last executing test programs: 6m20.4721389s ago: executing program 3 (id=2484): r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @empty}}, 0x24) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\x00'}], 0x18}, 0xff00) 6m20.341486111s ago: executing program 3 (id=2486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "1d88d56a15866d"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 6m20.332407474s ago: executing program 3 (id=2487): mount(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x200000, 0x0) r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000100)='crc\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 6m20.294803073s ago: executing program 3 (id=2488): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) readv(r1, &(0x7f0000000040)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 6m19.328180284s ago: executing program 3 (id=2493): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 6m19.228403494s ago: executing program 3 (id=2494): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) 6m4.232611909s ago: executing program 32 (id=2494): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) 2m38.800360139s ago: executing program 1 (id=3300): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000006e80), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000007840)={0x0, 0x0, &(0x7f0000007800)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fddbdf25200000000c000600"], 0x44}, 0x1, 0x0, 0x0, 0x4044085}, 0x100000000000000) 2m38.722189369s ago: executing program 1 (id=3301): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0xfffffffe) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x4, {0xa, 0x4e21, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x3a) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 2m37.847761501s ago: executing program 1 (id=3303): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050202000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000300)) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) 2m34.069717488s ago: executing program 1 (id=3308): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x3}}, 0x20) socket$packet(0x11, 0x2, 0x300) writev(r1, 0x0, 0x0) 2m32.580405424s ago: executing program 1 (id=3313): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x6}]}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0xc03e) 2m31.019931252s ago: executing program 1 (id=3316): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 2m15.543827078s ago: executing program 33 (id=3316): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 9.362697925s ago: executing program 4 (id=3960): syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x4000000) 9.208303531s ago: executing program 4 (id=3962): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01002cbd7000fddbdf2502a700030000006500000000002b6ea041eacdc9226ebfeec567ca45dc270e27eff91d9ffe06ad58dbac2c6e142b40209fcb120fdff9bc9549b7ff82022786ac03c1709c66d805ef99d567fa"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r1 = epoll_create1(0x80000) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0xc0000008}) signalfd4(r2, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x2400) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r8, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r5, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) 9.157643922s ago: executing program 4 (id=3963): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb2ffcc805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4c9f2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4022d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f07ef5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8981c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="8003000000000000f9ffffffffffffff030000200000000002000000000000000104000000000000090000000000000088bc000009000000040000000000", @ANYRES32=r2, @ANYBLOB="040000000700000000000000ffffffffffdfffff0104000000000000f800000004"], 0x0, 0x0, 0x0}) getdents64(r3, &(0x7f0000000100)=""/134, 0x86) 8.928492349s ago: executing program 4 (id=3968): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r0, &(0x7f0000000000)='3', 0x4e) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) syz_open_dev$video(0x0, 0xa, 0x0) 8.839997076s ago: executing program 4 (id=3969): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0x280, 0x1e0, 0x8, 0x3, [0x2], [0x80ffff, 0x0, 0x0, 0x100], [0x40000000, 0xfffffffe], [0x400000000000000, 0x1, 0x0, 0x4]}) 7.132696956s ago: executing program 4 (id=3981): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e01"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\f\x00\x00\x00g\x00\"'], 0xc) 3.584353462s ago: executing program 0 (id=4015): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) capset(&(0x7f0000000000)={0x19980330}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 3.489670617s ago: executing program 0 (id=4016): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) 3.379468746s ago: executing program 0 (id=4017): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x6}]}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0xc03e) 1.852205179s ago: executing program 5 (id=4021): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffffffff000000010000028000000168", 0x14) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000200)=0x1) 1.768483034s ago: executing program 5 (id=4022): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 1.726782127s ago: executing program 5 (id=4023): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040808) 1.645369413s ago: executing program 5 (id=4024): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="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", 0xde9}], 0x5) 1.643876134s ago: executing program 5 (id=4025): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002301000008000300", @ANYRES32, @ANYBLOB="05001f00020000"], 0x24}}, 0x0) 1.592486924s ago: executing program 0 (id=4026): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x2f) 1.574688905s ago: executing program 5 (id=4027): ioctl$BLKSSZGET(0xffffffffffffffff, 0x1268, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x36, &(0x7f0000000b40)={{0x12, 0x1, 0x201, 0x48, 0xcf, 0xb, 0x10, 0x19d2, 0x1297, 0x8215, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x8, 0x5, 0x20, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x0, 0xff, 0xff, 0xff}}, {{0x9, 0x4, 0x79, 0x8, 0x0, 0xc7, 0x49, 0x55, 0x7d}}, {{0x9, 0x4, 0x51, 0x80, 0x0, 0xdb, 0x75, 0x72, 0x66}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x0, 0x3, 0x23, 0xf9, 0xff, 0x3}, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x20008011) sendfile(r2, r3, 0x0, 0x8000fb00) 1.376308008s ago: executing program 0 (id=4028): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x280, 0x1e0, 0x8, 0x3, [0x2], [0x80ffff, 0x0, 0x0, 0x100], [0x40000000, 0xfffffffe], [0x400000000000000, 0x1, 0x0, 0x4]}) 1.163050516s ago: executing program 2 (id=4029): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) 1.054092927s ago: executing program 2 (id=4030): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffffffff000000010000028000000168", 0x14) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000200)=0x1) 630.040077ms ago: executing program 2 (id=4031): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x72, {"b8010000000f01d966ba2000b047eeb9800000c00f3235000400000f30410f01f80fc77dd1c744240200000000c744240600000000c482f2f7500048b83c000000000000000f23d8420f210035000000e00f23f8e999b90000c48285bce4f3dfcd"}}], 0x72}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x7f, 0x88, 0x0, 0x40, 0x0, 0x7f, 0x2004cb, 0x1, 0xfffffd, 0x5, 0x5, 0x745, 0x8, 0x3, 0x0, 0x9], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 305.85561ms ago: executing program 2 (id=4032): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) 64.31338ms ago: executing program 2 (id=4033): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 37.06931ms ago: executing program 0 (id=4034): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0xc03e) 0s ago: executing program 2 (id=4035): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002301000008000300", @ANYRES32, @ANYBLOB="05001f00020000"], 0x24}}, 0x0) kernel console output (not intermixed with test programs): T5863] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.039913][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.039928][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.092695][ T203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.092711][ T203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.469936][ T5717] usb 5-1: USB disconnect, device number 53 [ 760.864859][ T5717] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 761.017718][ T5717] usb 5-1: New USB device found: idVendor=2040, idProduct=2400, bcdDevice=0.00 [ 761.018595][ T5717] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 761.018622][ T5717] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 761.018644][ T5717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.070817][ T5717] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 761.217026][T15084] jffs2: notice: (15084) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 761.245377][ T2355] usb 5-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 761.245394][ T2355] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 761.449555][ T8013] usb 5-1: USB disconnect, device number 54 [ 761.707774][ T5717] usb 1-1: USB disconnect, device number 124 [ 761.923316][ T5620] Bluetooth: hci1: command tx timeout [ 762.627668][ T5717] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 762.644261][T12553] svc: failed to register nfsdv3 RPC service (errno 110). [ 762.658162][T14594] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 763.738150][ T5717] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 763.739558][ T5717] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 763.739584][ T5717] usb 6-1: config 253 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 763.739595][ T5717] usb 6-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 763.741713][ T5717] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 763.741728][ T5717] usb 6-1: SerialNumber: syz [ 763.857647][T14535] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 763.985607][ T5620] Bluetooth: hci1: command tx timeout [ 764.049069][ T5717] rndis_host 6-1:253.0: skipping garbage [ 764.049222][ T5717] rndis_host 6-1:253.0: probe with driver rndis_host failed with error -22 [ 764.077440][ T5717] usb 6-1: USB disconnect, device number 2 [ 764.314728][ T5693] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 764.465267][ T5693] usb 1-1: Using ep0 maxpacket: 8 [ 764.465849][ T5693] usb 1-1: New USB device found: idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 764.468640][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 764.468656][ T5693] usb 1-1: Product: syz [ 764.468664][ T5693] usb 1-1: Manufacturer: syz [ 764.468672][ T5693] usb 1-1: SerialNumber: syz [ 764.472828][ T5693] usb 1-1: config 0 descriptor?? [ 764.519180][ T5693] gspca_main: sq905-2.14.0 probing 2770:9120 [ 765.118011][ T5693] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 765.118066][ T5693] sq905 1-1:0.0: probe with driver sq905 failed with error -110 [ 766.184788][ T5693] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 766.335238][ T5693] usb 6-1: New USB device found: idVendor=2040, idProduct=2400, bcdDevice=0.00 [ 766.336309][ T5693] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 766.336337][ T5693] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 766.336360][ T5693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.343711][ T5693] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 766.565225][T15124] device-mapper: ioctl: name not supplied when creating device [ 766.743521][T12130] usb 6-1: USB disconnect, device number 3 [ 766.744029][T12130] pvrusb2: Device being rendered inoperable [ 766.835115][ T5693] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 767.218666][ T5693] usb 3-1: Using ep0 maxpacket: 32 [ 767.469330][ T5693] usb 3-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 767.574831][ T5693] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 767.574850][ T5693] usb 3-1: config 0 has no interface number 0 [ 767.574874][ T5693] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 767.574888][ T5693] usb 3-1: config 0 interface 85 has no altsetting 0 [ 768.096468][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.096485][ T5693] usb 3-1: Product: syz [ 768.096493][ T5693] usb 3-1: Manufacturer: syz [ 768.096501][ T5693] usb 3-1: SerialNumber: syz [ 768.178475][ T5693] usb 3-1: config 0 descriptor?? [ 768.242442][T12130] usb 1-1: USB disconnect, device number 125 [ 768.565318][ T5717] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 768.684700][T12130] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 768.716313][ T5717] usb 6-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 768.717233][ T5717] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.791509][ T5693] appletouch 3-1:0.85: Geyser mode initialized. [ 768.792911][ T5693] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input108 [ 768.834894][T12130] usb 1-1: Using ep0 maxpacket: 8 [ 768.835385][T12130] usb 1-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 768.836203][T12130] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 768.839466][T12130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.839481][T12130] usb 1-1: Product: syz [ 768.839489][T12130] usb 1-1: Manufacturer: syz [ 768.839497][T12130] usb 1-1: SerialNumber: syz [ 768.843147][T12130] usb 1-1: config 0 descriptor?? [ 769.013775][T12130] usb 3-1: USB disconnect, device number 114 [ 769.049029][T12130] appletouch 3-1:0.85: input: appletouch disconnected [ 769.345807][ T5717] cxacru 6-1:1.0: invalid response length to cm 0x91: 56 [ 769.345826][ T5717] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 769.345834][ T5717] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 769.380832][ T5717] cxacru 6-1:1.0: probe with driver cxacru failed with error -5 [ 769.403990][ T5717] usb 6-1: USB disconnect, device number 4 [ 769.902938][T15149] device-mapper: ioctl: name not supplied when creating device [ 771.056081][ T5693] wiimote 0005:057E:0306.003E: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 771.056260][ T5693] wiimote 0005:057E:0306.003E: New device registered [ 771.284888][ T988] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 771.376863][T12130] usb 1-1: USB disconnect, device number 126 [ 771.415232][ T988] usb 3-1: device descriptor read/64, error -71 [ 772.247981][ T5693] wiimote 0005:057E:0306.003E: detected device: Nintendo Wii Remote (Gen 1) [ 772.278152][ T5693] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.003E/input/input110 [ 772.313393][ T5693] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.003E/input/input111 [ 772.354597][ T5693] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.003E/input/input109 [ 772.385257][ T988] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 772.465398][T12130] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 772.515773][ T988] usb 3-1: device descriptor read/64, error -71 [ 772.661261][ T988] usb usb3-port1: attempt power cycle [ 772.675451][T12130] usb 6-1: New USB device found: idVendor=2040, idProduct=2400, bcdDevice=0.00 [ 772.676236][T12130] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 772.676262][T12130] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 772.676285][T12130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.995393][T15170] 0x000000000000-0x000000020000 : "" [ 773.745840][T15170] ftl_cs: FTL header not found. [ 773.796588][T12130] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 