last executing test programs: 8.500206052s ago: executing program 2 (id=1124): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf6223", 0x16) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 8.003253798s ago: executing program 3 (id=1126): getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, &(0x7f00000001c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) syz_open_dev$vim2m(0x0, 0x40000000e, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x8010, 0xffffffffffffffff, 0x3a2000) ftruncate(0xffffffffffffffff, 0x2) clock_gettime(0x0, 0x0) rename(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio1(0xffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000002fc0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) signalfd4(r2, &(0x7f0000000140), 0x8, 0x0) syz_open_dev$sndctrl(&(0x7f0000000180), 0x1, 0x290c01) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000040)) 7.97272407s ago: executing program 1 (id=1127): socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$tun(0xffffffffffffffff, &(0x7f0000000540)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x22, 0x8000, 0x0, 0x3, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010101}, {0x4e23, 0x4e21, 0xe, 0x0, @opaque="766f91d1e030"}}}, 0x22) open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000000004008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="e2ffffffff4df786ffffffd30000", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 7.339356241s ago: executing program 2 (id=1128): write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x7) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x66dbf000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x74) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x9, 0x7, 0x1, 0x300, 0x0, 0x10000000, 0xfffffffffffffffd, 0xb}, 0x0, &(0x7f0000000100)={0x9, 0x3, 0x2, 0x2000000000000, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) 7.338914916s ago: executing program 1 (id=1129): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf6223", 0x16) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) 6.872070554s ago: executing program 0 (id=1130): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0xa8242, 0x1df2a23c5997fad6) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) 6.759210656s ago: executing program 0 (id=1131): r0 = socket$netlink(0x10, 0x3, 0x7) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20048001) socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000001080)={&(0x7f0000000f80)={0x24, @long={0x3, 0x1}}, 0x14, 0x0, 0x1, 0x0, 0x0, 0x44040}, 0x40042) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, &(0x7f0000000600)=""/31, 0x0, 0x1f, 0x0, 0x8001}, 0x28) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) recvmsg(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)=""/119, 0x77}], 0x1}, 0x21) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004074}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x28) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x5, @link='syz1\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x4000800) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000810) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000280)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 6.398738301s ago: executing program 2 (id=1132): write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x7) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x66dbf000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x74) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x9, 0x7, 0x1, 0x300, 0x0, 0x10000000, 0xfffffffffffffffd, 0xb}, 0x0, &(0x7f0000000100)={0x9, 0x3, 0x2, 0x2000000000000, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) 6.176753766s ago: executing program 0 (id=1133): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf6223", 0x16) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 5.439141728s ago: executing program 1 (id=1134): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0x5678\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n', 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000a40)=0xe4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='3\n', 0x2) pipe2(&(0x7f0000000040), 0x4000) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='usbip-vudc.0', 0xc) 5.227465102s ago: executing program 2 (id=1135): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000080)='7', 0x1) write$char_usb(r0, &(0x7f0000000280), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) write(r2, &(0x7f0000000000)="19", 0x1) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3}, 0x14) 5.065287529s ago: executing program 1 (id=1136): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000080)='7', 0x1) write$char_usb(r0, &(0x7f0000000280)='L', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) write(r2, &(0x7f0000000000)="19", 0x1) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3}, 0x14) 4.968395231s ago: executing program 0 (id=1137): socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$tun(0xffffffffffffffff, &(0x7f0000000540)={@void, @void, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x22, 0x8000, 0x0, 0x3, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010101}, {0x4e23, 0x4e21, 0xe, 0x0, @opaque="766f91d1e030"}}}, 0x22) open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000000004008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="e2ffffffff4df786ffffffd30000", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 4.864145416s ago: executing program 3 (id=1138): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf6223", 0x16) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 3.347114615s ago: executing program 3 (id=1139): write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x7) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x66dbf000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x74) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x12443) pselect6(0x40, &(0x7f0000000040)={0x9, 0x7, 0x1, 0x300, 0x0, 0x10000000, 0xfffffffffffffffd, 0xb}, 0x0, &(0x7f0000000100)={0x9, 0x3, 0x2, 0x2000000000000, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) 2.638469421s ago: executing program 0 (id=1140): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x0, 0x1, 0x0, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES16=r4], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = syz_open_procfs(0x0, 0x0) pread64(r6, &(0x7f0000000500)=""/31, 0x1f, 0x6677) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000000300)=""/102400, 0x19000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r8, 0x0, 0x0, 0x2c2, 0xca) close(r5) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) writev(r9, &(0x7f00000001c0)=[{&(0x7f0000000400)="392c000013000347", 0x8}], 0x1) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f0000019300)=ANY=[@ANYBLOB="03bb0354c497ce8ea30222944779ea6d7ab87c96ae1c3361e469ca1476b664aa4da519378e3a9ede7f5b1df166f1242459c650bb9c01d7cbe038331467cdc4b7422c6aeea554821cdd691ec8bb958302bf976b09ad30baafabbfff824d41a67a8eeeda98def17d55c633b29e7344f6c22e7fddaf9959d906956438ceaebaa5f288efd8367b327d55c300285ea04d825a57f84fad8a75354cfd140e43acc8de9c65a431100572b499dbbfb1a8a79b2a2d3a9a338860c9c65a2efc90d45677f3779375324b1148b0239cae840ec8742afd69ad9f727890b32a0aef496eb9327b52378ead6266a159"], 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) syz_open_procfs(0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x183043) 1.427466681s ago: executing program 2 (id=1141): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x0, 0x1, 0x0, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = syz_open_procfs(0x0, 0x0) pread64(r5, &(0x7f0000000500)=""/31, 0x1f, 0x6677) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000300)=""/102400, 0x19000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r7, 0x0, 0x0, 0x2c2, 0xca) close(r4) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000400)="392c000013000347", 0x8}], 0x1) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0xa, &(0x7f0000019300)=ANY=[@ANYBLOB="03bb0354c497ce8ea30222944779ea6d7ab87c96ae1c3361e469ca1476b664aa4da519378e3a9ede7f5b1df166f1242459c650bb9c01d7cbe038331467cdc4b7422c6aeea554821cdd691ec8bb958302bf976b09ad30baafabbfff824d41a67a8eeeda98def17d55c633b29e7344f6c22e7fddaf9959d906956438ceaebaa5f288efd8367b327d55c300285ea04d825a57f84fad8a75354cfd140e43acc8de9c65a431100572b499dbbfb1a8a79b2a2d3a9a338860c9c65a2efc90d45677f3779375324b1148b0239cae840ec8742afd69ad9f727890b32a0aef496eb9327b52378ead6266a159"], 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) syz_open_procfs(0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x183043) 1.424674672s ago: executing program 3 (id=1142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @msi}]}) r2 = eventfd(0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000200)={r2}) write(r2, &(0x7f0000000300)="010000000000", 0x6) 965.544208ms ago: executing program 3 (id=1143): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}, 0x1, 0x1000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000001440)=""/40, &(0x7f0000001480)=0x28) r7 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r7, 0x40046109, 0x0) r8 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x4222c0) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000240)=0x82) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4) 964.940372ms ago: executing program 1 (id=1144): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000400)={0x0, 0xf20f, 0x40, 0x3, 0x1b}, &(0x7f0000000100), &(0x7f0000000200), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x10000, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) fchdir(0xffffffffffffffff) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) 549.926486ms ago: executing program 1 (id=1145): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf6223", 0x16) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xf9, &(0x7f0000006680)) munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 313.758658ms ago: executing program 2 (id=1146): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close(0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, &(0x7f0000000900), 0x100) read(r0, &(0x7f0000000b00), 0x100) read(r0, &(0x7f0000000d00), 0x100) read(r0, 0x0, 0x0) 308.332435ms ago: executing program 0 (id=1147): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x0, 0x1, 0x0, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = syz_open_procfs(0x0, 0x0) pread64(r5, &(0x7f0000000500)=""/31, 0x1f, 0x6677) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000300)=""/102400, 0x19000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r7, 0x0, 0x0, 0x2c2, 0xca) close(r4) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000400)="392c000013000347", 0x8}], 0x1) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0xa, &(0x7f0000019300)=ANY=[@ANYBLOB="03bb0354c497ce8ea30222944779ea6d7ab87c96ae1c3361e469ca1476b664aa4da519378e3a9ede7f5b1df166f1242459c650bb9c01d7cbe038331467cdc4b7422c6aeea554821cdd691ec8bb958302bf976b09ad30baafabbfff824d41a67a8eeeda98def17d55c633b29e7344f6c22e7fddaf9959d906956438ceaebaa5f288efd8367b327d55c300285ea04d825a57f84fad8a75354cfd140e43acc8de9c65a431100572b499dbbfb1a8a79b2a2d3a9a338860c9c65a2efc90d45677f3779375324b1148b0239cae840ec8742afd69ad9f727890b32a0aef496eb9327b52378ead6266a159"], 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) syz_open_procfs(0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x183043) 0s ago: executing program 3 (id=1148): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close(0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, &(0x7f0000000900), 0x100) read(r0, &(0x7f0000000b00), 0x100) read(r0, &(0x7f0000000d00), 0x100) read(r0, &(0x7f0000000f00), 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12) write(r0, &(0x7f0000000a00), 0x0) write(r1, &(0x7f0000000800)='AA', 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b7000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETLINK(r4, 0x400454cc, 0x8) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x24, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@typed={0x8, 0xc4, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) kernel console output (not intermixed with test programs): as no altsetting 0 [ 192.247988][ T6031] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.249334][ T41] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 192.252492][ T6031] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 192.256214][ C3] gadgetfs: connected [ 192.261078][ T6031] usb 7-1: config 0 interface 0 has no altsetting 0 [ 192.261386][ T41] gadgetfs: disconnected [ 192.270783][ T6031] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.275823][ T6031] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 192.283639][ T6031] usb 7-1: config 0 interface 0 has no altsetting 0 [ 192.287517][ T6031] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.294291][ T6031] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 192.298817][ T6031] usb 7-1: config 0 interface 0 has no altsetting 0 [ 192.306920][ T6031] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 192.312334][ T6031] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 192.315106][ T8195] openvswitch: netlink: Flow key attr not present in new flow. [ 192.320738][ T6031] usb 7-1: Product: syz [ 192.323431][ T6031] usb 7-1: Manufacturer: syz [ 192.325496][ T6031] usb 7-1: SerialNumber: syz [ 192.334482][ T6031] usb 7-1: config 0 descriptor?? [ 192.345281][ T6031] yurex 7-1:0.0: Could not find endpoints [ 192.409525][ C3] gadgetfs: connected [ 192.412121][ T41] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 192.416121][ T41] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 192.420396][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.427121][ C3] gadgetfs: configuration #1 [ 192.438341][ T5825] usb usb44-port1: unable to enumerate USB device [ 192.480578][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.492337][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.510744][ T8194] gadgetfs: suspended from state 4 [ 192.513763][ T41] usb 5-1: can't set config #1, error -71 [ 192.516250][ T8194] gadgetfs: disconnected [ 192.519356][ T41] usb 5-1: USB disconnect, device number 46 [ 192.670552][ T5832] usb usb40-port1: unable to enumerate USB device [ 192.715217][ T8206] netlink: 'syz.1.706': attribute type 11 has an invalid length. [ 192.721014][ T8206] netlink: 4312 bytes leftover after parsing attributes in process `syz.1.706'. [ 192.858383][ T8210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.708'. [ 192.876863][ T8210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.708'. [ 193.816597][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.879496][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.958918][ T42] audit: type=1800 audit(1785468850.902:9): pid=8226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.710" name="file0" dev="overlay" ino=1021 res=0 errno=0 [ 194.677896][ T1487] usb 38-1: device descriptor read/8, error -110 [ 194.695951][ T5953] usb 7-1: USB disconnect, device number 20 [ 195.079392][ T5953] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 195.151674][ T8224] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 195.153989][ T8224] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 195.163339][ T8224] vhci_hcd vhci_hcd.0: Device attached [ 195.227082][ T8234] FAULT_INJECTION: forcing a failure. [ 195.227082][ T8234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.229340][ T5953] usb 7-1: Using ep0 maxpacket: 16 [ 195.233617][ T8234] CPU: 2 UID: 0 PID: 8234 Comm: syz.0.713 Not tainted syzkaller #0 PREEMPT(full) [ 195.233633][ T8234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.233639][ T8234] Call Trace: [ 195.233643][ T8234] [ 195.233647][ T8234] dump_stack_lvl+0x100/0x190 [ 195.233666][ T8234] should_fail_ex.cold+0x5/0xa [ 195.233679][ T8234] _copy_from_user+0x2e/0xd0 [ 195.233696][ T8234] do_ip_setsockopt+0x28b8/0x3200 [ 195.233714][ T8234] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 195.233730][ T8234] ? aa_sk_perm+0x309/0xaa0 [ 195.233745][ T8234] ? rcu_read_lock_any_held+0x6a/0xa0 [ 195.233760][ T8234] ? __pfx_aa_sk_perm+0x10/0x10 [ 195.233776][ T8234] ip_setsockopt+0x5a/0xf0 [ 195.233792][ T8234] udp_setsockopt+0x64/0xb0 [ 195.233805][ T8234] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 195.233825][ T8234] do_sock_setsockopt+0xf3/0x1d0 [ 195.233843][ T8234] __sys_setsockopt+0x119/0x190 [ 195.233860][ T8234] __ia32_sys_setsockopt+0xbc/0x160 [ 195.233873][ T8234] ? __do_fast_syscall_32+0x98/0x970 [ 195.233893][ T8234] ? lockdep_hardirqs_on+0x78/0x100 [ 195.233907][ T8234] __do_fast_syscall_32+0xe7/0x970 [ 195.233920][ T8234] ? lockdep_hardirqs_on+0x78/0x100 [ 195.233934][ T8234] do_fast_syscall_32+0x32/0x70 [ 195.233948][ T8234] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.233963][ T8234] RIP: 0023:0xf7f28fec [ 195.233977][ T8234] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 