last executing test programs: 2m47.138075086s ago: executing program 1 (id=9179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c000300ffffffffd439c5920800024000000001"], 0xfea1}}, 0x800) 2m47.040123553s ago: executing program 1 (id=9181): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) 2m47.037871687s ago: executing program 1 (id=9183): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="30000000120001000008000000000000140000000c00000000000000000000000d0003"], 0x30}], 0x1, 0x0, 0x0, 0x4000}, 0x80) 2m46.969477567s ago: executing program 1 (id=9185): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 2m46.969225471s ago: executing program 1 (id=9187): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000003940)=0x10) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000003980)={0x9, 0x4, 0x0, 0xfffffffd, 0x4, "9fe074c27de56e638031e88f19fa52087cfdcf"}) 2m46.829590083s ago: executing program 1 (id=9191): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m46.729923677s ago: executing program 32 (id=9191): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m49.299672651s ago: executing program 3 (id=10690): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'macsec0\x00', 0x300}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 1m49.181696414s ago: executing program 3 (id=10695): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x6, 0x4) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) 1m49.143642164s ago: executing program 3 (id=10698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 1m49.089601231s ago: executing program 3 (id=10701): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) 1m49.048941007s ago: executing program 3 (id=10703): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000580)=0x1, 0x4) 1m48.641105886s ago: executing program 3 (id=10718): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r0, &(0x7f0000000500)="600000040014334000000000000000000000000000000001000000000000000000000200a52af8348974", 0x2a, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) 1m48.551177014s ago: executing program 33 (id=10718): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r0, &(0x7f0000000500)="600000040014334000000000000000000000000000000001000000000000000000000200a52af8348974", 0x2a, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) 31.393791472s ago: executing program 5 (id=12675): r0 = syz_open_dev$media(&(0x7f0000000080), 0xf, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c80, 0x0) 31.319758878s ago: executing program 5 (id=12677): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24008845, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x18, 0x0, &(0x7f00000000c0)) 31.254899409s ago: executing program 5 (id=12680): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001"], 0x30}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 31.214944376s ago: executing program 5 (id=12686): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x0, 0x5, @tick=0xf64b, {0x0, 0xb8}, {0x4, 0x6}, @control={0x2, 0x7f, 0x2}}, {0x0, 0x3, 0x0, 0x4, @tick=0x8, {0x2, 0x4}, {0x0, 0x2}, @control={0x8, 0x4, 0x4ca}}], 0x38) 31.181905485s ago: executing program 5 (id=12688): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) 31.115184385s ago: executing program 5 (id=12695): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xb, 0x200, 0x2}, 0x1c) close(0x3) 15.087271846s ago: executing program 34 (id=12695): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xb, 0x200, 0x2}, 0x1c) close(0x3) 8.801352327s ago: executing program 6 (id=12961): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0x4000fff9, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) 2.925728576s ago: executing program 6 (id=12961): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0x4000fff9, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) 751.396291ms ago: executing program 4 (id=13270): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r0, 0xaeb, 0x1) 729.518469ms ago: executing program 4 (id=13271): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 702.569544ms ago: executing program 0 (id=13272): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 526.151293ms ago: executing program 4 (id=13277): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1c5}]}) 494.431388ms ago: executing program 2 (id=13278): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0xffffffff, 0x0, 0x2, 0x1, 0x2, 0x2}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x8f}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 435.735432ms ago: executing program 0 (id=13279): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 408.292596ms ago: executing program 2 (id=13280): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={r0, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4000000000000004, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491c54e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd0000e7744b74eaa2317fdd9db2fea7e7d63f9a007866063c8c162b99d845fb", [0x60, 0x4]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x3, 0x1, 0x9, 0x14, "7f199114c2212a187ddfb2a6f56c7c07c8ba1a602abf797a7d0e83f445539e0387cacea8fb5067408bd5d5a6fa1728f5058ab4771cb0c6346eaccac3dfcdbc31", "adbba93b1a31dc171e78e8bd2e9d7c88b7f7134fe19e593070535b27fa99a08d", [0x8000000000000000, 0x1ff]}) 377.02851ms ago: executing program 4 (id=13281): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c0002800800", @ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x4040090}, 0xc000) 333.412623ms ago: executing program 0 (id=13282): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x149802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x8f, 0x0, 0x10}]}) 255.962377ms ago: executing program 4 (id=13283): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000000105000d0000000000000002000102240002801400018008000100e000000108000200e00000010c00028005000100000000000c000f800800014000000200080008"], 0x4c}}, 0x0) 230.290212ms ago: executing program 2 (id=13284): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff}) dup3(r1, r0, 0x80000) 193.796967ms ago: executing program 4 (id=13285): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000005c0)=0x2, 0x4) 179.808929ms ago: executing program 2 (id=13286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x4ed}]}, 0x24}}, 0x0) 149.953643ms ago: executing program 0 (id=13294): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x8140, 0x0) 119.784247ms ago: executing program 2 (id=13287): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4603240095028000000000000003003e0001010000940200000000000040000000000000004d02000000000000f6ffffff000038000100fdff81000808030000000400000000000000000000e70a00000000000000010100000000000006"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 109.872506ms ago: executing program 0 (id=13296): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140f, 0x1}, 0x10}}, 0x0) 31.890248ms ago: executing program 2 (id=13288): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) readv(r0, &(0x7f0000000e80)=[{&(0x7f00000008c0)=""/104, 0x68}], 0x1) 0s ago: executing program 0 (id=13289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="08010000", @ANYRES16=r1, @ANYBLOB="df4800000000fddbdf250c000000180001801400020064756d6d793000000000000000000000dc00038004000100d400038010000180"], 0x108}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) kernel console output (not intermixed with test programs): dm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 284.310465][ T43] audit: type=1400 audit(2000000044.001:45036): avc: denied { unmount } for pid=5869 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 284.742658][T29795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11307'. [ 284.967282][T29811] mmap: syz.0.11315 (29811): VmData 37400576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 285.102933][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 285.264777][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 285.272454][ T10] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 285.276478][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.279425][ T10] usb 7-1: Product: syz [ 285.281129][ T10] usb 7-1: Manufacturer: syz [ 285.283038][ T10] usb 7-1: SerialNumber: syz [ 285.290855][ T10] usb 7-1: config 0 descriptor?? [ 285.299509][ T10] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 285.302759][ T10] pctv452e: pctv452e_power_ctrl: 1 [ 285.302759][ T10] [ 285.307496][ T10] usb 7-1: selecting invalid altsetting 3 [ 285.309862][ T10] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 285.309862][ T10] [ 285.314135][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 285.324219][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 285.328758][ T10] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 285.334340][ T10] usb 7-1: media controller created [ 285.337316][ T10] dvb-usb: bulk message failed: -22 (8/0) [ 285.337387][ T10] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 285.337539][ T10] dvb-usb: MAC address reading failed. [ 285.346357][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.380134][ T10] DVB: Unable to find symbol stb0899_attach() [ 285.380349][T29832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11325'. [ 285.382896][ T10] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 285.389806][T29832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11325'. [ 285.394611][T29832] netlink: 'syz.0.11325': attribute type 12 has an invalid length. [ 285.441722][T29835] IPVS: persistence engine module ip_vs_pe_s not found [ 285.444856][ T10] rc_core: IR keymap rc-tt-1500 not found [ 285.447278][ T10] Registered IR keymap rc-empty [ 285.450640][ T10] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 285.459404][ T10] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input33 [ 285.465291][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 285.468696][ T10] pctv452e: pctv452e_power_ctrl: 0 [ 285.468696][ T10] [ 285.471769][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 285.511892][T29801] dvb-usb: bulk message failed: -22 (7/0) [ 285.514106][T29801] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 285.519337][ T5859] usb 7-1: USB disconnect, device number 17 [ 285.568036][ T5859] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 287.299897][T29961] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 287.602470][T29995] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 287.606346][T29995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.647097][T29997] binder: 29996:29997 ioctl 4018620d 0 returned -22 [ 287.650789][T29997] binder: 29996:29997 ioctl c0306201 200000000300 returned -11 [ 287.777983][T30009] hub 4-0:1.0: USB hub found [ 287.781420][T30009] hub 4-0:1.0: 2 ports detected [ 288.072082][T30040] netlink: 'syz.0.11423': attribute type 62 has an invalid length. [ 288.160571][T30053] openvswitch: netlink: Duplicate or invalid key (type 0). [ 288.163715][T30053] openvswitch: netlink: Actions may not be safe on all matching packets [ 288.389089][T30076] bad cache= option: none [ 288.389089][T30076] [ 288.392371][T30076] CIFS: VFS: bad cache= option: none [ 288.430546][T30081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11442'. [ 288.479708][ T5859] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 288.509111][T30089] nbd: must specify a size in bytes for the device [ 288.640024][ T5859] usb 10-1: Using ep0 maxpacket: 8 [ 288.644080][ T5859] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 288.647423][ T5859] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 288.652423][ T5859] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 288.657287][ T5859] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 288.662372][ T5859] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 288.667007][ T5859] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 288.671755][ T5859] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 288.678167][ T5859] usb 10-1: config 168 interface 0 has no altsetting 0 [ 288.683104][ T5859] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 288.686332][ T5859] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 288.691236][ T5859] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 288.696247][ T5859] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 288.701131][ T5859] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 288.706125][ T5859] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 288.715909][ T5859] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 288.721436][ T5859] usb 10-1: config 168 interface 0 has no altsetting 0 [ 288.727778][ T5859] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 288.736087][ T5859] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 288.743450][ T5859] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 288.748483][ T5859] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 288.753266][ T5859] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 288.758736][ T5859] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 288.763511][ T5859] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 288.769175][ T5859] usb 10-1: config 168 interface 0 has no altsetting 0 [ 288.775323][ T5859] usb 10-1: string descriptor 0 read error: -22 [ 288.779008][ T5859] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 288.784161][ T5859] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.806177][ T5859] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 289.150941][T30138] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.11471:30138 [ 289.412767][ T43] kauditd_printk_skb: 211 callbacks suppressed [ 289.412787][ T43] audit: type=1400 audit(2000000048.783:45248): avc: denied { mount } for pid=30148 comm="syz.2.11476" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 289.425080][ T43] audit: type=1400 audit(2000000048.792:45249): avc: denied { unmount } for pid=30148 comm="syz.2.11476" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 289.459128][ T43] audit: type=1400 audit(2000000048.820:45250): avc: denied { read append } for pid=30150 comm="syz.2.11477" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 289.470162][ T43] audit: type=1400 audit(2000000048.820:45251): avc: denied { open } for pid=30150 comm="syz.2.11477" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 289.480559][ T43] audit: type=1400 audit(2000000048.820:45252): avc: denied { ioctl } for pid=30150 comm="syz.2.11477" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 289.507359][ T43] audit: type=1400 audit(2000000048.876:45253): avc: denied { create } for pid=30152 comm="syz.2.11478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 289.542816][ T43] audit: type=1400 audit(2000000048.904:45254): avc: denied { create } for pid=30154 comm="syz.2.11479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 289.957409][ T43] audit: type=1326 audit(2000000049.297:45255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30131 comm="syz.0.11468" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c239df99 code=0x7fc00000 [ 289.966221][ T43] audit: type=1326 audit(2000000049.297:45256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30131 comm="syz.0.11468" exe="/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f58c239df99 code=0x7fc00000 [ 289.973947][ T43] audit: type=1326 audit(2000000049.297:45257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30131 comm="syz.0.11468" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c239df99 code=0x7fc00000 [ 289.999547][T30163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11481'. [ 290.073922][T30169] ieee802154 phy1 wpan1: encryption failed: -22 [ 290.682737][T30211] wireguard: wireguard0: Could not create IPv4 socket [ 290.700260][T30214] wireguard: wg0: Could not create IPv4 socket [ 290.742165][T30216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11506'. [ 