773.955185][ T988] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 773.978426][ T988] usb 3-1: device descriptor read/8, error -71 [ 774.060113][T15159] wiimote 0005:057E:0306.003E: Device removed [ 774.196708][T15070] usb 6-1: USB disconnect, device number 5 [ 774.197257][T15070] pvrusb2: Device being rendered inoperable [ 775.734805][ T988] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 775.886009][ T988] usb 6-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 775.886969][ T988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.193540][T15182] device-mapper: ioctl: name not supplied when creating device [ 776.484821][T12130] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 776.494386][ T988] cxacru 6-1:1.0: invalid response length to cm 0x91: 56 [ 776.494405][ T988] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 776.494413][ T988] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 776.531047][ T988] cxacru 6-1:1.0: probe with driver cxacru failed with error -5 [ 776.552908][ T988] usb 6-1: USB disconnect, device number 6 [ 776.635410][T12130] usb 1-1: Using ep0 maxpacket: 8 [ 776.642433][T12130] usb 1-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 776.643382][T12130] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 776.643396][T12130] usb 1-1: config 179 has no interface number 0 [ 776.643422][T12130] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 776.643436][T12130] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 776.643450][T12130] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 776.643469][T12130] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 776.643483][T12130] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 776.643507][T12130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.744205][T15184] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 776.964822][T12130] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input112 [ 777.167205][T15184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.167530][T15184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.238240][ T988] usb 1-1: USB disconnect, device number 127 [ 778.238334][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 778.238360][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 778.404725][T12130] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 778.555012][T12130] usb 6-1: Using ep0 maxpacket: 8 [ 778.560760][T12130] usb 6-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 778.561549][T12130] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 778.563140][T12130] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.563153][T12130] usb 6-1: Product: syz [ 778.563161][T12130] usb 6-1: Manufacturer: syz [ 778.563169][T12130] usb 6-1: SerialNumber: syz [ 778.612887][T12130] usb 6-1: config 0 descriptor?? [ 778.830905][T15198] 9p: Bad value for 'rfdno' [ 778.880220][ T33] audit: type=1800 audit(1790299197.721:688): pid=15196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3412" name="file1" dev="sda1" ino=2057 res=0 errno=0 [ 779.192231][T15207] device-mapper: ioctl: name not supplied when creating device [ 779.314559][T15211] /dev/loop0: Can't open blockdev [ 779.534757][T12130] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 779.686895][T12130] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 779.688199][T12130] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 779.688225][T12130] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 779.688237][T12130] usb 1-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 779.689317][T12130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 779.689331][T12130] usb 1-1: SerialNumber: syz [ 779.962849][T12130] rndis_host 1-1:253.0: skipping garbage [ 779.964576][T12130] rndis_host 1-1:253.0: probe with driver rndis_host failed with error -22 [ 779.985538][T12130] usb 1-1: USB disconnect, device number 2 [ 780.183248][T12130] usb 6-1: USB disconnect, device number 7 [ 780.525178][T15229] device-mapper: ioctl: name not supplied when creating device [ 780.820435][T15239] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3429'. [ 782.468663][T15253] device-mapper: table: 248:0: zero-length target [ 782.468675][T15253] device-mapper: ioctl: error adding target to table [ 782.503286][T12130] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 783.418387][T12130] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 783.420877][T12130] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 783.420907][T12130] usb 6-1: config 253 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 783.420918][T12130] usb 6-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 783.421723][T12130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 783.421737][T12130] usb 6-1: SerialNumber: syz [ 784.475456][T12130] rndis_host 6-1:253.0: skipping garbage [ 784.475589][T12130] rndis_host 6-1:253.0: probe with driver rndis_host failed with error -22 [ 784.505775][T12130] usb 6-1: USB disconnect, device number 8 [ 784.575051][ T5693] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 784.726402][ T5693] usb 1-1: Using ep0 maxpacket: 32 [ 784.733794][ T5693] usb 1-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 784.744297][ T5693] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 784.744313][ T5693] usb 1-1: config 0 has no interface number 0 [ 784.744336][ T5693] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 784.744351][ T5693] usb 1-1: config 0 interface 85 has no altsetting 0 [ 784.783664][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.783681][ T5693] usb 1-1: Product: syz [ 784.783688][ T5693] usb 1-1: Manufacturer: syz [ 784.783696][ T5693] usb 1-1: SerialNumber: syz [ 784.811258][ T5693] usb 1-1: config 0 descriptor?? [ 785.307451][ T5717] wiimote 0005:057E:0306.003F: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 785.307653][ T5717] wiimote 0005:057E:0306.003F: New device registered [ 785.417457][T15277] device-mapper: table: 248:0: zero-length target [ 785.417469][T15277] device-mapper: ioctl: error adding target to table [ 785.449000][ T5693] appletouch 1-1:0.85: Geyser mode initialized. [ 785.451016][ T5693] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input113 [ 785.652721][ T988] usb 1-1: USB disconnect, device number 3 [ 785.706216][ T988] appletouch 1-1:0.85: input: appletouch disconnected [ 786.444707][ T5717] wiimote 0005:057E:0306.003F: detected device: Nintendo Wii Remote (Gen 1) [ 786.529392][T12130] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 786.902725][T12130] usb 3-1: New USB device found: idVendor=1e7d, idProduct=2cf6, bcdDevice=0.00 [ 786.919214][T12130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.919234][T12130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.919255][T12130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.965019][ T5717] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.003F/input/input115 [ 786.968928][T12130] usb 3-1: config 0 descriptor?? [ 787.003177][T15284] jffs2: notice: (15284) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 787.085216][ T5717] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.003F/input/input116 [ 787.136774][ T5717] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.003F/input/input114 [ 788.161197][T12130] hid_parser_main: 48 callbacks suppressed [ 788.161217][T12130] pyra 0003:1E7D:2CF6.0040: unknown main item tag 0x0 [ 788.161239][T12130] pyra 0003:1E7D:2CF6.0040: unknown main item tag 0x0 [ 788.161255][T12130] pyra 0003:1E7D:2CF6.0040: unknown main item tag 0x0 [ 788.161270][T12130] pyra 0003:1E7D:2CF6.0040: unknown main item tag 0x0 [ 788.161285][T12130] pyra 0003:1E7D:2CF6.0040: unknown main item tag 0x0 [ 788.161300][T12130] pyra 0003:1E7D:2CF6.0040: unknown main item tag 0x0 [ 788.161315][T12130] pyra 0003:1E7D:2CF6.0040: unknown main item tag 0x0 [ 788.228440][T12130] pyra 0003:1E7D:2CF6.0040: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 788.276316][ T6701] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 788.343794][T15274] wiimote 0005:057E:0306.003F: Device removed [ 788.353216][T12130] pyra 0003:1E7D:2CF6.0040: couldn't init struct pyra_device [ 788.353248][T12130] pyra 0003:1E7D:2CF6.0040: couldn't install mouse [ 788.374559][T12130] pyra 0003:1E7D:2CF6.0040: probe with driver pyra failed with error -32 [ 788.424884][ T6701] usb 1-1: Using ep0 maxpacket: 32 [ 788.432232][ T6701] usb 1-1: unable to get BOS descriptor or descriptor too short [ 788.432262][ T6701] usb 1-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 788.433104][ T6701] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 788.433122][ T6701] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 788.433133][ T6701] usb 1-1: config 14 has no interface number 0 [ 788.433146][ T6701] usb 1-1: config 14 has no interface number 1 [ 788.433180][ T6701] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 788.433196][ T6701] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 788.433212][ T6701] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 788.433226][ T6701] usb 1-1: config 14 interface 228 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 788.433241][ T6701] usb 1-1: config 14 interface 57 has no altsetting 0 [ 788.433254][ T6701] usb 1-1: config 14 interface 228 has no altsetting 0 [ 788.548847][ T6701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.548869][ T6701] usb 1-1: Product: syz [ 788.548877][ T6701] usb 1-1: Manufacturer: syz [ 788.548885][ T6701] usb 1-1: SerialNumber: syz [ 788.988244][ T6701] legousbtower 1-1:14.57: interrupt endpoints not found [ 789.074740][T12130] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 789.197139][ T6701] legousbtower 1-1:14.228: interrupt endpoints not found [ 789.225822][T12130] usb 6-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 789.226683][T12130] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 789.226698][T12130] usb 6-1: config 1 has no interface number 0 [ 789.226719][T12130] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 789.226732][T12130] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 789.226746][T12130] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.228438][T12130] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.228453][T12130] usb 6-1: Product: syz [ 789.228460][T12130] usb 6-1: Manufacturer: syz [ 789.228468][T12130] usb 6-1: SerialNumber: syz [ 789.232718][T15295] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 789.369294][ T6701] usb 3-1: USB disconnect, device number 119 [ 789.443026][T15295] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 789.567705][T15301] device-mapper: table: 248:0: zero-length target [ 789.567717][T15301] device-mapper: ioctl: error adding target to table [ 789.643856][T12130] usb 6-1: Incompatible driver and firmware versions [ 789.682910][ T33] audit: type=1807 audit(1790299208.521:689): UNKNOWN=mea‹ûí×Ó¯ŸËÅsª¦¿sure res=0 [ 789.683087][ T33] audit: type=1802 audit(1790299208.521:690): pid=15306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.3455" res=0 errno=0 [ 789.683329][T15305] ima: policy update failed [ 789.683408][ T33] audit: type=1802 audit(1790299208.521:691): pid=15305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3455" res=0 errno=0 [ 789.857521][T12130] usb 6-1: USB disconnect, device number 9 [ 790.882554][ T988] usb 1-1: USB disconnect, device number 4 [ 791.264972][ T988] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 791.414798][ T988] usb 1-1: Using ep0 maxpacket: 32 [ 791.421875][ T988] usb 1-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 791.422868][ T988] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 791.422883][ T988] usb 1-1: config 0 has no interface number 0 [ 791.422904][ T988] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 791.422919][ T988] usb 1-1: config 0 interface 85 has no altsetting 0 [ 791.434813][ T988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.434829][ T988] usb 1-1: Product: syz [ 791.434836][ T988] usb 1-1: Manufacturer: syz [ 791.434844][ T988] usb 1-1: SerialNumber: syz [ 791.492382][ T988] usb 1-1: config 0 descriptor?? [ 791.614837][T12130] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 791.765260][T12130] usb 6-1: New USB device found: idVendor=1e7d, idProduct=2cf6, bcdDevice=0.00 [ 791.766259][T12130] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.766276][T12130] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.766297][T12130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.769902][T12130] usb 6-1: config 0 descriptor?? [ 792.098395][ T988] appletouch 1-1:0.85: Geyser mode initialized. [ 792.101425][ T988] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input117 [ 792.184452][T12130] pyra 0003:1E7D:2CF6.0041: unknown main item tag 0x0 [ 792.184478][T12130] pyra 0003:1E7D:2CF6.0041: unknown main item tag 0x0 [ 792.184494][T12130] pyra 0003:1E7D:2CF6.0041: unknown main item tag 0x0 [ 792.216515][T12130] pyra 0003:1E7D:2CF6.0041: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 792.302148][ T988] usb 1-1: USB disconnect, device number 5 [ 792.323083][ T988] appletouch 1-1:0.85: input: appletouch disconnected [ 792.380230][T12130] pyra 0003:1E7D:2CF6.0041: couldn't init struct pyra_device [ 792.380262][T12130] pyra 0003:1E7D:2CF6.0041: couldn't install mouse [ 792.381533][T12130] pyra 0003:1E7D:2CF6.0041: probe with driver pyra failed with error -32 [ 793.001651][T15327] device-mapper: table: 248:0: zero-length target [ 793.001662][T15327] device-mapper: ioctl: error adding target to table [ 793.514858][ T988] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 793.664834][ T988] usb 1-1: Using ep0 maxpacket: 32 [ 793.667432][ T988] usb 1-1: unable to get BOS descriptor or descriptor too short [ 793.667462][ T988] usb 1-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 793.668397][ T988] usb 1-1: config 14 has an invalid interface number: 228 but max is 0 [ 793.668412][ T988] usb 1-1: config 14 has no interface number 0 [ 793.668434][ T988] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 793.668448][ T988] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 793.668461][ T988] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 793.668474][ T988] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 793.668488][ T988] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 793.668502][ T988] usb 1-1: config 14 interface 228 has no altsetting 0 [ 793.670358][ T988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.670373][ T988] usb 1-1: Product: syz [ 793.670426][ T988] usb 1-1: Manufacturer: syz [ 793.670434][ T988] usb 1-1: SerialNumber: syz [ 794.085518][ T988] legousbtower 1-1:14.228: interrupt endpoints not found [ 794.375104][ T988] usb 6-1: USB disconnect, device number 10 [ 795.604931][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 795.744729][ T5717] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 795.763011][ T10] usb 6-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=0.00 [ 795.763945][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 795.763972][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.763983][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 795.764005][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.823750][ T10] cxacru 6-1:1.0: cxacru_bind: interface has incorrect endpoints [ 795.823839][ T10] cxacru 6-1:1.0: usbatm_usb_probe: bind failed: -19! [ 795.894751][ T5717] usb 3-1: Using ep0 maxpacket: 32 [ 795.895842][ T5717] usb 3-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 795.897025][ T5717] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 795.897042][ T5717] usb 3-1: config 0 has no interface number 0 [ 795.897064][ T5717] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 