last executing test programs: 4.250860817s ago: executing program 0 (id=4073): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdirat(0xffffffffffffff9c, 0x0, 0x17a) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)) chdir(&(0x7f0000000140)='./bus\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x4000002, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0xfffffffe, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x7f, 0xe, 0x8, 0x8000806f, 0x100006, 0x200, 0x1, 0x9, 0x200, 0x40, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x9, 0x4, 0xffffffff, 0x40], [0x10000009, 0x5ae, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c8, 0x9, 0xfffffffc, 0x8, 0x0, 0x4, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x3, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x3, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x1, 0x7f, 0x103, 0x8d2, 0x9, 0x5, 0x7fff, 0x1, 0x5, 0x9, 0xffffff80, 0x4, 0x5, 0x0, 0x6, 0x5, 0x1, 0x82, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x200, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0xfff, 0x3, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ef, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0xb, 0x3, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x5, 0xc8, 0x2001, 0xfffff000, 0x2, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0x8, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d683, 0xa1f, 0xf40, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x401]}, 0x45c) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) 4.218006695s ago: executing program 0 (id=4074): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='+p', 0x2) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl(r4, 0x40186f40, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev_mnt\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/ubi0\x00', 0x2, 0x0) ioctl(r5, 0x40986f00, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x20}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r7, &(0x7f0000000300)='0', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') 4.027377832s ago: executing program 0 (id=4076): socket(0x10, 0x3, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) iopl(0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@delsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0xa, 0x6c}}, 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) set_mempolicy(0x8006, &(0x7f0000000180)=0xfff, 0x5) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x78d4a000) 3.335039742s ago: executing program 2 (id=4078): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x38ec1, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000ac1414000000000200000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000ae4f58741d2567c421f48ec91fcdea3c843efaa03dba50f7230ac216287364fe16d6763bee4b29b4a00c8c5865690211e8adeda83c8344d7201fbf05761ab6943534463fe52a552973ca2e3b8dd3eaf130bdecbca04060e991fa467454aa51c7523b8dee6df061a6500ff0277bdd6583a9f1c43bb0bf7ffeec0dc7b53f6a3490ead3e03187c0eba7055518e0c30c"], 0x50}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x840, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3c4, 0x14, 0x2, 0x9, 0x46, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x0, 0x723, 0x400, 0x1, 0x13, 0x100, 0x2, 0x66, 0x34d, 0x5, 0x402, 0x9, 0x200, 0xe2df, 0x8, 0xfffffffe, 0x4, 0x0, 0x7, 0xf56, 0x6]}) 3.145335152s ago: executing program 0 (id=4079): openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x8180, 0x0) 2.721375348s ago: executing program 2 (id=4081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x4e21, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000380)=ANY=[], 0x4a) 2.63613268s ago: executing program 2 (id=4082): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdirat(0xffffffffffffff9c, 0x0, 0x17a) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)) chdir(&(0x7f0000000140)='./bus\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x4000002, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0xfffffffe, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x7f, 0xe, 0x8, 0x8000806f, 0x100006, 0x200, 0x1, 0x9, 0x200, 0x40, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x9, 0x4, 0xffffffff, 0x40], [0x10000009, 0x5ae, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c8, 0x9, 0xfffffffc, 0x8, 0x0, 0x4, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x3, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x3, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x1, 0x7f, 0x103, 0x8d2, 0x9, 0x5, 0x7fff, 0x1, 0x5, 0x9, 0xffffff80, 0x4, 0x5, 0x0, 0x6, 0x5, 0x1, 0x82, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x200, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0xfff, 0x3, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ef, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0xb, 0x3, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x5, 0xc8, 0x2001, 0xfffff000, 0x2, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0x8, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d683, 0xa1f, 0xf40, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x401]}, 0x45c) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) 2.62470046s ago: executing program 2 (id=4083): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0xf2d, &(0x7f0000000180)={0x0, 0xb5d2, 0x8, 0x1, 0x33a}, 0x0, 0x0, 0x0) r1 = eventfd(0x26) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x783f, 0x8000, 0x3, 0x229, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5113, 0x0, 0x2, 0x2de}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2aa3, 0x10000, 0x4, 0x1f6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x627d, 0x8000, 0x2, 0x22f}}], 0x4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x100141, 0xa) write(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) 2.569594129s ago: executing program 2 (id=4084): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='+p', 0x2) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl(r4, 0x40186f40, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev_mnt\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/ubi0\x00', 0x2, 0x0) ioctl(r5, 0x40986f00, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x20}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r7, &(0x7f0000000300)='0', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') 2.235831913s ago: executing program 0 (id=4087): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x2d, 0x2, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x8c) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) 2.233094734s ago: executing program 2 (id=4088): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000500)=r0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/13], 0x50) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) 2.023911807s ago: executing program 3 (id=4089): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x38ec1, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000ac1414000000000200000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000ae4f58741d2567c421f48ec91fcdea3c843efaa03dba50f7230ac216287364fe16d6763bee4b29b4a00c8c5865690211e8adeda83c8344d7201fbf05761ab6943534463fe52a552973ca2e3b8dd3eaf130bdecbca04060e991fa467454aa51c7523b8dee6df061a6500ff0277bdd6583a9f1c43bb0bf7ffeec0dc7b53f6a3490ead3e03187c0eba7055518e0c30c"], 0x50}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x840, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3c4, 0x14, 0x2, 0x9, 0x46, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x0, 0x723, 0x400, 0x1, 0x13, 0x100, 0x2, 0x66, 0x34d, 0x5, 0x402, 0x9, 0x200, 0xe2df, 0x8, 0xfffffffe, 0x4, 0x0, 0x7, 0xf56, 0x6]}) 1.850509354s ago: executing program 1 (id=4092): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdirat(0xffffffffffffff9c, 0x0, 0x17a) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x4000002, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0xfffffffe, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x7f, 0xe, 0x8, 0x8000806f, 0x100006, 0x200, 0x1, 0x9, 0x200, 0x40, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x9, 0x4, 0xffffffff, 0x40], [0x10000009, 0x5ae, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c8, 0x9, 0xfffffffc, 0x8, 0x0, 0x4, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x3, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x3, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x1, 0x7f, 0x103, 0x8d2, 0x9, 0x5, 0x7fff, 0x1, 0x5, 0x9, 0xffffff80, 0x4, 0x5, 0x0, 0x6, 0x5, 0x1, 0x82, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x200, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0xfff, 0x3, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ef, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0xb, 0x3, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x5, 0xc8, 0x2001, 0xfffff000, 0x2, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0x8, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d683, 0xa1f, 0xf40, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x401]}, 0x45c) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) 1.506024781s ago: executing program 0 (id=4093): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x80) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x16d) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/processing/default/bmControls\x00', 0x1, 0x0) mkdirat(r0, &(0x7f0000000040)='./config/usb_gadget/g1/file0\x00', 0x110) write(r0, &(0x7f00000000c0)="ad120deb6342b63e26222fc6fc8cafcc7e84aaf74888dc5bd970c2df4e6c6535d813844e6b18f801d8edf11843cfb426", 0x30) write(r0, &(0x7f0000000280)="d6", 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x10800, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x3e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) ioperm(0xffffffffffffffff, 0x7, 0x7) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000440)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x2, 0x3a, '\xf7d\xbc<\x8d\xcf', 0x3a, '/dev/ppp\x00\x8aw\xec\xabr3\x17\x9a\xac\x9bQ\xe0\x85\xccgLE(m\a\xf6a\xfa\xb2\xb3\xd1\xc6\xd1\xdf\xa2\x86TC\xf5\xe4\xa4\x10\xab\xdc\xfd`:~\xf7\xc9\xef\xc0G\xc5\x16\xc3 [l\xa9{\xb4lH\xfe\xce4{w\xe9d\xa4<{', 0x3a, './file0', 0x3a, [0x4f, 0x46, 0x4f]}, 0x7e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x14, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@nested={0xc, 0x1a, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42805}, 0x84) r1 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="000000030000000100"], 0x60) 1.436483023s ago: executing program 1 (id=4094): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) 1.199120734s ago: executing program 1 (id=4095): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000240)='2\n', 0x2) 1.197509259s ago: executing program 3 (id=4096): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='+p', 0x2) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl(r5, 0x40186f40, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev_mnt\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/ubi0\x00', 0x2, 0x0) ioctl(r6, 0x40986f00, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x20}) socket$inet6_tcp(0xa, 0x1, 0x0) write$tun(r3, &(0x7f00000002c0)={@val={0xa, 0x88b5}, @void, @eth={@multicast, @random="527bcee565f4", @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0xc, 0x11, 0xff, @private1, @empty, {[], {0x4e20, 0x4e23, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}}}, 0xffffffffffffff8b) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r7, &(0x7f0000000300)='0', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') 1.126199645s ago: executing program 1 (id=4097): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xff00) 937.877401ms ago: executing program 3 (id=4098): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000), 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="060400000000000000b6001019af69000000", @ANYBLOB="c09483f62d187fb94624adb64950be2ff212dfb5c980195e", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000300)={0x30000001}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = request_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='.{)[\'*\x00', 0xfffffffffffffffb) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x10) ppoll(&(0x7f0000000240)=[{r4, 0x5400}], 0x1, &(0x7f00000002c0), 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0xee00) keyctl$search(0xa, r3, &(0x7f0000000400)='cifs.idmap\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) ioctl$FE_GET_FRONTEND(r1, 0x80246f4d, &(0x7f0000000480)={0x0, 0x0, @vsb}) 365.836355ms ago: executing program 1 (id=4099): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 185.064008ms ago: executing program 1 (id=4100): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x19e) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) 5.987861ms ago: executing program 3 (id=4101): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) 5.80404ms ago: executing program 3 (id=4102): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(r0, &(0x7f0000000140)='\x00', 0x1) 0s ago: executing program 3 (id=4103): prlimit64(0xffffffffffffffff, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x3) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r1, &(0x7f00000004c0)='\n', 0x1) kernel console output (not intermixed with test programs): 4][ T25] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 312.994332][ T25] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 312.995123][ T25] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 312.995137][ T25] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 312.995147][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 312.995166][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 312.995180][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 312.996318][ T25] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 312.996330][ T25] usb 8-1: Product: syz [ 312.996337][ T25] usb 8-1: Manufacturer: syz [ 312.999857][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 312.999867][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 313.008673][ T25] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 313.008686][ T25] cdc_wdm 8-1:1.0: Unknown control protocol [ 313.137324][T15028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.139766][ T25] usb 7-1: USB disconnect, device number 19 [ 313.147188][T15049] vhci_hcd: connection reset by peer [ 313.150155][T14943] vhci_hcd vhci_hcd.2: stop threads [ 313.150171][T14943] vhci_hcd vhci_hcd.2: release socket [ 313.150198][T14943] vhci_hcd vhci_hcd.2: disconnect device [ 313.295521][T15070] netlink: 'syz.1.3395': attribute type 1 has an invalid length. [ 313.316528][T15070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3395'. [ 313.317551][T15070] 8021q: adding VLAN 0 to HW filter on device bond8 [ 313.515503][ C2] cdc_wdm 8-1:1.0: Unexpected error -71 [ 313.516519][ T5819] usb 8-1: USB disconnect, device number 18 [ 313.516661][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 313.516714][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 313.516722][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 313.644004][ T25] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 313.803886][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 313.804380][ T25] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 313.804404][ T25] usb 6-1: no configurations [ 313.804410][ T25] usb 6-1: can't read configurations, error -22 [ 313.934681][ T25] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 314.094034][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 314.094849][ T25] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 314.094882][ T25] usb 6-1: no configurations [ 314.094893][ T25] usb 6-1: can't read configurations, error -22 [ 314.095168][ T25] usb usb6-port1: attempt power cycle [ 314.373731][T15103] netlink: 'syz.3.3405': attribute type 1 has an invalid length. [ 314.398500][T15103] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3405'. [ 314.401998][T15103] 8021q: adding VLAN 0 to HW filter on device bond8 [ 314.447329][ T25] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 314.469141][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 314.469636][ T25] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 314.469661][ T25] usb 6-1: no configurations [ 314.469670][ T25] usb 6-1: can't read configurations, error -22 [ 314.528177][T15106] kvm: Disabled LAPIC found during irq injection [ 314.604032][ T25] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 314.609613][T15108] jffs2: notice: (15108) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 314.610922][ T43] audit: type=1400 audit(1789843393.609:757): avc: denied { write } for pid=15107 comm="syz.3.3407" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 314.630586][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 314.631289][ T25] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 314.631310][ T25] usb 6-1: no configurations [ 314.631317][ T25] usb 6-1: can't read configurations, error -22 [ 314.631486][ T25] usb usb6-port1: unable to enumerate USB device [ 314.726795][T15115] 9pnet_fd: Insufficient options for proto=fd [ 314.802338][T15117] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 314.802355][T15117] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 314.802423][T15117] vhci_hcd vhci_hcd.0: Device attached [ 314.974172][ T25] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 315.033933][ T35] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 315.034129][ T25] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 315.184656][ T35] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 315.185184][ T35] usb 8-1: config 0 has no interfaces? [ 315.185211][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.187466][ T35] usb 8-1: config 0 descriptor?? [ 316.448392][ T43] audit: type=1400 audit(1789843395.449:758): avc: denied { write } for pid=15120 comm="syz.1.3410" name="/" dev="9p" ino=76832941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 316.449253][ T43] audit: type=1400 audit(1789843395.449:759): avc: denied { add_name } for pid=15120 comm="syz.1.3410" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 316.449285][ T43] audit: type=1400 audit(1789843395.449:760): avc: denied { associate } for pid=15120 comm="syz.1.3410" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 316.453177][ T43] audit: type=1400 audit(1789843395.449:761): avc: denied { read append open } for pid=15120 comm="syz.1.3410" path="/262/file0/cpuset.effective_cpus" dev="9p" ino=76833003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 316.593294][T15085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 316.599715][T15118] vhci_hcd: connection reset by peer [ 316.603098][ T5811] vhci_hcd vhci_hcd.3: stop threads [ 316.603119][ T5811] vhci_hcd vhci_hcd.3: release socket [ 316.603156][ T5811] vhci_hcd vhci_hcd.3: disconnect device [ 316.605848][ T5819] usb 8-1: USB disconnect, device number 19 [ 316.744091][ T5849] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 316.761569][ T43] audit: type=1400 audit(1789843395.759:762): avc: denied { unmount } for pid=11724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 316.784908][T15132] netlink: 'syz.0.3414': attribute type 1 has an invalid length. [ 316.799747][T15132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3414'. [ 316.802866][T15132] 8021q: adding VLAN 0 to HW filter on device bond10 [ 316.925542][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.234218][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 317.336491][T15162] netlink: 'syz.3.3423': attribute type 10 has an invalid length. [ 317.393925][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 317.395468][ T9] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 317.395490][ T9] usb 7-1: no configurations [ 317.395496][ T9] usb 7-1: can't read configurations, error -22 [ 317.524122][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 317.684416][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 317.684863][ T9] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 317.684883][ T9] usb 7-1: no configurations [ 317.684890][ T9] usb 7-1: can't read configurations, error -22 [ 317.685009][ T9] usb usb7-port1: attempt power cycle [ 318.033967][ T35] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 318.034523][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 318.064950][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 318.065375][ T9] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 318.065395][ T9] usb 7-1: no configurations [ 318.065401][ T9] usb 7-1: can't read configurations, error -22 [ 318.184168][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 318.184788][ T35] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 318.185989][ T35] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 318.186025][ T35] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 318.186046][ T35] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 318.186070][ T35] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 318.191702][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.191722][ T35] usb 8-1: Product: syz [ 318.191796][ T35] usb 8-1: Manufacturer: syz [ 318.191810][ T35] usb 8-1: SerialNumber: syz [ 318.200175][ T35] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 318.200240][ T35] imon 8-1:155.0: unable to initialize intf0, err -19 [ 318.200253][ T35] imon:imon_probe: failed to initialize context! [ 318.200262][ T35] imon 8-1:155.0: unable to register, err -19 [ 318.211985][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 318.244515][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 318.245021][ T9] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 318.245051][ T9] usb 7-1: no configurations [ 318.245061][ T9] usb 7-1: can't read configurations, error -22 [ 318.245407][ T9] usb usb7-port1: unable to enumerate USB device [ 318.317743][T15179] 9pnet_fd: Insufficient options for proto=fd [ 318.408061][T15181] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 318.408079][T15181] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 318.408120][T15181] vhci_hcd vhci_hcd.0: Device attached [ 318.584494][ T35] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 318.643931][ T35] usb 39-1: new full-speed USB device number 4 using vhci_hcd [ 318.656493][ T5838] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 318.814404][ T5838] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 318.814884][ T5838] usb 6-1: config 0 has no interfaces? [ 318.814906][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.816818][ T5838] usb 6-1: config 0 descriptor?? [ 319.947453][T15146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.950245][ T9] usb 6-1: USB disconnect, device number 27 [ 319.952592][T15182] vhci_hcd: connection reset by peer [ 319.953285][ T12] vhci_hcd vhci_hcd.1: stop threads [ 319.953306][ T12] vhci_hcd vhci_hcd.1: release socket [ 319.953405][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 320.183881][ T25] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 320.297688][ T5738] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 320.577112][ T5738] Bluetooth: hci4: unexpected event for opcode 0x0428 [ 320.797548][ T42] usb 8-1: USB disconnect, device number 20 [ 320.833733][T15210] syzkaller0: entered promiscuous mode [ 320.835301][T15210] syzkaller0: entered allmulticast mode [ 321.164560][ T851] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 321.192444][ T43] audit: type=1400 audit(1789843400.189:763): avc: denied { write } for pid=15234 comm="syz.3.3450" name="file0" dev="9p" ino=76832967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 321.324870][ T851] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 321.325812][ T851] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 321.325825][ T851] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 321.325834][ T851] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 321.325853][ T851] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 321.325866][ T851] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 321.327936][ T851] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 321.327948][ T851] usb 7-1: Product: syz [ 321.327955][ T851] usb 7-1: Manufacturer: syz [ 321.340187][ T851] cdc_wdm 7-1:1.0: skipping garbage [ 321.340233][ T851] cdc_wdm 7-1:1.0: skipping garbage [ 321.340990][ T851] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 321.340998][ T851] cdc_wdm 7-1:1.0: Unknown control protocol [ 321.535555][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 321.535570][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 321.535749][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 321.535759][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 321.535935][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 321.535944][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 321.536121][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 321.536130][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 321.536307][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 321.536316][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 321.536492][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 321.536501][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 321.536687][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 321.536696][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 321.536872][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 321.536881][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 321.537058][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 321.537067][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 321.537271][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 321.537285][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 321.538744][ T5819] usb 7-1: USB disconnect, device number 24 [ 321.538843][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 321.662271][T15243] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 321.735750][T15243] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 321.735952][T15243] overlayfs: failed to look up (tracing) for ino (-66) [ 321.822110][T15256] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 321.980521][T15268] dyndbg: bad flag-op f, at start of file [ 321.980537][T15268] dyndbg: flags parse failed [ 322.052430][T14321] bridge_slave_1: left allmulticast mode [ 322.052455][T14321] bridge_slave_1: left promiscuous mode [ 322.052639][T14321] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.061441][T14321] bridge_slave_0: left promiscuous mode [ 322.061615][T14321] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.068770][T14321] pimreg: left allmulticast mode [ 322.113011][T15274] 9pnet_fd: Insufficient options for proto=fd [ 322.180795][T14321] bond1 (unregistering): (slave geneve2): Releasing active interface [ 322.180814][T14321] geneve2 (unregistering): left promiscuous mode [ 322.197150][T14321] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 322.200737][T14321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.203342][T14321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.204999][T14321] bond0 (unregistering): Released all slaves [ 322.207777][T14321] bond1 (unregistering): Released all slaves [ 322.212692][T14321] bond2 (unregistering): Released all slaves [ 322.217757][T14321] bond3 (unregistering): Released all slaves [ 322.223406][T14321] bond4 (unregistering): Released all slaves [ 322.325193][T14321] tipc: Left network mode [ 322.333292][T15280] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 322.413530][ T43] audit: type=1400 audit(1789843401.409:764): avc: denied { read } for pid=15281 comm="syz.3.3472" name="threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 322.434464][ T5849] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 322.594915][ T5849] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 322.598421][ T5849] usb 6-1: config 0 has no interfaces? [ 322.598441][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.599757][ T5849] usb 6-1: config 0 descriptor?? [ 322.614149][T14321] hsr_slave_0: left promiscuous mode [ 322.614585][T14321] hsr_slave_1: left promiscuous mode [ 322.615072][T14321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.615084][T14321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.615601][T14321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.615611][T14321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.618473][T14321] veth1_macvtap: left promiscuous mode [ 322.618494][T14321] veth0_macvtap: left promiscuous mode [ 322.618547][T14321] veth1_vlan: left promiscuous mode [ 322.618577][T14321] veth0_vlan: left promiscuous mode [ 322.744307][ T5819] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 322.756625][T14321] team0 (unregistering): Port device team_slave_1 removed [ 322.762282][T14321] team0 (unregistering): Port device team_slave_0 removed [ 322.804212][ T1715] usb 6-1: USB disconnect, device number 28 [ 322.883946][ T5819] usb 7-1: device descriptor read/64, error -71 [ 322.914283][ T5818] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 323.075032][ T5818] usb 8-1: Using ep0 maxpacket: 32 [ 323.078316][ T5818] usb 8-1: unable to get BOS descriptor or descriptor too short [ 323.078356][ T5818] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 323.079328][ T5818] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 323.079350][ T5818] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 323.079366][ T5818] usb 8-1: config 14 has no interface number 0 [ 323.079380][ T5818] usb 8-1: config 14 has no interface number 1 [ 323.079426][ T5818] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 323.079445][ T5818] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 323.079465][ T5818] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 323.079493][ T5818] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 323.079516][ T5818] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 323.079537][ T5818] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.079557][ T5818] usb 8-1: config 14 interface 57 has no altsetting 0 [ 323.079572][ T5818] usb 8-1: config 14 interface 228 has no altsetting 0 [ 323.081453][ T5818] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.081477][ T5818] usb 8-1: Product: syz [ 323.081489][ T5818] usb 8-1: Manufacturer: syz [ 323.081501][ T5818] usb 8-1: SerialNumber: syz [ 323.124459][T14321] IPVS: stop unused estimator thread 0... [ 323.134702][ T5819] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 323.284500][ T5819] usb 7-1: device descriptor read/64, error -71 [ 323.370996][T15302] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 323.407057][ T5819] usb usb7-port1: attempt power cycle [ 323.429640][T15304] tmpfs: Unknown parameter 'grpquotaƒ' [ 323.493561][ T5818] legousbtower 8-1:14.57: interrupt endpoints not found [ 323.754128][ T5819] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 323.774498][ T5819] usb 7-1: device descriptor read/8, error -71 [ 323.883882][ T35] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 323.895396][ T5818] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 323.897082][ T5818] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 324.013960][ T5819] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 324.034537][ T5819] usb 7-1: device descriptor read/8, error -71 [ 324.144211][ T5819] usb usb7-port1: unable to enumerate USB device [ 324.649723][ T851] usb 8-1: USB disconnect, device number 21 [ 324.659980][ T851] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 324.786728][ T43] audit: type=1400 audit(1789843403.789:765): avc: denied { write } for pid=15318 comm="syz.1.3487" name="/" dev="9p" ino=76832941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 324.788989][ T43] audit: type=1400 audit(1789843403.789:766): avc: denied { map } for pid=15318 comm="syz.1.3487" path="/290/file0/memory.events" dev="9p" ino=76833007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 324.970042][T15321] syzkaller0: entered promiscuous mode [ 324.970055][T15321] syzkaller0: entered allmulticast mode [ 325.006546][T15323] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 325.263103][T15332] overlayfs: failed to resolve './file1': -2 [ 326.018542][T15348] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 326.364333][ T5818] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 326.524307][ T5818] usb 6-1: Using ep0 maxpacket: 32 [ 326.527061][ T5818] usb 6-1: unable to get BOS descriptor or descriptor too short [ 326.527083][ T5818] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 326.527924][ T5818] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 326.527937][ T5818] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 326.527947][ T5818] usb 6-1: config 14 has no interface number 0 [ 326.527955][ T5818] usb 6-1: config 14 has no interface number 1 [ 326.527980][ T5818] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 326.527992][ T5818] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 326.528004][ T5818] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 326.528017][ T5818] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 326.528030][ T5818] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 326.528043][ T5818] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.528056][ T5818] usb 6-1: config 14 interface 57 has no altsetting 0 [ 326.528065][ T5818] usb 6-1: config 14 interface 228 has no altsetting 0 [ 326.529641][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.529652][ T5818] usb 6-1: Product: syz [ 326.529659][ T5818] usb 6-1: Manufacturer: syz [ 326.529666][ T5818] usb 6-1: SerialNumber: syz [ 326.618597][T15376] syzkaller0: entered promiscuous mode [ 326.618611][T15376] syzkaller0: entered allmulticast mode [ 326.673469][T15378] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 326.942270][ T5818] legousbtower 6-1:14.57: interrupt endpoints not found [ 327.218928][T15387] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 327.348649][ T5818] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 327.350878][ T5818] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 327.414893][ T43] audit: type=1400 audit(1789843406.289:767): avc: denied { write } for pid=15386 comm="syz.3.3512" name="target" dev="configfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 327.414926][ T43] audit: type=1400 audit(1789843406.289:768): avc: denied { write } for pid=15386 comm="syz.3.3512" name="usb_gadget" dev="configfs" ino=50344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 327.414946][ T43] audit: type=1400 audit(1789843406.299:769): avc: denied { write } for pid=15386 comm="syz.3.3512" name="naa.5001405000000001" dev="configfs" ino=50346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 327.781442][T15407] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 327.870695][ T43] audit: type=1400 audit(1789843406.869:770): avc: denied { write } for pid=15414 comm="syz.3.3522" name="/" dev="9p" ino=76832941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 327.874321][ T43] audit: type=1400 audit(1789843406.879:771): avc: denied { mounton } for pid=15414 comm="syz.3.3522" path="/244/file0" dev="9p" ino=76832941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 327.874404][T15415] fuse: Bad value for 'fd' [ 327.875610][ T43] audit: type=1400 audit(1789843406.879:772): avc: denied { setattr } for pid=15414 comm="syz.3.3522" name="/" dev="9p" ino=76832941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 328.453206][ T43] audit: type=1800 audit(1789843407.449:773): pid=15422 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3523" name="file0" dev="overlay" ino=1379 res=0 errno=0 [ 328.766229][T15352] usb 6-1: LEGO USB Tower reset control request failed [ 328.770211][ T10] usb 6-1: USB disconnect, device number 29 [ 328.779690][ T10] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 328.907214][ T43] audit: type=1400 audit(1789843407.909:774): avc: denied { read } for pid=15433 comm="syz.3.3529" name="trace_clock" dev="tracefs" ino=5933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 328.907374][ T43] audit: type=1400 audit(1789843407.909:775): avc: denied { open } for pid=15433 comm="syz.3.3529" path="/250/tracing/trace_clock" dev="tracefs" ino=5933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 328.921233][ T43] audit: type=1400 audit(1789843407.919:776): avc: denied { unmount } for pid=12567 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 328.950938][T15436] netlink: 'syz.3.3530': attribute type 1 has an invalid length. [ 328.967919][T15436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3530'. [ 328.968851][T15436] 8021q: adding VLAN 0 to HW filter on device bond9 [ 329.240357][ T1163] IPVS: starting estimator thread 0... [ 329.334015][T15443] IPVS: using max 43 ests per chain, 103200 per kthread [ 330.297200][T15460] netlink: 'syz.3.3539': attribute type 1 has an invalid length. [ 330.319159][T15460] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3539'. [ 330.319714][T15461] fuse: Bad value for 'fd' [ 330.322123][T15460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3539'. [ 330.323151][T15460] 8021q: adding VLAN 0 to HW filter on device bond10 [ 330.643929][ T1715] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 330.794188][ T1715] usb 8-1: Using ep0 maxpacket: 32 [ 330.795827][ T1715] usb 8-1: unable to get BOS descriptor or descriptor too short [ 330.795851][ T1715] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 330.796621][ T1715] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 330.796634][ T1715] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 330.796644][ T1715] usb 8-1: config 14 has no interface number 0 [ 330.796651][ T1715] usb 8-1: config 14 has no interface number 1 [ 330.796677][ T1715] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 330.796689][ T1715] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 330.796701][ T1715] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 330.796713][ T1715] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 330.796726][ T1715] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 330.796739][ T1715] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.796751][ T1715] usb 8-1: config 14 interface 57 has no altsetting 0 [ 330.796760][ T1715] usb 8-1: config 14 interface 228 has no altsetting 0 [ 330.798270][ T1715] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.798282][ T1715] usb 8-1: Product: syz [ 330.798289][ T1715] usb 8-1: Manufacturer: syz [ 330.798296][ T1715] usb 8-1: SerialNumber: syz [ 330.846527][T15413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.128593][T15482] fuse: Bad value for 'fd' [ 331.202965][ T1715] legousbtower 8-1:14.57: interrupt endpoints not found [ 331.225128][T15484] netlink: 'syz.2.3549': attribute type 1 has an invalid length. [ 331.243272][T15484] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3549'. [ 331.245302][T15484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3549'. [ 331.246135][T15484] 8021q: adding VLAN 0 to HW filter on device bond13 [ 331.563888][ T42] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 331.607562][ T1715] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 331.610022][ T1715] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 331.728121][ T42] usb 7-1: not running at top speed; connect to a high speed hub [ 331.728153][ T42] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 331.729101][ T42] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 331.729140][ T42] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 331.729162][ T42] usb 7-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 331.729194][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.734911][T15487] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 331.748331][ T42] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 331.753642][ T42] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 331.754674][ T42] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 331.754756][ T42] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 331.758827][ T42] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 331.857611][T15501] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 331.989634][T15505] fuse: Bad value for 'fd' [ 332.073370][ T35] usb 7-1: USB disconnect, device number 29 [ 332.076709][ T35] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 332.078948][ T35] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 332.079335][ T35] keyspan 7-1:1.0: device disconnected [ 332.141611][T15507] netlink: 'syz.0.3558': attribute type 1 has an invalid length. [ 332.153381][T15507] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3558'. [ 332.155448][T15507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3558'. [ 332.160129][T15507] 8021q: adding VLAN 0 to HW filter on device bond11 [ 332.362893][ T10] usb 8-1: USB disconnect, device number 22 [ 332.370334][ T10] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 332.815695][T15517] Bluetooth: MGMT ver 1.23 [ 332.968286][T15520] device-mapper: table: 248:0: thin-pool: Error opening metadata block device (-EBUSY) [ 332.968305][T15520] device-mapper: ioctl: error adding target to table [ 333.175881][T15536] netlink: 'syz.0.3567': attribute type 1 has an invalid length. [ 333.185976][T15536] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3567'. [ 333.187522][T15536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3567'. [ 333.188234][T15536] 8021q: adding VLAN 0 to HW filter on device bond12 [ 333.254254][ T10] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 333.425482][ T10] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 333.453903][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 333.453932][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 333.453950][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 333.454040][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.615167][T15517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 333.616016][ T10] cyberjack 7-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 333.622414][ T10] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 333.824632][ T10] usb 7-1: USB disconnect, device number 30 [ 333.829085][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 333.829810][ T10] cyberjack 7-1:1.0: device disconnected [ 334.444177][T15491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.495419][T15556] fuse: Bad value for 'fd' [ 334.541017][T15558] netlink: 'syz.1.3576': attribute type 1 has an invalid length. [ 334.591365][T15558] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3576'. [ 334.600623][T15558] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3576'. [ 334.602714][T15558] 8021q: adding VLAN 0 to HW filter on device bond9 [ 334.853925][ T10] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 334.924054][ T42] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 335.015133][ T10] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 335.016227][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.016262][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.017929][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 335.017949][ T10] usb 7-1: Product: syz [ 335.017962][ T10] usb 7-1: Manufacturer: syz [ 335.039422][ T10] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 335.047183][T15592] netlink: 'syz.3.3590': attribute type 1 has an invalid length. [ 335.058041][ T10] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 335.058085][ T10] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 335.064114][ T42] usb 6-1: device descriptor read/64, error -71 [ 335.081347][T15592] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3590'. [ 335.082844][T15592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3590'. [ 335.083463][T15592] 8021q: adding VLAN 0 to HW filter on device bond11 [ 335.240202][ T2426] usb 7-1: USB disconnect, device number 31 [ 335.240947][ T2426] garmin_gps 7-1:1.0: device disconnected [ 335.314491][ T42] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 335.454111][ T42] usb 6-1: device descriptor read/64, error -71 [ 335.575904][ T42] usb usb6-port1: attempt power cycle [ 335.820301][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 335.820336][ T43] audit: type=1400 audit(1789843414.819:778): avc: denied { read write } for pid=15601 comm="syz.2.3593" name="vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 335.820803][ T43] audit: type=1400 audit(1789843414.819:779): avc: denied { open } for pid=15601 comm="syz.2.3593" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 335.821110][ T43] audit: type=1400 audit(1789843414.819:780): avc: denied { ioctl } for pid=15601 comm="syz.2.3593" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 335.852994][T15602] dvmrp0: entered allmulticast mode [ 335.925445][ T42] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 335.946610][ T42] usb 6-1: device descriptor read/8, error -71 [ 336.193907][ T42] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 336.214269][ T42] usb 6-1: device descriptor read/8, error -71 [ 336.286737][T15618] netlink: 'syz.0.3599': attribute type 1 has an invalid length. [ 336.308600][T15618] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3599'. [ 336.310789][T15618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3599'. [ 336.318129][T15618] 8021q: adding VLAN 0 to HW filter on device bond13 [ 336.324013][ T42] usb usb6-port1: unable to enumerate USB device [ 336.648754][T15651] netlink: 'syz.0.3612': attribute type 1 has an invalid length. [ 336.659515][T15651] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3612'. [ 336.661222][T15651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3612'. [ 336.661969][T15651] 8021q: adding VLAN 0 to HW filter on device bond14 [ 336.865361][T15656] cgroup: fork rejected by pids controller in /syz0 [ 336.873869][ T25] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 337.027616][ T25] usb 7-1: not running at top speed; connect to a high speed hub [ 337.027647][ T25] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 337.028630][ T25] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 337.028671][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 337.028693][ T25] usb 7-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 337.028727][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.033243][T15649] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 337.038591][ T25] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 337.052874][ T25] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 337.055760][ T25] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 337.055824][ T25] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 337.067354][ T25] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 337.237932][ T2426] usb 7-1: USB disconnect, device number 32 [ 337.247954][ T2426] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 337.250284][ T2426] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 337.250662][ T2426] keyspan 7-1:1.0: device disconnected [ 337.302888][T15703] netlink: 'syz.0.3621': attribute type 1 has an invalid length. [ 337.330028][T15703] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3621'. [ 337.332079][T15703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3621'. [ 337.337105][T15703] 8021q: adding VLAN 0 to HW filter on device bond15 [ 337.733995][ T2426] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 337.883892][ T2426] usb 8-1: Using ep0 maxpacket: 32 [ 337.884690][ T2426] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 337.899913][ T2426] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.899940][ T2426] usb 8-1: Product: syz [ 337.899953][ T2426] usb 8-1: Manufacturer: syz [ 337.899964][ T2426] usb 8-1: SerialNumber: syz [ 337.912919][ T2426] usb 8-1: config 0 descriptor?? [ 338.138564][ T2426] usb 8-1: USB disconnect, device number 23 [ 338.434083][ T35] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 338.564018][ T35] usb 7-1: device descriptor read/64, error -71 [ 338.723323][T15779] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 338.774191][ T43] audit: type=1400 audit(1789843417.779:781): avc: denied { name_bind } for pid=15784 comm="syz.1.3658" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 338.803998][ T35] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 338.933902][ T35] usb 7-1: device descriptor read/64, error -71 [ 339.044253][ T35] usb usb7-port1: attempt power cycle [ 339.113949][ T2426] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 339.263865][ T2426] usb 6-1: Using ep0 maxpacket: 32 [ 339.264584][ T2426] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 339.267255][ T2426] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.267273][ T2426] usb 6-1: Product: syz [ 339.267284][ T2426] usb 6-1: Manufacturer: syz [ 339.267295][ T2426] usb 6-1: SerialNumber: syz [ 339.269252][ T2426] usb 6-1: config 0 descriptor?? [ 339.383896][ T35] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 339.404358][ T35] usb 7-1: device descriptor read/8, error -71 [ 339.472747][ T2426] usb 6-1: USB disconnect, device number 34 [ 339.663868][ T35] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 339.684489][ T35] usb 7-1: device descriptor read/8, error -71 [ 339.805610][ T35] usb usb7-port1: unable to enumerate USB device [ 339.911145][T15811] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 340.260788][T15825] netlink: 'syz.1.3674': attribute type 1 has an invalid length. [ 340.279214][T15825] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3674'. [ 340.281940][T15825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3674'. [ 340.283081][T15825] 8021q: adding VLAN 0 to HW filter on device bond10 [ 340.325542][ T25] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 340.482921][ T25] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 340.604262][ T25] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 340.604288][ T25] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.604304][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 340.604340][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.624689][ T25] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 340.624712][ T25] usb 8-1: Product: syz [ 340.624723][ T25] usb 8-1: Manufacturer: syz [ 340.902557][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 