292.932472][T30238] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 292.944141][T30238] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 292.951226][T30238] netlink: 'syz.2.11518': attribute type 1 has an invalid length. [ 292.954857][T30238] netlink: 1 bytes leftover after parsing attributes in process `syz.2.11518'. [ 293.236398][ T1045] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 293.427825][ T2333] usb 10-1: USB disconnect, device number 2 [ 295.137566][ T43] kauditd_printk_skb: 110 callbacks suppressed [ 295.137586][ T43] audit: type=1400 audit(2000000054.136:45368): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=67 daddr=255.255.255.255 dest=68 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 299.015684][ T43] audit: type=1400 audit(2000000057.766:45369): avc: denied { write } for pid=30327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.077584][ T43] audit: type=1400 audit(2000000057.823:45370): avc: denied { write } for pid=30330 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.209943][ T43] audit: type=1400 audit(2000000058.880:45371): avc: denied { write } for pid=30332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.275005][ T43] audit: type=1400 audit(2000000058.946:45372): avc: denied { write } for pid=30335 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.402762][ T43] audit: type=1400 audit(2000000059.067:45373): avc: denied { bpf } for pid=30339 comm="syz.2.11540" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 300.409797][ T43] audit: type=1400 audit(2000000059.067:45374): avc: denied { map_create } for pid=30338 comm="syz.0.11538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 300.421405][ T43] audit: type=1400 audit(2000000059.067:45375): avc: denied { map_read map_write } for pid=30338 comm="syz.0.11538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 300.431650][ T43] audit: type=1400 audit(2000000059.077:45376): avc: denied { perfmon } for pid=30339 comm="syz.2.11540" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 300.443842][ T43] audit: type=1400 audit(2000000059.077:45377): avc: denied { prog_run } for pid=30339 comm="syz.2.11540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 300.447963][T30347] vivid-000: ================= START STATUS ================= [ 300.454555][T30347] vivid-000: Test Pattern: 100% Colorbar [ 300.462542][T30347] vivid-000: Fill Percentage of Frame: 4 [ 300.464849][T30347] vivid-000: Horizontal Movement: Move Right Slow [ 300.467284][T30347] vivid-000: Vertical Movement: No Movement [ 300.470995][T30347] vivid-000: OSD Text Mode: Counters Only [ 300.472911][T30347] vivid-000: Show Border: true [ 300.478975][T30347] vivid-000: Show Square: false [ 300.484454][T30347] vivid-000: Sensor Flipped Horizontally: true [ 300.486600][T30347] vivid-000: Sensor Flipped Vertically: true [ 300.492939][T30347] vivid-000: Insert SAV Code in Image: true [ 300.494873][T30347] vivid-000: Insert EAV Code in Image: true [ 300.500848][T30347] vivid-000: Insert Video Guard Band: true [ 300.502872][T30347] vivid-000: Reduced Framerate: false [ 300.509011][T30347] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 023-0 [ 300.511709][T30347] vivid-000: S-Video 000-0 Is Connected To: None [ 300.514192][T30347] vivid-000: Enable Capture Cropping: false grabbed [ 300.516406][T30347] vivid-000: Enable Capture Composing: true grabbed [ 300.518569][T30347] vivid-000: Enable Capture Scaler: false grabbed [ 300.521959][T30347] vivid-000: Timestamp Source: Start of Exposure [ 300.526408][T30347] vivid-000: Colorspace: Rec. 709 [ 300.528146][T30347] vivid-000: Transfer Function: Default [ 300.530027][T30347] vivid-000: Y'CbCr Encoding: BT.2020 Constant Luminance [ 300.532353][T30347] vivid-000: HSV Encoding: Hue 0-256 [ 300.534714][T30347] vivid-000: Quantization: Limited Range [ 300.536666][T30347] vivid-000: Apply Alpha To Red Only: true [ 300.538867][T30347] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 300.541080][T30347] vivid-000: DV Timings Signal Mode: Current DV Timings [ 300.543502][T30347] vivid-000: DV Timings: 640x480p59 inactive [ 300.546044][T30347] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 300.548572][T30347] vivid-000: Maximum EDID Blocks: 1 [ 300.550457][T30347] vivid-000: Limited RGB Range (16-235): true [ 300.552524][T30347] vivid-000: Rx RGB Quantization Range: RGB Full Range (0-255) [ 300.555390][T30347] vivid-000: Power Present: 0x00000001 [ 300.557306][T30347] tpg source WxH: 1280x720 (Y'CbCr) [ 300.561406][T30347] tpg field: 1 [ 300.562615][T30347] tpg crop: (0,0)/1280x720 [ 300.564150][T30347] tpg compose: (0,0)/1280x720 [ 300.565913][T30347] tpg colorspace: 3 [ 300.567503][T30347] tpg transfer function: 1/1 [ 300.569150][T30347] tpg Y'CbCr encoding: 7/7 [ 300.571079][T30347] tpg quantization: 2/2 [ 300.572574][T30347] tpg RGB range: 2/1 [ 300.573900][T30347] vivid-000: ================== END STATUS ================== [ 300.629218][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 300.629237][ T43] audit: type=1400 audit(2000000059.273:45383): avc: denied { read } for pid=30365 comm="syz.5.11548" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 300.646535][ T43] audit: type=1400 audit(2000000059.273:45384): avc: denied { read open } for pid=30365 comm="syz.5.11548" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 300.669788][ T43] audit: type=1400 audit(2000000059.273:45385): avc: denied { ioctl } for pid=30365 comm="syz.5.11548" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 300.683502][ T43] audit: type=1400 audit(2000000059.282:45386): avc: denied { recv } for pid=5658 comm="syz-executor" saddr=127.0.0.1 src=42580 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 300.731869][ T43] audit: type=1400 audit(2000000059.376:45387): avc: denied { read } for pid=30373 comm="syz.4.11553" dev="nsfs" ino=4026532905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 300.750190][ T43] audit: type=1400 audit(2000000059.376:45388): avc: denied { open } for pid=30373 comm="syz.4.11553" path="net:[4026532905]" dev="nsfs" ino=4026532905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 300.762149][ T43] audit: type=1400 audit(2000000059.395:45389): avc: denied { mounton } for pid=30376 comm="syz.0.11552" path="/2942/file0" dev="tmpfs" ino=14816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 300.772662][ T43] audit: type=1400 audit(2000000059.395:45390): avc: denied { mount } for pid=30376 comm="syz.0.11552" name="/" dev="ramfs" ino=93756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 300.788201][ T43] audit: type=1400 audit(2000000059.404:45391): avc: denied { recv } for pid=5657 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=42580 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 300.801371][ T43] audit: type=1400 audit(2000000059.423:45392): avc: denied { unmount } for pid=5864 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 300.898223][T30393] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11561'. [ 300.902535][T30393] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11561'. [ 301.151225][T30433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11581'. [ 301.161758][T30433] gretap0: entered promiscuous mode [ 301.318007][T30458] macvtap1: entered allmulticast mode [ 301.319824][T30458] bond0: entered allmulticast mode [ 301.321780][T30458] bond_slave_0: entered allmulticast mode [ 301.324253][T30458] bond_slave_1: entered allmulticast mode [ 301.326269][T30458] bond_slave_0: entered promiscuous mode [ 301.330635][T30458] bond_slave_1: entered promiscuous mode [ 301.337379][T30458] bond0: left allmulticast mode [ 301.339322][T30458] bond_slave_0: left allmulticast mode [ 301.341484][T30458] bond_slave_1: left allmulticast mode [ 301.372691][ T5840] bond_slave_0: left promiscuous mode [ 301.377207][ T5840] bond_slave_1: left promiscuous mode [ 301.655134][T30490] netlink: 348 bytes leftover after parsing attributes in process `syz.2.11607'. [ 302.052318][T30532] netlink: 'syz.5.11626': attribute type 322 has an invalid length. [ 302.119966][T30537] [U] V3Fپ"S/4:XTZWTLW= [ 302.124975][T30535] [U] J"E:" [ 302.128029][T30538] tipc: Enabling of bearer rejected, media not registered [ 302.221635][T30548] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11636'. [ 302.429766][T30569] syz.0.11646: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 302.465302][T30569] CPU: 0 UID: 0 PID: 30569 Comm: syz.0.11646 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.465334][T30569] Tainted: [L]=SOFTLOCKUP [ 302.465342][T30569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 302.465353][T30569] Call Trace: [ 302.465363][T30569] [ 302.465370][T30569] dump_stack_lvl+0x100/0x190 [ 302.465401][T30569] warn_alloc.cold+0x94/0xa8 [ 302.465426][T30569] ? __pfx_warn_alloc+0x10/0x10 [ 302.465446][T30569] ? __pfx_slow_avc_audit+0x10/0x10 [ 302.465472][T30569] ? __lock_acquire+0x49f/0x1a40 [ 302.465493][T30569] ? find_held_lock+0x2b/0x80 [ 302.465510][T30569] ? avc_has_extended_perms+0x33a/0x1080 [ 302.465524][T30569] ? avc_has_extended_perms+0x33a/0x1080 [ 302.465539][T30569] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 302.465556][T30569] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 302.465570][T30569] __vmalloc_node_range_noprof+0x136c/0x1630 [ 302.465590][T30569] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 302.465606][T30569] ? trace_contention_end+0x126/0x160 [ 302.465620][T30569] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 302.465639][T30569] ? dvb_demux_do_ioctl+0x929/0x1200 [ 302.465766][T30569] ? find_held_lock+0x2b/0x80 [ 302.465793][T30569] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 302.465816][T30569] ? __pfx___mutex_lock+0x10/0x10 [ 302.465840][T30569] ? tomoyo_path_number_perm+0x188/0x580 [ 302.465868][T30569] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 302.465887][T30569] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 302.465912][T30569] __vmalloc_node_noprof+0xad/0xf0 [ 302.465937][T30569] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 302.465963][T30569] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 302.465983][T30569] dvb_demux_do_ioctl+0x9e0/0x1200 [ 302.466011][T30569] ? do_vfs_ioctl+0x226/0x13e0 [ 302.466039][T30569] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 302.466059][T30569] dvb_usercopy+0x167/0x340 [ 302.466078][T30569] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 302.466104][T30569] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 302.466128][T30569] ? __pfx_dvb_usercopy+0x10/0x10 [ 302.466154][T30569] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 302.466175][T30569] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 302.466199][T30569] ? selinux_file_ioctl+0x13b/0x290 [ 302.466224][T30569] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 302.466242][T30569] ? selinux_file_ioctl+0xb6/0x290 [ 302.466259][T30569] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 302.466274][T30569] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 302.466288][T30569] dvb_demux_ioctl+0x29/0x40 [ 302.466303][T30569] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 302.466320][T30569] __x64_sys_ioctl+0x18e/0x210 [ 302.466337][T30569] do_syscall_64+0x115/0x870 [ 302.466349][T30569] ? clear_bhb_loop+0x40/0x90 [ 302.466363][T30569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.466381][T30569] RIP: 0033:0x7f58c239df99 [ 302.466398][T30569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.466420][T30569] RSP: 002b:00007f58c3277028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.466440][T30569] RAX: ffffffffffffffda RBX: 00007f58c2625fa0 RCX: 00007f58c239df99 [ 302.466447][T30569] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000004 [ 302.466459][T30569] RBP: 00007f58c2434ec4 R08: 0000000000000000 R09: 0000000000000000 [ 302.466469][T30569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.466479][T30569] R13: 00007f58c2626038 R14: 00007f58c2625fa0 R15: 00007ffeb3f18d98 [ 302.466500][T30569] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 302.466528][T30569] [ 302.474674][T30575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11649'. [ 302.479866][T30569] Mem-Info: [ 302.604484][T30569] active_anon:31555 inactive_anon:2230 isolated_anon:0 [ 302.604484][T30569] active_file:4163 inactive_file:20727 isolated_file:0 [ 302.604484][T30569] unevictable:1768 dirty:332 writeback:0 [ 302.604484][T30569] slab_reclaimable:8517 slab_unreclaimable:77691 [ 302.604484][T30569] mapped:35379 shmem:22789 pagetables:4261 [ 302.604484][T30569] sec_pagetables:307 bounce:0 [ 302.604484][T30569] kernel_misc_reclaimable:0 [ 302.604484][T30569] free:444971 free_pcp:4190 free_cma:0 [ 302.621890][T30569] Node 0 active_anon:126696kB inactive_anon:8920kB active_file:16652kB inactive_file:82512kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:141688kB dirty:1308kB writeback:0kB shmem:88316kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14880kB pagetables:15964kB sec_pagetables:1228kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 302.631168][T30572] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 302.633106][T30587] binder: 30586:30587 ioctl c0306201 0 returned -14 [ 302.636200][T30569] Node 1 active_anon:1384kB inactive_anon:0kB active_file:0kB inactive_file:396kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:20kB writeback:0kB shmem:4700kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:192kB pagetables:1080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 302.636238][T30569] Node 0 DMA free:9084kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 302.636274][T30569] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 302.636307][T30569] Node 0 DMA32 free:160240kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:128308kB inactive_anon:8920kB active_file:16776kB inactive_file:82512kB unevictable:3536kB writepending:1308kB zspages:0kB present:2080628kB managed:1255240kB mlocked:0kB bounce:0kB free_pcp:4432kB local_pcp:32kB free_cma:0kB [ 302.636359][T30569] lowmem_reserve[]: 0 0 0 0 0 [ 302.636391][T30569] Node 1 Normal free:1605008kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1384kB inactive_anon:0kB active_file:0kB inactive_file:396kB unevictable:3536kB writepending:20kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:14064kB local_pcp:11964kB free_cma:0kB [ 302.636449][T30569] lowmem_reserve[]: 0 0 0 0 0 [ 302.636614][T30569] Node 0 DMA: 3*4kB (U) 2*8kB (U) 0*16kB 3*32kB (U) 4*64kB (U) 2*128kB (U) 1*256kB (U) 2*512kB (U) 1*1024kB (U) 3*2048kB (UM) 0*4096kB = 9084kB [ 302.704814][T30569] Node 0 DMA32: 26*4kB (ME) 340*8kB (UME) 176*16kB (UE) 394*32kB (UME) 274*64kB (UME) 250*128kB (UME) 133*256kB (UE) 70*512kB (UM) 17*1024kB (U) 0*2048kB 0*4096kB = 155080kB [ 302.710337][T30569] Node 1 Normal: 69*4kB (U) 266*8kB (UM) 240*16kB (U) 219*32kB (UME) 215*64kB (UME) 186*128kB (UM) 183*256kB (UME) 164*512kB (UME) 136*1024kB (UME) 7*2048kB (UME) 310*4096kB (UM) = 1604996kB [ 302.717150][T30569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 302.721333][T30569] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 302.739443][T30569] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 302.742434][T30569] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=1 hugepages_size=2048kB [ 302.745293][T30595] xt_limit: Overflow, try lower: 271964/0 [ 302.746017][T30569] 50054 total pagecache pages [ 302.746026][T30569] 0 pages in swap cache [ 302.746031][T30569] Free swap = 124996kB [ 302.746036][T30569] Total swap = 124996kB [ 302.746043][T30569] 1048443 pages RAM [ 302.764282][T30569] 0 pages HighMem/MovableOnly [ 302.765748][T30569] 285322 pages reserved [ 302.776323][T30599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11659'. [ 302.777777][T30569] 0 pages cma reserved [ 303.009334][T30623] support for cryptoloop has been removed. Use dm-crypt instead. [ 303.014243][ T5873] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 303.024225][T30629] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11674'. [ 303.037850][T30629] netlink: 'syz.0.11674': attribute type 6 has an invalid length. [ 303.042482][T30629] netlink: 'syz.0.11674': attribute type 5 has an invalid length. [ 303.045430][T30629] netlink: 'syz.0.11674': attribute type 4 has an invalid length. [ 303.216480][T30653] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.11686'. [ 303.220890][T30653] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.11686'. [ 303.782584][ T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 303.799033][T30671] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 303.802765][T30671] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 303.808793][T30671] cramfs: wrong magic [ 310.839003][ T43] kauditd_printk_skb: 185 callbacks suppressed [ 310.839024][ T43] audit: type=1400 audit(2000000068.837:45578): avc: denied { write } for pid=30703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.851047][ T43] audit: type=1400 audit(2000000068.837:45579): avc: denied { create } for pid=30703 comm="dhcpcd-run-hook" name="resolv.conf.eth0.