795.897078][ T5717] usb 3-1: config 0 interface 85 has no altsetting 0 [ 795.898930][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.898944][ T5717] usb 3-1: Product: syz [ 795.898952][ T5717] usb 3-1: Manufacturer: syz [ 795.898959][ T5717] usb 3-1: SerialNumber: syz [ 795.900632][ T5717] usb 3-1: config 0 descriptor?? [ 796.142184][ T10] usb 6-1: USB disconnect, device number 11 [ 796.378883][ T10] usb 1-1: USB disconnect, device number 6 [ 796.509466][ T5717] appletouch 3-1:0.85: Geyser mode initialized. [ 796.510691][ T5717] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input118 [ 796.718349][ T10] usb 3-1: USB disconnect, device number 120 [ 796.766315][ T10] appletouch 3-1:0.85: input: appletouch disconnected [ 797.224756][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 797.373432][ T5717] wacom 0003:056A:003F.0042: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 797.386876][ T10] usb 6-1: New USB device found: idVendor=1e7d, idProduct=2cf6, bcdDevice=0.00 [ 797.388625][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.388642][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.388665][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.404056][ T10] usb 6-1: config 0 descriptor?? [ 797.865745][ T10] hid_parser_main: 4 callbacks suppressed [ 797.865763][ T10] pyra 0003:1E7D:2CF6.0043: unknown main item tag 0x0 [ 797.865789][ T10] pyra 0003:1E7D:2CF6.0043: unknown main item tag 0x0 [ 797.865804][ T10] pyra 0003:1E7D:2CF6.0043: unknown main item tag 0x0 [ 797.865819][ T10] pyra 0003:1E7D:2CF6.0043: unknown main item tag 0x0 [ 797.865833][ T10] pyra 0003:1E7D:2CF6.0043: unknown main item tag 0x0 [ 797.865848][ T10] pyra 0003:1E7D:2CF6.0043: unknown main item tag 0x0 [ 797.865863][ T10] pyra 0003:1E7D:2CF6.0043: unknown main item tag 0x0 [ 797.868592][ T10] pyra 0003:1E7D:2CF6.0043: hidraw2: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 798.054338][ T10] pyra 0003:1E7D:2CF6.0043: couldn't init struct pyra_device [ 798.054371][ T10] pyra 0003:1E7D:2CF6.0043: couldn't install mouse [ 798.077850][ T10] pyra 0003:1E7D:2CF6.0043: probe with driver pyra failed with error -32 [ 798.235893][T15373] jffs2: notice: (15373) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 798.440896][T15381] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 798.634877][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 798.784727][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 798.784842][ T6701] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 798.787319][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 798.787349][ T10] usb 1-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 798.788318][ T10] usb 1-1: config 14 has an invalid interface number: 228 but max is 0 [ 798.788334][ T10] usb 1-1: config 14 has no interface number 0 [ 798.788362][ T10] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 798.788377][ T10] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 798.788391][ T10] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 798.788404][ T10] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 798.788417][ T10] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 798.788431][ T10] usb 1-1: config 14 interface 228 has no altsetting 0 [ 798.790240][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.790253][ T10] usb 1-1: Product: syz [ 798.790261][ T10] usb 1-1: Manufacturer: syz [ 798.790268][ T10] usb 1-1: SerialNumber: syz [ 799.005839][ T6701] usb 3-1: New USB device found: idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 799.008719][ T6701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.008739][ T6701] usb 3-1: Product: syz [ 799.008746][ T6701] usb 3-1: Manufacturer: syz [ 799.008754][ T6701] usb 3-1: SerialNumber: syz [ 799.010744][ T6701] usb 3-1: config 0 descriptor?? [ 799.055938][ T6701] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 121 [ 799.262373][ T10] legousbtower 1-1:14.228: interrupt endpoints not found [ 799.621641][ T6701] i2c i2c-1: failure reading functionality [ 799.633689][ T6701] i2c i2c-1: connected i2c-tiny-usb device [ 799.643144][ T6701] usb 3-1: USB disconnect, device number 121 [ 799.995250][ T6701] usb 6-1: USB disconnect, device number 12 [ 801.481662][T12130] wiimote 0005:057E:0306.0044: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 801.481836][T12130] wiimote 0005:057E:0306.0044: New device registered [ 801.624726][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 801.774708][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 801.775559][ T10] usb 6-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 801.776529][ T10] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 801.776544][ T10] usb 6-1: config 0 has no interface number 0 [ 801.776567][ T10] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 801.776581][ T10] usb 6-1: config 0 interface 85 has no altsetting 0 [ 801.778448][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.778463][ T10] usb 6-1: Product: syz [ 801.778470][ T10] usb 6-1: Manufacturer: syz [ 801.778478][ T10] usb 6-1: SerialNumber: syz [ 801.781217][ T10] usb 6-1: config 0 descriptor?? [ 802.293028][ T988] usb 1-1: USB disconnect, device number 7 [ 802.391329][ T10] appletouch 6-1:0.85: Geyser mode initialized. [ 802.394108][ T10] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input122 [ 802.544925][T12130] wiimote 0005:057E:0306.0044: detected device: Nintendo Wii Remote (Gen 1) [ 802.570665][T12130] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0044/input/input124 [ 802.590681][T12130] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0044/input/input125 [ 802.594175][ T6701] usb 6-1: USB disconnect, device number 13 [ 802.629908][T12130] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0044/input/input123 [ 802.668083][ T988] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 802.672260][ T6701] appletouch 6-1:0.85: input: appletouch disconnected [ 802.826421][ T988] usb 1-1: New USB device found: idVendor=256c, idProduct=006d, bcdDevice=0.00 [ 802.827280][ T988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.827298][ T988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.828096][ T988] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 802.828110][ T988] usb 1-1: Manufacturer: syz [ 802.829908][ T988] usb 1-1: config 0 descriptor?? [ 805.064989][ T988] uclogic 0003:256C:006D.0045: interface is invalid, ignoring [ 805.112826][T15402] wiimote 0005:057E:0306.0044: Device removed [ 805.424927][ T988] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 805.464724][ T10] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 805.575479][ T988] usb 6-1: New USB device found: idVendor=1e7d, idProduct=2cf6, bcdDevice=0.00 [ 805.576565][ T988] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.576583][ T988] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.576603][ T988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.580304][ T988] usb 6-1: config 0 descriptor?? [ 805.644915][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 805.650968][ T10] usb 3-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 805.652157][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 805.652172][ T10] usb 3-1: config 179 has no interface number 0 [ 805.652194][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 805.652208][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 805.652270][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 805.652285][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 805.652299][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 805.652322][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.753984][T15417] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 805.962578][T15417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.962914][T15417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.989818][ T988] pyra 0003:1E7D:2CF6.0046: unknown main item tag 0x0 [ 805.989842][ T988] pyra 0003:1E7D:2CF6.0046: unknown main item tag 0x0 [ 805.989858][ T988] pyra 0003:1E7D:2CF6.0046: unknown main item tag 0x0 [ 805.989873][ T988] pyra 0003:1E7D:2CF6.0046: unknown main item tag 0x0 [ 805.989888][ T988] pyra 0003:1E7D:2CF6.0046: unknown main item tag 0x0 [ 805.989959][ T988] pyra 0003:1E7D:2CF6.0046: unknown main item tag 0x0 [ 805.989974][ T988] pyra 0003:1E7D:2CF6.0046: unknown main item tag 0x0 [ 806.009433][ T988] pyra 0003:1E7D:2CF6.0046: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 806.112970][ T10] usb 1-1: USB disconnect, device number 8 [ 806.208563][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 806.208592][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 806.208631][ T6701] usb 3-1: USB disconnect, device number 122 [ 806.246379][ T988] pyra 0003:1E7D:2CF6.0046: couldn't init struct pyra_device [ 806.246410][ T988] pyra 0003:1E7D:2CF6.0046: couldn't install mouse [ 806.263590][ T988] pyra 0003:1E7D:2CF6.0046: probe with driver pyra failed with error -32 [ 807.365616][ T6701] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 807.514696][ T6701] usb 1-1: Using ep0 maxpacket: 32 [ 807.516605][ T6701] usb 1-1: unable to get BOS descriptor or descriptor too short [ 807.516635][ T6701] usb 1-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 807.517552][ T6701] usb 1-1: config 14 has an invalid interface number: 228 but max is 0 [ 807.517567][ T6701] usb 1-1: config 14 has no interface number 0 [ 807.517647][ T6701] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 807.517662][ T6701] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 807.517676][ T6701] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 807.517689][ T6701] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 807.517703][ T6701] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 807.517717][ T6701] usb 1-1: config 14 interface 228 has no altsetting 0 [ 807.519549][ T6701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.519563][ T6701] usb 1-1: Product: syz [ 807.519571][ T6701] usb 1-1: Manufacturer: syz [ 807.519578][ T6701] usb 1-1: SerialNumber: syz [ 807.657948][ T988] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 807.815264][ T988] usb 3-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 807.816912][ T988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.993964][ T6701] legousbtower 1-1:14.228: interrupt endpoints not found [ 808.212611][ T6701] usb 6-1: USB disconnect, device number 14 [ 808.449207][ T988] cxacru 3-1:1.0: invalid response length to cm 0x91: 62 [ 808.449228][ T988] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 808.449236][ T988] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 808.450393][ T988] cxacru 3-1:1.0: probe with driver cxacru failed with error -5 [ 809.437099][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.437135][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.467766][ T988] usb 3-1: USB disconnect, device number 123 [ 809.945284][ T988] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 810.096249][ T988] usb 6-1: New USB device found: idVendor=256c, idProduct=006d, bcdDevice=0.00 [ 810.097198][ T988] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.097216][ T988] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.098105][ T988] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 810.098118][ T988] usb 6-1: Manufacturer: syz [ 810.099727][ T988] usb 6-1: config 0 descriptor?? [ 810.171421][ T6701] usb 1-1: USB disconnect, device number 9 [ 810.187310][ T10] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 810.334691][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 810.335394][ T10] usb 3-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 810.336355][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 810.336370][ T10] usb 3-1: config 179 has no interface number 0 [ 810.336414][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 810.336428][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 810.336442][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 810.336456][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 810.336470][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 810.336493][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.341395][T15445] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 810.572583][T12130] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input127 [ 810.910732][ T988] uclogic 0003:256C:006D.0047: interface is invalid, ignoring [ 810.971174][ T988] usb 3-1: USB disconnect, device number 124 [ 810.971273][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 810.971302][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 812.315322][T15452] jffs2: notice: (15452) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 812.445381][T15460] FAULT_INJECTION: forcing a failure. [ 812.445381][T15460] name failslab, interval 1, probability 0, space 0, times 0 [ 812.445406][T15460] CPU: 0 UID: 0 PID: 15460 Comm: syz.0.3506 Tainted: G L syzkaller #0 PREEMPT(full) [ 812.445438][T15460] Tainted: [L]=SOFTLOCKUP [ 812.445447][T15460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 812.445462][T15460] Call Trace: [ 812.445467][T15460] [ 812.445472][T15460] dump_stack_lvl+0xe8/0x150 [ 812.445494][T15460] should_fail_ex+0x3eb/0x540 [ 812.445516][T15460] should_failslab+0xa8/0x100 [ 812.445532][T15460] __kvmalloc_node_noprof+0x171/0x820 [ 812.445545][T15460] ? v4l2_ctrl_new+0xa5a/0x1820 [ 812.445624][T15460] ? v4l2_ctrl_new+0xa5a/0x1820 [ 812.445640][T15460] v4l2_ctrl_new+0xa5a/0x1820 [ 812.445659][T15460] v4l2_ctrl_new_std+0x24e/0x300 [ 812.445678][T15460] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 812.445690][T15460] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 812.445717][T15460] ? find_ref_lock+0x425/0x480 [ 812.445732][T15460] handler_new_ref+0x153/0x930 [ 812.445747][T15460] ? __pfx_v4l2_ctrl_type_op_init+0x10/0x10 [ 812.445760][T15460] v4l2_ctrl_new+0x1395/0x1820 [ 812.445778][T15460] v4l2_ctrl_new_std+0x24e/0x300 [ 812.445796][T15460] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 812.445807][T15460] ? v4l2_ctrl_handler_init_class+0x1b3/0x2e0 [ 812.445822][T15460] ? v4l2_ctrl_handler_init_class+0x1b3/0x2e0 [ 812.445836][T15460] ? __kvmalloc_node_noprof+0x340/0x820 [ 812.445852][T15460] ? v4l2_ctrl_handler_init_class+0x20d/0x2e0 [ 812.445866][T15460] vicodec_open+0x30c/0xbf0 [ 812.445932][T15460] v4l2_open+0x1bc/0x3a0 [ 812.445970][T15460] chrdev_open+0x4d9/0x600 [ 812.445987][T15460] ? __pfx_chrdev_open+0x10/0x10 [ 812.446002][T15460] ? devcgroup_check_permission+0x31/0x8f0 [ 812.446045][T15460] ? __pfx_chrdev_open+0x10/0x10 [ 812.446057][T15460] do_dentry_open+0x80e/0x1360 [ 812.446079][T15460] vfs_open_consume+0x4a/0x350 [ 812.446092][T15460] ? path_openat+0x148a/0x1da0 [ 812.446107][T15460] path_openat+0x14a6/0x1da0 [ 812.446129][T15460] do_file_open+0x23e/0x4a0 [ 812.446151][T15460] ? __pfx_do_file_open+0x10/0x10 [ 812.446176][T15460] ? _raw_spin_unlock+0x28/0x50 [ 812.446192][T15460] ? alloc_fd+0x6af/0x760 [ 812.446213][T15460] do_sys_openat2+0x115/0x200 [ 812.446230][T15460] ? __pfx_do_sys_openat2+0x10/0x10 [ 812.446248][T15460] ? do_user_addr_fault+0xd3f/0x1480 [ 812.446267][T15460] __x64_sys_openat+0x138/0x170 [ 812.446283][T15460] do_syscall_64+0x166/0x520 [ 812.446298][T15460] ? trace_irq_disable+0x3b/0x140 [ 812.446310][T15460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.446323][T15460] ? clear_bhb_loop+0x70/0xc0 [ 812.446336][T15460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.446346][T15460] RIP: 0033:0x7f96e135e98e [ 812.446358][T15460] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 812.446368][T15460] RSP: 002b:00007f96e2199b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 812.446381][T15460] RAX: ffffffffffffffda RBX: 00007f96e219a6c0 RCX: 00007f96e135e98e [ 812.446389][T15460] RDX: 0000000000000000 RSI: 00007f96e2199c00 RDI: ffffffffffffff9c [ 812.446397][T15460] RBP: 00007f96e2199c00 R08: 0000000000000000 R09: 0000000000000000 [ 812.446404][T15460] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 812.446412][T15460] R13: 00007f96e1626038 R14: 00007f96e1625fa0 R15: 00007fffae297758 [ 812.446428][T15460] [ 812.651034][ T988] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 812.912327][T12130] usb 6-1: USB disconnect, device number 15 [ 812.917450][ T988] usb 3-1: Using ep0 maxpacket: 32 [ 812.929196][ T988] usb 3-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 812.942902][ T988] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 812.942919][ T988] usb 3-1: config 0 has no interface number 0 [ 812.942940][ T988] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 812.942955][ T988] usb 3-1: config 0 interface 85 has no altsetting 0 [ 812.976386][ T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.976403][ T988] usb 3-1: Product: syz [ 812.976411][ T988] usb 3-1: Manufacturer: syz [ 812.976419][ T988] usb 3-1: SerialNumber: syz [ 813.043401][ T988] usb 3-1: config 0 descriptor?? [ 813.120940][T15465] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 813.285525][ T6701] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 813.435380][ T6701] usb 1-1: New USB device found: idVendor=1e7d, idProduct=2cf6, bcdDevice=0.00 [ 813.436335][ T6701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.436351][ T6701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.436385][ T6701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.438236][ T6701] usb 1-1: config 0 descriptor?? [ 813.544868][T12130] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 813.696689][ T988] appletouch 3-1:0.85: Geyser mode initialized. [ 813.698901][T12130] usb 6-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 813.699523][ T988] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input128 [ 813.699844][T12130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.848970][ T6701] pyra 0003:1E7D:2CF6.0048: unknown main item tag 0x0 [ 813.849017][ T6701] pyra 0003:1E7D:2CF6.0048: unknown main item tag 0x0 [ 813.849033][ T6701] pyra 0003:1E7D:2CF6.0048: unknown main item tag 0x0 [ 813.849049][ T6701] pyra 0003:1E7D:2CF6.0048: unknown main item tag 0x0 [ 813.849064][ T6701] pyra 0003:1E7D:2CF6.0048: unknown main item tag 0x0 [ 813.849079][ T6701] pyra 0003:1E7D:2CF6.0048: unknown main item tag 0x0 [ 813.849094][ T6701] pyra 0003:1E7D:2CF6.0048: unknown main item tag 0x0 [ 813.908906][ T6701] pyra 0003:1E7D:2CF6.0048: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 813.927959][T15070] usb 3-1: USB disconnect, device number 125 [ 813.954333][T15070] appletouch 3-1:0.85: input: appletouch disconnected [ 814.044329][ T6701] pyra 0003:1E7D:2CF6.0048: couldn't init struct pyra_device [ 814.044377][ T6701] pyra 0003:1E7D:2CF6.0048: couldn't install mouse [ 814.065284][ T6701] pyra 0003:1E7D:2CF6.0048: probe with driver pyra failed with error -32 [ 814.376078][T12130] cxacru 6-1:1.0: invalid response length to cm 0x91: 63 [ 814.376096][T12130] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 814.376104][T12130] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 814.383495][T12130] cxacru 6-1:1.0: probe with driver cxacru failed with error -5 [ 814.426378][T12130] usb 6-1: USB disconnect, device number 16 [ 815.294782][T12130] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 816.133321][T15070] usb 1-1: USB disconnect, device number 10 [ 816.176179][T12130] usb 6-1: Using ep0 maxpacket: 8 [ 816.182026][T12130] usb 6-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 816.195166][T12130] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 816.195183][T12130] usb 6-1: config 179 has no interface number 0 [ 816.195206][T12130] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 816.195219][T12130] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 816.195233][T12130] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 816.195246][T12130] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 816.195260][T12130] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 816.195283][T12130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.268309][T15481] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 817.555521][T15070] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input129 [ 818.151558][T15070] usb 6-1: USB disconnect, device number 17 [ 818.151612][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 818.151639][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 818.847340][T15070] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 819.008587][T15070] usb 3-1: New USB device found: idVendor=256c, idProduct=006d, bcdDevice=0.00 [ 819.009499][T15070] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.009517][T15070] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.010323][T15070] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 819.010337][T15070] usb 3-1: Manufacturer: syz [ 819.061849][T15070] usb 3-1: config 0 descriptor?? [ 819.204860][ T6701] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 819.412425][ T6701] usb 6-1: New USB device found: idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 819.425068][ T6701] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 819.425107][ T6701] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.425118][ T6701] usb 6-1: config 0 has no interface number 0 [ 819.425144][ T6701] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 819.425158][ T6701] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 819.425169][ T6701] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 819.499642][ T6701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.499660][ T6701] usb 6-1: Product: syz [ 819.499668][ T6701] usb 6-1: Manufacturer: syz [ 819.499676][ T6701] usb 6-1: SerialNumber: syz [ 819.528375][ T6701] usb 6-1: config 0 descriptor?? [ 820.107264][T15070] uclogic 0003:256C:006D.0049: interface is invalid, ignoring [ 820.313176][ T6701] usb 6-1: USB disconnect, device number 18 [ 820.715424][T15070] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 820.867425][T15070] usb 1-1: New USB device found: idVendor=1e7d, idProduct=2cf6, bcdDevice=0.00 [ 820.868309][T15070] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.868325][T15070] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.868345][T15070] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.872191][T15070] usb 1-1: config 0 descriptor?? [ 821.301222][T15070] pyra 0003:1E7D:2CF6.004A: unknown main item tag 0x0 [ 821.301248][T15070] pyra 0003:1E7D:2CF6.004A: unknown main item tag 0x0 [ 821.301263][T15070] pyra 0003:1E7D:2CF6.004A: unknown main item tag 0x0 [ 821.301278][T15070] pyra 0003:1E7D:2CF6.004A: unknown main item tag 0x0 [ 821.301293][T15070] pyra 0003:1E7D:2CF6.004A: unknown main item tag 0x0 [ 821.301309][T15070] pyra 0003:1E7D:2CF6.004A: unknown main item tag 0x0 [ 821.301324][T15070] pyra 0003:1E7D:2CF6.004A: unknown main item tag 0x0 [ 821.303016][T15070] pyra 0003:1E7D:2CF6.004A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 821.368885][ T6701] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 821.499827][T15070] pyra 0003:1E7D:2CF6.004A: couldn't init struct pyra_device [ 821.499860][T15070] pyra 0003:1E7D:2CF6.004A: couldn't install mouse [ 821.501308][T15070] pyra 0003:1E7D:2CF6.004A: probe with driver pyra failed with error -32 [ 821.531362][ T6701] usb 6-1: New USB device found: idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 821.547590][ T6701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.547607][ T6701] usb 6-1: Product: syz [ 821.547615][ T6701] usb 6-1: Manufacturer: syz [ 821.547622][ T6701] usb 6-1: SerialNumber: syz [ 821.553208][ T6701] usb 6-1: config 0 descriptor?? [ 821.591573][ T6701] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 019 [ 821.618424][T15070] usb 3-1: USB disconnect, device number 126 [ 822.937521][T12553] svc: failed to register nfsaclv3 RPC service (errno 110). [ 822.937539][T12553] failed to unregister tcp with rpcbind [ 823.021323][T12553] svc: failed to register nfsdv3 RPC service (errno 97). [ 823.021340][T12553] svc: failed to register nfsaclv3 RPC service (errno 97). [ 823.021354][T12553] failed to unregister tcp with rpcbind [ 823.122563][T15531] capability: warning: `syz.2.3531' uses 32-bit capabilities (legacy support in use) [ 823.137597][T15531] overlayfs: upper fs does not support file handles, falling back to index=off. [ 823.529820][ T6701] i2c i2c-1: failure reading functionality [ 823.551200][ T6701] i2c i2c-1: connected i2c-tiny-usb device [ 823.564908][ T6701] usb 6-1: USB disconnect, device number 19 [ 823.755207][T15070] usb 1-1: USB disconnect, device number 11 [ 824.108168][ T2355] pvrusb2: request_firmware fatal error with code=-110 [ 824.108182][ T2355] pvrusb2: Failure uploading firmware1 [ 824.108186][ T2355] pvrusb2: Device initialization was not successful. [ 824.108191][ T2355] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 824.108197][ T2355] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 824.110524][ T8013] pvrusb2: Device being rendered inoperable [ 824.534790][T15070] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 824.614875][ T6701] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 824.616803][ T8013] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 824.686433][T15070] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 824.687499][T15070] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 824.687516][T15070] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 824.687526][T15070] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 824.687551][T15070] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.688972][T15070] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 824.688986][T15070] usb 1-1: Product: syz [ 824.688993][T15070] usb 1-1: Manufacturer: syz [ 824.694158][T15070] cdc_wdm 1-1:1.0: skipping garbage [ 824.694171][T15070] cdc_wdm 1-1:1.0: skipping garbage [ 824.758964][ T5717] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 824.787017][ T8013] usb 5-1: Using ep0 maxpacket: 8 [ 824.787777][ T6701] usb 6-1: New USB device found: idVendor=256c, idProduct=006d, bcdDevice=0.00 [ 824.787897][ T8013] usb 5-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 824.789033][ T6701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.789065][ T6701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.790455][ T8013] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 824.790470][ T8013] usb 5-1: config 179 has no interface number 0 [ 824.790492][ T8013] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 824.790505][ T8013] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 824.790519][ T8013] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 824.790532][ T8013] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 824.790545][ T8013] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 824.790568][ T8013] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.790710][ T6701] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 824.790721][ T6701] usb 6-1: Manufacturer: syz [ 824.792151][T15070] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 824.792162][T15070] cdc_wdm 1-1:1.0: Unknown control protocol [ 824.820594][ T6701] usb 6-1: config 0 descriptor?? [ 824.944170][T15545] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 825.005447][ T5717] usb 3-1: New USB device found: idVendor=256c, idProduct=006d, bcdDevice=0.00 [ 825.006287][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.006305][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.007125][ T5717] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 825.007138][ T5717] usb 3-1: Manufacturer: syz [ 825.035713][ T5717] usb 3-1: config 0 descriptor?? [ 825.173152][ T8013] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input131 [ 825.371467][T15545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.371821][T15545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.597958][ T8013] usb 5-1: USB disconnect, device number 55 [ 825.597998][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 825.598023][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 825.892521][ T5717] uclogic 0003:256C:006D.004C: interface is invalid, ignoring [ 826.047294][ T6701] input: syz Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.004B/input/input132 [ 826.109633][ T6701] uclogic 0003:256C:006D.004B: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 826.256485][ T6701] usb 6-1: USB disconnect, device number 20 [ 826.288626][T15551] fido_id[15551]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 827.716246][ T6701] usb 3-1: USB disconnect, device number 127 [ 827.754055][ T5717] usb 1-1: USB disconnect, device number 12 [ 827.956608][T15070] wacom 0003:056A:003F.004D: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 828.106986][T15569] fido_id[15569]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 828.155358][ T5717] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 828.306660][ T5717] usb 1-1: New USB device found: idVendor=1e7d, idProduct=2cf6, bcdDevice=0.00 [ 828.307614][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.307631][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.307652][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.375012][ T5717] usb 1-1: config 0 descriptor?? [ 828.796108][ T5717] pyra 0003:1E7D:2CF6.004E: unknown main item tag 0x0 [ 828.796298][ T5717] pyra 0003:1E7D:2CF6.004E: unknown main item tag 0x0 [ 828.796423][ T5717] pyra 0003:1E7D:2CF6.004E: unknown main item tag 0x0 [ 828.796536][ T5717] pyra 0003:1E7D:2CF6.004E: unknown main item tag 0x0 [ 828.796552][ T5717] pyra 0003:1E7D:2CF6.004E: unknown main item tag 0x0 [ 828.796567][ T5717] pyra 0003:1E7D:2CF6.004E: unknown main item tag 0x0 [ 828.796582][ T5717] pyra 0003:1E7D:2CF6.004E: unknown main item tag 0x0 [ 828.812136][ T6701] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 828.868767][ T5717] pyra 0003:1E7D:2CF6.004E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 828.964801][ T6701] usb 3-1: Using ep0 maxpacket: 32 [ 828.999622][ T5717] pyra 0003:1E7D:2CF6.004E: couldn't init struct pyra_device [ 828.999654][ T5717] pyra 0003:1E7D:2CF6.004E: couldn't install mouse [ 829.002747][ T5717] pyra 0003:1E7D:2CF6.004E: probe with driver pyra failed with error -32 [ 829.043732][ T6701] usb 3-1: unable to get BOS descriptor or descriptor too short [ 829.043765][ T6701] usb 3-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 829.066179][ T6701] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 829.066201][ T6701] usb 3-1: can't read configurations, error -71 [ 829.344764][ T5717] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 829.497272][ T5717] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 829.498115][ T5717] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 829.498132][ T5717] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 829.498143][ T5717] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 829.498167][ T5717] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.499426][ T5717] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 829.499441][ T5717] usb 6-1: Product: syz [ 829.499448][ T5717] usb 6-1: Manufacturer: syz [ 829.538655][ T5717] cdc_wdm 6-1:1.0: skipping garbage [ 829.538669][ T5717] cdc_wdm 6-1:1.0: skipping garbage [ 829.599219][ T5717] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 829.599234][ T5717] cdc_wdm 6-1:1.0: Unknown control protocol [ 829.722604][ T5717] wacom 0003:056A:003F.004F: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 