last executing test programs: 7.329907561s ago: executing program 2 (id=1924): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x10132) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) 7.255027084s ago: executing program 2 (id=1927): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x101a02, 0x0) write$tcp_congestion(r0, &(0x7f0000000140)='hybla\x00', 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="f3cb174ae717957f8bf135edc89d604676cadd8c42accf3d4d381316639242984901e83c44d6952e09657d1c7bd62ee28f5ba872830d0113c8610a2d9662ae0ae7a99403cf32067a", 0x48}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000000340)="41a6067b1bc36fb019eea63bd46e15ad97bceba37bf441686bfb0ee3049abf50ff5d4700f4122acee11bb8493327", 0x2e}, {&(0x7f0000000500)="54f8db", 0x3}], 0x4, &(0x7f0000001400)=[@cred={{0x18}}, @rights={{0x34, 0x1, 0x1, [r3, r3, r2, 0xffffffffffffffff, r2, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff, r1]}}, @cred={{0x18}}], 0x100, 0x40004}}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x39000, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f00000000c0)=0x0) timer_gettime(r6, &(0x7f0000000180)) timer_settime(0x0, 0x0, 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20660100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x1000, 0x34}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000081) chdir(&(0x7f0000000240)='./file0\x00') r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000380), 0x208e24b) lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f00000003c0)={0x0, 0xfb, 0x53, 0x2, 0x2, "8680d3189a4a20076b7bd3bbe3f25569", "008bc0eff6cbaf8914f888980a8fd33e37b6c96d8128713158268c653497577acdfe1af684c1b41624ff4432b4f9e2e96c2525ba3a68c5bd6d49bbb9e1d6"}, 0x53, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x13, r12, 0x0) preadv(r12, &(0x7f0000000580)=[{&(0x7f0000004240)=""/4119, 0x1017}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@gettaction={0x18, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 4.632411015s ago: executing program 0 (id=1940): ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000017c0)=""/76) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r0 = io_uring_setup(0x136f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000019c0)={&(0x7f0000001980)='cachefiles_ref\x00'}, 0x10) semget$private(0x0, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000340)=[{0x0, 0x1}], 0x1, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r1 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0}}) io_uring_enter(r1, 0x5e40, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) 4.316380395s ago: executing program 3 (id=1943): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mlockall(0x3) mlockall(0x6) 4.208289258s ago: executing program 2 (id=1944): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x4, 0x5}, 0x48) syz_emit_vhci(&(0x7f0000002380)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xe6}, "f592a1a34acf98b7523438f803c81c18331129f0b382c7dda9cff785a996215d6d7827337ccd785e30c1cb6be3ffac56d115d7a569142f9ddc3ec2ffcb0db02641329f1debd0ce8d2e87f14049688c90ac9140d8076fdd42239a32d58b0590ae7cef9e6b2e47fb9e8d7db365a8a85bf12210304aa9d99b3ad6dae6ab3fa7b5c8fd0d857bfb6697da9e1e4123a5ed7f8173bc88f6f14aa4f4f7410474812ded97e088fd9cf1a4cfd050e77c8ed8c0f71c2421fa6a52f360d0dba7ef267831fbe277058f0f5558b75db7a73abe875574653fc014fad169511eebe3bc758a0177e047cd103acfa2"}, 0xea) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000002480)={0x3000, 0xb000}) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x2c}, @l2cap_cid_signaling={{0x28}, [@l2cap_conn_rsp={{0x3, 0x5e, 0x8}, {0x4, 0x0, 0x0, 0x6}}, @l2cap_conf_rsp={{0x5, 0xa7, 0x18}, {0x6, 0x8, 0x3, [@l2cap_conf_efs={0x6, 0x10, {0x0, 0x0, 0x0, 0x4, 0xdfd1, 0x7}}]}}]}}, 0x31) syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) eventfd(0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x81}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0xd6e) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 4.026029262s ago: executing program 2 (id=1945): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_usb_connect(0x0, 0xdf0, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bb9d3140a8171300a68e010203010902de0d040000000009044c080dd890490008240600014c352105240008000d240f01ed000000000009000706241a00001004240202152412ff03a317a88b045e4f01a607c0ffcb7e392a09050c101000040945ca23c564da1719759a29a61dbc150dee67401978c3d487fadb01e86bb960b9abdae885655d1f0a3987e8ab80844c898af48ae4a1dc734c6f1ac92197166706200f3f846794a14529d411aa643ebc2c178af7e658687ed74319c9ecd18b138716e2d5d315f539c0e02bc70a1c6c20f9cf086112931185ffbc9f694e80aa88e3b2cfb6fe7e74eec71f7499f504b45a4865a95033669c07087facaf8ac4f31b04b77f719c05b32879ae5d0d2345cd230249d2a81931d5b2cd4926d14e453f00930c1f6eab4a52d70a168db209050b08080006050509050e03200074077f6f012eb6f6fa6e8097158a29b2b59f66885d24de987395bcfe57c098f9f152403879d2184522b55a1ffa66c66472b9db75b365340b7ca77e19d136ee9b6d4f8582a50176d416ba0bc77e01f89eecdb032b7f918c7686d52a8a352bf3ee9327907d7bd508bd917fb205cf679b2040bf09050a1020000104080905010140008f038007250182080400090580080002f9800209050210ff030f09ff072501800205009f040c3a28fce72749ce8348f09ddc83df10d064eecdfb654f6cce460f6a1c8e713c4990e55522dc79b96fda18bd6d7f17308d8cbebc90a4fd42cb4e8de2db10b862752cd19c4ea184753c6aa3aeeec7758d029165e68f69773d599b8a34c4bb2a79469c5d08b9d77887278c4c82cdca59a07ad1cdc4abd75071e40ddaefc87f85ad235feb18b2c0e946135b774035d84e7f070ab6f04b1ae80bbfc9c8892c0905011020000c00050905031008000cff8107250100040900072501000805000905080108007f0703d207b78b979985980c55387603537e47dd2f2e8edf4a9531f79606d639345059e4a0f89675999bfa05df87ba75b38a137ddae0d9b69591af1eebd350b034c1374173942b3ba8df1ab6c67c637e2cb11ed25c53015099377406eff9019213367ef7a0f9c33b1e3a1ade2220d24498c1925c39630ed38db55a89d8a2f1778f399513d149866a2fc9ffdefc82dfbeaedd999a118e3064a96c39126ffe33da17e7573cb5e24c6d4aa6e976b8c75dbdc8d4b6e4b902d50016f603bee417b0e1b87c6a088ca806c8489ab97a4453b99789f580b51b9523a13e5f827e5fa667c39e956b4fb4371ceb844c15377d79294b1703d9bdeb28bc84cdc4e78f3c2751fcc9595bdd7e44148917ea122786a88e8dfb6d1245bd4b44516cb9ad6dc5d954fa5894ea1d5b0b9d344da7342d25037686dfbbef579b7c55785bbc96b59c5a9cb11b36069092bc5913cf38d77e90ba89643107bf87f0ea1ab4495fe37b1eed186bbe1dde0a73be96d44e2309050c031000720509ad31d27e74f77531a457026f62696f28251af2359bc3f51fd3e680aecc06edb18f6f7fc901651a38a3476348868b089518469bf194f19e7f9ca4261ed03062a2a2c37e6303e83ca09619c184fa4304b17100407ee3fb262ff391cc28efca2884bccb60027e00141eda5c4fff696a072d2b9bf81b4c218ab749604e6499801aa68b8bfd61c0cd27249458b23da4b2178ed44d856b0186f37807a0540ba0926d2059d1df13e5f6574dc33a48b692ff09b718b7742b28b2920454e0d4cc2e6231dbfe2d009fb7c8bb68893f2d352a7215fccb8c5794462391b89dde2a584e1ba64b08b310010ac56d0e8273c77190e6672f50ccb63b4a2f26558fedfc14de3d837ddb7b936403a3075a740050552266a9b09f544c5b1d7ed3e0952146f8764637ec5c2c94dad57aaf5f1a23308610798c3d8355528169831aca24ca27747ffeff677e54da257cc90f47c09b37b694c7e96d1706a075164464b8f1e14b0c12ceaf48a593690600cb5bcae110dbf980424eeb4bbb075114175c2733dce31054faf14c3881bb084566147b3996119318a6688815c1de0f9c05f63b3b0c0f8a68f866b61bc7cd323ff64a0014eb7fff09050908400008860009050501080001050909043f000657a707fa0a240102000502010209240302000306040808240802020002a9052405040607240502feaadc1124060404050600070007000100020081052406000005240005000d240f0103000000090003005908241cfffe06db0c072414d5f60b0009050202000410060450074efd4c41c53e61fa16b19fae792afc6bbfdc8217923fcb88fa6157d23257e68e05e2b4e89ccededb94d390e523c7dec3c011b8b8e36b57e883"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x145, &(0x7f0000000e40)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x133, 0x1, 0x1, 0x6, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0xf9, {{0xb, 0x24, 0x6, 0x0, 0x0, "a522de77de50"}, {0x5, 0x24, 0x0, 0xe47e}, {0xd, 0x24, 0xf, 0x1, 0xdd, 0x4, 0x4, 0x16}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x3}, @acm={0x4, 0x24, 0x2, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x7}, @country_functional={0xc, 0x24, 0x7, 0xc1, 0x5, [0x1000, 0x64, 0xff]}, @mdlm_detail={0xbb, 0x24, 0x13, 0xf9, "d3b0ea68b477e3a96692126f57cef22674e41d4eeee54db697fd13d628627367d4197c366a400f443e042b931f0b64e8029fe317a232096b654a67e930c74f403975392c9ba79e19e652b7e1979560c3d3acd8b8a8563aa74679c98ba9b930d494e6c06a8594ca279257c5ff889e4e84802419b80a053c06f84ac5c1bb39d2d5794c48cf3df2425d55b178a4b70bed91d3adadc568272a17dc461a3b762b3c56fc793df24f3d5d239fbafdcaa1fdf9740fdccf3144fc7b"}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x5, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x9, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x9, 0x2}}}}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x300, 0x4, 0x9, 0x0, 0x8, 0xd}, 0x11d, &(0x7f00000008c0)={0x5, 0xf, 0x11d, 0x5, [@generic={0xe7, 0x10, 0x2, "6b15bf01a9d13400e32d17ea61ff3c908c7e131de15417a70ca95c169da7dd0403b370af88e4f989e8028357c8bb22c108bc9ac96bffe908c00aa0e5422c2bbf31634db3a657241fb4083cb5d343e0bfe15a611d6a304992282e559320d1774eca89f60213b2a5fdb60cee5273edb4c68b27c36f88cc8d09a52de18060be0f059cf51949da3b2bfc0554822fc9a14f6517d3cc62d50b058078d8f03f078c140a6bf99cc99298144e39d1c5235aab7daba5ae11c6bc5117b44621d66da3723b0509c3ec0814158c1c35cc68daaa508b03ceafe85ae6d2a8cd5e3b01e7227e7f3d85f4f0ee"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x2, 0xe, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x3, 0xf00, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "42994e351a8caa2a91615ea95304f9fc"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x1, 0x6, 0x5}]}, 0x6, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x814}}, {0x30, &(0x7f0000000b00)=@string={0x30, 0x3, "8de8266d69e52588d0a1426d17d118667bfb521135e186a115c3eaf553e1bf6d359e3755a2603369699a5af21340"}}, {0xfe, &(0x7f0000000b40)=@string={0xfe, 0x3, "22d917202931d45a55cd19eeb873a45129efe899738ead92637dd0f1980ac75d1b330c0e31d50ce67f2519e34f94184417cd035fe04f7368c5e3970aea038c3fa58cce292dcf4513097d4d0c54967e8e35cb0b32bdcf9dc59f7383b928ce116f173c41e1c7314957d7416be088c807352ae05b43e5cd62f7c1474ae3a0d09d107a3be67a3a2822f86d5e1ce763c946adfa96143af9a3aa650e4e0f867a0e1775edc795c2abf0d1825a8d1ddb6f605dda07665614304b88f3130590fba85e29e8cc6ae856f87d0233279930414210365b362fe4426f88461ef6610f461c5ea5bcf2d03ff12a08497932ac1f5e2c70e6f4efdbc7799af04f94b019ae8d"}}, {0x1c, &(0x7f0000000c40)=@string={0x1c, 0x3, "1c5eb14b1eb0bc315fb7b275efab88ac2aee2dad4667a0c33077"}}, {0x91, &(0x7f0000000c80)=ANY=[@ANYBLOB="91033a83d5ba4141ede8944b9f4f71d590bc4d0a35449ee283c9a5798cc35327a272723433c57d3105bb058bd9d2ea1273ee6688eca281ed90bb22110781aa333bd7da4842b2513aee4ba5526615f1e5a17e58e570edc105fea5bed8da0a4a1f05f9a97b4dffd41be81ea92f07c716a63b0d5f2660a949165757e82c924df9dc3f0f0e5b20e3f4902a3386c83a4d0a6b12"]}]}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000dc0)) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000094c125eaa9081101c86d00000001090212000100000000090400000089263c00"], 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x5) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f0000000240)=ANY=[], 0x78) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x4}, 0x10) sendto$inet(r6, &(0x7f0000000180)="05", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0), 0x8) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, &(0x7f0000000080)="0f81cf8fe978e11766b8f9008ed8c442d9ae819c3100000f094163be0000000066baf80cb87ce12584efc4a2b5bee1ed0f952af20f090f01ca", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000001c0)={0x30, 0xa, 0x0, "b75c89e7a20c8eac82ad0416bb1844038d2cd97c945462f31638b5394c00"}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)) 3.685685856s ago: executing program 0 (id=1948): prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='mmap_lock_acquire_returned\x00', r3}, 0x10) brk(0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$poke(0x5, r6, &(0x7f0000000080), 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) io_setup(0x6, &(0x7f0000000680)) 3.554405729s ago: executing program 0 (id=1949): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket(0x200000100000011, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000007c0)={{0x10000, 0x2, 0xb, 0x2, 0x0, 0x81, 0x9b, 0x7, 0x4, 0x87, 0x8, 0x7}, {0x18f002, 0x4000, 0xa, 0x3, 0x8, 0xb, 0x92, 0x9, 0x8, 0x9, 0xa, 0x2}, {0x6000, 0x5000, 0xd, 0xec, 0xb3, 0xfb, 0x2, 0x4, 0xe3, 0x56, 0x39, 0xfe}, {0xd000, 0x4, 0xb, 0xd5, 0xf8, 0x3, 0x7f, 0x8, 0x5, 0x6, 0x4, 0xb4}, {0x4000, 0x100000, 0x0, 0x67, 0x1, 0x8, 0x6, 0x3, 0x5f, 0xbe, 0x3, 0x1}, {0x6000, 0x6000, 0xc, 0x2, 0x1, 0xfd, 0x0, 0x2, 0x10, 0xa7, 0x4, 0x7}, {0xb6ff58cdf5116350, 0x1, 0x8, 0x2, 0xf1, 0x0, 0x4, 0xf3, 0x5, 0x3, 0x8, 0x40}, {0x1000, 0x4000, 0x9, 0x10, 0xe, 0x4, 0xf9, 0x3, 0x1, 0x5, 0x8, 0xe}, {0x1000, 0x3}, {0x0, 0x1}, 0x0, 0x0, 0x2, 0x20100, 0x6, 0x4000, 0x7004, [0x8000000000000000, 0x8, 0x6cd2, 0x3]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000002580)=""/107}) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000004a150112790001020301090224000101000000090400000003010000092100000001220000090581030000000000"], 0x0) ioctl$SNAPSHOT_FREE(r6, 0x3305) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) userfaultfd(0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000010000000853a6e1d127e5d5292f3b9e67925d96d34b70244f25560e8a01161d39c2fd200ad0f9fe1a4903b6bdad0aca2777873287cad6c24404fe323db091f3913431ce0858a5ecc0bc481c4d31ac1cb548f19d5596e87dc3f3cec115a8c7d16540fbbfd3e5c2b33fe0a15100bb12af"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)) 3.404943353s ago: executing program 3 (id=1950): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket(0x200000100000011, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000007c0)={{0x10000, 0x2, 0xb, 0x2, 0x0, 0x81, 0x9b, 0x7, 0x4, 0x87, 0x8, 0x7}, {0x18f002, 0x4000, 0xa, 0x3, 0x8, 0xb, 0x92, 0x9, 0x8, 0x9, 0xa, 0x2}, {0x6000, 0x5000, 0xd, 0xec, 0xb3, 0xfb, 0x2, 0x4, 0xe3, 0x56, 0x39, 0xfe}, {0xd000, 0x4, 0xb, 0xd5, 0xf8, 0x3, 0x7f, 0x8, 0x5, 0x6, 0x4, 0xb4}, {0x4000, 0x100000, 0x0, 0x67, 0x1, 0x8, 0x6, 0x3, 0x5f, 0xbe, 0x3, 0x1}, {0x6000, 0x6000, 0xc, 0x2, 0x1, 0xfd, 0x0, 0x2, 0x10, 0xa7, 0x4, 0x7}, {0xb6ff58cdf5116350, 0x1, 0x8, 0x2, 0xf1, 0x0, 0x4, 0xf3, 0x5, 0x3, 0x8, 0x40}, {0x1000, 0x4000, 0x9, 0x10, 0xe, 0x4, 0xf9, 0x3, 0x1, 0x5, 0x8, 0xe}, {0x1000, 0x3}, {0x0, 0x1}, 0x0, 0x0, 0x2, 0x20100, 0x6, 0x4000, 0x7004, [0x8000000000000000, 0x8, 0x6cd2, 0x3]}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000002580)=""/107}) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000004a150112790001020301090224000101000000090400000003010000092100000001220000090581030000000000"], 0x0) ioctl$SNAPSHOT_FREE(r7, 0x3305) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) userfaultfd(0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000010000000853a6e1d127e5d5292f3b9e67925d96d34b70244f25560e8a01161d39c2fd200ad0f9fe1a4903b6bdad0aca2777873287cad6c24404fe323db091f3913431ce0858a5ecc0bc481c4d31ac1cb548f19d5596e87dc3f3cec115a8c7d16540fbbfd3e5c2b33fe0a15100bb12af"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)) 2.979239892s ago: executing program 0 (id=1951): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000000), 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f000000b6c0)={'wg2\x00', {0x2, 0x4e23, @loopback}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f000000a040)={'syztnl1\x00', &(0x7f0000009fc0)={'ip6_vti0\x00', r4, 0x2f, 0x6, 0x8, 0x7f, 0x50, @mcast2, @remote, 0x40, 0x20, 0x4, 0x3}}) sendmsg$nl_route(r1, &(0x7f000000b680)={&(0x7f0000004cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f000000b640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001d00020028bd7000fddbdf250a000000", @ANYRES32=r5, @ANYBLOB="0200480205000c008000000008000900020000fb060006004e220000c1f85672c8e4a8a97a9ddd33968f4fbe1babb1c48fa9b677df8525b6a4c6232329fbf6e9b0512e7c3f1de5cf18aba39512eb927d3d24cf8338c091aee0a8f66cfa0c83c080db8f3265795513a7488c7edd6c30ea0662a7fcd2"], 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x400c0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001e40)={r7, 0x3, 0x6}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100fd0000000080000000000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r9, &(0x7f0000000200), 0xf000) nanosleep(0x0, 0x0) syz_emit_vhci(0x0, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'ip_vti0\x00', r7, 0x7, 0x10, 0x7, 0x3, {{0x8, 0x4, 0x2, 0x18, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010102, {[@ssrr={0x89, 0xb, 0xd5, [@remote, @private=0xa010102]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x1}, 0x18) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000140)=""/76, &(0x7f00000001c0)=0x4c) sendmmsg(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)='w', 0x1}], 0x1}}, {{&(0x7f0000001800)=@un=@file={0x1, './file0\x00'}, 0x80, 0x0}}], 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.875263475s ago: executing program 0 (id=1952): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_usb_connect(0x0, 0xdf0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x145, &(0x7f0000000e40)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x133, 0x1, 0x1, 0x6, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0xf9, {{0xb, 0x24, 0x6, 0x0, 0x0, "a522de77de50"}, {0x5, 0x24, 0x0, 0xe47e}, {0xd, 0x24, 0xf, 0x1, 0xdd, 0x4, 0x4, 0x16}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x3}, @acm={0x4, 0x24, 0x2, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x7}, @country_functional={0xc, 0x24, 0x7, 0xc1, 0x5, [0x1000, 0x64, 0xff]}, @mdlm_detail={0xbb, 0x24, 0x13, 0xf9, "d3b0ea68b477e3a96692126f57cef22674e41d4eeee54db697fd13d628627367d4197c366a400f443e042b931f0b64e8029fe317a232096b654a67e930c74f403975392c9ba79e19e652b7e1979560c3d3acd8b8a8563aa74679c98ba9b930d494e6c06a8594ca279257c5ff889e4e84802419b80a053c06f84ac5c1bb39d2d5794c48cf3df2425d55b178a4b70bed91d3adadc568272a17dc461a3b762b3c56fc793df24f3d5d239fbafdcaa1fdf9740fdccf3144fc7b"}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x5, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x9, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x9, 0x2}}}}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x300, 0x4, 0x9, 0x0, 0x8, 0xd}, 0x120, &(0x7f00000008c0)={0x5, 0xf, 0x120, 0x6, [@generic={0xe7, 0x10, 0x2, "6b15bf01a9d13400e32d17ea61ff3c908c7e131de15417a70ca95c169da7dd0403b370af88e4f989e8028357c8bb22c108bc9ac96bffe908c00aa0e5422c2bbf31634db3a657241fb4083cb5d343e0bfe15a611d6a304992282e559320d1774eca89f60213b2a5fdb60cee5273edb4c68b27c36f88cc8d09a52de18060be0f059cf51949da3b2bfc0554822fc9a14f6517d3cc62d50b058078d8f03f078c140a6bf99cc99298144e39d1c5235aab7daba5ae11c6bc5117b44621d66da3723b0509c3ec0814158c1c35cc68daaa508b03ceafe85ae6d2a8cd5e3b01e7227e7f3d85f4f0ee"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x2, 0xe, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x3, 0xf00, 0x3}, @generic={0x3, 0x10, 0xb}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "42994e351a8caa2a91615ea95304f9fc"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x1, 0x6, 0x5}]}, 0x6, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x814}}, {0x30, &(0x7f0000000b00)=@string={0x30, 0x3, "8de8266d69e52588d0a1426d17d118667bfb521135e186a115c3eaf553e1bf6d359e3755a2603369699a5af21340"}}, {0xfe, &(0x7f0000000b40)=@string={0xfe, 0x3, "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"}}, {0x1c, &(0x7f0000000c40)=@string={0x1c, 0x3, "1c5eb14b1eb0bc315fb7b275efab88ac2aee2dad4667a0c33077"}}, {0x91, &(0x7f0000000c80)=ANY=[@ANYBLOB="91033a83d5ba4141ede8944b9f4f71d590bc4d0a35449ee283c9a5798cc35327a272723433c57d3105bb058bd9d2ea1273ee6688eca281ed90bb22110781aa333bd7da4842b2513aee4ba5526615f1e5a17e58e570edc105fea5bed8da0a4a1f05f9a97b4dffd41be81ea92f07c716a63b0d5f2660a949165757e82c924df9dc3f0f0e5b20e3f4902a3386c83a4d0a6b12"]}]}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000dc0)) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000094c125eaa9081101c86d00000001090212000100000000090400000089263c00"], 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x5) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f0000000240)=ANY=[], 0x78) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x4}, 0x10) sendto$inet(r6, &(0x7f0000000180)="05", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0), 0x8) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, &(0x7f0000000080)="0f81cf8fe978e11766b8f9008ed8c442d9ae819c3100000f094163be0000000066baf80cb87ce12584efc4a2b5bee1ed0f952af20f090f01ca", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000001c0)={0x30, 0xa, 0x0, "b75c89e7a20c8eac82ad0416bb1844038d2cd97c945462f31638b5394c00"}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)) 2.561961818s ago: executing program 3 (id=1953): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x4, 0x5}, 0x48) syz_emit_vhci(&(0x7f0000002380)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xe6}, "f592a1a34acf98b7523438f803c81c18331129f0b382c7dda9cff785a996215d6d7827337ccd785e30c1cb6be3ffac56d115d7a569142f9ddc3ec2ffcb0db02641329f1debd0ce8d2e87f14049688c90ac9140d8076fdd42239a32d58b0590ae7cef9e6b2e47fb9e8d7db365a8a85bf12210304aa9d99b3ad6dae6ab3fa7b5c8fd0d857bfb6697da9e1e4123a5ed7f8173bc88f6f14aa4f4f7410474812ded97e088fd9cf1a4cfd050e77c8ed8c0f71c2421fa6a52f360d0dba7ef267831fbe277058f0f5558b75db7a73abe875574653fc014fad169511eebe3bc758a0177e047cd103acfa2"}, 0xea) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000002480)={0x3000, 0xb000}) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x2c}, @l2cap_cid_signaling={{0x28}, [@l2cap_conn_rsp={{0x3, 0x5e, 0x8}, {0x4, 0x0, 0x0, 