195.233982][ T8234] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 195.233993][ T8234] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 195.234000][ T8234] RDX: 0000000000000030 RSI: 00000000800006c0 RDI: 0000000000000110 [ 195.234006][ T8234] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.234012][ T8234] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 195.234019][ T8234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.234032][ T8234] [ 195.235167][ T5953] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 85, changing to 7 [ 195.376406][ T5953] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 195.381769][ T5953] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.385914][ T5953] usb 7-1: Product: syz [ 195.388695][ T5953] usb 7-1: Manufacturer: 嘚牿ꀄ癯痦壡멚鿾봜뭚忓鲞䍊ដޅ벒栲껎ﻒ靾뙡㦀륐衚㻣张曁伸鿎Ɔ孛ⓜ䄪﹞㖷눟䊈秾鹑㙘溽ꡁ埴䔇튂⿕绚안鋕鵐헋琄雲緻✠빋耭㴟屹䖢伏揌ꫦ㝢㋤ޑꮁ㳶ꛪ吱쮝ꂽ땫얁耉킘殼ⶢ㌝ਅ촒핚쑆ꪬ✸ﲶ諍齘밃뤱᭶墐⯊Ǹ䮙ᮭ賸쁔팫货ꇬ [ 195.399090][ T8225] vhci_hcd: connection closed [ 195.401611][ T13] vhci_hcd vhci_hcd.3: stop threads [ 195.404675][ T13] vhci_hcd vhci_hcd.3: release socket [ 195.406357][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 195.419197][ T5953] usb 7-1: SerialNumber: syz [ 195.430697][ T1487] usb usb38-port1: attempt power cycle [ 195.439459][ T5832] usb 44-1: enqueue for inactive port 0 [ 195.629001][ T8230] netlink: 'syz.2.712': attribute type 21 has an invalid length. [ 195.632142][ T8230] netlink: 128 bytes leftover after parsing attributes in process `syz.2.712'. [ 195.635195][ T8230] netlink: 3 bytes leftover after parsing attributes in process `syz.2.712'. [ 195.639361][ T5825] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 195.789301][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 195.819149][ T5825] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 85, changing to 7 [ 195.824147][ T5825] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 195.827341][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.829643][ T5825] usb 6-1: Product: syz [ 195.831176][ T5825] usb 6-1: Manufacturer: 嘚牿ꀄ癯痦壡멚鿾봜뭚忓鲞䍊ដޅ벒栲껎ﻒ靾뙡㦀륐衚㻣张曁伸鿎Ɔ孛ⓜ䄪﹞㖷눟䊈秾鹑㙘溽ꡁ埴䔇튂⿕绚안鋕鵐헋琄雲緻✠빋耭㴟屹䖢伏揌ꫦ㝢㋤ޑꮁ㳶ꛪ吱쮝ꂽ땫얁耉킘殼ⶢ㌝ਅ촒핚쑆ꪬ✸ﲶ諍齘밃뤱᭶墐⯊Ǹ䮙ᮭ賸쁔팫货ꇬ [ 195.841512][ T5825] usb 6-1: SerialNumber: syz [ 195.909817][ T8247] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 196.062409][ T8239] netlink: 'syz.1.715': attribute type 21 has an invalid length. [ 196.066439][ T8239] netlink: 128 bytes leftover after parsing attributes in process `syz.1.715'. [ 196.069706][ T8239] netlink: 3 bytes leftover after parsing attributes in process `syz.1.715'. [ 196.094957][ T1487] usb usb38-port1: unable to enumerate USB device [ 196.097265][ T5832] usb usb44-port1: attempt power cycle [ 196.146756][ T8253] loop9: detected capacity change from 0 to 2640 [ 196.152551][ T8253] buffer_io_error: 11 callbacks suppressed [ 196.152568][ T8253] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.158540][ T8253] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.162928][ T8253] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.166566][ T8253] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.170072][ T8253] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.173374][ T8253] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.176573][ T8253] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.181056][ T8253] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.184419][ T8253] ldm_validate_partition_table(): Disk read failed. [ 196.187230][ T8253] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.190484][ T8253] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.193728][ T8253] Dev loop9: unable to read RDB block 0 [ 196.196301][ T8253] loop9: unable to read partition table [ 196.199575][ T8253] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 196.323895][ T8257] tipc: Enabling of bearer rejected, failed to enable media [ 196.661262][ T5832] usb usb44-port1: unable to enumerate USB device [ 197.266494][ T42] audit: type=1800 audit(1785468854.212:10): pid=8265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.723" name="file0" dev="overlay" ino=957 res=0 errno=0 [ 197.386096][ T8273] gadgetfs: bound to dummy_udc driver [ 197.639435][ T41] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 197.642345][ C3] gadgetfs: connected [ 197.643848][ T41] gadgetfs: disconnected [ 197.675768][ T8273] openvswitch: netlink: Flow key attr not present in new flow. [ 197.770787][ T5953] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 197.800006][ C3] gadgetfs: connected [ 197.803179][ T41] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 197.811229][ T41] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 197.815680][ T5953] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 197.818665][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.826659][ C3] gadgetfs: configuration #1 [ 197.829850][ T5953] usb 7-1: USB disconnect, device number 21 [ 197.839829][ T5744] udevd[5744]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 198.090383][ T8272] gadgetfs: suspended from state 4 [ 198.209464][ T8272] gadgetfs: disconnected [ 198.212486][ T41] usb 5-1: can't set config #1, error -71 [ 198.216480][ T41] usb 5-1: USB disconnect, device number 47 [ 198.275555][ T8283] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 198.403901][ T8287] loop9: detected capacity change from 0 to 2640 [ 198.407332][ T8287] ldm_validate_partition_table(): Disk read failed. [ 198.410355][ T8287] Dev loop9: unable to read RDB block 0 [ 198.412909][ T8287] loop9: unable to read partition table [ 198.415391][ T8287] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 198.457040][ T5825] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 198.730415][ T8297] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 198.732508][ T8297] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 198.752938][ T8297] vhci_hcd vhci_hcd.0: Device attached [ 198.928357][ T5825] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 198.966829][ T5825] usb 6-1: USB disconnect, device number 19 [ 199.000446][ T5744] udevd[5744]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 199.069639][ T1487] usb 38-1: SetAddress Request (18) to port 0 [ 199.085658][ T1487] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 199.408302][ T8298] vhci_hcd: connection reset by peer [ 199.414617][ T5895] vhci_hcd vhci_hcd.0: stop threads [ 199.416361][ T5895] vhci_hcd vhci_hcd.0: release socket [ 199.421718][ T5895] vhci_hcd vhci_hcd.0: disconnect device [ 200.604921][ T8331] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 200.640848][ T8333] loop9: detected capacity change from 0 to 2640 [ 200.643965][ T8333] ldm_validate_partition_table(): Disk read failed. [ 200.646317][ T8333] Dev loop9: unable to read RDB block 0 [ 200.648199][ T8333] loop9: unable to read partition table [ 200.652309][ T8333] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 200.726445][ T8335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.740'. [ 200.730096][ T5846] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 200.733729][ T8335] openvswitch: netlink: Flow key attr not present in new flow. [ 200.900876][ T5846] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 200.906089][ T5846] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 200.913246][ T5846] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 200.916844][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.919396][ T5846] usb 5-1: Product: syz [ 200.920706][ T5846] usb 5-1: Manufacturer: syz [ 200.922176][ T5846] usb 5-1: SerialNumber: syz [ 200.929399][ T5846] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 200.933884][ T5846] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 200.938978][ T5846] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 201.019434][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 201.651499][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.746'. [ 201.651991][ T9] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 201.660552][ T9] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 201.665720][ T9] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 201.668700][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.671365][ T9] usb 7-1: Product: syz [ 201.672750][ T9] usb 7-1: Manufacturer: syz [ 201.674663][ T9] usb 7-1: SerialNumber: syz [ 201.680302][ T9] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 201.685042][ T9] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2 [ 201.689143][ T9] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB3 [ 201.701176][ T8349] loop9: detected capacity change from 0 to 2640 [ 201.705667][ T8349] buffer_io_error: 48 callbacks suppressed [ 201.705677][ T8349] Buffer I/O error on dev loop9, logical block 0, async page read [ 201.713044][ T8349] Buffer I/O error on dev loop9, logical block 0, async page read [ 201.716205][ T8349] Buffer I/O error on dev loop9, logical block 0, async page read [ 201.721078][ T8349] Buffer I/O error on dev loop9, logical block 0, async page read [ 201.723944][ T8349] Buffer I/O error on dev loop9, logical block 0, async page read [ 201.726444][ T8349] Buffer I/O error on dev loop9, logical block 0, async page read [ 201.728942][ T8349] Buffer I/O error on dev loop9, logical block 0, async page read [ 201.731475][ T8349] Buffer I/O error on dev loop9, logical block 0, async page read [ 201.734031][ T8349] ldm_validate_partition_table(): Disk read failed. [ 201.736063][ T8349] Buffer I/O error on dev loop9, logical block 0, async page read [ 201.744847][ T8349] Buffer I/O error on dev loop9, logical block 0, async page read [ 201.760679][ T8349] Dev loop9: unable to read RDB block 0 [ 201.762718][ T8349] loop9: unable to read partition table [ 201.767125][ T8349] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 201.787731][ T8354] loop9: detected capacity change from 0 to 2640 [ 201.791543][ T8354] ldm_validate_partition_table(): Disk read failed. [ 201.794701][ T8354] Dev loop9: unable to read RDB block 0 [ 201.797244][ T8354] loop9: unable to read partition table [ 201.800371][ T8354] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 201.855629][ T8356] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 201.860364][ T8358] FAULT_INJECTION: forcing a failure. [ 201.860364][ T8358] name failslab, interval 1, probability 0, space 0, times 0 [ 201.865589][ T8358] CPU: 2 UID: 0 PID: 8358 Comm: syz.3.750 Not tainted syzkaller #0 PREEMPT(full) [ 201.865613][ T8358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.865638][ T8358] Call Trace: [ 201.865645][ T8358] [ 201.865652][ T8358] dump_stack_lvl+0x100/0x190 [ 201.865678][ T8358] should_fail_ex.cold+0x5/0xa [ 201.865698][ T8358] should_failslab+0xc2/0x120 [ 201.865723][ T8358] __kmalloc_noprof+0xfc/0x820 [ 201.865752][ T8358] ? __pfx_dynamic_dname+0x10/0x10 [ 201.865791][ T8358] ? tomoyo_encode2+0xfb/0x3c0 [ 201.865832][ T8358] tomoyo_encode2+0xfb/0x3c0 [ 201.865859][ T8358] tomoyo_encode+0x29/0x50 [ 201.865885][ T8358] tomoyo_realpath_from_path+0x18c/0x690 [ 201.865918][ T8358] tomoyo_path_number_perm+0x23c/0x580 [ 201.865938][ T8358] ? tomoyo_path_number_perm+0x22e/0x580 [ 201.865960][ T8358] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 201.865981][ T8358] ? get_pid_task+0x106/0x250 [ 201.866024][ T8358] ? find_held_lock+0x2b/0x80 [ 201.866045][ T8358] ? __fget_files+0x215/0x3d0 [ 201.866063][ T8358] ? hook_file_ioctl_common+0x140/0x440 [ 201.866086][ T8358] ? __fget_files+0x215/0x3d0 [ 201.866107][ T8358] ? __fget_files+0x21f/0x3d0 [ 201.866125][ T8358] security_file_ioctl_compat+0xd3/0x230 [ 201.866147][ T8358] __ia32_compat_sys_ioctl+0xc2/0x360 [ 201.866176][ T8358] __do_fast_syscall_32+0xe7/0x970 [ 201.866202][ T8358] ? lockdep_hardirqs_on+0x78/0x100 [ 201.866227][ T8358] do_fast_syscall_32+0x32/0x70 [ 201.866249][ T8358] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.866269][ T8358] RIP: 0023:0xf6ffefec [ 201.866289][ T8358] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 201.866296][ T8358] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 201.866313][ T8358] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 201.866323][ T8358] RDX: 0000000080001040 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.866332][ T8358] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.866343][ T8358] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 201.866355][ T8358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.866379][ T8358] [ 201.868908][ T8358] ERROR: Out of memory at tomoyo_realpath_from_path. [ 202.189696][ T8320] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 202.193870][ T8320] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 202.197852][ T8320] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 202.202788][ T8320] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 202.207180][ T8337] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -32 [ 202.209097][ T6031] usb 5-1: USB disconnect, device number 48 [ 202.210194][ C0] usb 5-1: ti_interrupt_callback - nonzero urb status, -71 [ 202.210207][ C0] usb 5-1: ti_interrupt_callback - resubmit interrupt urb failed, -19 [ 202.210343][ T8337] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -19 [ 202.210390][ T8337] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -19 [ 202.210434][ T8337] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -19 [ 202.221264][ T5832] usb 7-1: USB disconnect, device number 22 [ 202.238521][ T6031] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 202.258764][ T5832] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2 [ 202.264534][ T6031] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 202.280748][ T6031] ti_usb_3410_5052 5-1:2.0: device disconnected [ 202.385348][ T5832] ti_usb_3410_5052_2 ttyUSB3: TI USB 5052 2 port adapter converter now disconnected from ttyUSB3 [ 202.443349][ T5832] ti_usb_3410_5052 7-1:2.0: device disconnected [ 202.658907][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'. [ 202.790293][ T8384] gadgetfs: bound to dummy_udc driver [ 203.087848][ T8394] openvswitch: netlink: Flow key attr not present in new flow. [ 203.098044][ T5832] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 203.100789][ C1] gadgetfs: connected [ 203.119338][ T5832] gadgetfs: disconnected [ 203.256777][ T8399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.761'. [ 203.260573][ T8399] openvswitch: netlink: Flow key attr not present in new flow. [ 203.269600][ C1] gadgetfs: connected [ 203.272955][ T5832] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 203.280838][ T5832] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 203.289364][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.369278][ C1] gadgetfs: configuration #1 [ 203.457520][ T8383] gadgetfs: suspended from state 3 [ 203.460700][ T8383] gadgetfs: disconnected [ 203.540326][ T5832] usb 5-1: can't set config #1, error -71 [ 203.544122][ T5832] usb 5-1: USB disconnect, device number 49 [ 203.582057][ T8413] netlink: 36 bytes leftover after parsing attributes in process `syz.0.764'. [ 204.189386][ T1487] usb 38-1: device descriptor read/8, error -110 [ 204.369661][ T5832] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 204.602320][ T1487] usb usb38-port1: attempt power cycle [ 204.617844][ T5832] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 204.627159][ T5832] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 204.643107][ T5832] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 204.646606][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.652155][ T5832] usb 6-1: Product: syz [ 204.653621][ T5832] usb 6-1: Manufacturer: syz [ 204.657339][ T5832] usb 6-1: SerialNumber: syz [ 204.679654][ T5832] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 204.691115][ T5832] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 204.714718][ T5832] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 204.826696][ T8446] gadgetfs: bound to dummy_udc driver [ 205.079394][ T5953] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 205.083300][ C3] gadgetfs: connected [ 205.085210][ T5953] gadgetfs: disconnected [ 205.127079][ T8446] openvswitch: netlink: Flow key attr not present in new flow. [ 205.160179][ T1487] usb usb38-port1: unable to enumerate USB device [ 205.240051][ C3] gadgetfs: connected [ 205.247141][ T5953] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 205.251308][ T5953] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 205.255530][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.280673][ C3] gadgetfs: configuration #1 [ 205.327362][ T8445] gadgetfs: suspended from state 3 [ 205.327579][ T5953] usb 5-1: can't set config #1, error -71 [ 205.332041][ T8445] gadgetfs: disconnected [ 205.334683][ T5953] usb 5-1: USB disconnect, device number 50 [ 205.336620][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.771'. [ 205.346140][ T8452] openvswitch: netlink: Flow key attr not present in new flow. [ 205.574014][ T8460] gadgetfs: bound to dummy_udc driver [ 205.593761][ T8461] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 205.596565][ T8461] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 205.603689][ T8461] vhci_hcd vhci_hcd.0: Device attached [ 205.809455][ T50] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 205.813318][ C2] gadgetfs: connected [ 205.815421][ T50] gadgetfs: disconnected [ 205.869605][ T1487] usb 38-1: SetAddress Request (22) to port 0 [ 205.871626][ T1487] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 205.908542][ T8468] openvswitch: netlink: Flow key attr not present in new flow. [ 205.949860][ T8422] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 205.956358][ T8422] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 205.960492][ T8422] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 205.960561][ C2] gadgetfs: connected [ 205.969738][ T8422] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 205.977452][ T41] usb 6-1: USB disconnect, device number 20 [ 205.980335][ T50] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 205.983150][ T41] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 205.985936][ T50] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 205.989440][ T41] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 205.994997][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.995857][ T41] ti_usb_3410_5052 6-1:2.0: device disconnected [ 206.010825][ C2] gadgetfs: configuration #1 [ 206.115408][ T8470] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 206.132119][ T8459] gadgetfs: suspended from state 3 [ 206.134334][ T8459] gadgetfs: disconnected [ 206.136644][ T50] usb 5-1: USB disconnect, device number 51 [ 206.223859][ T8462] vhci_hcd: connection reset by peer [ 206.226646][ T13] vhci_hcd vhci_hcd.0: stop threads [ 206.227695][ T8497] netlink: 36 bytes leftover after parsing attributes in process `syz.2.776'. [ 206.228923][ T13] vhci_hcd vhci_hcd.0: release socket [ 206.236713][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 206.529484][ T5832] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 206.701254][ T5832] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 206.705297][ T5832] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 206.709175][ T5832] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.716854][ T5832] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 206.720810][ T5832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 206.724279][ T5832] usb 8-1: Product: syz [ 206.726193][ T5832] usb 8-1: Manufacturer: syz [ 206.728738][ T5832] usb 8-1: SerialNumber: syz [ 206.976827][ T5832] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 207.246379][ T6031] usb 8-1: USB disconnect, device number 27 [ 207.257703][ T8530] usblp0: removed [ 207.360957][ T5832] libceph: connect (1)[c::]:6789 error -101 [ 207.364568][ T5832] libceph: mon0 (1)[c::]:6789 connect error [ 207.372530][ T8550] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 207.631316][ T5832] libceph: connect (1)[c::]:6789 error -101 [ 207.638760][ T5832] libceph: mon0 (1)[c::]:6789 connect error [ 207.669278][ T42] audit: type=1800 audit(1785468864.617:11): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.785" name="file0" dev="overlay" ino=1218 res=0 errno=0 [ 208.149921][ T5832] libceph: connect (1)[c::]:6789 error -101 [ 208.161683][ T5832] libceph: mon0 (1)[c::]:6789 connect error [ 208.198431][ T8538] ceph: No mds server is up or the cluster is laggy [ 208.489186][ T8567] netlink: 36 bytes leftover after parsing attributes in process `syz.1.788'. [ 208.510057][ T5846] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 208.671149][ T5846] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 208.675435][ T5846] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.679916][ T5846] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 208.684575][ T5846] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.688886][ T5846] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 208.693911][ T5846] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.699402][ T5846] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 208.704142][ T5846] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.708468][ T5846] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 208.713774][ T5846] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.718064][ T5846] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 208.722912][ T5846] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.727154][ T5846] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 208.732834][ T5846] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.737184][ T5846] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 208.741423][ T5846] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.744666][ T5846] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 208.749011][ T5846] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 208.754497][ T5846] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 208.759292][ T5846] usb 7-1: Product: syz [ 208.760624][ T5846] usb 7-1: Manufacturer: syz [ 208.769296][ T5846] usb 7-1: SerialNumber: syz [ 208.772171][ T5846] usb 7-1: config 0 descriptor?? [ 208.819421][ T6031] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 208.980767][ T6031] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 208.985069][ T6031] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 208.990931][ T6031] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 208.994487][ T6031] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.997373][ T6031] usb 5-1: Product: syz [ 208.999444][ T6031] usb 5-1: Manufacturer: syz [ 209.001177][ T6031] usb 5-1: SerialNumber: syz [ 209.089412][ T5832] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 209.251060][ T5832] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 209.255300][ T5832] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 209.259419][ T5832] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.266821][ T5832] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 209.270781][ T5832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 209.274211][ T5832] usb 8-1: Product: syz [ 209.276083][ T5832] usb 8-1: Manufacturer: syz [ 209.278080][ T5832] usb 8-1: SerialNumber: syz [ 209.431119][ T6031] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 209.440874][ T6031] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 209.453857][ T6031] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 209.469827][ T8578] mmap: syz.1.791 (8578) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 209.507536][ T5832] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 209.572100][ T8582] loop9: detected capacity change from 0 to 2640 [ 209.575784][ T8582] buffer_io_error: 27 callbacks suppressed [ 209.575794][ T8582] Buffer I/O error on dev loop9, logical block 0, async page read [ 209.581144][ T8582] Buffer I/O error on dev loop9, logical block 0, async page read [ 209.584181][ T8582] Buffer I/O error on dev loop9, logical block 0, async page read [ 209.587723][ T8582] Buffer I/O error on dev loop9, logical block 0, async page read [ 209.590927][ T8582] Buffer I/O error on dev loop9, logical block 0, async page read [ 209.593519][ T8582] Buffer I/O error on dev loop9, logical block 0, async page read [ 209.596747][ T8582] Buffer I/O error on dev loop9, logical block 0, async page read [ 209.599915][ T8582] Buffer I/O error on dev loop9, logical block 0, async page read [ 209.602419][ T8582] ldm_validate_partition_table(): Disk read failed. [ 209.604579][ T8582] Buffer I/O error on dev loop9, logical block 0, async page read [ 209.607042][ T8582] Buffer I/O error on dev loop9, logical block 0, async page read [ 209.609542][ T8582] Dev loop9: unable to read RDB block 0 [ 209.611459][ T8582] loop9: unable to read partition table [ 209.613328][ T8582] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 209.641120][ T5846] usb 7-1: USB disconnect, device number 23 [ 209.745143][ T6031] usb 8-1: USB disconnect, device number 28 [ 209.767690][ T8572] usblp0: removed [ 210.687839][ T42] audit: type=1800 audit(1785468867.637:12): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.799" name="file0" dev="overlay" ino=1033 res=0 errno=0 [ 211.425775][ T1487] usb 38-1: device descriptor read/8, error -110 [ 211.506744][ T8606] netlink: 36 bytes leftover after parsing attributes in process `syz.1.800'. [ 211.822880][ T1487] usb usb38-port1: attempt power cycle [ 212.209481][ T5953] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 212.349603][ T5953] usb 8-1: device descriptor read/64, error -71 [ 212.391891][ T1487] usb usb38-port1: unable to enumerate USB device [ 212.406451][ T8623] FAULT_INJECTION: forcing a failure. [ 212.406451][ T8623] name failslab, interval 1, probability 0, space 0, times 0 [ 212.412439][ T8623] CPU: 1 UID: 0 PID: 8623 Comm: syz.2.806 Not tainted syzkaller #0 PREEMPT(full) [ 212.412455][ T8623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.412462][ T8623] Call Trace: [ 212.412466][ T8623] [ 212.412471][ T8623] dump_stack_lvl+0x100/0x190 [ 212.412490][ T8623] should_fail_ex.cold+0x5/0xa [ 212.412502][ T8623] should_failslab+0xc2/0x120 [ 212.412518][ T8623] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 212.412533][ T8623] ? __get_vm_area_node+0x101/0x330 [ 212.412551][ T8623] __get_vm_area_node+0x101/0x330 [ 212.412568][ T8623] __vmalloc_node_range_noprof+0x228/0x1630 [ 212.412584][ T8623] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 212.412600][ T8623] ? find_held_lock+0x2b/0x80 [ 212.412614][ T8623] ? process_measurement+0x4c8/0x2350 [ 212.412627][ T8623] ? process_measurement+0x4c8/0x2350 [ 212.412641][ T8623] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 212.412659][ T8623] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 212.412677][ T8623] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 212.412695][ T8623] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 212.412709][ T8623] __vmalloc_node_noprof+0xad/0xf0 [ 212.412725][ T8623] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 212.412741][ T8623] __vmalloc_noprof+0xa3/0x120 [ 212.412757][ T8623] ? __pfx___vmalloc_noprof+0x10/0x10 [ 212.412774][ T8623] ? rcu_is_watching+0x12/0xc0 [ 212.412787][ T8623] ? apparmor_capable+0x1d7/0x4d0 [ 212.412801][ T8623] bpf_prog_alloc_no_stats+0x58/0x640 [ 212.412815][ T8623] ? security_capable+0x80/0x260 [ 212.412827][ T8623] bpf_prog_alloc+0x3b/0x200 [ 212.412840][ T8623] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 212.412857][ T8623] bpf_prog_load+0x4a9/0x2fa0 [ 212.412871][ T8623] ? __pfx_bpf_prog_load+0x10/0x10 [ 212.412882][ T8623] ? __lock_acquire+0x49f/0x1a40 [ 212.412910][ T8623] __sys_bpf+0x18dc/0x4e80 [ 212.412924][ T8623] ? __pfx___sys_bpf+0x10/0x10 [ 212.412936][ T8623] ? find_held_lock+0x2b/0x80 [ 212.412968][ T8623] ? get_pid_task+0xfc/0x250 [ 212.412981][ T8623] ? get_pid_task+0xfc/0x250 [ 212.412997][ T8623] ? proc_fail_nth_write+0x9f/0x220 [ 212.413012][ T8623] ? find_held_lock+0x2b/0x80 [ 212.413028][ T8623] ? rcu_read_lock_any_held+0x6a/0xa0 [ 212.413042][ T8623] ? find_held_lock+0x2b/0x80 [ 212.413054][ T8623] ? ksys_write+0x190/0x250 [ 212.413064][ T8623] ? ksys_write+0x190/0x250 [ 212.413083][ T8623] ? fput+0x79/0x100 [ 212.413096][ T8623] ? __ia32_sys_bpf+0xcc/0x170 [ 212.413107][ T8623] __ia32_sys_bpf+0xcc/0x170 [ 212.413119][ T8623] ? __do_fast_syscall_32+0x98/0x970 [ 212.413135][ T8623] __do_fast_syscall_32+0xe7/0x970 [ 212.413164][ T8623] ? lockdep_hardirqs_on+0x78/0x100 [ 212.413178][ T8623] do_fast_syscall_32+0x32/0x70 [ 212.413192][ T8623] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.413206][ T8623] RIP: 0023:0xf7f82fec [ 212.413221][ T8623] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 212.413225][ T8623] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 212.413237][ T8623] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000840 [ 212.413244][ T8623] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 212.413254][ T8623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.413260][ T8623] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 212.413267][ T8623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.413280][ T8623] [ 212.413450][ T8623] syz.2.806: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 212.528336][ T8623] CPU: 0 UID: 0 PID: 8623 Comm: syz.2.806 Not tainted syzkaller #0 PREEMPT(full) [ 212.528357][ T8623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.528364][ T8623] Call Trace: [ 212.528369][ T8623] [ 212.528373][ T8623] dump_stack_lvl+0x100/0x190 [ 212.528392][ T8623] warn_alloc.cold+0x94/0xa8 [ 212.528404][ T8623] ? __pfx_warn_alloc+0x10/0x10 [ 212.528416][ T8623] ? __kasan_kmalloc+0x8a/0xb0 [ 212.528435][ T8623] ? __get_vm_area_node+0x208/0x330 [ 212.528452][ T8623] __vmalloc_node_range_noprof+0xccd/0x1630 [ 212.528470][ T8623] ? find_held_lock+0x2b/0x80 [ 212.528483][ T8623] ? process_measurement+0x4c8/0x2350 [ 212.528496][ T8623] ? process_measurement+0x4c8/0x2350 [ 212.528510][ T8623] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 212.528530][ T8623] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 212.528547][ T8623] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 212.528565][ T8623] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 212.528580][ T8623] __vmalloc_node_noprof+0xad/0xf0 [ 212.528595][ T8623] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 212.528611][ T8623] __vmalloc_noprof+0xa3/0x120 [ 212.528627][ T8623] ? __pfx___vmalloc_noprof+0x10/0x10 [ 212.528644][ T8623] ? rcu_is_watching+0x12/0xc0 [ 212.528657][ T8623] ? apparmor_capable+0x1d7/0x4d0 [ 212.528673][ T8623] bpf_prog_alloc_no_stats+0x58/0x640 [ 212.528694][ T8623] ? security_capable+0x80/0x260 [ 212.528713][ T8623] bpf_prog_alloc+0x3b/0x200 [ 212.528733][ T8623] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 212.528756][ T8623] bpf_prog_load+0x4a9/0x2fa0 [ 212.528771][ T8623] ? __pfx_bpf_prog_load+0x10/0x10 [ 212.528782][ T8623] ? __lock_acquire+0x49f/0x1a40 [ 212.528809][ T8623] __sys_bpf+0x18dc/0x4e80 [ 212.528829][ T8623] ? __pfx___sys_bpf+0x10/0x10 [ 212.528841][ T8623] ? find_held_lock+0x2b/0x80 [ 212.528853][ T8623] ? get_pid_task+0xfc/0x250 [ 212.528866][ T8623] ? get_pid_task+0xfc/0x250 [ 212.528882][ T8623] ? proc_fail_nth_write+0x9f/0x220 [ 212.528897][ T8623] ? find_held_lock+0x2b/0x80 [ 212.528913][ T8623] ? rcu_read_lock_any_held+0x6a/0xa0 [ 212.528926][ T8623] ? find_held_lock+0x2b/0x80 [ 212.528939][ T8623] ? ksys_write+0x190/0x250 [ 212.528949][ T8623] ? ksys_write+0x190/0x250 [ 212.528967][ T8623] ? fput+0x79/0x100 [ 212.528981][ T8623] ? __ia32_sys_bpf+0xcc/0x170 [ 212.528992][ T8623] __ia32_sys_bpf+0xcc/0x170 [ 212.529004][ T8623] ? __do_fast_syscall_32+0x98/0x970 [ 212.529019][ T8623] __do_fast_syscall_32+0xe7/0x970 [ 212.529033][ T8623] ? lockdep_hardirqs_on+0x78/0x100 [ 212.529047][ T8623] do_fast_syscall_32+0x32/0x70 [ 212.529061][ T8623] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.529075][ T8623] RIP: 0023:0xf7f82fec [ 212.529090][ T8623] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 212.529095][ T8623] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 212.529106][ T8623] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000840 [ 212.529113][ T8623] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 212.529119][ T8623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.529125][ T8623] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 212.529131][ T8623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.529144][ T8623] [ 212.529149][ T8623] Mem-Info: [ 212.589385][ T5953] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 212.599319][ T8623] active_anon:9831 inactive_anon:73 isolated_anon:0 [ 212.599319][ T8623] active_file:831 inactive_file:39939 isolated_file:0 [ 212.599319][ T8623] unevictable:768 dirty:338 writeback:0 [ 212.599319][ T8623] slab_reclaimable:7537 slab_unreclaimable:53103 [ 212.599319][ T8623] mapped:27303 shmem:4017 pagetables:1325 [ 212.599319][ T8623] sec_pagetables:295 bounce:0 [ 212.599319][ T8623] kernel_misc_reclaimable:0 [ 212.599319][ T8623] free:49469 free_pcp:12425 free_cma:0 [ 212.665223][ T8623] Node 0 active_anon:20kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8352kB pagetables:1244kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 212.675526][ T8623] Node 1 active_anon:39304kB inactive_anon:284kB active_file:3324kB inactive_file:159756kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:109184kB dirty:1352kB writeback:0kB shmem:14532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7180kB pagetables:4056kB sec_pagetables:60kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 212.685984][ T8623] Node 0 DMA free:1832kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:660kB local_pcp:216kB free_cma:0kB [ 212.695680][ T8623] lowmem_reserve[]: 0 280 280 280 280 [ 212.697336][ T8623] Node 0 DMA32 