829.876681][T15596] fido_id[15596]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 829.972124][T15070] usb 6-1: USB disconnect, device number 21 [ 830.116856][T15605] jffs2: notice: (15605) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 831.042776][T15070] usb 1-1: USB disconnect, device number 13 [ 831.316008][ T5717] wacom 0003:056A:003F.0050: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 831.386172][T15070] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 831.492603][T15625] fido_id[15625]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 831.536230][T15070] usb 3-1: Using ep0 maxpacket: 32 [ 831.578321][T15070] usb 3-1: unable to get BOS descriptor or descriptor too short [ 831.578352][T15070] usb 3-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 831.579001][T15070] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 831.579020][T15070] usb 3-1: can't read configurations, error -71 [ 833.545078][ T6701] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 833.569325][T12130] wacom 0003:056A:003F.0051: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 833.642400][T15652] jffs2: notice: (15652) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 833.661465][T15070] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 833.699957][ T6701] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 833.703103][ T6701] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 833.703121][ T6701] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 833.703134][ T6701] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 833.703157][ T6701] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.704345][ T6701] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 833.704359][ T6701] usb 6-1: Product: syz [ 833.704367][ T6701] usb 6-1: Manufacturer: syz [ 833.787468][ T6701] cdc_wdm 6-1:1.0: skipping garbage [ 833.787482][ T6701] cdc_wdm 6-1:1.0: skipping garbage [ 833.790330][T15650] fido_id[15650]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 833.824363][ T6701] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 833.824377][ T6701] cdc_wdm 6-1:1.0: Unknown control protocol [ 833.838891][T15070] usb 1-1: New USB device found: idVendor=17ef, idProduct=6161, bcdDevice=0.00 [ 833.843322][T15070] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.843339][T15070] usb 1-1: Product: syz [ 833.843348][T15070] usb 1-1: Manufacturer: syz [ 833.843356][T15070] usb 1-1: SerialNumber: syz [ 834.095024][T15070] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 834.102278][T15664] sd 0:0:1:0: PR command failed: 1026 [ 834.102334][T15664] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 834.102378][T15664] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 834.144894][T15070] usb 1-1: USB disconnect, device number 14 [ 834.250499][ T5717] usb 6-1: USB disconnect, device number 22 [ 834.305981][ T6701] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 834.455066][ T6701] usb 5-1: Using ep0 maxpacket: 32 [ 834.469376][ T6701] usb 5-1: unable to get BOS descriptor or descriptor too short [ 834.469410][ T6701] usb 5-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 834.470099][ T6701] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 834.470119][ T6701] usb 5-1: can't read configurations, error -71 [ 834.654747][T15070] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 834.806516][T15070] usb 1-1: New USB device found: idVendor=17ef, idProduct=6161, bcdDevice=0.00 [ 834.811656][T15070] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.811673][T15070] usb 1-1: Product: syz [ 834.811681][T15070] usb 1-1: Manufacturer: syz [ 834.811689][T15070] usb 1-1: SerialNumber: syz [ 835.281152][T15070] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 835.339462][T15070] wacom 0003:056A:003F.0052: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 835.576562][T15682] fido_id[15682]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 835.717010][T15070] usb 1-1: USB disconnect, device number 15 [ 836.096762][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3590'. [ 836.612933][T15714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3599'. [ 839.223379][T15070] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 840.184893][T15070] usb 3-1: Using ep0 maxpacket: 8 [ 840.185419][T15070] usb 3-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 840.186433][T15070] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 840.186448][T15070] usb 3-1: config 179 has no interface number 0 [ 840.186471][T15070] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 840.186484][T15070] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 840.186499][T15070] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 840.186512][T15070] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 840.186525][T15070] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 840.186548][T15070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.192333][T15749] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 840.482151][T15070] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input148 [ 840.645641][T15749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.645965][T15749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.886941][T15070] usb 3-1: USB disconnect, device number 6 [ 840.887039][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 840.887068][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 842.802761][T15806] 6í [ 843.668718][T15811] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 845.414972][T12130] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 845.565078][T12130] usb 5-1: Using ep0 maxpacket: 8 [ 845.571988][T12130] usb 5-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 845.572846][T12130] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 845.572860][T12130] usb 5-1: config 179 has no interface number 0 [ 845.572883][T12130] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 845.572897][T12130] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 845.572911][T12130] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 845.572925][T12130] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 845.572939][T12130] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 845.572960][T12130] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.678089][T15823] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 846.694550][T15070] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input149 [ 847.678657][T15823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.678990][T15823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.031300][ T6701] usb 5-1: USB disconnect, device number 58 [ 848.031390][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 848.031417][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 848.388341][T15849] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 848.576992][T12130] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 848.726739][T12130] usb 1-1: New USB device found: idVendor=1e7d, idProduct=2cf6, bcdDevice=0.00 [ 848.727691][T12130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.727709][T12130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.727730][T12130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.731573][T12130] usb 1-1: config 0 descriptor?? [ 848.992562][T15871] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [5] [ 848.992604][T15871] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 848.992615][T15871] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 848.992621][T15871] One or more global auth toks could not properly register; rc = [-22] [ 848.992692][T15871] Error validating options; rc = [-22] [ 849.043023][ T6701] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 849.144979][T12130] pyra 0003:1E7D:2CF6.0053: unknown main item tag 0x0 [ 849.145004][T12130] pyra 0003:1E7D:2CF6.0053: unknown main item tag 0x0 [ 849.145020][T12130] pyra 0003:1E7D:2CF6.0053: unknown main item tag 0x0 [ 849.145035][T12130] pyra 0003:1E7D:2CF6.0053: unknown main item tag 0x0 [ 849.145051][T12130] pyra 0003:1E7D:2CF6.0053: unknown main item tag 0x0 [ 849.145065][T12130] pyra 0003:1E7D:2CF6.0053: unknown main item tag 0x0 [ 849.145080][T12130] pyra 0003:1E7D:2CF6.0053: unknown main item tag 0x0 [ 849.150658][T12130] pyra 0003:1E7D:2CF6.0053: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 849.225308][ T6701] usb 6-1: Using ep0 maxpacket: 32 [ 849.227175][ T6701] usb 6-1: unable to get BOS descriptor or descriptor too short [ 849.227205][ T6701] usb 6-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 849.228025][ T6701] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 849.228039][ T6701] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 849.228050][ T6701] usb 6-1: config 14 has no interface number 0 [ 849.228058][ T6701] usb 6-1: config 14 has no interface number 1 [ 849.228091][ T6701] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 849.228104][ T6701] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 849.228116][ T6701] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 849.228143][ T6701] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 849.228158][ T6701] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 849.228171][ T6701] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 849.228185][ T6701] usb 6-1: config 14 interface 57 has no altsetting 0 [ 849.228194][ T6701] usb 6-1: config 14 interface 228 has no altsetting 0 [ 849.230262][ T6701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.230276][ T6701] usb 6-1: Product: syz [ 849.230284][ T6701] usb 6-1: Manufacturer: syz [ 849.230292][ T6701] usb 6-1: SerialNumber: syz [ 849.411899][T12130] pyra 0003:1E7D:2CF6.0053: couldn't init struct pyra_device [ 849.411932][T12130] pyra 0003:1E7D:2CF6.0053: couldn't install mouse [ 849.432952][T12130] pyra 0003:1E7D:2CF6.0053: probe with driver pyra failed with error -5 [ 849.665596][ T6701] legousbtower 6-1:14.57: interrupt endpoints not found [ 849.682479][T15876] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 849.850610][T12130] wacom 0003:056A:003F.0054: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 849.875670][ T6701] legousbtower 6-1:14.228: get version request failed: -71 [ 849.875775][ T6701] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 849.919618][ T6701] usb 6-1: USB disconnect, device number 23 [ 850.023523][T15881] fido_id[15881]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 850.456099][ T6701] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 850.605915][ T6701] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 850.606795][ T6701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.611037][ T6701] usb 5-1: config 0 descriptor?? [ 850.841095][T12130] wacom 0003:056A:003F.0055: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 850.855075][ T6701] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 850.951475][T15904] fido_id[15904]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 851.162180][ T6701] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 851.162198][ T6701] [drm] Initialized udl on minor 1 [ 851.237074][ T33] audit: type=1800 audit(1790299270.071:692): pid=15893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3667" name="cpuset.effective_cpus" dev="sda1" ino=2056 res=0 errno=0 [ 851.360718][T15070] usb 1-1: USB disconnect, device number 16 [ 851.994879][T15070] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 852.016615][T15927] overlayfs: upper fs does not support file handles, falling back to index=off. [ 852.016786][T15927] overlayfs: overlapping lowerdir path [ 852.145158][T15070] usb 1-1: Using ep0 maxpacket: 32 [ 852.155433][T15070] usb 1-1: unable to get BOS descriptor or descriptor too short [ 852.155463][T15070] usb 1-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 852.156810][T15070] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 852.156825][T15070] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 852.156835][T15070] usb 1-1: config 14 has no interface number 0 [ 852.156844][T15070] usb 1-1: config 14 has no interface number 1 [ 852.156877][T15070] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 852.156905][T15070] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 852.156919][T15070] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 852.156932][T15070] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 852.156945][T15070] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 852.156958][T15070] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 852.156971][T15070] usb 1-1: config 14 interface 57 has no altsetting 0 [ 852.156980][T15070] usb 1-1: config 14 interface 228 has no altsetting 0 [ 852.160236][T15070] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.160252][T15070] usb 1-1: Product: syz [ 852.160260][T15070] usb 1-1: Manufacturer: syz [ 852.160267][T15070] usb 1-1: SerialNumber: syz [ 852.822922][T15070] legousbtower 1-1:14.57: interrupt endpoints not found [ 853.023037][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 853.023341][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 853.043451][T15070] legousbtower 1-1:14.228: get version request failed: -71 [ 853.043568][T15070] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 853.063593][T12130] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 853.081465][T15070] usb 1-1: USB disconnect, device number 17 [ 853.224772][ T5717] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 853.224904][T12130] usb 6-1: Using ep0 maxpacket: 8 [ 853.225815][T12130] usb 6-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 853.226828][T12130] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 853.226858][T12130] usb 6-1: config 179 has no interface number 0 [ 853.226881][T12130] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 853.226895][T12130] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 853.226909][T12130] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 853.226922][T12130] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 853.226935][T12130] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 853.226957][T12130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.229809][T15946] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 853.429123][ T5717] usb 3-1: New USB device found: idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 853.432467][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.432483][ T5717] usb 3-1: Product: syz [ 853.432491][ T5717] usb 3-1: Manufacturer: syz [ 853.432498][ T5717] usb 3-1: SerialNumber: syz [ 853.472363][ T5717] usb 3-1: config 0 descriptor?? [ 853.487983][ T5717] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 007 [ 853.507768][ T988] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input156 [ 853.700971][T15946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.701365][T15946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.777911][T15955] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 853.881087][ T5717] (null): failure reading functionality [ 853.884072][ T5717] i2c i2c-1: failure reading functionality [ 853.902865][ T5717] i2c i2c-1: connected i2c-tiny-usb device [ 853.930648][ T5717] usb 3-1: USB disconnect, device number 7 [ 853.974242][ T988] usb 6-1: USB disconnect, device number 24 [ 853.974283][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 853.974308][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 855.862761][ T33] audit: type=1800 audit(1790299274.701:693): pid=15961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3695" name="cpuset.effective_cpus" dev="sda1" ino=2056 res=0 errno=0 [ 856.235846][ T6701] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 856.263660][ T6701] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 856.313240][ T6701] usb 5-1: USB disconnect, device number 59 [ 857.149828][T16005] Need at least one configuration in g1. [ 857.151347][T16005] udc usbip-vudc.0: failed to start g1: -22 [ 857.151365][T16005] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 857.236304][T16005] UDC core: g1: couldn't find an available UDC or it's busy [ 857.627781][T16021] FAULT_INJECTION: forcing a failure. [ 857.627781][T16021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.627804][T16021] CPU: 0 UID: 0 PID: 16021 Comm: syz.0.3718 Tainted: G L syzkaller #0 PREEMPT(full) [ 857.627819][T16021] Tainted: [L]=SOFTLOCKUP [ 857.627823][T16021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 857.627831][T16021] Call Trace: [ 857.627835][T16021] [ 857.627841][T16021] dump_stack_lvl+0xe8/0x150 [ 857.627861][T16021] should_fail_ex+0x3eb/0x540 [ 857.627881][T16021] _copy_from_user+0x2d/0xb0 [ 857.627965][T16021] memdup_user+0x5e/0xd0 [ 857.627983][T16021] strndup_user+0x68/0xd0 [ 857.627993][T16021] __se_sys_fsopen+0x3d/0x2c0 [ 857.628010][T16021] do_syscall_64+0x166/0x520 [ 857.628026][T16021] ? trace_irq_disable+0x3b/0x140 [ 857.628040][T16021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.628051][T16021] ? clear_bhb_loop+0x70/0xc0 [ 857.628065][T16021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.628075][T16021] RIP: 0033:0x7f96e139e159 [ 857.628087][T16021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.628096][T16021] RSP: 002b:00007f96e219a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 857.628108][T16021] RAX: ffffffffffffffda RBX: 00007f96e1625fa0 RCX: 00007f96e139e159 [ 857.628116][T16021] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 857.628123][T16021] RBP: 00007f96e143506b R08: 0000000000000000 R09: 0000000000000000 [ 857.628130][T16021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.628137][T16021] R13: 00007f96e1626038 R14: 00007f96e1625fa0 R15: 00007fffae297758 [ 857.628154][T16021] [ 858.449959][T16049] FAULT_INJECTION: forcing a failure. [ 858.449959][T16049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.449982][T16049] CPU: 0 UID: 0 PID: 16049 Comm: syz.2.3729 Tainted: G L syzkaller #0 PREEMPT(full) [ 858.449997][T16049] Tainted: [L]=SOFTLOCKUP [ 858.450001][T16049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 858.450008][T16049] Call Trace: [ 858.450013][T16049] [ 858.450018][T16049] dump_stack_lvl+0xe8/0x150 [ 858.450037][T16049] should_fail_ex+0x3eb/0x540 [ 858.450057][T16049] _copy_from_user+0x2d/0xb0 [ 858.450070][T16049] memdup_user+0x5e/0xd0 [ 858.450086][T16049] strndup_user+0x68/0xd0 [ 858.450096][T16049] __se_sys_fsopen+0x3d/0x2c0 [ 858.450111][T16049] do_syscall_64+0x166/0x520 [ 858.450127][T16049] ? trace_irq_disable+0x3b/0x140 [ 858.450140][T16049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.450151][T16049] ? clear_bhb_loop+0x70/0xc0 [ 858.450164][T16049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.450174][T16049] RIP: 0033:0x7fe84659e159 [ 858.450186][T16049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.450195][T16049] RSP: 002b:00007fe847525028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 858.450207][T16049] RAX: ffffffffffffffda RBX: 00007fe846825fa0 RCX: 00007fe84659e159 [ 858.450216][T16049] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 858.450223][T16049] RBP: 00007fe84663506b R08: 0000000000000000 R09: 0000000000000000 [ 858.450229][T16049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.450235][T16049] R13: 00007fe846826038 R14: 00007fe846825fa0 R15: 00007ffd1cfbf7b8 [ 858.450251][T16049] [ 859.051422][T16065] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input157 [ 859.205734][T12130] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 859.250134][T16070] digital: digital_start_poll: Unknown protocol [ 859.366124][T12130] usb 1-1: Using ep0 maxpacket: 8 [ 859.366733][T12130] usb 1-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 859.369299][T12130] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 859.369314][T12130] usb 1-1: config 179 has no interface number 0 [ 859.369337][T12130] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 859.369351][T12130] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 859.369365][T12130] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 859.369378][T12130] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 859.369391][T12130] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 859.369414][T12130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.381527][T16061] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 859.559257][T16077] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3741'. [ 859.559297][T16077] block nbd0: not configured, cannot reconfigure [ 859.682040][ T5620] Bluetooth: hci1: link tx timeout [ 859.682216][ T5620] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 859.735839][T16082] openvswitch: netlink: Key type 254 is out of range max 32 [ 859.755036][T12130] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input158 [ 859.926803][T16061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.927141][T16061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.960023][T12130] usb 1-1: USB disconnect, device number 18 [ 859.960095][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 859.960121][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 860.515986][T16102] ubi0: attaching mtd0 [ 860.677048][T16110] syzkaller0: entered promiscuous mode [ 860.677064][T16110] syzkaller0: entered allmulticast mode [ 860.821781][ T8013] wacom 0003:056A:003F.0056: item fetching failed at offset 14/15 [ 860.822114][ T8013] wacom 0003:056A:003F.0056: parse failed [ 860.823570][ T8013] wacom 0003:056A:003F.0056: probe with driver wacom failed with error -22 [ 860.854742][T12130] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 861.005031][T12130] usb 3-1: Using ep0 maxpacket: 32 [ 861.007226][T12130] usb 3-1: unable to get BOS descriptor or descriptor too short [ 861.007256][T12130] usb 3-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 861.008063][T12130] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 861.008078][T12130] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 861.008088][T12130] usb 3-1: config 14 has no interface number 0 [ 861.008097][T12130] usb 3-1: config 14 has no interface number 1 [ 861.008130][T12130] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 861.008143][T12130] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 861.008157][T12130] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 861.008170][T12130] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 861.008184][T12130] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 861.008197][T12130] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 861.008210][T12130] usb 3-1: config 14 interface 57 has no altsetting 0 [ 861.008219][T12130] usb 3-1: config 14 interface 228 has no altsetting 0 [ 861.009830][T12130] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.009845][T12130] usb 3-1: Product: syz [ 861.009853][T12130] usb 3-1: Manufacturer: syz [ 861.009870][T12130] usb 3-1: SerialNumber: syz [ 861.442690][T16128] MTD: Couldn't look up './dev/mtdblock0': -2 [ 861.475171][T12130] legousbtower 3-1:14.57: interrupt endpoints not found [ 861.675525][ T5717] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 861.682242][T12130] legousbtower 3-1:14.228: get version request failed: -71 [ 861.682341][T12130] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 861.720069][T12130] usb 3-1: USB disconnect, device number 8 [ 861.749012][T16081] Bluetooth: hci1: command 0x0406 tx timeout [ 861.826070][ T5717] usb 5-1: Using ep0 maxpacket: 8 [ 861.830201][ T5717] usb 5-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 861.856046][ T5717] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 861.856065][ T5717] usb 5-1: config 179 has no interface number 0 [ 861.856088][ T5717] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 861.856102][ T5717] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 861.856116][ T5717] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 861.856130][ T5717] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 861.856143][ T5717] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 861.856166][ T5717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.946762][T16130] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 862.171923][ T5717] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input159 [ 862.367030][T16130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.367375][T16130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.371357][T12130] usb 5-1: USB disconnect, device number 60 [ 862.371459][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 862.371486][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 862.437142][ T5717] wacom 0003:056A:003F.0057: item fetching failed at offset 14/15 [ 862.437469][ T5717] wacom 0003:056A:003F.0057: parse failed [ 862.437505][ T5717] wacom 0003:056A:003F.0057: probe with driver wacom failed with error -22 [ 862.632100][T16160] MTD: Couldn't look up './dev/mtdblock0': -2 [ 863.084117][ T5717] wacom 0003:056A:003F.0058: unbalanced collection at end of report description [ 863.084473][ T5717] wacom 0003:056A:003F.0058: parse failed [ 863.084510][ T5717] wacom 0003:056A:003F.0058: probe with driver wacom failed with error -22 [ 863.314265][T16191] MTD: Couldn't look up './dev/mtdblock0': -2 [ 863.705767][ T5717] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 863.855565][ T5717] usb 1-1: Using ep0 maxpacket: 8 [ 863.856094][ T5717] usb 1-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 863.856874][ T5717] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 863.856888][ T5717] usb 1-1: config 179 has no interface number 0 [ 863.856914][ T5717] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 863.856928][ T5717] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 863.856942][ T5717] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 863.856955][ T5717] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 863.856969][ T5717] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 863.856991][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.859142][T16197] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 864.078509][ T5717] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input160 [ 864.187122][T16221] MTD: Couldn't look up './dev/mtdblock0': -2 [ 864.278562][T16197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.278891][T16197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.323412][T12130] usb 1-1: USB disconnect, device number 19 [ 864.323500][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 864.323531][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 864.375960][ T5717] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 864.525236][ T5717] usb 5-1: New USB device found: idVendor=17ef, idProduct=6161, bcdDevice=0.00 [ 864.528010][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.528026][ T5717] usb 5-1: Product: syz [ 864.528407][ T5717] usb 5-1: Manufacturer: syz [ 864.528417][ T5717] usb 5-1: SerialNumber: syz [ 864.584486][T16231] Need at least one configuration in g1. [ 864.584570][T16231] udc usbip-vudc.0: failed to start g1: -22 [ 864.584583][T16231] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 864.614566][T16231] UDC core: g1: couldn't find an available UDC or it's busy [ 864.792085][ T5717] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 864.819045][ T5717] usb 5-1: USB disconnect, device number 61 [ 865.102983][T16249] syzkaller1: entered promiscuous mode [ 865.102999][T16249] syzkaller1: entered allmulticast mode [ 865.127786][T16251] openvswitch: netlink: EtherType 548 is less than min 600 [ 865.284848][ T5717] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 865.286600][ T988] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 865.426629][ T988] usb 1-1: device descriptor read/64, error -71 [ 865.442389][ T5717] usb 5-1: New USB device found: idVendor=17ef, idProduct=6161, bcdDevice=0.00 [ 865.442822][T16262] syzkaller0: entered promiscuous mode [ 865.442834][T16262] syzkaller0: entered allmulticast mode [ 865.472374][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.472390][ T5717] usb 5-1: Product: syz [ 865.472398][ T5717] usb 5-1: Manufacturer: syz [ 865.472405][ T5717] usb 5-1: SerialNumber: syz [ 865.665233][ T988] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 865.796763][ T988] usb 1-1: device descriptor read/64, error -71 [ 865.905362][ T988] usb usb1-port1: attempt power cycle [ 866.107972][ T5717] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 866.128600][ T5717] usb 5-1: USB disconnect, device number 62 [ 866.244757][ T988] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 866.266184][ T988] usb 1-1: device descriptor read/8, error -71 [ 866.504730][ T988] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 866.526365][ T988] usb 1-1: device descriptor read/8, error -71 [ 866.637018][ T988] usb usb1-port1: unable to enumerate USB device [ 866.759412][ T988] wacom 0003:056A:003F.0059: unbalanced collection at end of report description [ 866.759760][ T988] wacom 0003:056A:003F.0059: parse failed [ 866.759798][ T988] wacom 0003:056A:003F.0059: probe with driver wacom failed with error -22 [ 868.825741][T16276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 869.342574][ T988] wacom 0003:056A:003F.005A: unbalanced collection at end of report description [ 869.342908][ T988] wacom 0003:056A:003F.005A: parse failed [ 869.342943][ T988] wacom 0003:056A:003F.005A: probe with driver wacom failed with error -22 [ 869.393199][T16328] overlayfs: failed to resolve './file1/file0': -2 [ 870.148145][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.148180][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.381280][T16351] overlayfs: failed to resolve './file1/file0': -2 [ 870.412919][T16353] syzkaller0: entered promiscuous mode [ 870.412935][T16353] syzkaller0: entered allmulticast mode [ 870.805234][T12130] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 870.906854][ T33] audit: type=1804 audit(1790299289.751:694): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3856" name="/newroot/145/cgroup.controllers" dev="tmpfs" ino=810 res=1 errno=0 [ 870.908521][ T33] audit: type=1800 audit(1790299289.751:695): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3856" name="cgroup.controllers" dev="tmpfs" ino=810 res=0 errno=0 [ 870.979214][T12130] usb 1-1: New USB device found: idVendor=17ef, idProduct=6161, bcdDevice=0.00 [ 870.996980][T12130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.996997][T12130] usb 1-1: Product: syz [ 870.997005][T12130] usb 1-1: Manufacturer: syz [ 870.997013][T12130] usb 1-1: SerialNumber: syz [ 871.219772][T12130] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 871.240867][T12130] usb 1-1: USB disconnect, device number 24 [ 871.724817][T12130] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 871.875220][T12130] usb 1-1: New USB device found: idVendor=17ef, idProduct=6161, bcdDevice=0.00 [ 871.878266][T12130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.878283][T12130] usb 1-1: Product: syz [ 871.878291][T12130] usb 1-1: Manufacturer: syz [ 871.878299][T12130] usb 1-1: SerialNumber: syz [ 872.192065][T16317] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 872.522693][T12130] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 872.553825][T12130] usb 1-1: USB disconnect, device number 25 [ 872.571020][T16389] Need at least one configuration in g1. [ 872.571089][T16389] udc usbip-vudc.0: failed to start g1: -22 [ 