340.902571][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 340.904988][ T25] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 340.904999][ T25] cdc_wdm 8-1:1.0: Unknown control protocol [ 340.950380][ T5738] Bluetooth: unknown link type 162 [ 340.950429][ T5738] Bluetooth: hci4: connection err: -111 [ 341.102729][ T2426] usb 8-1: USB disconnect, device number 24 [ 341.564230][ T10] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 341.714903][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 341.715771][ T10] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 341.719910][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.719930][ T10] usb 7-1: Product: syz [ 341.719943][ T10] usb 7-1: Manufacturer: syz [ 341.719954][ T10] usb 7-1: SerialNumber: syz [ 341.722395][ T10] usb 7-1: config 0 descriptor?? [ 341.738578][ T2426] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 341.933358][ T9] usb 7-1: USB disconnect, device number 37 [ 341.936226][ T2426] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 341.937784][ T2426] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 341.937798][ T2426] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.937807][ T2426] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 341.937826][ T2426] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.938995][ T2426] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 341.939007][ T2426] usb 8-1: Product: syz [ 341.939014][ T2426] usb 8-1: Manufacturer: syz [ 341.940273][T15847] netlink: 'syz.1.3683': attribute type 1 has an invalid length. [ 341.943686][ T2426] cdc_wdm 8-1:1.0: skipping garbage [ 341.943695][ T2426] cdc_wdm 8-1:1.0: skipping garbage [ 341.977780][ T2426] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 341.977792][ T2426] cdc_wdm 8-1:1.0: Unknown control protocol [ 341.997951][T15847] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3683'. [ 342.001510][T15847] 8021q: adding VLAN 0 to HW filter on device bond11 [ 342.233408][T15855] netlink: 'syz.1.3685': attribute type 4 has an invalid length. [ 342.233424][T15855] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3685'. [ 342.237734][T15855] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 342.243691][ T43] audit: type=1400 audit(1789843421.239:782): avc: denied { ioctl } for pid=15854 comm="syz.1.3685" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 342.358939][T15861] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3687'. [ 342.358954][T15861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3687'. [ 342.398637][T15863] comedi comedi3: pcl730: I/O base address not correctly aligned [ 342.491823][ T5738] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 342.736967][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 343.359581][T15879] syz.1.3692 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 343.751865][ T10] usb 8-1: USB disconnect, device number 25 [ 343.792355][T15882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.604677][ T9] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 344.763851][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 344.764564][ T9] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 344.765485][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 344.765502][ T9] usb 6-1: config 0 has no interface number 0 [ 344.767344][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.767366][ T9] usb 6-1: Product: syz [ 344.767377][ T9] usb 6-1: Manufacturer: syz [ 344.767388][ T9] usb 6-1: SerialNumber: syz [ 344.769553][ T9] usb 6-1: config 0 descriptor?? [ 344.772944][ T9] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 344.772962][ T9] usb 6-1: selecting invalid altsetting 1 [ 344.772973][ T9] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 344.814978][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 344.815103][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 344.815122][ T9] usb 6-1: media controller created [ 344.819807][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 344.973837][ T9] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 344.973901][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 344.975265][ T9] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 344.998832][ T9] usb 6-1: USB disconnect, device number 35 [ 345.000439][T13013] udevd[13013]: setting mode of /dev/bus/usb/006/035 to 020664 failed: No such file or directory [ 345.000533][T13013] udevd[13013]: setting owner of /dev/bus/usb/006/035 to uid=0, gid=0 failed: No such file or directory [ 345.678882][T15904] ubi0: attaching mtd0 [ 345.680480][T15904] ubi0: scanning is finished [ 345.680504][T15904] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 345.738743][T15908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3704'. [ 345.817999][T15904] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 346.119419][ T5838] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 346.264116][ T5838] usb 6-1: Using ep0 maxpacket: 32 [ 346.264595][ T5838] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 346.265397][ T5838] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 346.265410][ T5838] usb 6-1: config 0 has no interface number 0 [ 346.267097][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.267109][ T5838] usb 6-1: Product: syz [ 346.267116][ T5838] usb 6-1: Manufacturer: syz [ 346.267123][ T5838] usb 6-1: SerialNumber: syz [ 346.268579][ T5838] usb 6-1: config 0 descriptor?? [ 346.270810][ T5838] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 346.270822][ T5838] usb 6-1: selecting invalid altsetting 1 [ 346.270832][ T5838] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 346.303632][ T5838] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 346.307148][ T5838] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 346.307176][ T5838] usb 6-1: media controller created [ 346.311964][ T5838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 346.330328][T15875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.390070][T15917] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 346.419343][T15921] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3710'. [ 346.477159][ T5838] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 346.477185][ T5838] zl10353_read_register: readreg error (reg=127, ret==-71) [ 346.477457][ T5838] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 346.495959][ T5838] usb 6-1: USB disconnect, device number 36 [ 346.527005][T15929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3713'. [ 346.540683][T15931] ubi0: attaching mtd0 [ 346.547056][T15931] ubi0: scanning is finished [ 346.547100][T15931] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 346.660568][T15931] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 346.808373][T15947] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 347.019326][T15951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3721'. [ 347.075888][ T42] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 347.223918][ T42] usb 8-1: Using ep0 maxpacket: 32 [ 347.224488][ T42] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 347.224519][ T42] usb 8-1: no configurations [ 347.224528][ T42] usb 8-1: can't read configurations, error -22 [ 347.338737][T15958] ubi0: attaching mtd0 [ 347.339947][T15958] ubi0: scanning is finished [ 347.339983][T15958] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 347.374042][ T42] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 347.456224][T15958] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 347.522301][T15966] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 347.534116][ T42] usb 8-1: Using ep0 maxpacket: 32 [ 347.534812][ T42] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 347.534832][ T42] usb 8-1: no configurations [ 347.534838][ T42] usb 8-1: can't read configurations, error -22 [ 347.535034][ T42] usb usb8-port1: attempt power cycle [ 347.634977][ T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 347.794366][ T9] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 347.795281][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.795303][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.795316][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 347.796625][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 347.796637][ T9] usb 6-1: Product: syz [ 347.796644][ T9] usb 6-1: Manufacturer: syz [ 347.802849][ T9] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 347.803404][ T9] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 347.803561][ T9] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 347.893906][ T42] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 347.914460][ T42] usb 8-1: Using ep0 maxpacket: 32 [ 347.914868][ T42] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 347.914888][ T42] usb 8-1: no configurations [ 347.914894][ T42] usb 8-1: can't read configurations, error -22 [ 348.005852][ T9] usb 6-1: USB disconnect, device number 37 [ 348.007910][ T9] garmin_gps 6-1:1.0: device disconnected [ 348.064171][ T42] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 348.084484][ T42] usb 8-1: Using ep0 maxpacket: 32 [ 348.084952][ T42] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 348.084973][ T42] usb 8-1: no configurations [ 348.084979][ T42] usb 8-1: can't read configurations, error -22 [ 348.085932][ T42] usb usb8-port1: unable to enumerate USB device [ 348.812633][ C2] vcan0: j1939_tp_rxtimer: 0xffff888025e29000: rx timeout, send abort [ 348.814883][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888025e29000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 348.818429][ T43] audit: type=1400 audit(1789843427.819:783): avc: denied { read } for pid=5125 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 348.818464][ T43] audit: type=1400 audit(1789843427.819:784): avc: denied { search } for pid=5125 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.818484][ T43] audit: type=1400 audit(1789843427.819:785): avc: denied { write search } for pid=5125 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.818504][ T43] audit: type=1400 audit(1789843427.819:786): avc: denied { add_name } for pid=5125 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.818524][ T43] audit: type=1400 audit(1789843427.819:787): avc: denied { create } for pid=5125 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 348.818627][ T43] audit: type=1400 audit(1789843427.819:788): avc: denied { append open } for pid=5125 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 348.818648][ T43] audit: type=1400 audit(1789843427.819:789): avc: denied { getattr } for pid=5125 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 349.103892][ T9] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 349.254336][ T9] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 349.255122][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 349.255138][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 349.256639][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.256652][ T9] usb 7-1: Product: syz [ 349.256659][ T9] usb 7-1: Manufacturer: syz [ 349.256666][ T9] usb 7-1: SerialNumber: syz [ 349.258132][ T9] usb 7-1: config 0 descriptor?? [ 349.261739][ T9] hub 7-1:0.0: bad descriptor, ignoring hub [ 349.261752][ T9] hub 7-1:0.0: probe with driver hub failed with error -5 [ 349.263320][ T9] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input9 [ 349.587977][T15935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 349.747136][ T5818] usb 7-1: USB disconnect, device number 38 [ 349.875523][T15992] netlink: 'syz.3.3737': attribute type 10 has an invalid length. [ 350.894131][ T43] audit: type=1400 audit(1789843429.899:790): avc: denied { create } for pid=16020 comm="syz.1.3748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 350.944869][T16023] 9pnet_fd: Insufficient options for proto=fd [ 351.028244][T16025] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 351.028261][T16025] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 351.029322][T16025] vhci_hcd vhci_hcd.0: Device attached [ 351.074017][ T1715] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 351.204291][ T5838] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 351.223854][ T1715] usb 8-1: Using ep0 maxpacket: 32 [ 351.224676][ T1715] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 351.224704][ T1715] usb 8-1: no configurations [ 351.224713][ T1715] usb 8-1: can't read configurations, error -22 [ 351.263899][ T25] usb 6-1: new low-speed USB device number 38 using dummy_hcd [ 351.264065][ T5838] usb 39-1: new full-speed USB device number 5 using vhci_hcd [ 351.355092][ T1715] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 351.414323][ T25] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 351.414867][ T25] usb 6-1: config 0 has no interfaces? [ 351.414884][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.416953][ T25] usb 6-1: config 0 descriptor?? [ 351.503930][ T1715] usb 8-1: Using ep0 maxpacket: 32 [ 351.504701][ T1715] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 351.504724][ T1715] usb 8-1: no configurations [ 351.504730][ T1715] usb 8-1: can't read configurations, error -22 [ 351.505226][ T1715] usb usb8-port1: attempt power cycle [ 351.621103][T16026] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 351.621350][ T12] vhci_hcd vhci_hcd.1: stop threads [ 351.621361][ T12] vhci_hcd vhci_hcd.1: release socket [ 351.621389][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 351.843880][ T1715] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 351.864567][ T1715] usb 8-1: Using ep0 maxpacket: 32 [ 351.865047][ T1715] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 351.865076][ T1715] usb 8-1: no configurations [ 351.865085][ T1715] usb 8-1: can't read configurations, error -22 [ 351.993890][ T1715] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 352.024525][ T1715] usb 8-1: Using ep0 maxpacket: 32 [ 352.024981][ T1715] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 352.025008][ T1715] usb 8-1: no configurations [ 352.025017][ T1715] usb 8-1: can't read configurations, error -22 [ 352.025420][ T1715] usb usb8-port1: unable to enumerate USB device [ 352.903385][T16029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3750'. [ 353.557336][T16003] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.578131][ T5818] usb 6-1: USB disconnect, device number 38 [ 353.722903][ T43] audit: type=1326 audit(1789843432.719:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16038 comm="syz.2.3755" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551b19e159 code=0x7ffc0000 [ 353.723149][ T43] audit: type=1326 audit(1789843432.719:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16038 comm="syz.2.3755" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f551b19ddeb code=0x7ffc0000 [ 354.184612][ T5818] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 354.254184][ T1715] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 354.344794][ T5818] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 354.345886][ T5818] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.345931][ T5818] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 354.345947][ T5818] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.347550][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 354.347568][ T5818] usb 7-1: Product: syz [ 354.347578][ T5818] usb 7-1: Manufacturer: syz [ 354.352973][ T5818] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 354.354254][ T5818] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 354.354441][ T5818] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 354.413945][ T1715] usb 8-1: Using ep0 maxpacket: 8 [ 354.414604][ T1715] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 354.415692][ T1715] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 354.415716][ T1715] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 354.415727][ T1715] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 354.415739][ T1715] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 354.415751][ T1715] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.415769][ T1715] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.553361][ T58] usb 7-1: USB disconnect, device number 39 [ 354.557687][ T58] garmin_gps 7-1:1.0: device disconnected [ 354.623055][ T1715] usb 8-1: usb_control_msg returned -32 [ 354.623078][ T1715] usbtmc 8-1:16.0: can't read capabilities [ 354.627411][ T1715] usb 8-1: USB disconnect, device number 34 [ 354.895372][ T43] kauditd_printk_skb: 29 callbacks suppressed [ 354.895390][ T43] audit: type=1400 audit(1789843433.899:822): avc: denied { create } for pid=16070 comm="syz.0.3767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 355.106640][T16075] 9pnet_fd: Insufficient options for proto=fd [ 