last executing test programs: 4.142965552s ago: executing program 3 (id=2608): socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) chdir(&(0x7f0000000080)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(r1, &(0x7f0000000500)="e0584c7be27fb957ee1f0873e0c961135efb286b0ac86ad2d0da3b7bcd1f26bcce99ad06edf0fef5e0ab45b9341f866fbca0f93a5721396137e2e09b4a0c1179413ed8a54edb312816fcafb41ad363fe0687b284d54edc1ee2fc7e46e5d38636e092f1", 0x63, 0x400c804, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) clock_gettime(0x0, &(0x7f0000000280)) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r3, 0xffffffffffffffff, 0x0) 3.181569548s ago: executing program 3 (id=2612): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r3, &(0x7f0000002c00)={0x2020}, 0x2020) 3.122853269s ago: executing program 3 (id=2613): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x2d, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x77682a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3.042730648s ago: executing program 3 (id=2614): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1, 0xa0008000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0xb, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 2.98239381s ago: executing program 3 (id=2615): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 2.92914807s ago: executing program 3 (id=2616): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x900f, 0x100, 0x4, 0x162}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x3, 0x8}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) io_uring_enter(r3, 0x3517, 0x173d, 0x42, 0x0, 0x0) 1.946151175s ago: executing program 2 (id=2619): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002400)="9c", 0x1}], 0x1}, 0x800) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x3, @empty, 0x6}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) r3 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r3, &(0x7f0000000040)=""/4109, 0x100d) 1.862029088s ago: executing program 2 (id=2620): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r2, 0x80047455, 0x0) fchdir(0xffffffffffffffff) 1.783266001s ago: executing program 2 (id=2621): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x2d, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x77682a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.720756394s ago: executing program 2 (id=2622): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0xb, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 1.622593261s ago: executing program 2 (id=2623): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 1.568689589s ago: executing program 2 (id=2624): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) clock_gettime(0x6, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x256f6000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') preadv(r2, &(0x7f0000002400)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1, 0x39c5, 0x0) 1.170071339s ago: executing program 0 (id=2627): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002400)="9c", 0x1}], 0x1}, 0x800) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x3, @empty, 0x6}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) r3 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r3, &(0x7f0000000040)=""/4109, 0x100d) 1.167621875s ago: executing program 0 (id=2628): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r2, 0x80047455, 0x0) fchdir(0xffffffffffffffff) 1.071955651s ago: executing program 0 (id=2629): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) write(0xffffffffffffffff, &(0x7f0000000500), 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000400000000000500"], 0x44}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000080) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x7ffeedc0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 495.408244ms ago: executing program 1 (id=2563): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 318.925482ms ago: executing program 1 (id=2630): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0xb, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 190.950094ms ago: executing program 1 (id=2631): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r2, &(0x7f0000002c00)={0x2020}, 0x2020) 190.66621ms ago: executing program 0 (id=2632): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) shutdown(0xffffffffffffffff, 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7ffff000, 0x0) 190.446297ms ago: executing program 1 (id=2633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 122.519625ms ago: executing program 1 (id=2634): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 122.270866ms ago: executing program 1 (id=2635): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) bind$vsock_stream(r0, 0x0, 0x0) userfaultfd(0x80800) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) mkdir(0x0, 0x136) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x201) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000440)={0x0, 0x4b, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 121.00035ms ago: executing program 0 (id=2636): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r2, 0x80047455, 0x0) fchdir(0xffffffffffffffff) 0s ago: executing program 0 (id=2637): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x2d, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x77682a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): rface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 135.899168][ T12] vhci_hcd: release socket [ 135.901263][ T12] vhci_hcd: disconnect device [ 135.904610][ T12] vhci_hcd: stop threads [ 135.907381][ T12] vhci_hcd: release socket [ 135.909710][ T29] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 135.913953][ T12] vhci_hcd: disconnect device [ 135.916913][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.921370][ T29] usb 5-1: Product: syz [ 135.923440][ T29] usb 5-1: Manufacturer: syz [ 135.934150][ T5967] vhci_hcd: vhci_device speed not set [ 135.936755][ T29] usb 5-1: SerialNumber: syz [ 135.943237][ T29] usb 5-1: config 0 descriptor?? [ 135.951565][ T9532] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 135.955084][ T9532] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 136.162873][ T9532] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 136.166810][ T9532] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 136.251671][ T40] audit: type=1400 audit(1759697221.495:506): avc: denied { read } for pid=9562 comm="syz.1.1266" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 136.261748][ T40] audit: type=1400 audit(1759697221.495:507): avc: denied { open } for pid=9562 comm="syz.1.1266" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 136.284284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 136.373975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 136.585758][ T29] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 136.614047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 136.644049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 136.678270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 136.682716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 136.774688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 136.990873][ T29] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 137.028833][ T29] usb 5-1: USB disconnect, device number 5 [ 137.972720][ T9595] libceph: resolve 'cÏùòLêòçPrЛ' (ret=-3): failed [ 138.005025][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.007725][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.534044][ T40] audit: type=1400 audit(1759697223.765:508): avc: denied { write } for pid=9611 comm="syz.1.1284" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 138.556966][ T40] audit: type=1400 audit(1759697223.765:509): avc: denied { open } for pid=9611 comm="syz.1.1284" path="/274/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 138.779643][ T40] audit: type=1400 audit(1759697224.025:510): avc: denied { map } for pid=9621 comm="syz.1.1286" path="/dev/dri/card1" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 138.790464][ T40] audit: type=1400 audit(1759697224.025:511): avc: denied { execute } for pid=9621 comm="syz.1.1286" path="/dev/dri/card1" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 139.444180][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 139.614005][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 139.626051][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 139.638991][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.646588][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.651301][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 139.665935][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 139.680602][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.729214][ T10] usb 5-1: config 0 descriptor?? [ 140.270566][ T40] audit: type=1400 audit(1759697225.515:512): avc: denied { setopt } for pid=9638 comm="syz.0.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 140.285594][ T40] audit: type=1400 audit(1759697225.525:513): avc: denied { write } for pid=9638 comm="syz.0.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 140.721670][ T40] audit: type=1400 audit(1759697225.965:514): avc: denied { nlmsg_read } for pid=9647 comm="syz.1.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.020756][ T9653] __nla_validate_parse: 1 callbacks suppressed [ 141.020770][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1292'. [ 142.165143][ T9641] syz.3.1289: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 142.170817][ T9641] CPU: 2 UID: 0 PID: 9641 Comm: syz.3.1289 Not tainted syzkaller #0 PREEMPT(full) [ 142.170836][ T9641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.170845][ T9641] Call Trace: [ 142.170861][ T9641] [ 142.170867][ T9641] dump_stack_lvl+0x16c/0x1f0 [ 142.170902][ T9641] warn_alloc+0x248/0x3a0 [ 142.170924][ T9641] ? __pfx_warn_alloc+0x10/0x10 [ 142.170950][ T9641] ? hash_netiface_create+0x3ec/0x1250 [ 142.170964][ T9641] ? __vmalloc_node_noprof+0xad/0xf0 [ 142.170984][ T9641] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 142.171007][ T9641] ? hash_netiface_create+0x3ec/0x1250 [ 142.171024][ T9641] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 142.171048][ T9641] ? hash_netiface_create+0x3ec/0x1250 [ 142.171060][ T9641] __vmalloc_node_noprof+0xad/0xf0 [ 142.171076][ T9641] ? hash_netiface_create+0x3ec/0x1250 [ 142.171091][ T9641] __vmalloc_node_range_noprof+0xb3b/0x1480 [ 142.171113][ T9641] ? hash_netiface_create+0x3ec/0x1250 [ 142.171130][ T9641] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 142.171150][ T9641] ? ___kmalloc_large_node+0xed/0x160 [ 142.171169][ T9641] __kvmalloc_node_noprof+0x431/0x9c0 [ 142.171183][ T9641] ? hash_netiface_create+0x3ec/0x1250 [ 142.171197][ T9641] ? hash_netiface_create+0x3ec/0x1250 [ 142.171213][ T9641] ? hash_netiface_create+0x3ec/0x1250 [ 142.171225][ T9641] hash_netiface_create+0x3ec/0x1250 [ 142.171244][ T9641] ? __nla_validate_parse+0x285b/0x2880 [ 142.171278][ T9641] ? __pfx_hash_netiface_create+0x10/0x10 [ 142.171297][ T9641] ip_set_create+0x7e4/0x14d0 [ 142.171320][ T9641] ? __pfx_ip_set_create+0x10/0x10 [ 142.171357][ T9641] ? find_held_lock+0x2b/0x80 [ 142.171392][ T9641] nfnetlink_rcv_msg+0x9fc/0x1200 [ 142.171417][ T9641] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 142.171438][ T9641] ? __lock_acquire+0x62e/0x1ce0 [ 142.171483][ T9641] ? avc_has_perm_noaudit+0x149/0x3b0 [ 142.171516][ T9641] netlink_rcv_skb+0x158/0x420 [ 142.171536][ T9641] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 142.171554][ T9641] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.171578][ T9641] ? ns_capable+0xd7/0x110 [ 142.171597][ T9641] nfnetlink_rcv+0x1b3/0x430 [ 142.171619][ T9641] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 142.171639][ T9641] ? netlink_deliver_tap+0x1ae/0xd30 [ 142.171658][ T9641] netlink_unicast+0x5a7/0x870 [ 142.171677][ T9641] ? __pfx_netlink_unicast+0x10/0x10 [ 142.171699][ T9641] netlink_sendmsg+0x8c8/0xdd0 [ 142.171718][ T9641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.171740][ T9641] ____sys_sendmsg+0xa98/0xc70 [ 142.171760][ T9641] ? copy_msghdr_from_user+0x10a/0x160 [ 142.171775][ T9641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.171797][ T9641] ? __pfx_futex_wake_mark+0x10/0x10 [ 142.171817][ T9641] ___sys_sendmsg+0x134/0x1d0 [ 142.171833][ T9641] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.171867][ T9641] __sys_sendmsg+0x16d/0x220 [ 142.171882][ T9641] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.171896][ T9641] ? __x64_sys_futex+0x1e0/0x4c0 [ 142.171920][ T9641] do_syscall_64+0xcd/0x4e0 [ 142.171934][ T9641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.171947][ T9641] RIP: 0033:0x7f8ed8d8eec9 [ 142.171959][ T9641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.171972][ T9641] RSP: 002b:00007f8ed9c3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.171985][ T9641] RAX: ffffffffffffffda RBX: 00007f8ed8fe5fa0 RCX: 00007f8ed8d8eec9 [ 142.171993][ T9641] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 142.172000][ T9641] RBP: 00007f8ed8e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 142.172008][ T9641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.172015][ T9641] R13: 00007f8ed8fe6038 R14: 00007f8ed8fe5fa0 R15: 00007ffca1ebf7f8 [ 142.172031][ T9641] [ 142.172035][ T9641] Mem-Info: [ 142.314177][ T9641] active_anon:16132 inactive_anon:0 isolated_anon:0 [ 142.314177][ T9641] active_file:2248 inactive_file:40686 isolated_file:0 [ 142.314177][ T9641] unevictable:1768 dirty:13 writeback:0 [ 142.314177][ T9641] slab_reclaimable:12397 slab_unreclaimable:69870 [ 142.314177][ T9641] mapped:25313 shmem:9379 pagetables:1329 [ 142.314177][ T9641] sec_pagetables:313 bounce:0 [ 142.314177][ T9641] kernel_misc_reclaimable:0 [ 142.314177][ T9641] free:420975 free_pcp:20652 free_cma:0 [ 142.333370][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 142.344540][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 142.361519][ T10] usb 5-1: USB disconnect, device number 6 [ 142.364578][ T9641] Node 0 active_anon:53120kB inactive_anon:0kB active_file:8992kB inactive_file:162540kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:101252kB dirty:52kB writeback:0kB shmem:22572kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12592kB pagetables:5100kB sec_pagetables:1252kB all_unreclaimable? no Balloon:0kB [ 142.394093][ T9641] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 142.408573][ T9641] Node 0 DMA free:15304kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:56kB local_pcp:0kB free_cma:0kB [ 142.419732][ T9641] lowmem_reserve[]: 0 1240 1240 1240 1240 [ 142.425802][ T9641] Node 0 DMA32 free:74420kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53492kB inactive_anon:0kB active_file:8992kB inactive_file:162540kB unevictable:3536kB writepending:52kB zspages:492kB present:2080628kB managed:1270588kB mlocked:0kB bounce:0kB free_pcp:66504kB local_pcp:20500kB free_cma:0kB [ 142.439175][ T9641] lowmem_reserve[]: 0 0 0 0 0 [ 142.441507][ T9641] Node 1 Normal free:1594176kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:27828kB local_pcp:5680kB free_cma:0kB [ 142.456057][ T9641] lowmem_reserve[]: 0 0 0 0 0 [ 142.458447][ T9641] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (UM) = 15304kB [ 142.464855][ T9641] Node 0 DMA32: 55*4kB (UME) 17*8kB (ME) 8*16kB (UME) 15*32kB (UME) 12*64kB (UME) 18*128kB (UME) 5*256kB (UM) 7*512kB (UM) 16*1024kB (UM) 6*2048kB (UM) 9*4096kB (UM) = 74436kB [ 142.471948][ T9641] Node 1 Normal: 36*4kB (UE) 30*8kB (UME) 34*16kB (UME) 71*32kB (UME) 39*64kB (UME) 12*128kB (UME) 3*256kB (UE) 8*512kB (UME) 1*1024kB (U) 6*2048kB (UME) 383*4096kB (UM) = 1594176kB [ 142.480715][ T9641] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 142.485195][ T9641] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 142.488871][ T9641] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 142.492950][ T9641] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 142.497511][ T9641] 51472 total pagecache pages [ 142.499544][ T9641] 18 pages in swap cache [ 142.501347][ T9641] Free swap = 124620kB [ 142.503109][ T9641] Total swap = 124996kB [ 142.505351][ T9641] 1048443 pages RAM [ 142.507282][ T9641] 0 pages