872.571102][T16389] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 872.571476][T16389] UDC core: g1: couldn't find an available UDC or it's busy [ 873.232925][ T988] wacom 0003:056A:003F.005B: unbalanced collection at end of report description [ 873.234053][ T988] wacom 0003:056A:003F.005B: parse failed [ 873.234095][ T988] wacom 0003:056A:003F.005B: probe with driver wacom failed with error -22 [ 873.401307][T16416] Need at least one configuration in g1. [ 873.401377][T16416] udc usbip-vudc.0: failed to start g1: -22 [ 873.401389][T16416] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 873.401786][T16416] UDC core: g1: couldn't find an available UDC or it's busy [ 873.628594][T16424] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 873.990075][T16435] FAULT_INJECTION: forcing a failure. [ 873.990075][T16435] name failslab, interval 1, probability 0, space 0, times 0 [ 873.990097][T16435] CPU: 0 UID: 0 PID: 16435 Comm: syz.2.3884 Tainted: G L syzkaller #0 PREEMPT(full) [ 873.990112][T16435] Tainted: [L]=SOFTLOCKUP [ 873.990116][T16435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 873.990123][T16435] Call Trace: [ 873.990129][T16435] [ 873.990135][T16435] dump_stack_lvl+0xe8/0x150 [ 873.990154][T16435] should_fail_ex+0x3eb/0x540 [ 873.990173][T16435] ? __pfx_sock_alloc_inode+0x10/0x10 [ 873.990188][T16435] should_failslab+0xa8/0x100 [ 873.990203][T16435] ? __pfx_sock_alloc_inode+0x10/0x10 [ 873.990214][T16435] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 873.990231][T16435] ? sock_alloc_inode+0x2c/0x1a0 [ 873.990242][T16435] ? sock_alloc_inode+0x2c/0x1a0 [ 873.990254][T16435] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 873.990272][T16435] ? __pfx_sock_alloc_inode+0x10/0x10 [ 873.990283][T16435] sock_alloc_inode+0x2c/0x1a0 [ 873.990295][T16435] ? __pfx_sock_alloc_inode+0x10/0x10 [ 873.990305][T16435] alloc_inode+0x6a/0x1b0 [ 873.990321][T16435] __sock_create+0x127/0xac0 [ 873.990338][T16435] __sys_socket+0xd6/0x1b0 [ 873.990352][T16435] __x64_sys_socket+0x7a/0x90 [ 873.990365][T16435] do_syscall_64+0x166/0x520 [ 873.990380][T16435] ? trace_irq_disable+0x3b/0x140 [ 873.990392][T16435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.990403][T16435] ? clear_bhb_loop+0x70/0xc0 [ 873.990416][T16435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.990426][T16435] RIP: 0033:0x7fe84659e159 [ 873.990438][T16435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.990447][T16435] RSP: 002b:00007fe847525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 873.990460][T16435] RAX: ffffffffffffffda RBX: 00007fe846825fa0 RCX: 00007fe84659e159 [ 873.990468][T16435] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 873.990474][T16435] RBP: 00007fe84663506b R08: 0000000000000000 R09: 0000000000000000 [ 873.990481][T16435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 873.990488][T16435] R13: 00007fe846826038 R14: 00007fe846825fa0 R15: 00007ffd1cfbf7b8 [ 873.990504][T16435] [ 873.990509][T16435] socket: no more sockets [ 874.236277][ T8013] wacom 0003:056A:003F.005C: unbalanced collection at end of report description [ 874.236618][ T8013] wacom 0003:056A:003F.005C: parse failed [ 874.236654][ T8013] wacom 0003:056A:003F.005C: probe with driver wacom failed with error -22 [ 874.372264][T16445] overlayfs: failed to resolve './file1/file0': -2 [ 874.372649][T16438] Need at least one configuration in g1. [ 874.372714][T16438] udc usbip-vudc.0: failed to start g1: -22 [ 874.372726][T16438] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 874.438069][T16438] UDC core: g1: couldn't find an available UDC or it's busy [ 874.816185][T16463] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 874.903899][T16467] FAULT_INJECTION: forcing a failure. [ 874.903899][T16467] name failslab, interval 1, probability 0, space 0, times 0 [ 874.903921][T16467] CPU: 0 UID: 0 PID: 16467 Comm: syz.2.3896 Tainted: G L syzkaller #0 PREEMPT(full) [ 874.903937][T16467] Tainted: [L]=SOFTLOCKUP [ 874.903941][T16467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 874.903948][T16467] Call Trace: [ 874.903953][T16467] [ 874.903958][T16467] dump_stack_lvl+0xe8/0x150 [ 874.903978][T16467] should_fail_ex+0x3eb/0x540 [ 874.904000][T16467] ? __pfx_sock_alloc_inode+0x10/0x10 [ 874.904013][T16467] should_failslab+0xa8/0x100 [ 874.904028][T16467] ? __pfx_sock_alloc_inode+0x10/0x10 [ 874.904039][T16467] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 874.904057][T16467] ? sock_alloc_inode+0x2c/0x1a0 [ 874.904068][T16467] ? sock_alloc_inode+0x2c/0x1a0 [ 874.904079][T16467] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 874.904097][T16467] ? __pfx_sock_alloc_inode+0x10/0x10 [ 874.904108][T16467] sock_alloc_inode+0x2c/0x1a0 [ 874.904120][T16467] ? __pfx_sock_alloc_inode+0x10/0x10 [ 874.904130][T16467] alloc_inode+0x6a/0x1b0 [ 874.904146][T16467] __sock_create+0x127/0xac0 [ 874.904162][T16467] __sys_socket+0xd6/0x1b0 [ 874.904176][T16467] __x64_sys_socket+0x7a/0x90 [ 874.904188][T16467] do_syscall_64+0x166/0x520 [ 874.904203][T16467] ? trace_irq_disable+0x3b/0x140 [ 874.904215][T16467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.904226][T16467] ? clear_bhb_loop+0x70/0xc0 [ 874.904239][T16467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.904249][T16467] RIP: 0033:0x7fe84659e159 [ 874.904260][T16467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.904270][T16467] RSP: 002b:00007fe847525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 874.904282][T16467] RAX: ffffffffffffffda RBX: 00007fe846825fa0 RCX: 00007fe84659e159 [ 874.904290][T16467] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 874.904297][T16467] RBP: 00007fe84663506b R08: 0000000000000000 R09: 0000000000000000 [ 874.904304][T16467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 874.904310][T16467] R13: 00007fe846826038 R14: 00007fe846825fa0 R15: 00007ffd1cfbf7b8 [ 874.904326][T16467] [ 875.094430][T16467] socket: no more sockets [ 875.238291][T16470] overlayfs: failed to resolve './file1/file0': -2 [ 875.312431][ T8013] wacom 0003:056A:003F.005D: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 875.312668][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3899'. [ 875.496924][T16476] fido_id[16476]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 875.976154][ T8013] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 876.125132][ T8013] usb 3-1: Using ep0 maxpacket: 8 [ 876.128120][ T8013] usb 3-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 876.146610][ T8013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.146628][ T8013] usb 3-1: Product: syz [ 876.146636][ T8013] usb 3-1: Manufacturer: syz [ 876.146644][ T8013] usb 3-1: SerialNumber: syz [ 876.152433][ T8013] usb 3-1: config 0 descriptor?? [ 876.308354][T16505] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 876.411172][ T8013] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 876.735531][T12130] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 876.779394][ T988] wacom 0003:056A:003F.005E: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 876.885649][T12130] usb 6-1: New USB device found: idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 876.889312][T12130] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.889347][T12130] usb 6-1: Product: syz [ 876.889356][T12130] usb 6-1: Manufacturer: syz [ 876.889364][T12130] usb 6-1: SerialNumber: syz [ 876.893929][T12130] usb 6-1: config 0 descriptor?? [ 876.940131][T12130] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 025 [ 876.941499][T16515] fido_id[16515]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 877.294945][ T988] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 877.459835][ T988] usb 1-1: New USB device found: idVendor=17ef, idProduct=6161, bcdDevice=0.00 [ 877.472767][ T988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.472784][ T988] usb 1-1: Product: syz [ 877.472792][ T988] usb 1-1: Manufacturer: syz [ 877.472800][ T988] usb 1-1: SerialNumber: syz [ 877.514572][T12130] i2c i2c-1: failure reading functionality [ 877.529151][T12130] i2c i2c-1: connected i2c-tiny-usb device [ 877.542889][T12130] usb 6-1: USB disconnect, device number 25 [ 877.640665][ T8013] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 877.657427][ T8013] usb 3-1: USB disconnect, device number 9 [ 877.710808][ T988] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 877.733537][ T988] usb 1-1: USB disconnect, device number 26 [ 878.096166][T16532] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 878.240646][ T988] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 878.263032][ T8013] wacom 0003:056A:003F.005F: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 878.386141][ T988] usb 1-1: New USB device found: idVendor=17ef, idProduct=6161, bcdDevice=0.00 [ 878.390617][ T988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.390634][ T988] usb 1-1: Product: syz [ 878.390642][ T988] usb 1-1: Manufacturer: syz [ 878.390650][ T988] usb 1-1: SerialNumber: syz [ 878.448379][T16542] fido_id[16542]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 878.792205][T16557] FAULT_INJECTION: forcing a failure. [ 878.792205][T16557] name failslab, interval 1, probability 0, space 0, times 0 [ 878.792227][T16557] CPU: 0 UID: 0 PID: 16557 Comm: syz.2.3930 Tainted: G L syzkaller #0 PREEMPT(full) [ 878.792243][T16557] Tainted: [L]=SOFTLOCKUP [ 878.792247][T16557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 878.792255][T16557] Call Trace: [ 878.792260][T16557] [ 878.792265][T16557] dump_stack_lvl+0xe8/0x150 [ 878.792287][T16557] should_fail_ex+0x3eb/0x540 [ 878.792306][T16557] ? __pfx_sock_alloc_inode+0x10/0x10 [ 878.792319][T16557] should_failslab+0xa8/0x100 [ 878.792334][T16557] ? __pfx_sock_alloc_inode+0x10/0x10 [ 878.792345][T16557] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 878.792363][T16557] ? sock_alloc_inode+0x2c/0x1a0 [ 878.792373][T16557] ? sock_alloc_inode+0x2c/0x1a0 [ 878.792384][T16557] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 878.792402][T16557] ? __pfx_sock_alloc_inode+0x10/0x10 [ 878.792412][T16557] sock_alloc_inode+0x2c/0x1a0 [ 878.792424][T16557] ? __pfx_sock_alloc_inode+0x10/0x10 [ 878.792434][T16557] alloc_inode+0x6a/0x1b0 [ 878.792450][T16557] __sock_create+0x127/0xac0 [ 878.792466][T16557] __sys_socket+0xd6/0x1b0 [ 878.792480][T16557] __x64_sys_socket+0x7a/0x90 [ 878.792493][T16557] do_syscall_64+0x166/0x520 [ 878.792507][T16557] ? trace_irq_disable+0x3b/0x140 [ 878.792520][T16557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.792531][T16557] ? clear_bhb_loop+0x70/0xc0 [ 878.792543][T16557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.792554][T16557] RIP: 0033:0x7fe84659e159 [ 878.792565][T16557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.792574][T16557] RSP: 002b:00007fe847525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 878.792587][T16557] RAX: ffffffffffffffda RBX: 00007fe846825fa0 RCX: 00007fe84659e159 [ 878.792595][T16557] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 878.792601][T16557] RBP: 00007fe84663506b R08: 0000000000000000 R09: 0000000000000000 [ 878.792608][T16557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 878.792614][T16557] R13: 00007fe846826038 R14: 00007fe846825fa0 R15: 00007ffd1cfbf7b8 [ 878.792630][T16557] [ 878.792650][T16557] socket: no more sockets [ 879.221597][T16563] jffs2: notice: (16563) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 879.270332][ T988] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 879.295066][ T988] usb 1-1: USB disconnect, device number 27 [ 879.590894][T16579] FAULT_INJECTION: forcing a failure. [ 879.590894][T16579] name failslab, interval 1, probability 0, space 0, times 0 [ 879.590918][T16579] CPU: 0 UID: 0 PID: 16579 Comm: syz.2.3940 Tainted: G L syzkaller #0 PREEMPT(full) [ 879.590933][T16579] Tainted: [L]=SOFTLOCKUP [ 879.590937][T16579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 879.590945][T16579] Call Trace: [ 879.590950][T16579] [ 879.590956][T16579] dump_stack_lvl+0xe8/0x150 [ 879.590976][T16579] should_fail_ex+0x3eb/0x540 [ 879.590995][T16579] ? __pfx_sock_alloc_inode+0x10/0x10 [ 879.591008][T16579] should_failslab+0xa8/0x100 [ 879.591022][T16579] ? __pfx_sock_alloc_inode+0x10/0x10 [ 879.591033][T16579] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 879.591051][T16579] ? sock_alloc_inode+0x2c/0x1a0 [ 879.591112][T16579] ? sock_alloc_inode+0x2c/0x1a0 [ 879.591124][T16579] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 879.591144][T16579] ? __pfx_sock_alloc_inode+0x10/0x10 [ 879.591155][T16579] sock_alloc_inode+0x2c/0x1a0 [ 879.591166][T16579] ? __pfx_sock_alloc_inode+0x10/0x10 [ 879.591177][T16579] alloc_inode+0x6a/0x1b0 [ 879.591192][T16579] __sock_create+0x127/0xac0 [ 879.591209][T16579] __sys_socket+0xd6/0x1b0 [ 879.591223][T16579] __x64_sys_socket+0x7a/0x90 [ 879.591236][T16579] do_syscall_64+0x166/0x520 [ 879.591251][T16579] ? trace_irq_disable+0x3b/0x140 [ 879.591263][T16579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.591274][T16579] ? clear_bhb_loop+0x70/0xc0 [ 879.591289][T16579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.591300][T16579] RIP: 0033:0x7fe84659e159 [ 879.591312][T16579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.591321][T16579] RSP: 002b:00007fe847525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 879.591333][T16579] RAX: ffffffffffffffda RBX: 00007fe846825fa0 RCX: 00007fe84659e159 [ 879.591341][T16579] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 879.591348][T16579] RBP: 00007fe84663506b R08: 0000000000000000 R09: 0000000000000000 [ 879.591354][T16579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.591361][T16579] R13: 00007fe846826038 R14: 00007fe846825fa0 R15: 00007ffd1cfbf7b8 [ 879.591376][T16579] [ 879.591401][T16579] socket: no more sockets [ 880.496177][T16605] FAULT_INJECTION: forcing a failure. [ 880.496177][T16605] name failslab, interval 1, probability 0, space 0, times 0 [ 880.496200][T16605] CPU: 0 UID: 0 PID: 16605 Comm: syz.0.3951 Tainted: G L syzkaller #0 PREEMPT(full) [ 880.496216][T16605] Tainted: [L]=SOFTLOCKUP [ 880.496221][T16605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 880.496228][T16605] Call Trace: [ 880.496234][T16605] [ 880.496239][T16605] dump_stack_lvl+0xe8/0x150 [ 880.496260][T16605] should_fail_ex+0x3eb/0x540 [ 880.496278][T16605] ? __pfx_sock_alloc_inode+0x10/0x10 [ 880.496291][T16605] should_failslab+0xa8/0x100 [ 880.496306][T16605] ? __pfx_sock_alloc_inode+0x10/0x10 [ 880.496317][T16605] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 880.496335][T16605] ? sock_alloc_inode+0x2c/0x1a0 [ 880.496345][T16605] ? sock_alloc_inode+0x2c/0x1a0 [ 880.496357][T16605] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 880.496398][T16605] ? __pfx_sock_alloc_inode+0x10/0x10 [ 880.496409][T16605] sock_alloc_inode+0x2c/0x1a0 [ 880.496423][T16605] ? __pfx_sock_alloc_inode+0x10/0x10 [ 880.496435][T16605] alloc_inode+0x6a/0x1b0 [ 880.496451][T16605] __sock_create+0x127/0xac0 [ 880.496468][T16605] __sys_socket+0xd6/0x1b0 [ 880.496482][T16605] __x64_sys_socket+0x7a/0x90 [ 880.496495][T16605] do_syscall_64+0x166/0x520 [ 880.496525][T16605] ? trace_irq_disable+0x3b/0x140 [ 880.496538][T16605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.496550][T16605] ? clear_bhb_loop+0x70/0xc0 [ 880.496565][T16605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.496575][T16605] RIP: 0033:0x7f96e139e159 [ 880.496587][T16605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.496596][T16605] RSP: 002b:00007f96e219a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 880.496609][T16605] RAX: ffffffffffffffda RBX: 00007f96e1625fa0 RCX: 00007f96e139e159 [ 880.496617][T16605] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 880.496649][T16605] RBP: 