last executing test programs: 1m46.090651933s ago: executing program 3 (id=2054): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000000180)="10", 0x20) close(r1) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) landlock_create_ruleset(&(0x7f0000000280)={0x7f6e}, 0x18, 0x0) 1m43.056557834s ago: executing program 3 (id=2093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x44}}, 0x80e0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan0\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x58, 0x9, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0xfffb}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m43.050937878s ago: executing program 3 (id=2095): mknodat(0xffffffffffffff9c, &(0x7f0000001580)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000015c0)={0xffffffffffffffff}, 0x0) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000001680)='./file0\x00', &(0x7f00000016c0), 0x0, &(0x7f0000001700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m43.012076533s ago: executing program 3 (id=2096): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r2 = dup(r1) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r3, 0x0, 0x81, 0x1) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m42.920246827s ago: executing program 3 (id=2097): socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) open(&(0x7f0000000040)='./file1\x00', 0x109042, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x49) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e0402030c", @ANYRES64], 0x7) 1m42.810873328s ago: executing program 3 (id=2099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000bc0)={0x88, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) 1m42.714465384s ago: executing program 32 (id=2099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000bc0)={0x88, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) 5.610172429s ago: executing program 4 (id=3391): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan0\x00'}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) 5.60981795s ago: executing program 4 (id=3393): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000640)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000a00)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000080)="381441cad99244fb08b1") pread64(r1, &(0x7f0000025b00)=""/14, 0xe, 0x88000001) 3.317545162s ago: executing program 0 (id=3433): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 3.269769021s ago: executing program 0 (id=3435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000900)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8001, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x8, 0x96, 0xb, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000b80)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.161697822s ago: executing program 0 (id=3437): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000000180)="10", 0x20) close(r1) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) landlock_restrict_self(0xffffffffffffffff, 0xe) 2.538405514s ago: executing program 4 (id=3441): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000b00)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r3, @ANYBLOB="08000b00e4a2000008000200ac"], 0x54}}, 0x4000000) ioctl$sock_SIOCETHTOOL(r1, 0x8932, &(0x7f0000000080)={'xfrm0\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40900, 0x0) close(r4) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r8, {0xe, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffe, 0x8, 0x1, 0x3}, 0x21}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000640), 0x56) sendmsg$kcm(r9, &(0x7f0000000680)={&(0x7f00000006c0)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)="27030200dc0f14000e0007000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x7fff, @empty}, 0x1c) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB="7472616e733d76697274696f2c616e616d653d766c616e30002c66736d616769633d3078303030303030303030303030303030302c7375626b5f757365723d2c61707072616973652c61756469742c736d61636b66736861743d616e616d652c736d61636b6673726f6f743d2c5b5c2c255d2c6f626a5f757365723d26262d5b25242d26002c008f7466d71cd87b87aa34c2e0256233eae9602308119f675edd696497963b9d8f88a8f966bd377d4d8d74b6f2f57846ed883965fdb8d227e9e3574e"]) read$FUSE(0xffffffffffffffff, &(0x7f0000001700)={0x2020}, 0x2020) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) syslog(0x3, &(0x7f0000000900)=""/197, 0xc5) ioctl(r10, 0xc138fd09, &(0x7f00000007c0)="0400000000000000000000007801000038010000010000000000000000000000000000000000000000000000000000006d7061746830") 2.359850623s ago: executing program 4 (id=3444): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000400), 0xf9ba, 0x14b082) syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2.260037549s ago: executing program 4 (id=3445): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000180)=0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)='}m', 0x2}, {&(0x7f0000000280)="69ad52a5e48d0603000000fe6b0b2709827f1166a5", 0x15}], 0x2) 2.259679417s ago: executing program 4 (id=3447): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001000)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905", @ANYRES16], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x36, &(0x7f00000004c0)=ANY=[], 0x0) 940.612002ms ago: executing program 1 (id=3474): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000400), 0xf9ba, 0x14b082) syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 860.099731ms ago: executing program 1 (id=3475): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) ioctl(r0, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") 859.70333ms ago: executing program 1 (id=3477): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 779.660529ms ago: executing program 1 (id=3478): mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r0, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") 730.399865ms ago: executing program 1 (id=3479): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="02c90092000e00050017420a008000008200020a0040"], 0x17) 729.575435ms ago: executing program 2 (id=3481): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi1\x00', 0x2, 0x0) ioctl(r0, 0x40946400, &(0x7f0000000100)='pc212') 660.709714ms ago: executing program 2 (id=3482): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="02c90092000e00050017420a008000008200020a0040"], 0x17) accept4(r0, 0x0, 0x0, 0x800) 190.417606ms ago: executing program 1 (id=3483): prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(0x0, 0x9) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r2, &(0x7f00000007c0)="729afcd1a30e24696c319a879e36b30f00000e60bedf92f246292fadc023a02af8e28e64b969b252c81c0000d7a344154fd47656169565400f32cfeb96e71cfe1bc424b5ee0ae65436f421447fbc91aad417eee4bd19c3de1b90fd69c601980fceabf4ac3247eb5c90c895495869cd6ea6b6570025745ca548b9b979370df50e36834a79b2306baa5d23320ca6f7908c2773e4e5c938391839c7339204097bd341093c742d8960152ce297b98c710f36cb547336fe47578b5bb8515d2d6e8b6d0cf6ed1b7f8912f2a2e7107b899c791ec91ea7bb7d2cf7f0f3c01e22510725ae08bad94ca877b30f57ed2cf77a6516e05a9d8456ac43bcdd6c2fb138b64975d2afb691661b63be8bc8a549ffdcd5081e18dc54a15780ecfe61b9f8348cf09847ed31b8b1407e5cf94d808c7da6f223fe9ad9ebbbbe1c0ece50730e7131cfca01d48aca0f548b250270d9acb9fe47f8a0b1d7734886ce3864d58361a5400b3b6e0ed5333dde008bab759fc71b83b7e56f1efaf5de61aa449ee82ad658981c1264cd5833ef72668400a5fc74e9c637115e2c6f36610f6840daf43da2382285", 0x19e) r3 = socket$phonet_pipe(0x23, 0x805, 0x2) sendto$phonet(r3, 0x0, 0xfffffffffffffdb5, 0x40811, 0x0, 0xffffffffffffff8e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='1:0', 0x3) write(0xffffffffffffffff, &(0x7f0000000400)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='0', 0x1) 134.553573ms ago: executing program 2 (id=3484): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000400), 0xf9ba, 0x14b082) syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 130.342562ms ago: executing program 0 (id=3485): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) 60.304879ms ago: executing program 0 (id=3486): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 59.850792ms ago: executing program 2 (id=3487): mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r0, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") 59.713392ms ago: executing program 0 (id=3488): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001000)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581", @ANYRES16], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) 532.135µs ago: executing program 2 (id=3489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}}, 0x0) 0s ago: executing program 2 (id=3490): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x34044840) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x894b, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x5, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], &(0x7f0000000d00)='GPL\x00'}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000d40)={&(0x7f0000000d80)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000dc0)={r3, r2}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000e00)={r3, r2}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000600)=0x6a, 0x4) bind$inet(r4, &(0x7f0000000640)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000680)={0x2, 0x4e23, @loopback}, 0x10) sendto(r4, &(0x7f0000000740)="50fbdf12a30d7a4cb2c5c84948f3426077a9f0ca14972a603b3e78adff5905b22bae1b24430134d801251bcef8f165533a1edc5a0000d40000000000002944de604d849a1e83a8c86f66470ae2e4c639a500"/94, 0x5e, 0x4008044, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000007c0)='nv', 0x2) sendto$inet(r4, &(0x7f0000000800)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000061194c000000000095000000000000003bed51ce85cf4b61643b259e0d970d00558587e92c06c66c985dcac3991611fde368e481ea614dad9a1feeea29b4c271c7055d0b6c91de83a0a1c70af35ce90f17d1595336a89f62f88176a7b57af69b3fecc345bce6b76b292197c0ebc74b2171a6f0b809e7544a3282a1e534546fa035fd812e82144e5e5762e9e82507476bf1fbefec26e91cf0c57fec7de07912088afdae7dba5e00fad29f14c74276f2ba2e6e1f70509ee89c"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000900)={[{0x2d, 'memory'}, {0x2d, 'cpu'}, {0x2b, 'cpuset'}, {0xd4c98ac269d285af, 'pids'}, {0x2d, 'devices'}, {0x2b, 'memory'}]}, 0x2c) kernel console output (not intermixed with test programs): 48ece25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 211.163150][T12938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.163157][T12938] R13: 00007f48ece26038 R14: 00007ffeacb5c810 R15: 00007ffeacb5c8f8 [ 211.163173][T12938] [ 211.251792][T12948] net_ratelimit: 526 callbacks suppressed [ 211.364907][T12950] fuse: Bad value for 'fd' [ 211.786920][ T1349] usb 7-1: new low-speed USB device number 98 using dummy_hcd [ 211.890685][ T5086] Bluetooth: hci4: hcon ffff88802e180000 sent 1 < count 5 [ 211.890708][ T5086] Bluetooth: hci4: hcon ffff88802e180000 sent 0 < count 19692 [ 211.898511][ T5086] Bluetooth: hci4: hcon ffff888059704000 sent 3 < count 65528 [ 211.948107][ T1349] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 211.949217][ T1349] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 211.949237][ T1349] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 211.950224][ T1349] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 211.950240][ T1349] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 211.951156][ T1349] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 211.951171][ T1349] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 211.953838][ T1349] usb 7-1: string descriptor 0 read error: -22 [ 211.953939][ T1349] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.956242][ T1349] usb 7-1: rejected 3 configurations due to insufficient available bus power [ 211.956256][ T1349] usb 7-1: no configuration chosen from 3 choices [ 212.146339][ T63] usb 9-1: USB disconnect, device number 18 [ 212.230866][ T63] usblp0: removed [ 212.341211][T12970] syzkaller0: entered promiscuous mode [ 212.341226][T12970] syzkaller0: entered allmulticast mode [ 212.976663][ T66] Bluetooth: hci4: hcon ffff88802e180000 sent 0 < count 5 [ 212.976676][ T66] Bluetooth: hci4: hcon ffff88802e180000 sent 0 < count 19692 [ 213.256953][ T29] usb 6-1: new low-speed USB device number 83 using dummy_hcd [ 213.266903][ T63] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 213.408099][ T29] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 213.409171][ T29] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 213.409205][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 213.409227][ T29] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.409247][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 213.409267][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 213.410226][ T29] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 213.410259][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 213.410279][ T29] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.410303][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 213.410323][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 213.411283][ T29] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 213.411320][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 213.411341][ T29] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.411359][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 213.411379][ T29] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 213.414380][ T29] usb 6-1: string descriptor 0 read error: -22 [ 213.414492][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.421278][ T29] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 213.436932][ T63] usb 9-1: Using ep0 maxpacket: 32 [ 213.437459][ T63] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 213.438255][ T63] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 213.438279][ T63] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 213.438292][ T63] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.438308][ T63] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 213.439952][ T63] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.439962][ T63] usb 9-1: Product: syz [ 213.439969][ T63] usb 9-1: Manufacturer: syz [ 213.439977][ T63] usb 9-1: SerialNumber: syz [ 213.446416][ C3] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 213.448137][ T63] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input46 [ 213.676922][ T63] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 213.676936][ T63] (id 0x00) [ 213.726998][ T63] rc_core: IR keymap rc-imon-pad not found [ 213.727013][ T63] Registered IR keymap rc-empty [ 213.727149][ T63] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 213.727174][ T63] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 213.790735][ T42] audit: type=1400 audit(1792459841.625:724): avc: denied { mount } for pid=13002 comm="syz.0.2934" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 213.794357][T13003] ima: rule for LSM 'u' is undefined [ 213.794471][ T42] audit: type=1807 audit(1792459841.625:725): action=measure func=FILE_CHECK obj_type=u res=0 [ 213.794690][ T42] audit: type=1802 audit(1792459841.625:726): pid=13003 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.0.2934" res=0 errno=0 [ 213.795492][T13002] ima: policy update failed [ 213.795915][ T42] audit: type=1802 audit(1792459841.625:727): pid=13002 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.2934" res=0 errno=0 [ 213.863814][ T42] audit: type=1400 audit(1792459841.695:728): avc: denied { unmount } for pid=10651 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 213.877580][ T63] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 213.878986][ T63] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input47 [ 213.882705][ T63] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:19> initialized [ 213.896265][ T42] audit: type=1400 audit(1792459841.725:729): avc: denied { append } for pid=13008 comm="syz.0.2935" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 213.900972][T13009] binder: 13008:13009 ioctl c00c620f 0 returned -14 [ 214.024675][T13015] CIFS: Attempting to mount //127.0.0.1/share [ 214.030097][T13015] CIFS: VFS: cifs_mount failed w/return code = -112 [ 214.192251][T13026] FAULT_INJECTION: forcing a failure. [ 214.192251][T13026] name failslab, interval 1, probability 10, space 0, times 0 [ 214.192269][T13026] CPU: 3 UID: 0 PID: 13026 Comm: syz.0.2941 Not tainted syzkaller #0 PREEMPT(full) [ 214.192282][T13026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.192289][T13026] Call Trace: [ 214.192294][T13026] [ 214.192299][T13026] dump_stack_lvl+0x100/0x190 [ 214.192324][T13026] should_fail_ex.cold+0x5/0xa [ 214.192354][T13026] should_failslab+0xc2/0x120 [ 214.192381][T13026] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 214.192412][T13026] ? key_alloc+0x423/0x1310 [ 214.192448][T13026] kmemdup_noprof+0x29/0x60 [ 214.192472][T13026] key_alloc+0x423/0x1310 [ 214.192502][T13026] ? __pfx_key_alloc+0x10/0x10 [ 214.192519][T13026] ? __pfx_sprintf+0x10/0x10 [ 214.192535][T13026] ? _get_random_bytes+0xa8/0x220 [ 214.192553][T13026] keyring_alloc+0x44/0xc0 [ 214.192567][T13026] call_sbin_request_key+0x380/0xd90 [ 214.192587][T13026] ? __pfx_call_sbin_request_key+0x10/0x10 [ 