HighMem/MovableOnly [ 142.509827][ T9641] 281483 pages reserved [ 142.511967][ T9641] 0 pages cma reserved [ 142.852127][ T40] audit: type=1400 audit(1759697228.095:515): avc: denied { setattr } for pid=9673 comm="syz.0.1300" name="SCTPv6" dev="sockfs" ino=53429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 142.856178][ T9641] syz.3.1289 (9641) used greatest stack depth: 19816 bytes left [ 143.748301][ T40] audit: type=1400 audit(1759697228.995:516): avc: denied { setattr } for pid=9692 comm="syz.0.1305" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.765793][ T40] audit: type=1400 audit(1759697229.005:517): avc: denied { write } for pid=9692 comm="syz.0.1305" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 144.983986][ T839] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 145.164023][ T839] usb 5-1: Using ep0 maxpacket: 32 [ 145.168779][ T839] usb 5-1: config 0 has an invalid interface number: 149 but max is 0 [ 145.172157][ T839] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.175766][ T839] usb 5-1: config 0 has no interface number 0 [ 145.178372][ T839] usb 5-1: config 0 interface 149 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 145.183444][ T839] usb 5-1: config 0 interface 149 has no altsetting 0 [ 145.187374][ T839] usb 5-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice=20.4b [ 145.190534][ T839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.193271][ T839] usb 5-1: Product: syz [ 145.194720][ T839] usb 5-1: Manufacturer: syz [ 145.196239][ T839] usb 5-1: SerialNumber: syz [ 145.201992][ T839] usb 5-1: config 0 descriptor?? [ 145.231862][ T40] audit: type=1400 audit(1759697230.475:518): avc: denied { read } for pid=9736 comm="syz.1.1321" path="socket:[52521]" dev="sockfs" ino=52521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 145.324123][ T29] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 145.333458][ T9739] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1321'. [ 145.411212][ T839] usb 5-1: unsupported MDLM descriptors [ 145.415195][ T839] usb 5-1: USB disconnect, device number 7 [ 145.451480][ T9745] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 145.453965][ T9745] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 145.457456][ T9745] vhci_hcd vhci_hcd.0: Device attached [ 145.464424][ T9747] vhci_hcd: connection closed [ 145.464921][ T1145] vhci_hcd: stop threads [ 145.468004][ T1145] vhci_hcd: release socket [ 145.469870][ T1145] vhci_hcd: disconnect device [ 145.486434][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.489669][ T29] usb 8-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 145.492762][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.497882][ T29] usb 8-1: config 0 descriptor?? [ 145.714293][ T29] usbhid 8-1:0.0: can't add hid device: -71 [ 145.716512][ T29] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 145.720506][ T29] usb 8-1: USB disconnect, device number 2 [ 146.008196][ T9761] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.011205][ T9761] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 146.017820][ T9761] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.019849][ T9761] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 146.023497][ T9761] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.026650][ T9761] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 146.032400][ T9761] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.035492][ T9761] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 146.438748][ T40] audit: type=1400 audit(1759697231.535:519): avc: denied { read write } for pid=9769 comm="syz.0.1333" name="loop-control" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 146.450819][ T40] audit: type=1400 audit(1759697231.545:520): avc: denied { open } for pid=9769 comm="syz.0.1333" path="/dev/loop-control" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 146.461219][ T40] audit: type=1400 audit(1759697231.555:521): avc: denied { ioctl } for pid=9769 comm="syz.0.1333" path="/dev/loop-control" dev="devtmpfs" ino=656 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 146.521698][ T40] audit: type=1400 audit(1759697231.765:522): avc: denied { append } for pid=9782 comm="syz.3.1336" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 146.531994][ T40] audit: type=1400 audit(1759697231.765:523): avc: denied { lock } for pid=9771 comm="syz.1.1334" path="/dev/video1" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 146.570630][ T40] audit: type=1400 audit(1759697231.815:524): avc: denied { bind } for pid=9785 comm="syz.3.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.914065][ T6256] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 147.045310][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'. [ 147.088377][ T6256] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 147.093337][ T6256] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 147.101473][ T6256] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 147.125537][ T6256] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 147.130530][ T6256] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.134437][ T6256] usb 8-1: Product: syz [ 147.136515][ T6256] usb 8-1: Manufacturer: syz [ 147.138834][ T6256] usb 8-1: SerialNumber: syz [ 147.172747][ T6256] usb 8-1: config 0 descriptor?? [ 147.178586][ T9789] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 147.183573][ T9789] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 147.192172][ T6256] usb 8-1: ucan: probing device on interface #0 [ 147.305962][ T9806] validate_nla: 12 callbacks suppressed [ 147.309298][ T9806] netlink: 'syz.1.1343': attribute type 16 has an invalid length. [ 147.313021][ T9806] netlink: 'syz.1.1343': attribute type 17 has an invalid length. [ 147.467593][ T9806] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.921889][ T6256] ucan 8-1:0.0: probe with driver ucan failed with error -71 [ 147.936939][ T6256] usb 8-1: USB disconnect, device number 3 [ 147.996007][ T9812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1346'. [ 147.998563][ T9812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1346'. [ 148.001154][ T9812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1346'. [ 148.004392][ T9812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1346'. [ 148.050125][ T9818] Failed to get privilege flags for destination (handle=0x0:0x0) [ 148.231795][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1350'. [ 148.520511][ T9834] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1352'. [ 148.523628][ T9834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1352'. [ 148.526817][ T9834] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1352'. [ 148.529783][ T9834] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1352'. [ 148.982529][ T9844] bridge0: entered promiscuous mode [ 148.984692][ T9844] macsec1: entered promiscuous mode [ 148.989627][ T9844] bridge0: port 3(macsec1) entered blocking state [ 148.992746][ T9844] bridge0: port 3(macsec1) entered disabled state [ 148.995579][ T9844] macsec1: entered allmulticast mode [ 148.997462][ T9844] bridge0: entered allmulticast mode [ 149.012764][ T9844] macsec1: left allmulticast mode [ 149.015397][ T9844] bridge0: left allmulticast mode [ 149.032904][ T9844] bridge0: left promiscuous mode [ 149.718699][ T9858] syz.1.1360 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 150.984927][ T10] libceph: connect (1)[c::]:6789 error -101 [ 150.988895][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 151.172543][ T9898] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 151.176104][ T9898] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 151.182334][ T9898] vhci_hcd vhci_hcd.0: Device attached [ 151.211607][ T9895] mkiss: ax0: crc mode is auto. [ 151.237217][ T40] audit: type=1400 audit(1759697236.485:525): avc: denied { search } for pid=5660 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.246395][ T40] audit: type=1400 audit(1759697236.495:526): avc: denied { search } for pid=5660 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.253341][ T40] audit: type=1400 audit(1759697236.495:527): avc: denied { search } for pid=5660 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.263011][ T40] audit: type=1400 audit(1759697236.495:528): avc: denied { read } for pid=5660 comm="dhcpcd" name="n105" dev="tmpfs" ino=6805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 151.269991][ T40] audit: type=1400 audit(1759697236.495:529): avc: denied { open } for pid=5660 comm="dhcpcd" path="/run/udev/data/n105" dev="tmpfs" ino=6805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 151.281016][ T40] audit: type=1400 audit(1759697236.495:530): avc: denied { getattr } for pid=5660 comm="dhcpcd" path="/run/udev/data/n105" dev="tmpfs" ino=6805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 151.292514][ T9901] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 151.386928][ T9888] ceph: No mds server is up or the cluster is laggy [ 151.655601][ T10] libceph: connect (1)[c::]:6789 error -101 [ 151.657871][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 151.929016][ T9899] vhci_hcd: connection closed [ 151.929396][ T83] vhci_hcd: stop threads [ 151.933788][ T83] vhci_hcd: release socket [ 151.937270][ T83] vhci_hcd: disconnect device [ 152.491217][ T5967] vhci_hcd: vhci_device speed not set [ 152.774032][ T34] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 152.894069][ T840] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 152.943934][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 152.958592][ T34] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.963250][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 152.965932][ T34] usb 6-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 152.968967][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.973561][ T34] usb 6-1: config 0 descriptor?? [ 153.044310][ T840] usb 5-1: Using ep0 maxpacket: 32 [ 153.051898][ T840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.056691][ T840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.060348][ T840] usb 5-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 153.064581][ T840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.070837][ T840] usb 5-1: config 0 descriptor?? [ 153.392781][ T34] ortek 0003:05A4:1700.0003: unknown main item tag 0x0 [ 153.395281][ T34] ortek 0003:05A4:1700.0003: unknown main item tag 0x0 [ 153.397626][ T34] ortek 0003:05A4:1700.0003: unknown main item tag 0x0 [ 153.399869][ T34] ortek 0003:05A4:1700.0003: unknown main item tag 0x0 [ 153.402069][ T34] ortek 0003:05A4:1700.0003: unknown main item tag 0x0 [ 153.407588][ T34] ortek 0003:05A4:1700.0003: hidraw1: USB HID v0.07 Device [HID 05a4:1700] on usb-dummy_hcd.1-1/input0 [ 153.506747][ T840] betop 0003:20BC:5500.0004: global environment stack underflow [ 153.510461][ T840] betop 0003:20BC:5500.0004: item 0 4 1 11 parsing failed [ 153.522196][ T840] betop 0003:20BC:5500.0004: parse failed [ 153.529428][ T840] betop 0003:20BC:5500.0004: probe with driver betop failed with error -22 [ 153.593164][ T840] usb 6-1: USB disconnect, device number 4 [ 153.690388][ T9974] input: syz1 as /devices/virtual/input/input6 [ 153.698298][ T40] audit: type=1400 audit(1759697238.945:531): avc: denied { ioctl } for pid=5343 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2952 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.713643][ T34] usb 5-1: USB disconnect, device number 8 [ 154.194603][ T40] audit: type=1400 audit(1759697239.445:532): avc: denied { create } for pid=9984 comm="syz.1.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 154.206399][ T40] audit: type=1400 audit(1759697239.455:533): avc: denied { write } for pid=9984 comm="syz.1.1394" path="socket:[54731]" dev="sockfs" ino=54731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 154.844285][ T40] audit: type=1400 audit(1759697239.695:534): avc: denied { setopt } for pid=9987 comm="syz.0.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 154.923554][ T9994] __nla_validate_parse: 1 callbacks suppressed [ 154.923574][ T9994] netlink: 1296 bytes leftover after parsing attributes in process `syz.3.1397'. [ 154.933306][ T9994] openvswitch: netlink: Flow key attr not present in new flow. [ 156.568042][T10037] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 156.637143][T10039] netlink: 'syz.1.1415': attribute type 1 has an invalid length. [ 156.914072][ T3349] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 157.094312][T10049] geneve0 speed is unknown, defaulting to 1000 [ 157.174547][ T3349] usb 6-1: not running at top speed; connect to a high speed hub [ 157.179875][ T3349] usb 6-1: config 0 has an invalid interface number: 249 but max is 0 [ 157.193286][ T3349] usb 6-1: config 0 has no interface number 0 [ 157.214812][ T3349] usb 6-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice=fb.69 [ 157.219063][ T3349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.222978][ T3349] usb 6-1: Product: syz [ 157.225956][ T3349] usb 6-1: Manufacturer: syz [ 157.228629][ T3349] usb 6-1: SerialNumber: syz [ 157.261417][ T3349] usb 6-1: config 0 descriptor?? [ 157.512561][ T3349] gspca_main: spca506-2.14.0 probing 06e1:a190 [ 157.605277][ T3349] usb 6-1: USB disconnect, device number 5 [ 157.752217][T10056] netlink: 'syz.3.1421': attribute type 2 has an invalid length. [ 157.796924][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 157.796937][ T40] audit: type=1326 audit(1759697243.045:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.3.1422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed8d8eec9 code=0x7ffc0000 [ 157.806644][ T40] audit: type=1326 audit(1759697243.045:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.3.1422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed8d8eec9 code=0x7ffc0000 [ 157.814136][ T40] audit: type=1326 audit(1759697243.045:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.3.1422" exe="/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f8ed8d8eec9 code=0x7ffc0000 [ 157.821985][ T40] audit: type=1326 audit(1759697243.045:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.3.1422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed8d8eec9 code=0x7ffc0000 [ 157.830231][ T40] audit: type=1326 audit(1759697243.045:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.3.1422" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8ed8d8eec9 code=0x7ffc0000 [ 157.838073][ T40] audit: type=1326 audit(1759697243.045:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.3.1422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed8d8eec9 code=0x7ffc0000 [ 157.845737][ T40] audit: type=1326 audit(1759697243.045:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.3.1422" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ed8d8eec9 code=0x7ffc0000 [ 157.853715][ T40] audit: type=1326 audit(1759697243.045:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.3.1422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed8d8eec9 code=0x7ffc0000 [ 157.861016][ T40] audit: type=1326 audit(1759697243.045:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.3.1422" exe="/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f8ed8d8eec9 code=0x7ffc0000 [ 157.874060][ T40] audit: type=1326 audit(1759697243.045:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.3.1422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed8d8eec9 code=0x7ffc0000 [ 158.064823][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1427'. [ 158.814092][ T53] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 158.963999][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 158.967695][ T53] usb 6-1: unable to get BOS descriptor or descriptor too short [ 158.972435][ T53] usb 6-1: config 9 has an invalid interface number: 128 but max is 1 [ 158.975870][ T53] usb 6-1: config 9 has an invalid interface number: 251 but max is 1 [ 158.979486][ T53] usb 6-1: config 9 has no interface number 0 [ 158.982006][ T53] usb 6-1: config 9 has no interface number 1 [ 158.984651][ T53] usb 6-1: config 9 interface 128 has no altsetting 0 [ 158.987374][ T53] usb 6-1: config 9 interface 251 has no altsetting 0 [ 158.992665][ T53] usb 6-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=4b.cb [ 