0x6}}, @l2cap_conf_rsp={{0x5, 0xa7, 0x18}, {0x6, 0x8, 0x3, [@l2cap_conf_efs={0x6, 0x10, {0x0, 0x0, 0x0, 0x4, 0xdfd1, 0x7}}]}}]}}, 0x31) syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) eventfd(0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x81}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0xd6e) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 2.518430604s ago: executing program 2 (id=1954): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x18, 0x4f, 0x301, 0x70bd2d, 0x0, {0x2}, [{0x4, 0x2}]}, 0x18}}, 0x4000) socket(0x25, 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet_dccp(0x2, 0x6, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r3, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/137, 0x89}, {0x0}], 0x2) syz_usb_disconnect(r2) r4 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x402, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)) r5 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4874ef0904271a78949178fd825b775b5e55210c4037a557f88c97b6097ea4e9fdd1d167064e969100ff97aa6b42687995845c8c3ce42e76d6db19d5f4f5f283", "eba9d749fdc2dedff9641c2773c54efce1fa87820dae06070446988b8770438b12e6b80c265fdce83841f0f230d1f4fe7b5ba021316c17fb5112d7d0f278e48a", "c41751ca16a23f839af552fb8500010000000000003203a6c188ec22bd7c4549"}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000100)={0x10000}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f0000000300)="baf80c66b8b027b68566efbafc0cb00cee0f22960f320fae2f0f3805f2d28615d20f005f0066b90809000066b8ef00000066ba000000000f30660fc77155f36e", 0x40}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$LOOP_GET_STATUS(r5, 0x4c07, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x541b, 0xfffffffffffffffe) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) 2.321524991s ago: executing program 3 (id=1955): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x18, 0x4f, 0x301, 0x70bd2d, 0x0, {0x2}, [{0x4, 0x2}]}, 0x18}}, 0x4000) socket(0x25, 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet_dccp(0x2, 0x6, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r3, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/137, 0x89}, {0x0}], 0x2) syz_usb_disconnect(r2) r4 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x402, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)) r5 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4874ef0904271a78949178fd825b775b5e55210c4037a557f88c97b6097ea4e9fdd1d167064e969100ff97aa6b42687995845c8c3ce42e76d6db19d5f4f5f283", "eba9d749fdc2dedff9641c2773c54efce1fa87820dae06070446988b8770438b12e6b80c265fdce83841f0f230d1f4fe7b5ba021316c17fb5112d7d0f278e48a", "c41751ca16a23f839af552fb8500010000000000003203a6c188ec22bd7c4549"}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = dup(0xffffffffffffffff) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000100)={0x10000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f0000000300)="baf80c66b8b027b68566efbafc0cb00cee0f22960f320fae2f0f3805f2d28615d20f005f0066b90809000066b8ef00000066ba000000000f30660fc77155f36e", 0x40}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$LOOP_GET_STATUS(r5, 0x4c07, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x541b, 0xfffffffffffffffe) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) 2.19508249s ago: executing program 1 (id=1956): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket(0x200000100000011, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d667363616368"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000007c0)={{0x10000, 0x2, 0xb, 0x2, 0x0, 0x81, 0x9b, 0x7, 0x4, 0x87, 0x8, 0x7}, {0x18f002, 0x4000, 0xa, 0x3, 0x8, 0xb, 0x92, 0x9, 0x8, 0x9, 0xa, 0x2}, {0x6000, 0x5000, 0xd, 0xec, 0xb3, 0xfb, 0x2, 0x4, 0xe3, 0x56, 0x39, 0xfe}, {0xd000, 0x4, 0xb, 0xd5, 0xf8, 0x3, 0x7f, 0x8, 0x5, 0x6, 0x4, 0xb4}, {0x4000, 0x100000, 0x0, 0x67, 0x1, 0x8, 0x6, 0x3, 0x5f, 0xbe, 0x3, 0x1}, {0x6000, 0x6000, 0xc, 0x2, 0x1, 0xfd, 0x0, 0x2, 0x10, 0xa7, 0x4, 0x7}, {0xb6ff58cdf5116350, 0x1, 0x8, 0x2, 0xf1, 0x0, 0x4, 0xf3, 0x5, 0x3, 0x8, 0x40}, {0x1000, 0x4000, 0x9, 0x10, 0xe, 0x4, 0xf9, 0x3, 0x1, 0x5, 0x8, 0xe}, {0x1000, 0x3}, {0x0, 0x1}, 0x0, 0x0, 0x2, 0x20100, 0x6, 0x4000, 0x7004, [0x8000000000000000, 0x8, 0x6cd2, 0x3]}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000002580)=""/107}) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000004a150112790001020301090224000101000000090400000003010000092100000001220000090581030000000000"], 0x0) ioctl$SNAPSHOT_FREE(r7, 0x3305) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) userfaultfd(0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)) 1.726036839s ago: executing program 1 (id=1957): r0 = syz_clone(0x8002ca80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000040)=0x200000000005) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04221011aaaaaaaaaa10f50305a938a98000b1"], 0x13) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9100, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e06000e86"], 0x9) ioctl$USBDEVFS_CONTROL(r3, 0x4008550d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x1) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x0, 0xffff, 0xd}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_DEV_DESTROY(r2, 0x5502) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bind$rds(0xffffffffffffffff, 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000100)={0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x0) 1.39389836s ago: executing program 1 (id=1958): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000000), 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f000000b6c0)={'wg2\x00', {0x2, 0x4e23, @loopback}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f000000a040)={'syztnl1\x00', &(0x7f0000009fc0)={'ip6_vti0\x00', r4, 0x2f, 0x6, 0x8, 0x7f, 0x50, @mcast2, @remote, 0x40, 0x20, 0x4, 0x3}}) sendmsg$nl_route(r1, &(0x7f000000b680)={&(0x7f0000004cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f000000b640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001d00020028bd7000fddbdf250a000000", @ANYRES32=r5, @ANYBLOB="0200480205000c008000000008000900020000fb060006004e220000c1f85672c8e4a8a97a9ddd33968f4fbe1babb1c48fa9b677df8525b6a4c6232329fbf6e9b0512e7c3f1de5cf18aba39512eb927d3d24cf8338c091aee0a8f66cfa0c83c080db8f3265795513a7488c7edd6c30ea0662a7fcd2"], 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x400c0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001e40)={r7, 0x3, 0x6}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100fd0000000080000000000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r9, &(0x7f0000000200), 0xf000) nanosleep(&(0x7f0000000000)={0x8000000000000000}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f74120"], 0x7) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=@getqdisc={0x44, 0x26, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xfff2, 0xb}, {0x2, 0xa}, {0x1, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008810}, 0xc040) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'ip_vti0\x00', r7, 0x7, 0x10, 0x7, 0x3, {{0xa, 0x4, 0x2, 0x18, 0x28, 0x64, 0x0, 0xe5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010102, {[@noop, @ssrr={0x89, 0xf, 0xd5, [@remote, @multicast1, @private=0xa010102]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r11, 0x1}, 0x18) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000140)=""/76, &(0x7f00000001c0)=0x4c) sendmmsg(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)='w', 0x1}], 0x1}}, {{&(0x7f0000001800)=@un=@file={0x1, './file0\x00'}, 0x80, 0x0}}], 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.324438613s ago: executing program 0 (id=1959): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x18, 0x4f, 0x301, 0x70bd2d, 0x0, {0x2}, [{0x4, 0x2}]}, 0x18}}, 0x4000) socket(0x25, 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet_dccp(0x2, 0x6, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r3, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/137, 0x89}, {0x0}], 0x2) syz_usb_disconnect(r2) r4 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x402, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x0) r5 = dup(0xffffffffffffffff) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x541b, 0xfffffffffffffffe) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) 1.155724952s ago: executing program 1 (id=1960): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000280)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./control\x00', 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1.115126914s ago: executing program 1 (id=1961): socket(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3800007, 0x4008032, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) llistxattr(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_io_uring_setup(0x1114, &(0x7f0000000300)={0x0, 0x20039dd}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003000/0x4000)=nil}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) mincore(&(0x7f000056a000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/45) 782.813686ms ago: executing program 3 (id=1962): socket(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3800007, 0x4008032, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) llistxattr(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_io_uring_setup(0x1114, &(0x7f0000000300)={0x0, 0x20039dd}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x7, 0x0, 0x0}) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003000/0x4000)=nil}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) mincore(&(0x7f000056a000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/45) 761.236871ms ago: executing program 2 (id=1963): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket(0x200000100000011, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000007c0)={{0x10000, 0x2, 0xb, 0x2, 0x0, 0x81, 0x9b, 0x7, 0x4, 0x87, 0x8, 0x7}, {0x18f002, 0x4000, 0xa, 0x3, 0x8, 0xb, 0x92, 0x9, 0x8, 0x9, 0xa, 0x2}, {0x6000, 0x5000, 0xd, 0xec, 0xb3, 0xfb, 0x2, 0x4, 0xe3, 0x56, 0x39, 0xfe}, {0xd000, 0x4, 0xb, 0xd5, 0xf8, 0x3, 0x7f, 0x8, 0x5, 0x6, 0x4, 0xb4}, {0x4000, 0x100000, 0x0, 0x67, 0x1, 0x8, 0x6, 0x3, 0x5f, 0xbe, 0x3, 0x1}, {0x6000, 0x6000, 0xc, 0x2, 0x1, 0xfd, 0x0, 0x2, 0x10, 0xa7, 0x4, 0x7}, {0xb6ff58cdf5116350, 0x1, 0x8, 0x2, 0xf1, 0x0, 0x4, 0xf3, 0x5, 0x3, 0x8, 0x40}, {0x1000, 0x4000, 0x9, 0x10, 0xe, 0x4, 0xf9, 0x3, 0x1, 0x5, 0x8, 0xe}, {0x1000, 0x3}, {0x0, 0x1}, 0x0, 0x0, 0x2, 0x20100, 0x6, 0x4000, 0x7004, [0x8000000000000000, 0x8, 0x6cd2, 0x3]}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000002580)=""/107}) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000004a150112790001020301090224000101000000090400000003010000092100000001220000090581030000000000"], 0x0) ioctl$SNAPSHOT_FREE(r7, 0x3305) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) userfaultfd(0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)) 535.746565ms ago: executing program 1 (id=1964): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_usb_connect(0x0, 0xdf0, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bb9d3140a8171300a68e010203010902de0d040000000009044c080dd890490008240600014c352105240008000d240f01ed000000000009000706241a00001004240202152412ff03a317a88b045e4f01a607c0ffcb7e392a09050c101000040945ca23c564da1719759a29a61dbc150dee67401978c3d487fadb01e86bb960b9abdae885655d1f0a3987e8ab80844c898af48ae4a1dc734c6f1ac92197166706200f3f846794a14529d411aa643ebc2c178af7e658687ed74319c9ecd18b138716e2d5d315f539c0e02bc70a1c6c20f9cf086112931185ffbc9f694e80aa88e3b2cfb6fe7e74eec71f7499f504b45a4865a95033669c07087facaf8ac4f31b04b77f719c05b32879ae5d0d2345cd230249d2a81931d5b2cd4926d14e453f00930c1f6eab4a52d70a168db209050b08080006050509050e03200074077f6f012eb6f6fa6e8097158a29b2b59f66885d24de987395bcfe57c098f9f152403879d2184522b55a1ffa66c66472b9db75b365340b7ca77e19d136ee9b6d4f8582a50176d416ba0bc77e01f89eecdb032b7f918c7686d52a8a352bf3ee9327907d7bd508bd917fb205cf679b2040bf09050a1020000104080905010140008f038007250182080400090580080002f9800209050210ff030f09ff072501800205009f040c3a28fce72749ce8348f09ddc83df10d064eecdfb654f6cce460f6a1c8e713c4990e55522dc79b96fda18bd6d7f17308d8cbebc90a4fd42cb4e8de2db10b862752cd19c4ea184753c6aa3aeeec7758d029165e68f69773d599b8a34c4bb2a79469c5d08b9d77887278c4c82cdca59a07ad1cdc4abd75071e40ddaefc87f85ad235feb18b2c0e946135b774035d84e7f070ab6f04b1ae80bbfc9c8892c0905011020000c00050905031008000cff8107250100040900072501000805000905080108007f0703d207b78b979985980c55387603537e47dd2f2e8edf4a9531f79606d639345059e4a0f89675999bfa05df87ba75b38a137ddae0d9b69591af1eebd350b034c1374173942b3ba8df1ab6c67c637e2cb11ed25c53015099377406eff9019213367ef7a0f9c33b1e3a1ade2220d24498c1925c39630ed38db55a89d8a2f1778f399513d149866a2fc9ffdefc82dfbeaedd999a118e3064a96c39126ffe33da17e7573cb5e24c6d4aa6e976b8c75dbdc8d4b6e4b902d50016f603bee417b0e1b87c6a088ca806c8489ab97a4453b99789f580b51b9523a13e5f827e5fa667c39e956b4fb4371ceb844c15377d79294b1703d9bdeb28bc84cdc4e78f3c2751fcc9595bdd7e44148917ea122786a88e8dfb6d1245bd4b44516cb9ad6dc5d954fa5894ea1d5b0b9d344da7342d25037686dfbbef579b7c55785bbc96b59c5a9cb11b36069092bc5913cf38d77e90ba89643107bf87f0ea1ab4495fe37b1eed186bbe1dde0a73be96d44e2309050c031000720509ad31d27e74f77531a457026f62696f28251af2359bc3f51fd3e680aecc06edb18f6f7fc901651a38a3476348868b089518469bf194f19e7f9ca4261ed03062a2a2c37e6303e83ca09619c184fa4304b17100407ee3fb262ff391cc28efca2884bccb60027e00141eda5c4fff696a072d2b9bf81b4c218ab749604e6499801aa68b8bfd61c0cd27249458b23da4b2178ed44d856b0186f37807a0540ba0926d2059d1df13e5f6574dc33a48b692ff09b718b7742b28b2920454e0d4cc2e6231dbfe2d009fb7c8bb68893f2d352a7215fccb8c5794462391b89dde2a584e1ba64b08b310010ac56d0e8273c77190e6672f50ccb63b4a2f26558fedfc14de3d837ddb7b936403a3075a740050552266a9b09f544c5b1d7ed3e0952146f8764637ec5c2c94dad57aaf5f1a23308610798c3d8355528169831aca24ca27747ffeff677e54da257cc90f47c09b37b694c7e96d1706a075164464b8f1e14b0c12ceaf48a593690600cb5bcae110dbf980424eeb4bbb075114175c2733dce31054faf14c3881bb084566147b3996119318a6688815c1de0f9c05f63b3b0c0f8a68f866b61bc7cd323ff64a0014eb7fff09050908400008860009050501080001050909043f000657a707fa0a240102000502010209240302000306040808240802020002a9052405040607240502feaadc1124060404050600070007000100020081052406000005240005000d240f0103000000090003005908241cfffe06db0c072414d5f60b0009050202000410060450074efd4c41c53e61fa16b19fae792afc6bbfdc8217923fcb88fa6157d23257e68e05e2b4e89ccededb94d390e523c7dec3c011b8b8e36b57e883"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x145, &(0x7f0000000e40)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x133, 0x1, 0x1, 0x6, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0xf9, {{0xb, 0x24, 0x6, 0x0, 0x0, "a522de77de50"}, {0x5, 0x24, 0x0, 0xe47e}, {0xd, 0x24, 0xf, 0x1, 0xdd, 0x4, 0x4, 0x16}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x3}, @acm={0x4, 0x24, 0x2, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x7}, @country_functional={0xc, 0x24, 0x7, 0xc1, 0x5, [0x1000, 0x64, 0xff]}, @mdlm_detail={0xbb, 0x24, 0x13, 0xf9, "d3b0ea68b477e3a96692126f57cef22674e41d4eeee54db697fd13d628627367d4197c366a400f443e042b931f0b64e8029fe317a232096b654a67e930c74f403975392c9ba79e19e652b7e1979560c3d3acd8b8a8563aa74679c98ba9b930d494e6c06a8594ca279257c5ff889e4e84802419b80a053c06f84ac5c1bb39d2d5794c48cf3df2425d55b178a4b70bed91d3adadc568272a17dc461a3b762b3c56fc793df24f3d5d239fbafdcaa1fdf9740fdccf3144fc7b"}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x5, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x9, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x9, 0x2}}}}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x300, 0x4, 0x9, 0x0, 0x8, 0xd}, 0xb0, &(0x7f00000008c0)={0x5, 0xf, 0xb0, 0x6, [@generic={0x3, 0x10, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x2, 0xe, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x3, 0xf00, 0x3}, @generic={0x77, 0x10, 0xb, "bcd26de9cd33abdf3dcc5c6600999f69973df173516da390351abbb26ec07c32056a6f4fac39c3cedb2f34efbe3330127876c9616189ceba97878921b9eb3e84f0041f5f8cb0893cad7a2ace39aac30481ba30d35eeb4379f53eef82287e0f9553e0717a7a511f62edcd79daba38091449ace36e"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "42994e351a8caa2a91615ea95304f9fc"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x1, 0x6, 0x5}]}, 0x6, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x814}}, {0x30, &(0x7f0000000b00)=@string={0x30, 0x3, "8de8266d69e52588d0a1426d17d118667bfb521135e186a115c3eaf553e1bf6d359e3755a2603369699a5af21340"}}, {0xfe, &(0x7f0000000b40)=@string={0xfe, 0x3, "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"}}, {0x1c, &(0x7f0000000c40)=@string={0x1c, 0x3, "1c5eb14b1eb0bc315fb7b275efab88ac2aee2dad4667a0c33077"}}, {0x91, &(0x7f0000000c80)=ANY=[@ANYBLOB="91033a83d5ba4141ede8944b9f4f71d590bc4d0a35449ee283c9a5798cc35327a272723433c57d3105bb058bd9d2ea1273ee6688eca281ed90bb22110781aa333bd7da4842b2513aee4ba5526615f1e5a17e58e570edc105fea5bed8da0a4a1f05f9a97b4dffd41be81ea92f07c716a63b0d5f2660a949165757e82c924df9dc3f0f0e5b20e3f4902a3386c83a4d0a6b12"]}]}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000dc0)) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000094c125eaa9081101c86d00000001090212000100000000090400000089263c00"], 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x5) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) write$binfmt_elf64(r7, &(0x7f0000000240)=ANY=[], 0x78) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x4}, 0x10) sendto$inet(r7, &(0x7f0000000180)="05", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0), 0x8) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, &(0x7f0000000080)="0f81cf8fe978e11766b8f9008ed8c442d9ae819c3100000f094163be0000000066baf80cb87ce12584efc4a2b5bee1ed0f952af20f090f01ca", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000001c0)={0x30, 0xa, 0x0, "b75c89e7a20c8eac82ad0416bb1844038d2cd97c945462f31638b5394c00"}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)) 0s ago: executing program 3 (id=1965): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket(0x200000100000011, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000007c0)={{0x10000, 0x2, 0xb, 0x2, 0x0, 0x81, 0x9b, 0x7, 0x4, 0x87, 0x8, 0x7}, {0x18f002, 0x4000, 0xa, 0x3, 0x8, 0xb, 0x92, 0x9, 0x8, 0x9, 0xa, 0x2}, {0x6000, 0x5000, 0xd, 0xec, 0xb3, 0xfb, 0x2, 0x4, 0xe3, 0x56, 0x39, 0xfe}, {0xd000, 0x4, 0xb, 0xd5, 0xf8, 0x3, 0x7f, 0x8, 0x5, 0x6, 0x4, 0xb4}, {0x4000, 0x100000, 0x0, 0x67, 0x1, 0x8, 0x6, 0x3, 0x5f, 0xbe, 0x3, 0x1}, {0x6000, 0x6000, 0xc, 0x2, 0x1, 0xfd, 0x0, 0x2, 0x10, 0xa7, 0x4, 0x7}, {0xb6ff58cdf5116350, 0x1, 0x8, 0x2, 0xf1, 0x0, 0x4, 0xf3, 0x5, 0x3, 0x8, 0x40}, {0x1000, 0x4000, 0x9, 0x10, 0xe, 0x4, 0xf9, 0x3, 0x1, 0x5, 0x8, 0xe}, {0x1000, 0x3}, {0x0, 0x1}, 0x0, 0x0, 0x2, 0x20100, 0x6, 0x4000, 0x7004, [0x8000000000000000, 0x8, 0x6cd2, 0x3]}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000002580)=""/107}) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000004a150112790001020301090224000101000000090400000003010000092100000001220000090581030000000000"], 0x0) ioctl$SNAPSHOT_FREE(r7, 0x3305) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)) kernel console output (not intermixed with test programs): B0 [ 348.872532][ T5262] cp210x 8-1:0.76: device disconnected [ 348.924898][ T5262] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 348.930627][ T5262] cp210x 8-1:0.12: device disconnected [ 348.936904][ T5262] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 348.940921][ T5262] cp210x 8-1:0.63: device disconnected [ 349.040934][ T5228] Bluetooth: hci1: ISO packet for unknown connection handle 2062 [ 349.099346][T11193] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 349.130852][T11177] Restarting kernel threads ... done. [ 349.275298][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 349.437837][T11206] 9pnet_virtio: no channels available for device syz [ 349.504715][T11206] random: crng reseeded on system resumption [ 349.889557][T11206] Restarting kernel threads ... done. [ 350.073637][T11221] random: crng reseeded on system resumption [ 350.251800][ T5228] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 350.350731][T11221] Restarting kernel threads ... done. [ 350.375310][T11241] random: crng reseeded on system resumption [ 350.469898][ T39] audit: type=1326 audit(1721620903.151:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11245 comm="syz.1.1520" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7fb575b59 code=0x0 [ 350.687090][T11241] Restarting kernel threads ... done. [ 351.925350][ T39] audit: type=1400 audit(1721620904.601:440): avc: denied { map } for pid=11274 comm="syz.0.1530" path="/dev/vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 353.199224][T11287] bond0: entered promiscuous mode [ 353.201236][T11287] bond_slave_0: entered promiscuous mode [ 353.203775][T11287] bond_slave_1: entered promiscuous mode [ 353.335659][T11287] bond0 (unregistering): left promiscuous mode [ 353.341885][T11287] bond_slave_0: left promiscuous mode [ 353.344726][T11287] bond_slave_1: left promiscuous mode [ 353.348645][T11287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.356675][T11287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.364136][T11287] bond0 (unregistering): Released all slaves [ 354.616703][ T5228] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 354.960741][ T39] audit: type=1400 audit(1721620907.631:441): avc: denied { map } for pid=11316 comm="syz.2.1541" path="/dev/nullb0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 355.060914][T11312] random: crng reseeded on system resumption [ 355.645787][ T39] audit: type=1400 audit(1721620908.321:442): avc: denied { bind } for pid=11323 comm="syz.2.