last executing test programs: 1.077270568s ago: executing program 1 (id=1166): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f0000000540)="7ad2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x800) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000000080)={0x7, 0x4}) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) 1.047833396s ago: executing program 1 (id=1168): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) listen(r0, 0x5) accept(r0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) 835.953025ms ago: executing program 3 (id=1173): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd48e0050000000000002f77fbac141516e0000001440c0510b1800089030400008450892f325f003911050b038902005725181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 756.717859ms ago: executing program 3 (id=1174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4010) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000700ffffffffffaaaaaaaaaabb88a804008100"], 0x3c) 755.168886ms ago: executing program 0 (id=1175): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000014006b05c84e21000ab16d6e230675f8020000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x1}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x100000000) r2 = socket$unix(0x1, 0x5, 0x0) ppoll(&(0x7f00000039c0)=[{r2, 0x400}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @remote}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x3c1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x6, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 711.346422ms ago: executing program 0 (id=1176): sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) 702.852358ms ago: executing program 3 (id=1177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 670.42608ms ago: executing program 3 (id=1178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) 639.084795ms ago: executing program 3 (id=1179): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000000)="974701000000201c2401e18d93d74c6f68bb1a761a4a946249c9a8", 0x1b}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010101}}}], 0x20}, 0x4048804) 603.015827ms ago: executing program 3 (id=1180): write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000050000000000000000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7892ffffff810200000000a1bf80debb98b50f4c0031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f70000000014034354b9fd9ef196a51cd5157adc8106b494e11200cfc2001000000000000000000000f313f6005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a37002c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93ae"], 0x232) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x6c, 0x0, 0x1, 0x20000002, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd9b9fafd212acc2a}], @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x40000) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 323.456555ms ago: executing program 0 (id=1183): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 261.527773ms ago: executing program 2 (id=1184): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd48e0050000000000002f77fbac141516e0000001440c0510b1800089030400008450892f325f003911050b038902005725181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 228.337424ms ago: executing program 2 (id=1185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4010) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000700ffffffffffaaaaaaaaaabb88a804008100"], 0x3c) 224.929467ms ago: executing program 0 (id=1186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) 190.089477ms ago: executing program 0 (id=1187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) 187.825731ms ago: executing program 1 (id=1188): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000000)="974701000000201c2401e18d93d74c6f68bb1a761a4a946249c9a834", 0x1c}], 0x1}, 0x4048804) 161.775573ms ago: executing program 0 (id=1189): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) sendmsg$key(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[], 0x50}}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000000180)="4fdf7a6f6ddc7befbb26d3f66f9de47c996a", 0x12}, {&(0x7f0000001580)="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", 0xea4}], 0x2}}], 0x1, 0x90) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffffb, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffa9, 0x4c}, 0x9c) 152.189656ms ago: executing program 1 (id=1190): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000014006b05c84e21000ab16d6e230675f8020000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x1}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x100000000) r2 = socket$unix(0x1, 0x5, 0x0) ppoll(&(0x7f00000039c0)=[{r2, 0x400}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) dup(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xfe, 0xfc, 0x7fff0026}]}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @remote}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x3c1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x6, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 117.060678ms ago: executing program 2 (id=1191): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f0000000540)="7ad2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) 104.765191ms ago: executing program 1 (id=1192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfe, {0x0, 0x0, 0x0, r5, {0xffe0}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dd}, 0x4000080) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 38.903408ms ago: executing program 2 (id=1193): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd48e0050000000000002f77fbac141516e0000001440c0510b1800089030400008450892f325f003911050b038902005725181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 38.659404ms ago: executing program 2 (id=1194): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 6.573342ms ago: executing program 1 (id=1195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0xb, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) 0s ago: executing program 2 (id=1196): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) kernel console output (not intermixed with test programs): [ 38.046719][ T43] audit: type=1400 audit(1791172866.592:135): avc: denied { write } for pid=5704 comm="sh" path="pipe:[1769]" dev="pipefs" ino=1769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.046980][ T43] audit: type=1400 audit(1791172866.592:136): avc: denied { rlimitinh } for pid=5704 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.047054][ T43] audit: type=1400 audit(1791172866.592:137): avc: denied { siginh } for pid=5704 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:28530' (ED25519) to the list of known hosts. [ 39.992570][ T43] audit: type=1400 audit(1791172868.542:138): avc: denied { name_bind } for pid=5711 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.024699][ T43] audit: type=1400 audit(1791172868.572:139): avc: denied { execute } for pid=5712 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.025358][ T43] audit: type=1400 audit(1791172868.572:140): avc: denied { execute_no_trans } for pid=5712 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.547273][ T43] audit: type=1400 audit(1791172871.092:141): avc: denied { mounton } for pid=5712 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.550396][ T43] audit: type=1400 audit(1791172871.092:142): avc: denied { mount } for pid=5712 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.552601][ T5712] cgroup: Unknown subsys name 'net' [ 42.692976][ T5712] cgroup: Unknown subsys name 'cpuset' [ 42.695686][ T5712] cgroup: Unknown subsys name 'rlimit' [ 42.906186][ T5717] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.647622][ T5712] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.032675][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 47.032693][ T43] audit: type=1400 audit(1791172875.572:158): avc: denied { execmem } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.183116][ T43] audit: type=1400 audit(1791172875.732:159): avc: denied { create } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.185401][ T43] audit: type=1400 audit(1791172875.732:160): avc: denied { read write } for pid=5723 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.185429][ T43] audit: type=1400 audit(1791172875.732:161): avc: denied { open } for pid=5723 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.198564][ T43] audit: type=1400 audit(1791172875.742:162): avc: denied { ioctl } for pid=5723 comm="syz-executor" path="socket:[3577]" dev="sockfs" ino=3577 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.204815][ T5724] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.206732][ T5724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.207013][ T5724] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.225029][ T5736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.225987][ T5736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.227732][ T5736] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.228199][ T5736] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.229577][ T5739] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.231943][ T5739] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.232428][ T5739] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.232840][ T5738] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.233568][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.236865][ T5738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.237213][ T5738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.237633][ T5737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.238933][ T5737] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.238983][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.239279][ T5737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.242559][ T5724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.242853][ T43] audit: type=1400 audit(1791172875.792:163): avc: denied { read } for pid=5728 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.243108][ T43] audit: type=1400 audit(1791172875.792:164): avc: denied { open } for pid=5728 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.243184][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.245057][ T43] audit: type=1400 audit(1791172875.792:165): avc: denied { mounton } for pid=5728 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.257823][ T43] audit: type=1400 audit(1791172875.802:166): avc: denied { module_request } for pid=5728 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.276276][ T43] audit: type=1400 audit(1791172875.822:167): avc: denied { sys_module } for pid=5723 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.775439][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.775487][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.775546][ T5734] bridge_slave_0: entered allmulticast mode [ 47.776363][ T5734] bridge_slave_0: entered promiscuous mode [ 47.809526][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.809570][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.809629][ T5734] bridge_slave_1: entered allmulticast mode [ 47.810631][ T5734] bridge_slave_1: entered promiscuous mode [ 47.867301][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.870083][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.907544][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.907587][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.907732][ T5728] bridge_slave_0: entered allmulticast mode [ 47.908794][ T5728] bridge_slave_0: entered promiscuous mode [ 47.911075][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.911137][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.911190][ T5723] bridge_slave_0: entered allmulticast mode [ 47.911862][ T5723] bridge_slave_0: entered promiscuous mode [ 47.913132][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.913170][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.914042][ T5723] bridge_slave_1: entered allmulticast mode [ 47.914753][ T5723] bridge_slave_1: entered promiscuous mode [ 47.922845][ T5734] team0: Port device team_slave_0 added [ 47.924052][ T5734] team0: Port device team_slave_1 added [ 47.944641][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.944722][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.944796][ T5728] bridge_slave_1: entered allmulticast mode [ 47.945505][ T5728] bridge_slave_1: entered promiscuous mode [ 47.988782][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.991005][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.991570][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.991578][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.991591][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.993827][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.993918][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.994036][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.994099][ T5726] bridge_slave_0: entered allmulticast mode [ 47.994886][ T5726] bridge_slave_0: entered promiscuous mode [ 47.997163][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.003104][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.003112][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.003125][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.019430][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.019472][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.019525][ T5726] bridge_slave_1: entered allmulticast mode [ 48.020432][ T5726] bridge_slave_1: entered promiscuous mode [ 48.036882][ T5728] team0: Port device team_slave_0 added [ 48.050827][ T5723] team0: Port device team_slave_0 added [ 48.051729][ T5728] team0: Port device team_slave_1 added [ 48.062502][ T5734] hsr_slave_0: entered promiscuous mode [ 48.063270][ T5734] hsr_slave_1: entered promiscuous