last executing test programs: 16.494500117s ago: executing program 3 (id=689): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201500242864220"], 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 15.290920577s ago: executing program 3 (id=704): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001e40)=@newchain={0x84, 0x64, 0xf09d2fbf8b68c555, 0x70bd07, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0xfff1, 0x1}, {0x9, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0xa}}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_pedit={0x30, 0xb, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x44801) 15.152718399s ago: executing program 3 (id=708): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x601, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[r3], &(0x7f0000000580)}) 15.023555043s ago: executing program 3 (id=709): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xa, 0xffffffff}) read$FUSE(r0, &(0x7f000000c400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0x0, 0x6, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7}}, 0x50) 14.890646316s ago: executing program 3 (id=712): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e601bae74656e642c6163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000000)) read$alg(r0, &(0x7f0000000280)=""/137, 0xfe7a) 14.634776136s ago: executing program 3 (id=718): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) connect$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) accept(r0, 0x0, 0x0) 6.395058017s ago: executing program 0 (id=765): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6.264413054s ago: executing program 0 (id=766): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) openat$mixer(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000240)={0x20, 0x12}, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x200, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 5.407130489s ago: executing program 1 (id=775): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x14d002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) close_range(r0, 0xffffffffffffffff, 0x0) 5.155742645s ago: executing program 1 (id=777): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 4.74380091s ago: executing program 1 (id=778): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0844123, &(0x7f0000000180)=0x4) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000300)=0x4) 4.64375181s ago: executing program 1 (id=779): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) 4.575170056s ago: executing program 1 (id=780): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="c1000000da7ff40d5c0cf5", 0xb}, {&(0x7f0000000000)="0f88a8", 0x3}, {&(0x7f0000000200)="1df39aa5910441", 0x7}], 0x3) 4.268881905s ago: executing program 2 (id=782): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3.895537375s ago: executing program 0 (id=783): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 3.784550869s ago: executing program 2 (id=784): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000001ed602, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.405904383s ago: executing program 0 (id=785): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x7, 0x20, 0x8, 0x2, {{0x27, 0x4, 0x3, 0xf, 0x9c, 0x68, 0x0, 0x20, 0x0, 0x0, @broadcast, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0xa0, 0x3, 0x5, [{@local, 0x5}, {@multicast2, 0x2}, {@empty, 0xef1f}, {@local, 0x21}, {@empty, 0xfffffffa}, {@remote, 0x69c1}, {@multicast1, 0x2}]}, @noop, @rr={0x7, 0x17, 0xb1, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1]}, @rr={0x7, 0x1f, 0xb8, [@loopback, @loopback, @local, @multicast1, @multicast2, @private=0xa010101, @remote]}, @timestamp={0x44, 0xc, 0x79, 0x0, 0x6, [0x0, 0x5]}, @noop]}}}}}) syz_emit_ethernet(0x82, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd6000000000483a00fe800000000000000000000000000018ff02000000000000000000000000000102009078000005006050835900000000fc0100000000000000f7000000000000ff0200000000000000000000000000013a0100000000000007080000000000008000000000000000"], 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x12, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 3.324805508s ago: executing program 2 (id=786): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000500000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) fchdir(r1) sendmmsg$unix(r0, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) 3.155554571s ago: executing program 2 (id=787): memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000b2000040"]) 2.883474507s ago: executing program 2 (id=788): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffffffb}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) 330.276773ms ago: executing program 0 (id=789): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x62102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x3) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r3, 0x10, 0x2, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 301.808962ms ago: executing program 1 (id=790): syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ea, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a51080002"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 182.784049ms ago: executing program 2 (id=791): syz_usb_connect(0x1, 0x2d, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 0s ago: executing program 0 (id=792): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x1000, 0x10000, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000, 0x800, 0xfffffffd], [0x0, 0x1001000, 0xfffffffc], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x1, [r4, 0x0, 0x0, r5], [0x2b8], [0x0, 0x0, 0x0, 0x1]}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:51305' (ED25519) to the list of known hosts. [ 39.055214][ T40] audit: type=1400 audit(1751654577.252:62): avc: denied { name_bind } for pid=5868 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.073084][ T40] audit: type=1400 audit(1751654577.272:63): avc: denied { write } for pid=5869 comm="sh" path="pipe:[6393]" dev="pipefs" ino=6393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.092074][ T40] audit: type=1400 audit(1751654577.292:64): avc: denied { execute } for pid=5869 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.098848][ T40] audit: type=1400 audit(1751654577.292:65): avc: denied { execute_no_trans } for pid=5869 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.126778][ T40] audit: type=1400 audit(1751654580.322:66): avc: denied { mounton } for pid=5869 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.127277][ T5869] cgroup: Unknown subsys name 'net' [ 42.363594][ T5869] cgroup: Unknown subsys name 'cpuset' [ 42.375109][ T5869] cgroup: Unknown subsys name 'rlimit' [ 42.840855][ T5938] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.347674][ T5869] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.033572][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 52.033587][ T40] audit: type=1400 audit(1751654590.212:80): avc: denied { execmem } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.546148][ T40] audit: type=1400 audit(1751654590.742:81): avc: denied { create } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.559634][ T40] audit: type=1400 audit(1751654590.742:82): avc: denied { read write } for pid=5947 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.577534][ T40] audit: type=1400 audit(1751654590.742:83): avc: denied { open } for pid=5947 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.602374][ T40] audit: type=1400 audit(1751654590.752:84): avc: denied { ioctl } for pid=5947 comm="syz-executor" path="socket:[6407]" dev="sockfs" ino=6407 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.640620][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.646566][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.650056][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.660160][ T5959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.663545][ T5956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.663723][ T5959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.667478][ T5957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.668867][ T5956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.669696][ T5956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.670754][ T5956] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.693994][ T5956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.695312][ T40] audit: type=1400 audit(1751654590.882:85): avc: denied { read } for pid=5947 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.699804][ T5956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.711879][ T5963] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.715144][ T40] audit: type=1400 audit(1751654590.882:86): avc: denied { open } for pid=5947 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.741988][ T5963] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.755632][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.757308][ T40] audit: type=1400 audit(1751654590.882:87): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.757541][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.758845][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.766825][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.828195][ T5963] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.834007][ T5963] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.970078][ T40] audit: type=1400 audit(1751654591.172:88): avc: denied { module_request } for pid=5947 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.057283][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 53.464219][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 53.496018][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.515614][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.519103][ T5947] bridge_slave_0: entered allmulticast mode [ 53.528354][ T5947] bridge_slave_0: entered promiscuous mode [ 53.541532][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.544769][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.548691][ T5947] bridge_slave_1: entered allmulticast mode [ 53.567257][ T5947] bridge_slave_1: entered promiscuous mode [ 53.801915][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.813825][ T5960] chnl_net:caif_netlink_parms(): no params data found [ 53.853193][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.184380][ T5947] team0: Port device team_slave_0 added [ 54.195867][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.198715][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.202244][ T5951] bridge_slave_0: entered allmulticast mode [ 54.206177][ T5951] bridge_slave_0: entered promiscuous mode [ 54.210796][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.232134][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.235261][ T5951] bridge_slave_1: entered allmulticast mode [ 54.264231][ T5951] bridge_slave_1: entered promiscuous mode [ 54.271948][ T5947] team0: Port device team_slave_1 added [ 54.417013][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 54.596487][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.603276][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.606043][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.619965][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.697467][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.700059][ T5952] Bluetooth: hci0: command tx timeout [ 54.753784][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.759347][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.762734][ T5960] bridge_slave_0: entered allmulticast mode [ 54.767373][ T5960] bridge_slave_0: entered promiscuous mode [ 54.773626][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.777023][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.779289][ T5952] Bluetooth: hci3: command tx timeout [ 54.784964][ T5963] Bluetooth: hci1: command tx timeout [ 54.789240][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.855753][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.858536][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.861969][ T5960] bridge_slave_1: entered allmulticast mode [ 54.865906][ T5960] bridge_slave_1: entered promiscuous mode [ 54.869206][ T5952] Bluetooth: hci2: command tx timeout [ 54.887572][ T5951] team0: Port device team_slave_0 added [ 54.894468][ T5951] team0: Port device team_slave_1 added [ 55.085850][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.088864][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.117267][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.227515][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.279713][ T5947] hsr_slave_0: entered promiscuous mode [ 55.305768][ T5947] hsr_slave_1: entered promiscuous mode [ 55.313494][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.316288][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.333111][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.355862][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.362116][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.365164][ T5954] bridge_slave_0: entered allmulticast mode [ 55.368935][ T5954] bridge_slave_0: entered promiscuous mode [ 55.376555][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.436105][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.438882][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.442958][ T5954] bridge_slave_1: entered allmulticast mode [ 55.454631][ T5954] bridge_slave_1: entered promiscuous mode [ 55.700560][ T5951] hsr_slave_0: entered promiscuous mode [ 55.711835][ T5951] hsr_slave_1: entered promiscuous mode [ 55.719541][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.723468][ T5951] Cannot create hsr debugfs directory [ 55.782655][ T5960] team0: Port device team_slave_0 added [ 55.800660][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.809317][ T5960] team0: Port device team_slave_1 added [ 55.916241][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.085429][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.088083][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.099846][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.113940][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.123144][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.151214][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.296675][ T5954] team0: Port device team_slave_0 added [ 56.387524][ T5954] team0: Port device team_slave_1 added [ 56.676018][ T5960] hsr_slave_0: entered promiscuous mode [ 56.681548][ T5960] hsr_slave_1: entered promiscuous mode [ 56.685320][ T5960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.690057][ T5960] Cannot create hsr debugfs directory [ 56.699268][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.701893][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.716727][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.754215][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.757987][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.790831][ T5952] Bluetooth: hci0: command tx timeout [ 56.800759][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.869265][ T5952] Bluetooth: hci3: command tx timeout [ 56.871013][ T5963] Bluetooth: hci1: command tx timeout [ 56.939304][ T5963] Bluetooth: hci2: command tx timeout [ 57.106570][ T5954] hsr_slave_0: entered promiscuous mode [ 57.110107][ T5954] hsr_slave_1: entered promiscuous mode [ 57.115292][ T5954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.121488][ T5954] Cannot create hsr debugfs directory [ 57.409952][ T5947] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.498727][ T5947] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.634334][ T5947] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.695110][ T5947] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.767719][ T5951] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.865617][ T5951] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.933503][ T5951] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.963957][ T5951] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.010047][ T5960] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.050724][ T5960] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.099103][ T5960] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.112371][ T5960] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.208756][ T5954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.272173][ T5954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.285441][ T5954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.307451][ T5954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.351747][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.400892][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.458629][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.474853][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.498146][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.503447][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.514553][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.518771][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.592128][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.595188][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.630550][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.641183][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.680878][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.781213][ T5951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.800770][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.814795][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.818329][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.851192][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.860325][ T5963] Bluetooth: hci0: command tx timeout [ 58.874166][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.899790][ T40] audit: type=1400 audit(1751654597.092:89): avc: denied { sys_module } for pid=5951 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 58.926287][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.941534][ T5963] Bluetooth: hci3: command tx timeout [ 58.955086][ T5952] Bluetooth: hci1: command tx timeout [ 58.984785][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.037577][ T5952] Bluetooth: hci2: command tx timeout [ 59.113238][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.116094][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.123522][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.126684][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.196403][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.272981][ T5954] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.312011][ T5954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.334742][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.412151][ T5951] veth0_vlan: entered promiscuous mode [ 59.421351][ T5951] veth1_vlan: entered promiscuous mode [ 59.507250][ T5951] veth0_macvtap: entered promiscuous mode [ 59.517806][ T5947] veth0_vlan: entered promiscuous mode [ 59.548623][ T5947] veth1_vlan: entered promiscuous mode [ 59.576942][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.583068][ T5951] veth1_macvtap: entered promiscuous mode [ 59.630295][ T5947] veth0_macvtap: entered promiscuous mode [ 59.637023][ T5947] veth1_macvtap: entered promiscuous mode [ 59.702563][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.743853][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.754116][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.778890][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.811500][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.828918][ T5947] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.832572][ T5947] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.835838][ T5947] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.841878][ T5947] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.924428][ T5951] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.928382][ T5951] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.935952][ T5951] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.958565][ T5951] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.992166][ T5960] veth0_vlan: entered promiscuous mode [ 60.142485][ T5954] veth0_vlan: entered promiscuous mode [ 60.151133][ T5954] veth1_vlan: entered promiscuous mode [ 60.157455][ T5960] veth1_vlan: entered promiscuous mode [ 60.201878][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.207084][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.404158][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.407462][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.461093][ T5954] veth0_macvtap: entered promiscuous mode [ 60.467620][ T5954] veth1_macvtap: entered promiscuous mode [ 60.473976][ T5960] veth0_macvtap: entered promiscuous mode [ 60.483277][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.486992][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.552596][ T40] audit: type=1400 audit(1751654598.742:90): avc: denied { mount } for pid=5947 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.558540][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.585638][ T40] audit: type=1400 audit(1751654598.742:91): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/syzkaller.hEKQBt/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.634411][ T40] audit: type=1400 audit(1751654598.742:92): avc: denied { mount } for pid=5947 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 60.634377][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.639377][ T5960] veth1_macvtap: entered promiscuous mode [ 60.651491][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.662061][ T40] audit: type=1400 audit(1751654598.742:93): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/syzkaller.hEKQBt/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 60.662111][ T40] audit: type=1400 audit(1751654598.742:94): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/syzkaller.hEKQBt/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 60.662154][ T40] audit: type=1400 audit(1751654598.802:95): avc: denied { unmount } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.672803][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.699234][ T40] audit: type=1400 audit(1751654598.882:96): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 60.714962][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.735488][ T40] audit: type=1400 audit(1751654598.882:97): avc: denied { mount } for pid=5947 comm="syz-executor" name="/" dev="gadgetfs" ino=8037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 60.793445][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.820176][ T40] audit: type=1400 audit(1751654598.882:98): avc: denied { mount } for pid=5947 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 60.833292][ T5947] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.911899][ T5960] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.917255][ T5960] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.944098][ T5952] Bluetooth: hci0: command tx timeout [ 60.945963][ T5960] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.951539][ T5960] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.957248][ T5954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.961738][ T5954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.977284][ T5954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.981218][ T5954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.026139][ T5952] Bluetooth: hci3: command tx timeout [ 61.029957][ T5952] Bluetooth: hci1: command tx timeout [ 61.147380][ T5952] Bluetooth: hci2: command tx timeout [ 61.464434][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.468771][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.558010][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.561870][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.685771][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.695005][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.745618][ T1228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.759126][ T1228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.954536][ T6056] loop2: detected capacity change from 0 to 7 [ 61.962957][ T6056] Dev loop2: unable to read RDB block 7 [ 62.009811][ T6056] loop2: AHDI p1 p2 p3 [ 62.012745][ T6056] loop2: partition table partially beyond EOD, truncated [ 62.016298][ T6056] loop2: p1 start 1601398130 is beyond EOD, truncated [ 62.037214][ T6056] loop2: p2 start 1702059890 is beyond EOD, truncated [ 62.044685][ T6056] loop2: detected capacity change from 7 to 15 [ 62.697275][ T6079] xt_hashlimit: size too large, truncated to 1048576 [ 63.832348][ T24] IPVS: starting estimator thread 0... [ 63.978188][ T6126] IPVS: using max 28 ests per chain, 67200 per kthread [ 64.008592][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 64.008608][ T40] audit: type=1400 audit(1751654602.202:163): avc: denied { name_bind } for pid=6131 comm="syz.2.34" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 64.029249][ T40] audit: type=1400 audit(1751654602.202:164): avc: denied { node_bind } for pid=6131 comm="syz.2.34" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 64.089329][ T6045] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.249220][ T6045] usb 5-1: Using ep0 maxpacket: 8 [ 64.263568][ T6045] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 64.267139][ T6045] usb 5-1: config 179 has no interface number 0 [ 64.271768][ T6045] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 64.298889][ T6045] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 64.308504][ T6045] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 64.349594][ T6045] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 64.373811][ T6045] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 64.394406][ T6045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.438963][ T6124] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.662537][ C0] vkms_vblank_simulate: vblank timer overrun [ 64.731083][ T6045] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input5 [ 64.754168][ T40] audit: type=1400 audit(1751654602.942:165): avc: denied { read } for pid=5346 comm="acpid" name="js0" dev="devtmpfs" ino=2846 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.818788][ T40] audit: type=1400 audit(1751654602.942:166): avc: denied { open } for pid=5346 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2846 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.897328][ T40] audit: type=1400 audit(1751654602.942:167): avc: denied { ioctl } for pid=5346 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2846 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.919903][ T40] audit: type=1400 audit(1751654603.072:168): avc: denied { read append } for pid=6141 comm="syz.2.38" name="sg1" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 64.952918][ C0] vkms_vblank_simulate: vblank timer overrun [ 64.958779][ T40] audit: type=1400 audit(1751654603.072:169): avc: denied { open } for pid=6141 comm="syz.2.38" path="/dev/sg1" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 64.970635][ T40] audit: type=1400 audit(1751654603.092:170): avc: denied { ioctl } for pid=6141 comm="syz.2.38" path="/dev/sg1" dev="devtmpfs" ino=727 ioctlcmd=0x5386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 65.017328][ T6043] usb 5-1: USB disconnect, device number 2 [ 65.022748][ C3] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 65.040837][ C3] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 65.080848][ C0] vkms_vblank_simulate: vblank timer overrun [ 65.164536][ T40] audit: type=1400 audit(1751654603.362:171): avc: denied { ioctl } for pid=6148 comm="syz.1.41" path="socket:[6133]" dev="sockfs" ino=6133 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.164866][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 65.473528][ T40] audit: type=1400 audit(1751654603.662:172): avc: denied { override_creds } for pid=6154 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 65.490580][ T6157] netem: incorrect gi model size [ 65.493703][ T6157] netem: change failed [ 65.641256][ T6159] input: syz1 as /devices/virtual/input/input6 [ 65.737273][ C0] vkms_vblank_simulate: vblank timer overrun [ 65.916738][ C0] vkms_vblank_simulate: vblank timer overrun [ 66.110480][ C0] vkms_vblank_simulate: vblank timer overrun [ 66.113983][ T6173] syz.1.52 uses obsolete (PF_INET,SOCK_PACKET) [ 66.292098][ C0] vkms_vblank_simulate: vblank timer overrun [ 66.521987][ T6179] binder: 6178:6179 ioctl c0306201 2000000003c0 returned -14 [ 67.357661][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.63'. [ 67.365232][ T6199] netlink: 'syz.0.63': attribute type 5 has an invalid length. [ 67.425484][ T6199] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.451172][ T6199] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.465580][ T6199] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.487552][ T6199] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.572095][ T6199] vxlan0: entered promiscuous mode [ 68.350559][ C2] vkms_vblank_simulate: vblank timer overrun [ 68.518538][ C2] vkms_vblank_simulate: vblank timer overrun [ 68.575455][ T6229] netlink: 104 bytes leftover after parsing attributes in process `syz.3.77'. [ 68.771894][ T6233] netlink: 'syz.3.78': attribute type 2 has an invalid length. [ 68.790142][ T6233] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.78'. [ 68.794755][ T6233] nbd: must specify a device to reconfigure [ 69.561112][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 69.561128][ T40] audit: type=1400 audit(1751654607.752:212): avc: denied { mounton } for pid=6249 comm="syz.0.86" path="/20/file0" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.718846][ C2] vkms_vblank_simulate: vblank timer overrun [ 69.843313][ T40] audit: type=1400 audit(1751654608.042:213): avc: denied { create } for pid=6258 comm="syz.1.90" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.867973][ C2] vkms_vblank_simulate: vblank timer overrun [ 69.897621][ T40] audit: type=1400 audit(1751654608.092:214): avc: denied { write } for pid=6258 comm="syz.1.90" name="file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.917863][ C2] vkms_vblank_simulate: vblank timer overrun [ 69.947723][ T40] audit: type=1400 audit(1751654608.092:215): avc: denied { open } for pid=6258 comm="syz.1.90" path="/24/file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.972394][ C2] vkms_vblank_simulate: vblank timer overrun [ 69.977126][ T40] audit: type=1400 audit(1751654608.092:216): avc: denied { ioctl } for pid=6258 comm="syz.1.90" path="/24/file0" dev="tmpfs" ino=140 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.002619][ C2] vkms_vblank_simulate: vblank timer overrun [ 70.182641][ T40] audit: type=1400 audit(1751654608.372:217): avc: denied { unlink } for pid=5947 comm="syz-executor" name="file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.226703][ T40] audit: type=1400 audit(1751654608.372:218): avc: denied { name_bind } for pid=6266 comm="syz.2.92" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 70.277792][ T6270] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.95'. [ 70.398780][ T6275] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.96'. [ 70.575275][ T40] audit: type=1400 audit(1751654608.772:219): avc: denied { mount } for pid=6278 comm="syz.3.98" name="/" dev="autofs" ino=10456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 70.612352][ T40] audit: type=1400 audit(1751654608.812:220): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 70.698570][ T40] audit: type=1400 audit(1751654608.882:221): avc: denied { bind } for pid=6285 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.034440][ C2] vkms_vblank_simulate: vblank timer overrun [ 71.063446][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.066525][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.707814][ C2] vkms_vblank_simulate: vblank timer overrun [ 71.921646][ C2] vkms_vblank_simulate: vblank timer overrun [ 71.978693][ T6327] input: syz0 as /devices/virtual/input/input7 [ 72.147430][ T6328] bridge0: port 3(syz_tun) entered blocking state [ 72.188877][ T6328] bridge0: port 3(syz_tun) entered disabled state [ 72.193031][ T6328] syz_tun: entered allmulticast mode [ 72.248299][ T6328] syz_tun: entered promiscuous mode [ 72.253344][ T6328] bridge0: port 3(syz_tun) entered blocking state [ 72.257614][ T6328] bridge0: port 3(syz_tun) entered forwarding state [ 72.673794][ T6355] netlink: 28 bytes leftover after parsing attributes in process `syz.2.122'. [ 72.684507][ T6355] netlink: 'syz.2.122': attribute type 7 has an invalid length. [ 72.707970][ T6355] netlink: 'syz.2.122': attribute type 8 has an invalid length. [ 72.737142][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.122'. [ 72.745558][ T6355] erspan0: entered promiscuous mode [ 72.748565][ T6355] batadv_slave_1: entered promiscuous mode [ 72.796401][ T6355] gretap0: entered promiscuous mode [ 73.331355][ T6384] netlink: 28 bytes leftover after parsing attributes in process `syz.2.133'. [ 73.526508][ C3] vkms_vblank_simulate: vblank timer overrun [ 73.638440][ C3] vkms_vblank_simulate: vblank timer overrun [ 74.138436][ C3] vkms_vblank_simulate: vblank timer overrun [ 74.353064][ T6421] process 'syz.3.145' launched '/dev/fd/4' with NULL argv: empty string added [ 74.460396][ T5305] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 74.461591][ T5952] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.486604][ T5305] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 74.490369][ C3] vkms_vblank_simulate: vblank timer overrun [ 74.590422][ C3] vkms_vblank_simulate: vblank timer overrun [ 74.629119][ T6043] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 74.781482][ T6043] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 74.786096][ T6043] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 74.800415][ T6043] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 74.822131][ T6043] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.848100][ T6428] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 74.880407][ T6043] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 75.077385][ T24] usb 7-1: USB disconnect, device number 2 [ 75.349671][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 75.349689][ T40] audit: type=1400 audit(1751654613.542:256): avc: denied { execute } for pid=6448 comm="syz.1.155" path="/38/cpu.stat" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.583486][ T40] audit: type=1400 audit(1751654613.782:257): avc: denied { mount } for pid=6453 comm="syz.1.157" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.611730][ C3] vkms_vblank_simulate: vblank timer overrun [ 75.669075][ T40] audit: type=1400 audit(1751654613.822:258): avc: denied { setopt } for pid=6455 comm="syz.0.158" lport=47779 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 75.680542][ T40] audit: type=1400 audit(1751654613.842:259): avc: denied { unmount } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.757840][ T6460] netlink: 56 bytes leftover after parsing attributes in process `syz.1.159'. [ 75.766411][ T40] audit: type=1400 audit(1751654613.952:260): avc: denied { setopt } for pid=6457 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.858721][ T40] audit: type=1400 audit(1751654614.052:261): avc: denied { create } for pid=6465 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 75.909606][ T40] audit: type=1400 audit(1751654614.062:262): avc: denied { connect } for pid=6465 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 75.936200][ T40] audit: type=1400 audit(1751654614.112:263): avc: denied { listen } for pid=6465 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 75.965684][ C3] vkms_vblank_simulate: vblank timer overrun [ 75.978100][ T40] audit: type=1400 audit(1751654614.132:264): avc: denied { add_name } for pid=6463 comm="syz.0.162" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.017664][ T40] audit: type=1400 audit(1751654614.132:265): avc: denied { create } for pid=6463 comm="syz.0.162" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.070470][ T837] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 76.146372][ C3] vkms_vblank_simulate: vblank timer overrun [ 76.233659][ T837] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 76.241472][ T837] usb 6-1: config 0 has no interface number 0 [ 76.241848][ T6478] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.253550][ T837] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 76.283650][ T837] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 76.291753][ C3] vkms_vblank_simulate: vblank timer overrun [ 76.294081][ T837] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 76.294189][ T837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.315618][ T837] usb 6-1: config 0 descriptor?? [ 76.321147][ T6462] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.365436][ T837] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 76.583097][ C2] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 76.590235][ T24] usb 6-1: USB disconnect, device number 2 [ 76.699459][ T5952] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.700889][ T5305] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 76.705728][ T5305] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 78.074523][ C3] vkms_vblank_simulate: vblank timer overrun [ 78.273683][ T6533] Zero length message leads to an empty skb [ 78.689256][ T1468] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 78.783770][ T5305] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 78.786926][ T5305] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 78.872055][ T1468] usb 7-1: Using ep0 maxpacket: 16 [ 78.904770][ T1468] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.926565][ T1468] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.933773][ T1468] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 78.964442][ T1468] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 78.980513][ T1468] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.986975][ T1468] usb 7-1: config 0 descriptor?? [ 79.029200][ T837] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 79.181465][ T837] usb 8-1: Using ep0 maxpacket: 8 [ 79.186513][ T837] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 79.190646][ T837] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.208729][ T837] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 79.228217][ T837] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.250460][ T837] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.260598][ T837] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 79.266791][ T837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.450436][ T1468] HID 045e:07da: Invalid code 65791 type 1 [ 79.463955][ T1468] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:045E:07DA.0002/input/input8 [ 79.479395][ T1468] microsoft 0003:045E:07DA.0002: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 79.492472][ T837] usb 8-1: usb_control_msg returned -32 [ 79.496469][ T837] usbtmc 8-1:16.0: can't read capabilities [ 79.601439][ T6043] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.686186][ T1468] usb 7-1: USB disconnect, device number 3 [ 79.764479][ T6043] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 79.769202][ T6043] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 79.773953][ T6043] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 79.777504][ T6043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.801192][ T6563] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 79.822182][ T6043] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 80.017480][ T6043] usb 5-1: USB disconnect, device number 3 [ 80.253159][ T6581] usbtmc 8-1:16.0: CHECK_CLEAR_STATUS returned 9 [ 80.455589][ T6043] usb 8-1: USB disconnect, device number 2 [ 80.859081][ T5305] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 80.861539][ T5305] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 80.866972][ T5952] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.007634][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'. [ 81.153679][ T6604] vxlan1: entered promiscuous mode [ 81.279278][ T9] cfg80211: failed to load regulatory.db [ 81.627169][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 81.627186][ T40] audit: type=1400 audit(1751654619.802:297): avc: denied { unmount } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 82.059226][ T5305] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 82.277732][ T5305] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 82.284559][ T5305] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 82.332847][ T5305] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 82.351340][ T5305] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 82.371961][ T5305] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 82.434481][ T5305] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 82.449084][ T5305] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 82.454069][ T5305] usb 6-1: Product: syz [ 82.456563][ T5305] usb 6-1: Manufacturer: syz [ 82.467334][ T5305] cdc_wdm 6-1:1.0: skipping garbage [ 82.479117][ T5305] cdc_wdm 6-1:1.0: skipping garbage [ 82.485949][ T5305] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 82.488605][ T5305] cdc_wdm 6-1:1.0: Unknown control protocol [ 82.675464][ T40] audit: type=1400 audit(1751654620.872:298): avc: denied { read write } for pid=6627 comm="syz.1.225" name="cdc-wdm0" dev="devtmpfs" ino=2904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 82.676964][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 82.695280][ T40] audit: type=1400 audit(1751654620.872:299): avc: denied { open } for pid=6627 comm="syz.1.225" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 82.771238][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 82.774239][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 82.776854][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 82.779314][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 82.782172][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 82.787150][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 82.790675][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 82.796641][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 82.800395][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 82.812492][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 82.814745][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 82.818325][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 82.823060][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 82.828060][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 82.830988][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 82.838315][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 82.843263][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 82.846863][ T6045] usb 6-1: USB disconnect, device number 3 [ 82.849737][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 82.849756][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 82.849766][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 82.981090][ T40] audit: type=1400 audit(1751654621.182:300): avc: denied { create } for pid=6627 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 83.101672][ T6644] vti0: entered promiscuous mode [ 83.101849][ T6642] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.231'. [ 84.142516][ T40] audit: type=1400 audit(1751654622.322:301): avc: denied { watch watch_reads } for pid=6662 comm="syz.1.239" path="/65" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.166333][ T6665] input: syz1 as /devices/virtual/input/input9 [ 84.210218][ T40] audit: type=1400 audit(1751654622.412:302): avc: denied { watch_mount } for pid=6667 comm="syz.1.242" path="/66" dev="tmpfs" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.242646][ T40] audit: type=1400 audit(1751654622.442:303): avc: denied { relabelfrom } for pid=6666 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 84.274482][ T40] audit: type=1400 audit(1751654622.442:304): avc: denied { relabelto } for pid=6666 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 84.603926][ T40] audit: type=1400 audit(1751654622.802:305): avc: denied { bind } for pid=6682 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.646884][ T40] audit: type=1400 audit(1751654622.802:306): avc: denied { listen } for pid=6682 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.666549][ T6685] netlink: 172 bytes leftover after parsing attributes in process `syz.2.249'. [ 84.864381][ T6695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.253'. [ 85.260852][ T5305] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 85.410714][ T5305] usb 5-1: Using ep0 maxpacket: 8 [ 85.415642][ T5305] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.426155][ T5305] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 85.438937][ T5305] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.442867][ T5305] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.487989][ T5305] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.494358][ T5305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.815097][ T5305] usb 5-1: GET_CAPABILITIES returned 0 [ 85.817718][ T5305] usbtmc 5-1:16.0: can't read capabilities [ 86.022055][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.041986][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.046058][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.050535][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.054147][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.057614][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.077119][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.089397][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.094053][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.097643][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.103158][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.106850][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.110863][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.116254][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.119811][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.123212][ C3] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 86.127718][ T5305] usb 5-1: USB disconnect, device number 5 [ 86.186429][ T6739] Bluetooth: MGMT ver 1.23 [ 86.362267][ T6742] capability: warning: `syz.1.274' uses deprecated v2 capabilities in a way that may be insecure [ 86.770071][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 86.770086][ T40] audit: type=1400 audit(1751654624.972:318): avc: denied { mounton } for pid=6763 comm="syz.0.280" path="/57/file0" dev="tmpfs" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.906570][ T40] audit: type=1400 audit(1751654625.102:319): avc: denied { create } for pid=6769 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.931317][ T40] audit: type=1400 audit(1751654625.132:320): avc: denied { connect } for pid=6769 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 87.144157][ T40] audit: type=1400 audit(1751654625.342:321): avc: denied { ioctl } for pid=6774 comm="syz.2.288" path="socket:[10903]" dev="sockfs" ino=10903 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 87.174208][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.493494][ T40] audit: type=1400 audit(1751654625.692:322): avc: denied { write } for pid=6797 comm="syz.0.294" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 87.591294][ T6805] tls_set_device_offload_rx: netdev not found [ 87.642304][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.774270][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.972532][ T6815] netlink: 'syz.3.299': attribute type 1 has an invalid length. [ 88.023912][ T6815] bond1: entered promiscuous mode [ 88.026389][ T6815] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.033169][ T40] audit: type=1400 audit(1751654626.232:323): avc: denied { write } for pid=6816 comm="syz.2.300" name="tcp" dev="proc" ino=4026533208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 88.122705][ T6821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.127550][ T6821] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 88.153879][ T6821] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 88.182387][ T6821] bond1: (slave xfrm1): making interface the new active one [ 88.187421][ T6821] xfrm1: entered promiscuous mode [ 88.201558][ T6821] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 88.343924][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 88.347861][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 88.455621][ T6836] mmap: syz.1.306 (6836) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.635794][ T6845] netlink: 'syz.1.308': attribute type 9 has an invalid length. [ 89.809409][ T6874] input: syz1 as /devices/virtual/input/input10 [ 89.953781][ T40] audit: type=1400 audit(1751654628.152:324): avc: denied { mounton } for pid=6876 comm="syz.0.321" path="/68/file0" dev="tmpfs" ino=365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 90.044301][ T6881] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.062524][ T40] audit: type=1400 audit(1751654628.252:325): avc: denied { getopt } for pid=6880 comm="syz.1.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.222212][ T6887] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.323'. [ 90.302273][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.423154][ T1143] Bluetooth: Error in BCSP hdr checksum [ 90.535132][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.629382][ T40] audit: type=1400 audit(1751654628.782:326): avc: denied { map } for pid=6897 comm="syz.0.329" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 90.741480][ T6901] netlink: 14504 bytes leftover after parsing attributes in process `syz.0.330'. [ 91.153242][ T40] audit: type=1400 audit(1751654629.352:327): avc: denied { bind } for pid=6906 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.167029][ T6907] netlink: 76 bytes leftover after parsing attributes in process `syz.0.333'. [ 91.171239][ T6907] netlink: 76 bytes leftover after parsing attributes in process `syz.0.333'. [ 91.394285][ T6913] Bluetooth: MGMT ver 1.23 [ 91.749182][ T5952] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 91.749254][ T5957] Bluetooth: hci4: command 0x1003 tx timeout [ 92.036743][ T6926] SELinux: failed to load policy [ 92.038459][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.059117][ T40] audit: type=1400 audit(1751654630.232:328): avc: denied { load_policy } for pid=6925 comm="syz.0.341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 92.113456][ T60] Bluetooth: hci4: Frame reassembly failed (-84) [ 92.299269][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 92.459453][ T5957] Bluetooth: hci5: command 0x1003 tx timeout [ 92.460110][ T9] usb 8-1: too many configurations: 151, using maximum allowed: 8 [ 92.463000][ T5963] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 92.506180][ T9] usb 8-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 92.532687][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 92.536857][ T9] usb 8-1: Product: syz [ 92.538684][ T9] usb 8-1: Manufacturer: syz [ 92.540703][ T9] usb 8-1: SerialNumber: syz [ 92.558154][ T9] usb 8-1: config 0 descriptor?? [ 92.623766][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.748049][ T40] audit: type=1800 audit(1751654630.942:329): pid=6939 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.347" name="bus" dev="9p" ino=35913817 res=0 errno=0 [ 92.816248][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.343'. [ 92.828735][ T5305] usb 8-1: USB disconnect, device number 3 [ 93.335885][ T6947] trusted_key: syz.1.351 sent an empty control message without MSG_MORE. [ 93.443685][ C3] vcan0: j1939_tp_rxtimer: 0xffff888048111c00: rx timeout, send abort [ 93.462612][ T40] audit: type=1400 audit(1751654631.662:330): avc: denied { read } for pid=5343 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 93.480786][ T40] audit: type=1400 audit(1751654631.662:331): avc: denied { search } for pid=5343 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.497433][ T40] audit: type=1400 audit(1751654631.662:332): avc: denied { search } for pid=5343 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.508707][ T40] audit: type=1400 audit(1751654631.662:333): avc: denied { add_name } for pid=5343 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.545594][ T40] audit: type=1400 audit(1751654631.662:334): avc: denied { create } for pid=5343 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.580966][ T40] audit: type=1400 audit(1751654631.662:335): avc: denied { append open } for pid=5343 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.603434][ T40] audit: type=1400 audit(1751654631.662:336): avc: denied { getattr } for pid=5343 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.950827][ C3] vcan0: j1939_tp_rxtimer: 0xffff888048111c00: abort rx timeout. Force session deactivation [ 94.139335][ T5952] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 94.591640][ T40] audit: type=1400 audit(1751654632.792:337): avc: denied { read } for