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 355.668907][ C3] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 355.744877][T11333] 9pnet_virtio: no channels available for device syz [ 355.797166][T11333] random: crng reseeded on system resumption [ 356.077689][T11333] Restarting kernel threads ... done. [ 356.199118][ T5228] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 357.546269][T11376] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 357.555384][ T1100] Bluetooth: hci4: Frame reassembly failed (-84) [ 357.558303][ T1100] Bluetooth: hci4: Frame reassembly failed (-84) [ 358.033542][ T5227] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 358.156748][T11386] random: crng reseeded on system resumption [ 358.420841][T11386] Restarting kernel threads ... done. [ 359.100190][ T5227] Bluetooth: hci2: ISO packet for unknown connection handle 2062 [ 359.142605][T11403] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 359.393200][T11407] random: crng reseeded on system resumption [ 359.616233][ T5228] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 359.616241][ T5227] Bluetooth: hci4: command 0x1003 tx timeout [ 359.723411][T11407] Restarting kernel threads ... done. [ 361.058848][T11444] random: crng reseeded on system resumption [ 361.367452][ T5228] Bluetooth: hci2: ISO packet for unknown connection handle 2062 [ 361.386546][T11455] 9pnet_virtio: no channels available for device syz [ 361.438118][T11456] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 361.458380][T11444] Restarting kernel threads ... done. [ 361.505090][T11455] random: crng reseeded on system resumption [ 361.512107][T11463] 9pnet_virtio: no channels available for device syz [ 361.757621][T11455] Restarting kernel threads ... done. [ 362.045035][ T5228] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 362.056392][ T5228] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 362.384853][ T5228] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 362.800028][T11499] random: crng reseeded on system resumption [ 363.127573][T11499] Restarting kernel threads ... done. [ 363.427332][T11504] netlink: 'syz.0.1584': attribute type 2 has an invalid length. [ 363.704429][ C3] vkms_vblank_simulate: vblank timer overrun [ 363.715952][ T30] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 363.731023][ T5228] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 363.766013][ T5262] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 363.828115][T11513] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 363.845293][T11513] input: syz1 as /devices/virtual/input/input7 [ 363.918678][ T30] usb 6-1: config 0 has an invalid interface number: 76 but max is 3 [ 363.923131][ T30] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 363.927936][ T30] usb 6-1: config 0 has an invalid interface number: 12 but max is 3 [ 363.931266][ T30] usb 6-1: config 0 has an invalid interface number: 63 but max is 3 [ 363.934216][ T30] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.938571][ T30] usb 6-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 363.942623][ T30] usb 6-1: config 0 has no interface number 0 [ 363.945502][ T30] usb 6-1: config 0 has no interface number 1 [ 363.948678][ T30] usb 6-1: config 0 has no interface number 2 [ 363.951492][ T30] usb 6-1: config 0 interface 76 altsetting 8 endpoint 0xE has an invalid bInterval 116, changing to 10 [ 363.962247][ T30] usb 6-1: config 0 interface 76 altsetting 8 endpoint 0x1 has an invalid bInterval 143, changing to 7 [ 363.969580][ T30] usb 6-1: config 0 interface 76 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 363.974266][ T5262] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 363.978507][ T5262] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.983561][ T5262] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 363.987963][ T30] usb 6-1: config 0 interface 76 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 363.993137][ T30] usb 6-1: config 0 interface 76 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 363.999558][ T5262] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.004525][ T30] usb 6-1: too many endpoints for config 0 interface 12 altsetting 58: 40, using maximum allowed: 30 [ 364.010276][ T30] usb 6-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0x1, skipping [ 364.021488][ T30] usb 6-1: config 0 interface 12 altsetting 58 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 364.026434][ T30] usb 6-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0xC, skipping [ 364.031265][ T30] usb 6-1: config 0 interface 12 altsetting 58 has 6 endpoint descriptors, different from the interface descriptor's value: 40 [ 364.037390][ T5262] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 364.041129][ T5262] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 364.044420][ T5262] usb 5-1: Product: syz [ 364.046317][ T30] usb 6-1: config 0 interface 63 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 364.051563][ T30] usb 6-1: config 0 interface 76 has no altsetting 0 [ 364.054237][ T30] usb 6-1: config 0 interface 12 has no altsetting 0 [ 364.057221][ T5262] usb 5-1: Manufacturer: syz [ 364.076657][ T5262] cdc_wdm 5-1:1.0: skipping garbage [ 364.078877][ T5262] cdc_wdm 5-1:1.0: skipping garbage [ 364.101147][ T30] usb 6-1: Dual-Role OTG device on HNP port [ 364.104002][ T5262] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 364.106844][ T30] usb 6-1: New USB device found, idVendor=17a8, idProduct=0013, bcdDevice=8e.a6 [ 364.128724][ T5262] cdc_wdm 5-1:1.0: Unknown control protocol [ 364.134283][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.137761][ T30] usb 6-1: Product: syz [ 364.139489][ T30] usb 6-1: Manufacturer: syz [ 364.141471][ T30] usb 6-1: SerialNumber: syz [ 364.145663][ T30] usb 6-1: config 0 descriptor?? [ 364.150420][ T30] cp210x 6-1:0.76: cp210x converter detected [ 364.218024][ T5228] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 364.323179][ C0] wdm_int_callback: 13 callbacks suppressed [ 364.323202][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 364.328144][ C0] wdm_int_callback: 13 callbacks suppressed [ 364.328152][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 364.332714][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 364.335445][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 364.338520][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 364.341291][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 364.344075][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 364.346801][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 364.349514][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 364.352219][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 364.354981][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 364.355250][T11506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.357785][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 364.358001][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 364.358016][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 364.358214][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 364.363386][T11506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.363769][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 364.369629][T11506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.371529][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 364.376247][T11506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.377180][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 364.389795][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 364.392540][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 364.397116][ T824] usb 5-1: USB disconnect, device number 19 [ 364.397176][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 364.546370][ T30] cp210x 6-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 364.549435][ T30] cp210x 6-1:0.76: querying part number failed [ 364.555462][ T30] usb 6-1: cp210x converter now attached to ttyUSB0 [ 364.565301][ T30] cp210x 6-1:0.12: cp210x converter detected [ 364.568528][ T30] cp210x 6-1:0.12: failed to get vendor val 0x370b size 1: -71 [ 364.572492][ T30] cp210x 6-1:0.12: querying part number failed [ 364.583674][ T30] usb 6-1: cp210x converter now attached to ttyUSB1 [ 364.592603][ T30] cp210x 6-1:0.63: cp210x converter detected [ 364.595575][ T30] cp210x 6-1:0.63: failed to get vendor val 0x370b size 1: -71 [ 364.601149][ T30] cp210x 6-1:0.63: querying part number failed [ 364.610785][ T30] usb 6-1: cp210x converter now attached to ttyUSB2 [ 364.619619][ T30] usb 6-1: USB disconnect, device number 20 [ 364.658042][ T30] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 364.661795][ T30] cp210x 6-1:0.76: device disconnected [ 364.668974][ T30] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 364.673218][ T30] cp210x 6-1:0.12: device disconnected [ 364.678287][ T30] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 364.681809][ T30] cp210x 6-1:0.63: device disconnected [ 365.230285][ T5228] Bluetooth: hci1: ISO packet for unknown connection handle 2062 [ 365.259933][T11534] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 365.265385][T11534] trusted_key: encrypted_key: insufficient parameters specified [ 365.269828][ T5228] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 365.326456][T11538] random: crng reseeded on system resumption [ 365.563935][T11551] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 365.571470][ T96] Bluetooth: hci4: Frame reassembly failed (-84) [ 365.645026][T11538] Restarting kernel threads ... done. [ 365.906031][ T824] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 366.087883][ T824] usb 8-1: config 0 has an invalid interface number: 76 but max is 3 [ 366.091163][ T824] usb 8-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 366.094743][ T824] usb 8-1: config 0 has an invalid interface number: 12 but max is 3 [ 366.098210][ T824] usb 8-1: config 0 has an invalid interface number: 63 but max is 3 [ 366.101574][ T824] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.105619][ T824] usb 8-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 366.109370][ T824] usb 8-1: config 0 has no interface number 0 [ 366.111972][ T824] usb 8-1: config 0 has no interface number 1 [ 366.114179][ T824] usb 8-1: config 0 has no interface number 2 [ 366.116774][ T824] usb 8-1: config 0 interface 76 altsetting 8 endpoint 0xE has an invalid bInterval 116, changing to 10 [ 366.120620][ T824] usb 8-1: config 0 interface 76 altsetting 8 endpoint 0x1 has an invalid bInterval 143, changing to 7 [ 366.124688][ T824] usb 8-1: config 0 interface 76 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 366.128838][ T824] usb 8-1: config 0 interface 76 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 366.132659][ T824] usb 8-1: config 0 interface 76 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 366.138627][ T824] usb 8-1: too many endpoints for config 0 interface 12 altsetting 58: 40, using maximum allowed: 30 [ 366.143218][ T824] usb 8-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0x1, skipping [ 366.147670][ T824] usb 8-1: config 0 interface 12 altsetting 58 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 366.152370][ T824] usb 8-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0xC, skipping [ 366.156924][ T824] usb 8-1: config 0 interface 12 altsetting 58 has 6 endpoint descriptors, different from the interface descriptor's value: 40 [ 366.162546][ T824] usb 8-1: config 0 interface 63 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 366.167940][ T824] usb 8-1: config 0 interface 76 has no altsetting 0 [ 366.176945][ T824] usb 8-1: config 0 interface 12 has no altsetting 0 [ 366.183107][ T824] usb 8-1: Dual-Role OTG device on HNP port [ 366.186143][ T824] usb 8-1: New USB device found, idVendor=17a8, idProduct=0013, bcdDevice=8e.a6 [ 366.190023][ T824] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.193450][ T824] usb 8-1: Product: syz [ 366.195351][ T824] usb 8-1: Manufacturer: syz [ 366.197539][ T824] usb 8-1: SerialNumber: syz [ 366.202136][ T824] usb 8-1: config 0 descriptor?? [ 366.207803][ T824] cp210x 8-1:0.76: cp210x converter detected [ 366.419399][T11541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.423542][T11541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.432224][T11541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.436313][T11541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.486102][ T825] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 366.602676][ T824] cp210x 8-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 366.610755][ T824] cp210x 8-1:0.76: querying part number failed [ 366.615541][ T824] usb 8-1: cp210x converter now attached to ttyUSB0 [ 366.624757][ T824] cp210x 8-1:0.12: cp210x converter detected [ 366.627849][ T824] cp210x 8-1:0.12: failed to get vendor val 0x370b size 1: -71 [ 366.631678][ T824] cp210x 8-1:0.12: querying part number failed [ 366.636568][ T824] usb 8-1: cp210x converter now attached to ttyUSB1 [ 366.642999][ T824] cp210x 8-1:0.63: cp210x converter detected [ 366.647019][ T824] cp210x 8-1:0.63: failed to get vendor val 0x370b size 1: -71 [ 366.650327][ T824] cp210x 8-1:0.63: querying part number failed [ 366.654809][ T824] usb 8-1: cp210x converter now attached to ttyUSB2 [ 366.659812][ T824] usb 8-1: USB disconnect, device number 18 [ 366.667669][ T824] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 366.671638][ T824] cp210x 8-1:0.76: device disconnected [ 366.678550][ T824] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 366.680957][ T825] usb 6-1: config 0 has an invalid interface number: 76 but max is 3 [ 366.682213][ T824] cp210x 8-1:0.12: device disconnected [ 366.684777][ T825] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 366.684794][ T825] usb 6-1: config 0 has an invalid interface number: 12 but max is 3 [ 366.684808][ T825] usb 6-1: config 0 has an invalid interface number: 63 but max is 3 [ 366.684822][ T825] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.684836][ T825] usb 6-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 366.684851][ T825] usb 6-1: config 0 has no interface number 0 [ 366.690020][ T824] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 366.695878][ T825] usb 6-1: config 0 has no interface number 1 [ 366.697506][ T824] cp210x 8-1:0.63: device disconnected [ 366.700725][ T825] usb 6-1: config 0 has no interface number 2 [ 366.717202][ T825] usb 6-1: config 0 interface 76 altsetting 8 endpoint 0xE has an invalid bInterval 116, changing to 10 [ 366.721666][ T825] usb 6-1: config 0 interface 76 altsetting 8 endpoint 0x1 has an invalid bInterval 143, changing to 7 [ 366.726163][ T825] usb 6-1: config 0 interface 76 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 366.730292][ T825] usb 6-1: config 0 interface 76 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 366.734351][ T825] usb 6-1: config 0 interface 76 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 366.740321][ T825] usb 6-1: too many endpoints for config 0 interface 12 altsetting 58: 40, using maximum allowed: 30 [ 366.745245][ T825] usb 6-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0x1, skipping [ 366.750252][ T825] usb 6-1: config 0 interface 12 altsetting 58 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 366.755174][ T825] usb 6-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0xC, skipping [ 366.760248][ T825] usb 6-1: config 0 interface 12 altsetting 58 has 6 endpoint descriptors, different from the interface descriptor's value: 40 [ 366.765741][ T825] usb 6-1: config 0 interface 63 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 366.771448][ T825] usb 6-1: config 0 interface 76 has no altsetting 0 [ 366.774580][ T825] usb 6-1: config 0 interface 12 has no altsetting 0 [ 366.781121][ T825] usb 6-1: Dual-Role OTG device on HNP port [ 366.783862][ T825] usb 6-1: New USB device found, idVendor=17a8, idProduct=0013, bcdDevice=8e.a6 [ 366.788195][ T825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.791606][ T825] usb 6-1: Product: syz [ 366.793251][ T825] usb 6-1: Manufacturer: syz [ 366.795087][ T825] usb 6-1: SerialNumber: syz [ 366.799526][ T825] usb 6-1: config 0 descriptor?? [ 366.805126][ T825] cp210x 6-1:0.76: cp210x converter detected [ 367.021445][T11553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.025421][T11553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.034740][T11553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.038622][T11553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.202072][ T825] cp210x 6-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 367.209011][ T825] cp210x 6-1:0.76: querying part number failed [ 367.214268][ T825] usb 6-1: cp210x converter now attached to ttyUSB0 [ 367.221761][ T825] cp210x 6-1:0.12: cp210x converter detected [ 367.225169][ T825] cp210x 6-1:0.12: failed to get vendor val 0x370b size 1: -71 [ 367.240335][ T825] cp210x 6-1:0.12: querying part number failed [ 367.245466][ T825] usb 6-1: cp210x converter now attached to ttyUSB1 [ 367.252931][ T825] cp210x 6-1:0.63: cp210x converter detected [ 367.255922][ T825] cp210x 6-1:0.63: failed to get vendor val 0x370b size 1: -71 [ 367.259078][ T825] cp210x 6-1:0.63: querying part number failed [ 367.263762][ T825] usb 6-1: cp210x converter now attached to ttyUSB2 [ 367.268226][ T825] usb 6-1: USB disconnect, device number 21 [ 367.276047][ T825] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 367.279654][ T825] cp210x 6-1:0.76: device disconnected [ 367.286236][ T825] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 367.289813][ T825] cp210x 6-1:0.12: device disconnected [ 367.295780][ T825] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 367.299835][ T825] cp210x 6-1:0.63: device disconnected [ 367.616119][ T5227] Bluetooth: hci4: command 0x1003 tx timeout [ 367.616147][ T5228] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 367.824400][ T5227] Bluetooth: hci1: ISO packet for unknown connection handle 2062 [ 367.850079][T11571] random: crng reseeded on system resumption [ 367.862299][T11575] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 367.871015][T11575] trusted_key: encrypted_key: insufficient parameters specified [ 368.024340][ T5227] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 368.084158][ T5227] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 368.143458][T11571] Restarting kernel threads ... done. [ 368.236577][T11584] 9pnet_virtio: no channels available for device syz [ 368.250478][T11584] random: crng reseeded on system resumption [ 368.490400][T11584] Restarting kernel threads ... done. [ 368.565771][T11587] netlink: 'syz.3.1605': attribute type 2 has an invalid length. [ 368.896690][ T825] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 369.111381][ T825] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 369.115268][ T825] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.131909][ T825] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 369.135038][ T825] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.145505][ T825] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 369.149544][ T825] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 369.152942][ T825] usb 8-1: Product: syz [ 369.154726][ T825] usb 8-1: Manufacturer: syz [ 369.165345][ T825] cdc_wdm 8-1:1.0: skipping garbage [ 369.167317][ T825] cdc_wdm 8-1:1.0: skipping garbage [ 369.171968][ T825] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 369.174629][ T825] cdc_wdm 8-1:1.0: Unknown control protocol [ 369.419113][ C2] wdm_int_callback: 10 callbacks suppressed [ 369.419130][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 369.424324][ C2] wdm_int_callback: 10 callbacks suppressed [ 369.424337][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 369.429721][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 369.432371][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 369.434872][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 369.436298][ T825] usb 8-1: USB disconnect, device number 19 [ 369.437653][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 369.442060][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 369.473784][T11612] random: crng reseeded on system resumption [ 369.480014][ T5227] Bluetooth: hci1: ISO packet for unknown connection handle 2062 [ 369.550270][T11618] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 369.558145][T11618] trusted_key: encrypted_key: insufficient parameters specified [ 369.653739][ T5227] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 369.708637][ T5227] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 369.751326][T11612] Restarting kernel threads ... done. [ 370.430071][T11632] random: crng reseeded on system resumption [ 370.974899][T11632] Restarting kernel threads ... done. [ 371.527421][ T5227] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 371.587284][ T5227] Bluetooth: hci0: ISO packet for unknown connection handle 2062 [ 371.639874][T11655] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 371.645104][T11655] trusted_key: encrypted_key: insufficient parameters specified [ 371.649840][ T5227] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 371.718046][T11664] netlink: 'syz.3.1624': attribute type 2 has an invalid length. [ 371.726483][T11663] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 