last executing test programs: 4.95999917s ago: executing program 3 (id=1461): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) dup(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000004c0)={0x1, 0x0, 0x0, &(0x7f0000000380)=""/48, &(0x7f00000003c0)=""/222, 0x41000}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x90004) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(0xffffffffffffffff, &(0x7f0000003240)=ANY=[@ANYBLOB="0800001905000200b6e71400020045b0002800640000014e204e2800"/38, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5110000790780008"], 0x36) accept4(r2, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900", @ANYRES8], 0x16) 4.882582528s ago: executing program 2 (id=1462): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8", 0x1}], 0x1, 0x0, 0x0, 0x4004014}], 0x1, 0x40800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.7371442s ago: executing program 2 (id=1463): r0 = syz_usb_connect(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$tun(r1, 0x0, 0x0) syz_usb_disconnect(r0) 3.325951703s ago: executing program 3 (id=1469): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFLAG(r1, 0x8004480e, 0x0) 3.110357128s ago: executing program 0 (id=1470): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x4, 0x5}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc01c5869, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="b9ff03076003008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r1], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x8) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2.873013294s ago: executing program 1 (id=1471): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8", 0x1}], 0x1, 0x0, 0x0, 0x4004014}], 0x1, 0x40800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.872518376s ago: executing program 2 (id=1472): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f0000000040)) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f00000000c0)={0x7a76, 0x7fff, 0x400, @local, 'tunl0\x00'}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000280)={'nat\x00', 0x0, 0x3, 0xf6, [0x1, 0x7, 0x10000, 0x3, 0x6, 0x3ff], 0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/246}, &(0x7f0000000300)=0x78) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000340)={'security\x00', 0xe2, "a992b7ada781d18c974b7e4f644e37a119963a356a8133036044d2f8e3dceb8ea8ff9344ef9335061b88c597172358fdee25b91e1fa7627356ac0301231086227b65a903de8283034edaec79380acfaa0cf87c8d6f2ecf6b5db1dab4513fd21d95e22b6b2702deac0145915d2a54e883cab0188ff3f2eb4d987739bbcf4cdeca389972d0bb6fa99d24d45e4a43b5b442c0adfc7c72223c9618a696335875ed440182a9a042fb1d4c62cd66384d510bd131c6ba2cfb47a3f494e3b733b6654dbd15bce7c327f7e98397e452be9f7fc48db053b5e3885142ff77e2827adad8e96a0ae3"}, 0x0) r1 = syz_io_uring_setup(0xc17, &(0x7f00000004c0)={0x0, 0x94c1, 0x4000, 0x2, 0x13a}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) io_uring_enter(r1, 0x38c2, 0x151c, 0x48, &(0x7f0000000600)={[0x8]}, 0x8) sendmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000640)=@l2tp={0x2, 0x0, @empty, 0x2}, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000700)=[{0x38, 0x109, 0x0, "7035bd787f0aa19a134de6b618fb8e9d9d624dd4d3f5ea8dd7243a16b92032e48fc77bd04716f944"}], 0x38}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r2, 0x800, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000940)={'nat\x00', 0x0, 0x0, 0x0, [0x2d54, 0x401, 0x2, 0x400, 0x1, 0x5]}, &(0x7f00000009c0)=0x78) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x17, {0x8, 0x7, @l2={'ib', 0x3a, 'hsr0\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x200010a0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000b40)={0x2, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1e, 0xb, &(0x7f0000000c00)=@raw=[@jmp={0x5, 0x0, 0x3, 0xa, 0x3, 0x0, 0x28}, @ldst={0x3, 0x1, 0x4, 0x6, 0x5, 0x4, 0x4}, @jmp={0x5, 0x1, 0x6, 0x4, 0xb, 0x10}, @printk={@lu}], &(0x7f0000000c80)='syzkaller\x00', 0xffff, 0x55, &(0x7f0000000cc0)=""/85, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000d80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={r5, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0], 0x0, 0x36, &(0x7f0000000f40)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f80), &(0x7f0000000fc0), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000001000)}}, 0x10) io_setup(0xffffff81, &(0x7f0000001180)=0x0) r8 = eventfd2(0x3, 0x80800) r9 = fsmount(0xffffffffffffffff, 0x0, 0x2) r10 = eventfd(0x0) io_submit(r7, 0x5, &(0x7f00000025c0)=[&(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000011c0)="62dca815c84d0ed2d95d56ea5effcfe9d3c256c1e4d85a03c1786030b0f31ab7ee2f77d5263f1b2d28", 0x29, 0x2, 0x0, 0x3}, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000001240)="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", 0x1000, 0x3, 0x0, 0x2, r8}, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x8, 0x97cc, r0, &(0x7f0000002280)="cd7527676f2935f71d756a914dd9fe2ab6ddaf9629c13ed5f506b85678a21cf1e3cf0563a7eb744147def15179c550984f84aecc1c4f692efbcd3386b52dad98900ad74684011b62f420b2d9d82d015ba4d2b3587206b722a36a85ad1868707aac8af3adf84ea42d7f3418a16d1ff613ed076ab42af70611df62e5ae8f44cabd5e55b9b8744aed694743234e14b1500fb359860180ce9f0ad51f4aa9cf0b38b9cde328dd96ae68929cef3f652ee40ba3c9b8d5cae29dacef76211e1be82f4a5dd5b7344d707b9f6e1be3a440433b289076fea647567b525e840475772be84e4a12427f73", 0xe4, 0x40, 0x0, 0x2, r9}, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x2, 0x332, r3, &(0x7f00000023c0)="27a0571f3affca57aacdd18bd3739b8d850720097a427efec6f4482fd4da08693ea71c9a8248693c7711b31c27dfac052c321b65ea20b9358e5ddba423b781a052282db63faa5aeadf9b9239c5ac3a85ec393ce200dc74d1fcfa27488d663bb5df1833bf545387aedf076dad4efabf433123149a954ac7685a396bac1779defd19c0e1d42efba0f4a0ac6d2da149aef4486be9e3f47676c71eb822f0da166e53ba9dfe923e3951e0de6e370350a40f3f08e7b7e19db57e55e48ddb8cf1f7c39f6bcc249813a5ddd8793b10c3", 0xcc, 0x131, 0x0, 0x3}, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x8, 0xa5f, 0xffffffffffffffff, &(0x7f0000002500)="af61f47a7c68304c3ec23bd3893b96ddbcd10f9c2c0493ad472eb4519ac4dde1772d5e0ff4252d647165cbf77dd3cff4f598acfe47eb0e3a745bfcd5b2bd83abbe82dc03883b", 0x46, 0x100000001, 0x0, 0x2, r10}]) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000002680)={&(0x7f0000002640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0xc0800}) setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000002700)={@ipv4={'\x00', '\xff\xff', @local}, r6}, 0x14) io_setup(0x9, &(0x7f0000002740)=0x0) io_submit(r11, 0x1, &(0x7f0000002880)=[&(0x7f0000002840)={0x0, 0x0, 0x0, 0x6, 0x1, r8, &(0x7f0000002780)="3125ffe9c3dcf2d12fa4ac6a368b543e802d10d97c69ac0f963374f27253036c589803845373a92beb706b1554a2531075ca5ce444269dc44585af37ac5571d1e64c3c43716dab252cc843f08e9b126e38154b15dafb092284d1c6a81ebad319f83dcbaac906046afcccb3d48c3d00629eaa529e4d4d0de0bfdc9be96e3b03d481ad73c0a5290443ab0f411b71bff71e8b5d3352d89aec0927efcbf77faa55dd366b34090e", 0xa5, 0x5, 0x0, 0x1, r8}]) 2.624412829s ago: executing program 1 (id=1473): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01"], 0x18, 0x44000}}], 0x1, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x69a32cb2) 2.428729467s ago: executing program 0 (id=1474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000051c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x6, 0x7, 0xfffffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x4800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, 0x0}, 0x4) 2.428126994s ago: executing program 2 (id=1475): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) 2.359523138s ago: executing program 1 (id=1476): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) 2.031846079s ago: executing program 1 (id=1477): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0x10, 0x1, 0x1, [r0]}}], 0x20, 0xc0}}], 0x1, 0x0) r1 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000540)=""/99, 0x63) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000080)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) 1.829711935s ago: executing program 0 (id=1478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76"]) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f0000000000), 0xd4ba103) 1.829325114s ago: executing program 2 (id=1479): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) dup(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000004c0)={0x1, 0x0, 0x0, &(0x7f0000000380)=""/48, &(0x7f00000003c0)=""/222, 0x41000}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x90004) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0) r3 = socket(0x2c, 0x3, 0x1000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f0000003240)=ANY=[@ANYBLOB="0800001905000200b6e71400020045b0002800640000014e204e2800"/38, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5110000790780008"], 0x36) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xa, 0x100000001, 0xfffffdffffffffff, 0xfa11, 0x65ac}, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900", @ANYRES8], 0x16) 1.40796475s ago: executing program 0 (id=1480): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0x16) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.407514397s ago: executing program 2 (id=1481): getrandom(0x0, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xd, 0x7, 0x2, 0x4, 0x3, 0x3e, 0xfffffff6, 0x3da, 0x40, 0x8b, 0xd2d, 0x5, 0x38, 0x1, 0x78, 0x7, 0x4}, [{0x3, 0x880, 0x4, 0x6, 0x100, 0x2, 0x6, 0x7}]}, 0x78) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.31294435s ago: executing program 3 (id=1482): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x4, 0x5}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc01c5869, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="b9ff03076003008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x8) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.048648003s ago: executing program 3 (id=1483): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8", 0x1}], 0x1, 0x0, 0x0, 0x4004014}], 0x1, 0x40800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 923.29854ms ago: executing program 3 (id=1484): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f0000000040)) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f00000000c0)={0x7a76, 0x7fff, 0x400, @local, 'tunl0\x00'}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000280)={'nat\x00', 0x0, 0x3, 0xf6, [0x1, 0x7, 0x10000, 0x3, 0x6, 0x3ff], 0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/246}, &(0x7f0000000300)=0x78) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000340)={'security\x00', 0xe2, "a992b7ada781d18c974b7e4f644e37a119963a356a8133036044d2f8e3dceb8ea8ff9344ef9335061b88c597172358fdee25b91e1fa7627356ac0301231086227b65a903de8283034edaec79380acfaa0cf87c8d6f2ecf6b5db1dab4513fd21d95e22b6b2702deac0145915d2a54e883cab0188ff3f2eb4d987739bbcf4cdeca389972d0bb6fa99d24d45e4a43b5b442c0adfc7c72223c9618a696335875ed440182a9a042fb1d4c62cd66384d510bd131c6ba2cfb47a3f494e3b733b6654dbd15bce7c327f7e98397e452be9f7fc48db053b5e3885142ff77e2827adad8e96a0ae3"}, 0x0) r1 = syz_io_uring_setup(0xc17, &(0x7f00000004c0)={0x0, 0x94c1, 0x4000, 0x2, 0x13a}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) io_uring_enter(r1, 0x38c2, 0x151c, 0x48, &(0x7f0000000600)={[0x8]}, 0x8) sendmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000640)=@l2tp={0x2, 0x0, @empty, 0x2}, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000700)=[{0x38, 0x109, 0x0, "7035bd787f0aa19a134de6b618fb8e9d9d624dd4d3f5ea8dd7243a16b92032e48fc77bd04716f944"}], 0x38}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r2, 0x800, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000940)={'nat\x00', 0x0, 0x0, 0x0, [0x2d54, 0x401, 0x2, 0x400, 0x1, 0x5]}, &(0x7f00000009c0)=0x78) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x17, {0x8, 0x7, @l2={'ib', 0x3a, 'hsr0\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x200010a0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000b40)={0x2, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1e, 0xb, &(0x7f0000000c00)=@raw=[@jmp={0x5, 0x0, 0x3, 0xa, 0x3, 0x0, 0x28}, @ldst={0x3, 0x1, 0x4, 0x6, 0x5, 0x4, 0x4}, @jmp={0x5, 0x1, 0x6, 0x4, 0xb, 0x10}, @printk={@lu}], &(0x7f0000000c80)='syzkaller\x00', 0xffff, 0x55, &(0x7f0000000cc0)=""/85, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000d80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={r5, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0], 0x0, 0x36, &(0x7f0000000f40)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f80), &(0x7f0000000fc0), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000001000)}}, 0x10) io_setup(0xffffff81, &(0x7f0000001180)=0x0) r8 = eventfd2(0x3, 0x80800) r9 = fsmount(0xffffffffffffffff, 0x0, 0x2) r10 = eventfd(0x0) io_submit(r7, 0x5, &(0x7f00000025c0)=[&(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000011c0)="62dca815c84d0ed2d95d56ea5effcfe9d3c256c1e4d85a03c1786030b0f31ab7ee2f77d5263f1b2d28", 0x29, 0x2, 0x0, 0x3}, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000001240)="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", 0x1000, 0x3, 0x0, 0x2, r8}, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x8, 0x97cc, r0, &(0x7f0000002280)="cd7527676f2935f71d756a914dd9fe2ab6ddaf9629c13ed5f506b85678a21cf1e3cf0563a7eb744147def15179c550984f84aecc1c4f692efbcd3386b52dad98900ad74684011b62f420b2d9d82d015ba4d2b3587206b722a36a85ad1868707aac8af3adf84ea42d7f3418a16d1ff613ed076ab42af70611df62e5ae8f44cabd5e55b9b8744aed694743234e14b1500fb359860180ce9f0ad51f4aa9cf0b38b9cde328dd96ae68929cef3f652ee40ba3c9b8d5cae29dacef76211e1be82f4a5dd5b7344d707b9f6e1be3a440433b289076fea647567b525e840475772be84e4a12427f73", 0xe4, 0x40, 0x0, 0x2, r9}, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x2, 0x332, r3, &(0x7f00000023c0)="27a0571f3affca57aacdd18bd3739b8d850720097a427efec6f4482fd4da08693ea71c9a8248693c7711b31c27dfac052c321b65ea20b9358e5ddba423b781a052282db63faa5aeadf9b9239c5ac3a85ec393ce200dc74d1fcfa27488d663bb5df1833bf545387aedf076dad4efabf433123149a954ac7685a396bac1779defd19c0e1d42efba0f4a0ac6d2da149aef4486be9e3f47676c71eb822f0da166e53ba9dfe923e3951e0de6e370350a40f3f08e7b7e19db57e55e48ddb8cf1f7c39f6bcc249813a5ddd8793b10c3", 0xcc, 0x131, 0x0, 0x3}, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x8, 0xa5f, 0xffffffffffffffff, &(0x7f0000002500)="af61f47a7c68304c3ec23bd3893b96ddbcd10f9c2c0493ad472eb4519ac4dde1772d5e0ff4252d647165cbf77dd3cff4f598acfe47eb0e3a745bfcd5b2bd83abbe82dc03883b", 0x46, 0x100000001, 0x0, 0x2, r10}]) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000002680)={&(0x7f0000002640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0xc0800}) setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000002700)={@ipv4={'\x00', '\xff\xff', @local}, r6}, 0x14) io_setup(0x9, &(0x7f0000002740)=0x0) io_submit(r11, 0x1, &(0x7f0000002880)=[&(0x7f0000002840)={0x0, 0x0, 0x0, 0x6, 0x1, r8, &(0x7f0000002780)="3125ffe9c3dcf2d12fa4ac6a368b543e802d10d97c69ac0f963374f27253036c589803845373a92beb706b1554a2531075ca5ce444269dc44585af37ac5571d1e64c3c43716dab252cc843f08e9b126e38154b15dafb092284d1c6a81ebad319f83dcbaac906046afcccb3d48c3d00629eaa529e4d4d0de0bfdc9be96e3b03d481ad73c0a5290443ab0f411b71bff71e8b5d3352d89aec0927efcbf77faa55dd366b34090e", 0xa5, 0x5, 0x0, 0x1, r8}]) 471.055104ms ago: executing program 3 (id=1485): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x6000002e}) 292.632595ms ago: executing program 0 (id=1486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000051c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x6, 0x7, 0xfffffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x4800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, 0x0}, 0x4) 76.755085ms ago: executing program 1 (id=1487): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) 327.881µs ago: executing program 1 (id=1488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76"]) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f0000000000), 0xd4ba103) 0s ago: executing program 0 (id=1489): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) kernel console output (not intermixed with test programs): [ 210.061531][ T8811] RIP: 0033:0x7f8f8b79ce59 [ 210.061546][ T8811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.061562][ T8811] RSP: 002b:00007f8f8c715028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 210.061580][ T8811] RAX: ffffffffffffffda RBX: 00007f8f8ba15fa0 RCX: 00007f8f8b79ce59 [ 210.061591][ T8811] RDX: 0000000000000041 RSI: 0000000000000001 RDI: 0000000000000003 [ 210.061601][ T8811] RBP: 00007f8f8c715090 R08: 0000000000000004 R09: 0000000000000000 [ 210.061611][ T8811] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 210.061621][ T8811] R13: 00007f8f8ba16038 R14: 00007f8f8ba15fa0 R15: 00007ffc58ed30b8 [ 210.061645][ T8811] [ 210.066140][ T1488] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 210.136771][ T1488] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 210.139691][ T1488] usb 5-1: Product: syz [ 210.141238][ T1488] usb 5-1: Manufacturer: syz [ 210.147481][ T1488] cdc_wdm 5-1:1.0: skipping garbage [ 210.149374][ T1488] cdc_wdm 5-1:1.0: skipping garbage [ 210.151263][ T1488] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 210.279649][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'. [ 210.282370][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'. [ 210.315101][ T42] audit: type=1400 audit(1782709030.890:456): avc: denied { write } for pid=8830 comm="syz.1.1117" name="/" dev="9p" ino=73687643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.347972][ T1488] usb 5-1: USB disconnect, device number 34 [ 210.482975][ T5823] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 210.644452][ T5823] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 210.647165][ T5823] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 