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 310.859501][ T43] audit: type=1400 audit(2000000068.837:45580): avc: denied { write open } for pid=30703 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth0.dhcp" dev="tmpfs" ino=23600 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 310.871281][ T43] audit: type=1400 audit(2000000068.837:45581): avc: denied { append } for pid=30703 comm="dhcpcd-run-hook" name="resolv.conf.eth0.dhcp" dev="tmpfs" ino=23600 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 310.880883][ T43] audit: type=1400 audit(2000000068.837:45582): avc: denied { getattr } for pid=30703 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 310.889815][ T43] audit: type=1400 audit(2000000068.856:45583): avc: denied { read } for pid=30705 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 310.898234][ T43] audit: type=1400 audit(2000000068.874:45584): avc: denied { write } for pid=30706 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.905482][ T43] audit: type=1400 audit(2000000068.874:45585): avc: denied { unlink } for pid=30706 comm="rm" name="resolv.conf.eth0.dhcp" dev="tmpfs" ino=23600 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 310.986469][ T43] audit: type=1400 audit(2000000068.977:45586): avc: denied { bpf } for pid=30709 comm="syz.0.11702" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 310.996359][ T43] audit: type=1400 audit(2000000068.977:45587): avc: denied { map_create } for pid=30709 comm="syz.0.11702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 311.151197][T30729] netlink: 'syz.4.11711': attribute type 1 has an invalid length. [ 311.164661][T30731] 0x00000000001d-0x000000020000 : "" [ 311.183556][T30731] ftl_cs: FTL header corrupt! [ 311.220972][T30740] program syz.2.11716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.254636][T30743] __nla_validate_parse: 1 callbacks suppressed [ 311.254655][T30743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11718'. [ 311.577080][T30794] SELinux: security_context_str_to_sid (4msevS:"-XF@) failed with errno=-22 [ 311.739122][T30818] max out of range [ 312.182012][ T5998] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 312.347308][ T5998] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 312.351291][ T5998] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 312.356050][ T5998] usb 10-1: Product: syz [ 312.357891][ T5998] usb 10-1: Manufacturer: syz [ 312.359993][ T5998] usb 10-1: SerialNumber: syz [ 312.365768][ T5998] usb 10-1: config 0 descriptor?? [ 312.371183][ T5998] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 312.384368][ T5998] dvb-usb: bulk message failed: -22 (2/0) [ 312.391648][ T5998] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 312.398117][ T5998] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 312.407393][ T5998] usb 10-1: media controller created [ 312.429367][T30882] "syz.0.11781" (30882) uses obsolete ecb(arc4) skcipher [ 312.429863][ T5998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 312.447797][T30894] overlayfs: regular lower layers cannot follow data lower layers [ 312.593242][T30837] cxusb: i2c rd: len=80 is too big! [ 312.593242][T30837] [ 312.596821][ T5998] cxusb: set interface failed [ 312.603212][ T5998] dvb-usb: bulk message failed: -22 (1/0) [ 312.631267][ T5998] DVB: Unable to find symbol mt352_attach() [ 312.635004][ T5998] dvb-usb: bulk message failed: -22 (5/0) [ 312.637003][ T5998] zl10353_read_register: readreg error (reg=127, ret==-121) [ 312.639505][ T5998] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 312.704871][ T5998] rc_core: IR keymap rc-dvico-mce not found [ 312.706887][ T5998] Registered IR keymap rc-empty [ 312.733655][ T5998] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 312.738971][ T5998] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input34 [ 312.745917][ T5998] dvb-usb: schedule remote query interval to 100 msecs. [ 312.748522][ T2333] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 312.751775][ T5998] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 312.763416][ T5998] usb 10-1: USB disconnect, device number 3 [ 312.803294][T30910] netlink: 'syz.4.11792': attribute type 1 has an invalid length. [ 312.806142][T30910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11792'. [ 312.819514][ T5998] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 312.905762][ T5873] Bluetooth: hci2: adv larger than maximum supported [ 312.905815][ T5873] Bluetooth: hci2: Malformed LE Event: 0x0d [ 312.908662][ T2333] usb 5-1: Using ep0 maxpacket: 32 [ 312.916150][ T2333] usb 5-1: config index 0 descriptor too short (expected 15270, got 18) [ 312.920533][ T2333] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 312.923398][ T2333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.926226][ T2333] usb 5-1: Product: syz [ 312.927541][ T2333] usb 5-1: Manufacturer: syz [ 312.929038][ T2333] usb 5-1: SerialNumber: syz [ 312.932875][ T2333] usb 5-1: config 0 descriptor?? [ 312.936671][ T2333] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 312.939173][ T2333] dvb-usb: bulk message failed: -22 (4/0) [ 312.945504][ T2333] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 312.948931][ T2333] dvb-usb: bulk message failed: -22 (5/0) [ 312.951350][ T2333] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 312.955978][ T2333] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 312.959310][ T2333] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 312.962159][ T2333] usb 5-1: media controller created [ 312.969442][ T2333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 312.978258][ T2333] usb 5-1: selecting invalid altsetting 3 [ 312.980226][ T2333] ttusb2: set interface to alts=3 failed [ 313.003434][ T2333] DVB: Unable to find symbol tda10086_attach() [ 313.006573][ T2333] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 313.010652][ T2333] dvb-usb: bulk message failed: -22 (4/0) [ 313.013059][ T2333] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 313.017927][ T2333] dvb-usb: bulk message failed: -22 (5/0) [ 313.020402][ T2333] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 313.024513][ T2333] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 313.157685][T30898] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 313.161149][T30898] dvb-usb: bulk message failed: -22 (7/0) [ 313.163638][T30898] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 313.168222][T30898] ttusb2: i2c transfer failed. [ 313.170987][ T2333] usb 5-1: USB disconnect, device number 13 [ 313.197017][ T2333] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 313.320291][T30925] bpf: Bad value for 'uid' [ 313.493383][T30935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11804'. [ 313.618328][T30947] netlink: 'syz.4.11809': attribute type 2 has an invalid length. [ 313.621709][T30947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11809'. [ 314.042908][T30995] netlink: 76 bytes leftover after parsing attributes in process `syz.5.11833'. [ 314.162192][ T5873] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 314.257115][T31019] vim2m vim2m.0: vidioc_s_fmt queue busy [ 314.487412][T31034] tmpfs: Cannot enable quota on remount [ 314.510983][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 314.688072][ T10] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 314.691796][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 314.695836][ T10] usb 7-1: Product: syz [ 314.697224][ T10] usb 7-1: Manufacturer: syz [ 314.698810][ T10] usb 7-1: SerialNumber: syz [ 314.705978][ T10] usb 7-1: config 0 descriptor?? [ 314.716952][ T10] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 314.721946][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 314.728323][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 314.732519][ T10] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 314.736145][ T10] usb 7-1: media controller created [ 314.742890][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 314.934971][T31015] cxusb: i2c wr: len=80 is too big! [ 314.934971][T31015] [ 314.940797][ T10] cxusb: set interface failed [ 314.942831][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 314.973101][ T10] DVB: Unable to find symbol mt352_attach() [ 314.975003][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 314.976898][ T10] zl10353_read_register: readreg error (reg=127, ret==-121) [ 314.980118][ T10] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 315.047139][ T10] rc_core: IR keymap rc-dvico-mce not found [ 315.049123][ T10] Registered IR keymap rc-empty [ 315.051390][ T10] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 315.056444][ T10] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input35 [ 315.069088][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 315.072147][ T10] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 315.077935][ T10] usb 7-1: USB disconnect, device number 18 [ 315.136213][T31079] tipc: MTU too low for tipc bearer [ 315.146665][ T10] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 315.277099][T31089] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11877'. [ 315.302659][T31091] tipc: Enabling not permitted [ 315.306094][T31091] tipc: Enabling of bearer rejected, failed to enable media [ 315.810988][T31128] syz.5.11896: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 315.817127][T31128] CPU: 3 UID: 0 PID: 31128 Comm: syz.5.11896 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.817148][T31128] Tainted: [L]=SOFTLOCKUP [ 315.817152][T31128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 315.817160][T31128] Call Trace: [ 315.817165][T31128] [ 315.817171][T31128] dump_stack_lvl+0x100/0x190 [ 315.817192][T31128] warn_alloc.cold+0x94/0xa8 [ 315.817205][T31128] ? __pfx_warn_alloc+0x10/0x10 [ 315.817217][T31128] ? do_syscall_64+0x115/0x870 [ 315.817235][T31128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.817253][T31128] ? __lock_acquire+0x49f/0x1a40 [ 315.817269][T31128] ? find_held_lock+0x2b/0x80 [ 315.817287][T31128] ? avc_has_extended_perms+0x33a/0x1080 [ 315.817302][T31128] ? avc_has_extended_perms+0x33a/0x1080 [ 315.817316][T31128] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 315.817334][T31128] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 315.817350][T31128] __vmalloc_node_range_noprof+0x136c/0x1630 [ 315.817370][T31128] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 315.817385][T31128] ? trace_contention_end+0x126/0x160 [ 315.817400][T31128] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 315.817420][T31128] ? dvb_demux_do_ioctl+0x929/0x1200 [ 315.817438][T31128] ? find_held_lock+0x2b/0x80 [ 315.817455][T31128] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 315.817471][T31128] ? __pfx___mutex_lock+0x10/0x10 [ 315.817487][T31128] ? tomoyo_path_number_perm+0x188/0x580 [ 315.817504][T31128] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 315.817521][T31128] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 315.817540][T31128] __vmalloc_node_noprof+0xad/0xf0 [ 315.817558][T31128] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 315.817576][T31128] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 315.817593][T31128] dvb_demux_do_ioctl+0x9e0/0x1200 [ 315.817612][T31128] ? do_vfs_ioctl+0x226/0x13e0 [ 315.817630][T31128] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 315.817644][T31128] dvb_usercopy+0x167/0x340 [ 315.817674][T31128] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 315.817694][T31128] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 315.817711][T31128] ? __pfx_dvb_usercopy+0x10/0x10 [ 315.817733][T31128] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 315.817752][T31128] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 315.817767][T31128] ? selinux_file_ioctl+0x13b/0x290 [ 315.817786][T31128] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 315.817801][T31128] ? selinux_file_ioctl+0xb6/0x290 [ 315.817820][T31128] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 315.817837][T31128] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 315.817852][T31128] dvb_demux_ioctl+0x29/0x40 [ 315.817869][T31128] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 315.817886][T31128] __x64_sys_ioctl+0x18e/0x210 [ 315.817903][T31128] do_syscall_64+0x115/0x870 [ 315.817916][T31128] ? clear_bhb_loop+0x40/0x90 [ 315.817929][T31128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.817941][T31128] RIP: 0033:0x7f6c7e99df99 [ 315.817953][T31128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.817963][T31128] RSP: 002b:00007f6c7f839028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.817976][T31128] RAX: ffffffffffffffda RBX: 00007f6c7ec25fa0 RCX: 00007f6c7e99df99 [ 315.817983][T31128] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000004 [ 315.817989][T31128] RBP: 00007f6c7ea34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 315.817995][T31128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.818002][T31128] R13: 00007f6c7ec26038 R14: 00007f6c7ec25fa0 R15: 00007ffff325c2c8 [ 315.818013][T31128] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 315.818032][T31128] [ 315.818062][T31128] Mem-Info: [ 315.976598][T31128] active_anon:11524 inactive_anon:1912 isolated_anon:0 [ 315.976598][T31128] active_file:4235 inactive_file:21224 isolated_file:0 [ 315.976598][T31128] unevictable:1768 dirty:427 writeback:0 [ 315.976598][T31128] slab_reclaimable:8521 slab_unreclaimable:78194 [ 315.976598][T31128] mapped:25150 shmem:2358 pagetables:4148 [ 315.976598][T31128] sec_pagetables:308 bounce:0 [ 315.976598][T31128] kernel_misc_reclaimable:0 [ 315.976598][T31128] free:448251 free_pcp:18762 free_cma:0 [ 315.994585][T31128] Node 0 active_anon:45880kB inactive_anon:7648kB active_file:16940kB inactive_file:84500kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100488kB dirty:1696kB writeback:0kB shmem:5896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14848kB pagetables:15556kB sec_pagetables:1232kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 316.010558][T31128] Node 1 active_anon:216kB inactive_anon:0kB active_file:0kB inactive_file:396kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:112kB dirty:12kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:192kB pagetables:1036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 316.024917][T31128] Node 0 DMA free:9132kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.036832][T31128] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 316.039473][T31128] Node 0 DMA32 free:178660kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45880kB