158.996930][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.000577][ T53] usb 6-1: Product: syz [ 159.002967][ T53] usb 6-1: Manufacturer: syz [ 159.005093][ T53] usb 6-1: SerialNumber: syz [ 159.074000][ T10] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 159.144092][ T5967] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 159.192880][T10102] geneve0 speed is unknown, defaulting to 1000 [ 159.225442][ T53] videodev: could not get a free minor [ 159.227232][ T53] dsbr100 6-1:9.251: couldn't register video device [ 159.229379][ T53] dsbr100 6-1:9.251: probe with driver dsbr100 failed with error -23 [ 159.234234][ T53] usb 6-1: USB disconnect, device number 6 [ 159.240050][ T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 159.247285][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 159.251952][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 159.258172][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64 [ 159.283262][ T10] usb 8-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 159.293916][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.297947][ T10] usb 8-1: Product: syz [ 159.300263][ T10] usb 8-1: Manufacturer: syz [ 159.302276][ T10] usb 8-1: SerialNumber: syz [ 159.302759][ T5967] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 159.311326][ T10] usb 8-1: config 0 descriptor?? [ 159.327176][ T5967] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 159.331255][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.335736][ T5967] usb 5-1: Product: syz [ 159.337735][ T5967] usb 5-1: Manufacturer: syz [ 159.340043][ T5967] usb 5-1: SerialNumber: syz [ 159.376320][ T5967] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 159.522653][ T10] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 159.528786][ T10] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 159.532105][ T10] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 159.536613][ T10] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 159.539991][ T10] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 159.542924][ T10] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 159.545947][ T10] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 159.548757][ T10] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 159.551604][ T10] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 159.554658][ T10] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 159.558462][ T10] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 159.561463][ T10] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 159.565015][ T10] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 159.567980][ T10] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 159.570854][ T10] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 159.573704][ T10] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 159.576767][ T10] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 159.580919][ T10] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 159.583974][ T10] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 159.586904][ T10] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 159.589448][ T10] input input7: Timeout waiting for response from device. [ 159.595681][ T10] usb 8-1: USB disconnect, device number 4 [ 159.847702][T10110] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1443'. [ 159.979952][ T5967] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 159.990813][ T5967] usb 5-1: USB disconnect, device number 9 [ 160.003978][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 160.154075][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 160.157539][ T24] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 160.160306][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.164588][ T24] usb 6-1: config 0 has no interface number 1 [ 160.167003][ T24] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 160.170597][ T24] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 160.174761][ T24] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 160.178676][ T24] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 160.182066][ T24] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.190676][ T24] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 160.195419][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.200570][ T24] usb 6-1: Product: syz [ 160.202334][ T24] usb 6-1: Manufacturer: syz [ 160.204393][ T24] usb 6-1: SerialNumber: syz [ 160.208555][ T24] usb 6-1: config 0 descriptor?? [ 160.211890][T10106] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 160.219640][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.227320][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.246379][T10119] syzkaller1: entered promiscuous mode [ 160.249283][T10119] syzkaller1: entered allmulticast mode [ 160.255385][ T24] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 160.419775][ T53] usb 6-1: USB disconnect, device number 7 [ 161.284102][ T6040] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 161.452945][ T6040] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.457274][ T6040] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 161.474046][ T6040] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.480494][ T6040] usb 6-1: config 0 descriptor?? [ 161.534588][ T6040] pwc: Askey VC010 type 2 USB webcam detected. [ 161.544183][ T53] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 161.704145][ T53] usb 8-1: Using ep0 maxpacket: 16 [ 161.708476][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.712372][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.716445][ T53] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 161.722145][ T53] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 161.726310][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.741828][ T53] usb 8-1: config 0 descriptor?? [ 161.965431][ T6040] pwc: recv_control_msg error -32 req 02 val 2b00 [ 162.023723][ T6040] pwc: recv_control_msg error -32 req 02 val 2700 [ 162.036730][ T6040] pwc: recv_control_msg error -32 req 02 val 2c00 [ 162.059630][ T6040] pwc: recv_control_msg error -32 req 04 val 1000 [ 162.075925][ T6040] pwc: recv_control_msg error -32 req 04 val 1300 [ 162.088480][ T6040] pwc: recv_control_msg error -32 req 04 val 1400 [ 162.096280][ T6040] pwc: recv_control_msg error -32 req 02 val 2000 [ 162.101654][ T6040] pwc: recv_control_msg error -32 req 02 val 2100 [ 162.106846][ T6040] pwc: recv_control_msg error -32 req 04 val 1500 [ 162.110813][ T6040] pwc: recv_control_msg error -32 req 02 val 2500 [ 162.153027][ T53] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 162.155830][ T53] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 162.158232][ T53] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 162.165477][ T53] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:045E:07DA.0005/input/input8 [ 162.229725][ T53] microsoft 0003:045E:07DA.0005: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 162.321039][ T6040] pwc: recv_control_msg error -71 req 02 val 2600 [ 162.332820][ T6040] pwc: recv_control_msg error -71 req 02 val 2900 [ 162.339657][ T6040] pwc: recv_control_msg error -71 req 02 val 2800 [ 162.353067][ T53] usb 8-1: USB disconnect, device number 5 [ 162.353298][ T6040] pwc: recv_control_msg error -71 req 04 val 1100 [ 162.361485][ T6040] pwc: recv_control_msg error -71 req 04 val 1200 [ 162.387692][ T6040] pwc: Registered as video103. [ 162.404238][ T6040] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb6/6-1/input/input9 [ 162.440898][ T6040] usb 6-1: USB disconnect, device number 8 [ 162.920599][T10183] netlink: 'syz.3.1472': attribute type 1 has an invalid length. [ 162.924075][T10183] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1472'. [ 163.323961][ T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 163.495864][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.500331][ T24] usb 8-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 163.505289][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.511940][ T24] usb 8-1: config 0 descriptor?? [ 164.078413][ T24] hid_mf 0003:0079:1846.0006: hidraw1: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 164.082106][ T24] hid_mf 0003:0079:1846.0006: Invalid report, this should never happen! [ 164.084919][ T24] hid_mf 0003:0079:1846.0006: Force feedback init failed. [ 164.196519][ T53] usb 8-1: USB disconnect, device number 6 [ 164.207050][T10208] kvm: vcpu 0: requested 486 ns lapic timer period limited to 200000 ns [ 164.510036][T10219] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1485'. [ 164.726595][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 164.726612][ T40] audit: type=1400 audit(1759697249.975:561): avc: denied { read } for pid=10231 comm="syz.3.1490" name="usbmon8" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 164.741360][ T40] audit: type=1400 audit(1759697249.975:562): avc: denied { open } for pid=10231 comm="syz.3.1490" path="/dev/usbmon8" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 164.782244][ T40] audit: type=1400 audit(1759697250.025:563): avc: denied { write } for pid=10231 comm="syz.3.1490" name="usbmon8" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 164.784900][T10234] usb usb8: usbfs: process 10234 (syz.3.1490) did not claim interface 0 before use [ 165.817651][T10260] bridge: RTM_NEWNEIGH with invalid ether address [ 166.113977][ T840] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 166.266802][ T840] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 166.270039][ T840] usb 6-1: config 0 has no interface number 0 [ 166.274977][ T840] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 166.277981][ T840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.280577][ T840] usb 6-1: Product: syz [ 166.281916][ T840] usb 6-1: Manufacturer: syz [ 166.283546][ T840] usb 6-1: SerialNumber: syz [ 166.286779][ T840] usb 6-1: config 0 descriptor?? [ 166.848481][T10272] input: syz1 as /devices/virtual/input/input10 [ 167.012926][ T840] usb 6-1: Firmware version (0.0) predates our first public release. [ 167.016617][ T840] usb 6-1: Please update to version 0.2 or newer [ 167.021027][ T840] usb 6-1: Firmware: build [ 167.317074][ T840] usb 6-1: USB disconnect, device number 9 [ 167.403051][ T40] audit: type=1400 audit(1759697252.645:564): avc: denied { create } for pid=10280 comm="syz.3.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 167.411191][ T40] audit: type=1400 audit(1759697252.655:565): avc: denied { getopt } for pid=10280 comm="syz.3.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 167.449050][ T40] audit: type=1400 audit(1759697252.695:566): avc: denied { create } for pid=10284 comm="syz.2.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 168.664034][ T3349] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 168.685206][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1524'. [ 168.813938][ T3349] usb 6-1: Using ep0 maxpacket: 16 [ 168.824018][ T3349] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.828497][ T3349] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.832653][ T3349] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 168.844070][ T3349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.850110][ T3349] usb 6-1: config 0 descriptor?? [ 169.274435][ T40] audit: type=1400 audit(1759697254.525:567): avc: denied { connect } for pid=10334 comm="syz.0.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.292219][ T40] audit: type=1400 audit(1759697254.535:568): avc: denied { read } for pid=10334 comm="syz.0.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.320901][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1529'. [ 169.326194][T10343] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1529'. [ 169.331622][T10343] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1529'. [ 169.397191][ T3349] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 169.399614][ T3349] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 169.423488][ T3349] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 169.427002][ T3349] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 169.431561][ T3349] konepure 0003:1E7D:2DB4.0007: hidraw1: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.1-1/input0 [ 169.597458][ T34] usb 6-1: USB disconnect, device number 10 [ 170.208692][T10359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.523476][ T40] audit: type=1400 audit(1759697255.765:569): avc: denied { write } for pid=10368 comm="syz.3.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.727390][T10384] netlink: 'syz.2.1542': attribute type 10 has an invalid length. [ 171.446290][T10396] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1546'. [ 172.493964][ T34] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 172.644673][ T34] usb 5-1: too many configurations: 101, using maximum allowed: 8 [ 172.677377][ T34] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 172.680826][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.684578][ T34] usb 5-1: Product: syz [ 172.685937][ T34] usb 5-1: Manufacturer: syz [ 172.687396][ T34] usb 5-1: SerialNumber: syz [ 172.695422][ T34] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 172.718851][ T34] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 173.367567][ T53] usb 5-1: USB disconnect, device number 10 [ 173.444121][ T3349] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 173.659881][T10441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.714418][ T3349] usb 6-1: Using ep0 maxpacket: 32 [ 173.994350][ T34] usb 5-1: Service connection timeout for: 256 [ 174.006789][ T34] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 174.019674][ T34] ath9k_htc: Failed to initialize the device [ 174.024915][ T53] usb 5-1: ath9k_htc: USB layer deinitialized [ 174.404665][ T3349] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.410757][ T3349] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 174.414739][ T3349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.418157][ T3349] usb 6-1: Product: syz [ 174.419956][ T3349] usb 6-1: Manufacturer: syz [ 174.421845][ T3349] usb 6-1: SerialNumber: syz [ 174.426394][ T3349] usb 6-1: config 0 descriptor?? [ 174.430843][ T3349] quatech2 6-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 174.630865][ T3349] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 174.633716][ T3349] quatech2 6-1:0.0: probe with driver quatech2 failed with error -8 [ 174.765047][T10461] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 174.834113][ T3349] usb 6-1: USB disconnect, device number 11 [ 175.312044][T10470] rtc_cmos 00:05: Alarms can be up to one day in the future [ 175.367614][ T40] audit: type=1400 audit(1759697260.615:570): avc: denied { ioctl } for pid=10473 comm="syz.1.1576" path="/dev/fb0" dev="devtmpfs" ino=636 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 175.409148][ T40] audit: type=1400 audit(1759697260.655:571): avc: denied { listen } for pid=10475 comm="syz.0.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.670398][ T40] audit: type=1400 audit(1759697260.915:572): avc: denied { ioctl } for pid=10476 comm="syz.1.1578" path="socket:[55034]" dev="sockfs" ino=55034 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 175.859519][T10484] geneve0 speed is unknown, defaulting to 1000 [ 176.121028][ T40] audit: type=1400 audit(1759697261.365:573): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 176.995610][T10493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.162559][T10534] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 178.334968][T10542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1595'. [ 178.386729][ T40] audit: type=1400 audit(1759697263.575:574): avc: denied { setopt } for pid=10529 comm="syz.0.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 178.396018][T10546] futex_wake_op: syz.2.1602 tries to shift op by 32; fix this program [ 180.058042][ T40] audit: type=1400 audit(1759697265.305:575): avc: denied { getopt } for pid=10568 comm="syz.0.