210.650420][ T5823] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 210.654305][ T5823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 210.657272][ T5823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 210.660627][ T5823] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 210.664766][ T5823] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 210.667460][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.671043][ T5823] usb 7-1: config 0 descriptor?? [ 210.674422][ T8825] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 210.886875][ T5823] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 211.086332][ T8865] overlayfs: failed to resolve './file1': -2 [ 211.120062][ T8869] FAULT_INJECTION: forcing a failure. [ 211.120062][ T8869] name failslab, interval 1, probability 0, space 0, times 1 [ 211.124816][ T8869] CPU: 2 UID: 0 PID: 8869 Comm: syz.0.1132 Not tainted syzkaller #0 PREEMPT(full) [ 211.124836][ T8869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.124844][ T8869] Call Trace: [ 211.124849][ T8869] [ 211.124855][ T8869] dump_stack_lvl+0x100/0x190 [ 211.124893][ T8869] should_fail_ex.cold+0x5/0xa [ 211.124915][ T8869] should_failslab+0xc2/0x120 [ 211.124934][ T8869] __kmalloc_noprof+0xfc/0x820 [ 211.124950][ T8869] ? rcu_is_watching+0x12/0xc0 [ 211.124972][ T8869] ? tomoyo_realpath_from_path+0xb6/0x690 [ 211.125005][ T8869] tomoyo_realpath_from_path+0xb6/0x690 [ 211.125032][ T8869] tomoyo_path_number_perm+0x23c/0x580 [ 211.125050][ T8869] ? tomoyo_path_number_perm+0x22e/0x580 [ 211.125070][ T8869] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 211.125111][ T8869] ? find_held_lock+0x2b/0x80 [ 211.125124][ T8869] ? __fget_files+0x215/0x3d0 [ 211.125138][ T8869] ? hook_file_ioctl_common+0x140/0x440 [ 211.125153][ T8869] ? __fget_files+0x215/0x3d0 [ 211.125171][ T8869] ? __fget_files+0x21f/0x3d0 [ 211.125189][ T8869] security_file_ioctl+0xd3/0x230 [ 211.125210][ T8869] __x64_sys_ioctl+0xb7/0x210 [ 211.125232][ T8869] do_syscall_64+0x115/0x870 [ 211.125259][ T8869] ? clear_bhb_loop+0x40/0x90 [ 211.125277][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.125291][ T8869] RIP: 0033:0x7f1e4659ce59 [ 211.125303][ T8869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.125317][ T8869] RSP: 002b:00007f1e447f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.125332][ T8869] RAX: ffffffffffffffda RBX: 00007f1e46815fa0 RCX: 00007f1e4659ce59 [ 211.125341][ T8869] RDX: 0000200000000640 RSI: 00000000c0045005 RDI: 0000000000000003 [ 211.125349][ T8869] RBP: 00007f1e447f6090 R08: 0000000000000000 R09: 0000000000000000 [ 211.125358][ T8869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.125366][ T8869] R13: 00007f1e46816038 R14: 00007f1e46815fa0 R15: 00007ffd885ca9a8 [ 211.125386][ T8869] [ 211.125392][ T8869] ERROR: Out of memory at tomoyo_realpath_from_path. [ 211.171977][ T8871] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1134'. [ 211.302967][ T1488] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 211.315034][ T8878] tipc: Failed to obtain node identity [ 211.316837][ T8878] tipc: Enabling of bearer rejected, failed to enable media [ 211.454475][ T1488] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.458608][ T1488] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 211.462538][ T1488] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 211.466260][ T1488] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 211.475463][ T1488] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 211.480295][ T1488] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.486691][ T1488] usb 6-1: config 0 descriptor?? qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 211.553229][ T42] audit: type=1400 audit(1782709032.130:457): avc: denied { write } for pid=8882 comm="syz.0.1139" name="/" dev="9p" ino=73687643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.562312][ T42] audit: type=1400 audit(1782709032.130:458): avc: denied { create } for pid=8882 comm="syz.0.1139" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 211.571592][ T42] audit: type=1400 audit(1782709032.130:459): avc: denied { associate } for pid=8882 comm="syz.0.1139" name="control" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 211.580898][ T42] audit: type=1400 audit(1782709032.130:460): avc: denied { write } for pid=8882 comm="syz.0.1139" name="/" dev="9p" ino=73687643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.692985][ T5823] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 211.792987][ T5982] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 211.844701][ T5823] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 211.847401][ T5823] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.850375][ T5823] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 211.853302][ T5823] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 211.857531][ T5823] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 211.860398][ T5823] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 211.862932][ T5823] usb 8-1: Product: syz [ 211.864218][ T5823] usb 8-1: Manufacturer: syz [ 211.868353][ T5823] cdc_wdm 8-1:1.0: skipping garbage [ 211.869929][ T5823] cdc_wdm 8-1:1.0: skipping garbage [ 211.871452][ T5823] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 211.894890][ T1488] usbhid 6-1:0.0: can't add hid device: -71 [ 211.900442][ T1488] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 211.909765][ T1488] usb 6-1: USB disconnect, device number 40 [ 211.942981][ T5982] usb 5-1: Using ep0 maxpacket: 16 [ 211.945851][ T5982] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 211.950119][ T5982] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.955808][ T5982] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.960779][ T5982] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.965810][ T5982] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.971276][ T5982] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.976329][ T5982] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.981852][ T5982] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.986950][ T5982] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.991889][ T5982] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 211.995660][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 211.998921][ T5982] usb 5-1: SerialNumber: syz [ 212.002733][ T5982] usb 5-1: config 0 descriptor?? [ 212.008470][ T5982] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input13 [ 212.070625][ C1] usblp0: nonzero read bulk status received: -71 [ 212.074908][ T5823] usb 8-1: USB disconnect, device number 41 [ 212.221248][ T8883] i2c i2c-1: dtv_property_process_set: SET cmd 0x616d2e73 undefined [ 212.234202][ T5126] bcm5974 5-1:0.0: could not read from device [ 212.240384][ T5126] bcm5974 5-1:0.0: could not read from device [ 212.244359][ T5982] usb 5-1: USB disconnect, device number 35 [ 212.244378][ T5126] bcm5974 5-1:0.0: could not read from device [ 212.462446][ T8889] binder: 8888:8889 ioctl 4018620d 0 returned -22 [ 212.532158][ T8893] sit1: entered promiscuous mode [ 212.991148][ T8909] binder: 8908:8909 ioctl 4018620d 0 returned -22 [ 213.103335][ T8928] FAULT_INJECTION: forcing a failure. [ 213.103335][ T8928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.112329][ T8928] CPU: 0 UID: 0 PID: 8928 Comm: syz.0.1158 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.112347][ T8928] Tainted: [L]=SOFTLOCKUP [ 213.112350][ T8928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.112357][ T8928] Call Trace: [ 213.112361][ T8928] [ 213.112365][ T8928] dump_stack_lvl+0x100/0x190 [ 213.112393][ T8928] should_fail_ex.cold+0x5/0xa [ 213.112409][ T8928] _copy_from_user+0x2e/0xd0 [ 213.112428][ T8928] copy_msghdr_from_user+0x9f/0x4c0 [ 213.112448][ T8928] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 213.112469][ T8928] ___sys_sendmsg+0x106/0x1e0 [ 213.112484][ T8928] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.112498][ T8928] ? __lock_acquire+0x49f/0x1a40 [ 213.112512][ T8928] ? get_pid_task+0x106/0x250 [ 213.112535][ T8928] __sys_sendmsg+0x160/0x210 [ 213.112546][ T8928] ? __pfx___sys_sendmsg+0x10/0x10 [ 213.112564][ T8928] do_syscall_64+0x115/0x870 [ 213.112584][ T8928] ? clear_bhb_loop+0x40/0x90 [ 213.112597][ T8928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.112608][ T8928] RIP: 0033:0x7f1e4659ce59 [ 213.112617][ T8928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.112627][ T8928] RSP: 002b:00007f1e447f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.112639][ T8928] RAX: ffffffffffffffda RBX: 00007f1e46815fa0 RCX: 00007f1e4659ce59 [ 213.112645][ T8928] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000004 [ 213.112651][ T8928] RBP: 00007f1e447f6090 R08: 0000000000000000 R09: 0000000000000000 [ 213.112657][ T8928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.112663][ T8928] R13: 00007f1e46816038 R14: 00007f1e46815fa0 R15: 00007ffd885ca9a8 [ 213.112676][ T8928] [ 213.259509][ T8934] binder: 8933:8934 ioctl 4018620d 0 returned -22 [ 213.277115][ T5738] usb 7-1: USB disconnect, device number 28 [ 213.290489][ T5738] usblp0: removed [ 213.322754][ T8936] overlayfs: failed to resolve './file1': -2 [ 213.475771][ T8948] exFAT-fs (nullb0): invalid boot record signature [ 213.490277][ T8948] exFAT-fs (nullb0): failed to read boot sector [ 213.497841][ T8953] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1171'. [ 213.506448][ T8948] exFAT-fs (nullb0): failed to recognize exfat type [ 213.529420][ T8956] overlayfs: failed to resolve './file1': -2 [ 213.545678][ T8957] binder: 8955:8957 ioctl c0306201 0 returned -14 [ 213.633765][ T8969] IPVS: Error connecting to the multicast addr [ 213.803355][ T5888] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 213.879667][ T8980] overlayfs: failed to resolve './file1': -2 [ 213.919906][ T8982] FAULT_INJECTION: forcing a failure. [ 213.919906][ T8982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.926682][ T8982] CPU: 3 UID: 0 PID: 8982 Comm: syz.0.1182 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.926710][ T8982] Tainted: [L]=SOFTLOCKUP [ 213.926716][ T8982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.926726][ T8982] Call Trace: [ 213.926732][ T8982] [ 213.926739][ T8982] dump_stack_lvl+0x100/0x190 [ 213.926769][ T8982] should_fail_ex.cold+0x5/0xa [ 213.926796][ T8982] _copy_to_user+0x32/0xd0 [ 213.926820][ T8982] simple_read_from_buffer+0xcb/0x170 [ 213.926842][ T8982] proc_fail_nth_read+0x1af/0x230 [ 213.926870][ T8982] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.926898][ T8982] ? rw_verify_area+0xce/0x6d0 [ 213.926922][ T8982] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.926948][ T8982] vfs_read+0x1e4/0xb40 [ 213.926978][ T8982] ? __pfx_vfs_read+0x10/0x10 [ 213.927003][ T8982] ? __fget_files+0x215/0x3d0 [ 213.927027][ T8982] ? __fget_files+0x21f/0x3d0 [ 213.927051][ T8982] ksys_read+0x12a/0x250 [ 213.927075][ T8982] ? __pfx_ksys_read+0x10/0x10 [ 213.927108][ T8982] do_syscall_64+0x115/0x870 [ 213.927134][ T8982] ? clear_bhb_loop+0x40/0x90 [ 213.927156][ T8982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.927175][ T8982] RIP: 0033:0x7f1e4655d68e [ 213.927190][ T8982] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 213.927207][ T8982] RSP: 002b:00007f1e447f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.927226][ T8982] RAX: ffffffffffffffda RBX: 00007f1e447f66c0 RCX: 00007f1e4655d68e [ 213.927237][ T8982] RDX: 000000000000000f RSI: 00007f1e447f60a0 RDI: 0000000000000004 [ 213.927248][ T8982] RBP: 00007f1e447f6090 R08: 0000000000000000 R09: 0000000000000000 [ 213.927258][ T8982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.927268][ T8982] R13: 00007f1e46816038 R14: 00007f1e46815fa0 R15: 00007ffd885ca9a8 [ 213.927292][ T8982] [ 213.954170][ T5888] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 213.999577][ T5888] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 214.002109][ T5888] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 214.004825][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 214.007646][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 214.010815][ T5888] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 214.015853][ T5888] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 214.018506][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.028138][ T5888] usb 7-1: config 0 descriptor?? [ 214.031489][ T8961] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 214.052419][ T8986] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1180'. [ 214.062785][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 214.062795][ T42] audit: type=1400 audit(1782709034.630:468): avc: denied { prog_load } for pid=8987 comm="syz.0.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 214.070605][ T42] audit: type=1400 audit(1782709034.640:469): avc: denied { prog_run } for pid=8987 comm="syz.0.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 214.076319][ T8988] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.087031][ T8988] bridge_slave_0 (unregistering): left allmulticast mode [ 214.090092][ T8988] bridge_slave_0 (unregistering): left promiscuous mode [ 214.095106][ T8988] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.115880][ T8990] binder: 8989:8990 ioctl c0306201 0 returned -14 [ 214.124598][ T42] audit: type=1400 audit(1782709034.700:470): avc: denied { ioctl } for pid=8987 comm="syz.0.1184" path="/dev/cpu/2/msr" dev="devtmpfs" ino=91 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 214.146446][ T42] audit: type=1400 audit(1782709034.700:471): avc: denied { execute } for pid=8987 comm="syz.0.1184" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=21429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 214.224986][ T42] audit: type=1400 audit(1782709034.800:472): avc: denied { write } for pid=8998 comm="syz.1.1189" name="/" dev="9p" ino=73687643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.226696][ T9001] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1188'. [ 214.238351][ T5888] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 214.258820][ T9003] overlayfs: failed to resolve './file0': -2 [ 214.462669][ T9016] input: syz1 as /devices/virtual/input/input14 [ 214.481530][ T9017] overlayfs: failed to resolve './file1': -2 [ 214.789969][ T9028] tipc: Failed to obtain node identity [ 214.791761][ T9028] tipc: Enabling of bearer rejected, failed to enable media [ 214.826802][ T9032] FAULT_INJECTION: forcing a failure. [ 214.826802][ T9032] name failslab, interval 1, probability 0, space 0, times 0 [ 214.831699][ T9032] CPU: 3 UID: 0 PID: 9032 Comm: syz.0.1203 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.831727][ T9032] Tainted: [L]=SOFTLOCKUP [ 214.831733][ T9032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.831743][ T9032] Call Trace: [ 214.831749][ T9032] [ 214.831756][ T9032] dump_stack_lvl+0x100/0x190 [ 214.831785][ T9032] should_fail_ex.cold+0x5/0xa [ 214.831810][ T9032] should_failslab+0xc2/0x120 [ 214.831835][ T9032] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 214.831857][ T9032] ? __alloc_skb+0x5b7/0x710 [ 214.831874][ T9032] ? __alloc_skb+0x140/0x710 [ 214.831894][ T9032] __alloc_skb+0x140/0x710 [ 214.831910][ T9032] ? __alloc_skb+0x5b7/0x710 [ 214.831926][ T9032] ? __pfx___alloc_skb+0x10/0x10 [ 214.831950][ T9032] alloc_skb_with_frags+0xdd/0x760 [ 214.831974][ T9032] ? avc_has_perm_noaudit+0x145/0x3b0 [ 214.831995][ T9032] sock_alloc_send_pskb+0x801/0x980 [ 214.832030][ T9032] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 214.832060][ T9032] ? sock_has_perm+0x25a/0x2f0 [ 214.832082][ T9032] ? __pfx_sock_has_perm+0x10/0x10 [ 214.832108][ T9032] hci_sock_sendmsg+0x1c7/0x2620 [ 214.832140][ T9032] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 214.832166][ T9032] ? __file_has_perm+0x336/0x460 [ 214.832195][ T9032] sock_write_iter+0x53a/0x5b0 [ 214.832219][ T9032] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 214.832245][ T9032] ? __pfx_sock_write_iter+0x10/0x10 [ 214.832274][ T9032] ? bpf_lsm_file_permission+0x9/0x10 [ 214.832302][ T9032] ? security_file_permission+0x76/0x210 [ 214.832329][ T9032] ? rw_verify_area+0xce/0x6d0 [ 214.832357][ T9032] vfs_write+0x6ac/0x1050 [ 214.832384][ T9032] ? __pfx_sock_write_iter+0x10/0x10 [ 214.832409][ T9032] ? __pfx_vfs_write+0x10/0x10 [ 214.832433][ T9032] ? find_held_lock+0x2b/0x80 [ 214.832465][ T9032] ksys_write+0x1f8/0x250 [ 214.832487][ T9032] ? __pfx_ksys_write+0x10/0x10 [ 214.832521][ T9032] do_syscall_64+0x115/0x870 [ 214.832547][ T9032] ? clear_bhb_loop+0x40/0x90 [ 214.832568][ T9032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.832587][ T9032] RIP: 0033:0x7f1e4659ce59 [ 214.832602][ T9032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.832619][ T9032] RSP: 002b:00007f1e447f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 214.832637][ T9032] RAX: ffffffffffffffda RBX: 00007f1e46815fa0 RCX: 00007f1e4659ce59 [ 214.832648][ T9032] RDX: 0000000000000006 RSI: 0000200000000000 RDI: 0000000000000004 [ 214.832658][ T9032] RBP: 00007f1e447f6090 R08: 0000000000000000 R09: 0000000000000000 [ 214.832669][ T9032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.832679][ T9032] R13: 00007f1e46816038 R14: 00007f1e46815fa0 R15: 00007ffd885ca9a8 [ 214.832703][ T9032] [ 215.053781][ T42] audit: type=1400 audit(1782709035.620:473): avc: denied { write } for pid=9037 comm="syz.3.1206" name="/" dev="9p" ino=73687643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.093073][ T42] audit: type=1400 audit(1782709035.660:474): avc: denied { read write } for pid=9039 comm="syz.1.1207" name="file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 