 150.797889][ T60] Bluetooth: hci2: unknown advertising packet type: 0x09 [ 150.831369][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.230592][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.230633][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.273015][ T6308] overlayfs: missing 'lowerdir' [ 151.302331][ T6308] overlayfs: overlapping lowerdir path [ 151.508482][ T6313] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 151.553707][ T5756] usb 2-1: emi26_load_firmware - request_firmware() failed [ 151.553730][ T5756] usb 2-1: emi26_load_firmware - error loading firmware: error = -2 [ 151.553846][ T5756] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 151.613099][ T5756] usb 2-1: USB disconnect, device number 16 [ 152.795242][ T5756] usb 1-1: USB disconnect, device number 9 [ 152.830967][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.837988][ T6297] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 153.074579][ T5696] usb 4-1: USB disconnect, device number 16 [ 153.203650][ T6297] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.203983][ T6297] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.206231][ T6297] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.315971][ T5695] usb 3-1: unable to get BOS descriptor or descriptor too short [ 153.317856][ T5695] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 153.317888][ T5695] usb 3-1: can't read configurations, error -71 [ 153.466022][ T6334] overlayfs: missing 'lowerdir' [ 153.493330][ T6334] overlayfs: overlapping lowerdir path [ 153.565910][ T5696] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 153.727473][ T5696] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 153.727505][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.780240][ T5696] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 153.788046][ T5696] usb 4-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 153.788072][ T5696] usb 4-1: Falling back to sysfs fallback for: emi26/loader.fw [ 154.042723][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 154.190778][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 154.193705][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 154.193764][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.193781][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.193798][ T10] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 154.193812][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.193842][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.193857][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.225755][ T10] usbtmc 2-1:16.0: bulk endpoints not found [ 154.351070][ T5695] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 154.557299][ T60] Bluetooth: hci2: unknown advertising packet type: 0x09 [ 154.580511][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 154.742638][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 154.766234][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.779526][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 154.779553][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.779584][ T10] usb 1-1: Product: syz [ 154.779597][ T10] usb 1-1: Manufacturer: syz [ 154.779611][ T10] usb 1-1: SerialNumber: syz [ 154.818767][ T10] usb 1-1: config 0 descriptor?? [ 154.842371][ T6359] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 154.842477][ T6359] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 154.886649][ T6359] overlayfs: overlapping lowerdir path [ 154.910815][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.013313][ T6361] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 155.016272][ T5696] usb 4-1: emi26_load_firmware - request_firmware() failed [ 155.016291][ T5696] usb 4-1: emi26_load_firmware - error loading firmware: error = -2 [ 155.016348][ T5696] emi26 - firmware loader 4-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 155.066279][ T5696] usb 4-1: USB disconnect, device number 17 [ 155.231827][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.231850][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 156.590481][ T6351] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 156.592351][ T5604] Bluetooth: hci0: command 0x0c1a tx timeout [ 156.743107][ T5696] usb 2-1: USB disconnect, device number 17 [ 156.984361][ T6351] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 156.984631][ T6351] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 156.986922][ T6351] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 157.060907][ T5695] usb 3-1: unable to get BOS descriptor or descriptor too short [ 157.063826][ T5695] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 157.063857][ T5695] usb 3-1: can't read configurations, error -71 [ 157.064259][ T5695] usb usb3-port1: attempt power cycle [ 157.161505][ T6381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.224'. [ 157.251605][ T6387] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 157.251668][ T6387] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 157.284145][ T6387] overlayfs: overlapping lowerdir path [ 157.395648][ T9] usb 1-1: USB disconnect, device number 10 [ 157.500587][ T5696] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 157.665403][ T5696] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 