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 180.101754][T10574] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.105318][T10574] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.146815][T10584] comedi comedi4: bad chanlist[0]=0x00000401 chan=1025 range length=2 [ 180.308134][ T61] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 180.421496][ T40] audit: type=1400 audit(1759697265.665:576): avc: denied { mount } for pid=10587 comm="syz.3.1620" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 180.453897][ T61] usb 6-1: Using ep0 maxpacket: 32 [ 180.464937][ T61] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.469968][ T61] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 180.474087][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.638356][ T61] usb 6-1: config 0 descriptor?? [ 180.754190][ T6040] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 180.904145][ T6040] usb 5-1: Using ep0 maxpacket: 32 [ 180.907555][ T6040] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 180.910574][ T6040] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.915158][ T6040] usb 5-1: config 0 descriptor?? [ 181.051048][ T61] steelseries 0003:1038:1410.0008: unknown main item tag 0x0 [ 181.053614][ T61] steelseries 0003:1038:1410.0008: unknown main item tag 0x0 [ 181.056212][ T61] steelseries 0003:1038:1410.0008: unknown main item tag 0x0 [ 181.058587][ T61] steelseries 0003:1038:1410.0008: unknown main item tag 0x0 [ 181.061067][ T61] steelseries 0003:1038:1410.0008: unknown main item tag 0x0 [ 181.063908][ T61] steelseries 0003:1038:1410.0008: missing HID_OUTPUT_REPORT 0 [ 181.121729][ T6040] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 181.135856][ T6040] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 181.140561][ T6040] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 181.148210][ T6040] usb 5-1: media controller created [ 181.170312][ T6040] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.222890][ T6040] DVB: Unable to find symbol dib7000p_attach() [ 181.226324][ T6040] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 181.274802][ T6040] rc_core: IR keymap rc-dib0700-rc5 not found [ 181.275512][ T3349] usb 6-1: USB disconnect, device number 12 [ 181.276890][ T6040] Registered IR keymap rc-empty [ 181.277205][ T6040] dvb-usb: could not initialize remote control. [ 181.286907][ T6040] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 181.329668][ T6040] usb 5-1: USB disconnect, device number 11 [ 181.348141][ T6040] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 182.035138][T10625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.114048][ T5967] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 182.673936][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 182.682279][ T5967] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 182.685180][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.687774][ T5967] usb 5-1: Product: syz [ 182.689179][ T5967] usb 5-1: Manufacturer: syz [ 182.690744][ T5967] usb 5-1: SerialNumber: syz [ 182.702885][ T5967] usb 5-1: config 0 descriptor?? [ 183.417349][ T40] audit: type=1400 audit(1759697268.665:577): avc: denied { write } for pid=10646 comm="syz.2.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.426187][ T40] audit: type=1400 audit(1759697268.665:578): avc: denied { accept } for pid=10646 comm="syz.2.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.057563][T10665] block device autoloading is deprecated and will be removed. [ 184.147707][T10666] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 184.152978][T10666] qnx6: wrong signature (magic) in superblock #1. [ 184.155764][T10666] qnx6: unable to read the first superblock [ 184.754137][ T29] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 185.013166][ T5967] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 185.018418][ T5967] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 185.024289][ T29] usb 8-1: unable to get BOS descriptor or descriptor too short [ 185.029017][ T29] usb 8-1: not running at top speed; connect to a high speed hub [ 185.033092][ T29] usb 8-1: config 1 interface 0 has no altsetting 0 [ 185.038299][ T29] usb 8-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.40 [ 185.041160][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.048395][ T29] usb 8-1: Product: syz [ 185.049653][ T29] usb 8-1: Manufacturer: 㤒ꥮ鄖ի扡걪䵑ìžá±¤ë„ˆé¾¼ã„¨ä”©ëº¬á•¾êµ¦ë¬²î£†ê¹©ê‡•ì‰¼Ï¸â¸®å³´î‘°ä â‚¹æ†¢è¿§æ™›ê¬°å˜£í¦æ¯´â–³ê¢žê²æŸ—㬣鮲⻄ﲦˉ茢ហ[ 185.055100][ T29] usb 8-1: SerialNumber: syz [ 185.080809][T10677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.192621][ T5967] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 185.213284][ T5967] usb 5-1: USB disconnect, device number 12 [ 185.279233][ T29] usbhid 8-1:1.0: can't add hid device: -71 [ 185.281147][ T29] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 185.290412][ T29] usb 8-1: USB disconnect, device number 7 [ 185.479705][T10692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.543391][ T40] audit: type=1400 audit(1759697270.785:579): avc: denied { read } for pid=10694 comm="syz.0.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.821324][ T40] audit: type=1400 audit(1759697271.065:580): avc: denied { open } for pid=10702 comm="syz.3.1662" path="/dev/ptyqa" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 186.042912][T10707] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 186.501701][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1667'. [ 186.519353][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1667'. [ 186.526372][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1667'. [ 186.536182][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1667'. [ 186.540718][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1667'. [ 186.883375][ T40] audit: type=1400 audit(1759697272.125:581): avc: denied { append } for pid=10725 comm="syz.3.1671" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 187.913548][T10755] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 188.621258][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'. [ 188.641961][ T40] audit: type=1400 audit(1759697273.885:582): avc: denied { ioctl } for pid=10765 comm="syz.3.1685" path="/dev/usbmon2" dev="devtmpfs" ino=742 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 189.998286][T10792] binder: 10791:10792 ioctl c018620b 200000000000 returned -14 [ 190.004921][ T40] audit: type=1400 audit(1759697275.245:583): avc: denied { append } for pid=10791 comm="syz.0.1694" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 190.093931][ T839] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 190.263989][ T839] usb 6-1: Using ep0 maxpacket: 16 [ 190.275328][ T839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.280135][ T839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.284940][ T839] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 190.290881][ T839] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 190.295085][ T839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.301353][ T839] usb 6-1: config 0 descriptor?? [ 190.425430][T10822] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1704'. [ 190.498932][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1701'. [ 190.571560][ T40] audit: type=1400 audit(1759697275.815:584): avc: denied { bind } for pid=10826 comm="syz.3.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 190.711345][T10830] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1708'. [ 190.722499][T10830] xt_socket: unknown flags 0xd0 [ 191.369671][ T839] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 191.373189][ T839] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 191.376617][ T839] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 191.387876][ T839] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:045E:07DA.0009/input/input13 [ 191.459433][ T839] microsoft 0003:045E:07DA.0009: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 191.568321][ T54] usb 6-1: USB disconnect, device number 13 [ 192.122123][ T40] audit: type=1326 audit(1759697277.365:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10848 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbd78eec9 code=0x7ffc0000 [ 192.150883][ T40] audit: type=1326 audit(1759697277.385:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10848 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbd78eec9 code=0x7ffc0000 [ 192.172437][ T40] audit: type=1326 audit(1759697277.385:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10848 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3cbd78eec9 code=0x7ffc0000 [ 192.188875][ T40] audit: type=1326 audit(1759697277.385:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10848 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbd78eec9 code=0x7ffc0000 [ 192.198465][ T40] audit: type=1326 audit(1759697277.385:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10848 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f3cbd78eec9 code=0x7ffc0000 [ 192.209135][ T40] audit: type=1326 audit(1759697277.385:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10848 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbd78eec9 code=0x7ffc0000 [ 192.784744][ T5967] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 192.950539][ T5967] usb 6-1: Using ep0 maxpacket: 16 [ 192.967468][ T5967] usb 6-1: config 0 has no interfaces? [ 192.984813][ T40] audit: type=1400 audit(1759697278.195:591): avc: denied { module_request } for pid=10877 comm="syz.2.1730" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 193.074298][ T5967] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 193.079573][ T5967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.085510][ T5967] usb 6-1: Product: syz [ 193.087574][ T5967] usb 6-1: Manufacturer: syz [ 193.089726][ T5967] usb 6-1: SerialNumber: syz [ 193.251255][ T5967] usb 6-1: config 0 descriptor?? [ 193.311072][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1730'. [ 193.560225][ T5967] usb 6-1: USB disconnect, device number 14 [ 194.568659][ T40] audit: type=1400 audit(1759697279.815:592): avc: denied { execute } for pid=10953 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 194.589630][ T40] audit: type=1400 audit(1759697279.815:593): avc: denied { execute_no_trans } for pid=10953 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 194.800353][ T5964] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.805627][ T5964] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.809684][ T5964] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.813237][ T5964] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.819266][ T5964] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.828712][ T65] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.831180][ T65] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.833942][ T65] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.837759][ T65] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.844506][ T65] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.875116][T10959] geneve0 speed is unknown, defaulting to 1000 [ 195.035386][T10959] chnl_net:caif_netlink_parms(): no params data found [ 195.135264][T10959] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.137729][T10959] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.140806][T10959] bridge_slave_0: entered allmulticast mode [ 195.144023][T10959] bridge_slave_0: entered promiscuous mode [ 195.148901][T10959] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.151902][T10959] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.155333][T10959] bridge_slave_1: entered allmulticast mode [ 195.164348][T10959] bridge_slave_1: entered promiscuous mode [ 195.193957][ T34] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 195.246774][T10959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.251818][T10959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.319757][T10959] team0: Port device team_slave_0 added [ 195.325902][T10959] team0: Port device team_slave_1 added [ 195.365130][ T34] usb 8-1: config 0 has an invalid interface number: 71 but max is 0 [ 195.368363][ T34] usb 8-1: config 0 has no interface number 0 [ 195.370520][ T34] usb 8-1: config 0 interface 71 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 195.375104][ T34] usb 8-1: config 0 interface 71 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 195.378851][ T34] usb 8-1: config 0 interface 71 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 256 [ 195.385763][ T34] usb 8-1: New USB device found, idVendor=0bfd, idProduct=0012, bcdDevice=cc.c0 [ 195.388616][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.393119][ T34] usb 8-1: Product: syz [ 195.395785][ T34] usb 8-1: Manufacturer: syz [ 195.398134][ T34] usb 8-1: SerialNumber: syz [ 195.407339][ T34] usb 8-1: config 0 descriptor?? [ 195.410652][T10960] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 195.413049][T10960] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 195.417985][T10959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.419036][ T34] kvaser_usb 8-1:0.71: error -EPROTO: Cannot get software info [ 195.420772][T10959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.420792][T10959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.422065][T10959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.423712][ T34] kvaser_usb 8-1:0.71: probe with driver kvaser_usb failed with error -71 [ 195.433202][T10959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.448992][T10959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.499306][T10959] hsr_slave_0: entered promiscuous mode [ 195.502396][T10959] hsr_slave_1: entered promiscuous mode [ 195.508376][T10959] debugfs: 'hsr0' already exists in 'hsr' [ 195.510367][T10959] Cannot create hsr debugfs directory [ 195.618674][ T34] usb 8-1: USB disconnect, device number 8 [ 195.696372][T10959] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.819514][T10959] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.906350][T10959] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.022242][T10959] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.185901][T10959] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 196.190474][T10959] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 196.196858][T10959] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 196.201733][T10959] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 196.268514][T10959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.284697][T10959] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.292372][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.294970][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.315420][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.318143][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.403163][T11015] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 196.630253][T10959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.657146][T10959] veth0_vlan: entered promiscuous mode [ 196.663044][T10959] veth1_vlan: entered promiscuous mode [ 196.683217][T10959] veth0_macvtap: entered promiscuous mode [ 196.688747][T10959] veth1_macvtap: entered promiscuous mode [ 196.701332][T10959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.708384][T10959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.716461][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.728190][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.731887][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.738146][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.778292][ T1210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.781729][ T1210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.810201][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.813675][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.830680][ T40] audit: type=1400 audit(1759697282.075:594): avc: denied { mounton } for pid=10959 comm="syz-executor" path="/syzkaller.YovQkM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 196.884113][ T5964] Bluetooth: hci4: command tx timeout [ 197.835234][T10996] warn_alloc: 1 callbacks suppressed [ 197.835251][T10996] syz.0.1772: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 197.845017][T10996] CPU: 0 UID: 0 PID: 10996 Comm: syz.0.1772 Not tainted syzkaller #0 PREEMPT(full) [ 197.845036][T10996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 197.845049][T10996] Call Trace: [ 197.845054][T10996] [ 197.845059][T10996] dump_stack_lvl+0x16c/0x1f0 [ 197.845076][T10996] warn_alloc+0x248/0x3a0 [ 