last executing test programs: 10.972027967s ago: executing program 1 (id=782): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) io_setup(0x6, &(0x7f00000003c0)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r1], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r3, r2, r3], &(0x7f00000003c0), 0x0, 0x2}) 10.81948091s ago: executing program 1 (id=785): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 7.780181889s ago: executing program 1 (id=819): mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/drivers/usbip-host\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000100)='match_busid\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='del 1', 0x5) 7.779851603s ago: executing program 1 (id=820): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a300000"], 0xfc}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) close(0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe68, 0x2, [@TCA_MATCHALL_ACT={0xe64, 0x2, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x1, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe9c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r4, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r3, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e1232a8a371039dbee9", 0xfa}], 0x1}, 0x20000885) 2.749521141s ago: executing program 1 (id=834): setns(0xc9, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40840}, 0x0) 2.678112868s ago: executing program 1 (id=836): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 1.029431176s ago: executing program 0 (id=878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003340)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff2, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x81, 0x7fffffff, 0x5, 0x4}, 0x7, 0xd, [{0x5, 0x2, 0x0, 0x8000, 0x4, 0x90}]}, [{0x4, 0xc, 0x1, 0x0, 0x8, 0xa517}, {0x9, 0x6283, 0x4, 0x7ff, 0x6, 0x5}, {0x7fff, 0x9, 0x1, 0x7, 0x680, 0x80}, {0x6, 0xe62, 0x0, 0x10, 0x7, 0x7f}, {0x1, 0x0, 0x8, 0x2, 0x0, 0x487}, {0x6235, 0x4, 0x640c, 0x7, 0x3, 0x7}, {0xa10, 0x6, 0x7, 0x7, 0x3, 0xefe3}, {0x9, 0x3, 0x400, 0xff, 0x8, 0xd}, {0x5, 0x6fb, 0x6, 0xc, 0x7, 0x8}, {0x0, 0x8001, 0x1, 0x101, 0x7}, {0x6, 0x1, 0xfa5b, 0x9, 0x78d7, 0x4}, {0x9, 0x7, 0x6, 0x6, 0x1, 0x4}, {0x8, 0x4, 0xfffffffa, 0x10000, 0xff}, {0x7, 0x1, 0xbf5, 0xd42, 0xfbe, 0x10000}, {0xffffffff, 0x1, 0xe, 0x5, 0x7, 0x2}, {0xe8d, 0x9, 0x3, 0x2, 0x2, 0x5}, {0x7fa, 0x2a, 0x1, 0x3, 0x5, 0x1}, {0x4, 0x5, 0x0, 0x1, 0x9, 0x9}, {0x81, 0x2, 0x5547, 0x7, 0x4, 0x3}, {0x5, 0x4, 0x65b97795, 0x9, 0x4, 0x4d}, {0xaea, 0x83b2, 0x7, 0xa, 0x3, 0x1}, {0xff, 0x3ff, 0x0, 0x6, 0x100, 0xc0000000}, {0x3ff, 0x9, 0xf, 0x1000}, {0x40, 0x7e23, 0x1, 0x10000, 0x9, 0x8}, {0xffffffff, 0x17, 0x9, 0x7fffffff, 0x59, 0x80000001}, {0x8, 0x8, 0x0, 0x9, 0x2, 0x9}, {0x6, 0x80000001, 0x5, 0x80000001, 0x6, 0x1}, {0x3, 0x1, 0x9, 0x8ab6, 0x7, 0xc}, {0x80, 0x9, 0x2, 0x5, 0x9, 0x1}, {0x83ae, 0xf, 0x5, 0x2, 0xffff, 0xffffffac}, {0x31, 0x5, 0x80000000, 0x80, 0xc3}, {0x7, 0x5, 0x8000, 0x7, 0x8, 0x3}, {0x1, 0xfffffff7, 0x8, 0x5, 0xffffff90, 0x101}, {0x8, 0x3, 0x4, 0x2, 0x4, 0x1ff}, {0x6, 0xd, 0x2, 0x3f, 0xfff, 0x2}, {0x8001, 0x2, 0x0, 0x5fe2, 0xb80, 0xebc2}, {0x6, 0x80, 0xb, 0x59, 0x8, 0x5}, {0x91, 0x0, 0xba, 0x8080, 0xe, 0xfffff4e2}, {0x0, 0x38e3, 0x7, 0xffffffff, 0xdf, 0x79}, {0x5, 0x80f, 0x9, 0x6, 0x80e, 0x4}, {0x200, 0x6, 0x5, 0xd3, 0x0, 0x7}, {0x3, 0x8, 0xf, 0x8, 0x5, 0xfffffff7}, {0x9, 0x0, 0x9, 0x80, 0x9, 0x3}, {0x1, 0x81, 0x401, 0x98b, 0x2, 0xe}, {0x1, 0x8, 0x3ff, 0x2, 0x200, 0x7}, {0x3, 0x5, 0xc, 0xe9f, 0x3, 0x4}, {0x6, 0x890, 0x8, 0x1ff, 0xff, 0xf579}, {0x1, 0x3, 0x6, 0x80, 0x0, 0x7ff}, {0x5, 0x7, 0x1, 0x1000, 0x4642, 0x10000}, {0x80, 0x8, 0xfffffff7, 0xfff, 0x23, 0x5ee6}, {0x7f, 0x4, 0x24, 0x9, 0x1, 0x1}, {0xbc, 0x5, 0x1, 0x1ff, 0x3, 0x5291}, {0xc, 0x4, 0x4, 0x2, 0x4, 0x2}, {0x9, 0x8, 0x3, 0x0, 0x0, 0xfffffff7}, {0x8, 0x4, 0x9, 0x7, 0x8, 0x3000000}, {0x2, 0x9, 0x3ff, 0x7f, 0xffffffff, 0x4772}, {0xa, 0x5, 0x56e, 0xd0000000, 0x60, 0x8}, {0x1, 0x0, 0x4, 0x3, 0xb56, 0x3}, {0xe, 0x3, 0xfffffff7, 0x8, 0xfffffffc, 0x401}, {0x29, 0x1, 0x3, 0x7, 0x9, 0x69}, {0xe, 0x77, 0x779, 0x2, 0x4, 0x81}, {0x6, 0x6, 0xbe, 0x1, 0x8, 0x3}, {0x9, 0x6, 0x9, 0x3, 0x10001, 0x9}, {0x5cc, 0x8000, 0x3, 0x3b55, 0x3, 0x4}, {0x9, 0x1, 0x0, 0x2, 0x4, 0x9}, {0x9, 0x4000, 0x3, 0x80000000, 0x10001, 0x2}, {0xfe, 0x4, 0x3, 0x1, 0xdd, 0x2}, {0x7, 0x7, 0x7fff, 0x8001, 0xfffffffd, 0x4}, {0xa95, 0xd, 0x1, 0x7, 0x10000, 0x3}, {0x8702, 0x81, 0x2, 0x400, 0x0, 0x5}, {0x2, 0x7f, 0x3ff, 0x2, 0x9262, 0x4}, {0xd255, 0x0, 0x1, 0x4, 0x1, 0xf}, {0x0, 0x3, 0x8, 0xffff, 0xf161, 0x2}, {0x7f, 0xd82, 0xd4d, 0x7, 0x80000001}, {0x1, 0x7, 0x9, 0x4, 0x10000, 0x7}, {0x65, 0x6, 0x4, 0x3, 0x4e7, 0xfffff952}, {0x1, 0x2b3, 0xfd, 0x10001, 0x5, 0x401}, {0x6, 0x600, 0xb9c, 0xf8b, 0x7}, {0x1, 0x3, 0x7, 0x892a4e08, 0x8b4, 0x5}, {0xffffffff, 0xfffffff8, 0x4be, 0x15, 0x80000001, 0x6}, {0x6, 0x37fc, 0x4, 0x3ff, 0x5, 0x5}, {0x5, 0x8, 0x6, 0x7fff, 0xfffffffc, 0x10}, {0x7, 0x8, 0x728, 0x3, 0x2, 0xb}, {0xfffffff7, 0x1, 0x7, 0x33a, 0x4c, 0xfc000000}, {0x3720, 0xffff0000, 0x4, 0x100, 0x7, 0x80000000}, {0xc, 0x7f, 0x0, 0x222d, 0x4, 0xa7fc}, {0x4, 0xe4bf, 0x6, 0x9, 0x2}, {0x2, 0x3, 0x6, 0x6, 0x6, 0xd}, {0xfffffffb, 0x7920, 0x4, 0x7, 0x1, 0x3}, {0xf05, 0x1, 0x1, 0x9, 0x4, 0x1}, {0x2, 0x5, 0x8000, 0xffffffff, 0xfffffff0, 0x1}, {0x3, 0x2, 0x1, 0x5, 0x7, 0x1}, {0xfffffffc, 0x5, 0x0, 0x5, 0x6, 0x6}, {0x2, 0x65, 0xf4ea, 0x7fffffff, 0x8, 0x4}, {0x8001, 0x7, 0x9, 0xfff, 0x6, 0x7f}, {0xb5b5, 0xffffffff, 0x40, 0x2, 0xfffff535, 0x9}, {0xf79, 0x0, 0x40, 0x0, 0xffff, 0x200}, {0x278424d5, 0xffffffff, 0x5, 0x7, 0x3f3b5b77, 0x9}, {0x5, 0xb, 0x1, 0x7, 0x0, 0x2}, {0x1, 0x101, 0x7f, 0x0, 0xc81, 0x3}, {0x10000, 0x9d3, 0x7, 0x6, 0x3, 0xbd}, {0x9, 0x7, 0xb33e, 0xa, 0x6, 0x6}, {0xafd6, 0x19a0, 0x2, 0xdaa, 0x401, 0x8}, {0x2, 0x9, 0x8, 0x200, 0x3, 0xa5a}, {0x5, 0x11, 0x6, 0x1, 0x4, 0xfffffff9}, {0x81, 0x4, 0x4, 0xffffb72c, 0x1, 0x2}, {0x1, 0xffff, 0xd, 0xb, 0x9, 0x5}, {0x240, 0xd3db, 0xffff8000, 0x409, 0x80000001, 0x401}, {0x8, 0x2, 0x4, 0x7ff, 0x754200, 0x2}, {0x7, 0x8, 0x2, 0x0, 0x5, 0x10001}, {0x7b7, 0x5, 0xffff, 0x0, 0x10001, 0x9}, {0x5, 0x4, 0x9, 0x10, 0x8e, 0x8e}, {0x16, 0x4, 0x4, 0x2, 0x3, 0x9}, {0x7, 0x4, 0x8, 0x10001, 0x8000, 0x1}, {0x1d62, 0x4, 0x9, 0xf3a, 0x7fffffff, 0x9ad}, {0x7, 0xe4, 0x6, 0x9e, 0x7, 0xf059}, {0x3, 0x6, 0x8, 0x1400000, 0xed9, 0x6}, {0xfffffffb, 0x6, 0x10000, 0x7, 0x0, 0x6}, {0xe06, 0x8, 0x3, 0x7, 0x10001, 0x3}, {0x101, 0x8, 0x101, 0x30, 0x4, 0x6}, {0x2, 0x7fff, 0x2d, 0x0, 0x4, 0x2}, {0x0, 0x2, 0xf, 0x1, 0x80, 0xc}, {0x0, 0x6, 0x4, 0xad, 0x40, 0x3ff}, {0x1000, 0x4, 0x1, 0x6, 0x4}, {0xe38, 0x5, 0x5, 0x3, 0x3, 0x4}, {0x1, 0xff, 0x6, 0x41fb, 0x200, 0x200}, {0x6, 0x55460a17, 0x54, 0x9, 0x6, 0x5}, {0x401, 0x10, 0x4, 0x74c8bacd, 0x5, 0x6}], [{0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x3}, {}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x6}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x3}, {0x1}, {0x5}, {0x1, 0x83b0069cb76b49f3}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x1}, {0x4}, {0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0xd779dfac818b8296, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x4, 0x1}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000006125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000022c0)="02db0b9ef1cafd", 0x7}], 0x2}, 0x4005) 918.779258ms ago: executing program 0 (id=879): setns(0xc9, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 918.361547ms ago: executing program 0 (id=880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x5c}}, 0x0) 859.639843ms ago: executing program 0 (id=881): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r5, r4, r5], &(0x7f00000003c0), 0x0, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 809.458049ms ago: executing program 0 (id=882): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) io_setup(0x6, &(0x7f00000003c0)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r1], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r3, r2, r3], &(0x7f00000003c0), 0x0, 0x2}) 750.363912ms ago: executing program 3 (id=884): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a300000"], 0xfc}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) close(0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_pedit={0x48, 0x1, 0x0, 0x0, {{0xa}, {0x1c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r4, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r3, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e1232a8a371039dbee9", 0xfa}], 0x1}, 0x20000885) 700.645152ms ago: executing program 0 (id=885): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@arm64={0xce, 0x9, 0x82, '\x00', 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 620.684835ms ago: executing program 3 (id=886): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debugfs/dri/1/Virtual-1/edid_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000500), 0x0) 620.038632ms ago: executing program 3 (id=887): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003340)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff2, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x81, 0x7fffffff, 0x5, 0x4}, 0x7, 0xd, [{0x5, 0x2, 0x0, 0x8000, 0x4, 0x90}]}, [{0x4, 0xc, 0x1, 0x0, 0x8, 0xa517}, {0x9, 0x6283, 0x4, 0x7ff, 0x6, 0x5}, {0x7fff, 0x9, 0x1, 0x7, 0x680, 0x80}, {0x6, 0xe62, 0x0, 0x10, 0x7, 0x7f}, {0x1, 0x0, 0x8, 0x2, 0x0, 0x487}, {0x6235, 0x4, 0x640c, 0x7, 0x3, 0x7}, {0xa10, 0x6, 0x7, 0x7, 0x3, 0xefe3}, {0x9, 0x3, 0x400, 0xff, 0x8, 0xd}, {0x5, 0x6fb, 0x6, 0xc, 0x7, 0x8}, {0x0, 0x8001, 0x1, 0x101, 0x7}, {0x6, 0x1, 0xfa5b, 0x9, 0x78d7, 0x4}, {0x9, 0x7, 0x6, 0x6, 0x1, 0x4}, {0x8, 0x4, 0xfffffffa, 0x10000, 0xff}, {0x7, 0x1, 0xbf5, 0xd42, 0xfbe, 0x10000}, {0xffffffff, 0x1, 0xe, 0x5, 0x7, 0x2}, {0xe8d, 0x9, 0x3, 0x2, 0x2, 0x5}, {0x7fa, 0x2a, 0x1, 0x3, 0x5, 0x1}, {0x4, 0x5, 0x0, 0x1, 0x9, 0x9}, {0x81, 0x2, 0x5547, 0x7, 0x4, 0x3}, {0x5, 0x4, 0x65b97795, 0x9, 0x4, 0x4d}, {0xaea, 0x83b2, 0x7, 0xa, 0x3, 0x1}, {0xff, 0x3ff, 0x0, 0x6, 0x100, 0xc0000000}, {0x3ff, 0x9, 0xf, 0x1000}, {0x40, 0x7e23, 0x1, 0x10000, 0x9, 0x8}, {0xffffffff, 0x17, 0x9, 0x7fffffff, 0x59, 0x80000001}, {0x8, 0x8, 0x0, 0x9, 0x2, 0x9}, {0x6, 0x80000001, 0x5, 0x80000001, 0x6, 0x1}, {0x3, 0x1, 0x9, 0x8ab6, 0x7, 0xc}, {0x80, 0x9, 0x2, 0x5, 0x9, 0x1}, {0x83ae, 0xf, 0x5, 0x2, 0xffff, 0xffffffac}, {0x31, 0x5, 0x80000000, 0x80, 0xc3}, {0x7, 0x5, 0x8000, 0x7, 0x8, 0x3}, {0x1, 0xfffffff7, 0x8, 0x5, 0xffffff90, 0x101}, {0x8, 0x3, 0x4, 0x2, 0x4, 0x1ff}, {0x6, 0xd, 0x2, 0x3f, 0xfff, 0x2}, {0x8001, 0x2, 0x0, 0x5fe2, 0xb80, 0xebc2}, {0x6, 0x80, 0xb, 0x59, 0x8, 0x5}, {0x91, 0x0, 0xba, 0x8080, 0xe, 0xfffff4e2}, {0x0, 0x38e3, 0x7, 0xffffffff, 0xdf, 0x79}, {0x5, 0x80f, 0x9, 0x6, 0x80e, 0x4}, {0x200, 0x6, 0x5, 0xd3, 0x0, 0x7}, {0x3, 0x8, 0xf, 0x8, 0x5, 0xfffffff7}, {0x9, 0x0, 0x9, 0x80, 0x9, 0x3}, {0x1, 0x81, 0x401, 0x98b, 0x2, 0xe}, {0x1, 0x8, 0x3ff, 0x2, 0x200, 0x7}, {0x3, 0x5, 0xc, 0xe9f, 0x3, 0x4}, {0x6, 0x890, 0x8, 0x1ff, 0xff, 0xf579}, {0x1, 0x3, 0x6, 0x80, 0x0, 0x7ff}, {0x5, 0x7, 0x1, 0x1000, 0x4642, 0x10000}, {0x80, 0x8, 0xfffffff7, 0xfff, 0x23, 0x5ee6}, {0x7f, 0x4, 0x24, 0x9, 0x1, 0x1}, {0xbc, 0x5, 0x1, 0x1ff, 0x3, 0x5291}, {0xc, 0x4, 0x4, 0x2, 0x4, 0x2}, {0x9, 0x8, 0x3, 0x0, 0x0, 0xfffffff7}, {0x8, 0x4, 0x9, 0x7, 0x8, 0x3000000}, {0x2, 0x9, 0x3ff, 0x7f, 0xffffffff, 0x4772}, {0xa, 0x5, 0x56e, 0xd0000000, 0x60, 0x8}, {0x1, 0x0, 0x4, 0x3, 0xb56, 0x3}, {0xe, 0x3, 0xfffffff7, 0x8, 0xfffffffc, 0x401}, {0x29, 0x1, 0x3, 0x7, 0x9, 0x69}, {0xe, 0x77, 0x779, 0x2, 0x4, 0x81}, {0x6, 0x6, 0xbe, 0x1, 0x8, 0x3}, {0x9, 0x6, 0x9, 0x3, 0x10001, 0x9}, {0x5cc, 0x8000, 0x3, 0x3b55, 0x3, 0x4}, {0x9, 0x1, 0x0, 0x2, 0x4, 0x9}, {0x9, 0x4000, 0x3, 0x80000000, 0x10001, 0x2}, {0xfe, 0x4, 0x3, 0x1, 0xdd, 0x2}, {0x7, 0x7, 0x7fff, 0x8001, 0xfffffffd, 0x4}, {0xa95, 0xd, 0x1, 0x7, 0x10000, 0x3}, {0x8702, 0x81, 0x2, 0x400, 0x0, 0x5}, {0x2, 0x7f, 0x3ff, 0x2, 0x9262, 0x4}, {0xd255, 0x0, 0x1, 0x4, 0x1, 0xf}, {0x0, 0x3, 0x8, 0xffff, 0xf161, 0x2}, {0x7f, 0xd82, 0xd4d, 0x7, 0x80000001}, {0x1, 0x7, 0x9, 0x4, 0x10000, 0x7}, {0x65, 0x6, 0x4, 0x3, 0x4e7, 0xfffff952}, {0x1, 0x2b3, 0xfd, 0x10001, 0x5, 0x401}, {0x6, 0x600, 0xb9c, 0xf8b, 0x7}, {0x1, 0x3, 0x7, 0x892a4e08, 0x8b4, 0x5}, {0xffffffff, 0xfffffff8, 0x4be, 0x15, 0x80000001, 0x6}, {0x6, 0x37fc, 0x4, 0x3ff, 0x5, 0x5}, {0x5, 0x8, 0x6, 0x7fff, 0xfffffffc, 0x10}, {0x7, 0x8, 0x728, 0x3, 0x2, 0xb}, {0xfffffff7, 0x1, 0x7, 0x33a, 0x4c, 0xfc000000}, {0x3720, 0xffff0000, 0x4, 0x100, 0x7, 0x80000000}, {0xc, 0x7f, 0x0, 0x222d, 0x4, 0xa7fc}, {0x4, 0xe4bf, 0x6, 0x9, 0x2}, {0x2, 0x3, 0x6, 0x6, 0x6, 0xd}, {0xfffffffb, 0x7920, 0x4, 0x7, 0x1, 0x3}, {0xf05, 0x1, 0x1, 0x9, 0x4, 0x1}, {0x2, 0x5, 0x8000, 0xffffffff, 0xfffffff0, 0x1}, {0x3, 0x2, 0x1, 0x5, 0x7, 0x1}, {0xfffffffc, 0x5, 0x0, 0x5, 0x6, 0x6}, {0x2, 0x65, 0xf4ea, 0x7fffffff, 0x8, 0x4}, {0x8001, 0x7, 0x9, 0xfff, 0x6, 0x7f}, {0xb5b5, 0xffffffff, 0x40, 0x2, 0xfffff535, 0x9}, {0xf79, 0x0, 0x40, 0x0, 0xffff, 0x200}, {0x278424d5, 0xffffffff, 0x5, 0x7, 0x3f3b5b77, 0x9}, {0x5, 0xb, 0x1, 0x7, 0x0, 0x2}, {0x1, 0x101, 0x7f, 0x0, 0xc81, 0x3}, {0x10000, 0x9d3, 0x7, 0x6, 0x3, 0xbd}, {0x9, 0x7, 0xb33e, 0xa, 0x6, 0x6}, {0xafd6, 0x19a0, 0x2, 0xdaa, 0x401, 0x8}, {0x2, 0x9, 0x8, 0x200, 0x3, 0xa5a}, {0x5, 0x11, 0x6, 0x1, 0x4, 0xfffffff9}, {0x81, 0x4, 0x4, 0xffffb72c, 0x1, 0x2}, {0x1, 0xffff, 0xd, 0xb, 0x9, 0x5}, {0x240, 0xd3db, 0xffff8000, 0x409, 0x80000001, 0x401}, {0x8, 0x2, 0x4, 0x7ff, 0x754200, 0x2}, {0x7, 0x8, 0x2, 0x0, 0x5, 0x10001}, {0x7b7, 0x5, 0xffff, 0x0, 0x10001, 0x9}, {0x5, 0x4, 0x9, 0x10, 0x8e, 0x8e}, {0x16, 0x4, 0x4, 0x2, 0x3, 0x9}, {0x7, 0x4, 0x8, 0x10001, 0x8000, 0x1}, {0x1d62, 0x4, 0x9, 0xf3a, 0x7fffffff, 0x9ad}, {0x7, 0xe4, 0x6, 0x9e, 0x7, 0xf059}, {0x3, 0x6, 0x8, 0x1400000, 0xed9, 0x6}, {0xfffffffb, 0x6, 0x10000, 0x7, 0x0, 0x6}, {0xe06, 0x8, 0x3, 0x7, 0x10001, 0x3}, {0x101, 0x8, 0x101, 0x30, 0x4, 0x6}, {0x2, 0x7fff, 0x2d, 0x0, 0x4, 0x2}, {0x0, 0x2, 0xf, 0x1, 0x80, 0xc}, {0x0, 0x6, 0x4, 0xad, 0x40, 0x3ff}, {0x1000, 0x4, 0x1, 0x6, 0x4}, {0xe38, 0x5, 0x5, 0x3, 0x3, 0x4}, {0x1, 0xff, 0x6, 0x41fb, 0x200, 0x200}, {0x6, 0x55460a17, 0x54, 0x9, 0x6, 0x5}, {0x401, 0x10, 0x4, 0x74c8bacd, 0x5, 0x6}], [{0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x3}, {}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x6}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x3}, {0x1}, {0x5}, {0x1, 0x83b0069cb76b49f3}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x1}, {0x4}, {0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0xd779dfac818b8296, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x4, 0x1}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000006125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000022c0)="02db0b9ef1cafd", 0x7}], 0x2}, 0x4005) 500.262431ms ago: executing program 3 (id=888): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200002f, 0x10012, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) mprotect(&(0x7f000026c000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 448.385059ms ago: executing program 3 (id=889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x74}}, 0x0) 390.564831ms ago: executing program 3 (id=891): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x3, 'hsr0\x00', {0x5}}) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) syz_io_uring_setup(0x3168, &(0x7f0000000000)={0x0, 0xcbe1, 0x100, 0x2, 0x2cd}, &(0x7f0000000180), &(0x7f00000001c0), 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0xb7, 0x18, 0xd3, 0x40, 0x8ca, 0x2016, 0xf7ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x5, 0x50, 0xf9, "", [{{0x9, 0x4, 0x4, 0x1, 0x0, 0xdc, 0xc2, 0x85, 0x9}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x28040680) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000001c0)) 170.571534ms ago: executing program 2 (id=895): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debugfs/dri/1/Virtual-1/edid_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000500), 0x0) 169.926231ms ago: executing program 2 (id=896): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003340)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff2, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x81, 0x7fffffff, 0x5, 0x4}, 0x7, 0xd, [{0x5, 0x2, 0x0, 0x8000, 0x4, 0x90}]}, [{0x4, 0xc, 0x1, 0x0, 0x8, 0xa517}, {0x9, 0x6283, 0x4, 0x7ff, 0x6, 0x5}, {0x7fff, 0x9, 0x1, 0x7, 0x680, 0x80}, {0x6, 0xe62, 0x0, 0x10, 0x7, 0x7f}, {0x1, 0x0, 0x8, 0x2, 0x0, 0x487}, {0x6235, 0x4, 0x640c, 0x7, 0x3, 0x7}, {0xa10, 0x6, 0x7, 0x7, 0x3, 0xefe3}, {0x9, 0x3, 0x400, 0xff, 0x8, 0xd}, {0x5, 0x6fb, 0x6, 0xc, 0x7, 0x8}, {0x0, 0x8001, 0x1, 0x101, 0x7}, {0x6, 0x1, 0xfa5b, 0x9, 0x78d7, 0x4}, {0x9, 0x7, 0x6, 0x6, 0x1, 0x4}, {0x8, 0x4, 0xfffffffa, 0x10000, 0xff}, {0x7, 0x1, 0xbf5, 0xd42, 0xfbe, 0x10000}, {0xffffffff, 0x1, 0xe, 0x5, 0x7, 0x2}, {0xe8d, 0x9, 0x3, 0x2, 0x2, 0x5}, {0x7fa, 0x2a, 0x1, 0x3, 0x5, 0x1}, {0x4, 0x5, 0x0, 0x1, 0x9, 0x9}, {0x81, 0x2, 0x5547, 0x7, 0x4, 0x3}, {0x5, 0x4, 0x65b97795, 0x9, 0x4, 0x4d}, {0xaea, 0x83b2, 0x7, 0xa, 0x3, 0x1}, {0xff, 0x3ff, 0x0, 0x6, 0x100, 0xc0000000}, {0x3ff, 0x9, 0xf, 0x1000}, {0x40, 0x7e23, 0x1, 0x10000, 0x9, 0x8}, {0xffffffff, 0x17, 0x9, 0x7fffffff, 0x59, 0x80000001}, {0x8, 0x8, 0x0, 0x9, 0x2, 0x9}, {0x6, 0x80000001, 0x5, 0x80000001, 0x6, 0x1}, {0x3, 0x1, 0x9, 0x8ab6, 0x7, 0xc}, {0x80, 0x9, 0x2, 0x5, 0x9, 0x1}, {0x83ae, 0xf, 0x5, 0x2, 0xffff, 0xffffffac}, {0x31, 0x5, 0x80000000, 0x80, 0xc3}, {0x7, 0x5, 0x8000, 0x7, 0x8, 0x3}, {0x1, 0xfffffff7, 0x8, 0x5, 0xffffff90, 0x101}, {0x8, 0x3, 0x4, 0x2, 0x4, 0x1ff}, {0x6, 0xd, 0x2, 0x3f, 0xfff, 0x2}, {0x8001, 0x2, 0x0, 0x5fe2, 0xb80, 0xebc2}, {0x6, 0x80, 0xb, 0x59, 0x8, 0x5}, {0x91, 0x0, 0xba, 0x8080, 0xe, 