[ 44.145694][ T40] audit: type=1400 audit(1758438501.442:61): avc: denied { siginh } for pid=5879 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:10108' (ED25519) to the list of known hosts. [ 49.293735][ T40] audit: type=1400 audit(1758438506.622:62): avc: denied { execute } for pid=5964 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 49.302760][ T40] audit: type=1400 audit(1758438506.632:63): avc: denied { execute_no_trans } for pid=5964 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2025/09/21 07:08:27 parsed 1 programs [ 50.455147][ T40] audit: type=1400 audit(1758438507.782:64): avc: denied { write } for pid=5964 comm="syz-execprog" path="pipe:[4820]" dev="pipefs" ino=4820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 50.464437][ T40] audit: type=1400 audit(1758438507.782:65): avc: denied { node_bind } for pid=5964 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 52.563178][ T40] audit: type=1400 audit(1758438509.892:66): avc: denied { mounton } for pid=5977 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 52.565597][ T5977] cgroup: Unknown subsys name 'net' [ 52.569716][ T40] audit: type=1400 audit(1758438509.892:67): avc: denied { mount } for pid=5977 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.577927][ T40] audit: type=1400 audit(1758438509.902:68): avc: denied { unmount } for pid=5977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.786195][ T5977] cgroup: Unknown subsys name 'cpuset' [ 52.792155][ T5977] cgroup: Unknown subsys name 'rlimit' [ 53.015845][ T40] audit: type=1400 audit(1758438510.342:69): avc: denied { setattr } for pid=5977 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.023320][ T40] audit: type=1400 audit(1758438510.342:70): avc: denied { create } for pid=5977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.030939][ T40] audit: type=1400 audit(1758438510.342:71): avc: denied { write } for pid=5977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.068543][ T5979] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 53.764995][ T5977] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.335181][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 55.335196][ T40] audit: type=1400 audit(1758438512.662:80): avc: denied { execmem } for pid=5983 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.347721][ T40] audit: type=1400 audit(1758438512.662:81): avc: denied { create } for pid=5986 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.353700][ T40] audit: type=1400 audit(1758438512.662:82): avc: denied { read write } for pid=5986 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.360711][ T40] audit: type=1400 audit(1758438512.662:83): avc: denied { open } for pid=5986 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.368200][ T40] audit: type=1400 audit(1758438512.672:84): avc: denied { read } for pid=5987 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.368244][ T5991] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.375058][ T40] audit: type=1400 audit(1758438512.672:85): avc: denied { open } for pid=5987 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.384579][ T5991] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.384742][ T40] audit: type=1400 audit(1758438512.672:86): avc: denied { mounton } for pid=5987 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 55.393951][ T5991] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.394007][ T40] audit: type=1400 audit(1758438512.682:87): avc: denied { ioctl } for pid=5986 comm="syz-executor" path="socket:[4840]" dev="sockfs" ino=4840 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.412045][ T5991] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.415723][ T5991] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.472727][ T40] audit: type=1400 audit(1758438512.802:88): avc: denied { mount } for pid=5989 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.479548][ T40] audit: type=1400 audit(1758438512.802:89): avc: denied { mounton } for pid=5989 comm="syz-executor" path="/syzkaller.T6lnqk/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.503213][ T5989] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.458432][ T6037] chnl_net:caif_netlink_parms(): no params data found [ 56.498231][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.501096][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.598325][ T6037] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.601430][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.603704][ T6037] bridge_slave_0: entered allmulticast mode [ 56.606333][ T6037] bridge_slave_0: entered promiscuous mode [ 56.610316][ T6037] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.613998][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.616252][ T6037] bridge_slave_1: entered allmulticast mode [ 56.618821][ T6037] bridge_slave_1: entered promiscuous mode [ 56.637805][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.640244][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.658999][ T6037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.672431][ T6037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.723036][ T6037] team0: Port device team_slave_0 added [ 56.727077][ T6037] team0: Port device team_slave_1 added [ 56.766483][ T6037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.768629][ T6037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.776777][ T6037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.781429][ T6037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.783588][ T6037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.792058][ T6037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.828536][ T6037] hsr_slave_0: entered promiscuous mode [ 56.830784][ T6037] hsr_slave_1: entered promiscuous mode [ 57.019647][ T6037] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.024741][ T6037] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.029304][ T6037] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.044489][ T6037] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.112832][ T6037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.130615][ T6037] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.140721][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.143735][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.153307][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.156227][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.308831][ T6037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.337430][ T6037] veth0_vlan: entered promiscuous mode [ 57.345190][ T6037] veth1_vlan: entered promiscuous mode [ 57.364011][ T6037] veth0_macvtap: entered promiscuous mode [ 57.369738][ T6037] veth1_macvtap: entered promiscuous mode [ 57.385264][ T6037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.396684][ T6037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.406525][ T1150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.410255][ T1150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.415348][ T1150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.418338][ T1150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/09/21 07:08:34 executed programs: 0 [ 57.482237][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.485307][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.490365][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.496546][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.500277][ T5333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.505356][ T5333] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.507974][ T6091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.514860][ T5991] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.515857][ T5333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.517598][ T6090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.521110][ T5991] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.521734][ T5333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.523975][ T6090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.524922][ T5991] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.526938][ T5333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.530243][ T5991] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.530657][ T6090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.530913][ T6090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.533290][ T5333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.536590][ T5991] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.817249][ T6078] chnl_net:caif_netlink_parms(): no params data found [ 58.008910][ T6083] chnl_net:caif_netlink_parms(): no params data found [ 58.016581][ T6078] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.018760][ T6078] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.020960][ T6078] bridge_slave_0: entered allmulticast mode [ 58.024242][ T6078] bridge_slave_0: entered promiscuous mode [ 58.029125][ T6078] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.031573][ T6078] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.034365][ T6078] bridge_slave_1: entered allmulticast mode [ 58.037009][ T6078] bridge_slave_1: entered promiscuous mode [ 58.049380][ T6089] chnl_net:caif_netlink_parms(): no params data found [ 58.152509][ T75] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.195569][ T6078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.207460][ T6078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.232484][ T6086] chnl_net:caif_netlink_parms(): no params data found [ 58.297059][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.300045][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.303493][ T6083] bridge_slave_0: entered allmulticast mode [ 58.306513][ T6083] bridge_slave_0: entered promiscuous mode [ 58.310125][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.314038][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.316968][ T6083] bridge_slave_1: entered allmulticast mode [ 58.320685][ T6083] bridge_slave_1: entered promiscuous mode [ 58.328183][ T6078] team0: Port device team_slave_0 added [ 58.377684][ T6078] team0: Port device team_slave_1 added [ 58.408597][ T6089] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.411846][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.414841][ T6089] bridge_slave_0: entered allmulticast mode [ 58.418795][ T6089] bridge_slave_0: entered promiscuous mode [ 58.446933][ T6083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.451530][ T6083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.487905][ T6089] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.490157][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.492649][ T6089] bridge_slave_1: entered allmulticast mode [ 58.496177][ T6089] bridge_slave_1: entered promiscuous mode [ 58.537373][ T6083] team0: Port device team_slave_0 added [ 58.563481][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.566202][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.576327][ T6078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.630808][ T6089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.636052][ T6083] team0: Port device team_slave_1 added [ 58.642020][ T6089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.645296][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.647659][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.656378][ T6078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.674332][ T6086] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.676804][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.679015][ T6086] bridge_slave_0: entered allmulticast mode [ 58.681916][ T6086] bridge_slave_0: entered promiscuous mode [ 58.750893][ T6086] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.754570][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.756988][ T6086] bridge_slave_1: entered allmulticast mode [ 58.759776][ T6086] bridge_slave_1: entered promiscuous mode [ 58.763412][ T6083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.766181][ T6083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.776191][ T6083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.804750][ T6089] team0: Port device team_slave_0 added [ 58.848345][ T6083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.851139][ T6083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.860917][ T6083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.874187][ T6089] team0: Port device team_slave_1 added [ 58.878952][ T6078] hsr_slave_0: entered promiscuous mode [ 58.881141][ T6078] hsr_slave_1: entered promiscuous mode [ 58.884308][ T6078] debugfs: 'hsr0' already exists in 'hsr' [ 58.886145][ T6078] Cannot create hsr debugfs directory [ 58.903634][ T6086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.909549][ T6086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.949472][ T6089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.953073][ T6089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.962345][ T6089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.967404][ T6089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.969977][ T6089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.980160][ T6089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.012164][ T6086] team0: Port device team_slave_0 added [ 59.105103][ T6086] team0: Port device team_slave_1 added [ 59.128695][ T6083] hsr_slave_0: entered promiscuous mode [ 59.132070][ T6083] hsr_slave_1: entered promiscuous mode [ 59.134796][ T6083] debugfs: 'hsr0' already exists in 'hsr' [ 59.137121][ T6083] Cannot create hsr debugfs directory [ 59.170533][ T6086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.172955][ T6086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.181599][ T6086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.186338][ T6086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.188406][ T6086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.195967][ T6086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.246028][ T6089] hsr_slave_0: entered promiscuous mode [ 59.248505][ T6089] hsr_slave_1: entered promiscuous mode [ 59.250799][ T6089] debugfs: 'hsr0' already exists in 'hsr' [ 59.252912][ T6089] Cannot create hsr debugfs directory [ 59.416596][ T6086] hsr_slave_0: entered promiscuous mode [ 59.419211][ T6086] hsr_slave_1: entered promiscuous mode [ 59.421574][ T6086] debugfs: 'hsr0' already exists in 'hsr' [ 59.423386][ T6086] Cannot create hsr debugfs directory [ 59.520137][ T75] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.571997][ T5991] Bluetooth: hci2: command tx timeout [ 59.572002][ T63] Bluetooth: hci0: command tx timeout [ 59.572278][ T63] Bluetooth: hci1: command tx timeout [ 59.574181][ T6091] Bluetooth: hci3: command tx timeout [ 59.625508][ T6078] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.629686][ T6078] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.635878][ T6078] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.643859][ T6078] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.699505][ T6083] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.704361][ T6083] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.709467][ T6083] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.713823][ T6083] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.773826][ T6078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.800500][ T6078] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.811498][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.813731][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.822310][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.824531][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.836330][ T6083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.860242][ T6083] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.870103][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.872590][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.881648][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.883912][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.995597][ T6078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.018461][ T6078] veth0_vlan: entered promiscuous mode [ 60.029241][ T6078] veth1_vlan: entered promiscuous mode [ 60.033921][ T6083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.053377][ T6078] veth0_macvtap: entered promiscuous mode [ 60.059524][ T6078] veth1_macvtap: entered promiscuous mode [ 60.078433][ T6083] veth0_vlan: entered promiscuous mode [ 60.083314][ T6078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.089270][ T6078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.096455][ T6083] veth1_vlan: entered promiscuous mode [ 60.103270][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.106903][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.113741][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.116528][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.141669][ T6083] veth0_macvtap: entered promiscuous mode [ 60.148199][ T6083] veth1_macvtap: entered promiscuous mode [ 60.161894][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.164287][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.175514][ T6083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.183094][ T6083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.186387][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.188786][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.192250][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.195857][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.202035][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.208697][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.259146][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.262526][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.288962][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.293667][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.471383][ T6001] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.561461][ T6084] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.621286][ T6001] usb 5-1: Using ep0 maxpacket: 32 [ 60.624816][ T6001] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 60.627346][ T6001] usb 5-1: config 0 has no interface number 0 [ 60.629337][ T6001] usb 5-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 60.635308][ T6001] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 60.638335][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.640862][ T6001] usb 5-1: Product: syz [ 60.642372][ T6001] usb 5-1: Manufacturer: syz [ 60.644182][ T6001] usb 5-1: SerialNumber: syz [ 60.646968][ T6001] usb 5-1: config 0 descriptor?? [ 60.649615][ T6141] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 60.656889][ T6001] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 60.659967][ T6001] em28xx 5-1:0.132: Video interface 132 found: bulk [ 60.711375][ T6084] usb 6-1: Using ep0 maxpacket: 32 [ 60.715340][ T6084] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 60.718505][ T6084] usb 6-1: config 0 has no interface number 0 [ 60.720837][ T6084] usb 6-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 60.727052][ T6084] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 60.730453][ T6084] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.733449][ T6084] usb 6-1: Product: syz [ 60.735172][ T6084] usb 6-1: Manufacturer: syz [ 60.736885][ T6084] usb 6-1: SerialNumber: syz [ 60.741370][ T6084] usb 6-1: config 0 descriptor?? [ 60.744052][ T6144] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 60.748141][ T6084] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 60.751327][ T6084] em28xx 6-1:0.132: Video interface 132 found: bulk [ 60.755784][ T75] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.911643][ T6001] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 60.987367][ T6001] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 60.990948][ T6001] em28xx 5-1:0.132: board has no eeprom [ 61.001656][ T6084] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 61.061294][ T6001] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 61.063849][ T6001] em28xx 5-1:0.132: analog set to bulk mode. [ 61.065410][ T6084] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 61.066217][ T842] em28xx 5-1:0.132: Registering V4L2 extension [ 61.068415][ T6084] em28xx 6-1:0.132: board has no eeprom [ 61.074231][ T6001] usb 5-1: USB disconnect, device number 2 [ 61.076666][ T6001] em28xx 5-1:0.132: Disconnecting em28xx [ 61.131659][ T6084] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 61.134832][ T842] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 61.134867][ T6084] em28xx 6-1:0.132: analog set to bulk mode. [ 61.136234][ T75] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.142288][ T6084] usb 6-1: USB disconnect, device number 2 [ 61.143171][ T842] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 61.145229][ T6084] em28xx 6-1:0.132: Disconnecting em28xx [ 61.146660][ T842] em28xx 5-1:0.132: No AC97 audio processor [ 61.154585][ T842] usb 5-1: Decoder not found [ 61.156573][ T842] em28xx 5-1:0.132: failed to create media graph [ 61.159285][ T842] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 61.164691][ T842] em28xx 5-1:0.132: Remote control support is not available for this card. [ 61.167697][ T2126] em28xx 6-1:0.132: Registering V4L2 extension [ 61.227690][ T75] bridge_slave_1: left allmulticast mode [ 61.229387][ T75] bridge_slave_1: left promiscuous mode [ 61.231798][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.237173][ T2126] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 61.240005][ T2126] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 61.243687][ T75] bridge_slave_0: left allmulticast mode [ 61.246041][ T2126] em28xx 6-1:0.132: No AC97 audio processor [ 61.246132][ T75] bridge_slave_0: left promiscuous mode [ 61.249400][ T2126] usb 6-1: Decoder not found [ 61.250173][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.251956][ T2126] em28xx 6-1:0.132: failed to create media graph [ 61.256374][ T2126] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 61.259836][ T2126] em28xx 6-1:0.132: Remote control support is not available for this card. [ 61.263929][ T6001] em28xx 5-1:0.132: Closing input extension [ 61.266730][ T6084] em28xx 6-1:0.132: Closing input extension [ 61.274804][ T6001] em28xx 5-1:0.132: Freeing device [ 61.275210][ T6084] em28xx 6-1:0.132: Freeing device [ 