free:15876kB boost:0kB min:12772kB low:15964kB high:19156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:1032196kB managed:286900kB mlocked:0kB bounce:0kB free_pcp:11004kB local_pcp:3860kB free_cma:0kB [ 212.706963][ T8623] lowmem_reserve[]: 0 0 0 0 0 [ 212.708500][ T8623] Node 1 DMA32 free:180168kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39304kB inactive_anon:284kB active_file:3324kB inactive_file:159756kB unevictable:1536kB writepending:1352kB zspages:1780kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:38348kB local_pcp:5164kB free_cma:0kB [ 212.718517][ T8623] lowmem_reserve[]: 0 0 0 0 0 [ 212.720093][ T8623] Node 0 DMA: 32*4kB (U) 3*8kB (U) 1*16kB (M) 12*32kB (U) 6*64kB (U) 3*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1832kB [ 212.724453][ T8623] Node 0 DMA32: 5*4kB (UE) 92*8kB (UE) 53*16kB (UM) 62*32kB (UME) 40*64kB (UME) 26*128kB (UME) 9*256kB (UME) 2*512kB (M) 1*1024kB (U) 1*2048kB (M) 0*4096kB = 15876kB [ 212.729618][ T8623] Node 1 DMA32: 2*4kB (ME) 164*8kB (UM) 285*16kB (UME) 210*32kB (ME) 181*64kB (UME) 171*128kB (UME) 111*256kB (UME) 66*512kB (UME) 28*1024kB (UME) 11*2048kB (UME) 5*4096kB (UM) = 179960kB [ 212.730729][ T5953] usb 8-1: device descriptor read/64, error -71 [ 212.735276][ T8623] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 212.735291][ T8623] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 212.735300][ T8623] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 212.735308][ T8623] Node 1 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 212.735316][ T8623] 44999 total pagecache pages [ 212.735321][ T8623] 216 pages in swap cache [ 212.735325][ T8623] Free swap = 121116kB [ 212.735329][ T8623] Total swap = 124996kB [ 212.735334][ T8623] 524155 pages RAM [ 212.735338][ T8623] 0 pages HighMem/MovableOnly [ 212.735342][ T8623] 211537 pages reserved [ 212.758190][ T8623] 0 pages cma reserved [ 212.840815][ T5953] usb usb8-port1: attempt power cycle [ 212.903992][ T42] audit: type=1800 audit(1785468869.854:13): pid=8631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.808" name="file0" dev="overlay" ino=1063 res=0 errno=0 [ 212.912598][ T8569] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 212.918136][ T8569] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 212.924565][ T6031] usb 5-1: USB disconnect, device number 52 [ 212.941866][ T6031] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 212.955946][ T6031] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 212.977819][ T6031] ti_usb_3410_5052 5-1:2.0: device disconnected [ 213.179649][ T5953] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 213.202371][ T5953] usb 8-1: device descriptor read/8, error -71 [ 213.508261][ T5953] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 213.595032][ T5953] usb 8-1: device descriptor read/8, error -71 [ 213.742680][ T5953] usb usb8-port1: unable to enumerate USB device [ 213.905298][ T8640] netlink: 36 bytes leftover after parsing attributes in process `syz.1.813'. [ 214.945027][ T8657] FAULT_INJECTION: forcing a failure. [ 214.945027][ T8657] name failslab, interval 1, probability 0, space 0, times 0 [ 214.950266][ T8657] CPU: 1 UID: 0 PID: 8657 Comm: syz.1.817 Not tainted syzkaller #0 PREEMPT(full) [ 214.950290][ T8657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.950302][ T8657] Call Trace: [ 214.950309][ T8657] [ 214.950337][ T8657] dump_stack_lvl+0x100/0x190 [ 214.950364][ T8657] should_fail_ex.cold+0x5/0xa [ 214.950385][ T8657] should_failslab+0xc2/0x120 [ 214.950412][ T8657] __kmalloc_noprof+0xfc/0x820 [ 214.950434][ T8657] ? tomoyo_encode2+0xfb/0x3c0 [ 214.950465][ T8657] tomoyo_encode2+0xfb/0x3c0 [ 214.950494][ T8657] tomoyo_encode+0x29/0x50 [ 214.950518][ T8657] tomoyo_realpath_from_path+0x18c/0x690 [ 214.950551][ T8657] tomoyo_path_number_perm+0x23c/0x580 [ 214.950589][ T8657] ? tomoyo_path_number_perm+0x22e/0x580 [ 214.950615][ T8657] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 214.950638][ T8657] ? get_pid_task+0x106/0x250 [ 214.950684][ T8657] ? find_held_lock+0x2b/0x80 [ 214.950706][ T8657] ? __fget_files+0x215/0x3d0 [ 214.950721][ T8657] ? hook_file_ioctl_common+0x140/0x440 [ 214.950744][ T8657] ? __fget_files+0x215/0x3d0 [ 214.950766][ T8657] ? __fget_files+0x21f/0x3d0 [ 214.950787][ T8657] security_file_ioctl_compat+0xd3/0x230 [ 214.950812][ T8657] __ia32_compat_sys_ioctl+0xc2/0x360 [ 214.950840][ T8657] __do_fast_syscall_32+0xe7/0x970 [ 214.950864][ T8657] ? lockdep_hardirqs_on+0x78/0x100 [ 214.950888][ T8657] do_fast_syscall_32+0x32/0x70 [ 214.950910][ T8657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.950933][ T8657] RIP: 0023:0xf7fa6fec [ 214.950955][ T8657] Code: Unable to access opcode bytes at 0xf7fa6fc2. [ 214.950964][ T8657] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 214.951009][ T8657] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002287 [ 214.951020][ T8657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.951030][ T8657] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.951041][ T8657] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 214.951051][ T8657] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.951075][ T8657] [ 214.951321][ T8657] ERROR: Out of memory at tomoyo_realpath_from_path. [ 215.226128][ T8663] tipc: Invalid UDP bearer configuration [ 215.226157][ T8663] tipc: Enabling of bearer rejected, failed to enable media [ 215.240157][ T8663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.820'. [ 215.423033][ T8671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.823'. [ 216.186871][ T8674] netlink: 36 bytes leftover after parsing attributes in process `syz.2.826'. [ 216.268988][ T8679] loop9: detected capacity change from 0 to 2640 [ 216.279154][ T8679] buffer_io_error: 11 callbacks suppressed [ 216.279174][ T8679] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.286448][ T8679] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.288994][ T8679] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.291784][ T8679] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.294255][ T8679] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.296755][ T8679] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.299453][ T8679] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.301981][ T8679] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.304438][ T8679] ldm_validate_partition_table(): Disk read failed. [ 216.306497][ T8679] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.308962][ T8679] Buffer I/O error on dev loop9, logical block 0, async page read [ 216.312119][ T8679] Dev loop9: unable to read RDB block 0 [ 216.314310][ T8679] loop9: unable to read partition table [ 216.321561][ T8679] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 216.474697][ T8685] tipc: Invalid UDP bearer configuration [ 216.474738][ T8685] tipc: Enabling of bearer rejected, failed to enable media [ 216.594155][ T8686] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 216.596410][ T8686] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 216.613765][ T8686] vhci_hcd vhci_hcd.0: Device attached [ 216.679430][ T24] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 216.809579][ T24] usb 8-1: device descriptor read/64, error -71 [ 216.834702][ T8694] gadgetfs: bound to dummy_udc driver [ 216.959513][ T56] usb 38-1: SetAddress Request (26) to port 0 [ 216.962611][ T56] usb 38-1: new SuperSpeed USB device number 26 using vhci_hcd [ 217.049570][ T24] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 217.082660][ T5953] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 217.092942][ C3] gadgetfs: connected [ 217.095018][ T5953] gadgetfs: disconnected [ 217.121211][ T8694] openvswitch: netlink: Flow key attr not present in new flow. [ 217.189312][ T24] usb 8-1: device descriptor read/64, error -71 [ 217.259587][ C3] gadgetfs: connected [ 217.263051][ T5953] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 217.267176][ T5953] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 217.271717][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.278229][ C3] gadgetfs: configuration #1 [ 217.287505][ T8687] vhci_hcd: connection reset by peer [ 217.293931][ T13] vhci_hcd vhci_hcd.0: stop threads [ 217.297474][ T13] vhci_hcd vhci_hcd.0: release socket [ 217.300709][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 217.300896][ T24] usb usb8-port1: attempt power cycle [ 217.649335][ T24] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 217.670398][ T24] usb 8-1: device descriptor read/8, error -71 [ 217.712585][ T8701] gadgetfs: suspended from state 4 [ 217.714370][ T8701] gadgetfs: disconnected [ 217.715839][ T5953] usb 5-1: can't set config #1, error -71 [ 217.723667][ T5953] usb 5-1: USB disconnect, device number 53 [ 217.909395][ T24] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 217.930394][ T24] usb 8-1: device descriptor read/8, error -71 [ 218.040042][ T24] usb usb8-port1: unable to enumerate USB device [ 218.571573][ T1487] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 218.586882][ T42] audit: type=1800 audit(1785468875.534:14): pid=8735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.838" name="file0" dev="overlay" ino=1117 res=0 errno=0 [ 218.729757][ T1487] usb 6-1: Using ep0 maxpacket: 8 [ 218.737755][ T1487] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 218.740986][ T1487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.866281][ T1487] pvrusb2: Hardware description: Terratec Grabster AV400 [ 218.872961][ T1487] pvrusb2: ********** [ 218.884703][ T1487] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 218.902031][ T1487] pvrusb2: Important functionality might not be entirely working. [ 218.916383][ T1487] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 218.939652][ T1487] pvrusb2: ********** [ 219.072665][ T2514] pvrusb2: Invalid write control endpoint [ 219.205950][ T2514] pvrusb2: Invalid write control endpoint [ 219.210256][ T2514] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 219.217890][ T2514] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 219.220810][ T2514] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 219.224155][ T2514] pvrusb2: Device being rendered inoperable [ 219.230734][ T2514] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 219.240609][ T2514] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 219.253116][ T2514] pvrusb2: Attached sub-driver cx25840 [ 219.256275][ T2514] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 219.259183][ T2514] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 219.263527][ T8743] gadgetfs: bound to dummy_udc driver [ 219.509341][ T5953] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 219.511978][ C3] gadgetfs: connected [ 219.513345][ T5953] gadgetfs: disconnected [ 219.583717][ T8753] openvswitch: netlink: Flow key attr not present in new flow. [ 219.659544][ C3] gadgetfs: connected [ 219.662393][ T5953] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 219.665296][ T5953] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 219.668284][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.676004][ C3] gadgetfs: configuration #1 [ 220.158808][ T8750] gadgetfs: suspended from state 4 [ 220.158977][ T5953] usb 5-1: can't set config #1, error -71 [ 220.161423][ T8750] gadgetfs: disconnected [ 220.171136][ T5953] usb 5-1: USB disconnect, device number 54 [ 221.330287][ T8782] capability: warning: `syz.2.849' uses deprecated v2 capabilities in a way that may be insecure [ 221.528055][ T5846] usb 6-1: USB disconnect, device number 21 [ 221.674624][ T8784] gadgetfs: bound to dummy_udc driver [ 221.693200][ T8786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.697006][ T8786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.029470][ T56] usb 38-1: device descriptor read/8, error -110 [ 222.036198][ T8796] openvswitch: netlink: Flow key attr not present in new flow. [ 222.039464][ T50] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 222.039706][ C2] gadgetfs: connected [ 222.045428][ T50] gadgetfs: disconnected [ 222.260290][ C2] gadgetfs: connected [ 222.328770][ T50] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 222.499977][ T56] usb usb38-port1: attempt power cycle [ 222.588653][ T50] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 222.593293][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.601558][ C2] gadgetfs: configuration #1 [ 222.604408][ T8795] gadgetfs: suspended from state 4 [ 222.606643][ T8795] gadgetfs: disconnected [ 222.608564][ T50] usb 5-1: can't set config #1, error -71 [ 222.615713][ T50] usb 5-1: USB disconnect, device number 55 [ 222.746474][ T8812] gadgetfs: bound to dummy_udc driver [ 222.770619][ T8814] FAULT_INJECTION: forcing a failure. [ 222.770619][ T8814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.777005][ T8814] CPU: 3 UID: 0 PID: 8814 Comm: syz.3.858 Not tainted syzkaller #0 PREEMPT(full) [ 222.777031][ T8814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 222.777043][ T8814] Call Trace: [ 222.777050][ T8814] [ 222.777058][ T8814] dump_stack_lvl+0x100/0x190 [ 222.777086][ T8814] should_fail_ex.cold+0x5/0xa [ 222.777107][ T8814] _copy_to_iter+0x5a4/0x1720 [ 222.777140][ T8814] ? __pfx__copy_to_iter+0x10/0x10 [ 222.777164][ T8814] ? m_stop+0x28b/0x530 [ 222.777187][ T8814] ? m_stop+0x28b/0x530 [ 222.777214][ T8814] ? m_stop+0x333/0x530 [ 222.777241][ T8814] seq_read_iter+0xdab/0x1270 [ 222.777280][ T8814] seq_read+0x344/0x4d0 [ 222.777307][ T8814] ? __pfx_seq_read+0x10/0x10 [ 222.777332][ T8814] ? __pfx___might_resched+0x10/0x10 [ 222.777361][ T8814] ? lock_acquire+0x1b9/0x370 [ 222.777400][ T8814] ? rw_verify_area+0xce/0x6d0 [ 222.777426][ T8814] ? __pfx_seq_read+0x10/0x10 [ 222.777454][ T8814] vfs_read+0x1e4/0xb40 [ 222.777474][ T8814] ? __pfx_vfs_read+0x10/0x10 [ 222.777489][ T8814] ? find_held_lock+0x2b/0x80 [ 222.777511][ T8814] ? __fget_files+0x215/0x3d0 [ 222.777533][ T8814] ? __fget_files+0x21f/0x3d0 [ 222.777557][ T8814] ksys_read+0x12a/0x250 [ 222.777573][ T8814] ? __pfx_ksys_read+0x10/0x10 [ 222.777589][ T8814] ? ksys_write+0x1ac/0x250 [ 222.777605][ T8814] ? __pfx_ksys_write+0x10/0x10 [ 222.777627][ T8814] __do_fast_syscall_32+0xe7/0x970 [ 222.777652][ T8814] ? lockdep_hardirqs_on+0x78/0x100 [ 222.777676][ T8814] do_fast_syscall_32+0x32/0x70 [ 222.777699][ T8814] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.777719][ T8814] RIP: 0023:0xf6ffefec [ 222.777739][ T8814] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 222.777747][ T8814] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 222.777770][ T8814] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003380 [ 222.777780][ T8814] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.777789][ T8814] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.777798][ T8814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.777807][ T8814] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.777829][ T8814] [ 222.957866][ T8819] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 222.985385][ T8819] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 222.989168][ T8819] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 222.992519][ T8819] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 222.997057][ T8819] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 223.012592][ T8819] pci 0000:00:01.0: Adding to iommu group 1 [ 223.022820][ T8819] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 223.025700][ T8819] pci 0000:00:01.0: vgaarb: bridge control possible [ 223.028432][ T8819] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 223.040999][ T8819] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 223.052327][ T8819] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 223.061956][ T56] usb usb38-port1: unable to enumerate USB device [ 223.063308][ T8819] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 223.077751][ T8822] openvswitch: netlink: Flow key attr not present in new flow. [ 223.085400][ T8819] [drm] Found bochs VGA, ID 0xb0c5. [ 223.087688][ T8819] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 223.106042][ T8819] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 223.164217][ T8819] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 223.239809][ T50] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 223.243284][ C2] gadgetfs: connected [ 223.245158][ T50] gadgetfs: disconnected [ 223.363640][ T8827] netlink: 'syz.0.861': attribute type 1 has an invalid length. [ 223.376381][ T8827] bond1: option mode: invalid value (7) [ 223.384062][ T8827] bond1 (unregistering): Released all slaves [ 223.409550][ C2] gadgetfs: connected [ 223.415571][ T50] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 223.422383][ T50] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 223.430557][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.450705][ C2] gadgetfs: configuration #1 [ 223.481411][ T8811] gadgetfs: suspended from state 