371.736959][T11663] input: syz1 as /devices/virtual/input/input8 [ 372.055975][ T825] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 372.240371][ T825] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 372.245170][ T825] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.253493][ T825] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 372.257692][ T825] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.264544][ T825] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 372.271818][ T825] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 372.275196][ T825] usb 8-1: Product: syz [ 372.278701][ T825] usb 8-1: Manufacturer: syz [ 372.292115][ T825] cdc_wdm 8-1:1.0: skipping garbage [ 372.294609][ T825] cdc_wdm 8-1:1.0: skipping garbage [ 372.300529][ T825] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 372.303169][ T825] cdc_wdm 8-1:1.0: Unknown control protocol [ 372.506558][T11674] netlink: 'syz.0.1626': attribute type 2 has an invalid length. [ 372.543301][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 372.546160][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 372.548871][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 372.551717][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 372.554871][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 372.558566][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 372.561850][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 372.564632][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 372.567329][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 372.569928][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 372.573243][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 372.577418][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 372.582134][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 372.585095][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 372.596538][ T825] usb 8-1: USB disconnect, device number 20 [ 372.598853][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 372.846107][T11151] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 373.038287][T11151] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 373.041901][T11151] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.049579][T11151] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 373.054106][T11151] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.061106][T11151] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 373.065251][T11151] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 373.070351][T11151] usb 5-1: Product: syz [ 373.071972][T11151] usb 5-1: Manufacturer: syz [ 373.081989][T11151] cdc_wdm 5-1:1.0: skipping garbage [ 373.084139][T11151] cdc_wdm 5-1:1.0: skipping garbage [ 373.091044][T11151] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 373.094102][T11151] cdc_wdm 5-1:1.0: Unknown control protocol [ 373.341113][T11151] usb 5-1: USB disconnect, device number 20 [ 373.343801][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 373.522936][T11685] netlink: 'syz.3.1628': attribute type 2 has an invalid length. [ 373.769837][T11696] random: crng reseeded on system resumption [ 373.886055][ T825] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 373.993977][T11696] Restarting kernel threads ... done. [ 374.071252][ T825] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 374.074653][ T825] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.078694][ T825] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 374.086153][ T825] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.094104][ T825] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 374.098008][ T825] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 374.101325][ T825] usb 8-1: Product: syz [ 374.103299][ T825] usb 8-1: Manufacturer: syz [ 374.111961][ T825] cdc_wdm 8-1:1.0: skipping garbage [ 374.114264][ T825] cdc_wdm 8-1:1.0: skipping garbage [ 374.118483][ T825] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 374.121436][ T825] cdc_wdm 8-1:1.0: Unknown control protocol [ 374.406177][ T824] usb 8-1: USB disconnect, device number 21 [ 374.408885][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 374.445716][ T5227] Bluetooth: hci2: ISO packet for unknown connection handle 2062 [ 374.494417][T11704] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 374.508796][T11704] trusted_key: encrypted_key: insufficient parameters specified [ 374.627036][ T5227] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 374.728349][T11732] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 374.743908][T11732] input: syz1 as /devices/virtual/input/input9 [ 375.263218][ T5227] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 375.298343][T11740] netlink: 'syz.3.1636': attribute type 2 has an invalid length. [ 375.636570][T11151] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 375.742931][ T5227] Bluetooth: hci2: ISO packet for unknown connection handle 2062 [ 375.775276][T11759] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 375.781539][T11759] trusted_key: encrypted_key: insufficient parameters specified [ 375.856780][T11151] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 375.860652][T11151] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.865476][T11151] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 375.870103][T11151] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.877875][T11151] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 375.882263][T11151] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 375.888565][T11151] usb 8-1: Product: syz [ 375.890590][T11151] usb 8-1: Manufacturer: syz [ 375.916764][T11151] cdc_wdm 8-1:1.0: skipping garbage [ 375.919139][T11151] cdc_wdm 8-1:1.0: skipping garbage [ 375.924688][T11151] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 375.927569][T11151] cdc_wdm 8-1:1.0: Unknown control protocol [ 376.009502][ T5288] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 376.155188][ C3] wdm_int_callback: 54 callbacks suppressed [ 376.155207][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 376.160462][ C3] wdm_int_callback: 54 callbacks suppressed [ 376.160477][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 376.165859][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 376.168347][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 376.171405][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 376.174210][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 376.177041][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 376.180360][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 376.183057][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 376.186157][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 376.188770][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 376.191194][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 376.193849][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 376.196526][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 376.199102][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 376.201972][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 376.204912][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 376.207669][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 376.208807][ T5288] usb 7-1: config 0 has an invalid interface number: 76 but max is 3 [ 376.210568][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 376.215013][ T5288] usb 7-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 376.216076][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 376.217043][ T35] usb 8-1: USB disconnect, device number 22 [ 376.219364][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 376.220826][ T5288] usb 7-1: config 0 has an invalid interface number: 12 but max is 3 [ 376.231730][ T5288] usb 7-1: config 0 has an invalid interface number: 63 but max is 3 [ 376.234706][ T5288] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.247123][ T5288] usb 7-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 376.255155][ T5288] usb 7-1: config 0 has no interface number 0 [ 376.257976][ T5288] usb 7-1: config 0 has no interface number 1 [ 376.267377][ T5288] usb 7-1: config 0 has no interface number 2 [ 376.276119][ T5288] usb 7-1: config 0 interface 76 altsetting 8 endpoint 0xE has an invalid bInterval 116, changing to 10 [ 376.280825][ T5288] usb 7-1: config 0 interface 76 altsetting 8 endpoint 0x1 has an invalid bInterval 143, changing to 7 [ 376.286810][ T5288] usb 7-1: config 0 interface 76 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 376.295991][ T5288] usb 7-1: config 0 interface 76 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 376.300832][ T5288] usb 7-1: config 0 interface 76 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 376.306953][ T5288] usb 7-1: too many endpoints for config 0 interface 12 altsetting 58: 40, using maximum allowed: 30 [ 376.311972][ T5288] usb 7-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0x1, skipping [ 376.316584][ T5288] usb 7-1: config 0 interface 12 altsetting 58 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 376.328725][ T5288] usb 7-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0xC, skipping [ 376.332915][ T5288] usb 7-1: config 0 interface 12 altsetting 58 has 6 endpoint descriptors, different from the interface descriptor's value: 40 [ 376.338770][ T5288] usb 7-1: config 0 interface 63 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 376.345551][ T5288] usb 7-1: config 0 interface 76 has no altsetting 0 [ 376.349714][ T5288] usb 7-1: config 0 interface 12 has no altsetting 0 [ 376.363837][ T5288] usb 7-1: Dual-Role OTG device on HNP port [ 376.377378][ T5288] usb 7-1: New USB device found, idVendor=17a8, idProduct=0013, bcdDevice=8e.a6 [ 376.381652][ T5288] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.385313][ T5288] usb 7-1: Product: syz [ 376.391952][ T5288] usb 7-1: Manufacturer: syz [ 376.394139][ T5288] usb 7-1: SerialNumber: syz [ 376.406052][ T5288] usb 7-1: config 0 descriptor?? [ 376.429482][ T5288] cp210x 7-1:0.76: cp210x converter detected [ 376.496790][T11821] random: crng reseeded on system resumption [ 376.746810][T11757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.751514][T11757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.760956][T11757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.764763][T11757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.917349][ T5288] cp210x 7-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 376.920301][ T5288] cp210x 7-1:0.76: querying part number failed [ 376.938949][ T5288] usb 7-1: cp210x converter now attached to ttyUSB0 [ 376.961994][ T5288] cp210x 7-1:0.12: cp210x converter detected [ 376.980657][ T5288] cp210x 7-1:0.12: failed to get vendor val 0x370b size 1: -71 [ 376.983980][ T5288] cp210x 7-1:0.12: querying part number failed [ 376.991898][ T5288] usb 7-1: cp210x converter now attached to ttyUSB1 [ 377.000812][ T5288] cp210x 7-1:0.63: cp210x converter detected [ 377.003905][ T5288] cp210x 7-1:0.63: failed to get vendor val 0x370b size 1: -71 [ 377.007349][ T5288] cp210x 7-1:0.63: querying part number failed [ 377.012499][ T5288] usb 7-1: cp210x converter now attached to ttyUSB2 [ 377.017146][T11821] Restarting kernel threads ... done. [ 377.025466][ T5288] usb 7-1: USB disconnect, device number 12 [ 377.050330][ T5227] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 377.061417][ T5288] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 377.070333][ T5288] cp210x 7-1:0.76: device disconnected [ 377.084846][ T5288] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 377.088875][ T5288] cp210x 7-1:0.12: device disconnected [ 377.098653][ T5288] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 377.102337][ T5288] cp210x 7-1:0.63: device disconnected [ 377.194126][T11837] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1647'. [ 377.468139][T11847] random: crng reseeded on system resumption [ 377.525955][ T5262] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 377.734866][ T5262] usb 8-1: config 0 has an invalid interface number: 76 but max is 3 [ 377.738539][ T5262] usb 8-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 377.741755][ T5262] usb 8-1: config 0 has an invalid interface number: 12 but max is 3 [ 377.741775][ T5262] usb 8-1: config 0 has an invalid interface number: 63 but max is 3 [ 377.741792][ T5262] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.741808][ T5262] usb 8-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 377.756922][ T5262] usb 8-1: config 0 has no interface number 0 [ 377.759679][ T5262] usb 8-1: config 0 has no interface number 1 [ 377.762320][ T5262] usb 8-1: config 0 has no interface number 2 [ 377.765471][ T5262] usb 8-1: config 0 interface 76 altsetting 8 endpoint 0xE has an invalid bInterval 116, changing to 10 [ 377.770717][ T5262] usb 8-1: config 0 interface 76 altsetting 8 endpoint 0x1 has an invalid bInterval 143, changing to 7 [ 377.775609][ T5262] usb 8-1: config 0 interface 76 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 377.781894][ T5262] usb 8-1: config 0 interface 76 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 377.786785][ T5262] usb 8-1: config 0 interface 76 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 377.792798][ T5262] usb 8-1: too many endpoints for config 0 interface 12 altsetting 58: 40, using maximum allowed: 30 [ 377.797914][ T5262] usb 8-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0x1, skipping [ 377.802288][ T5262] usb 8-1: config 0 interface 12 altsetting 58 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 377.806811][ T5262] usb 8-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0xC, skipping [ 377.811266][ T5262] usb 8-1: config 0 interface 12 altsetting 58 has 6 endpoint descriptors, different from the interface descriptor's value: 40 [ 377.816626][ T5262] usb 8-1: config 0 interface 63 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 377.821555][ T5262] usb 8-1: config 0 interface 76 has no altsetting 0 [ 377.823953][ T5262] usb 8-1: config 0 interface 12 has no altsetting 0 [ 377.831275][ T5262] usb 8-1: Dual-Role OTG device on HNP port [ 377.834285][ T5262] usb 8-1: New USB device found, idVendor=17a8, idProduct=0013, bcdDevice=8e.a6 [ 377.838601][ T5262] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.841938][ T5262] usb 8-1: Product: syz [ 377.843490][ T5262] usb 8-1: Manufacturer: syz [ 377.845246][ T5262] usb 8-1: SerialNumber: syz [ 377.857411][ T5262] usb 8-1: config 0 descriptor?? [ 377.862434][ T5262] cp210x 8-1:0.76: cp210x converter detected [ 378.066647][T11839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.071166][T11839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.080557][T11839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.084336][T11839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.106770][ T5262] cp210x 8-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 378.109874][ T5262] cp210x 8-1:0.76: querying part number failed [ 378.120075][ T5262] usb 8-1: cp210x converter now attached to ttyUSB0 [ 378.129637][ T5262] cp210x 8-1:0.12: cp210x converter detected [ 378.132801][ T5262] cp210x 8-1:0.12: failed to get vendor val 0x370b size 1: -71 [ 378.136828][ T5262] cp210x 8-1:0.12: querying part number failed [ 378.142121][ T5262] usb 8-1: cp210x converter now attached to ttyUSB1 [ 378.149701][ T5262] cp210x 8-1:0.63: cp210x converter detected [ 378.153475][ T5262] cp210x 8-1:0.63: failed to get vendor val 0x370b size 1: -71 [ 378.156626][ T5262] cp210x 8-1:0.63: querying part number failed [ 378.161830][ T5262] usb 8-1: cp210x converter now attached to ttyUSB2 [ 378.167180][ T5262] usb 8-1: USB disconnect, device number 23 [ 378.174631][ T5262] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 378.179150][ T5262] cp210x 8-1:0.76: device disconnected [ 378.187020][ T5262] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 378.191303][ T5262] cp210x 8-1:0.12: device disconnected [ 378.198503][ T5262] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 378.202556][ T5262] cp210x 8-1:0.63: device disconnected [ 378.802872][T12000] random: crng reseeded on system resumption [ 378.857709][T11999] cgroup: fork rejected by pids controller in /syz1 [ 379.385921][ T5262] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 379.409929][T12115] random: crng reseeded on system resumption [ 379.599130][ T5262] usb 8-1: config 0 has an invalid interface number: 76 but max is 3 [ 379.604079][ T5262] usb 8-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 379.609915][ T5262] usb 8-1: config 0 has an invalid interface number: 12 but max is 3 [ 379.613526][ T5262] usb 8-1: config 0 has an invalid interface number: 63 but max is 3 [ 379.620793][ T5262] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.629133][ T5262] usb 8-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 379.633298][ T5262] usb 8-1: config 0 has no interface number 0 [ 379.637232][ T5262] usb 8-1: config 0 has no interface number 1 [ 379.639958][ T5262] usb 8-1: config 0 has no interface number 2 [ 379.642824][ T5262] usb 8-1: config 0 interface 76 altsetting 8 endpoint 0xE has an invalid bInterval 116, changing to 10 [ 379.651071][ T5262] usb 8-1: config 0 interface 76 altsetting 8 endpoint 0x1 has an invalid bInterval 143, changing to 7 [ 379.657035][ T5262] usb 8-1: config 0 interface 76 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 379.661818][ T5262] usb 8-1: config 0 interface 76 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 379.669666][ T5262] usb 8-1: config 0 interface 76 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 379.675436][ T5262] usb 8-1: too many endpoints for config 0 interface 12 altsetting 58: 40, using maximum allowed: 30 [ 379.681299][ T5262] usb 8-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0x1, skipping [ 379.688488][ T5262] usb 8-1: config 0 interface 12 altsetting 58 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 379.693729][ T5262] usb 8-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0xC, skipping [ 379.699896][ T5262] usb 8-1: config 0 interface 12 altsetting 58 has 6 endpoint descriptors, different from the interface descriptor's value: 40 [ 379.705657][ T5262] usb 8-1: config 0 interface 63 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 379.713779][ T5262] usb 8-1: config 0 interface 76 has no altsetting 0 [ 379.718063][ T5262] usb 8-1: config 0 interface 12 has no altsetting 0 [ 379.723598][ T5262] usb 8-1: Dual-Role OTG device on HNP port [ 379.730458][ T5262] usb 8-1: New USB device found, idVendor=17a8, idProduct=0013, bcdDevice=8e.a6 [ 379.734593][ T5262] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.739018][ T5262] usb 8-1: Product: syz [ 379.741015][ T5262] usb 8-1: Manufacturer: syz [ 379.743154][ T5262] usb 8-1: SerialNumber: syz [ 379.747591][ T5262] usb 8-1: config 0 descriptor?? [ 379.753321][ T5262] cp210x 8-1:0.76: cp210x converter detected [ 379.955623][T12095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.961292][T12095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.970619][T12095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.974410][T12095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.043840][T12227] random: crng reseeded on system resumption [ 380.089927][ T5262] cp210x 8-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 380.093153][ T5262] cp210x 8-1:0.76: querying part number failed [ 380.098595][ T5262] usb 8-1: cp210x converter now attached to ttyUSB0 [ 380.105777][ T5262] cp210x 8-1:0.12: cp210x converter detected [ 380.108932][ T5262] cp210x 8-1:0.12: failed to get vendor val 0x370b size 1: -71 [ 380.112018][ T5262] cp210x 8-1:0.12: querying part number failed [ 380.117156][ T5262] usb 8-1: cp210x converter now attached to ttyUSB1 [ 380.124631][ T5262] cp210x 8-1:0.63: cp210x converter detected [ 380.127925][ T5262] cp210x 8-1:0.63: failed to get vendor val 0x370b size 1: -71 [ 380.131246][ T5262] cp210x 8-1:0.63: querying part number failed [ 380.137370][ T5262] usb 8-1: cp210x converter now attached to ttyUSB2 [ 380.144440][ T5262] usb 8-1: USB disconnect, device number 24 [ 380.153752][ T5262] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 380.158496][ T5262] cp210x 8-1:0.76: device disconnected [ 380.167495][ T5262] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 380.172519][ T5262] cp210x 8-1:0.12: device disconnected [ 380.178744][ T5262] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 380.182793][ T5262] cp210x 8-1:0.63: device disconnected [ 380.490251][T12334] random: crng reseeded on system resumption [ 380.643399][ T5227] Bluetooth: hci0: ISO packet for unknown connection handle 2062 [ 380.712648][T12344] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 380.718139][T12344] trusted_key: encrypted_key: insufficient parameters specified [ 380.753052][ T5227] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 380.759670][ T5227] Bluetooth: hci2: unexpected event for opcode 0x0c1c [ 380.763296][T12334] Restarting kernel threads ... done. [ 381.017097][T12362] 9pnet_virtio: no channels available for device syz [ 381.030217][T12362] random: crng reseeded on system resumption [ 381.310512][T12369] 9pnet_virtio: no channels available for device syz [ 381.312904][T12362] Restarting kernel threads ... done. [ 381.357836][T12369] random: crng reseeded on system resumption [ 381.850815][ T5227] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 381.924007][T12483] random: crng reseeded on system resumption [ 381.926024][ T5262] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 382.107944][ T5262] usb 7-1: config 0 has an invalid interface number: 76 but max is 3 [ 382.111873][ T5262] usb 7-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 382.116525][ T5262] usb 7-1: config 0 has an invalid interface number: 12 but max is 3 [ 382.120210][ T5262] usb 7-1: config 0 has an invalid interface number: 63 but max is 3 [ 382.125224][ T5262] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.129779][ T5262] usb 7-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 382.133131][ T5262] usb 7-1: config 0 has no interface number 0 [ 382.136573][ T5262] usb 7-1: config 0 has no interface number 1 [ 382.140612][ T5262] usb 7-1: config 0 has no interface number 2 [ 382.143508][ T5262] usb 7-1: config 0 interface 76 altsetting 8 endpoint 0xE has an invalid bInterval 116, changing to 10 [ 382.147953][ T5262] usb 7-1: config 0 interface 76 altsetting 8 endpoint 0x1 has an invalid bInterval 143, changing to 7 [ 382.152945][ T5262] usb 7-1: config 0 interface 76 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 382.157747][ T5262] usb 7-1: config 0 interface 76 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 382.162627][ T5262] usb 7-1: config 0 interface 76 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 382.169564][ T5262] usb 7-1: too many endpoints for config 0 interface 12 altsetting 58: 40, using maximum allowed: 30 [ 382.174900][ T5262] usb 7-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0x1, skipping [ 382.179619][ T5262] usb 7-1: config 0 interface 12 altsetting 58 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 382.185099][ T5262] usb 7-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0xC, skipping [ 382.191450][ T5262] usb 7-1: config 0 interface 12 altsetting 58 has 6 endpoint descriptors, different from the interface descriptor's value: 40 [ 382.197577][ T5262] usb 7-1: config 0 interface 63 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 382.204536][ T5262] usb 7-1: config 0 interface 76 has no altsetting 0 [ 382.207641][ T5262] usb 7-1: config 0 interface 12 has no altsetting 0 [ 382.208059][T12483] Restarting kernel threads ... done. [ 382.214232][ T5262] usb 7-1: Dual-Role OTG device on HNP port [ 382.217339][ T5262] usb 7-1: New USB device found, idVendor=17a8, idProduct=0013, bcdDevice=8e.a6 [ 382.221277][ T5262] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.225541][ T5262] usb 7-1: Product: syz [ 382.227899][ T5262] usb 7-1: Manufacturer: syz [ 382.230530][ T5262] usb 7-1: SerialNumber: syz [ 382.235048][ T5262] usb 7-1: config 0 descriptor?? [ 382.242710][ T5262] cp210x 7-1:0.76: cp210x converter detected [ 382.257670][T12491] random: crng reseeded on system resumption [ 382.526503][T12422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.530350][T12422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.536660][T12422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.540662][T12422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.678922][ T5262] cp210x 7-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 382.685928][ T5262] cp210x 7-1:0.76: querying part number failed [ 382.690966][ T5262] usb 7-1: cp210x converter now attached to ttyUSB0 [ 382.701027][ T5262] cp210x 7-1:0.12: cp210x converter detected [ 382.704034][ T5262] cp210x 7-1:0.12: failed to get vendor val 0x370b size 1: -71 [ 382.707480][ T5262] cp210x 7-1:0.12: querying part number failed [ 382.712547][ T5262] usb 7-1: cp210x converter now attached to ttyUSB1 [ 382.720253][ T5262] cp210x 7-1:0.63: cp210x converter detected [ 382.723402][ T5262] cp210x 7-1:0.63: failed to get vendor val 0x370b size 1: -71 [ 382.726895][ T5262] cp210x 7-1:0.63: querying part number failed [ 382.731798][ T5262] usb 7-1: cp210x converter now attached to ttyUSB2 [ 382.736879][ T5262] usb 7-1: USB disconnect, device number 13 [ 382.744940][ T5262] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 382.767914][ T5262] cp210x 7-1:0.76: device disconnected [ 382.776151][ T5227] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 382.778543][ T5262] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 382.779676][ T5227] Bluetooth: hci2: unexpected event for opcode 0x0c1c [ 382.782626][ T5262] cp210x 7-1:0.12: device disconnected [ 382.791958][ T5262] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 382.800867][ T5262] cp210x 7-1:0.63: device disconnected [ 382.942400][T12604] random: crng reseeded on system resumption [ 383.193247][ T5227] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 383.199657][ T5227] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 383.232313][T12604] Restarting kernel threads ... done. [ 383.708263][T12722] 9pnet_virtio: no channels available for device syz [ 383.768470][T12722] random: crng reseeded on system resumption [ 384.270695][ T5227] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 384.273709][ T5227] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 384.537912][ T1359] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.210020][T12841] random: crng reseeded on system resumption [ 385.656860][ T5227] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 385.660427][ T5227] Bluetooth: hci2: unexpected event for opcode 0x0c1c [ 385.672180][T12841] Restarting kernel threads ... done. [ 386.051737][T12857] 9pnet_virtio: no channels available for device syz [ 386.095561][T12857] random: crng reseeded on system resumption [ 386.443916][T12967] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1703'. [ 386.752645][ T5227] Bluetooth: hci3: ISO packet for unknown connection handle 2062 [ 386.792943][T12979] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 386.802807][T12979] trusted_key: encrypted_key: insufficient parameters specified [ 386.974930][T12982] random: crng reseeded on system resumption [ 387.530833][T13120] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1712'. [ 387.590973][T13125] 9pnet_virtio: no channels available for device syz [ 387.639567][ T5227] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 387.649292][T13125] random: crng reseeded on system resumption [ 388.045330][ T5227] Bluetooth: hci2: ISO packet for unknown connection handle 2062 [ 388.091592][T13346] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 388.106722][T13346] trusted_key: encrypted_key: insufficient parameters specified [ 388.149915][T13351] random: crng reseeded on system resumption [ 388.436649][T13359] random: crng reseeded on system resumption [ 388.547071][ T5227] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 388.548580][ T5227] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 388.626572][T13503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1724'. [ 388.956708][T13359] Restarting kernel threads ... done. [ 389.109975][T13513] 9pnet_virtio: no channels available for device syz [ 389.171259][T13515] 9pnet_virtio: no channels available for device syz [ 389.216169][T13517] 9pnet_virtio: no channels available for device syz [ 389.244444][T13517] random: crng reseeded on system resumption [ 389.500360][T13517] Restarting kernel threads ... done. [ 389.789697][T13534] netlink: 'syz.0.1732': attribute type 2 has an invalid length. [ 390.115940][T11151] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 390.330333][T11151] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 390.333944][T11151] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.346967][T11151] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 390.350985][T11151] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.359418][T11151] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 390.363213][T11151] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 390.372351][T11151] usb 5-1: Product: syz [ 390.374199][T11151] usb 5-1: Manufacturer: syz [ 390.381145][T11151] cdc_wdm 5-1:1.0: skipping garbage [ 390.383176][T11151] cdc_wdm 5-1:1.0: skipping garbage [ 390.386884][T11151] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 390.389256][T11151] cdc_wdm 5-1:1.0: Unknown control protocol [ 390.487837][ T5227] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 390.496350][ T5227] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 390.635138][ C2] wdm_int_callback: 6 callbacks suppressed [ 390.635158][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 390.640625][ C2] wdm_int_callback: 6 callbacks suppressed [ 390.640633][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 390.645685][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 390.648855][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 390.651903][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 390.654488][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 390.657048][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 390.659622][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 390.662569][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 390.665569][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 390.668431][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 390.671204][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 390.673893][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 390.676611][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 390.679365][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 390.682123][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 390.685116][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 390.687818][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 390.690949][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 390.694329][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 390.719125][T11151] usb 5-1: USB disconnect, device number 21 [ 390.719191][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 390.816057][ T825] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 391.015686][ T825] usb 7-1: config 0 has an invalid interface number: 76 but max is 3 [ 391.025310][ T825] usb 7-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 391.029220][ T825] usb 7-1: config 0 has an invalid interface number: 12 but max is 3 [ 391.034992][ T825] usb 7-1: config 0 has an invalid interface number: 63 but max is 3 [ 391.038736][ T825] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.043034][ T825] usb 7-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 391.049523][ T825] usb 7-1: config 0 has no interface number 0 [ 391.051901][ T825] usb 7-1: config 0 has no interface number 1 [ 391.054353][ T825] usb 7-1: config 0 has no interface number 2 [ 391.057350][ T825] usb 7-1: config 0 interface 76 altsetting 8 endpoint 0xE has an invalid bInterval 116, changing to 10 [ 391.061665][ T825] usb 7-1: config 0 interface 76 altsetting 8 endpoint 0x1 has an invalid bInterval 143, changing to 7 [ 391.067911][ T825] usb 7-1: config 0 interface 76 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 391.072495][ T825] usb 7-1: config 0 interface 76 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 391.077818][ T825] usb 7-1: config 0 interface 76 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 391.084285][ T825] usb 7-1: too many endpoints for config 0 interface 12 altsetting 58: 40, using maximum allowed: 30 [ 391.089350][ T825] usb 7-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0x1, skipping [ 391.093993][ T825] usb 7-1: config 0 interface 12 altsetting 58 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 391.098806][ T825] usb 7-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0xC, skipping [ 391.111447][ T825] usb 7-1: config 0 interface 12 altsetting 58 has 6 endpoint descriptors, different from the interface descriptor's value: 40 [ 391.119491][ T825] usb 7-1: config 0 interface 63 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 391.124817][ T825] usb 7-1: config 0 interface 76 has no altsetting 0 [ 391.128981][ T825] usb 7-1: config 0 interface 12 has no altsetting 0 [ 391.134938][ T825] usb 7-1: Dual-Role OTG device on HNP port [ 391.139934][ T825] usb 7-1: New USB device found, idVendor=17a8, idProduct=0013, bcdDevice=8e.a6 [ 391.143487][ T825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.146799][ T825] usb 7-1: Product: syz [ 391.148605][ T825] usb 7-1: Manufacturer: syz [ 391.150395][ T825] usb 7-1: SerialNumber: syz [ 391.154802][ T825] usb 7-1: config 0 descriptor?? [ 391.160528][ T825] cp210x 7-1:0.76: cp210x converter detected [ 391.366898][T13552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.372686][T13552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.383967][T13552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.393594][T13552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.600948][ T825] cp210x 7-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 391.604228][ T825] cp210x 7-1:0.76: querying part number failed [ 391.609556][ T825] usb 7-1: cp210x converter now attached to ttyUSB0 [ 391.619173][ T825] cp210x 7-1:0.12: cp210x converter detected [ 391.621781][ T825] cp210x 7-1:0.12: failed to get vendor val 0x370b size 1: -71 [ 391.624572][ T825] cp210x 7-1:0.12: querying part number failed [ 391.631273][ T825] usb 7-1: cp210x converter now attached to ttyUSB1 [ 391.640376][ T825] cp210x 7-1:0.63: cp210x converter detected [ 391.643821][ T825] cp210x 7-1:0.63: failed to get vendor val 0x370b size 1: -71 [ 391.647307][ T825] cp210x 7-1:0.63: querying part number failed [ 391.648471][ T5227] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 391.651580][ T825] usb 7-1: cp210x converter now attached to ttyUSB2 [ 391.660770][ T825] usb 7-1: USB disconnect, device number 14 [ 391.671617][ T825] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 391.675665][ T825] cp210x 7-1:0.76: device disconnected [ 391.684090][ T825] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 391.686831][ T5227] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 391.691651][ T825] cp210x 7-1:0.12: device disconnected [ 391.700131][ T825] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 391.704066][ T825] cp210x 7-1:0.63: device disconnected [ 392.671046][ T5227] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 392.740661][T13592] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 392.752496][T13592] input: syz1 as /devices/virtual/input/input10 [ 392.959960][ T5227] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 392.963083][ T5227] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 393.516138][ T5262] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 393.704093][ T5262] usb 7-1: config 0 has an invalid interface number: 76 but max is 3 [ 393.710326][ T5262] usb 7-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 393.713524][ T5262] usb 7-1: config 0 has an invalid interface number: 12 but max is 3 [ 393.717932][ T5262] usb 7-1: config 0 has an invalid interface number: 63 but max is 3 [ 393.721385][ T5262] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.725165][ T5262] usb 7-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 393.729170][ T5262] usb 7-1: config 0 has no interface number 0 [ 393.731656][ T5262] usb 7-1: config 0 has no interface number 1 [ 393.734224][ T5262] usb 7-1: config 0 has no interface number 2 [ 393.737626][ T5262] usb 7-1: config 0 interface 76 altsetting 8 endpoint 0xE has an invalid bInterval 116, changing to 10 [ 393.742690][ T5262] usb 7-1: config 0 interface 76 altsetting 8 endpoint 0x1 has an invalid bInterval 143, changing to 7 [ 393.747877][ T5262] usb 7-1: config 0 interface 76 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 393.752642][ T5262] usb 7-1: config 0 interface 76 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 393.759481][ T5262] usb 7-1: config 0 interface 76 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 393.768594][ T5262] usb 7-1: too many endpoints for config 0 interface 12 altsetting 58: 40, using maximum allowed: 30 [ 393.774587][ T5262] usb 7-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0x1, skipping [ 393.779752][ T5262] usb 7-1: config 0 interface 12 altsetting 58 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 393.784812][ T5262] usb 7-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0xC, skipping [ 393.793412][ T5262] usb 7-1: config 0 interface 12 altsetting 58 has 6 endpoint descriptors, different from the interface descriptor's value: 40 [ 393.799450][ T5262] usb 7-1: config 0 interface 63 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 393.806426][ T5262] usb 7-1: config 0 interface 76 has no altsetting 0 [ 393.809982][ T5262] usb 7-1: config 0 interface 12 has no altsetting 0 [ 393.818418][ T5262] usb 7-1: Dual-Role OTG device on HNP port [ 393.825947][ T5262] usb 7-1: New USB device found, idVendor=17a8, idProduct=0013, bcdDevice=8e.a6 [ 393.830068][ T5262] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.833514][ T5262] usb 7-1: Product: syz [ 393.835343][ T5262] usb 7-1: Manufacturer: syz [ 393.839550][ T5262] usb 7-1: SerialNumber: syz [ 393.846877][ T5262] usb 7-1: config 0 descriptor?? [ 393.859583][ T5262] cp210x 7-1:0.76: cp210x converter detected [ 394.071679][T13606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.075414][T13606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.089316][T13606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.093175][T13606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.251697][ T5262] cp210x 7-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 394.254994][ T5262] cp210x 7-1:0.76: querying part number failed [ 394.260739][ T5262] usb 7-1: cp210x converter now attached to ttyUSB0 [ 394.271664][ T5262] cp210x 7-1:0.12: cp210x converter detected [ 394.274598][ T5262] cp210x 7-1:0.12: failed to get vendor val 0x370b size 1: -71 [ 394.278191][ T5262] cp210x 7-1:0.12: querying part number failed [ 394.284187][ T5262] usb 7-1: cp210x converter now attached to ttyUSB1 [ 394.293441][ T5262] cp210x 7-1:0.63: cp210x converter detected [ 394.297171][ T5262] cp210x 7-1:0.63: failed to get vendor val 0x370b size 1: -71 [ 394.300598][ T5262] cp210x 7-1:0.63: querying part number failed [ 394.305404][ T5262] usb 7-1: cp210x converter now attached to ttyUSB2 [ 394.310794][ T5262] usb 7-1: USB disconnect, device number 15 [ 394.320533][ T5262] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 394.331277][ T5262] cp210x 7-1:0.76: device disconnected [ 394.340017][ T5262] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 394.344711][ T5262] cp210x 7-1:0.12: device disconnected [ 394.354225][ T5262] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 394.358432][ T5262] cp210x 7-1:0.63: device disconnected [ 394.360921][ T5227] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 394.483792][ T5227] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 394.491508][ T5227] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 394.873643][ T5227] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 394.948233][T13641] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 394.961622][T13641] input: syz1 as /devices/virtual/input/input11 [ 395.467124][T13648] random: crng reseeded on system resumption [ 396.456158][ T5259] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 396.640758][ T5259] usb 5-1: config 0 has an invalid interface number: 76 but max is 3 [ 396.650548][ T5259] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 396.654626][ T5259] usb 5-1: config 0 has an invalid interface number: 12 but max is 3 [ 396.664401][ T5259] usb 5-1: config 0 has an invalid interface number: 63 but max is 3 [ 396.668993][ T5259] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.673726][ T5259] usb 5-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 396.681270][ T5259] usb 5-1: config 0 has no interface number 0 [ 396.684200][ T5259] usb 5-1: config 0 has no interface number 1 [ 396.687590][ T5259] usb 5-1: config 0 has no interface number 2 [ 396.690335][ T5259] usb 5-1: config 0 interface 76 altsetting 8 endpoint 0xE has an invalid bInterval 116, changing to 10 [ 396.695198][ T5259] usb 5-1: config 0 interface 76 altsetting 8 endpoint 0x1 has an invalid bInterval 143, changing to 7 [ 396.702017][ T5259] usb 5-1: config 0 interface 76 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 396.707279][ T5259] usb 5-1: config 0 interface 76 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 396.711940][ T5259] usb 5-1: config 0 interface 76 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 396.721991][ T5259] usb 5-1: too many endpoints for config 0 interface 12 altsetting 58: 40, using maximum allowed: 30 [ 396.728386][ T5259] usb 5-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0x1, skipping [ 396.733598][ T5259] usb 5-1: config 0 interface 12 altsetting 58 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 396.740497][ T5259] usb 5-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0xC, skipping [ 396.745042][ T5259] usb 5-1: config 0 interface 12 altsetting 58 has 6 endpoint descriptors, different from the interface descriptor's value: 40 [ 396.752057][ T5259] usb 5-1: config 0 interface 63 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 396.760579][ T5259] usb 5-1: config 0 interface 76 has no altsetting 0 [ 396.763431][ T5259] usb 5-1: config 0 interface 12 has no altsetting 0 [ 396.770190][ T5259] usb 5-1: Dual-Role OTG device on HNP port [ 396.773074][ T5259] usb 5-1: New USB device