inactive_anon:7648kB active_file:16940kB inactive_file:84500kB unevictable:3536kB writepending:1696kB zspages:0kB present:2080628kB managed:1255240kB mlocked:0kB bounce:0kB free_pcp:60376kB local_pcp:12692kB free_cma:0kB [ 316.052960][T31128] lowmem_reserve[]: 0 0 0 0 0 [ 316.054934][T31128] Node 1 Normal free:1605212kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:216kB inactive_anon:0kB active_file:0kB inactive_file:396kB unevictable:3536kB writepending:12kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:15236kB local_pcp:4096kB free_cma:0kB [ 316.067637][T31128] lowmem_reserve[]: 0 0 0 0 0 [ 316.069676][T31128] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (U) 2*32kB (U) 3*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 3*2048kB (UM) 0*4096kB = 9132kB [ 316.075732][T31128] Node 0 DMA32: 236*4kB (UME) 370*8kB (UME) 153*16kB (UME) 720*32kB (UME) 173*64kB (UME) 125*128kB (UME) 123*256kB (UME) 109*512kB (UM) 34*1024kB (UM) 0*2048kB 0*4096kB = 178576kB [ 316.083094][T31128] Node 1 Normal: 345*4kB (UM) 293*8kB (UM) 255*16kB (UM) 235*32kB (UME) 218*64kB (UME) 192*128kB (UM) 184*256kB (UE) 166*512kB (UME) 138*1024kB (UME) 8*2048kB (UME) 308*4096kB (UM) = 1605212kB [ 316.090795][T31128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 316.094749][T31128] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 316.099093][T31128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 316.103243][T31128] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=1 hugepages_size=2048kB [ 316.107032][T31128] 27813 total pagecache pages [ 316.109070][T31128] 0 pages in swap cache [ 316.110853][T31128] Free swap = 124996kB [ 316.112621][T31128] Total swap = 124996kB [ 316.114510][T31128] 1048443 pages RAM [ 316.116089][T31128] 0 pages HighMem/MovableOnly [ 316.118024][T31128] 285322 pages reserved [ 316.119742][T31128] 0 pages cma reserved [ 316.191581][ T43] kauditd_printk_skb: 239 callbacks suppressed [ 316.191593][ T43] audit: type=1400 audit(2000000073.843:45827): avc: denied { read } for pid=31137 comm="syz.4.11902" dev="nsfs" ino=4026532905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 316.201077][ T43] audit: type=1400 audit(2000000073.853:45828): avc: denied { open } for pid=31137 comm="syz.4.11902" path="net:[4026532905]" dev="nsfs" ino=4026532905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 316.211073][ T43] audit: type=1400 audit(2000000073.853:45829): avc: denied { create } for pid=31137 comm="syz.4.11902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 316.214726][T31140] loop6: detected capacity change from 0 to 128 [ 316.220774][ T43] audit: type=1400 audit(2000000073.853:45830): avc: denied { getopt } for pid=31137 comm="syz.4.11902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 316.285223][ T43] audit: type=1400 audit(2000000073.928:45831): avc: denied { recv } for pid=5657 comm="sshd-session" saddr=10.0.2.2 src=39260 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 316.299873][ T43] audit: type=1400 audit(2000000073.937:45832): avc: denied { recv } for pid=5657 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=42580 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 316.311747][ T43] audit: type=1400 audit(2000000073.937:45833): avc: denied { mmap_zero } for pid=31145 comm="syz.4.11905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 316.327177][ T43] audit: type=1400 audit(2000000073.937:45834): avc: denied { create } for pid=31146 comm="syz.5.11906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 316.356511][ T43] audit: type=1400 audit(2000000073.946:45835): avc: denied { write } for pid=31146 comm="syz.5.11906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 316.365273][ T43] audit: type=1400 audit(2000000073.965:45836): avc: denied { read write } for pid=25070 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.439305][ T5873] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 316.439317][ T5874] Bluetooth: hci4: command 0x1003 tx timeout [ 316.704872][T31182] netlink: 'syz.0.11922': attribute type 2 has an invalid length. [ 316.708301][T31182] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11922'. [ 317.412072][T31239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11946'. [ 317.444267][T31241] program syz.2.11947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.614076][T31260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11958'. [ 317.617318][T31260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11958'. [ 317.707688][T31271] vlan2: entered promiscuous mode [ 317.709856][T31271] bridge0: entered promiscuous mode [ 317.712476][T31271] vlan2: entered allmulticast mode [ 317.714567][T31271] bridge0: entered allmulticast mode [ 317.783149][T31277] fuse: Invalid rootmode [ 317.785997][T31279] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 317.848422][T31285] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.11968'. [ 317.991229][T31301] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11976'. [ 318.110101][T31314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11982'. [ 318.113480][T31314] syz_tun: refused to change device tx_queue_len [ 318.149907][T31319] Bluetooth: MGMT ver 1.23 [ 318.189364][T31321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.194864][T31324] autofs: Bad value for 'fd' [ 318.319710][T31341] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 318.350196][T31345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11996'. [ 318.663537][T31389] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 318.674560][T31389] bond3 (unregistering): Released all slaves [ 318.690535][T31392] netlink: 'syz.0.12019': attribute type 11 has an invalid length. [ 318.702634][T31393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12018'. [ 318.705415][T31393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12018'. [ 318.837315][T31411] dummy0: entered allmulticast mode [ 318.857704][T31415] tipc: Cannot configure node identity twice [ 318.865332][T31410] dummy0: left allmulticast mode [ 319.196029][T31457] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 319.408170][T31483] usb usb8: usbfs: process 31483 (syz.5.12062) did not claim interface 0 before use [ 319.422902][T31487] CIFS: Attempting to mount //127.0.0.1/share [ 319.432713][T31487] CIFS: VFS: \\127.0.0.1 Error -2 creating socket [ 319.436251][T31487] CIFS: VFS: \\127.0.0.1 Error -2 creating socket [ 319.441210][T31487] CIFS: VFS: Error connecting to socket. Aborting operation. [ 319.445402][T31487] CIFS: VFS: cifs_mount failed w/return code = -2 [ 319.544522][ T5859] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 322.706797][ T43] kauditd_printk_skb: 199 callbacks suppressed [ 322.706817][ T43] audit: type=1400 audit(2000000079.936:46036): avc: denied { write } for pid=31519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.720071][ T43] audit: type=1400 audit(2000000079.936:46037): avc: denied { create } for pid=31519 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 322.729882][ T43] audit: type=1400 audit(2000000079.945:46038): avc: denied { write open } for pid=31519 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth0.ra" dev="tmpfs" ino=24130 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 322.740694][ T43] audit: type=1400 audit(2000000079.945:46039): avc: denied { append } for pid=31519 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" dev="tmpfs" ino=24130 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 322.750699][ T43] audit: type=1400 audit(2000000079.945:46040): avc: denied { getattr } for pid=31519 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 322.760257][ T43] audit: type=1400 audit(2000000079.964:46041): avc: denied { read } for pid=31521 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 322.778275][ T43] audit: type=1400 audit(2000000080.001:46042): avc: denied { write } for pid=31522 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.786842][ T43] audit: type=1400 audit(2000000080.001:46043): avc: denied { unlink } for pid=31522 comm="rm" name="resolv.conf.eth0.ra" dev="tmpfs" ino=24130 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 326.430023][ T43] audit: type=1400 audit(2000000083.426:46044): avc: denied { write } for pid=31524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.486747][ T43] audit: type=1400 audit(2000000083.473:46045): avc: denied { write } for pid=31527 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.963044][ T43] audit: type=1400 audit(2000000086.739:46046): avc: denied { recv } for pid=5657 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=42580 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 330.039840][ T43] audit: type=1400 audit(2000000086.804:46047): avc: denied { allowed } for pid=31530 comm="syz.5.12076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 330.056124][ T43] audit: type=1400 audit(2000000086.804:46048): avc: denied { create } for pid=31530 comm="syz.5.12076" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 330.068393][ T43] audit: type=1400 audit(2000000086.804:46049): avc: denied { map } for pid=31530 comm="syz.5.12076" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=99661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 330.083390][ T1045] hid_parser_main: 91 callbacks suppressed [ 330.083408][ T1045] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 330.086099][ T43] audit: type=1400 audit(2000000086.804:46050): avc: denied { read write } for pid=31530 comm="syz.5.12076" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=99661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 330.086140][ T43] audit: type=1400 audit(2000000086.804:46051): avc: denied { prog_load } for pid=31531 comm="syz.4.12074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 330.086172][ T43] audit: type=1400 audit(2000000086.804:46052): avc: denied { perfmon } for pid=31531 comm="syz.4.12074" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 330.086215][ T43] audit: type=1400 audit(2000000086.804:46053): avc: denied { prog_run } for pid=31531 comm="syz.4.12074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 330.086246][ T43] audit: type=1400 audit(2000000086.804:46054): avc: denied { map_create } for pid=31531 comm="syz.4.12074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 330.086280][ T43] audit: type=1400 audit(2000000086.804:46055): avc: denied { map_read map_write } for pid=31531 comm="syz.4.12074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 330.144466][ T1045] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 330.194961][T31550] fido_id[31550]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 330.628831][T31606] __nla_validate_parse: 3 callbacks suppressed [ 330.628846][T31606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12100'. [ 330.634461][T31606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12100'. [ 330.637706][T31606] netlink: 'syz.2.12100': attribute type 7 has an invalid length. [ 330.730051][T31614] nbd: socks must be embedded in a SOCK_ITEM attr [ 330.932512][T31627] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 330.968349][T31632] netlink: 168 bytes leftover after parsing attributes in process `syz.5.12114'. [ 330.978424][T31634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12113'. [ 331.020833][T31638] fuse: blksize only supported for fuseblk [ 331.059220][T31646] program syz.2.12118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.149711][T31657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12125'. [ 331.153734][T31657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12125'. [ 331.318848][T31673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.447548][T31679] can0: slcan on ttynull. [ 331.533887][T31678] can0 (unregistered): slcan off ttynull. [ 331.823272][ T1045] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 331.831993][ T1045] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 331.838388][ T1045] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 331.843198][ T1045] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 331.847118][ T1045] rtc rtc0: __rtc_set_alarm: err=-22 [ 332.069021][T31709] netlink: 'syz.0.12148': attribute type 29 has an invalid length. [ 332.388256][T31734] vivid-000: disconnect [ 332.393915][T31732] vivid-000: reconnect [ 332.398317][T31735] loop4: detected capacity change from 0 to 2640 [ 332.409035][T31735] Buffer I/O error on dev loop4, logical block 0, async page read [ 332.412867][T31735] Buffer I/O error on dev loop4, logical block 0, async page read [ 332.416393][T31735] Buffer I/O error on dev loop4, logical block 0, async page read [ 332.421682][T31735] Buffer I/O error on dev loop4, logical block 0, async page read [ 332.425466][T31735] Buffer I/O error on dev loop4, logical block 0, async page read [ 332.429161][T31735] Buffer I/O error on dev loop4, logical block 0, async page read [ 332.433141][T31735] Buffer I/O error on dev loop4, logical block 0, async page read [ 332.436272][T31735] Buffer I/O error on dev loop4, logical block 0, async page read [ 332.439286][T31735] ldm_validate_partition_table(): Disk read failed. [ 332.445985][T31735] Buffer I/O error on dev loop4, logical block 0, async page read [ 332.449393][T31735] Buffer I/O error on dev loop4, logical block 0, async page read [ 332.454589][T31735] Dev loop4: unable to read RDB block 0 [ 332.457398][T31735] loop4: unable to read partition table [ 332.462844][T31735] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 332.481660][ T5149] ldm_validate_partition_table(): Disk read failed. [ 332.484857][ T5149] Dev loop4: unable to read RDB block 0 [ 332.487532][ T5149] loop4: unable to read partition table [ 332.829726][T31785] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12184'. [ 332.851563][T31786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12183'. [ 333.092732][T31816] loop5: detected capacity change from 0 to 7 [ 333.121843][T31816] Dev loop5: unable to read RDB block 7 [ 333.124133][T31816] loop5: unable to read partition table [ 333.136883][T31816] loop5: partition table beyond EOD, truncated [ 333.139337][T31816] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 333.211201][T31831] netlink: 'syz.5.12202': attribute type 1 has an invalid length. [ 333.214047][T31831] netlink: 220 bytes leftover after parsing attributes in process `syz.5.12202'. [ 333.562889][T31854] tmpfs: Cannot change global quota limit on remount [ 333.694369][T31863] nbd: must specify a device to reconfigure [ 333.741442][T31870] eql: left promiscuous mode [ 334.011194][T31890] netlink: 199784 bytes leftover after parsing attributes in process `syz.5.12229'. [ 334.016240][T31890] netlink: 'syz.5.12229': attribute type 1 has an invalid length. [ 334.122447][T31901] IPVS: Error during creation of socket; terminating [ 334.371345][T31927] random: crng reseeded on system resumption [ 334.528412][T31942] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 334.705249][T31960] netlink: 'syz.5.12264': attribute type 4 has an invalid length. [ 334.996663][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 335.028480][T31994] input input36: cannot allocate more than FF_MAX_EFFECTS effects [ 335.304433][T32019] Option '_n'tr1ZQ3-ֵkXv~' to dns_resolver key: bad/missing value [ 335.448775][ T43] kauditd_printk_skb: 241 callbacks suppressed [ 335.448793][ T43] audit: type=1400 audit(2000000091.867:46297): avc: denied { create } for pid=32036 comm="syz.4.12300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 335.461853][ T43] audit: type=1400 audit(2000000091.876:46298): avc: denied { connect } for pid=32036 comm="syz.4.12300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 335.470475][ T43] audit: type=1400 audit(2000000091.876:46299): avc: denied { setopt } for pid=32036 