last executing test programs: 1m39.337928098s ago: executing program 2 (id=11034): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x44, r0, 0x1, 0x70bd26, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xba}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x8090) 1m39.289313069s ago: executing program 2 (id=11039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)=0x1) 1m39.166182914s ago: executing program 2 (id=11051): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000004000000040000000a"], 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000c40)=[{&(0x7f0000000140)=""/127, 0x7f}], 0x1, 0x0, 0x1) 1m39.125412817s ago: executing program 2 (id=11056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) 1m39.020600595s ago: executing program 2 (id=11064): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) 1m38.985562926s ago: executing program 2 (id=11067): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="18", 0x48, 0x20008884, &(0x7f0000000080)={0x11, 0xd, r1, 0x1, 0xfd, 0x6, @multicast}, 0x14) 1m36.400419554s ago: executing program 3 (id=11179): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000040)) 1m36.230584771s ago: executing program 3 (id=11180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {0x0, 0x4107}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 1m36.198185022s ago: executing program 3 (id=11182): r0 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x76, 0x903f01) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0xffffffff) ioctl$USBDEVFS_RESET(r0, 0x5514) 1m36.151041406s ago: executing program 3 (id=11183): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 1m36.12110291s ago: executing program 3 (id=11184): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x48010) 1m35.941901436s ago: executing program 3 (id=11185): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000700)={0x0, 0x595e, 0x10000, 0x80000000, 0x51}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_MSG_RING={0x28, 0x8, 0x0, r0, 0x0, 0x1, 0x8, 0x2}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1m35.918829026s ago: executing program 32 (id=11185): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000700)={0x0, 0x595e, 0x10000, 0x80000000, 0x51}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_MSG_RING={0x28, 0x8, 0x0, r0, 0x0, 0x1, 0x8, 0x2}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1m22.903385598s ago: executing program 33 (id=11067): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="18", 0x48, 0x20008884, &(0x7f0000000080)={0x11, 0xd, r1, 0x1, 0xfd, 0x6, @multicast}, 0x14) 1.497292978s ago: executing program 1 (id=13008): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000600)='./file0\x00', 0x102) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) mount$9p_virtio(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, &(0x7f0000000200)={'trans=virtio,', {[{@dfltgid={'dfltgid', 0x3d, r1}}]}}) 1.456768908s ago: executing program 1 (id=13010): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) 1.424147866s ago: executing program 1 (id=13011): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.229027447s ago: executing program 1 (id=13021): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010100}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@sndinfo={0x20, 0x84, 0x2, {0x24de, 0x201, 0x4, 0x6f, r1}}], 0x20, 0x20008001}], 0x1, 0x24010000) 1.128383519s ago: executing program 1 (id=13024): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) r1 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.091548459s ago: executing program 1 (id=13025): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) 940.435169ms ago: executing program 0 (id=13029): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 940.276215ms ago: executing program 0 (id=13030): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x30, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000480)=@ublk_get_features_sqe={0x2e, 0x0, 0x0, r0, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x8, &(0x7f0000000440)}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000041c0)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x11}}}, 0x0) 877.450552ms ago: executing program 0 (id=13031): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc8000000}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0xa, @private0, 0xfff}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000017c0)="d3", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0x8) 877.263911ms ago: executing program 0 (id=13032): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x0, 0x0, 0xffffffff, 0x240, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1001, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1f, @local, @broadcast, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="800066180a000200aaaaaaaaaa0c000006000500"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 812.567316ms ago: executing program 0 (id=13033): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010100}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@sndinfo={0x20, 0x84, 0x2, {0x24de, 0x201, 0x4, 0x6f, r1}}], 0x20, 0x20008001}], 0x1, 0x24010000) 685.522924ms ago: executing program 0 (id=13035): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80045b10, 0x0) 491.984369ms ago: executing program 4 (id=13038): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x125, 0x7}) 343.183958ms ago: executing program 4 (id=13040): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x4}) 342.835808ms ago: executing program 5 (id=13042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'pimreg0\x00', &(0x7f0000000000)=@ethtool_cmd={0x3, 0x8, 0x3, 0xb, 0x6, 0x6, 0x0, 0xd7, 0x2, 0x1, 0x3ff, 0x0, 0x812, 0x80, 0x0, 0x9, [0x0, 0x9]}}) 213.641896ms ago: executing program 4 (id=13043): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x400000f3}]}) 213.443206ms ago: executing program 5 (id=13044): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='dummy_udc.0', 0xb) 106.990174ms ago: executing program 5 (id=13045): r0 = signalfd(0xffffffffffffffff, &(0x7f0000001340)={[0xd504]}, 0x8) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 106.832534ms ago: executing program 4 (id=13046): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) 106.620554ms ago: executing program 5 (id=13047): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 103.818355ms ago: executing program 4 (id=13048): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x200001, 0x5, 0x3, 0x0, 'syz0\x00'}, 0x5, 0x400, 0x1, 0x0, 0x0, 0x10001, 'syz0\x00', 0x0}) 89.538664ms ago: executing program 5 (id=13049): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) getsockname$inet(r0, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_TARGET={0x8, 0x8, 0x4}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x10}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x8}]}}]}, 0x64}}, 0x0) 181.376µs ago: executing program 5 (id=13050): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0x29e, 0x0, 0x2}]}) 0s ago: executing program 4 (id=13051): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x20000000000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) kernel console output (not intermixed with test programs): ermissive=1 [ 250.237312][ T42] audit: type=1400 audit(2001051326.415:53696): avc: denied { map_create } for pid=29082 comm="syz.2.11015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 250.243568][ T42] audit: type=1400 audit(2001051326.415:53697): avc: denied { map_read map_write } for pid=29082 comm="syz.2.11015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 250.251469][ T42] audit: type=1400 audit(2001051326.425:53698): avc: denied { prog_run } for pid=29080 comm="syz.1.11014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 250.257803][ T42] audit: type=1400 audit(2001051326.425:53699): avc: denied { allowed } for pid=29084 comm="syz.3.11016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 250.263932][ T42] audit: type=1400 audit(2001051326.443:53700): avc: denied { map } for pid=29084 comm="syz.3.11016" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=89216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 250.271366][ T42] audit: type=1400 audit(2001051326.443:53701): avc: denied { read write } for pid=29084 comm="syz.3.11016" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=89216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 250.280160][ T42] audit: type=1400 audit(2001051326.471:53702): avc: denied { create } for pid=29086 comm="syz.1.11017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 250.287345][T29089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11018'. [ 250.300027][T29091] comedi comedi3: s526: a I/O base address must be specified [ 250.333630][T29101] netlink: 256 bytes leftover after parsing attributes in process `syz.2.11022'. [ 250.336599][T29101] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11022'. [ 250.438955][T29121] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11035'. [ 250.451112][T29124] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 4, id = 0 [ 250.460198][T29125] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 4, id = 1 [ 250.460818][T29129] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 4, id = 3 [ 250.463787][T29128] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 4, id = 2 [ 250.575303][T29153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11048'. [ 250.667412][T29171] openvswitch: netlink: Duplicate or invalid key (type 0). [ 250.669885][T29171] openvswitch: netlink: Actions may not be safe on all matching packets [ 250.726583][T29180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11063'. [ 250.730146][T29183] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.11062'. [ 251.264906][T29250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11095'. [ 251.368600][T29256] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 252.143459][T29331] SELinux: security policydb version 18 (MLS) not backwards compatible [ 252.146373][T29331] SELinux: failed to load policy [ 252.531491][T29365] vlan5: entered promiscuous mode [ 252.534085][T29365] vlan5: entered allmulticast mode [ 252.536570][T29365] bridge0: entered allmulticast mode [ 253.170101][T29424] fuse: Bad value for 'group_id' [ 253.172109][T29424] fuse: Bad value for 'group_id' [ 253.210671][T29428] netlink: 'syz.1.11173': attribute type 11 has an invalid length. [ 253.594462][T29448] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.11182' resets device [ 253.877572][T29456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11187'. [ 253.888056][ T5790] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 253.894404][ T5790] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.931887][ T5747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.942101][ T5747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.948306][ T5747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.958120][ T5747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.963549][ T5747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 253.970544][T29467] x_tables: ip6_tables: CHECKSUM target: only valid in mangle table, not syz1 [ 254.003896][ T5097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 254.007262][ T5097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 254.012332][ T5097] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 254.021581][ T5097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 254.025366][ T5097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.032178][ T5790] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.092885][T29475] SELinux: security_context_str_to_sid (4msevS:"-XF@) failed with errno=-22 [ 254.186197][ T5790] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.255849][T29459] vcan0 speed is unknown, defaulting to 1000 [ 254.314513][ T5790] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.354222][T29459] xfrm0 speed is unknown, defaulting to 1000 [ 254.569849][ T5790] bridge_slave_1: left allmulticast mode [ 254.572306][ T5790] bridge_slave_1: left promiscuous mode [ 254.576249][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.598834][ C0] sr 2:0:0:0: [sr0] tag#15 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 254.602135][ C0] sr 2:0:0:0: [sr0] tag#15 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 254.606292][ T5790] bridge_slave_0: left allmulticast mode [ 254.608146][ T5790] bridge_slave_0: left promiscuous mode [ 254.613148][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.851549][ T5790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.882616][ T5790] bond_slave_0: left allmulticast mode [ 254.889862][ T5790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.935792][ T5790] bond_slave_1: left allmulticast mode [ 254.941311][ T5790] bond0 (unregistering): (slave team0): Releasing backup interface [ 254.978590][ T5790] team0: left allmulticast mode [ 254.980209][ T5790] team_slave_0: left allmulticast mode [ 254.981973][ T5790] team_slave_1: left allmulticast mode [ 254.985422][ T5790] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 255.021463][ T5790] veth0_to_bond: left allmulticast mode [ 255.026427][ T5790] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 255.064412][ T5790] batadv0: left allmulticast mode [ 255.067138][ T5790] bond0 (unregistering): Released all slaves [ 255.074013][ T5790] bond1 (unregistering): Released all slaves [ 255.081086][ T5790] bond2 (unregistering): Released all slaves [ 255.088206][ T5790] bond3 (unregistering): Released all slaves [ 