197.845098][T10996] ? __pfx_warn_alloc+0x10/0x10 [ 197.845124][T10996] ? hash_netiface_create+0x3ec/0x1250 [ 197.845137][T10996] ? __vmalloc_node_noprof+0xad/0xf0 [ 197.845157][T10996] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 197.845180][T10996] ? hash_netiface_create+0x3ec/0x1250 [ 197.845197][T10996] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 197.845220][T10996] ? hash_netiface_create+0x3ec/0x1250 [ 197.845232][T10996] __vmalloc_node_noprof+0xad/0xf0 [ 197.845249][T10996] ? hash_netiface_create+0x3ec/0x1250 [ 197.845263][T10996] __vmalloc_node_range_noprof+0xb3b/0x1480 [ 197.845286][T10996] ? hash_netiface_create+0x3ec/0x1250 [ 197.845305][T10996] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 197.845325][T10996] ? ___kmalloc_large_node+0xed/0x160 [ 197.845344][T10996] __kvmalloc_node_noprof+0x431/0x9c0 [ 197.845359][T10996] ? hash_netiface_create+0x3ec/0x1250 [ 197.845372][T10996] ? hash_netiface_create+0x3ec/0x1250 [ 197.845388][T10996] ? hash_netiface_create+0x3ec/0x1250 [ 197.845400][T10996] hash_netiface_create+0x3ec/0x1250 [ 197.845413][T10996] ? __nla_validate_parse+0x285b/0x2880 [ 197.845433][T10996] ? __pfx_hash_netiface_create+0x10/0x10 [ 197.845447][T10996] ip_set_create+0x7e4/0x14d0 [ 197.845467][T10996] ? __pfx_ip_set_create+0x10/0x10 [ 197.845505][T10996] ? find_held_lock+0x2b/0x80 [ 197.845544][T10996] nfnetlink_rcv_msg+0x9fc/0x1200 [ 197.845575][T10996] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 197.845601][T10996] ? __lock_acquire+0x62e/0x1ce0 [ 197.845647][T10996] ? avc_has_perm_noaudit+0x149/0x3b0 [ 197.845673][T10996] netlink_rcv_skb+0x158/0x420 [ 197.845690][T10996] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 197.845703][T10996] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.845727][T10996] ? ns_capable+0xd7/0x110 [ 197.845746][T10996] nfnetlink_rcv+0x1b3/0x430 [ 197.845766][T10996] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 197.845786][T10996] ? netlink_deliver_tap+0x1ae/0xd30 [ 197.845805][T10996] netlink_unicast+0x5a7/0x870 [ 197.845823][T10996] ? __pfx_netlink_unicast+0x10/0x10 [ 197.845846][T10996] netlink_sendmsg+0x8c8/0xdd0 [ 197.845865][T10996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.845887][T10996] ____sys_sendmsg+0xa98/0xc70 [ 197.845907][T10996] ? copy_msghdr_from_user+0x10a/0x160 [ 197.845922][T10996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.845948][T10996] ___sys_sendmsg+0x134/0x1d0 [ 197.845964][T10996] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.845998][T10996] __sys_sendmsg+0x16d/0x220 [ 197.846013][T10996] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.846028][T10996] ? __x64_sys_futex+0x1e0/0x4c0 [ 197.846057][T10996] do_syscall_64+0xcd/0x4e0 [ 197.846071][T10996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.846085][T10996] RIP: 0033:0x7fa20bf8eec9 [ 197.846096][T10996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.846109][T10996] RSP: 002b:00007fa20ce9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.846121][T10996] RAX: ffffffffffffffda RBX: 00007fa20c1e5fa0 RCX: 00007fa20bf8eec9 [ 197.846129][T10996] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 197.846136][T10996] RBP: 00007fa20c011f91 R08: 0000000000000000 R09: 0000000000000000 [ 197.846144][T10996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.846151][T10996] R13: 00007fa20c1e6038 R14: 00007fa20c1e5fa0 R15: 00007ffe88b40ef8 [ 197.846167][T10996] [ 197.846185][T10996] Mem-Info: [ 197.865000][T11040] binder: 11039:11040 unknown command 0 [ 197.865429][T10996] active_anon:29065 inactive_anon:704 isolated_anon:0 [ 197.865429][T10996] active_file:11815 inactive_file:40455 isolated_file:0 [ 197.865429][T10996] unevictable:1768 dirty:257 writeback:0 [ 197.865429][T10996] slab_reclaimable:12438 slab_unreclaimable:71903 [ 197.865429][T10996] mapped:29497 shmem:21654 pagetables:1491 [ 197.865429][T10996] sec_pagetables:314 bounce:0 [ 197.865429][T10996] kernel_misc_reclaimable:0 [ 197.865429][T10996] free:387726 free_pcp:27252 free_cma:0 [ 197.868154][T11040] binder: 11039:11040 ioctl c0306201 200000000080 returned -22 [ 197.870552][T10996] Node 0 active_anon:116252kB inactive_anon:2816kB active_file:47260kB inactive_file:161616kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:117988kB dirty:1024kB writeback:0kB shmem:83080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13264kB pagetables:5748kB sec_pagetables:1256kB all_unreclaimable? no Balloon:0kB [ 197.879128][T11040] binder: 11039:11040 ioctl c0306201 2000000003c0 returned -14 [ 197.880553][T10996] Node 1 active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 197.965304][T11044] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 197.965967][T10996] Node 0 DMA free:5284kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:284kB local_pcp:36kB free_cma:0kB [ 198.049373][T10996] lowmem_reserve[]: 0 1240 1240 1240 1240 [ 198.051360][T10996] Node 0 DMA32 free:41636kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB free_highatomic:0KB active_anon:116068kB inactive_anon:2816kB active_file:47260kB inactive_file:161616kB unevictable:3536kB writepending:1024kB zspages:456kB present:2080628kB managed:1270588kB mlocked:0kB bounce:0kB free_pcp:47936kB local_pcp:17112kB free_cma:0kB [ 198.063753][T10996] lowmem_reserve[]: 0 0 0 0 0 [ 198.065740][T10996] Node 1 Normal free:1504384kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:4kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:60884kB local_pcp:34656kB free_cma:0kB [ 198.079476][T10996] lowmem_reserve[]: 0 0 0 0 0 [ 198.081259][T10996] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 2*2048kB (UM) 0*4096kB = 5284kB [ 198.086976][T10996] Node 0 DMA32: 431*4kB (UME) 299*8kB (ME) 257*16kB (M) 157*32kB (UME) 72*64kB (UME) 41*128kB (ME) 10*256kB (M) 7*512kB (ME) 12*1024kB (U) 0*2048kB 0*4096kB = 41540kB [ 198.093616][T10996] Node 1 Normal: 5*4kB (UME) 6*8kB (UE) 8*16kB (UME) 14*32kB (UME) 14*64kB (UME) 9*128kB (UME) 4*256kB (UME) 7*512kB (UME) 2*1024kB (UM) 2*2048kB (E) 364*4096kB (UM) = 1504388kB [ 198.099936][T10996] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.103151][T10996] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.106492][T10996] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.110339][T10996] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 198.114592][T10996] 74302 total pagecache pages [ 198.117080][T10996] 10 pages in swap cache [ 198.120203][T10996] Free swap = 124812kB [ 198.121976][T10996] Total swap = 124996kB [ 198.123520][T10996] 1048443 pages RAM [ 198.125267][T10996] 0 pages HighMem/MovableOnly [ 198.127730][T10996] 281483 pages reserved [ 198.129383][T10996] 0 pages cma reserved [ 198.206518][T11055] netlink: 'syz.3.1790': attribute type 16 has an invalid length. [ 198.210106][T11055] netlink: 'syz.3.1790': attribute type 17 has an invalid length. [ 198.220403][T11055] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.223882][T11055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.228866][T11055] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.231947][T11055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.242144][T11055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.501601][T11062] binder: 11061:11062 unknown command 0 [ 198.506968][T11062] binder: 11061:11062 ioctl c0306201 200000000080 returned -22 [ 198.519764][T11062] binder: 11061:11062 ioctl c0306201 2000000003c0 returned -14 [ 198.736000][T11083] binder: 11081:11083 unknown command 0 [ 198.737865][T11083] binder: 11081:11083 ioctl c0306201 200000000080 returned -22 [ 198.740767][T11083] binder: 11081:11083 ioctl c0306201 2000000003c0 returned -14 [ 198.769367][T11085] 9pnet_fd: Insufficient options for proto=fd [ 198.966066][ T65] Bluetooth: hci4: command tx timeout [ 199.002473][ T40] audit: type=1400 audit(1759697284.245:595): avc: denied { accept } for pid=11090 comm="syz.3.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 199.448433][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.488426][ T40] audit: type=1400 audit(1759697284.735:596): avc: denied { ioctl } for pid=11097 comm="syz.2.1809" path="socket:[60422]" dev="sockfs" ino=60422 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 199.489027][T11098] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1809'. [ 199.614372][T11107] 9pnet_fd: Insufficient options for proto=fd [ 199.690511][T11111] geneve0 speed is unknown, defaulting to 1000 [ 199.776820][ T40] audit: type=1400 audit(1759697285.015:597): avc: denied { append } for pid=11112 comm="syz.1.1816" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 200.751824][T11145] 9pnet_fd: Insufficient options for proto=fd [ 201.034021][ T65] Bluetooth: hci4: command tx timeout [ 201.047737][T11166] binder: 11164:11166 unknown command 0 [ 201.050184][T11166] binder: 11164:11166 ioctl c0306201 200000000080 returned -22 [ 201.174390][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 201.250107][T11189] binder: 11188:11189 unknown command 0 [ 201.252068][T11189] binder: 11188:11189 ioctl c0306201 200000000080 returned -22 [ 201.345540][ T10] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 201.349050][ T10] usb 8-1: config 0 has no interface number 0 [ 201.351731][ T10] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 201.356303][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.362776][ T10] usb 8-1: config 0 descriptor?? [ 201.369445][ T10] cp210x 8-1:0.2: cp210x converter detected [ 201.699975][T11207] netlink: 1296 bytes leftover after parsing attributes in process `syz.0.1853'. [ 201.704814][T11207] openvswitch: netlink: Flow key attr not present in new flow. [ 201.775662][ T10] cp210x 8-1:0.2: failed to get vendor val 0x000e size 3: -32 [ 202.007991][ T10] cp210x 8-1:0.2: GPIO initialisation failed: -19 [ 202.013489][ T10] usb 8-1: cp210x converter now attached to ttyUSB0 [ 202.156189][T11231] netlink: 1296 bytes leftover after parsing attributes in process `syz.1.1864'. [ 202.160677][T11231] openvswitch: netlink: Flow key attr not present in new flow. [ 202.185682][ T29] usb 8-1: USB disconnect, device number 9 [ 202.197220][ T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 202.203219][ T29] cp210x 8-1:0.2: device disconnected [ 202.219416][T11235] 9pnet_fd: Insufficient options for proto=fd [ 202.273610][T11241] binder: 11240:11241 unknown command 0 [ 202.275569][T11241] binder: 11240:11241 ioctl c0306201 200000000080 returned -22 [ 202.279124][T11241] binder: 11240:11241 ioctl c0306201 2000000003c0 returned -14 [ 202.466471][T11252] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.1874'. [ 202.469417][T11252] openvswitch: netlink: Flow key attr not present in new flow. [ 202.521842][T11256] 9pnet_fd: Insufficient options for proto=fd [ 202.952827][ T40] audit: type=1326 audit(1759697288.195:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.0.1882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20bf8eec9 code=0x7ffc0000 [ 202.970951][ T40] audit: type=1326 audit(1759697288.205:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.0.1882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20bf8eec9 code=0x7ffc0000 [ 202.993217][ T40] audit: type=1326 audit(1759697288.215:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.0.1882" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa20bf8eec9 code=0x7ffc0000 [ 203.015015][ T40] audit: type=1326 audit(1759697288.215:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.0.1882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20bf8eec9 code=0x7ffc0000 [ 203.038650][ T40] audit: type=1326 audit(1759697288.215:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.0.1882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20bf8eec9 code=0x7ffc0000 [ 203.056120][ T40] audit: type=1326 audit(1759697288.215:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.0.1882" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa20bf8eec9 code=0x7ffc0000 [ 203.066826][ T40] audit: type=1326 audit(1759697288.215:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.0.1882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20bf8eec9 code=0x7ffc0000 [ 203.075296][ T40] audit: type=1326 audit(1759697288.215:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.0.1882" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa20bf8eec9 code=0x7ffc0000 [ 203.084457][ T40] audit: type=1326 audit(1759697288.215:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.0.1882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20bf8eec9 code=0x7ffc0000 [ 203.122884][T11276] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1884'. [ 203.126995][ T65] Bluetooth: hci4: command tx timeout [ 203.129259][T11276] openvswitch: netlink: Flow actions attr not present in new flow. [ 203.162506][T11278] 9pnet_fd: Insufficient options for proto=fd [ 203.451285][T11285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.560205][T11293] binder: 11292:11293 unknown command 0 [ 203.566060][T11293] binder: 11292:11293 ioctl c0306201 200000000080 returned -22 [ 203.577193][T11293] binder: 11292:11293 ioctl c0306201 2000000003c0 returned -14 [ 203.681239][T11299] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1894'. [ 203.685718][T11299] openvswitch: netlink: Flow actions attr not present in new flow. [ 203.788080][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1893'. [ 204.240942][T11321] binder: 11319:11321 unknown command 0 [ 204.243178][T11321] binder: 11319:11321 ioctl c0306201 200000000080 returned -22 [ 204.248553][T11321] binder: 11319:11321 ioctl c0306201 2000000003c0 returned -14 [ 204.251358][T11321] binder_alloc: 11319: binder_alloc_buf, no vma [ 204.285553][T11325] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1905'. [ 204.289605][T11325] openvswitch: netlink: Flow actions attr not present in new flow. [ 204.321350][T11327] netlink: 1296 bytes leftover after parsing attributes in process `syz.3.1907'. [ 204.325826][T11327] openvswitch: netlink: Flow key attr not present in new flow. [ 204.395261][T11332] openvswitch: netlink: Missing key (keys=48, expected=10000000) [ 205.053298][T11350] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.1915'. [ 205.057462][T11350] openvswitch: netlink: Flow actions attr not present in new flow. [ 205.095942][T11354] netlink: 1296 bytes leftover after parsing attributes in process `syz.0.1917'. [ 205.099222][T11354] openvswitch: netlink: Flow key attr not present in new flow. [ 205.875289][T11376] binder: 11375:11376 unknown command 0 [ 205.878814][T11376] binder: 11375:11376 ioctl c0306201 200000000080 returned -22 [ 205.883282][T11376] binder: 11375:11376 ioctl c0306201 2000000003c0 returned -14 [ 205.886850][T11376] binder_alloc: 11375: binder_alloc_buf, no vma [ 205.915790][T11378] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.1927'. [ 205.919851][T11378] openvswitch: netlink: Flow actions attr not present in new flow. [ 205.946269][T11380] netlink: 1296 bytes leftover after parsing attributes in process `syz.1.1928'. [ 205.949883][T11380] openvswitch: netlink: Flow key attr not present in new flow. [ 206.292066][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 206.634243][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 206.637442][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.641492][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.645584][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 206.648813][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 206.652246][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.657461][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 206.660476][ T24] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 206.662978][ T24] usb 6-1: Manufacturer: syz [ 206.674359][ T24] usb 6-1: config 0 descriptor?? [ 207.124266][ T24] rc_core: IR keymap rc-hauppauge not found [ 207.126824][ T24] Registered IR keymap rc-empty [ 207.130765][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 207.163976][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 207.191081][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 207.204733][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input14 [ 207.213694][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 207.244015][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 207.274075][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 207.293995][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 207.314018][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 207.334175][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 207.353905][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 207.373994][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 207.394089][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 207.413994][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 207.435237][ T24] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 207.439677][ T24] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 207.462262][ T24] usb 6-1: USB disconnect, device number 15 [ 207.512213][T11428] binder: 11427:11428 unknown command 0 [ 207.515578][T11428] binder: 11427:11428 ioctl c0306201 200000000080 returned -22 [ 207.518820][T11428] binder: 11427:11428 ioctl c0306201 2000000003c0 returned -14 [ 207.791502][T11432] netlink: 'syz.3.1947': attribute type 16 has an invalid length. [ 207.794286][T11432] netlink: 'syz.3.1947': attribute type 17 has an invalid length. [ 207.802274][T11432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.291992][T11459] 9pnet_fd: Insufficient options for proto=fd [ 208.466102][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 208.466115][ T40] audit: type=1400 audit(1759697293.715:610): avc: denied { ioctl } for pid=11460 comm="syz.3.1959" path="socket:[59910]" dev="sockfs" ino=59910 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 208.616906][T11482] netlink: 'syz.2.1968': attribute type 16 has an invalid length. [ 208.620313][T11482] netlink: 'syz.2.1968': attribute type 17 has an invalid length. [ 208.631158][T11482] net_ratelimit: 1 callbacks suppressed [ 208.631164][T11482] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.672029][T11485] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1969'. [ 208.676192][T11485] openvswitch: netlink: Flow actions attr not present in new flow. [ 208.937940][ T40] audit: type=1400 audit(1759697294.185:611): avc: denied { create } for pid=11497 comm="syz.1.