mode [ 48.065871][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.067266][ T5723] team0: Port device team_slave_1 added [ 48.080513][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.080809][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.080818][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.080831][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.086945][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.086955][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.086968][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.111067][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.111078][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.111090][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.124075][ T5726] team0: Port device team_slave_0 added [ 48.130892][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.130904][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.130921][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.136421][ T5726] team0: Port device team_slave_1 added [ 48.160462][ T5728] hsr_slave_0: entered promiscuous mode [ 48.161019][ T5728] hsr_slave_1: entered promiscuous mode [ 48.161317][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 48.161371][ T5728] Cannot create hsr debugfs directory [ 48.188029][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.188044][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.188062][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.201549][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.201562][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.201580][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.233192][ T5723] hsr_slave_0: entered promiscuous mode [ 48.233632][ T5723] hsr_slave_1: entered promiscuous mode [ 48.234067][ T5723] debugfs: 'hsr0' already exists in 'hsr' [ 48.234079][ T5723] Cannot create hsr debugfs directory [ 48.310312][ T5726] hsr_slave_0: entered promiscuous mode [ 48.310759][ T5726] hsr_slave_1: entered promiscuous mode [ 48.311154][ T5726] debugfs: 'hsr0' already exists in 'hsr' [ 48.311166][ T5726] Cannot create hsr debugfs directory [ 48.443816][ T5734] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.448886][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.465921][ T5734] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.468726][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.491951][ T5734] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.495242][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.504493][ T5734] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.507520][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.554251][ T5728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.556893][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.557647][ T5728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.559146][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.561917][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.561967][ T5734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.562176][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.562229][ T5734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.565144][ T5728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.568486][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.569052][ T5728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.571543][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.613936][ T5723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.620929][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.621833][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.621888][ T5728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.621992][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.622035][ T5728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.627168][ T5723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.634843][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.641165][ T5723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.644534][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.645398][ T5723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.648561][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.688926][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.689597][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.695625][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.696102][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.729465][ T5726] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.732950][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.739006][ T5726] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.740867][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.741385][ T5726] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.744765][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.746684][ T5726] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.751526][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.772443][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.798516][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.814730][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.825522][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.825591][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.832646][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.841621][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.841710][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.846062][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.846441][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.856573][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.856656][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.874026][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.907124][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.921392][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.921440][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.928531][ T5734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.933759][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.933804][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.942542][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.948179][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.961750][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.961821][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.962993][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.963180][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.184446][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.216201][ T5734] veth0_vlan: entered promiscuous mode [ 49.218799][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.225376][ T5734] veth1_vlan: entered promiscuous mode [ 49.244370][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.259685][ T5734] veth0_macvtap: entered promiscuous mode [ 49.266195][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.266517][ T5728] veth0_vlan: entered promiscuous mode [ 49.273674][ T5734] veth1_macvtap: entered promiscuous mode [ 49.277629][ T5728] veth1_vlan: entered promiscuous mode [ 49.286920][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.297336][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.298844][ T5723] veth0_vlan: entered promiscuous mode [ 49.315753][ T5728] veth0_macvtap: entered promiscuous mode [ 49.319227][ T5728] veth1_macvtap: entered promiscuous mode [ 49.321070][ T5724] Bluetooth: hci1: command tx timeout [ 49.321259][ T5724] Bluetooth: hci3: command tx timeout [ 49.321306][ T5724] Bluetooth: hci2: command tx timeout [ 49.321501][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.330823][ T66] Bluetooth: hci0: command tx timeout [ 49.334020][ T5723] veth1_vlan: entered promiscuous mode [ 49.346601][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.358496][ T5726] veth0_vlan: entered promiscuous mode [ 49.361358][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.371944][ T5726] veth1_vlan: entered promiscuous mode [ 49.399246][ T5723] veth0_macvtap: entered promiscuous mode [ 49.400634][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.400646][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.415671][ T5723] veth1_macvtap: entered promiscuous mode [ 49.430695][ T5726] veth0_macvtap: entered promiscuous mode [ 49.436946][ T5726] veth1_macvtap: entered promiscuous mode [ 49.442175][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.447579][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.447591][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.450455][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.450484][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.450503][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.450520][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.450538][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.450555][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.450572][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.458063][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.467927][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.467940][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.487679][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.502439][ T5734] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.507697][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.526417][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.526430][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.572847][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.572935][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.573019][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.573080][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.587039][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.587056][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.624587][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.624599][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.645044][ T5878] FAULT_INJECTION: forcing a failure. [ 49.645044][ T5878] name failslab, interval 1, probability 0, space 0, times 1 [ 49.645066][ T5878] CPU: 0 UID: 0 PID: 5878 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 49.645081][ T5878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.645089][ T5878] Call Trace: [ 49.645093][ T5878] [ 49.645097][ T5878] dump_stack_lvl+0x100/0x190 [ 49.645119][ T5878] should_fail_ex.cold+0x5/0xa [ 49.645135][ T5878] should_failslab+0xc2/0x120 [ 49.645152][ T5878] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 49.645170][ T5878] ? mark_held_locks+0x40/0x70 [ 49.645183][ T5878] ? neigh_sysctl_register+0xb4/0x660 [ 49.645202][ T5878] kmemdup_noprof+0x29/0x60 [ 49.645214][ T5878] neigh_sysctl_register+0xb4/0x660 [ 49.645230][ T5878] ? __pfx_ndisc_ifinfo_sysctl_change+0x10/0x10 [ 49.645250][ T5878] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 49.645269][ T5878] ? lockdep_init_map_type+0x5c/0x250 [ 49.645282][ T5878] ? mld_in_v1_mode+0x2b2/0x3a0 [ 49.645299][ T5878] addrconf_sysctl_register+0xb9/0x200 [ 49.645315][ T5878] ipv6_add_dev+0xaf2/0x1520 [ 49.645331][ T5878] addrconf_notify+0x5db/0x1ba0 [ 49.645349][ T5878] ? __pfx_tls_dev_event+0x10/0x10 [ 49.645364][ T5878] ? __pfx_addrconf_notify+0x10/0x10 [ 49.645381][ T5878] ? ip6mr_device_event+0x1c4/0x230 [ 49.645400][ T5878] notifier_call_chain+0x99/0x3f0 [ 49.645419][ T5878] call_netdevice_notifiers_info+0xbe/0x110 [ 49.645432][ T5878] register_netdevice+0x1998/0x25a0 [ 49.645452][ T5878] ? __pfx_register_netdevice+0x10/0x10 [ 49.645473][ T5878] br_dev_newlink+0x6a/0x170 [ 49.645488][ T5878] ? __pfx_br_dev_newlink+0x10/0x10 [ 49.645503][ T5878] rtnl_newlink+0x1697/0x2620 [ 49.645525][ T5878] ? __pfx_rtnl_newlink+0x10/0x10 [ 49.645541][ T5878] ? avc_has_perm_noaudit+0x56/0x470 [ 49.645559][ T5878] ? find_held_lock+0x2b/0x80 [ 49.645575][ T5878] ? avc_has_perm_noaudit+0x11e/0x470 [ 49.645592][ T5878] ? avc_has_perm_noaudit+0x11e/0x470 [ 49.645625][ T5878] ? lock_acquire+0x1d1/0x380 [ 49.645639][ T5878] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 49.645649][ T5878] ? find_held_lock+0x2b/0x80 [ 49.645665][ T5878] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 49.645675][ T5878] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 49.645686][ T5878] ? __pfx_rtnl_newlink+0x10/0x10 [ 49.645704][ T5878] rtnetlink_rcv_msg+0x95e/0xe90 [ 49.645715][ T5878] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 49.645730][ T5878] ? ref_tracker_free+0x37e/0x6c0 [ 49.645749][ T5878] netlink_rcv_skb+0x159/0x420 [ 49.645764][ T5878] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 49.645775][ T5878] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 49.645795][ T5878] ? netlink_deliver_tap+0x1ae/0xcc0 [ 49.645813][ T5878] netlink_unicast+0x585/0x850 [ 49.645837][ T5878] ? __pfx_netlink_unicast+0x10/0x10 [ 49.645858][ T5878] netlink_sendmsg+0x8b0/0xda0 [ 49.645876][ T5878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.645893][ T5878] ? selinux_socket_sendmsg+0x198/0x2f0 [ 49.645911][ T5878] ____sys_sendmsg+0xa4d/0xbe0 [ 49.645924][ T5878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.645940][ T5878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 49.645960][ T5878] ___sys_sendmsg+0x190/0x1e0 [ 49.645975][ T5878] ? __pfx____sys_sendmsg+0x10/0x10 [ 49.645989][ T5878] ? futex_wait+0x11e/0x370 [ 49.646008][ T5878] ? find_held_lock+0x2b/0x80 [ 49.646051][ T5878] __sys_sendmsg+0x160/0x210 [ 49.646070][ T5878] ? __pfx___sys_sendmsg+0x10/0x10 [ 49.646096][ T5878] do_syscall_64+0x123/0x790 [ 49.646110][ T5878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.646123][ T5878] RIP: 0033:0x7f247919e159 [ 49.646134][ T5878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.646145][ T5878] RSP: 