3 [ 223.481675][ T50] usb 5-1: can't set config #1, error -71 [ 223.483805][ T8811] gadgetfs: disconnected [ 223.501131][ T50] usb 5-1: USB disconnect, device number 56 [ 223.574018][ T8827] netlink: 'syz.0.861': attribute type 10 has an invalid length. [ 223.577344][ T8827] netlink: 40 bytes leftover after parsing attributes in process `syz.0.861'. [ 223.591243][ T8827] dummy0: entered promiscuous mode [ 223.622854][ T8827] binder: 8826:8827 ioctl c0306201 80000000 returned -14 [ 223.761942][ T42] audit: type=1800 audit(1785468880.714:15): pid=8837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.862" name="file0" dev="overlay" ino=1165 res=0 errno=0 [ 226.100270][ T8883] loop9: detected capacity change from 0 to 2640 [ 226.114856][ T5744] buffer_io_error: 11 callbacks suppressed [ 226.114881][ T5744] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.122773][ T5744] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.126347][ T5744] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.131418][ T5744] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.135287][ T5744] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.144877][ T8883] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.147554][ T8883] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.150628][ T8883] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.154550][ T8883] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.157701][ T8883] Buffer I/O error on dev loop9, logical block 0, async page read [ 226.163094][ T8883] ldm_validate_partition_table(): Disk read failed. [ 226.165754][ T8883] Dev loop9: unable to read RDB block 0 [ 226.168185][ T8883] loop9: unable to read partition table [ 226.172929][ T8883] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 226.291089][ T8886] overlay: filesystem on ./file0 not supported as upperdir [ 227.149569][ T8903] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 227.152267][ T8903] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 227.159717][ T8903] vhci_hcd vhci_hcd.0: Device attached [ 227.439444][ T56] usb 44-1: SetAddress Request (38) to port 0 [ 227.441537][ T56] usb 44-1: new SuperSpeed USB device number 38 using vhci_hcd [ 227.488642][ T8904] vhci_hcd: connection reset by peer [ 227.491499][ T5552] vhci_hcd vhci_hcd.3: stop threads [ 227.493967][ T5552] vhci_hcd vhci_hcd.3: release socket [ 227.496578][ T5552] vhci_hcd vhci_hcd.3: disconnect device [ 227.589562][ T5846] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 227.760260][ T5846] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 227.765921][ T5846] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.770631][ T5846] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.775396][ T5846] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.779399][ T5846] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.783887][ T5846] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.788082][ T5846] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.792908][ T5846] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.797086][ T5846] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.801715][ T5846] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.805946][ T5846] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.810903][ T5846] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.815305][ T5846] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.820514][ T5846] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.824767][ T5846] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.829783][ T5846] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.834065][ T5846] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 227.839823][ T5846] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 227.843317][ T5846] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 227.846419][ T5846] usb 7-1: Product: syz [ 227.849513][ T5846] usb 7-1: Manufacturer: syz [ 227.851133][ T5846] usb 7-1: SerialNumber: syz [ 227.853967][ T5846] usb 7-1: config 0 descriptor?? [ 227.857656][ T5846] yurex 7-1:0.0: Could not find endpoints [ 228.205841][ T8916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.885'. [ 229.149413][ T41] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 229.363373][ T41] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 229.372454][ T41] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 229.388249][ T41] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 229.392368][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.396206][ T41] usb 8-1: Product: syz [ 229.398319][ T41] usb 8-1: Manufacturer: syz [ 229.400638][ T41] usb 8-1: SerialNumber: syz [ 229.476361][ T41] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 229.640770][ T41] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 229.656479][ T41] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 229.937973][ T8935] gadgetfs: bound to dummy_udc driver [ 230.095813][ T5953] usb 7-1: USB disconnect, device number 24 [ 230.219406][ T6100] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 230.221886][ T41] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 230.225488][ C3] gadgetfs: connected [ 230.227104][ T41] gadgetfs: disconnected [ 230.255746][ T8935] openvswitch: netlink: Flow key attr not present in new flow. [ 230.399685][ C3] gadgetfs: connected [ 230.402570][ T6100] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 230.406097][ T41] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 230.409271][ T41] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 230.412238][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.415659][ T6100] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 230.421902][ C3] gadgetfs: configuration #1 [ 230.424403][ T6100] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 230.427348][ T6100] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.429994][ T6100] usb 6-1: Product: syz [ 230.431360][ T6100] usb 6-1: Manufacturer: syz [ 230.432855][ T6100] usb 6-1: SerialNumber: syz [ 230.439331][ T6100] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 230.444804][ T6100] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2 [ 230.451591][ T6100] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB3 [ 230.832449][ T8940] gadgetfs: suspended from state 4 [ 230.835098][ T41] usb 5-1: can't set config #1, error -71 [ 230.838391][ T8940] gadgetfs: disconnected [ 230.843231][ T41] usb 5-1: USB disconnect, device number 57 [ 231.485960][ T8951] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 231.488093][ T8951] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 231.491064][ T8951] vhci_hcd vhci_hcd.0: Device attached [ 231.565837][ T8955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.895'. [ 231.738236][ C3] usb 8-1: ti_interrupt_callback - nonzero urb status, -71 [ 231.738511][ T1487] usb 8-1: USB disconnect, device number 37 [ 231.741031][ C3] usb 8-1: ti_interrupt_callback - resubmit interrupt urb failed, -19 [ 231.741061][ C3] usb 8-1: ti_bulk_in_callback - nonzero urb status, -71 [ 231.741070][ C3] usb 8-1: ti_bulk_in_callback - stopping read! [ 231.758187][ T1487] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -19 [ 231.764930][ T1487] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 231.771607][ T1487] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 231.778628][ T1487] ti_usb_3410_5052 8-1:2.0: device disconnected [ 231.779650][ T5825] usb 38-1: SetAddress Request (30) to port 0 [ 231.784397][ T5825] usb 38-1: new SuperSpeed USB device number 30 using vhci_hcd [ 231.947481][ T8952] vhci_hcd: connection reset by peer [ 231.950551][ T5552] vhci_hcd vhci_hcd.0: stop threads [ 231.952372][ T5552] vhci_hcd vhci_hcd.0: release socket [ 231.954220][ T5552] vhci_hcd vhci_hcd.0: disconnect device [ 232.509325][ T56] usb 44-1: device descriptor read/8, error -110 [ 232.879389][ T1487] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 232.899891][ T56] usb usb44-port1: attempt power cycle [ 232.909387][ T5832] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 232.963461][ T5846] usb 6-1: USB disconnect, device number 22 [ 232.981671][ T5846] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2 [ 232.989734][ T5846] ti_usb_3410_5052_2 ttyUSB3: TI USB 5052 2 port adapter converter now disconnected from ttyUSB3 [ 233.000147][ T5846] ti_usb_3410_5052 6-1:2.0: device disconnected [ 233.031405][ T1487] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 233.035739][ T1487] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.040127][ T5887] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 233.043655][ T1487] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.049111][ T1487] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.053771][ T1487] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.058707][ T1487] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.063151][ T1487] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.069334][ T1487] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.073867][ T1487] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.074085][ T5832] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 233.082420][ T5832] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 233.086675][ T5832] usb 5-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 233.091337][ T5832] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 233.096698][ T1487] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.101207][ T1487] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.106854][ T5832] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 233.112302][ T5832] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 233.116371][ T5832] usb 5-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 233.120822][ T5832] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 233.127017][ T1487] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.131516][ T1487] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.137464][ T1487] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.142249][ T1487] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.148500][ T1487] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.153278][ T5832] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 233.157206][ T1487] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.160962][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.165468][ T5832] usb 5-1: Product: syz [ 233.167670][ T5832] usb 5-1: Manufacturer: syz [ 233.170551][ T5832] usb 5-1: SerialNumber: syz [ 233.175108][ T1487] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 233.180673][ T1487] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 233.188447][ T5832] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 233.192035][ T5887] usb 7-1: Using ep0 maxpacket: 16 [ 233.194361][ T1487] usb 8-1: Product: syz [ 233.196215][ T1487] usb 8-1: Manufacturer: syz [ 233.200609][ T1487] usb 8-1: SerialNumber: syz [ 233.203258][ T5887] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 85, changing to 7 [ 233.211858][ T5832] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 233.216218][ T1487] usb 8-1: config 0 descriptor?? [ 233.220596][ T5887] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 233.231914][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.238431][ T1487] yurex 8-1:0.0: Could not find endpoints [ 233.241110][ T5832] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 233.244349][ T5887] usb 7-1: Product: syz [ 233.246055][ T5887] usb 7-1: Manufacturer: 嘚牿ꀄ癯痦壡멚鿾봜뭚忓鲞䍊ដޅ벒栲껎ﻒ靾뙡㦀륐衚㻣张曁伸鿎Ɔ孛ⓜ䄪﹞㖷눟䊈秾鹑㙘溽ꡁ埴䔇튂⿕绚안鋕鵐헋琄雲緻✠빋耭㴟屹䖢伏揌ꫦ㝢㋤ޑꮁ㳶ꛪ吱쮝ꂽ땫얁耉킘殼ⶢ㌝ਅ촒핚쑆ꪬ✸ﲶ諍齘밃뤱᭶墐⯊Ǹ䮙ᮭ賸쁔팫货ꇬ [ 233.252431][ T8989] can0: slcan on ttyS3. [ 233.263425][ T5887] usb 7-1: SerialNumber: syz [ 233.398671][ T8981] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 233.407262][ T1487] usb 5-1: USB disconnect, device number 58 [ 233.431458][ T1487] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 233.476086][ T56] usb usb44-port1: unable to enumerate USB device [ 233.507677][ T8984] netlink: 'syz.2.904': attribute type 21 has an invalid length. [ 233.510364][ T8984] netlink: 128 bytes leftover after parsing attributes in process `syz.2.904'. [ 233.513452][ T8984] netlink: 3 bytes leftover after parsing attributes in process `syz.2.904'. [ 233.550683][ T1487] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 233.585258][ T1487] ti_usb_3410_5052 5-1:2.0: device disconnected [ 233.972632][ T8986] can0 (unregistered): slcan off ttyS3. [ 235.297720][ T9019] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 235.299873][ T9019] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 235.313644][ T9019] vhci_hcd vhci_hcd.0: Device attached [ 235.483794][ T9025] gadgetfs: bound to dummy_udc driver [ 235.659766][ T1487] usb 8-1: USB disconnect, device number 38 [ 235.719280][ T6100] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 235.722084][ C3] gadgetfs: connected [ 235.723537][ T6100] gadgetfs: disconnected [ 235.731750][ T9020] vhci_hcd: connection closed [ 235.732012][ T13] vhci_hcd vhci_hcd.0: stop threads [ 235.735742][ T13] vhci_hcd vhci_hcd.0: release socket [ 235.737628][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 235.775698][ T9025] openvswitch: netlink: Flow key attr not present in new flow. [ 235.954319][ T5887] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 236.029660][ T5887] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 236.046726][ T5887] usb 7-1: USB disconnect, device number 25 [ 236.066352][ C3] gadgetfs: connected [ 236.067021][ T5744] udevd[5744]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 236.179359][ T6100] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 236.465223][ T9031] gadgetfs: suspended from state 3 [ 236.467738][ T9031] gadgetfs: disconnected [ 236.605945][ T6100] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 236.609816][ T6100] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.617898][ T6100] usb 5-1: can't set config #1, error -71 [ 236.620804][ T6100] usb 5-1: USB disconnect, device number 59 [ 236.832719][ T5825] usb 38-1: device descriptor read/8, error -110 [ 237.296608][ T5825] usb usb38-port1: attempt power cycle [ 237.386401][ T42] audit: type=1800 audit(1785468894.334:16): pid=9053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.917" name="file0" dev="overlay" ino=1289 res=0 errno=0 [ 237.810220][ T5953] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 238.040644][ T5953] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 238.076829][ T5953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.088374][ T5953] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.103203][ T5953] usb 5-1: config 0 interface 0 has no altsetting 0 [ 238.151468][ T9070] gadgetfs: bound to dummy_udc driver [ 238.193451][ T5953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.197730][ T5953] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.204601][ T5953] usb 5-1: config 0 interface 0 has no altsetting 0 [ 238.225661][ T5825] usb usb38-port1: unable to enumerate USB device [ 238.246983][ T5953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.250377][ T5953] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.253509][ T5953] usb 5-1: config 0 interface 0 has no altsetting 0 [ 238.281837][ T5953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.285512][ T5953] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.288517][ T5953] usb 5-1: config 0 interface 0 has no altsetting 0 [ 238.301052][ T42] audit: type=1800 audit(1785468895.254:17): pid=9077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.923" name="file0" dev="overlay" ino=1259 res=0 errno=0 [ 238.383569][ T5953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.387434][ T5953] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.391731][ T5953] usb 5-1: config 0 interface 0 has no altsetting 0 [ 238.401221][ T5953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.404569][ T5953] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.407517][ T5953] usb 5-1: config 0 interface 0 has no altsetting 0 [ 238.420808][ T5846] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 238.429825][ T5953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.433142][ T5953] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.436371][ T5953] usb 5-1: config 0 interface 0 has no altsetting 0 [ 238.450818][ T5953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.455461][ T5953] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 238.458410][ T5953] usb 5-1: config 0 interface 0 has no altsetting 0 [ 238.605034][ T5953] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 238.612694][ T5953] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 238.617188][ T5953] usb 5-1: Product: syz [ 238.620975][ T5953] usb 5-1: Manufacturer: syz [ 238.624074][ T5953] usb 5-1: SerialNumber: syz [ 238.646914][ T5953] usb 5-1: config 0 descriptor?? [ 238.675285][ T5953] yurex 5-1:0.0: Could not find endpoints [ 