0xfffff4e2}, {0x0, 0x38e3, 0x7, 0xffffffff, 0xdf, 0x79}, {0x5, 0x80f, 0x9, 0x6, 0x80e, 0x4}, {0x200, 0x6, 0x5, 0xd3, 0x0, 0x7}, {0x3, 0x8, 0xf, 0x8, 0x5, 0xfffffff7}, {0x9, 0x0, 0x9, 0x80, 0x9, 0x3}, {0x1, 0x81, 0x401, 0x98b, 0x2, 0xe}, {0x1, 0x8, 0x3ff, 0x2, 0x200, 0x7}, {0x3, 0x5, 0xc, 0xe9f, 0x3, 0x4}, {0x6, 0x890, 0x8, 0x1ff, 0xff, 0xf579}, {0x1, 0x3, 0x6, 0x80, 0x0, 0x7ff}, {0x5, 0x7, 0x1, 0x1000, 0x4642, 0x10000}, {0x80, 0x8, 0xfffffff7, 0xfff, 0x23, 0x5ee6}, {0x7f, 0x4, 0x24, 0x9, 0x1, 0x1}, {0xbc, 0x5, 0x1, 0x1ff, 0x3, 0x5291}, {0xc, 0x4, 0x4, 0x2, 0x4, 0x2}, {0x9, 0x8, 0x3, 0x0, 0x0, 0xfffffff7}, {0x8, 0x4, 0x9, 0x7, 0x8, 0x3000000}, {0x2, 0x9, 0x3ff, 0x7f, 0xffffffff, 0x4772}, {0xa, 0x5, 0x56e, 0xd0000000, 0x60, 0x8}, {0x1, 0x0, 0x4, 0x3, 0xb56, 0x3}, {0xe, 0x3, 0xfffffff7, 0x8, 0xfffffffc, 0x401}, {0x29, 0x1, 0x3, 0x7, 0x9, 0x69}, {0xe, 0x77, 0x779, 0x2, 0x4, 0x81}, {0x6, 0x6, 0xbe, 0x1, 0x8, 0x3}, {0x9, 0x6, 0x9, 0x3, 0x10001, 0x9}, {0x5cc, 0x8000, 0x3, 0x3b55, 0x3, 0x4}, {0x9, 0x1, 0x0, 0x2, 0x4, 0x9}, {0x9, 0x4000, 0x3, 0x80000000, 0x10001, 0x2}, {0xfe, 0x4, 0x3, 0x1, 0xdd, 0x2}, {0x7, 0x7, 0x7fff, 0x8001, 0xfffffffd, 0x4}, {0xa95, 0xd, 0x1, 0x7, 0x10000, 0x3}, {0x8702, 0x81, 0x2, 0x400, 0x0, 0x5}, {0x2, 0x7f, 0x3ff, 0x2, 0x9262, 0x4}, {0xd255, 0x0, 0x1, 0x4, 0x1, 0xf}, {0x0, 0x3, 0x8, 0xffff, 0xf161, 0x2}, {0x7f, 0xd82, 0xd4d, 0x7, 0x80000001}, {0x1, 0x7, 0x9, 0x4, 0x10000, 0x7}, {0x65, 0x6, 0x4, 0x3, 0x4e7, 0xfffff952}, {0x1, 0x2b3, 0xfd, 0x10001, 0x5, 0x401}, {0x6, 0x600, 0xb9c, 0xf8b, 0x7}, {0x1, 0x3, 0x7, 0x892a4e08, 0x8b4, 0x5}, {0xffffffff, 0xfffffff8, 0x4be, 0x15, 0x80000001, 0x6}, {0x6, 0x37fc, 0x4, 0x3ff, 0x5, 0x5}, {0x5, 0x8, 0x6, 0x7fff, 0xfffffffc, 0x10}, {0x7, 0x8, 0x728, 0x3, 0x2, 0xb}, {0xfffffff7, 0x1, 0x7, 0x33a, 0x4c, 0xfc000000}, {0x3720, 0xffff0000, 0x4, 0x100, 0x7, 0x80000000}, {0xc, 0x7f, 0x0, 0x222d, 0x4, 0xa7fc}, {0x4, 0xe4bf, 0x6, 0x9, 0x2}, {0x2, 0x3, 0x6, 0x6, 0x6, 0xd}, {0xfffffffb, 0x7920, 0x4, 0x7, 0x1, 0x3}, {0xf05, 0x1, 0x1, 0x9, 0x4, 0x1}, {0x2, 0x5, 0x8000, 0xffffffff, 0xfffffff0, 0x1}, {0x3, 0x2, 0x1, 0x5, 0x7, 0x1}, {0xfffffffc, 0x5, 0x0, 0x5, 0x6, 0x6}, {0x2, 0x65, 0xf4ea, 0x7fffffff, 0x8, 0x4}, {0x8001, 0x7, 0x9, 0xfff, 0x6, 0x7f}, {0xb5b5, 0xffffffff, 0x40, 0x2, 0xfffff535, 0x9}, {0xf79, 0x0, 0x40, 0x0, 0xffff, 0x200}, {0x278424d5, 0xffffffff, 0x5, 0x7, 0x3f3b5b77, 0x9}, {0x5, 0xb, 0x1, 0x7, 0x0, 0x2}, {0x1, 0x101, 0x7f, 0x0, 0xc81, 0x3}, {0x10000, 0x9d3, 0x7, 0x6, 0x3, 0xbd}, {0x9, 0x7, 0xb33e, 0xa, 0x6, 0x6}, {0xafd6, 0x19a0, 0x2, 0xdaa, 0x401, 0x8}, {0x2, 0x9, 0x8, 0x200, 0x3, 0xa5a}, {0x5, 0x11, 0x6, 0x1, 0x4, 0xfffffff9}, {0x81, 0x4, 0x4, 0xffffb72c, 0x1, 0x2}, {0x1, 0xffff, 0xd, 0xb, 0x9, 0x5}, {0x240, 0xd3db, 0xffff8000, 0x409, 0x80000001, 0x401}, {0x8, 0x2, 0x4, 0x7ff, 0x754200, 0x2}, {0x7, 0x8, 0x2, 0x0, 0x5, 0x10001}, {0x7b7, 0x5, 0xffff, 0x0, 0x10001, 0x9}, {0x5, 0x4, 0x9, 0x10, 0x8e, 0x8e}, {0x16, 0x4, 0x4, 0x2, 0x3, 0x9}, {0x7, 0x4, 0x8, 0x10001, 0x8000, 0x1}, {0x1d62, 0x4, 0x9, 0xf3a, 0x7fffffff, 0x9ad}, {0x7, 0xe4, 0x6, 0x9e, 0x7, 0xf059}, {0x3, 0x6, 0x8, 0x1400000, 0xed9, 0x6}, {0xfffffffb, 0x6, 0x10000, 0x7, 0x0, 0x6}, {0xe06, 0x8, 0x3, 0x7, 0x10001, 0x3}, {0x101, 0x8, 0x101, 0x30, 0x4, 0x6}, {0x2, 0x7fff, 0x2d, 0x0, 0x4, 0x2}, {0x0, 0x2, 0xf, 0x1, 0x80, 0xc}, {0x0, 0x6, 0x4, 0xad, 0x40, 0x3ff}, {0x1000, 0x4, 0x1, 0x6, 0x4}, {0xe38, 0x5, 0x5, 0x3, 0x3, 0x4}, {0x1, 0xff, 0x6, 0x41fb, 0x200, 0x200}, {0x6, 0x55460a17, 0x54, 0x9, 0x6, 0x5}, {0x401, 0x10, 0x4, 0x74c8bacd, 0x5, 0x6}], [{0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x3}, {}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x6}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x3}, {0x1}, {0x5}, {0x1, 0x83b0069cb76b49f3}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x1}, {0x4}, {0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0xd779dfac818b8296, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x4, 0x1}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000003300)=[{&(0x7f00000022c0)="02db0b9ef1cafdab", 0x8}], 0x1}, 0x4005) 50.732651ms ago: executing program 2 (id=897): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x12) ioctl$CEC_S_MODE(r0, 0x40046109, 0x0) 50.263794ms ago: executing program 2 (id=898): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xec}}, 0x804) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)="47f201d7160c7f3075ff20c1ff6d23dc2175d6dc83d17d69066efbf0a326c40ddae9109af789cc6a721fcf703dea0ee4206fcaadaa07d5d2a531a74c8243fc90d61a6b9053d402", 0x47}, {&(0x7f0000000540)="3342bfdd1ed082e17b1e6fe3bbe7f87b376e717c6d273ff6fe5e73e2413848ce6a8cbfa7c9f8ee7a01e6b73b0d8bd6054a551827c37f43", 0x37}], 0x2, &(0x7f0000000640)}], 0x1, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 329.423µs ago: executing program 2 (id=899): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd11, &(0x7f00000002c0)="0400000000000000060000007e") 0s ago: executing program 2 (id=900): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, r4], &(0x7f00000003c0), 0x0, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 000000246 R12: 0000000000000000 [ 82.101424][ T6684] R13: 00007f3c16626038 R14: 00007f3c16625fa0 R15: 00007ffc327171a8 [ 82.101437][ T6684] [ 82.216132][ T6685] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.264' sets config #1 [ 82.888400][ T6694] tipc: Started in network mode [ 82.888414][ T6694] tipc: Node identity 4, cluster identity 4711 [ 82.888644][ T6694] tipc: Node number set to 4 [ 83.303512][ T2222] gspca_ov534_9: reg_w failed -71 [ 83.585914][ T2222] gspca_ov534_9: Unknown sensor 0000 [ 83.585960][ T2222] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 83.587938][ T2222] usb 6-1: USB disconnect, device number 9 [ 83.635922][ T35] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 83.655970][ T50] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 83.795887][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 83.796340][ T35] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 83.797126][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.798436][ T35] usb 8-1: config 0 descriptor?? [ 83.815871][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 83.816672][ T50] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 83.817633][ T50] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 83.817645][ T50] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 83.817655][ T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 83.817675][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 83.817685][ T50] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 83.817697][ T50] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 83.817715][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.854587][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 83.854599][ T42] audit: type=1400 audit(1789321036.678:423): avc: denied { create } for pid=6712 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 84.045893][ T6720] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6720 comm=syz.1.276 [ 84.062660][ T35] gspca_main: sunplus-2.14.0 probing 041e:400b [ 84.116712][ T50] usb 5-1: config 0 descriptor?? [ 84.326162][ T50] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 84.331503][ T50] usb 5-1: USB disconnect, device number 9 [ 84.334329][ T50] usblp0: removed [ 84.464469][ T35] gspca_sunplus: reg_r err -32 [ 84.464512][ T35] sunplus 8-1:0.0: probe with driver sunplus failed with error -32 [ 84.469256][ T35] usb 8-1: USB disconnect, device number 11 [ 84.783358][ T6726] @ÿ: renamed from veth0_vlan (while UP) [ 84.783702][ T6726] FAULT_INJECTION: forcing a failure. [ 84.783702][ T6726] name failslab, interval 1, probability 0, space 0, times 0 [ 84.783725][ T6726] CPU: 0 UID: 0 PID: 6726 Comm: syz.1.279 Not tainted syzkaller #0 PREEMPT(full) [ 84.783745][ T6726] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.783755][ T6726] Call Trace: [ 84.783762][ T6726] [ 84.783769][ T6726] dump_stack_lvl+0x100/0x190 [ 84.783798][ T6726] should_fail_ex.cold+0x5/0xa [ 84.783853][ T6726] should_failslab+0xc2/0x120 [ 84.783878][ T6726] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 84.783899][ T6726] ? kstrdup_const+0x63/0x80 [ 84.783929][ T6726] kstrdup+0x51/0xe0 [ 84.783954][ T6726] kstrdup_const+0x63/0x80 [ 84.783977][ T6726] kernfs_rename_ns+0x690/0xb30 [ 84.784001][ T6726] sysfs_rename_dir_ns+0x6a/0xa0 [ 84.784024][ T6726] kobject_rename+0x15a/0x260 [ 84.784042][ T6726] ? __pfx_kobject_rename+0x10/0x10 [ 84.784060][ T6726] ? kernfs_put+0x3f/0x60 [ 84.784086][ T6726] device_rename+0x130/0x250 [ 84.784114][ T6726] netif_change_name+0x284/0x830 [ 84.784155][ T6726] ? __pfx_netif_change_name+0x10/0x10 [ 84.784180][ T6726] ? rcu_is_watching+0x13/0xc0 [ 84.784203][ T6726] ? full_name_hash+0xbc/0x100 [ 84.784230][ T6726] dev_change_name+0xb2/0x260 [ 84.784254][ T6726] dev_ifsioc+0x16f1/0x1fc0 [ 84.784276][ T6726] ? __pfx_dev_ifsioc+0x10/0x10 [ 84.784294][ T6726] ? __pfx___mutex_lock+0x10/0x10 [ 84.784328][ T6726] ? bpf_lsm_capable+0x9/0x10 [ 84.784356][ T6726] dev_ioctl+0x223/0x10e0 [ 84.784378][ T6726] sock_do_ioctl+0x1a0/0x280 [ 84.784429][ T6726] ? __pfx_sock_do_ioctl+0x10/0x10 [ 84.784455][ T6726] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.784480][ T6726] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 84.784497][ T6726] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 84.784521][ T6726] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 84.784544][ T6726] sock_ioctl+0x599/0x6b0 [ 84.784570][ T6726] ? __pfx_sock_ioctl+0x10/0x10 [ 84.784601][ T6726] ? selinux_file_ioctl+0x13b/0x290 [ 84.784618][ T6726] ? selinux_file_ioctl+0xb6/0x290 [ 84.784637][ T6726] ? __pfx_sock_ioctl+0x10/0x10 [ 84.784664][ T6726] __x64_sys_ioctl+0x18e/0x210 [ 84.784682][ T6726] do_syscall_64+0x123/0x790 [ 84.784708][ T6726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.784725][ T6726] RIP: 0033:0x7f0a26b9e159 [ 84.784739][ T6726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.784756][ T6726] RSP: 002b:00007f0a27a05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.784775][ T6726] RAX: ffffffffffffffda RBX: 00007f0a26e25fa0 RCX: 00007f0a26b9e159 [ 84.784786][ T6726] RDX: 00002000000000c0 RSI: 0000000000008923 RDI: 0000000000000007 [ 84.784797][ T6726] RBP: 00007f0a26c3503b R08: 0000000000000000 R09: 0000000000000000 [ 84.784808][ T6726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.784819][ T6726] R13: 00007f0a26e26038 R14: 00007f0a26e25fa0 R15: 00007ffe1c3aa178 [ 84.784844][ T6726] [ 84.858772][ T6731] openvswitch: netlink: Actions may not be safe on all matching packets [ 85.041855][ T6748] program syz.2.289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.275983][ T50] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 85.276084][ T25] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 85.373743][ T42] audit: type=1400 audit(1789321038.208:424): avc: denied { open } for pid=6749 comm="syz.3.290" path="/dev/ttyqa" dev="devtmpfs" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 85.374086][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.290'. [ 85.397096][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.290'. [ 85.438525][ T50] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 85.439203][ T25] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 85.440465][ T50] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.440496][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.442663][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.442675][ T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 85.442695][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.445308][ T25] usb 7-1: config 0 descriptor?? [ 85.451183][ T25] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 85.451216][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 85.451909][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.290'. [ 85.454907][ T50] idmouse 5-1:1.0: Unable to find bulk-in endpoint. [ 85.461325][ T25] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 85.463069][ T25] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 85.463103][ T25] usb 7-1: media controller created [ 85.468994][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.481676][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 85.482014][ T25] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 85.486497][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input13 [ 85.488097][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 85.488111][ T25] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 85.646485][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 85.646503][ T25] dvb-usb: error while querying for an remote control event. [ 85.688505][ T25] usb 7-1: USB disconnect, device number 8 [ 85.697946][ T25] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 85.785887][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 85.849966][ T6746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.850202][ T6746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.850829][ T10] usb 5-1: USB disconnect, device number 10 [ 85.946315][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 85.946808][ T9] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 85.947710][ T9] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 85.947722][ T9] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 85.947732][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 85.947753][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 85.947764][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 85.947776][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 85.947795][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.949021][ T9] usb 6-1: config 0 descriptor?? [ 86.048565][ T6765] openvswitch: netlink: Actions may not be safe on all matching packets [ 86.154491][ T9] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 86.157731][ T9] usb 6-1: USB disconnect, device number 10 [ 86.161680][ T9] usblp0: removed [ 86.693848][ T6785] FAULT_INJECTION: forcing a failure. [ 86.693848][ T6785] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 86.693926][ T6785] CPU: 0 UID: 0 PID: 6785 Comm: syz.1.301 Not tainted syzkaller #0 PREEMPT(full) [ 86.693960][ T6785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.693970][ T6785] Call Trace: [ 86.693978][ T6785] [ 86.693985][ T6785] dump_stack_lvl+0x100/0x190 [ 86.694014][ T6785] should_fail_ex.cold+0x5/0xa [ 86.694035][ T6785] ? prepare_alloc_pages+0x16d/0x5b0 [ 86.694058][ T6785] should_fail_alloc_page+0xeb/0x140 [ 86.694081][ T6785] prepare_alloc_pages+0x1f0/0x5b0 [ 86.694105][ T6785] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 86.694133][ T6785] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 86.694155][ T6785] ? rcu_is_watching+0x13/0xc0 [ 86.694178][ T6785] ? irqentry_exit+0x24d/0xa10 [ 86.694199][ T6785] ? lockdep_hardirqs_on+0x7d/0x110 [ 86.694220][ T6785] ? irqentry_exit+0x24d/0xa10 [ 86.694244][ T6785] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 86.694277][ T6785] ? finish_task_switch.isra.0+0x2ca/0x10d0 [ 86.694299][ T6785] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 86.694324][ T6785] ? rcu_is_watching+0x13/0xc0 [ 86.694353][ T6785] ? __lock_acquire+0x5c0/0x1f40 [ 86.694374][ T6785] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.694395][ T6785] ? policy_nodemask+0xed/0x4f0 [ 86.694418][ T6785] alloc_pages_mpol+0x201/0x550 [ 86.694440][ T6785] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 86.694462][ T6785] ? futex_unqueue+0x133/0x2c0 [ 86.694487][ T6785] folio_alloc_mpol_noprof+0x36/0x260 [ 86.694513][ T6785] vma_alloc_folio_noprof+0xed/0x1d0 [ 86.694543][ T6785] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 86.694568][ T6785] ? __pfx___futex_wait+0x10/0x10 [ 86.694583][ T6785] ? __pfx_try_to_wake_up+0x10/0x10 [ 86.694601][ T6785] ? futex_hash+0x311/0x400 [ 86.694624][ T6785] do_anonymous_page+0xac9/0x2050 [ 86.694654][ T6785] ? __pfx_do_anonymous_page+0x10/0x10 [ 86.694676][ T6785] ? rcu_read_unlock+0x2d/0xb0 [ 86.694699][ T6785] ? rcu_read_unlock+0x2d/0xb0 [ 86.694722][ T6785] ? __pte_offset_map+0x179/0x310 [ 86.694743][ T6785] __handle_mm_fault+0x1ff3/0x2f60 [ 86.694769][ T6785] ? lock_vma_under_rcu+0x11d/0x590 [ 86.694792][ T6785] ? __pfx___handle_mm_fault+0x10/0x10 [ 86.694819][ T6785] ? lock_vma_under_rcu+0x17c/0x590 [ 86.694854][ T6785] handle_mm_fault+0x363/0xa20 [ 86.694882][ T6785] do_user_addr_fault+0x59c/0x12f0 [ 86.694911][ T6785] exc_page_fault+0x6f/0xd0 [ 86.694933][ T6785] asm_exc_page_fault+0x26/0x30 [ 86.694950][ T6785] RIP: 0033:0x7f0a26a659e6 [ 86.694965][ T6785] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d 28 01 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 cc ca fe ff 4d 85 ed 0f 84 2b 0a 00 [ 86.694982][ T6785] RSP: 002b:00007f0a27a02f60 EFLAGS: 00010206 [ 86.694998][ T6785] RAX: 0000000000000000 RBX: 00007f0a26e25fa0 RCX: 0000000000000000 [ 86.695010][ T6785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f0a26c35af8 [ 86.695020][ T6785] RBP: 00007f0a26c3503b R08: 00007f0a26a52850 R09: 0000000000000000 [ 86.695030][ T6785] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 86.695040][ T6785] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1c3aa178 [ 86.695060][ T6785] [ 86.695327][ T6785] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 86.815853][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 86.955869][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 86.956590][ T25] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 86.957526][ T25] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.957539][ T25] usb 5-1: config 0 has no interface number 0 [ 86.957557][ T25] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.957570][ T25] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.957588][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.962202][ T25] usb 5-1: config 0 descriptor?? [ 87.205019][ T42] audit: type=1400 audit(1789321040.028:425): avc: denied { read } for pid=6786 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.284859][ T6790] program syz.1.303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.448902][ T6792] openvswitch: netlink: Actions may not be safe on all matching packets [ 87.536721][ T50] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 87.588042][ T25] uclogic 0003:28BD:0071.0005: pen parameters not found [ 87.588100][ T25] uclogic 0003:28BD:0071.0005: interface is invalid, ignoring [ 87.696521][ T50] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 87.697811][ T50] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.697829][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 87.697864][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.700078][ T50] usb 6-1: config 0 descriptor?? [ 87.703036][ T50] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 87.703072][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 87.705231][ T50] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 87.705986][ T50] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 87.706020][ T50] usb 6-1: media controller created [ 87.707232][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.711395][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 87.711450][ T50] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 87.713935][ T50] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input14 [ 87.716277][ T50] dvb-usb: schedule remote query interval to 150 msecs. [ 87.716292][ T50] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 87.788955][ T50] usb 5-1: USB disconnect, device number 11 [ 87.876111][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 87.876131][ T25] dvb-usb: error while querying for an remote control event. [ 87.953787][ T25] usb 6-1: USB disconnect, device number 11 [ 87.977192][ T25] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 88.020267][ T42] audit: type=1400 audit(1789321040.848:426): avc: denied { read } for pid=6799 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.471473][ T42] audit: type=1400 audit(1789321041.298:427): avc: denied { create } for pid=6803 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.475917][ T42] audit: type=1400 audit(1789321041.298:428): avc: denied { setopt } for pid=6803 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.478884][ T42] audit: type=1400 audit(1789321041.308:429): avc: denied { write } for pid=6803 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.645735][ T5835] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 88.818706][ T5835] usb 7-1: Using ep0 maxpacket: 32 [ 88.819157][ T5835] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 88.820093][ T5835] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 88.820107][ T5835] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 88.820118][ T5835] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 88.820141][ T5835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 88.820152][ T5835] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 88.820165][ T5835] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 88.820184][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.821547][ T5835] usb 7-1: config 0 descriptor?? [ 89.028856][ T5835] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 89.032568][ T5835] usb 7-1: USB disconnect, device number 9 [ 89.034367][ T5835] usblp0: removed [ 89.279830][ T6828] netlink: 'syz.0.315': attribute type 3 has an invalid length. [ 89.578878][ T42] audit: type=1400 audit(1789321042.408:430): avc: denied { create } for pid=6829 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.740420][ T6838] netlink: Conntrack attr has 12 unknown bytes [ 89.740450][ T6838] openvswitch: netlink: Actions may not be safe on all matching packets [ 90.128440][ T42] audit: type=1400 audit(1789321042.958:431): avc: denied { write } for pid=6848 comm="syz.2.324" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.313517][ T6820] ceph: No mds server is up or the cluster is laggy [ 90.441898][ T6857] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 90.455612][ T5835] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 90.471029][ T6857] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 90.471227][ T6857] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 90.471305][ T6857] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 90.471385][ T6857] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 90.471421][ T6857] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 90.471458][ T6857] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 90.471533][ T6857] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 90.471617][ T6857] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 90.471653][ T6857] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 90.533010][ T6864] netlink: Conntrack attr has 12 unknown bytes [ 90.533029][ T6864] openvswitch: netlink: Actions may not be safe on all matching packets [ 90.574675][ T6866] bridge0: port 3(veth0) entered blocking state [ 90.574759][ T6866] bridge0: port 3(veth0) entered disabled state [ 90.574855][ T6866] veth0: entered allmulticast mode [ 90.575859][ T6866] veth0: entered promiscuous mode [ 90.576130][ T6866] bridge0: port 3(veth0) entered blocking state [ 90.576200][ T6866] bridge0: port 3(veth0) entered forwarding state [ 90.605772][ T5835] usb 7-1: Using ep0 maxpacket: 32 [ 90.606237][ T5835] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 90.607082][ T5835] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 90.607100][ T5835] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 90.607115][ T5835] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 90.607146][ T5835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 90.607162][ T5835] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 90.607179][ T5835] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 90.607207][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.610492][ T5835] usb 7-1: config 0 descriptor?? [ 90.895665][ T50] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 91.023915][ T5835] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 91.030322][ T5835] usb 7-1: USB disconnect, device number 10 [ 91.037189][ T5835] usblp0: removed [ 91.047208][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 91.047726][ T50] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 91.048667][ T50] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 91.048685][ T50] usb 6-1: config 0 has no interface number 0 [ 91.048714][ T50] usb 6-1: config 0 interface 184 has no altsetting 0 [ 91.050438][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.050455][ T50] usb 6-1: Product: syz [ 91.050466][ T50] usb 6-1: Manufacturer: syz [ 91.050478][ T50] usb 6-1: SerialNumber: syz [ 91.053688][ T50] usb 6-1: config 0 descriptor?? [ 91.229951][ T42] audit: type=1400 audit(1789321044.058:432): avc: denied { mount } for pid=6876 comm="syz.3.335" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 91.275560][ T2222] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 91.302271][ T6878] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 91.312439][ T6878] rtrs_client L2095: : Failed to resolve address, err: -ENODEV [ 91.314056][ T6878] rtrs_client L2636: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 91.426409][ T2222] usb 5-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 91.427555][ T2222] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.429757][ T2222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.429778][ T2222] usb 5-1: Product: syz [ 91.429791][ T2222] usb 5-1: Manufacturer: syz [ 91.429803][ T2222] usb 5-1: SerialNumber: syz [ 91.437922][ T2222] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 91.970078][ T50] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 91.970097][ T50] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 92.097245][ T42] audit: type=1400 audit(1789321044.928:433): avc: denied { unmount } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 92.118062][ T6887] netlink: Unknown conntrack attr (0) [ 92.118079][ T6887] openvswitch: netlink: Actions may not be safe on all matching packets [ 92.173735][ T50] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 92.173754][ T50] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 92.173765][ T50] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 92.173873][ T50] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 92.176814][ T50] usb 6-1: USB disconnect, device number 12 [ 92.240912][ T6540] udevd[6540]: setting owner of /dev/bus/usb/006/012 to uid=0, gid=0 failed: No such file or directory [ 92.243050][ T2222] gspca_mr97310a: reg write [21] error -71 [ 92.243088][ T2222] mr97310a 5-1:1.0: probe with driver mr97310a failed with error -71 [ 92.248938][ T2222] usb 5-1: USB disconnect, device number 12 [ 92.312931][ T42] audit: type=1400 audit(1789321045.138:434): avc: denied { setopt } for pid=6893 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.316257][ T6894] tipc: Cannot configure node identity twice [ 92.945820][ T50] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 93.035522][ T5835] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 93.105562][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 93.106101][ T50] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 93.106986][ T50] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 93.107021][ T50] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.107038][ T50] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.107057][ T50] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.107071][ T50] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.107101][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.205506][ T5835] usb 5-1: Using ep0 maxpacket: 32 [ 93.206862][ T5835] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 93.207825][ T5835] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 93.207845][ T5835] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 93.207861][ T5835] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 93.207896][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 93.207914][ T5835] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 93.207933][ T5835] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 93.207965][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.212489][ T5835] usb 5-1: config 0 descriptor?? [ 93.313008][ T50] usb 6-1: GET_CAPABILITIES returned 0 [ 93.313035][ T50] usbtmc 6-1:16.0: can't read capabilities [ 93.516908][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 93.517523][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 93.517562][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 93.517594][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 93.517830][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 93.517863][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 93.517895][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 93.517928][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 93.518133][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 93.518166][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 93.518199][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 93.518233][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 93.518442][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 93.518473][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 93.518503][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 93.518533][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 93.521029][ T851] usb 6-1: USB disconnect, device number 13 [ 93.627572][ T5835] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 93.633490][ T5835] usb 5-1: USB disconnect, device number 13 [ 93.637346][ T5835] usblp0: removed [ 94.059455][ T42] audit: type=1400 audit(1789321046.889:435): avc: denied { listen } for pid=6917 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 94.059814][ T42] audit: type=1400 audit(1789321046.889:436): avc: denied { accept } for pid=6917 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 94.221607][ T42] audit: type=1400 audit(1789321047.049:437): avc: denied { read write } for pid=6926 comm="syz.0.356" name="control" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 94.221766][ T42] audit: type=1400 audit(1789321047.049:438): avc: denied { open } for pid=6926 comm="syz.0.356" path="/82/dev/mapper/control" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 94.222119][ T6927] device-mapper: ioctl: name not supplied when creating device [ 94.222172][ T42] audit: type=1400 audit(1789321047.049:439): avc: denied { ioctl } for pid=6926 comm="syz.0.356" path="/82/dev/mapper/control" dev="devtmpfs" ino=1287 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 94.905466][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 94.920245][ T42] audit: type=1400 audit(1789321047.749:440): avc: denied { write } for pid=6939 comm="syz.1.361" name="rtc0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.093069][ T42] audit: type=1400 audit(1789321047.919:441): avc: denied { map } for pid=6939 comm="syz.1.361" path="/dev/rtc0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.094391][ T42] audit: type=1400 audit(1789321047.919:442): avc: denied { execute } for pid=6939 comm="syz.1.361" path="/dev/rtc0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.249746][ T42] audit: type=1400 audit(1789321048.079:443): avc: denied { bind } for pid=6943 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.655721][ T50] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 95.815729][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 95.817471][ T50] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 95.819269][ T50] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 95.819318][ T50] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 95.819336][ T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 95.819411][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 95.819461][ T50] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 95.819511][ T50] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 95.819759][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.854489][ T50] usb 5-1: config 0 descriptor?? [ 96.008202][ T9] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 96.011875][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.011892][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.011959][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.014769][ T9] usb 7-1: config 0 descriptor?? [ 96.268945][ T50] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 96.273532][ T50] usb 5-1: USB disconnect, device number 14 [ 96.281777][ T50] usblp0: removed [ 96.325305][ T5732] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 96.438790][ T9] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 96.438811][ T9] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 96.438823][ T9] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 96.438835][ T9] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 96.438846][ T9] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 96.442527][ T9] playstation 0003:054C:0DF2.0006: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 96.489135][ T5732] usb 6-1: unable to get BOS descriptor or descriptor too short [ 96.489162][ T5732] usb 6-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 96.489957][ T5732] usb 6-1: config 4 has an invalid interface number: 4 but max is 0 [ 96.489970][ T5732] usb 6-1: config 4 has no interface number 0 [ 96.489983][ T5732] usb 6-1: config 4 interface 4 has no altsetting 0 [ 96.492333][ T5732] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.492345][ T5732] usb 6-1: Product: syz [ 96.492353][ T5732] usb 6-1: Manufacturer: syz [ 96.492360][ T5732] usb 6-1: SerialNumber: syz [ 96.638008][ T9] playstation 0003:054C:0DF2.0006: Invalid reportID received, expected 9 got 0 [ 96.638034][ T9] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -22 [ 96.638074][ T9] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense [ 96.638087][ T9] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 96.641129][ T9] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -22 [ 96.839011][ T2222] usb 7-1: USB disconnect, device number 11 [ 97.074795][ T6963] ubi0: attaching mtd0 [ 97.076715][ T6963] ubi0: scanning is finished [ 97.224228][ T5732] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 97.225782][ T5732] gspca_sunplus: reg_w_riv err -71 [ 97.225960][ T5732] sunplus 6-1:4.4: probe with driver sunplus failed with error -71 [ 97.236542][ T5732] usb 6-1: USB disconnect, device number 14 [ 98.554356][ T6963] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 99.473676][ T42] audit: type=1400 audit(1789321051.679:444): avc: denied { mount } for pid=6985 comm="syz.1.378" name="/" dev="rpc_pipefs" ino=16508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 99.553775][ T6992] netlink: 76 bytes leftover after parsing attributes in process `syz.3.380'. [ 99.845676][ T42] audit: type=1400 audit(1789321052.679:445): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 100.024789][ T42] audit: type=1400 audit(1789321052.849:446): avc: denied { name_bind } for pid=7004 