255.111735][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 255.131860][T29459] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.135449][T29459] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.137902][T29459] bridge_slave_0: entered allmulticast mode [ 255.142378][T29459] bridge_slave_0: entered promiscuous mode [ 255.145783][T29459] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.148109][T29459] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.153352][T29459] bridge_slave_1: entered allmulticast mode [ 255.156092][T29459] bridge_slave_1: entered promiscuous mode [ 255.190473][T29459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.196346][ T5790] : left promiscuous mode [ 255.243683][T29459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.266370][T29459] team0: Port device team_slave_0 added [ 255.269942][T29459] team0: Port device team_slave_1 added [ 255.283869][ T5450] 8021q: adding VLAN 0 to HW filter on device eth3 [ 255.286772][T29459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.289527][T29459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.298256][T29459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.304350][T29459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.306597][T29459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.314953][T29459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.330762][ T5790] tipc: Disabling bearer [ 255.336286][ T5790] tipc: Left network mode [ 255.362909][T29459] hsr_slave_0: entered promiscuous mode [ 255.368780][T29459] hsr_slave_1: entered promiscuous mode [ 255.371181][T29459] debugfs: 'hsr0' already exists in 'hsr' [ 255.373089][T29459] Cannot create hsr debugfs directory [ 255.576207][ T5450] 8021q: adding VLAN 0 to HW filter on device eth4 [ 255.576470][ T42] kauditd_printk_skb: 224 callbacks suppressed [ 255.576480][ T42] audit: type=1400 audit(2000000000.140:53927): avc: denied { watch } for pid=29597 comm="syz.0.11240" path="/2705" dev="tmpfs" ino=13628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 255.635791][T29459] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 255.650559][T29459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 255.658284][T29459] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 255.661243][ T42] audit: type=1400 audit(2000000000.224:53928): avc: denied { write } for pid=29602 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.667961][T29459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 255.671193][T29459] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 255.679980][ T42] audit: type=1400 audit(2000000000.224:53929): avc: denied { create } for pid=29606 comm="syz.0.11244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 255.687475][ T42] audit: type=1400 audit(2000000000.243:53930): avc: denied { write } for pid=29607 comm="syz.1.11243" name="ptype" dev="proc" ino=4026533304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 255.699017][T29459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 255.707282][ T42] audit: type=1400 audit(2000000000.271:53931): avc: denied { write } for pid=29611 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.728217][T29459] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 255.747990][T29459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 255.752433][ T5450] 8021q: adding VLAN 0 to HW filter on device eth5 [ 255.784879][T29459] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.787747][T29459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.815202][ T42] audit: type=1400 audit(2000000000.374:53932): avc: denied { lock } for pid=29630 comm="syz.0.11249" path="socket:[89727]" dev="sockfs" ino=89727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 255.825831][ T42] audit: type=1400 audit(2000000000.374:53933): avc: denied { unlink } for pid=29624 comm="syz.1.11248" name="#1" dev="tmpfs" ino=14099 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 255.834253][ T42] audit: type=1400 audit(2000000000.374:53934): avc: denied { mount } for pid=29624 comm="syz.1.11248" name="/" dev="overlay" ino=14094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 255.863081][T29459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.863531][ T42] audit: type=1400 audit(2000000000.393:53935): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 255.871539][T29459] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.876977][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.877898][ T42] audit: type=1400 audit(2000000000.411:53936): avc: denied { read write } for pid=5740 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 255.899833][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.902113][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.971166][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.973677][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.177506][ T5097] Bluetooth: hci1: command tx timeout [ 256.299958][T29459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.423716][T29677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11262'. [ 256.462639][T29459] veth0_vlan: entered promiscuous mode [ 256.484501][T29459] veth1_vlan: entered promiscuous mode [ 256.503045][T29459] veth0_macvtap: entered promiscuous mode [ 256.507706][T29459] veth1_macvtap: entered promiscuous mode [ 256.515734][T29459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.522361][T29459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.534424][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.538192][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.543740][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.547104][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.704867][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.707981][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.730593][ T5790] hsr_slave_0: left promiscuous mode [ 256.733919][ T5790] hsr_slave_1: left promiscuous mode [ 256.736412][ T5790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.739225][ T5790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.747329][ T5790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.750219][ T5790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.760354][ T5790] veth0_macvtap: left promiscuous mode [ 256.764087][ T5790] veth1_vlan: left promiscuous mode [ 256.766185][ T5790] veth0_vlan: left promiscuous mode [ 256.965582][ T5790] team0 (unregistering): Port device team_slave_1 removed [ 256.982164][ T5790] team0 (unregistering): Port device team_slave_0 removed [ 257.061312][ T36] smc: removing ib device syz2 [ 257.141906][ T36] smbdirect: ib_dev[syz2] removed [ 257.272919][ T5839] vcan0 speed is unknown, defaulting to 1000 [ 257.280267][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.283002][ T5839] syz2: Port: 1 Link DOWN [ 257.285389][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.495242][T29706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11268'. [ 257.571758][T29711] program syz.1.11271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.609505][T29714] usb usb9: usbfs: process 29714 (syz.1.11272) did not claim interface 5 before use [ 257.791247][ T5790] IPVS: stop unused estimator thread 0... [ 258.014654][T29764] tipc: Started in network mode [ 258.016308][T29764] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 258.019165][T29764] tipc: Enabling of bearer rejected, failed to enable media [ 258.207028][T29793] netlink: 277 bytes leftover after parsing attributes in process `syz.0.11297'. [ 258.398282][ T5097] Bluetooth: hci1: command tx timeout [ 258.477637][T29827] netlink: 'syz.4.11306': attribute type 25 has an invalid length. [ 258.565204][T29837] netlink: 'syz.1.11309': attribute type 29 has an invalid length. [ 258.595490][T29841] netlink: 'syz.4.11310': attribute type 83 has an invalid length. [ 259.493584][T29889] can0: slcan on ttynull. [ 259.555325][T29888] can0 (unregistered): slcan off ttynull. [ 259.864732][T29921] nbd: must specify a size in bytes for the device [ 260.159670][T29934] PKCS8: Unsupported PKCS#8 version [ 260.403269][T29951] netlink: 'syz.1.11350': attribute type 21 has an invalid length. [ 260.405746][T29951] IPv6: NLM_F_CREATE should be specified when creating new route [ 260.408798][T29951] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.411113][T29951] IPv6: NLM_F_CREATE should be set when creating new route [ 260.413382][T29951] IPv6: NLM_F_CREATE should be set when creating new route [ 260.415579][T29951] IPv6: NLM_F_CREATE should be set when creating new route [ 260.419137][T29951] netlink: 'syz.1.11350': attribute type 21 has an invalid length. [ 260.421671][T29951] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.857749][T29978] comedi comedi3: s526: a I/O base address must be specified [ 260.996088][ T42] kauditd_printk_skb: 231 callbacks suppressed [ 260.996100][ T42] audit: type=1400 audit(2000000005.221:54168): avc: denied { create } for pid=29989 comm="syz.0.11368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.004444][ T42] audit: type=1400 audit(2000000005.221:54169): avc: denied { write } for pid=29989 comm="syz.0.11368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.011002][ T42] audit: type=1400 audit(2000000005.221:54170): avc: denied { read } for pid=29989 comm="syz.0.11368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.015026][T29992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11369'. [ 261.047023][ T42] audit: type=1400 audit(2000000005.259:54171): avc: denied { read write } for pid=29995 comm="syz.1.11372" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 261.060843][ T42] audit: type=1400 audit(2000000005.259:54172): avc: denied { open } for pid=29995 comm="syz.1.11372" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 261.111271][ T42] audit: type=1400 audit(2000000005.324:54173): avc: denied { create } for pid=30002 comm="syz.1.11375" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 261.118188][ T42] audit: type=1400 audit(2000000005.324:54174): avc: denied { ioctl } for pid=30002 comm="syz.1.11375" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=90724 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 261.307169][ T42] audit: type=1400 audit(2000000005.511:54175): avc: denied { append } for pid=30009 comm="syz.0.11378" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 261.464383][ T42] audit: type=1400 audit(2000000005.652:54176): avc: denied { read write } for pid=30020 comm="syz.1.11384" name="frontend0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 261.471936][ T42] audit: type=1400 audit(2000000005.652:54177): avc: denied { open } for pid=30020 comm="syz.1.11384" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 261.495958][T30027] netlink: 'syz.0.11386': attribute type 12 has an invalid length. [ 261.499087][T30027] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11386'. [ 261.698899][T30046] veth1_to_batadv: entered promiscuous mode [ 261.703197][T30045] veth1_to_batadv: left promiscuous mode [ 261.752632][T30050] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11397'. [ 261.782682][T30052] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11398'. [ 261.785726][T30052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11398'. [ 261.813564][T30056] macvlan0: entered promiscuous mode [ 262.002312][T30078] netlink: 'syz.1.11410': attribute type 13 has an invalid length. [ 262.142276][T30093] program syz.1.11418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.390407][T30125] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 4, id = 0 [ 262.424728][T30131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11436'. [ 262.456358][T30134] can0: slcan on ttynull. [ 262.525424][T30132] can0 (unregistered): slcan off ttynull. [ 262.566377][T30150] tipc: Enabled bearer , priority 0 [ 262.606917][T30157] block nbd0: not configured, cannot reconfigure [ 262.669600][T30167] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 262.825435][T30186] tmpfs: Cannot change global quota limit on remount [ 262.839765][T30182] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.964114][T30182] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.027653][ T5847] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 263.194972][ T5847] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 263.198072][T30182] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.198371][ T5847] usb 5-1: config 1 has no interface number 0 [ 263.203301][ T5847] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 263.208796][ T5847] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 263.214075][ T5847] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 263.217164][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.220175][ T5847] usb 5-1: Product: syz [ 263.221526][ T5847] usb 5-1: Manufacturer: syz [ 263.223060][ T5847] usb 5-1: SerialNumber: syz [ 263.226981][T30180] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 263.347259][ T1044] hid-generic 0362:07FF:7FFFFFFF.0007: item fetching failed at offset 0/2 [ 263.350430][ T1044] hid-generic 0362:07FF:7FFFFFFF.0007: probe with driver hid-generic failed with error -22 [ 263.533311][ T5846] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.551288][ T5846] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.569746][ T5817] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.581334][ T5817] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.661973][T30180] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 263.773298][ T5832] tipc: Node number set to 4278255617 [ 263.869441][ T50] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 263.880477][ T5847] usb 5-1: Incompatible driver and firmware versions [ 263.887978][ T5847] usb 5-1: USB disconnect, device number 19 [ 264.029744][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 264.033025][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 264.036547][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 264.039723][ T50] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 264.043473][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.050422][ T50] usb 6-1: config 0 descriptor?? [ 264.273524][ T50] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 264.487439][T30220] iowarrior 6-1:0.0: Error -90 while submitting URB [ 264.494908][ T5839] usb 6-1: USB disconnect, device number 11 [ 265.312479][ T5849] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 265.493728][ T5849] usb 5-1: Using ep0 maxpacket: 32 [ 265.496861][ T5849] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 265.499383][ T5849] usb 5-1: config 0 has no interface number 0 [ 265.503305][ T5849] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 265.506400][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.508954][ T5849] usb 5-1: Product: syz [ 265.510416][ T5849] usb 5-1: Manufacturer: syz [ 265.512166][ T5849] usb 5-1: SerialNumber: syz [ 265.515907][ T5849] usb 5-1: config 0 descriptor?? [ 265.522595][ T5849] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 265.526520][ T5849] usb 5-1: selecting invalid altsetting 1 [ 265.528850][ T5849] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 265.535023][ T5849] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 265.539488][ T5849] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 265.542666][ T5849] usb 5-1: media controller created [ 265.550281][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 266.566569][ T42] kauditd_printk_skb: 136 callbacks suppressed [ 266.566616][ T42] audit: type=1400 audit(2000000010.434:54314): avc: denied { search } for pid=30244 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.577945][ T42] audit: type=1400 audit(2000000010.434:54315): avc: denied { search } for pid=30244 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.587064][ T42] audit: type=1400 audit(2000000010.434:54316): avc: denied { search } for pid=30244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.594807][ T42] audit: type=1400 audit(2000000010.434:54317): avc: denied { search } for pid=30244 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.602087][ T42] audit: type=1400 audit(2000000010.434:54318): avc: denied { read } for pid=30245 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.610574][ T42] audit: type=1400 audit(2000000010.434:54319): avc: denied { read open } for pid=30245 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.619059][ T42] audit: type=1400 audit(2000000010.434:54320): avc: denied { getattr } for pid=30245 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.626939][ T42] audit: type=1400 audit(2000000010.443:54321): avc: denied { write } for pid=30244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.634050][ T42] audit: type=1400 audit(2000000010.443:54322): avc: denied { add_name } for pid=30244 comm="dhcpcd-run-hook" name="resolv.conf.eth3.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.654860][ T42] audit: type=1400 audit(2000000010.509:54323): avc: denied { write } for pid=30247 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.693693][ T5849] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 266.701025][ T5849] zl10353_read_register: readreg error (reg=127, ret==-110) [ 266.703344][T30234] usb 5-1: dvb_usb_ce6230: I2C read not implemented [ 266.732468][ T5849] usb 5-1: USB disconnect, device number 20 [ 266.950261][ T5747] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 266.959644][ T5747] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 266.963441][ T5747] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 266.967667][ T5747] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 266.973592][ T5747] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 267.177312][T30258] xfrm0 speed is unknown, defaulting to 1000 [ 267.187145][T30297] lo: entered promiscuous mode [ 267.192165][T30297] bond0: entered promiscuous mode [ 267.202258][T30297] dummy0: entered promiscuous mode [ 267.204934][T30297] eql: entered promiscuous mode [ 267.208194][T30297] ifb0: entered promiscuous mode [ 267.210400][T30297] ifb1: entered promiscuous mode [ 267.311079][T30297] e1000 0000:00:06.0 eth0: entered promiscuous mode [ 267.332729][ T5832] e1000 0000:00:06.0 eth0: Reset adapter [ 267.482702][ T5832] e1000 0000:00:06.0 eth0: Reset adapter [ 267.509479][ T5817] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.692032][ T5817] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.707601][ T1135] ata1.00: exception Emask 0x0 SAct 0x1 SErr 0x0 action 0x6 [ 267.712252][ T1135] ata1.00: waking up from sleep [ 267.713838][ T1135] ata1: hard resetting link [ 267.778322][T30258] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.781195][T30258] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.783862][T30258] bridge_slave_0: entered allmulticast mode [ 267.787652][T30258] bridge_slave_0: entered promiscuous mode [ 267.795908][T30258] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.798737][T30258] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.801525][T30258] bridge_slave_1: entered allmulticast mode [ 267.805068][T30258] bridge_slave_1: entered promiscuous mode [ 267.822152][T30258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.827266][T30258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.842452][T30258] team0: Port device team_slave_0 added [ 267.847749][T30258] team0: Port device team_slave_1 added [ 267.861047][T30258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.863332][T30258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.872856][T30258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.886929][ T5817] .`: (slave netdevsim1): Releasing backup interface [ 267.919905][ T5817] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode [ 267.928155][ T5817] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.933865][T30258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.936052][T30258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.944069][T30258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.966707][T30258] hsr_slave_0: entered promiscuous mode [ 267.969046][T30258] hsr_slave_1: entered promiscuous mode [ 267.971128][T30258] debugfs: 'hsr0' already exists in 'hsr' [ 267.973093][T30258] Cannot create hsr debugfs directory [ 268.036397][ T5817] netdevsim netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.063975][ T1135] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 268.067678][ T1135] ata1.00: configured for UDMA/100 [ 268.069990][ T1135] ata1: EH complete [ 268.112342][T30258] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 268.116283][T30258] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 268.119885][T30258] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 268.128607][T30258] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 268.131619][T30258] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 268.136036][T30258] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 268.139185][T30258] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 268.142923][T30258] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 268.162206][T30258] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.164507][T30258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.166919][T30258] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.169137][T30258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.214984][T30258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.236823][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.242981][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.265722][ T5817] bridge_slave_1: left allmulticast mode [ 268.267587][ T5817] bridge_slave_1: left promiscuous mode [ 268.269427][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.275157][ T5817] bridge_slave_0: left allmulticast mode [ 268.277013][ T5817] bridge_slave_0: left promiscuous mode [ 268.278889][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.386745][ T1165] smbdirect: ib_dev[syz1] removed [ 268.516373][ T5817] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.571866][ T5817] bond_slave_0: left promiscuous mode [ 268.575032][ T5817] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.625276][ T5817] bond_slave_1: left promiscuous mode [ 268.628336][ T5817] .` (unregistering): (slave veth0_to_bond): Releasing backup interface [ 268.667803][ T5817] veth0_to_bond: left promiscuous mode [ 268.671059][ T5817] .` (unregistering): Released all slaves [ 268.679044][ T5817] bond0 (unregistering): Released all slaves [ 268.691116][ T5817] bond1 (unregistering): Released all slaves [ 268.703553][ T5817] bond2 (unregistering): Released all slaves [ 268.712540][ T5817] bond3 (unregistering): Released all slaves [ 268.730335][T30258] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.737924][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.740284][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.750345][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.752697][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.823414][ T5817] : left promiscuous mode [ 268.939818][ T5450] 8021q: adding VLAN 0 to HW filter on device eth6 [ 269.003549][ T5817] IPVS: stopping master sync thread 29129 ... [ 269.013403][ T5817] IPVS: stopping master sync thread 29128 ... [ 269.016219][ T5817] IPVS: stopping master sync thread 29125 ... [ 269.018335][ T5817] IPVS: stopping master sync thread 29124 ... [ 269.051528][T30258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.169761][ T5747] Bluetooth: hci4: command tx timeout [ 269.205855][ T5450] 8021q: adding VLAN 0 to HW filter on device eth7 [ 269.233014][T30258] veth0_vlan: entered promiscuous mode [ 269.238524][T30258] veth1_vlan: entered promiscuous mode [ 269.256348][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.293411][T30258] veth0_macvtap: entered promiscuous mode [ 269.299518][T30258] veth1_macvtap: entered promiscuous mode [ 269.308192][T30258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.315507][T30258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.331419][ T5790] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.334230][ T5790] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.338565][ T5790] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.344010][ T5790] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.471818][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.474495][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.492290][ T5450] 8021q: adding VLAN 0 to HW filter on device eth8 [ 269.517263][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.520641][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.676778][ T5450] 8021q: adding VLAN 0 to HW filter on device eth9 [ 269.854747][ T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 270.314591][ T5817] hsr_slave_0: left promiscuous mode [ 270.316750][ T5817] hsr_slave_1: left promiscuous mode [ 270.318750][ T5817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.321057][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.323917][ T5817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.326411][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.340622][ T5817] veth1_macvtap: left allmulticast mode [ 270.342554][ T5817] veth1_macvtap: left promiscuous mode [ 270.344327][ T5817] veth0_macvtap: left allmulticast mode [ 270.347031][ T5817] veth0_macvtap: left promiscuous mode [ 270.348915][ T5817] veth1_vlan: left promiscuous mode [ 270.350794][ T5817] veth0_vlan: left promiscuous mode [ 270.485729][ T5817] team0 (unregistering): Port device team_slave_1 removed [ 270.503880][ T5817] team0 (unregistering): Port device team_slave_0 removed [ 271.000674][ T5817] IPVS: stop unused estimator thread 0... [ 271.392599][ T5747] Bluetooth: hci4: command tx timeout [ 272.453285][ T42] kauditd_printk_skb: 107 callbacks suppressed [ 272.453297][ T42] audit: type=1400 audit(2000000015.946:54431): avc: denied { write } for pid=30410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.500226][ T42] audit: type=1400 audit(2000000015.983:54432): avc: denied { write } for pid=30413 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.616846][ T5747] Bluetooth: hci4: command tx timeout [ 275.837961][ T5747] Bluetooth: hci4: command tx timeout [ 276.257206][ T42] audit: type=1400 audit(2000000019.502:54433): avc: denied { write } for pid=30416 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.311486][ T42] audit: type=1400 audit(2000000019.548:54434): avc: denied { write } for pid=30419 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.386879][ T42] audit: type=1400 audit(2000000020.550:54435): avc: denied { module_request } for pid=30425 comm="syz.0.11511" kmod="netdev-team0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 277.394625][ T42] audit: type=1400 audit(2000000020.559:54436): avc: denied { write } for pid=30426 comm="syz.1.11512" name="001" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 277.407436][ T42] audit: type=1400 audit(2000000020.568:54437): avc: denied { sys_module } for pid=30425 comm="syz.0.11511" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 