00007f96e143506b R08: 0000000000000000 R09: 0000000000000000 [ 880.496657][T16605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 880.496663][T16605] R13: 00007f96e1626038 R14: 00007f96e1625fa0 R15: 00007fffae297758 [ 880.496680][T16605] [ 880.496694][T16605] socket: no more sockets [ 880.894982][ T8013] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 880.917312][T16610] jffs2: notice: (16610) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 881.189128][ T8013] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 881.191399][ T8013] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 881.191415][ T8013] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 881.191425][ T8013] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 881.191448][ T8013] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 881.193711][ T8013] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 881.193727][ T8013] usb 6-1: Product: syz [ 881.193735][ T8013] usb 6-1: Manufacturer: syz [ 881.271752][ T8013] cdc_wdm 6-1:1.0: skipping garbage [ 881.271770][ T8013] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 881.941010][T16638] jffs2: notice: (16638) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 882.454729][ T8013] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 882.605354][ T8013] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 882.607300][ T8013] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.612536][ T8013] usb 5-1: config 0 descriptor?? [ 882.837937][ T8013] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 883.073902][ T8013] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 883.073919][ T8013] [drm] Initialized udl on minor 1 [ 883.240593][ T8013] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 883.278421][ T8013] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 883.313970][ T8013] usb 5-1: USB disconnect, device number 63 [ 883.461913][T12130] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 883.530903][T12130] usb 6-1: USB disconnect, device number 26 [ 883.927975][T12130] wiimote 0005:057E:0306.0060: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 883.928167][T12130] wiimote 0005:057E:0306.0060: New device registered [ 884.164963][T12130] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 884.318019][T12130] usb 5-1: Using ep0 maxpacket: 16 [ 884.318932][T12130] usb 5-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 884.318958][T12130] usb 5-1: no configurations [ 884.318965][T12130] usb 5-1: can't read configurations, error -22 [ 884.444852][T12130] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 884.525388][ T988] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 884.596948][T12130] usb 5-1: Using ep0 maxpacket: 16 [ 884.597598][T12130] usb 5-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 884.597623][T12130] usb 5-1: no configurations [ 884.597630][T12130] usb 5-1: can't read configurations, error -22 [ 884.598320][T12130] usb usb5-port1: attempt power cycle [ 884.676114][ T988] usb 3-1: New USB device found: idVendor=17ef, idProduct=6161, bcdDevice=0.00 [ 884.682145][ T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.682162][ T988] usb 3-1: Product: syz [ 884.682170][ T988] usb 3-1: Manufacturer: syz [ 884.682178][ T988] usb 3-1: SerialNumber: syz [ 884.935023][T12130] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 884.943625][ T988] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 884.945925][ T8013] wiimote 0005:057E:0306.0060: detected device: Nintendo Wii Remote (Gen 1) [ 884.956445][T12130] usb 5-1: Using ep0 maxpacket: 16 [ 884.986095][T12130] usb 5-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 884.986122][T12130] usb 5-1: no configurations [ 884.986129][T12130] usb 5-1: can't read configurations, error -22 [ 885.024397][ T988] usb 3-1: USB disconnect, device number 10 [ 885.102194][ T8013] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0060/input/input171 [ 885.118237][T12130] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 885.133090][ T8013] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0060/input/input172 [ 885.148651][T12130] usb 5-1: Using ep0 maxpacket: 16 [ 885.149788][T12130] usb 5-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 885.149814][T12130] usb 5-1: no configurations [ 885.149820][T12130] usb 5-1: can't read configurations, error -22 [ 885.150104][T12130] usb usb5-port1: unable to enumerate USB device [ 885.207583][ T8013] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0060/input/input170 [ 885.748017][T16711] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 885.799220][T12130] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 885.945216][T12130] usb 6-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 885.946028][T12130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.950129][T12130] usb 6-1: config 0 descriptor?? [ 886.176183][T12130] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 886.245766][ T6701] wacom 0003:056A:003F.0061: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 886.389383][T12130] [drm:udl_init] *ERROR* Selecting channel failed [ 886.436672][T12130] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 886.436689][T12130] [drm] Initialized udl on minor 1 [ 886.458672][T12130] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 886.458925][T12130] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 886.505668][T12130] usb 6-1: USB disconnect, device number 27 [ 886.538165][ T6701] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 886.538452][ T6701] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 886.666473][T16737] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 886.930117][T16680] wiimote 0005:057E:0306.0060: Device removed [ 887.025379][T12130] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 887.123475][ T6701] wacom 0003:056A:003F.0062: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 887.154848][T12130] usb 3-1: device descriptor read/64, error -71 [ 887.239220][T16761] fido_id[16761]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 887.395780][T12130] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 887.525707][T12130] usb 3-1: device descriptor read/64, error -71 [ 887.637656][T12130] usb usb3-port1: attempt power cycle [ 888.264710][T12130] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 888.393536][T12130] usb 3-1: device descriptor read/8, error -71 [ 888.836264][T12130] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 888.855214][T12130] usb 3-1: device descriptor read/8, error -71 [ 888.965373][T12130] usb usb3-port1: unable to enumerate USB device [ 888.965884][ T5717] wacom 0003:056A:003F.0063: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 889.825991][ T5717] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 889.975228][ T5717] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 889.976747][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.983011][ T5717] usb 1-1: config 0 descriptor?? [ 890.195732][ T5717] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 890.398581][ T5717] [drm:udl_init] *ERROR* Selecting channel failed [ 890.451439][ T5717] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 890.451456][ T5717] [drm] Initialized udl on minor 1 [ 890.453576][ T5717] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 890.453847][ T5717] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 890.490419][ T5717] usb 1-1: USB disconnect, device number 28 [ 890.499113][ T988] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 891.265113][ T34] INFO: task syz.1.3316:14893 blocked for more than 144 seconds. [ 891.265134][ T34] Tainted: G L syzkaller #0 [ 891.265140][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 891.265146][ T34] task:syz.1.3316 state:D stack:27432 pid:14893 tgid:14891 ppid:11516 task_flags:0x400140 flags:0x00080002 [ 891.265179][ T34] Call Trace: [ 891.265184][ T34] [ 891.265193][ T34] __schedule+0x1b47/0x5c60 [ 891.265235][ T34] ? __pfx___schedule+0x10/0x10 [ 891.265254][ T34] ? schedule+0x90/0x2b0 [ 891.265269][ T34] schedule+0x164/0x2b0 [ 891.265284][ T34] schedule_preempt_disabled+0x13/0x30 [ 891.265299][ T34] __mutex_lock+0x7c4/0x15a0 [ 891.265316][ T34] ? __mutex_lock+0x5cd/0x15a0 [ 891.265334][ T34] ? write_ports+0xb5/0xd10 [ 891.265437][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 891.265486][ T34] write_ports+0xb5/0xd10 [ 891.265504][ T34] ? __pfx_write_ports+0x10/0x10 [ 891.265526][ T34] ? __might_fault+0xaf/0x130 [ 891.265542][ T34] ? _copy_from_user+0x94/0xb0 [ 891.265556][ T34] ? simple_transaction_get+0x12d/0x160 [ 891.265602][ T34] nfsctl_transaction_write+0x10f/0x160 [ 891.265618][ T34] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 891.265637][ T34] vfs_write+0x296/0xba0 [ 891.265653][ T34] ? __pfx_vfs_write+0x10/0x10 [ 891.265665][ T34] ? __fget_files+0x2a/0x420 [ 891.265675][ T34] ? __fget_files+0x3a2/0x420 [ 891.265684][ T34] ? __fget_files+0x2a/0x420 [ 891.265697][ T34] ? fdget+0x1ac/0x250 [ 891.265712][ T34] ksys_write+0x150/0x270 [ 891.265724][ T34] ? __pfx_ksys_write+0x10/0x10 [ 891.265741][ T34] do_syscall_64+0x166/0x520 [ 891.265756][ T34] ? trace_irq_disable+0x3b/0x140 [ 891.265768][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.265779][ T34] ? clear_bhb_loop+0x70/0xc0 [ 891.265793][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.265804][ T34] RIP: 0033:0x7f76c2d9e159 [ 891.265820][ T34] RSP: 002b:00007f76c3d4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 891.265832][ T34] RAX: ffffffffffffffda RBX: 00007f76c3025fa0 RCX: 00007f76c2d9e159 [ 891.265840][ T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 891.265846][ T34] RBP: 00007f76c2e3506b R08: 0000000000000000 R09: 0000000000000000 [ 891.265853][ T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 891.265860][ T34] R13: 00007f76c3026038 R14: 00007f76c3025fa0 R15: 00007ffe0d64de18 [ 891.265876][ T34] [ 891.265892][ T34] [ 891.265892][ T34] Showing all locks held in the system: [ 891.265899][ T34] locks held by kworker/u8:1/13: 3, last CPU#0: [ 891.265965][ T34] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 891.266030][ T34] #1: ffffc90000127c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 891.266059][ T34] #2: ffff88802b81d258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 891.266144][ T34] locks held by khungtaskd/34: 1, last CPU#0: [ 891.266152][ T34] #0: ffffffff8f15c2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 891.266186][ T34] locks held by kworker/0:1H/2000: 2, last CPU#0: [ 891.266193][ T34] #0: ffff88813fe0a948 ((wq_completion)events_highpri){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 891.266234][ T34] #1: ffffc90006957c40 ((work_completion)(&vmidi->output_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 891.266275][ T34] locks held by getty/5365: 2, on CPU#0: [ 891.266282][ T34] #0: ffff8880363760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 891.266353][ T34] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 891.266379][ T34] locks held by udevd/5612: 4, on CPU#0: [ 891.266387][ T34] #0: ffff88806985af38 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 891.353496][ T34] #1: ffff888059422880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 891.353546][ T34] #2: ffff888034395968 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 891.353576][ T34] #3: ffff888041780390 (&wdata->state.sync){+.+.}-{4:4}, at: wiimod_battery_get_property+0x5e/0x240 [ 891.408635][ T34] locks held by udevd/6054: 3, on CPU#0: [ 891.408650][ T34] #0: ffff88802c3bd110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_open+0x2da/0x5d0 [ 891.408780][ T34] #1: ffff88802bdb62b8 (&dev->mutex#2){+.+.}-{4:4}, at: input_open_device+0x4f/0x560 [ 891.408842][ T34] #2: ffff888041780390 (&wdata->state.sync){+.+.}-{4:4}, at: wiimod_ir_change+0x150/0x850 [ 891.408874][ T34] locks held by kworker/0:6/8013: 3, on CPU#0: [ 891.408881][ T34] #0: ffff88813fe0ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 891.408910][ T34] #1: ffffc90005097c40 ((work_completion)(&wdata->init_worker)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 891.408937][ T34] #2: ffff888041780390 (&wdata->state.sync){+.+.}-{4:4}, at: wiimote_init_worker+0xf0a/0x2f00 [ 891.408968][ T34] locks held by syz.3.2494/12553: 2, on CPU#0: [ 891.408975][ T34] #0: ffff88802a40e0e8 (&type->s_umount_key#89){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 891.409007][ T34] #1: ffffffff8f49efe0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 891.409037][ T34] locks held by syz.1.3316/14893: 3, on CPU#0: [ 891.409044][ T34] #0: ffff88807fa787f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 891.409095][ T34] #1: ffff888078af8460 (sb_writers#21){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 891.409122][ T34] #2: ffffffff8f49efe0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 891.409151][ T34] locks held by syz.4.3981/16680: 1, on CPU#0: [ 891.409158][ T34] #0: ffff888032fd9a58 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 891.409241][ T34] locks held by syz.5.4027/16804: 1, last CPU#0: [ 891.409249][ T34] #0: ffff888036800e70 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e3/0xd70 [ 891.409337][ T34] locks held by syz-executor/16824: 2, last CPU#0: [ 891.409345][ T34] #0: ffff88807ebb2460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 891.409372][ T34] #1: ffff88807ce414d0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 891.689687][ T34] [ 891.689765][ T34] ============================================= [ 891.689765][ T34] [ 891.689771][ T34] NMI backtrace for cpu 0 [ 891.689783][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 891.689798][ T34] Tainted: [L]=SOFTLOCKUP [ 891.689802][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 891.689809][ T34] Call Trace: [ 891.689814][ T34] [ 891.689820][ T34] dump_stack_lvl+0xe8/0x150 [ 891.689840][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 891.689855][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 891.689872][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 891.689886][ T34] sys_info+0x135/0x170 [ 891.689897][ T34] watchdog+0x1058/0x10d0 [ 891.689913][ T34] ? watchdog+0x209/0x10d0 [ 891.689927][ T34] kthread+0x38b/0x480 [ 891.689939][ T34] ? __pfx_watchdog+0x10/0x10 [ 891.689949][ T34] ? __pfx_kthread+0x10/0x10 [ 891.689959][ T34] ret_from_fork+0x514/0xb70 [ 891.689976][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 891.689989][ T34] ? __switch_to+0xc78/0x1410 [ 891.690004][ T34] ? __pfx_kthread+0x10/0x10 [ 891.690014][ T34] ret_from_fork_asm+0x1a/0x30 [ 891.690034][ T34] [ 891.690050][ T34] Kernel panic - not syncing: hung_task: blocked tasks [ 892.309831][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 892.320571][ T34] Tainted: [L]=SOFTLOCKUP [ 892.324880][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 892.334912][ T34] Call Trace: [ 892.338185][ T34] [ 892.341094][ T34] vpanic+0x26f/0x710 [ 892.345063][ T34] panic+0xc5/0xd0 [ 892.348767][ T34] ? __pfx_panic+0x10/0x10 [ 892.353180][ T34] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 892.358281][ T34] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 892.364524][ T34] watchdog+0x10cc/0x10d0 [ 892.368846][ T34] ? watchdog+0x209/0x10d0 [ 892.373257][ T34] kthread+0x38b/0x480 [ 892.377304][ T34] ? __pfx_watchdog+0x10/0x10 [ 892.381963][ T34] ? __pfx_kthread+0x10/0x10 [ 892.386527][ T34] ret_from_fork+0x514/0xb70 [ 892.391099][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 892.396219][ T34] ? __switch_to+0xc78/0x1410 [ 892.400875][ T34] ? __pfx_kthread+0x10/0x10 [ 892.405454][ T34] ret_from_fork_asm+0x1a/0x30 [ 892.410291][ T34] [ 892.413350][ T34] Kernel Offset: disabled [ 892.417660][ T34] Rebooting in 86400 seconds..