found, idVendor=17a8, idProduct=0013, bcdDevice=8e.a6 [ 396.778630][ T5259] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.781820][ T5259] usb 5-1: Product: syz [ 396.783616][ T5259] usb 5-1: Manufacturer: syz [ 396.785617][ T5259] usb 5-1: SerialNumber: syz [ 396.792161][ T5259] usb 5-1: config 0 descriptor?? [ 396.799200][ T5259] cp210x 5-1:0.76: cp210x converter detected [ 397.005375][T13765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.029933][T13765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.038340][T13765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.042960][T13765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.232154][ T5259] cp210x 5-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 397.239902][ T5259] cp210x 5-1:0.76: querying part number failed [ 397.274379][ T5259] usb 5-1: cp210x converter now attached to ttyUSB0 [ 397.282528][ T5259] cp210x 5-1:0.12: cp210x converter detected [ 397.286876][ T5259] cp210x 5-1:0.12: failed to get vendor val 0x370b size 1: -71 [ 397.291574][ T5259] cp210x 5-1:0.12: querying part number failed [ 397.305718][ T5259] usb 5-1: cp210x converter now attached to ttyUSB1 [ 397.315325][ T5259] cp210x 5-1:0.63: cp210x converter detected [ 397.319595][ T5259] cp210x 5-1:0.63: failed to get vendor val 0x370b size 1: -71 [ 397.322834][ T5259] cp210x 5-1:0.63: querying part number failed [ 397.327934][ T5259] usb 5-1: cp210x converter now attached to ttyUSB2 [ 397.334809][ T5259] usb 5-1: USB disconnect, device number 22 [ 397.352067][ T5259] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 397.357739][ T5259] cp210x 5-1:0.76: device disconnected [ 397.366145][ T5259] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 397.370561][ T5259] cp210x 5-1:0.12: device disconnected [ 397.380956][ T5259] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 397.389089][ T5259] cp210x 5-1:0.63: device disconnected [ 397.488466][T13773] netlink: 'syz.3.1766': attribute type 2 has an invalid length. [ 397.836112][ T5258] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 398.038198][ T5258] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 398.041643][ T5258] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.055876][ T5258] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 398.059457][ T5258] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.075129][ T5258] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 398.079356][ T5258] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 398.082394][ T5258] usb 8-1: Product: syz [ 398.084019][ T5258] usb 8-1: Manufacturer: syz [ 398.091851][ T5258] cdc_wdm 8-1:1.0: skipping garbage [ 398.094984][ T5258] cdc_wdm 8-1:1.0: skipping garbage [ 398.110888][ T5258] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 398.114149][ T5258] cdc_wdm 8-1:1.0: Unknown control protocol [ 398.181657][T13781] random: crng reseeded on system resumption [ 398.364382][ C1] wdm_int_callback: 110 callbacks suppressed [ 398.364401][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 398.369152][ C1] wdm_int_callback: 110 callbacks suppressed [ 398.369165][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 398.374230][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 398.377166][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 398.379728][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 398.382534][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 398.385307][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 398.387962][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 398.390487][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 398.393245][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 398.395983][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 398.398732][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 398.401432][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 398.404149][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 398.406884][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 398.409615][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 398.412737][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 398.415828][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 398.420046][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 398.423108][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 398.450916][ T5288] usb 8-1: USB disconnect, device number 25 [ 398.452862][T13781] Restarting kernel threads ... [ 398.453647][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 398.454035][T13781] done. [ 399.248017][ T39] audit: type=1804 audit(1721620951.931:443): pid=13802 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1774" name="/newroot/449/file0/bus" dev="9p" ino=36575648 res=1 errno=0 [ 399.439522][ T5227] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 400.045054][ T5227] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 400.134195][T13816] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 400.162945][T13816] input: syz1 as /devices/virtual/input/input12 [ 400.464259][T13857] random: crng reseeded on system resumption [ 400.472562][T13925] 9pnet_virtio: no channels available for device syz [ 400.751300][T13857] Restarting kernel threads ... done. [ 400.848725][T14037] random: crng reseeded on system resumption [ 400.963673][T14123] 9pnet_virtio: no channels available for device syz [ 401.106320][T14123] random: crng reseeded on system resumption [ 401.409528][T14123] Restarting kernel threads ... done. [ 401.628283][T14150] random: crng reseeded on system resumption [ 401.891472][T14150] Restarting kernel threads ... done. [ 402.472870][ T5227] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 402.535698][T14271] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 402.554907][T14271] input: syz1 as /devices/virtual/input/input13 [ 402.858440][T14383] 9pnet_virtio: no channels available for device syz [ 402.878382][T14379] random: crng reseeded on system resumption [ 402.909220][T14386] 9pnet_virtio: no channels available for device syz [ 402.988556][T14466] 9pnet_virtio: no channels available for device syz [ 403.134355][T14467] random: crng reseeded on system resumption [ 403.363090][T14383] Restarting kernel threads ... done. [ 404.030139][ T5227] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 404.112183][T14511] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 404.122779][T14511] input: syz1 as /devices/virtual/input/input14 [ 404.176086][ T5227] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 404.283239][T14517] netlink: 'syz.1.1803': attribute type 2 has an invalid length. [ 404.628832][ T5258] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 404.724231][T14524] random: crng reseeded on system resumption [ 404.847503][ T5258] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 404.867169][ T5258] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.872103][ T5258] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 404.876540][ T5258] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.886157][ T5258] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 404.890873][ T5258] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 404.894936][ T5258] usb 6-1: Product: syz [ 404.896944][ T5258] usb 6-1: Manufacturer: syz [ 404.903831][ T5258] cdc_wdm 6-1:1.0: skipping garbage [ 404.906905][ T5258] cdc_wdm 6-1:1.0: skipping garbage [ 404.917696][ T5258] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 404.921397][ T5258] cdc_wdm 6-1:1.0: Unknown control protocol [ 404.957238][T14636] 9pnet_virtio: no channels available for device syz [ 405.114346][T14524] Restarting kernel threads ... done. [ 405.174375][ C0] wdm_int_callback: 70 callbacks suppressed [ 405.174396][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 405.180639][ C0] wdm_int_callback: 70 callbacks suppressed [ 405.180653][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 405.186734][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 405.189877][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 405.193092][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 405.196268][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 405.199502][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 405.202695][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 405.205687][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 405.210057][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 405.213147][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 405.216982][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 405.220083][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 405.223133][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 405.226247][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 405.229213][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 405.232183][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 405.235555][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 405.239337][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 405.242175][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 405.252208][ T5258] usb 6-1: USB disconnect, device number 22 [ 405.252267][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 405.680458][T14644] 9pnet_virtio: no channels available for device syz [ 405.725170][ T5227] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 405.730564][ T5227] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 406.648172][ T5227] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 406.726064][T14672] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 406.757881][T14672] input: syz1 as /devices/virtual/input/input15 [ 406.912334][T14674] random: crng reseeded on system resumption [ 407.373620][T14674] Restarting kernel threads ... done. [ 408.427486][ T5227] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 408.438039][ T5227] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 410.180572][T14824] random: crng reseeded on system resumption [ 410.226409][ T5227] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 410.586667][T14824] Restarting kernel threads ... done. [ 411.343511][ T5227] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 411.686038][ T825] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 411.878783][ T825] usb 8-1: config 0 has an invalid interface number: 76 but max is 3 [ 411.883333][ T825] usb 8-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 411.888215][ T825] usb 8-1: config 0 has an invalid interface number: 12 but max is 3 [ 411.892298][ T825] usb 8-1: config 0 has an invalid interface number: 63 but max is 3 [ 411.897240][ T825] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.901886][ T825] usb 8-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 411.924205][ T825] usb 8-1: config 0 has no interface number 0 [ 411.927193][ T825] usb 8-1: config 0 has no interface number 1 [ 411.929781][ T825] usb 8-1: config 0 has no interface number 2 [ 411.932783][ T825] usb 8-1: config 0 interface 76 altsetting 8 endpoint 0xE has an invalid bInterval 116, changing to 10 [ 411.938204][ T825] usb 8-1: config 0 interface 76 altsetting 8 endpoint 0x1 has an invalid bInterval 143, changing to 7 [ 411.942657][ T825] usb 8-1: config 0 interface 76 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 411.948078][ T825] usb 8-1: config 0 interface 76 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 411.953234][ T825] usb 8-1: config 0 interface 76 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 411.960761][ T825] usb 8-1: too many endpoints for config 0 interface 12 altsetting 58: 40, using maximum allowed: 30 [ 411.966184][ T825] usb 8-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0x1, skipping [ 411.970942][ T825] usb 8-1: config 0 interface 12 altsetting 58 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 411.989576][ T825] usb 8-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0xC, skipping [ 411.996941][ T825] usb 8-1: config 0 interface 12 altsetting 58 has 6 endpoint descriptors, different from the interface descriptor's value: 40 [ 412.003900][ T825] usb 8-1: config 0 interface 63 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 412.012696][ T825] usb 8-1: config 0 interface 76 has no altsetting 0 [ 412.017295][ T825] usb 8-1: config 0 interface 12 has no altsetting 0 [ 412.023812][ T825] usb 8-1: Dual-Role OTG device on HNP port [ 412.032658][ T825] usb 8-1: New USB device found, idVendor=17a8, idProduct=0013, bcdDevice=8e.a6 [ 412.042676][ T825] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.060036][ T825] usb 8-1: Product: syz [ 412.061887][ T825] usb 8-1: Manufacturer: syz [ 412.064398][ T825] usb 8-1: SerialNumber: syz [ 412.097559][ T825] usb 8-1: config 0 descriptor?? [ 412.104232][ T825] cp210x 8-1:0.76: cp210x converter detected [ 412.314411][T14958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.324935][T14958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.339827][T14958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.343920][T14958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.568704][ T825] cp210x 8-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 412.572192][ T825] cp210x 8-1:0.76: querying part number failed [ 412.586444][ T825] usb 8-1: cp210x converter now attached to ttyUSB0 [ 412.601983][ T825] cp210x 8-1:0.12: cp210x converter detected [ 412.605261][ T825] cp210x 8-1:0.12: failed to get vendor val 0x370b size 1: -71 [ 412.610113][ T825] cp210x 8-1:0.12: querying part number failed [ 412.624658][ T825] usb 8-1: cp210x converter now attached to ttyUSB1 [ 412.633203][ T825] cp210x 8-1:0.63: cp210x converter detected [ 412.636985][ T825] cp210x 8-1:0.63: failed to get vendor val 0x370b size 1: -71 [ 412.640663][ T825] cp210x 8-1:0.63: querying part number failed [ 412.647466][ T825] usb 8-1: cp210x converter now attached to ttyUSB2 [ 412.652230][ T825] usb 8-1: USB disconnect, device number 26 [ 412.668757][ T825] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 412.670200][T15074] random: crng reseeded on system resumption [ 412.672299][ T825] cp210x 8-1:0.76: device disconnected [ 412.685085][ T825] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 412.690008][ T825] cp210x 8-1:0.12: device disconnected [ 412.696338][ T825] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 412.700762][ T825] cp210x 8-1:0.63: device disconnected [ 412.972095][ T5227] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 413.020253][T15074] Restarting kernel threads ... done. [ 413.472948][T15097] random: crng reseeded on system resumption [ 413.548487][T15107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1850'. [ 413.686135][T15113] 9pnet_virtio: no channels available for device syz [ 413.737781][T15097] Restarting kernel threads ... done. [ 413.824007][T15120] 9pnet_virtio: no channels available for device syz [ 413.833550][ T5227] Bluetooth: hci0: ISO packet for unknown connection handle 2062 [ 413.877652][T15122] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 413.878084][T15120] random: crng reseeded on system resumption [ 413.882944][T15122] trusted_key: encrypted_key: insufficient parameters specified [ 414.202398][T15232] 9pnet_virtio: no channels available for device syz [ 414.223931][T15232] random: crng reseeded on system resumption [ 414.276147][T15235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15235 comm=syz.3.1859 [ 414.388638][ T5227] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 414.535479][T15250] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 414.576546][T15232] Restarting kernel threads ... done. [ 414.875974][ T5227] Bluetooth: hci0: ISO packet for unknown connection handle 2062 [ 414.895181][T15367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15367 comm=syz.1.1868 [ 414.922511][T15368] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 414.928993][T15368] trusted_key: encrypted_key: insufficient parameters specified [ 415.098221][T15374] random: crng reseeded on system resumption [ 415.384705][T15374] Restarting kernel threads ... done. [ 415.553784][T15390] random: crng reseeded on system resumption [ 416.035420][T15510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15510 comm=syz.0.1877 [ 416.156568][T15516] random: crng reseeded on system resumption [ 416.192391][T15520] netlink: 'syz.1.1880': attribute type 2 has an invalid length. [ 416.229176][ T5227] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 416.434419][T15516] Restarting kernel threads ... done. [ 416.706048][ T5259] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 416.908322][ T5259] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 416.912927][ T5259] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.932211][ T5259] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 416.941513][ T5259] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.949961][ T5259] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 416.957021][ T5259] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 416.961067][ T5259] usb 6-1: Product: syz [ 416.963245][ T5259] usb 6-1: Manufacturer: syz [ 416.978422][ T5259] cdc_wdm 6-1:1.0: skipping garbage [ 416.980966][ T5259] cdc_wdm 6-1:1.0: skipping garbage [ 416.984757][ T5259] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 416.989949][ T5259] cdc_wdm 6-1:1.0: Unknown control protocol [ 417.232596][T15547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1885'. [ 417.274831][ C2] wdm_int_callback: 24 callbacks suppressed [ 417.274851][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 417.280426][ C2] wdm_int_callback: 24 callbacks suppressed [ 417.280440][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 417.282047][ T5259] usb 6-1: USB disconnect, device number 23 [ 417.283058][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 417.396585][ T5227] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 417.608975][T15554] random: crng reseeded on system resumption [ 417.681223][T15565] netlink: 'syz.0.1889': attribute type 2 has an invalid length. [ 417.907939][T15554] Restarting kernel threads ... done. [ 418.176137][ T30] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 418.250585][ T5227] Bluetooth: hci3: ISO packet for unknown connection handle 2062 [ 418.290461][T15573] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 418.297038][T15573] trusted_key: encrypted_key: insufficient parameters specified [ 418.364512][T15578] 9pnet_virtio: no channels available for device syz [ 418.367842][ T30] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 418.371666][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.377416][ T30] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 418.379192][T15578] random: crng reseeded on system resumption [ 418.381336][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.386131][ T30] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 418.393437][ T30] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 418.393459][ T30] usb 5-1: Product: syz [ 418.399208][ T30] usb 5-1: Manufacturer: syz [ 418.427952][ T30] cdc_wdm 5-1:1.0: skipping garbage [ 418.430239][ T30] cdc_wdm 5-1:1.0: skipping garbage [ 418.441083][ T30] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 418.443469][ T30] cdc_wdm 5-1:1.0: Unknown control protocol [ 418.499220][ T5227] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 418.604295][T15682] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 418.680361][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 418.683561][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 418.686683][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 418.689654][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 418.692591][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 418.695542][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 418.698290][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 418.701153][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 418.701408][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 418.706936][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 418.709757][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 418.711561][T15578] Restarting kernel threads ... [ 418.712376][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 418.712565][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 418.715081][T15578] done. [ 418.716889][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 418.717116][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 418.726938][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 418.729866][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 418.732810][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 418.737063][ T5262] usb 5-1: USB disconnect, device number 23 [ 418.737107][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 418.876685][T15688] random: crng reseeded on system resumption [ 419.159791][T15688] Restarting kernel threads ... done. [ 419.435422][T15700] 9pnet_virtio: no channels available for device syz [ 419.489965][T15702] 9pnet_virtio: no channels available for device syz [ 419.540394][T15702] random: crng reseeded on system resumption [ 419.767545][T15810] netlink: 'syz.2.1901': attribute type 2 has an invalid length. [ 419.893044][T15809] random: crng reseeded on system resumption [ 420.119403][ T5259] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 420.190202][T15809] Restarting kernel threads ... done. [ 420.308211][ T5259] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 420.311789][ T5259] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.315552][ T5259] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 420.320169][ T5259] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.327982][ T5259] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 420.332184][ T5259] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 420.335615][ T5259] usb 7-1: Product: syz [ 420.337797][ T5259] usb 7-1: Manufacturer: syz [ 420.343466][ T5259] cdc_wdm 7-1:1.0: skipping garbage [ 420.345716][ T5259] cdc_wdm 7-1:1.0: skipping garbage [ 420.349615][ T5259] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 420.352252][ T5259] cdc_wdm 7-1:1.0: Unknown control protocol [ 420.407196][T15828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1905'. [ 420.614376][ T30] usb 7-1: USB disconnect, device number 16 [ 420.614403][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 420.648867][T15837] netlink: 'syz.0.1908': attribute type 2 has an invalid length. [ 420.905970][ T5258] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 420.954962][ T5227] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 420.979533][T11151] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 421.030423][T15850] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 421.042969][T15850] input: syz1 as /devices/virtual/input/input16 [ 421.119614][ T5258] usb 6-1: config 0 has an invalid interface number: 76 but max is 3 [ 421.126788][ T5258] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 421.138693][ T5258] usb 6-1: config 0 has an invalid interface number: 12 but max is 3 [ 421.142851][ T5258] usb 6-1: config 0 has an invalid interface number: 63 but max is 3 [ 421.150150][ T5258] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.156800][ T5258] usb 6-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 421.158323][T11151] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 421.161534][ T5258] usb 6-1: config 0 has no interface number 0 [ 421.165954][T11151] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.169011][ T5258] usb 6-1: config 0 has no interface number 1 [ 421.169029][ T5258] usb 6-1: config 0 has no interface number 2 [ 421.169093][ T5258] usb 6-1: config 0 interface 76 altsetting 8 endpoint 0xE has an invalid bInterval 116, changing to 10 [ 421.169118][ T5258] usb 6-1: config 0 interface 76 altsetting 8 endpoint 0x1 has an invalid bInterval 143, changing to 7 [ 421.169141][ T5258] usb 6-1: config 0 interface 76 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 421.169159][ T5258] usb 6-1: config 0 interface 76 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 421.169182][ T5258] usb 6-1: config 0 interface 76 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 421.169206][ T5258] usb 6-1: too many endpoints for config 0 interface 12 altsetting 58: 40, using maximum allowed: 30 [ 421.169276][ T5258] usb 6-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0x1, skipping [ 421.169298][ T5258] usb 6-1: config 0 interface 12 altsetting 58 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 421.169321][ T5258] usb 6-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0xC, skipping [ 421.169344][ T5258] usb 6-1: config 0 interface 12 altsetting 58 has 6 endpoint descriptors, different from the interface descriptor's value: 40 [ 421.169378][ T5258] usb 6-1: config 0 interface 63 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 421.169402][ T5258] usb 6-1: config 0 interface 76 has no altsetting 0 [ 421.169419][ T5258] usb 6-1: config 0 interface 12 has no altsetting 0 [ 421.172429][ T5258] usb 6-1: Dual-Role OTG device on HNP port [ 421.177607][T11151] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 421.180611][ T5258] usb 6-1: New USB device found, idVendor=17a8, idProduct=0013, bcdDevice=8e.a6 [ 421.183801][T11151] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.187572][ T5258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.187585][ T5258] usb 6-1: Product: syz [ 421.187593][ T5258] usb 6-1: Manufacturer: syz [ 421.187603][ T5258] usb 6-1: SerialNumber: syz [ 421.203404][T11151] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 421.211246][ T5258] usb 6-1: config 0 descriptor?? [ 421.212641][T11151] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 421.225965][ T5258] cp210x 6-1:0.76: cp210x converter detected [ 421.228202][T11151] usb 5-1: Product: syz [ 421.289567][T11151] usb 5-1: Manufacturer: syz [ 421.296817][T11151] cdc_wdm 5-1:1.0: skipping garbage [ 421.299162][T11151] cdc_wdm 5-1:1.0: skipping garbage [ 421.303582][T11151] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 421.306201][T11151] cdc_wdm 5-1:1.0: Unknown control protocol [ 421.444534][T15835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.452538][T15835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.453057][T15852] random: crng reseeded on system resumption [ 421.549881][ T824] usb 5-1: USB disconnect, device number 24 [ 421.549910][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 421.716623][T15835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.720459][T15835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.750423][T15861] 9pnet_virtio: no channels available for device syz [ 421.757364][ T5258] cp210x 6-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 421.760822][ T5258] cp210x 6-1:0.76: querying part number failed [ 421.766934][ T5258] usb 6-1: cp210x converter now attached to ttyUSB0 [ 421.777881][ T5258] cp210x 6-1:0.12: cp210x converter detected [ 421.781352][ T5258] cp210x 6-1:0.12: failed to get vendor val 0x370b size 1: -71 [ 421.784716][ T5258] cp210x 6-1:0.12: querying part number failed [ 421.792415][ T5258] usb 6-1: cp210x converter now attached to ttyUSB1 [ 421.805094][ T5258] cp210x 6-1:0.63: cp210x converter detected [ 421.808516][ T5258] cp210x 6-1:0.63: failed to get vendor val 0x370b size 1: -71 [ 421.812706][ T5258] cp210x 6-1:0.63: querying part number failed [ 421.818220][ T5258] usb 6-1: cp210x converter now attached to ttyUSB2 [ 421.823057][T15852] Restarting kernel threads ... [ 421.823219][ T5258] usb 6-1: USB disconnect, device number 24 [ 421.823521][T15852] done. [ 421.833635][ T5258] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 421.837648][ T5258] cp210x 6-1:0.76: device disconnected [ 421.844268][ T5258] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 421.847488][ T5258] cp210x 6-1:0.12: device disconnected [ 421.854162][ T5258] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 421.858165][ T5258] cp210x 6-1:0.63: device disconnected [ 422.405693][T15870] netlink: 'syz.3.1916': attribute type 2 has an invalid length. [ 422.551669][T15874] random: crng reseeded on system resumption [ 422.560624][T15884] 9pnet_virtio: no channels available for device syz [ 422.765920][ T5270] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 422.805560][T15874] Restarting kernel threads ... done. [ 422.855296][ T5227] Bluetooth: hci3: ISO packet for unknown connection handle 2062 [ 422.888502][T15991] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 422.893704][T15991] trusted_key: encrypted_key: insufficient parameters specified [ 422.948748][ T5270] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 422.952321][ T5270] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.957737][ T5270] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 422.961467][ T5270] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.968623][ T5270] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 422.972620][ T5270] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 422.975187][ T5270] usb 8-1: Product: syz [ 422.977417][ T5270] usb 8-1: Manufacturer: syz [ 422.983551][ T5270] cdc_wdm 8-1:1.0: skipping garbage [ 422.985602][ T5270] cdc_wdm 8-1:1.0: skipping garbage [ 422.991180][ T5270] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 422.995279][ T5270] cdc_wdm 8-1:1.0: Unknown control protocol [ 423.259227][ C3] wdm_int_callback: 18 callbacks suppressed [ 423.259246][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 423.259606][ T5270] usb 8-1: USB disconnect, device number 27 [ 423.261647][ C3] wdm_int_callback: 18 callbacks suppressed [ 423.261661][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 423.271973][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 423.544814][T16115] netlink: 'syz.0.1926': attribute type 2 has an invalid length. [ 423.905898][ T5258] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 424.099207][ T5258] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 424.103738][ T5258] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.107507][ T5258] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 424.111232][ T39] audit: type=1804 audit(1721620976.791:444): pid=16122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1928" name="/newroot/497/file0/bus" dev="9p" ino=36575648 res=1 errno=0 [ 424.112262][ T5258] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.129887][ T5258] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 424.137262][ T5258] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 424.140126][ T5258] usb 5-1: Product: syz [ 424.141655][ T5258] usb 5-1: Manufacturer: syz [ 424.146973][ T5258] cdc_wdm 5-1:1.0: skipping garbage [ 424.149416][ T5258] cdc_wdm 5-1:1.0: skipping garbage [ 424.153169][ T5258] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 424.155798][ T5258] cdc_wdm 5-1:1.0: Unknown control protocol [ 424.400703][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.403157][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.405662][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.408074][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.410469][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.413212][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.418452][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.421291][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.424394][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.427538][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.430854][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.433535][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.436309][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.439284][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.442203][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.445017][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.447940][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.450576][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.457910][ T5259] usb 5-1: USB disconnect, device number 25 [ 424.460609][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 424.751521][ T5227] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 424.832684][T16239] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 424.868619][T16239] input: syz1 as /devices/virtual/input/input17 [ 424.879834][ T5227] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 424.879952][ T5227] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 425.564071][T16253] random: crng reseeded on system resumption [ 425.951180][T16357] 9pnet_virtio: no channels available for device syz [ 426.065182][T16357] random: crng reseeded on system resumption [ 426.129547][T16361] 9pnet_virtio: no channels available for device syz [ 426.243288][ T39] audit: type=1804 audit(1721620978.921:445): pid=16363 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1941" name="/newroot/481/file0/bus" dev="9p" ino=36575648 res=1 errno=0 [ 426.349224][T16357] Restarting kernel threads ... done. [ 427.005944][ T5259] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 427.206405][ T5259] usb 7-1: config 0 has an invalid interface number: 76 but max is 3 [ 427.209963][ T5259] usb 7-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 427.213853][ T5259] usb 7-1: config 0 has an invalid interface number: 12 but max is 3 [ 427.217882][ T5259] usb 7-1: config 0 has an invalid interface number: 63 but max is 3 [ 427.221379][ T5259] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.225095][ T5259] usb 7-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 427.240964][ T5259] usb 7-1: config 0 has no interface number 0 [ 427.243596][ T5259] usb 7-1: config 0 has no interface number 1 [ 427.247302][ T5259] usb 7-1: config 0 has no interface number 2 [ 427.250248][ T5259] usb 7-1: config 0 interface 76 altsetting 8 endpoint 0xE has an invalid bInterval 116, changing to 10 [ 427.255198][ T5259] usb 7-1: config 0 interface 76 altsetting 8 endpoint 0x1 has an invalid bInterval 143, changing to 7 [ 427.261466][ T5259] usb 7-1: config 0 interface 76 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 427.267189][ T5259] usb 7-1: config 0 interface 76 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 427.272192][ T5259] usb 7-1: config 0 interface 76 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 427.278968][ T5259] usb 7-1: too many endpoints for config 0 interface 12 altsetting 58: 40, using maximum allowed: 30 [ 427.284253][ T5259] usb 7-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0x1, skipping [ 427.290337][ T5259] usb 7-1: config 0 interface 12 altsetting 58 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 427.295193][ T5259] usb 7-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0xC, skipping [ 427.301065][ T5259] usb 7-1: config 0 interface 12 altsetting 58 has 6 endpoint descriptors, different from the interface descriptor's value: 40 [ 427.308337][ T5259] usb 7-1: config 0 interface 63 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 427.314236][ T5259] usb 7-1: config 0 interface 76 has no altsetting 0 [ 427.317678][ T5259] usb 7-1: config 0 interface 12 has no altsetting 0 [ 427.323563][ T5259] usb 7-1: Dual-Role OTG device on HNP port [ 427.331357][ T825] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 427.337228][ T5259] usb 7-1: New USB device found, idVendor=17a8, idProduct=0013, bcdDevice=8e.a6 [ 427.340927][ T5259] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.344212][ T5259] usb 7-1: Product: syz [ 427.347161][ T5259] usb 7-1: Manufacturer: syz [ 427.349117][ T5259] usb 7-1: SerialNumber: syz [ 427.356895][ T5259] usb 7-1: config 0 descriptor?? [ 427.362500][ T5259] cp210x 7-1:0.76: cp210x converter detected [ 427.369040][T16396] random: crng reseeded on system resumption [ 427.381145][T16400] 9pnet_virtio: no channels available for device syz [ 427.550124][ T825] usb 6-1: config 0 has an invalid interface number: 76 but max is 3 [ 427.553617][ T825] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 427.559205][ T825] usb 6-1: config 0 has an invalid interface number: 12 but max is 3 [ 427.563773][ T825] usb 6-1: config 0 has an invalid interface number: 63 but max is 3 [ 427.568211][ T825] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.571673][ T825] usb 6-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 427.577824][ T825] usb 6-1: config 0 has no interface number 0 [ 427.580181][ T825] usb 6-1: config 0 has no interface number 1 [ 427.582775][ T825] usb 6-1: config 0 has no interface number 2 [ 427.585221][ T825] usb 6-1: config 0 interface 76 altsetting 8 endpoint 0xE has an invalid bInterval 116, changing to 10 [ 427.590141][ T825] usb 6-1: config 0 interface 76 altsetting 8 endpoint 0x1 has an invalid bInterval 143, changing to 7 [ 427.594008][ T825] usb 6-1: config 0 interface 76 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 427.599275][ T825] usb 6-1: config 0 interface 76 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 427.604043][ T825] usb 6-1: config 0 interface 76 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 427.609667][ T825] usb 6-1: too many endpoints for config 0 interface 12 altsetting 58: 40, using maximum allowed: 30 [ 427.613621][ T825] usb 6-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0x1, skipping [ 427.618615][ T825] usb 6-1: config 0 interface 12 altsetting 58 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 427.623240][ T825] usb 6-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0xC, skipping [ 427.627431][ T825] usb 6-1: config 0 interface 12 altsetting 58 has 6 endpoint descriptors, different from the interface descriptor's value: 40 [ 427.632938][ T825] usb 6-1: config 0 interface 63 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 427.638457][ T825] usb 6-1: config 0 interface 76 has no altsetting 0 [ 427.642258][ T825] usb 6-1: config 0 interface 12 has no altsetting 0 [ 427.642500][T16382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.649329][T16382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.650089][ T825] usb 6-1: Dual-Role OTG device on HNP port [ 427.655469][ T825] usb 6-1: New USB device found, idVendor=17a8, idProduct=0013, bcdDevice=8e.a6 [ 427.659463][ T825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.661526][T16382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.662645][ T825] usb 6-1: Product: syz [ 427.671597][T16382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.672619][ T825] usb 6-1: Manufacturer: syz [ 427.677949][ T825] usb 6-1: SerialNumber: syz [ 427.683782][ T825] usb 6-1: config 0 descriptor?? [ 427.693138][ T825] cp210x 6-1:0.76: cp210x converter detected [ 427.723032][ T5259] cp210x 7-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 427.726602][ T5259] cp210x 7-1:0.76: querying part number failed [ 427.732795][ T5259] usb 7-1: cp210x converter now attached to ttyUSB0 [ 427.746308][ T5259] cp210x 7-1:0.12: cp210x converter detected [ 427.749637][ T5259] cp210x 7-1:0.12: failed to get vendor val 0x370b size 1: -71 [ 427.753240][ T5259] cp210x 7-1:0.12: querying part number failed [ 427.761874][ T5259] usb 7-1: cp210x converter now attached to ttyUSB1 [ 427.773520][ T5259] cp210x 7-1:0.63: cp210x converter detected [ 427.777027][ T5259] cp210x 7-1:0.63: failed to get vendor val 0x370b size 1: -71 [ 427.780545][ T5259] cp210x 7-1:0.63: querying part number failed [ 427.786687][ T5259] usb 7-1: cp210x converter now attached to ttyUSB2 [ 427.792626][ T5259] usb 7-1: USB disconnect, device number 17 [ 427.803870][ T5259] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 427.808383][ T5259] cp210x 7-1:0.76: device disconnected [ 427.820191][ T5259] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 427.824687][ T5259] cp210x 7-1:0.12: device disconnected [ 427.831874][ T5259] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 427.841484][ T5259] cp210x 7-1:0.63: device disconnected [ 427.895350][T16389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.901209][T16389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.906558][T16389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.911388][T16389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.030739][ T825] cp210x 6-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 428.033976][ T825] cp210x 6-1:0.76: querying part number failed [ 428.040224][ T825] usb 6-1: cp210x converter now attached to ttyUSB0 [ 428.048801][ T825] cp210x 6-1:0.12: cp210x converter detected [ 428.052766][ T825] cp210x 6-1:0.12: failed to get vendor val 0x370b size 1: -71 [ 428.056922][ T825] cp210x 6-1:0.12: querying part number failed [ 428.062219][ T825] usb 6-1: cp210x converter now attached to ttyUSB1 [ 428.069717][ T825] cp210x 6-1:0.63: cp210x converter detected [ 428.072686][ T825] cp210x 6-1:0.63: failed to get vendor val 0x370b size 1: -71 [ 428.076268][ T825] cp210x 6-1:0.63: querying part number failed [ 428.086300][ T825] usb 6-1: cp210x converter now attached to ttyUSB2 [ 428.090929][ T825] usb 6-1: USB disconnect, device number 25 [ 428.109446][ T825] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 428.113296][ T825] cp210x 6-1:0.76: device disconnected [ 428.123788][ T825] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 428.127746][ T825] cp210x 6-1:0.12: device disconnected [ 428.132793][ T825] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 428.139469][ T825] cp210x 6-1:0.63: device disconnected [ 428.176195][ T30] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 428.242118][ T5227] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 428.259920][ T5227] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 428.291251][T16517] netlink: 'syz.2.1954': attribute type 2 has an invalid length. [ 428.388255][ T30] usb 5-1: config 0 has an invalid interface number: 76 but max is 3 [ 428.391902][ T30] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 428.398067][ T30] usb 5-1: config 0 has an invalid interface number: 12 but max is 3 [ 428.401239][ T30] usb 5-1: config 0 has an invalid interface number: 63 but max is 3 [ 428.404318][ T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.409167][ T30] usb 5-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 428.413121][ T30] usb 5-1: config 0 has no interface number 0 [ 428.416489][ T30] usb 5-1: config 0 has no interface number 1 [ 428.419261][ T30] usb 5-1: config 0 has no interface number 2 [ 428.422215][ T30] usb 5-1: config 0 interface 76 altsetting 8 endpoint 0xE has an invalid bInterval 116, changing to 10 [ 428.428066][ T30] usb 5-1: config 0 interface 76 altsetting 8 endpoint 0x1 has an invalid bInterval 143, changing to 7 [ 428.432803][ T30] usb 5-1: config 0 interface 76 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 428.441671][ T30] usb 5-1: config 0 interface 76 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 428.445756][ T30] usb 5-1: config 0 interface 76 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 428.452252][T16524] netlink: 'syz.3.1955': attribute type 2 has an invalid length. [ 428.452881][ T30] usb 5-1: too many endpoints for config 0 interface 12 altsetting 58: 40, using maximum allowed: 30 [ 428.460147][ T30] usb 5-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0x1, skipping [ 428.464167][ T30] usb 5-1: config 0 interface 12 altsetting 58 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 428.473585][ T30] usb 5-1: config 0 interface 12 altsetting 58 has a duplicate endpoint with address 0xC, skipping [ 428.479567][ T30] usb 5-1: config 0 interface 12 altsetting 58 has 6 endpoint descriptors, different from the interface descriptor's value: 40 [ 428.485042][ T30] usb 5-1: config 0 interface 63 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 428.490279][ T30] usb 5-1: config 0 interface 76 has no altsetting 0 [ 428.493195][ T30] usb 5-1: config 0 interface 12 has no altsetting 0 [ 428.499073][ T30] usb 5-1: Dual-Role OTG device on HNP port [ 428.501767][ T30] usb 5-1: New USB device found, idVendor=17a8, idProduct=0013, bcdDevice=8e.a6 [ 428.505602][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.508707][ T30] usb 5-1: Product: syz [ 428.510292][ T30] usb 5-1: Manufacturer: syz [ 428.512225][ T30] usb 5-1: SerialNumber: syz [ 428.516663][ T30] usb 5-1: config 0 descriptor?? [ 428.522086][ T30] cp210x 5-1:0.76: cp210x converter detected [ 428.576172][T16529] 9p: Unknown Cache mode or invalid value fscach [ 428.615706][T16529] random: crng reseeded on system resumption [ 428.645901][ T5258] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 428.775979][T11151] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 428.836613][ T5258] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 428.840445][ T5258] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.844239][ T5258] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 428.847745][ T5258] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.853521][ T5258] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 428.857361][ T5258] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 428.860746][ T5258] usb 7-1: Product: syz [ 428.862617][ T5258] usb 7-1: Manufacturer: syz [ 428.881386][ T5258] cdc_wdm 7-1:1.0: skipping garbage [ 428.883594][ T5258] cdc_wdm 7-1:1.0: skipping garbage [ 428.887773][ T5258] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 428.890446][ T5258] cdc_wdm 7-1:1.0: Unknown control protocol [ 428.900932][T16510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.907140][T16510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.913507][T16510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.918408][T16510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.937819][ T30] cp210x 5-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 428.942610][ T30] cp210x 5-1:0.76: querying part number failed [ 428.947542][ T30] usb 5-1: cp210x converter now attached to ttyUSB0 [ 428.955636][ T30] cp210x 5-1:0.12: cp210x converter detected [ 428.958637][ T30] cp210x 5-1:0.12: failed to get vendor val 0x370b size 1: -71 [ 428.961464][ T30] cp210x 5-1:0.12: querying part number failed [ 428.965973][ T30] usb 5-1: cp210x converter now attached to ttyUSB1 [ 428.974442][ T30] cp210x 5-1:0.63: cp210x converter detected [ 428.977852][ T30] cp210x 5-1:0.63: failed to get vendor val 0x370b size 1: -71 [ 428.981654][ T30] cp210x 5-1:0.63: querying part number failed [ 428.985543][ T30] usb 5-1: cp210x converter now attached to ttyUSB2 [ 428.990346][ T30] usb 5-1: USB disconnect, device number 26 [ 428.991382][T11151] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 428.997613][T11151] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.997872][ T30] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 429.002479][T11151] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 429.006083][ T30] cp210x 5-1:0.76: device disconnected [ 429.010215][T11151] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.021603][T11151] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 429.022729][ T30] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 429.025086][T11151] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 429.028846][ T30] cp210x 5-1:0.12: device disconnected [ 429.032465][T11151] usb 8-1: Product: syz [ 429.036714][T11151] usb 8-1: Manufacturer: syz [ 429.041152][ T30] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 429.044597][ T30] cp210x 5-1:0.63: device disconnected [ 429.046692][T11151] cdc_wdm 8-1:1.0: skipping garbage [ 429.049260][T11151] cdc_wdm 8-1:1.0: skipping garbage [ 429.054957][T11151] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 429.061807][T11151] cdc_wdm 8-1:1.0: Unknown control protocol [ 429.075247][ T5227] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 429.146494][ C1] wdm_int_callback: 28 callbacks suppressed [ 429.146513][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 429.146838][ T5258] usb 7-1: USB disconnect, device number 18 [ 429.148962][ C1] wdm_int_callback: 28 callbacks suppressed [ 429.148976][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 429.158688][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 429.249171][T11151] usb 8-1: USB disconnect, device number 28 [ 429.479874][T16742] netlink: 'syz.0.1959': attribute type 2 has an invalid length. [ 429.541189][ T5227] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 429.818393][ T825] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 430.022331][ T825] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 430.026918][ T825] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.032583][ T825] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 430.041434][ T825] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.048375][ T825] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 430.052490][ T825] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 430.055732][ T825] usb 5-1: Product: syz [ 430.061316][ T825] usb 5-1: Manufacturer: syz [ 430.068905][ T825] cdc_wdm 5-1:1.0: skipping garbage [ 430.070971][ T825] cdc_wdm 5-1:1.0: skipping garbage [ 430.074930][ T825] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 430.081916][ T825] cdc_wdm 5-1:1.0: Unknown control protocol [ 430.126685][T16759] random: crng reseeded on system resumption [ 430.326225][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 430.329126][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 430.331860][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 430.334509][ T825] usb 5-1: USB disconnect, device number 27 [ 430.335059][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 430.340277][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 430.425645][T16759] Restarting kernel threads ... done. [ 430.685998][ T5262] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 430.852651][T16769] 9p: Unknown Cache mode or invalid value fsca [ 430.855295][T16769] 9pnet: Tag 65535 still in use [ 430.859270][ C3] ------------[ cut here ]------------ [ 430.862282][ C3] refcount_t: underflow; use-after-free. [ 430.864852][ C3] WARNING: CPU: 3 PID: 0 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 430.868406][ C3] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 430.870433][ C3] CPU: 3 PID: 0 Comm: swapper/3 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 430.887018][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 430.891894][ C3] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 430.894523][ C3] Code: ff 89 de e8 08 59 08 fd 84 db 0f 85 66 ff ff ff e8 5b 5e 08 fd c6 05 e6 c9 4e 0b 01 90 48 c7 c7 80 3b 90 8b e8 a7 9b ca fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 38 5e 08 fd 0f b6 1d c1 c9 4e 0b 31 [ 430.903684][ C3] RSP: 0000:ffffc90000908d90 EFLAGS: 00010082 [ 430.906414][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814c9029 [ 430.909346][ C3] RDX: ffff888017ed2440 RSI: ffffffff814c9036 RDI: 0000000000000001 [ 430.912668][ C3] RBP: ffff88801da9acc8 R08: 0000000000000001 R09: 0000000000000000 [ 430.916075][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 430.919355][ C3] R13: ffff88801da9acc8 R14: ffff88801b5c3000 R15: 0000000000000000 [ 430.922896][ C3] FS: 0000000000000000(0000) GS:ffff88806b300000(0000) knlGS:0000000000000000 [ 430.926732][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.928755][ T5262] usb 6-1: config 0 has an invalid interface number: 76 but max is 3 [ 430.929565][ C3] CR2: 0000001b32ad6ff8 CR3: 0000000026654000 CR4: 0000000000350ef0 [ 430.933830][ T5262] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 430.937358][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 430.937373][ C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.937386][ C3] Call Trace: [ 430.937393][ C3] [ 430.937400][ C3] ? show_regs+0x8c/0xa0 [ 430.937428][ C3] ? __warn+0xe5/0x3c0 [ 430.951167][ T5262] usb 6-1: config 0 has an invalid interface number: 12 but max is 3 [ 430.951478][ C3] ? __wake_up_klogd.part.0+0x99/0xf0 [ 430.953954][ T5262] usb 6-1: config 0 has an invalid interface number: 63 but max is 3 [ 430.957161][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 430.957188][ C3] ? report_bug+0x3c0/0x580 [ 430.957217][ C3] ? handle_bug+0x3d/0x70 [ 430.957233][ C3] ? exc_invalid_op+0x17/0x50 [ 430.957249][ C3] ? asm_exc_invalid_op+0x1a/0x20 [ 430.966473][ T5262] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.967553][ C3] ? __warn_printk+0x199/0x350 [ 430.970829][ T5262] usb 6-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 430.972659][ C3] ? __warn_printk+0x1a6/0x350 [ 430.989126][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 430.991708][ C3] p9_req_put+0x1f4/0x250 [ 430.993775][ C3] req_done+0x1e7/0x2f0 [ 430.995689][ C3] ? __pfx_req_done+0x10/0x10 [ 430.997808][ C3] ? __pfx_req_done+0x10/0x10 [ 430.999901][ C3] vring_interrupt+0x31b/0x400 [ 431.002085][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 431.004461][ C3] __handle_irq_event_percpu+0x229/0x7c0 [ 431.006952][ C3] handle_irq_event+0xab/0x1e0 [ 431.009230][ C3] handle_edge_irq+0x263/0xd10 [ 431.011393][ C3] __common_interrupt+0xdf/0x250 [ 431.013786][ C3] common_interrupt+0xab/0xd0 [ 431.015928][ C3] [ 431.017270][ C3] [ 431.018677][ C3] asm_common_interrupt+0x26/0x40 [ 431.021109][ C3] RIP: 0010:default_idle+0xf/0x20 [ 431.022623][ T5262] usb 6-1: config 0 has no interface number 0 [ 431.023368][ C3] Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 a2 37 00 fb f4 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 431.025777][ T5262] usb 6-1: config 0 has no interface number 1 [ 431.034342][ C3] RSP: 0000:ffffc900001a7e08 EFLAGS: 00000246 [ 431.034356][ C3] RAX: 000000000050bfeb RBX: 0000000000000003 RCX: ffffffff8aeee249 [ 431.034363][ C3] RDX: 0000000000000000 RSI: ffffffff8b2cbac0 RDI: ffffffff8b909e40 [ 431.034369][ C3] RBP: ffffed1002fda488 R08: 0000000000000001 R09: ffffed100d666fe1 [ 431.034376][ C3] R10: ffff88806b337f0b R11: 0000000000000000 R12: 0000000000000003 [ 431.034382][ C3] R13: ffff888017ed2440 R14: ffffffff8fe76458 R15: 0000000000000000 [ 431.034389][ C3] ? ct_kernel_exit+0x139/0x190 [ 431.034406][ C3] default_idle_call+0x6d/0xb0 [ 431.034415][ C3] do_idle+0x32c/0x3f0 [ 431.034426][ C3] ? __pfx_do_idle+0x10/0x10 [ 431.034436][ C3] cpu_startup_entry+0x4f/0x60 [ 431.034446][ C3] start_secondary+0x220/0x2b0 [ 431.034459][ C3] ? __pfx_start_secondary+0x10/0x10 [ 431.034471][ C3] common_startup_64+0x13e/0x148 [ 431.034483][ C3] [ 431.034488][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 431.034494][ C3] CPU: 3 PID: 0 Comm: swapper/3 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 431.034504][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 431.034510][ C3] Call Trace: [ 431.034514][ C3] [ 431.034518][ C3] dump_stack_lvl+0x3d/0x1f0 [ 431.034530][ C3] panic+0x6f5/0x7a0 [ 431.034540][ C3] ? __pfx_panic+0x10/0x10 [ 431.034548][ C3] ? show_trace_log_lvl+0x363/0x500 [ 431.034562][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 431.034572][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 431.034585][ C3] check_panic_on_warn+0xab/0xb0 [ 431.034595][ C3] __warn+0xf1/0x3c0 [ 431.034604][ C3] ? __wake_up_klogd.part.0+0x99/0xf0 [ 431.034615][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 431.034627][ C3] report_bug+0x3c0/0x580 [ 431.034638][ C3] handle_bug+0x3d/0x70 [ 431.034646][ C3] exc_invalid_op+0x17/0x50 [ 431.034655][ C3] asm_exc_invalid_op+0x1a/0x20 [ 431.034667][ C3] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 431.034680][ C3] Code: ff 89 de e8 08 59 08 fd 84 db 0f 85 66 ff ff ff e8 5b 5e 08 fd c6 05 e6 c9 4e 0b 01 90 48 c7 c7 80 3b 90 8b e8 a7 9b ca fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 38 5e 08 fd 0f b6 1d c1 c9 4e 0b 31 [ 431.034688][ C3] RSP: 0000:ffffc90000908d90 EFLAGS: 00010082 [ 431.034696][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814c9029 [ 431.034702][ C3] RDX: ffff888017ed2440 RSI: ffffffff814c9036 RDI: 0000000000000001 [ 431.034707][ C3] RBP: ffff88801da9acc8 R08: 0000000000000001 R09: 0000000000000000 [ 431.034713][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 431.034719][ C3] R13: ffff88801da9acc8 R14: ffff88801b5c3000 R15: 0000000000000000 [ 431.034725][ C3] ? __warn_printk+0x199/0x350 [ 431.034734][ C3] ? __warn_printk+0x1a6/0x350 [ 431.034744][ C3] p9_req_put+0x1f4/0x250 [ 431.034756][ C3] req_done+0x1e7/0x2f0 [ 431.034767][ C3] ? __pfx_req_done+0x10/0x10 [ 431.034777][ C3] ? __pfx_req_done+0x10/0x10 [ 431.034786][ C3] vring_interrupt+0x31b/0x400 [ 431.034797][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 431.034807][ C3] __handle_irq_event_percpu+0x229/0x7c0 [ 431.034819][ C3] handle_irq_event+0xab/0x1e0 [ 431.034830][ C3] handle_edge_irq+0x263/0xd10 [ 431.034841][ C3] __common_interrupt+0xdf/0x250 [ 431.034853][ C3] common_interrupt+0xab/0xd0 [ 431.034862][ C3] [ 431.034866][ C3] [ 431.034869][ C3] asm_common_interrupt+0x26/0x40 [ 431.034880][ C3] RIP: 0010:default_idle+0xf/0x20 [ 431.034889][ C3] Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 a2 37 00 fb f4 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 431.034897][ C3] RSP: 0000:ffffc900001a7e08 EFLAGS: 00000246 [ 431.034904][ C3] RAX: 000000000050bfeb RBX: 0000000000000003 RCX: ffffffff8aeee249 [ 431.034910][ C3] RDX: 0000000000000000 RSI: ffffffff8b2cbac0 RDI: ffffffff8b909e40 [ 431.034916][ C3] RBP: ffffed1002fda488 R08: 0000000000000001 R09: ffffed100d666fe1 [ 431.034922][ C3] R10: ffff88806b337f0b R11: 0000000000000000 R12: 0000000000000003 [ 431.034928][ C3] R13: ffff888017ed2440 R14: ffffffff8fe76458 R15: 0000000000000000 [ 431.034934][ C3] ? ct_kernel_exit+0x139/0x190 [ 431.034947][ C3] default_idle_call+0x6d/0xb0 [ 431.034956][ C3] do_idle+0x32c/0x3f0 [ 431.034965][ C3] ? __pfx_do_idle+0x10/0x10 [ 431.034978][ C3] cpu_startup_entry+0x4f/0x60 [ 431.034988][ C3] start_secondary+0x220/0x2b0 [ 431.034999][ C3] ? __pfx_start_secondary+0x10/0x10 [ 431.035011][ C3] common_startup_64+0x13e/0x148 [ 431.035021][ C3] [ 431.037852][ C3] Kernel Offset: disabled VM DIAGNOSIS: 04:03:03 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff8ff77960 RCX=0000000000000000 RDX=1ffffffff1feef2c RSI=ffffffff813cd3da RDI=0000000000000005 RBP=ffffffff8ff77960 RSP=ffffc90003287010 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=dffffc0000000000 R12=ffffffff814b9b79 R13=ffffffff90761e10 R14=dffffc0000000000 R15=ffffffff8ff77960 RIP=ffffffff813cd401 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe831e1d88 CR3=000000002baa0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff7564d46a3 00007ff7564d46a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaffdbc10 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555871b3e94 00005555871b3e90 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558713e490 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555871b89fa 00005555871b8180 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558714e904 000055558714e900 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555871409b0 0000555587140980 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555871409f0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001ffffffffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0105800408c085ba 9e08000108000601 18b600100005f003 00020005ee030000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001ffffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffc90805b80300 020005b603000200 05b40300020005b2 0300020005b00300 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080005a803000800 05a003000200059e 03000200059c0300 0200059a03000200 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffc90005aff650 RCX=ffffffff813ce689 RDX=1ffff92000b5fecb RSI=ffffffff813cdca2 RDI=ffffc90005aff650 RBP=ffffc90005afff50 RSP=ffffc90005aff588 R8 =0000000000000001 R9 =0000000000000004 R10=0000000000000002 R11=0000000000000000 R12=ffffc90005aff658 R13=ffffc90005afff58 R14=ffffffff9074492a R15=0000000000000002 RIP=ffffffff813cdcb7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0038707a6c CR3=000000002cc08000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=e88db0cfe88db0cf e88db0cfe88db0cf e88db0cfe88db0cf e88db0cfe88db0cf e88db0cfe88db0cf e88db0cfe88db0cf e88db0cfe88db0cf e88db0cfe88db0cf ZMM22=8422130384221303 8422130384221303 8422130384221303 8422130384221303 8422130384221303 8422130384221303 8422130384221303 8422130384221303 ZMM23=804d8249804d8249 804d8249804d8249 804d8249804d8249 804d8249804d8249 804d8249804d8249 804d8249804d8249 804d8249804d8249 804d8249804d8249 ZMM24=eb9bdabfeb9bdabf eb9bdabfeb9bdabf eb9bdabfeb9bdabf eb9bdabfeb9bdabf eb9bdabfeb9bdabf eb9bdabfeb9bdabf eb9bdabfeb9bdabf eb9bdabfeb9bdabf ZMM25=0e3dbbaf0e3dbbaf 0e3dbbaf0e3dbbaf 0e3dbbaf0e3dbbaf 0e3dbbaf0e3dbbaf 0e3dbbaf0e3dbbaf 0e3dbbaf0e3dbbaf 0e3dbbaf0e3dbbaf 0e3dbbaf0e3dbbaf ZMM26=0383551003835510 0383551003835510 0383551003835510 0383551003835510 0383551003835510 0383551003835510 0383551003835510 0383551003835510 ZMM27=ba9802c2ba9802c2 ba9802c2ba9802c2 ba9802c2ba9802c2 ba9802c2ba9802c2 ba9802c2ba9802c2 ba9802c2ba9802c2 ba9802c2ba9802c2 ba9802c2ba9802c2 ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6210000062100000 6210000062100000 6210000062100000 6210000062100000 6210000062100000 6210000062100000 6210000062100000 6210000062100000 info registers vcpu 2 CPU#2 RAX=0000000000505a95 RBX=0000000000000002 RCX=ffffffff8aeee249 RDX=0000000000000000 RSI=ffffffff8b2cbac0 RDI=ffffffff8b909e40 RBP=ffffed1002fda000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d646fe1 R10=ffff88806b237f0b R11=0000000000000000 R12=0000000000000002 R13=ffff888017ed0000 R14=ffffffff8fe76458 R15=0000000000000000 RIP=ffffffff8aeef63f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f00387020b0 CR3=000000004c458000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 616373663d656863 61632c796e613d73 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00385e4337 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00385e4344 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00385e433e ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00385e4352 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00385e43d8 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00385e44b6 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0073657479625f6e 695f65676173752e 647673722e424731 2e626c7465677568 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f003923d100 00007f00386d4440 00007f00386d0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00386d4498 00007f00386d4490 00007f00386d4488 00007f00386d4480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000006d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fcdae5 RDI=ffffffff94e436e0 RBP=ffffffff94e436a0 RSP=ffffc90000908780 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000006d R14=ffffffff84fcda80 R15=0000000000000000 RIP=ffffffff84fcdb0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b32ad6ff8 CR3=0000000026654000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000245 Opmask01=0000000000000000 Opmask02=00000000fffffdff Opmask03=0000000000000000 Opmask04=00000000ffffffdf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b5f5455504e495f 4449006b636f6c62 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd2a8b6a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff0000000000ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c53a8a47d34b70b 6464311e25eb8407 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464646464646535 6464646464646454 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7420796172726120 656c757220797261 726f706d6574002a 3f005b3f2a007525 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 51055c4457574405 40495057055c5744 574a55484051000f 1a005b1a0f005000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000091 0000000000000000 33706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4837ccc01950d36f 0000557a418f3a27 0000000000000091 000000000000302e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557f167f4480 0000557f167e1080 0000557f167bafb0 0000557f167edc40 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557f167ece20 0000557f167e8fd0 0000557f167eea50 0000557f167bada0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382432273f397b27 697a787c69303b7e 69305f474f5b647c 6930382432273f39 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000070 0000000000000030 0000000000000031 00000005167d3300 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020