61.462551][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.466983][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.471340][ T75] bond0 (unregistering): Released all slaves [ 61.524329][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 61.524345][ T40] audit: type=1400 audit(1758438518.852:116): avc: denied { search } for pid=5684 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.533979][ T40] audit: type=1400 audit(1758438518.852:117): avc: denied { search } for pid=5684 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.540835][ T40] audit: type=1400 audit(1758438518.852:118): avc: denied { search } for pid=5684 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.596789][ T40] audit: type=1400 audit(1758438518.922:119): avc: denied { read open } for pid=6159 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.607858][ T40] audit: type=1400 audit(1758438518.922:120): avc: denied { getattr } for pid=6159 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.618157][ T40] audit: type=1400 audit(1758438518.932:121): avc: denied { add_name } for pid=6158 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.632262][ T75] hsr_slave_0: left promiscuous mode [ 61.635097][ T75] hsr_slave_1: left promiscuous mode [ 61.637916][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.641029][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.646105][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.649172][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.651732][ T6091] Bluetooth: hci1: command tx timeout [ 61.662334][ T6091] Bluetooth: hci3: command tx timeout [ 61.663444][ T5333] Bluetooth: hci2: command tx timeout [ 61.664265][ T6091] Bluetooth: hci0: command tx timeout [ 61.668248][ T75] veth1_macvtap: left promiscuous mode [ 61.670129][ T75] veth0_macvtap: left promiscuous mode [ 61.672205][ T75] veth1_vlan: left promiscuous mode [ 61.674116][ T75] veth0_vlan: left promiscuous mode [ 61.674747][ T40] audit: type=1400 audit(1758438519.002:122): avc: denied { remove_name } for pid=6161 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2132 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.711297][ T6001] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 61.754084][ T6084] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.871311][ T6001] usb 5-1: Using ep0 maxpacket: 32 [ 61.874285][ T6001] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 61.876874][ T6001] usb 5-1: config 0 has no interface number 0 [ 61.878737][ T6001] usb 5-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 61.884528][ T6001] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 61.887385][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.889807][ T6001] usb 5-1: Product: syz [ 61.891148][ T6001] usb 5-1: Manufacturer: syz [ 61.892685][ T6001] usb 5-1: SerialNumber: syz [ 61.898142][ T6001] usb 5-1: config 0 descriptor?? [ 61.900899][ T6155] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 61.901428][ T6084] usb 6-1: Using ep0 maxpacket: 32 [ 61.904862][ T6001] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 61.907035][ T6084] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 61.908280][ T6001] em28xx 5-1:0.132: Video interface 132 found: bulk [ 61.911724][ T6084] usb 6-1: config 0 has no interface number 0 [ 61.915638][ T6084] usb 6-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 61.921070][ T6084] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 61.924534][ T6084] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.927614][ T6084] usb 6-1: Product: syz [ 61.928949][ T6084] usb 6-1: Manufacturer: syz [ 61.930634][ T6084] usb 6-1: SerialNumber: syz [ 61.935772][ T6084] usb 6-1: config 0 descriptor?? [ 61.938812][ T6156] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 61.944565][ T6084] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 61.948277][ T6084] em28xx 6-1:0.132: Video interface 132 found: bulk [ 62.132615][ T75] team0 (unregistering): Port device team_slave_1 removed [ 62.163427][ T6001] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 62.177365][ T75] team0 (unregistering): Port device team_slave_0 removed [ 62.201619][ T6084] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 62.223409][ T6001] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 62.226170][ T6001] em28xx 5-1:0.132: board has no eeprom [ 62.265287][ T6084] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 62.269542][ T6084] em28xx 6-1:0.132: board has no eeprom [ 62.281790][ T6001] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 62.284856][ T6001] em28xx 5-1:0.132: analog set to bulk mode. [ 62.289796][ T842] em28xx 5-1:0.132: Registering V4L2 extension [ 62.294421][ T6001] usb 5-1: USB disconnect, device number 3 [ 62.297286][ T6001] em28xx 5-1:0.132: Disconnecting em28xx [ 62.332423][ T6084] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 62.335098][ T6084] em28xx 6-1:0.132: analog set to bulk mode. [ 62.347941][ T6084] usb 6-1: USB disconnect, device number 3 [ 62.351531][ T6084] em28xx 6-1:0.132: Disconnecting em28xx [ 62.378205][ T842] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 62.380391][ T842] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 62.383124][ T842] em28xx 5-1:0.132: No AC97 audio processor [ 62.386078][ T842] usb 5-1: Decoder not found [ 62.387572][ T842] em28xx 5-1:0.132: failed to create media graph [ 62.389573][ T842] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 62.393208][ T842] em28xx 5-1:0.132: Remote control support is not available for this card. [ 62.397757][ T6001] em28xx 5-1:0.132: Closing input extension [ 62.400347][ T2126] em28xx 6-1:0.132: Registering V4L2 extension [ 62.402420][ T6001] em28xx 5-1:0.132: Freeing device [ 62.485206][ T2126] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 62.488462][ T2126] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 62.491410][ T2126] em28xx 6-1:0.132: No AC97 audio processor [ 62.495675][ T2126] usb 6-1: Decoder not found [ 62.497542][ T2126] em28xx 6-1:0.132: failed to create media graph [ 62.500152][ T2126] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 62.506496][ T2126] em28xx 6-1:0.132: Remote control support is not available for this card. [ 62.510385][ T6084] em28xx 6-1:0.132: Closing input extension [ 62.517537][ T6084] em28xx 6-1:0.132: Freeing device 2025/09/21 07:08:40 executed programs: 12 [ 62.861712][ T2126] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 62.981307][ T6084] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 63.017169][ T6089] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.024478][ T6089] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.029099][ T6089] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.031829][ T2126] usb 5-1: Using ep0 maxpacket: 32 [ 63.037164][ T2126] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 63.040547][ T2126] usb 5-1: config 0 has no interface number 0 [ 63.043000][ T2126] usb 5-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 63.049693][ T2126] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 63.050125][ T6089] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.056410][ T2126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.059165][ T2126] usb 5-1: Product: syz [ 63.060502][ T2126] usb 5-1: Manufacturer: syz [ 63.062738][ T2126] usb 5-1: SerialNumber: syz [ 63.066333][ T2126] usb 5-1: config 0 descriptor?? [ 63.068531][ T6171] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.074144][ T2126] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 63.077359][ T2126] em28xx 5-1:0.132: Video interface 132 found: bulk [ 63.088635][ T6086] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.099753][ T6086] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.114076][ T6086] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.121001][ T6086] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.141282][ T6084] usb 6-1: Using ep0 maxpacket: 32 [ 63.144826][ T6084] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 63.147438][ T6084] usb 6-1: config 0 has no interface number 0 [ 63.149503][ T6084] usb 6-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 63.156342][ T6084] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 63.159133][ T6084] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.161782][ T6084] usb 6-1: Product: syz [ 63.163188][ T6084] usb 6-1: Manufacturer: syz [ 63.165227][ T6084] usb 6-1: SerialNumber: syz [ 63.168359][ T6084] usb 6-1: config 0 descriptor?? [ 63.170764][ T6175] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 63.178164][ T6084] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 63.181294][ T6084] em28xx 6-1:0.132: Video interface 132 found: bulk [ 63.198091][ T6089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.214785][ T6089] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.223760][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.225960][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.232143][ T6086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.238181][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.241134][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.255998][ T6086] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.262671][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.264968][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.275698][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.278668][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.332951][ T2126] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 63.393246][ T2126] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 63.396295][ T2126] em28xx 5-1:0.132: board has no eeprom [ 63.407506][ T6089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.431735][ T6084] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 63.434922][ T6089] veth0_vlan: entered promiscuous mode [ 63.444046][ T6086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.447523][ T6089] veth1_vlan: entered promiscuous mode [ 63.462130][ T2126] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 63.464673][ T2126] em28xx 5-1:0.132: analog set to bulk mode. [ 63.473656][ T34] em28xx 5-1:0.132: Registering V4L2 extension [ 63.474044][ T6089] veth0_macvtap: entered promiscuous mode [ 63.476079][ T2126] usb 5-1: USB disconnect, device number 4 [ 63.480750][ T2126] em28xx 5-1:0.132: Disconnecting em28xx [ 63.486528][ T6089] veth1_macvtap: entered promiscuous mode [ 63.493122][ T6084] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 63.495932][ T6084] em28xx 6-1:0.132: board has no eeprom [ 63.497733][ T6086] veth0_vlan: entered promiscuous mode [ 63.509726][ T6086] veth1_vlan: entered promiscuous mode [ 63.516257][ T6089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.524390][ T6089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.534520][ T75] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.538076][ T75] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.538172][ T34] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 63.541634][ T75] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.543941][ T34] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 63.549493][ T34] em28xx 5-1:0.132: No AC97 audio processor [ 63.549487][ T75] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.552683][ T34] usb 5-1: Decoder not found [ 63.556313][ T34] em28xx 5-1:0.132: failed to create media graph [ 63.558415][ T34] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 63.561294][ T6084] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 63.564370][ T34] em28xx 5-1:0.132: Remote control support is not available for this card. [ 63.567040][ T2126] em28xx 5-1:0.132: Closing input extension [ 63.569234][ T6084] em28xx 6-1:0.132: analog set to bulk mode. [ 63.574448][ T34] em28xx 6-1:0.132: Registering V4L2 extension [ 63.577594][ T2126] em28xx 5-1:0.132: Freeing device [ 63.582654][ T6084] usb 6-1: USB disconnect, device number 4 [ 63.586819][ T6084] em28xx 6-1:0.132: Disconnecting em28xx [ 63.598425][ T6086] veth0_macvtap: entered promiscuous mode [ 63.610765][ T6086] veth1_macvtap: entered promiscuous mode [ 63.620940][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.624995][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.626304][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.637193][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.650867][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.653732][ T99] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.654149][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.660659][ T99] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.660782][ T34] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 63.663951][ T99] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.666306][ T34] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 63.671162][ T34] em28xx 6-1:0.132: No AC97 audio processor [ 63.676930][ T99] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.678298][ T34] usb 6-1: Decoder not found [ 63.681176][ T34] em28xx 6-1:0.132: failed to create media graph [ 63.685476][ T34] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 63.688637][ T34] em28xx 6-1:0.132: Remote control support is not available for this card. [ 63.692809][ T6084] em28xx 6-1:0.132: Closing input extension [ 63.703145][ T6084] em28xx 6-1:0.132: Freeing device [ 63.719158][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.722238][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.732672][ T6091] Bluetooth: hci2: command tx timeout [ 63.732697][ T63] Bluetooth: hci3: command tx timeout [ 63.734980][ T6091] Bluetooth: hci0: command tx timeout [ 63.736604][ T63] Bluetooth: hci1: command tx timeout [ 63.748067][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.752050][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.941339][ T34] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 64.011337][ T2126] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 64.042735][ T842] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 64.101339][ T34] usb 8-1: Using ep0 maxpacket: 32 [ 64.104247][ T34] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 64.107407][ T34] usb 8-1: config 0 has no interface number 0 [ 64.109697][ T34] usb 8-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 64.115006][ T34] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 64.118481][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.121305][ T34] usb 8-1: Product: syz [ 64.122626][ T34] usb 8-1: Manufacturer: syz [ 64.124177][ T34] usb 8-1: SerialNumber: syz [ 64.127707][ T34] usb 8-1: config 0 descriptor?? [ 64.129816][ T6225] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 64.134019][ T34] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 64.137293][ T34] em28xx 8-1:0.132: Video interface 132 found: bulk [ 64.141401][ T61] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 64.171352][ T2126] usb 7-1: Using ep0 maxpacket: 32 [ 64.174286][ T2126] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 64.176933][ T2126] usb 7-1: config 0 has no interface number 0 [ 64.179064][ T2126] usb 7-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 64.184189][ T2126] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 64.186939][ T2126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.189375][ T2126] usb 7-1: Product: syz [ 64.190698][ T2126] usb 7-1: Manufacturer: syz [ 64.191291][ T842] usb 5-1: Using ep0 maxpacket: 32 [ 64.192169][ T2126] usb 7-1: SerialNumber: syz [ 64.195699][ T842] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 64.197416][ T2126] usb 7-1: config 0 descriptor?? [ 64.198364][ T842] usb 5-1: config 0 has no interface number 0 [ 64.198403][ T842] usb 5-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 64.200211][ T842] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 64.202805][ T6228] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 64.205418][ T842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.211328][ T2126] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 64.215307][ T842] usb 5-1: Product: syz [ 64.217259][ T2126] em28xx 7-1:0.132: Video interface 132 found: bulk [ 64.218083][ T842] usb 5-1: Manufacturer: syz [ 64.218093][ T842] usb 5-1: SerialNumber: syz [ 64.219255][ T842] usb 5-1: config 0 descriptor?? [ 64.226688][ T6229] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 64.230526][ T842] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 64.233756][ T842] em28xx 5-1:0.132: Video interface 132 found: bulk [ 64.301408][ T61] usb 6-1: Using ep0 maxpacket: 32 [ 64.304650][ T61] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 64.307581][ T61] usb 6-1: config 0 has no interface number 0 [ 64.310094][ T61] usb 6-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 64.316428][ T61] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 64.320829][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.324278][ T61] usb 6-1: Product: syz [ 64.326118][ T61] usb 6-1: Manufacturer: syz [ 64.328075][ T61] usb 6-1: SerialNumber: syz [ 64.332375][ T61] usb 6-1: config 0 descriptor?? [ 64.335674][ T6231] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 64.341946][ T61] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 64.345993][ T61] em28xx 6-1:0.132: Video interface 132 found: bulk [ 64.391747][ T34] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 64.463390][ T2126] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 64.467854][ T34] em28xx 8-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 64.471306][ T34] em28xx 8-1:0.132: board has no eeprom [ 64.481974][ T842] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 64.524381][ T2126] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 64.527211][ T2126] em28xx 7-1:0.132: board has no eeprom [ 64.531863][ T34] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 64.534344][ T34] em28xx 8-1:0.132: analog set to bulk mode. [ 64.537667][ T6232] em28xx 8-1:0.132: Registering V4L2 extension [ 64.541682][ T34] usb 8-1: USB disconnect, device number 2 [ 64.545225][ T34] em28xx 8-1:0.132: Disconnecting em28xx [ 64.549023][ T842] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 64.552738][ T842] em28xx 5-1:0.132: board has no eeprom [ 64.591272][ T2126] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 64.593833][ T2126] em28xx 7-1:0.132: analog set to bulk mode. [ 64.599450][ T61] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 64.608716][ T6232] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 64.611777][ T2126] usb 7-1: USB disconnect, device number 2 [ 64.615047][ T2126] em28xx 7-1:0.132: Disconnecting em28xx [ 64.617405][ T6232] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 64.620443][ T6232] em28xx 8-1:0.132: No AC97 audio processor [ 64.622756][ T842] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 64.625931][ T842] em28xx 5-1:0.132: analog set to bulk mode. [ 64.626648][ T6232] usb 8-1: Decoder not found [ 64.630240][ T6232] em28xx 8-1:0.132: failed to create media graph [ 64.633176][ T6232] em28xx 8-1:0.132: V4L2 device video103 deregistered [ 64.633891][ T842] usb 5-1: USB disconnect, device number 5 [ 64.636882][ T6232] em28xx 8-1:0.132: Remote control support is not available for this card. [ 64.639948][ T842] em28xx 5-1:0.132: Disconnecting em28xx [ 64.641118][ T53] em28xx 7-1:0.132: Registering V4L2 extension [ 64.669507][ T61] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 64.672668][ T61] em28xx 6-1:0.132: board has no eeprom [ 64.707673][ T53] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 64.709955][ T53] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 64.712926][ T53] em28xx 7-1:0.132: No AC97 audio processor [ 64.716044][ T53] usb 7-1: Decoder not found [ 64.717617][ T53] em28xx 7-1:0.132: failed to create media graph [ 64.719613][ T53] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 64.722535][ T53] em28xx 7-1:0.132: Remote control support is not available for this card. [ 64.725909][ T2126] em28xx 7-1:0.132: Closing input extension [ 64.728206][ T6142] em28xx 5-1:0.132: Registering V4L2 extension [ 64.730425][ T2126] em28xx 7-1:0.132: Freeing device [ 64.731404][ T61] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 64.735533][ T61] em28xx 6-1:0.132: analog set to bulk mode. [ 64.744694][ T61] usb 6-1: USB disconnect, device number 5 [ 64.747196][ T61] em28xx 6-1:0.132: Disconnecting em28xx [ 64.803139][ T6142] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 64.805393][ T6142] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 64.807707][ T6142] em28xx 5-1:0.132: No AC97 audio processor [ 64.810474][ T6142] usb 5-1: Decoder not found [ 64.812873][ T6142] em28xx 5-1:0.132: failed to create media graph [ 64.814861][ T6142] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 64.817783][ T6142] em28xx 5-1:0.132: Remote control support is not available for this card. [ 64.820558][ T842] em28xx 5-1:0.132: Closing input extension [ 64.822581][ T34] em28xx 8-1:0.132: Closing input extension [ 64.825090][ T842] em28xx 5-1:0.132: Freeing device [ 64.825089][ T141] em28xx 6-1:0.132: Registering V4L2 extension [ 64.827601][ T34] em28xx 8-1:0.132: Freeing device [ 64.902706][ T141] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 64.905351][ T141] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 64.907479][ T141] em28xx 6-1:0.132: No AC97 audio processor [ 64.912252][ T141] usb 6-1: Decoder not found [ 64.914169][ T141] em28xx 6-1:0.132: failed to create media graph [ 64.920675][ T141] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 64.926760][ T141] em28xx 6-1:0.132: Remote control support is not available for this card. [ 64.927116][ T6248] ================================================================== [ 64.929540][ T61] em28xx 6-1:0.132: Closing input extension [ 64.932784][ T6248] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 64.932819][ T6248] Read of size 8 at addr ffff88804f9b4740 by task v4l_id/6248 [ 64.932834][ T6248] [ 64.932844][ T6248] CPU: 3 UID: 0 PID: 6248 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 64.932865][ T6248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.932875][ T6248] Call Trace: [ 64.932882][ T6248] [ 64.932889][ T6248] dump_stack_lvl+0x116/0x1f0 [ 64.932915][ T6248] print_report+0xcd/0x630 [ 64.932937][ T6248] ? __virt_addr_valid+0x81/0x610 [ 64.932960][ T6248] ? __phys_addr+0xe8/0x180 [ 64.932985][ T6248] ? v4l2_fh_init+0x27d/0x2c0 [ 64.933006][ T6248] kasan_report+0xe0/0x110 [ 64.933023][ T6248] ? v4l2_fh_init+0x27d/0x2c0 [ 64.933047][ T6248] v4l2_fh_init+0x27d/0x2c0 [ 64.933069][ T6248] v4l2_fh_open+0x83/0xc0 [ 64.933088][ T6248] em28xx_v4l2_open+0x24e/0x7e0 [ 64.933110][ T6248] v4l2_open+0x225/0x490 [ 64.933129][ T6248] ? __pfx_v4l2_open+0x10/0x10 [ 64.933148][ T6248] chrdev_open+0x231/0x6a0 [ 64.933171][ T6248] ? __pfx_chrdev_open+0x10/0x10 [ 64.933192][ T6248] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 64.933215][ T6248] do_dentry_open+0x982/0x1530 [ 64.933234][ T6248] ? __pfx_chrdev_open+0x10/0x10 [ 64.933257][ T6248] vfs_open+0x82/0x3f0 [ 64.933281][ T6248] path_openat+0x1de4/0x2cb0 [ 64.933304][ T6248] ? __pfx_path_openat+0x10/0x10 [ 64.933327][ T6248] do_filp_open+0x20b/0x470 [ 64.933347][ T6248] ? __pfx_do_filp_open+0x10/0x10 [ 64.933373][ T6248] ? alloc_fd+0x471/0x7d0 [ 64.933397][ T6248] do_sys_openat2+0x11b/0x1d0 [ 64.933426][ T6248] ? __pfx_do_sys_openat2+0x10/0x10 [ 64.933450][ T6248] ? find_held_lock+0x2b/0x80 [ 64.933473][ T6248] ? handle_mm_fault+0x2ab/0xd10 [ 64.933501][ T6248] __x64_sys_openat+0x174/0x210 [ 64.933526][ T6248] ? __pfx___x64_sys_openat+0x10/0x10 [ 64.933552][ T6248] ? do_user_addr_fault+0x843/0x1370 [ 64.933573][ T6248] do_syscall_64+0xcd/0x4e0 [ 64.933599][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.933617][ T6248] RIP: 0033:0x7f7f5baa7407 [ 64.933633][ T6248] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 64.933650][ T6248] RSP: 002b:00007ffc8c074940 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 64.933669][ T6248] RAX: ffffffffffffffda RBX: 00007f7f5c1d8880 RCX: 00007f7f5baa7407 [ 64.933682][ T6248] RDX: 0000000000000000 RSI: 00007ffc8c074f1c RDI: ffffffffffffff9c [ 64.933693][ T6248] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 64.933704][ T6248] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 64.933714][ T6248] R13: 00007ffc8c074b90 R14: 00007f7f5c33f000 R15: 00005564cd5654d8 [ 64.933730][ T6248] [ 64.933737][ T6248] [ 65.048736][ T6248] Allocated by task 141: [ 65.050465][ T6248] kasan_save_stack+0x33/0x60 [ 65.052387][ T6248] kasan_save_track+0x14/0x30 [ 65.054289][ T6248] __kasan_kmalloc+0xaa/0xb0 [ 65.056220][ T6248] em28xx_v4l2_init+0x114/0x4080 [ 65.058241][ T6248] em28xx_init_extension+0x13a/0x200 [ 65.060353][ T6248] request_module_async+0x61/0x70 [ 65.062369][ T6248] process_one_work+0x9cc/0x1b70 [ 65.064310][ T6248] worker_thread+0x6c8/0xf10 [ 65.066112][ T6248] kthread+0x3c2/0x780 [ 65.067748][ T6248] ret_from_fork+0x56a/0x730 [ 65.069594][ T6248] ret_from_fork_asm+0x1a/0x30 [ 65.071547][ T6248] [ 65.072499][ T6248] Freed by task 141: [ 65.074006][ T6248] kasan_save_stack+0x33/0x60 [ 65.075869][ T6248] kasan_save_track+0x14/0x30 [ 65.077820][ T6248] kasan_save_free_info+0x3b/0x60 [ 65.079814][ T6248] __kasan_slab_free+0x60/0x70 [ 65.081772][ T6248] kfree+0x2b4/0x4d0 [ 65.083374][ T6248] em28xx_v4l2_init+0x22b5/0x4080 [ 65.085446][ T6248] em28xx_init_extension+0x13a/0x200 [ 65.087554][ T6248] request_module_async+0x61/0x70 [ 65.089602][ T6248] process_one_work+0x9cc/0x1b70 [ 65.091700][ T6248] worker_thread+0x6c8/0xf10 [ 65.093579][ T6248] kthread+0x3c2/0x780 [ 65.095235][ T6248] ret_from_fork+0x56a/0x730 [ 65.097101][ T6248] ret_from_fork_asm+0x1a/0x30 [ 65.099030][ T6248] [ 65.100013][ T6248] The buggy address belongs to the object at ffff88804f9b4000 [ 65.100013][ T6248] which belongs to the cache kmalloc-8k of size 8192 [ 65.105472][ T6248] The buggy address is located 1856 bytes inside of [ 65.105472][ T6248] freed 8192-byte region [ffff88804f9b4000, ffff88804f9b6000) [ 65.110919][ T6248] [ 65.111891][ T6248] The buggy address belongs to the physical page: [ 65.114404][ T6248] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4f9b0 [ 65.117812][ T6248] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 65.121236][ T6248] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 65.124369][ T6248] page_type: f5(slab) [ 65.125980][ T6248] raw: 00fff00000000040 ffff88801b843180 ffffea0000b0c000 0000000000000003 [ 65.129397][ T6248] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 65.132834][ T6248] head: 00fff00000000040 ffff88801b843180 ffffea0000b0c000 0000000000000003 [ 65.136301][ T6248] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 65.139725][ T6248] head: 00fff00000000003 ffffea00013e6c01 00000000ffffffff 00000000ffffffff [ 65.143172][ T6248] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 65.146569][ T6248] page dumped because: kasan: bad access detected [ 65.149106][ T6248] page_owner tracks the page as allocated [ 65.151466][ T6248] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 842, tgid 842 (kworker/2:2), ts 61070750831, free_ts 55938232187 [ 65.160010][ T6248] post_alloc_hook+0x1c0/0x230 [ 65.162156][ T6248] get_page_from_freelist+0x132b/0x38e0 [ 65.164501][ T6248] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 65.166958][ T6248] alloc_pages_mpol+0x1fb/0x550 [ 65.168999][ T6248] new_slab+0x247/0x330 [ 65.170633][ T6248] ___slab_alloc+0xcf2/0x1750 [ 65.172103][ T6248] __slab_alloc.constprop.0+0x56/0xb0 [ 65.173712][ T6248] __kmalloc_cache_noprof+0xfb/0x3e0 [ 65.175296][ T6248] em28xx_v4l2_init+0x114/0x4080 [ 65.176792][ T6248] em28xx_init_extension+0x13a/0x200 [ 65.178409][ T6248] request_module_async+0x61/0x70 [ 65.179987][ T6248] process_one_work+0x9cc/0x1b70 [ 65.181512][ T6248] worker_thread+0x6c8/0xf10 [ 65.182923][ T6248] kthread+0x3c2/0x780 [ 65.184151][ T6248] ret_from_fork+0x56a/0x730 [ 65.185556][ T6248] ret_from_fork_asm+0x1a/0x30 [ 65.187047][ T6248] page last free pid 6011 tgid 6011 stack trace: [ 65.188998][ T6248] __free_frozen_pages+0x7d5/0x10f0 [ 65.190635][ T6248] vfree+0x1fd/0xb50 [ 65.191858][ T6248] kcov_close+0x34/0x60 [ 65.193147][ T6248] __fput+0x3ff/0xb70 [ 65.194414][ T6248] task_work_run+0x150/0x240 [ 65.195796][ T6248] do_exit+0x86f/0x2bf0 [ 65.197039][ T6248] do_group_exit+0xd3/0x2a0 [ 65.198414][ T6248] get_signal+0x2673/0x26d0 [ 65.199743][ T6248] arch_do_signal_or_restart+0x8f/0x7d0 [ 65.201437][ T6248] exit_to_user_mode_loop+0x84/0x110 [ 65.203086][ T6248] do_syscall_64+0x41c/0x4e0 [ 65.204577][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.206557][ T6248] [ 65.207289][ T6248] Memory state around the buggy address: [ 65.209225][ T6248] ffff88804f9b4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.211902][ T6248] ffff88804f9b4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.214557][ T6248] >ffff88804f9b4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.217207][ T6248] ^ [ 65.219361][ T6248] ffff88804f9b4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.222006][ T6248] ffff88804f9b4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.224828][ T6248] ================================================================== [ 65.229041][ T6248] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 65.231948][ T6248] CPU: 2 UID: 0 PID: 6248 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 65.235579][ T6248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.240046][ T6248] Call Trace: [ 65.241347][ T6248] [ 65.242270][ T6248] dump_stack_lvl+0x3d/0x1f0 [ 65.243839][ T6248] vpanic+0x6e8/0x7a0 [ 65.245459][ T6248] ? __pfx_vpanic+0x10/0x10 [ 65.246905][ T6248] ? v4l2_fh_init+0x27d/0x2c0 [ 65.248342][ T6248] panic+0xca/0xd0 [ 65.249539][ T6248] ? __pfx_panic+0x10/0x10 [ 65.250977][ T6248] ? v4l2_fh_init+0x27d/0x2c0 [ 65.252407][ T6248] ? preempt_schedule_common+0x44/0xc0 [ 65.254076][ T6248] ? preempt_schedule_thunk+0x16/0x30 [ 65.255709][ T6248] ? check_panic_on_warn+0x1f/0xb0 [ 65.257216][ T6248] check_panic_on_warn+0xab/0xb0 [ 65.258785][ T6248] end_report+0x107/0x170 [ 65.260137][ T6248] kasan_report+0xee/0x110 [ 65.261561][ T6248] ? v4l2_fh_init+0x27d/0x2c0 [ 65.263046][ T6248] v4l2_fh_init+0x27d/0x2c0 [ 65.264531][ T6248] v4l2_fh_open+0x83/0xc0 [ 65.265946][ T6248] em28xx_v4l2_open+0x24e/0x7e0 [ 65.267468][ T6248] v4l2_open+0x225/0x490 [ 65.268795][ T6248] ? __pfx_v4l2_open+0x10/0x10 [ 65.270308][ T6248] chrdev_open+0x231/0x6a0 [ 65.271716][ T6248] ? __pfx_chrdev_open+0x10/0x10 [ 65.273303][ T6248] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 65.275300][ T6248] do_dentry_open+0x982/0x1530 [ 65.276859][ T6248] ? __pfx_chrdev_open+0x10/0x10 [ 65.278959][ T6248] vfs_open+0x82/0x3f0 [ 65.280702][ T6248] path_openat+0x1de4/0x2cb0 [ 65.282672][ T6248] ? __pfx_path_openat+0x10/0x10 [ 65.284692][ T6248] do_filp_open+0x20b/0x470 [ 65.286599][ T6248] ? __pfx_do_filp_open+0x10/0x10 [ 65.288617][ T6248] ? alloc_fd+0x471/0x7d0 [ 65.290470][ T6248] do_sys_openat2+0x11b/0x1d0 [ 65.292452][ T6248] ? __pfx_do_sys_openat2+0x10/0x10 [ 65.294313][ T6248] ? find_held_lock+0x2b/0x80 [ 65.295792][ T6248] ? handle_mm_fault+0x2ab/0xd10 [ 65.297393][ T6248] __x64_sys_openat+0x174/0x210 [ 65.298925][ T6248] ? __pfx___x64_sys_openat+0x10/0x10 [ 65.300627][ T6248] ? do_user_addr_fault+0x843/0x1370 [ 65.302309][ T6248] do_syscall_64+0xcd/0x4e0 [ 65.303935][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.305812][ T6248] RIP: 0033:0x7f7f5baa7407 [ 65.307260][ T6248] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 65.313371][ T6248] RSP: 002b:00007ffc8c074940 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 65.316025][ T6248] RAX: ffffffffffffffda RBX: 00007f7f5c1d8880 RCX: 00007f7f5baa7407 [ 65.318650][ T6248] RDX: 0000000000000000 RSI: 00007ffc8c074f1c RDI: ffffffffffffff9c [ 65.321117][ T6248] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 65.323611][ T6248] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 65.325942][ T6248] R13: 00007ffc8c074b90 R14: 00007f7f5c33f000 R15: 00005564cd5654d8 [ 65.329088][ T6248] [ 65.331110][ T6248] Kernel Offset: disabled [ 65.332948][ T6248] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:08:42 Registers: info registers vcpu 0 CPU#0 RAX=00000000000001ff RBX=ffff88802584af38 RCX=ffffffff8238041f RDX=00000000000001ff RSI=ffff88803c2b1318 RDI=ffff88802584af38 RBP=ffff88803c2b1318 RSP=ffffc90003677e00 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000010000 R11=0000000000000000 R12=ffffffff8e7e8280 R13=ffff88802584af58 R14=ffff88802584af60 R15=ffff888053b8e000 RIP=ffffffff84944770 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555e160500 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055555e17b5c8 CR3=0000000032882000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080410001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5a81ffd0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5a820156 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5a820156 00007ffc5a82015c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89b4412e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89b4412e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89b4412e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89b4412e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89b4412f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89b4412fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 253d746e61772064 7a253d6461657200 7269646b6d206f74 2064656c69616600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0018514b44520541 5f00184144405700 574c414e48054a51 054140494c444300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000019 RCX=ffffffff84970228 RDX=ffff88801eabc880 RSI=ffffffff84970314 RDI=0000000000000005 RBP=0000000000000002 RSP=ffffc90003e27a40 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000049 R13=0000000000000049 R14=ffffc90003e27ae0 R15=0000000000000001 RIP=ffffffff8b94d3c0 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1cda29fc80 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7f5c301000 CR3=0000000025003000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561a13af5600 0000561a13af5600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2ecc69f0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3130322f31302f34 3020312b32316f70 627e322d332e3631 2e312d6e61696265 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343130322f31302f 343020312b32316f 70627e322d332e36 312e312d6e616962 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65642d332e36312e 3120534f4942202c 2939303032202c39 484349202b203533 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5128204350206472 61646e6174532055 4d4551203a656d61 6e20657261776472 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6148205d38343236 54205b5d35363832 33392e3436202020 5b203a6c656e7265 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff913ad1f6 RDX=1ffff92000762e82 RSI=0000000000000001 RDI=ffffffff90b85b68 RBP=ffffc90003b17420 RSP=ffffc90003b17368 R8 =ffffffff913ad1fa R9 =0000000000000000 R10=0000000000000002 R11=0000000000000001 R12=ffffc90003b17428 R13=ffffc90003b173d8 R14=0000000000000005 R15=0000000000000001 RIP=ffffffff816afab4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f790278c880 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b47468f1e8 CR3=0000000026330000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008060000 Opmask01=0000000000001000 Opmask02=0000000003ffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f7463656a626f3a 755f6d6574737973 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00745f6563697665 643a725f7463656a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 000055b47413ce70 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7901fd17f0 00007f7901fd17e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 642d79626632785c 6b7369646632785c 2f736b6e696c2f76 6564752f6e75722f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 39316632785c7165 736b7369642d7962 6632785c6b736964 6632785c2f736b6e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6373797300313d65 6c62616e65000032 3a37622f39316632 785c7165736b7369 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 000055b47413ce70 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b2f34150aae3b38f 000055b12f5450ca 00000000000000f1 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c1922d338590cafc 2f007ac25a367fb9 79732f002f6d6585 7379736275732f73 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff2ff7f7f7ffff 6f7f7ff37fbf7fff 7f7f2fff7f7ffff7 7f7f7fea777f6f7b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000055b47414a 0000000000000041 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000052f47414a 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8564c190 RDI=ffffffff9b118120 RBP=ffffffff9b1180e0 RSP=ffffc90003b972b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3623076 R15=dffffc0000000000 RIP=ffffffff8564c1b7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7f5c1d8880 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7f5bbb255a CR3=00000000569ae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040008000 Opmask01=0000000000220211 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002d002b002b002b 002c002b00000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000009f0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f5c3005f0 00007f7f5c3000c0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 41003330316f6564 69762f7665642f00 64695f6c34762f76 6564752f62696c2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000