355.189279][T16079] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 355.189296][T16079] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 355.189373][T16079] vhci_hcd vhci_hcd.0: Device attached [ 355.374110][ T58] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 355.433986][ T58] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 355.434337][ T25] usb 7-1: new low-speed USB device number 40 using dummy_hcd [ 355.594531][ T25] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 355.594989][ T25] usb 7-1: config 0 has no interfaces? [ 355.595005][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.596407][ T25] usb 7-1: config 0 descriptor?? [ 355.683935][ T1715] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 355.798019][T16080] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 355.799800][ T13] vhci_hcd vhci_hcd.2: stop threads [ 355.799817][ T13] vhci_hcd vhci_hcd.2: release socket [ 355.801476][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 355.855193][ T1715] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 355.856063][ T1715] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.856095][ T1715] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 355.856109][ T1715] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.857522][ T1715] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 355.857537][ T1715] usb 8-1: Product: syz [ 355.857546][ T1715] usb 8-1: Manufacturer: syz [ 355.871439][ T1715] garmin_gps 8-1:1.0: Garmin GPS usb/tty converter detected [ 355.872048][ T1715] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 355.893168][ T1715] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 356.069700][ T42] usb 8-1: USB disconnect, device number 35 [ 356.072377][ T42] garmin_gps 8-1:1.0: device disconnected [ 356.343950][ T5838] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 357.204519][T16053] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 357.215420][ T9] usb 7-1: USB disconnect, device number 40 [ 357.593982][ T42] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 357.745106][ T42] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 357.746238][ T42] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.746276][ T42] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 357.746294][ T42] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 357.746312][ T42] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 357.747993][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 357.748012][ T42] usb 8-1: Product: syz [ 357.748024][ T42] usb 8-1: Manufacturer: syz [ 357.752800][ T42] garmin_gps 8-1:1.0: Garmin GPS usb/tty converter detected [ 357.774622][T16135] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3791'. [ 357.785770][ T42] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 357.785941][ T42] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 357.875155][ T2426] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 357.955734][ T5819] usb 8-1: USB disconnect, device number 36 [ 357.957343][ T5819] garmin_gps 8-1:1.0: device disconnected [ 358.033879][ T2426] usb 6-1: Using ep0 maxpacket: 32 [ 358.037753][ T2426] usb 6-1: unable to get BOS descriptor or descriptor too short [ 358.037800][ T2426] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 358.038724][ T2426] usb 6-1: config 1 interface 0 has no altsetting 0 [ 358.040567][ T2426] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.040587][ T2426] usb 6-1: Product: syz [ 358.040599][ T2426] usb 6-1: Manufacturer: syz [ 358.040613][ T2426] usb 6-1: SerialNumber: syz [ 358.066199][ T42] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 358.233953][ T42] usb 7-1: Using ep0 maxpacket: 32 [ 358.234879][ T42] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 358.236446][ T42] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.236466][ T42] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 358.239499][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.239520][ T42] usb 7-1: Product: syz [ 358.239532][ T42] usb 7-1: Manufacturer: syz [ 358.239545][ T42] usb 7-1: SerialNumber: syz [ 358.242698][ T42] usb 7-1: config 0 descriptor?? [ 358.261015][ T2426] usbhid 6-1:1.0: can't add hid device: -71 [ 358.261095][ T2426] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 358.263448][ T2426] usb 6-1: USB disconnect, device number 39 [ 358.450352][ T2426] usb 7-1: USB disconnect, device number 41 [ 358.556100][ T43] audit: type=1800 audit(1789843437.559:823): pid=16141 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3794" name="file0" dev="overlay" ino=1815 res=0 errno=0 [ 358.750702][T16150] netlink: 'syz.3.3798': attribute type 1 has an invalid length. [ 358.781742][T16153] 9pnet_fd: Insufficient options for proto=fd [ 358.868408][T16157] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 358.868430][T16157] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 358.868492][T16157] vhci_hcd vhci_hcd.0: Device attached [ 359.044275][ T1715] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 359.104296][ T1715] usb 39-1: new full-speed USB device number 6 using vhci_hcd [ 359.104583][ T5838] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 359.264610][ T5838] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 359.265033][ T5838] usb 6-1: config 0 has no interfaces? [ 359.265049][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.266308][ T5838] usb 6-1: config 0 descriptor?? [ 359.468125][T16158] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 5 [ 359.468251][ T5811] vhci_hcd vhci_hcd.1: stop threads [ 359.468260][ T5811] vhci_hcd vhci_hcd.1: release socket [ 359.468287][ T5811] vhci_hcd vhci_hcd.1: disconnect device [ 359.891031][T16176] 9pnet_fd: Insufficient options for proto=fd [ 359.965055][T16178] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 359.965072][T16178] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 359.968204][T16178] vhci_hcd vhci_hcd.0: Device attached [ 360.203881][ T25] usb 7-1: new low-speed USB device number 42 using dummy_hcd [ 360.354699][ T25] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 360.355206][ T25] usb 7-1: config 0 has no interfaces? [ 360.355230][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.357393][ T25] usb 7-1: config 0 descriptor?? [ 360.560097][T16179] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 360.560364][ T5584] vhci_hcd vhci_hcd.2: stop threads [ 360.560379][ T5584] vhci_hcd vhci_hcd.2: release socket [ 360.560672][ T5584] vhci_hcd vhci_hcd.2: disconnect device [ 360.574172][T16129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 360.576096][ T25] usb 6-1: USB disconnect, device number 40 [ 360.591316][T16098] usb 7-1: USB disconnect, device number 42 [ 360.624466][ T58] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 360.715737][T16187] netlink: 'syz.3.3808': attribute type 1 has an invalid length. [ 361.447208][T16219] netlink: 'syz.0.3818': attribute type 1 has an invalid length. [ 363.739650][ C3] vcan0: j1939_tp_rxtimer: 0xffff88804c54d400: rx timeout, send abort [ 363.739767][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88804c54d400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 363.795424][T16231] 9pnet_fd: Insufficient options for proto=fd [ 363.883012][T16233] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 363.883039][T16233] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 363.883438][T16233] vhci_hcd vhci_hcd.0: Device attached [ 364.063999][ T25] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 364.086458][T16201] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.125228][T16237] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 364.125249][T16237] overlayfs: overlapping lowerdir path [ 364.130818][ T25] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 364.145340][T16237] overlayfs: overlapping lowerdir path [ 364.184172][ T1715] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 364.218015][T16244] netlink: 'syz.2.3827': attribute type 1 has an invalid length. [ 364.644097][ T5818] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 364.794444][ T5818] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 364.795236][ T5818] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.795261][ T5818] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 364.795274][ T5818] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 364.795285][ T5818] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 364.796620][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 364.796635][ T5818] usb 7-1: Product: syz [ 364.796644][ T5818] usb 7-1: Manufacturer: syz [ 364.801324][ T5818] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 364.840595][ T5818] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 364.841410][ T5818] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 365.002325][ T9] usb 7-1: USB disconnect, device number 43 [ 365.008620][ T9] garmin_gps 7-1:1.0: device disconnected [ 365.577244][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880577edc00: rx timeout, send abort [ 365.577427][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880577edc00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 365.867175][T16281] netlink: 'syz.3.3840': attribute type 1 has an invalid length. [ 366.806079][T16234] vhci_hcd: connection reset by peer [ 366.806313][ T13] vhci_hcd vhci_hcd.0: stop threads [ 366.806340][ T13] vhci_hcd vhci_hcd.0: release socket [ 366.806388][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 366.934002][ T58] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 367.084996][ T58] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 367.086030][ T58] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.086054][ T58] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 367.086065][ T58] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 367.087376][ T58] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 367.087388][ T58] usb 8-1: Product: syz [ 367.087395][ T58] usb 8-1: Manufacturer: syz [ 367.091537][T16286] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 367.092437][ T58] garmin_gps 8-1:1.0: Garmin GPS usb/tty converter detected [ 367.096775][ T58] usb 8-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 367.295269][ T9] usb 8-1: USB disconnect, device number 37 [ 367.309921][ T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 367.312980][ T9] garmin_gps 8-1:1.0: device disconnected [ 367.401000][T16258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 367.610433][ T43] audit: type=1800 audit(1789843446.609:824): pid=16309 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3852" name="file0" dev="overlay" ino=2090 res=0 errno=0 [ 367.671797][T16311] UDC core: g1: couldn't find an available UDC or it's busy [ 367.773997][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 367.929086][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 367.931101][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 367.931139][ T9] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 367.932128][ T9] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 367.932149][ T9] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 367.932165][ T9] usb 6-1: config 14 has no interface number 0 [ 367.932178][ T9] usb 6-1: config 14 has no interface number 1 [ 367.932223][ T9] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 367.932243][ T9] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 367.932263][ T9] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 367.932284][ T9] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 367.932306][ T9] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 367.932333][ T9] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 367.932356][ T9] usb 6-1: config 14 interface 57 has no altsetting 0 [ 367.932371][ T9] usb 6-1: config 14 interface 228 has no altsetting 0 [ 367.936694][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.936714][ T9] usb 6-1: Product: syz [ 367.936726][ T9] usb 6-1: Manufacturer: syz [ 367.936739][ T9] usb 6-1: SerialNumber: syz [ 368.353855][ T9] legousbtower 6-1:14.57: interrupt endpoints not found [ 368.757945][ T9] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 368.758835][ T9] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 369.245033][ T25] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 369.512456][ T58] usb 6-1: USB disconnect, device number 41 [ 369.516965][ T58] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 370.568813][ T43] audit: type=1800 audit(1789843449.569:825): pid=16346 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3862" name="file0" dev="overlay" ino=1989 res=0 errno=0 [ 370.969468][T16324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.231190][ T43] audit: type=1400 audit(1789843450.229:826): avc: denied { nlmsg_read } for pid=16364 comm="syz.3.3871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 371.286384][ T851] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 371.324351][ T2426] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 371.433916][ T851] usb 7-1: Using ep0 maxpacket: 32 [ 371.450475][ T851] usb 7-1: unable to get BOS descriptor or descriptor too short [ 371.450821][ T851] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 371.467907][ T851] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 371.468000][ T851] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 371.468090][ T851] usb 7-1: config 14 has no interface number 0 [ 371.468180][ T851] usb 7-1: config 14 has no interface number 1 [ 371.468557][ T851] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 371.468649][ T851] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 371.468742][ T851] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 371.468897][ T851] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 371.468991][ T851] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 371.469083][ T851] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.469231][ T851] usb 7-1: config 14 interface 57 has no altsetting 0 [ 371.469321][ T851] usb 7-1: config 14 interface 228 has no altsetting 0 [ 371.562490][ T2426] usb 6-1: not running at top speed; connect to a high speed hub [ 371.562677][ T2426] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 371.567740][ T851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.567794][ T851] usb 7-1: Product: syz [ 371.568129][ T851] usb 7-1: Manufacturer: syz [ 371.568467][ T851] usb 7-1: SerialNumber: syz [ 371.625211][ T2426] usb 6-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config [ 371.625551][ T2426] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 371.625589][ T2426] usb 6-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 371.625708][ T2426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.820504][ T2426] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 371.933334][ T2426] keyspan 6-1:1.0: unsupported endpoint type 0 [ 371.986810][ T2426] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 372.043288][ T2426] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 372.043496][ T2426] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 372.087911][ T2426] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 372.218689][ T2426] usb 6-1: USB disconnect, device number 42 [ 372.256932][ T851] legousbtower 7-1:14.57: interrupt endpoints not found [ 372.296107][ T2426] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 372.298544][ T2426] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 372.299043][ T2426] keyspan 6-1:1.0: device disconnected [ 372.613124][ T43] audit: type=1800 audit(1789843451.609:827): pid=16369 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3872" name="file0" dev="overlay" ino=2124 res=0 errno=0 [ 372.661544][ T851] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 372.662613][ T851] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 373.428101][ T1715] usb 7-1: USB disconnect, device number 44 [ 373.435012][ T1715] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 373.962309][T16392] 9p: Unknown Cache mode or invalid value fs [ 374.333852][ T2426] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 374.494696][ T2426] usb 7-1: not running at top speed; connect to a high speed hub [ 374.494715][ T2426] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 374.495493][ T2426] usb 7-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config [ 374.495516][ T2426] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 374.495528][ T2426] usb 7-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 374.495546][ T2426] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.500847][ T2426] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 374.501831][ T2426] keyspan 7-1:1.0: unsupported endpoint type 0 [ 374.505358][ T2426] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 