277.414144][ T42] audit: type=1400 audit(2000000020.587:54438): avc: denied { read write } for pid=30431 comm="syz.5.11513" name="video37" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 277.421736][ T42] audit: type=1400 audit(2000000020.587:54439): avc: denied { open } for pid=30431 comm="syz.5.11513" path="/dev/video37" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 277.432550][ T42] audit: type=1400 audit(2000000020.587:54440): avc: denied { ioctl } for pid=30431 comm="syz.5.11513" path="/dev/video37" dev="devtmpfs" ino=1074 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 277.432711][T30427] syz_tun: left allmulticast mode [ 277.445389][T30427] syz_tun: left promiscuous mode [ 277.447120][T30427] bridge0: port 4(syz_tun) entered disabled state [ 277.457483][T30427] bridge_slave_0: left allmulticast mode [ 277.459990][T30427] bridge_slave_0: left promiscuous mode [ 277.467474][T30427] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.474909][T30427] bridge_slave_1: left allmulticast mode [ 277.477422][T30427] bridge_slave_1: left promiscuous mode [ 277.479936][T30427] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.494211][T30427] bond0: (slave bond_slave_1): Releasing backup interface [ 277.556113][T30427] bridge0: port 3(team_slave_1) entered disabled state [ 277.573575][T30427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.576128][T30427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.578848][T30440] devpts: Bad value for 'max' [ 277.579435][T30427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.582979][T30427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.588602][T30427] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 277.670090][T30451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11521'. [ 277.764343][ T5818] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 278.792654][ T42] kauditd_printk_skb: 36 callbacks suppressed [ 278.792671][ T42] audit: type=1400 audit(2000000021.869:54477): avc: denied { bpf } for pid=30473 comm="syz.4.11532" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 278.816906][ T42] audit: type=1400 audit(2000000021.897:54478): avc: denied { read write } for pid=30475 comm="syz.0.11533" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 278.827610][ T42] audit: type=1400 audit(2000000021.897:54479): avc: denied { open } for pid=30475 comm="syz.0.11533" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 278.870296][T30484] kAFS: unable to lookup cell '(,c' [ 278.902425][T30491] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 278.919634][ T42] audit: type=1400 audit(2000000021.981:54480): avc: denied { read } for pid=30492 comm="syz.4.11541" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 278.932365][ T42] audit: type=1400 audit(2000000021.981:54481): avc: denied { open } for pid=30492 comm="syz.4.11541" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 278.941070][ T42] audit: type=1400 audit(2000000021.991:54482): avc: denied { ioctl } for pid=30492 comm="syz.4.11541" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 278.967323][ T42] audit: type=1400 audit(2000000022.028:54483): avc: denied { create } for pid=30500 comm="syz.0.11545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 278.973725][ T42] audit: type=1400 audit(2000000022.047:54484): avc: denied { setopt } for pid=30500 comm="syz.0.11545" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 278.988136][T30503] bond1: option xmit_hash_policy: invalid value (6) [ 278.991823][T30503] bond1 (unregistering): Released all slaves [ 279.011875][ T42] audit: type=1400 audit(2000000022.084:54485): avc: denied { read write } for pid=30510 comm="syz.5.11549" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 279.019178][ T42] audit: type=1400 audit(2000000022.084:54486): avc: denied { open } for pid=30510 comm="syz.5.11549" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 279.026951][T30512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11546'. [ 279.026964][T30512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11546'. [ 279.046454][T30516] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11551'. [ 279.139416][T30528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11557'. [ 279.204874][T30540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.205379][T30542] EXT4-fs: Conflicting test_dummy_encryption options [ 279.275598][T30555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11570'. [ 279.476974][T30580] netlink: 'syz.1.11582': attribute type 11 has an invalid length. [ 279.708146][T30621] binder: 30619:30621 ioctl c018620b 0 returned -14 [ 279.732155][T30625] usb usb8: usbfs: process 30625 (syz.1.11598) did not claim interface 0 before use [ 279.828298][T30636] vim2m vim2m.0: vidioc_s_fmt queue busy [ 279.994723][ T5847] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 280.103365][T30669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11620'. [ 280.106098][T30669] netlink: 'syz.1.11620': attribute type 1 has an invalid length. [ 280.108573][T30669] nbd: error processing sock list [ 280.154987][ T5847] usb 5-1: Using ep0 maxpacket: 32 [ 280.158580][ T5847] usb 5-1: unable to get BOS descriptor or descriptor too short [ 280.167417][ T5847] usb 5-1: string descriptor 0 read error: -22 [ 280.170006][ T5847] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 280.172970][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 280.182801][ T5847] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 280.191744][ T5847] dw2102: su3000_power_ctrl: 1, initialized 0 [ 280.193708][ T5847] dvb-usb: bulk message failed: -22 (2/0) [ 280.206135][ T5847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 280.213684][ T5847] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 280.216388][ T5847] usb 5-1: media controller created [ 280.218046][ T5847] dvb-usb: bulk message failed: -22 (6/0) [ 280.221357][ T5847] dw2102: i2c transfer failed. [ 280.223067][ T5847] dvb-usb: bulk message failed: -22 (6/0) [ 280.224947][ T5847] dw2102: i2c transfer failed. [ 280.226462][ T5847] dvb-usb: bulk message failed: -22 (6/0) [ 280.228252][ T5847] dw2102: i2c transfer failed. [ 280.230983][ T5847] dvb-usb: bulk message failed: -22 (6/0) [ 280.233078][ T5847] dw2102: i2c transfer failed. [ 280.234635][ T5847] dvb-usb: bulk message failed: -22 (6/0) [ 280.236477][ T5847] dw2102: i2c transfer failed. [ 280.238007][ T5847] dvb-usb: bulk message failed: -22 (6/0) [ 280.239906][ T5847] dw2102: i2c transfer failed. [ 280.243175][ T5847] dvb-usb: MAC address: 02:02:02:02:02:02 [ 280.250491][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.262763][ T5847] dvb-usb: bulk message failed: -22 (3/0) [ 280.264981][ T5847] dw2102: command 0x0e transfer failed. [ 280.266789][ T5847] dvb-usb: bulk message failed: -22 (3/0) [ 280.268531][ T5847] dw2102: command 0x0e transfer failed. [ 280.279549][T30683] netlink: 199784 bytes leftover after parsing attributes in process `syz.1.11627'. [ 280.282483][T30683] netlink: 'syz.1.11627': attribute type 1 has an invalid length. [ 280.493325][T30705] xt_limit: Overflow, try lower: 271964/0 [ 280.515679][T30707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11639'. [ 280.518770][T30707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11639'. [ 280.595034][ T5847] dvb-usb: bulk message failed: -22 (3/0) [ 280.596929][ T5847] dw2102: command 0x0e transfer failed. [ 280.598716][ T5847] dvb-usb: bulk message failed: -22 (3/0) [ 280.600651][ T5847] dw2102: command 0x0e transfer failed. [ 280.602845][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 280.607620][ T5847] dw2102: command 0x51 transfer failed. [ 280.609448][T30626] dvb-usb: bulk message failed: -22 (5/0) [ 280.611268][T30626] dw2102: i2c transfer failed. [ 280.630188][ T5847] DVB: Unable to find symbol ds3000_attach() [ 280.632123][ T5847] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 280.681263][ T5847] rc_core: IR keymap rc-su3000 not found [ 280.683362][ T5847] Registered IR keymap rc-empty [ 280.688368][ T5847] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 280.695939][ T5847] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input42 [ 280.711286][ T5847] dvb-usb: schedule remote query interval to 150 msecs. [ 280.713645][ T5847] dw2102: su3000_power_ctrl: 0, initialized 1 [ 280.715593][ T5847] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 280.720892][ T5847] usb 5-1: USB disconnect, device number 21 [ 280.767301][T30743] team_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 280.840334][ T5847] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 280.944078][T30767] netlink: 'syz.5.11667': attribute type 3 has an invalid length. [ 281.481091][T30832] netlink: 'syz.1.11698': attribute type 1 has an invalid length. [ 281.483644][T30832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.970446][T30943] tipc: Started in network mode [ 282.972115][T30943] tipc: Node identity , cluster identity 4711 [ 282.974174][T30943] tipc: Failed to obtain node identity [ 282.976177][T30943] tipc: Enabling of bearer rejected, failed to enable media [ 282.983926][T30947] netlink: 'syz.1.11734': attribute type 1 has an invalid length. [ 283.056953][T30956] ieee802154 phy1 wpan1: encryption failed: -22 [ 283.057949][T30959] program syz.0.11748 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.093358][T30963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.332855][T31003] input input43: cannot allocate more than FF_MAX_EFFECTS effects [ 283.429196][T31019] __nla_validate_parse: 6 callbacks suppressed [ 283.429208][T31019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11775'. [ 283.489013][T31025] comedi comedi3: rti802: I/O port conflict (0x100,4) [ 283.772795][T31044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11787'. [ 283.775520][T31044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11787'. [ 283.848731][T31050] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 283.908553][T31056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11793'. [ 283.911389][T31056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11793'. [ 284.011415][T31072] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11801'. [ 284.127964][T31088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11809'. [ 284.131847][T31088] block nbd0: Unsupported socket: should be TCP or UNIX. [ 284.173776][T31092] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 284.176581][T31092] ALSA: mixer_oss: invalid index 137438 [ 284.239503][ T42] kauditd_printk_skb: 368 callbacks suppressed [ 284.239516][ T42] audit: type=1400 audit(2000000026.969:54855): avc: denied { read write } for pid=31098 comm="syz.5.11814" name="radio1" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 284.250333][ T42] audit: type=1400 audit(2000000026.969:54856): avc: denied { open } for pid=31098 comm="syz.5.11814" path="/dev/radio1" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 284.272526][T31102] loop5: detected capacity change from 0 to 7 [ 284.273741][T31105] syz.5.11817: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/ [ 284.275195][ T42] audit: type=1400 audit(2000000027.007:54857): avc: denied { ioctl } for pid=31104 comm="syz.5.11817" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=953 ioctlcmd=0x6f2d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 284.285084][T31102] Dev loop5: unable to read RDB block 7 [ 284.288294][T31105] ,mems_allowed=0-1 [ 284.289758][T31102] loop5: unable to read partition table [ 284.291373][T31105] CPU: 1 UID: 0 PID: 31105 Comm: syz.5.11817 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.291391][T31105] Tainted: [L]=SOFTLOCKUP [ 284.291395][T31105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 284.291402][T31105] Call Trace: [ 284.291408][T31105] [ 284.291413][T31105] dump_stack_lvl+0x100/0x190 [ 284.291443][T31105] warn_alloc.cold+0x94/0xa8 [ 284.291459][T31105] ? __pfx_warn_alloc+0x10/0x10 [ 284.291474][T31105] ? __pfx_slow_avc_audit+0x10/0x10 [ 284.291493][T31105] ? __lock_acquire+0x49f/0x1a40 [ 284.291510][T31105] ? find_held_lock+0x2b/0x80 [ 284.291528][T31105] ? avc_has_extended_perms+0x33a/0x1080 [ 284.291541][T31105] ? avc_has_extended_perms+0x33a/0x1080 [ 284.291556][T31105] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 284.291579][T31105] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 284.291593][T31105] __vmalloc_node_range_noprof+0x136c/0x1630 [ 284.291613][T31105] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 284.291628][T31105] ? trace_contention_end+0x126/0x160 [ 284.291643][T31105] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 284.291667][T31105] ? dvb_demux_do_ioctl+0x929/0x1200 [ 284.291686][T31105] ? find_held_lock+0x2b/0x80 [ 284.291704][T31105] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 284.291721][T31105] ? __pfx___mutex_lock+0x10/0x10 [ 284.291740][T31105] ? tomoyo_path_number_perm+0x188/0x580 [ 284.291758][T31105] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 284.291774][T31105] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 284.291790][T31105] __vmalloc_node_noprof+0xad/0xf0 [ 284.291806][T31105] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 284.291823][T31105] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 284.291839][T31105] dvb_demux_do_ioctl+0x9e0/0x1200 [ 284.291857][T31105] ? do_vfs_ioctl+0x226/0x13e0 [ 284.291876][T31105] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 284.291891][T31105] dvb_usercopy+0x167/0x340 [ 284.291906][T31105] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 