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 208.952114][ T40] audit: type=1400 audit(1759697294.185:612): avc: denied { create } for pid=11497 comm="syz.1.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 208.963973][ T40] audit: type=1400 audit(1759697294.185:613): avc: denied { ioctl } for pid=11497 comm="syz.1.1973" path="socket:[59935]" dev="sockfs" ino=59935 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 208.975927][ T40] audit: type=1400 audit(1759697294.185:614): avc: denied { connect } for pid=11497 comm="syz.1.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 209.151521][T11509] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1978'. [ 209.155144][T11509] openvswitch: netlink: Flow actions attr not present in new flow. [ 209.427650][T11528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.838321][T11557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.122274][T11572] mkiss: ax0: crc mode is auto. [ 210.162685][T11580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.186326][T11581] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 210.257468][T11585] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2011'. [ 210.261069][T11585] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2011'. [ 210.265113][T11585] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2011'. [ 210.268947][T11585] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2011'. [ 210.947909][T11611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.696794][T11637] mkiss: ax0: crc mode is auto. [ 211.818524][T11643] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 211.969273][T11652] binder: BINDER_SET_CONTEXT_MGR already set [ 211.971673][T11652] binder: 11651:11652 ioctl 4018620d 200000000040 returned -16 [ 215.437546][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2100'. [ 215.630948][T11820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2112'. [ 215.871960][T11833] mkiss: ax0: crc mode is auto. [ 215.985519][T11842] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 216.421267][T11852] netlink: 'syz.2.2124': attribute type 16 has an invalid length. [ 216.674006][T11868] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 216.696492][T11870] netlink: 'syz.2.2133': attribute type 16 has an invalid length. [ 217.153191][T11891] rtc_cmos 00:05: Alarms can be up to one day in the future [ 217.157470][T11891] rtc_cmos 00:05: Alarms can be up to one day in the future [ 217.248003][T11895] netlink: 'syz.2.2144': attribute type 16 has an invalid length. [ 217.698677][T11918] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 218.077055][T11934] netlink: 'syz.1.2163': attribute type 16 has an invalid length. [ 218.080076][T11934] netlink: 'syz.1.2163': attribute type 17 has an invalid length. [ 218.083188][T11934] netlink: 'syz.1.2163': attribute type 27 has an invalid length. [ 218.232166][T11944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2160'. [ 218.410454][T11958] netlink: 'syz.2.2174': attribute type 16 has an invalid length. [ 218.413075][T11958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2174'. [ 218.663470][T11980] netlink: 'syz.0.2185': attribute type 16 has an invalid length. [ 218.666998][T11980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2185'. [ 218.773944][T10432] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 218.934747][T10432] usb 7-1: too many configurations: 101, using maximum allowed: 8 [ 218.951258][T10432] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 218.958693][T10432] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.961388][T10432] usb 7-1: Product: syz [ 218.962903][T10432] usb 7-1: Manufacturer: syz [ 218.969031][T10432] usb 7-1: SerialNumber: syz [ 218.979524][T10432] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 219.005654][T10432] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 219.077811][T11993] mkiss: ax0: crc mode is auto. [ 219.192936][T12000] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 219.628495][ T34] usb 7-1: USB disconnect, device number 2 [ 220.123679][T12023] : entered promiscuous mode [ 220.227557][T12029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2205'. [ 220.231569][T12029] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 220.244079][T10432] usb 7-1: Service connection timeout for: 256 [ 220.267775][T10432] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 220.296179][T10432] ath9k_htc: Failed to initialize the device [ 220.301034][ T34] usb 7-1: ath9k_htc: USB layer deinitialized [ 220.527524][T12051] rtc_cmos 00:05: Alarms can be up to one day in the future [ 220.575804][T12055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2218'. [ 220.579406][T12055] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 220.803152][T12069] : entered promiscuous mode [ 221.477682][T12109] netlink: 18128 bytes leftover after parsing attributes in process `syz.0.2244'. [ 221.847787][T12125] mkiss: ax0: crc mode is auto. [ 221.908325][T12126] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 221.934368][T12129] : entered promiscuous mode [ 223.092166][T12189] netlink: 'syz.3.2280': attribute type 2 has an invalid length. [ 223.521430][T12212] netlink: 'syz.3.2290': attribute type 2 has an invalid length. [ 223.850548][T12230] netlink: 'syz.1.2299': attribute type 2 has an invalid length. [ 224.006500][T12252] netlink: 'syz.1.2310': attribute type 2 has an invalid length. [ 224.207765][T12273] mkiss: ax0: crc mode is auto. [ 224.268542][T12292] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 224.539486][T12308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2331'. [ 225.257125][T12332] netlink: 'syz.2.2346': attribute type 2 has an invalid length. [ 225.327272][T12340] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 225.433607][T12342] mkiss: ax0: crc mode is auto. [ 225.514349][T12348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2352'. [ 225.549730][T12350] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 226.249141][T12371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2362'. [ 226.410283][T12388] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 226.420559][T12390] binder: BINDER_SET_CONTEXT_MGR already set [ 226.422531][T12390] binder: 12389:12390 ioctl 4018620d 200000000040 returned -16 [ 226.591499][T12393] mkiss: ax0: crc mode is auto. [ 226.704200][T12405] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 226.741721][T12413] binder: BINDER_SET_CONTEXT_MGR already set [ 226.744678][T12413] binder: 12412:12413 ioctl 4018620d 200000000040 returned -16 [ 227.706534][T12448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2396'. [ 227.710508][T12448] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 228.638302][T12500] netlink: 1296 bytes leftover after parsing attributes in process `syz.3.2418'. [ 228.641830][T12500] openvswitch: netlink: Flow key attr not present in new flow. [ 228.688519][ T40] audit: type=1400 audit(1759697313.935:615): avc: denied { ioctl } for pid=12503 comm="syz.3.2421" path="socket:[63067]" dev="sockfs" ino=63067 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 228.911470][T12514] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 228.914248][T12514] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 228.917970][T12514] vhci_hcd vhci_hcd.0: Device attached [ 229.014140][ T34] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 229.151908][T12524] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2427'. [ 229.194182][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 229.196560][T10432] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 229.204770][ T34] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 229.209841][ T34] usb 8-1: config 179 has no interface number 0 [ 229.212981][ T34] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 229.219706][ T34] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 229.228748][ T34] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 229.234281][ T34] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 229.239828][ T34] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 229.243931][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.258973][T12531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2431'. [ 229.262824][T12531] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 229.275412][T12508] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 229.294831][T12533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2432'. [ 229.297805][T12533] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 229.747106][ T10] usb 8-1: USB disconnect, device number 10 [ 229.747473][ C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 229.753787][ C3] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 229.788246][T12515] vhci_hcd: connection reset by peer [ 229.790577][ T1071] vhci_hcd: stop threads [ 229.792081][ T1071] vhci_hcd: release socket [ 229.794839][ T1071] vhci_hcd: disconnect device [ 230.347096][ T34] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input15 [ 230.368246][T12552] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2438'. [ 230.432446][T12559] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2443'. [ 230.436789][T12559] openvswitch: netlink: Flow actions attr not present in new flow. [ 230.840718][T12585] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2452'. [ 230.961478][T12587] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.2453'. [ 230.968593][T12587] openvswitch: netlink: Flow actions attr not present in new flow. [ 231.567953][T12606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2461'. [ 231.600438][T12608] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2462'. [ 231.627684][T12608] openvswitch: netlink: Flow actions attr not present in new flow. [ 232.390554][T12639] netlink: set zone limit has 8 unknown bytes [ 232.415324][T12641] binder: 12640:12641 ioctl 4018620d 0 returned -22 [ 232.418511][T12641] binder: 12640:12641 unknown command 0 [ 232.420599][T12641] binder: 12640:12641 ioctl c0306201 200000000080 returned -22 [ 232.427409][T12641] binder: 12640:12641 ioctl c0306201 2000000003c0 returned -14 [ 232.808934][T12664] binder: 12663:12664 ioctl 4018620d 0 returned -22 [ 232.812777][T12664] binder: 12663:12664 unknown command 0 [ 232.815141][T12664] binder: 12663:12664 ioctl c0306201 200000000080 returned -22 [ 232.819509][T12664] binder: 12663:12664 ioctl c0306201 2000000003c0 returned -14 [ 233.054071][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 233.073033][T12671] mkiss: ax0: crc mode is auto. [ 233.214492][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.225413][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.229160][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.232809][ T10] usb 8-1: Product: syz [ 233.234852][ T10] usb 8-1: Manufacturer: syz [ 233.237074][ T10] usb 8-1: SerialNumber: syz [ 233.786912][ T5964] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.790894][ T5964] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.795128][ T5964] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.802021][ T5964] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.807520][ T5964] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.831060][T12686] geneve0 speed is unknown, defaulting to 1000 [ 233.928545][T12686] chnl_net:caif_netlink_parms(): no params data found [ 234.028391][T12686] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.030794][T12686] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.033380][T12686] bridge_slave_0: entered allmulticast mode [ 234.036393][T12686] bridge_slave_0: entered promiscuous mode [ 234.040447][T12686] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.042936][T12686] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.046047][T12686] bridge_slave_1: entered allmulticast mode [ 234.048900][T12686] bridge_slave_1: entered promiscuous mode [ 234.099112][T12686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.104277][T12686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.115501][T12702] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 234.151312][T12686] team0: Port device team_slave_0 added [ 234.159331][T12686] team0: Port device team_slave_1 added [ 234.189340][ T1071] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.252534][ T10] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 234.256887][ T10] cdc_ncm 8-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 234.260095][ T10] cdc_ncm 8-1:1.0: setting rx_max = 2048 [ 234.273229][T12686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.276055][T12686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.286833][T12686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.306165][ T1071] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.313965][T10432] vhci_hcd: vhci_device speed not set [ 234.318957][T12686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.321580][T12686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.331588][T12686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.382806][T12686] hsr_slave_0: entered promiscuous mode [ 234.388548][T12686] hsr_slave_1: entered promiscuous mode [ 234.392364][T12686] debugfs: 'hsr0' already exists in 'hsr' [ 234.395792][T12686] Cannot create hsr debugfs directory [ 234.454964][ T1071] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.488171][ T10] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 234.495061][ T10] usb 8-1: USB disconnect, device number 11 [ 234.500452][ T10] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 234.548299][ T1071] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.678782][T12712] mkiss: ax0: crc mode is auto. [ 234.710013][ T1071] bridge_slave_1: left allmulticast mode [ 234.713634][ T1071] bridge_slave_1: left promiscuous mode [ 234.717499][ T1071] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.723154][ T1071] bridge_slave_0: left allmulticast mode [ 234.727115][ T1071] bridge_slave_0: left promiscuous mode [ 234.729523][ T1071] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.877595][T12718] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.2505'. [ 234.882288][T12718] openvswitch: netlink: Flow actions