374.506586][ T2426] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 374.506670][ T2426] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 374.509355][ T2426] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 374.819683][ T851] usb 7-1: USB disconnect, device number 45 [ 374.827845][ T851] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 374.831377][ T851] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 374.831804][ T851] keyspan 7-1:1.0: device disconnected [ 375.800414][T16374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.876748][ T43] audit: type=1400 audit(1789843454.879:828): avc: denied { append } for pid=16413 comm="syz.3.3887" name="frontend0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 375.878503][T16414] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 375.899611][T16414] rtrs_client L2101: : Failed to resolve address, err: -ENODEV [ 375.900033][T16414] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 375.904069][ T1715] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 375.949967][ T43] audit: type=1400 audit(1789843454.949:829): avc: denied { write } for pid=16416 comm="syz.3.3889" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 375.952126][ T43] audit: type=1400 audit(1789843454.949:830): avc: denied { append } for pid=16416 comm="syz.3.3889" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 376.007842][T16419] 9p: Unknown Cache mode or invalid value fscac [ 376.054803][ T1715] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 376.055730][ T1715] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 376.055750][ T1715] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 376.055765][ T1715] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 376.055797][ T1715] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 376.055817][ T1715] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 376.057188][ T1715] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 376.057205][ T1715] usb 7-1: Product: syz [ 376.057247][ T1715] usb 7-1: Manufacturer: syz [ 376.064635][ T1715] cdc_wdm 7-1:1.0: skipping garbage [ 376.064649][ T1715] cdc_wdm 7-1:1.0: skipping garbage [ 376.076080][T16423] syzkaller0: left promiscuous mode [ 376.076093][T16423] syzkaller0: left allmulticast mode [ 376.078872][ T1715] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 376.078889][ T1715] cdc_wdm 7-1:1.0: Unknown control protocol [ 376.106095][ T43] audit: type=1400 audit(1789843455.109:831): avc: denied { write } for pid=16424 comm="syz.3.3893" name="strings" dev="configfs" ino=46240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 376.106832][ T43] audit: type=1400 audit(1789843455.109:832): avc: denied { write } for pid=16424 comm="syz.3.3893" name="functions" dev="configfs" ino=46238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 376.108966][ T43] audit: type=1400 audit(1789843455.109:833): avc: denied { write } for pid=16424 comm="syz.3.3893" name="c.1" dev="configfs" ino=46243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 376.110991][ T43] audit: type=1400 audit(1789843455.109:834): avc: denied { write } for pid=16424 comm="syz.3.3893" name="c.1" dev="configfs" ino=46243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 376.112464][T16425] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 376.112548][T16425] udc dummy_udc.0: failed to start g1: -19 [ 376.112889][T16425] UDC core: g1: couldn't find an available UDC or it's busy [ 376.263274][ C3] wdm_int_callback: 5 callbacks suppressed [ 376.263290][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 376.263299][ C3] wdm_int_callback: 5 callbacks suppressed [ 376.263305][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 376.263493][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 376.263503][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 376.263685][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 376.263694][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 376.263701][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 376.263714][ T2426] usb 7-1: USB disconnect, device number 46 [ 376.304459][ T9] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 376.454582][ T9] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 376.455522][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.455586][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 376.455607][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 376.457046][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 376.457065][ T9] usb 6-1: Product: syz [ 376.457077][ T9] usb 6-1: Manufacturer: syz [ 376.460368][T16421] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 376.462114][ T9] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 376.466155][ T9] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 376.668363][ T9] usb 6-1: USB disconnect, device number 43 [ 376.671783][ T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 376.672053][ T9] garmin_gps 6-1:1.0: device disconnected [ 377.095413][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805c771c00: rx timeout, send abort [ 377.095608][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c771c00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 377.132765][ T43] audit: type=1800 audit(1789843456.129:835): pid=16438 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3897" name="file0" dev="overlay" ino=2032 res=0 errno=0 [ 377.299477][T16450] syzkaller0: left promiscuous mode [ 377.299491][T16450] syzkaller0: left allmulticast mode [ 377.509436][ T43] audit: type=1400 audit(1789843456.509:836): avc: denied { mounton } for pid=16455 comm="syz.1.3904" path="/388/file0" dev="tmpfs" ino=2186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 377.547474][ T43] audit: type=1400 audit(1789843456.549:837): avc: denied { write } for pid=16457 comm="syz.1.3905" name="functions" dev="configfs" ino=46238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 377.637073][T16460] ubi0: attaching mtd0 [ 377.640401][T16460] ubi0: scanning is finished [ 377.640427][T16460] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 377.650637][T16460] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 377.974611][ T9] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 378.124599][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 378.125504][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 378.125523][ T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 378.125537][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 378.125569][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 378.125595][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 378.126969][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 378.126986][ T9] usb 6-1: Product: syz [ 378.126998][ T9] usb 6-1: Manufacturer: syz [ 378.131473][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 378.131482][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 378.135052][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 378.135067][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 378.333048][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 378.333064][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 378.333241][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 378.333251][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 378.333429][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 378.333438][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 378.333617][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 378.333626][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 378.333856][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 378.333866][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 378.334042][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 378.334051][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 378.334143][ T9] usb 6-1: USB disconnect, device number 44 [ 378.334228][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 378.334237][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 378.334244][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 378.356840][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.286634][T16429] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 379.315014][ T1715] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 379.351006][T16466] overlayfs: failed to resolve './file1': -2 [ 379.451056][T16478] netlink: 'syz.3.3913': attribute type 1 has an invalid length. [ 379.467431][ T1715] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 379.468269][ T1715] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.468293][ T1715] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 379.468305][ T1715] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.469475][ T1715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 379.469487][ T1715] usb 6-1: Product: syz [ 379.469494][ T1715] usb 6-1: Manufacturer: syz [ 379.491569][T16464] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 379.505652][ T1715] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 379.508748][ T1715] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 379.705027][ T851] usb 6-1: USB disconnect, device number 45 [ 379.709625][ T851] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 379.709892][ T851] garmin_gps 6-1:1.0: device disconnected [ 379.733983][ T5818] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 379.884452][ T5818] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 379.885387][ T5818] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 379.885400][ T5818] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 379.885409][ T5818] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 379.885428][ T5818] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 379.885440][ T5818] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 379.886586][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 379.886598][ T5818] usb 7-1: Product: syz [ 379.886605][ T5818] usb 7-1: Manufacturer: syz [ 379.889663][ T5818] cdc_wdm 7-1:1.0: skipping garbage [ 379.889672][ T5818] cdc_wdm 7-1:1.0: skipping garbage [ 379.891757][ T5818] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 379.891766][ T5818] cdc_wdm 7-1:1.0: Unknown control protocol [ 380.091993][ T5818] usb 7-1: USB disconnect, device number 47 [ 380.092127][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 380.235837][T16495] overlayfs: failed to resolve './file1': -2 [ 380.371217][T16500] ubi0: attaching mtd0 [ 380.375650][T16500] ubi0: scanning is finished [ 380.375681][T16500] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 380.445666][T16500] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 380.532334][T16510] netlink: 'syz.1.3925': attribute type 1 has an invalid length. [ 380.884082][ T25] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 381.034337][ T25] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 381.035114][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.035137][ T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 381.035148][ T25] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.036309][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 381.036321][ T25] usb 6-1: Product: syz [ 381.036328][ T25] usb 6-1: Manufacturer: syz [ 381.038047][T16516] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 381.039131][ T25] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 381.041238][ T25] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 381.241803][ T25] usb 6-1: USB disconnect, device number 46 [ 381.244228][ T25] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 381.244727][ T25] garmin_gps 6-1:1.0: device disconnected [ 381.273873][ T2426] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 381.433843][ T2426] usb 7-1: Using ep0 maxpacket: 32 [ 381.435570][ T2426] usb 7-1: unable to get BOS descriptor or descriptor too short [ 381.435600][ T2426] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 381.436341][ T2426] usb 7-1: config 1 interface 0 has no altsetting 0 [ 381.437849][ T2426] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.437861][ T2426] usb 7-1: Product: syz [ 381.437868][ T2426] usb 7-1: Manufacturer: syz [ 381.437875][ T2426] usb 7-1: SerialNumber: syz [ 381.648978][ T2426] usbhid 7-1:1.0: can't add hid device: -71 [ 381.649031][ T2426] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 381.650569][ T2426] usb 7-1: USB disconnect, device number 48 [ 381.817884][T16526] 9pnet_fd: Insufficient options for proto=fd [ 381.889792][T16528] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 381.889818][T16528] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 381.890182][T16528] vhci_hcd vhci_hcd.0: Device attached [ 382.063900][ T1715] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 382.123896][ T25] usb 6-1: new low-speed USB device number 47 using dummy_hcd [ 382.124038][ T1715] usb 39-1: new full-speed USB device number 7 using vhci_hcd [ 382.268627][T16538] netlink: 'syz.2.3935': attribute type 1 has an invalid length. [ 382.276705][ T25] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 382.277307][ T25] usb 6-1: config 0 has no interfaces? [ 382.277323][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.278909][ T25] usb 6-1: config 0 descriptor?? [ 382.483875][T16529] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 6 [ 382.485332][T15884] vhci_hcd vhci_hcd.1: stop threads [ 382.485351][T15884] vhci_hcd vhci_hcd.1: release socket [ 382.485395][T15884] vhci_hcd vhci_hcd.1: disconnect device [ 382.584058][T16487] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 382.593966][ T5818] usb 6-1: USB disconnect, device number 47 [ 383.133852][ T2426] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 383.152808][T16559] netlink: 'syz.1.3944': attribute type 1 has an invalid length. [ 383.190237][T16559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3944'. [ 383.284070][ T2426] usb 8-1: Using ep0 maxpacket: 32 [ 383.287071][ T2426] usb 8-1: unable to get BOS descriptor or descriptor too short [ 383.287110][ T2426] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 383.290906][ T2426] usb 8-1: config 1 interface 0 has no altsetting 0 [ 383.294292][ T2426] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.294312][ T2426] usb 8-1: Product: syz [ 383.294324][ T2426] usb 8-1: Manufacturer: syz [ 383.294336][ T2426] usb 8-1: SerialNumber: syz [ 383.506970][ T2426] usbhid 8-1:1.0: can't add hid device: -71 [ 383.507024][ T2426] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 383.510666][ T2426] usb 8-1: USB disconnect, device number 38 [ 384.284166][T16098] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 384.454487][T16098] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 384.455378][T16098] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.455400][T16098] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 384.455410][T16098] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.456684][T16098] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 384.456696][T16098] usb 8-1: Product: syz [ 384.456703][T16098] usb 8-1: Manufacturer: syz [ 384.459673][T16098] garmin_gps 8-1:1.0: Garmin GPS usb/tty converter detected [ 384.460848][T16098] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 384.460995][T16098] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 384.596223][T16590] netlink: 'syz.1.3956': attribute type 1 has an invalid length. [ 384.608062][T16590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3956'. [ 384.668578][T16098] usb 8-1: USB disconnect, device number 39 [ 384.672639][T16098] garmin_gps 8-1:1.0: device disconnected [ 385.198063][T16603] overlayfs: failed to resolve './file0': -2 [ 385.573892][ T58] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 385.723910][ T58] usb 8-1: Using ep0 maxpacket: 32 [ 385.725395][ T58] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 385.728193][ T58] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.728206][ T58] usb 8-1: Product: syz [ 385.728213][ T58] usb 8-1: Manufacturer: syz [ 385.728220][ T58] usb 8-1: SerialNumber: syz [ 385.730010][ T58] usb 8-1: config 0 descriptor?? [ 385.832841][T16615] netlink: 'syz.0.3966': attribute type 1 has an invalid length. [ 385.844528][T16615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3966'. [ 385.911830][T16618] 9p: Unknown Cache mode or invalid value fs [ 385.935120][ T58] usb 8-1: USB disconnect, device number 40 [ 386.233362][T16566] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 386.297529][T16625] overlayfs: failed to resolve './file0': -2 [ 386.466409][T16636] netlink: 'syz.3.3975': attribute type 1 has an invalid length. [ 386.479847][T16636] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3975'. [ 386.540696][T16639] 9p: Unknown Cache mode or invalid value