214.192604][T13026] ? key_instantiate_and_link+0x39d/0x4b0 [ 214.192623][T13026] ? key_alloc+0xbb4/0x1310 [ 214.192641][T13026] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 214.192669][T13026] ? request_key_auth_new+0x732/0xb50 [ 214.192688][T13026] ? __pfx_request_key_auth_new+0x10/0x10 [ 214.192711][T13026] ? __pfx_call_sbin_request_key+0x10/0x10 [ 214.192729][T13026] request_key_and_link+0x1115/0x1330 [ 214.192748][T13026] ? __pfx_request_key_and_link+0x10/0x10 [ 214.192764][T13026] ? __pfx___might_resched+0x10/0x10 [ 214.192779][T13026] ? __pfx_key_default_cmp+0x10/0x10 [ 214.192791][T13026] ? __pfx_keyring_search_iterator+0x10/0x10 [ 214.192805][T13026] ? _copy_from_user+0x59/0xd0 [ 214.192825][T13026] __do_sys_request_key+0x2a2/0x3c0 [ 214.192841][T13026] ? __pfx___do_sys_request_key+0x10/0x10 [ 214.192861][T13026] do_syscall_64+0x123/0x790 [ 214.192878][T13026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.192890][T13026] RIP: 0033:0x7f0ffb39e559 [ 214.192901][T13026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.192913][T13026] RSP: 002b:00007f0ffc1f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 214.192925][T13026] RAX: ffffffffffffffda RBX: 00007f0ffb625fa0 RCX: 00007f0ffb39e559 [ 214.192933][T13026] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 214.192940][T13026] RBP: 00007f0ffb435b20 R08: 0000000000000000 R09: 0000000000000000 [ 214.192947][T13026] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 214.192954][T13026] R13: 00007f0ffb626038 R14: 00007f0ffb625fa0 R15: 00007ffda5518148 [ 214.192969][T13026] [ 214.458084][T13036] binder: 13035:13036 ioctl c00c620f 0 returned -14 [ 214.562103][ T6542] usb 7-1: USB disconnect, device number 98 [ 214.589676][T13042] syzkaller0: entered promiscuous mode [ 214.589689][T13042] syzkaller0: entered allmulticast mode [ 214.720046][T13052] befs: (nbd0): No write support. Marking filesystem read-only [ 214.720124][T13052] befs: (nbd0): unable to read superblock [ 215.304543][T13068] FAULT_INJECTION: forcing a failure. [ 215.304543][T13068] name failslab, interval 1, probability 10, space 0, times 0 [ 215.304586][T13068] CPU: 0 UID: 60928 PID: 13068 Comm: syz.0.2955 Not tainted syzkaller #0 PREEMPT(full) [ 215.304607][T13068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.304620][T13068] Call Trace: [ 215.304628][T13068] [ 215.304637][T13068] dump_stack_lvl+0x100/0x190 [ 215.304672][T13068] should_fail_ex.cold+0x5/0xa [ 215.304696][T13068] ? keyctl_read_key+0x29a/0x510 [ 215.304728][T13068] should_failslab+0xc2/0x120 [ 215.304757][T13068] __kmalloc_noprof+0xfc/0x840 [ 215.304782][T13068] ? skcipher_walk_next+0xb50/0xe50 [ 215.304812][T13068] skcipher_walk_next+0xb50/0xe50 [ 215.304853][T13068] skcipher_walk_done+0x415/0x8c0 [ 215.304886][T13068] cbc_encrypt+0xf3/0x170 [ 215.304913][T13068] ? __pfx_cbc_encrypt+0x10/0x10 [ 215.304944][T13068] ? __virt_addr_valid+0x22a/0x430 [ 215.304964][T13068] ? __virt_addr_valid+0x22a/0x430 [ 215.304990][T13068] crypto_skcipher_encrypt+0xf2/0x160 [ 215.305016][T13068] derived_key_encrypt.constprop.0+0x509/0x6b0 [ 215.305042][T13068] ? __pfx_derived_key_encrypt.constprop.0+0x10/0x10 [ 215.305068][T13068] ? kasan_quarantine_put+0x104/0x240 [ 215.305093][T13068] ? lockdep_hardirqs_on+0x7d/0x110 [ 215.305157][T13068] ? __kasan_check_byte+0x13/0x50 [ 215.305185][T13068] ? get_derived_key+0x11b/0x140 [ 215.305211][T13068] encrypted_read+0x389/0x850 [ 215.305235][T13068] ? lock_acquire+0x1d1/0x380 [ 215.305258][T13068] ? keyctl_read_key+0x227/0x510 [ 215.305287][T13068] ? __pfx_encrypted_read+0x10/0x10 [ 215.305310][T13068] ? __pfx___might_resched+0x10/0x10 [ 215.305338][T13068] ? down_read+0x13b/0x4c0 [ 215.305358][T13068] ? __pfx_down_read+0x10/0x10 [ 215.305377][T13068] ? keyctl_read_key+0x2ac/0x510 [ 215.305399][T13068] ? keyctl_read_key+0x2ac/0x510 [ 215.305419][T13068] ? keyctl_read_key+0x427/0x510 [ 215.305447][T13068] keyctl_read_key+0x29a/0x510 [ 215.305474][T13068] __do_sys_keyctl+0x36d/0x5a0 [ 215.305501][T13068] do_syscall_64+0x123/0x790 [ 215.305529][T13068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.305550][T13068] RIP: 0033:0x7f0ffb39e559 [ 215.305567][T13068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.305585][T13068] RSP: 002b:00007f0ffc1f7028 EFLAGS: 00000246 [ 215.305597][T13068] ORIG_RAX: 00000000000000fa [ 215.305606][T13068] RAX: ffffffffffffffda RBX: 00007f0ffb625fa0 RCX: 00007f0ffb39e559 [ 215.305620][T13068] RDX: 0000200000000240 RSI: 000000003fda1c49 RDI: 000000000000000b [ 215.305632][T13068] RBP: 00007f0ffb435b20 R08: 0000000000000000 R09: 0000000000000000 [ 215.305642][T13068] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 215.305654][T13068] R13: 00007f0ffb626038 R14: 00007f0ffb625fa0 R15: 00007ffda5518148 [ 215.305682][T13068] [ 215.305711][T13068] trusted_key: encrypted_key: failed to encrypt (-12) [ 215.587553][ T6542] usb 5-1: new low-speed USB device number 75 using dummy_hcd [ 215.588846][T13074] syzkaller0: entered promiscuous mode [ 215.588855][T13074] syzkaller0: entered allmulticast mode [ 215.727912][T13076] FAULT_INJECTION: forcing a failure. [ 215.727912][T13076] name failslab, interval 1, probability 10, space 0, times 0 [ 215.727940][T13076] CPU: 3 UID: 60928 PID: 13076 Comm: syz.2.2959 Not tainted syzkaller #0 PREEMPT(full) [ 215.727962][T13076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.727973][T13076] Call Trace: [ 215.727980][T13076] [ 215.727989][T13076] dump_stack_lvl+0x100/0x190 [ 215.728025][T13076] should_fail_ex.cold+0x5/0xa [ 215.728051][T13076] ? keyctl_read_key+0x29a/0x510 [ 215.728079][T13076] should_failslab+0xc2/0x120 [ 215.728108][T13076] __kmalloc_noprof+0xfc/0x840 [ 215.728135][T13076] ? skcipher_walk_next+0xb50/0xe50 [ 215.728166][T13076] skcipher_walk_next+0xb50/0xe50 [ 215.728198][T13076] skcipher_walk_done+0x415/0x8c0 [ 215.728230][T13076] cbc_encrypt+0xf3/0x170 [ 215.728257][T13076] ? __pfx_cbc_encrypt+0x10/0x10 [ 215.728301][T13076] ? __virt_addr_valid+0x22a/0x430 [ 215.728324][T13076] ? __virt_addr_valid+0x22a/0x430 [ 215.728351][T13076] crypto_skcipher_encrypt+0xf2/0x160 [ 215.728379][T13076] derived_key_encrypt.constprop.0+0x509/0x6b0 [ 215.728409][T13076] ? __pfx_derived_key_encrypt.constprop.0+0x10/0x10 [ 215.728437][T13076] ? kasan_quarantine_put+0x104/0x240 [ 215.728464][T13076] ? lockdep_hardirqs_on+0x7d/0x110 [ 215.728499][T13076] ? __kasan_check_byte+0x13/0x50 [ 215.728532][T13076] ? get_derived_key+0x11b/0x140 [ 215.728558][T13076] encrypted_read+0x389/0x850 [ 215.728586][T13076] ? lock_acquire+0x1d1/0x380 [ 215.728628][T13076] ? keyctl_read_key+0x227/0x510 [ 215.728653][T13076] ? __pfx_encrypted_read+0x10/0x10 [ 215.728679][T13076] ? __pfx___might_resched+0x10/0x10 [ 215.728709][T13076] ? down_read+0x13b/0x4c0 [ 215.728730][T13076] ? __pfx_down_read+0x10/0x10 [ 215.728751][T13076] ? keyctl_read_key+0x2ac/0x510 [ 215.728774][T13076] ? keyctl_read_key+0x2ac/0x510 [ 215.728798][T13076] ? keyctl_read_key+0x427/0x510 [ 215.728828][T13076] keyctl_read_key+0x29a/0x510 [ 215.728858][T13076] __do_sys_keyctl+0x36d/0x5a0 [ 215.728886][T13076] do_syscall_64+0x123/0x790 [ 215.728920][T13076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.728941][T13076] RIP: 0033:0x7f48ecb9e559 [ 215.728959][T13076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.728978][T13076] RSP: 002b:00007f48ed983028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 215.729000][T13076] RAX: ffffffffffffffda RBX: 00007f48ece25fa0 RCX: 00007f48ecb9e559 [ 215.729015][T13076] RDX: 0000200000000240 RSI: 000000002566cbeb RDI: 000000000000000b [ 215.729030][T13076] RBP: 00007f48ecc35b20 R08: 0000000000000000 R09: 0000000000000000 [ 215.729044][T13076] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 215.729058][T13076] R13: 00007f48ece26038 R14: 00007f48ece25fa0 R15: 00007ffeacb5c8f8 [ 215.729089][T13076] [ 215.729195][T13076] trusted_key: encrypted_key: failed to encrypt (-12) [ 215.738300][ T6542] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 215.739516][ T6542] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 215.739529][ T6542] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 215.740754][ T6542] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 215.740766][ T6542] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 215.741819][ T6542] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 215.741831][ T6542] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 215.745458][ T6542] usb 5-1: string descriptor 0 read error: -22 [ 215.745540][ T6542] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.750980][ T6542] usb 5-1: rejected 3 configurations due to insufficient available bus power [ 215.750991][ T6542] usb 5-1: no configuration chosen from 3 choices [ 216.027273][ T6542] usb 9-1: USB disconnect, device number 19 [ 216.052498][ T66] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 216.056948][ T57] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 216.207352][ T57] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 216.208147][ T57] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.208170][ T57] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 216.208183][ T57] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 216.208194][ T57] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 216.208206][ T57] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 216.208218][ T57] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 216.208229][ T57] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 216.208241][ T57] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 216.208253][ T57] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 216.208264][ T57] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 216.208275][ T57] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 216.208286][ T57] usb 7-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 216.209901][ T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.209911][ T57] usb 7-1: Product: syz [ 216.209918][ T57] usb 7-1: Manufacturer: syz [ 216.209925][ T57] usb 7-1: SerialNumber: syz [ 216.214883][T13080] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 216.214944][T13080] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 216.214991][T13080] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 216.215036][T13080] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 216.215080][T13080] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 216.215126][T13080] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 216.215173][T13080] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 216.215217][T13080] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 216.216373][ T57] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 216.216983][ T57] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 7 [ 216.218050][ T57] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 5 [ 216.219105][ T57] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 216.219982][ T57] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 3 [ 216.220022][ T57] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 4 [ 216.220090][ T57] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 216.220976][ T57] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 216.426920][ C2] net_ratelimit: 68 callbacks suppressed [ 216.524594][ T29] usb 7-1: USB disconnect, device number 99 [ 216.533047][ T29] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 216.536310][ T29] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 216.537488][ T29] keyspan 7-1:1.0: device disconnected [ 217.421979][ T66] Bluetooth: hci0: hcon ffff8880409dc000 sent 1 < count 5 [ 217.983508][T13094] syzkaller0: entered promiscuous mode [ 217.983523][T13094] syzkaller0: entered allmulticast mode [ 218.110384][ T29] usb 6-1: USB disconnect, device number 83 [ 218.317786][ T42] audit: type=1804 audit(1792459846.145:730): pid=13096 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.2.2968" name="ima_policy_written" res=0 errno=-17 [ 218.317997][T13096] ima: rule for LSM 'u' is undefined [ 218.318991][ T42] audit: type=1807 audit(1792459846.155:731): action=measure func=FILE_CHECK obj_type=u res=0 [ 218.320090][ T42] audit: type=1802 audit(1792459846.155:732): pid=13096 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.2.2968" res=0 errno=0 [ 218.320369][T13095] ima: policy update failed [ 218.320514][ T42] audit: type=1802 audit(1792459846.155:733): pid=13095 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.2.2968" res=0 errno=0 [ 218.347112][ T63] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 218.363614][ T6542] usb 5-1: USB disconnect, device number 75 [ 218.497170][ T63] usb 9-1: Using ep0 maxpacket: 32 [ 218.498983][ T63] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 218.501377][ T63] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 218.501411][ T63] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 218.501430][ T63] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 218.501449][ T63] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 218.503039][ T63] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.503048][ T63] usb 9-1: Product: syz [ 218.503059][ T63] usb 9-1: Manufacturer: syz [ 218.503066][ T63] usb 9-1: SerialNumber: syz [ 218.510630][ T63] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 218.510686][ T63] imon 9-1:155.0: unable to initialize intf0, err -19 [ 218.510702][ T63] imon:imon_probe: failed to initialize context! [ 218.510711][ T63] imon 9-1:155.0: unable to register, err -19 [ 218.519362][ T29] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 218.667890][ T29] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 218.668835][ T29] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 218.668849][ T29] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 218.668858][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 218.668887][ T29] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.670254][ T29] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 218.670264][ T29] usb 6-1: Product: syz [ 218.670271][ T29] usb 6-1: Manufacturer: syz [ 218.673866][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 218.673877][ T29] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 218.826978][ T7100] usb 5-1: new low-speed USB device number 76 using dummy_hcd [ 218.856900][ T6542] usb 7-1: new low-speed USB device number 100 using dummy_hcd [ 218.878032][ T1349] usb 6-1: USB disconnect, device number 84 [ 218.977406][ T7100] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 218.978381][ T7100] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 218.978403][ T7100] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 218.978418][ T7100] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.978431][ T7100] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 218.978445][ T7100] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 218.979368][ T7100] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 218.979388][ T7100] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 218.979402][ T7100] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.979415][ T7100] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 218.979430][ T7100] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 218.980374][ T7100] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 218.980395][ T7100] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 218.980409][ T7100] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.980422][ T7100] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 218.980436][ T7100] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 218.983163][ T7100] usb 5-1: string descriptor 0 read error: -22 [ 218.983325][ T7100] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.991969][ T7100] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 219.017745][ T6542] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 219.019006][ T6542] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 219.019027][ T6542] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 219.020161][ T6542] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 219.020181][ T6542] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 219.021495][ T6542] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 219.021515][ T6542] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 219.024965][ T6542] usb 7-1: string descriptor 0 read error: -22 [ 219.025102][ T6542] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.027543][ T6542] usb 7-1: rejected 3 configurations due to insufficient available bus power [ 219.027561][ T6542] usb 7-1: no configuration chosen from 3 choices [ 219.194664][ T9] usb 5-1: USB disconnect, device number 76 [ 219.931419][ T42] audit: type=1804 audit(1792459847.765:734): pid=13143 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.1.2985" name="ima_policy_written" res=0 errno=-17 [ 219.931448][T13143] ima: rule for LSM 'u' is undefined [ 219.931493][ T42] audit: type=1807 audit(1792459847.765:735): action=measure func=FILE_CHECK obj_type=u res=0 [ 219.931553][ T42] audit: type=1802 audit(1792459847.765:736): pid=13143 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.1.2985" res=0 errno=0 [ 219.931763][T13142] ima: policy update failed [ 219.934871][ T42] audit: type=1802 audit(1792459847.765:737): pid=13142 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.1.2985" res=0 errno=0 [ 220.113045][T13159] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 220.175871][T13163] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 220.175885][T13163] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 220.856953][ T24] usb 5-1: new low-speed USB device number 77 using dummy_hcd [ 221.007954][ T24] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 221.009203][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 221.009241][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 221.009267][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 221.009290][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 221.009315][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 221.010534][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 221.010569][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 221.010594][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 221.010617][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 221.010639][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 221.012474][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 221.012509][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 221.012533][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 221.012557][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 221.012580][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 221.015946][ T24] usb 5-1: string descriptor 0 read error: -22 [ 221.016059][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.025436][ T24] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 221.130658][ T24] usb 9-1: USB disconnect, device number 20 [ 221.333031][ T6542] usb 5-1: USB disconnect, device number 77 [ 221.336156][T13177] usb 5-1: Couldn't submit interrupt_out_urb -19 [ 221.457749][ T42] audit: type=1804 audit(1792459849.295:738): pid=13173 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.4.2995" name="ima_policy_written" res=0 errno=-17 [ 221.457918][T13173] ima: rule for LSM 'u' is undefined [ 221.457976][ T42] audit: type=1807 audit(1792459849.295:739): action=measure func=FILE_CHECK obj_type=u res=0 [ 221.458553][T13172] ima: policy update failed [ 221.547621][ T1164] net_ratelimit: 66 callbacks suppressed [ 221.620177][ T29] usb 7-1: USB disconnect, device number 100 [ 221.672285][T13188] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 221.978034][T13199] trusted_key: encrypted_key: insufficient parameters specified [ 222.739287][T13203] befs: (nbd4): No write support. Marking filesystem read-only [ 222.739767][T13203] befs: (nbd4): unable to read superblock [ 222.956959][ T57] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 223.117955][ T57] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 223.119154][ T57] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 223.119192][ T57] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 223.120343][ T57] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 223.120378][ T57] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 223.121562][ T57] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 223.121596][ T57] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 223.124831][ T57] usb 5-1: string descriptor 0 read error: -22 [ 223.124948][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.133222][ T57] adutux 5-1:168.0: interrupt endpoints not found [ 223.137457][T13209] md: could not open device unknown-block(1,0). [ 223.333261][ T57] usb 5-1: USB disconnect, device number 78 [ 223.869920][T13228] trusted_key: encrypted_key: insufficient parameters specified [ 223.906882][T13232] netlink: 'syz.4.3014': attribute type 11 has an invalid length. [ 223.906895][T13232] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3014'. [ 223.907578][T13231] binder_alloc: 13230: binder_alloc_buf, no vma [ 223.916548][T13232] syzkaller0: entered promiscuous mode [ 223.916556][T13232] syzkaller0: entered allmulticast mode [ 223.944028][T13234] befs: (nbd0): No write support. Marking filesystem read-only [ 223.944119][T13234] befs: (nbd0): unable to read superblock [ 224.409367][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 224.409375][ T42] audit: type=1326 audit(1792459852.245:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.1.3023" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f568679e559 code=0x0 [ 224.529260][T13258] md: could not open device unknown-block(1,0). [ 224.568160][ T24] usb 9-1: new low-speed USB device number 21 using dummy_hcd [ 224.708496][T13269] syzkaller0: entered promiscuous mode [ 224.708507][T13269] syzkaller0: entered allmulticast mode [ 224.713095][T13269] tipc: Started in network mode [ 224.713118][T13269] tipc: Node identity baf458feddbb, cluster identity 4711 [ 224.713320][T13269] tipc: Enabled bearer , priority 0 [ 224.715982][T13269] tipc: Resetting bearer [ 224.720705][ T24] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 224.721015][T13268] tipc: Resetting bearer [ 224.734626][ T24] usb 9-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 224.734650][ T24] usb 9-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 224.735487][ T24] usb 9-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 224.735509][ T24] usb 9-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 224.735839][T13268] tipc: Disabling bearer [ 224.736649][ T24] usb 9-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 224.736676][ T24] usb 9-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 224.739318][ T24] usb 9-1: string descriptor 0 read error: -22 [ 224.739382][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.759568][ T63] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 224.800008][ T24] adutux 9-1:168.0: interrupt endpoints not found [ 224.917038][ T63] usb 5-1: Using ep0 maxpacket: 16 [ 224.917602][ T63] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 224.986843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 225.205217][ T7373] usb 9-1: USB disconnect, device number 21 [ 225.812140][ T42] audit: type=1400 audit(1792459853.645:745): avc: denied { create } for pid=13288 comm="syz.4.3036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 225.816545][ T42] audit: type=1400 audit(1792459853.645:746): avc: denied { write } for pid=13288 comm="syz.4.3036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 225.841228][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 225.844604][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.844615][ T63] usb 5-1: Product: syz [ 225.844624][ T63] usb 5-1: Manufacturer: syz [ 225.844632][ T63] usb 5-1: SerialNumber: syz [ 225.846601][ T63] usb 5-1: config 0 descriptor?? [ 225.849598][ T63] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 225.849613][ T63] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 225.862000][T13291] netlink: 'syz.4.3037': attribute type 11 has an invalid length. [ 225.862019][T13291] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3037'. [ 225.881135][T13291] syzkaller0: entered promiscuous mode [ 225.881149][T13291] syzkaller0: entered allmulticast mode [ 226.108264][ T63] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 226.170246][ T63] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 226.170271][ T63] em28xx 5-1:0.0: board has no eeprom [ 226.227526][ T63] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 226.227554][ T63] em28xx 5-1:0.0: dvb set to bulk mode. [ 226.228422][ T71] em28xx 5-1:0.0: Binding DVB extension [ 226.235874][ T63] usb 5-1: USB disconnect, device number 79 [ 226.254200][ T63] em28xx 5-1:0.0: Disconnecting em28xx [ 226.263388][T13262] i2c i2c-2: new_device: Extra parameters [ 226.264556][ T71] em28xx 5-1:0.0: Registering input extension [ 226.264812][ T63] em28xx 5-1:0.0: Closing input extension [ 226.288213][ T63] em28xx: Freeing device [ 226.365242][T13302] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 226.402903][T13304] befs: (nbd1): No write support. Marking filesystem read-only [ 226.403087][T13304] befs: (nbd1): unable to read superblock [ 226.414356][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3042'. [ 226.414470][T13304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3042'. [ 226.587054][ T36] net_ratelimit: 88 callbacks suppressed [ 226.673522][T13309] tipc: Started in network mode [ 226.673538][T13309] tipc: Node identity 080211000001, cluster identity 4711 [ 226.674509][T13309] tipc: Enabled bearer , priority 0 [ 226.676492][T13309] tipc: Resetting bearer [ 226.831785][T13319] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 226.877380][T13319] md: couldn't update array info. -22 [ 226.937005][T13319] md: could not open device unknown-block(1,1). [ 226.937072][T13319] md: md_import_device returned -16 [ 227.030504][T13333] befs: (nbd1): No write support. Marking filesystem read-only [ 227.031227][T13333] befs: (nbd1): unable to read superblock [ 227.050676][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3053'. [ 227.050689][T13333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3053'. [ 227.128014][ T57] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 227.277730][ T57] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 227.278873][ T57] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 227.278894][ T57] usb 9-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 227.278910][ T57] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 227.278976][ T57] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.280744][ T57] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 227.280761][ T57] usb 9-1: Product: syz [ 227.280773][ T57] usb 9-1: Manufacturer: syz [ 227.288609][ T57] cdc_wdm 9-1:1.0: skipping garbage [ 227.288627][ T57] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 227.425788][ T42] audit: type=1804 audit(1792459855.255:747): pid=13348 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.0.3058" name="ima_policy_written" res=0 errno=-17 [ 227.425891][T13348] ima: rule for LSM 'u' is undefined [ 227.425918][ T42] audit: type=1807 audit(1792459855.255:748): action=measure func=FILE_CHECK obj_type=u res=0 [ 227.426008][ T42] audit: type=1802 audit(1792459855.255:749): pid=13348 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.0.3058" res=0 errno=0 [ 227.426201][T13347] ima: policy update failed [ 227.426264][ T42] audit: type=1802 audit(1792459855.255:750): pid=13347 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.3058" res=0 errno=0 [ 227.489575][ T29] usb 9-1: USB disconnect, device number 22 [ 227.534274][T13360] tipc: Enabling of bearer rejected, already enabled [ 227.797300][ T9] tipc: Node number set to 134418688 [ 227.858489][ T42] audit: type=1804 audit(1792459855.695:751): pid=13377 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.0.3070" name="ima_policy_written" res=0 errno=-17 [ 227.858601][T13377] ima: rule for LSM 'u' is undefined [ 227.858711][ T42] audit: type=1807 audit(1792459855.695:752): action=measure func=FILE_CHECK obj_type=u res=0 [ 227.858730][ T42] audit: type=1802 audit(1792459855.695:753): pid=13377 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.0.3070" res=0 errno=0 [ 227.858912][T13376] ima: policy update failed [ 228.025769][T13390] netlink: 'syz.4.3076': attribute type 11 has an invalid length. [ 228.025786][T13390] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3076'. [ 228.041632][T13390] syzkaller0: entered promiscuous mode [ 228.041641][T13390] syzkaller0: entered allmulticast mode [ 228.229282][T13407] befs: (nbd0): No write support. Marking filesystem read-only [ 228.229350][T13407] befs: (nbd0): unable to read superblock [ 228.238821][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3082'. [ 228.238832][T13407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3082'. [ 228.332992][T13409] ima: rule for LSM 'u' is undefined [ 228.333474][T13408] ima: policy update failed [ 228.437003][T13418] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 228.475287][T13423] netlink: 'syz.0.3088': attribute type 11 has an invalid length. [ 228.475299][T13423] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3088'. [ 228.485397][T13423] syzkaller0: entered promiscuous mode [ 228.485405][T13423] syzkaller0: entered allmulticast mode [ 228.705262][T13441] ima: rule for LSM 'u' is undefined [ 228.705516][T13440] ima: policy update failed [ 228.809914][T13456] FAULT_INJECTION: forcing a failure. [ 228.809914][T13456] name failslab, interval 1, probability 10, space 0, times 0 [ 228.809951][T13456] CPU: 3 UID: 0 PID: 13456 Comm: syz.4.3102 Not tainted syzkaller #0 PREEMPT(full) [ 228.809964][T13456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.809971][T13456] Call Trace: [ 228.809976][T13456] [ 228.809981][T13456] dump_stack_lvl+0x100/0x190 [ 228.810003][T13456] should_fail_ex.cold+0x5/0xa [ 228.810018][T13456] ? keyctl_read_key+0x29a/0x510 [ 228.810040][T13456] should_failslab+0xc2/0x120 [ 228.810058][T13456] __kmalloc_noprof+0xfc/0x840 [ 228.810074][T13456] ? skcipher_walk_next+0xb50/0xe50 [ 228.810094][T13456] skcipher_walk_next+0xb50/0xe50 [ 228.810114][T13456] skcipher_walk_done+0x415/0x8c0 [ 228.810132][T13456] cbc_encrypt+0xf3/0x170 [ 228.810147][T13456] ? __pfx_cbc_encrypt+0x10/0x10 [ 228.810167][T13456] ? __virt_addr_valid+0x22a/0x430 [ 228.810179][T13456] ? __virt_addr_valid+0x22a/0x430 [ 228.810194][T13456] crypto_skcipher_encrypt+0xf2/0x160 [ 228.810208][T13456] derived_key_encrypt.constprop.0+0x509/0x6b0 [ 228.810225][T13456] ? __pfx_derived_key_encrypt.constprop.0+0x10/0x10 [ 228.810240][T13456] ? kasan_quarantine_put+0x104/0x240 [ 228.810254][T13456] ? lockdep_hardirqs_on+0x7d/0x110 [ 228.810274][T13456] ? __kasan_check_byte+0x13/0x50 [ 228.810292][T13456] ? get_derived_key+0x11b/0x140 [ 228.810307][T13456] encrypted_read+0x389/0x850 [ 228.810321][T13456] ? lock_acquire+0x1d1/0x380 [ 228.810334][T13456] ? keyctl_read_key+0x227/0x510 [ 228.810348][T13456] ? __pfx_encrypted_read+0x10/0x10 [ 228.810361][T13456] ? __pfx___might_resched+0x10/0x10 [ 228.810376][T13456] ? down_read+0x13b/0x4c0 [ 228.810389][T13456] ? __pfx_down_read+0x10/0x10 [ 228.810400][T13456] ? keyctl_read_key+0x2ac/0x510 [ 228.810414][T13456] ? keyctl_read_key+0x2ac/0x510 [ 228.810429][T13456] ? keyctl_read_key+0x427/0x510 [ 228.810446][T13456] keyctl_read_key+0x29a/0x510 [ 228.810461][T13456] __do_sys_keyctl+0x36d/0x5a0 [ 228.810477][T13456] do_syscall_64+0x123/0x790 [ 228.810495][T13456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.810507][T13456] RIP: 0033:0x7f7689b9e559 [ 228.810517][T13456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.810529][T13456] RSP: 002b:00007f768aacf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 228.810541][T13456] RAX: ffffffffffffffda RBX: 00007f7689e25fa0 RCX: 00007f7689b9e559 [ 228.810548][T13456] RDX: 0000200000000240 RSI: 00000000334222bb RDI: 000000000000000b [ 228.810555][T13456] RBP: 00007f7689c35b20 R08: 0000000000000000 R09: 0000000000000000 [ 228.810562][T13456] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 228.810570][T13456] R13: 00007f7689e26038 R14: 00007f7689e25fa0 R15: 00007ffd2ffde428 [ 228.810585][T13456] [ 228.810600][T13456] trusted_key: encrypted_key: failed to encrypt (-12) [ 228.816112][T13458] overlayfs: failed to resolve './file1/file0': -2 [ 228.896949][ T29] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 228.941012][T13466] ima: rule for LSM 'u' is undefined [ 228.941275][T13465] ima: policy update failed [ 229.013689][T13473] syzkaller0: entered promiscuous mode [ 229.013698][T13473] syzkaller0: entered allmulticast mode [ 229.016295][T13473] tipc: Started in network mode [ 229.016310][T13473] tipc: Node identity e6c606016554, cluster identity 4711 [ 229.016451][T13473] tipc: Enabled bearer , priority 0 [ 229.019279][T13473] tipc: Resetting bearer [ 229.022881][T13472] tipc: Resetting bearer [ 229.033736][T13472] tipc: Disabling bearer [ 229.047816][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 229.048320][ T29] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 229.049217][ T29] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 229.049250][ T29] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 229.049273][ T29] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.049295][ T29] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 229.049316][ T29] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 229.051503][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.051515][ T29] usb 5-1: Product: syz [ 229.051524][ T29] usb 5-1: Manufacturer: syz [ 229.051532][ T29] usb 5-1: SerialNumber: syz [ 229.056187][ T29] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 229.056224][ T29] imon 5-1:155.0: unable to initialize intf0, err -90 [ 229.056232][ T29] imon:imon_probe: failed to initialize context! [ 229.056238][ T29] imon 5-1:155.0: unable to register, err -19 [ 229.227284][ T7373] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 229.285793][T13483] befs: (nbd4): No write support. Marking filesystem read-only [ 229.285904][T13483] befs: (nbd4): unable to read superblock [ 