284.291922][T31105] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 284.291938][T31105] ? __pfx_dvb_usercopy+0x10/0x10 [ 284.291957][T31105] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 284.291972][T31105] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 284.291987][T31105] ? selinux_file_ioctl+0x13b/0x290 [ 284.292004][T31105] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 284.292018][T31105] ? selinux_file_ioctl+0xb6/0x290 [ 284.292036][T31105] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 284.292052][T31105] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 284.292067][T31105] dvb_demux_ioctl+0x29/0x40 [ 284.292082][T31105] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 284.292098][T31105] __x64_sys_ioctl+0x18e/0x210 [ 284.292115][T31105] do_syscall_64+0x115/0x870 [ 284.292127][T31105] ? clear_bhb_loop+0x40/0x90 [ 284.292141][T31105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.292152][T31105] RIP: 0033:0x7f6712b9df99 [ 284.292162][T31105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.292173][T31105] RSP: 002b:00007f6713afa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.292184][T31105] RAX: ffffffffffffffda RBX: 00007f6712e25fa0 RCX: 00007f6712b9df99 [ 284.292191][T31105] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000004 [ 284.292198][T31105] RBP: 00007f6712c34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 284.292204][T31105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.292210][T31105] R13: 00007f6712e26038 R14: 00007f6712e25fa0 R15: 00007ffecc1a9488 [ 284.292221][T31105] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 284.292240][T31105] [ 284.292244][T31105] Mem-Info: [ 284.293500][ T42] audit: type=1400 audit(2000000027.025:54858): avc: denied { setopt } for pid=31106 comm="syz.1.11818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 284.298710][T31105] active_anon:11336 inactive_anon:1348 isolated_anon:0 [ 284.298710][T31105] active_file:8653 inactive_file:21628 isolated_file:0 [ 284.298710][T31105] unevictable:1768 dirty:410 writeback:0 [ 284.298710][T31105] slab_reclaimable:7955 slab_unreclaimable:71813 [ 284.298710][T31105] mapped:25055 shmem:2290 pagetables:4037 [ 284.298710][T31105] sec_pagetables:307 bounce:0 [ 284.298710][T31105] kernel_misc_reclaimable:0 [ 284.298710][T31105] free:460104 free_pcp:11325 free_cma:0 [ 284.302736][T31102] loop5: partition table beyond EOD, [ 284.308082][T31105] Node 0 active_anon:45332kB inactive_anon:5392kB active_file:34612kB inactive_file:85992kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:83652kB dirty:1636kB writeback:0kB shmem:5624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14592kB pagetables:14848kB sec_pagetables:1228kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 284.308738][T31102] truncated [ 284.308747][T31102] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 284.310488][T31105] Node 1 active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:520kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16568kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:1052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 284.343551][ T42] audit: type=1400 audit(2000000027.063:54859): avc: denied { mount } for pid=31110 comm="syz.1.11820" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 284.352407][T31105] Node 0 [ 284.354195][ T42] audit: type=1400 audit(2000000027.072:54860): avc: denied { search } for pid=31110 comm="syz.1.11820" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 284.354640][T31105] DMA free:15300kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 284.354672][T31105] lowmem_reserve[]: 0 1225 1225 [ 284.363688][ T42] audit: type=1400 audit(2000000027.072:54861): avc: denied { search } for pid=31110 comm="syz.1.11820" name="events" dev="tracefs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 284.363979][T31105] 1225 [ 284.366687][ T42] audit: type=1400 audit(2000000027.072:54862): avc: denied { search } for pid=31110 comm="syz.1.11820" name="dwc3" dev="tracefs" ino=95945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 284.375513][T31105] 1225 [ 284.377379][ T42] audit: type=1400 audit(2000000027.072:54863): avc: denied { search } for pid=31110 comm="syz.1.11820" name="dwc3_ctrl_req" dev="tracefs" ino=95947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 284.384991][T31105] [ 284.385727][ T5148] Dev loop5: unable to read RDB block 7 [ 284.387209][T31115] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 284.387523][T31105] Node 0 [ 284.394361][ T42] audit: type=1400 audit(2000000027.082:54864): avc: denied { write } for pid=31110 comm="syz.1.11820" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 284.398836][T31105] DMA32 free:221092kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45080kB inactive_anon:5392kB active_file:34616kB inactive_file:85992kB unevictable:3536kB writepending:1644kB zspages:432kB present:2080628kB managed:1255240kB mlocked:0kB bounce:0kB free_pcp:26800kB local_pcp:6960kB free_cma:0kB [ 284.403927][ T5148] loop5: unable to read partition table [ 284.407460][T31105] lowmem_reserve[]: [ 284.409566][ T5148] loop5: partition table beyond EOD, [ 284.412266][T31105] 0 [ 284.415365][ T5148] truncated [ 284.417410][T31105] 0 0 0 0 [ 284.481087][T31120] [U]  [ 284.489067][T31105] Node 1 Normal free:1603536kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:516kB unevictable:3536kB writepending:4kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:18312kB local_pcp:8644kB free_cma:0kB [ 284.566693][T31105] lowmem_reserve[]: 0 0 0 0 0 [ 284.568497][T31105] Node 0 DMA: 9*4kB (U) 12*8kB (U) 6*16kB (U) 9*32kB (U) 9*64kB (U) 7*128kB (U) 4*256kB (U) 4*512kB (U) 4*1024kB (U) 1*2048kB (M) 1*4096kB (M) = 15300kB [ 284.573980][T31105] Node 0 DMA32: 1139*4kB (UME) 1341*8kB (UME) 409*16kB (UME) 737*32kB (UME) 518*64kB (UME) 204*128kB (UME) 76*256kB (UM) 45*512kB (UM) 32*1024kB (UM) 4*2048kB (UM) 8*4096kB (U) = 220900kB [ 284.579939][T31105] Node 1 Normal: 206*4kB (UME) 261*8kB (UME) 253*16kB (UM) 257*32kB (UME) 252*64kB (UME) 239*128kB (UE) 224*256kB (UME) 211*512kB (UME) 196*1024kB (UME) 4*2048kB (UE) 285*4096kB (UM) = 1603536kB [ 284.585932][T31105] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.588846][T31105] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 284.591814][T31105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.594749][T31105] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 284.597653][T31105] 32642 total pagecache pages [ 284.599617][T31105] 12 pages in swap cache [ 284.601506][T31105] Free swap = 124724kB [ 284.602884][T31105] Total swap = 124996kB [ 284.604316][T31105] 1048443 pages RAM [ 284.605479][T31105] 0 pages HighMem/MovableOnly [ 284.606945][T31105] 285322 pages reserved [ 284.608165][T31105] 0 pages cma reserved [ 284.677448][T31137] openvswitch: netlink: Missing key (keys=40, expected=100) [ 284.928811][T31176] netlink: 348 bytes leftover after parsing attributes in process `syz.0.11850'. [ 285.080733][T31193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11857'. [ 285.136462][T31200] ip6gretap0: entered promiscuous mode [ 285.220571][ T5848] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 285.380562][ T5848] usb 10-1: Using ep0 maxpacket: 32 [ 285.384724][ T5848] usb 10-1: config index 0 descriptor too short (expected 15270, got 18) [ 285.391433][ T5848] usb 10-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 285.395462][ T5848] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.398657][ T5848] usb 10-1: Product: syz [ 285.400283][ T5848] usb 10-1: Manufacturer: syz [ 285.402450][ T5848] usb 10-1: SerialNumber: syz [ 285.407414][ T5848] usb 10-1: config 0 descriptor?? [ 285.412790][ T5848] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 285.416016][ T5848] dvb-usb: bulk message failed: -22 (4/0) [ 285.418411][ T5848] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 285.422248][ T5848] dvb-usb: bulk message failed: -22 (5/0) [ 285.424730][ T5848] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 285.433390][ T5848] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 285.437402][ T5848] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 285.440545][ T5848] usb 10-1: media controller created [ 285.447385][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.459663][ T5848] usb 10-1: selecting invalid altsetting 3 [ 285.461815][ T5848] ttusb2: set interface to alts=3 failed [ 285.481129][ T5848] DVB: Unable to find symbol tda10086_attach() [ 285.483165][ T5848] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 285.487505][ T5848] dvb-usb: bulk message failed: -22 (4/0) [ 285.490225][ T5848] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 285.493763][ T5848] dvb-usb: bulk message failed: -22 (5/0) [ 285.495693][ T5848] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 285.500716][ T5848] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 285.630928][T31183] dvb-usb: bulk message failed: -22 (7/0) [ 285.635106][T31183] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 285.641925][T31183] ttusb2: i2c transfer failed. [ 285.645221][ T5848] usb 10-1: USB disconnect, device number 2 [ 285.667691][ T5848] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 285.821307][T31235] netlink: 'syz.1.11875': attribute type 1 has an invalid length. [ 285.823912][T31235] netlink: 220 bytes leftover after parsing attributes in process `syz.1.11875'. [ 285.984135][T31245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.296432][T31276] netlink: zone id is out of range [ 286.298170][T31276] netlink: del zone limit has 8 unknown bytes [ 286.316206][T31279] geneve0: entered promiscuous mode [ 286.592329][T31317] netlink: 'syz.4.11913': attribute type 2 has an invalid length. [ 286.608986][T31317] : entered promiscuous mode [ 286.959763][ T5813] hid_parser_main: 3456 callbacks suppressed [ 286.959778][ T5813] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 286.968461][ T5813] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 286.971299][ T5813] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 286.975527][ T5813] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 286.977951][ T5813] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 286.980398][ T5813] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 286.982831][ T5813] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 286.985934][ T5813] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 286.988402][ T5813] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 286.990714][ T5813] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0 [ 287.001610][ T5813] hid-generic 0006:0008:0008.0008: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 287.006545][T31366] xt_l2tp: wrong L2TP version: 0 [ 287.055364][T31369] fido_id[31369]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 287.494749][T31418] tipc: Started in network mode [ 287.497001][T31418] tipc: Node identity 000000000000000003, cluster identity 4711 [ 287.553042][T31424] [U] V3Fپ"S/4:XTZWTLW= [ 287.556829][T31423] [U] J"E:" [ 287.838245][ T5832] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 287.963051][T31468] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 288.021600][ T5832] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 288.028066][ T5832] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 288.033093][ T5832] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 288.036762][ T5832] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.043783][T31428] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 288.049354][ T5832] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 288.274892][ T5848] usb 10-1: USB disconnect, device number 3 [ 288.402156][T31519] netlink: 'syz.4.12000': attribute type 11 has an invalid length. [ 288.450616][T31529] gre0: MTU too low for tipc bearer [ 288.452314][T31529] tipc: Enabling of bearer rejected, failed to enable media [ 288.541234][T31541] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 288.635803][T31552] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 288.688634][T31556] can0: slcan on ttynull. [ 288.744850][T31563] xt_l2tp: v2 tid > 0xffff: 2031748 [ 288.758287][T31555] can0 (unregistered): slcan off ttynull. [ 288.955816][T31595] max out of range [ 288.992276][ T5813] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 289.155066][ T5813] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.158841][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 289.163098][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 289.170159][ T5813] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 289.175235][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.182217][ T5813] usb 6-1: Product: syz [ 289.183864][ T5813] usb 6-1: Manufacturer: syz [ 289.186700][ T5813] usb 6-1: SerialNumber: syz [ 289.190132][ T5813] usb 6-1: config 0 descriptor?? [ 289.192318][T31559] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 289.248822][ T5813] rc_core: IR keymap rc-streamzap not found [ 289.253160][ T5813] Registered IR keymap rc-empty [ 289.255942][ T5813] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 289.260775][ T5813] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input44 [ 289.334636][ T5818] e1000 0000:00:06.0 eth0: Reset adapter [ 289.430468][ T34] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 289.430743][ T5832] usb 6-1: USB disconnect, device number 12 [ 289.462936][ T5818] e1000 0000:00:06.0 eth0: Reset adapter [ 289.552892][T31654] __nla_validate_parse: 8 callbacks suppressed [ 