pid=6967 comm="syz.1.359" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 95.021657][ T6979] SELinux: failed to load policy [ 95.233224][ T6985] input: syz1 as /devices/virtual/input/input11 [ 96.017860][ T7024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.380'. [ 96.244305][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.365651][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.548697][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.686605][ T7041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7041 comm=syz.2.390 [ 96.692493][ T7041] netlink: 'syz.2.390': attribute type 1 has an invalid length. [ 96.768529][ T7046] bond1: (slave bridge1): making interface the new active one [ 96.775294][ T7046] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 96.894915][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'. [ 97.069519][ T7052] netfs: Couldn't get user pages (rc=-14) [ 97.524961][ T7069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.399'. [ 97.545596][ T7069] ip6gre1: entered promiscuous mode [ 97.737748][ T7074] SELinux: ebitmap start bit (2863311360) is beyond the end of the bitmap (320) [ 97.747707][ T7074] SELinux: failed to load policy [ 98.034385][ T7082] netfs: Couldn't get user pages (rc=-14) [ 98.290033][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.441168][ T7095] SELinux: ebitmap start bit (2863311360) is beyond the end of the bitmap (320) [ 98.450539][ T7095] SELinux: failed to load policy [ 98.645817][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 98.645834][ T40] audit: type=1400 audit(1751654636.842:349): avc: denied { write } for pid=7101 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.948736][ T40] audit: type=1400 audit(1751654637.142:350): avc: denied { execute_no_trans } for pid=7118 comm="syz.1.422" path="/120/file0" dev="tmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.216394][ T7130] netlink: 'syz.2.426': attribute type 2 has an invalid length. [ 99.248107][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.289654][ T7130] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.426'. [ 99.312720][ T7130] nbd: must specify a device to reconfigure [ 99.394127][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.761396][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.114183][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.272154][ T7145] syz.1.432 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 100.807618][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.444'. [ 101.020904][ T7176] binder: 7175:7176 ioctl c0306201 200000000040 returned -14 [ 101.223205][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.293622][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.379056][ T40] audit: type=1400 audit(1751654639.562:351): avc: denied { sys_module } for pid=7191 comm="syz.2.453" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 101.510807][ T7202] input: syz0 as /devices/virtual/input/input12 [ 102.254220][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.512569][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.574196][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.690721][ T40] audit: type=1400 audit(1751654640.872:352): avc: denied { read write } for pid=7222 comm="syz.0.462" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 102.698147][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.709963][ T40] audit: type=1400 audit(1751654640.882:353): avc: denied { open } for pid=7222 comm="syz.0.462" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 102.747593][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 102.767093][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 102.771675][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 102.774133][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.784159][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 102.802569][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.936122][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 102.946053][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 102.949524][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 102.950770][ T40] audit: type=1326 audit(1751654641.152:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.1.464" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f201e18e929 code=0x0 [ 102.969095][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 102.969121][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 102.969138][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 102.969155][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 102.969172][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.068508][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.081214][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.090281][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.093730][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.097196][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.113652][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.122504][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.130602][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.135123][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.150740][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.155322][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.160761][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.178634][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.186795][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.200543][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.203356][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.206747][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.210341][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.226482][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.236554][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.261001][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.292274][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.297109][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.313288][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.316187][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.319729][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.322833][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.341765][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.345001][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.351486][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.365417][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 103.398767][ T1468] hid-generic 0000:007F:FFFFFFFE.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 103.490836][ T7241] fido_id[7241]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 103.560055][ T7247] netlink: 68 bytes leftover after parsing attributes in process `syz.0.473'. [ 103.778178][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.814767][ T7256] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.821866][ T7256] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.844851][ T7256] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.848593][ T7256] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.912095][ T7256] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.917093][ T7256] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.923791][ T7256] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.944392][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.947483][ T7256] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.970391][ T7256] geneve2: entered promiscuous mode [ 103.973374][ T7256] geneve2: entered allmulticast mode [ 104.164960][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.190665][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.205877][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.209608][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.236471][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.245732][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.249552][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.267625][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.276796][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.280348][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.286063][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.308657][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.325115][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.374338][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.377913][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.415770][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.419296][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.422684][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.427818][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.435320][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.438377][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.456485][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.460248][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.479886][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.484895][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.488632][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.499868][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.504619][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.555906][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.574543][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.578131][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.582541][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.585716][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.589599][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.593260][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.597222][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.600880][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.604335][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.607966][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.612269][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.616420][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.621667][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.625452][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 104.635885][ T5305] hid-generic 0000:007F:FFFFFFFE.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 104.711059][ T7285] fido_id[7285]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 104.886186][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.433873][ T7314] GUP no longer grows the stack in syz.2.498 (7314): 200000004000-20000000a000 (200000002000) [ 106.441114][ T7314] CPU: 2 UID: 0 PID: 7314 Comm: syz.2.498 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 106.441141][ T7314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.441152][ T7314] Call Trace: [ 106.441159][ T7314] [ 106.441174][ T7314] dump_stack_lvl+0x16c/0x1f0 [ 106.441229][ T7314] gup_vma_lookup+0x1d2/0x220 [ 106.441258][ T7314] __get_user_pages+0x271/0x3b80 [ 106.441574][ T7314] ? __pfx___get_user_pages+0x10/0x10 [ 106.441779][ T7314] get_user_pages_remote+0x258/0xb20 [ 106.441957][ T7314] ? __pfx_mtree_load+0x10/0x10 [ 106.442205][ T7314] ? __pfx_get_user_pages_remote+0x10/0x10 [ 106.442240][ T7314] __access_remote_vm+0x246/0x810 [ 106.442271][ T7314] ? do_raw_spin_lock+0x12c/0x2b0 [ 106.442291][ T7314] ? __pfx___access_remote_vm+0x10/0x10 [ 106.442325][ T7314] proc_pid_cmdline_read+0x4de/0x900 [ 106.442362][ T7314] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 106.442387][ T7314] ? rw_verify_area+0xcf/0x680 [ 106.442410][ T7314] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 106.442430][ T7314] vfs_readv+0x5c1/0x8b0 [ 106.442455][ T7314] ? __pfx_vfs_readv+0x10/0x10 [ 106.442477][ T7314] ? kmem_cache_free+0x2d1/0x4d0 [ 106.442514][ T7314] ? __fget_files+0x20e/0x3c0 [ 106.442545][ T7314] ? do_preadv+0x1a6/0x270 [ 106.442565][ T7314] do_preadv+0x1a6/0x270 [ 106.442585][ T7314] ? __pfx_do_preadv+0x10/0x10 [ 106.442610][ T7314] do_syscall_64+0xcd/0x4c0 [ 106.442637][ T7314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.442655][ T7314] RIP: 0033:0x7fd0cbf8e929 [ 106.442670][ T7314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.442688][ T7314] RSP: 002b:00007fd0ccec1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 106.442706][ T7314] RAX: ffffffffffffffda RBX: 00007fd0cc1b5fa0 RCX: 00007fd0cbf8e929 [ 106.442717][ T7314] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005 [ 106.442726][ T7314] RBP: 00007fd0cc010b39 R08: 00000000fffffff9 R09: 0000000000000000 [ 106.442735][ T7314] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 106.442745][ T7314] R13: 0000000000000000 R14: 00007fd0cc1b5fa0 R15: 00007ffc039ee1b8 [ 106.442767][ T7314] [ 106.697673][ T7318] netlink: 'syz.2.500': attribute type 1 has an invalid length. [ 106.741420][ T7318] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.749116][ T837] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 106.766445][ T7318] bond2: (slave gretap1): making interface the new active one [ 106.775252][ T7318] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 106.880217][ T40] audit: type=1400 audit(1751654645.072:355): avc: denied { create } for pid=7325 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 