229.301839][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3113'. [ 229.301855][T13483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3113'. [ 229.398278][ T7373] usb 6-1: Using ep0 maxpacket: 8 [ 229.399892][ T7373] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 229.400782][ T7373] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.400795][ T7373] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 229.400830][ T7373] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.400860][ T7373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.405741][ T7373] hub 6-1:1.0: bad descriptor, ignoring hub [ 229.405751][ T7373] hub 6-1:1.0: probe with driver hub failed with error -5 [ 229.406119][ T7373] cdc_wdm 6-1:1.0: skipping garbage [ 229.406126][ T7373] cdc_wdm 6-1:1.0: skipping garbage [ 229.406132][ T7373] cdc_wdm 6-1:1.0: skipping garbage [ 229.406142][ T7373] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 229.469317][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 229.469334][ T42] audit: type=1804 audit(1792459857.305:767): pid=13490 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.2.3116" name="ima_policy_written" res=0 errno=-17 [ 229.469515][T13490] ima: rule for LSM 'u' is undefined [ 229.469709][ T42] audit: type=1807 audit(1792459857.305:768): action=measure func=FILE_CHECK obj_type=u res=0 [ 229.469742][ T42] audit: type=1802 audit(1792459857.305:769): pid=13490 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.2.3116" res=0 errno=0 [ 229.470007][T13489] ima: policy update failed [ 229.470127][ T42] audit: type=1802 audit(1792459857.305:770): pid=13489 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.2.3116" res=0 errno=0 [ 229.579224][T13500] syzkaller0: entered promiscuous mode [ 229.579233][T13500] syzkaller0: entered allmulticast mode [ 229.584065][T13500] tipc: Enabled bearer , priority 0 [ 229.591954][T13500] tipc: Resetting bearer [ 229.594994][T13499] tipc: Resetting bearer [ 229.601460][T13499] tipc: Disabling bearer [ 229.717137][ T57] usb 6-1: USB disconnect, device number 85 [ 229.895126][T13527] befs: (nbd4): No write support. Marking filesystem read-only [ 229.895212][T13527] befs: (nbd4): unable to read superblock [ 229.899826][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3125'. [ 229.899836][T13527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3125'. [ 230.003217][ T42] audit: type=1804 audit(1792459857.835:771): pid=13530 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.4.3126" name="ima_policy_written" res=0 errno=-17 [ 230.003328][T13530] ima: rule for LSM 'u' is undefined [ 230.003459][ T42] audit: type=1807 audit(1792459857.835:772): action=measure func=FILE_CHECK obj_type=u res=0 [ 230.003479][ T42] audit: type=1802 audit(1792459857.835:773): pid=13530 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.4.3126" res=0 errno=0 [ 230.003565][T13529] ima: policy update failed [ 230.003655][ T42] audit: type=1802 audit(1792459857.835:774): pid=13529 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.4.3126" res=0 errno=0 [ 230.128436][T13539] syzkaller0: entered promiscuous mode [ 230.128444][T13539] syzkaller0: entered allmulticast mode [ 230.131476][T13539] tipc: Enabled bearer , priority 0 [ 230.133526][T13539] tipc: Resetting bearer [ 230.136102][T13538] tipc: Resetting bearer [ 230.143131][T13538] tipc: Disabling bearer [ 230.707126][ T9] usb 6-1: new low-speed USB device number 86 using dummy_hcd [ 230.707177][T13580] syzkaller0: entered promiscuous mode [ 230.707193][T13580] syzkaller0: entered allmulticast mode [ 230.711052][T13580] tipc: Enabled bearer , priority 0 [ 230.716188][T13580] tipc: Resetting bearer [ 230.721406][T13579] tipc: Resetting bearer [ 230.731789][T13579] tipc: Disabling bearer [ 230.857419][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 230.858267][ T9] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 230.858291][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 230.858304][ T9] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.859087][ T9] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 230.859108][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 230.859121][ T9] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.859914][ T9] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 230.859934][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 230.859947][ T9] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.862212][ T9] usb 6-1: string descriptor 0 read error: -22 [ 230.862308][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.866233][ T9] adutux 6-1:168.0: interrupt endpoints not found [ 230.964834][T13605] syzkaller0: entered promiscuous mode [ 230.964852][T13605] syzkaller0: entered allmulticast mode [ 230.970031][T13605] tipc: Enabled bearer , priority 0 [ 230.974494][T13605] tipc: Resetting bearer [ 230.980261][T13604] tipc: Resetting bearer [ 230.986061][T13604] tipc: Disabling bearer [ 231.068788][ T7373] usb 6-1: USB disconnect, device number 86 [ 231.100428][T13621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3164'. [ 231.133593][ T42] audit: type=1326 audit(1792459858.965:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13624 comm="syz.4.3166" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7689b9e559 code=0x0 [ 231.227293][T13630] md: could not open device unknown-block(1,0). [ 231.251282][T13632] netlink: 'syz.2.3169': attribute type 11 has an invalid length. [ 231.251292][T13632] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3169'. [ 231.662381][ T63] usb 5-1: USB disconnect, device number 80 [ 231.751511][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3178'. [ 231.751527][T13654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3178'. [ 231.773476][T13659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3180'. [ 231.773489][T13659] net_ratelimit: 39 callbacks suppressed [ 231.773495][T13659] openvswitch: netlink: Flow actions attr not present in new flow. [ 231.900305][T13667] syzkaller0: entered promiscuous mode [ 231.900319][T13667] syzkaller0: entered allmulticast mode [ 231.903910][T13667] tipc: Enabled bearer , priority 0 [ 231.910499][T13667] tipc: Resetting bearer [ 231.915033][T13666] tipc: Resetting bearer [ 231.926636][T13666] tipc: Disabling bearer [ 232.031392][T13677] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 232.217876][ T71] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 232.232642][T13699] syzkaller0: entered promiscuous mode [ 232.232651][T13699] syzkaller0: entered allmulticast mode [ 232.234968][T13699] tipc: Enabled bearer , priority 0 [ 232.237466][T13699] tipc: Resetting bearer [ 232.240979][T13698] tipc: Resetting bearer [ 232.255232][T13698] tipc: Disabling bearer [ 232.363427][T13706] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 232.388470][ T71] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 232.389672][ T71] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 232.389762][ T71] usb 5-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 232.389781][ T71] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 232.389841][ T71] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.392142][ T71] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 232.392222][ T71] usb 5-1: Product: syz [ 232.392239][ T71] usb 5-1: Manufacturer: syz [ 232.401406][ T71] cdc_wdm 5-1:1.0: skipping garbage [ 232.401421][ T71] cdc_wdm 5-1:1.0: skipping garbage [ 232.401442][ T71] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 232.605467][ T1349] usb 5-1: USB disconnect, device number 81 [ 232.634704][T13719] binder_alloc: 13718: binder_alloc_buf, no vma [ 232.720890][T13722] befs: (nbd1): No write support. Marking filesystem read-only [ 232.721039][T13722] befs: (nbd1): unable to read superblock [ 232.730338][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3205'. [ 232.991598][T13727] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 233.176675][T13738] syzkaller0: entered promiscuous mode [ 233.176684][T13738] syzkaller0: entered allmulticast mode [ 233.180605][T13738] tipc: Enabled bearer , priority 0 [ 233.183567][T13738] tipc: Resetting bearer [ 233.185276][T13736] tipc: Resetting bearer [ 233.187194][T13741] trusted_key: encrypted_key: key user:syz not found [ 233.198506][T13736] tipc: Disabling bearer [ 233.280237][T13754] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 233.309597][T13754] md: couldn't update array info. -22 [ 233.444647][T13765] overlayfs: overlapping lowerdir path [ 233.495045][T13769] FAULT_INJECTION: forcing a failure. [ 233.495045][T13769] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 233.495087][T13769] CPU: 2 UID: 0 PID: 13769 Comm: syz.4.3225 Not tainted syzkaller #0 PREEMPT(full) [ 233.495101][T13769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.495108][T13769] Call Trace: [ 233.495117][T13769] [ 233.495128][T13769] dump_stack_lvl+0x100/0x190 [ 233.495156][T13769] should_fail_ex.cold+0x5/0xa [ 233.495182][T13769] _copy_from_user+0x2e/0xd0 [ 233.495203][T13769] __sys_bpf+0x2f5/0x4a30 [ 233.495223][T13769] ? __pfx___sys_bpf+0x10/0x10 [ 233.495235][T13769] ? find_held_lock+0x2b/0x80 [ 233.495252][T13769] ? futex_wake+0x4ea/0x5e0 [ 233.495274][T13769] ? rcu_read_lock_any_held+0x6a/0x90 [ 233.495286][T13769] ? find_held_lock+0x2b/0x80 [ 233.495302][T13769] ? ksys_write+0x190/0x250 [ 233.495315][T13769] ? ksys_write+0x190/0x250 [ 233.495339][T13769] ? __x64_sys_futex+0x34f/0x4d0 [ 233.495355][T13769] ? __x64_sys_futex+0x358/0x4d0 [ 233.495372][T13769] ? fput+0x7c/0x100 [ 233.495388][T13769] ? __pfx___x64_sys_futex+0x10/0x10 [ 233.495403][T13769] ? ksys_write+0x1ac/0x250 [ 233.495419][T13769] ? __x64_sys_bpf+0xce/0x140 [ 233.495431][T13769] __x64_sys_bpf+0xce/0x140 [ 233.495444][T13769] ? do_syscall_64+0xae/0x790 [ 233.495465][T13769] do_syscall_64+0x123/0x790 [ 233.495483][T13769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.495495][T13769] RIP: 0033:0x7f7689b9e559 [ 233.495506][T13769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.495518][T13769] RSP: 002b:00007f768aacf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.495529][T13769] RAX: ffffffffffffffda RBX: 00007f7689e25fa0 RCX: 00007f7689b9e559 [ 233.495538][T13769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 233.495545][T13769] RBP: 00007f7689c35b20 R08: 0000000000000000 R09: 0000000000000000 [ 233.495552][T13769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.495560][T13769] R13: 00007f7689e26038 R14: 00007f7689e25fa0 R15: 00007ffd2ffde428 [ 233.495584][T13769] [ 233.607896][T13779] tipc: Enabling of bearer rejected, already enabled [ 233.773244][T13795] binder_alloc: 13794: binder_alloc_buf, no vma [ 233.938947][T13801] FAULT_INJECTION: forcing a failure. [ 233.938947][T13801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.938973][T13801] CPU: 2 UID: 0 PID: 13801 Comm: syz.1.3236 Not tainted syzkaller #0 PREEMPT(full) [ 233.938990][T13801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.938999][T13801] Call Trace: [ 233.939005][T13801] [ 233.939011][T13801] dump_stack_lvl+0x100/0x190 [ 233.939052][T13801] should_fail_ex.cold+0x5/0xa [ 233.939081][T13801] _copy_from_user+0x2e/0xd0 [ 233.939107][T13801] __sys_bpf+0x2f5/0x4a30 [ 233.939131][T13801] ? __pfx___sys_bpf+0x10/0x10 [ 233.939148][T13801] ? find_held_lock+0x2b/0x80 [ 233.939171][T13801] ? futex_wake+0x4ea/0x5e0 [ 233.939201][T13801] ? rcu_read_lock_any_held+0x6a/0x90 [ 233.939215][T13801] ? find_held_lock+0x2b/0x80 [ 233.939236][T13801] ? ksys_write+0x190/0x250 [ 233.939254][T13801] ? ksys_write+0x190/0x250 [ 233.939283][T13801] ? __x64_sys_futex+0x34f/0x4d0 [ 233.939303][T13801] ? __x64_sys_futex+0x358/0x4d0 [ 233.939326][T13801] ? fput+0x7c/0x100 [ 233.939347][T13801] ? __pfx___x64_sys_futex+0x10/0x10 [ 233.939368][T13801] ? ksys_write+0x1ac/0x250 [ 233.939388][T13801] ? __x64_sys_bpf+0xce/0x140 [ 233.939404][T13801] __x64_sys_bpf+0xce/0x140 [ 233.939421][T13801] ? do_syscall_64+0xae/0x790 [ 233.939444][T13801] do_syscall_64+0x123/0x790 [ 233.939468][T13801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.939485][T13801] RIP: 0033:0x7f568679e559 [ 233.939498][T13801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.939512][T13801] RSP: 002b:00007f568757f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.939527][T13801] RAX: ffffffffffffffda RBX: 00007f5686a25fa0 RCX: 00007f568679e559 [ 233.939538][T13801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 233.939548][T13801] RBP: 00007f5686835b20 R08: 0000000000000000 R09: 0000000000000000 [ 233.939557][T13801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.939566][T13801] R13: 00007f5686a26038 R14: 00007f5686a25fa0 R15: 00007ffd1a1c7488 [ 233.939587][T13801] [ 234.050114][T13808] tipc: Enabling of bearer rejected, already enabled [ 234.310007][T13826] FAULT_INJECTION: forcing a failure. [ 234.310007][T13826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.310026][T13826] CPU: 1 UID: 0 PID: 13826 Comm: syz.2.3245 Not tainted syzkaller #0 PREEMPT(full) [ 234.310039][T13826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.310046][T13826] Call Trace: [ 234.310050][T13826] [ 234.310055][T13826] dump_stack_lvl+0x100/0x190 [ 234.310077][T13826] should_fail_ex.cold+0x5/0xa [ 234.310095][T13826] _copy_from_user+0x2e/0xd0 [ 234.310113][T13826] __sys_bpf+0x2f5/0x4a30 [ 234.310138][T13826] ? __pfx___sys_bpf+0x10/0x10 [ 234.310151][T13826] ? find_held_lock+0x2b/0x80 [ 234.310169][T13826] ? futex_wake+0x4ea/0x5e0 [ 234.310192][T13826] ? rcu_read_lock_any_held+0x6a/0x90 [ 234.310204][T13826] ? find_held_lock+0x2b/0x80 [ 234.310221][T13826] ? ksys_write+0x190/0x250 [ 234.310235][T13826] ? ksys_write+0x190/0x250 [ 234.310257][T13826] ? __x64_sys_futex+0x34f/0x4d0 [ 234.310274][T13826] ? __x64_sys_futex+0x358/0x4d0 [ 234.310292][T13826] ? xfd_validate_state+0x129/0x190 [ 234.310306][T13826] ? __x64_sys_bpf+0xce/0x140 [ 234.310318][T13826] __x64_sys_bpf+0xce/0x140 [ 234.310332][T13826] ? do_syscall_64+0xae/0x790 [ 234.310349][T13826] do_syscall_64+0x123/0x790 [ 234.310367][T13826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.310379][T13826] RIP: 0033:0x7f48ecb9e559 [ 234.310389][T13826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.310401][T13826] RSP: 002b:00007f48ed983028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.310412][T13826] RAX: ffffffffffffffda RBX: 00007f48ece25fa0 RCX: 00007f48ecb9e559 [ 234.310420][T13826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 234.310426][T13826] RBP: 00007f48ecc35b20 R08: 0000000000000000 R09: 0000000000000000 [ 234.310433][T13826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.310441][T13826] R13: 00007f48ece26038 R14: 00007f48ece25fa0 R15: 00007ffeacb5c8f8 [ 234.310476][T13826] [ 234.328177][ T7373] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 234.477215][ T7373] usb 6-1: device descriptor read/64, error -71 [ 234.519722][T13848] md: could not open device unknown-block(1,1). [ 234.519750][T13848] md: md_import_device returned -16 [ 234.547232][T13851] FAULT_INJECTION: forcing a failure. [ 234.547232][T13851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.547263][T13851] CPU: 0 UID: 0 PID: 13851 Comm: syz.2.3255 Not tainted syzkaller #0 PREEMPT(full) [ 234.547283][T13851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.547294][T13851] Call Trace: [ 234.547302][T13851] [ 234.547311][T13851] dump_stack_lvl+0x100/0x190 [ 234.547343][T13851] should_fail_ex.cold+0x5/0xa [ 234.547368][T13851] _copy_from_user+0x2e/0xd0 [ 234.547395][T13851] __sys_bpf+0x2f5/0x4a30 [ 234.547422][T13851] ? __pfx___sys_bpf+0x10/0x10 [ 234.547443][T13851] ? find_held_lock+0x2b/0x80 [ 234.547472][T13851] ? futex_wake+0x4ea/0x5e0 [ 234.547509][T13851] ? rcu_read_lock_any_held+0x6a/0x90 [ 234.547528][T13851] ? find_held_lock+0x2b/0x80 [ 234.547556][T13851] ? ksys_write+0x190/0x250 [ 234.547579][T13851] ? ksys_write+0x190/0x250 [ 234.547617][T13851] ? __x64_sys_futex+0x34f/0x4d0 [ 234.547644][T13851] ? __x64_sys_futex+0x358/0x4d0 [ 234.547673][T13851] ? xfd_validate_state+0x129/0x190 [ 234.547698][T13851] ? __x64_sys_bpf+0xce/0x140 [ 234.547719][T13851] __x64_sys_bpf+0xce/0x140 [ 234.547742][T13851] ? do_syscall_64+0xae/0x790 [ 234.547773][T13851] do_syscall_64+0x123/0x790 [ 234.547804][T13851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.547825][T13851] RIP: 0033:0x7f48ecb9e559 [ 234.547844][T13851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.547862][T13851] RSP: 002b:00007f48ed983028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.547882][T13851] RAX: ffffffffffffffda RBX: 00007f48ece25fa0 RCX: 00007f48ecb9e559 [ 234.547896][T13851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 234.547907][T13851] RBP: 00007f48ecc35b20 R08: 0000000000000000 R09: 0000000000000000 [ 234.547920][T13851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.547931][T13851] R13: 00007f48ece26038 R14: 00007f48ece25fa0 R15: 00007ffeacb5c8f8 [ 234.547955][T13851] [ 234.583841][T13853] __nla_validate_parse: 1 callbacks suppressed [ 234.583856][T13853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3256'. [ 234.652917][ T42] audit: type=1326 audit(1792459862.485:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13864 