215.093673][ T9045] FAULT_INJECTION: forcing a failure. [ 215.093673][ T9045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.109192][ T9045] CPU: 3 UID: 0 PID: 9045 Comm: syz.0.1209 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.109220][ T9045] Tainted: [L]=SOFTLOCKUP [ 215.109226][ T9045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.109237][ T9045] Call Trace: [ 215.109243][ T9045] [ 215.109250][ T9045] dump_stack_lvl+0x100/0x190 [ 215.109279][ T9045] should_fail_ex.cold+0x5/0xa [ 215.109305][ T9045] _copy_from_iter+0x1f4/0x1690 [ 215.109330][ T9045] ? __lock_acquire+0x49f/0x1a40 [ 215.109355][ T9045] ? __pfx__copy_from_iter+0x10/0x10 [ 215.109377][ T9045] ? __lock_acquire+0x49f/0x1a40 [ 215.109409][ T9045] copy_page_from_iter+0x238/0x300 [ 215.109436][ T9045] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 215.109471][ T9045] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 215.109496][ T9045] ? unwind_get_return_address+0x59/0xa0 [ 215.109516][ T9045] ? arch_stack_walk+0xa6/0xf0 [ 215.109546][ T9045] ? _kstrtoull+0x13c/0x1f0 [ 215.109571][ T9045] ? __pfx__kstrtoull+0x10/0x10 [ 215.109601][ T9045] tun_get_user+0x16d6/0x3c20 [ 215.109637][ T9045] ? __pfx_tun_get_user+0x10/0x10 [ 215.109664][ T9045] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 215.109697][ T9045] ? find_held_lock+0x2b/0x80 [ 215.109714][ T9045] ? tun_get+0x191/0x370 [ 215.109737][ T9045] ? tun_get+0x191/0x370 [ 215.109766][ T9045] tun_chr_write_iter+0xdc/0x200 [ 215.109795][ T9045] vfs_write+0x6ac/0x1050 [ 215.109823][ T9045] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 215.109852][ T9045] ? __pfx_vfs_write+0x10/0x10 [ 215.109875][ T9045] ? find_held_lock+0x2b/0x80 [ 215.109906][ T9045] ksys_write+0x12a/0x250 [ 215.109922][ T9045] ? __pfx_ksys_write+0x10/0x10 [ 215.109956][ T9045] do_syscall_64+0x115/0x870 [ 215.110005][ T9045] ? clear_bhb_loop+0x40/0x90 [ 215.110027][ T9045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.110045][ T9045] RIP: 0033:0x7f1e4655d68e [ 215.110060][ T9045] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 215.110077][ T9045] RSP: 002b:00007f1e447f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 215.110094][ T9045] RAX: ffffffffffffffda RBX: 00007f1e447f66c0 RCX: 00007f1e4655d68e [ 215.110110][ T9045] RDX: 000000000000004e RSI: 00002000000000c0 RDI: 00000000000000c8 [ 215.110121][ T9045] RBP: 00007f1e447f6090 R08: 0000000000000000 R09: 0000000000000000 [ 215.110132][ T9045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.110156][ T9045] R13: 00007f1e46816038 R14: 00007f1e46815fa0 R15: 00007ffd885ca9a8 [ 215.110179][ T9045] [ 215.113722][ T42] audit: type=1400 audit(1782709035.660:475): avc: denied { open } for pid=9039 comm="syz.1.1207" path="/328/file0/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 215.225498][ T42] audit: type=1400 audit(1782709035.730:476): avc: denied { read } for pid=9046 comm="syz.0.1210" path="socket:[24710]" dev="sockfs" ino=24710 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 215.262609][ T42] audit: type=1400 audit(1782709035.830:477): avc: denied { create } for pid=9048 comm="syz.1.1211" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 215.397464][ T9061] tipc: Failed to obtain node identity [ 215.399847][ T9061] tipc: Enabling of bearer rejected, failed to enable media [ 215.853684][ T5982] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 216.003037][ T5982] usb 6-1: Using ep0 maxpacket: 32 [ 216.006900][ T5982] usb 6-1: config index 0 descriptor too short (expected 15270, got 18) [ 216.012148][ T5982] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 216.015702][ T5982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.018827][ T5982] usb 6-1: Product: syz [ 216.020152][ T5982] usb 6-1: Manufacturer: syz [ 216.021635][ T5982] usb 6-1: SerialNumber: syz [ 216.025188][ T5982] usb 6-1: config 0 descriptor?? [ 216.029346][ T5982] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 216.032407][ T5982] dvb-usb: bulk message failed: -22 (4/0) [ 216.034813][ T5982] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 216.038484][ T5982] dvb-usb: bulk message failed: -22 (5/0) [ 216.040298][ T5982] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 216.045135][ T5982] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 216.048402][ T5982] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 216.050935][ T5982] usb 6-1: media controller created [ 216.053096][ T29] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 216.057781][ T5982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.068676][ T5982] usb 6-1: selecting invalid altsetting 3 [ 216.070627][ T5982] ttusb2: set interface to alts=3 failed [ 216.098960][ T5982] DVB: Unable to find symbol tda10086_attach() [ 216.101177][ T5982] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 216.104322][ T5982] dvb-usb: bulk message failed: -22 (4/0) [ 216.106121][ T5982] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 216.109162][ T5982] dvb-usb: bulk message failed: -22 (5/0) [ 216.110921][ T5982] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 216.114244][ T5982] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 216.203022][ T34] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 216.203070][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 216.209682][ T29] usb 8-1: config index 0 descriptor too short (expected 15270, got 18) [ 216.214934][ T29] usb 8-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 216.218497][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.221542][ T29] usb 8-1: Product: syz [ 216.223325][ T29] usb 8-1: Manufacturer: syz [ 216.225128][ T29] usb 8-1: SerialNumber: syz [ 216.229456][ T29] usb 8-1: config 0 descriptor?? [ 216.231363][ T9069] dvb-usb: bulk message failed: -22 (7/0) [ 216.233800][ T9069] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 216.234223][ T29] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 216.236970][ T9069] ttusb2: i2c transfer failed. [ 216.237844][ T5982] usb 6-1: USB disconnect, device number 41 [ 216.239938][ T29] dvb-usb: bulk message failed: -22 (4/0) [ 216.248304][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 216.253193][ T29] dvb-usb: bulk message failed: -22 (5/0) [ 216.255378][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 216.257618][ T5982] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 216.261674][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 216.267358][ T29] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 216.271387][ T29] usb 8-1: media controller created [ 216.282711][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.297163][ T29] usb 8-1: selecting invalid altsetting 3 [ 216.299412][ T29] ttusb2: set interface to alts=3 failed [ 216.316477][ T29] DVB: Unable to find symbol tda10086_attach() [ 216.318831][ T29] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 216.322452][ T29] dvb-usb: bulk message failed: -22 (4/0) [ 216.326266][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 216.330507][ T29] dvb-usb: bulk message failed: -22 (5/0) [ 216.332760][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 216.336859][ T29] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 216.362980][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 216.366107][ T34] usb 5-1: config index 0 descriptor too short (expected 15270, got 18) [ 216.370519][ T34] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 216.373820][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.376894][ T34] usb 5-1: Product: syz [ 216.378265][ T34] usb 5-1: Manufacturer: syz [ 216.379806][ T34] usb 5-1: SerialNumber: syz [ 216.383548][ T34] usb 5-1: config 0 descriptor?? [ 216.386894][ T34] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 216.389725][ T34] dvb-usb: bulk message failed: -22 (4/0) [ 216.391573][ T34] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 216.395197][ T34] dvb-usb: bulk message failed: -22 (5/0) [ 216.397226][ T34] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 216.404040][ T34] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 216.407697][ T34] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 216.410415][ T34] usb 5-1: media controller created [ 216.417421][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.427002][ T34] usb 5-1: selecting invalid altsetting 3 [ 216.428869][ T34] ttusb2: set interface to alts=3 failed [ 216.434243][ T9076] FAULT_INJECTION: forcing a failure. [ 216.434243][ T9076] name failslab, interval 1, probability 0, space 0, times 0 [ 216.438951][ T9076] CPU: 0 UID: 0 PID: 9076 Comm: syz.3.1222 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.438973][ T9076] Tainted: [L]=SOFTLOCKUP [ 216.438978][ T9076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 216.438987][ T9076] Call Trace: [ 216.438993][ T9076] [ 216.438999][ T9076] dump_stack_lvl+0x100/0x190 [ 216.439024][ T9076] should_fail_ex.cold+0x5/0xa [ 216.439052][ T9076] should_failslab+0xc2/0x120 [ 216.439072][ T9076] __kmalloc_noprof+0xfc/0x820 [ 216.439089][ T9076] ? rcu_is_watching+0x12/0xc0 [ 216.439122][ T9076] ? tomoyo_realpath_from_path+0xb6/0x690 [ 216.439149][ T9076] tomoyo_realpath_from_path+0xb6/0x690 [ 216.439176][ T9076] tomoyo_path_number_perm+0x23c/0x580 [ 216.439195][ T9076] ? tomoyo_path_number_perm+0x22e/0x580 [ 216.439217][ T9076] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 216.439258][ T9076] ? find_held_lock+0x2b/0x80 [ 216.439272][ T9076] ? __fget_files+0x215/0x3d0 [ 216.439287][ T9076] ? hook_file_ioctl_common+0x140/0x440 [ 216.439302][ T9076] ? __fget_files+0x215/0x3d0 [ 216.439322][ T9076] ? __fget_files+0x21f/0x3d0 [ 216.439340][ T9076] security_file_ioctl+0xd3/0x230 [ 216.439363][ T9076] __x64_sys_ioctl+0xb7/0x210 [ 216.439386][ T9076] do_syscall_64+0x115/0x870 [ 216.439407][ T9076] ? clear_bhb_loop+0x40/0x90 [ 216.439426][ T9076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.439442][ T9076] RIP: 0033:0x7f8f8b79ce59 [ 216.439454][ T9076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.439469][ T9076] RSP: 002b:00007f8f8c715028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.439484][ T9076] RAX: ffffffffffffffda RBX: 00007f8f8ba15fa0 RCX: 00007f8f8b79ce59 [ 216.439495][ T9076] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000004 [ 216.439504][ T9076] RBP: 00007f8f8c715090 R08: 0000000000000000 R09: 0000000000000000 [ 216.439513][ T9076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.439521][ T9076] R13: 00007f8f8ba16038 R14: 00007f8f8ba15fa0 R15: 00007ffc58ed30b8 [ 216.439542][ T9076] [ 216.439548][ T9076] ERROR: Out of memory at tomoyo_realpath_from_path. [ 216.447845][ T34] DVB: Unable to find symbol tda10086_attach() [ 216.449378][ T9076] dvb-usb: bulk message failed: -22 (7/0) [ 216.450498][ T34] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 216.452712][ T9076] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 216.453837][ T34] dvb-usb: bulk message failed: -22 (4/0) [ 216.457444][ T9076] ttusb2: i2c transfer failed. [ 216.458383][ T34] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 216.460956][ T5888] usb 8-1: USB disconnect, device number 42 [ 216.462213][ T34] dvb-usb: bulk message failed: -22 (5/0) [ 216.487655][ T5888] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 216.490047][ T34] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 216.540800][ T34] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 216.572684][ T24] usb 7-1: USB disconnect, device number 29 [ 216.581658][ T24] usblp0: removed [ 216.594022][ T29] usb 5-1: USB disconnect, device number 36 [ 216.632939][ T29] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 216.775647][ T9090] tipc: Failed to obtain node identity [ 216.777906][ T9090] tipc: Enabling of bearer rejected, failed to enable media [ 217.105734][ T9100] CUSE: unknown device info "" [ 217.108417][ T9100] CUSE: unknown device info "" [ 217.110508][ T9100] CUSE: unknown device info "" [ 217.114864][ T9100] CUSE: unknown device info "" [ 217.118023][ T9100] CUSE: DEVNAME unspecified [ 217.187106][ T9109] tipc: Failed to obtain node identity [ 217.188893][ T9109] tipc: Enabling of bearer rejected, failed to enable media [ 217.235165][ T9113] FAULT_INJECTION: forcing a failure. [ 217.235165][ T9113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.240039][ T9113] CPU: 1 UID: 0 PID: 9113 Comm: syz.2.1238 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.240056][ T9113] Tainted: [L]=SOFTLOCKUP [ 217.240060][ T9113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.240066][ T9113] Call Trace: [ 217.240071][ T9113] [ 217.240075][ T9113] dump_stack_lvl+0x100/0x190 [ 217.240094][ T9113] should_fail_ex.cold+0x5/0xa [ 217.240109][ T9113] _copy_to_user+0x32/0xd0 [ 217.240125][ T9113] simple_read_from_buffer+0xcb/0x170 [ 217.240137][ T9113] proc_fail_nth_read+0x1af/0x230 [ 217.240154][ T9113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.240171][ T9113] ? rw_verify_area+0xce/0x6d0 [ 217.240186][ T9113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.240201][ T9113] vfs_read+0x1e4/0xb40 [ 217.240219][ T9113] ? __pfx_vfs_read+0x10/0x10 [ 217.240235][ T9113] ? __fget_files+0x215/0x3d0 [ 217.240249][ T9113] ? __fget_files+0x21f/0x3d0 [ 217.240263][ T9113] ksys_read+0x12a/0x250 [ 217.240279][ T9113] ? __pfx_ksys_read+0x10/0x10 [ 217.240295][ T9113] ? fput+0x79/0x100 [ 217.240309][ T9113] do_syscall_64+0x115/0x870 [ 217.240325][ T9113] ? clear_bhb_loop+0x40/0x90 [ 217.240338][ T9113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.240349][ T9113] RIP: 0033:0x7f532815d68e [ 217.240358][ T9113] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 217.240368][ T9113] RSP: 002b:00007f53290e7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.240379][ T9113] RAX: ffffffffffffffda RBX: 00007f53290e86c0 RCX: 00007f532815d68e [ 217.240386][ T9113] RDX: 000000000000000f RSI: 00007f53290e80a0 RDI: 0000000000000004 [ 217.240392][ T9113] RBP: 00007f53290e8090 R08: 0000000000000000 R09: 0000000000000000 [ 217.240398][ T9113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.240404][ T9113] R13: 00007f5328416038 R14: 00007f5328415fa0 R15: 00007ffe1e3eb9d8 [ 217.240417][ T9113] [ 217.282992][ T5888] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 217.390398][ T9115] kvm: pic: level sensitive irq not supported [ 217.391806][ T9115] kvm: pic: non byte write [ 217.393466][ T34] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 217.463049][ T5888] usb 8-1: device descriptor read/64, error -71 [ 217.564599][ T34] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 217.568445][ T34] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 217.571845][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 217.575700][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 217.579546][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 217.584427][ T34] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 217.589807][ T34] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 217.593665][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.604779][ T34] usb 5-1: config 0 descriptor?? [ 217.606803][ T9102] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 217.704498][ T5888] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 217.816557][ T34] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 217.833038][ T5888] usb 8-1: device descriptor read/64, error -71 [ 217.943344][ T5888] usb usb8-port1: attempt power cycle [ 218.016142][ T9143] overlayfs: failed to resolve './file0': -2 [ 218.024031][ T5916] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 218.184556][ T5916] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.189203][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 218.193829][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 218.198271][ T5916] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.203309][ T5916] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.206907][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.212402][ T5916] usb 7-1: config 0 descriptor?? [ 218.215179][ T9139] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 218.283059][ T5888] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 218.303537][ T5888] usb 8-1: device descriptor read/8, error -71 [ 218.544964][ T5888] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 218.563519][ T5888] usb 8-1: device descriptor read/8, error -71 [ 218.622620][ T5916] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 218.631602][ T5916] plantronics 0003:047F:FFFF.0005: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 218.673342][ T5888] usb usb8-port1: unable to enumerate USB device [ 218.824871][ T5916] usb 7-1: USB disconnect, device number 30 [ 218.835246][ T9146] FAULT_INJECTION: forcing a failure. [ 218.835246][ T9146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.840789][ T9146] CPU: 0 UID: 0 PID: 9146 Comm: syz.1.1252 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.840806][ T9146] Tainted: [L]=SOFTLOCKUP [ 218.840810][ T9146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.840817][ T9146] Call Trace: [ 218.840820][ T9146] [ 218.840824][ T9146] dump_stack_lvl+0x100/0x190 [ 218.840858][ T9146] should_fail_ex.cold+0x5/0xa [ 218.840873][ T9146] strncpy_from_user+0x3b/0x2d0 [ 218.840891][ T9146] ? find_held_lock+0x2b/0x80 [ 218.840903][ T9146] path_getxattrat+0x102/0x430 [ 218.840918][ T9146] ? __pfx_path_getxattrat+0x10/0x10 [ 218.840930][ T9146] ? find_held_lock+0x2b/0x80 [ 218.840942][ T9146] ? ksys_write+0x190/0x250 [ 218.840963][ T9146] ? __pfx_ksys_write+0x10/0x10 [ 218.840983][ T9146] do_syscall_64+0x115/0x870 [ 218.841003][ T9146] ? clear_bhb_loop+0x40/0x90 [ 218.841017][ T9146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.841027][ T9146] RIP: 0033:0x7f0bfc79ce59 [ 218.841037][ T9146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.841047][ T9146] RSP: 002b:00007f0bfd6dc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 218.841058][ T9146] RAX: ffffffffffffffda RBX: 00007f0bfca15fa0 RCX: 00007f0bfc79ce59 [ 218.841064][ T9146] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000200000000280 [ 218.841071][ T9146] RBP: 00007f0bfd6dc090 R08: 0000000000000000 R09: 0000000000000000 [ 218.841077][ T9146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.841083][ T9146] R13: 00007f0bfca16038 R14: 00007f0bfca15fa0 R15: 00007fff74a00828 [ 218.841096][ T9146] [ 219.356022][ T9166] binder: 9165:9166 ioctl c0306201 0 returned -14 [ 219.399394][ T9170] tipc: Enabling of bearer rejected, already enabled [ 219.575912][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 219.575929][ T42] audit: type=1400 audit(1782709040.150:486): avc: denied { getopt } for pid=9171 comm="syz.2.1263" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 219.599720][ T42] audit: type=1400 audit(1782709040.160:487): avc: denied { shutdown } for pid=9171 comm="syz.2.1263" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 219.874745][ T5089] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 220.216394][ T29] usb 5-1: USB disconnect, device number 37 [ 220.228066][ T29] usblp0: removed [ 220.457546][ T42] audit: type=1400 audit(1782709041.030:488): avc: denied { map_read map_write } for pid=9192 comm="syz.2.