289.552905][T31654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12059'. [ 289.612091][ T34] usb 10-1: Using ep0 maxpacket: 32 [ 289.615627][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 289.618805][ T34] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 289.621846][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 289.625749][ T34] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 289.629017][ T34] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 289.634109][ T34] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 289.636999][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.641405][ T34] usb 10-1: config 0 descriptor?? [ 289.868888][ T34] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 290.134272][ T42] kauditd_printk_skb: 331 callbacks suppressed [ 290.134284][ T42] audit: type=1400 audit(2000000032.481:55196): avc: denied { search } for pid=31655 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.145414][ T42] audit: type=1400 audit(2000000032.490:55197): avc: denied { search } for pid=31655 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.154290][ T42] audit: type=1400 audit(2000000032.490:55198): avc: denied { search } for pid=31655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.163577][ T42] audit: type=1400 audit(2000000032.490:55199): avc: denied { search } for pid=31655 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.171407][ T42] audit: type=1400 audit(2000000032.490:55200): avc: denied { read } for pid=31656 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.179357][ T42] audit: type=1400 audit(2000000032.490:55201): avc: denied { read open } for pid=31656 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.187951][ T42] audit: type=1400 audit(2000000032.490:55202): avc: denied { getattr } for pid=31656 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.196344][ T42] audit: type=1400 audit(2000000032.500:55203): avc: denied { write } for pid=31655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.203935][ T42] audit: type=1400 audit(2000000032.500:55204): avc: denied { add_name } for pid=31655 comm="dhcpcd-run-hook" name="resolv.conf.eth0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.210987][ T42] audit: type=1400 audit(2000000032.500:55205): avc: denied { create } for pid=31655 comm="dhcpcd-run-hook" name="resolv.conf.eth0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 291.739765][ T5818] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 292.373550][ T5813] usb 10-1: USB disconnect, device number 4 [ 292.378323][ T5813] usblp0: removed [ 299.187361][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 299.187374][ T42] audit: type=1400 audit(2000000040.959:55222): avc: denied { write } for pid=31678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.238726][ T42] audit: type=1400 audit(2000000041.006:55223): avc: denied { write } for pid=31681 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.863118][ T42] audit: type=1400 audit(2000000041.596:55224): avc: denied { watch } for pid=31684 comm="syz.0.12060" path="/2934" dev="tmpfs" ino=14787 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 299.871071][ T42] audit: type=1400 audit(2000000041.596:55225): avc: denied { create } for pid=31687 comm="syz.1.12061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 299.877547][ T42] audit: type=1400 audit(2000000041.596:55226): avc: denied { write } for pid=31687 comm="syz.1.12061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 299.884898][ T42] audit: type=1400 audit(2000000041.605:55227): avc: denied { read } for pid=31687 comm="syz.1.12061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 299.898553][ T42] audit: type=1400 audit(2000000041.624:55228): avc: denied { mounton } for pid=31692 comm="syz.1.12064" path="/3077/proc" dev="tmpfs" ino=15507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 299.905750][ T42] audit: type=1400 audit(2000000041.624:55229): avc: denied { mount } for pid=31692 comm="syz.1.12064" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 299.913202][ T42] audit: type=1400 audit(2000000041.633:55230): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 299.937787][ T42] audit: type=1400 audit(2000000041.661:55231): avc: denied { prog_load } for pid=31698 comm="syz.0.12067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 299.965184][T31703] overlayfs: workdir and upperdir must reside under the same mount [ 300.245711][ T5818] e1000 0000:00:06.0 eth0: Reset adapter [ 300.417041][T31754] netlink: 'syz.1.12090': attribute type 4 has an invalid length. [ 302.596591][ T5818] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 305.619939][ T42] kauditd_printk_skb: 60 callbacks suppressed [ 305.619956][ T42] audit: type=1400 audit(2000000046.977:55292): avc: denied { write } for pid=31771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.675642][ T42] audit: type=1400 audit(2000000047.033:55293): avc: denied { write } for pid=31774 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.636714][ T42] audit: type=1400 audit(2000000049.803:55294): avc: denied { write } for pid=31776 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.679147][ T42] audit: type=1400 audit(2000000049.840:55295): avc: denied { write } for pid=31779 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.461074][ T42] audit: type=1400 audit(2000000050.570:55296): avc: denied { write } for pid=31782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.505236][ T42] audit: type=1400 audit(2000000050.617:55297): avc: denied { write } for pid=31785 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.833083][ T42] audit: type=1400 audit(2000000058.403:55298): avc: denied { create } for pid=31787 comm="syz.0.12091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 317.841146][ T42] audit: type=1400 audit(2000000058.412:55299): avc: denied { write } for pid=31787 comm="syz.0.12091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 317.851013][ T42] audit: type=1400 audit(2000000058.431:55300): avc: denied { read } for pid=31789 comm="syz.1.12092" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 317.859103][T31794] netlink: 'syz.5.12093': attribute type 83 has an invalid length. [ 317.859693][ T42] audit: type=1400 audit(2000000058.431:55301): avc: denied { open } for pid=31789 comm="syz.1.12092" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 317.869210][ T42] audit: type=1400 audit(2000000058.440:55302): avc: denied { mounton } for pid=31793 comm="syz.4.12094" path="/227/file0" dev="tmpfs" ino=1167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 317.876964][ T42] audit: type=1400 audit(2000000058.440:55303): avc: denied { mount } for pid=31793 comm="syz.4.12094" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 317.890670][ T42] audit: type=1400 audit(2000000058.440:55304): avc: denied { ioctl } for pid=31789 comm="syz.1.12092" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 317.899766][ T42] audit: type=1400 audit(2000000058.440:55305): avc: denied { mount } for pid=31793 comm="syz.4.12094" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 317.906981][ T42] audit: type=1400 audit(2000000058.440:55306): avc: denied { remount } for pid=31793 comm="syz.4.12094" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 317.917259][ T42] audit: type=1400 audit(2000000058.440:55307): avc: denied { unmount } for pid=29459 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 318.019701][T31819] openvswitch: netlink: Missing valid actions attribute. [ 318.021999][T31819] openvswitch: netlink: Actions may not be safe on all matching packets [ 318.043400][T31820] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 318.047590][T31822] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12108'. [ 318.286864][T31860] loop9: detected capacity change from 0 to 255852544 [ 318.366946][T31868] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 318.387065][T31860] loop9: detected capacity change from 255852544 to 524287999 [ 318.472651][T31876] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12131'. [ 318.512467][ T5747] Bluetooth: hci4: link tx timeout [ 318.514462][ T5747] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 318.526150][ T5097] Bluetooth: hci4: link tx timeout [ 318.527946][ T5097] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 318.535904][ T5097] Bluetooth: hci4: link tx timeout [ 318.537844][ T5097] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 318.764713][T31911] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 318.844821][T31920] input: syz0 as /devices/virtual/input/input45 [ 319.115138][T31953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12167'. [ 319.160041][T31961] kvm: kvm [31960]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6 [ 319.165055][T31953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12167'. [ 319.668539][T32030] block2mtd: parameter too long [ 320.058201][T32081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12225'. [ 320.062522][T32081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12225'. [ 320.080191][T32086] netlink: 27 bytes leftover after parsing attributes in process `syz.1.12227'. [ 320.541600][T32143] netlink: 104 bytes leftover after parsing attributes in process `syz.1.12253'. [ 320.719283][ T5097] Bluetooth: hci4: command 0x0406 tx timeout [ 320.842737][T32162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12262'. [ 321.270342][T32197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12276'. [ 321.428917][T32211] netlink: 'syz.5.12284': attribute type 7 has an invalid length. [ 321.431608][T32211] netlink: 'syz.5.12284': attribute type 8 has an invalid length. [ 321.595626][ T5813] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 321.766542][ T5813] usb 5-1: Using ep0 maxpacket: 32 [ 321.769523][ T5813] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 321.773629][ T5813] usb 5-1: config 0 has no interface number 0 [ 321.775516][ T5813] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 321.781403][ T5813] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 321.787197][ T5813] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 321.796828][ T5813] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 321.806065][ T5813] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.814431][ T5813] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 321.817320][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.821319][ T5813] usb 5-1: Product: syz [ 321.822617][ T5813] usb 5-1: Manufacturer: syz [ 321.826428][ T5813] usb 5-1: SerialNumber: syz [ 321.829827][ T5813] usb 5-1: config 0 descriptor?? [ 321.837888][ T5813] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.119/input/input46 [ 322.057563][ T5848] usb 5-1: USB disconnect, device number 22 [ 322.610037][T32241] SELinux: context truncated [ 322.611771][T32241] SELinux: invalid ocon [ 322.698391][T32241] SELinux: failed to load policy [ 322.715368][T32259] ipvlan2: entered allmulticast mode [ 322.718311][T32259] batadv_slave_1: entered allmulticast mode [ 322.721604][T32259] batman_adv: batadv0: Adding interface: ipvlan2 [ 322.723686][T32259] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.733511][T32259] batman_adv: batadv0: Interface activated: ipvlan2 [ 323.127565][T32293] misc userio: Can't change port type on an already running userio instance [ 323.188851][ T42] kauditd_printk_skb: 265 callbacks suppressed [ 323.188862][ T42] audit: type=1400 audit(2000000063.419:55573): avc: denied { create } for pid=32300 comm="syz.4.12325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 323.197946][ T42] audit: type=1400 audit(2000000063.419:55574): avc: denied { create } for pid=32303 comm="syz.1.12324" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 323.211418][ T42] audit: type=1400 audit(2000000063.437:55576): avc: denied { write } for pid=32300 comm="syz.4.12325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 323.217956][ T42] audit: type=1400 audit(2000000063.437:55575): avc: denied { recv } for pid=5722 comm="syz-executor" saddr=127.0.0.1 src=49076 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 323.243529][ T42] audit: type=1400 audit(2000000063.456:55577): avc: denied { mount } for pid=32307 comm="syz.1.12327" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 323.250588][ T42] audit: type=1400 audit(2000000063.465:55578): avc: denied { create } for pid=32309 comm="syz.0.12328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 323.257041][ T42] audit: type=1400 audit(2000000063.465:55579): avc: denied { mmap_zero } for pid=32309 comm="syz.0.12328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 323.268243][ T42] audit: type=1400 audit(2000000063.465:55580): avc: denied { setopt } for pid=32309 comm="syz.0.12328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 323.275462][ T42] audit: type=1400 audit(2000000063.465:55581): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 323.323992][ T42] audit: type=1400 audit(2000000063.540:55582): avc: denied { read write } for pid=32320 comm="syz.0.12331" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 323.423206][T32312] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.885521][T32341] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.010909][T32341] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.133706][T32341] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.208825][T32341] bridge0: port 5(netdevsim0) entered disabled state [ 324.229053][T32341] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 