comm="syz.4.3260" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7689b9e559 code=0x0 [ 234.711741][T13870] overlayfs: overlapping lowerdir path [ 234.736941][ T7373] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 234.749534][T13868] md: could not open device unknown-block(1,0). [ 234.749629][T13874] md: could not open device unknown-block(1,1). [ 234.749656][T13874] md: md_import_device returned -16 [ 234.780421][T13876] FAULT_INJECTION: forcing a failure. [ 234.780421][T13876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.780440][T13876] CPU: 3 UID: 0 PID: 13876 Comm: syz.2.3266 Not tainted syzkaller #0 PREEMPT(full) [ 234.780453][T13876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.780460][T13876] Call Trace: [ 234.780465][T13876] [ 234.780470][T13876] dump_stack_lvl+0x100/0x190 [ 234.780491][T13876] should_fail_ex.cold+0x5/0xa [ 234.780510][T13876] _copy_from_user+0x2e/0xd0 [ 234.780528][T13876] __sys_bpf+0x2f5/0x4a30 [ 234.780560][T13876] ? __pfx___sys_bpf+0x10/0x10 [ 234.780574][T13876] ? find_held_lock+0x2b/0x80 [ 234.780593][T13876] ? futex_wake+0x4ea/0x5e0 [ 234.780617][T13876] ? rcu_read_lock_any_held+0x6a/0x90 [ 234.780629][T13876] ? find_held_lock+0x2b/0x80 [ 234.780646][T13876] ? ksys_write+0x190/0x250 [ 234.780661][T13876] ? ksys_write+0x190/0x250 [ 234.780683][T13876] ? __x64_sys_futex+0x34f/0x4d0 [ 234.780700][T13876] ? __x64_sys_futex+0x358/0x4d0 [ 234.780718][T13876] ? fput+0x7c/0x100 [ 234.780734][T13876] ? __pfx___x64_sys_futex+0x10/0x10 [ 234.780749][T13876] ? ksys_write+0x1ac/0x250 [ 234.780765][T13876] ? __x64_sys_bpf+0xce/0x140 [ 234.780777][T13876] __x64_sys_bpf+0xce/0x140 [ 234.780791][T13876] ? do_syscall_64+0xae/0x790 [ 234.780808][T13876] do_syscall_64+0x123/0x790 [ 234.780826][T13876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.780838][T13876] RIP: 0033:0x7f48ecb9e559 [ 234.780848][T13876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.780861][T13876] RSP: 002b:00007f48ed983028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.780873][T13876] RAX: ffffffffffffffda RBX: 00007f48ece25fa0 RCX: 00007f48ecb9e559 [ 234.780882][T13876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 234.780889][T13876] RBP: 00007f48ecc35b20 R08: 0000000000000000 R09: 0000000000000000 [ 234.780896][T13876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.780903][T13876] R13: 00007f48ece26038 R14: 00007f48ece25fa0 R15: 00007ffeacb5c8f8 [ 234.780918][T13876] [ 234.877929][ T7373] usb 6-1: device descriptor read/64, error -71 [ 234.988376][ T7373] usb usb6-port1: attempt power cycle [ 235.326978][ T7373] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 235.347660][ T7373] usb 6-1: device descriptor read/8, error -71 [ 235.587193][ T7373] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 235.608046][ T7373] usb 6-1: device descriptor read/8, error -71 [ 235.717515][ T7373] usb usb6-port1: unable to enumerate USB device [ 235.748698][T13908] befs: (nbd0): No write support. Marking filesystem read-only [ 235.748785][T13908] befs: (nbd0): unable to read superblock [ 235.762537][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3275'. [ 235.762552][T13908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3275'. [ 235.947000][ T24] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 235.986917][ T71] usb 9-1: new low-speed USB device number 23 using dummy_hcd [ 236.076912][ T24] usb 7-1: device descriptor read/64, error -71 [ 236.138131][ T71] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 236.139783][ T71] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 236.139823][ T71] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 236.139843][ T71] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.139863][ T71] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 236.139883][ T71] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 236.140899][ T71] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 236.140931][ T71] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 236.140951][ T71] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.140970][ T71] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 236.140990][ T71] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 236.141991][ T71] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 236.142023][ T71] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 236.142043][ T71] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.142062][ T71] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 236.142081][ T71] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 236.144906][ T71] usb 9-1: string descriptor 0 read error: -22 [ 236.145059][ T71] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.152053][ T71] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 236.236926][ T6542] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 236.337036][ T24] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 236.367277][ T6542] usb 5-1: device descriptor read/64, error -71 [ 236.410134][ T29] usb 9-1: USB disconnect, device number 23 [ 236.466962][ T24] usb 7-1: device descriptor read/64, error -71 [ 236.577384][ T24] usb usb7-port1: attempt power cycle [ 236.606892][ T6542] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 236.736927][ T6542] usb 5-1: device descriptor read/64, error -71 [ 236.847650][ T6542] usb usb5-port1: attempt power cycle [ 236.917155][ T24] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 236.937346][ T24] usb 7-1: device descriptor read/8, error -71 [ 237.037574][T13920] syzkaller0: entered promiscuous mode [ 237.037588][T13920] syzkaller0: entered allmulticast mode [ 237.041836][T13920] tipc: Enabled bearer , priority 0 [ 237.045217][T13920] tipc: Resetting bearer [ 237.047292][T13919] tipc: Resetting bearer [ 237.061506][T13919] tipc: Disabling bearer [ 237.129652][T13922] net_ratelimit: 55 callbacks suppressed [ 237.196920][ T6542] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 237.206949][ T24] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 237.219427][ T6542] usb 5-1: device descriptor read/8, error -71 [ 237.229837][ T24] usb 7-1: device descriptor read/8, error -71 [ 237.336339][T13936] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3287'. [ 237.339406][ T24] usb usb7-port1: unable to enumerate USB device [ 237.367840][T13938] comedi comedi1: pc212e: a I/O base address must be specified [ 237.466935][ T71] usb 9-1: new low-speed USB device number 24 using dummy_hcd [ 237.467587][ T6542] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 237.497369][ T6542] usb 5-1: device descriptor read/8, error -71 [ 237.578468][T13948] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3292'. [ 237.617370][ T6542] usb usb5-port1: unable to enumerate USB device [ 237.618737][ T71] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 237.620912][ T71] usb 9-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 237.620954][ T71] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 237.620977][ T71] usb 9-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.622451][ T71] usb 9-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 237.622488][ T71] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 237.622509][ T71] usb 9-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.623484][ T71] usb 9-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 237.623519][ T71] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 237.623541][ T71] usb 9-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.878979][T13962] tipc: Enabling of bearer rejected, already enabled [ 238.781680][T13982] ima: policy update failed [ 238.781785][ T42] audit: type=1802 audit(1792459866.615:777): pid=13982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.2.3308" res=0 errno=0 [ 238.815198][T13985] overlayfs: missing 'lowerdir' [ 239.096651][T13999] netlink: 'syz.2.3316': attribute type 11 has an invalid length. [ 239.096667][T13999] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3316'. [ 239.245185][T14001] befs: (nbd1): No write support. Marking filesystem read-only [ 239.245321][T14001] befs: (nbd1): unable to read superblock [ 239.263902][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3317'. [ 239.263917][T14001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3317'. [ 239.396912][ T9] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 239.549174][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 239.550149][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 239.550163][ T9] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 239.550173][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 239.550210][ T9] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 239.550225][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 239.550239][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 239.551895][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 239.551906][ T9] usb 5-1: Product: syz [ 239.551914][ T9] usb 5-1: Manufacturer: syz [ 239.558168][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 239.558180][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 239.558215][ T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 239.605061][ T42] audit: type=1326 audit(1792459867.435:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14019 comm="syz.2.3325" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48ecb9e559 code=0x0 [ 239.717049][T14026] md: could not open device unknown-block(1,0). [ 239.763122][ T63] usb 5-1: USB disconnect, device number 86 [ 240.228246][ T71] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.230345][ T71] usb 9-1: can't set config #168, error -71 [ 240.231184][ T71] usb 9-1: USB disconnect, device number 24 [ 240.242938][T14030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3328'. [ 240.391072][T14042] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 240.486666][T14050] befs: (nbd2): No write support. Marking filesystem read-only [ 240.488511][T14050] befs: (nbd2): unable to read superblock [ 240.500076][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3337'. [ 240.500085][T14050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3337'. [ 240.576458][T14057] syzkaller0: entered promiscuous mode [ 240.576473][T14057] syzkaller0: entered allmulticast mode [ 240.579222][T14057] tipc: Enabled bearer , priority 0 [ 240.581802][T14057] tipc: Resetting bearer [ 240.585689][T14056] tipc: Resetting bearer [ 240.601559][T14056] tipc: Disabling bearer [ 240.757241][ T29] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 240.798559][T14084] befs: (nbd2): No write support. Marking filesystem read-only [ 240.798649][T14084] befs: (nbd2): unable to read superblock [ 240.809969][T14086] netlink: 'syz.1.3351': attribute type 11 has an invalid length. [ 240.809981][T14086] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3351'. [ 240.811785][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3350'. [ 240.811795][T14084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3350'. [ 240.847931][T14088] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3352'. [ 240.917822][ T29] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 240.918774][ T29] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 240.918788][ T29] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 240.918798][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 240.918853][ T29] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 240.918877][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 240.918901][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 240.920192][ T29] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 240.920202][ T29] usb 5-1: Product: syz [ 240.920211][ T29] usb 5-1: Manufacturer: syz [ 240.926133][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 240.926140][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 240.926176][ T29] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 240.943669][T14094] syzkaller0: entered promiscuous mode [ 240.943685][T14094] syzkaller0: entered allmulticast mode [ 240.950041][T14094] tipc: Enabled bearer , priority 0 [ 240.954860][T14094] tipc: Resetting bearer [ 240.959054][T14093] tipc: Resetting bearer [ 240.974901][T14093] tipc: Disabling bearer [ 240.978592][T14096] binder: BINDER_SET_CONTEXT_MGR already set [ 240.978598][T14096] binder: 14095:14096 ioctl 4018620d 200000000240 returned -16 [ 241.128967][ T7373] usb 5-1: USB disconnect, device number 87 [ 241.347684][T14132] md: could not open device unknown-block(1,1). [ 241.347711][T14132] md: md_import_device returned -16 [ 241.804073][T14154] netlink: 'syz.0.3383': attribute type 11 has an invalid length. [ 241.804085][T14154] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3383'. [ 241.843442][ T42] audit: type=1326 audit(1792459869.675:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14155 comm="syz.2.3384" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48ecb9e559 code=0x0 [ 241.967232][T14157] md: could not open device unknown-block(1,0). [ 242.009482][ T42] audit: type=1807 audit(1792459869.845:780): action=measure func=FILE_CHECK UNKNOWN=ob res=0 [ 242.009584][ T42] audit: type=1802 audit(1792459869.845:781): pid=14160 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.0.3385" res=0 errno=0 [ 242.009708][T14159] ima: policy update failed [ 242.009911][ T42] audit: type=1802 audit(1792459869.845:782): pid=14159 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.3385" res=0 errno=0 [ 242.095541][T14164] binder: BINDER_SET_CONTEXT_MGR already set [ 242.095556][T14164] binder: 14163:14164 ioctl 4018620d 200000000240 returned -16 [ 242.506883][ C3] net_ratelimit: 50 callbacks suppressed [ 242.536905][ T9] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 242.667013][ T9] usb 9-1: device descriptor read/64, error -71 [ 242.720410][T14186] netlink: 'syz.2.3394': attribute type 11 has an invalid length. [ 242.720422][T14186] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3394'. [ 242.917072][ T9] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 243.035336][ T42] audit: type=1326 audit(1792459870.865:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14201 comm="syz.2.3402" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48ecb9e559 code=0x0 [ 243.067139][ T9] usb 9-1: device descriptor read/64, error -71 [ 243.070831][T14204] netlink: 'syz.0.3403': attribute type 11 has an invalid length. [ 243.070848][T14204] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3403'. [ 243.147697][T14206] md: could not open device unknown-block(1,0). [ 243.177311][ T9] usb usb9-port1: attempt power cycle [ 243.526930][ T9] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 243.547977][ T9] usb 9-1: device descriptor read/8, error -71 [ 243.806910][ T9] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 243.838724][ T9] usb 9-1: device descriptor read/8, error -71 [ 243.937350][T14240] netlink: 'syz.2.3414': attribute type 11 has an invalid length. [ 243.953021][T14241] befs: (nbd1): No write support. Marking filesystem read-only [ 243.953094][T14241] befs: (nbd1): unable to read superblock [ 243.957192][ T9] usb usb9-port1: unable to enumerate USB device [ 244.191250][T14257] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 244.230035][T14260] syzkaller0: entered promiscuous mode [ 244.230048][T14260] syzkaller0: entered allmulticast mode [ 244.232352][T14260] tipc: Enabled bearer , priority 0 [ 244.234383][T14259] tipc: Resetting bearer [ 244.247618][T14259] tipc: Disabling bearer [ 244.353496][T14270] befs: (nbd2): No write support. Marking filesystem read-only [ 244.353623][T14270] befs: (nbd2): unable to read superblock [ 244.603297][T14295] binder: BINDER_SET_CONTEXT_MGR already set [ 244.603305][T14295] binder: 14294:14295 ioctl 4018620d 200000000240 returned -16 [ 244.645128][ T66] Bluetooth: hci1: link tx timeout [ 244.645134][ T66] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 244.645641][ T66] Bluetooth: hci1: link tx timeout [ 244.645647][ T66] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.665193][T14299] syzkaller0: entered promiscuous mode [ 244.665203][T14299] syzkaller0: entered allmulticast mode [ 244.671748][T14299] tipc: Enabled bearer , priority 0 [ 244.680785][T14299] tipc: Resetting bearer [ 244.684952][T14297] tipc: Resetting bearer [ 244.691754][T14297] tipc: Disabling bearer [ 244.987182][ T63] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 245.136860][ T63] usb 5-1: Using ep0 maxpacket: 32 [ 245.137381][ T63] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 245.138282][ T63] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 245.138303][ T63] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 245.138317][ T63] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.138332][ T63] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 245.140030][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.140084][ T63] usb 5-1: Product: syz [ 245.140094][ T63] usb 5-1: Manufacturer: syz [ 245.140102][ T63] usb 5-1: SerialNumber: syz [ 245.146324][ C3] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 245.147711][ T63] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input49 [ 245.194360][T14305] overlayfs: missing 'workdir' [ 245.267600][ T5086] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 245.330448][T14311] netlink: 'syz.4.3441': attribute type 11 has an invalid length. [ 245.330460][T14311] __nla_validate_parse: 6 callbacks suppressed [ 245.330467][T14311] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3441'. [ 245.366893][ T63] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 245.366905][ T63] (id 0x00) [ 245.406916][ T63] rc_core: IR keymap rc-imon-pad not found [ 245.406931][ T63] Registered IR keymap rc-empty [ 245.407029][ T63] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 245.407048][ T63] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 245.567959][ T63] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 245.571461][ T63] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input50 [ 245.575864][ T63] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:88> initialized [ 245.686152][T14335] trusted_key: encrypted_key: insufficient parameters specified [ 245.713170][ T42] audit: type=1807 audit(1792459873.545:784): action=measure func=FILE_CHECK UNKNOWN=obj_ty res=0 [ 245.713311][ T42] audit: type=1802 audit(1792459873.545:785): pid=14337 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.2.3450" res=0 errno=0 [ 245.713414][T14336] ima: policy update failed [ 245.713477][ T42] audit: type=1802 audit(1792459873.545:786): pid=14336 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.2.3450" res=0 errno=0 [ 245.876932][ T7373] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 245.970921][T14354] comedi: valid board names for 8255 driver are: [ 245.970934][T14354] 8255 [ 245.970941][T14354] comedi: valid board names for vmk80xx driver are: [ 245.970949][T14354] vmk80xx [ 245.970955][T14354] comedi: valid board names for usbduxsigma driver are: [ 245.970964][T14354] usbduxsigma [ 245.970971][T14354] comedi: valid board names for usbduxfast driver are: [ 245.970980][T14354] usbduxfast [ 245.970986][T14354] comedi: valid board names for usbdux driver are: [ 245.970996][T14354] usbdux [ 245.971001][T14354] comedi: valid board names for ni6501 driver are: [ 245.971009][T14354] ni6501 [ 245.971015][T14354] comedi: valid board names for dt9812 driver are: [ 245.971022][T14354] dt9812 [ 245.971028][T14354] comedi: valid board names for ni_labpc_cs driver are: [ 245.971037][T14354] ni_labpc_cs [ 245.971043][T14354] comedi: valid board names for ni_daq_700 driver are: [ 245.971050][T14354] ni_daq_700 [ 245.971056][T14354] comedi: valid board names for labpc_pci driver are: [ 245.971064][T14354] labpc_pci [ 245.971118][T14354] comedi: valid board names for adl_pci9118 driver are: [ 245.971128][T14354] pci9118dg [ 245.971135][T14354] pci9118hg [ 245.971142][T14354] pci9118hr [ 245.971155][T14354] comedi: valid board names for 8255_pci driver are: [ 245.971163][T14354] 8255_pci [ 245.971170][T14354] comedi: valid board names for s526 driver are: [ 245.971178][T14354] s526 [ 245.971185][T14354] comedi: valid board names for multiq3 driver are: [ 245.971193][T14354] multiq3 [ 245.971201][T14354] comedi: valid board names for pcmuio driver are: [ 245.971209][T14354] pcmuio48 [ 245.971216][T14354] pcmuio96 [ 245.971223][T14354] comedi: valid board names for pcmmio driver are: [ 245.971230][T14354] pcmmio [ 245.971236][T14354] comedi: valid board names for pcmda12 driver are: [ 245.971245][T14354] pcmda12 [ 245.971251][T14354] comedi: valid board names for pcmad driver are: [ 245.971259][T14354] pcmad12 [ 245.971265][T14354] pcmad16 [ 245.971271][T14354] comedi: valid board names for ni_labpc driver are: [ 245.971280][T14354] lab-pc-1200 [ 245.971286][T14354] lab-pc-1200ai [ 245.971293][T14354] lab-pc+ [ 245.971299][T14354] comedi: valid board names for atmio16 driver are: [ 245.971307][T14354] atmio16 [ 245.971314][T14354] atmio16d [ 245.971320][T14354] comedi: valid board names for ni_at_ao driver are: [ 245.971328][T14354] at-ao-6 [ 245.971334][T14354] at-ao-10 [ 245.971341][T14354] comedi: valid board names for ni_at_a2150 driver are: [ 245.971349][T14354] ni_at_a2150 [ 245.971355][T14354] comedi: valid board names for adq12b driver are: [ 245.971363][T14354] adq12b [ 245.971369][T14354] comedi: valid board names for mpc624 driver are: [ 245.971377][T14354] mpc624 [ 245.971384][T14354] comedi: valid board names for c6xdigio driver are: [ 245.971392][T14354] c6xdigio [ 245.971398][T14354] comedi: valid board names for aio_iiro_16 driver are: [ 245.971406][T14354] aio_iiro_16 [ 245.971413][T14354] comedi: valid board names for aio_aio12_8 driver are: [ 245.971421][T14354] aio_aio12_8 [ 245.971428][T14354] aio_ai12_8 [ 245.971434][T14354] aio_ao12_4 [ 245.971441][T14354] comedi: valid board names for fl512 driver are: [ 245.971449][T14354] fl512 [ 245.971455][T14354] comedi: valid board names for dmm32at driver are: [ 245.971463][T14354] dmm32at [ 245.971470][T14354] comedi: valid board names for dt282x driver are: [ 245.971477][T14354] dt2821 [ 245.971484][T14354] dt2821-f [ 245.971491][T14354] dt2821-g [ 245.971497][T14354] dt2823 [ 245.971503][T14354] dt2824-pgh [ 245.971510][T14354] dt2824-pgl [ 245.971516][T14354] dt2825 [ 245.971523][T14354] dt2827 [ 245.971529][T14354] dt2828 [ 245.971535][T14354] dt2829 [ 245.971541][T14354] dt21-ez [ 245.971548][T14354] dt23-ez [ 245.971554][T14354] dt24-ez [ 245.971560][T14354] dt24-ez-pgl [ 245.971566][T14354] comedi: valid board names for dt2817 driver are: [ 245.971575][T14354] dt2817 [ 245.971581][T14354] comedi: valid board names for dt2815 driver are: [ 245.971589][T14354] dt2815 [ 245.971596][T14354] comedi: valid board names for dt2814 driver are: [ 245.971604][T14354] dt2814 [ 245.971610][T14354] comedi: valid board names for dt2811 driver are: [ 245.971618][T14354] dt2811-pgh [ 245.971624][T14354] dt2811-pgl [ 245.971631][T14354] comedi: valid board names for dt2801 driver are: [ 245.971639][T14354] dt2801 [ 245.971645][T14354] comedi: valid board names for das6402 driver are: [ 245.971653][T14354] das6402-12 [ 245.971659][T14354] das6402-16 [ 245.971666][T14354] comedi: valid board names for das1800 driver are: [ 245.971674][T14354] das-1701st [ 245.971681][T14354] das-1701st-da [ 245.971688][T14354] das-1702st [ 245.971694][T14354] das-1702st-da [ 245.971701][T14354] das-1702hr [ 245.971707][T14354] das-1702hr-da [ 245.971714][T14354] das-1701ao [ 245.971720][T14354] das-1702ao [ 245.971727][T14354] das-1801st [ 245.971733][T14354] das-1801st-da [ 245.971740][T14354] das-1802st [ 245.971746][T14354] das-1802st-da [ 245.971753][T14354] das-1802hr [ 245.971760][T14354] das-1802hr-da [ 245.971766][T14354] das-1801hc [ 245.971773][T14354] das-1802hc [ 245.971780][T14354] das-1801ao [ 245.971786][T14354] das-1802ao [ 245.971793][T14354] comedi: valid board names for das800 driver are: [ 245.971801][T14354] das-800 [ 245.971807][T14354] cio-das800 [ 245.971814][T14354] das-801 [ 245.971820][T14354] cio-das801 [ 245.971827][T14354] das-802 [ 245.971833][T14354] cio-das802 [ 245.971839][T14354] cio-das802/16 [ 245.971847][T14354] comedi: valid board names for isa-das08 driver are: [ 245.971854][T14354] isa-das08 [ 245.971860][T14354] das08-pgm [ 245.971865][T14354] das08-pgh [ 245.971870][T14354] das08-pgl [ 245.971876][T14354] das08-aoh [ 245.971882][T14354] das08-aol [ 245.971890][T14354] das08-aom [ 245.971896][T14354] das08/jr-ao [ 245.971902][T14354] das08jr-16-ao [ 245.971910][T14354] pc104-das08 [ 245.971916][T14354] das08jr/16 [ 245.971922][T14354] comedi: valid board names for das16m1 driver are: [ 245.971930][T14354] das16m1 [ 245.971937][T14354] comedi: valid board names for dac02 driver are: [ 245.971944][T14354] dac02 [ 245.971951][T14354] comedi: valid board names for rti802 driver are: [ 245.971958][T14354] rti802 [ 245.971965][T14354] comedi: valid board names for rti800 driver are: [ 245.971972][T14354] rti800 [ 245.971979][T14354] rti815 [ 245.971985][T14354] comedi: valid board names for pcm3724 driver are: [ 245.971994][T14354] pcm3724 [ 245.972000][T14354] comedi: valid board names for pcl818 driver are: [ 245.972008][T14354] pcl818l [ 245.972014][T14354] pcl818h [ 245.972020][T14354] pcl818hd [ 245.972027][T14354] pcl818hg [ 245.972034][T14354] pcl818 [ 245.972040][T14354] pcl718 [ 245.972047][T14354] pcm3718 [ 245.972054][T14354] comedi: valid board names for pcl816 driver are: [ 245.972062][T14354] pcl816 [ 245.972069][T14354] pcl814b [ 245.972076][T14354] comedi: valid board names for pcl812 driver are: [ 245.972084][T14354] pcl812 [ 245.972091][T14354] pcl812pg [ 245.972098][T14354] acl8112pg [ 245.972105][T14354] acl8112dg [ 245.972111][T14354] acl8112hg [ 245.972117][T14354] a821pgl [ 245.972123][T14354] a821pglnda [ 245.972129][T14354] a821pgh [ 245.972136][T14354] a822pgl [ 245.972142][T14354] a822pgh [ 245.972155][T14354] a823pgl [ 245.972162][T14354] a823pgh [ 245.972168][T14354] pcl813 [ 245.972175][T14354] pcl813b [ 245.972181][T14354] acl8113 [ 245.972188][T14354] iso813 [ 245.972195][T14354] acl8216 [ 245.972200][T14354] a826pg [ 245.972207][T14354] comedi: valid board names for pcl730 driver are: [ 245.972215][T14354] pcl730 [ 245.972220][T14354] iso730 [ 245.972226][T14354] acl7130 [ 245.972232][T14354] pcm3730 [ 245.972238][T14354] pcl725 [ 245.972244][T14354] p8r8dio [ 245.972251][T14354] acl7225b [ 245.972257][T14354] p16r16dio [ 245.972264][T14354] pcl733 [ 245.972270][T14354] pcl734 [ 245.972276][T14354] opmm-1616-xt [ 245.972283][T14354] pearl-mm-p [ 245.972289][T14354] ir104-pbf [ 245.972296][T14354] comedi: valid board names for pcl726 driver are: [ 245.972303][T14354] pcl726 [ 245.972310][T14354] pcl727 [ 245.972316][T14354] pcl728 [ 245.972322][T14354] acl6126 [ 245.972328][T14354] acl6128 [ 245.972335][T14354] comedi: valid board names for pcl724 driver are: [ 245.972343][T14354] pcl724 [ 245.972349][T14354] pcl722 [ 245.972355][T14354] pcl731 [ 245.972361][T14354] acl7122 [ 245.972368][T14354] acl7124 [ 245.972374][T14354] pet48dio [ 245.972381][T14354] pcmio48 [ 245.972387][T14354] onyx-mm-dio [ 245.972393][T14354] comedi: valid board names for pcl711 driver are: [ 245.972401][T14354] pcl711 [ 245.972407][T14354] pcl711b [ 245.972413][T14354] acl8112hg [ 245.972420][T14354] acl8112dg [ 245.972426][T14354] comedi: valid board names for amplc_pc263 driver are: [ 245.972435][T14354] pc263 [ 245.972440][T14354] comedi: valid board names for amplc_pc236 driver are: [ 245.972448][T14354] pc36at [ 245.972454][T14354] comedi: valid board names for amplc_dio200 driver are: [ 245.972463][T14354] pc212e [ 245.972468][T14354] pc214e [ 245.972475][T14354] pc215e [ 245.972481][T14354] pc218e [ 245.972487][T14354] pc272e [ 245.972493][T14354] comedi: valid board names for comedi_parport driver are: [ 245.972501][T14354] comedi_parport [ 245.972508][T14354] comedi: valid board names for comedi_test driver are: [ 245.972517][T14354] comedi_test [ 245.972523][T14354] comedi: valid board names for comedi_bond driver are: [ 245.972530][T14354] comedi_bond [ 245.987085][T14356] trusted_key: encrypted_key: insufficient parameters specified [ 246.027274][ T7373] usb 9-1: Using ep0 maxpacket: 8 [ 246.030541][ T7373] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 246.037247][ T7373] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.037259][ T7373] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 246.037289][ T7373] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.037302][ T7373] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 246.037314][ T7373] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 246.037342][ T7373] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.083529][ T7373] hub 9-1:1.0: bad descriptor, ignoring hub [ 246.083540][ T7373] hub 9-1:1.0: probe with driver hub failed with error -5 [ 246.083925][ T7373] cdc_wdm 9-1:1.0: skipping garbage [ 246.083932][ T7373] cdc_wdm 9-1:1.0: skipping garbage [ 246.085841][ T7373] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device [ 246.085849][ T7373] cdc_wdm 9-1:1.0: Unknown control protocol [ 246.437800][T14384] netlink: 'syz.2.3470': attribute type 11 has an invalid length. [ 246.437812][T14384] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3470'. [ 246.457172][ T41] usb 9-1: USB disconnect, device number 29 [ 246.632513][T14392] comedi: valid board names for 8255 driver are: [ 246.632523][T14392] 8255 [ 246.632527][T14392] comedi: valid board names for vmk80xx driver are: [ 246.632532][T14392] vmk80xx [ 246.632536][T14392] comedi: valid board names for usbduxsigma driver are: [ 246.632541][T14392] usbduxsigma [ 246.632545][T14392] comedi: valid board names for usbduxfast driver are: [ 246.632551][T14392] usbduxfast [ 246.632555][T14392] comedi: valid board names for usbdux driver are: [ 246.632559][T14392] usbdux [ 246.632563][T14392] comedi: valid board names for ni6501 driver are: [ 246.632568][T14392] ni6501 [ 246.632572][T14392] comedi: valid board names for dt9812 driver are: [ 246.632576][T14392] dt9812 [ 246.632580][T14392] comedi: valid board names for ni_labpc_cs driver are: [ 246.632585][T14392] ni_labpc_cs [ 246.632589][T14392] comedi: valid board names for ni_daq_700 driver are: [ 246.632594][T14392] ni_daq_700 [ 246.632597][T14392] comedi: valid board names for labpc_pci driver are: [ 246.632602][T14392] labpc_pci [ 246.632606][T14392] comedi: valid board names for adl_pci9118 driver are: [ 246.632611][T14392] pci9118dg [ 246.632615][T14392] pci9118hg [ 246.632618][T14392] pci9118hr [ 246.632622][T14392] comedi: valid board names for 8255_pci driver are: [ 246.632626][T14392] 8255_pci [ 246.632630][T14392] comedi: valid board names for s526 driver are: [ 246.632635][T14392] s526 [ 246.632638][T14392] comedi: valid board names for multiq3 driver are: [ 246.632648][T14392] multiq3 [ 246.632652][T14392] comedi: valid board names for pcmuio driver are: [ 246.632656][T14392] pcmuio48 [ 246.632660][T14392] pcmuio96 [ 246.632664][T14392] comedi: valid board names for pcmmio driver are: [ 246.632668][T14392] pcmmio [ 246.632672][T14392] comedi: valid board names for pcmda12 driver are: [ 246.632677][T14392] pcmda12 [ 246.632681][T14392] comedi: valid board names for pcmad driver are: [ 246.632686][T14392] pcmad12 [ 246.632690][T14392] pcmad16 [ 246.632693][T14392] comedi: valid board names for ni_labpc driver are: [ 246.632698][T14392] lab-pc-1200 [ 246.632702][T14392] lab-pc-1200ai [ 246.632706][T14392] lab-pc+ [ 246.632710][T14392] comedi: valid board names for atmio16 driver are: [ 246.632714][T14392] atmio16 [ 246.632718][T14392] atmio16d [ 246.632721][T14392] comedi: valid board names for ni_at_ao driver are: [ 246.632726][T14392] at-ao-6 [ 246.632730][T14392] at-ao-10 [ 246.632734][T14392] comedi: valid board names for ni_at_a2150 driver are: [ 246.632738][T14392] ni_at_a2150 [ 246.632742][T14392] comedi: valid board names for adq12b driver are: [ 246.632747][T14392] adq12b [ 246.632750][T14392] comedi: valid board names for mpc624 driver are: [ 246.632755][T14392] mpc624 [ 246.632759][T14392] comedi: valid board names for c6xdigio driver are: [ 246.632764][T14392] c6xdigio [ 246.632768][T14392] comedi: valid board names for aio_iiro_16 driver are: [ 246.632773][T14392] aio_iiro_16 [ 246.632777][T14392] comedi: valid board names for aio_aio12_8 driver are: [ 246.632783][T14392] aio_aio12_8 [ 246.632787][T14392] aio_ai12_8 [ 246.632792][T14392] aio_ao12_4 [ 246.632796][T14392] comedi: valid board names for fl512 driver are: [ 246.632800][T14392] fl512 [ 246.632804][T14392] comedi: valid board names for dmm32at driver are: [ 246.632810][T14392] dmm32at [ 246.632814][T14392] comedi: valid board names for dt282x driver are: [ 246.632819][T14392] dt2821 [ 246.632823][T14392] dt2821-f [ 246.632827][T14392] dt2821-g [ 246.632831][T14392] dt2823 [ 246.632835][T14392] dt2824-pgh [ 246.632839][T14392] dt2824-pgl [ 246.632843][T14392] dt2825 [ 246.632847][T14392] dt2827 [ 246.632851][T14392] dt2828 [ 246.632855][T14392] dt2829 [ 246.632859][T14392] dt21-ez [ 246.632863][T14392] dt23-ez [ 246.632867][T14392] dt24-ez [ 246.632871][T14392] dt24-ez-pgl [ 246.632876][T14392] comedi: valid board names for dt2817 driver are: [ 246.632881][T14392] dt2817 [ 246.632885][T14392] comedi: valid board names for dt2815 driver are: [ 246.632890][T14392] dt2815 [ 246.632894][T14392] comedi: valid board names for dt2814 driver are: [ 246.632899][T14392] dt2814 [ 246.632904][T14392] comedi: valid board names for dt2811 driver are: [ 246.632908][T14392] dt2811-pgh [ 246.632912][T14392] dt2811-pgl [ 246.632916][T14392] comedi: valid board names for dt2801 driver are: [ 246.632920][T14392] dt2801 [ 246.632924][T14392] comedi: valid board names for das6402 driver are: [ 246.632928][T14392] das6402-12 [ 246.632932][T14392] das6402-16 [ 246.632936][T14392] comedi: valid board names for das1800 driver are: [ 246.632940][T14392] das-1701st [ 246.632944][T14392] das-1701st-da [ 246.632948][T14392] das-1702st [ 246.632974][T14392] das-1702st-da [ 246.632979][T14392] das-1702hr [ 246.632983][T14392] das-1702hr-da [ 246.632987][T14392] das-1701ao [ 246.632991][T14392] das-1702ao [ 246.632995][T14392] das-1801st [ 246.633000][T14392] das-1801st-da [ 246.633004][T14392] das-1802st [ 246.633008][T14392] das-1802st-da [ 246.633012][T14392] das-1802hr [ 