238.849276][ C0] gadgetfs: connected [ 238.895387][ T5846] gadgetfs: disconnected [ 240.157258][ T9088] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 240.159408][ T9088] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 240.231978][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.926'. [ 240.435113][ T9088] vhci_hcd vhci_hcd.0: Device attached [ 240.489399][ T5887] usb 40-1: SetAddress Request (26) to port 0 [ 240.491918][ T5887] usb 40-1: new SuperSpeed USB device number 26 using vhci_hcd [ 240.759544][ T9089] vhci_hcd: connection reset by peer [ 240.763561][ T5552] vhci_hcd vhci_hcd.1: stop threads [ 240.765622][ T5552] vhci_hcd vhci_hcd.1: release socket [ 240.767500][ T5552] vhci_hcd vhci_hcd.1: disconnect device [ 240.780463][ T50] usb 5-1: USB disconnect, device number 60 [ 241.308090][ T42] audit: type=1800 audit(1785468898.204:18): pid=9112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.930" name="file0" dev="overlay" ino=1279 res=0 errno=0 [ 242.097741][ T9117] kAFS: No cell specified [ 243.087687][ T9128] gadgetfs: bound to dummy_udc driver [ 243.359378][ T5953] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 243.362927][ C3] gadgetfs: connected [ 243.364887][ T5953] gadgetfs: disconnected [ 243.519524][ C3] gadgetfs: connected [ 243.522243][ T5953] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 243.522528][ T9126] gadgetfs: suspended from state 3 [ 243.525101][ T5953] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 243.527213][ T9126] gadgetfs: disconnected [ 243.531579][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.544972][ T5953] usb 5-1: can't set config #1, error -71 [ 243.552665][ T5953] usb 5-1: USB disconnect, device number 61 [ 243.733979][ T42] audit: type=1800 audit(1785468900.684:19): pid=9138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.935" name="file0" dev="overlay" ino=1321 res=0 errno=0 [ 243.984634][ T9132] syz.2.934 (9132) used greatest stack depth: 18616 bytes left [ 244.420308][ T9160] gadgetfs: bound to dummy_udc driver [ 244.819426][ T50] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 244.825275][ C2] gadgetfs: connected [ 244.827179][ T50] gadgetfs: disconnected [ 244.861695][ T9160] openvswitch: netlink: Flow key attr not present in new flow. [ 244.928709][ T9175] ./bus: Can't lookup blockdev [ 244.938438][ T9177] FAULT_INJECTION: forcing a failure. [ 244.938438][ T9177] name failslab, interval 1, probability 0, space 0, times 0 [ 244.944268][ T9177] CPU: 0 UID: 0 PID: 9177 Comm: syz.2.948 Not tainted syzkaller #0 PREEMPT(full) [ 244.944292][ T9177] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.944311][ T9177] Call Trace: [ 244.944318][ T9177] [ 244.944326][ T9177] dump_stack_lvl+0x100/0x190 [ 244.944449][ T9177] should_fail_ex.cold+0x5/0xa [ 244.944470][ T9177] should_failslab+0xc2/0x120 [ 244.944503][ T9177] __kvmalloc_node_noprof+0x116/0x970 [ 244.944526][ T9177] ? traverse.part.0.constprop.0+0x397/0x650 [ 244.944587][ T9177] traverse.part.0.constprop.0+0x397/0x650 [ 244.944625][ T9177] seq_read_iter+0x93f/0x1270 [ 244.944691][ T9177] proc_reg_read_iter+0x220/0x310 [ 244.944708][ T9177] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 244.944733][ T9177] vfs_read+0x82e/0xb40 [ 244.944752][ T9177] ? __pfx_vfs_read+0x10/0x10 [ 244.944766][ T9177] ? find_held_lock+0x2b/0x80 [ 244.944810][ T9177] ksys_pread64+0x161/0x1a0 [ 244.944827][ T9177] ? __pfx_ksys_pread64+0x10/0x10 [ 244.944841][ T9177] ? ksys_write+0x1ac/0x250 [ 244.944856][ T9177] ? __pfx_ksys_write+0x10/0x10 [ 244.944876][ T9177] __do_fast_syscall_32+0xe7/0x970 [ 244.944942][ T9177] ? lockdep_hardirqs_on+0x78/0x100 [ 244.944964][ T9177] do_fast_syscall_32+0x32/0x70 [ 244.944986][ T9177] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.945005][ T9177] RIP: 0023:0xf7f82fec [ 244.945027][ T9177] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 244.945043][ T9177] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 00000000000000b4 [ 244.945062][ T9177] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800024c0 [ 244.945072][ T9177] RDX: 00000000000000d1 RSI: 0000000000000008 RDI: 0000000000000000 [ 244.945082][ T9177] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.945091][ T9177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.945101][ T9177] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.945122][ T9177] [ 244.989593][ C2] gadgetfs: connected [ 245.033122][ T50] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 245.036936][ T50] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 245.040799][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.047054][ C2] gadgetfs: configuration #1 [ 245.119421][ T5846] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 245.280682][ T5846] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 245.285224][ T5846] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 245.290523][ T5846] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 245.293577][ T5846] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.296299][ T5846] usb 8-1: Product: syz [ 245.297726][ T5846] usb 8-1: Manufacturer: syz [ 245.299326][ T5846] usb 8-1: SerialNumber: syz [ 245.305169][ T9170] gadgetfs: suspended from state 4 [ 245.305539][ T5846] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 245.307592][ T50] usb 5-1: can't set config #1, error -71 [ 245.309402][ T9170] gadgetfs: disconnected [ 245.314371][ T5846] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 245.318984][ T5846] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 245.319478][ T50] usb 5-1: USB disconnect, device number 62 [ 245.562212][ T5887] usb 40-1: device descriptor read/8, error -110 [ 245.999462][ T5887] usb usb40-port1: attempt power cycle [ 246.599318][ T5887] usb usb40-port1: unable to enumerate USB device [ 246.937000][ T42] audit: type=1800 audit(1785468903.884:20): pid=9239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.954" name="file0" dev="overlay" ino=1344 res=0 errno=0 [ 248.519768][ T9174] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 248.537164][ T5887] usb 8-1: USB disconnect, device number 39 [ 248.555573][ T5887] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 248.564280][ T5887] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 248.567858][ T5887] ti_usb_3410_5052 8-1:2.0: device disconnected [ 248.627415][ T9281] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 248.646643][ T9281] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.651765][ T9281] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.954269][ T9284] gadgetfs: bound to dummy_udc driver [ 249.279562][ T5887] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 249.283288][ C1] gadgetfs: connected [ 249.286199][ T5887] gadgetfs: disconnected [ 249.424955][ T9297] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 249.427769][ T9297] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 249.441757][ T9297] vhci_hcd vhci_hcd.0: Device attached [ 249.490276][ C1] gadgetfs: connected [ 249.494865][ T5887] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 249.620823][ T5887] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 249.644685][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.716256][ C1] gadgetfs: configuration #1 [ 249.893611][ T9286] openvswitch: netlink: Flow key attr not present in new flow. [ 249.939986][ T5825] usb 44-1: SetAddress Request (42) to port 0 [ 249.995068][ T5825] usb 44-1: new SuperSpeed USB device number 42 using vhci_hcd [ 250.031351][ T9283] gadgetfs: suspended from state 3 [ 250.033542][ T9283] gadgetfs: disconnected [ 250.077376][ T5887] usb 5-1: can't set config #1, error -71 [ 250.112933][ T5887] usb 5-1: USB disconnect, device number 63 [ 250.130590][ T9299] vhci_hcd: connection reset by peer [ 250.141427][ T13] vhci_hcd vhci_hcd.3: stop threads [ 250.143331][ T13] vhci_hcd vhci_hcd.3: release socket [ 250.161983][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 250.600037][ T42] audit: type=1800 audit(1785468907.544:21): pid=9304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.967" name="file0" dev="overlay" ino=1379 res=0 errno=0 [ 251.428907][ T9320] gadgetfs: bound to dummy_udc driver [ 251.691943][ T5887] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 251.705286][ C1] gadgetfs: connected [ 251.713101][ T5887] gadgetfs: disconnected [ 251.910367][ C1] gadgetfs: connected [ 251.920426][ T5887] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 251.934558][ T5887] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 251.976107][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.072526][ C1] gadgetfs: configuration #1 [ 252.253980][ T9329] gadgetfs: suspended from state 4 [ 252.259011][ T5887] usb 5-1: can't set config #1, error -71 [ 252.262779][ T9329] gadgetfs: disconnected [ 252.283298][ T5887] usb 5-1: USB disconnect, device number 64 [ 252.644364][ T9339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.977'. [ 252.908320][ T42] audit: type=1800 audit(1785468909.814:22): pid=9341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.978" name="file0" dev="overlay" ino=1410 res=0 errno=0 [ 253.368122][ T9352] kAFS: No cell specified [ 255.159375][ T5825] usb 44-1: device descriptor read/8, error -110 [ 255.232011][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.267890][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.521292][ T5825] usb usb44-port1: attempt power cycle [ 256.782898][ T9396] kAFS: No cell specified [ 257.043390][ T9404] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 257.099357][ T5887] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 257.185564][ T5825] usb usb44-port1: unable to enumerate USB device [ 257.254075][ T5887] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 257.263817][ T5887] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 257.275181][ T5887] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 257.282956][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.301321][ T5887] usb 7-1: Product: syz [ 257.303574][ T5887] usb 7-1: Manufacturer: syz [ 257.328527][ T5887] usb 7-1: SerialNumber: syz [ 257.435134][ T5887] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 257.446190][ T5887] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 257.463956][ T5887] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 257.539590][ T9412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.997'. [ 257.587593][ T9414] kAFS: No cell specified [ 257.979291][ T5953] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 258.129271][ T5953] usb 8-1: Using ep0 maxpacket: 16 [ 258.135987][ T5953] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 85, changing to 7 [ 258.147821][ T5953] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 258.153890][ T5953] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.158170][ T5953] usb 8-1: Product: syz [ 258.159554][ T5953] usb 8-1: Manufacturer: 嘚牿ꀄ癯痦壡멚鿾봜뭚忓鲞䍊ដޅ벒栲껎ﻒ靾뙡㦀륐衚㻣张曁伸鿎Ɔ孛ⓜ䄪﹞㖷눟䊈秾鹑㙘溽ꡁ埴䔇튂⿕绚안鋕鵐헋琄雲緻✠빋耭㴟屹䖢伏揌ꫦ㝢㋤ޑꮁ㳶ꛪ吱쮝ꂽ땫얁耉킘殼ⶢ㌝ਅ촒핚쑆ꪬ✸ﲶ諍齘밃뤱᭶墐⯊Ǹ䮙ᮭ賸쁔팫货ꇬ [ 258.174380][ T5953] usb 8-1: SerialNumber: syz [ 258.442097][ T9417] netlink: 'syz.3.999': attribute type 21 has an invalid length. [ 258.449377][ T9417] netlink: 128 bytes leftover after parsing attributes in process `syz.3.999'. [ 258.453237][ T9417] netlink: 3 bytes leftover after parsing attributes in process `syz.3.999'. [ 258.633228][ T9421] gadgetfs: bound to dummy_udc driver [ 258.819055][ T9428] overlayfs: failed to resolve './file0': -2 [ 258.869413][ T5825] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 258.874555][ C1] gadgetfs: connected [ 258.876545][ T5825] gadgetfs: disconnected [ 258.929622][ T9421] openvswitch: netlink: Flow key attr not present in new flow. [ 259.019560][ C1] gadgetfs: connected [ 259.022837][ T5825] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 259.026631][ T5825] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 259.030508][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.038899][ C1] gadgetfs: configuration #1 [ 259.511712][ T9430] gadgetfs: suspended from state 4 [ 259.511954][ T5825] usb 5-1: can't set config #1, error -71 [ 259.513886][ T9430] gadgetfs: disconnected [ 259.518399][ T5825] usb 5-1: USB disconnect, device number 65 [ 259.825374][ T9443] kAFS: No cell specified [ 260.699537][ T9399] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 260.706269][ T9] usb 7-1: USB disconnect, device number 26 [ 260.718682][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 260.730649][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 260.734831][ T9] ti_usb_3410_5052 7-1:2.0: device disconnected [ 260.844933][ T5953] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 260.956461][ T5953] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 260.985286][ T5953] usb 8-1: USB disconnect, device number 40 [ 261.041610][ T5744] udevd[5744]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 261.943595][ T9466] gadgetfs: bound to dummy_udc driver [ 262.201981][ T41] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 262.204715][ C3] gadgetfs: connected [ 262.206148][ T41] gadgetfs: disconnected [ 262.251107][ T9466] openvswitch: netlink: Flow key attr not present in new flow. [ 262.379632][ C3] gadgetfs: connected [ 262.383182][ T41] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 262.386012][ T41] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 262.388865][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.446741][ C3] gadgetfs: configuration #1 [ 262.478649][ T42] audit: type=1800 audit(1785468919.427:23): pid=9486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1016" name="file0" dev="overlay" ino=1575 res=0 errno=0 [ 262.541386][ T9465] gadgetfs: suspended from state 4 [ 262.543220][ T41] usb 5-1: can't set config #1, error -71 [ 262.546100][ T41] usb 5-1: USB disconnect, device number 66 [ 262.548481][ T9465] gadgetfs: disconnected [ 263.291257][ T9496] gadgetfs: bound to dummy_udc driver [ 263.498268][ T9511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.503356][ T9511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.529613][ T50] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 263.539500][ C2] gadgetfs: connected [ 263.541365][ T50] gadgetfs: disconnected [ 263.602928][ T9514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1025'. [ 263.606848][ T9514] openvswitch: netlink: Flow key attr not present in new flow. [ 263.612938][ T9496] openvswitch: netlink: Flow key attr not present in new flow. [ 263.720576][ C2] gadgetfs: connected [ 263.723830][ T50] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 263.731984][ T50] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 263.738221][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.749246][ C2] gadgetfs: configuration #1 [ 263.985277][ T42] audit: type=1800 audit(1785468920.938:24): pid=9529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1029" name="file0" dev="overlay" ino=1444 res=0 errno=0 [ 264.181386][ T9512] gadgetfs: suspended from state 4 [ 264.181623][ T50] usb 5-1: can't set config #1, error -71 [ 264.184065][ T9512] gadgetfs: disconnected [ 264.311670][ T9531] kAFS: No cell specified [ 264.677390][ T50] usb 5-1: USB disconnect, device number 67 [ 264.959289][ T41] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 265.109307][ T41] usb 7-1: Using ep0 maxpacket: 32 [ 265.113502][ T41] usb 7-1: config 1 has an invalid interface descriptor of length 7, skipping [ 265.117304][ T41] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.122038][ T41] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 265.128522][ T41] usb 7-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 265.132708][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.136078][ T41] usb 7-1: Product: syz [ 265.137975][ T41] usb 7-1: Manufacturer: syz [ 265.140472][ T41] usb 7-1: SerialNumber: syz [ 265.367259][ T9538] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 265.369991][ T9538] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 265.380673][ T41] usb 7-1: USB disconnect, device number 27 [ 265.389694][ T9538] vhci_hcd vhci_hcd.0: Device attached [ 265.710898][ T5825] usb 44-1: SetAddress Request (46) to port 0 [ 265.725842][ T5825] usb 44-1: new SuperSpeed USB device number 46 using vhci_hcd [ 266.170200][ T9539] vhci_hcd: connection reset by peer [ 266.174875][ T13] vhci_hcd vhci_hcd.3: stop threads [ 266.176666][ T13] vhci_hcd vhci_hcd.3: release socket [ 266.178404][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 266.949371][ T5953] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 266.979298][ T41] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 267.119465][ T5953] usb 7-1: Using ep0 maxpacket: 8 [ 267.127869][ T5953] usb 7-1: no configurations [ 267.130284][ T5953] usb 7-1: can't read configurations, error -22 [ 267.140390][ T41] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 267.149439][ T41] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.153133][ T41] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.156470][ T41] usb 6-1: config 0 interface 0 has no altsetting 0 [ 267.162448][ T41] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.165980][ T41] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.169993][ T41] usb 6-1: config 0 interface 0 has no altsetting 0 [ 267.174182][ T41] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.178308][ T41] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.182353][ T41] usb 6-1: config 0 interface 0 has no altsetting 0 [ 267.188515][ T41] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.193317][ T41] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.197776][ T41] usb 6-1: config 0 interface 0 has no altsetting 0 [ 267.204525][ T41] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.209617][ T41] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.216854][ T41] usb 6-1: config 0 interface 0 has no altsetting 0 [ 267.222183][ T41] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.227913][ T41] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.232002][ T41] usb 6-1: config 0 interface 0 has no altsetting 0 [ 267.236779][ T41] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.242588][ T41] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.246582][ T41] usb 6-1: config 0 interface 0 has no altsetting 0 [ 267.251429][ T41] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.256777][ T41] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.260677][ T41] usb 6-1: config 0 interface 0 has no altsetting 0 [ 267.268733][ T41] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 267.272595][ T5953] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 267.276045][ T41] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 267.285263][ T41] usb 6-1: Product: syz [ 267.287190][ T41] usb 6-1: Manufacturer: syz [ 267.289311][ T41] usb 6-1: SerialNumber: syz [ 267.311052][ T41] usb 6-1: config 0 descriptor?? [ 267.353529][ T41] yurex 6-1:0.0: Could not find endpoints [ 267.439328][ T5953] usb 7-1: Using ep0 maxpacket: 8 [ 267.443988][ T5953] usb 7-1: no configurations [ 267.446522][ T5953] usb 7-1: can't read configurations, error -22 [ 267.449836][ T5953] usb usb7-port1: attempt power cycle [ 267.549337][ T9] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 267.721260][ T9] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 267.726877][ T9] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 267.733885][ T9] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 267.737901][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.742079][ T9] usb 8-1: Product: syz [ 267.744002][ T9] usb 8-1: Manufacturer: syz [ 267.746086][ T9] usb 8-1: SerialNumber: syz [ 267.755303][ T9] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 267.762347][ T9] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 267.769411][ T9] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 267.989270][ T5953] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 268.337465][ T9573] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 268.340299][ T9573] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 268.344481][ T9573] vhci_hcd vhci_hcd.0: Device attached [ 268.639606][ T56] usb 38-1: SetAddress Request (34) to port 0 [ 268.642650][ T56] usb 38-1: new SuperSpeed USB device number 34 using vhci_hcd [ 269.089818][ T5953] usb 7-1: Using ep0 maxpacket: 8 [ 269.383030][ T9574] vhci_hcd: connection reset by peer [ 269.385468][ T5895] vhci_hcd vhci_hcd.0: stop threads [ 269.387480][ T5895] vhci_hcd vhci_hcd.0: release socket [ 269.392025][ T5895] vhci_hcd vhci_hcd.0: disconnect device [ 269.587686][ T5953] usb 7-1: no configurations [ 269.738098][ T5953] usb 7-1: can't read configurations, error -22 [ 269.768590][ T6100] usb 6-1: USB disconnect, device number 24 [ 270.079697][ T5953] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 270.101723][ T5953] usb 7-1: Using ep0 maxpacket: 32 [ 270.112754][ T5953] usb 7-1: config 1 has an invalid interface descriptor of length 7, skipping [ 270.117274][ T5953] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.121879][ T5953] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 270.138252][ T5953] usb 7-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 270.142289][ T5953] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.145764][ T5953] usb 7-1: Product: syz [ 270.147623][ T5953] usb 7-1: Manufacturer: syz [ 270.151681][ T5953] usb 7-1: SerialNumber: syz [ 270.474511][ T5953] usb 7-1: USB disconnect, device number 31 [ 270.912512][ T50] usb 8-1: USB disconnect, device number 41 [ 270.927143][ T50] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 270.940215][ T50] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 270.947823][ T50] ti_usb_3410_5052 8-1:2.0: device disconnected [ 271.061896][ T9602] afs: Unknown parameter 'dy' [ 271.064387][ T9600] gadgetfs: bound to dummy_udc driver [ 271.138004][ T5825] usb 44-1: device descriptor read/8, error -110 [ 271.431587][ T6100] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 271.899237][ C3] gadgetfs: connected [ 271.937437][ T6100] gadgetfs: disconnected [ 271.942422][ T9600] openvswitch: netlink: Flow key attr not present in new flow. [ 272.189518][ C3] gadgetfs: connected [ 272.215547][ T42] audit: type=1800 audit(1785468929.158:25): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1051" name="file0" dev="overlay" ino=1488 res=0 errno=0 [ 272.330613][ T9606] gadgetfs: suspended from state 3 [ 272.334567][ T9606] gadgetfs: disconnected [ 272.495685][ T5825] usb usb44-port1: attempt power cycle [ 272.703696][ T6100] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 273.058777][ T6100] usb 5-1: can't read configurations, error -71 [ 273.719369][ T56] usb 38-1: device descriptor read/8, error -110 [ 273.799312][ T6100] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 273.812447][ T5825] usb usb44-port1: unable to enumerate USB device [ 274.113667][ T56] usb usb38-port1: attempt power cycle [ 274.140753][ T6100] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 274.145417][ T6100] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 274.151556][ T6100] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 274.154951][ T6100] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.157948][ T6100] usb 5-1: Product: syz [ 274.159949][ T6100] usb 5-1: Manufacturer: syz [ 274.161548][ T6100] usb 5-1: SerialNumber: syz [ 274.166299][ T6100] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 274.171278][ T6100] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 274.175260][ T6100] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 274.261457][ T9640] gadgetfs: bound to dummy_udc driver [ 274.509335][ T6100] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 274.512221][ C3] gadgetfs: connected [ 274.513773][ T6100] gadgetfs: disconnected [ 274.547637][ T9651] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 274.669509][ C3] gadgetfs: connected [ 274.673451][ T9639] gadgetfs: suspended from state 3 [ 274.675136][ T9639] gadgetfs: disconnected [ 274.676608][ T6100] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 274.679798][ T6100] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 274.683850][ T6100] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.690115][ T6100] usb 6-1: can't set config #1, error -71 [ 274.693337][ T6100] usb 6-1: USB disconnect, device number 25 [ 274.699592][ T56] usb usb38-port1: unable to enumerate USB device [ 274.723643][ T9654] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 274.835227][ T9662] gadgetfs: bound to dummy_udc driver [ 275.149418][ T6100] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 275.152831][ C3] gadgetfs: connected [ 275.156510][ T9661] gadgetfs: suspended from state 3 [ 275.158749][ T9661] gadgetfs: disconnected [ 275.471079][ T9679] gadgetfs: bound to dummy_udc driver [ 275.760832][ T9694] openvswitch: netlink: Flow key attr not present in new flow. [ 275.789705][ C3] gadgetfs: connected [ 275.792996][ T6100] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 275.796701][ T6100] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 275.800815][ T6100] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.809884][ C3] gadgetfs: configuration #1 [ 276.184776][ T34] usb 5-1: USB disconnect, device number 69 [ 276.196546][ T34] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 276.204811][ T34] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 276.210635][ T34] ti_usb_3410_5052 5-1:2.0: device disconnected [ 276.394123][ T9693] gadgetfs: suspended from state 4 [ 276.395886][ T9693] gadgetfs: disconnected [ 276.564295][ T6100] usb 6-1: can't set config #1, error -71 [ 276.568021][ T6100] usb 6-1: USB disconnect, device number 26 [ 276.584696][ T9720] gadgetfs: bound to dummy_udc driver [ 276.889290][ T34] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 276.893254][ C3] gadgetfs: connected [ 276.895042][ T34] gadgetfs: disconnected [ 277.039493][ C3] gadgetfs: connected [ 277.043203][ T9719] gadgetfs: suspended from state 3 [ 277.045433][ T34] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 277.049125][ T9719] gadgetfs: disconnected [ 277.051501][ T34] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 277.065619][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.076782][ T34] usb 5-1: can't set config #1, error -71 [ 277.086954][ T34] usb 5-1: USB disconnect, device number 70 [ 277.472354][ T42] audit: type=1800 audit(1785468934.408:26): pid=9728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1082" name="file0" dev="overlay" ino=1530 res=0 errno=0 [ 277.584984][ T9737] gadgetfs: bound to dummy_udc driver [ 277.934612][ T42] audit: type=1800 audit(1785468934.878:27): pid=9739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1085" name="file0" dev="overlay" ino=1666 res=0 errno=0 [ 279.174913][ T9759] gadgetfs: bound to dummy_udc driver [ 279.219423][ T6100] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 279.381045][ T6100] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 279.386555][ T6100] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 279.396578][ T6100] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 279.400587][ T6100] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.403927][ T6100] usb 7-1: Product: syz [ 279.405714][ T6100] usb 7-1: Manufacturer: syz [ 279.407576][ T6100] usb 7-1: SerialNumber: syz [ 279.417288][ T6100] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 279.420000][ T50] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 279.423561][ T6100] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 279.424705][ C2] gadgetfs: connected [ 279.429674][ T50] gadgetfs: disconnected [ 279.445209][ T6100] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 279.579575][ C2] gadgetfs: connected [ 279.582785][ T50] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 279.588903][ T50] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 279.598324][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.611720][ C2] gadgetfs: configuration #1 [ 279.629600][ T9758] gadgetfs: suspended from state 3 [ 279.632258][ T6100] usb 5-1: USB disconnect, device number 71 [ 279.634848][ T9758] gadgetfs: disconnected [ 281.286119][ T5825] usb 7-1: USB disconnect, device number 32 [ 281.325510][ T5825] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 281.428289][ T5825] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 281.450308][ T5825] ti_usb_3410_5052 7-1:2.0: device disconnected [ 281.663248][ T10] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 281.859044][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 281.934076][ T10] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 85, changing to 7 [ 282.006843][ T10] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 282.047995][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.067271][ T10] usb 8-1: Product: syz [ 282.080367][ T10] usb 8-1: Manufacturer: 嘚牿ꀄ癯痦壡멚鿾봜뭚忓鲞䍊ដޅ벒栲껎ﻒ靾뙡㦀륐衚㻣张曁伸鿎Ɔ孛ⓜ䄪﹞㖷눟䊈秾鹑㙘溽ꡁ埴䔇튂⿕绚안鋕鵐헋琄雲緻✠빋耭㴟屹䖢伏揌ꫦ㝢㋤ޑꮁ㳶ꛪ吱쮝ꂽ땫얁耉킘殼ⶢ㌝ਅ촒핚쑆ꪬ✸ﲶ諍齘밃뤱᭶墐⯊Ǹ䮙ᮭ賸쁔팫货ꇬ [ 282.200276][ T10] usb 8-1: SerialNumber: syz [ 282.618085][ T9834] netlink: 'syz.3.1099': attribute type 21 has an invalid length. [ 282.621442][ T9834] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1099'. [ 282.624858][ T9834] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1099'. [ 282.689551][ T9866] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 282.691695][ T9866] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 282.700417][ T9866] vhci_hcd vhci_hcd.0: Device attached [ 282.917657][ T42] audit: type=1800 audit(1785468939.867:28): pid=9870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1105" name="file0" dev="overlay" ino=1659 res=0 errno=0 [ 283.179715][ T56] usb 42-1: SetAddress Request (34) to port 0 [ 283.183013][ T56] usb 42-1: new SuperSpeed USB device number 34 using vhci_hcd [ 283.429722][ T10] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 283.489127][ T10] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 283.507174][ T10] usb 8-1: USB disconnect, device number 42 [ 283.533290][ T5744] udevd[5744]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 283.730852][ T9867] vhci_hcd: connection reset by peer [ 283.734791][ T13] vhci_hcd vhci_hcd.2: stop threads [ 283.737393][ T13] vhci_hcd vhci_hcd.2: release socket [ 283.741282][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 284.059648][ T50] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 284.225944][ T50] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 284.232760][ T50] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 284.239859][ T50] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 284.244001][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.247505][ T50] usb 5-1: Product: syz [ 284.251736][ T50] usb 5-1: Manufacturer: syz [ 284.253925][ T50] usb 5-1: SerialNumber: syz [ 284.265160][ T50] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 284.276924][ T50] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 284.289517][ T50] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 284.844931][ T42] audit: type=1800 audit(1785468941.798:29): pid=9915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1109" name="file0" dev="overlay" ino=1681 res=0 errno=0 [ 287.271014][ T50] usb 5-1: USB disconnect, device number 72 [ 287.328938][ T50] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 287.349710][ T50] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 287.355576][ T50] ti_usb_3410_5052 5-1:2.0: device disconnected [ 287.947131][ T9962] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 287.949202][ T9962] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 288.001290][ T9962] vhci_hcd vhci_hcd.0: Device attached [ 288.269351][ T1487] usb 38-1: SetAddress Request (38) to port 0 [ 288.278437][ T56] usb 42-1: device descriptor read/8, error -110 [ 288.286318][ T1487] usb 38-1: new SuperSpeed USB device number 38 using vhci_hcd [ 288.302947][ T9969] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 288.305275][ T9969] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 288.324345][ T9969] vhci_hcd vhci_hcd.0: Device attached [ 288.611007][ T56] usb 42-1: SetAddress Request (35) to port 0 [ 288.616797][ T56] usb 42-1: new SuperSpeed USB device number 35 using vhci_hcd [ 289.069715][ T9970] vhci_hcd: connection reset by peer [ 289.076584][ T13] vhci_hcd vhci_hcd.2: stop threads [ 289.082221][ T13] vhci_hcd vhci_hcd.2: release socket [ 289.084658][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 289.493338][ T9963] vhci_hcd: connection reset by peer [ 289.495877][ T13] vhci_hcd vhci_hcd.0: stop threads [ 289.497591][ T13] vhci_hcd vhci_hcd.0: release socket [ 289.499405][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 289.564729][ T9980] gadgetfs: bound to dummy_udc driver [ 289.809305][ T10] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 289.812536][ C0] gadgetfs: connected [ 289.813985][ T10] gadgetfs: disconnected [ 289.864853][ T9980] openvswitch: netlink: Flow key attr not present in new flow. [ 289.979951][ C0] gadgetfs: connected [ 289.982490][ T10] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 289.988307][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 289.994031][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.000400][ C0] gadgetfs: configuration #1 [ 290.761879][ T9987] gadgetfs: suspended from state 4 [ 290.763671][ T9987] gadgetfs: disconnected [ 290.819607][ T10] usb 5-1: can't set config #1, error -71 [ 291.234438][ T10] usb 5-1: USB disconnect, device number 73 [ 293.390161][ T1487] usb 38-1: device descriptor read/8, error -110 [ 293.721262][ T56] usb 42-1: device descriptor read/8, error -110 [ 293.789785][ T1487] usb usb38-port1: attempt power cycle [ 293.829480][ T56] usb usb42-port1: attempt power cycle [ 293.859354][ T8576] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 