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 220.542690][ T9193] syz.2.1269 (9193): drop_caches: 2 [ 220.644625][ T29] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 220.773037][ T29] usb 5-1: device descriptor read/64, error -71 [ 220.842974][ T34] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 220.872992][ T1488] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 221.002985][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 221.007423][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 221.011677][ T34] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 221.012978][ T29] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 221.015155][ T34] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 221.021435][ T34] usb 7-1: config 14 has no interface number 0 [ 221.022981][ T1488] usb 6-1: Using ep0 maxpacket: 32 [ 221.024046][ T34] usb 7-1: config 14 has no interface number 1 [ 221.028103][ T1488] usb 6-1: config 0 has no interfaces? [ 221.028690][ T34] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 221.032773][ T1488] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 221.035172][ T34] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 221.038583][ T1488] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.038601][ T1488] usb 6-1: Product: syz [ 221.038612][ T1488] usb 6-1: Manufacturer: syz [ 221.043324][ T34] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 221.046532][ T1488] usb 6-1: SerialNumber: syz [ 221.048223][ T34] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 221.051809][ T1488] usb 6-1: config 0 descriptor?? [ 221.054764][ T34] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 221.067821][ T34] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.073148][ T34] usb 7-1: config 14 interface 57 has no altsetting 0 [ 221.075895][ T34] usb 7-1: config 14 interface 228 has no altsetting 0 [ 221.081011][ T34] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 221.084728][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.087936][ T34] usb 7-1: Product: syz [ 221.089783][ T34] usb 7-1: Manufacturer: syz [ 221.091697][ T34] usb 7-1: SerialNumber: syz [ 221.152999][ T29] usb 5-1: device descriptor read/64, error -71 [ 221.263241][ T29] usb usb5-port1: attempt power cycle [ 221.381631][ T1488] usb 6-1: USB disconnect, device number 42 [ 221.520838][ T34] legousbtower 7-1:14.57: interrupt endpoints not found [ 221.603026][ T29] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 221.623788][ T29] usb 5-1: device descriptor read/8, error -71 [ 221.825192][ T5745] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 221.873052][ T29] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 221.893591][ T29] usb 5-1: device descriptor read/8, error -71 [ 221.931108][ T34] legousbtower 7-1:14.228: get version request failed: -121 [ 221.934542][ T34] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -121 [ 222.003372][ T29] usb usb5-port1: unable to enumerate USB device [ 222.140369][ T34] usb 7-1: USB disconnect, device number 31 [ 222.432986][ T5916] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 222.606589][ T5916] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 222.611761][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 222.615321][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 222.618326][ T5916] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 222.622188][ T5916] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.625360][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.634854][ T5916] usb 6-1: config 0 descriptor?? [ 222.729115][ T9217] overlayfs: failed to resolve './file1': -2 [ 223.046900][ T5916] usbhid 6-1:0.0: can't add hid device: -71 [ 223.048996][ T5916] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 223.059918][ T5916] usb 6-1: USB disconnect, device number 43 [ 223.631161][ T9235] fuse: Unknown parameter 'fd0x0000000000000003' [ 223.686975][ T9239] tipc: Failed to obtain node identity [ 223.688694][ T9239] tipc: Enabling of bearer rejected, failed to enable media [ 224.133107][ T5888] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 224.152972][ T5916] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 224.262991][ T5888] usb 5-1: device descriptor read/64, error -71 [ 224.315103][ T5916] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.320109][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 224.325719][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 224.329765][ T5916] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 224.335398][ T5916] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.339225][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.346009][ T5916] usb 6-1: config 0 descriptor?? [ 224.436004][ T9256] fuse: Unknown parameter 'fd0x0000000000000003' [ 224.513055][ T5888] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 224.640865][ T5745] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 224.653053][ T5888] usb 5-1: device descriptor read/64, error -71 [ 224.762528][ T5916] usbhid 6-1:0.0: can't add hid device: -71 [ 224.763293][ T5888] usb usb5-port1: attempt power cycle [ 224.768237][ T5916] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 224.776401][ T5916] usb 6-1: USB disconnect, device number 44 [ 224.793008][ T24] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 224.943016][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 224.946639][ T24] usb 8-1: config 0 has no interfaces? [ 224.950826][ T24] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 224.954373][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.957430][ T24] usb 8-1: Product: syz [ 224.959035][ T24] usb 8-1: Manufacturer: syz [ 224.960859][ T24] usb 8-1: SerialNumber: syz [ 224.967036][ T24] usb 8-1: config 0 descriptor?? [ 225.102982][ T5888] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 225.123987][ T5888] usb 5-1: device descriptor read/8, error -71 [ 225.228403][ T24] usb 8-1: USB disconnect, device number 47 [ 225.367439][ T5888] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 225.403506][ T5888] usb 5-1: device descriptor read/8, error -71 [ 225.523909][ T5888] usb usb5-port1: unable to enumerate USB device [ 226.804972][ T9288] tipc: Failed to obtain node identity [ 226.806746][ T9288] tipc: Enabling of bearer rejected, failed to enable media [ 227.338411][ T5089] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 227.376029][ T1488] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 227.463832][ T9308] syz.1.1312 (9308): drop_caches: 2 [ 227.524845][ T1488] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 227.657956][ T1488] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 227.661825][ T1488] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 227.665694][ T1488] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.669617][ T1488] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.683858][ T1488] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.689394][ T1488] usb 8-1: config 0 descriptor?? [ 227.723043][ T5916] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 227.854708][ T5916] usb 7-1: device descriptor read/64, error -71 [ 227.991817][ T9324] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1318'. [ 228.093029][ T5916] usb 7-1: new low-speed USB device number 33 using dummy_hcd [ 228.107688][ T1488] usbhid 8-1:0.0: can't add hid device: -71 [ 228.139382][ T1488] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 228.144693][ T1488] usb 8-1: USB disconnect, device number 48 [ 228.234338][ T5916] usb 7-1: device descriptor read/64, error -71 [ 228.364394][ T5916] usb usb7-port1: attempt power cycle [ 228.423000][ T5089] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 228.719577][ T9339] syz.3.1322 (9339): drop_caches: 2 [ 228.723118][ T5916] usb 7-1: new low-speed USB device number 34 using dummy_hcd [ 228.744319][ T5916] usb 7-1: device descriptor read/8, error -71 [ 228.826685][ T42] audit: type=1400 audit(1782709049.400:489): avc: denied { write } for pid=9343 comm="syz.3.1324" name="/" dev="9p" ino=73687643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.993077][ T5916] usb 7-1: new low-speed USB device number 35 using dummy_hcd [ 229.017290][ T5916] usb 7-1: device descriptor read/8, error -71 [ 229.060227][ T9350] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1327'. [ 229.123617][ T5916] usb usb7-port1: unable to enumerate USB device [ 229.423085][ T5823] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 229.442482][ T9361] syz.0.1331 (9361): drop_caches: 2 [ 229.514726][ T5745] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 229.519897][ T5745] CPU: 1 UID: 0 PID: 5745 Comm: kworker/u34:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.519930][ T5745] Tainted: [L]=SOFTLOCKUP [ 229.519938][ T5745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.519951][ T5745] Workqueue: hci1 hci_rx_work [ 229.519982][ T5745] Call Trace: [ 229.519989][ T5745] [ 229.519997][ T5745] dump_stack_lvl+0x100/0x190 [ 229.520026][ T5745] sysfs_warn_dup.cold+0x1c/0x28 [ 229.520056][ T5745] sysfs_create_dir_ns+0x24b/0x2b0 [ 229.520086][ T5745] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 229.520114][ T5745] ? find_held_lock+0x2b/0x80 [ 229.520129][ T5745] ? kobject_add_internal+0x25f/0x930 [ 229.520148][ T5745] ? kobject_add_internal+0x25f/0x930 [ 229.520172][ T5745] ? do_raw_spin_unlock+0x145/0x1e0 [ 229.520199][ T5745] kobject_add_internal+0x2c8/0x930 [ 229.520225][ T5745] kobject_add+0x16a/0x1e0 [ 229.520245][ T5745] ? __pfx_kobject_add+0x10/0x10 [ 229.520265][ T5745] ? class_to_subsys+0x10f/0x150 [ 229.520296][ T5745] ? kobject_put+0xb9/0x640 [ 229.520314][ T5745] ? _raw_spin_unlock+0x28/0x50 [ 229.520343][ T5745] device_add+0x294/0x1970 [ 229.520369][ T5745] ? __pfx_dev_set_name+0x10/0x10 [ 229.520396][ T5745] ? __pfx_device_add+0x10/0x10 [ 229.520421][ T5745] ? mgmt_send_event_skb+0x2fb/0x460 [ 229.520456][ T5745] hci_conn_add_sysfs+0x1a3/0x260 [ 229.520477][ T5745] le_conn_complete_evt+0x11eb/0x1f60 [ 229.520511][ T5745] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 229.520536][ T5745] ? hci_event_packet+0x186/0xcd0 [ 229.520569][ T5745] hci_le_conn_complete_evt+0x23c/0x3a0 [ 229.520599][ T5745] ? skb_pull_data+0x15f/0x1e0 [ 229.520626][ T5745] hci_le_meta_evt+0x34a/0x5f0 [ 229.520651][ T5745] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 229.520685][ T5745] hci_event_packet+0x51c/0xcd0 [ 229.520710][ T5745] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 229.520735][ T5745] ? __pfx_hci_event_packet+0x10/0x10 [ 229.520759][ T5745] ? kcov_remote_start+0x384/0x670 [ 229.520780][ T5745] ? lockdep_hardirqs_on+0x78/0x100 [ 229.520809][ T5745] hci_rx_work+0x451/0xfc0 [ 229.520833][ T5745] process_one_work+0xa23/0x1940 [ 229.520859][ T5745] ? __pfx_process_one_work+0x10/0x10 [ 229.520885][ T5745] ? __pfx_hci_rx_work+0x10/0x10 [ 229.520908][ T5745] worker_thread+0x5ef/0xe50 [ 229.520935][ T5745] ? kthread+0x13a/0x450 [ 229.520951][ T5745] ? __pfx_worker_thread+0x10/0x10 [ 229.520967][ T5745] kthread+0x370/0x450 [ 229.520982][ T5745] ? __pfx_kthread+0x10/0x10 [ 229.521000][ T5745] ret_from_fork+0x72b/0xd50 [ 229.521028][ T5745] ? __pfx_ret_from_fork+0x10/0x10 [ 229.521057][ T5745] ? rcu_is_watching+0x12/0xc0 [ 229.521086][ T5745] ? __switch_to+0x800/0x10f0 [ 229.521104][ T5745] ? __pfx_kthread+0x10/0x10 [ 229.521123][ T5745] ret_from_fork_asm+0x1a/0x30 [ 229.521178][ T5745] [ 229.521243][ T5745] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 229.648329][ T5745] Bluetooth: hci1: failed to register connection device [ 229.664578][ T5823] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.669321][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 229.673972][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 229.679658][ T5823] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 229.685318][ T5823] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 229.689240][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.695271][ T5823] usb 6-1: config 0 descriptor?? [ 230.106534][ T5823] usbhid 6-1:0.0: can't add hid device: -71 [ 230.108470][ T5823] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 230.115076][ T5823] usb 6-1: USB disconnect, device number 45 [ 230.559935][ T9377] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1338'. [ 230.689008][ T5745] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 230.700111][ T9385] syz.1.1340 (9385): drop_caches: 2 [ 230.973007][ T5916] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 231.103025][ T5916] usb 6-1: device descriptor read/64, error -71 [ 231.223030][ T34] usb 8-1: new low-speed USB device number 49 using dummy_hcd [ 231.330835][ T5745] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 231.334439][ T5745] CPU: 0 UID: 0 PID: 5745 Comm: kworker/u34:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.334459][ T5745] Tainted: [L]=SOFTLOCKUP [ 231.334463][ T5745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.334470][ T5745] Workqueue: hci1 hci_rx_work [ 231.334489][ T5745] Call Trace: [ 231.334493][ T5745] [ 231.334498][ T5745] dump_stack_lvl+0x100/0x190 [ 231.334516][ T5745] sysfs_warn_dup.cold+0x1c/0x28 [ 231.334533][ T5745] sysfs_create_dir_ns+0x24b/0x2b0 [ 231.334551][ T5745] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 231.334568][ T5745] ? find_held_lock+0x2b/0x80 [ 231.334578][ T5745] ? kobject_add_internal+0x25f/0x930 [ 231.334591][ T5745] ? kobject_add_internal+0x25f/0x930 [ 231.334606][ T5745] ? do_raw_spin_unlock+0x145/0x1e0 [ 231.334623][ T5745] kobject_add_internal+0x2c8/0x930 [ 231.334638][ T5745] kobject_add+0x16a/0x1e0 [ 231.334650][ T5745] ? __pfx_kobject_add+0x10/0x10 [ 231.334661][ T5745] ? class_to_subsys+0x10f/0x150 [ 231.334679][ T5745] ? kobject_put+0xb9/0x640 [ 231.334690][ T5745] ? _raw_spin_unlock+0x28/0x50 [ 231.334708][ T5745] device_add+0x294/0x1970 [ 231.334722][ T5745] ? __pfx_dev_set_name+0x10/0x10 [ 231.334746][ T5745] ? __pfx_device_add+0x10/0x10 [ 231.334761][ T5745] ? mgmt_send_event_skb+0x2fb/0x460 [ 231.334783][ T5745] hci_conn_add_sysfs+0x1a3/0x260 [ 231.334795][ T5745] le_conn_complete_evt+0x11eb/0x1f60 [ 231.334816][ T5745] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 231.334832][ T5745] ? hci_event_packet+0x186/0xcd0 [ 231.334868][ T5745] hci_le_conn_complete_evt+0x23c/0x3a0 [ 231.334887][ T5745] ? skb_pull_data+0x15f/0x1e0 [ 231.334904][ T5745] hci_le_meta_evt+0x34a/0x5f0 [ 231.334923][ T5745] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 231.334943][ T5745] hci_event_packet+0x51c/0xcd0 [ 231.334960][ T5745] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 231.334979][ T5745] ? __pfx_hci_event_packet+0x10/0x10 [ 231.334996][ T5745] ? kcov_remote_start+0x384/0x670 [ 231.335009][ T5745] ? lockdep_hardirqs_on+0x78/0x100 [ 231.335028][ T5745] hci_rx_work+0x451/0xfc0 [ 231.335046][ T5745] process_one_work+0xa23/0x1940 [ 231.335065][ T5745] ? __pfx_process_one_work+0x10/0x10 [ 231.335081][ T5745] ? __pfx_hci_rx_work+0x10/0x10 [ 231.335098][ T5745] worker_thread+0x5ef/0xe50 [ 231.335115][ T5745] ? kthread+0x13a/0x450 [ 231.335126][ T5745] ? __pfx_worker_thread+0x10/0x10 [ 231.335137][ T5745] kthread+0x370/0x450 [ 231.335147][ T5745] ? __pfx_kthread+0x10/0x10 [ 231.335159][ T5745] ret_from_fork+0x72b/0xd50 [ 231.335175][ T5745] ? __pfx_ret_from_fork+0x10/0x10 [ 231.335191][ T5745] ? rcu_is_watching+0x12/0xc0 [ 231.335207][ T5745] ? __switch_to+0x800/0x10f0 [ 231.335219][ T5745] ? __pfx_kthread+0x10/0x10 [ 231.335231][ T5745] ret_from_fork_asm+0x1a/0x30 [ 231.335249][ T5745] [ 231.335293][ T5745] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 231.342982][ T5916] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 231.343376][ T5745] Bluetooth: hci1: failed to register connection device [ 231.394752][ T34] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 231.440587][ T34] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 231.445641][ T34] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 231.449270][ T34] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 231.452855][ T34] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 231.456115][ T34] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 