324.232295][T32341] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 324.238816][T32341] bridge0: port 5(netdevsim0) entered disabled state [ 324.249649][T32341] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.584443][T32359] __nla_validate_parse: 4 callbacks suppressed [ 324.584455][T32359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12350'. [ 325.130540][T32397] Falling back ldisc for ttyS3. [ 325.157143][T32399] CUSE: unknown device info "" [ 325.158754][T32399] CUSE: unknown device info "" [ 325.160299][T32399] CUSE: unknown device info "" [ 325.161835][T32399] CUSE: unknown device info "" [ 325.163373][T32399] CUSE: DEVNAME unspecified [ 325.405616][T32425] IPv6: addrconf: prefix option has invalid lifetime [ 325.433044][T32429] netlink: 'syz.5.12382': attribute type 16 has an invalid length. [ 325.435683][T32429] netlink: 'syz.5.12382': attribute type 3 has an invalid length. [ 325.438206][T32429] netlink: 'syz.5.12382': attribute type 1 has an invalid length. [ 325.441100][T32429] netlink: 112 bytes leftover after parsing attributes in process `syz.5.12382'. [ 325.443702][T32431] i2c i2c-0: new_device: Can't parse I2C address [ 325.489151][ T5747] Bluetooth: hci4: unexpected event for opcode 0x0c7d [ 325.544330][T32438] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 325.547256][T32438] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 325.569540][T32438] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 325.582255][T32438] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 325.584286][T32438] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 326.038645][T32501] comedi comedi2: board detection failed [ 326.074718][T32506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12419'. [ 326.278457][T32537] program syz.0.12432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.543135][ T5849] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 326.715314][ T5849] usb 6-1: not running at top speed; connect to a high speed hub [ 326.718713][ T5849] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 326.723699][ T5849] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 326.727780][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.730321][ T5849] usb 6-1: Product: syz [ 326.731653][ T5849] usb 6-1: Manufacturer: syz [ 326.733185][ T5849] usb 6-1: SerialNumber: syz [ 326.738830][ T5849] oti6858 6-1:1.0: oti6858 converter detected [ 326.746107][ T5849] usb 6-1: oti6858 converter now attached to ttyUSB0 [ 327.198554][ T5848] usb 6-1: USB disconnect, device number 13 [ 327.222229][ T5848] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 327.228049][ T5848] oti6858 6-1:1.0: device disconnected [ 327.319473][T32586] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 327.649264][T32616] size and base must be multiples of 4 kiB [ 327.651183][T32616] CPU: 0 UID: 0 PID: 32616 Comm: syz.5.12470 Tainted: G L syzkaller #0 PREEMPT(full) [ 327.651201][T32616] Tainted: [L]=SOFTLOCKUP [ 327.651205][T32616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 327.651212][T32616] Call Trace: [ 327.651217][T32616] [ 327.651222][T32616] dump_stack_lvl+0x100/0x190 [ 327.651244][T32616] mtrr_del.cold+0x72/0x85 [ 327.651260][T32616] mtrr_ioctl+0xbc8/0xcf0 [ 327.651278][T32616] ? __pfx_mtrr_ioctl+0x10/0x10 [ 327.651302][T32616] ? __pfx_mtrr_ioctl+0x10/0x10 [ 327.651318][T32616] proc_reg_unlocked_ioctl+0x229/0x320 [ 327.651334][T32616] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 327.651348][T32616] __x64_sys_ioctl+0x18e/0x210 [ 327.651366][T32616] do_syscall_64+0x115/0x870 [ 327.651394][T32616] ? clear_bhb_loop+0x40/0x90 [ 327.651408][T32616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.651420][T32616] RIP: 0033:0x7f6712b9df99 [ 327.651430][T32616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.651441][T32616] RSP: 002b:00007f6713afa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.651454][T32616] RAX: ffffffffffffffda RBX: 00007f6712e25fa0 RCX: 00007f6712b9df99 [ 327.651461][T32616] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000003 [ 327.651469][T32616] RBP: 00007f6712c34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 327.651476][T32616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.651483][T32616] R13: 00007f6712e26038 R14: 00007f6712e25fa0 R15: 00007ffecc1a9488 [ 327.651498][T32616] [ 327.729418][ T5097] Bluetooth: hci1: command 0x0419 tx timeout [ 327.729605][ T5747] Bluetooth: hci4: command 0x0406 tx timeout [ 327.947879][T32640] Failed to get privilege flags for destination (handle=0x2:0xfffffffc) [ 328.463673][T32670] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 328.639654][ T42] kauditd_printk_skb: 214 callbacks suppressed [ 328.639673][ T42] audit: type=1400 audit(2000000068.519:55797): avc: denied { read } for pid=32675 comm="syz.5.12498" name="event0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 328.651968][ T42] audit: type=1400 audit(2000000068.519:55798): avc: denied { open } for pid=32675 comm="syz.5.12498" path="/dev/input/event0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 328.660351][ T42] audit: type=1400 audit(2000000068.528:55799): avc: denied { recv } for pid=5722 comm="syz-executor" saddr=127.0.0.1 src=49076 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 328.720633][ T42] audit: type=1400 audit(2000000068.594:55800): avc: denied { create } for pid=32679 comm="syz.4.12500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 328.733643][ T42] audit: type=1400 audit(2000000068.594:55801): avc: denied { write } for pid=32679 comm="syz.4.12500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 328.745176][ T42] audit: type=1400 audit(2000000068.594:55802): avc: denied { read } for pid=32679 comm="syz.4.12500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 328.934061][ T42] audit: type=1400 audit(2000000068.790:55803): avc: denied { create } for pid=32691 comm="syz.4.12506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 328.942678][ T42] audit: type=1400 audit(2000000068.790:55804): avc: denied { ioctl } for pid=32691 comm="syz.4.12506" path="socket:[103311]" dev="sockfs" ino=103311 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 328.951334][ T42] audit: type=1400 audit(2000000068.790:55805): avc: denied { bind } for pid=32691 comm="syz.4.12506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 328.957839][ T42] audit: type=1400 audit(2000000068.790:55806): avc: denied { write } for pid=32691 comm="syz.4.12506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 329.161149][ T5849] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 329.333695][ T5849] usb 10-1: config index 0 descriptor too short (expected 45, got 28) [ 329.336389][ T5849] usb 10-1: config 1 descriptor has 1 excess byte, ignoring [ 329.338738][ T5849] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 329.344378][ T5849] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 329.347186][ T5849] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.349714][ T5849] usb 10-1: Product: syz [ 329.350973][ T5849] usb 10-1: Manufacturer: syz [ 329.352372][ T5849] usb 10-1: SerialNumber: syz [ 329.357215][ T5849] rtl8150 10-1:1.0: couldn't find required endpoints [ 329.362254][ T5849] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 329.573955][ T4559] usb 10-1: USB disconnect, device number 5 [ 329.962772][ T5097] Bluetooth: hci4: command 0x0406 tx timeout [ 329.964752][ T5747] Bluetooth: hci1: command 0x0419 tx timeout [ 330.288554][T32736] usbip-vudc usbip-vudc.0: gadget not bound [ 330.348714][T32744] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 330.380387][T32750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12534'. [ 330.384765][T32749] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 330.395150][T32747] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 330.453740][T32754] netlink: 'syz.4.12536': attribute type 3 has an invalid length. [ 330.458015][T32754] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12536'. [ 330.562128][T32767] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 330.775061][ T10] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 330.894549][ T5818] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 330.897892][ T5818] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 330.901118][ T5818] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 330.904399][ T5818] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 330.906864][ T5818] rtc rtc0: __rtc_set_alarm: err=-22 [ 330.936954][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 330.941179][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.946834][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 330.950552][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.124284][ T312] block2mtd: device name too long [ 331.164545][ T314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12549'. [ 331.168492][ T314] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12549'. [ 331.176587][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 331.179042][ T10] usbtmc 6-1:16.0: can't read capabilities [ 331.398780][ T5818] usb 6-1: USB disconnect, device number 14 [ 331.505810][ T316] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.12558'. [ 331.509823][ T316] openvswitch: netlink: ufid size 21390 bytes exceeds the range (1, 16) [ 331.513948][ T316] openvswitch: netlink: Message has 4 unknown bytes. [ 331.546874][ T320] 9p: Invalid gid '0x00000000ffffffff' [ 332.186420][ T5747] Bluetooth: hci1: command 0x0419 tx timeout [ 332.495147][ T34] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 332.586249][ T369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12573'. [ 332.589448][ T369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12573'. [ 332.594847][ T369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12573'. [ 332.597985][ T369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12573'. [ 332.678468][ T34] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.681840][ T34] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 332.685331][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 332.690330][ T34] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 332.694861][ T34] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 332.703789][ T34] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 332.707669][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.712250][ T34] usb 6-1: Product: syz [ 332.714310][ T34] usb 6-1: Manufacturer: syz [ 332.716564][ T34] usb 6-1: SerialNumber: syz [ 332.723870][ T358] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 332.731551][ T34] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 332.734380][ T34] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 87 [ 332.737070][ T34] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 332.741760][ T34] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 332.744218][ T34] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 332.746749][ T34] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 85 [ 332.749271][ T34] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 5 [ 332.753530][ T34] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 332.765231][ T34] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 83 [ 332.768619][ T34] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 332.772011][ T379] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12579'. [ 332.772194][ T34] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3 [ 332.778229][ T34] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 4 [ 332.781118][ T34] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 86 [ 332.784516][ T34] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 332.794760][ T34] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 333.052590][ T5818] usb 6-1: USB disconnect, device number 15 [ 333.060586][ T5818] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 333.068979][ T5818] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 333.073489][ T5818] keyspan 6-1:1.0: device disconnected [ 333.849037][ T418] can0: slcan on ttyS3. [ 333.927862][ T418] can0 (unregistered): slcan off ttyS3. [ 333.951593][ T420] nbd1: detected capacity change from 0 to 63 [ 333.964125][ T402] block nbd1: Receive control failed (result -32) [ 333.973923][ T1306] block nbd1: Dead connection, failed to find a fallback [ 333.977839][ T1306] block nbd1: shutting down sockets [ 333.980038][ T1306] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.983859][ T1306] buffer_io_error: 11 callbacks suppressed [ 333.983868][ T1306] Buffer I/O error on dev nbd1, logical block 0, async page read [ 333.989222][ T1306] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.997107][ T1306] Buffer I/O error on dev nbd1, logical block 1, async page read [ 334.000453][ T1306] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.003478][ T1306] Buffer I/O error on dev nbd1, logical block 2, async page read [ 334.003695][ T42] kauditd_printk_skb: 131 callbacks suppressed [ 334.003705][ T42] audit: type=1400 audit(2000000073.544:55938): avc: denied { mount } for pid=433 comm="syz.0.12604" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 334.006362][ T1306] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.017935][ T1306] Buffer I/O error on dev nbd1, logical block 3, async page read [ 334.020721][ T42] audit: type=1400 audit(2000000073.544:55939): avc: denied { mount } for pid=431 comm="syz.1.12602" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 334.029575][ T42] audit: type=1400 