comm="syz.4.12300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 335.493332][ T43] audit: type=1400 audit(2000000091.904:46300): avc: denied { read } for pid=32040 comm="syz.5.12303" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 335.505477][ T43] audit: type=1400 audit(2000000091.904:46301): avc: denied { open } for pid=32040 comm="syz.5.12303" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 335.516301][ T43] audit: type=1400 audit(2000000091.914:46302): avc: denied { ioctl } for pid=32040 comm="syz.5.12303" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 335.525761][ T43] audit: type=1400 audit(2000000091.923:46303): avc: denied { bind } for pid=32042 comm="syz.0.12304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 335.536113][ T43] audit: type=1400 audit(2000000091.923:46304): avc: denied { getopt } for pid=32042 comm="syz.0.12304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 335.542571][ T43] audit: type=1400 audit(2000000091.932:46305): avc: denied { read } for pid=32044 comm="syz.4.12305" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 335.549912][ T43] audit: type=1400 audit(2000000091.932:46306): avc: denied { open } for pid=32044 comm="syz.4.12305" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 336.035166][T32081] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 336.038693][T32081] ALSA: mixer_oss: invalid index 137438 [ 336.566054][T32130] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 336.640907][ T5873] Bluetooth: hci3: link tx timeout [ 336.645322][ T5873] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 336.684773][ T1136] ata1.00: exception Emask 0x0 SAct 0x100 SErr 0x0 action 0x6 [ 336.687615][ T1136] ata1.00: waking up from sleep [ 336.690266][ T1136] ata1: hard resetting link [ 337.027487][ T1136] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 337.034393][ T1136] ata1.00: configured for UDMA/100 [ 337.040410][ T1136] ata1: EH complete [ 337.136521][T32157] kAFS: unable to lookup cell '(,c' [ 337.329253][T32172] libceph: resolve '0' (ret=-3): failed [ 337.331180][T32173] netlink: 'syz.0.12366': attribute type 1 has an invalid length. [ 337.469830][T32184] netlink: 'syz.0.12372': attribute type 12 has an invalid length. [ 337.472573][T32184] __nla_validate_parse: 5 callbacks suppressed [ 337.472584][T32184] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12372'. [ 337.561686][T32190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12375'. [ 337.566811][T32190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12375'. [ 337.583080][T32192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12371'. [ 337.587392][T32192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12371'. [ 337.591485][T32192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12371'. [ 337.596282][T32192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12371'. [ 337.600594][T32192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12371'. [ 337.848439][T32222] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 337.898768][T32230] hugetlbfs: Bad value 'x' for mount option 'size' [ 337.898768][T32230] [ 337.902670][T32232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12394'. [ 338.115839][T32252] veth1_to_batadv: entered promiscuous mode [ 338.120471][T32251] veth1_to_batadv: left promiscuous mode [ 338.141975][T32256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12406'. [ 338.213877][ T5998] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 338.337767][T32281] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 338.340495][T32281] SELinux: failed to load policy [ 338.365566][T32284] usb usb9: usbfs: process 32284 (syz.5.12419) did not claim interface 10 before use [ 338.372744][ T5998] usb 7-1: Using ep0 maxpacket: 8 [ 338.378693][ T5998] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 338.390537][ T5998] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 338.399863][ T5998] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 338.407712][ T5998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.423046][ T5998] usb 7-1: config 0 descriptor?? [ 338.546984][T32297] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 338.587152][ T1353] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 338.648847][ T5998] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 338.768451][ T1353] usb 5-1: Using ep0 maxpacket: 32 [ 338.773153][ T1353] usb 5-1: unable to get BOS descriptor or descriptor too short [ 338.786829][ T1353] usb 5-1: string descriptor 0 read error: -22 [ 338.793333][ T1353] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 338.797299][ T1353] usb 5-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 338.813878][ T1353] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 338.821746][ T1353] dw2102: su3000_power_ctrl: 1, initialized 0 [ 338.824528][ T1353] dvb-usb: bulk message failed: -22 (2/0) [ 338.832352][ T5874] Bluetooth: hci3: command 0x0406 tx timeout [ 338.835769][ T1353] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 338.840317][ T1353] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 338.848257][ T1353] usb 5-1: media controller created [ 338.852069][ T1353] dvb-usb: bulk message failed: -22 (6/0) [ 338.857346][ T1353] dw2102: i2c transfer failed. [ 338.861449][ T1353] dvb-usb: bulk message failed: -22 (6/0) [ 338.863969][ T1353] dw2102: i2c transfer failed. [ 338.870417][ T1353] dvb-usb: bulk message failed: -22 (6/0) [ 338.871188][T32234] iowarrior 7-1:0.0: Error -90 while submitting URB [ 338.878814][ T1353] dw2102: i2c transfer failed. [ 338.884493][ T1353] dvb-usb: bulk message failed: -22 (6/0) [ 338.885668][ T50] usb 7-1: USB disconnect, device number 19 [ 338.888497][ T1353] dw2102: i2c transfer failed. [ 338.892738][ T1353] dvb-usb: bulk message failed: -22 (6/0) [ 338.895257][ T1353] dw2102: i2c transfer failed. [ 338.898336][ T1353] dvb-usb: bulk message failed: -22 (6/0) [ 338.906551][ T1353] dw2102: i2c transfer failed. [ 338.916720][ T1353] dvb-usb: MAC address: 02:02:02:02:02:02 [ 338.943126][ T1353] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 338.963425][ T1353] dvb-usb: bulk message failed: -22 (3/0) [ 338.965926][ T1353] dw2102: command 0x0e transfer failed. [ 338.968272][ T1353] dvb-usb: bulk message failed: -22 (3/0) [ 338.970716][ T1353] dw2102: command 0x0e transfer failed. [ 339.303481][ T1353] dvb-usb: bulk message failed: -22 (3/0) [ 339.306193][ T1353] dw2102: command 0x0e transfer failed. [ 339.308822][ T1353] dvb-usb: bulk message failed: -22 (3/0) [ 339.311431][ T1353] dw2102: command 0x0e transfer failed. [ 339.315171][ T1353] dvb-usb: bulk message failed: -22 (1/0) [ 339.317897][ T1353] dw2102: command 0x51 transfer failed. [ 339.320527][T32278] dw2102: i2c wr: len=67 is too big! [ 339.320527][T32278] [ 339.345614][ T1353] DVB: Unable to find symbol ds3000_attach() [ 339.348563][ T1353] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 339.420156][ T1353] rc_core: IR keymap rc-su3000 not found [ 339.422835][ T1353] Registered IR keymap rc-empty [ 339.426694][ T1353] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 339.433704][ T1353] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input37 [ 339.443001][ T1353] dvb-usb: schedule remote query interval to 150 msecs. [ 339.446226][ T1353] dw2102: su3000_power_ctrl: 0, initialized 1 [ 339.449016][ T1353] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 339.457970][ T1353] usb 5-1: USB disconnect, device number 14 [ 339.508353][ T1353] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 340.229015][T32446] openvswitch: netlink: Missing key (keys=40, expected=100) [ 340.450973][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.539817][T32468] vivid-001: disconnect [ 340.546262][T32468] vivid-001: reconnect [ 340.602164][T32476] comedi comedi3: unsupported base address 0x2000 [ 340.622098][T32480] openvswitch: netlink: Missing key (keys=40, expected=100) [ 340.685639][T32486] bridge0: port 4(macvlan2) entered blocking state [ 340.688637][T32486] bridge0: port 4(macvlan2) entered disabled state [ 340.692129][T32486] macvlan2: entered allmulticast mode [ 340.697925][T32486] macvlan2: left allmulticast mode [ 340.703375][ T5873] Bluetooth: hci3: unexpected event for opcode 0x204e [ 340.838103][ T43] kauditd_printk_skb: 178 callbacks suppressed [ 340.838120][ T43] audit: type=1400 audit(2000000096.902:46485): avc: denied { prog_load } for pid=32492 comm="syz.0.12520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 340.894306][ T43] audit: type=1400 audit(2000000096.958:46486): avc: denied { bind } for pid=32496 comm="syz.0.12522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 340.903465][ T43] audit: type=1400 audit(2000000096.967:46487): avc: denied { write } for pid=32496 comm="syz.0.12522" path="socket:[102022]" dev="sockfs" ino=102022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 340.935620][ T43] audit: type=1400 audit(2000000096.986:46488): avc: denied { read } for pid=32498 comm="syz.5.12523" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 340.954561][ T43] audit: type=1400 audit(2000000096.986:46489): avc: denied { open } for pid=32498 comm="syz.5.12523" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 340.968955][ T43] audit: type=1400 audit(2000000096.986:46490): avc: denied { ioctl } for pid=32498 comm="syz.5.12523" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64bd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 340.979625][ T43] audit: type=1400 audit(2000000097.033:46491): avc: denied { allowed } for pid=32500 comm="syz.0.12524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 341.106313][ T43] audit: type=1400 audit(2000000097.154:46492): avc: denied { prog_run } for pid=32510 comm="syz.4.12529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 341.151270][ T43] audit: type=1400 audit(2000000097.192:46493): avc: denied { read write } for pid=32512 comm="syz.4.12530" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 341.165896][ T43] audit: type=1400 audit(2000000097.192:46494): avc: denied { open } for pid=32512 comm="syz.4.12530" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 341.258086][ T5112] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 341.444035][ T5112] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 341.452500][ T5112] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 341.458691][ T5112] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 341.462975][ T5112] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.476917][T32503] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 341.498272][ T5112] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 341.548832][T32545] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 341.734584][ T5848] usb 10-1: USB disconnect, device number 4 [ 342.300904][T32621] netlink: 'syz.0.12582': attribute type 23 has an invalid length. [ 342.512674][T32639] netlink: 'syz.5.12591': attribute type 178 has an invalid length. [ 342.850344][ T5998] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 343.010682][ T5998] usb 10-1: Using ep0 maxpacket: 32 [ 343.017255][ T5998] usb 10-1: unable to get BOS descriptor or descriptor too short [ 343.025430][ T5998] usb 10-1: string descriptor 0 read error: -22 [ 343.028384][ T5998] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 343.032290][ T5998] usb 10-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 343.043816][ T5998] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 343.047479][ T5998] dw2102: su3000_power_ctrl: 1, initialized 0 [ 343.050104][ T5998] dvb-usb: bulk message failed: -22 (2/0) [ 343.060121][ T5998] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 343.064696][ T5998] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 343.068137][ T5998] usb 10-1: media controller created [ 343.070368][ T5998] dvb-usb: bulk message failed: -22 (6/0) [ 343.072752][ T5998] dw2102: i2c transfer failed. [ 343.075466][ T5998] dvb-usb: bulk message failed: -22 (6/0) [ 343.077905][ T5998] dw2102: i2c transfer failed. [ 343.080203][ T5998] dvb-usb: bulk message failed: -22 (6/0) [ 343.082604][ T5998] dw2102: i2c transfer failed. [ 343.084698][ T5998] dvb-usb: bulk message failed: -22 (6/0) [ 343.087919][ T5998] dw2102: i2c transfer failed. [ 343.090008][ T5998] dvb-usb: bulk message failed: -22 (6/0) [ 343.092331][ T5998] dw2102: i2c transfer failed. [ 343.094464][ T5998] dvb-usb: bulk message failed: -22 (6/0) [ 343.097518][ T5998] dw2102: i2c transfer failed. [ 343.099834][ T5998] dvb-usb: MAC address: 02:02:02:02:02:02 [ 343.111356][ T5998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.145019][ T5998] dvb-usb: bulk message failed: -22 (3/0) [ 343.147801][ T5998] dw2102: command 0x0e transfer failed. [ 343.157736][ T5998] dvb-usb: bulk message failed: -22 (3/0) [ 343.165380][ T5998] dw2102: command 0x0e transfer failed. [ 343.502296][ T5998] dvb-usb: bulk message failed: -22 (3/0) [ 343.504589][ T5998] dw2102: command 0x0e transfer failed. [ 343.508270][ T5998] dvb-usb: bulk message failed: -22 (3/0) [ 343.512727][ T5998] dw2102: command 0x0e transfer failed. [ 343.516293][ T5998] dvb-usb: bulk message failed: -22 (1/0) [ 343.521417][ T5998] dw2102: command 0x51 transfer failed. [ 343.530778][T32641] dw2102: i2c wr: len=67 is too big! [ 343.530778][T32641] [ 343.620931][ T5998] DVB: Unable to find symbol ds3000_attach() [ 343.623814][ T5998] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 343.683670][ T5998] rc_core: IR keymap rc-su3000 not found [ 343.689933][ T5998] Registered IR keymap rc-empty [ 343.703576][ T5998] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 343.724784][ T5998] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input38 [ 343.735688][ T5998] dvb-usb: schedule remote query interval to 150 msecs. [ 343.739169][ T5998] dw2102: su3000_power_ctrl: 0, initialized 1 [ 343.741774][ T5998] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 343.753017][ T5998] usb 10-1: USB disconnect, device number 5 [ 343.804977][ T5998] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 343.939608][T32702] comedi comedi3: unsupported base address 0x2000 [ 344.048375][T32714] __nla_validate_parse: 27 callbacks suppressed [ 344.048396][T32714] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12624'. [ 344.105970][T32719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12626'. [ 344.124738][T32719] bridge0: port 3(macvlan2) entered blocking state [ 344.129887][T32719] bridge0: port 3(macvlan2) entered disabled state [ 344.137073][T32719] macvlan2: entered allmulticast mode [ 344.146510][T32719] macvlan2: left allmulticast mode [ 344.155143][T32722] vivid-001: disconnect [ 344.157829][T32722] vivid-001: reconnect [ 344.506382][ T5873] Bluetooth: hci2: unexpected event for opcode 0x204e [ 344.524963][T32761] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 344.625633][ T301] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 344.625633][ T301] program syz.0.12651 not setting count and/or reply_len properly [ 344.640040][ T305] netlink: 348 bytes leftover after parsing attributes in process `syz.2.12643'. [ 344.668058][ T308] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12653'. [ 344.753368][ T321] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12661'. [ 344.906430][ T339] xt_l2tp: unknown flags: ff [ 345.072656][ T365] netlink: 'syz.5.12680': attribute type 23 has an invalid length. [ 345.149408][ T372] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 345.149408][ T372] program syz.5.12686 not setting count and/or reply_len properly [ 346.034679][ T5998] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 346.207008][ T5998] usb 5-1: Using ep0 maxpacket: 32 [ 346.212965][ T5998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 346.217640][ T5998] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 