comm="syz.2.385" src=19999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 100.162931][ T42] audit: type=1400 audit(1789321052.989:447): avc: denied { write } for pid=7018 comm="syz.0.390" name="ip_tables_targets" dev="proc" ino=4026532961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 100.375177][ T5819] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 100.465962][ T42] audit: type=1400 audit(1789321053.299:448): avc: denied { append } for pid=7024 comm="syz.1.391" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 100.531012][ T5819] usb 7-1: unable to get BOS descriptor or descriptor too short [ 100.531226][ T5819] usb 7-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 100.534684][ T5819] usb 7-1: config 4 has an invalid interface number: 4 but max is 0 [ 100.534730][ T5819] usb 7-1: config 4 has no interface number 0 [ 100.534776][ T5819] usb 7-1: config 4 interface 4 has no altsetting 0 [ 100.539027][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.539041][ T5819] usb 7-1: Product: syz [ 100.539048][ T5819] usb 7-1: Manufacturer: syz [ 100.539055][ T5819] usb 7-1: SerialNumber: syz [ 101.293552][ T5819] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 101.293835][ T5819] gspca_sunplus: reg_w_riv err -71 [ 101.293868][ T5819] sunplus 7-1:4.4: probe with driver sunplus failed with error -71 [ 101.299654][ T5819] usb 7-1: USB disconnect, device number 12 [ 102.189387][ T7055] ubi0: attaching mtd0 [ 102.195188][ T7055] ubi0: scanning is finished [ 102.428157][ T7055] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 103.258017][ T7070] Bluetooth: MGMT ver 1.23 [ 103.267207][ T42] audit: type=1400 audit(1789321056.089:449): avc: denied { read } for pid=7065 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.700344][ T42] audit: type=1400 audit(1789321056.529:450): avc: denied { watch_mount watch_reads } for pid=7080 comm="syz.2.411" path="/120" dev="tmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 104.175308][ T5874] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 104.386386][ T5874] usb 6-1: Using ep0 maxpacket: 8 [ 104.389378][ T5874] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 104.394673][ T5874] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 104.394980][ T5874] usb 6-1: config 0 has no interface number 0 [ 104.395078][ T5874] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.395115][ T5874] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 104.395198][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.478628][ T5874] usb 6-1: config 0 descriptor?? [ 104.494801][ T5819] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 104.518307][ T5874] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 104.691814][ T7089] iowarrior 6-1:0.1: Error -90 while submitting URB [ 104.697267][ T5874] usb 6-1: USB disconnect, device number 15 [ 104.904874][ T5819] usb 7-1: Using ep0 maxpacket: 32 [ 104.905642][ T5819] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 104.907093][ T5819] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 104.907114][ T5819] usb 7-1: config 0 has no interface number 0 [ 104.907483][ T5819] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 104.907501][ T5819] usb 7-1: config 0 interface 1 has no altsetting 0 [ 104.911046][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.911066][ T5819] usb 7-1: Product: syz [ 104.911078][ T5819] usb 7-1: Manufacturer: syz [ 104.911090][ T5819] usb 7-1: SerialNumber: syz [ 104.918818][ T5819] usb 7-1: config 0 descriptor?? [ 105.134670][ T5819] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 105.141067][ T5819] cx231xx 7-1:0.1: Failed to read PCB config [ 105.141112][ T5819] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -71 [ 105.145154][ T5819] usb 7-1: USB disconnect, device number 13 [ 105.225434][ T851] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 105.342644][ T42] audit: type=1400 audit(1789321058.169:451): avc: denied { ioctl } for pid=7096 comm="syz.1.416" path="/dev/sg0" dev="devtmpfs" ino=720 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.403984][ T851] usb 8-1: unable to get BOS descriptor or descriptor too short [ 105.404010][ T851] usb 8-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 105.406870][ T851] usb 8-1: config 4 has an invalid interface number: 4 but max is 0 [ 105.406914][ T851] usb 8-1: config 4 has no interface number 0 [ 105.407036][ T851] usb 8-1: config 4 interface 4 has no altsetting 0 [ 105.410073][ T851] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.410085][ T851] usb 8-1: Product: syz [ 105.410093][ T851] usb 8-1: Manufacturer: syz [ 105.410100][ T851] usb 8-1: SerialNumber: syz [ 106.167926][ T851] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 106.168215][ T851] gspca_sunplus: reg_w_riv err -71 [ 106.168247][ T851] sunplus 8-1:4.4: probe with driver sunplus failed with error -71 [ 106.169176][ T851] usb 8-1: USB disconnect, device number 12 [ 107.067071][ T7131] ubi0: attaching mtd0 [ 107.068982][ T7131] ubi0: scanning is finished [ 107.773786][ T7135] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.804217][ T7131] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 108.124661][ T851] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 108.286899][ T851] usb 6-1: unable to get BOS descriptor or descriptor too short [ 108.286940][ T851] usb 6-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 108.288020][ T851] usb 6-1: config 4 has an invalid interface number: 4 but max is 0 [ 108.288039][ T851] usb 6-1: config 4 has no interface number 0 [ 108.288060][ T851] usb 6-1: config 4 interface 4 has no altsetting 0 [ 108.292658][ T851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.292679][ T851] usb 6-1: Product: syz [ 108.292690][ T851] usb 6-1: Manufacturer: syz [ 108.292702][ T851] usb 6-1: SerialNumber: syz [ 109.020526][ T851] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 109.020985][ T851] gspca_sunplus: reg_w_riv err -71 [ 109.021058][ T851] sunplus 6-1:4.4: probe with driver sunplus failed with error -71 [ 109.026956][ T851] usb 6-1: USB disconnect, device number 16 [ 109.671071][ T7174] ubi0: attaching mtd0 [ 109.672049][ T7174] ubi0: scanning is finished [ 109.870844][ T7193] @ÿ: renamed from veth0_vlan (while UP) [ 109.870946][ T7193] FAULT_INJECTION: forcing a failure. [ 109.870946][ T7193] name failslab, interval 1, probability 0, space 0, times 0 [ 109.870961][ T7193] CPU: 3 UID: 0 PID: 7193 Comm: syz.2.443 Not tainted syzkaller #0 PREEMPT(full) [ 109.870975][ T7193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.870982][ T7193] Call Trace: [ 109.870987][ T7193] [ 109.870992][ T7193] dump_stack_lvl+0x100/0x190 [ 109.871012][ T7193] should_fail_ex.cold+0x5/0xa [ 109.871028][ T7193] should_failslab+0xc2/0x120 [ 109.871051][ T7193] __kmalloc_noprof+0xfc/0x840 [ 109.871063][ T7193] ? kobject_get_path+0xcf/0x2c0 [ 109.871088][ T7193] kobject_get_path+0xcf/0x2c0 [ 109.871108][ T7193] kobject_uevent_env+0x287/0x18b0 [ 109.871122][ T7193] ? kernfs_put+0x3f/0x60 [ 109.871140][ T7193] kobject_rename+0x209/0x260 [ 109.871152][ T7193] ? __pfx_kobject_rename+0x10/0x10 [ 109.871165][ T7193] ? kernfs_put+0x3f/0x60 [ 109.871183][ T7193] device_rename+0x130/0x250 [ 109.871202][ T7193] netif_change_name+0x284/0x830 [ 109.871219][ T7193] ? __pfx_netif_change_name+0x10/0x10 [ 109.871234][ T7193] ? rcu_is_watching+0x13/0xc0 [ 109.871248][ T7193] ? full_name_hash+0xbc/0x100 [ 109.871264][ T7193] dev_change_name+0xb2/0x260 [ 109.871280][ T7193] dev_ifsioc+0x16f1/0x1fc0 [ 109.871296][ T7193] ? __pfx_dev_ifsioc+0x10/0x10 [ 109.871307][ T7193] ? __pfx___mutex_lock+0x10/0x10 [ 109.871329][ T7193] ? bpf_lsm_capable+0x9/0x10 [ 109.871366][ T7193] dev_ioctl+0x223/0x10e0 [ 109.871382][ T7193] sock_do_ioctl+0x1a0/0x280 [ 109.871399][ T7193] ? __pfx_sock_do_ioctl+0x10/0x10 [ 109.871414][ T7193] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.871431][ T7193] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 109.871441][ T7193] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 109.871457][ T7193] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 109.871472][ T7193] sock_ioctl+0x599/0x6b0 [ 109.871488][ T7193] ? __pfx_sock_ioctl+0x10/0x10 [ 109.871509][ T7193] ? selinux_file_ioctl+0x13b/0x290 [ 109.871520][ T7193] ? selinux_file_ioctl+0xb6/0x290 [ 109.871532][ T7193] ? __pfx_sock_ioctl+0x10/0x10 [ 109.871549][ T7193] __x64_sys_ioctl+0x18e/0x210 [ 109.871561][ T7193] do_syscall_64+0x123/0x790 [ 109.871577][ T7193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.871589][ T7193] RIP: 0033:0x7f3c1639e159 [ 109.871598][ T7193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.871609][ T7193] RSP: 002b:00007f3c17280028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.871620][ T7193] RAX: ffffffffffffffda RBX: 00007f3c16625fa0 RCX: 00007f3c1639e159 [ 109.871627][ T7193] RDX: 00002000000000c0 RSI: 0000000000008923 RDI: 0000000000000005 [ 109.871634][ T7193] RBP: 00007f3c1643503b R08: 0000000000000000 R09: 0000000000000000 [ 109.871640][ T7193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.871646][ T7193] R13: 00007f3c16626038 R14: 00007f3c16625fa0 R15: 00007ffc327171a8 [ 109.871661][ T7193] [ 109.895272][ T7174] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 109.895290][ T7174] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 109.895300][ T7174] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 109.895310][ T7174] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 109.895319][ T7174] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 109.895328][ T7174] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 109.895337][ T7174] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3075544578 [ 109.895349][ T7174] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 109.896476][ T7195] ubi0: background thread "ubi_bgt0d" started, PID 7195 [ 110.138342][ T42] audit: type=1400 audit(1789321062.969:452): avc: denied { create } for pid=7215 comm="syz.2.446" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.173852][ T7219] program syz.0.447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.274574][ T5875] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 110.336944][ T42] audit: type=1400 audit(1789321063.169:453): avc: denied { write } for pid=7215 comm="syz.2.446" name="file0" dev="tmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.336990][ T42] audit: type=1400 audit(1789321063.169:454): avc: denied { open } for pid=7215 comm="syz.2.446" path="/131/file0" dev="tmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.371248][ T42] audit: type=1400 audit(1789321063.169:455): avc: denied { ioctl } for pid=7215 comm="syz.2.446" path="/131/file0" dev="tmpfs" ino=698 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.434565][ T5831] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 110.585808][ T5831] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 110.588053][ T5831] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.588097][ T5831] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 110.588172][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.598235][ T5831] usb 5-1: config 0 descriptor?? [ 110.605847][ T5831] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 110.605947][ T5831] dvb-usb: bulk message failed: -22 (3/0) [ 110.612430][ T5831] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 110.612906][ T5831] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 110.612929][ T5831] usb 5-1: media controller created [ 110.613575][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.615827][ T5831] dvb-usb: bulk message failed: -22 (6/0) [ 110.615860][ T5831] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 110.617651][ T5831] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input15 [ 110.623024][ T5831] dvb-usb: schedule remote query interval to 150 msecs. [ 110.623037][ T5831] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 110.697952][ T5875] usb 6-1: unable to get BOS descriptor or descriptor too short [ 110.697978][ T5875] usb 6-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 110.698832][ T5875] usb 6-1: config 4 has an invalid interface number: 4 but max is 0 [ 110.698844][ T5875] usb 6-1: config 4 has no interface number 0 [ 110.698856][ T5875] usb 6-1: config 4 interface 4 has no altsetting 0 [ 110.700593][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.700605][ T5875] usb 6-1: Product: syz [ 110.700613][ T5875] usb 6-1: Manufacturer: syz [ 110.700620][ T5875] usb 6-1: SerialNumber: syz [ 110.774584][ T5831] dvb-usb: bulk message failed: -22 (1/0) [ 110.774617][ T5831] dvb-usb: error while querying for an remote control event. [ 110.867268][ T2671] usb 5-1: USB disconnect, device number 15 [ 110.886878][ T2671] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 111.154860][ T42] audit: type=1400 audit(1789321063.989:456): avc: denied { unlink } for pid=5724 comm="syz-executor" name="file0" dev="tmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 111.183500][ T7246] tipc: Enabled bearer , priority 0 [ 111.184137][ T7246] syzkaller0: entered promiscuous mode [ 111.184147][ T7246] syzkaller0: entered allmulticast mode [ 111.193511][ T7246] tipc: Resetting bearer [ 111.197353][ T7245] tipc: Resetting bearer [ 111.202966][ T7245] tipc: Disabling bearer [ 111.422070][ T5875] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 111.422476][ T5875] gspca_sunplus: reg_w_riv err -71 [ 111.422510][ T5875] sunplus 6-1:4.4: probe with driver sunplus failed with error -71 [ 111.423512][ T5875] usb 6-1: USB disconnect, device number 17 [ 111.538101][ T42] audit: type=1400 audit(1789321064.369:457): avc: denied { read } for pid=7257 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 111.568844][ T42] audit: type=1400 audit(1789321064.400:458): avc: denied { map } for pid=7259 comm="syz.3.461" path="pipe:[16742]" dev="pipefs" ino=16742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 111.568881][ T42] audit: type=1400 audit(1789321064.400:459): avc: denied { execute } for pid=7259 comm="syz.3.461" path="pipe:[16742]" dev="pipefs" ino=16742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 111.643870][ T7267] program syz.0.464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.793895][ T7260] syz.3.461 (7260): drop_caches: 2 [ 111.904605][ T851] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 112.056581][ T851] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 112.057908][ T851] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.057928][ T851] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 112.057966][ T851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.062294][ T851] usb 5-1: config 0 descriptor?? [ 112.065734][ T851] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 112.065767][ T851] dvb-usb: bulk message failed: -22 (3/0) [ 112.069261][ T851] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 112.070285][ T851] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 112.070330][ T851] usb 5-1: media controller created [ 112.071537][ T851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.079197][ T851] dvb-usb: bulk message failed: -22 (6/0) [ 112.079255][ T851] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 112.084040][ T851] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input16 [ 112.086417][ T851] dvb-usb: schedule remote query interval to 150 msecs. [ 112.086433][ T851] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 112.104458][ T5874] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 112.244516][ T851] dvb-usb: bulk message failed: -22 (1/0) [ 112.244547][ T851] dvb-usb: error while querying for an remote control event. [ 112.267682][ T5874] usb 7-1: unable to get BOS descriptor or descriptor too short [ 112.267747][ T5874] usb 7-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 112.268629][ T5874] usb 7-1: config 4 has an invalid interface number: 4 but max is 0 [ 112.268644][ T5874] usb 7-1: config 4 has no interface number 0 [ 112.268663][ T5874] usb 7-1: config 4 interface 4 has no altsetting 0 [ 112.270360][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.270373][ T5874] usb 7-1: Product: syz [ 112.270380][ T5874] usb 7-1: Manufacturer: syz [ 112.270387][ T5874] usb 7-1: SerialNumber: syz [ 112.319669][ T35] usb 5-1: USB disconnect, device number 16 [ 112.340759][ T35] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 112.704555][ T7281] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.705644][ T7281] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.706208][ T7281] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.707246][ T42] audit: type=1400 audit(1789321065.540:460): avc: denied { create } for pid=7285 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 112.713534][ T7281] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.713592][ T7281] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.718635][ T42] audit: type=1400 audit(1789321065.550:461): avc: denied { write } for pid=7285 comm="syz.1.470" name="/" dev="ocfs2_dlmfs" ino=18737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.718841][ T42] audit: type=1400 audit(1789321065.550:462): avc: denied { add_name } for pid=7285 comm="syz.1.470" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.719152][ T42] audit: type=1400 audit(1789321065.550:463): avc: denied { create } for pid=7285 comm="syz.1.470" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 112.720537][ T42] audit: type=1400 audit(1789321065.550:464): avc: denied { associate } for pid=7285 comm="syz.1.470" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 