002b:00007f247a0d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.646156][ T5878] RAX: ffffffffffffffda RBX: 00007f2479425fa0 RCX: 00007f247919e159 [ 49.646164][ T5878] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 49.646171][ T5878] RBP: 00007f247923506b R08: 0000000000000000 R09: 0000000000000000 [ 49.646177][ T5878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.646183][ T5878] R13: 00007f2479426038 R14: 00007f2479425fa0 R15: 00007ffc45dd53e8 [ 49.646198][ T5878] [ 49.662573][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.662591][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.684375][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.684387][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.700858][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.701138][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.701264][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.701459][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.110718][ T5889] usb usb7: usbfs: process 5889 (syz.3.4) did not claim interface 0 before use [ 50.350368][ T5805] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.799917][ T5911] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.883064][ T5906] Could not create tracefs 'available_tracers' entry [ 50.893248][ T5906] Could not create tracefs 'current_tracer' entry [ 50.905347][ T5906] Could not create tracefs 'tracing_cpumask' entry [ 50.912592][ T5906] Could not create tracefs 'trace_options' entry [ 50.928242][ T5906] Could not create tracefs 'trace' entry [ 50.936847][ T5906] Could not create tracefs 'trace_pipe' entry [ 50.944805][ T5906] Could not create tracefs 'buffer_size_kb' entry [ 50.951994][ T5906] Could not create tracefs 'buffer_total_size_kb' entry [ 50.962358][ T5906] Could not create tracefs 'trace_clock' entry [ 50.971577][ T5906] Could not create tracefs 'timestamp_mode' entry [ 50.978009][ T5906] Could not create tracefs 'buffer_subbuf_size_kb' entry [ 50.988790][ T5906] Could not create tracefs directory 'options' [ 50.997594][ T5906] ERROR: Could not create tracefs directory 'per_cpu/0' [ 51.082383][ T5906] Could not create tracefs 'free_buffer' entry [ 51.092233][ T5906] Could not create tracefs 'trace_marker' entry [ 51.104267][ T5906] Could not create tracefs 'trace_marker_raw' entry [ 51.111133][ T5906] Could not create tracefs 'buffer_percent' entry [ 51.123988][ T5906] Could not create tracefs 'syscall_user_buf_size' entry [ 51.143277][ T5906] Could not create tracefs 'tracing_on' entry [ 51.156385][ T5906] Could not create tracefs 'error_log' entry [ 51.167032][ T5906] Could not create tracefs directory 'options' [ 51.167067][ T5906] ERROR: Failed to create trace option: test_nop_accept [ 51.174890][ T5906] Could not create tracefs directory 'options' [ 51.400363][ T66] Bluetooth: hci0: command tx timeout [ 51.400395][ T66] Bluetooth: hci2: command tx timeout [ 51.400420][ T66] Bluetooth: hci3: command tx timeout [ 51.400816][ T66] Bluetooth: hci1: command tx timeout [ 51.453166][ T5929] hub 5-0:1.0: USB hub found [ 51.453546][ T5929] hub 5-0:1.0: 1 port detected [ 52.043305][ T5805] usb 6-1: unable to get BOS descriptor or descriptor too short [ 52.043339][ T5805] usb 6-1: New USB device found, idVendor=0582, idProduct=0082, bcdDevice= 0.00 [ 52.043366][ T5805] usb 6-1: no configurations [ 52.043376][ T5805] usb 6-1: can't read configurations, error -22 [ 52.557529][ T43] kauditd_printk_skb: 71 callbacks suppressed [ 52.557541][ T43] audit: type=1400 audit(1791172881.102:239): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 52.584829][ T5942] jffs2: notice: (5942) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 52.587801][ T43] audit: type=1400 audit(1791172881.132:240): avc: denied { mount } for pid=5941 comm="syz.1.24" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 52.624092][ T43] audit: type=1400 audit(1791172881.172:241): avc: denied { mount } for pid=5944 comm="syz.1.25" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 52.636640][ T43] audit: type=1400 audit(1791172881.182:242): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 52.713813][ T43] audit: type=1400 audit(1791172881.262:243): avc: denied { mount } for pid=5950 comm="syz.1.28" name="/" dev="autofs" ino=8849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 52.765371][ T43] audit: type=1400 audit(1791172881.312:244): avc: denied { name_bind } for pid=5952 comm="syz.1.29" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 52.765925][ T5953] syz.1.29 uses obsolete (PF_INET,SOCK_PACKET) [ 52.766587][ T43] audit: type=1400 audit(1791172881.312:245): avc: denied { ioctl } for pid=5952 comm="syz.1.29" path="socket:[8856]" dev="sockfs" ino=8856 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.826049][ T43] audit: type=1400 audit(1791172881.372:246): avc: denied { read append } for pid=5954 comm="syz.0.30" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 52.826100][ T43] audit: type=1400 audit(1791172881.372:247): avc: denied { open } for pid=5954 comm="syz.0.30" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 52.827888][ T43] audit: type=1400 audit(1791172881.372:248): avc: denied { ioctl } for pid=5954 comm="syz.0.30" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.041480][ T5964] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 53.161531][ T5970] debugfs: out of free dentries, can not create file 'pm_only' [ 53.235514][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'. [ 53.330372][ T5880] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.357081][ T5977] ======================================================= [ 53.357081][ T5977] WARNING: The mand mount option has been deprecated and [ 53.357081][ T5977] and is ignored by this kernel. Remove the mand [ 53.357081][ T5977] option from the mount to silence this warning. [ 53.357081][ T5977] ======================================================= [ 53.357405][ T5977] jffs2: notice: (5977) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 53.368489][ T5977] jffs2: warning: (5977) jffs2_sum_write_data: Summary too big (12 data, -14 pad) in eraseblock at 0001d000 [ 53.447686][ T5982] input: syz1 as /devices/virtual/input/input5 [ 53.480418][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 53.481805][ T5880] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 53.482119][ T5724] Bluetooth: hci1: command tx timeout [ 53.482162][ T5724] Bluetooth: hci0: command tx timeout [ 53.482233][ T66] Bluetooth: hci3: command tx timeout [ 53.484314][ T5880] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 53.484338][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 53.484350][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 30, changing to 8 [ 53.484363][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 53.487053][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.487063][ T5880] usb 5-1: Product: syz [ 53.487070][ T5880] usb 5-1: Manufacturer: syz [ 53.487078][ T5880] usb 5-1: SerialNumber: syz [ 53.497398][ T5880] usb 5-1: config 0 descriptor?? [ 53.498936][ T5968] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 53.708116][ T5988] Bluetooth: MGMT ver 1.23 [ 53.712860][ T5880] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 53.727061][ T5880] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input6 [ 53.918792][ C2] powermate: config urb returned -71 [ 53.918981][ C2] powermate: config urb returned -71 [ 53.919170][ C2] powermate: config urb returned -71 [ 53.919365][ C2] powermate: config urb returned -71 [ 53.919541][ C2] powermate: config urb returned -71 [ 53.919543][ T5834] usb 5-1: USB disconnect, device number 2 [ 53.919708][ C2] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 53.920830][ T5805] e1000 0000:00:06.0 eth0: Reset adapter [ 54.478448][ T6022] netlink: 'syz.2.47': attribute type 29 has an invalid length. [ 54.515754][ T1040] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 54.521547][ T5724] Bluetooth: hci2: command tx timeout [ 54.527734][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'. [ 54.673830][ T6037] jffs2: notice: (6037) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 54.741686][ T6041] input: syz1 as /devices/virtual/input/input7 [ 55.560330][ C0] net_ratelimit: 398 callbacks suppressed [ 55.560567][ T66] Bluetooth: hci1: command tx timeout [ 55.560601][ T5724] Bluetooth: hci3: command tx timeout [ 55.570488][ T5724] Bluetooth: hci0: command tx timeout [ 56.201652][ T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 59.355023][ T43] kauditd_printk_skb: 113 callbacks suppressed [ 59.355036][ T43] audit: type=1400 audit(1791172887.902:362): avc: denied { write } for pid=6049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.411107][ T43] audit: type=1400 audit(1791172887.962:363): avc: denied { write } for pid=6052 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.740465][ T5439] net_ratelimit: 42 callbacks suppressed [ 62.797547][ T43] audit: type=1400 audit(1791172891.342:364): avc: denied { write } for pid=6055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.844358][ T43] audit: type=1400 audit(1791172891.392:365): avc: denied { write } for pid=6058 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.850891][ T6062] se_dev->se_dev_ptr already set for storage object [ 63.997925][ T6079] input: syz1 as /devices/virtual/input/input8 [ 64.001443][ T6081] jffs2: notice: (6081) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 64.066448][ T43] audit: type=1400 audit(1791172892.612:366): avc: denied { sys_module } for pid=6083 comm="syz.1.63" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.083913][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'. [ 64.122499][ T5880] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 64.211705][ T6095] debugfs: out of free dentries, can not create file 'state' [ 64.280442][ T5880] usb 8-1: Using ep0 maxpacket: 8 [ 64.282981][ T5880] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 64.284129][ T5880] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 64.284194][ T5880] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.284213][ T5880] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 30, changing to 8 [ 64.284231][ T5880] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 64.287109][ T5880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.287127][ T5880] usb 8-1: Product: syz [ 64.287140][ T5880] usb 8-1: Manufacturer: syz [ 64.287152][ T5880] usb 8-1: SerialNumber: syz [ 64.301090][ T5880] usb 8-1: config 0 descriptor?? [ 64.308471][ T6066] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 64.342285][ T6101] se_dev->se_dev_ptr already set for storage object [ 64.498957][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 64.523980][ T5880] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 64.531643][ T5880] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input9 [ 64.729623][ C2] powermate: config urb returned -71 [ 64.731002][ C2] powermate: config urb returned -71 [ 64.731350][ C2] powermate: config urb returned -71 [ 64.731495][ T50] usb 8-1: USB disconnect, device number 2 [ 64.731581][ C2] powermate: config urb returned -71 [ 64.731587][ C2] powermate: usb_submit_urb(config) failed [ 64.731618][ C2] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 64.892197][ T6125] debugfs: out of free dentries, can not create file 'state' [ 64.969691][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 65.279703][ T6141] input: syz1 as /devices/virtual/input/input10 [ 65.285385][ T6143] se_dev->se_dev_ptr already set for storage object [ 65.543579][ T43] audit: type=1400 audit(1791172894.092:367): avc: denied { search } for pid=6167 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.543763][ T43] audit: type=1400 audit(1791172894.092:368): avc: denied { search } for pid=6167 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.545400][ T43] audit: type=1400 audit(1791172894.092:369): avc: denied { search } for pid=6167 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.545443][ T43] audit: type=1400 audit(1791172894.092:370): avc: denied { search } for pid=6167 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.549545][ T43] audit: type=1400 audit(1791172894.092:371): avc: denied { read } for pid=6171 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.549830][ T43] audit: type=1400 audit(1791172894.092:372): avc: denied { read open } for pid=6171 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.550090][ T43] audit: type=1400 audit(1791172894.092:373): avc: denied { getattr } for pid=6171 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.561534][ T43] audit: type=1400 audit(1791172894.112:374): avc: denied { write } for pid=6167 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.561579][ T43] audit: type=1400 audit(1791172894.112:375): avc: denied { add_name } for pid=6167 comm="dhcpcd-run-hook" name="resolv.conf.eth1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.598091][ T6177] jffs2: notice: (6177) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 65.608858][ T43] audit: type=1400 audit(1791172894.152:376): avc: denied { write } for pid=6174 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.722637][ T6199] jffs2: notice: (6199) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 65.759974][ T6202] jffs2: notice: (6202) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 65.890307][ C0] net_ratelimit: 87 callbacks suppressed [ 65.898115][ T6220] jffs2: notice: (6220) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 65.934351][ T6226] jffs2: notice: (6226) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 66.143087][ T6246] jffs2: notice: (6246) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 66.151875][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 66.190423][ T42] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 