157.665425][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.699521][ T5696] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 157.706318][ T5696] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 157.706375][ T5696] usb 2-1: Falling back to sysfs fallback for: emi26/loader.fw [ 157.801620][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 157.910655][ T5695] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 157.950619][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 157.954341][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 157.954391][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.954412][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.954449][ T10] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.954468][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.954502][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 157.954537][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.051174][ T10] usbtmc 4-1:16.0: bulk endpoints not found [ 158.073297][ T5604] Bluetooth: hci2: unknown advertising packet type: 0x09 [ 158.496392][ T6409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.233'. [ 158.593005][ T6411] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 158.593055][ T6411] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.625553][ T6411] overlayfs: overlapping lowerdir path [ 158.680583][ T5604] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.990752][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 158.992052][ T5604] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.030637][ T5604] Bluetooth: hci0: command 0x0c1a tx timeout [ 160.032251][ T6398] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 160.562911][ T10] usb 4-1: USB disconnect, device number 18 [ 160.637403][ T6398] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 160.637615][ T6398] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 160.637822][ T6398] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 160.709995][ T6417] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 160.722794][ T5696] usb 2-1: emi26_load_firmware - request_firmware() failed [ 160.722815][ T5696] usb 2-1: emi26_load_firmware - error loading firmware: error = -2 [ 160.722877][ T5696] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 160.777833][ T5695] usb 3-1: unable to get BOS descriptor or descriptor too short [ 160.779902][ T5695] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 160.779937][ T5695] usb 3-1: can't read configurations, error -71 [ 160.816684][ T5696] usb 2-1: USB disconnect, device number 18 [ 161.161117][ T5696] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 161.304301][ T6432] overlayfs: missing 'lowerdir' [ 161.310622][ T5696] usb 2-1: Using ep0 maxpacket: 16 [ 161.325470][ T5696] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.339337][ T5696] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 161.339365][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.339386][ T5696] usb 2-1: Product: syz [ 161.339401][ T5696] usb 2-1: Manufacturer: syz [ 161.339415][ T5696] usb 2-1: SerialNumber: syz [ 161.340220][ T6432] overlayfs: overlapping lowerdir path [ 161.393051][ T5696] usb 2-1: config 0 descriptor?? [ 161.407721][ T6434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.242'. [ 161.441775][ T5695] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 161.463597][ T5695] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 161.463626][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.501238][ T5695] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 161.502375][ T5695] usb 3-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 161.502394][ T5695] usb 3-1: Falling back to sysfs fallback for: emi26/loader.fw [ 161.801940][ T5756] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 161.860596][ T5696] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 161.950553][ T5756] usb 1-1: Using ep0 maxpacket: 8 [ 161.952484][ T5756] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 161.952538][ T5756] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.952554][ T5756] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.952571][ T5756] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.952585][ T5756] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.952613][ T5756] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 161.952629][ T5756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.042127][ T5756] usbtmc 1-1:16.0: bulk endpoints not found [ 162.110645][ T5604] Bluetooth: hci2: command 0x0c1a tx timeout [ 162.128943][ T5604] Bluetooth: hci3: unknown advertising packet type: 0x09 [ 162.289994][ T5695] usb 3-1: emi26_load_firmware - request_firmware() failed [ 162.290017][ T5695] usb 3-1: emi26_load_firmware - error loading firmware: error = -12 [ 162.290073][ T5695] emi26 - firmware loader 3-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 162.336371][ T5695] usb 3-1: USB disconnect, device number 15 [ 162.654367][ T9] usb 2-1: USB disconnect, device number 19 [ 162.670563][ T4906] Bluetooth: hci1: command 0x0c1a tx timeout [ 162.670615][ T5604] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.193104][ T5604] Bluetooth: hci0: command 0x0c1a tx timeout [ 164.193393][ T6438] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 164.532606][ T5756] usb 1-1: USB disconnect, device number 11 [ 164.609007][ T6438] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.609251][ T6438] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.626681][ T6438] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 164.707471][ T5696] usb 4-1: unable to get BOS descriptor or descriptor too short [ 164.735484][ T5696] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 164.735522][ T5696] usb 4-1: can't read configurations, error -71 [ 164.907974][ T6470] overlayfs: missing 'lowerdir' [ 164.954058][ T6470] overlayfs: overlapping lowerdir path [ 165.100531][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 165.263434][ T9] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 165.263462][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.300529][ T5756] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 165.300824][ T9] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 165.307839][ T9] usb 3-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 165.307856][ T9] usb 3-1: Falling back to sysfs fallback for: emi26/loader.fw [ 165.450481][ T5756] usb 2-1: Using ep0 maxpacket: 16 [ 165.452724][ T5756] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.452772][ T5756] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.455372][ T5756] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 165.455399][ T5756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.455423][ T5756] usb 2-1: Product: syz [ 165.455434][ T5756] usb 2-1: Manufacturer: syz [ 165.455445][ T5756] usb 2-1: SerialNumber: syz [ 165.521914][ T5756] usb 2-1: config 0 descriptor?? [ 165.564135][ T38] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 165.710457][ T38] usb 1-1: Using ep0 maxpacket: 8 [ 165.717304][ T38] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 165.717350][ T38] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.717373][ T38] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.717388][ T38] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 165.717402][ T38] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 165.717415][ T38] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.717441][ T38] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 165.717454][ T38] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.812247][ T38] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 166.270956][ T5604] Bluetooth: hci2: command 0x0c1a tx timeout [ 166.670493][ T4906] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.670548][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 167.266691][ T6497] overlayfs: missing 'lowerdir' [ 167.292941][ T6497] overlayfs: overlapping lowerdir path [ 168.096241][ T38] usb 2-1: USB disconnect, device number 20 [ 168.326288][ T5323] usb 1-1: USB disconnect, device number 12 [ 168.520601][ T38] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 168.682763][ T38] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 168.682802][ T38] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.732686][ T38] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 169.129077][ T6523] overlayfs: missing 'workdir' [ 169.152343][ T6523] overlayfs: overlapping lowerdir path [ 169.881404][ T6545] overlayfs: missing 'workdir' [ 169.921689][ T6545] overlayfs: overlapping lowerdir path [ 170.040560][ T5697] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 170.249360][ T5604] Bluetooth: hci3: unknown advertising packet type: 0x09 [ 170.420547][ T5695] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 170.583694][ T5695] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 170.583743][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.616992][ T5695] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 172.270498][ T5604] Bluetooth: hci0: command 0x0c1a tx timeout [ 172.270511][ T6543] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 172.795897][ T6543] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.815504][ T6543] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 172.816485][ T6543] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.863692][ T6574] overlayfs: missing 'workdir' [ 172.912309][ T6574] overlayfs: overlapping lowerdir path [ 172.948345][ T5697] usb 4-1: unable to get BOS descriptor or descriptor too short [ 172.959769][ T5697] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 172.959801][ T5697] usb 4-1: can't read configurations, error -71 [ 173.155239][ T38] Oops: general protection fault, probably [ 173.155239][ T38] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 173.155263][ T38] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 173.155299][ T38] CPU: 1 UID: 0 PID: 38 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 173.155324][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 173.155337][ T38] Workqueue: usb_hub_wq hub_event [ 173.155372][ T38] RIP: 0010:emi26_probe+0x283/0x1690 [ 173.155396][ T38] Code: ff 89 de e8 6f 64 97 00 85 db 0f 84 d9 01 00 00 e8 62 60 97 00 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 173.155415][ T38] RSP: 0018:ffffc90000af6d20 EFLAGS: 00010247 [ 173.155433][ T38] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 173.155449][ T38] RDX: ffffc90019807000 