112.720883][ T7286] o2cb: This node has not been configured. [ 112.720888][ T7286] o2cb: Cluster check failed. Fix errors before retrying. [ 112.720905][ T7286] (syz.1.470,7286,3):user_dlm_register:674 ERROR: status = -22 [ 112.720919][ T7286] (syz.1.470,7286,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 112.988831][ T5874] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 112.989357][ T5874] gspca_sunplus: reg_w_riv err -71 [ 112.989389][ T5874] sunplus 7-1:4.4: probe with driver sunplus failed with error -71 [ 112.990916][ T5874] usb 7-1: USB disconnect, device number 14 [ 113.139437][ T7310] capability: warning: `syz.0.480' uses 32-bit capabilities (legacy support in use) [ 113.179497][ T7313] program syz.0.481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.434310][ T5831] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 113.596694][ T5831] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 113.597875][ T5831] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.597888][ T5831] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 113.597910][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.599364][ T5831] usb 5-1: config 0 descriptor?? [ 113.601263][ T5831] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 113.601283][ T5831] dvb-usb: bulk message failed: -22 (3/0) [ 113.604867][ T5831] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 113.605436][ T5831] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 113.605458][ T5831] usb 5-1: media controller created [ 113.606185][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.615983][ T5831] dvb-usb: bulk message failed: -22 (6/0) [ 113.616017][ T5831] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 113.620632][ T5831] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input17 [ 113.635572][ T5831] dvb-usb: schedule remote query interval to 150 msecs. [ 113.635587][ T5831] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 113.721456][ T7334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.490'. [ 113.794363][ T5831] dvb-usb: bulk message failed: -22 (1/0) [ 113.794382][ T5831] dvb-usb: error while querying for an remote control event. [ 113.802941][ T7336] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 113.839105][ T7337] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 113.840774][ T7337] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 113.843785][ T7337] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 113.880423][ T35] usb 5-1: USB disconnect, device number 17 [ 113.896983][ T7336] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 113.904903][ T35] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 114.231832][ T5083] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 114.268636][ T7347] tc action pedit offset must be on 32 bit boundaries [ 114.334288][ T5874] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 114.494352][ T5874] usb 6-1: Using ep0 maxpacket: 32 [ 114.495391][ T5874] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 114.498114][ T5874] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 114.498135][ T5874] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 114.498152][ T5874] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 114.498189][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.498207][ T5874] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 114.498227][ T5874] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 114.498258][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.500514][ T5874] usb 6-1: config 0 descriptor?? [ 114.727865][ T5874] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 114.734448][ T5731] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.734521][ T5731] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.734599][ T5083] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.817521][ T7368] tc action pedit offset must be on 32 bit boundaries [ 114.947611][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 114.957382][ T7370] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.958049][ T7370] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.030866][ T7372] program syz.2.506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.118323][ T25] usb 6-1: USB disconnect, device number 18 [ 115.130189][ T25] usblp0: removed [ 115.264357][ T5831] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 115.435427][ T5831] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 115.438967][ T5831] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.438988][ T5831] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 115.439025][ T5831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.441396][ T5831] usb 7-1: config 0 descriptor?? [ 115.459215][ T5831] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 115.459251][ T5831] dvb-usb: bulk message failed: -22 (3/0) [ 115.460816][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 115.460830][ T42] audit: type=1400 audit(1789321068.290:469): avc: denied { write } for pid=7376 comm="syz.0.508" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 115.488880][ T5831] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 115.489583][ T5831] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 115.489621][ T5831] usb 7-1: media controller created [ 115.490865][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.502026][ T5831] dvb-usb: bulk message failed: -22 (6/0) [ 115.502088][ T5831] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 115.507075][ T5831] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input19 [ 115.511388][ T5831] dvb-usb: schedule remote query interval to 150 msecs. [ 115.511406][ T5831] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 115.597958][ T7385] bridge0: port 3(veth0) entered blocking state [ 115.598088][ T7385] bridge0: port 3(veth0) entered disabled state [ 115.598212][ T7385] veth0: entered allmulticast mode [ 115.601970][ T7385] veth0: entered promiscuous mode [ 115.602273][ T7385] bridge0: port 3(veth0) entered blocking state [ 115.602321][ T7385] bridge0: port 3(veth0) entered forwarding state [ 115.648644][ T7387] tc action pedit offset must be on 32 bit boundaries [ 115.664187][ T5831] dvb-usb: bulk message failed: -22 (1/0) [ 115.664211][ T5831] dvb-usb: error while querying for an remote control event. [ 115.711956][ T5831] usb 7-1: USB disconnect, device number 15 [ 115.727405][ T5831] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 115.870844][ T7405] netlink: 36 bytes leftover after parsing attributes in process `syz.3.520'. [ 115.888620][ T7402] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 115.911208][ T7402] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 115.912558][ T7402] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 116.264278][ T5831] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 116.342703][ T7436] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 116.376866][ T7436] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 116.378627][ T7436] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 116.395942][ T5083] Bluetooth: hci2: unexpected event for opcode 0x202d [ 116.424134][ T5831] usb 5-1: Using ep0 maxpacket: 32 [ 116.424691][ T5831] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 116.425659][ T5831] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 116.427305][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 116.427317][ T5831] usb 5-1: Product: syz [ 116.427324][ T5831] usb 5-1: Manufacturer: syz [ 116.427332][ T5831] usb 5-1: SerialNumber: syz [ 116.428717][ T5831] usb 5-1: config 0 descriptor?? [ 116.429225][ T7418] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 116.538100][ T42] audit: type=1400 audit(1789321069.370:470): avc: denied { bind } for pid=7451 comm="syz.2.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.539299][ T7452] tmpfs: Unknown parameter 'or_blxieºt‡¬' [ 116.567847][ T7454] program syz.2.541 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.633313][ T7418] FAULT_INJECTION: forcing a failure. [ 116.633313][ T7418] name failslab, interval 1, probability 0, space 0, times 0 [ 116.633334][ T7418] CPU: 0 UID: 0 PID: 7418 Comm: syz.0.524 Not tainted syzkaller #0 PREEMPT(full) [ 116.633347][ T7418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.633354][ T7418] Call Trace: [ 116.633359][ T7418] [ 116.633364][ T7418] dump_stack_lvl+0x100/0x190 [ 116.633400][ T7418] should_fail_ex.cold+0x5/0xa [ 116.633418][ T7418] should_failslab+0xc2/0x120 [ 116.633436][ T7418] __kmalloc_noprof+0xfc/0x840 [ 116.633447][ T7418] ? vsnprintf+0x4c5/0x1300 [ 116.633464][ T7418] ? __alloc_workqueue+0x10f/0x1950 [ 116.633482][ T7418] __alloc_workqueue+0x10f/0x1950 [ 116.633496][ T7418] ? __pfx_vsnprintf+0x10/0x10 [ 116.633527][ T7418] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 116.633541][ T7418] ? lockdep_hardirqs_on+0x7d/0x110 [ 116.633556][ T7418] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 116.633572][ T7418] alloc_workqueue_noprof+0xc7/0x130 [ 116.633588][ T7418] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 116.633607][ T7418] ? __pfx___debug_object_init+0x10/0x10 [ 116.633624][ T7418] nci_register_device+0x394/0xb80 [ 116.633638][ T7418] ? __pfx_nci_register_device+0x10/0x10 [ 116.633652][ T7418] ? lockdep_init_map_type+0x5c/0x250 [ 116.633667][ T7418] virtual_ncidev_open+0x141/0x220 [ 116.633683][ T7418] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 116.633698][ T7418] misc_open+0x26d/0x450 [ 116.633709][ T7418] ? __pfx_misc_open+0x10/0x10 [ 116.633719][ T7418] chrdev_open+0x234/0x6a0 [ 116.633732][ T7418] ? __pfx_chrdev_open+0x10/0x10 [ 116.633746][ T7418] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 116.633766][ T7418] do_dentry_open+0x6ab/0x14d0 [ 116.633778][ T7418] ? __pfx_chrdev_open+0x10/0x10 [ 116.633795][ T7418] vfs_open+0x82/0x3f0 [ 116.633811][ T7418] path_openat+0x19fa/0x2440 [ 116.633827][ T7418] ? __pfx_path_openat+0x10/0x10 [ 116.633844][ T7418] do_file_open+0x20e/0x430 [ 116.633858][ T7418] ? __pfx_do_file_open+0x10/0x10 [ 116.633882][ T7418] ? _raw_spin_unlock+0x28/0x50 [ 116.633894][ T7418] ? alloc_fd+0x471/0x7a0 [ 116.633911][ T7418] do_sys_openat2+0x10f/0x1e0 [ 116.633926][ T7418] ? __pfx_do_sys_openat2+0x10/0x10 [ 116.633946][ T7418] __x64_sys_openat+0x12d/0x210 [ 116.633962][ T7418] ? __pfx___x64_sys_openat+0x10/0x10 [ 116.633982][ T7418] do_syscall_64+0x123/0x790 [ 116.633998][ T7418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.634010][ T7418] RIP: 0033:0x7fb74239e159 [ 116.634020][ T7418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.634030][ T7418] RSP: 002b:00007fb7431fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 116.634042][ T7418] RAX: ffffffffffffffda RBX: 00007fb742625fa0 RCX: 00007fb74239e159 [ 116.634049][ T7418] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 116.634056][ T7418] RBP: 00007fb74243503b R08: 0000000000000000 R09: 0000000000000000 [ 116.634062][ T7418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.634069][ T7418] R13: 00007fb742626038 R14: 00007fb742625fa0 R15: 00007ffeff09b988 [ 116.634083][ T7418] [ 116.657992][ T42] audit: type=1400 audit(1789321069.490:471): avc: denied { write } for pid=7459 comm="syz.3.543" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 116.754124][ T42] audit: type=1400 audit(1789321069.580:472): avc: denied { unlink } for pid=7416 comm="syz.0.524" name="#5" dev="tmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 116.755978][ T7463] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 116.814162][ T5810] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 116.825545][ T5083] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.964538][ T5810] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 116.965814][ T5810] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.965827][ T5810] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 116.965849][ T5810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.968431][ T5810] usb 7-1: config 0 descriptor?? [ 116.971763][ T5810] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 116.971783][ T5810] dvb-usb: bulk message failed: -22 (3/0) [ 116.986551][ T5810] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 116.987357][ T5810] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 116.994373][ T5810] usb 7-1: media controller created [ 117.002273][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.013281][ T5810] dvb-usb: bulk message failed: -22 (6/0) [ 117.013318][ T5810] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 117.019489][ T5810] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input22 [ 117.022610][ T5810] dvb-usb: schedule remote query interval to 150 msecs. [ 117.022621][ T5810] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 117.174145][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 117.174163][ T5810] dvb-usb: error while querying for an remote control event. [ 117.175165][ T7473] null_blk: nullb1: using native zone append [ 117.239989][ T5819] usb 7-1: USB disconnect, device number 16 [ 117.246215][ T7467] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 117.263775][ T7467] pci 0000:00:03.0: BAR 0 [io 0xc0a0-0xc0bf] [ 117.265362][ T7467] pci 0000:00:03.0: BAR 1 [mem 0xfeaf5000-0xfeaf5fff] [ 117.269891][ T5819] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 117.270042][ T7467] pci 0000:00:03.0: BAR 4 [mem 0x380800004000-0x380800007fff 64bit pref] [ 117.280876][ T7473] null_blk: disk nullb1 created [ 117.319614][ T42] audit: type=1400 audit(1789321070.150:473): avc: denied { connect } for pid=7480 comm="syz.1.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.324849][ T7467] pci 0000:00:03.0: Adding to iommu group 3 [ 117.350151][ T7467] pci 0000:00:03.0: BAR 4 [mem 0x380800004000-0x380800007fff 64bit pref]: assigned [ 117.353074][ T7467] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned [ 117.360782][ T7467] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 117.381038][ T5831] usb 5-1: USB disconnect, device number 18 [ 117.553122][ T7484] netlink: 36 bytes leftover after parsing attributes in process `syz.1.547'. [ 118.039340][ T42] audit: type=1400 audit(1789321070.870:474): avc: denied { append } for pid=7504 comm="syz.3.556" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.146080][ T7505] create_pit_timer: 27 callbacks suppressed [ 118.146092][ T7505] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 118.197408][ T2671] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 118.245258][ T7513] program syz.2.559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.345990][ T2671] usb 5-1: Using ep0 maxpacket: 16 [ 118.348939][ T2671] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 118.352198][ T2671] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 118.355911][ T2671] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.355932][ T2671] usb 5-1: Product: syz [ 118.355944][ T2671] usb 5-1: Manufacturer: syz [ 118.355957][ T2671] usb 5-1: SerialNumber: syz [ 118.360541][ T2671] usb 5-1: config 0 descriptor?? [ 118.376795][ T2671] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 118.376824][ T2671] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 118.506481][ T35] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 118.522957][ T42] audit: type=1400 audit(1789321071.350:475): avc: denied { ioctl } for pid=7528 comm="syz.3.567" path="/dev/dri/card1" dev="devtmpfs" ino=637 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 118.539485][ T7531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.566'. [ 118.554996][ T7531] capability: warning: `syz.1.566' uses deprecated v2 capabilities in a way that may be insecure [ 118.571774][ T7531] syz.1.566 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000 [ 118.571797][ T7531] CPU: 0 UID: 0 PID: 7531 Comm: syz.1.566 Not tainted syzkaller #0 PREEMPT(full) [ 118.571812][ T7531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.571819][ T7531] Call Trace: [ 118.571824][ T7531] [ 118.571829][ T7531] dump_stack_lvl+0x100/0x190 [ 118.571849][ T7531] dump_header+0xfb/0x606 [ 118.571864][ T7531] oom_kill_process.cold+0xd/0x380 [ 118.571879][ T7531] out_of_memory+0x340/0x14f0 [ 118.571898][ T7531] ? __pfx_out_of_memory+0x10/0x10 [ 118.571917][ T7531] mem_cgroup_out_of_memory+0xc6/0x130 [ 118.571930][ T7531] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 118.571941][ T7531] ? find_held_lock+0x2b/0x80 [ 118.571960][ T7531] ? do_raw_spin_unlock+0x145/0x1e0 [ 118.571974][ T7531] ? _raw_spin_unlock+0x28/0x50 [ 118.571988][ T7531] try_charge_memcg+0x783/0xf60 [ 118.572007][ T7531] ? __pfx_try_charge_memcg+0x10/0x10 [ 118.572022][ T7531] ? find_held_lock+0x2b/0x80 [ 118.572036][ T7531] ? rcu_read_unlock+0x17/0x60 [ 118.572052][ T7531] ? rcu_read_unlock+0x17/0x60 [ 118.572072][ T7531] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 118.572093][ T7531] ? kasan_unpoison+0x27/0x60 [ 118.572105][ T7531] __kmalloc_node_track_caller_noprof+0x66a/0x870 [ 118.572119][ T7531] ? register_net_sysctl_sz+0x206/0x420 [ 118.572137][ T7531] ? __addrconf_sysctl_register+0xbb/0x360 [ 118.572167][ T7531] kmemdup_noprof+0x29/0x60 [ 118.572186][ T7531] __addrconf_sysctl_register+0xbb/0x360 [ 118.572207][ T7531] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 118.572228][ T7531] ? lockdep_init_map_type+0x5c/0x250 [ 118.572240][ T7531] ? mld_in_v1_mode+0x2b2/0x3a0 [ 118.572257][ T7531] addrconf_sysctl_register+0x163/0x200 [ 118.572277][ T7531] ipv6_add_dev+0xaf2/0x1520 [ 118.572290][ T7531] addrconf_notify+0x5db/0x1ba0 [ 118.572307][ T7531] ? __pfx_tls_dev_event+0x10/0x10 [ 118.572318][ T7531] ? __pfx_addrconf_notify+0x10/0x10 [ 118.572333][ T7531] ? ip6mr_device_event+0x1c4/0x230 [ 118.572349][ T7531] notifier_call_chain+0x99/0x3f0 [ 118.572367][ T7531] call_netdevice_notifiers_info+0xbe/0x110 [ 118.572385][ T7531] register_netdevice+0x1998/0x25a0 [ 118.572402][ T7531] ? __pfx_register_netdevice+0x10/0x10 [ 118.572426][ T7531] bond_newlink+0x6a/0x100 [ 118.572440][ T7531] ? __pfx_bond_newlink+0x10/0x10 [ 118.572453][ T7531] rtnl_newlink+0x1697/0x2620 [ 118.572474][ T7531] ? __pfx_rtnl_newlink+0x10/0x10 [ 118.572489][ T7531] ? avc_has_perm_noaudit+0x56/0x3b0 [ 118.572506][ T7531] ? find_held_lock+0x2b/0x80 [ 118.572521][ T7531] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 118.572536][ T7531] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 118.572565][ T7531] ? lock_acquire+0x1d1/0x380 [ 118.572576][ T7531] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 118.572591][ T7531] ? find_held_lock+0x2b/0x80 [ 118.572623][ T7531] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 118.572637][ T7531] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 118.572652][ T7531] ? __pfx_rtnl_newlink+0x10/0x10 [ 118.572667][ T7531] rtnetlink_rcv_msg+0x95e/0xe90 [ 118.572683][ T7531] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 118.572702][ T7531] ? ref_tracker_free+0x37e/0x6c0 [ 118.572719][ T7531] netlink_rcv_skb+0x159/0x420 [ 118.572732][ T7531] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 118.572747][ T7531] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.572765][ T7531] ? netlink_deliver_tap+0x1ae/0xcc0 [ 118.572779][ T7531] netlink_unicast+0x585/0x850 [ 118.572793][ T7531] ? __pfx_netlink_unicast+0x10/0x10 [ 118.572809][ T7531] netlink_sendmsg+0x8b0/0xda0 [ 118.572824][ T7531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.572838][ T7531] ? selinux_socket_sendmsg+0x198/0x2f0 [ 118.572852][ T7531] ____sys_sendmsg+0xa4d/0xbe0 [ 118.572868][ T7531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.572881][ T7531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.572904][ T7531] ___sys_sendmsg+0x190/0x1e0 [ 118.572921][ T7531] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.572939][ T7531] ? futex_wait+0x11e/0x370 [ 118.572955][ T7531] ? find_held_lock+0x2b/0x80 [ 118.572979][ T7531] __sys_sendmsg+0x160/0x210 [ 118.572993][ T7531] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.573015][ T7531] do_syscall_64+0x123/0x790 [ 118.573031][ T7531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.573043][ T7531] RIP: 0033:0x7f0a26b9e159 [ 118.573054][ T7531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.573064][ T7531] RSP: 002b:00007f0a27a05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.573076][ T7531] RAX: ffffffffffffffda RBX: 00007f0a26e25fa0 RCX: 00007f0a26b9e159 [ 118.573083][ T7531] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000009 [ 118.573089][ T7531] RBP: 00007f0a26c3503b R08: 0000000000000000 R09: 0000000000000000 [ 118.573096][ T7531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.573103][ T7531] R13: 00007f0a26e26038 R14: 00007f0a26e25fa0 R15: 00007ffe1c3aa178 [ 118.573117][ T7531] [ 118.573829][ T7531] memory: usage 88kB, limit 96kB, failcnt 29 [ 118.573840][ T7531] memory+swap: usage 88kB, limit 9007199254740988kB, failcnt 0 [ 118.573848][ T7531] kmem: usage 88kB, limit 9007199254740988kB, failcnt 0 [ 118.573854][ T7531] Memory cgroup stats for /syz1/test: [ 118.574096][ T7531] cache 0 [ 118.574101][ T7531] rss 0 [ 118.574105][ T7531] rss_huge 0 [ 118.574109][ T7531] shmem 0 [ 118.574112][ T7531] mapped_file 0 [ 118.574116][ T7531] dirty 0 [ 118.574120][ T7531] writeback 0 [ 118.574124][ T7531] workingset_refault_anon 0 [ 118.574128][ T7531] workingset_refault_file 0 [ 118.574132][ T7531] swap 0 [ 118.574135][ T7531] swapcached 0 [ 118.574139][ T7531] pgpgin 0 [ 118.574143][ T7531] pgpgout 0 [ 118.574146][ T7531] pgfault 0 [ 118.574150][ T7531] pgmajfault 0 [ 118.574154][ T7531] inactive_anon 0 [ 118.574158][ T7531] active_anon 0 [ 118.574162][ T7531] inactive_file 0 [ 118.574165][ T7531] active_file 0 [ 118.574169][ T7531] unevictable 0 [ 118.574173][ T7531] hierarchical_memory_limit 98304 [ 118.574177][ T7531] hierarchical_memsw_limit 9223372036854771712 [ 118.574182][ T7531] total_cache 0 [ 118.574186][ T7531] total_rss 0 [ 118.574190][ T7531] total_rss_huge 0 [ 118.574193][ T7531] total_shmem 0 [ 118.574197][ T7531] total_mapped_file 0 [ 118.574201][ T7531] total_dirty 0 [ 118.574205][ T7531] total_writeback 0 [ 118.574209][ T7531] total_workingset_refault_anon 0 [ 118.574213][ T7531] total_workingset_refault_file 0 [ 118.574217][ T7531] total_swap 0 [ 118.574221][ T7531] total_swapcached 0 [ 118.574225][ T7531] total_pgpgin 0 [ 118.574229][ T7531] total_pgpgout 0 [ 118.574233][ T7531] total_pgfault 0 [ 118.574237][ T7531] total_pgmajfault 0 [ 118.574241][ T7531] total_inactive_anon 0 [ 118.574245][ T7531] total_active_anon 0 [ 118.574248][ T7531] total_inactive_file 0 [ 118.574253][ T7531] total_active_file 0 [ 118.574256][ T7531] total_unevictable 0 [ 118.574260][ T7531] anon_cost 0 [ 118.574264][ T7531] file_cost 0 [ 118.574268][ T7531] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.566,pid=7530,uid=0 [ 118.574438][ T7531] Memory cgroup out of memory: Killed process 7530 (syz.1.566) total-vm:102252kB, anon-rss:1432kB, file-rss:23248kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 118.585609][ T7531] bond1 (unregistering): Released all slaves [ 118.665355][ T35] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 118.667566][ T35] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.667580][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 118.667603][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.669638][ T35] usb 7-1: config 0 descriptor?? [ 118.673901][ T35] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 118.674010][ T35] dvb-usb: bulk message failed: -22 (3/0) [ 118.676499][ T35] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 118.677729][ T35] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 118.677764][ T35] usb 7-1: media controller created [ 118.678876][ T35] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.689280][ T35] dvb-usb: bulk message failed: -22 (6/0) [ 118.692336][ T35] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 118.693960][ T35] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input23 [ 118.694695][ T35] dvb-usb: schedule remote query interval to 150 msecs. [ 118.694706][ T35] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 118.722521][ T42] audit: type=1400 audit(1789321071.550:476): avc: denied { write } for pid=7535 comm="syz.3.570" name="c.1" dev="configfs" ino=10594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.723404][ T42] audit: type=1400 audit(1789321071.550:477): avc: denied { create } for pid=7535 comm="syz.3.570" name="SourceSink.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 118.737732][ T42] audit: type=1400 audit(1789321071.550:478): avc: denied { write } for pid=7535 comm="syz.3.570" name="c.1" dev="configfs" ino=10594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.854041][ T5732] dvb-usb: bulk message failed: -22 (1/0) [ 118.854059][ T5732] dvb-usb: error while querying for an remote control event. [ 118.962479][ T851] usb 7-1: USB disconnect, device number 17 [ 118.969248][ T2671] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 118.995163][ T851] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 119.058884][ T7564] WARNING! power/level is deprecated; use power/control instead [ 119.247559][ T2671] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 119.247577][ T2671] em28xx 5-1:0.0: board has no eeprom [ 119.304162][ T2671] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 119.304187][ T2671] em28xx 5-1:0.0: dvb set to bulk mode. [ 119.309721][ T851] em28xx 5-1:0.0: Binding DVB extension [ 119.313465][ T2671] usb 5-1: USB disconnect, device number 19 [ 119.314756][ T2671] em28xx 5-1:0.0: Disconnecting em28xx [ 119.333593][ T851] em28xx 5-1:0.0: Registering input extension [ 119.335527][ T2671] em28xx 5-1:0.0: Closing input extension [ 119.362591][ T2671] em28xx: Freeing device [ 119.364472][ T5732] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 119.524636][ T5732] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 119.528223][ T5732] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 119.528260][ T5732] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.528280][ T5732] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.528297][ T5732] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 119.529383][ T5732] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 119.529402][ T5732] usb 8-1: Manufacturer: syz [ 119.532706][ T5732] usb 8-1: config 0 descriptor?? [ 119.942042][ T5732] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 119.947958][ T5732] appleir 0003:05AC:8243.0007: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 120.251824][ T7611] netlink: 'syz.3.582': attribute type 1 has an invalid length. [ 120.268849][ T7611] netlink: 'syz.3.582': attribute type 8 has an invalid length. [ 120.282309][ T5732] usb 8-1: USB disconnect, device number 13 [ 121.156757][ T7647] FAULT_INJECTION: forcing a failure. [ 121.156757][ T7647] name failslab, interval 1, probability 0, space 0, times 0 [ 121.156780][ T7647] CPU: 3 UID: 0 PID: 7647 Comm: syz.3.617 Not tainted syzkaller #0 PREEMPT(full) [ 121.156793][ T7647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.156800][ T7647] Call Trace: [ 121.156804][ T7647] [ 121.156809][ T7647] dump_stack_lvl+0x100/0x190 [ 121.156842][ T7647] should_fail_ex.cold+0x5/0xa [ 121.156859][ T7647] should_failslab+0xc2/0x120 [ 121.156879][ T7647] __kmalloc_noprof+0xfc/0x840 [ 121.156894][ T7647] ? lsm_blob_alloc+0x68/0x90 [ 121.156913][ T7647] lsm_blob_alloc+0x68/0x90 [ 121.156929][ T7647] security_key_alloc+0x34/0x310 [ 121.156941][ T7647] key_alloc+0x876/0x1310 [ 121.156958][ T7647] ? __kmalloc_noprof+0x350/0x840 [ 121.156970][ T7647] ? __pfx_key_alloc+0x10/0x10 [ 121.156985][ T7647] ? hook_cred_prepare+0x177/0x370 [ 121.157000][ T7647] keyring_alloc+0x44/0xc0 [ 121.157016][ T7647] lookup_user_key+0x9b8/0x1300 [ 121.157030][ T7647] ? __pfx_lookup_user_key+0x10/0x10 [ 121.157044][ T7647] ? lock_acquire+0x1d1/0x380 [ 121.157057][ T7647] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 121.157076][ T7647] __do_sys_add_key+0x2a6/0x460 [ 121.157092][ T7647] ? __x64_sys_openat+0x12d/0x210 [ 121.157108][ T7647] ? __pfx___do_sys_add_key+0x10/0x10 [ 121.157126][ T7647] ? syscall_user_dispatch+0x76/0x130 [ 121.157144][ T7647] do_syscall_64+0x123/0x790 [ 121.157165][ T7647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.157177][ T7647] RIP: 0033:0x7f6689b9e159 [ 121.157188][ T7647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.157199][ T7647] RSP: 002b:00007f6687df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 121.157211][ T7647] RAX: ffffffffffffffda RBX: 00007f6689e25fa0 RCX: 00007f6689b9e159 [ 121.157219][ T7647] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000200000000180 [ 121.157227][ T7647] RBP: 00007f6689c3503b R08: ffffffffffffffff R09: 0000000000000000 [ 121.157234][ T7647] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000 [ 121.157242][ T7647] R13: 00007f6689e26038 R14: 00007f6689e25fa0 R15: 00007fff3e68e138 [ 121.157257][ T7647] [ 121.385585][ T42] audit: type=1400 audit(1789321074.220:479): avc: denied { mount } for pid=7658 comm="syz.0.620" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 121.427629][ T42] audit: type=1400 audit(1789321074.260:480): avc: denied { unmount } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 121.680688][ T7656] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 121.687829][ T7656] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f] [ 121.688095][ T7656] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff] [ 121.688499][ T7656] pci 0000:00:03.0: BAR 4 [mem 0x380800004000-0x380800007fff 64bit pref] [ 121.794279][ T7656] pci 0000:00:03.0: Adding to iommu group 3 [ 121.809581][ T7656] pci 0000:00:03.0: BAR 4 [mem 0x380800004000-0x380800007fff 64bit pref]: assigned [ 121.813096][ T7656] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned [ 121.813349][ T7656] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 122.312891][ T7656] hwrng_fill thread creation failed [ 123.133024][ T42] audit: type=1400 audit(1789321075.960:481): avc: denied { ioctl } for pid=7757 comm="syz.2.668" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 123.570046][ T42] audit: type=1400 audit(1789321076.400:482): avc: denied { mount } for pid=7764 comm="syz.0.670" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 123.597911][ T42] audit: type=1400 audit(1789321076.430:483): avc: denied { unmount } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 124.222094][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 124.222112][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 124.222122][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x51b7 instead [ 124.222133][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xabe0 instead [ 124.222142][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 124.222151][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 124.222160][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 124.222172][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 124.222190][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 124.222208][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 124.222217][ T7799] jffs2: Further such events for this erase block will not be printed [ 124.222425][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 124.222434][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 124.222443][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x51b7 instead [ 124.222453][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xabe0 instead [ 124.222461][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 124.222469][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 124.222478][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 124.222488][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 124.222504][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 124.222521][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 124.222529][ T7799] jffs2: Further such events for this erase block will not be printed [ 124.222714][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 124.222722][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 124.222731][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x51b7 instead [ 124.222741][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x60df instead [ 124.222764][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 124.222772][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 124.222781][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x51b7 instead [ 124.222791][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x60df instead [ 124.222814][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 124.222822][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 124.222831][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x51b7 instead [ 124.222841][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x60df instead [ 124.222864][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 124.222872][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 124.222881][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x51b7 instead [ 124.222891][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x60df instead [ 124.222914][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 124.222922][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 124.222931][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x51b7 instead [ 124.222941][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x60df instead [ 124.222963][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 124.222972][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 124.222981][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x51b7 instead [ 124.222990][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x60df instead [ 124.223013][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 124.223021][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 124.223030][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x51b7 instead [ 124.223040][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x60df instead [ 124.223062][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 124.223071][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 124.223080][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x51b7 instead [ 124.223090][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x60df instead [ 124.223112][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 124.223121][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 124.223129][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x51b7 instead [ 124.223139][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x60df instead [ 124.223162][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 124.223170][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 124.223179][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x51b7 instead [ 124.223189][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x60df instead [ 124.223212][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 124.223220][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 124.223229][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x51b7 instead [ 