231.461649][ T34] usb 8-1: string descriptor 0 read error: -22 [ 231.463640][ T34] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 231.466409][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.472565][ T34] usb 8-1: rejected 3 configurations due to insufficient available bus power [ 231.481925][ T34] usb 8-1: no configuration chosen from 3 choices [ 231.502949][ T5916] usb 6-1: device descriptor read/64, error -71 [ 231.623217][ T5916] usb usb6-port1: attempt power cycle [ 231.682965][ T5745] Bluetooth: hci1: command 0x0406 tx timeout [ 231.722988][ T5888] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 231.874172][ T5888] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.877816][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 231.881187][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 231.884234][ T5888] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.888145][ T5888] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.890915][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.895216][ T5888] usb 7-1: config 0 descriptor?? [ 231.972979][ T5916] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 231.993605][ T5916] usb 6-1: device descriptor read/8, error -71 [ 232.215568][ T9410] syz.0.1349 (9410): drop_caches: 2 [ 232.233006][ T5916] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 232.254686][ T5916] usb 6-1: device descriptor read/8, error -71 [ 232.301722][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 232.306668][ T5888] usbhid 7-1:0.0: can't add hid device: -71 [ 232.308568][ T5888] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 232.316398][ T5888] usb 7-1: USB disconnect, device number 36 [ 232.364905][ T5916] usb usb6-port1: unable to enumerate USB device [ 232.623164][ T5916] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 232.753029][ T5916] usb 5-1: device descriptor read/64, error -71 [ 233.002995][ T5916] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 233.133008][ T5916] usb 5-1: device descriptor read/64, error -71 [ 233.243324][ T5916] usb usb5-port1: attempt power cycle [ 233.479083][ T9423] tipc: Enabling of bearer rejected, already enabled [ 233.583053][ T5916] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 233.613739][ T5916] usb 5-1: device descriptor read/8, error -71 [ 233.750763][ T5745] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 233.763190][ T5743] Bluetooth: hci1: command 0x0406 tx timeout [ 233.863176][ T5916] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 233.883751][ T5916] usb 5-1: device descriptor read/8, error -71 [ 233.970068][ T42] audit: type=1400 audit(1782709054.540:490): avc: denied { write } for pid=9431 comm="syz.1.1357" name="/" dev="9p" ino=73687643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.115634][ T5916] usb usb5-port1: unable to enumerate USB device [ 234.124732][ T1488] usb 8-1: USB disconnect, device number 49 [ 234.187533][ T9436] syz.3.1358 (9436): drop_caches: 2 [ 234.251632][ T5089] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 234.256112][ T5089] CPU: 0 UID: 0 PID: 5089 Comm: kworker/u34:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.256131][ T5089] Tainted: [L]=SOFTLOCKUP [ 234.256137][ T5089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.256145][ T5089] Workqueue: hci3 hci_rx_work [ 234.256166][ T5089] Call Trace: [ 234.256171][ T5089] [ 234.256175][ T5089] dump_stack_lvl+0x100/0x190 [ 234.256193][ T5089] sysfs_warn_dup.cold+0x1c/0x28 [ 234.256210][ T5089] sysfs_create_dir_ns+0x24b/0x2b0 [ 234.256229][ T5089] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 234.256246][ T5089] ? find_held_lock+0x2b/0x80 [ 234.256256][ T5089] ? kobject_add_internal+0x25f/0x930 [ 234.256270][ T5089] ? kobject_add_internal+0x25f/0x930 [ 234.256283][ T5089] ? do_raw_spin_unlock+0x145/0x1e0 [ 234.256301][ T5089] kobject_add_internal+0x2c8/0x930 [ 234.256317][ T5089] kobject_add+0x16a/0x1e0 [ 234.256330][ T5089] ? __pfx_kobject_add+0x10/0x10 [ 234.256342][ T5089] ? class_to_subsys+0x10f/0x150 [ 234.256360][ T5089] ? kobject_put+0xb9/0x640 [ 234.256370][ T5089] ? _raw_spin_unlock+0x28/0x50 [ 234.256387][ T5089] device_add+0x294/0x1970 [ 234.256402][ T5089] ? __pfx_dev_set_name+0x10/0x10 [ 234.256419][ T5089] ? __pfx_device_add+0x10/0x10 [ 234.256434][ T5089] ? mgmt_send_event_skb+0x2fb/0x460 [ 234.256454][ T5089] hci_conn_add_sysfs+0x1a3/0x260 [ 234.256466][ T5089] le_conn_complete_evt+0x11eb/0x1f60 [ 234.256485][ T5089] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 234.256501][ T5089] ? hci_event_packet+0x186/0xcd0 [ 234.256520][ T5089] hci_le_conn_complete_evt+0x23c/0x3a0 [ 234.256537][ T5089] ? skb_pull_data+0x15f/0x1e0 [ 234.256554][ T5089] hci_le_meta_evt+0x34a/0x5f0 [ 234.256571][ T5089] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 234.256588][ T5089] hci_event_packet+0x51c/0xcd0 [ 234.256621][ T5089] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 234.256644][ T5089] ? __pfx_hci_event_packet+0x10/0x10 [ 234.256661][ T5089] ? kcov_remote_start+0x384/0x670 [ 234.256674][ T5089] ? lockdep_hardirqs_on+0x78/0x100 [ 234.256695][ T5089] hci_rx_work+0x451/0xfc0 [ 234.256714][ T5089] process_one_work+0xa23/0x1940 [ 234.256734][ T5089] ? __pfx_process_one_work+0x10/0x10 [ 234.256752][ T5089] ? __pfx_hci_rx_work+0x10/0x10 [ 234.256768][ T5089] worker_thread+0x5ef/0xe50 [ 234.256786][ T5089] ? kthread+0x13a/0x450 [ 234.256795][ T5089] ? __pfx_worker_thread+0x10/0x10 [ 234.256807][ T5089] kthread+0x370/0x450 [ 234.256817][ T5089] ? __pfx_kthread+0x10/0x10 [ 234.256829][ T5089] ret_from_fork+0x72b/0xd50 [ 234.256845][ T5089] ? __pfx_ret_from_fork+0x10/0x10 [ 234.256861][ T5089] ? __switch_to+0x800/0x10f0 [ 234.256872][ T5089] ? __pfx_kthread+0x10/0x10 [ 234.256884][ T5089] ret_from_fork_asm+0x1a/0x30 [ 234.256901][ T5089] [ 234.257977][ T5089] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 234.342988][ T5089] Bluetooth: hci3: failed to register connection device [ 234.732994][ T34] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 234.884479][ T34] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.888039][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 234.891344][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 234.894570][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.898472][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.901376][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.908369][ T34] usb 7-1: config 0 descriptor?? [ 235.240489][ T5089] Bluetooth: hci0: unexpected event for opcode 0x2011 [ 235.392996][ T5982] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 235.447938][ T9456] syz.0.1367 (9456): drop_caches: 2 [ 235.489201][ T42] audit: type=1400 audit(1782709056.060:491): avc: denied { write } for pid=9457 comm="syz.0.1368" name="/" dev="9p" ino=73687643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.522996][ T5982] usb 8-1: device descriptor read/64, error -71 [ 235.528428][ T34] usbhid 7-1:0.0: can't add hid device: -71 [ 235.532075][ T34] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 235.540951][ T34] usb 7-1: USB disconnect, device number 37 [ 235.543713][ T1488] usb 6-1: new low-speed USB device number 50 using dummy_hcd [ 235.694851][ T1488] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 235.699593][ T1488] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 235.704653][ T1488] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 235.708927][ T1488] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 235.713801][ T1488] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 235.718502][ T1488] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 235.725561][ T1488] usb 6-1: string descriptor 0 read error: -22 [ 235.728015][ T1488] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 235.731629][ T1488] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.736892][ T1488] usb 6-1: rejected 3 configurations due to insufficient available bus power [ 235.740456][ T1488] usb 6-1: no configuration chosen from 3 choices [ 235.774255][ T5982] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 235.843092][ T5089] Bluetooth: hci1: command 0x0406 tx timeout [ 235.903040][ T5982] usb 8-1: device descriptor read/64, error -71 [ 236.023196][ T5982] usb usb8-port1: attempt power cycle [ 236.229336][ T5089] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 236.373021][ T5982] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 236.404421][ T5982] usb 8-1: device descriptor read/8, error -71 [ 236.404736][ T5745] Bluetooth: hci3: command 0x0406 tx timeout [ 236.662997][ T5982] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 236.683632][ T5982] usb 8-1: device descriptor read/8, error -71 [ 237.653495][ T5982] usb usb8-port1: unable to enumerate USB device [ 237.933256][ T5745] Bluetooth: hci1: command 0x0406 tx timeout [ 238.113991][ T29] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 238.181715][ T5745] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 238.252965][ T29] usb 7-1: device descriptor read/64, error -71 [ 238.324888][ T5982] usb 6-1: USB disconnect, device number 50 [ 238.483347][ T5089] Bluetooth: hci3: command 0x0406 tx timeout [ 238.503010][ T29] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 238.543070][ T5888] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 238.632989][ T29] usb 7-1: device descriptor read/64, error -71 [ 238.682994][ T5982] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 238.693066][ T5888] usb 8-1: Using ep0 maxpacket: 32 [ 238.697029][ T5888] usb 8-1: unable to get BOS descriptor or descriptor too short [ 238.701269][ T5888] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 238.704558][ T5888] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 238.708447][ T5888] usb 8-1: config 14 has no interface number 0 [ 238.711084][ T5888] usb 8-1: config 14 has no interface number 1 [ 238.713770][ T5888] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 238.718198][ T5888] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 238.723247][ T5888] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 238.727978][ T5888] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 238.732642][ T5888] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 238.737240][ T5888] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.742538][ T5888] usb 8-1: config 14 interface 57 has no altsetting 0 [ 238.745417][ T5888] usb 8-1: config 14 interface 228 has no altsetting 0 [ 238.750273][ T5888] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 238.753283][ T29] usb usb7-port1: attempt power cycle [ 238.754180][ T5888] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.759494][ T5888] usb 8-1: Product: syz [ 238.761226][ T5888] usb 8-1: Manufacturer: syz [ 238.763258][ T5888] usb 8-1: SerialNumber: syz [ 238.844605][ T5982] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.849129][ T5982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 238.853393][ T5982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 238.857046][ T5982] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 238.861965][ T5982] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.865451][ T5982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.872082][ T5982] usb 6-1: config 0 descriptor?? [ 238.984052][ T42] audit: type=1400 audit(1782709059.560:492): avc: denied { write } for pid=9491 comm="syz.0.1378" name="/" dev="9p" ino=73687643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.093367][ T29] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 239.113660][ T29] usb 7-1: device descriptor read/8, error -71 [ 239.185247][ T5888] legousbtower 8-1:14.57: interrupt endpoints not found [ 239.353098][ T29] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 239.373617][ T29] usb 7-1: device descriptor read/8, error -71 [ 239.484200][ T5982] usbhid 6-1:0.0: can't add hid device: -71 [ 239.486904][ T5982] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 239.494040][ T29] usb usb7-port1: unable to enumerate USB device [ 239.498474][ T5982] usb 6-1: USB disconnect, device number 51 [ 239.586253][ T5888] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 239.598120][ T5888] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 240.293006][ T5982] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 240.348586][ T1488] usb 8-1: USB disconnect, device number 54 [ 240.357030][ T1488] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 240.444406][ T5982] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 240.447632][ T5982] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 240.450377][ T5982] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 240.453698][ T5982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 240.456715][ T5982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 240.460503][ T5982] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 240.464778][ T5982] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 240.467561][ T5982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.471431][ T5982] usb 6-1: config 0 descriptor?? [ 240.473917][ T9494] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 240.550999][ T5089] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 240.572961][ T5743] Bluetooth: hci3: command 0x0406 tx timeout [ 240.680419][ T5982] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 240.827426][ T858] usb 6-1: USB disconnect, device number 52 [ 240.836460][ T858] usblp0: removed [ 241.036618][ T9512] syz.3.1383 (9512): drop_caches: 2 [ 241.065752][ T9514] tipc: Failed to obtain node identity [ 241.067514][ T9514] tipc: Enabling of bearer rejected, failed to enable media [ 241.368922][ T5743] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 241.433051][ T5982] usb 8-1: new low-speed USB device number 55 using dummy_hcd [ 241.552642][ T42] audit: type=1400 audit(1782709062.120:493): avc: denied { write } for pid=9525 comm="syz.1.1388" name="/" dev="9p" ino=73687643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.594928][ T5982] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 241.598278][ T5982] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 241.602072][ T5982] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 241.605447][ T5982] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 241.609310][ T5982] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 241.612540][ T5982] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 241.617820][ T5982] usb 8-1: string descriptor 0 read error: -22 [ 241.619886][ T5982] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 241.622782][ T5982] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.629835][ T5982] usb 8-1: rejected 3 configurations due to insufficient available bus power [ 241.632597][ T5982] usb 8-1: no configuration chosen from 3 choices [ 242.062990][ T5888] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 242.213050][ T5888] usb 7-1: Using ep0 maxpacket: 32 [ 242.216509][ T5888] usb 7-1: unable to get BOS descriptor or descriptor too short [ 242.220395][ T5888] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 242.223901][ T5888] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 242.226775][ T5888] usb 7-1: config 14 has no interface number 0 [ 242.228816][ T5888] usb 7-1: config 14 has no interface number 1 [ 242.230864][ T5888] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 242.234462][ T5888] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 242.239012][ T5888] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 242.244062][ T5888] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 242.248609][ T5888] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 242.253282][ T5888] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.258477][ T5888] usb 7-1: config 14 interface 57 has no altsetting 0 [ 242.260731][ T5888] usb 7-1: config 14 interface 228 has no altsetting 0 [ 242.264870][ T5888] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 242.267862][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.270493][ T5888] usb 7-1: Product: syz [ 242.271876][ T5888] usb 7-1: Manufacturer: syz [ 242.273461][ T5888] usb 7-1: SerialNumber: syz [ 242.403103][ T34] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 242.542989][ T34] usb 5-1: device descriptor read/64, error -71 [ 242.683215][ T5888] legousbtower 7-1:14.57: interrupt endpoints not found [ 242.803077][ T34] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 242.943017][ T34] usb 5-1: device descriptor read/64, error -71 [ 243.053625][ T34] usb usb5-port1: attempt power cycle [ 243.088474][ T5888] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 243.093945][ T5888] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 243.239188][ T9535] syz.1.1392 (9535): drop_caches: 2 [ 243.285924][ T9537] tipc: Failed to obtain node identity [ 243.288248][ T9537] tipc: Enabling of bearer rejected, failed to enable media [ 243.393045][ T34] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 243.413372][ T34] usb 5-1: device descriptor read/8, error -71 [ 243.604086][ T5745] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 243.653018][ T34] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 243.673656][ T34] usb 5-1: device descriptor read/8, error -71 [ 243.783480][ T34] usb usb5-port1: unable to enumerate USB device [ 243.857550][ T1488] usb 7-1: USB disconnect, device number 42 [ 243.868371][ T1488] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 244.208662][ T62] usb 8-1: USB disconnect, device number 55 [ 244.316876][ T9550] overlayfs: missing 'lowerdir' [ 244.552978][ T62] usb 8-1: new full-speed USB device number 56 using dummy_hcd [ 244.704709][ T62] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 244.707843][ T62] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 244.710798][ T62] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 244.714236][ T62] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 244.717780][ T62] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 244.721319][ T62] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 244.726389][ T62] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 244.729935][ T62] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.735563][ T62] usb 8-1: config 0 descriptor?? [ 244.738132][ T9548] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 244.944701][ T62] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 244.988142][ T1488] usb 8-1: USB disconnect, device number 56 [ 244.999630][ T1488] usblp0: removed [ 245.352843][ T9564] syz.1.1401 (9564): drop_caches: 2 [ 245.586181][ T5743] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 245.645591][ T62] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 245.773728][ T5823] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 245.805253][ T62] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 245.809777][ T62] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 245.814617][ T62] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 245.819703][ T62] usb 5-1: config 168 interface 0 has no altsetting 0 [ 245.824077][ T62] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 245.828340][ T62] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 245.833157][ T62] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 245.838779][ T62] usb 5-1: config 168 interface 0 has no altsetting 0 [ 245.842824][ T62] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 245.847361][ T62] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 245.851777][ T62] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 245.855887][ T62] usb 5-1: config 168 interface 0 has no altsetting 0 [ 245.860255][ T62] usb 5-1: string descriptor 0 read error: -22 [ 245.862364][ T62] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 245.865421][ T62] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.874720][ T62] adutux 5-1:168.0: interrupt endpoints not found [ 245.903032][ T5823] usb 8-1: device descriptor read/64, error -71 [ 245.953061][ T41] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 246.075458][ T858] usb 5-1: USB disconnect, device number 54 [ 246.123044][ T41] usb 7-1: Using ep0 maxpacket: 32 [ 246.126846][ T41] usb 7-1: unable to get BOS descriptor or descriptor too short [ 246.130275][ T41] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 246.133606][ T41] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 246.136509][ T41] usb 7-1: config 14 has no interface number 0 [ 246.138838][ T41] usb 7-1: config 14 has no interface number 1 [ 246.141433][ T41] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 246.145220][ T41] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 246.149045][ T41] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 246.152668][ T41] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 246.156638][ T41] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 246.160335][ T41] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.164454][ T41] usb 7-1: config 14 interface 57 has no altsetting 0 [ 246.166618][ T41] usb 7-1: config 14 interface 228 has no altsetting 0 [ 246.170852][ T41] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 246.173006][ T5823] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 246.174167][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.179602][ T41] usb 7-1: Product: syz [ 246.181675][ T41] usb 7-1: Manufacturer: syz [ 246.183565][ T41] usb 7-1: SerialNumber: syz [ 246.303532][ T5823] usb 8-1: device descriptor read/64, error -71 [ 246.413924][ T5823] usb usb8-port1: attempt power cycle [ 246.583011][ T29] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 246.592658][ T41] legousbtower 7-1:14.57: interrupt endpoints not found [ 246.713029][ T29] usb 6-1: device descriptor read/64, error -71 [ 246.763248][ T5823] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 246.783685][ T5823] usb 8-1: device descriptor read/8, error -71 [ 246.815560][ T9585] tipc: Failed to obtain node identity [ 246.817817][ T9585] tipc: Enabling of bearer rejected, failed to enable media [ 246.953028][ T29] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 246.994923][ T41] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 247.000316][ T41] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 247.023135][ T5823] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 247.043686][ T5823] usb 8-1: device descriptor read/8, error -71 [ 247.082983][ T29] usb 6-1: device descriptor read/64, error -71 [ 247.121066][ T9589] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1411'. [ 247.153508][ T5823] usb usb8-port1: unable to enumerate USB device [ 247.193218][ T29] usb usb6-port1: attempt power cycle [ 247.199534][ T9593] syz.0.1413 (9593): drop_caches: 2 [ 247.473825][ T41] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 247.533008][ T29] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 247.553478][ T29] usb 6-1: device descriptor read/8, error -71 [ 247.624265][ T41] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 247.626996][ T41] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 247.629681][ T41] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 247.632484][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 247.635503][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 247.639025][ T41] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 247.643290][ T41] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 247.646145][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.650111][ T41] usb 5-1: config 0 descriptor?? [ 247.652203][ T9595] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 247.756698][ T858] usb 7-1: USB disconnect, device number 43 [ 247.763476][ T858] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 247.803088][ T29] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 247.823408][ T29] usb 6-1: device descriptor read/8, error -71 [ 247.859317][ T41] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 247.869959][ T41] usb 5-1: USB disconnect, device number 55 [ 247.876966][ T41] usblp0: removed [ 247.943186][ T29] usb usb6-port1: unable to enumerate USB device [ 248.432170][ T42] audit: type=1400 audit(1782709069.000:494): avc: denied { write } for pid=9598 comm="syz.2.1415" name="/" dev="9p" ino=73687643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.600618][ T5745] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 248.972967][ T29] usb 8-1: new low-speed USB device number 61 using dummy_hcd [ 249.203039][ T29] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 249.207824][ T29] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 249.213346][ T29] usb 8-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 249.219835][ T29] usb 8-1: config 168 interface 0 has no altsetting 0 [ 249.224612][ T29] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 249.252567][ T29] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 249.259248][ T29] usb 8-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 249.264754][ T29] usb 8-1: config 168 interface 0 has no altsetting 0 [ 249.268404][ T29] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 249.273692][ T29] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 249.278920][ T29] usb 8-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 249.286800][ T29] usb 8-1: config 168 interface 0 has no altsetting 0 [ 249.299483][ T29] usb 8-1: string descriptor 0 read error: -22 [ 249.302744][ T29] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 249.306909][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.318555][ T29] adutux 8-1:168.0: interrupt endpoints not found [ 249.568726][ T41] usb 8-1: USB disconnect, device number 61 [ 249.723213][ T9614] FAULT_INJECTION: forcing a failure. [ 249.723213][ T9614] name failslab, interval 1, probability 0, space 0, times 0 [ 249.727698][ T9614] CPU: 3 UID: 0 PID: 9614 Comm: syz.1.1420 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.727724][ T9614] Tainted: [L]=SOFTLOCKUP [ 249.727730][ T9614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.727741][ T9614] Call Trace: [ 249.727748][ T9614] [ 249.727756][ T9614] dump_stack_lvl+0x100/0x190 [ 249.727786][ T9614] should_fail_ex.cold+0x5/0xa [ 249.727811][ T9614] should_failslab+0xc2/0x120 [ 249.727834][ T9614] __kmalloc_noprof+0xfc/0x820 [ 249.727854][ T9614] ? rcu_is_watching+0x12/0xc0 [ 249.727880][ T9614] ? tomoyo_realpath_from_path+0xb6/0x690 [ 249.727913][ T9614] tomoyo_realpath_from_path+0xb6/0x690 [ 249.727945][ T9614] tomoyo_path_number_perm+0x23c/0x580 [ 249.727968][ T9614] ? tomoyo_path_number_perm+0x22e/0x580 [ 249.727992][ T9614] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 249.728041][ T9614] ? find_held_lock+0x2b/0x80 [ 249.728057][ T9614] ? __fget_files+0x215/0x3d0 [ 249.728073][ T9614] ? hook_file_ioctl_common+0x140/0x440 [ 249.728091][ T9614] ? __fget_files+0x215/0x3d0 [ 249.728113][ T9614] ? __fget_files+0x21f/0x3d0 [ 249.728136][ T9614] security_file_ioctl+0xd3/0x230 [ 249.728162][ T9614] __x64_sys_ioctl+0xb7/0x210 [ 249.728190][ T9614] do_syscall_64+0x115/0x870 [ 249.728215][ T9614] ? clear_bhb_loop+0x40/0x90 [ 249.728236][ T9614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.728254][ T9614] RIP: 0033:0x7f0bfc79ce59 [ 249.728268][ T9614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.728285][ T9614] RSP: 002b:00007f0bfd6bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.728303][ T9614] RAX: ffffffffffffffda RBX: 00007f0bfca16090 RCX: 00007f0bfc79ce59 [ 249.728314][ T9614] RDX: 0000200000000080 RSI: 0000000000005412 RDI: 0000000000000003 [ 249.728325][ T9614] RBP: 00007f0bfd6bb090 R08: 0000000000000000 R09: 0000000000000000 [ 249.728335][ T9614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.728345][ T9614] R13: 00007f0bfca16128 R14: 00007f0bfca16090 R15: 00007fff74a00828 [ 249.728370][ T9614] [ 249.728377][ T9614] ERROR: Out of memory at tomoyo_realpath_from_path. [ 250.063502][ T9617] tipc: Enabling of bearer rejected, already enabled [ 250.233096][ T9620] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1421'. [ 250.446972][ T9622] syz.2.1422 (9622): drop_caches: 2 [ 250.453150][ T9629] overlayfs: missing 'lowerdir' [ 250.555545][ T1488] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 250.706710][ T5745] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 250.743096][ T34] usb 8-1: new full-speed USB device number 62 using dummy_hcd [ 250.745256][ T1488] usb 5-1: Using ep0 maxpacket: 32 [ 250.766873][ T1488] usb 5-1: unable to get BOS descriptor or descriptor too short [ 250.797942][ T1488] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 250.802129][ T1488] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 250.821961][ T1488] usb 5-1: config 14 has no interface number 0 [ 250.826003][ T1488] usb 5-1: config 14 has no interface number 1 [ 250.828492][ T1488] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 250.836975][ T1488] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 250.841287][ T1488] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 250.846938][ T1488] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 250.851379][ T1488] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 250.864572][ T1488] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.869527][ T1488] usb 5-1: config 14 interface 57 has no altsetting 0 [ 250.872578][ T1488] usb 5-1: config 14 interface 228 has no altsetting 0 [ 250.881910][ T1488] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 250.888753][ T1488] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.900612][ T34] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 250.906741][ T34] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 250.910105][ T1488] usb 5-1: Product: syz [ 250.915956][ T34] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 250.915999][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 250.916018][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 250.916038][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 250.916070][ T34] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 250.916088][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.928184][ T34] usb 8-1: config 0 descriptor?? [ 250.929139][ T9628] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 251.014498][ T1488] usb 5-1: Manufacturer: syz [ 251.016569][ T1488] usb 5-1: SerialNumber: syz [ 251.074111][ T41] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 251.135317][ T34] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 62 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 251.220393][ T34] usb 8-1: USB disconnect, device number 62 [ 251.223131][ T41] usb 6-1: Using ep0 maxpacket: 32 [ 251.228322][ T34] usblp0: removed [ 251.228740][ T41] usb 6-1: no configurations [ 251.231560][ T41] usb 6-1: can't read configurations, error -22 [ 251.374957][ T41] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 251.483381][ T1488] legousbtower 5-1:14.57: interrupt endpoints not found [ 251.536228][ T41] usb 6-1: Using ep0 maxpacket: 32 [ 251.539465][ T41] usb 6-1: no configurations [ 251.566128][ T41] usb 6-1: can't read configurations, error -22 [ 251.578565][ T41] usb usb6-port1: attempt power cycle [ 251.887019][ T1488] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 251.892095][ T1488] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 251.993211][ T41] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 252.023709][ T41] usb 6-1: Using ep0 maxpacket: 32 [ 252.026540][ T41] usb 6-1: no configurations [ 252.028502][ T41] usb 6-1: can't read configurations, error -22 [ 252.039666][ T9644] tipc: Failed to obtain node identity [ 252.062564][ T9644] tipc: Enabling of bearer rejected, failed to enable media [ 252.193057][ T41] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 252.201089][ T9646] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1431'. [ 252.225699][ T41] usb 6-1: Using ep0 maxpacket: 32 [ 252.228690][ T41] usb 6-1: no configurations [ 252.253033][ T41] usb 6-1: can't read configurations, error -22 [ 252.304816][ T41] usb usb6-port1: unable to enumerate USB device [ 252.643708][ T9] usb 7-1: new low-speed USB device number 44 using dummy_hcd [ 252.714707][ T5888] usb 5-1: USB disconnect, device number 56 [ 252.740148][ T5888] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 252.805361][ T9] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 252.810836][ T9] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 252.828077][ T9] usb 7-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 252.839291][ T9] usb 7-1: config 168 interface 0 has no altsetting 0 [ 252.844355][ T9] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 252.851212][ T9] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 252.859060][ T9] usb 7-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 252.890543][ T9] usb 7-1: config 168 interface 0 has no altsetting 0 [ 252.911923][ T9] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 252.930395][ T9] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 252.952156][ T9] usb 7-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 252.958298][ T9] usb 7-1: config 168 interface 0 has no altsetting 0 [ 252.971207][ T9] usb 7-1: string descriptor 0 read error: -22 [ 252.979200][ T9] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 252.984846][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.996807][ T9] adutux 7-1:168.0: interrupt endpoints not found [ 253.210621][ T41] usb 7-1: USB disconnect, device number 44 [ 253.322589][ T9654] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 253.328701][ T9654] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 253.664002][ T9659] syz.0.1436 (9659): drop_caches: 2 [ 254.117989][ T5743] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 254.454440][ T9] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 254.625251][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.635420][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 255.125091][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 255.133039][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 255.161179][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 255.177509][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.208826][ T9] usb 6-1: config 0 descriptor?? [ 255.650663][ T9] hid_parser_main: 20 callbacks suppressed [ 255.650682][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 255.699030][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 255.702357][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 255.706166][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 255.709185][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 255.734220][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 255.759436][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 255.762654][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 255.765869][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 255.768923][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 255.875601][ T9] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 255.898008][ T24] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 255.984407][ T9] usb 6-1: USB disconnect, device number 61 [ 256.036517][ T9683] fido_id[9683]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/report_descriptor': No such file or directory [ 256.043111][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 