106.899459][ T40] audit: type=1326 audit(1751654645.102:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7326 comm="syz.0.505" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0f858e929 code=0x0 [ 106.924848][ T837] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 106.929509][ T837] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 106.939940][ T837] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 106.949526][ T837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.967047][ T7316] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 106.975778][ T837] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.197051][ T1468] usb 8-1: USB disconnect, device number 4 [ 107.433891][ T7343] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.437790][ T7343] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.464291][ T7343] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.475486][ T7343] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.489076][ T7343] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 107.509154][ T7343] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 107.513629][ T7343] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 107.517050][ T7343] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 107.528218][ T7343] geneve2: entered promiscuous mode [ 107.530707][ T7343] geneve2: entered allmulticast mode [ 107.816930][ T7349] netlink: 'syz.0.513': attribute type 27 has an invalid length. [ 107.869103][ T40] audit: type=1400 audit(1751654646.062:357): avc: denied { create } for pid=7351 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.880732][ T40] audit: type=1400 audit(1751654646.062:358): avc: denied { bind } for pid=7351 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.922967][ T7349] bridge0: port 3(syz_tun) entered disabled state [ 107.945694][ T40] audit: type=1400 audit(1751654646.062:359): avc: denied { name_bind } for pid=7351 comm="syz.3.514" src=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 107.951251][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.987353][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.994471][ T40] audit: type=1400 audit(1751654646.062:360): avc: denied { node_bind } for pid=7351 comm="syz.3.514" src=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 108.373819][ T7349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.394637][ T7349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.594145][ T1468] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 108.613922][ T7349] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.619249][ T7349] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.640882][ T7349] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.645343][ T7349] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.763458][ T7349] vxlan0: left promiscuous mode [ 108.767253][ T1468] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.782015][ T1468] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.794394][ T7349] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.798631][ T1468] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.821621][ T7349] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.825068][ T1468] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.853132][ T7349] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.861581][ T7349] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.978692][ T7349] vxlan1: left promiscuous mode [ 108.999819][ T7349] vti0: left promiscuous mode [ 109.094891][ T1468] usb 6-1: usb_control_msg returned -32 [ 109.097176][ T1468] usbtmc 6-1:16.0: can't read capabilities [ 110.149990][ T5952] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 110.150006][ T5963] Bluetooth: hci4: command 0x1003 tx timeout [ 110.299139][ T2296] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 110.469178][ T2296] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 110.481678][ T2296] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 110.487397][ T2296] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 110.492382][ T2296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.503543][ T7372] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 110.545189][ T40] audit: type=1326 audit(1751654648.742:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.3.524" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c44d8e929 code=0x0 [ 110.547608][ T2296] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.741358][ T5305] usb 5-1: USB disconnect, device number 6 [ 111.412163][ T5305] usb 6-1: USB disconnect, device number 4 [ 111.432619][ T40] audit: type=1400 audit(1751654649.612:362): avc: denied { listen } for pid=7388 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.519628][ T40] audit: type=1400 audit(1751654649.722:363): avc: denied { accept } for pid=7388 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.683505][ T7398] syzkaller1: entered promiscuous mode [ 111.696520][ T7398] syzkaller1: entered allmulticast mode [ 111.965852][ T40] audit: type=1400 audit(1751654650.162:364): avc: denied { write } for pid=7402 comm="syz.2.535" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 112.229168][ T1468] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 112.354853][ T6018] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 112.408454][ T1468] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 112.487020][ T1468] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 112.514945][ T1468] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.524445][ T1468] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 112.528234][ T1468] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.545016][ T6018] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 112.545092][ T1468] usb 7-1: Product: syz [ 112.550707][ T6018] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 112.552273][ T1468] usb 7-1: Manufacturer: syz [ 112.557955][ T6018] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 112.557981][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.566083][ T7405] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 112.568782][ T6018] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.608158][ T1468] usb 7-1: SerialNumber: syz [ 112.634025][ T1468] hub 7-1:1.0: bad descriptor, ignoring hub [ 112.637275][ T1468] hub 7-1:1.0: probe with driver hub failed with error -5 [ 112.778990][ T2296] usb 6-1: USB disconnect, device number 5 [ 112.843126][ T1468] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 113.043286][ T40] audit: type=1400 audit(1751654651.232:365): avc: denied { read write } for pid=7402 comm="syz.2.535" name="lp0" dev="devtmpfs" ino=2973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 113.082765][ T40] audit: type=1400 audit(1751654651.262:366): avc: denied { open } for pid=7402 comm="syz.2.535" path="/dev/usb/lp0" dev="devtmpfs" ino=2973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 113.341799][ T7433] capability: warning: `syz.3.546' uses 32-bit capabilities (legacy support in use) [ 113.355037][ T7433] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 113.361881][ T7433] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 114.033255][ T6018] usb 7-1: USB disconnect, device number 4 [ 114.042519][ T6018] usblp0: removed [ 114.399536][ T40] audit: type=1400 audit(1751654652.592:367): avc: denied { listen } for pid=7453 comm="syz.1.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.083415][ T40] audit: type=1400 audit(1751654653.282:368): avc: denied { write } for pid=7469 comm="syz.0.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 115.190829][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.561'. [ 115.223004][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.561'. [ 115.714452][ T40] audit: type=1400 audit(1751654653.912:369): avc: denied { bind } for pid=7477 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.729262][ T40] audit: type=1400 audit(1751654653.912:370): avc: denied { node_bind } for pid=7477 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 115.878099][ T40] audit: type=1400 audit(1751654654.072:371): avc: denied { append } for pid=7493 comm="syz.1.570" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 116.195827][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 116.231580][ T7504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.574'. [ 116.900077][ T6045] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 117.075357][ T6045] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 117.103812][ T6045] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 117.108241][ T6045] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 117.112410][ T6045] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 117.131658][ T6045] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 117.136913][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880323ac000: rx timeout, send abort [ 117.141241][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff8880323ac000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 117.142276][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff8880323ad800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 117.187059][ T6045] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 117.192570][ T6045] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 117.197484][ T6045] usb 5-1: Product: syz [ 117.200764][ T6045] usb 5-1: Manufacturer: syz [ 117.210025][ T6045] cdc_wdm 5-1:1.0: skipping garbage [ 117.213892][ T6045] cdc_wdm 5-1:1.0: skipping garbage [ 117.220699][ T6045] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 117.225578][ T6045] cdc_wdm 5-1:1.0: Unknown control protocol [ 117.418028][ T6045] usb 5-1: USB disconnect, device number 7 [ 118.085604][ T7523] netlink: 'syz.3.582': attribute type 39 has an invalid length. [ 118.420253][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880323adc00: rx timeout, send abort [ 118.436998][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff8880323adc00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 118.445362][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff8880323ae400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 119.016431][ T40] audit: type=1400 audit(1751654657.212:372): avc: denied { ioctl } for pid=7532 comm="syz.1.585" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x542c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 119.232654][ T7540] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 119.334120][ T6018] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 119.504510][ T6018] usb 8-1: Using ep0 maxpacket: 16 [ 119.529072][ T6018] usb 8-1: unable to get BOS descriptor or descriptor too short [ 119.533199][ T6018] usb 8-1: no configurations [ 119.535825][ T6018] usb 8-1: can't read configurations, error -22 [ 119.955546][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'. [ 119.969431][ T7558] ipip0: entered promiscuous mode [ 120.361182][ T7567] SELinux: failed to load policy [ 121.366623][ T7602] all: renamed from lo (while UP) [ 121.884109][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.624'. [ 122.098000][ T7623] xt_hashlimit: size too large, truncated to 1048576 [ 122.206888][ T7630] binder: 7629:7630 ioctl c0306201 200000000640 returned -22 [ 122.626209][ T7639] binder: 7638:7639 ioctl c0046209 0 returned -22 [ 123.072989][ T34] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 123.236466][ T34] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 123.242844][ T34] usb 8-1: config index 0 descriptor too short (expected 8192, got 27) [ 123.248193][ T34] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.310730][ T34] usb 8-1: config 0 has no interfaces? [ 123.320170][ T34] usb 8-1: config index 1 descriptor too short (expected 8192, got 27) [ 123.334171][ T34] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.340353][ T34] usb 8-1: config 0 has no interfaces? [ 123.364672][ T34] usb 8-1: config index 2 descriptor too short (expected 8192, got 27) [ 123.368458][ T34] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.386683][ T34] usb 8-1: config 0 has no interfaces? [ 123.394712][ T34] usb 8-1: config index 3 descriptor too short (expected 8192, got 27) [ 123.399759][ T34] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.410089][ T34] usb 8-1: config 0 has no interfaces? [ 123.425407][ T7666] gtp0: entered promiscuous mode [ 123.451477][ T34] usb 8-1: config index 4 descriptor too short (expected 8192, got 27) [ 123.455196][ T34] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.461491][ T34] usb 8-1: config 0 has no interfaces? [ 123.468744][ T7665] dvmrp1: entered allmulticast mode [ 123.512816][ T34] usb 8-1: config index 5 descriptor too short (expected 8192, got 27) [ 123.517760][ T34] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.525064][ T34] usb 8-1: config 0 has no interfaces? [ 123.530253][ T34] usb 8-1: config index 6 descriptor too short (expected 8192, got 27) [ 123.534529][ T34] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.540352][ T34] usb 8-1: config 0 has no interfaces? [ 123.544767][ T34] usb 8-1: config index 7 descriptor too short (expected 8192, got 27) [ 123.550679][ T34] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.561872][ T34] usb 8-1: config 0 has no interfaces? [ 123.571374][ T34] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 123.578644][ T34] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 123.590178][ T34] usb 8-1: Product: syz [ 123.596698][ T34] usb 8-1: Manufacturer: syz [ 123.598914][ T34] usb 8-1: SerialNumber: syz [ 123.646663][ T34] usb 8-1: config 0 descriptor?? [ 123.877336][ T7647] warning: `syz.3.633' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.911967][ T34] usb 8-1: USB disconnect, device number 7 [ 124.293930][ T40] audit: type=1400 audit(1751654662.492:373): avc: denied { setopt } for pid=7688 comm="syz.2.