124.223239][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x60df instead [ 124.223261][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 124.223270][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 124.223328][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x51b7 instead [ 124.223340][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x60df instead [ 124.223366][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 124.223375][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 124.223385][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x51b7 instead [ 124.223396][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x60df instead [ 124.223420][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 124.223429][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 124.223438][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x51b7 instead [ 124.223449][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x60df instead [ 124.223474][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 124.223482][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 124.223491][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x51b7 instead [ 124.223501][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x60df instead [ 124.223524][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 124.223533][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 124.223542][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x51b7 instead [ 124.223551][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x60df instead [ 124.223574][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 124.223583][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 124.223592][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x51b7 instead [ 124.223601][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x60df instead [ 124.226807][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 124.226822][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 124.226832][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x51b7 instead [ 124.226843][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x60df instead [ 124.226869][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 124.226877][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 124.226886][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x51b7 instead [ 124.226896][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x60df instead [ 124.226920][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 124.226930][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 124.226940][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x51b7 instead [ 124.226950][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x60df instead [ 124.226975][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 124.226985][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 124.226994][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x51b7 instead [ 124.227005][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x60df instead [ 124.227029][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 124.227038][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 124.227047][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x51b7 instead [ 124.227057][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x60df instead [ 124.227081][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 124.227089][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 124.227098][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x51b7 instead [ 124.227108][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x60df instead [ 124.227130][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 124.227139][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 124.227148][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x51b7 instead [ 124.227158][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x60df instead [ 124.227200][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 124.227210][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 124.227220][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x51b7 instead [ 124.227231][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x60df instead [ 124.227254][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 124.227264][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 124.227274][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x51b7 instead [ 124.227289][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x60df instead [ 124.227325][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 124.227335][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 124.227345][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x51b7 instead [ 124.227356][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x60df instead [ 124.227379][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 124.227388][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 124.227397][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x51b7 instead [ 124.227406][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x60df instead [ 124.227429][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 124.227438][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 124.227447][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x51b7 instead [ 124.227458][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x60df instead [ 124.227482][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 124.227491][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 124.227501][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x51b7 instead [ 124.227512][ T7799] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x60df instead [ 124.227532][ T7799] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 124.227536][ T7799] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 124.411453][ T42] audit: type=1326 audit(1789321077.240:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.3.694" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6689b9e159 code=0x7ffc0000 [ 124.411658][ T42] audit: type=1326 audit(1789321077.240:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.3.694" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6689b9e159 code=0x7ffc0000 [ 124.434403][ T42] audit: type=1326 audit(1789321077.270:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.3.694" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6689b9e159 code=0x7ffc0000 [ 124.434433][ T42] audit: type=1326 audit(1789321077.270:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.3.694" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6689b9e159 code=0x7ffc0000 [ 124.434456][ T42] audit: type=1326 audit(1789321077.270:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.3.694" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6689b9e159 code=0x7ffc0000 [ 126.003218][ T7954] FAULT_INJECTION: forcing a failure. [ 126.003218][ T7954] name failslab, interval 1, probability 0, space 0, times 0 [ 126.003239][ T7954] CPU: 1 UID: 0 PID: 7954 Comm: syz.3.757 Not tainted syzkaller #0 PREEMPT(full) [ 126.003252][ T7954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.003258][ T7954] Call Trace: [ 126.003262][ T7954] [ 126.003266][ T7954] dump_stack_lvl+0x100/0x190 [ 126.003299][ T7954] should_fail_ex.cold+0x5/0xa [ 126.003316][ T7954] should_failslab+0xc2/0x120 [ 126.003339][ T7954] __kmalloc_noprof+0xfc/0x840 [ 126.003350][ T7954] ? rcu_is_watching+0x13/0xc0 [ 126.003366][ T7954] ? tomoyo_realpath_from_path+0xb6/0x690 [ 126.003386][ T7954] tomoyo_realpath_from_path+0xb6/0x690 [ 126.003402][ T7954] tomoyo_check_open_permission+0x2af/0x3c0 [ 126.003416][ T7954] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 126.003433][ T7954] ? hook_file_open+0x248/0x8e0 [ 126.003457][ T7954] ? path_get+0x61/0x80 [ 126.003473][ T7954] tomoyo_file_open+0x6b/0x90 [ 126.003489][ T7954] security_file_open+0xb5/0x1e0 [ 126.003519][ T7954] do_dentry_open+0x588/0x14d0 [ 126.003538][ T7954] vfs_open+0x82/0x3f0 [ 126.003555][ T7954] path_openat+0x19fa/0x2440 [ 126.003572][ T7954] ? __pfx_path_openat+0x10/0x10 [ 126.003590][ T7954] do_file_open+0x20e/0x430 [ 126.003606][ T7954] ? __pfx_do_file_open+0x10/0x10 [ 126.003631][ T7954] ? _raw_spin_unlock+0x28/0x50 [ 126.003668][ T7954] ? alloc_fd+0x471/0x7a0 [ 126.003687][ T7954] do_sys_openat2+0x10f/0x1e0 [ 126.003703][ T7954] ? __pfx_do_sys_openat2+0x10/0x10 [ 126.003724][ T7954] __x64_sys_openat+0x12d/0x210 [ 126.003741][ T7954] ? __pfx___x64_sys_openat+0x10/0x10 [ 126.003762][ T7954] do_syscall_64+0x123/0x790 [ 126.003780][ T7954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.003792][ T7954] RIP: 0033:0x7f6689b9e159 [ 126.003802][ T7954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.003813][ T7954] RSP: 002b:00007f6687df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 126.003824][ T7954] RAX: ffffffffffffffda RBX: 00007f6689e25fa0 RCX: 00007f6689b9e159 [ 126.003831][ T7954] RDX: 0000000000000002 RSI: 00002000000007c0 RDI: ffffffffffffff9c [ 126.003838][ T7954] RBP: 00007f6689c3503b R08: 0000000000000000 R09: 0000000000000000 [ 126.003844][ T7954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.003851][ T7954] R13: 00007f6689e26038 R14: 00007f6689e25fa0 R15: 00007fff3e68e138 [ 126.003865][ T7954] [ 126.005638][ T7954] ERROR: Out of memory at tomoyo_realpath_from_path. [ 126.015181][ T5875] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 126.184010][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 126.184497][ T5875] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 126.187752][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 126.187768][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 126.187785][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.197050][ T5875] kobil_sct 5-1:1.0: KOBIL USB smart card terminal converter detected [ 126.215082][ T5875] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 127.017631][ T7972] program syz.2.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.139758][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 127.139770][ T42] audit: type=1400 audit(1789321079.970:505): avc: denied { name_bind } for pid=7990 comm="syz.3.773" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 127.190515][ T5732] usb 5-1: USB disconnect, device number 20 [ 127.192661][ T5732] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 127.193658][ T5732] kobil_sct 5-1:1.0: device disconnected [ 127.658366][ T8012] program syz.3.780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.797877][ T8021] mmap: syz.0.783 (8021) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 127.868820][ T8021] netlink: 'syz.0.783': attribute type 3 has an invalid length. [ 128.135968][ T25] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 128.283536][ T25] usb 6-1: device descriptor read/64, error -71 [ 128.361484][ T8050] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(17) [ 128.393473][ T5819] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 128.543506][ T25] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 128.546187][ T5819] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 128.547787][ T5819] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.547799][ T5819] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 128.547823][ T5819] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.549555][ T5819] usb 8-1: config 0 descriptor?? [ 128.551833][ T5819] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 128.551854][ T5819] dvb-usb: bulk message failed: -22 (3/0) [ 128.565178][ T5819] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 128.565744][ T5819] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 128.565767][ T5819] usb 8-1: media controller created [ 128.566646][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.568993][ T5819] dvb-usb: bulk message failed: -22 (6/0) [ 128.569025][ T5819] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 128.570565][ T5819] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input25 [ 128.572083][ T5819] dvb-usb: schedule remote query interval to 150 msecs. [ 128.572094][ T5819] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 128.683434][ T25] usb 6-1: device descriptor read/64, error -71 [ 128.724484][ T5819] dvb-usb: bulk message failed: -22 (1/0) [ 128.724503][ T5819] dvb-usb: error while querying for an remote control event. [ 128.796813][ T25] usb usb6-port1: attempt power cycle [ 128.833919][ T5830] usb 8-1: USB disconnect, device number 14 [ 128.853823][ T5830] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 129.153876][ T25] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 129.173860][ T25] usb 6-1: device descriptor read/8, error -71 [ 129.393473][ T5830] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 129.423525][ T25] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 129.454351][ T25] usb 6-1: device descriptor read/8, error -71 [ 129.528027][ T42] audit: type=1400 audit(1789321082.361:506): avc: denied { setopt } for pid=8082 comm="syz.3.810" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.528728][ T8083] IPVS: You probably need to specify IP address on multicast interface. [ 129.528759][ T8083] IPVS: Error connecting to the multicast addr [ 129.544981][ T5830] usb 5-1: Using ep0 maxpacket: 8 [ 129.547004][ T5830] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 129.547923][ T5830] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 129.547946][ T5830] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.547958][ T5830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 129.547970][ T5830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.547981][ T5830] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.548000][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.565037][ T25] usb usb6-port1: unable to enumerate USB device [ 129.576692][ T5819] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 129.724014][ T5819] usb 7-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 129.725075][ T5819] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.758808][ T5830] usb 5-1: usb_control_msg returned -32 [ 129.758848][ T5830] usbtmc 5-1:16.0: can't read capabilities [ 129.867272][ T8092] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 129.948632][ T5819] net1080 7-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, 92:f8:f2:4d:22:df [ 129.961394][ T42] audit: type=1400 audit(1789321082.791:507): avc: denied { search } for pid=5440 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.961425][ T42] audit: type=1400 audit(1789321082.791:508): avc: denied { search } for pid=5440 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.961607][ T42] audit: type=1400 audit(1789321082.791:509): avc: denied { search } for pid=5440 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.015879][ T42] audit: type=1400 audit(1789321082.851:510): avc: denied { read } for pid=8098 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.016071][ T42] audit: type=1400 audit(1789321082.851:511): avc: denied { read open } for pid=8098 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.016146][ T42] audit: type=1400 audit(1789321082.851:512): avc: denied { getattr } for pid=8098 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.022680][ T42] audit: type=1400 audit(1789321082.851:513): avc: denied { write } for pid=8097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.022797][ T42] audit: type=1400 audit(1789321082.851:514): avc: denied { add_name } for pid=8097 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.111906][ T8102] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 130.112691][ T851] usb 5-1: USB disconnect, device number 21 [ 130.944802][ T5819] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 131.095823][ T5819] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 131.096928][ T5819] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.096940][ T5819] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 131.096962][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.098318][ T5819] usb 5-1: config 0 descriptor?? [ 131.100423][ T5819] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 131.100442][ T5819] dvb-usb: bulk message failed: -22 (3/0) [ 131.108433][ T5819] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 131.109011][ T5819] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 131.109046][ T5819] usb 5-1: media controller created [ 131.110101][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.124385][ T5819] dvb-usb: bulk message failed: -22 (6/0) [ 131.124442][ T5819] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 131.126473][ T5819] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input26 [ 131.137613][ T5819] dvb-usb: schedule remote query interval to 150 msecs. [ 131.137632][ T5819] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 131.293304][ T5819] dvb-usb: bulk message failed: -22 (1/0) [ 131.293325][ T5819] dvb-usb: error while querying for an remote control event. [ 131.356704][ T35] usb 5-1: USB disconnect, device number 22 [ 131.369273][ T35] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 132.028951][ T8127] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 132.513330][ T5810] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 132.574161][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.574192][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.643267][ T5810] usb 5-1: device descriptor read/64, error -71 [ 132.883306][ T5810] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 133.013271][ T5810] usb 5-1: device descriptor read/64, error -71 [ 133.123641][ T5810] usb usb5-port1: attempt power cycle [ 133.463267][ T5810] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 133.483655][ T5810] usb 5-1: device descriptor read/8, error -71 [ 133.723209][ T5810] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 133.753934][ T5810] usb 5-1: device descriptor read/8, error -71 [ 133.863406][ T5810] usb usb5-port1: unable to enumerate USB device [ 135.513860][ T8145] 9p: Could not find request transport: uj [ 135.864575][ T5819] usb 7-1: USB disconnect, device number 18 [ 135.869647][ T5819] net1080 7-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT [ 135.952143][ T8154] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 135.958867][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 135.958884][ T42] audit: type=1400 audit(1789321088.791:522): avc: denied { write } for pid=8152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.968178][ T8149] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 136.035384][ T42] audit: type=1400 audit(1789321088.871:523): avc: denied { write } for pid=8163 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.123003][ T6968] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 136.135875][ T6968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.135889][ T6968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.234627][ T8184] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 136.263021][ T5830] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 136.393093][ T5830] usb 6-1: device descriptor read/64, error -71 [ 136.465112][ T8202] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 136.468854][ T42] audit: type=1400 audit(1789321089.301:524): avc: denied { create } for pid=8203 comm="syz.2.