256.057725][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 256.106575][ T24] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 256.112182][ T24] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 256.120462][ T24] usb 5-1: config 14 has no interface number 0 [ 256.123926][ T24] usb 5-1: config 14 has no interface number 1 [ 256.129669][ T42] audit: type=1400 audit(1782709076.690:495): avc: denied { write } for pid=9674 comm="syz.2.1440" name="/" dev="9p" ino=73687643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.141359][ T24] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 256.173457][ T24] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 256.178352][ T24] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 256.199418][ T24] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 256.210091][ T24] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 256.215129][ T24] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.259766][ T24] usb 5-1: config 14 interface 57 has no altsetting 0 [ 256.274548][ T24] usb 5-1: config 14 interface 228 has no altsetting 0 [ 256.317618][ T24] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 256.322443][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.335541][ T24] usb 5-1: Product: syz [ 256.349147][ T24] usb 5-1: Manufacturer: syz [ 256.361090][ T24] usb 5-1: SerialNumber: syz [ 256.680905][ T9685] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 256.685239][ T9685] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 256.812192][ T24] legousbtower 5-1:14.57: interrupt endpoints not found [ 256.915437][ T9688] syz.3.1445 (9688): drop_caches: 2 [ 257.033058][ T24] legousbtower 5-1:14.228: get version request failed: -71 [ 257.042255][ T24] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 257.069520][ T24] usb 5-1: USB disconnect, device number 57 [ 257.277799][ T858] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 257.351300][ T5738] usb 8-1: new low-speed USB device number 63 using dummy_hcd [ 257.379107][ T9694] FAULT_INJECTION: forcing a failure. [ 257.379107][ T9694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.386422][ T9694] CPU: 2 UID: 0 PID: 9694 Comm: syz.2.1447 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.386446][ T9694] Tainted: [L]=SOFTLOCKUP [ 257.386451][ T9694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.386459][ T9694] Call Trace: [ 257.386464][ T9694] [ 257.386470][ T9694] dump_stack_lvl+0x100/0x190 [ 257.386492][ T9694] should_fail_ex.cold+0x5/0xa [ 257.386513][ T9694] _copy_from_user+0x2e/0xd0 [ 257.386532][ T9694] io_uring_setup+0xc0/0x160 [ 257.386554][ T9694] ? __pfx_io_uring_setup+0x10/0x10 [ 257.386573][ T9694] ? find_held_lock+0x2b/0x80 [ 257.386585][ T9694] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 257.386600][ T9694] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 257.386626][ T9694] ? ksys_write+0x1ac/0x250 [ 257.386638][ T9694] ? __pfx_ksys_write+0x10/0x10 [ 257.386662][ T9694] __x64_sys_io_uring_setup+0xc2/0x170 [ 257.386682][ T9694] do_syscall_64+0x115/0x870 [ 257.386702][ T9694] ? clear_bhb_loop+0x40/0x90 [ 257.386718][ T9694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.386732][ T9694] RIP: 0033:0x7f532819ce59 [ 257.386744][ T9694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.386757][ T9694] RSP: 002b:00007f53290e7ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 257.386776][ T9694] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f532819ce59 [ 257.386785][ T9694] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 0000000000000aa6 [ 257.386793][ T9694] RBP: 0000200000000800 R08: 00002000000003c0 R09: 0000000000000000 [ 257.386801][ T9694] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 257.386810][ T9694] R13: 0000200000000890 R14: 00007f53290e7fd8 R15: 0000000000000000 [ 257.386828][ T9694] [ 257.443092][ T858] usb 6-1: Using ep0 maxpacket: 32 [ 257.513179][ T5738] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 257.513482][ T858] usb 6-1: no configurations [ 257.525954][ T5738] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 257.525996][ T5738] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 257.526018][ T5738] usb 8-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 257.526040][ T5738] usb 8-1: config 168 interface 0 has no altsetting 0 [ 257.527028][ T5738] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 257.527057][ T5738] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 257.527088][ T5738] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 257.527107][ T5738] usb 8-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 257.527127][ T5738] usb 8-1: config 168 interface 0 has no altsetting 0 [ 257.528005][ T5738] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 257.528036][ T5738] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 257.528064][ T5738] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 257.528084][ T5738] usb 8-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 257.528106][ T5738] usb 8-1: config 168 interface 0 has no altsetting 0 [ 257.540269][ T5738] usb 8-1: string descriptor 0 read error: -22 [ 257.542062][ T858] usb 6-1: can't read configurations, error -22 [ 257.652395][ T5738] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 257.657054][ T5738] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.673490][ T858] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 257.825625][ T858] usb 6-1: Using ep0 maxpacket: 32 [ 257.828190][ T858] usb 6-1: no configurations [ 257.829761][ T858] usb 6-1: can't read configurations, error -22 [ 257.832025][ T858] usb usb6-port1: attempt power cycle [ 257.903196][ T5738] adutux 8-1:168.0: interrupt endpoints not found [ 257.926282][ T5738] usb 8-1: USB disconnect, device number 63 [ 258.203292][ T858] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 258.265471][ T858] usb 6-1: Using ep0 maxpacket: 32 [ 258.303614][ T858] usb 6-1: no configurations [ 258.306062][ T858] usb 6-1: can't read configurations, error -22 [ 258.464379][ T858] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 258.483765][ T858] usb 6-1: Using ep0 maxpacket: 32 [ 258.486287][ T858] usb 6-1: no configurations [ 258.489686][ T858] usb 6-1: can't read configurations, error -22 [ 258.493699][ T858] usb usb6-port1: unable to enumerate USB device [ 258.649145][ T9707] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 258.663104][ T9707] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 258.928007][ T5745] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 259.121741][ T42] audit: type=1400 audit(1782709079.690:496): avc: denied { write } for pid=9710 comm="syz.3.1455" name="/" dev="9p" ino=73687643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 259.463198][ T858] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 259.643044][ T858] usb 7-1: Using ep0 maxpacket: 32 [ 259.646873][ T858] usb 7-1: config 0 has no interfaces? [ 259.651686][ T858] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 259.656567][ T858] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.672284][ T858] usb 7-1: Product: syz [ 259.725294][ T858] usb 7-1: Manufacturer: syz [ 259.727262][ T858] usb 7-1: SerialNumber: syz [ 259.768835][ T858] usb 7-1: config 0 descriptor?? [ 260.015212][ T858] usb 7-1: USB disconnect, device number 45 [ 260.023776][ T9719] 9pnet_virtio: no channels available for device syz [ 260.244704][ T24] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 260.429598][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 260.434123][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 260.438674][ T24] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 260.442671][ T24] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 260.447766][ T24] usb 5-1: config 14 has no interface number 0 [ 260.450877][ T24] usb 5-1: config 14 has no interface number 1 [ 260.455670][ T24] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 260.461087][ T24] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 260.467550][ T24] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 260.482676][ T24] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 260.503244][ T24] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 260.521219][ T24] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.532662][ T24] usb 5-1: config 14 interface 57 has no altsetting 0 [ 260.536691][ T24] usb 5-1: config 14 interface 228 has no altsetting 0 [ 260.541786][ T24] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 260.552452][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.590993][ T24] usb 5-1: Product: syz [ 260.593438][ T24] usb 5-1: Manufacturer: syz [ 260.595806][ T24] usb 5-1: SerialNumber: syz [ 260.729834][ T9721] tipc: Failed to obtain node identity [ 260.731942][ T9721] tipc: Enabling of bearer rejected, failed to enable media [ 260.830258][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.834143][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.997831][ T41] usb 7-1: new low-speed USB device number 46 using dummy_hcd [ 261.019007][ T24] legousbtower 5-1:14.57: interrupt endpoints not found [ 261.058657][ T9731] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000004' [ 261.145004][ T41] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 261.151108][ T41] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 261.159992][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 261.174925][ T41] usb 7-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 261.187515][ T41] usb 7-1: config 168 interface 0 has no altsetting 0 [ 261.197047][ T41] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 261.201870][ T41] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 261.218887][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 261.246613][ T41] usb 7-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 261.261741][ T41] usb 7-1: config 168 interface 0 has no altsetting 0 [ 261.278672][ T41] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 261.284069][ T41] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 261.288939][ T41] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 261.325867][ T41] usb 7-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 261.332785][ T24] legousbtower 5-1:14.228: get version request failed: -71 [ 261.339018][ T24] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 261.350433][ T24] usb 5-1: USB disconnect, device number 58 [ 261.357167][ T41] usb 7-1: config 168 interface 0 has no altsetting 0 [ 261.367859][ T41] usb 7-1: string descriptor 0 read error: -22 [ 261.370820][ T41] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 261.376225][ T5745] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 261.381179][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.403434][ T41] adutux 7-1:168.0: interrupt endpoints not found [ 261.576287][ T5745] Bluetooth: hci0: unexpected event for opcode 0x2011 [ 261.628171][ T34] usb 7-1: USB disconnect, device number 46 [ 261.845451][ T9741] overlayfs: missing 'lowerdir' [ 262.319096][ T5745] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 262.398142][ T858] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 262.609069][ T858] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 262.610237][ T9754] syz.0.1470 (9754): drop_caches: 2 [ 262.648425][ T858] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 262.684238][ T858] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 262.706724][ T858] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 262.736587][ T9758] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1471'. [ 262.746644][ T858] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 262.755100][ T9759] tipc: Enabling of bearer rejected, already enabled [ 262.797505][ T858] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.812621][ T858] usb 8-1: config 0 descriptor?? [ 263.263461][ T9769] overlayfs: missing 'lowerdir' [ 263.284507][ T858] hid_parser_main: 5 callbacks suppressed [ 263.284526][ T858] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 263.289900][ T858] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 263.292710][ T858] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 263.295448][ T858] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 263.298396][ T858] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 263.301599][ T858] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 263.306617][ T858] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 263.311910][ T858] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 263.315796][ T858] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 263.319241][ T858] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 263.345702][ T858] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 263.544637][ T5845] usb 8-1: USB disconnect, device number 64 [ 263.703276][ T858] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 263.833204][ T5745] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 263.863593][ T858] usb 6-1: Using ep0 maxpacket: 32 [ 263.868217][ T858] usb 6-1: unable to get BOS descriptor or descriptor too short [ 263.873593][ T858] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 263.879177][ T858] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 263.884099][ T858] usb 6-1: config 14 has no interface number 0 [ 263.888703][ T858] usb 6-1: config 14 has no interface number 1 [ 263.892276][ T858] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 263.899936][ T858] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 263.906841][ T858] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 263.930246][ T858] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 263.938930][ T858] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 264.022097][ T858] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.046861][ T858] usb 6-1: config 14 interface 57 has no altsetting 0 [ 264.073527][ T858] usb 6-1: config 14 interface 228 has no altsetting 0 [ 264.095434][ T858] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 264.099992][ T858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.114162][ T858] usb 6-1: Product: syz [ 264.116398][ T858] usb 6-1: Manufacturer: syz [ 264.152562][ T858] usb 6-1: SerialNumber: syz [ 264.329352][ T9787] syz.3.1482 (9787): drop_caches: 2 [ 264.393023][ T55] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 264.468298][ T9790] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1483'. [ 264.560301][ T55] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 264.571820][ T55] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 264.598106][ T55] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 264.602855][ T858] legousbtower 6-1:14.57: interrupt endpoints not found [ 264.618747][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 264.643306][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 264.647260][ T55] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 264.697141][ T9793] tipc: Failed to obtain node identity [ 264.701437][ T9793] tipc: Enabling of bearer rejected, failed to enable media [ 264.710631][ T55] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 264.717670][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.774888][ T55] usb 7-1: config 0 descriptor?? [ 264.794542][ T9784] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 264.837981][ T858] legousbtower 6-1:14.228: get version request failed: -71 [ 264.842596][ T858] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 264.906269][ T858] usb 6-1: USB disconnect, device number 66 [ 265.082835][ T55] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 265.159397][ T55] usb 7-1: USB disconnect, device number 47 [ 265.166153][ T55] usblp0: removed [ 265.377519][ T62] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 265.409827][ T9799] overlayfs: missing 'lowerdir' [ 265.513310][ C3] ================================================================== [ 265.516606][ C3] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 265.521020][ C3] Read of size 1 at addr ffff8880372a8418 by task udevd/5141 [ 265.549829][ C3] [ 265.552674][ C3] CPU: 3 UID: 0 PID: 5141 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 265.552701][ C3] Tainted: [L]=SOFTLOCKUP [ 265.552707][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 265.552716][ C3] Call Trace: [ 265.552723][ C3] [ 265.552730][ C3] dump_stack_lvl+0x100/0x190 [ 265.552756][ C3] print_report+0x13d/0x4b0 [ 265.552785][ C3] ? __virt_addr_valid+0x239/0x430 [ 265.552808][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 265.552827][ C3] kasan_report+0xdf/0x1c0 [ 265.552850][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 265.552866][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 265.552883][ C3] __kasan_check_byte+0x36/0x50 [ 265.552901][ C3] lock_acquire+0x132/0x370 [ 265.552920][ C3] ? do_raw_spin_unlock+0x53/0x1e0 [ 265.552939][ C3] ? .slowpath+0x9/0x18 [ 265.552961][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 265.552981][ C3] ? p9_req_put+0xaf/0x250 [ 265.552996][ C3] p9_req_put+0xaf/0x250 [ 265.553010][ C3] req_done+0x1dc/0x2e0 [ 265.553031][ C3] ? __pfx_req_done+0x10/0x10 [ 265.553052][ C3] ? __pfx_req_done+0x10/0x10 [ 265.553073][ C3] vring_interrupt+0x2ef/0x660 [ 265.553089][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 265.553103][ C3] __handle_irq_event_percpu+0x232/0x880 [ 265.553125][ C3] handle_irq_event+0xab/0x1e0 [ 265.553151][ C3] handle_edge_irq+0x34c/0x950 [ 265.553174][ C3] __common_interrupt+0xd8/0x2f0 [ 265.553193][ C3] common_interrupt+0xb9/0xe0 [ 265.553210][ C3] [ 265.553215][ C3] [ 265.553221][ C3] asm_common_interrupt+0x26/0x40 [ 265.553237][ C3] RIP: 0010:__rcu_read_unlock+0x3b/0x5e0 [ 265.553295][ C3] Code: 