RSI: 0000000000016cee RDI: 0000000000000004 [ 173.155464][ T38] RBP: ffffc90000af6e50 R08: 0000000000000000 R09: 0000000000000000 [ 173.155479][ T38] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: fffffffffffffffa [ 173.155495][ T38] R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff [ 173.155510][ T38] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 173.155528][ T38] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.155543][ T38] CR2: 0000001b32323ffc CR3: 00000000400bc000 CR4: 00000000003526f0 [ 173.155568][ T38] Call Trace: [ 173.155576][ T38] [ 173.155591][ T38] ? __pfx_emi26_probe+0x10/0x10 [ 173.155613][ T38] ? __pm_runtime_set_status+0x977/0xc40 [ 173.155645][ T38] usb_probe_interface+0x788/0xe50 [ 173.155681][ T38] ? __pfx_usb_probe_interface+0x10/0x10 [ 173.155713][ T38] ? sysfs_do_create_link_sd+0xe0/0x110 [ 173.155737][ T38] ? driver_sysfs_add+0x1fe/0x210 [ 173.155763][ T38] ? __pfx_usb_probe_interface+0x10/0x10 [ 173.155792][ T38] really_probe+0x254/0xae0 [ 173.155821][ T38] __driver_probe_device+0x1e8/0x360 [ 173.155849][ T38] driver_probe_device+0x4f/0x240 [ 173.155879][ T38] __device_attach_driver+0x270/0x410 [ 173.155921][ T38] bus_for_each_drv+0x25b/0x2f0 [ 173.155953][ T38] ? __pfx___device_attach_driver+0x10/0x10 [ 173.155979][ T38] ? __pfx_bus_for_each_drv+0x10/0x10 [ 173.156009][ T38] ? rt_spin_unlock+0x163/0x200 [ 173.156041][ T38] __device_attach+0x2c7/0x450 [ 173.156065][ T38] ? rt_spin_unlock+0x157/0x200 [ 173.156093][ T38] ? __pfx___device_attach+0x10/0x10 [ 173.156120][ T38] device_initial_probe+0xa1/0xd0 [ 173.156146][ T38] bus_probe_device+0x12d/0x220 [ 173.156179][ T38] device_add+0x7d7/0xb80 [ 173.156200][ T38] usb_set_configuration+0x1ad8/0x2180 [ 173.156238][ T38] usb_generic_driver_probe+0x8d/0x150 [ 173.156266][ T38] usb_probe_device+0x1c3/0x3b0 [ 173.156294][ T38] ? __pfx_usb_probe_device+0x10/0x10 [ 173.156321][ T38] really_probe+0x254/0xae0 [ 173.156349][ T38] __driver_probe_device+0x1e8/0x360 [ 173.156376][ T38] driver_probe_device+0x4f/0x240 [ 173.156403][ T38] __device_attach_driver+0x270/0x410 [ 173.156431][ T38] bus_for_each_drv+0x25b/0x2f0 [ 173.156462][ T38] ? __pfx___device_attach_driver+0x10/0x10 [ 173.156488][ T38] ? __pfx_bus_for_each_drv+0x10/0x10 [ 173.156520][ T38] ? rt_spin_unlock+0x163/0x200 [ 173.156580][ T38] __device_attach+0x2c7/0x450 [ 173.156607][ T38] ? __pfx___device_attach+0x10/0x10 [ 173.156641][ T38] device_initial_probe+0xa1/0xd0 [ 173.156667][ T38] bus_probe_device+0x12d/0x220 [ 173.156702][ T38] device_add+0x7d7/0xb80 [ 173.156725][ T38] usb_new_device+0x98d/0x1610 [ 173.156747][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 173.156770][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 173.156799][ T38] ? __pfx_usb_new_device+0x10/0x10 [ 173.156826][ T38] hub_event+0x28cf/0x4cf0 [ 173.156889][ T38] ? __pfx_hub_event+0x10/0x10 [ 173.156917][ T38] ? rcu_is_watching+0x15/0xb0 [ 173.156941][ T38] ? process_one_work+0x7fd/0x1480 [ 173.156962][ T38] process_one_work+0xaaf/0x1480 [ 173.156993][ T38] ? __pfx_process_one_work+0x10/0x10 [ 173.157011][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 173.157042][ T38] ? assign_work+0x3cf/0x5d0 [ 173.157064][ T38] worker_thread+0xb05/0x10d0 [ 173.157097][ T38] kthread+0x388/0x470 [ 173.157123][ T9] usb 3-1: emi26_load_firmware - request_firmware() failed [ 173.157123][ T38] ? __pfx_worker_thread+0x10/0x10 [ 173.157141][ T9] usb 3-1: emi26_load_firmware - error loading firmware: error = -12 [ 173.157144][ T38] ? __pfx_kthread+0x10/0x10 [ 173.157172][ T38] ret_from_fork+0x514/0xb70 [ 173.157183][ T9] emi26 - firmware loader 3-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 173.157201][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 173.157230][ T38] ? __switch_to+0xc89/0x1420 [ 173.157255][ T38] ? __pfx_kthread+0x10/0x10 [ 173.157283][ T38] ret_from_fork_asm+0x1a/0x30 [ 173.157318][ T38] [ 173.157325][ T38] Modules linked in: [ 173.157369][ T38] ---[ end trace 0000000000000000 ]--- [ 173.157425][ T5695] usb 1-1: emi26_load_firmware - request_firmware() failed [ 173.157441][ T5695] usb 1-1: emi26_load_firmware - error loading firmware: error = -2 [ 173.157480][ T5695] emi26 - firmware loader 1-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 173.165431][ T38] RIP: 0010:emi26_probe+0x283/0x1690 [ 173.165512][ T38] Code: ff 89 de e8 6f 64 97 00 85 db 0f 84 d9 01 00 00 e8 62 60 97 00 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 173.165571][ T38] RSP: 0018:ffffc90000af6d20 EFLAGS: 00010247 [ 173.165623][ T38] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 173.165663][ T38] RDX: ffffc90019807000 RSI: 0000000000016cee RDI: 0000000000000004 [ 173.165706][ T38] RBP: ffffc90000af6e50 R08: 0000000000000000 R09: 0000000000000000 [ 173.165746][ T38] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: fffffffffffffffa [ 173.165789][ T38] R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff [ 173.165830][ T38] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 173.165881][ T38] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.165921][ T38] CR2: 00007f2b9e1c56b8 CR3: 00000000400bc000 CR4: 00000000003526f0 [ 173.165994][ T38] Kernel panic - not syncing: Fatal exception [ 173.166703][ T38] Kernel Offset: disabled