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 124.308240][ T40] audit: type=1400 audit(1751654662.492:374): avc: denied { write } for pid=7688 comm="syz.2.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 124.319226][ T40] audit: type=1400 audit(1751654662.492:375): avc: denied { read } for pid=7688 comm="syz.2.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 124.771824][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 124.933742][ T7699] netlink: 'syz.3.651': attribute type 1 has an invalid length. [ 124.940116][ T7699] netlink: 'syz.3.651': attribute type 4 has an invalid length. [ 124.943441][ T7699] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.651'. [ 124.947960][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 124.963174][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.968567][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.985650][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 124.996159][ T34] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 125.001587][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.007453][ T34] usb 7-1: config 0 descriptor?? [ 125.015806][ T40] audit: type=1400 audit(1751654663.212:376): avc: denied { setopt } for pid=7700 comm="syz.0.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.137376][ T7706] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 125.164672][ T40] audit: type=1400 audit(1751654663.362:377): avc: denied { name_bind } for pid=7704 comm="syz.1.654" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 125.556914][ T34] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0005/input/input13 [ 125.701125][ T34] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0005/input/input14 [ 125.866924][ T34] kye 0003:0458:5011.0005: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 125.882072][ T34] usb 7-1: USB disconnect, device number 5 [ 125.978176][ T40] audit: type=1400 audit(1751654664.132:378): avc: denied { accept } for pid=7730 comm="syz.1.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.018759][ T7732] fido_id[7732]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/7-1/report_descriptor': No such file or directory [ 126.065823][ T7734] netlink: 'syz.0.666': attribute type 1 has an invalid length. [ 126.125762][ T7734] netlink: 'syz.0.666': attribute type 1 has an invalid length. [ 126.174066][ T7737] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 126.679160][ T1468] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 126.813902][ T40] audit: type=1400 audit(1751654665.012:379): avc: denied { ioctl } for pid=7754 comm="syz.1.673" path="socket:[15260]" dev="sockfs" ino=15260 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 126.823560][ T1468] usb 7-1: Using ep0 maxpacket: 16 [ 126.847211][ T1468] usb 7-1: config 0 has no interfaces? [ 126.856575][ T1468] usb 7-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 126.874515][ T1468] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.891226][ T1468] usb 7-1: config 0 descriptor?? [ 126.931286][ T40] audit: type=1400 audit(1751654665.122:380): avc: denied { audit_write } for pid=7756 comm="syz.1.674" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 126.958860][ T40] audit: type=1400 audit(1751654665.122:381): avc: denied { watch watch_reads } for pid=7756 comm="syz.1.674" path="pipe:[15266]" dev="pipefs" ino=15266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 127.108930][ T837] usb 7-1: USB disconnect, device number 6 [ 127.255846][ T7767] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 127.412845][ T7772] netlink: 'syz.3.680': attribute type 5 has an invalid length. [ 127.418903][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 127.498758][ T7776] tipc: Failed to remove unknown binding: 66,1,1/0:183929848/183929850 [ 127.516614][ T7776] tipc: Failed to remove unknown binding: 66,1,1/0:183929848/183929850 [ 127.710311][ T40] audit: type=1400 audit(1751654665.892:382): avc: denied { associate } for pid=7781 comm="syz.1.684" name="memory.events.local" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 127.800881][ T7782] netfs: Couldn't get user pages (rc=-14) [ 128.396344][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 128.614525][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 128.671468][ T7802] loop2: detected capacity change from 0 to 7 [ 128.681114][ T7802] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 128.686542][ T7802] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 128.709361][ T7802] Dev loop2: unable to read RDB block 7 [ 128.712207][ T7802] loop2: unable to read partition table [ 128.715245][ T7802] loop2: partition table beyond EOD, truncated [ 128.725839][ T7802] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 128.741322][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 128.744529][ T9] usb 8-1: too many configurations: 105, using maximum allowed: 8 [ 128.748406][ T9] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 128.799083][ T9] usb 8-1: can't read configurations, error -71 [ 128.965968][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.037907][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.081953][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.521642][ T7864] syzkaller0: entered promiscuous mode [ 129.524901][ T7864] syzkaller0: entered allmulticast mode [ 129.537854][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 129.537870][ T40] audit: type=1400 audit(1751654668.726:384): avc: denied { search } for pid=7873 comm="syz.2.707" name="/" dev="configfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.569331][ T40] audit: type=1400 audit(1751654668.746:385): avc: denied { search } for pid=7873 comm="syz.2.707" name="/" dev="configfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.609147][ T40] audit: type=1400 audit(1751654668.746:386): avc: denied { read open } for pid=7873 comm="syz.2.707" path="/" dev="configfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.646119][ T40] audit: type=1400 audit(1751654668.746:387): avc: denied { search } for pid=7873 comm="syz.2.707" name="/" dev="configfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.704111][ T40] audit: type=1400 audit(1751654668.896:388): avc: denied { watch watch_reads } for pid=7877 comm="syz.0.711" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 129.943896][ T7887] netfs: Couldn't get user pages (rc=-14) [ 129.958368][ T7887] netfs: Zero-sized read [R=e] [ 130.124318][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 130.180016][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.720'. [ 130.279207][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 130.283241][ T34] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 130.286957][ T34] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 130.293376][ T34] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 130.307620][ T34] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 130.320553][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 130.348736][ T34] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 130.353858][ T34] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 130.359648][ T34] usb 6-1: Product: syz [ 130.362633][ T34] usb 6-1: Manufacturer: syz [ 130.365790][ T34] usb 6-1: SerialNumber: syz [ 130.390035][ T34] usb 6-1: config 0 descriptor?? [ 130.396265][ T34] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 130.418925][ T34] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 130.574102][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 130.660986][ T6018] usb 6-1: USB disconnect, device number 6 [ 130.672507][ T6018] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 130.719293][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 130.728671][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 130.744359][ T24] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 130.748656][ T24] usb 7-1: can't read configurations, error -71 [ 131.482968][ T40] audit: type=1400 audit(1751654670.666:389): avc: denied { mounton } for pid=7913 comm="syz.1.725" path="/proc/463/cgroup" dev="proc" ino=19627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 132.240105][ T7924] 9pnet_virtio: no channels available for device syz [ 132.470016][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.472584][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.707546][ T7932] syzkaller0: entered promiscuous mode [ 132.717467][ T7932] syzkaller0: entered allmulticast mode [ 134.908523][ T7969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7969 comm=syz.0.746 [ 134.916765][ T7969] netlink: 'syz.0.746': attribute type 1 has an invalid length. [ 134.966113][ T7969] bond2: (slave bridge1): making interface the new active one [ 134.974481][ T7969] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 135.276499][ T7977] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.294489][ T7977] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.312334][ T7977] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.315960][ T7977] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.338334][ T7977] vxlan0: entered promiscuous mode [ 135.339171][ T34] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 135.352440][ T7977] vxlan0: entered allmulticast mode [ 135.399128][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 135.502655][ T34] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 135.508272][ T34] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 135.519341][ T34] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 135.532294][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 135.539738][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 135.546416][ T34] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 135.551841][ T34] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 135.555563][ T34] usb 5-1: Product: syz [ 135.557808][ T34] usb 5-1: Manufacturer: syz [ 135.580670][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 135.584842][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 135.628559][ T34] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 135.638153][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 135.642540][ T34] cdc_wdm 5-1:1.0: Unknown control protocol [ 135.645901][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.750'. [ 135.684629][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 135.687650][ T24] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 135.718863][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.737994][ T24] usb 6-1: config 0 descriptor?? [ 135.874651][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 135.875054][ T34] usb 5-1: USB disconnect, device number 8 [ 135.877553][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 135.877572][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 135.960079][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 135.964573][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 135.994657][ T24] usb 6-1: USB disconnect, device number 7 [ 137.175924][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053315c00: rx timeout, send abort [ 137.354982][ T7999] 9pnet_virtio: no channels available for device syz [ 137.684002][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053315c00: abort rx timeout. Force session deactivation [ 138.067237][ T8015] loop2: detected capacity change from 0 to 7 [ 138.075324][ T8015] loop2: p1 [ 138.076831][ T8015] loop2: partition table partially beyond EOD, truncated [ 138.089624][ T8015] loop2: p1 size 3506438144 extends beyond EOD, truncated [ 138.227964][ T5988] udevd[5988]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 138.517974][ T8026] loop3: detected capacity change from 0 to 1 [ 138.527376][ T5988] Dev loop3: unable to read RDB block 1 [ 138.529974][ T5988] loop3: unable to read partition table [ 138.546982][ T5988] loop3: partition table beyond EOD, truncated [ 138.590501][ T8026] Dev loop3: unable to read RDB block 1 [ 138.595005][ T8026] loop3: unable to read partition table [ 138.597439][ T8026] loop3: partition table beyond EOD, truncated [ 138.616038][ T1468] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 138.633373][ T8026] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 138.780307][ T1468] usb 5-1: Using ep0 maxpacket: 8 [ 138.785414][ T1468] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 138.805305][ T1468] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.809661][ T1468] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 138.830647][ T1468] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.835456][ T1468] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.843886][ T1468] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 138.851808][ T1468] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.090327][ T40] audit: type=1400 audit(1751654678.286:390): avc: denied { connect } for pid=8037 comm="syz.1.