346.221800][ T5998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 346.225816][ T5998] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 346.230170][ T5998] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 346.236317][ T43] kauditd_printk_skb: 208 callbacks suppressed [ 346.236334][ T43] audit: type=1400 audit(2000000101.955:46703): avc: denied { read write } for pid=434 comm="syz.4.12713" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 346.249583][ T5998] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 346.251011][ T43] audit: type=1400 audit(2000000101.955:46704): avc: denied { open } for pid=434 comm="syz.4.12713" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 346.255076][ T5998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.271712][ T5998] usb 5-1: config 0 descriptor?? [ 346.492849][ T43] audit: type=1400 audit(2000000102.198:46705): avc: denied { ioctl } for pid=428 comm="syz.0.12711" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 346.495439][ T5998] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 346.613118][ T43] audit: type=1400 audit(2000000102.311:46706): avc: denied { recv } for pid=5658 comm="syz-executor" saddr=127.0.0.1 src=42580 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 346.639302][ T442] macvlan2: entered promiscuous mode [ 348.988529][ T10] usb 5-1: USB disconnect, device number 15 [ 349.005996][ T10] usblp0: removed [ 349.074666][ T451] xt_l2tp: unknown flags: ff [ 349.118145][ T43] audit: type=1400 audit(2000000104.650:46707): avc: denied { read write } for pid=454 comm="syz.2.12724" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 349.127593][ T43] audit: type=1400 audit(2000000104.650:46708): avc: denied { open } for pid=454 comm="syz.2.12724" path="/dev/raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 349.368761][ T50] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 349.522083][ T43] audit: type=1400 audit(2000000105.034:46709): avc: denied { append } for pid=458 comm="syz.4.12726" name="001" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 349.531119][ T50] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 349.535793][ T50] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 349.540068][ T50] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 349.548645][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.566104][ T455] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 349.574969][ T50] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 349.701306][ T43] audit: type=1400 audit(2000000105.202:46710): avc: denied { create } for pid=468 comm="syz.0.12732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 349.730159][ T43] audit: type=1400 audit(2000000105.221:46711): avc: denied { create } for pid=470 comm="syz.4.12731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 349.746257][ T43] audit: type=1400 audit(2000000105.249:46712): avc: denied { read } for pid=470 comm="syz.4.12731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 349.961457][ T2333] usb 7-1: USB disconnect, device number 20 [ 350.628216][ T502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12747'. [ 350.631305][ T502] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12747'. [ 350.840386][ T523] netlink: 'syz.0.12758': attribute type 12 has an invalid length. [ 350.845764][ T523] netlink: 'syz.0.12758': attribute type 29 has an invalid length. [ 350.848758][ T523] netlink: 148 bytes leftover after parsing attributes in process `syz.0.12758'. [ 350.851571][ T523] netlink: 'syz.0.12758': attribute type 3 has an invalid length. [ 350.855898][ T523] netlink: 'syz.0.12758': attribute type 2 has an invalid length. [ 350.858440][ T523] netlink: 35 bytes leftover after parsing attributes in process `syz.0.12758'. [ 350.954362][ T534] kvm: kvm [533]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x4 [ 351.069744][ T536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12765'. [ 351.162036][ T543] block nbd2: NBD_DISCONNECT [ 351.203629][ T545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12768'. [ 351.720902][ T43] kauditd_printk_skb: 42 callbacks suppressed [ 351.720921][ T43] audit: type=1400 audit(2000000107.092:46755): avc: denied { create } for pid=552 comm="syz.2.12771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 351.768484][ T43] audit: type=1400 audit(2000000107.130:46756): avc: denied { bind } for pid=552 comm="syz.2.12771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 351.778041][ T43] audit: type=1400 audit(2000000107.149:46757): avc: denied { write } for pid=552 comm="syz.2.12771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 351.901280][ T5873] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 351.901368][ T5874] Bluetooth: hci2: command 0x0c1a tx timeout [ 352.017239][ T43] audit: type=1400 audit(2000000107.364:46758): avc: denied { execute } for pid=559 comm="syz.2.12774" path="/dev/audio1" dev="devtmpfs" ino=1322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 352.095706][ T43] audit: type=1400 audit(2000000107.448:46759): avc: denied { read write } for pid=561 comm="syz.2.12775" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 352.103639][ T562] program syz.2.12775 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.117986][ T43] audit: type=1400 audit(2000000107.448:46760): avc: denied { ioctl open } for pid=561 comm="syz.2.12775" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 352.749613][ T43] audit: type=1400 audit(2000000108.056:46761): avc: denied { create } for pid=572 comm="syz.2.12780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 352.759834][ T43] audit: type=1400 audit(2000000108.066:46762): avc: denied { bind } for pid=572 comm="syz.2.12780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 352.773356][ T43] audit: type=1400 audit(2000000108.075:46763): avc: denied { map_read map_write } for pid=537 comm="syz.0.12764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 352.819364][ T43] audit: type=1400 audit(2000000108.112:46764): avc: denied { create } for pid=576 comm="syz.0.12782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 352.936036][ T583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12784'. [ 352.940205][ T583] netlink: 3 bytes leftover after parsing attributes in process `syz.0.12784'. [ 353.520884][ T605] nbd: couldn't find device at index 0 [ 354.134881][ T5873] Bluetooth: hci2: command 0x0c1a tx timeout [ 354.313892][ T622] kvm: kvm [621]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x4 [ 354.543813][ T636] netlink: 'syz.0.12810': attribute type 1 has an invalid length. [ 354.547207][ T636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.782436][ T653] bond4: ARP target 9.0.0.0 is already present [ 354.785209][ T653] bond4: option arp_ip_target: invalid value (9) [ 354.790339][ T653] bond4 (unregistering): Released all slaves [ 354.915007][ T5840] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 355.098009][ T5840] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 355.102124][ T5840] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 355.110502][ T5840] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.116592][ T5840] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 355.123539][ T5840] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 355.127683][ T669] Attempt to restore checkpoint with obsolete wellknown handles [ 355.128157][ T5840] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 355.133744][ T5840] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 355.137468][ T5840] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.142762][ T5840] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 355.146543][ T5840] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 355.151473][ T5840] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 355.156233][ T5840] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 355.171457][ T5840] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.175822][ T5840] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 355.180278][ T5840] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 355.187962][ T5840] usb 5-1: string descriptor 0 read error: -22 [ 355.193989][ T5840] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 355.197537][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.223781][ T5840] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 355.446319][ T5998] usb 5-1: USB disconnect, device number 16 [ 356.271895][ T1045] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 356.347138][ T5873] Bluetooth: hci2: command 0x0c1a tx timeout [ 356.435800][ T1045] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 356.443301][ T1045] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 356.451755][ T1045] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 356.457272][ T1045] usb 7-1: config 0 interface 0 has no altsetting 0 [ 356.461507][ T1045] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 356.466265][ T1045] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 356.470802][ T1045] usb 7-1: config 0 interface 0 has no altsetting 0 [ 356.477792][ T1045] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 356.481742][ T1045] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 356.488131][ T1045] usb 7-1: config 0 interface 0 has no altsetting 0 [ 356.492105][ T1045] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 356.495930][ T1045] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 356.501260][ T1045] usb 7-1: config 0 interface 0 has no altsetting 0 [ 356.505073][ T1045] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 356.508274][ T1045] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 356.511635][ T1045] usb 7-1: config 0 interface 0 has no altsetting 0 [ 356.518182][ T1045] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 356.522259][ T1045] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 356.525961][ T1045] usb 7-1: config 0 interface 0 has no altsetting 0 [ 356.530207][ T1045] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 356.533616][ T1045] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 356.537097][ T1045] usb 7-1: config 0 interface 0 has no altsetting 0 [ 356.540451][ T1045] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 356.543208][ T1045] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 356.547152][ T1045] usb 7-1: config 0 interface 0 has no altsetting 0 [ 356.552636][ T1045] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 356.555917][ T1045] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 356.558744][ T1045] usb 7-1: Product: syz [ 356.560101][ T1045] usb 7-1: Manufacturer: syz [ 356.562512][ T1045] usb 7-1: SerialNumber: syz [ 356.566104][ T1045] usb 7-1: config 0 descriptor?? [ 356.575980][ T1045] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 356.615949][ T728] IPv6: sit1: Disabled Multicast RS [ 356.619160][ T728] sit1: entered allmulticast mode [ 356.792762][ T5840] usb 7-1: USB disconnect, device number 21 [ 356.801364][ T5840] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 357.384278][ T43] kauditd_printk_skb: 82 callbacks suppressed [ 357.384292][ T43] audit: type=1400 audit(2000000112.398:46847): avc: denied { create } for pid=743 comm="syz.2.12860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 357.399545][ T43] audit: type=1400 audit(2000000112.408:46848): avc: denied { ioctl } for pid=743 comm="syz.2.12860" path="socket:[108721]" dev="sockfs" ino=108721 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 357.409956][ T43] audit: type=1400 audit(2000000112.408:46849): avc: denied { module_request } for pid=743 comm="syz.2.12860" kmod="netdev-netdevsim0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 357.418033][ T43] audit: type=1400 audit(2000000112.417:46850): avc: denied { recv } for pid=5658 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=42580 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 357.427606][ T749] netlink: 'syz.0.12862': attribute type 2 has an invalid length. [ 357.430183][ T43] audit: type=1400 audit(2000000112.436:46851): avc: denied { write } for pid=748 comm="syz.0.12862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 357.436589][ T749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12862'. [ 357.439597][ T43] audit: type=1400 audit(2000000112.436:46852): avc: denied { sys_module } for pid=743 comm="syz.2.12860" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 357.453274][ T43] audit: type=1400 audit(2000000112.455:46853): avc: denied { prog_load } for pid=743 comm="syz.2.12860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.459535][ T43] audit: type=1400 audit(2000000112.455:46854): avc: denied { bpf } for pid=743 comm="syz.2.12860" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 357.466470][ T43] audit: type=1400 audit(2000000112.455:46855): avc: denied { perfmon } for pid=743 comm="syz.2.12860" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 357.473589][ T43] audit: type=1400 audit(2000000112.455:46856): avc: denied { prog_run } for pid=743 comm="syz.2.12860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.499608][ T754] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 358.049302][ T790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12881'. [ 358.053139][ T790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12881'. [ 358.403061][ T824] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12897'. [ 358.442706][ T826] vhci_hcd: not connected 4 [ 358.569493][ T5873] Bluetooth: hci2: command 0x0c1a tx timeout [ 358.612172][ T50] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 358.775509][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 358.782417][ T50] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 358.790606][ T50] usb 5-1: config 0 has no interface number 0 [ 358.793006][ T50] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 358.797060][ T50] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 358.801281][ T50] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 358.805585][ T50] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 358.809629][ T50] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 358.818150][ T50] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 358.821776][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.824825][ T50] usb 5-1: Product: syz [ 358.827039][ T50] usb 5-1: Manufacturer: syz [ 358.828905][ T50] usb 5-1: SerialNumber: syz [ 358.839490][ T50] usb 5-1: config 0 descriptor?? [ 358.846725][ T50] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.119/input/input40 [ 359.063324][ T50] usb 5-1: USB disconnect, device number 17 [ 359.666140][ T871] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 359.672453][ T871] Error validating options; rc = [-22] [ 359.985149][ T866] block nbd2: shutting down sockets [ 360.226717][ T904] usbip-vudc usbip-vudc.0: gadget not bound [ 360.586515][ T928] input: syz1 as /devices/virtual/input/input41 [ 360.589565][ T928] input: failed to attach handler leds to device input41, error: -6 [ 360.987765][ T948] netlink: 27 bytes leftover after parsing attributes in process `syz.4.12952'. [ 361.124753][ T954] openvswitch: netlink: Actions may not be safe on all matching packets [ 361.171500][ T959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12957'. [ 361.456160][ T5874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.468007][ T5874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.473005][ T5874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.490069][ T5874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.493920][ T5874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.949547][ T1025] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12977'. [ 362.080150][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.124364][ T982] Failed to