294.060791][ T8576] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 294.078162][ T8576] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.092281][ T8576] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.102240][ T8576] usb 7-1: config 0 interface 0 has no altsetting 0 [ 294.126124][ T8576] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.161562][ T8576] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.185135][ T8576] usb 7-1: config 0 interface 0 has no altsetting 0 [ 294.209905][ T8576] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.235140][ T8576] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.252687][ T8576] usb 7-1: config 0 interface 0 has no altsetting 0 [ 294.285037][ T8576] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.318004][ T8576] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.352579][ T8576] usb 7-1: config 0 interface 0 has no altsetting 0 [ 294.403727][ T8576] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.434194][ T8576] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.453249][ T8576] usb 7-1: config 0 interface 0 has no altsetting 0 [ 294.478415][ T8576] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.490117][ T8576] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.500403][ T8576] usb 7-1: config 0 interface 0 has no altsetting 0 [ 294.526329][ T8576] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.545221][ T8576] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.560382][ T8576] usb 7-1: config 0 interface 0 has no altsetting 0 [ 294.578168][ T8576] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.598943][ T8576] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.617363][ T8576] usb 7-1: config 0 interface 0 has no altsetting 0 [ 294.632873][ T8576] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 294.665049][ T8576] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 294.679897][ T8576] usb 7-1: Product: syz [ 294.696866][ T8576] usb 7-1: Manufacturer: syz [ 294.713807][ T8576] usb 7-1: SerialNumber: syz [ 294.758264][ T56] usb usb42-port1: unable to enumerate USB device [ 294.859557][ T8576] usb 7-1: config 0 descriptor?? [ 294.944908][ T8576] yurex 7-1:0.0: Could not find endpoints [ 295.285739][ T1487] usb usb38-port1: unable to enumerate USB device [ 297.196814][ T42] audit: type=1800 audit(1785468953.944:30): pid=10144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1139" name="file0" dev="overlay" ino=1577 res=0 errno=0 [ 297.239411][ T8576] usb 7-1: USB disconnect, device number 33 [ 298.499795][T10173] gadgetfs: bound to dummy_udc driver [ 298.749970][ T8576] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 298.760394][ C2] gadgetfs: connected [ 298.761807][ T8576] gadgetfs: disconnected [ 298.942037][ C2] gadgetfs: connected [ 298.946229][ T8576] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 298.991392][ T8576] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 299.016383][ T8576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.068980][ C2] gadgetfs: configuration #1 [ 299.085943][T10172] gadgetfs: suspended from state 3 [ 299.089921][T10172] gadgetfs: disconnected [ 299.096270][T10196] ================================================================== [ 299.099626][T10196] BUG: KASAN: slab-use-after-free in __mutex_lock+0x15ca/0x1bd0 [ 299.102728][T10196] Read of size 8 at addr ffff888025423058 by task syz.3.1148/10196 [ 299.107687][T10196] [ 299.109170][T10196] CPU: 2 UID: 0 PID: 10196 Comm: syz.3.1148 Not tainted syzkaller #0 PREEMPT(full) [ 299.109198][T10196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 299.109212][T10196] Call Trace: [ 299.109224][T10196] [ 299.109234][T10196] dump_stack_lvl+0x100/0x190 [ 299.109264][T10196] print_report+0x13d/0x4b0 [ 299.109296][T10196] ? __virt_addr_valid+0x239/0x430 [ 299.109325][T10196] ? __mutex_lock+0x15ca/0x1bd0 [ 299.109352][T10196] kasan_report+0xdf/0x1c0 [ 299.109391][T10196] ? __mutex_lock+0x15ca/0x1bd0 [ 299.109424][T10196] __mutex_lock+0x15ca/0x1bd0 [ 299.109452][T10196] ? ep_open+0x4c/0x2c0 [ 299.109511][T10196] ? preempt_schedule_irq+0x7b/0x90 [ 299.109533][T10196] ? __pfx___mutex_lock+0x10/0x10 [ 299.109557][T10196] ? irqentry_exit+0x24d/0xa00 [ 299.109579][T10196] ? lockdep_hardirqs_on+0x78/0x100 [ 299.109603][T10196] ? irqentry_exit+0x24d/0xa00 [ 299.109634][T10196] ? ep_open+0x4c/0x2c0 [ 299.109660][T10196] ep_open+0x4c/0x2c0 [ 299.109687][T10196] do_dentry_open+0x6ab/0x14d0 [ 299.109708][T10196] ? __pfx_ep_open+0x10/0x10 [ 299.109737][T10196] vfs_open+0x82/0x3f0 [ 299.109760][T10196] path_openat+0x2873/0x4280 [ 299.109785][T10196] ? __pfx_path_openat+0x10/0x10 [ 299.109808][T10196] do_file_open+0x20e/0x430 [ 299.109826][T10196] ? __lock_acquire+0x49f/0x1a40 [ 299.109853][T10196] ? __pfx_do_file_open+0x10/0x10 [ 299.109881][T10196] ? _raw_spin_unlock+0x28/0x50 [ 299.109900][T10196] ? alloc_fd+0x471/0x7a0 [ 299.109921][T10196] do_sys_openat2+0x10f/0x1e0 [ 299.109945][T10196] ? __pfx_do_sys_openat2+0x10/0x10 [ 299.109972][T10196] __ia32_compat_sys_openat+0x12d/0x210 [ 299.109997][T10196] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 299.110028][T10196] __do_fast_syscall_32+0xe7/0x970 [ 299.110053][T10196] ? lockdep_hardirqs_on+0x78/0x100 [ 299.110078][T10196] do_fast_syscall_32+0x32/0x70 [ 299.110104][T10196] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.110129][T10196] RIP: 0023:0xf6ffefec [ 299.110155][T10196] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 299.110165][T10196] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 299.110189][T10196] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000600 [ 299.110204][T10196] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 299.110215][T10196] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.110228][T10196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.110240][T10196] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.110258][T10196] [ 299.110265][T10196] [ 299.211556][T10196] Allocated by task 10173: [ 299.213333][T10196] kasan_save_stack+0x30/0x50 [ 299.215304][T10196] kasan_save_track+0x14/0x30 [ 299.217172][T10196] __kasan_kmalloc+0xaa/0xb0 [ 299.219033][T10196] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 299.221299][T10196] gadgetfs_bind+0x582/0x890 [ 299.223243][T10196] gadget_bind_driver+0x28c/0xbf0 [ 299.225225][T10196] really_probe+0x241/0xa60 [ 299.227164][T10196] __driver_probe_device+0x20e/0x450 [ 299.229319][T10196] driver_probe_device+0x4a/0x140 [ 299.231312][T10196] __driver_attach+0x21f/0x5b0 [ 299.233312][T10196] bus_for_each_dev+0x13e/0x1d0 [ 299.235356][T10196] bus_add_driver+0x305/0x5b0 [ 299.237209][T10196] driver_register+0x1e2/0x360 [ 299.239243][T10196] usb_gadget_register_driver_owner+0x132/0x210 [ 299.241823][T10196] dev_config+0xdce/0x1610 [ 299.243736][T10196] vfs_write+0x2aa/0x1050 [ 299.245571][T10196] ksys_write+0x12a/0x250 [ 299.247420][T10196] __do_fast_syscall_32+0xe7/0x970 [ 299.249575][T10196] do_fast_syscall_32+0x32/0x70 [ 299.251646][T10196] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.254105][T10196] [ 299.255135][T10196] Freed by task 10172: [ 299.256856][T10196] kasan_save_stack+0x30/0x50 [ 299.258854][T10196] kasan_save_track+0x14/0x30 [ 299.260865][T10196] kasan_save_free_info+0x3b/0x70 [ 299.262995][T10196] __kasan_slab_free+0x5f/0x80 [ 299.264875][T10196] kfree+0x22b/0x6c0 [ 299.266328][T10196] put_ep+0x117/0x150 [ 299.267881][T10196] destroy_ep_files+0x163/0x420 [ 299.269817][T10196] gadgetfs_unbind+0x139/0x260 [ 299.271854][T10196] gadget_unbind_driver+0x20c/0x4f0 [ 299.274015][T10196] device_remove+0xcb/0x180 [ 299.275931][T10196] device_release_driver_internal+0x44e/0x620 [ 299.278496][T10196] driver_detach+0xd8/0x1b0 [ 299.280440][T10196] bus_remove_driver+0x13b/0x2e0 [ 299.282558][T10196] driver_unregister+0x76/0xb0 [ 299.284632][T10196] usb_gadget_unregister_driver+0x49/0x70 [ 299.287037][T10196] dev_release+0x132/0x1b0 [ 299.288939][T10196] __fput+0x3ff/0xb50 [ 299.290669][T10196] task_work_run+0x150/0x240 [ 299.292645][T10196] exit_to_user_mode_loop+0x1d8/0x6f0 [ 299.294926][T10196] __do_fast_syscall_32+0x701/0x970 [ 299.297159][T10196] do_fast_syscall_32+0x32/0x70 [ 299.299249][T10196] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.301921][T10196] [ 299.302968][T10196] The buggy address belongs to the object at ffff888025423000 [ 299.302968][T10196] which belongs to the cache kmalloc-512 of size 512 [ 299.308731][T10196] The buggy address is located 88 bytes inside of [ 299.308731][T10196] freed 512-byte region [ffff888025423000, ffff888025423200) [ 299.314367][T10196] [ 299.315407][T10196] The buggy address belongs to the physical page: [ 299.318109][T10196] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25420 [ 299.321801][T10196] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 299.325344][T10196] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 299.328436][T10196] page_type: f5(slab) [ 299.330038][T10196] raw: 00fff00000000040 ffff88801bc42c80 dead000000000100 dead000000000122 [ 299.333476][T10196] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 299.337116][T10196] head: 00fff00000000040 ffff88801bc42c80 dead000000000100 dead000000000122 [ 299.340733][T10196] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 299.344349][T10196] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 299.348026][T10196] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 299.351628][T10196] page dumped because: kasan: bad access detected [ 299.354261][T10196] page_owner tracks the page as allocated [ 299.356675][T10196] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5741, tgid 5741 (syz-executor), ts 50013460092, free_ts 45930854327 [ 299.365324][T10196] post_alloc_hook+0xfd/0x120 [ 299.367368][T10196] get_page_from_freelist+0xf48/0x3530 [ 299.369675][T10196] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 299.372186][T10196] new_slab+0xa2/0x640 [ 299.373913][T10196] refill_objects+0xe3/0x410 [ 299.375888][T10196] __pcs_replace_empty_main+0x376/0x680 [ 299.378214][T10196] __kmalloc_noprof+0x66d/0x820 [ 299.380284][T10196] fib6_info_alloc+0x40/0x160 [ 299.382338][T10196] ip6_route_info_create+0x14c/0xad0 [ 299.384604][T10196] ip6_route_add+0x4b/0x1d0 [ 299.386497][T10196] addrconf_prefix_route+0x2fb/0x510 [ 299.388747][T10196] addrconf_notify+0x1548/0x1ba0 [ 299.390860][T10196] notifier_call_chain+0x99/0x3f0 [ 299.393004][T10196] call_netdevice_notifiers_info+0xbe/0x110 [ 299.395543][T10196] __dev_notify_flags+0x12c/0x2e0 [ 299.397585][T10196] netif_change_flags+0x108/0x160 [ 299.399644][T10196] page last free pid 5706 tgid 5706 stack trace: [ 299.402328][T10196] __free_frozen_pages+0x79f/0x1090 [ 299.404563][T10196] qlist_free_all+0x47/0xf0 [ 299.406492][T10196] kasan_quarantine_reduce+0x1a0/0x1f0 [ 299.408820][T10196] __kasan_slab_alloc+0x69/0x90 [ 299.410918][T10196] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 299.413215][T10196] vm_area_dup+0x27/0x8e0 [ 299.414994][T10196] __split_vma+0x18c/0xda0 [ 299.416887][T10196] vms_gather_munmap_vmas+0x1d2/0x1720 [ 299.419209][T10196] do_vmi_align_munmap+0x287/0x5f0 [ 299.421403][T10196] do_vmi_munmap+0x1f8/0x3e0 [ 299.423391][T10196] __vm_munmap+0x196/0x390 [ 299.425157][T10196] __x64_sys_munmap+0x59/0x80 [ 299.427208][T10196] do_syscall_64+0x115/0x840 [ 299.429189][T10196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.431716][T10196] [ 299.432748][T10196] Memory state around the buggy address: [ 299.435110][T10196] ffff888025422f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 299.438483][T10196] ffff888025422f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 299.441846][T10196] >ffff888025423000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 299.445033][T10196] ^ [ 299.447839][T10196] ffff888025423080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 299.451200][T10196] ffff888025423100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 299.454576][T10196] ================================================================== [ 299.469420][ T8576] usb 5-1: USB disconnect, device number 74 [ 299.490517][T10196] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 299.493544][T10196] CPU: 3 UID: 0 PID: 10196 Comm: syz.3.1148 Not tainted syzkaller #0 PREEMPT(full) [ 299.497392][T10196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 299.501526][T10196] Call Trace: [ 299.502952][T10196] [ 299.504120][T10196] dump_stack_lvl+0x100/0x190 [ 299.506108][T10196] vpanic+0x552/0x970 [ 299.507805][T10196] ? __pfx_vpanic+0x10/0x10 [ 299.509725][T10196] ? __mutex_lock+0x15ca/0x1bd0 [ 299.511774][T10196] panic+0xd1/0xe0 [ 299.513358][T10196] ? __pfx_panic+0x10/0x10 [ 299.515231][T10196] ? __mutex_lock+0x15ca/0x1bd0 [ 299.517262][T10196] ? preempt_schedule_common+0x42/0xc0 [ 299.519506][T10196] check_panic_on_warn.cold+0x19/0x34 [ 299.521726][T10196] end_report.part.0+0x3a/0x90 [ 299.523773][T10196] kasan_report.cold+0xe/0x18 [ 299.525664][T10196] ? __mutex_lock+0x15ca/0x1bd0 [ 299.527721][T10196] __mutex_lock+0x15ca/0x1bd0 [ 299.529690][T10196] ? ep_open+0x4c/0x2c0 [ 299.531460][T10196] ? preempt_schedule_irq+0x7b/0x90 [ 299.533618][T10196] ? __pfx___mutex_lock+0x10/0x10 [ 299.535700][T10196] ? irqentry_exit+0x24d/0xa00 [ 299.537705][T10196] ? lockdep_hardirqs_on+0x78/0x100 [ 299.539876][T10196] ? irqentry_exit+0x24d/0xa00 [ 299.541899][T10196] ? ep_open+0x4c/0x2c0 [ 299.543658][T10196] ep_open+0x4c/0x2c0 [ 299.545340][T10196] do_dentry_open+0x6ab/0x14d0 [ 299.547293][T10196] ? __pfx_ep_open+0x10/0x10 [ 299.549189][T10196] vfs_open+0x82/0x3f0 [ 299.550897][T10196] path_openat+0x2873/0x4280 [ 299.552841][T10196] ? __pfx_path_openat+0x10/0x10 [ 299.554900][T10196] do_file_open+0x20e/0x430 [ 299.556789][T10196] ? __lock_acquire+0x49f/0x1a40 [ 299.558871][T10196] ? __pfx_do_file_open+0x10/0x10 [ 299.560999][T10196] ? _raw_spin_unlock+0x28/0x50 [ 299.563013][T10196] ? alloc_fd+0x471/0x7a0 [ 299.564821][T10196] do_sys_openat2+0x10f/0x1e0 [ 299.566772][T10196] ? __pfx_do_sys_openat2+0x10/0x10 [ 299.568982][T10196] __ia32_compat_sys_openat+0x12d/0x210 [ 299.571272][T10196] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 299.573793][T10196] __do_fast_syscall_32+0xe7/0x970 [ 299.575903][T10196] ? lockdep_hardirqs_on+0x78/0x100 [ 299.578086][T10196] do_fast_syscall_32+0x32/0x70 [ 299.580113][T10196] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.582724][T10196] RIP: 0023:0xf6ffefec [ 299.584368][T10196] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 299.587018][T10196] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 299.590310][T10196] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000600 [ 299.593422][T10196] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 299.596641][T10196] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.599889][T10196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.603153][T10196] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.606399][T10196] [ 299.608509][T10196] Kernel Offset: disabled [ 299.610313][T10196] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:35:56 Registers: info registers vcpu 0 CPU#0 RAX=00000008000008fd RBX=ffff88801c2d848c RCX=0000000000000830 RDX=0000000000000008 RSI=00000000000000fd RDI=0000000000000003 RBP=0000000000000003 RSP=ffffc90000007cb8 R8 =0000000000000000 R9 =fffffbfff224553a R10=ffffffff9122a9d7 R11=0000000000000003 R12=0000000000000004 R13=1ffff92000000f9b R14=ffffc90000007cf8 R15=0000000000000010 RIP=ffffffff81b69c1a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096be1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080002000 CR3=00000000509d6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000aa689f RBX=ffff88801c73a540 RCX=ffffffff8bb912d5 RDX=0000000000000000 RSI=ffffffff8e1a8f2e RDI=ffffffff8c400a80 RBP=ffffed10038e74a8 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bb8f89f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ce1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f2a190 CR3=000000004bcd3000 CR4=00352ef0 DR0=000000006000003f DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a135b5 RDI=ffffffff9b9f51a0 RBP=ffffffff9b9f5160 RSP=ffffc90005c4f1f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000036 R14=ffffffff9b6f5236 R15=ffffffff85a13550 RIP=ffffffff85a135df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096de1000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000008000d000 CR3=000000007248a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000f7437ff4 RBX=000000000002a01c RCX=0000000081cf467c RDX=0000000000000000 RSI=000000000000fc04 RDI=00000000f7464fe8 RBP=00000000f7f95610 RSP=fffffe00000d7fd8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000202 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff810014f0 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 0000000056b53480 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c358a2d CR3=00000000509d6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000