246.633017][T14392] das-1802hr-da [ 246.633021][T14392] das-1801hc [ 246.633026][T14392] das-1802hc [ 246.633030][T14392] das-1801ao [ 246.633034][T14392] das-1802ao [ 246.633038][T14392] comedi: valid board names for das800 driver are: [ 246.633043][T14392] das-800 [ 246.633047][T14392] cio-das800 [ 246.633051][T14392] das-801 [ 246.633055][T14392] cio-das801 [ 246.633059][T14392] das-802 [ 246.633062][T14392] cio-das802 [ 246.633066][T14392] cio-das802/16 [ 246.633070][T14392] comedi: valid board names for isa-das08 driver are: [ 246.633076][T14392] isa-das08 [ 246.633080][T14392] das08-pgm [ 246.633085][T14392] das08-pgh [ 246.633089][T14392] das08-pgl [ 246.633093][T14392] das08-aoh [ 246.633097][T14392] das08-aol [ 246.633101][T14392] das08-aom [ 246.633105][T14392] das08/jr-ao [ 246.633110][T14392] das08jr-16-ao [ 246.633114][T14392] pc104-das08 [ 246.633119][T14392] das08jr/16 [ 246.633123][T14392] comedi: valid board names for das16m1 driver are: [ 246.633128][T14392] das16m1 [ 246.633132][T14392] comedi: valid board names for dac02 driver are: [ 246.633137][T14392] dac02 [ 246.633140][T14392] comedi: valid board names for rti802 driver are: [ 246.633146][T14392] rti802 [ 246.633150][T14392] comedi: valid board names for rti800 driver are: [ 246.633156][T14392] rti800 [ 246.633160][T14392] rti815 [ 246.633164][T14392] comedi: valid board names for pcm3724 driver are: [ 246.633169][T14392] pcm3724 [ 246.633173][T14392] comedi: valid board names for pcl818 driver are: [ 246.633178][T14392] pcl818l [ 246.633182][T14392] pcl818h [ 246.633186][T14392] pcl818hd [ 246.633190][T14392] pcl818hg [ 246.633194][T14392] pcl818 [ 246.633197][T14392] pcl718 [ 246.633201][T14392] pcm3718 [ 246.633204][T14392] comedi: valid board names for pcl816 driver are: [ 246.633209][T14392] pcl816 [ 246.633213][T14392] pcl814b [ 246.633216][T14392] comedi: valid board names for pcl812 driver are: [ 246.633221][T14392] pcl812 [ 246.633224][T14392] pcl812pg [ 246.633228][T14392] acl8112pg [ 246.633232][T14392] acl8112dg [ 246.633235][T14392] acl8112hg [ 246.633239][T14392] a821pgl [ 246.633243][T14392] a821pglnda [ 246.633246][T14392] a821pgh [ 246.633250][T14392] a822pgl [ 246.633254][T14392] a822pgh [ 246.633257][T14392] a823pgl [ 246.633261][T14392] a823pgh [ 246.633265][T14392] pcl813 [ 246.633268][T14392] pcl813b [ 246.633272][T14392] acl8113 [ 246.633275][T14392] iso813 [ 246.633279][T14392] acl8216 [ 246.633283][T14392] a826pg [ 246.633286][T14392] comedi: valid board names for pcl730 driver are: [ 246.633291][T14392] pcl730 [ 246.633294][T14392] iso730 [ 246.633298][T14392] acl7130 [ 246.633302][T14392] pcm3730 [ 246.633305][T14392] pcl725 [ 246.633309][T14392] p8r8dio [ 246.633312][T14392] acl7225b [ 246.633316][T14392] p16r16dio [ 246.633320][T14392] pcl733 [ 246.633323][T14392] pcl734 [ 246.633327][T14392] opmm-1616-xt [ 246.633331][T14392] pearl-mm-p [ 246.633334][T14392] ir104-pbf [ 246.633338][T14392] comedi: valid board names for pcl726 driver are: [ 246.633343][T14392] pcl726 [ 246.633347][T14392] pcl727 [ 246.633350][T14392] pcl728 [ 246.633354][T14392] acl6126 [ 246.633358][T14392] acl6128 [ 246.633361][T14392] comedi: valid board names for pcl724 driver are: [ 246.633366][T14392] pcl724 [ 246.633370][T14392] pcl722 [ 246.633373][T14392] pcl731 [ 246.633377][T14392] acl7122 [ 246.633380][T14392] acl7124 [ 246.633384][T14392] pet48dio [ 246.633388][T14392] pcmio48 [ 246.633391][T14392] onyx-mm-dio [ 246.633395][T14392] comedi: valid board names for pcl711 driver are: [ 246.633400][T14392] pcl711 [ 246.633403][T14392] pcl711b [ 246.633407][T14392] acl8112hg [ 246.633410][T14392] acl8112dg [ 246.633414][T14392] comedi: valid board names for amplc_pc263 driver are: [ 246.633419][T14392] pc263 [ 246.633423][T14392] comedi: valid board names for amplc_pc236 driver are: [ 246.633427][T14392] pc36at [ 246.633431][T14392] comedi: valid board names for amplc_dio200 driver are: [ 246.633436][T14392] pc212e [ 246.633440][T14392] pc214e [ 246.633443][T14392] pc215e [ 246.633447][T14392] pc218e [ 246.633450][T14392] pc272e [ 246.633454][T14392] comedi: valid board names for comedi_parport driver are: [ 246.633459][T14392] comedi_parport [ 246.633463][T14392] comedi: valid board names for comedi_test driver are: [ 246.633468][T14392] comedi_test [ 246.633472][T14392] comedi: valid board names for comedi_bond driver are: [ 246.633477][T14392] comedi_bond [ 246.736040][T14396] befs: (nbd2): No write support. Marking filesystem read-only [ 246.736112][T14396] befs: (nbd2): unable to read superblock [ 246.747956][T14396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3473'. [ 246.747966][T14396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3473'. [ 247.143186][ T42] audit: type=1807 audit(1792459874.975:787): action=measure func=FILE_CHECK UNKNOWN=obj_type res=0 [ 247.143258][ T42] audit: type=1802 audit(1792459874.975:788): pid=14413 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.2.3480" res=0 errno=0 [ 247.143315][T14411] ima: policy update failed [ 247.143479][ T42] audit: type=1802 audit(1792459874.975:789): pid=14411 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.2.3480" res=0 errno=0 [ 247.177229][T14416] comedi: valid board names for 8255 driver are: [ 247.177239][T14416] 8255 [ 247.177244][T14416] comedi: valid board names for vmk80xx driver are: [ 247.177249][T14416] vmk80xx [ 247.177253][T14416] comedi: valid board names for usbduxsigma driver are: [ 247.177258][T14416] usbduxsigma [ 247.177262][T14416] comedi: valid board names for usbduxfast driver are: [ 247.177268][T14416] usbduxfast [ 247.177272][T14416] comedi: valid board names for usbdux driver are: [ 247.177277][T14416] usbdux [ 247.177281][T14416] comedi: valid board names for ni6501 driver are: [ 247.177286][T14416] ni6501 [ 247.177289][T14416] comedi: valid board names for dt9812 driver are: [ 247.177294][T14416] dt9812 [ 247.177298][T14416] comedi: valid board names for ni_labpc_cs driver are: [ 247.177302][T14416] ni_labpc_cs [ 247.177306][T14416] comedi: valid board names for ni_daq_700 driver are: [ 247.177311][T14416] ni_daq_700 [ 247.177353][T14416] comedi: valid board names for labpc_pci driver are: [ 247.177359][T14416] labpc_pci [ 247.177363][T14416] comedi: valid board names for adl_pci9118 driver are: [ 247.177369][T14416] pci9118dg [ 247.177373][T14416] pci9118hg [ 247.177377][T14416] pci9118hr [ 247.177380][T14416] comedi: valid board names for 8255_pci driver are: [ 247.177385][T14416] 8255_pci [ 247.177389][T14416] comedi: valid board names for s526 driver are: [ 247.177393][T14416] s526 [ 247.177397][T14416] comedi: valid board names for multiq3 driver are: [ 247.177402][T14416] multiq3 [ 247.177405][T14416] comedi: valid board names for pcmuio driver are: [ 247.177410][T14416] pcmuio48 [ 247.177544][T14416] pcmuio96 [ 247.177550][T14416] comedi: valid board names for pcmmio driver are: [ 247.177555][T14416] pcmmio [ 247.177559][T14416] comedi: valid board names for pcmda12 driver are: [ 247.177564][T14416] pcmda12 [ 247.177569][T14416] comedi: valid board names for pcmad driver are: [ 247.177574][T14416] pcmad12 [ 247.177578][T14416] pcmad16 [ 247.177582][T14416] comedi: valid board names for ni_labpc driver are: [ 247.177587][T14416] lab-pc-1200 [ 247.177591][T14416] lab-pc-1200ai [ 247.177596][T14416] lab-pc+ [ 247.177600][T14416] comedi: valid board names for atmio16 driver are: [ 247.177605][T14416] atmio16 [ 247.177609][T14416] atmio16d [ 247.177613][T14416] comedi: valid board names for ni_at_ao driver are: [ 247.177618][T14416] at-ao-6 [ 247.177622][T14416] at-ao-10 [ 247.177626][T14416] comedi: valid board names for ni_at_a2150 driver are: [ 247.177681][T14416] ni_at_a2150 [ 247.177687][T14416] comedi: valid board names for adq12b driver are: [ 247.177692][T14416] adq12b [ 247.177697][T14416] comedi: valid board names for mpc624 driver are: [ 247.177702][T14416] mpc624 [ 247.177706][T14416] comedi: valid board names for c6xdigio driver are: [ 247.177711][T14416] c6xdigio [ 247.177715][T14416] comedi: valid board names for aio_iiro_16 driver are: [ 247.177721][T14416] aio_iiro_16 [ 247.177725][T14416] comedi: valid board names for aio_aio12_8 driver are: [ 247.177730][T14416] aio_aio12_8 [ 247.177734][T14416] aio_ai12_8 [ 247.177738][T14416] aio_ao12_4 [ 247.177742][T14416] comedi: valid board names for fl512 driver are: [ 247.177748][T14416] fl512 [ 247.177751][T14416] comedi: valid board names for dmm32at driver are: [ 247.177757][T14416] dmm32at [ 247.177761][T14416] comedi: valid board names for dt282x driver are: [ 247.177766][T14416] dt2821 [ 247.177770][T14416] dt2821-f [ 247.177774][T14416] dt2821-g [ 247.177778][T14416] dt2823 [ 247.177783][T14416] dt2824-pgh [ 247.177787][T14416] dt2824-pgl [ 247.177791][T14416] dt2825 [ 247.177841][T14416] dt2827 [ 247.177846][T14416] dt2828 [ 247.177851][T14416] dt2829 [ 247.177855][T14416] dt21-ez [ 247.177859][T14416] dt23-ez [ 247.177863][T14416] dt24-ez [ 247.177867][T14416] dt24-ez-pgl [ 247.177871][T14416] comedi: valid board names for dt2817 driver are: [ 247.177876][T14416] dt2817 [ 247.177880][T14416] comedi: valid board names for dt2815 driver are: [ 247.177885][T14416] dt2815 [ 247.177889][T14416] comedi: valid board names for dt2814 driver are: [ 247.177894][T14416] dt2814 [ 247.177898][T14416] comedi: valid board names for dt2811 driver are: [ 247.177903][T14416] dt2811-pgh [ 247.177907][T14416] dt2811-pgl [ 247.177911][T14416] comedi: valid board names for dt2801 driver are: [ 247.177915][T14416] dt2801 [ 247.177919][T14416] comedi: valid board names for das6402 driver are: [ 247.177924][T14416] das6402-12 [ 247.177927][T14416] das6402-16 [ 247.177931][T14416] comedi: valid board names for das1800 driver are: [ 247.177936][T14416] das-1701st [ 247.177940][T14416] das-1701st-da [ 247.177944][T14416] das-1702st [ 247.177947][T14416] das-1702st-da [ 247.177951][T14416] das-1702hr [ 247.178001][T14416] das-1702hr-da [ 247.178007][T14416] das-1701ao [ 247.178011][T14416] das-1702ao [ 247.178014][T14416] das-1801st [ 247.178018][T14416] das-1801st-da [ 247.178022][T14416] das-1802st [ 247.178025][T14416] das-1802st-da [ 247.178029][T14416] das-1802hr [ 247.178033][T14416] das-1802hr-da [ 247.178037][T14416] das-1801hc [ 247.178040][T14416] das-1802hc [ 247.178044][T14416] das-1801ao [ 247.178048][T14416] das-1802ao [ 247.178051][T14416] comedi: valid board names for das800 driver are: [ 247.178056][T14416] das-800 [ 247.178060][T14416] cio-das800 [ 247.178063][T14416] das-801 [ 247.178067][T14416] cio-das801 [ 247.178071][T14416] das-802 [ 247.178074][T14416] cio-das802 [ 247.178078][T14416] cio-das802/16 [ 247.178082][T14416] comedi: valid board names for isa-das08 driver are: [ 247.178087][T14416] isa-das08 [ 247.178090][T14416] das08-pgm [ 247.178094][T14416] das08-pgh [ 247.178097][T14416] das08-pgl [ 247.178101][T14416] das08-aoh [ 247.178105][T14416] das08-aol [ 247.178109][T14416] das08-aom [ 247.178149][T14416] das08/jr-ao [ 247.178154][T14416] das08jr-16-ao [ 247.178158][T14416] pc104-das08 [ 247.178162][T14416] das08jr/16 [ 247.178166][T14416] comedi: valid board names for das16m1 driver are: [ 247.178170][T14416] das16m1 [ 247.178174][T14416] comedi: valid board names for dac02 driver are: [ 247.178179][T14416] dac02 [ 247.178182][T14416] comedi: valid board names for rti802 driver are: [ 247.178187][T14416] rti802 [ 247.178190][T14416] comedi: valid board names for rti800 driver are: [ 247.178195][T14416] rti800 [ 247.178198][T14416] rti815 [ 247.178202][T14416] comedi: valid board names for pcm3724 driver are: [ 247.178207][T14416] pcm3724 [ 247.178210][T14416] comedi: valid board names for pcl818 driver are: [ 247.178215][T14416] pcl818l [ 247.178218][T14416] pcl818h [ 247.178222][T14416] pcl818hd [ 247.178226][T14416] pcl818hg [ 247.178229][T14416] pcl818 [ 247.178233][T14416] pcl718 [ 247.178236][T14416] pcm3718 [ 247.178240][T14416] comedi: valid board names for pcl816 driver are: [ 247.178244][T14416] pcl816 [ 247.178248][T14416] pcl814b [ 247.178251][T14416] comedi: valid board names for pcl812 driver are: [ 247.178256][T14416] pcl812 [ 247.178259][T14416] pcl812pg [ 247.178310][T14416] acl8112pg [ 247.178315][T14416] acl8112dg [ 247.178319][T14416] acl8112hg [ 247.178323][T14416] a821pgl [ 247.178326][T14416] a821pglnda [ 247.178330][T14416] a821pgh [ 247.178333][T14416] a822pgl [ 247.178337][T14416] a822pgh [ 247.178341][T14416] a823pgl [ 247.178345][T14416] a823pgh [ 247.178348][T14416] pcl813 [ 247.178352][T14416] pcl813b [ 247.178355][T14416] acl8113 [ 247.178359][T14416] iso813 [ 247.178363][T14416] acl8216 [ 247.178366][T14416] a826pg [ 247.178370][T14416] comedi: valid board names for pcl730 driver are: [ 247.178374][T14416] pcl730 [ 247.178378][T14416] iso730 [ 247.178381][T14416] acl7130 [ 247.178385][T14416] pcm3730 [ 247.178389][T14416] pcl725 [ 247.178392][T14416] p8r8dio [ 247.178396][T14416] acl7225b [ 247.178400][T14416] p16r16dio [ 247.178403][T14416] pcl733 [ 247.178407][T14416] pcl734 [ 247.178411][T14416] opmm-1616-xt [ 247.178414][T14416] pearl-mm-p [ 247.178418][T14416] ir104-pbf [ 247.178458][T14416] comedi: valid board names for pcl726 driver are: [ 247.178464][T14416] pcl726 [ 247.178468][T14416] pcl727 [ 247.178472][T14416] pcl728 [ 247.178475][T14416] acl6126 [ 247.178479][T14416] acl6128 [ 247.178482][T14416] comedi: valid board names for pcl724 driver are: [ 247.178487][T14416] pcl724 [ 247.178491][T14416] pcl722 [ 247.178494][T14416] pcl731 [ 247.178497][T14416] acl7122 [ 247.178501][T14416] acl7124 [ 247.178505][T14416] pet48dio [ 247.178508][T14416] pcmio48 [ 247.178512][T14416] onyx-mm-dio [ 247.178516][T14416] comedi: valid board names for pcl711 driver are: [ 247.178520][T14416] pcl711 [ 247.178524][T14416] pcl711b [ 247.178528][T14416] acl8112hg [ 247.178531][T14416] acl8112dg [ 247.178535][T14416] comedi: valid board names for amplc_pc263 driver are: [ 247.178540][T14416] pc263 [ 247.178543][T14416] comedi: valid board names for amplc_pc236 driver are: [ 247.178548][T14416] pc36at [ 247.178552][T14416] comedi: valid board names for amplc_dio200 driver are: [ 247.178556][T14416] pc212e [ 247.178560][T14416] pc214e [ 247.178563][T14416] pc215e [ 247.178567][T14416] pc218e [ 247.178571][T14416] pc272e [ 247.178673][T14416] comedi: valid board names for comedi_parport driver are: [ 247.178685][T14416] comedi_parport [ 247.178689][T14416] comedi: valid board names for comedi_test driver are: [ 247.178694][T14416] comedi_test [ 247.178698][T14416] comedi: valid board names for comedi_bond driver are: [ 247.178704][T14416] comedi_bond [ 247.211752][ T5086] Bluetooth: hci2: link tx timeout [ 247.211760][ T5086] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 247.212644][ T5086] Bluetooth: hci2: link tx timeout [ 247.212652][ T5086] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 247.213647][ T5086] Bluetooth: hci2: link tx timeout [ 247.213656][ T5086] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 247.213686][ T5086] Bluetooth: hci2: link tx timeout [ 247.213695][ T5086] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 247.673132][ T42] audit: type=1326 audit(1792459875.505:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.1.3483" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f568679e559 code=0x0 [ 247.706851][ C3] net_ratelimit: 46 callbacks suppressed [ 247.742765][T14363] imon:send_packet: task interrupted [ 247.742775][T14363] imon:send_packet: packet tx failed (-512) [ 247.742880][T14363] imon:vfd_write: send packet #1 failed [ 247.754220][ T7100] usb 5-1: USB disconnect, device number 88 [ 247.767192][T14421] md: could not open device unknown-block(1,0). [ 248.047565][ T41] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 248.187019][ T7100] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 248.216867][ T41] usb 9-1: Using ep0 maxpacket: 8 [ 248.217382][ T41] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 248.218165][ T41] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.218177][ T41] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 248.218214][ T41] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.218269][ T41] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 248.218283][ T41] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 248.218311][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.222352][ T41] hub 9-1:1.0: bad descriptor, ignoring hub [ 248.222362][ T41] hub 9-1:1.0: probe with driver hub failed with error -5 [ 248.222853][ T41] cdc_wdm 9-1:1.0: skipping garbage [ 248.222860][ T41] cdc_wdm 9-1:1.0: skipping garbage [ 248.224124][ T41] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 248.224133][ T41] cdc_wdm 9-1:1.0: Unknown control protocol [ 248.356842][ T7100] usb 5-1: Using ep0 maxpacket: 8 [ 248.357329][ T7100] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 248.358220][ T7100] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.358232][ T7100] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 248.358264][ T7100] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.358297][ T7100] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.364407][ T7100] hub 5-1:1.0: bad descriptor, ignoring hub [ 248.364418][ T7100] hub 5-1:1.0: probe with driver hub failed with error -5 [ 248.364723][ T7100] cdc_wdm 5-1:1.0: skipping garbage [ 248.364730][ T7100] cdc_wdm 5-1:1.0: skipping garbage [ 248.365689][ T7100] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 248.365698][ T7100] cdc_wdm 5-1:1.0: Unknown control protocol [ 248.455716][T14330] ================================================================== [ 248.455728][T14330] BUG: KASAN: slab-use-after-free in __dynamic_dev_dbg+0x2fc/0x310 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 248.455755][T14330] Read of size 8 at addr ffff88802f7eb0c8 by task syz.4.3447/14330 [ 248.455765][T14330] [ 248.455781][T14330] CPU: 2 UID: 0 PID: 14330 Comm: syz.4.3447 Not tainted syzkaller #0 PREEMPT(full) [ 248.455794][T14330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.455801][T14330] Call Trace: [ 248.455806][T14330] [ 248.455810][T14330] dump_stack_lvl+0x100/0x190 [ 248.455828][T14330] print_report+0x13d/0x4b0 [ 248.455852][T14330] ? __virt_addr_valid+0x239/0x430 [ 248.455866][T14330] ? __dynamic_dev_dbg+0x2fc/0x310 [ 248.455877][T14330] kasan_report+0xdf/0x1c0 [ 248.455895][T14330] ? __dynamic_dev_dbg+0x2fc/0x310 [ 248.455908][T14330] __dynamic_dev_dbg+0x2fc/0x310 [ 248.455920][T14330] ? trace_contention_end+0x126/0x160 [ 248.455933][T14330] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 248.455946][T14330] ? display_close+0x43/0x150 [ 248.455959][T14330] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 248.455977][T14330] ? locks_remove_file+0xd1/0x600 [ 248.455991][T14330] ? __pfx_locks_remove_file+0x10/0x10 [ 248.456006][T14330] display_close+0x103/0x150 [ 248.456019][T14330] ? __pfx_display_close+0x10/0x10 [ 248.456032][T14330] __fput+0x400/0xb60 [ 248.456050][T14330] task_work_run+0x150/0x240 [ 248.456067][T14330] ? __pfx_task_work_run+0x10/0x10 [ 248.456085][T14330] exit_to_user_mode_loop+0x1d8/0x700 [ 248.456100][T14330] ? rcu_is_watching+0x13/0xc0 [ 248.456117][T14330] do_syscall_64+0x661/0x790 [ 248.456134][T14330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.456145][T14330] RIP: 0033:0x7f7689b9e559 [ 248.456154][T14330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.456165][T14330] RSP: 002b:00007ffd2ffde588 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 248.456177][T14330] RAX: 0000000000000000 RBX: 00007ffd2ffde670 RCX: 00007f7689b9e559 [ 248.456184][T14330] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 248.456191][T14330] RBP: 000000000003bf19 R08: 0000000000000001 R09: 0000000000000000 [ 248.456198][T14330] R10: 0000001b32c20000 R11: 0000000000000246 R12: 00007ffd2ffde6b0 [ 248.456205][T14330] R13: 00007f7689e2609c R14: 000000000003ce8d R15: 00007f7689e26090 [ 248.456216][T14330] [ 248.456220][T14330] [ 248.456223][T14330] Allocated by task 63: [ 248.456228][T14330] kasan_save_stack+0x30/0x50 [ 248.456242][T14330] kasan_save_track+0x14/0x30 [ 248.456255][T14330] __kasan_kmalloc+0xaa/0xb0 [ 248.456268][T14330] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 248.456280][T14330] usb_set_configuration+0x10d0/0x1dc0 [ 248.456292][T14330] usb_generic_driver_probe+0xa1/0xe0 [ 248.456307][T14330] usb_probe_device+0xef/0x400 [ 248.456318][T14330] really_probe+0x241/0xa60 [ 248.456327][T14330] __driver_probe_device+0x210/0x460 [ 248.456336][T14330] driver_probe_device+0x4a/0x140 [ 248.456344][T14330] __device_attach_driver+0x1df/0x320 [ 248.456354][T14330] bus_for_each_drv+0x159/0x1e0 [ 248.456366][T14330] __device_attach+0x1e4/0x4d0 [ 248.456375][T14330] device_initial_probe+0xaf/0xd0 [ 248.456384][T14330] bus_probe_device+0x64/0x160 [ 248.456398][T14330] device_add+0x121d/0x1970 [ 248.456409][T14330] usb_new_device.part.0+0xcc2/0x1686 [ 248.456423][T14330] hub_event.cold+0x1e3/0xe90 [ 248.456438][T14330] process_one_work+0xac7/0x1b10 [ 248.456447][T14330] worker_thread+0x5ef/0xe50 [ 248.456455][T14330] kthread+0x373/0x450 [ 248.456469][T14330] ret_from_fork+0x730/0xd60 [ 248.456481][T14330] ret_from_fork_asm+0x1a/0x30 [ 248.456491][T14330] [ 248.456494][T14330] Freed by task 7100: [ 248.456499][T14330] kasan_save_stack+0x30/0x50 [ 248.456516][T14330] kasan_save_track+0x14/0x30 [ 248.456529][T14330] kasan_save_free_info+0x3b/0x70 [ 248.456540][T14330] __kasan_slab_free+0x5f/0x80 [ 248.456556][T14330] kfree+0x22b/0x6d0 [ 248.456569][T14330] device_release+0xd2/0x270 [ 248.456586][T14330] kobject_put+0x1f7/0x640 [ 248.456600][T14330] put_device+0x1f/0x30 [ 248.456612][T14330] usb_disable_device+0x44a/0x810 [ 248.456623][T14330] usb_disconnect+0x2e2/0x9a0 [ 248.456633][T14330] hub_event+0x1bb1/0x4420 [ 248.456643][T14330] process_one_work+0xac7/0x1b10 [ 248.456651][T14330] worker_thread+0x5ef/0xe50 [ 248.456660][T14330] kthread+0x373/0x450 [ 248.456673][T14330] ret_from_fork+0x730/0xd60 [ 248.456683][T14330] ret_from_fork_asm+0x1a/0x30 [ 248.456694][T14330] [ 248.456697][T14330] The buggy address belongs to the object at ffff88802f7eb000 [ 248.456697][T14330] which belongs to the cache kmalloc-2k of size 2048 [ 248.456705][T14330] The buggy address is located 200 bytes inside of [ 248.456705][T14330] freed 2048-byte region [ffff88802f7eb000, ffff88802f7eb800) [ 248.456715][T14330] [ 248.456718][T14330] The buggy address belongs to the physical page: [ 248.456723][T14330] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f7e8 [ 248.456733][T14330] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 248.456741][T14330] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 248.456751][T14330] page_type: f5(slab) [ 248.456761][T14330] raw: 00fff00000000040 ffff88801d042f00 dead000000000100 dead000000000122 [ 248.456788][T14330] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 248.456800][T14330] head: 00fff00000000040 ffff88801d042f00 dead000000000100 dead000000000122 [ 248.456809][T14330] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 248.456818][T14330] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 248.456827][T14330] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 248.456833][T14330] page dumped because: kasan: bad access detected [ 248.456838][T14330] page_owner tracks the page as allocated [ 248.456842][T14330] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 719, tgid 719 (kworker/u33:7), ts 8106709313 [ 248.456860][T14330] post_alloc_hook+0xfd/0x120 [ 248.456871][T14330] get_page_from_freelist+0x110d/0x35d0 [ 248.456883][T14330] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 248.456895][T14330] new_slab+0xa9/0x6e0 [ 248.456910][T14330] refill_objects+0xe3/0x410 [ 248.456923][T14330] __pcs_replace_empty_main+0x35e/0x650 [ 248.456937][T14330] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 248.456974][T14330] acpi_ds_create_walk_state+0x95/0x300 [ 248.456992][T14330] acpi_ps_execute_method+0x2c1/0xe90 [ 248.457009][T14330] acpi_ns_evaluate+0x640/0x1670 [ 248.457025][T14330] acpi_evaluate_object+0x420/0xe00 [ 248.457036][T14330] acpi_evaluate_integer+0xdf/0x220 [ 248.457051][T14330] acpi_bus_get_status+0x1a1/0x430 [ 248.457060][T14330] i2c_acpi_do_lookup+0x9b/0x280 [ 248.457071][T14330] i2c_acpi_get_info+0x115/0x360 [ 248.457081][T14330] i2c_acpi_add_device+0xb5/0x200 [ 248.457092][T14330] page_owner free stack trace missing [ 248.457096][T14330] [ 248.457098][T14330] Memory state around the buggy address: [ 248.457104][T14330] ffff88802f7eaf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 248.457111][T14330] ffff88802f7eb000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.457118][T14330] >ffff88802f7eb080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.457124][T14330] ^ [ 248.457130][T14330] ffff88802f7eb100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.457137][T14330] ffff88802f7eb180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.457143][T14330] ================================================================== [ 248.457417][T14330] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 248.701377][T14330] CPU: 2 UID: 0 PID: 14330 Comm: syz.4.3447 Not tainted syzkaller #0 PREEMPT(full) [ 248.704340][T14330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 248.707805][T14330] Call Trace: [ 248.709236][T14330] [ 248.710505][T14330] dump_stack_lvl+0x100/0x190 [ 248.712490][T14330] vpanic+0x553/0x970 [ 248.713841][T14330] ? __pfx_vpanic+0x10/0x10 [ 248.715277][T14330] ? mark_held_locks+0x40/0x70 [ 248.716965][T14330] ? __dynamic_dev_dbg+0x2fc/0x310 [ 248.719132][T14330] panic+0xd1/0xe0 [ 248.720746][T14330] ? __pfx_panic+0x10/0x10 [ 248.722160][T14330] ? __dynamic_dev_dbg+0x2fc/0x310 [ 248.723681][T14330] ? preempt_schedule_common+0x3c/0xb0 [ 248.725358][T14330] check_panic_on_warn.cold+0x19/0x34 [ 248.727198][T14330] end_report.part.0+0x3a/0x90 [ 248.729193][T14330] kasan_report.cold+0xe/0x18 [ 248.731109][T14330] ? __dynamic_dev_dbg+0x2fc/0x310 [ 248.732774][T14330] __dynamic_dev_dbg+0x2fc/0x310 [ 248.734345][T14330] ? trace_contention_end+0x126/0x160 [ 248.736035][T14330] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 248.738213][T14330] ? display_close+0x43/0x150 [ 248.740220][T14330] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 248.742743][T14330] ? locks_remove_file+0xd1/0x600 [ 248.744727][T14330] ? __pfx_locks_remove_file+0x10/0x10 [ 248.746493][T14330] display_close+0x103/0x150 [ 248.748366][T14330] ? __pfx_display_close+0x10/0x10 [ 248.750014][T14330] __fput+0x400/0xb60 [ 248.751310][T14330] task_work_run+0x150/0x240 [ 248.752798][T14330] ? __pfx_task_work_run+0x10/0x10 [ 248.754412][T14330] exit_to_user_mode_loop+0x1d8/0x700 [ 248.756110][T14330] ? rcu_is_watching+0x13/0xc0 [ 248.758056][T14330] do_syscall_64+0x661/0x790 [ 248.760031][T14330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.762224][T14330] RIP: 0033:0x7f7689b9e559 [ 248.763954][T14330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.771471][T14330] RSP: 002b:00007ffd2ffde588 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 248.774202][T14330] RAX: 0000000000000000 RBX: 00007ffd2ffde670 RCX: 00007f7689b9e559 [ 248.776938][T14330] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 248.779632][T14330] RBP: 000000000003bf19 R08: 0000000000000001 R09: 0000000000000000 [ 248.782152][T14330] R10: 0000001b32c20000 R11: 0000000000000246 R12: 00007ffd2ffde6b0 [ 248.784536][T14330] R13: 00007f7689e2609c R14: 000000000003ce8d R15: 00007f7689e26090 [ 248.787032][T14330] [ 248.789081][T14330] Kernel Offset: disabled [ 248.790686][T14330] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:31:16 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000002 RBX=0000000000000001 RCX=ffffffff9387157c RDX=0000000000000001 RSI=0000000000000000 RDI=ffffffff92c8286c RBP=ffffc90003116b18 RSP=ffffc90003116a60 R8 =ffffffff938715b2 R9 =0000000000000007 R10=0000000000000200 R11=00000000000939d3 R12=ffffc90003116b20 R13=ffffc90003116ad0 R14=ffffc90003116b05 R15=ffffffff93871581 RIP=ffffffff81b9c67c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6ba6572300 ffffffff 00c00000 GS =0000 ffff8880d4946000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000001a4000 CR3=00000000302fe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=58933baeebf20d1c c952c7c304e4f5e1 58933baeebf20d1c c952c7c304e4f5e1 58933baeebf20d1c c952c7c304e4f5e1 58933baeebf20d1c c952c7c304e4f5e1 ZMM18=ae0f48cb44820b82 6206b0c843cea096 ae0f48cb44820b82 6206b0c843cea096 ae0f48cb44820b82 6206b0c843cea096 ae0f48cb44820b82 6206b0c843cea096 ZMM19=0a13000000000000 0000000000000005 0a13000000000000 0000000000000004 0a13000000000000 0000000000000003 0a13000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040fffffffffffff 0400100000080008 017bde0580040480 0400100006017bc4 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000002080604a0 0340808080808088 0800049803420800 0490030010000480 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300020de2000400 0008000c800401c7 1000080047e00031 707364612f766564 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030fffffffffffff 040fffffffffffff 0400100000080008 017bde0580040480 ZMM25=b16f7289b16f7289 b16f7289b16f7289 b16f7289b16f7289 b16f7289b16f7289 b16f7289b16f7289 b16f7289b16f7289 b16f7289b16f7289 b16f7289b16f7289 ZMM26=030934b8030934b8 030934b8030934b8 030934b8030934b8 030934b8030934b8 030934b8030934b8 030934b8030934b8 030934b8030934b8 030934b8030934b8 ZMM27=11998c6b11998c6b 11998c6b11998c6b 11998c6b11998c6b 11998c6b11998c6b 11998c6b11998c6b 11998c6b11998c6b 11998c6b11998c6b 11998c6b11998c6b ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=1111000011110000 1111000011110000 1111000011110000 1111000011110000 1111000011110000 1111000011110000 1111000011110000 1111000011110000 info registers vcpu 1 CPU#1 RAX=ffffffffffdfc000 RBX=0000000000000000 RCX=0000000000000016 RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff95914394 RBP=ffff88802ba3fe40 RSP=ffffc900006a0f40 R8 =0000000000000001 R9 =fffff520000d41d6 R10=0000000000000003 R11=0000000000000000 R12=0000000000204000 R13=0000000000000016 R14=ffff88802ba3fe80 R15=dffffc0000000000 RIP=ffffffff81b7c7d1 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4a46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa04bf57e20 CR3=000000000fb96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffec117b90 00007fffec117b90 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa04b3f6823 00007fa04b3f6823 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa04b3f6e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa04b3f6e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555802c5ad8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0824ca0356020024 c80340020024c603 7365636976656401 ffffffffffffffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8004010800060101 81fa40020024d603 79726f6d656d01ff fffffffffffffff3 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0158100024800401 080006010181fa40 020024d60379726f 6d656d01ffffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffff30824ca 0356020024c80340 020024c603736563 6976656401ffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffff10824 b8035a020024b603 40020024b4037364 697001ffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffff70824ac03 56b6bacfb2e2ebe9 a1020024aa034002 0024a80374657375 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000079 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b2d115 RDI=ffffffff9cc7e6a0 RBP=ffffffff9cc7e660 RSP=ffffc9000161f380 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000079 R14=0000000000000008 R15=ffffc9000161f698 RIP=ffffffff85b2d13f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555560197500 ffffffff 00c00000 GS =0000 ffff8880d4b46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b33e01ff8 CR3=0000000023b6d000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f7 DR2=00000000ffffffff DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8140624b ffffffff81406214 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff814063a5 ffffffff8140624b ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd2ffde916 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd2ffde916 00007ffd2ffde91c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7689c3614a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7689c36184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7689c362e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7689c36176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff814063a5 ffffffff8140624b ffffffff81406214 ffffffff814061fc ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7689df65f8 00007f7689df65c8 00007f7689df6600 00007f7689df65e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000097b31ce569 RBX=ffff88806a523d80 RCX=00000000000006e0 RDX=0000000000000097 RSI=ffffffff81fbe6c5 RDI=ffff8880202f2580 RBP=00000039d35f1f23 RSP=ffffc90000197bc8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff92000032f83 R13=0000000000000001 R14=0000000000000001 R15=ffff88806a523dc0 RIP=ffffffff81fbe6d8 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4c46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000018c000 CR3=0000000036464000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f48ed95d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeacb5cde6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeacb5cde6 00007ffeacb5cdec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f48ecc3614a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f48ecc36184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f48ecc362e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f48ecc36176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f48ecdf6600 00007f48ecdf65e0 00007f48ecdf65e8 00007f48ecdf6618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f48ecdf65f8 00007f48ecdf65c8 00007f48ecdf6600 00007f48ecdf65e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9ce89e50701f6e2e baf27642c7149fd2 fa005eba7daefd8a 081279e07dec7fc5 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f01ce926eceffbf1 6b470725e8e96257 5e4e14822e81fd35 a06f5434e5a18232 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a54e709b8f0a671 214bc7ebc0972129 6bb7e6bc45c3ec3f 9bf67ab5a77681f8 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 629fa8365359d117 0fe95cf30ac7a1a0 83de916c0b5d05c7 71c2b429eaee1f9a ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000