initialize the IGMP autojoin socket (err -2) [ 362.213461][ T1033] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 362.280929][ T1252] Bluetooth: hci3: Frame reassembly failed (-84) [ 362.282365][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.449339][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.603998][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.708793][ T982] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.716538][ T982] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.719024][ T982] bridge_slave_0: entered allmulticast mode [ 362.722026][ T982] bridge_slave_0: entered promiscuous mode [ 362.726282][ T982] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.728849][ T982] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.731316][ T982] bridge_slave_1: entered allmulticast mode [ 362.734181][ T982] bridge_slave_1: entered promiscuous mode [ 362.743837][ T43] kauditd_printk_skb: 233 callbacks suppressed [ 362.743855][ T43] audit: type=1400 audit(2000000117.405:47090): avc: denied { mounton } for pid=1061 comm="syz.2.12988" path="/3190/sys" dev="tmpfs" ino=16116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 362.774072][ T982] bond_slave_1: entered promiscuous mode [ 362.777415][ T982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.778754][ T43] audit: type=1400 audit(2000000117.414:47091): avc: denied { mount } for pid=1061 comm="syz.2.12988" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 362.790401][ T43] audit: type=1400 audit(2000000117.433:47092): avc: denied { recv } for pid=61 comm="kworker/u33:3" saddr=127.0.0.1 src=42580 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 362.842909][ T1062] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47 [ 362.894887][ T43] audit: type=1400 audit(2000000117.545:47093): avc: denied { unmount } for pid=5869 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 362.923307][ T43] audit: type=1400 audit(2000000117.573:47094): avc: denied { write } for pid=1064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.939969][ T43] audit: type=1400 audit(2000000117.583:47095): avc: denied { read } for pid=1066 comm="syz.2.12989" dev="nsfs" ino=4026533036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 362.948462][ T982] team0: Port device team_slave_0 added [ 362.949133][ T43] audit: type=1400 audit(2000000117.583:47096): avc: denied { open } for pid=1066 comm="syz.2.12989" path="net:[4026533036]" dev="nsfs" ino=4026533036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 362.969032][ T43] audit: type=1400 audit(2000000117.592:47097): avc: denied { create } for pid=1066 comm="syz.2.12989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 362.977240][ T43] audit: type=1400 audit(2000000117.601:47098): avc: denied { ioctl } for pid=1066 comm="syz.2.12989" path="socket:[108177]" dev="sockfs" ino=108177 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 362.990948][ T982] team0: Port device team_slave_1 added [ 363.003318][ T43] audit: type=1400 audit(2000000117.648:47099): avc: denied { write } for pid=1069 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.075426][ T982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.079936][ T982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.093979][ T982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.102692][ T13] bridge_slave_1: left allmulticast mode [ 363.104594][ T13] bridge_slave_1: left promiscuous mode [ 363.106548][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.111770][ T13] bridge_slave_0: left allmulticast mode [ 363.113801][ T13] bridge_slave_0: left promiscuous mode [ 363.115762][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.426968][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.432933][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.437227][ T13] bond0 (unregistering): Released all slaves [ 363.446317][ T982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.449455][ T982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.461350][ T982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.478803][ T1090] Failed to initialize the IGMP autojoin socket (err -2) [ 363.516166][ T13] : left promiscuous mode [ 363.622338][ T982] hsr_slave_0: entered promiscuous mode [ 363.629417][ T982] hsr_slave_1: entered promiscuous mode [ 363.635651][ T982] debugfs: 'hsr0' already exists in 'hsr' [ 363.638124][ T982] Cannot create hsr debugfs directory [ 363.640811][ T13] tipc: Left network mode [ 363.715582][ T5874] Bluetooth: hci4: command tx timeout [ 364.020796][ T1101] pimreg: tun_chr_ioctl cmd 1074025672 [ 364.023117][ T1101] pimreg: ignored: set checksum enabled [ 364.231580][ T982] netdevsim netdevsim6 netdevsim0: renamed from eth10 [ 364.249132][ T982] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 364.252316][ T982] netdevsim netdevsim6 netdevsim1: renamed from eth11 [ 364.261900][ T982] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.279064][ T982] netdevsim netdevsim6 netdevsim2: renamed from eth12 [ 364.292226][ T982] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 364.296019][ T982] netdevsim netdevsim6 netdevsim3: renamed from eth13 [ 364.309739][ T982] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.324704][ T13] hsr_slave_0: left promiscuous mode [ 364.328794][ T13] hsr_slave_1: left promiscuous mode [ 364.340110][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.343619][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.352469][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.355722][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.380906][ T13] veth1_macvtap: left promiscuous mode [ 364.383523][ T5874] Bluetooth: hci3: command 0x1003 tx timeout [ 364.385539][ T13] veth0_macvtap: left promiscuous mode [ 364.387758][ T5873] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 364.390744][ T13] veth1_vlan: left promiscuous mode [ 364.395736][ T13] veth0_vlan: left promiscuous mode [ 364.694042][ T13] team_slave_1 (unregistering): left allmulticast mode [ 364.698009][ T13] team0 (unregistering): Port device team_slave_1 removed [ 364.711259][ T13] team_slave_0 (unregistering): left allmulticast mode [ 364.721170][ T13] team0 (unregistering): Port device team_slave_0 removed [ 365.017111][ T982] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.056797][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.059705][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.070981][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.073727][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.844655][ T982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.921408][ T5873] Bluetooth: hci4: command tx timeout [ 366.150208][ T982] veth0_vlan: entered promiscuous mode [ 366.158176][ T982] veth1_vlan: entered promiscuous mode [ 366.215438][ T982] veth0_macvtap: entered promiscuous mode [ 366.231959][ T982] veth1_macvtap: entered promiscuous mode [ 366.278805][ T982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.303580][ T982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.313982][ T982] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 366.324378][ T982] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 366.334796][ T982] wireguard: wg0: Could not create IPv4 socket [ 366.348101][ T982] wireguard: wg1: Could not create IPv4 socket [ 366.354594][ T982] wireguard: wg2: Could not create IPv4 socket [ 367.843494][ T5874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 367.848709][ T1336] netlink: 88 bytes leftover after parsing attributes in process `syz.2.13063'. [ 367.853678][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 367.866334][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 367.878539][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 367.884646][ T5874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 368.128817][ T43] kauditd_printk_skb: 220 callbacks suppressed [ 368.128833][ T43] audit: type=1400 audit(2000000122.449:47320): avc: denied { write } for pid=1355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.139837][ T43] audit: type=1400 audit(2000000122.449:47321): avc: denied { create } for pid=1355 comm="dhcpcd-run-hook" name="resolv.conf.veth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 368.148351][ T43] audit: type=1400 audit(2000000122.449:47322): avc: denied { write open } for pid=1355 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.veth1.link" dev="tmpfs" ino=26658 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 368.160785][ T43] audit: type=1400 audit(2000000122.449:47323): avc: denied { append } for pid=1355 comm="dhcpcd-run-hook" name="resolv.conf.veth1.link" dev="tmpfs" ino=26658 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 368.162163][ T1328] Failed to initialize the IGMP autojoin socket (err -2) [ 368.169256][ T43] audit: type=1400 audit(2000000122.449:47324): avc: denied { getattr } for pid=1355 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 368.169289][ T43] audit: type=1400 audit(2000000122.458:47325): avc: denied { create } for pid=1360 comm="syz.2.13067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 368.169325][ T43] audit: type=1400 audit(2000000122.468:47326): avc: denied { bind } for pid=1360 comm="syz.2.13067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 368.169357][ T43] audit: type=1400 audit(2000000122.468:47327): avc: denied { accept } for pid=1360 comm="syz.2.13067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 368.169386][ T43] audit: type=1400 audit(2000000122.468:47328): avc: denied { write } for pid=1360 comm="syz.2.13067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 368.169415][ T43] audit: type=1400 audit(2000000122.477:47329): avc: denied { read } for pid=1359 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 368.436058][ T1387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13074'. [ 368.760930][ T1408] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 368.854108][ T1419] netlink: 'syz.0.13084': attribute type 3 has an invalid length. [ 368.867734][ T1419] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13084'. [ 369.089014][ T1328] netdevsim netdevsim6 netdevsim0: renamed from eth10 [ 369.099941][ T1328] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 369.104173][ T1328] netdevsim netdevsim6 netdevsim1: renamed from eth11 [ 369.114026][ T1328] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 369.118670][ T1328] netdevsim netdevsim6 netdevsim2: renamed from eth12 [ 369.126319][ T1328] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 369.130278][ T1328] netdevsim netdevsim6 netdevsim3: renamed from eth13 [ 369.147621][ T1328] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 369.737270][ T1517] openvswitch: netlink: Missing valid actions attribute. [ 369.740552][ T1517] openvswitch: netlink: Actions may not be safe on all matching packets [ 370.110324][ T5873] Bluetooth: hci3: command tx timeout [ 370.248917][ T1328] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 370.258752][ T1328] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 370.270367][ T1328] wireguard: wg0: Could not create IPv4 socket [ 370.280581][ T1328] wireguard: wg1: Could not create IPv4 socket [ 370.285469][ T1328] wireguard: wg2: Could not create IPv4 socket [ 370.911098][ T1625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13145'. [ 371.220137][ T1651] udc usbip-vudc.0: soft-connect without a gadget driver [ 371.594896][ T1698] gadgetfs: bound to dummy_udc driver [ 371.816223][ T1716] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 371.960967][ T1725] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 372.098185][ T6028] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 372.203430][ T1743] netlink: 80 bytes leftover after parsing attributes in process `syz.2.13186'. [ 372.286567][ T6028] usb 5-1: unable to get BOS descriptor or descriptor too short [ 372.295538][ T6028] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 372.301403][ T6028] usb 5-1: can't read configurations, error -71 [ 372.894653][ T1793] binder: 1792:1793 ioctl c0306201 200000000640 returned -22 [ 373.058696][ T1807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13205'. [ 373.231420][ T1824] i2c i2c-0: new_device: Missing parameters [ 373.481420][ T43] kauditd_printk_skb: 469 callbacks suppressed [ 373.481437][ T43] audit: type=1400 audit(2000000127.455:47799): avc: denied { write } for pid=1841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.532341][ T43] audit: type=1400 audit(2000000127.502:47800): avc: denied { write } for pid=1848 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.561122][ T43] audit: type=1400 audit(2000000127.521:47801): avc: denied { execute } for pid=1852 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 373.581010][ T43] audit: type=1400 audit(2000000127.521:47802): avc: denied { execute_no_trans } for pid=1852 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 373.601501][ T43] audit: type=1400 audit(2000000127.521:47803): avc: denied { write } for pid=1850 comm="syz.0.13218" name="system" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 373.622658][ T1856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13222'. [ 373.624928][ T43] audit: type=1400 audit(2000000127.521:47804): avc: denied { open } for pid=1850 comm="syz.0.13218" path="/dev/dma_heap/system" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 373.639732][ T43] audit: type=1400 audit(2000000127.530:47805): avc: denied { ioctl } for pid=1850 comm="syz.0.13218" path="/dev/dma_heap/system" dev="devtmpfs" ino=713 ioctlcmd=0x4800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 373.651560][ T43] audit: type=1400 audit(2000000127.549:47806): avc: denied { execmem } for pid=1852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 373.671418][ T43] audit: type=1400 audit(2000000127.558:47807): avc: denied { map_read map_write } for pid=1853 comm="syz.4.13221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 373.697476][ T43] audit: type=1400 audit(2000000127.558:47808): avc: denied { prog_run } for pid=1853 comm="syz.4.13221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 373.704399][ T5874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 373.725059][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 373.734757][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 373.747617][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 373.751576][ T5874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.058111][ T1897] binder: 1895:1897 ioctl 4018620d 0 returned -22 [ 374.063505][ T1897] binder_alloc: binder_alloc_mmap_handler: 1895 200000fff000-200001000000 already mapped failed -16 [ 374.079317][ T1863] Failed to initialize the IGMP autojoin socket (err -2) [ 374.407737][ T1924] bond0: entered promiscuous mode [ 374.411142][ T1924] bond0: left promiscuous mode [ 374.423365][ T1917] netlink: 'syz.0.13236': attribute type 4 has an invalid length. [ 374.612083][ T1938] 9p: Invalid gid '0x00000000ffffffff' [ 375.044843][ T1959] SELinux: context truncated [ 375.046813][ T1959] SELinux: invalid ocon [ 375.128741][ T1863] netdevsim netdevsim6 netdevsim0: renamed from eth10 [ 375.143927][ T1863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 375.151106][ T1863] netdevsim netdevsim6 netdevsim1: renamed from eth11 [ 375.169966][ T1863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 375.174653][ T1863] netdevsim netdevsim6 netdevsim2: renamed from eth12 [ 375.178708][ T1959] SELinux: failed to load policy [ 375.192399][ T1863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 375.196542][ T1863] netdevsim netdevsim6 netdevsim3: renamed from eth13 [ 375.217557][ T1863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 375.385747][ T2007] loop3: detected capacity change from 0 to 7 [ 