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 136.470406][ T42] audit: type=1400 audit(1789321089.301:525): avc: denied { bind } for pid=8203 comm="syz.2.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 136.633122][ T5830] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 136.634761][ T8215] netlink: 'syz.3.859': attribute type 4 has an invalid length. [ 136.709336][ T8226] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 136.735931][ T42] audit: type=1400 audit(1789321089.571:526): avc: denied { mmap_zero } for pid=8227 comm="syz.3.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 136.763034][ T5830] usb 6-1: device descriptor read/64, error -71 [ 136.842102][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.869'. [ 136.873242][ T5830] usb usb6-port1: attempt power cycle [ 136.993173][ T2671] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 137.138162][ T8250] 9p: Could not find request transport: uj [ 137.156141][ T2671] usb 8-1: unable to get BOS descriptor or descriptor too short [ 137.156183][ T2671] usb 8-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 137.157425][ T2671] usb 8-1: config 4 has an invalid interface number: 4 but max is 0 [ 137.157446][ T2671] usb 8-1: config 4 has no interface number 0 [ 137.157469][ T2671] usb 8-1: config 4 interface 4 has no altsetting 0 [ 137.159918][ T2671] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.159939][ T2671] usb 8-1: Product: syz [ 137.159952][ T2671] usb 8-1: Manufacturer: syz [ 137.159963][ T2671] usb 8-1: SerialNumber: syz [ 137.224261][ T5830] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 137.253871][ T5830] usb 6-1: device descriptor read/8, error -71 [ 137.522978][ T5830] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 137.545954][ T5830] usb 6-1: device descriptor read/8, error -71 [ 137.653188][ T5830] usb usb6-port1: unable to enumerate USB device [ 137.744480][ T70] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 137.754213][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.754225][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.914240][ T2671] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 137.914523][ T2671] gspca_sunplus: reg_w_riv err -71 [ 137.914554][ T2671] sunplus 8-1:4.4: probe with driver sunplus failed with error -71 [ 137.915481][ T2671] usb 8-1: USB disconnect, device number 15 [ 138.544348][ T851] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 138.687835][ T8301] device-mapper: ioctl: Invalid data size in the ioctl structure: 126 [ 138.699099][ T851] usb 8-1: unable to get BOS descriptor or descriptor too short [ 138.699126][ T851] usb 8-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 138.700390][ T851] usb 8-1: config 4 has an invalid interface number: 4 but max is 0 [ 138.700411][ T851] usb 8-1: config 4 has no interface number 0 [ 138.700433][ T851] usb 8-1: config 4 interface 4 has no altsetting 0 [ 138.703806][ T851] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.703820][ T851] usb 8-1: Product: syz [ 138.703827][ T851] usb 8-1: Manufacturer: syz [ 138.703834][ T851] usb 8-1: Ser ** replaying previous printk message ** [ 138.703834][ T851] usb 8-1: SerialNumber: syz [ 138.724989][ T37] ================================================================== [ 138.725003][ T37] BUG: KASAN: slab-use-after-free in drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 138.725065][ T37] Read of size 1 at addr ffff888035750809 by task kworker/u33:0/37 [ 138.725080][ T37] [ 138.725088][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 138.725108][ T37] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.725119][ T37] Workqueue: events_unbound commit_work [ 138.725142][ T37] Call Trace: [ 138.725147][ T37] [ 138.725154][ T37] dump_stack_lvl+0x100/0x190 [ 138.725180][ T37] print_report+0x13d/0x4b0 [ 138.725206][ T37] ? __virt_addr_valid+0x239/0x430 [ 138.725226][ T37] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 138.725245][ T37] kasan_report+0xdf/0x1c0 [ 138.725266][ T37] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 138.725291][ T37] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 138.725315][ T37] ? preempt_schedule_common+0x3c/0xb0 [ 138.725343][ T37] ? preempt_schedule_thunk+0x16/0x40 [ 138.725365][ T37] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 138.725390][ T37] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 138.725412][ T37] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 138.725439][ T37] drm_atomic_helper_commit_tail+0xff/0x130 [ 138.725463][ T37] commit_tail+0x338/0x430 [ 138.725487][ T37] process_one_work+0xac7/0x1b10 [ 138.725519][ T37] ? __pfx_process_one_work+0x10/0x10 [ 138.725546][ T37] ? lock_acquire+0x1d1/0x380 [ 138.725597][ T37] ? __pfx_commit_work+0x10/0x10 [ 138.725622][ T37] worker_thread+0x5ef/0xe50 [ 138.725652][ T37] ? kthread+0x13a/0x450 [ 138.725674][ T37] ? __pfx_worker_thread+0x10/0x10 [ 138.725699][ T37] kthread+0x373/0x450 [ 138.725721][ T37] ? __pfx_kthread+0x10/0x10 [ 138.725745][ T37] ret_from_fork+0x730/0xd60 [ 138.725765][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 138.725789][ T37] ? __switch_to+0x800/0x10f0 [ 138.725813][ T37] ? __pfx_kthread+0x10/0x10 [ 138.725853][ T37] ret_from_fork_asm+0x1a/0x30 [ 138.725876][ T37] [ 138.725883][ T37] [ 138.725886][ T37] Allocated by task 8303: [ 138.725895][ T37] kasan_save_stack+0x30/0x50 [ 138.725913][ T37] kasan_save_track+0x14/0x30 [ 138.725930][ T37] __kasan_kmalloc+0xaa/0xb0 [ 138.725946][ T37] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 138.725970][ T37] drm_atomic_helper_crtc_duplicate_state+0x72/0xd0 [ 138.725996][ T37] drm_atomic_get_crtc_state+0x1de/0x690 [ 138.726014][ T37] drm_atomic_set_property+0x165/0x3f90 [ 138.726034][ T37] drm_mode_atomic_ioctl+0x6ed/0x27c0 [ 138.726055][ T37] drm_ioctl_kernel+0x1f3/0x3e0 [ 138.726074][ T37] drm_ioctl+0x5e6/0xc60 [ 138.726092][ T37] __x64_sys_ioctl+0x18e/0x210 [ 138.726107][ T37] do_syscall_64+0x123/0x790 [ 138.726127][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.726144][ T37] [ 138.726147][ T37] Freed by task 2671: [ 138.726154][ T37] kasan_save_stack+0x30/0x50 [ 138.726171][ T37] kasan_save_track+0x14/0x30 [ 138.726187][ T37] kasan_save_free_info+0x3b/0x70 [ 138.726211][ T37] __kasan_slab_free+0x5f/0x80 [ 138.726229][ T37] kfree+0x22b/0x6d0 [ 138.726250][ T37] drm_atomic_commit_default_clear+0x465/0x10c0 [ 138.726271][ T37] __drm_atomic_commit_free+0x185/0x2f0 [ 138.726290][ T37] drm_atomic_helper_dirtyfb+0x578/0x790 [ 138.726306][ T37] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x350 [ 138.726333][ T37] drm_fb_helper_damage_work+0x4c8/0xab0 [ 138.726354][ T37] process_one_work+0xac7/0x1b10 [ 138.726377][ T37] worker_thread+0x5ef/0xe50 [ 138.726400][ T37] kthread+0x373/0x450 [ 138.726420][ T37] ret_from_fork+0x730/0xd60 [ 138.726435][ T37] ret_from_fork_asm+0x1a/0x30 [ 138.726451][ T37] [ 138.726455][ T37] The buggy address belongs to the object at ffff888035750800 [ 138.726455][ T37] which belongs to the cache kmalloc-512 of size 512 [ 138.726469][ T37] The buggy address is located 9 bytes inside of [ 138.726469][ T37] freed 512-byte region [ffff888035750800, ffff888035750a00) [ 138.726483][ T37] [ 138.726487][ T37] The buggy address belongs to the physical page: [ 138.726493][ T37] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35750 [ 138.726505][ T37] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 138.726516][ T37] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 138.726528][ T37] page_type: f5(slab) [ 138.726540][ T37] raw: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 138.726552][ T37] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 138.726564][ T37] head: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 138.726576][ T37] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 138.726588][ T37] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 138.726599][ T37] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 138.726607][ T37] page dumped because: kasan: bad access detected [ 138.726613][ T37] page_owner tracks the page as allocated [ 138.726617][ T37] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8079082036 [ 138.726638][ T37] post_alloc_hook+0xfd/0x120 [ 138.726656][ T37] get_page_from_freelist+0x110d/0x35d0 [ 138.726677][ T37] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 138.726702][ T37] new_slab+0xa9/0x6e0 [ 138.726724][ T37] refill_objects+0xe3/0x410 [ 138.726746][ T37] __pcs_replace_empty_main+0x35e/0x650 [ 138.726769][ T37] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 138.726798][ T37] device_add+0xd3f/0x1970 [ 138.726818][ T37] netdev_register_kobject+0x1df/0x410 [ 138.726849][ T37] register_netdevice+0x15b6/0x25a0 [ 138.726869][ T37] __ip_tunnel_create+0x52b/0x670 [ 138.726888][ T37] ip_tunnel_init_net+0x230/0x780 [ 138.726908][ T37] ops_init+0x1e2/0x5f0 [ 138.726925][ T37] register_pernet_operations+0x3cb/0x740 [ 138.726946][ T37] register_pernet_device+0x29/0x80 [ 138.726966][ T37] ipgre_init+0x22/0x1a0 [ 138.726984][ T37] page_owner free stack trace missing [ 138.726989][ T37] [ 138.726993][ T37] Memory state around the buggy address: [ 138.727000][ T37] ffff888035750700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 138.727011][ T37] ffff888035750780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 138.727022][ T37] >ffff888035750800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.727032][ T37] ^ [ 138.727040][ T37] ffff888035750880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.727051][ T37] ffff888035750900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.727060][ T37] ================================================================== [ 138.727164][ T37] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 138.977954][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 138.980876][ T37] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.983975][ T37] Workqueue: events_unbound commit_work [ 138.985703][ T37] Call Trace: [ 138.986790][ T37] [ 138.987749][ T37] dump_stack_lvl+0x100/0x190 [ 138.989224][ T37] vpanic+0x553/0x970 [ 138.990752][ T37] ? __pfx_vpanic+0x10/0x10 [ 138.992480][ T37] ? mark_held_locks+0x40/0x70 [ 138.994027][ T37] ? irqentry_exit+0x24d/0xa10 [ 138.995530][ T37] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 138.997780][ T37] panic+0xd1/0xe0 [ 138.998969][ T37] ? __pfx_panic+0x10/0x10 [ 139.000670][ T37] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 139.003707][ T37] ? preempt_schedule_common+0x3c/0xb0 [ 139.005961][ T37] check_panic_on_warn.cold+0x19/0x34 [ 139.007988][ T37] end_report.part.0+0x3a/0x90 [ 139.009631][ T37] kasan_report.cold+0xe/0x18 [ 139.011155][ T37] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 139.013422][ T37] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 139.015597][ T37] ? preempt_schedule_common+0x3c/0xb0 [ 139.017341][ T37] ? preempt_schedule_thunk+0x16/0x40 [ 139.019022][ T37] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 139.021424][ T37] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 139.023271][ T37] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 139.025286][ T37] drm_atomic_helper_commit_tail+0xff/0x130 [ 139.027144][ T37] commit_tail+0x338/0x430 [ 139.028506][ T37] process_one_work+0xac7/0x1b10 [ 139.030018][ T37] ? __pfx_process_one_work+0x10/0x10 [ 139.031704][ T37] ? lock_acquire+0x1d1/0x380 [ 139.033180][ T37] ? __pfx_commit_work+0x10/0x10 [ 139.035004][ T37] worker_thread+0x5ef/0xe50 [ 139.036769][ T37] ? kthread+0x13a/0x450 [ 139.038364][ T37] ? __pfx_worker_thread+0x10/0x10 [ 139.040042][ T37] kthread+0x373/0x450 [ 139.041346][ T37] ? __pfx_kthread+0x10/0x10 [ 139.042808][ T37] ret_from_fork+0x730/0xd60 [ 139.044299][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 139.045901][ T37] ? __switch_to+0x800/0x10f0 [ 139.047396][ T37] ? __pfx_kthread+0x10/0x10 [ 139.048987][ T37] ret_from_fork_asm+0x1a/0x30 [ 139.050943][ T37] [ 139.053023][ T37] Kernel Offset: disabled [ 139.054859][ T37] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:38:11 Registers: info registers vcpu 0 CPU#0 RAX=8000000000000001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88801eee0000 RSI=ffffffff81ea3f60 RDI=ffff88801eee0000 RBP=ffffc90000137da8 RSP=ffffc90000137958 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=3a312d3820627375 R12=ffffffff8fbd71c0 R13=ffffc90000137da8 R14=0000000000000000 R15=ffffc90000137db4 RIP=ffffffff820c1650 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b59000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b32923ffc CR3=000000004f7f6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000fefc0000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 656d69745f746961 775f6f692e716662 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3e68e626 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3e68e626 00007fff3e68e62c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6689c3561e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6689c3565e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6689c357c2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6689c35650 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b0c155 RDI=ffffffff9bc6bca0 RBP=ffffffff9bc6bc60 RSP=ffffc90000717220 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3330383838666666 R12=0000000000000000 R13=000000000000000d R14=0000000000000007 R15=ffffc90000717538 RIP=ffffffff85b0c17f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880d5c59000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c31b88d CR3=000000002675d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc32717696 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc32717696 00007ffc3271769c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c1643561e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c1643565e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c164357c2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c16435650 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000031647261632f 6972642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000012475142400c 4a51470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c165f25f8 00007f3c165f25c8 00007f3c165f2600 00007f3c165f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000101 RBX=000000000000aec4 RCX=0000000000000006 RDX=0000000000004004 RSI=0000000000000002 RDI=0000000000000004 RBP=0000000000000000 RSP=ffffc90007f57890 R8 =0000000000000000 R9 =0000000002000000 R10=0000000000020000 R11=000000000000001c R12=0000000000000000 R13=0000000000000005 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff8bd06160 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007fb7431fe6c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d5d59000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000002dbac000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=ffff88802c622580 RSI=ffffffff81ff566e RDI=ffff88802c622580 RBP=ffff88806a443cc0 RSP=ffffc9000734f8a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed10058c4763 R13=0000000000000003 R14=ffffed100d488799 R15=0000000000000001 RIP=ffffffff81ff5670 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e59000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3c16387780 CR3=000000002dbac000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb74315d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeff09be76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeff09be76 00007ffeff09be7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb74243561e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb74243565e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb7424357c2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb742435650 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb7425f25f8 00007fb7425f25c8 00007fb7425f2600 00007fb7425f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000