66.273347][ T6260] input: syz1 as /devices/virtual/input/input11 [ 66.340887][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 66.341381][ T42] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 66.342239][ T42] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 66.342262][ T42] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.342274][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 30, changing to 8 [ 66.342287][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 66.345093][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.345103][ T42] usb 7-1: Product: syz [ 66.345111][ T42] usb 7-1: Manufacturer: syz [ 66.345118][ T42] usb 7-1: SerialNumber: syz [ 66.348307][ T42] usb 7-1: config 0 descriptor?? [ 66.348793][ T6229] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 66.378543][ T6269] jffs2: notice: (6269) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 66.417658][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'. [ 66.553499][ T42] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 66.555335][ T42] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input12 [ 66.757365][ C1] powermate: config urb returned -71 [ 66.757610][ C1] powermate: config urb returned -71 [ 66.757835][ C1] powermate: config urb returned -71 [ 66.758097][ C1] powermate: config urb returned -71 [ 66.766585][ C1] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 66.766598][ T42] usb 7-1: USB disconnect, device number 2 [ 66.793415][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 67.077064][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 67.278107][ T6344] input: syz1 as /devices/virtual/input/input13 [ 67.306464][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 67.499420][ T6364] Zero length message leads to an empty skb [ 67.578639][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'. [ 67.780358][ T5834] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 67.816741][ T6390] jffs2: notice: (6390) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 67.874149][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'. [ 67.940296][ T5834] usb 6-1: Using ep0 maxpacket: 8 [ 67.942990][ T5834] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 67.944006][ T5834] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 67.944045][ T5834] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 67.944068][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 30, changing to 8 [ 67.944092][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 67.948090][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.948100][ T5834] usb 6-1: Product: syz [ 67.948107][ T5834] usb 6-1: Manufacturer: syz [ 67.948115][ T5834] usb 6-1: SerialNumber: syz [ 67.956385][ T5834] usb 6-1: config 0 descriptor?? [ 67.957093][ T6369] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 68.066531][ T6409] jffs2: notice: (6409) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 68.097189][ T6412] jffs2: notice: (6412) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 68.167482][ T5834] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 68.169217][ T5834] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input14 [ 68.345712][ T6431] jffs2: notice: (6431) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 68.370614][ C3] powermate: config urb returned -71 [ 68.370832][ C3] powermate: config urb returned -71 [ 68.371023][ C3] powermate: config urb returned -71 [ 68.371208][ C3] powermate: config urb returned -71 [ 68.374992][ T5834] usb 6-1: USB disconnect, device number 4 [ 68.375131][ C3] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 68.386726][ T6436] input: syz1 as /devices/virtual/input/input15 [ 68.564479][ T6456] jffs2: notice: (6456) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 68.595566][ T6459] jffs2: notice: (6459) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 68.616948][ T6462] input: syz1 as /devices/virtual/input/input16 [ 68.791971][ T6476] jffs2: notice: (6476) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 69.154236][ T6511] __nla_validate_parse: 3 callbacks suppressed [ 69.154249][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.262'. [ 69.310300][ T5834] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 69.417092][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'. [ 69.470321][ T5834] usb 8-1: Using ep0 maxpacket: 8 [ 69.472513][ T5834] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 69.476082][ T5834] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 69.476105][ T5834] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.476118][ T5834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 30, changing to 8 [ 69.476152][ T5834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 69.478909][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.478919][ T5834] usb 8-1: Product: syz [ 69.478927][ T5834] usb 8-1: Manufacturer: syz [ 69.478935][ T5834] usb 8-1: SerialNumber: syz [ 69.482413][ T5834] usb 8-1: config 0 descriptor?? [ 69.485310][ T6505] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 69.499580][ T6541] No source specified [ 69.691562][ T5834] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 69.693299][ T5834] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input18 [ 69.696884][ T6557] No source specified [ 69.719888][ T6561] No source specified [ 69.729403][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'. [ 69.730439][ T6563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.288'. [ 69.893251][ C3] powermate: config urb returned -71 [ 69.893429][ C3] powermate: config urb returned -71 [ 69.893604][ C3] powermate: config urb returned -71 [ 69.893778][ C3] powermate: config urb returned -71 [ 69.894053][ T5803] usb 8-1: USB disconnect, device number 3 [ 69.894166][ C3] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 69.939300][ T6579] No source specified [ 69.942965][ T6581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.297'. [ 69.972927][ T6585] No source specified [ 70.028914][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 70.124260][ T6599] No source specified [ 70.149246][ T6601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.307'. [ 70.311386][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 70.314875][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'. [ 70.451867][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'. [ 70.800503][ T5803] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 70.950445][ T5803] usb 6-1: Using ep0 maxpacket: 8 [ 70.954577][ T5803] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 70.955592][ T5803] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 70.955626][ T5803] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 70.955648][ T5803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 30, changing to 8 [ 70.955671][ T5803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 70.957646][ T5803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.957663][ T5803] usb 6-1: Product: syz [ 70.957696][ T5803] usb 6-1: Manufacturer: syz [ 70.957711][ T5803] usb 6-1: SerialNumber: syz [ 70.963235][ T5803] usb 6-1: config 0 descriptor?? [ 70.964432][ T6652] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 71.164025][ C1] net_ratelimit: 40 callbacks suppressed [ 71.164635][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.164718][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.166579][ T3267] cfg80211: failed to load regulatory.db [ 71.175277][ T5803] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 71.195591][ T5803] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input24 [ 71.204210][ C1] powermate: config urb returned -71 [ 71.204425][ C1] powermate: config urb returned -71 [ 71.204655][ C1] powermate: config urb returned -71 [ 71.204889][ C1] powermate: config urb returned -71 [ 71.215496][ T5803] usb 6-1: USB disconnect, device number 5 [ 71.215625][ C1] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 71.388935][ T6740] jffs2: notice: (6740) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 71.600110][ T6763] jffs2: notice: (6763) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 71.624051][ T6766] jffs2: notice: (6766) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 71.802117][ T6789] jffs2: notice: (6789) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 71.941764][ T6812] jffs2: notice: (6812) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 71.988352][ T6817] jffs2: notice: (6817) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 72.140314][ T3267] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 72.163275][ T6837] jffs2: notice: (6837) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 72.230047][ T6844] jffs2: notice: (6844) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 72.267750][ T6849] input: syz1 as /devices/virtual/input/input25 [ 72.300514][ T3267] usb 7-1: Using ep0 maxpacket: 8 [ 72.300944][ T3267] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 72.302700][ T3267] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 72.302728][ T3267] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.302740][ T3267] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 30, changing to 8 [ 72.302754][ T3267] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 72.304350][ T3267] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.304360][ T3267] usb 7-1: Product: syz [ 72.304368][ T3267] usb 7-1: Manufacturer: syz [ 72.304375][ T3267] usb 7-1: SerialNumber: syz [ 72.308071][ T3267] usb 7-1: config 0 descriptor?? [ 72.308537][ T6801] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 72.351088][ T6862] jffs2: notice: (6862) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 72.480680][ T6872] jffs2: notice: (6872) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 72.512287][ T3267] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 72.517803][ T3267] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input26 [ 72.521313][ C3] powermate: config urb returned -71 [ 72.521511][ C3] powermate: config urb returned -71 [ 72.521696][ C3] powermate: config urb returned -71 [ 72.521907][ C3] powermate: config urb returned -71 [ 72.533394][ T3267] usb 7-1: USB disconnect, device number 3 [ 72.533528][ C3] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 72.641437][ T6884] jffs2: notice: (6884) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 72.773443][ T6898] jffs2: notice: (6898) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 72.844801][ T6905] jffs2: notice: (6905) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 73.053013][ T6927] jffs2: notice: (6927) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 73.132431][ T6943] input: syz1 as /devices/virtual/input/input27 [ 73.342029][ T6957] jffs2: notice: (6957) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 73.420349][ T5805] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 73.570281][ T5805] usb 8-1: Using ep0 maxpacket: 8 [ 73.570808][ T5805] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 73.571690][ T5805] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 73.571713][ T5805] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 73.571726][ T5805] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 30, changing to 8 [ 73.571739][ T5805] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 73.573895][ T5805] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.573905][ T5805] usb 8-1: Product: syz [ 73.573913][ T5805] usb 8-1: Manufacturer: syz [ 73.573920][ T5805] usb 8-1: SerialNumber: syz [ 73.575997][ T5805] usb 8-1: config 0 descriptor?? [ 73.576472][ T6948] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 73.771022][ T6964] jffs2: notice: (6964) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 73.785334][ T5805] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 73.802262][ T5805] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input28 [ 73.807175][ C1] powermate: config urb returned -71 [ 73.807377][ C1] powermate: config urb returned -71 [ 73.807561][ C1] powermate: config urb returned -71 [ 73.807750][ C1] powermate: config urb returned -71 [ 73.816494][ T5805] usb 8-1: USB disconnect, device number 4 [ 73.816650][ C1] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 74.183039][ T6995] input: syz1 as /devices/virtual/input/input29 [ 74.258979][ T7000] __nla_validate_parse: 14 callbacks suppressed [ 74.258989][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 74.333887][ T7005] jffs2: notice: (7005) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 74.550773][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.490'. [ 74.730414][ T35] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 74.890333][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 74.891434][ T35] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 74.892360][ T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 74.892396][ T35] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 74.892417][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 30, changing to 8 [ 74.892437][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 74.895115][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.895126][ T35] usb 8-1: Product: syz [ 74.895133][ T35] usb 8-1: Manufacturer: syz [ 74.895141][ T35] usb 8-1: SerialNumber: syz [ 74.896761][ T35] usb 8-1: config 0 descriptor?? [ 74.897553][ T7018] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 74.960498][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 75.064853][ T7051] jffs2: notice: (7051) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 75.101019][ T35] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 75.109474][ T35] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input30 [ 75.301923][ C3] powermate: config urb returned -71 [ 75.302111][ C3] powermate: config urb returned -71 [ 75.302301][ C3] powermate: config urb returned -71 [ 75.302482][ C3] powermate: config urb returned -71 [ 75.303916][ T5876] usb 8-1: USB disconnect, device number 5 [ 75.304075][ C3] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 75.711692][ T7069] input: syz1 as /devices/virtual/input/input31 [ 75.745369][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'. [ 75.883654][ T7081] jffs2: notice: (7081) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 76.157912][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.524'. [ 76.280768][ T1084] net_ratelimit: 47 callbacks suppressed [ 76.437094][ T7099] MTD: Couldn't look up './dev/mtdblock0': -2 [ 76.490317][ T5880] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 76.576613][ T7114] jffs2: notice: (7114) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 76.632859][ T7124] MTD: Couldn't look up './dev/mtdblock0': -2 [ 76.650336][ T5880] usb 7-1: Using ep0 maxpacket: 8 [ 76.650840][ T5880] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 76.651700][ T5880] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 76.651722][ T5880] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 76.651735][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 30, changing to 8 [ 76.651748][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 76.653328][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.653338][ T5880] usb 7-1: Product: syz [ 76.653345][ T5880] usb 7-1: Manufacturer: syz [ 76.653353][ T5880] usb 7-1: SerialNumber: syz [ 76.655338][ T5880] usb 7-1: config 0 descriptor?? [ 76.655834][ T7095] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.716859][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'. [ 76.753509][ T7136] input: syz1 as /devices/virtual/input/input32 [ 76.858942][ T5880] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 76.861033][ T5880] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input33 [ 77.062094][ C2] powermate: config urb returned -71 [ 77.062321][ T5805] usb 7-1: USB disconnect, device number 4 [ 77.062326][ C2] powermate: config urb returned -71 [ 77.062332][ C2] powermate: usb_submit_urb(config) failed [ 77.062362][ C2] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 77.484706][ T7153] MTD: Couldn't look up './dev/mtdblock0': -2 [ 77.636900][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.548'. [ 77.729225][ T7182] MTD: Couldn't look up './dev/mtdblock0': -2 [ 77.796540][ T7193] input: syz1 as /devices/virtual/input/input34 [ 77.871967][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'. [ 78.080376][ T35] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.120783][ T7213] MTD: Couldn't look up './dev/mtdblock0': -2 [ 78.260863][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 78.261548][ T35] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 78.262455][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 78.262490][ T35] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 78.262511][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 30, changing to 8 [ 78.262532][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 78.266182][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.266198][ T35] usb 5-1: Product: syz [ 78.266262][ T35] usb 5-1: Manufacturer: syz [ 78.266281][ T35] usb 5-1: SerialNumber: syz [ 78.269196][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.571'. [ 78.269938][ T35] usb 5-1: config 0 descriptor?? [ 78.272223][ T7196] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.475889][ T35] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 78.478239][ T35] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input35 [ 78.662368][ T7243] MTD: Couldn't look up './dev/mtdblock0': -2 [ 78.679457][ C3] powermate: config urb returned -71 [ 78.679666][ C3] powermate: config urb returned -71 [ 78.679861][ C3] powermate: config urb returned -71 [ 78.680629][ C3] powermate: config urb returned -71 [ 78.682093][ C3] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 78.682106][ T35] usb 5-1: USB disconnect, device number 3 [ 78.996013][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'. [ 79.067312][ T7268] input: syz1 as /devices/virtual/input/input36 [ 79.087212][ T7270] MTD: Couldn't look up './dev/mtdblock0': -2 [ 79.394864][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'. [ 79.608069][ T7301] MTD: Couldn't look up './dev/mtdblock0': -2 [ 79.865589][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'. [ 79.904644][ T7323] MTD: Couldn't look up './dev/mtdblock0': -2 [ 79.930562][ T7327] MTD: Couldn't look up './dev/mtdblock0': -2 [ 79.969604][ T7329] hub 5-0:1.0: USB hub found [ 79.970148][ T7329] hub 5-0:1.0: 1 port detected [ 80.113642][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.611'. [ 80.192350][ T7346] input: syz1 as /devices/virtual/input/input37 [ 80.433337][ T7357] MTD: Couldn't look up './dev/mtdblock0': -2 [ 80.461481][ T7359] MTD: Couldn't look up './dev/mtdblock0': -2 [ 80.619437][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'. [ 80.876632][ T7385] MTD: Couldn't look up './dev/mtdblock0': -2 [ 80.904609][ T7387] MTD: Couldn't look up './dev/mtdblock0': -2 [ 81.194901][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.631'. [ 81.281809][ T7413] MTD: Couldn't look up './dev/mtdblock0': -2 [ 81.322826][ T1084] net_ratelimit: 86 callbacks suppressed [ 81.327921][ T7416] input: syz1 as /devices/virtual/input/input38 [ 81.488613][ T7423] MTD: Couldn't look up './dev/mtdblock0': -2 [ 81.636094][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.641'. [ 81.676375][ T7438] MTD: Couldn't look up './dev/mtdblock0': -2 [ 81.954660][ T7451] MTD: Couldn't look up './dev/mtdblock0': -2 [ 82.188004][ T7463] MTD: Couldn't look up './dev/mtdblock0': -2 [ 82.276784][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 82.389991][ T7478] MTD: Couldn't look up './dev/mtdblock0': -2 [ 82.516099][ T7485] input: syz1 as /devices/virtual/input/input39 [ 82.539617][ T7487] MTD: Couldn't look up './dev/mtdblock0': -2 [ 82.580653][ T1040] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 82.591522][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 82.760385][ T1040] usb 7-1: Using ep0 maxpacket: 8 [ 82.760869][ T1040] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 82.761743][ T1040] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 82.761765][ T1040] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.761779][ T1040] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.761792][ T1040] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 82.763666][ T1040] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.763677][ T1040] usb 7-1: Product: syz [ 82.763685][ T1040] usb 7-1: Manufacturer: syz [ 82.763693][ T1040] usb 7-1: SerialNumber: syz [ 82.765389][ T1040] usb 7-1: config 0 descriptor?? [ 82.765870][ T7472] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 82.969358][ T1040] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 82.971240][ T1040] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input40 [ 83.172752][ C0] powermate: config urb returned -71 [ 83.172934][ C0] powermate: config urb returned -71 [ 83.173110][ C0] powermate: config urb returned -71 [ 83.173284][ C0] powermate: config urb returned -71 [ 83.173460][ C0] powermate: config urb returned -71 [ 83.176412][ T50] usb 7-1: USB disconnect, device number 5 [ 83.176528][ C0] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 83.418017][ T7505] MTD: Couldn't look up './dev/mtdblock0': -2 [ 83.445311][ T7510] MTD: Couldn't look up './dev/mtdblock0': -2 [ 83.550106][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.673'. [ 83.719862][ T7521] input: syz1 as /devices/virtual/input/input41 [ 84.323298][ T7530] MTD: Couldn't look up './dev/mtdblock0': -2 [ 84.380819][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.683'. [ 84.670355][ T5805] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 84.820321][ T5805] usb 7-1: Using ep0 maxpacket: 8 [ 84.821038][ T5805] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 84.822011][ T5805] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 84.822050][ T5805] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.822072][ T5805] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 84.822094][ T5805] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 84.823967][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.823984][ T5805] usb 7-1: Product: syz [ 84.823996][ T5805] usb 7-1: Manufacturer: syz [ 84.824008][ T5805] usb 7-1: SerialNumber: syz [ 84.826560][ T5805] usb 7-1: config 0 descriptor?? [ 84.827330][ T7538] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 84.893803][ T7554] MTD: Couldn't look up './dev/mtdblock0': -2 [ 85.031121][ T5805] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 85.035735][ T5805] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input42 [ 85.129858][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'. [ 85.236404][ C1] powermate: config urb returned -71 [ 85.236601][ C1] powermate: config urb returned -71 [ 85.236784][ C1] powermate: config urb returned -71 [ 85.236965][ C1] powermate: config urb returned -71 [ 85.237157][ C1] powermate: config urb returned -71 [ 85.237188][ C1] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 85.237200][ T5805] usb 7-1: USB disconnect, device number 6 [ 85.308965][ T7566] input: syz1 as /devices/virtual/input/input43 [ 85.595197][ T7573] MTD: Couldn't look up './dev/mtdblock0': -2 [ 86.183773][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.704'. [ 86.313356][ T7590] No source specified [ 86.342288][ T7592] MTD: Couldn't look up './dev/mtdblock0': -2 [ 86.460420][ T7601] input: syz1 as /devices/virtual/input/input44 [ 86.530372][ T46] net_ratelimit: 36 callbacks suppressed [ 86.610684][ T50] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 86.770325][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 86.771066][ T50] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 86.772020][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 86.772111][ T50] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.772135][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 86.772156][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 86.774351][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.774368][ T50] usb 6-1: Product: syz [ 86.774381][ T50] usb 6-1: Manufacturer: syz [ 86.774394][ T50] usb 6-1: SerialNumber: syz [ 86.778902][ T50] usb 6-1: config 0 descriptor?? [ 86.783837][ T7597] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 86.841413][ T5724] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 86.841469][ T5724] Bluetooth: hci0: Injecting HCI hardware error event [ 86.842149][ T66] Bluetooth: hci0: hardware error 0x00 [ 86.938607][ T5724] Bluetooth: hci0: unexpected event for opcode 0x000d [ 86.987310][ T50] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 86.989147][ T50] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input45 [ 87.189053][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 87.190357][ C2] powermate: config urb returned -71 [ 87.190563][ C2] powermate: config urb returned -71 [ 87.190747][ C2] powermate: config urb returned -71 [ 87.190929][ C2] powermate: config urb returned -71 [ 87.191122][ C2] powermate: config urb returned -71 [ 87.191641][ T1040] usb 6-1: USB disconnect, device number 6 [ 87.191712][ C2] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 87.296586][ T7610] No source specified [ 87.341704][ T7614] MTD: Couldn't look up './dev/mtdblock0': -2 [ 87.574097][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.725'. [ 87.647621][ T7629] input: syz1 as /devices/virtual/input/input46 [ 87.721270][ T5724] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 87.721313][ T5724] Bluetooth: hci2: Injecting HCI hardware error event [ 87.722257][ T5724] Bluetooth: hci2: hardware error 0x00 [ 87.751379][ T7634] No source specified [ 87.894551][ T7638] MTD: Couldn't look up './dev/mtdblock0': -2 [ 88.497176][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.735'. [ 88.750386][ T5805] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 88.763170][ T7658] MTD: Couldn't look up './dev/mtdblock0': -2 [ 88.900548][ T5805] usb 8-1: Using ep0 maxpacket: 8 [ 88.901107][ T5805] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 88.901980][ T5805] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 88.902016][ T5805] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.902033][ T5805] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.902050][ T5805] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 88.903769][ T5805] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.903782][ T5805] usb 8-1: Product: syz [ 88.903792][ T5805] usb 8-1: Manufacturer: syz [ 88.903802][ T5805] usb 8-1: SerialNumber: syz [ 88.907028][ T5805] usb 8-1: config 0 descriptor?? [ 88.908467][ T7652] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.916727][ T7670] input: syz1 as /devices/virtual/input/input47 [ 88.934727][ T66] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 89.017465][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.746'. [ 89.113325][ T5805] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 89.117068][ T5805] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input48 [ 89.314672][ C1] powermate: config urb returned -71 [ 89.314865][ C1] powermate: config urb returned -71 [ 89.314987][ T50] usb 8-1: USB disconnect, device number 6 [ 89.315046][ C1] powermate: config urb returned -71 [ 89.315052][ C1] powermate: usb_submit_urb(config) failed [ 89.315083][ C1] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 89.801412][ T5724] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 89.872481][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.756'. [ 