375.410628][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.414294][ C0] buffer_io_error: 27 callbacks suppressed [ 375.414308][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 375.428815][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.432567][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 375.439178][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.443029][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 375.446915][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.450057][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 375.455612][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.458767][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 375.463077][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.466243][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 375.469034][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.473411][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 375.477258][ T2007] ldm_validate_partition_table(): Disk read failed. [ 375.483827][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.487626][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 375.490615][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.493725][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 375.498161][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.501533][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 375.504835][ T2007] Dev loop3: unable to read RDB block 0 [ 375.523999][ T2007] loop3: unable to read partition table [ 375.528356][ T2007] loop3: partition table beyond EOD, truncated [ 375.537523][ T2007] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 375.691354][ T2037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13272'. [ 375.694987][ T2037] netlink: 'syz.0.13272': attribute type 30 has an invalid length. [ 375.746018][ T2044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13272'. [ 375.756792][ T2044] netlink: 'syz.0.13272': attribute type 30 has an invalid length. [ 375.964639][ T2067] loop9: detected capacity change from 0 to 255852544 [ 376.014187][ T5873] Bluetooth: hci3: command tx timeout [ 376.028753][ T2067] loop9: detected capacity change from 255852544 to 524287999 [ 376.043577][ T2071] openvswitch: netlink: Actions may not be safe on all matching packets [ 376.215946][ T1863] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 376.234748][ T1863] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 376.248428][ T1863] wireguard: wg0: Could not create IPv4 socket [ 376.253374][ T1863] wireguard: wg1: Could not create IPv4 socket [ 376.260388][ T1863] wireguard: wg2: Could not create IPv4 socket [ 376.420589][ T2106] ================================================================== [ 376.424014][ T2106] BUG: KASAN: use-after-free in l2cap_sock_setsockopt+0x22c3/0x2330 [ 376.427331][ T2106] Read of size 1 at addr ffff888045ddc362 by task syz.4.13285/2106 [ 376.432307][ T2106] [ 376.433840][ T2106] CPU: 2 UID: 0 PID: 2106 Comm: syz.4.13285 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.433871][ T2106] Tainted: [L]=SOFTLOCKUP [ 376.433877][ T2106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 376.433886][ T2106] Call Trace: [ 376.433894][ T2106] [ 376.433901][ T2106] dump_stack_lvl+0x100/0x190 [ 376.433930][ T2106] print_report+0x13d/0x4b0 [ 376.433952][ T2106] ? __virt_addr_valid+0x239/0x430 [ 376.433974][ T2106] ? l2cap_sock_setsockopt+0x22c3/0x2330 [ 376.433998][ T2106] kasan_report+0xdf/0x1c0 [ 376.434022][ T2106] ? l2cap_sock_setsockopt+0x22c3/0x2330 [ 376.434045][ T2106] l2cap_sock_setsockopt+0x22c3/0x2330 [ 376.434066][ T2106] ? __pfx_sock_has_perm+0x10/0x10 [ 376.434087][ T2106] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 376.434109][ T2106] ? find_held_lock+0x2b/0x80 [ 376.434132][ T2106] ? __fget_files+0x215/0x3d0 [ 376.434150][ T2106] ? selinux_socket_setsockopt+0x6a/0x80 [ 376.434172][ T2106] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 376.434194][ T2106] do_sock_setsockopt+0xf3/0x1d0 [ 376.434218][ T2106] __sys_setsockopt+0x195/0x220 [ 376.434241][ T2106] __x64_sys_setsockopt+0xbd/0x160 [ 376.434256][ T2106] ? do_syscall_64+0x90/0x870 [ 376.434274][ T2106] ? lockdep_hardirqs_on+0x78/0x100 [ 376.434291][ T2106] do_syscall_64+0x115/0x870 [ 376.434308][ T2106] ? clear_bhb_loop+0x40/0x90 [ 376.434328][ T2106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.434349][ T2106] RIP: 0033:0x7f56e5f9df99 [ 376.434368][ T2106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.434387][ T2106] RSP: 002b:00007f56e6f04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 376.434413][ T2106] RAX: ffffffffffffffda RBX: 00007f56e6226090 RCX: 00007f56e5f9df99 [ 376.434426][ T2106] RDX: 0000000000000008 RSI: 0000000000000112 RDI: 0000000000000004 [ 376.434438][ T2106] RBP: 00007f56e6034ec4 R08: 0000000000000004 R09: 0000000000000000 [ 376.434449][ T2106] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000000 [ 376.434474][ T2106] R13: 00007f56e6226128 R14: 00007f56e6226090 R15: 00007ffd7041cf08 [ 376.434499][ T2106] [ 376.434507][ T2106] [ 376.524761][ T2106] The buggy address belongs to the physical page: [ 376.527434][ T2106] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888045ddd040 pfn:0x45ddc [ 376.531655][ T2106] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 376.534642][ T2106] raw: 00fff00000000000 ffffea0000502008 ffff88806a641500 0000000000000000 [ 376.538178][ T2106] raw: ffff888045ddd040 0000000000000000 00000000ffffffff 0000000000000000 [ 376.541753][ T2106] page dumped because: kasan: bad access detected [ 376.544438][ T2106] page_owner tracks the page as freed [ 376.546658][ T2106] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 1863, tgid 1863 (syz-executor), ts 373684308522, free_ts 376381631358 [ 376.554158][ T2106] post_alloc_hook+0xfd/0x120 [ 376.556077][ T2106] get_page_from_freelist+0xf48/0x3530 [ 376.558238][ T2106] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 376.560531][ T2106] alloc_pages_mpol+0x1fb/0x540 [ 376.562451][ T2106] ___kmalloc_large_node+0xe5/0x120 [ 376.564504][ T2106] __kmalloc_large_node_noprof+0x1c/0x70 [ 376.566687][ T2106] __kmalloc_noprof+0x5a1/0x820 [ 376.568703][ T2106] hci_alloc_dev_priv+0x1d/0x28a0 [ 376.570682][ T2106] __vhci_create_device+0xf0/0x880 [ 376.572797][ T2106] vhci_write+0x2c4/0x490 [ 376.574640][ T2106] vfs_write+0x6ac/0x1050 [ 376.576531][ T2106] ksys_write+0x12a/0x250 [ 376.578368][ T2106] do_syscall_64+0x115/0x870 [ 376.580364][ T2106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.582886][ T2106] page last free pid 1863 tgid 1863 stack trace: [ 376.585558][ T2106] __free_frozen_pages+0x79f/0x1090 [ 376.587721][ T2106] hci_release_dev+0x4ef/0x630 [ 376.589769][ T2106] bt_host_release+0x6b/0xb0 [ 376.591759][ T2106] device_release+0xd2/0x270 [ 376.593781][ T2106] kobject_put+0x1f7/0x640 [ 376.595695][ T2106] put_device+0x1f/0x30 [ 376.597500][ T2106] vhci_release+0x185/0x230 [ 376.599407][ T2106] __fput+0x3ff/0xb50 [ 376.601126][ T2106] task_work_run+0x150/0x240 [ 376.603126][ T2106] do_exit+0x951/0x2ae0 [ 376.604928][ T2106] do_group_exit+0xd5/0x2a0 [ 376.606890][ T2106] __x64_sys_exit_group+0x3e/0x50 [ 376.608999][ T2106] x64_sys_call+0x102c/0x1530 [ 376.611006][ T2106] do_syscall_64+0x115/0x870 [ 376.612997][ T2106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.615554][ T2106] [ 376.616602][ T2106] Memory state around the buggy address: [ 376.618953][ T2106] ffff888045ddc200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 376.622288][ T2106] ffff888045ddc280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 376.625653][ T2106] >ffff888045ddc300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 376.629007][ T2106] ^ [ 376.632001][ T2106] ffff888045ddc380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 376.635314][ T2106] ffff888045ddc400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 376.638454][ T2106] ================================================================== [ 376.646138][ T2106] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 376.649216][ T2106] CPU: 2 UID: 0 PID: 2106 Comm: syz.4.13285 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.653699][ T2106] Tainted: [L]=SOFTLOCKUP [ 376.655431][ T2106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 376.659570][ T2106] Call Trace: [ 376.660985][ T2106] [ 376.662233][ T2106] dump_stack_lvl+0x100/0x190 [ 376.664270][ T2106] vpanic+0x552/0x970 [ 376.666014][ T2106] ? __pfx_vpanic+0x10/0x10 [ 376.668545][ T2106] ? mark_held_locks+0x40/0x70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 376.670908][ T2106] ? l2cap_sock_setsockopt+0x22c3/0x2330 [ 376.673360][ T2106] panic+0xd1/0xe0 [ 376.675278][ T2106] ? __pfx_panic+0x10/0x10 [ 376.677287][ T2106] ? l2cap_sock_setsockopt+0x22c3/0x2330 [ 376.679646][ T2106] ? preempt_schedule_common+0x42/0xc0 [ 376.681896][ T2106] check_panic_on_warn.cold+0x19/0x34 [ 376.683990][ T2106] end_report.part.0+0x3a/0x90 [ 376.685903][ T2106] kasan_report.cold+0xe/0x18 [ 376.687809][ T2106] ? l2cap_sock_setsockopt+0x22c3/0x2330 [ 376.690059][ T2106] l2cap_sock_setsockopt+0x22c3/0x2330 [ 376.692204][ T2106] ? __pfx_sock_has_perm+0x10/0x10 [ 376.694281][ T2106] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 376.696544][ T2106] ? find_held_lock+0x2b/0x80 [ 376.698375][ T2106] ? __fget_files+0x215/0x3d0 [ 376.700285][ T2106] ? selinux_socket_setsockopt+0x6a/0x80 [ 376.702614][ T2106] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 376.705090][ T2106] do_sock_setsockopt+0xf3/0x1d0 [ 376.707212][ T2106] __sys_setsockopt+0x195/0x220 [ 376.709278][ T2106] __x64_sys_setsockopt+0xbd/0x160 [ 376.711432][ T2106] ? do_syscall_64+0x90/0x870 [ 376.713445][ T2106] ? lockdep_hardirqs_on+0x78/0x100 [ 376.715619][ T2106] do_syscall_64+0x115/0x870 [ 376.717549][ T2106] ? clear_bhb_loop+0x40/0x90 [ 376.719558][ T2106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.722073][ T2106] RIP: 0033:0x7f56e5f9df99 [ 376.723999][ T2106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.731991][ T2106] RSP: 002b:00007f56e6f04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 376.735508][ T2106] RAX: ffffffffffffffda RBX: 00007f56e6226090 RCX: 00007f56e5f9df99 [ 376.738818][ T2106] RDX: 0000000000000008 RSI: 0000000000000112 RDI: 0000000000000004 [ 376.742149][ T2106] RBP: 00007f56e6034ec4 R08: 0000000000000004 R09: 0000000000000000 [ 376.745454][ T2106] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000000 [ 376.748847][ T2106] R13: 00007f56e6226128 R14: 00007f56e6226090 R15: 00007ffd7041cf08 [ 376.752177][ T2106] [ 376.754215][ T2106] Kernel Offset: disabled [ 376.756088][ T2106] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:49:51 Registers: info registers vcpu 0 CPU#0 RAX=ffff888036526ff6 RBX=dffffc0000000000 RCX=0000000000000006 RDX=0000000000000000 RSI=ffffffff84df4317 RDI=ffff888036526fdb RBP=ffff888036526fdb RSP=ffffc90004bb76e8 R8 =0000000000000007 R9 =fffffffffffff000 R10=ffff888036526fdb R11=0000000000000000 R12=ffff888036526ffe R13=0000000000004000 R14=ffff88801fab93c0 R15=0000000000000fff RIP=ffffffff8bb6cad3 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1ce16bbc80 ffffffff 00c00000 GS =0000 ffff8880d5ddc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1ce1a20478 CR3=000000002d832000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080000000 Opmask01=0000000000000004 Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100008781 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0f0e0d0c0b ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ff0f0e0d0c0b0a09 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000020000000001 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100008781 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 00007f1ce180b42d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005581707d0540 00005581707d0540 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005581707dcda0 00005581707ce2c0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524548544f0030 3d004c2a3a523a62 3a7374533a6c3a4f 6e3a6d5e000a0920 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524548544f0001 0c004c1b0b520b53 0b4245530b5d0b4f 5f0b5c5e000a0911 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f62696c2f006575 72743d6e776f645f 66690065736c6166 3d70755f66690030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00733d6e6f682d5f 66690064636c6166 3d2f645f66630030 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=ffff88806a53c800 RCX=ffffffff81fdebd4 RDX=ffff88801eec0000 RSI=ffffffff81fdebae RDI=ffff88801eec0000 RBP=ffffc90000157cd8 RSP=ffffc90000157b58 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a733c60 R12=0000000000000003 R13=ffffed100d4a7901 R14=ffff88806a53c808 R15=0000000000000001 RIP=ffffffff820a6079 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5edc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000557435b821d8 CR3=00000000657db000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000001c0d0 Opmask01=0000000000000000 Opmask02=000000007fffffff Opmask03=0000000002082001 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558527de7fd0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558527ba84b0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33761f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff00ff0000ff00 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737352 7373737373737313 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73732673435e7343 1e161e035c18101c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00336963682f6874 6f6f7465756c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00336963682f6874 6f6f7465756c622f 6c6175747269762f 736563697665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7377685f31313230 3863616d2f6c6175 747269762f736563 697665642f737973 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b320fa2d569fab76 000055807f8c1634 0000000000000071 0000000000797400 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 342c332c322c312c 3061722c4533312c 4433312c4333312c 4233312c4133312c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3733312c3633312c 3433312c3333312c 3133312c3033316b 2c35312c332c312c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30652d3836313365 4332383570463645 307633303030623a 7475706e693d5341 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85a38b65 RDI=ffffffff9ba07b40 RBP=ffffffff9ba07b00 RSP=ffffc90004b576e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3430383838666666 R12=0000000000000000 R13=0000000000000005 R14=ffffffff9b6fa238 R15=0000000000000000 RIP=ffffffff85a38b8f RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f56e6f046c0 ffffffff 00c00000 GS =0000 ffff8880d5fdc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f56e6f03ff8 CR3=000000003411d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56e61f15f8 00007f56e61f15c8 00007f56e61f1600 00007f56e61f15e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000015e78f RBX=ffff88801eef2540 RCX=ffffffff8bbb22d5 RDX=0000000000000000 RSI=ffffffff8e1a6f32 RDI=ffffffff8c402680 RBP=ffffed1003dde4a8 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4e678d R10=ffff88806a733c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bbb089f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f58c2389100 CR3=0000000035d9c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe90635c96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe90635c96 00007ffe90635c9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fba416354a7 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fba416354e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fba4163564b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fba416354d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fba417f15f8 00007fba417f15c8 00007fba417f1600 00007fba417f15e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000