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 139.097582][ T1468] usb 5-1: usb_control_msg returned -32 [ 139.107106][ T1468] usbtmc 5-1:16.0: can't read capabilities [ 139.345166][ T8046] block nbd1: shutting down sockets [ 139.369786][ C3] vkms_vblank_simulate: vblank timer overrun [ 139.457715][ T8049] xt_hashlimit: size too large, truncated to 1048576 [ 139.514329][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.777'. [ 139.881493][ C3] vkms_vblank_simulate: vblank timer overrun [ 139.891763][ T8052] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 140.091597][ T10] usb 5-1: USB disconnect, device number 9 [ 140.233125][ T40] audit: type=1400 audit(1751654679.406:391): avc: denied { watch } for pid=8060 comm="syz.2.781" path="/194" dev="tmpfs" ino=1041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 140.247351][ T40] audit: type=1400 audit(1751654679.406:392): avc: denied { watch_sb } for pid=8060 comm="syz.2.781" path="/194" dev="tmpfs" ino=1041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 140.337991][ C3] vkms_vblank_simulate: vblank timer overrun [ 141.008618][ T40] audit: type=1400 audit(1751654680.186:393): avc: denied { append } for pid=8067 comm="syz.2.784" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 141.094327][ C3] vkms_vblank_simulate: vblank timer overrun [ 141.246746][ T8071] netlink: 'syz.0.785': attribute type 11 has an invalid length. [ 141.250270][ T8071] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.785'. [ 141.256417][ T8071] netlink: 'syz.0.785': attribute type 10 has an invalid length. [ 142.079461][ T8070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.745745][ C3] vkms_vblank_simulate: vblank timer overrun [ 142.877747][ C3] vkms_vblank_simulate: vblank timer overrun [ 143.077709][ C3] vkms_vblank_simulate: vblank timer overrun [ 144.656774][ T8091] ------------[ cut here ]------------ [ 144.661460][ T8091] WARNING: CPU: 0 PID: 8091 at drivers/gpu/drm/drm_gem.c:286 drm_gem_object_handle_put_unlocked+0x284/0x310 [ 144.674438][ T8091] Modules linked in: [ 144.675887][ T8091] CPU: 0 UID: 0 PID: 8091 Comm: syz.0.792 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 144.702085][ T8091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.706875][ T8091] RIP: 0010:drm_gem_object_handle_put_unlocked+0x284/0x310 [ 144.710363][ T8091] Code: 03 0f b6 04 02 84 c0 74 0c 3c 03 7f 08 4c 89 f7 e8 d1 92 ab fc c7 83 20 01 00 00 00 00 00 00 e9 b2 fe ff ff e8 fd b5 44 fc 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 ec b5 44 fc e8 e7 b5 44 fc be [ 144.719706][ T8091] RSP: 0018:ffffc9000e71fbb0 EFLAGS: 00010293 [ 144.722701][ T8091] RAX: 0000000000000000 RBX: ffff888026c80800 RCX: ffffffff85776893 [ 144.726040][ T8091] RDX: ffff888024454880 RSI: ffffffff85776aa3 RDI: 0000000000000005 [ 144.729409][ T8091] RBP: ffff888026c80804 R08: 0000000000000005 R09: 0000000000000000 [ 144.734529][ T8091] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880268a4000 [ 144.738638][ T8091] R13: ffff888026c80808 R14: 0000000000000000 R15: 0000000000000001 [ 144.743122][ T8091] FS: 000055557d650500(0000) GS:ffff8880d6715000(0000) knlGS:0000000000000000 [ 144.748840][ T8091] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.753596][ T8091] CR2: 000000110c35d81c CR3: 000000003930b000 CR4: 0000000000352ef0 [ 144.779359][ T8091] Call Trace: [ 144.781378][ T8091] [ 144.783111][ T8091] ? __pfx_virtio_gpu_gem_object_close+0x10/0x10 [ 144.786740][ T8091] drm_gem_object_release_handle+0x9a/0xc0 [ 144.790017][ T8091] ? __pfx_drm_gem_object_release_handle+0x10/0x10 [ 144.795382][ T8091] idr_for_each+0x143/0x270 [ 144.797466][ T8091] ? __pfx_idr_for_each+0x10/0x10 [ 144.800270][ T8091] drm_gem_release+0x27/0x40 [ 144.802787][ T8091] drm_file_free.part.0+0x671/0xbf0 [ 144.805974][ T8091] drm_close_helper.isra.0+0x186/0x1f0 [ 144.808678][ T8091] drm_release+0x1ab/0x360 [ 144.813673][ T8091] ? __pfx_drm_release+0x10/0x10 [ 144.816859][ T8091] __fput+0x402/0xb70 [ 144.820580][ T8091] task_work_run+0x150/0x240 [ 144.823224][ T8091] ? __pfx_task_work_run+0x10/0x10 [ 144.825452][ T8091] ? __pfx___do_sys_close_range+0x10/0x10 [ 144.828143][ T8091] exit_to_user_mode_loop+0xeb/0x110 [ 144.832448][ T8091] do_syscall_64+0x3f6/0x4c0 [ 144.834796][ T8091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.837718][ T8091] RIP: 0033:0x7fb0f858e929 [ 144.840570][ T8091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.859920][ T8091] RSP: 002b:00007ffc00b5c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 144.863858][ T8091] RAX: 0000000000000000 RBX: 000000000002347c RCX: 00007fb0f858e929 [ 144.867302][ T8091] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 144.870679][ T8091] RBP: 00007fb0f87b7ba0 R08: 0000000000000001 R09: 0000000700b5c32f [ 144.874080][ T8091] R10: 00007fb0f8400000 R11: 0000000000000246 R12: 00007fb0f87b5fac [ 144.882374][ T8091] R13: 00007fb0f87b5fa0 R14: ffffffffffffffff R15: 00007ffc00b5c150 [ 144.887364][ T8091] [ 144.889957][ T8091] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 144.896389][ T8091] CPU: 0 UID: 0 PID: 8091 Comm: syz.0.792 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 144.904968][ T8091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.911336][ T8091] Call Trace: [ 144.913355][ T8091] [ 144.923030][ T8091] dump_stack_lvl+0x3d/0x1f0 [ 144.925150][ T8091] panic+0x71c/0x800 [ 144.927312][ T8091] ? __pfx_panic+0x10/0x10 [ 144.929528][ T8091] ? show_trace_log_lvl+0x29b/0x3e0 [ 144.932181][ T8091] ? check_panic_on_warn+0x1f/0xb0 [ 144.935010][ T8091] ? drm_gem_object_handle_put_unlocked+0x284/0x310 [ 144.938563][ T8091] check_panic_on_warn+0xab/0xb0 [ 144.942214][ T8091] __warn+0xf6/0x3c0 [ 144.944771][ T8091] ? drm_gem_object_handle_put_unlocked+0x284/0x310 [ 144.949441][ T8091] report_bug+0x3c3/0x580 [ 144.952910][ T8091] ? drm_gem_object_handle_put_unlocked+0x284/0x310 [ 144.957946][ T8091] handle_bug+0x184/0x210 [ 144.961192][ T8091] exc_invalid_op+0x17/0x50 [ 144.963899][ T8091] asm_exc_invalid_op+0x1a/0x20 [ 144.966643][ T8091] RIP: 0010:drm_gem_object_handle_put_unlocked+0x284/0x310 [ 144.970298][ T8091] Code: 03 0f b6 04 02 84 c0 74 0c 3c 03 7f 08 4c 89 f7 e8 d1 92 ab fc c7 83 20 01 00 00 00 00 00 00 e9 b2 fe ff ff e8 fd b5 44 fc 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 ec b5 44 fc e8 e7 b5 44 fc be [ 144.979528][ T8091] RSP: 0018:ffffc9000e71fbb0 EFLAGS: 00010293 [ 144.994562][ T8091] RAX: 0000000000000000 RBX: ffff888026c80800 RCX: ffffffff85776893 [ 144.997411][ T8091] RDX: ffff888024454880 RSI: ffffffff85776aa3 RDI: 0000000000000005 [ 145.000252][ T8091] RBP: ffff888026c80804 R08: 0000000000000005 R09: 0000000000000000 [ 145.003611][ T8091] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880268a4000 [ 145.007976][ T8091] R13: ffff888026c80808 R14: 0000000000000000 R15: 0000000000000001 [ 145.013911][ T8091] ? drm_gem_object_handle_put_unlocked+0x73/0x310 [ 145.016860][ T8091] ? drm_gem_object_handle_put_unlocked+0x283/0x310 [ 145.020456][ T8091] ? __pfx_virtio_gpu_gem_object_close+0x10/0x10 [ 145.024456][ T8091] drm_gem_object_release_handle+0x9a/0xc0 [ 145.028621][ T8091] ? __pfx_drm_gem_object_release_handle+0x10/0x10 [ 145.033261][ T8091] idr_for_each+0x143/0x270 [ 145.036521][ T8091] ? __pfx_idr_for_each+0x10/0x10 [ 145.039630][ T8091] drm_gem_release+0x27/0x40 [ 145.043982][ T8091] drm_file_free.part.0+0x671/0xbf0 [ 145.047522][ T8091] drm_close_helper.isra.0+0x186/0x1f0 [ 145.051389][ T8091] drm_release+0x1ab/0x360 [ 145.054846][ T8091] ? __pfx_drm_release+0x10/0x10 [ 145.058291][ T8091] __fput+0x402/0xb70 [ 145.061296][ T8091] task_work_run+0x150/0x240 [ 145.064080][ T8091] ? __pfx_task_work_run+0x10/0x10 [ 145.068023][ T8091] ? __pfx___do_sys_close_range+0x10/0x10 [ 145.071829][ T8091] exit_to_user_mode_loop+0xeb/0x110 [ 145.075198][ T8091] do_syscall_64+0x3f6/0x4c0 [ 145.078149][ T8091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.082168][ T8091] RIP: 0033:0x7fb0f858e929 [ 145.084540][ T8091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.092464][ T8091] RSP: 002b:00007ffc00b5c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 145.097122][ T8091] RAX: 0000000000000000 RBX: 000000000002347c RCX: 00007fb0f858e929 [ 145.102223][ T8091] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 145.107644][ T8091] RBP: 00007fb0f87b7ba0 R08: 0000000000000001 R09: 0000000700b5c32f [ 145.112266][ T8091] R10: 00007fb0f8400000 R11: 0000000000000246 R12: 00007fb0f87b5fac [ 145.116342][ T8091] R13: 00007fb0f87b5fa0 R14: ffffffffffffffff R15: 00007ffc00b5c150 [ 145.119959][ T8091] [ 145.122358][ T8091] Kernel Offset: disabled [ 145.124338][ T8091] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:44:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855befc5 RDI=ffffffff9b0c52e0 RBP=ffffffff9b0c52a0 RSP=ffffc9000e71f520 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0c52a0 R15=ffffffff855bef60 RIP=ffffffff855befef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557d650500 ffffffff 00c00000 GS =0000 ffff8880d6715000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c35d81c CR3=000000003930b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0f8611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0f8611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0f8611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0f8611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0f8611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0f8611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0f8785488 00007fb0f8785480 00007fb0f8785478 00007fb0f8785450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0f92ed100 00007fb0f8785440 00007fb0f8780004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0f8785498 00007fb0f8785490 00007fb0f8785488 00007fb0f8785480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffffffdfc000 RBX=0000000000000000 RCX=0000000000000016 RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff93d65834 RBP=ffff8880271d3740 RSP=ffffc900006a0f38 R8 =0000000000000001 R9 =fffff520000d41d5 R10=0000000000000003 R11=0000000000000001 R12=0000000000204000 R13=0000000000000016 R14=ffff8880271d3700 R15=dffffc0000000000 RIP=ffffffff8168e55e RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6815000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2f71fffc CR3=000000005e4aa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff816c9768 ffffffff816c9768 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff816c9768 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0cc011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0cc011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0cc011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0cc011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0cc011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0cc011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff812c64f8 ffffffff812c64f8 ffffffff812c64cf ffffffff812c64cf ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff816bc8db ffffffff816bc8d4 ffffffff00040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8160ab33 ffffffff8160a4cf ffffffff8160a4c3 ffffffff8160a47e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000140 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000096695 RBX=0000000000000002 RCX=ffffffff8b884c69 RDX=0000000000000000 RSI=ffffffff8de3171b RDI=ffffffff8c1587e0 RBP=ffffed1003c53910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801e29c880 R14=ffffffff90a97550 R15=0000000000000000 RIP=ffffffff8b8837cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6915000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055557d650808 CR3=000000004f6d4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc00b5c260 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0f8611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0f8611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0f8611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0f8611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0f8611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb0f8611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000091c1b RBX=0000000000000003 RCX=ffffffff8b884c69 RDX=0000000000000000 RSI=ffffffff8de3171b RDI=ffffffff8c1587e0 RBP=ffffed1003c56000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801e2b0000 R14=ffffffff90a97550 R15=0000000000000000 RIP=ffffffff8b8837cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a15000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb0f85726e0 CR3=0000000034197000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055743566b600 000055743566b600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcac19c580 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3278302b64656b63 6f6c6e755f747570 5f656c646e61685f 7463656a626f5f6d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30313378302f3438 3278302b64656b63 6f6c6e755f747570 5f656c646e61685f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7463656a626f5f6d 65675f6d72642036 38323a632e6d6567 5f6d72642f6d7264 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7570672f737265 7669726420746120 31393038203a4449 502030203a555043 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a474e494e5241 57205d3139303854 205b5d3036343136 362e34343120205b ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000