attr not present in new flow. [ 235.000455][T12724] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 235.026986][T12727] QAT: failed to copy from user cfg_data. [ 235.267858][ T1071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.276454][ T1071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.280327][ T1071] bond0 (unregistering): Released all slaves [ 235.290668][ T1071] bond1 (unregistering): Released all slaves [ 235.299922][ T1071] bond2 (unregistering): Released all slaves [ 235.428475][ T1071] : left promiscuous mode [ 235.430676][ T40] audit: type=1400 audit(1759697320.685:616): avc: denied { read open } for pid=12736 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.430903][ T40] audit: type=1400 audit(1759697320.685:617): avc: denied { getattr } for pid=12736 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.457025][ T40] audit: type=1400 audit(1759697320.695:618): avc: denied { add_name } for pid=12735 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.466494][ T40] audit: type=1400 audit(1759697320.695:619): avc: denied { create } for pid=12735 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 235.476783][ T40] audit: type=1400 audit(1759697320.695:620): avc: denied { write } for pid=12735 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=8113 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 235.489038][ T40] audit: type=1400 audit(1759697320.695:621): avc: denied { append } for pid=12735 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=8113 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 235.530896][ T40] audit: type=1400 audit(1759697320.775:622): avc: denied { remove_name } for pid=12738 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=8113 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.541990][ T40] audit: type=1400 audit(1759697320.775:623): avc: denied { unlink } for pid=12738 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=8113 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 235.602953][T12743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2513'. [ 235.606306][T12743] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 235.834090][ T5964] Bluetooth: hci3: command tx timeout [ 235.855548][ T40] audit: type=1400 audit(1759697321.105:624): avc: denied { execmem } for pid=12758 comm="syz.1.2519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 235.889411][ T1071] hsr_slave_0: left promiscuous mode [ 235.890732][T12764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2520'. [ 235.896763][ T1071] hsr_slave_1: left promiscuous mode [ 235.897977][T12764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2520'. [ 235.901742][ T1071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.907090][ T1071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.912593][ T1071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.917153][ T1071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.965572][ T1071] veth1_macvtap: left promiscuous mode [ 235.967661][ T1071] veth0_macvtap: left promiscuous mode [ 235.970556][ T1071] veth1_vlan: left promiscuous mode [ 235.972470][ T1071] veth0_vlan: left promiscuous mode [ 236.021615][T12770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2522'. [ 236.025513][T12770] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 236.692450][T12768] Falling back ldisc for ptm0. [ 236.771977][ T1071] team0 (unregistering): Port device team_slave_1 removed [ 236.871079][ T1071] team0 (unregistering): Port device team_slave_0 removed [ 237.270833][T12808] openvswitch: netlink: Message has 16 unknown bytes. [ 237.618345][T12809] mkiss: ax0: crc mode is auto. [ 237.878604][T12686] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 237.894623][T12686] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 237.914076][ T5964] Bluetooth: hci3: command tx timeout [ 237.918427][T12686] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 237.925695][T12686] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 238.025394][T12686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.040976][T12686] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.047613][ T1210] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.050071][ T1210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.059053][ T1210] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.062055][ T1210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.117259][T12852] openvswitch: netlink: Flow actions attr not present in new flow. [ 238.237384][T12686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.262712][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2551'. [ 238.266195][T12867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2551'. [ 238.266338][T12686] veth0_vlan: entered promiscuous mode [ 238.278920][T12686] veth1_vlan: entered promiscuous mode [ 238.301811][T12686] veth0_macvtap: entered promiscuous mode [ 238.311546][T12686] veth1_macvtap: entered promiscuous mode [ 238.337150][T12686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.348376][T12686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.362972][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.369232][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.377399][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.383725][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.448336][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.451289][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.486468][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.490053][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.508578][ T40] audit: type=1400 audit(1759697323.755:625): avc: denied { mounton } for pid=12686 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 238.636710][T12886] binder: 12885:12886 ioctl c0306201 2000000003c0 returned -14 [ 238.706255][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2559'. [ 239.025643][T12899] binder: 12893:12899 ioctl c0306201 200000000680 returned -14 [ 239.577194][ T65] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.590409][ T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.640318][ T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.654842][ T65] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.657868][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.700710][T12904] geneve0 speed is unknown, defaulting to 1000 [ 239.714415][T12913] binder: 12912:12913 ioctl c0306201 2000000003c0 returned -14 [ 239.741498][T12916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2568'. [ 239.746046][T12916] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 239.780976][T12922] openvswitch: netlink: Message has 8 unknown bytes. [ 239.819580][T12904] chnl_net:caif_netlink_parms(): no params data found [ 239.893642][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.960637][T12904] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.963884][T12904] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.966339][T12904] bridge_slave_0: entered allmulticast mode [ 239.969134][T12904] bridge_slave_0: entered promiscuous mode [ 239.973133][T12904] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.976968][T12904] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.980030][T12904] bridge_slave_1: entered allmulticast mode [ 239.984133][T12904] bridge_slave_1: entered promiscuous mode [ 239.995068][ T65] Bluetooth: hci3: command tx timeout [ 240.004732][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.071830][T12904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.080690][T12904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.180656][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.191809][T12904] team0: Port device team_slave_0 added [ 240.197994][T12904] team0: Port device team_slave_1 added [ 240.242716][T12904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.245857][T12904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.254924][T12904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.305455][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.321955][T12904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.326365][T12904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.339273][T12904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.437060][T12904] hsr_slave_0: entered promiscuous mode [ 240.440699][T12904] hsr_slave_1: entered promiscuous mode [ 240.445111][T12904] debugfs: 'hsr0' already exists in 'hsr' [ 240.447953][T12904] Cannot create hsr debugfs directory [ 240.586271][ T13] bridge_slave_1: left allmulticast mode [ 240.588230][ T13] bridge_slave_1: left promiscuous mode [ 240.590398][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.596835][ T13] bridge_slave_0: left allmulticast mode [ 240.599234][ T13] bridge_slave_0: left promiscuous mode [ 240.601951][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.026058][T12950] binder: 12949:12950 ioctl c0306201 2000000003c0 returned -14 [ 241.108378][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.115915][T12955] openvswitch: netlink: Message has 8 unknown bytes. [ 241.118006][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.125517][ T13] bond0 (unregistering): Released all slaves [ 241.160744][ T5967] geneve0 speed is unknown, defaulting to 1000 [ 241.163368][ T5967] infiniband syz1: ib_query_port failed (-19) [ 241.163623][T12957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2581'. [ 241.170843][T12957] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 241.256434][ T13] : left promiscuous mode [ 241.441902][ T13] tipc: Disabling bearer [ 241.453398][ T13] tipc: Left network mode [ 241.646358][T12981] binder: 12980:12981 ioctl c0306201 2000000003c0 returned -14 [ 241.675593][ T65] Bluetooth: hci2: command tx timeout [ 241.749958][T12985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2589'. [ 241.753400][T12985] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 241.967688][T13002] binder: 13001:13002 ioctl c0306201 2000000003c0 returned -14 [ 242.074213][ T65] Bluetooth: hci3: command tx timeout [ 242.219300][T13014] openvswitch: netlink: Message has 16 unknown bytes. [ 242.391172][T12904] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 242.439218][T12904] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 242.521812][ T13] hsr_slave_0: left promiscuous mode [ 242.529124][ T13] hsr_slave_1: left promiscuous mode [ 242.534823][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.537363][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.545844][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.548784][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.613923][ T13] veth1_macvtap: left promiscuous mode [ 242.616669][ T13] veth0_macvtap: left promiscuous mode [ 242.620014][ T13] veth1_vlan: left promiscuous mode [ 242.621984][ T13] veth0_vlan: left promiscuous mode [ 242.708692][T13019] binder: 13018:13019 ioctl c0306201 2000000003c0 returned -14 [ 242.909694][T13026] usb 2-1: USB disconnect, device number 2 [ 243.380244][T13030] hub 2-0:1.0: USB hub found [ 243.382324][T13030] hub 2-0:1.0: 6 ports detected [ 243.603916][ T54] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 243.758020][ T65] Bluetooth: hci2: command tx timeout [ 243.804533][ T54] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 243.807835][ T54] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 243.810432][ T54] usb 2-1: Product: QEMU USB Tablet [ 243.812326][ T54] usb 2-1: Manufacturer: QEMU [ 243.814114][ T54] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 243.867663][ T54] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.000A/input/input16 [ 243.945477][T13043] binder: 13042:13043 unknown command 0 [ 243.947324][T13043] binder: 13042:13043 ioctl c0306201 200000000080 returned -22 [ 243.950720][T13043] binder: 13042:13043 ioctl c0306201 2000000003c0 returned -14 [ 243.955982][ T54] hid-generic 0003:0627:0001.000A: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 244.086274][ T13] team0 (unregistering): Port device team_slave_1 removed [ 244.199038][ T13] team0 (unregistering): Port device team_slave_0 removed [ 244.864755][T13067] Option 'D' to dns_resolver key: bad/missing value [ 244.893631][T12904] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 244.922600][T13038] : entered promiscuous mode [ 244.928983][T12904] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 245.205935][T12904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.251369][T12904] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.266887][T13087] binder: 13086:13087 unknown command 0 [ 245.268699][T13087] binder: 13086:13087 ioctl c0306201 200000000080 returned -22 [ 245.269991][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.271929][T13087] binder: 13086:13087 ioctl c0306201 2000000003c0 returned -14 [ 245.274839][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.291215][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.293578][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.801646][T12904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.835034][ T65] Bluetooth: hci2: command tx timeout [ 245.857959][T12904] veth0_vlan: entered promiscuous mode [ 245.867365][T12904] veth1_vlan: entered promiscuous mode [ 245.940682][T12904] veth0_macvtap: entered promiscuous mode [ 245.949935][T12904] veth1_macvtap: entered promiscuous mode [ 245.970715][T12904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.007526][T12904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.020230][ T1071] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.024225][ T1071] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.030964][ T1071] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.037249][ T1071] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.150284][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.153301][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.345823][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.348601][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.019440][ T40] audit: type=1400 audit(1759697332.265:626): avc: denied { write } for pid=13128 comm="syz.1.2635" name="card1" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 247.042381][T13134] binder: 13133:13134 unknown command 0 [ 247.044407][T13134] binder: 13133:13134 ioctl c0306201 200000000080 returned -22 [ 247.051591][T13134] binder: 13133:13134 ioctl 4018620d 0 returned -22 [ 247.054199][T13134] binder: 13133:13134 ioctl c0306201 2000000003c0 returned -14 [ 247.094433][T13132] ================================================================== [ 247.097042][T13132] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 247.099056][T13132] Read of size 8 at addr ffff8880548e2408 by task syz.1.2635/13132 [ 247.103235][T13132] [ 247.105006][T13132] CPU: 3 UID: 0 PID: 13132 Comm: syz.1.2635 Not tainted syzkaller #0 PREEMPT(full) [ 247.105027][T13132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 247.105037][T13132] Call Trace: [ 247.105044][T13132] [ 247.105049][T13132] dump_stack_lvl+0x116/0x1f0 [ 247.105072][T13132] print_report+0xcd/0x630 [ 247.105089][T13132] ? __virt_addr_valid+0x81/0x610 [ 247.105111][T13132] ? __phys_addr+0xe8/0x180 [ 247.105133][T13132] ? __cpa_addr+0x1d3/0x220 [ 247.105148][T13132] kasan_report+0xe0/0x110 [ 247.105165][T13132] ? __cpa_addr+0x1d3/0x220 [ 247.105182][T13132] __cpa_addr+0x1d3/0x220 [ 247.105198][T13132] cpa_flush+0x28b/0x8a0 [ 247.105214][T13132] ? __pfx_cpa_flush+0x10/0x10 [ 247.105230][T13132] ? pgprot2cachemode+0x9a/0x130 [ 247.105250][T13132] ? __pfx_pgprot2cachemode+0x10/0x10 [ 247.105270][T13132] ? pat_pagerange_is_ram+0x6e/0x130 [ 247.105290][T13132] change_page_attr_set_clr+0x34e/0x4a0 [ 247.105308][T13132] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 247.105331][T13132] _set_pages_array+0x1ab/0x2c0 [ 247.105349][T13132] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 247.105372][T13132] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 247.105396][T13132] drm_gem_shmem_pin_locked+0x223/0x470 [ 247.105409][T13132] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 247.105421][T13132] ? __pfx___might_resched+0x10/0x10 [ 247.105442][T13132] drm_gem_map_attach+0x184/0x270 [ 247.105461][T13132] ? __pfx_drm_gem_map_attach+0x10/0x10 [ 247.105480][T13132] dma_buf_dynamic_attach+0x1f3/0x530 [ 247.105496][T13132] ? __fget_files+0x20e/0x3c0 [ 247.105510][T13132] drm_gem_shmem_prime_import_no_map+0x67/0x3c0 [ 247.105531][T13132] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 247.105561][T13132] drm_gem_prime_fd_to_handle+0x1a6/0x5f0 [ 247.105584][T13132] drm_prime_fd_to_handle_ioctl+0xd6/0x110 [ 247.105599][T13132] drm_ioctl_kernel+0x1f4/0x3e0 [ 247.105616][T13132] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 247.105631][T13132] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 247.105650][T13132] drm_ioctl+0x5c9/0xc30 [ 247.105667][T13132] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 247.105682][T13132] ? __pfx_drm_ioctl+0x10/0x10 [ 247.105700][T13132] ? selinux_file_ioctl+0x180/0x270 [ 247.105715][T13132] ? selinux_file_ioctl+0xb4/0x270 [ 247.105729][T13132] ? __pfx_drm_ioctl+0x10/0x10 [ 247.105745][T13132] __x64_sys_ioctl+0x18b/0x210 [ 247.105766][T13132] do_syscall_64+0xcd/0x4e0 [ 247.105779][T13132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.105795][T13132] RIP: 0033:0x7f54c6f8eec9 [ 247.105807][T13132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.105821][T13132] RSP: 002b:00007f54c7da2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.105834][T13132] RAX: ffffffffffffffda RBX: 00007f54c71e6090 RCX: 00007f54c6f8eec9 [ 247.105843][T13132] RDX: 0000200000000300 RSI: 00000000c00c642e RDI: 0000000000000008 [ 247.105851][T13132] RBP: 00007f54c7011f91 R08: 0000000000000000 R09: 0000000000000000 [ 247.105858][T13132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.105866][T13132] R13: 00007f54c71e6128 R14: 00007f54c71e6090 R15: 00007fff6fb2e6c8 [ 247.105878][T13132] [ 247.105883][T13132] [ 247.218780][T13132] Allocated by task 13132: [ 247.220407][T13132] kasan_save_stack+0x33/0x60 [ 247.222362][T13132] kasan_save_track+0x14/0x30 [ 247.224401][T13132] __kasan_kmalloc+0xaa/0xb0 [ 247.226019][T13132] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 247.228184][T13132] drm_gem_get_pages+0x144/0xa10 [ 247.229989][T13132] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 247.232068][T13132] drm_gem_shmem_pin_locked+0x223/0x470 [ 247.233909][T13132] drm_gem_map_attach+0x184/0x270 [ 247.235775][T13132] dma_buf_dynamic_attach+0x1f3/0x530 [ 247.237910][T13132] drm_gem_shmem_prime_import_no_map+0x67/0x3c0 [ 247.240352][T13132] drm_gem_prime_fd_to_handle+0x1a6/0x5f0 [ 247.242199][T13132] drm_prime_fd_to_handle_ioctl+0xd6/0x110 [ 247.244065][T13132] drm_ioctl_kernel+0x1f4/0x3e0 [ 247.245831][T13132] drm_ioctl+0x5c9/0xc30 [ 247.247283][T13132] __x64_sys_ioctl+0x18b/0x210 [ 247.248917][T13132] do_syscall_64+0xcd/0x4e0 [ 247.250410][T13132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.252344][T13132] [ 247.253148][T13132] The buggy address belongs to the object at ffff8880548e2000 [ 247.253148][T13132] which belongs to the cache kmalloc-2k of size 2048 [ 247.258674][T13132] The buggy address is located 0 bytes to the right of [ 247.258674][T13132] allocated 1032-byte region [ffff8880548e2000, ffff8880548e2408) [ 247.263282][T13132] [ 247.264075][T13132] The buggy address belongs to the physical page: [ 247.266178][T13132] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x548e0 [ 247.268934][T13132] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 247.271704][T13132] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 247.274228][T13132] page_type: f5(slab) [ 247.275892][T13132] raw: 00fff00000000040 ffff88801b042f00 dead000000000100 dead000000000122 [ 247.278836][T13132] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 247.281790][T13132] head: 00fff00000000040 ffff88801b042f00 dead000000000100 dead000000000122 [ 247.284499][T13132] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 247.287223][T13132] head: 00fff00000000003 ffffea0001523801 00000000ffffffff 00000000ffffffff [ 247.289919][T13132] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 247.293035][T13132] page dumped because: kasan: bad access detected [ 247.295502][T13132] page_owner tracks the page as allocated [ 247.297701][T13132] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5347, tgid 5347 (klogd), ts 66614123165, free_ts 0 [ 247.304530][T13132] post_alloc_hook+0x1c0/0x230 [ 247.306115][T13132] get_page_from_freelist+0x10a3/0x3a30 [ 247.307936][T13132] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 247.309890][T13132] alloc_pages_mpol+0x1fb/0x550 [ 247.311560][T13132] new_slab+0x24a/0x360 [ 247.313023][T13132] ___slab_alloc+0xdc4/0x1ae0 [ 247.314625][T13132] __slab_alloc.constprop.0+0x63/0x110 [ 247.316472][T13132] __kmalloc_cache_noprof+0x477/0x780 [ 247.318380][T13132] syslog_print+0xf6/0x620 [ 247.320161][T13132] do_syslog+0x3dc/0x6c0 [ 247.321699][T13132] __x64_sys_syslog+0x74/0xb0 [ 247.323422][T13132] do_syscall_64+0xcd/0x4e0 [ 247.325321][T13132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.327244][T13132] page_owner free stack trace missing [ 247.328972][T13132] [ 247.329796][T13132] Memory state around the buggy address: [ 247.331594][T13132] ffff8880548e2300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 247.334251][T13132] ffff8880548e2380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 247.337107][T13132] >ffff8880548e2400: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 247.340483][T13132] ^ [ 247.342034][T13132] ffff8880548e2480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 247.344923][T13132] ffff8880548e2500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 247.347520][T13132] ================================================================== [ 247.350141][ C3] vkms_vblank_simulate: vblank timer overrun [ 247.352545][T13132] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 247.355171][T13132] CPU: 3 UID: 0 PID: 13132 Comm: syz.1.2635 Not tainted syzkaller #0 PREEMPT(full) [ 247.358153][T13132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 247.361604][T13132] Call Trace: [ 247.362804][T13132] [ 247.363880][T13132] dump_stack_lvl+0x3d/0x1f0 [ 247.365529][T13132] vpanic+0x640/0x6f0 [ 247.367030][T13132] panic+0xca/0xd0 [ 247.368365][T13132] ? __pfx_panic+0x10/0x10 [ 247.369844][T13132] ? __cpa_addr+0x1d3/0x220 [ 247.371338][T13132] ? preempt_schedule_common+0x44/0xc0 [ 247.373069][T13132] ? preempt_schedule_thunk+0x16/0x30 [ 247.374763][T13132] check_panic_on_warn+0xab/0xb0 [ 247.376332][T13132] end_report+0x107/0x170 [ 247.377707][T13132] kasan_report+0xee/0x110 [ 247.379370][T13132] ? __cpa_addr+0x1d3/0x220 [ 247.381065][T13132] __cpa_addr+0x1d3/0x220 [ 247.382518][T13132] cpa_flush+0x28b/0x8a0 [ 247.384140][T13132] ? __pfx_cpa_flush+0x10/0x10 [ 247.385987][T13132] ? pgprot2cachemode+0x9a/0x130 [ 247.387855][T13132] ? __pfx_pgprot2cachemode+0x10/0x10 [ 247.390077][T13132] ? pat_pagerange_is_ram+0x6e/0x130 [ 247.392152][T13132] change_page_attr_set_clr+0x34e/0x4a0 [ 247.393892][T13132] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 247.396016][T13132] _set_pages_array+0x1ab/0x2c0 [ 247.397572][T13132] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 247.399561][T13132] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 247.401631][T13132] drm_gem_shmem_pin_locked+0x223/0x470 [ 247.403512][T13132] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 [ 247.405744][T13132] ? __pfx___might_resched+0x10/0x10 [ 247.407574][T13132] drm_gem_map_attach+0x184/0x270 [ 247.409552][T13132] ? __pfx_drm_gem_map_attach+0x10/0x10 [ 247.411854][T13132] dma_buf_dynamic_attach+0x1f3/0x530 [ 247.413994][T13132] ? __fget_files+0x20e/0x3c0 [ 247.416030][T13132] drm_gem_shmem_prime_import_no_map+0x67/0x3c0 [ 247.418584][T13132] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 247.421457][T13132] drm_gem_prime_fd_to_handle+0x1a6/0x5f0 [ 247.423840][T13132] drm_prime_fd_to_handle_ioctl+0xd6/0x110 [ 247.426479][T13132] drm_ioctl_kernel+0x1f4/0x3e0 [ 247.428760][T13132] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 247.431749][T13132] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 247.434067][T13132] drm_ioctl+0x5c9/0xc30 [ 247.435902][T13132] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 247.438918][T13132] ? __pfx_drm_ioctl+0x10/0x10 [ 247.441307][T13132] ? selinux_file_ioctl+0x180/0x270 [ 247.443894][T13132] ? selinux_file_ioctl+0xb4/0x270 [ 247.446204][T13132] ? __pfx_drm_ioctl+0x10/0x10 [ 247.448276][T13132] __x64_sys_ioctl+0x18b/0x210 [ 247.450377][T13132] do_syscall_64+0xcd/0x4e0 [ 247.452356][T13132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.454845][T13132] RIP: 0033:0x7f54c6f8eec9 [ 247.456731][T13132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.464806][T13132] RSP: 002b:00007f54c7da2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.467719][T13132] RAX: ffffffffffffffda RBX: 00007f54c71e6090 RCX: 00007f54c6f8eec9 [ 247.470221][T13132] RDX: 0000200000000300 RSI: 00000000c00c642e RDI: 0000000000000008 [ 247.472884][T13132] RBP: 00007f54c7011f91 R08: 0000000000000000 R09: 0000000000000000 [ 247.475436][T13132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.478611][T13132] R13: 00007f54c71e6128 R14: 00007f54c71e6090 R15: 00007fff6fb2e6c8 [ 247.482526][T13132] [ 247.485293][T13132] Kernel Offset: disabled [ 247.487294][T13132] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:48:52 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff823d5589 RDX=0000000000000001 RSI=ffffffff823d5596 RDI=0000000000000001 RBP=ffffc90000460808 RSP=ffffc9000402fab8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000098203155 R13=ffff8880363bb1e0 R14=ffff888029c6f318 R15=ffff8880552ac435 RIP=ffffffff819f4329 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4296f8e880 ffffffff 00c00000 GS =0000 ffff8880d6e67000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555696685c8 CR3=0000000024cb1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fc000000 Opmask01=0000000000290410 Opmask02=00000000ffffffff Opmask03=0000000020400004 Opmask04=00000000ffff7fff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1f633968 00007ffe1f633968 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1f633b40 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f262f675b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42969f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42969f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373268111800483 737326844e9aa659 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c3976ac8cd0d433 737373762c555c31 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 32706f6f6c2f6b63 6f6c622f6c617574 7269762f73656369 7665642f7379732f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 357570632f302f71 6d2f32706f6f6c2f 6b636f6c622f6c61 75747269762f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003575 70632f302f716d2f 32706f6f6c2f6b63 6f6c622f6c617574 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f6d697377685f31 3132303863616d2f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000004b20 0000000000000000 307761726469682f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f262f4f8a0 fffffffffffffffc 44007f42968bfd63 00007fe01f62b74e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c8cffffffffffff fffffffffffffffd 44007ff2fefffd7b fffffffffffffffe ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30652d4245453165 3141323070424132 317633303030623a 7475706e693d5341 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000055 0000000000000000 0000000000001011 00004e4f3e1b4552 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffc90001760000 RDX=1ffff920002ebe25 RSI=ffffc9000175f7b0 RDI=ffffc9000175f130 RBP=ffff888052f66000 RSP=ffffc9000175f080 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000010c5f R12=ffffc9000175f140 R13=ffffc9000175f0f0 R14=ffffc9000175f7e0 R15=ffffc9000175f124 RIP=ffffffff816a8bb3 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6f67000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7ab3317d60 CR3=000000003ab52000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ab27b76c3 00007f7ab27b76c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc61f1d2a0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555d4beb4d 000055555d4be860 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555d4b38f4 000055555d4b38f0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555d4c2e19 000055555d4c2760 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555d4be5f4 000055555d4be5f0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0675e0006d636b2f 74656e01ffffffff ffffffffef084c80 0306800404a7c008 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01409a1000018004 0100000608060601 56844c8004000800 040675e0006d636b ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f74656e01ffffff ffffffffffef084c 800306800404a7c0 0800010000020806 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 06013db001000000 0806068803010000 0408060680033810 0008800401000004 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0806060104920c08 0008b00300000000 0000000000000000 0000000001ffffff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 70656378655f7570 660a736579203a09 097570660a31203a 0964696369706120 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 090970770a323220 3a096c6576656c20 64697570630a7365 79203a096e6f6974 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7374206573702065 6420656d76207570 66203a0909736761 6c660a736579203a ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73617079625f6572 6f74735f63657073 2032765f65727463 6570732031765f65 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6e5f6270626920 6968622062737262 705f737262696520 7367706177732073 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74616e5f73746920 7374692072657375 5f32765f65727463 657073207465725f ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c666c630a34302e 30303235203a0973 70696d6f676f620a 796c6e6f5f657669 info registers vcpu 2 CPU#2 RAX=0000000000413319 RBX=0000000000000002 RCX=ffffffff8b513a89 RDX=0000000000000000 RSI=ffffffff8d8276c6 RDI=ffffffff8bd04140 RBP=ffffed1003b54920 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d506655 R10=ffff88806a8332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801daa4900 R14=ffffffff905fbb90 R15=0000000000000000 RIP=ffffffff8b5125af RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7067000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=000000004cf5c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffe0000 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6fb2ebd6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6fb2ebd6 00007fff6fb2ebdc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c7012fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c7012fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c7012fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c7012fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c701305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c701313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 4432436964696d2f 646e732f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000013 4411434a474a4e0c 474d500c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852342c5 RDI=ffffffff9ab75a40 RBP=ffffffff9ab75a00 RSP=ffffc90005d8f208 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9ab75a00 R15=ffffffff85234260 RIP=ffffffff852342ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f54c7da26c0 ffffffff 00c00000 GS =0000 ffff8880d7167000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f54c7d80f98 CR3=000000004cf5c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6fb2ebd6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6fb2ebd6 00007fff6fb2ebdc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c7012fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c7012fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c7012fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c7012fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c701305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c701313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c71b74a8 00007f54c71b74a0 00007f54c71b7498 00007f54c71b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c7d1d100 00007f54c71b7460 00007f54c71b0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c71b74b8 00007f54c71b74b0 00007f54c71b74a8 00007f54c71b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000