fs [ 386.624203][ T2426] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 386.625282][ T851] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 386.764321][ T2426] usb 7-1: device descriptor read/64, error -71 [ 386.785682][ T851] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 386.787040][ T851] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.787077][ T851] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 386.787095][ T851] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.788488][ T851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 386.788506][ T851] usb 6-1: Product: syz [ 386.788517][ T851] usb 6-1: Manufacturer: syz [ 386.791250][T16634] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 386.792945][ T851] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 386.805058][ T851] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 386.998206][ T42] usb 6-1: USB disconnect, device number 48 [ 387.003545][ T42] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 387.004424][ T42] garmin_gps 6-1:1.0: device disconnected [ 387.023949][ T2426] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 387.153876][ T2426] usb 7-1: device descriptor read/64, error -71 [ 387.223962][ T1715] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 387.264105][ T2426] usb usb7-port1: attempt power cycle [ 387.541578][T16651] overlayfs: failed to resolve './file0': -2 [ 387.576036][T16653] fuse: Bad value for 'fd' [ 387.576326][T16653] fuse: Bad value for 'fd' [ 387.624044][ T2426] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 387.645310][ T2426] usb 7-1: device descriptor read/8, error -71 [ 387.696022][T16661] netlink: 'syz.1.3984': attribute type 1 has an invalid length. [ 387.717962][T16661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3984'. [ 387.805473][T16664] 9p: Unknown Cache mode or invalid value fs [ 387.893951][ T2426] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 387.914466][ T2426] usb 7-1: device descriptor read/8, error -71 [ 388.034295][ T2426] usb usb7-port1: unable to enumerate USB device [ 388.223978][ T42] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 388.374684][ T42] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 388.375539][ T42] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.375576][ T42] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 388.375595][ T42] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.376951][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 388.376971][ T42] usb 6-1: Product: syz [ 388.376982][ T42] usb 6-1: Manufacturer: syz [ 388.379818][T16670] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 388.381058][ T42] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 388.383408][ T42] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 388.584009][ T2426] usb 6-1: USB disconnect, device number 49 [ 388.589608][ T2426] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 388.589882][ T2426] garmin_gps 6-1:1.0: device disconnected [ 389.248849][T16682] netlink: 'syz.1.3993': attribute type 1 has an invalid length. [ 389.262217][T16682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3993'. [ 389.706828][T16645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.724219][T16705] netlink: 'syz.2.4002': attribute type 1 has an invalid length. [ 389.758735][T16705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4002'. [ 390.014199][ T9] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 390.154349][ T9] usb 8-1: device descriptor read/64, error -71 [ 390.295185][ T5818] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 390.413947][ T9] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 390.427392][ T5818] usb 7-1: device descriptor read/64, error -71 [ 390.543960][ T9] usb 8-1: device descriptor read/64, error -71 [ 390.654702][ T9] usb usb8-port1: attempt power cycle [ 390.664180][ T5818] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 390.795172][ T5818] usb 7-1: device descriptor read/64, error -71 [ 390.904586][ T5818] usb usb7-port1: attempt power cycle [ 391.003962][ T9] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 391.024641][ T9] usb 8-1: device descriptor read/8, error -71 [ 391.243852][ T5818] usb 7-1: new full-speed USB device number 55 using dummy_hcd [ 391.263992][ T9] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 391.264572][ T5818] usb 7-1: device descriptor read/8, error -71 [ 391.285007][ T9] usb 8-1: device descriptor read/8, error -71 [ 391.394241][ T9] usb usb8-port1: unable to enumerate USB device [ 391.513941][ T5818] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 391.534592][ T5818] usb 7-1: device descriptor read/8, error -71 [ 391.654147][ T5818] usb usb7-port1: unable to enumerate USB device [ 392.052114][T16732] netlink: 'syz.0.4012': attribute type 1 has an invalid length. [ 392.072887][T16732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4012'. [ 392.898130][T16752] 9p: Unknown Cache mode or invalid value fscach [ 392.946468][T16754] netlink: 'syz.3.4021': attribute type 1 has an invalid length. [ 392.973871][T16754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4021'. [ 393.218654][T16764] 9pnet_fd: Insufficient options for proto=fd [ 393.298255][T16768] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 393.298280][T16768] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 393.299494][T16768] vhci_hcd vhci_hcd.0: Device attached [ 393.328650][T16726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.364416][ T851] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 393.488220][ T2426] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 393.514343][ T851] usb 8-1: Using ep0 maxpacket: 32 [ 393.514970][ T851] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 393.517766][ T851] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 393.517779][ T851] usb 8-1: config 0 has no interface number 0 [ 393.519360][ T851] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.519371][ T851] usb 8-1: Product: syz [ 393.519379][ T851] usb 8-1: Manufacturer: syz [ 393.519386][ T851] usb 8-1: SerialNumber: syz [ 393.520874][ T851] usb 8-1: config 0 descriptor?? [ 393.525879][ T851] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 393.525900][ T851] usb 8-1: selecting invalid altsetting 1 [ 393.525912][ T851] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 393.538920][ T851] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 393.539175][ T851] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 393.539209][ T851] usb 8-1: media controller created [ 393.549362][ T851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 393.553943][ T42] usb 7-1: new low-speed USB device number 57 using dummy_hcd [ 393.554102][ T2426] usb 41-1: new full-speed USB device number 5 using vhci_hcd [ 393.715178][ T42] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 393.715591][ T42] usb 7-1: config 0 has no interfaces? [ 393.715607][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.717645][ T42] usb 7-1: config 0 descriptor?? [ 393.724860][ T851] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 393.724901][ T851] zl10353_read_register: readreg error (reg=127, ret==-71) [ 393.725225][ T851] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 393.755676][ T851] usb 8-1: USB disconnect, device number 45 [ 393.853923][ T5849] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 393.919400][T16769] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 5 [ 393.919922][ T42] usb 7-1: USB disconnect, device number 57 [ 393.920138][T14321] vhci_hcd vhci_hcd.2: stop threads [ 393.920212][T14321] vhci_hcd vhci_hcd.2: release socket [ 393.921227][T14321] vhci_hcd vhci_hcd.2: disconnect device [ 394.003972][ T5849] usb 6-1: Using ep0 maxpacket: 32 [ 394.005983][ T5849] usb 6-1: unable to get BOS descriptor or descriptor too short [ 394.006023][ T5849] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 394.006937][ T5849] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 394.006956][ T5849] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 394.006972][ T5849] usb 6-1: config 14 has no interface number 0 [ 394.006985][ T5849] usb 6-1: config 14 has no interface number 1 [ 394.007042][ T5849] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 394.007061][ T5849] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 394.007082][ T5849] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 394.007104][ T5849] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 394.007126][ T5849] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 394.007145][ T5849] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 394.007165][ T5849] usb 6-1: config 14 interface 57 has no altsetting 0 [ 394.007180][ T5849] usb 6-1: config 14 interface 228 has no altsetting 0 [ 394.009042][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.009060][ T5849] usb 6-1: Product: syz [ 394.009073][ T5849] usb 6-1: Manufacturer: syz [ 394.009084][ T5849] usb 6-1: SerialNumber: syz [ 394.262398][T16780] netlink: 'syz.3.4030': attribute type 1 has an invalid length. [ 394.279569][T16780] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4030'. [ 394.417435][ T5849] legousbtower 6-1:14.57: interrupt endpoints not found [ 394.584468][ T42] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 394.713867][ T42] usb 8-1: device descriptor read/64, error -71 [ 394.818211][ T5849] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 394.819284][ T5849] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 394.953925][ T42] usb 8-1: new full-speed USB device number 47 using dummy_hcd [ 395.083975][ T42] usb 8-1: device descriptor read/64, error -71 [ 395.194209][ T42] usb usb8-port1: attempt power cycle [ 395.533915][ T42] usb 8-1: new full-speed USB device number 48 using dummy_hcd [ 395.557050][ T42] usb 8-1: device descriptor read/8, error -71 [ 395.573897][T16098] usb 6-1: USB disconnect, device number 50 [ 395.581198][T16098] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 395.793859][ T42] usb 8-1: new full-speed USB device number 49 using dummy_hcd [ 395.814490][ T42] usb 8-1: device descriptor read/8, error -71 [ 395.924593][ T42] usb usb8-port1: unable to enumerate USB device [ 396.110626][T16803] 9p: Unknown Cache mode or invalid value fscach [ 396.321316][T16810] netlink: 'syz.0.4039': attribute type 1 has an invalid length. [ 396.341938][T16810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4039'. [ 396.442474][T16816] 9pnet_fd: Insufficient options for proto=fd [ 396.517544][T16818] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 396.517560][T16818] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 396.517914][T16818] vhci_hcd vhci_hcd.0: Device attached [ 396.704155][ T851] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 396.764065][ T851] usb 39-1: new full-speed USB device number 8 using vhci_hcd [ 396.764148][ T42] usb 6-1: new low-speed USB device number 51 using dummy_hcd [ 396.924374][ T42] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 396.924844][ T42] usb 6-1: config 0 has no interfaces? [ 396.924861][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.926217][ T42] usb 6-1: config 0 descriptor?? [ 397.127744][T16819] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 7 [ 397.129349][ T12] vhci_hcd vhci_hcd.1: stop threads [ 397.129360][ T12] vhci_hcd vhci_hcd.1: release socket [ 397.129417][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 397.483260][T16825] ubi0: attaching mtd0 [ 397.484303][T16825] ubi0: scanning is finished [ 397.484327][T16825] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 397.501209][T16825] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 398.462908][T16797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.464777][ T42] usb 6-1: USB disconnect, device number 51 [ 398.577586][T16838] netlink: 'syz.3.4049': attribute type 1 has an invalid length. [ 398.597706][T16838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4049'. [ 398.665565][ T2426] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 398.763233][T16845] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 398.763599][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 398.763609][ T43] audit: type=1400 audit(1789843477.759:843): avc: denied { write } for pid=16844 comm="syz.2.4051" name="context-info" dev="tracefs" ino=5951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 398.817440][T16845] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 398.951092][T16855] ubi0: attaching mtd0 [ 398.952427][T16855] ubi0: scanning is finished [ 398.952450][T16855] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 399.029136][T16855] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 399.103915][ T42] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 399.239288][ T43] audit: type=1400 audit(1789843478.239:844): avc: denied { map } for pid=16866 comm="syz.3.4058" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 399.241644][ T43] audit: type=1400 audit(1789843478.239:845): avc: denied { call } for pid=16866 comm="syz.3.4058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 399.264611][ T42] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 399.265588][ T42] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 399.265602][ T42] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.265611][ T42] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 399.265631][ T42] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.265645][ T42] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.269031][ T42] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 399.269045][ T42] usb 7-1: Product: syz [ 399.269052][ T42] usb 7-1: Manufacturer: syz [ 399.278530][ T42] cdc_wdm 7-1:1.0: skipping garbage [ 399.278540][ T42] cdc_wdm 7-1:1.0: skipping garbage [ 399.279399][ T42] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 399.279408][ T42] cdc_wdm 7-1:1.0: Unknown control protocol [ 399.311882][T16870] netlink: 'syz.3.4059': attribute type 1 has an invalid length. [ 399.326996][T16870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4059'. [ 399.328262][T16870] 8021q: adding VLAN 0 to HW filter on device bond20 [ 399.359089][T16873] device-mapper: ioctl: Invalid ioctl structure: name m, dev f801 [ 399.398471][ T43] audit: type=1400 audit(1789843478.399:846): avc: denied { listen } for pid=16875 comm="syz.3.4061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 399.399152][T16876] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 399.399165][T16876] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 399.453397][T16880] 9pnet_fd: Insufficient options for proto=fd [ 399.479903][T16854] cdc_wdm 7-1:1.0: Error submitting int urb - -90 [ 399.480834][ T42] usb 7-1: USB disconnect, device number 58 [ 399.526551][T16882] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 399.526568][T16882] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 399.526621][T16882] vhci_hcd vhci_hcd.0: Device attached [ 399.704958][ T1715] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 399.764451][ T1715] usb 43-1: new full-speed USB device number 4 using vhci_hcd [ 399.764663][ T58] usb 8-1: new low-speed USB device number 50 using dummy_hcd [ 399.806579][T16889] ubi0: attaching mtd0 [ 399.807428][T16889] ubi0: scanning is finished [ 399.807488][T16889] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 399.820100][T16889] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 399.915405][ T58] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 399.916024][ T58] usb 8-1: config 0 has no interfaces? [ 399.916041][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.917411][ T58] usb 8-1: config 0 descriptor?? [ 400.119495][T16883] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 400.119795][T14943] vhci_hcd vhci_hcd.3: stop threads [ 400.119810][T14943] vhci_hcd vhci_hcd.3: release socket [ 400.119889][T14943] vhci_hcd vhci_hcd.3: disconnect device [ 400.227493][T16896] netlink: 'syz.2.4068': attribute type 1 has an invalid length. [ 400.239433][T16896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4068'. [ 400.244308][T16896] 8021q: adding VLAN 0 to HW filter on device bond17 [ 400.869535][T16905] syzkaller0: left promiscuous mode [ 400.869556][T16905] syzkaller0: left allmulticast mode [ 400.928550][T16909] overlayfs: missing 'lowerdir' [ 401.052970][T16912] ubi0: attaching mtd0 [ 401.057622][T16912] ubi0: scanning is finished [ 401.057665][T16912] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 401.077730][T16912] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 401.447086][T16922] netlink: 'syz.2.4077': attribute type 1 has an invalid length. [ 401.462960][T16922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4077'. [ 401.471048][T16922] 8021q: adding VLAN 0 to HW filter on device bond18 [ 401.888717][ T851] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 402.188064][T16861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.215876][ T42] usb 8-1: USB disconnect, device number 50 [ 402.469632][T16936] syzkaller0: left promiscuous mode [ 402.469646][T16936] syzkaller0: left allmulticast mode [ 402.513273][T16939] overlayfs: missing 'lowerdir' [ 402.568637][T16941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4083'. [ 402.757275][ T43] audit: type=1400 audit(1789843481.759:847): avc: denied { read write } for pid=16945 comm="syz.3.4085" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 402.757505][ T43] audit: type=1400 audit(1789843481.759:848): avc: denied { open } for pid=16945 comm="syz.3.4085" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 402.761471][T16946] CacheFiles: Failed to register: -95 [ 402.782658][T16947] ubi0: attaching mtd0 [ 402.783528][T16947] ubi0: scanning is finished [ 402.783550][T16947] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 402.855519][T16947] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 403.604169][T16967] overlayfs: missing 'workdir' [ 403.689806][T16970] 9pnet_fd: Insufficient options for proto=fd [ 403.796297][T16974] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 403.796314][T16974] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 403.796363][T16974] vhci_hcd vhci_hcd.0: Device attached [ 403.984239][ T851] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 404.020855][ T43] audit: type=1400 audit(1789843483.019:849): avc: denied { write } for pid=16984 comm="syz.1.4097" path="socket:[55037]" dev="sockfs" ino=55037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 404.053972][ T851] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 404.059726][T16986] ubi0: attaching mtd0 [ 404.061040][T16986] ubi0: scanning is finished [ 404.061076][T16986] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 404.075722][ T43] audit: type=1400 audit(1789843483.079:850): avc: denied { read } for pid=16984 comm="syz.1.4097" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 404.076013][ T43] audit: type=1400 audit(1789843483.079:851): avc: denied { open } for pid=16984 comm="syz.1.4097" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 404.148075][T16986] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 404.249180][ T43] audit: type=1400 audit(1789843483.249:852): avc: denied { view } for pid=16988 comm="syz.3.4098" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 404.308871][ T43] audit: type=1400 audit(1789843483.309:853): avc: denied { write } for pid=16988 comm="syz.3.4098" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 404.324537][ T43] audit: type=1400 audit(1789843483.329:854): avc: denied { write } for pid=16988 comm="syz.3.4098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 404.904844][ T1715] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 405.203955][ T5818] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 405.263445][T17001] configfs-gadget.g1 gadget.32: HOST MAC e6:da:fd:6b:3d:74 [ 405.263463][T17001] configfs-gadget.g1 gadget.32: MAC 52:31:a6:8d:e4:bd [ 405.263986][T17001] ================================================================== [ 405.263994][T17001] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 405.264016][T17001] Read of size 128 at addr ffffffff9bcbae20 by task syz.3.4103/17001 [ 405.264025][T17001] [ 405.264031][T17001] CPU: 3 UID: 0 PID: 17001 Comm: syz.3.4103 Not tainted syzkaller #0 PREEMPT(full) [ 405.264045][T17001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 405.264052][T17001] Call Trace: [ 405.264056][T17001] [ 405.264061][T17001] dump_stack_lvl+0x100/0x190 [ 405.264078][T17001] print_report+0x13d/0x4b0 [ 405.264095][T17001] ? __virt_addr_valid+0x239/0x430 [ 405.264108][T17001] ? usb_copy_descriptors+0x18d/0x320 [ 405.264124][T17001] kasan_report+0xdf/0x1c0 [ 405.264139][T17001] ? usb_copy_descriptors+0x18d/0x320 [ 405.264157][T17001] kasan_check_range+0x10f/0x1e0 [ 405.264181][T17001] __asan_memcpy+0x23/0x60 [ 405.264192][T17001] usb_copy_descriptors+0x18d/0x320 [ 405.264210][T17001] usb_assign_descriptors+0xd2/0x470 [ 405.264228][T17001] f_audio_bind+0x243a/0x3950 [ 405.264243][T17001] ? __pfx_f_audio_bind+0x10/0x10 [ 405.264255][T17001] usb_add_function+0x219/0x890 [ 405.264273][T17001] configfs_composite_bind+0xd83/0x1960 [ 405.264294][T17001] gadget_bind_driver+0x28c/0xbf0 [ 405.264308][T17001] ? __pfx_gadget_bind_driver+0x10/0x10 [ 405.264322][T17001] really_probe+0x241/0xa60 [ 405.264335][T17001] __driver_probe_device+0x210/0x460 [ 405.264348][T17001] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 405.264365][T17001] driver_probe_device+0x4a/0x140 [ 405.264378][T17001] __driver_attach+0x21f/0x5b0 [ 405.264392][T17001] ? __pfx___driver_attach+0x10/0x10 [ 405.264405][T17001] bus_for_each_dev+0x13e/0x1d0 [ 405.264422][T17001] ? __pfx_bus_for_each_dev+0x10/0x10 [ 405.264439][T17001] ? bus_add_driver+0x2b5/0x5b0 [ 405.264451][T17001] bus_add_driver+0x305/0x5b0 [ 405.264463][T17001] driver_register+0x1e2/0x360 [ 405.264477][T17001] usb_gadget_register_driver_owner+0x132/0x210 [ 405.264491][T17001] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 405.264508][T17001] configfs_write_iter+0x302/0x4e0 [ 405.264527][T17001] vfs_write+0x6af/0x1050 [ 405.264538][T17001] ? __pfx_configfs_write_iter+0x10/0x10 [ 405.264556][T17001] ? __pfx_vfs_write+0x10/0x10 [ 405.264566][T17001] ? find_held_lock+0x2b/0x80 [ 405.264585][T17001] ksys_write+0x12a/0x250 [ 405.264596][T17001] ? __pfx_ksys_write+0x10/0x10 [ 405.264609][T17001] do_syscall_64+0x123/0x790 [ 405.264625][T17001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.264636][T17001] RIP: 0033:0x7f2d6a39e159 [ 405.264646][T17001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.264658][T17001] RSP: 002b:00007f2d6b1f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 405.264670][T17001] RAX: ffffffffffffffda RBX: 00007f2d6a625fa0 RCX: 00007f2d6a39e159 [ 405.264677][T17001] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000005 [ 405.264684][T17001] RBP: 00007f2d6a43506b R08: 0000000000000000 R09: 0000000000000000 [ 405.264690][T17001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.264697][T17001] R13: 00007f2d6a626038 R14: 00007f2d6a625fa0 R15: 00007ffe82f85738 [ 405.264707][T17001] [ 405.264711][T17001] [ 405.264713][T17001] The buggy address belongs to the variable: [ 405.264717][T17001] ac_header_desc+0x0/0x40 [ 405.264728][T17001] [ 405.264730][T17001] The buggy address belongs to the physical page: [ 405.264736][T17001] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1bcba [ 405.264745][T17001] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 405.264760][T17001] raw: 00fff00000002000 ffffea00006f2e88 ffffea00006f2e88 0000000000000000 [ 405.264769][T17001] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 405.264775][T17001] page dumped because: kasan: bad access detected [ 405.264781][T17001] page_owner info is not present (never set?) [ 405.264785][T17001] [ 405.264788][T17001] Memory state around the buggy address: [ 405.264794][T17001] ffffffff9bcbad00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.264803][T17001] ffffffff9bcbad80: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 405.264811][T17001] >ffffffff9bcbae00: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 405.264817][T17001] ^ [ 405.264823][T17001] ffffffff9bcbae80: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 405.264831][T17001] ffffffff9bcbaf00: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 405.264837][T17001] ================================================================== [ 405.264843][T17001] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 405.413517][T17001] CPU: 3 UID: 0 PID: 17001 Comm: syz.3.4103 Not tainted syzkaller #0 PREEMPT(full) [ 405.417005][T17001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 405.421012][T17001] Call Trace: [ 405.422402][T17001] [ 405.423351][T17001] dump_stack_lvl+0x100/0x190 [ 405.424837][T17001] vpanic+0x553/0x970 [ 405.426338][T17001] ? __pfx_vpanic+0x10/0x10 [ 405.427791][T17001] ? __pfx_vprintk_emit+0x10/0x10 [ 405.429374][T17001] ? usb_copy_descriptors+0x18d/0x320 [ 405.431055][T17001] panic+0xd1/0xe0 [ 405.432270][T17001] ? __pfx_panic+0x10/0x10 [ 405.433673][T17001] ? usb_copy_descriptors+0x18d/0x320 [ 405.435383][T17001] check_panic_on_warn.cold+0x19/0x34 [ 405.437070][T17001] end_report.part.0+0x3a/0x90 [ 405.438574][T17001] kasan_report.cold+0xe/0x18 [ 405.440067][T17001] ? usb_copy_descriptors+0x18d/0x320 [ 405.441750][T17001] kasan_check_range+0x10f/0x1e0 [ 405.443461][T17001] __asan_memcpy+0x23/0x60 [ 405.444964][T17001] usb_copy_descriptors+0x18d/0x320 [ 405.446552][T17001] usb_assign_descriptors+0xd2/0x470 [ 405.448200][T17001] f_audio_bind+0x243a/0x3950 [ 405.449641][T17001] ? __pfx_f_audio_bind+0x10/0x10 [ 405.451159][T17001] usb_add_function+0x219/0x890 [ 405.452654][T17001] configfs_composite_bind+0xd83/0x1960 [ 405.454360][T17001] gadget_bind_driver+0x28c/0xbf0 [ 405.456174][T17001] ? __pfx_gadget_bind_driver+0x10/0x10 [ 405.457903][T17001] really_probe+0x241/0xa60 [ 405.459338][T17001] __driver_probe_device+0x210/0x460 [ 405.461097][T17001] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 405.462973][T17001] driver_probe_device+0x4a/0x140 [ 405.464578][T17001] __driver_attach+0x21f/0x5b0 [ 405.466146][T17001] ? __pfx___driver_attach+0x10/0x10 [ 405.467834][T17001] bus_for_each_dev+0x13e/0x1d0 [ 405.469386][T17001] ? __pfx_bus_for_each_dev+0x10/0x10 [ 405.471080][T17001] ? bus_add_driver+0x2b5/0x5b0 [ 405.472639][T17001] bus_add_driver+0x305/0x5b0 [ 405.474126][T17001] driver_register+0x1e2/0x360 [ 405.475644][T17001] usb_gadget_register_driver_owner+0x132/0x210 [ 405.477599][T17001] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 405.479362][T17001] configfs_write_iter+0x302/0x4e0 [ 405.480978][T17001] vfs_write+0x6af/0x1050 [ 405.482393][T17001] ? __pfx_configfs_write_iter+0x10/0x10 [ 405.484172][T17001] ? __pfx_vfs_write+0x10/0x10 [ 405.485761][T17001] ? find_held_lock+0x2b/0x80 [ 405.487271][T17001] ksys_write+0x12a/0x250 [ 405.488643][T17001] ? __pfx_ksys_write+0x10/0x10 [ 405.490170][T17001] do_syscall_64+0x123/0x790 [ 405.491601][T17001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.493402][T17001] RIP: 0033:0x7f2d6a39e159 [ 405.494781][T17001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.500681][T17001] RSP: 002b:00007f2d6b1f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 405.503282][T17001] RAX: ffffffffffffffda RBX: 00007f2d6a625fa0 RCX: 00007f2d6a39e159 [ 405.505731][T17001] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000005 [ 405.508200][T17001] RBP: 00007f2d6a43506b R08: 0000000000000000 R09: 0000000000000000 [ 405.510588][T17001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.512957][T17001] R13: 00007f2d6a626038 R14: 00007f2d6a625fa0 R15: 00007ffe82f85738 [ 405.515355][T17001] [ 405.516936][T17001] Kernel Offset: disabled [ 405.518288][T17001] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:40:25 Registers: info registers vcpu 0 CPU#0 RAX=000000000053bea7 RBX=ffffffff8ea91580 RCX=ffffffff8bd15185 RDX=0000000000000001 RSI=ffffffff8e38c97b RDI=ffffffff8c623480 RBP=fffffbfff1d522b0 RSP=ffffffff8ea07cf0 R8 =0000000000000001 R9 =ffffed100d4867bd R10=ffff88806a433deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bd136bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b56000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9143f87780 CR3=000000006029c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f736e6f69746365 6e6e6f632f657375 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcfec9efc6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcfec9efc6 00007ffcfec9efcc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f914403564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f914403568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91440357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9144035680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801f6bcb00 RSI=ffffffff81b6be9e RDI=ffff88801f6bcb00 RBP=0000000000000001 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=0000000000000000 RIP=ffffffff81b6be9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c56000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b331feff8 CR3=000000000eb96000 CR4=00350ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 327a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc077d2cc6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc077d2cc6 00007ffc077d2ccc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f551b23564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f551b23568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f551b2357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f551b235680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffc90006460000 RBX=1ffff92000894e12 RCX=0000000000000001 RDX=1ffff110202fb2b8 RSI=ffffffff870e89ea RDI=ffff888023f30000 RBP=ffff8881017d8000 RSP=ffffc900044a7048 R8 =0000000000000003 R9 =0000000000000001 R10=0000000000000002 R11=0000000000000000 R12=ffff8881017d9694 R13=ffff8881017dbaf0 R14=ffff8881017d8ec0 R15=0000000000000000 RIP=ffffffff870e8a14 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f657d913780 ffffffff 00c00000 GS =0000 ffff8880d5d56000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005604cff788f0 CR3=00000000343d3000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000000000007 Opmask02=0000000001000037 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000014 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005604cff7cf00 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f657dae7b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005604cff5c0e0 00005604cffa9c20 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005604cff5f920 00005604cff5f9d0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000010049 0000000103040000 b9ab2b686aaed81c 00020010000005d0 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000110005 0000000000100005 000003e8000d0008 00006f6c00030007 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005604cfc85b8d 000000000d4f5851 0000000d004e5850 5c535b5413495853 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e71f9050deee4b88 00000005604cff7d 0000000000000041 000000306273752f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001001400000007 fd80400ad41b7f0e 6aaed7ca00020014 0000004800000300 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 0000576d0000576d ffffffffffffffff 00060014dc1888a1 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65da257900000000 000080fe00010014 00000008fd80400a d41b7f0e6aaed7ca ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 0000008000080008 000057ec000057ec ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060014ca7d9dc6 5e8626a400000000 000080fe00010014 00000007fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65200a6165655f20 343420656d20665f 640a696220333420 655f20323400006e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b0fa95 RDI=ffffffff9bc6eea0 RBP=ffffffff9bc6ee60 RSP=ffffc900042e6f40 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3966666666666552 R12=0000000000000000 R13=0000000000000036 R14=0000000000000008 R15=ffffc900042e7258 RIP=ffffffff85b0fabf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2d6b1f56c0 ffffffff 00c00000 GS =0000 ffff8880d5e56000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2d6b1d3ff8 CR3=000000004a605000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000000002b Opmask01=0000000000017fff Opmask02=00000000ffff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000014 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005604cff5c0e0 00005604cffa9c20 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005604cff5f920 00005604cff5f9d0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d6f726620796c64 657463657078656e 7520646574697865 2073257325732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 484a5743055c4941 40514640555d404b 50054140514c5d40 0556005600560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001001400000007 fd80400ad41b7f0e 6aaed7ca00020014 0000004800000300 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 0000576d0000576d ffffffffffffffff 00060014dc1888a1 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65da257900000000 000080fe00010014 00000008fd80400a d41b7f0e6aaed7ca ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 0000008000080008 000057ec000057ec ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060014ca7d9dc6 5e8626a400000000 000080fe00010014 00000007fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65200a6165655f20 343420656d20665f 640a696220333420 655f20323400006e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000