90.500602][ T7707] input: syz1 as /devices/virtual/input/input49 [ 90.744617][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.767'. [ 90.870440][ T50] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 91.020314][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 91.021411][ T50] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 91.022375][ T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 91.022412][ T50] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.022432][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 91.022453][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 91.024337][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.024353][ T50] usb 8-1: Product: syz [ 91.024365][ T50] usb 8-1: Manufacturer: syz [ 91.024377][ T50] usb 8-1: SerialNumber: syz [ 91.026587][ T50] usb 8-1: config 0 descriptor?? [ 91.027702][ T7714] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.232645][ T50] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 91.234759][ T50] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input50 [ 91.435681][ C2] powermate: config urb returned -71 [ 91.435878][ C2] powermate: config urb returned -71 [ 91.436085][ C2] powermate: config urb returned -71 [ 91.436268][ C2] powermate: config urb returned -71 [ 91.436451][ C2] powermate: config urb returned -71 [ 91.437174][ T50] usb 8-1: USB disconnect, device number 7 [ 91.437245][ C2] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 91.913721][ T7746] net_ratelimit: 55 callbacks suppressed [ 91.913738][ T7746] ip_tables: iptables: counters copy to user failed while replacing table [ 91.990911][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.779'. [ 92.063127][ T7754] input: syz1 as /devices/virtual/input/input51 [ 92.098257][ T7756] No source specified [ 92.882493][ T50] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 92.903403][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'. [ 93.030373][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 93.032538][ T50] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 93.039050][ T7781] No source specified [ 93.039717][ T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 93.039741][ T50] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.039755][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 93.039768][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 93.041495][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.041505][ T50] usb 8-1: Product: syz [ 93.041512][ T50] usb 8-1: Manufacturer: syz [ 93.041520][ T50] usb 8-1: SerialNumber: syz [ 93.047714][ T50] usb 8-1: config 0 descriptor?? [ 93.048533][ T7771] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 93.082139][ T7785] jffs2: notice: (7785) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 93.255895][ T50] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 93.259070][ T50] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input52 [ 93.459758][ C2] powermate: config urb returned -71 [ 93.459938][ C2] powermate: config urb returned -71 [ 93.459995][ T5876] usb 8-1: USB disconnect, device number 8 [ 93.460111][ C2] powermate: config urb returned -71 [ 93.460116][ C2] powermate: usb_submit_urb(config) failed [ 93.460145][ C2] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 93.594921][ T7795] input: syz1 as /devices/virtual/input/input53 [ 93.715153][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.802'. [ 93.896475][ T7804] No source specified [ 94.010344][ T5724] Bluetooth: hci3: link tx timeout [ 94.010350][ T5724] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 94.028007][ T66] Bluetooth: hci1: link tx timeout [ 94.028034][ T66] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 94.463275][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.812'. [ 94.634461][ T7834] input: syz1 as /devices/virtual/input/input54 [ 94.776173][ T66] Bluetooth: hci3: link tx timeout [ 94.776179][ T66] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 94.820621][ T5805] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 94.970323][ T5805] usb 7-1: Using ep0 maxpacket: 8 [ 94.971055][ T5805] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 94.972063][ T5805] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 94.972103][ T5805] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.972125][ T5805] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 94.972146][ T5805] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 94.974347][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.974364][ T5805] usb 7-1: Product: syz [ 94.974378][ T5805] usb 7-1: Manufacturer: syz [ 94.974392][ T5805] usb 7-1: SerialNumber: syz [ 94.978010][ T5805] usb 7-1: config 0 descriptor?? [ 94.978743][ T7826] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.184048][ T5805] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 95.188969][ T5805] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input55 [ 95.367167][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'. [ 95.386226][ C1] powermate: config urb returned -71 [ 95.386417][ C1] powermate: config urb returned -71 [ 95.386613][ C1] powermate: config urb returned -71 [ 95.386790][ C1] powermate: config urb returned -71 [ 95.386913][ T5805] usb 7-1: USB disconnect, device number 7 [ 95.386981][ C1] powermate: config urb returned -71 [ 95.387012][ C1] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 95.496179][ T66] Bluetooth: hci3: link tx timeout [ 95.496185][ T66] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 95.599718][ T66] Bluetooth: hci1: link tx timeout [ 95.599727][ T66] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 95.976937][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'. [ 96.050530][ T66] Bluetooth: hci1: command 0x0406 tx timeout [ 96.051890][ T66] Bluetooth: hci3: command 0x0406 tx timeout [ 96.094838][ T7875] input: syz1 as /devices/virtual/input/input56 [ 96.590305][ T35] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 96.771999][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 96.773261][ T35] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 96.774068][ T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 96.774091][ T35] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.774105][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.774118][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 96.775720][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.775730][ T35] usb 8-1: Product: syz [ 96.775737][ T35] usb 8-1: Manufacturer: syz [ 96.775745][ T35] usb 8-1: SerialNumber: syz [ 96.779174][ T35] usb 8-1: config 0 descriptor?? [ 96.779697][ T7885] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 96.920287][ C2] net_ratelimit: 40 callbacks suppressed [ 96.970434][ T7896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'. [ 96.986928][ T35] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 96.988831][ T35] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input57 [ 97.189879][ C3] powermate: config urb returned -71 [ 97.190066][ C3] powermate: config urb returned -71 [ 97.190398][ C3] powermate: config urb returned -71 [ 97.190630][ C3] powermate: config urb returned -71 [ 97.190862][ C3] powermate: config urb returned -71 [ 97.191517][ T35] usb 8-1: USB disconnect, device number 9 [ 97.191630][ C3] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 97.649253][ T7918] input: syz1 as /devices/virtual/input/input58 [ 97.741544][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 98.525305][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.869'. [ 98.638429][ T7950] jffs2: notice: (7950) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 98.670407][ T50] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 98.771551][ T7962] input: syz1 as /devices/virtual/input/input59 [ 98.840399][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 98.841113][ T50] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 98.841882][ T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 98.841905][ T50] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.841918][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 98.841931][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 98.843711][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.843721][ T50] usb 8-1: Product: syz [ 98.843728][ T50] usb 8-1: Manufacturer: syz [ 98.843736][ T50] usb 8-1: SerialNumber: syz [ 98.845476][ T50] usb 8-1: config 0 descriptor?? [ 98.845977][ T7942] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 99.050706][ T50] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 99.053823][ T50] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input60 [ 99.256639][ C2] powermate: config urb returned -71 [ 99.256857][ C2] powermate: config urb returned -71 [ 99.257036][ C2] powermate: config urb returned -71 [ 99.257225][ C2] powermate: config urb returned -71 [ 99.257420][ C2] powermate: config urb returned -71 [ 99.259038][ T35] usb 8-1: USB disconnect, device number 10 [ 99.259225][ C2] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 99.609259][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.880'. [ 99.629893][ T7971] jffs2: notice: (7971) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 99.832933][ T7988] input: syz1 as /devices/virtual/input/input61 [ 100.255384][ T7992] jffs2: notice: (7992) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 100.352384][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'. [ 100.700343][ T5876] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 100.739670][ T8011] jffs2: notice: (8011) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 100.850783][ T5876] usb 8-1: Using ep0 maxpacket: 8 [ 100.851319][ T5876] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 100.852312][ T5876] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 100.852335][ T5876] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.852348][ T5876] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.852361][ T5876] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.854576][ T5876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.854586][ T5876] usb 8-1: Product: syz [ 100.854593][ T5876] usb 8-1: Manufacturer: syz [ 100.854601][ T5876] usb 8-1: SerialNumber: syz [ 100.856066][ T5876] usb 8-1: config 0 descriptor?? [ 100.856503][ T8003] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.036089][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.903'. [ 101.059293][ T5876] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 101.062682][ T5876] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input62 [ 101.224489][ T8026] input: syz1 as /devices/virtual/input/input63 [ 101.262693][ C0] powermate: config urb returned -71 [ 101.262909][ C0] powermate: config urb returned -71 [ 101.263037][ T30] usb 8-1: USB disconnect, device number 11 [ 101.263133][ C0] powermate: config urb returned -71 [ 101.263142][ C0] powermate: usb_submit_urb(config) failed [ 101.263195][ C0] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 101.433453][ T8032] jffs2: notice: (8032) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 102.086962][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 102.208236][ T8052] jffs2: notice: (8052) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 102.272734][ T8057] net_ratelimit: 46 callbacks suppressed [ 102.550423][ T5805] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 102.700617][ T5805] usb 7-1: Using ep0 maxpacket: 8 [ 102.701358][ T5805] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 102.702305][ T5805] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 102.702343][ T5805] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 102.702364][ T5805] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 102.702385][ T5805] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 102.704228][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.704244][ T5805] usb 7-1: Product: syz [ 102.704258][ T5805] usb 7-1: Manufacturer: syz [ 102.704270][ T5805] usb 7-1: SerialNumber: syz [ 102.707211][ T5805] usb 7-1: config 0 descriptor?? [ 102.707953][ T8059] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.809139][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.925'. [ 102.913577][ T5805] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 102.915429][ T5805] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input64 [ 103.036372][ T8074] jffs2: notice: (8074) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 103.119165][ C1] powermate: config urb returned -71 [ 103.119355][ C1] powermate: config urb returned -71 [ 103.119447][ T5805] usb 7-1: USB disconnect, device number 8 [ 103.119573][ C1] powermate: config urb returned -71 [ 103.119579][ C1] powermate: usb_submit_urb(config) failed [ 103.119610][ C1] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 103.754449][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'. [ 103.986753][ T8100] jffs2: notice: (8100) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 105.188044][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.946'. [ 105.232915][ T8126] jffs2: notice: (8126) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 106.317067][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.959'. [ 106.861140][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 106.861157][ T43] audit: type=1400 audit(1791172935.412:378): avc: denied { read write } for pid=8167 comm="syz.3.966" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 106.861305][ T43] audit: type=1400 audit(1791172935.412:379): avc: denied { open } for pid=8167 comm="syz.3.966" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 106.862762][ T43] audit: type=1400 audit(1791172935.412:380): avc: denied { ioctl } for pid=8167 comm="syz.3.966" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 106.863847][ T43] audit: type=1400 audit(1791172935.412:381): avc: denied { map } for pid=8167 comm="syz.3.966" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 107.109141][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.970'. [ 107.570313][ C1] net_ratelimit: 93 callbacks suppressed [ 107.587121][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.981'. [ 107.660431][ T35] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 107.810766][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 107.811248][ T35] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 107.812107][ T35] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 107.812130][ T35] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.812143][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.812157][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 107.814018][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.814028][ T35] usb 6-1: Product: syz [ 107.814036][ T35] usb 6-1: Manufacturer: syz [ 107.814044][ T35] usb 6-1: SerialNumber: syz [ 107.815696][ T35] usb 6-1: config 0 descriptor?? [ 107.816156][ T8198] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.837731][ T8210] input: syz1 as /devices/virtual/input/input68 [ 108.020007][ T35] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 108.025537][ T35] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input69 [ 108.223920][ C3] powermate: config urb returned -71 [ 108.224166][ C3] powermate: config urb returned -71 [ 108.224378][ C3] powermate: config urb returned -71 [ 108.224594][ C3] powermate: config urb returned -71 [ 108.224814][ C3] powermate: config urb returned -71 [ 108.225576][ T5876] usb 6-1: USB disconnect, device number 7 [ 108.225796][ C3] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 108.285873][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 108.511513][ T8230] input: syz1 as /devices/virtual/input/input70 [ 108.605890][ T43] audit: type=1400 audit(1791172937.152:382): avc: denied { read } for pid=8234 comm="syz.3.997" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 108.606062][ T43] audit: type=1400 audit(1791172937.152:383): avc: denied { open } for pid=8234 comm="syz.3.997" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 108.608432][ T43] audit: type=1400 audit(1791172937.152:384): avc: denied { ioctl } for pid=8234 comm="syz.3.997" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 108.610053][ T43] audit: type=1400 audit(1791172937.152:385): avc: denied { create } for pid=8234 comm="syz.3.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.610679][ T43] audit: type=1400 audit(1791172937.162:386): avc: denied { ioctl } for pid=8234 comm="syz.3.997" path="socket:[18431]" dev="sockfs" ino=18431 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.610924][ T43] audit: type=1400 audit(1791172937.162:387): avc: denied { connect } for pid=8234 comm="syz.3.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.796506][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1001'. [ 108.881333][ T8249] input: syz1 as /devices/virtual/input/input71 [ 109.296290][ T8270] input: syz1 as /devices/virtual/input/input72 [ 109.357352][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'. [ 109.380504][ T5805] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 109.540512][ T5805] usb 7-1: Using ep0 maxpacket: 8 [ 109.541733][ T5805] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 109.542557][ T5805] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 109.542582][ T5805] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 109.542596][ T5805] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 109.542619][ T5805] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 109.544193][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.544203][ T5805] usb 7-1: Product: syz [ 109.544211][ T5805] usb 7-1: Manufacturer: syz [ 109.544219][ T5805] usb 7-1: SerialNumber: syz [ 109.545745][ T5805] usb 7-1: config 0 descriptor?? [ 109.546190][ T8266] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 109.749797][ T5805] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 109.755357][ T5805] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input73 [ 109.956073][ C1] powermate: config urb returned -71 [ 109.956254][ C1] powermate: config urb returned -71 [ 109.956452][ C1] powermate: config urb returned -71 [ 109.956644][ C1] powermate: config urb returned -71 [ 109.956856][ C1] powermate: config urb returned -71 [ 109.960959][ T5876] usb 7-1: USB disconnect, device number 9 [ 109.961068][ C1] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 110.322018][ T8294] input: syz1 as /devices/virtual/input/input74 [ 110.389681][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 111.043601][ T8321] input: syz1 as /devices/virtual/input/input75 [ 111.099049][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1036'. [ 111.330442][ T5803] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 111.480703][ T5803] usb 8-1: Using ep0 maxpacket: 8 [ 111.481570][ T5803] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 111.482534][ T5803] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 111.482572][ T5803] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.482593][ T5803] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.482664][ T5803] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 111.485963][ T5803] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.485974][ T5803] usb 8-1: Product: syz [ 111.485985][ T5803] usb 8-1: Manufacturer: syz [ 111.485994][ T5803] usb 8-1: SerialNumber: syz [ 111.488455][ T5803] usb 8-1: config 0 descriptor?? [ 111.488989][ T8326] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 111.694739][ T5803] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 111.697917][ T5803] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input76 [ 111.868365][ T8344] input: syz1 as /devices/virtual/input/input77 [ 111.899132][ C1] powermate: config urb returned -71 [ 111.899325][ C1] powermate: config urb returned -71 [ 111.899530][ C1] powermate: config urb returned -71 [ 111.899711][ C1] powermate: config urb returned -71 [ 111.899893][ C1] powermate: config urb returned -71 [ 111.899974][ T9] usb 8-1: USB disconnect, device number 12 [ 111.900131][ C1] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 111.922520][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1047'. [ 112.600480][ C2] net_ratelimit: 237 callbacks suppressed [ 112.690360][ T5880] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 112.859389][ T8366] input: syz1 as /devices/virtual/input/input78 [ 112.867302][ T5880] usb 8-1: unable to get BOS descriptor or descriptor too short [ 112.867335][ T5880] usb 8-1: New USB device found, idVendor=0582, idProduct=0082, bcdDevice= 0.00 [ 112.867362][ T5880] usb 8-1: no configurations [ 112.867371][ T5880] usb 8-1: can't read configurations, error -22 [ 112.923769][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1058'. [ 113.321821][ T5805] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 113.480320][ T5805] usb 6-1: Using ep0 maxpacket: 8 [ 113.480784][ T5805] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 113.481705][ T5805] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 113.481744][ T5805] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.481766][ T5805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 30, changing to 8 [ 113.481789][ T5805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 113.483657][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.483672][ T5805] usb 6-1: Product: syz [ 113.483684][ T5805] usb 6-1: Manufacturer: syz [ 113.483696][ T5805] usb 6-1: SerialNumber: syz [ 113.486817][ T5805] usb 6-1: config 0 descriptor?? [ 113.487528][ T8380] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 113.586526][ T8388] input: syz1 as /devices/virtual/input/input79 [ 113.658932][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1068'. [ 113.688755][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 113.688817][ T43] audit: type=1400 audit(1791172942.232:389): avc: denied { create } for pid=8393 comm="syz.3.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.692438][ T43] audit: type=1400 audit(1791172942.242:390): avc: denied { setopt } for pid=8393 comm="syz.3.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.692484][ T43] audit: type=1400 audit(1791172942.242:391): avc: denied { bind } for pid=8393 comm="syz.3.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.692729][ T5805] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 113.692810][ T43] audit: type=1400 audit(1791172942.242:392): avc: denied { write } for pid=8393 comm="syz.3.1070" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.693031][ T43] audit: type=1400 audit(1791172942.242:393): avc: denied { connect } for pid=8393 comm="syz.3.1070" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.697217][ T5805] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input80 [ 113.899486][ C1] powermate: config urb returned -71 [ 113.899548][ T5876] usb 6-1: USB disconnect, device number 8 [ 113.899572][ C1] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 113.899964][ C1] powermate: config urb returned -71 [ 113.899974][ C1] powermate: usb_submit_urb(config) failed [ 114.504734][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1081'. [ 114.654883][ T5880] ipvlan_process_outbound: 1 callbacks suppressed [ 114.930026][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1092'. [ 114.970416][ T5803] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 115.130311][ T5803] usb 8-1: Using ep0 maxpacket: 8 [ 115.130864][ T5803] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 115.131749][ T5803] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 115.131784][ T5803] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.131804][ T5803] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 30, changing to 8 [ 115.131824][ T5803] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 115.133642][ T5803] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.133658][ T5803] usb 8-1: Product: syz [ 115.133669][ T5803] usb 8-1: Manufacturer: syz [ 115.133682][ T5803] usb 8-1: SerialNumber: syz [ 115.136513][ T5803] usb 8-1: config 0 descriptor?? [ 115.137239][ T8434] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 115.341950][ T5803] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 115.347907][ T5803] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input81 [ 115.543796][ C1] powermate: config urb returned -71 [ 115.544003][ C1] powermate: config urb returned -71 [ 115.544186][ C1] powermate: config urb returned -71 [ 115.544374][ C1] powermate: config urb returned -71 [ 115.544563][ C1] powermate: config urb returned -71 [ 115.546340][ T5729] usb 8-1: USB disconnect, device number 15 [ 115.546448][ C1] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 115.613446][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1101'. [ 116.015244][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1110'. [ 117.720318][ C0] net_ratelimit: 724 callbacks suppressed [ 119.237262][ T8597] netlink: 'syz.1.1166': attribute type 29 has an invalid length. [ 119.917787][ T8630] netlink: 'syz.2.1181': attribute type 29 has an invalid length. [ 119.950867][ T5876] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 120.130578][ T5876] usb 8-1: Using ep0 maxpacket: 8 [ 120.133485][ T5876] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 120.134540][ T5876] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 120.134577][ T5876] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.134597][ T5876] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 30, changing to 8 [ 120.134618][ T5876] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 120.138922][ T5876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.138938][ T5876] usb 8-1: Product: syz [ 120.138950][ T5876] usb 8-1: Manufacturer: syz [ 120.138962][ T5876] usb 8-1: SerialNumber: syz [ 120.141469][ T5876] usb 8-1: config 0 descriptor?? [ 120.142057][ T8628] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.311785][ T8663] kcov: kcov_task_exit: t = ffff888033bd0000, kcov->t = ffff888033bd0000 [ 120.312709][ T8665] kcov: kcov_start: t = ffff88802c248000, size = 524288, area = ffffc900078b1000 [ 120.312845][ T8665] ================================================================== [ 120.312852][ T8665] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 120.312869][ T8665] Read of size 8 at addr ffff88802e6d0a18 by task syz.2.1196/8665 [ 120.312879][ T8665] [ 120.312885][ T8665] CPU: 1 UID: 0 PID: 8665 Comm: syz.2.1196 Not tainted syzkaller #0 PREEMPT(full) [ 120.312900][ T8665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.312908][ T8665] Call Trace: [ 120.312913][ T8665] [ 120.312918][ T8665] dump_stack_lvl+0x100/0x190 [ 120.312935][ T8665] print_report+0x13d/0x4b0 [ 120.312952][ T8665] ? __virt_addr_valid+0x239/0x430 [ 120.312964][ T8665] ? dvb_device_open+0x33f/0x3b0 [ 120.312976][ T8665] kasan_report+0xdf/0x1c0 [ 120.312993][ T8665] ? dvb_device_open+0x33f/0x3b0 [ 120.313005][ T8665] ? __pfx_dvb_device_open+0x10/0x10 [ 120.313017][ T8665] dvb_device_open+0x33f/0x3b0 [ 120.313029][ T8665] ? __pfx_dvb_device_open+0x10/0x10 [ 120.313040][ T8665] chrdev_open+0x234/0x6a0 [ 120.313055][ T8665] ? __pfx_chrdev_open+0x10/0x10 [ 120.313070][ T8665] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 120.313083][ T8665] do_dentry_open+0x6ab/0x14d0 [ 120.313096][ T8665] ? __pfx_chrdev_open+0x10/0x10 [ 120.313112][ T8665] vfs_open+0x82/0x3f0 [ 120.313134][ T8665] path_openat+0x19fa/0x2440 [ 120.313151][ T8665] ? __pfx_path_openat+0x10/0x10 [ 120.313169][ T8665] do_file_open+0x20e/0x430 [ 120.313186][ T8665] ? __pfx_do_file_open+0x10/0x10 [ 120.313206][ T8665] ? _raw_spin_unlock+0x28/0x50 [ 120.313225][ T8665] ? alloc_fd+0x471/0x7a0 [ 120.313242][ T8665] do_sys_openat2+0x10f/0x1e0 [ 120.313258][ T8665] ? __pfx_do_sys_openat2+0x10/0x10 [ 120.313274][ T8665] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 120.313291][ T8665] __x64_sys_openat+0x12d/0x210 [ 120.313309][ T8665] ? __pfx___x64_sys_openat+0x10/0x10 [ 120.313329][ T8665] do_syscall_64+0x123/0x790 [ 120.313342][ T8665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.313354][ T8665] RIP: 0033:0x7f5c39f5e98e [ 120.313363][ T8665] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 120.313375][ T8665] RSP: 002b:00007f5c3af43b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 120.313387][ T8665] RAX: ffffffffffffffda RBX: 00007f5c3af446c0 RCX: 00007f5c39f5e98e [ 120.313395][ T8665] RDX: 0000000000040002 RSI: 00007f5c3af43c00 RDI: ffffffffffffff9c [ 120.313402][ T8665] RBP: 00007f5c3af43c00 R08: 0000000000000000 R09: 0000000000000000 [ 120.313409][ T8665] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 120.313417][ T8665] R13: 00007f5c3a226038 R14: 00007f5c3a225fa0 R15: 00007ffc49e3db68 [ 120.313427][ T8665] [ 120.313432][ T8665] [ 120.313434][ T8665] Allocated by task 1: [ 120.313440][ T8665] kasan_save_stack+0x30/0x50 [ 120.313454][ T8665] kasan_save_track+0x14/0x30 [ 120.313467][ T8665] __kasan_kmalloc+0xaa/0xb0 [ 120.313479][ T8665] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 120.313490][ T8665] dvb_register_device+0x1d6/0x1e20 [ 120.313500][ T8665] dvb_register_frontend+0x552/0x820 [ 120.313510][ T8665] vidtv_bridge_probe+0x44b/0xa30 [ 120.313524][ T8665] platform_probe+0x106/0x1d0 [ 120.313536][ T8665] really_probe+0x241/0xa60 [ 120.313550][ T8665] __driver_probe_device+0x210/0x460 [ 120.313564][ T8665] driver_probe_device+0x4a/0x140 [ 120.313578][ T8665] __driver_attach+0x21f/0x5b0 [ 120.313591][ T8665] bus_for_each_dev+0x13e/0x1d0 [ 120.313602][ T8665] bus_add_driver+0x305/0x5b0 [ 120.313613][ T8665] driver_register+0x1e2/0x360 [ 120.313628][ T8665] vidtv_bridge_init+0x52/0x80 [ 120.313639][ T8665] do_one_initcall+0x11c/0x6f0 [ 120.313650][ T8665] kernel_init_freeable+0x6ea/0x7b0 [ 120.313663][ T8665] kernel_init+0x21/0x1e0 [ 120.313676][ T8665] ret_from_fork+0x730/0xd60 [ 120.313687][ T8665] ret_from_fork_asm+0x1a/0x30 [ 120.313698][ T8665] [ 120.313701][ T8665] Freed by task 8620: [ 120.313706][ T8665] kasan_save_stack+0x30/0x50 [ 120.313718][ T8665] kasan_save_track+0x14/0x30 [ 120.313731][ T8665] kasan_save_free_info+0x3b/0x70 [ 120.313741][ T8665] __kasan_slab_free+0x5f/0x80 [ 120.313755][ T8665] kfree+0x22b/0x6d0 [ 120.313763][ T8665] dvb_device_put.part.0+0x57/0x90 [ 120.313774][ T8665] dvb_device_open+0x2ba/0x3b0 [ 120.313784][ T8665] chrdev_open+0x234/0x6a0 [ 120.313797][ T8665] do_dentry_open+0x6ab/0x14d0 [ 120.313809][ T8665] vfs_open+0x82/0x3f0 [ 120.313823][ T8665] path_openat+0x19fa/0x2440 [ 120.313836][ T8665] do_file_open+0x20e/0x430 [ 120.313852][ T8665] do_sys_openat2+0x10f/0x1e0 [ 120.313868][ T8665] __x64_sys_openat+0x12d/0x210 [ 120.313883][ T8665] do_syscall_64+0x123/0x790 [ 120.313894][ T8665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.313904][ T8665] [ 120.313907][ T8665] The buggy address belongs to the object at ffff88802e6d0a00 [ 120.313907][ T8665] which belongs to the cache kmalloc-256 of size 256 [ 120.313916][ T8665] The buggy address is located 24 bytes inside of [ 120.313916][ T8665] freed 256-byte region [ffff88802e6d0a00, ffff88802e6d0b00) [ 120.313926][ T8665] [ 120.313929][ T8665] The buggy address belongs to the physical page: [ 120.313934][ T8665] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e6d0 [ 120.313944][ T8665] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 120.313953][ T8665] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 120.313964][ T8665] page_type: f5(slab) [ 120.313973][ T8665] raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 120.313983][ T8665] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 120.313993][ T8665] head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 120.314003][ T8665] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 120.314013][ T8665] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 120.314022][ T8665] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 120.314029][ T8665] page dumped because: kasan: bad access detected [ 120.314034][ T8665] page_owner tracks the page as allocated [ 120.314038][ T8665] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8138535930 [ 120.314056][ T8665] post_alloc_hook+0xfd/0x120 [ 120.314067][ T8665] get_page_from_freelist+0x110d/0x35d0 [ 120.314079][ T8665] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 120.314091][ T8665] new_slab+0xa9/0x6e0 [ 120.314100][ T8665] refill_objects+0xe3/0x410 [ 120.314110][ T8665] __pcs_replace_empty_main+0x35e/0x650 [ 120.314120][ T8665] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 120.314139][ T8665] bus_add_driver+0x92/0x5b0 [ 120.314152][ T8665] driver_register+0x1e2/0x360 [ 120.314168][ T8665] i2c_register_driver+0xd9/0x1f0 [ 120.314180][ T8665] do_one_initcall+0x11c/0x6f0 [ 120.314192][ T8665] kernel_init_freeable+0x6ea/0x7b0 [ 120.314206][ T8665] kernel_init+0x21/0x1e0 [ 120.314220][ T8665] ret_from_fork+0x730/0xd60 [ 120.314232][ T8665] ret_from_fork_asm+0x1a/0x30 [ 120.314243][ T8665] page_owner free stack trace missing [ 120.314248][ T8665] [ 120.314250][ T8665] Memory state around the buggy address: [ 120.314256][ T8665] ffff88802e6d0900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.314264][ T8665] ffff88802e6d0980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.314271][ T8665] >ffff88802e6d0a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.314278][ T8665] ^ [ 120.314284][ T8665] ffff88802e6d0a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.314291][ T8665] ffff88802e6d0b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.314298][ T8665] ================================================================== [ 120.314304][ T8665] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 120.595779][ T8665] CPU: 1 UID: 0 PID: 8665 Comm: syz.2.1196 Not tainted syzkaller #0 PREEMPT(full) [ 120.598679][ T8665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.602203][ T8665] Call Trace: [ 120.603278][ T8665] [ 120.604254][ T8665] dump_stack_lvl+0x100/0x190 [ 120.605761][ T8665] vpanic+0x553/0x970 [ 120.607041][ T8665] ? __pfx_vpanic+0x10/0x10 [ 120.608506][ T8665] ? __pfx_vprintk_emit+0x10/0x10 [ 120.610153][ T8665] ? dvb_device_open+0x33f/0x3b0 [ 120.611727][ T8665] panic+0xd1/0xe0 [ 120.612944][ T8665] ? __pfx_panic+0x10/0x10 [ 120.614376][ T8665] ? dvb_device_open+0x33f/0x3b0 [ 120.615963][ T8665] check_panic_on_warn.cold+0x19/0x34 [ 120.617665][ T8665] end_report.part.0+0x3a/0x90 [ 120.619192][ T8665] kasan_report.cold+0xe/0x18 [ 120.620744][ T8665] ? dvb_device_open+0x33f/0x3b0 [ 120.622327][ T8665] ? __pfx_dvb_device_open+0x10/0x10 [ 120.623995][ T8665] dvb_device_open+0x33f/0x3b0 [ 120.625510][ T8665] ? __pfx_dvb_device_open+0x10/0x10 [ 120.627186][ T8665] chrdev_open+0x234/0x6a0 [ 120.628615][ T8665] ? __pfx_chrdev_open+0x10/0x10 [ 120.630211][ T8665] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 120.632214][ T8665] do_dentry_open+0x6ab/0x14d0 [ 120.633727][ T8665] ? __pfx_chrdev_open+0x10/0x10 [ 120.635291][ T8665] vfs_open+0x82/0x3f0 [ 120.636596][ T8665] path_openat+0x19fa/0x2440 [ 120.638073][ T8665] ? __pfx_path_openat+0x10/0x10 [ 120.639660][ T8665] do_file_open+0x20e/0x430 [ 120.641131][ T8665] ? __pfx_do_file_open+0x10/0x10 [ 120.642727][ T8665] ? _raw_spin_unlock+0x28/0x50 [ 120.644299][ T8665] ? alloc_fd+0x471/0x7a0 [ 120.645678][ T8665] do_sys_openat2+0x10f/0x1e0 [ 120.647178][ T8665] ? __pfx_do_sys_openat2+0x10/0x10 [ 120.648835][ T8665] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 120.650885][ T8665] __x64_sys_openat+0x12d/0x210 [ 120.652445][ T8665] ? __pfx___x64_sys_openat+0x10/0x10 [ 120.654148][ T8665] do_syscall_64+0x123/0x790 [ 120.655622][ T8665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.657494][ T8665] RIP: 0033:0x7f5c39f5e98e [ 120.658910][ T8665] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 120.664547][ T8665] RSP: 002b:00007f5c3af43b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 120.667150][ T8665] RAX: ffffffffffffffda RBX: 00007f5c3af446c0 RCX: 00007f5c39f5e98e [ 120.669640][ T8665] RDX: 0000000000040002 RSI: 00007f5c3af43c00 RDI: ffffffffffffff9c [ 120.672157][ T8665] RBP: 00007f5c3af43c00 R08: 0000000000000000 R09: 0000000000000000 [ 120.674562][ T8665] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 120.677028][ T8665] R13: 00007f5c3a226038 R14: 00007f5c3a225fa0 R15: 00007ffc49e3db68 [ 120.679529][ T8665] [ 120.681143][ T8665] Kernel Offset: disabled [ 120.682511][ T8665] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:02:29 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88805898f408 RCX=0000000000000000 RDX=ffff88802b502580 RSI=ffffffff89974c58 RDI=ffff88805898f408 RBP=0000000000000293 RSP=ffffc900051b74a8 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=ffff88805869a000 R13=ffff88805898f408 R14=0000000000000000 R15=00000000000000d0 RIP=ffffffff8214a186 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fcada2d9c80 ffffffff 00c00000 GS =0000 ffff8880d5b4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5c3a227dac CR3=0000000031669000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000081000 Opmask01=0000000000000000 Opmask02=00000000f0400000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558064cf3600 0000558064cf3600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1b047570 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 776f5f6567617020 5d3536363854205b 5d3433303431332e 30323120205b203a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3830206365203338 2038342030302030 3020303020303020 3038206631206630 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2030302030302030 3020303020303020 3438206631206630 206532203636203e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33633c2035302066 3020383020343220 6335203938206334 2030312034322063 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3420623820633420 3830203432203434 2062382063342061 6320393820643420 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000079 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b1c805 RDI=ffffffff9bc76fa0 RBP=ffffffff9bc76f60 RSP=ffffc900037670e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000079 R14=0000000000000008 R15=ffffc90003767400 RIP=ffffffff85b1c82f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5c3af446c0 ffffffff 00c00000 GS =0000 ffff8880d5c4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5c39f87780 CR3=000000005aea3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=00000000ffffffff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc49e3e056 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc49e3e056 00007ffc49e3e05c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c3a03564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c3a03568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c3a0357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c3a035680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c3a1f25f8 00007f5c3a1f25c8 00007f5c3a1f2600 00007f5c3a1f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff92a16486 RBX=0000000000000001 RCX=ffffffff8bd3ba50 RDX=0000000000000003 RSI=ffffffff92a16486 RDI=ffffffff91d9b528 RBP=ffffc900006588e0 RSP=ffffc90000658820 R8 =ffffffff92a16498 R9 =0000000000000007 R10=0000000000000200 R11=00000000000ad3ba R12=ffffc900006588e8 R13=ffffc90000658898 R14=ffffc900006588cd R15=ffffffff8bd3ba50 RIP=ffffffff81b9a9b0 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b32822ff8 CR3=000000002c9ec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000000000040 Opmask03=0000000000000000 Opmask04=00000000ffffffbf Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfc9a261b 00007ffdfc9a261b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfc9a2b20 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfc9a2b20 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f7c4e5241574f4e 5f5046475f5f7c53 465f5046475f5f7c 4f495f5046475f5f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3033393533353833 3138207374202c29 302f726570706177 7328203120646967 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74202c3120646970 202c29434f4c4c41 4d454d4f4e5f5046 475f5f7c504d4f43 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f5046475f5f7c59 525445524f4e5f50 46475f5f7c4e5241 574f4e5f5046475f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f7c53465f504647 5f5f7c4f495f5046 475f5f2830633032 647830206b73616d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33393878303d646d 636c74636f692031 333438313d6f6e69 202273666b636f73 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffffea00014de200 RCX=ffffffff82647117 RDX=0000000000000001 RSI=0000000000000004 RDI=ffffea00014de234 RBP=ffffea00014de234 RSP=ffffc900034b74f8 R8 =0000000000000001 R9 =fffff9400029bc46 R10=ffffea00014de237 R11=0000000000000001 R12=0000000000000082 R13=0000000000000000 R14=ffff8880514bac08 R15=ffffea00014de200 RIP=ffffffff8264711b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555593d8f500 ffffffff 00c00000 GS =0000 ffff8880d5e4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2479f556c8 CR3=00000000514b1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 317a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc45dd58d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc45dd58d6 00007ffc45dd58dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f247923564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f247923568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24792357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2479235680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000