1d e2 88 45 12 48 8d bb c4 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 <38> d0 7c 08 84 d2 0f 85 0a 02 00 00 83 ab c4 04 00 00 01 75 3b 48 [ 265.553310][ C3] RSP: 0018:ffffc900037d7818 EFLAGS: 00000202 [ 265.553327][ C3] RAX: 0000000000000007 RBX: ffff88802ef20000 RCX: a97cb0f0f0baf932 [ 265.553337][ C3] RDX: 0000000000000000 RSI: ffffffff8e137c0e RDI: ffff88802ef204c4 [ 265.553346][ C3] RBP: 0000000000000001 R08: 00000000ffffffff R09: 0000000000000097 [ 265.553355][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888039154b00 [ 265.553741][ C3] R13: dffffc0000000000 R14: ffff888012fc97c0 R15: ffff88801fef0720 [ 265.553759][ C3] fast_dput+0x4c9/0x6d0 [ 265.553789][ C3] dput.part.0+0x36/0x240 [ 265.553812][ C3] dput+0x1f/0x30 [ 265.553834][ C3] step_into_slowpath+0x670/0xf90 [ 265.553859][ C3] ? __pfx___up_read+0x10/0x10 [ 265.553881][ C3] ? kernfs_dop_revalidate+0x3c6/0x7e0 [ 265.553898][ C3] ? kernfs_dop_revalidate+0x3c6/0x7e0 [ 265.553915][ C3] ? __pfx_step_into_slowpath+0x10/0x10 [ 265.553939][ C3] ? kernfs_dop_revalidate+0x20/0x7e0 [ 265.553958][ C3] ? lookup_fast+0x2da/0x600 [ 265.553977][ C3] ? inode_permission+0x374/0x620 [ 265.553998][ C3] link_path_walk+0xf28/0x1cc0 [ 265.554023][ C3] path_lookupat+0x74/0xc40 [ 265.554045][ C3] ? do_syscall_64+0x115/0x870 [ 265.554065][ C3] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.554082][ C3] filename_lookup+0x202/0x590 [ 265.554099][ C3] ? __pfx_filename_lookup+0x10/0x10 [ 265.554122][ C3] ? find_held_lock+0x2b/0x80 [ 265.554136][ C3] ? __might_fault+0xc5/0x140 [ 265.554152][ C3] ? __might_fault+0xc5/0x140 [ 265.554166][ C3] vfs_statx+0xff/0x3f0 [ 265.554188][ C3] ? __pfx_vfs_statx+0x10/0x10 [ 265.554207][ C3] ? do_getname+0x191/0x390 [ 265.554227][ C3] vfs_fstatat+0x77/0xe0 [ 265.554244][ C3] __do_sys_newfstatat+0x9d/0x120 [ 265.554264][ C3] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 265.554291][ C3] do_syscall_64+0x115/0x870 [ 265.554313][ C3] ? clear_bhb_loop+0x40/0x90 [ 265.554333][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.554348][ C3] RIP: 0033:0x7fc2b6311b0a [ 265.554363][ C3] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 265.554376][ C3] RSP: 002b:00007ffdaa1eeab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 265.554392][ C3] RAX: ffffffffffffffda RBX: 00007ffdaa1eef50 RCX: 00007fc2b6311b0a [ 265.554403][ C3] RDX: 00007ffdaa1eeac0 RSI: 00007ffdaa1eef50 RDI: 00000000ffffff9c [ 265.554413][ C3] RBP: 000055a38ca8d2c0 R08: 0000000000000000 R09: 0000000000000001 [ 265.554422][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdaa1eeb50 [ 265.554432][ C3] R13: 00000000000000fe R14: 000055a350a68be0 R15: 00007ffdaa1ef650 [ 265.554448][ C3] [ 265.554454][ C3] [ 265.949620][ C3] Allocated by task 9801: [ 265.962767][ C3] kasan_save_stack+0x30/0x50 [ 265.964489][ C3] kasan_save_track+0x14/0x30 [ 265.966881][ C3] __kasan_kmalloc+0xaa/0xb0 [ 265.969345][ C3] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 265.972216][ C3] p9_client_create+0xaf/0xd40 [ 265.974778][ C3] v9fs_session_init+0x3c/0xdd0 [ 265.977168][ C3] v9fs_get_tree+0xb8/0xb50 [ 265.995174][ C3] vfs_get_tree+0x92/0x320 [ 265.997038][ C3] path_mount+0x7d0/0x23d0 [ 265.998977][ C3] __x64_sys_mount+0x293/0x310 [ 266.014616][ C3] do_syscall_64+0x115/0x870 [ 266.016571][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.019140][ C3] [ 266.020110][ C3] Freed by task 9801: [ 266.021808][ C3] kasan_save_stack+0x30/0x50 [ 266.024076][ C3] kasan_save_track+0x14/0x30 [ 266.038471][ C3] kasan_save_free_info+0x3b/0x70 [ 266.040567][ C3] __kasan_slab_free+0x5f/0x80 [ 266.042563][ C3] kfree+0x22b/0x6c0 [ 266.044045][ C3] p9_client_create+0x72d/0xd40 [ 266.045869][ C3] v9fs_session_init+0x3c/0xdd0 [ 266.047662][ C3] v9fs_get_tree+0xb8/0xb50 [ 266.049425][ C3] vfs_get_tree+0x92/0x320 [ 266.063009][ C3] path_mount+0x7d0/0x23d0 [ 266.064912][ C3] __x64_sys_mount+0x293/0x310 [ 266.066839][ C3] do_syscall_64+0x115/0x870 [ 266.068811][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.081447][ C3] [ 266.082459][ C3] The buggy address belongs to the object at ffff8880372a8400 [ 266.082459][ C3] which belongs to the cache kmalloc-512 of size 512 [ 266.104799][ C3] The buggy address is located 24 bytes inside of [ 266.104799][ C3] freed 512-byte region [ffff8880372a8400, ffff8880372a8600) [ 266.110600][ C3] [ 266.111662][ C3] The buggy address belongs to the physical page: [ 266.114368][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x372a8 [ 266.118322][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 266.126894][ C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 266.140422][ C3] page_type: f5(slab) [ 266.142542][ C3] raw: 00fff00000000040 ffff88801bc42c80 dead000000000100 dead000000000122 [ 266.147013][ C3] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 266.161579][ C3] head: 00fff00000000040 ffff88801bc42c80 dead000000000100 dead000000000122 [ 266.182275][ C3] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 266.185887][ C3] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 266.217857][ C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 266.222334][ C3] page dumped because: kasan: bad access detected [ 266.231878][ C3] page_owner tracks the page as allocated [ 266.234251][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5442, tgid 5442 (dhcpcd), ts 36078853987, free_ts 36075114361 [ 266.260901][ C3] post_alloc_hook+0xfd/0x120 [ 266.262777][ C3] get_page_from_freelist+0xf48/0x3530 [ 266.264934][ C3] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 266.268017][ C3] new_slab+0xa2/0x650 [ 266.270204][ C3] refill_objects+0xe3/0x410 [ 266.273054][ C3] __pcs_replace_empty_main+0x376/0x680 [ 266.275704][ C3] __kmalloc_cache_noprof+0x479/0x6c0 [ 266.278550][ C3] do_seccomp+0x827/0x27d0 [ 266.280915][ C3] prctl_set_seccomp+0x4b/0x70 [ 266.283501][ C3] __do_sys_prctl+0xe7b/0x2270 [ 266.286161][ C3] do_syscall_64+0x115/0x870 [ 266.288542][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.291637][ C3] page last free pid 5443 tgid 5443 stack trace: [ 266.294661][ C3] __free_frozen_pages+0x79f/0x1090 [ 266.297507][ C3] stack_depot_save_flags+0x435/0x9d0 [ 266.300235][ C3] kasan_save_stack+0x3f/0x50 [ 266.301939][ C3] kasan_save_track+0x14/0x30 [ 266.303646][ C3] __kasan_kmalloc+0xaa/0xb0 [ 266.305333][ C3] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 266.307254][ C3] __sk_attach_prog+0x46/0x280 [ 266.308990][ C3] sk_attach_filter+0x47/0x160 [ 266.312670][ C3] sk_setsockopt+0x3a9b/0x5d80 [ 266.315121][ C3] do_sock_setsockopt+0x193/0x1d0 [ 266.317688][ C3] __sys_setsockopt+0x195/0x220 [ 266.320000][ C3] __x64_sys_setsockopt+0xbd/0x160 [ 266.322380][ C3] do_syscall_64+0x115/0x870 [ 266.324787][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.328302][ C3] [ 266.329574][ C3] Memory state around the buggy address: [ 266.332592][ C3] ffff8880372a8300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 266.336663][ C3] ffff8880372a8380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 266.340678][ C3] >ffff8880372a8400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.344480][ C3] ^ [ 266.346784][ C3] ffff8880372a8480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.369818][ C3] ffff8880372a8500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.373948][ C3] ================================================================== [ 266.377759][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 266.381470][ C3] CPU: 3 UID: 0 PID: 5141 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 266.386663][ C3] Tainted: [L]=SOFTLOCKUP [ 266.388554][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 266.392977][ C3] Call Trace: [ 266.394525][ C3] [ 266.395891][ C3] dump_stack_lvl+0x100/0x190 [ 266.398161][ C3] vpanic+0x552/0x970 [ 266.400350][ C3] ? __pfx_vpanic+0x10/0x10 [ 266.402699][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 266.405362][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 266.408160][ C3] panic+0xd1/0xe0 [ 266.410224][ C3] ? __pfx_panic+0x10/0x10 [ 266.412554][ C3] ? end_report.part.0+0x23/0x90 [ 266.415146][ C3] ? rcu_is_watching+0x12/0xc0 [ 266.417660][ C3] ? end_report.part.0+0x23/0x90 [ 266.420024][ C3] ? check_panic_on_warn+0x1f/0x90 [ 266.422317][ C3] check_panic_on_warn.cold+0x19/0x34 [ 266.425106][ C3] end_report.part.0+0x3a/0x90 [ 266.427095][ C3] kasan_report.cold+0xe/0x18 [ 266.431659][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 266.436079][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 266.440189][ C3] __kasan_check_byte+0x36/0x50 [ 266.442507][ C3] lock_acquire+0x132/0x370 [ 266.445299][ C3] ? do_raw_spin_unlock+0x53/0x1e0 [ 266.448142][ C3] ? .slowpath+0x9/0x18 [ 266.451165][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 266.454675][ C3] ? p9_req_put+0xaf/0x250 [ 266.457049][ C3] p9_req_put+0xaf/0x250 [ 266.459307][ C3] req_done+0x1dc/0x2e0 [ 266.462060][ C3] ? __pfx_req_done+0x10/0x10 [ 266.465918][ C3] ? __pfx_req_done+0x10/0x10 [ 266.467956][ C3] vring_interrupt+0x2ef/0x660 [ 266.470461][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 266.473388][ C3] __handle_irq_event_percpu+0x232/0x880 [ 266.496550][ C3] handle_irq_event+0xab/0x1e0 [ 266.498944][ C3] handle_edge_irq+0x34c/0x950 [ 266.501006][ C3] __common_interrupt+0xd8/0x2f0 [ 266.503116][ C3] common_interrupt+0xb9/0xe0 [ 266.505107][ C3] [ 266.506394][ C3] [ 266.507629][ C3] asm_common_interrupt+0x26/0x40 [ 266.509759][ C3] RIP: 0010:__rcu_read_unlock+0x3b/0x5e0 [ 266.512463][ C3] Code: 1d e2 88 45 12 48 8d bb c4 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 <38> d0 7c 08 84 d2 0f 85 0a 02 00 00 83 ab c4 04 00 00 01 75 3b 48 [ 266.521322][ C3] RSP: 0018:ffffc900037d7818 EFLAGS: 00000202 [ 266.525937][ C3] RAX: 0000000000000007 RBX: ffff88802ef20000 RCX: a97cb0f0f0baf932 [ 266.529596][ C3] RDX: 0000000000000000 RSI: ffffffff8e137c0e RDI: ffff88802ef204c4 [ 266.534299][ C3] RBP: 0000000000000001 R08: 00000000ffffffff R09: 0000000000000097 [ 266.562978][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888039154b00 [ 266.565826][ C3] R13: dffffc0000000000 R14: ffff888012fc97c0 R15: ffff88801fef0720 [ 266.568651][ C3] fast_dput+0x4c9/0x6d0 [ 266.570658][ C3] dput.part.0+0x36/0x240 [ 266.572974][ C3] dput+0x1f/0x30 [ 266.575062][ C3] step_into_slowpath+0x670/0xf90 [ 266.577565][ C3] ? __pfx___up_read+0x10/0x10 [ 266.580042][ C3] ? kernfs_dop_revalidate+0x3c6/0x7e0 [ 266.582025][ C3] ? kernfs_dop_revalidate+0x3c6/0x7e0 [ 266.583997][ C3] ? __pfx_step_into_slowpath+0x10/0x10 [ 266.586474][ C3] ? kernfs_dop_revalidate+0x20/0x7e0 [ 266.589282][ C3] ? lookup_fast+0x2da/0x600 [ 266.592053][ C3] ? inode_permission+0x374/0x620 [ 266.594631][ C3] link_path_walk+0xf28/0x1cc0 [ 266.597177][ C3] path_lookupat+0x74/0xc40 [ 266.599603][ C3] ? do_syscall_64+0x115/0x870 [ 266.603173][ C3] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.605839][ C3] filename_lookup+0x202/0x590 [ 266.607872][ C3] ? __pfx_filename_lookup+0x10/0x10 [ 266.609983][ C3] ? find_held_lock+0x2b/0x80 [ 266.611656][ C3] ? __might_fault+0xc5/0x140 [ 266.613391][ C3] ? __might_fault+0xc5/0x140 [ 266.615067][ C3] vfs_statx+0xff/0x3f0 [ 266.616568][ C3] ? __pfx_vfs_statx+0x10/0x10 [ 266.622160][ C3] ? do_getname+0x191/0x390 [ 266.624242][ C3] vfs_fstatat+0x77/0xe0 [ 266.626002][ C3] __do_sys_newfstatat+0x9d/0x120 [ 266.633116][ C3] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 266.635189][ C3] do_syscall_64+0x115/0x870 [ 266.636881][ C3] ? clear_bhb_loop+0x40/0x90 [ 266.643964][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.646538][ C3] RIP: 0033:0x7fc2b6311b0a [ 266.653558][ C3] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 266.669305][ C3] RSP: 002b:00007ffdaa1eeab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 266.673082][ C3] RAX: ffffffffffffffda RBX: 00007ffdaa1eef50 RCX: 00007fc2b6311b0a [ 266.676324][ C3] RDX: 00007ffdaa1eeac0 RSI: 00007ffdaa1eef50 RDI: 00000000ffffff9c [ 266.679814][ C3] RBP: 000055a38ca8d2c0 R08: 0000000000000000 R09: 0000000000000001 [ 266.685457][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdaa1eeb50 [ 266.690639][ C3] R13: 00000000000000fe R14: 000055a350a68be0 R15: 00007ffdaa1ef650 [ 266.694399][ C3] [ 266.697489][ C3] Kernel Offset: disabled [ 266.699295][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:58:06 Registers: info registers vcpu 0 CPU#0 RAX=ffffea000189fd08 RBX=0000000000001000 RCX=ffffffff8247564d RDX=0000000000000000 RSI=0000000000000008 RDI=ffffea000189fd00 RBP=0000000000000000 RSP=ffffc90006607b98 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffea000189fd00 R13=ffffc90006607ca8 R14=dffffc0000000000 R15=00000000000e2000 RIP=ffffffff8279ebea RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0bfd6dc6c0 ffffffff 00c00000 GS =0000 ffff8880d60e0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000e1000 CR3=000000003493a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff74a00d16 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff74a00d16 00007fff74a00d1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0bfc833452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0bfc833492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0bfc8335f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0bfc833484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0bfc9ed5f8 00007f0bfc9ed5c8 00007f0bfc9ed600 00007f0bfc9ed5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000870969 RBX=ffff88801eaf2540 RCX=ffffffff8b9ce2d5 RDX=0000000000000000 RSI=ffffffff8e15d8c3 RDI=ffffffff8c3e9b80 RBP=ffffed1003d5e4a8 RSP=ffffc90000177e00 R8 =0000000000000001 R9 =ffffed100d4a678d R10=ffff88806a533c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=dffffc0000000000 RIP=ffffffff8b9cc89f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 000fffff 00000000 FS =0000 0000000000000000 000fffff 00000000 GS =0000 ffff8880d61e0000 000fffff 00000000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c39d8d6 CR3=000000003513e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555577bdea24 0000555577bdea20 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6529ede80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe6529ede80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555577be6818 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 880fffffffffffff 0404100000080006 015afa0fffffffff ffff040010000008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000108000480e210 000193cac4b09f91 a284a110000b9b80 80080000040c0144 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff04010800060104 b80fffffffffffff 0400080004100002 1000080174d80010 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010e10000fffffff ffffff04040175c6 0010000fffffffff ffff040108000601 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04b80fffffffffff ff04000800041000 021000080174d800 10000108000480e2 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10000193cac4b09f 91a284a110000b9b 8080080000040c01 44880fffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff04041000000800 06015afa0fffffff ffffff0400100000 080006015aee2008 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0144f0762c6568 63616373663d6568 6361632c796e613d 7373816363612c64 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=4a21aaf9bd649046 RBX=ffffffff8e9e60c0 RCX=ffffc9000061f734 RDX=0000000000000001 RSI=ffffffff8e9e60c0 RDI=ffff88801f2d0bc8 RBP=ffffffff81b786ae RSP=ffffc9000061f728 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000000ae99 R12=ffff88801f2d0000 R13=ffffc9000061f830 R14=0000000000000202 R15=0000000000000002 RIP=ffffffff81e516c9 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d62e0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1e473456b8 CR3=000000005157c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 37656c69662f3165 6c69662f3038332f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd885cae96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd885cae96 00007ffd885cae9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e46633452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e46633492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e466335f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e46633484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85870585 RDI=ffffffff9b703640 RBP=ffffffff9b703600 RSP=ffffc900006f8720 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000006f R14=ffffffff9b3f61fc R15=ffffffff85870520 RIP=ffffffff858705af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc2b69c5880 ffffffff 00c00000 GS =0000 ffff8880d63e0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c424b1e CR3=0000000034085000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000290410 Opmask02=00000000ffffffff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdaa1ef1c8 00007ffdaa1ef1c8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdaa1ef3a0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a38ccf7ea0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2b63f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2b63f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326d0ffbff483 737326d5a5e2b059 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 706515f056af9f8b 73737376294bbfa0 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 307570632f302f71 6d2f30706f6f6c2f 6b636f6c622f6c61 75747269762f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003075 70632f302f716d2f 30706f6f6c2f6b63 6f6c622f6c617574 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a38cd17c98 000055a38cd17c98 0000000000000041 000000000000302e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0316668325dcecf8 000055a6d6f4509b 0000000000000041 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000