audit(2000000073.553:55940): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 334.030966][ T1306] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 334.039269][ T1306] Buffer I/O error on dev nbd1, logical block 0, async page read [ 334.041671][ T1306] Buffer I/O error on dev nbd1, logical block 1, async page read [ 334.044184][ T1306] Buffer I/O error on dev nbd1, logical block 2, async page read [ 334.046683][ T42] audit: type=1400 audit(2000000073.581:55941): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 334.052716][ T42] audit: type=1400 audit(2000000073.581:55942): avc: denied { map_create } for pid=436 comm="syz.0.12605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 334.055028][ T1306] Buffer I/O error on dev nbd1, logical block 3, async page read [ 334.060565][ T42] audit: type=1400 audit(2000000073.581:55943): avc: denied { perfmon } for pid=436 comm="syz.0.12605" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 334.066814][ T1306] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 334.069427][ T42] audit: type=1400 audit(2000000073.581:55944): avc: denied { map_read map_write } for pid=436 comm="syz.0.12605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 334.072424][ T1306] Buffer I/O error on dev nbd1, logical block 0, async page read [ 334.081770][ T1306] Buffer I/O error on dev nbd1, logical block 1, async page read [ 334.084378][ T1306] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 334.087764][ T1306] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 334.090856][ T1306] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.094242][ T1306] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.094469][ T42] audit: type=1400 audit(2000000073.581:55945): avc: denied { prog_load } for pid=436 comm="syz.0.12605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 334.097712][ T5753] ldm_validate_partition_table(): Disk read failed. [ 334.104616][ T42] audit: type=1400 audit(2000000073.581:55946): avc: denied { bpf } for pid=436 comm="syz.0.12605" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 334.106821][ T5753] Dev nbd1: unable to read RDB block 0 [ 334.113899][ T42] audit: type=1400 audit(2000000073.591:55947): avc: denied { prog_run } for pid=436 comm="syz.0.12605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 334.118791][ T5753] nbd1: unable to read partition table [ 334.127201][ T5753] ldm_validate_partition_table(): Disk read failed. [ 334.135544][ T5753] Dev nbd1: unable to read RDB block 0 [ 334.138867][ T5753] nbd1: unable to read partition table [ 334.350134][ T479] netlink: 'syz.5.12621': attribute type 29 has an invalid length. [ 334.353221][ T479] netlink: 'syz.5.12621': attribute type 29 has an invalid length. [ 334.398292][ T5747] Bluetooth: hci1: command 0x0419 tx timeout [ 334.913967][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 335.360542][ T507] bridge0: port 1(syz_tun) entered blocking state [ 335.365465][ T507] bridge0: port 1(syz_tun) entered disabled state [ 335.367610][ T507] syz_tun: entered allmulticast mode [ 335.370927][ T507] syz_tun: entered promiscuous mode [ 335.647897][ T544] macvlan2: entered promiscuous mode [ 336.620008][ T5747] Bluetooth: hci1: command 0x0419 tx timeout [ 336.699641][ T567] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 337.076415][ T626] 9p: Unknown uid 00000000004294967295 [ 337.423449][ T648] __nla_validate_parse: 2 callbacks suppressed [ 337.423461][ T648] netlink: 144 bytes leftover after parsing attributes in process `syz.4.12697'. [ 337.687693][ T664] db_root: cannot open: scalable [ 337.886703][ T680] loop8: detected capacity change from 0 to 7 [ 337.904095][ T680] ldm_validate_partition_table(): Disk read failed. [ 337.908809][ T680] Dev loop8: unable to read RDB block 0 [ 337.911800][ T680] loop8: unable to read partition table [ 337.914700][ T680] loop8: partition table beyond EOD, truncated [ 337.917045][ T680] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 337.934743][ T684] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 338.142016][ T706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12725'. [ 338.146513][ T706] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12725'. [ 338.152784][ T706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12725'. [ 338.156553][ T706] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12725'. [ 338.216109][ T716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12731'. [ 338.394881][ T733] input: syz1 as /devices/virtual/input/input48 [ 338.402288][ T733] input: failed to attach handler leds to device input48, error: -6 [ 338.421852][ T735] overlayfs: invalid origin (0000) [ 338.589511][ T743] i2c i2c-0: delete_device: Can't find device in list [ 338.790898][ T755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12750'. [ 338.845890][ T761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12752'. [ 338.851764][ T761] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.410932][ T42] kauditd_printk_skb: 233 callbacks suppressed [ 339.410945][ T42] audit: type=1400 audit(2000000078.607:56181): avc: denied { ioctl } for pid=792 comm="syz.1.12765" path="socket:[106152]" dev="sockfs" ino=106152 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 339.416556][ T794] CUSE: unknown device info "" [ 339.426035][ T42] audit: type=1400 audit(2000000078.607:56182): avc: denied { write } for pid=792 comm="syz.1.12765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 339.432296][ T794] CUSE: unknown device info "" [ 339.434170][ T794] CUSE: unknown device info "" [ 339.435787][ T794] CUSE: unknown device info "" [ 339.437350][ T794] CUSE: DEVNAME unspecified [ 339.486501][ T42] audit: type=1400 audit(2000000078.672:56183): avc: denied { create } for pid=797 comm="syz.5.12769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 339.496308][ T42] audit: type=1400 audit(2000000078.672:56184): avc: denied { write } for pid=797 comm="syz.5.12769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 339.511927][ T42] audit: type=1400 audit(2000000078.672:56185): avc: denied { nlmsg_write } for pid=797 comm="syz.5.12769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 339.561696][ T42] audit: type=1400 audit(2000000078.747:56186): avc: denied { recv } for pid=5722 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=49076 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 339.615716][ T804] IPv6: addrconf: prefix option has invalid lifetime [ 339.653832][ T42] audit: type=1400 audit(2000000078.822:56187): avc: denied { read append } for pid=807 comm="syz.5.12774" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 339.662012][ T42] audit: type=1400 audit(2000000078.822:56188): avc: denied { open } for pid=807 comm="syz.5.12774" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 339.720847][ T808] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 339.727698][ T808] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 339.735381][ T42] audit: type=1400 audit(2000000078.906:56189): avc: denied { ioctl } for pid=807 comm="syz.5.12774" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 339.756631][ T42] audit: type=1400 audit(2000000078.925:56190): avc: denied { map_read map_write } for pid=717 comm="syz.0.12732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 340.013061][ T837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12786'. [ 340.039989][ T840] comedi comedi2: board detection failed [ 340.249066][ T860] bond5: ARP target 9.0.0.0 is already present [ 340.251009][ T860] bond5: option arp_ip_target: invalid value (9) [ 340.254272][ T860] bond5 (unregistering): Released all slaves [ 340.347525][ T873] program syz.5.12802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.387987][ T877] netlink: 'syz.1.12804': attribute type 4 has an invalid length. [ 340.390413][ T877] netlink: 'syz.1.12804': attribute type 8 has an invalid length. [ 340.398385][ T877] netlink: 212 bytes leftover after parsing attributes in process `syz.1.12804'. [ 340.883892][ T917] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82 [ 340.952859][ T5813] hid_parser_main: 7 callbacks suppressed [ 340.952881][ T5813] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 340.957150][ T5813] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 340.967213][ T5813] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 341.193636][ T34] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 341.353868][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 341.356993][ T34] usb 6-1: config 0 has no interfaces? [ 341.358812][ T34] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 341.361722][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.366277][ T34] usb 6-1: config 0 descriptor?? [ 341.588534][ T34] usb 6-1: USB disconnect, device number 16 [ 341.920332][ T5097] Bluetooth: hci1: command 0x0419 tx timeout [ 341.920470][ T5745] Bluetooth: hci4: command 0x0406 tx timeout [ 342.433654][ T5745] Bluetooth: hci3: command 0x1003 tx timeout [ 342.438197][ T5747] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 342.508526][ T966] misc userio: Can't change port type on an already running userio instance [ 343.783558][ T1076] __nla_validate_parse: 1 callbacks suppressed [ 343.783570][ T1076] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12889'. [ 344.647513][ T1122] usbip-vudc usbip-vudc.0: gadget not bound [ 344.651896][ T1124] netlink: 'syz.5.12913': attribute type 3 has an invalid length. [ 344.654411][ T1124] netlink: 64 bytes leftover after parsing attributes in process `syz.5.12913'. [ 344.735980][ T1137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12911'. [ 344.769399][ T42] kauditd_printk_skb: 180 callbacks suppressed [ 344.769411][ T42] audit: type=1400 audit(2000000083.613:56371): avc: denied { unmount } for pid=30258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 344.814012][ T42] audit: type=1400 audit(2000000083.651:56372): avc: denied { mount } for pid=1149 comm="syz.0.12916" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 344.821174][ T42] audit: type=1400 audit(2000000083.651:56373): avc: denied { search } for pid=1149 comm="syz.0.12916" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 344.830103][ T42] audit: type=1400 audit(2000000083.651:56374): avc: denied { write } for pid=1149 comm="syz.0.12916" name="trace_marker" dev="tracefs" ino=5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 344.838744][ T42] audit: type=1400 audit(2000000083.651:56375): avc: denied { open } for pid=1149 comm="syz.0.12916" path="/3152/tracefs_dir/trace_marker" dev="tracefs" ino=5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 344.846554][ T42] audit: type=1400 audit(2000000083.669:56376): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 344.854677][ T42] audit: type=1400 audit(2000000083.679:56377): avc: denied { read } for pid=1153 comm="syz.0.12917" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 344.860819][ T1154] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 344.862197][ T42] audit: type=1400 audit(2000000083.679:56378): avc: denied { open } for pid=1153 comm="syz.0.12917" path="/dev/rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 344.872421][ T42] audit: type=1400 audit(2000000083.697:56379): avc: denied { ioctl } for pid=1153 comm="syz.0.12917" path="/dev/rtc0" dev="devtmpfs" ino=945 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 344.873973][ T1153] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 344.904234][ T42] audit: type=1400 audit(2000000083.744:56380): avc: denied { create } for pid=1158 comm="syz.0.12919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 345.370966][ T5890] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 345.375182][ T5890] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 345.379104][ T5890] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 345.383209][ T5890] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 345.386467][ T5890] rtc rtc0: __rtc_set_alarm: err=-22 [ 345.672543][ T1170] block nbd4: NBD_DISCONNECT [ 345.705665][ T1174] netlink: 'syz.4.12923': attribute type 21 has an invalid length. [ 345.709298][ T1174] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12923'. [ 345.713047][ T1174] netlink: 'syz.4.12923': attribute type 5 has an invalid length. [ 345.716397][ T1174] netlink: 'syz.4.12923': attribute type 6 has an invalid length. [ 345.718985][ T1174] netlink: 3 bytes leftover after parsing attributes in process `syz.4.12923'. [ 345.722984][ T1174] netlink: 'syz.4.12923': attribute type 21 has an invalid length. [ 345.726427][ T1174] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12923'. [ 345.729838][ T1174] netlink: 'syz.4.12923': attribute type 5 has an invalid length. [ 345.733028][ T1174] netlink: 'syz.4.12923': attribute type 6 has an invalid length. [ 345.736481][ T1174] netlink: 3 bytes leftover after parsing attributes in process `syz.4.12923'. [ 345.830857][ T1179] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12933'. [ 345.862993][ T1185] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 345.967967][ T1193] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.12930'. [ 345.971617][ T1193] openvswitch: netlink: ufid size 21390 bytes exceeds the range (1, 16) [ 345.974246][ T1193] openvswitch: netlink: Message has 4 unknown bytes. [ 346.274904][ T1224] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 346.577038][ T1258] block2mtd: device name too long [ 347.148529][ T1304] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12982'. [ 347.209844][ T5890] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 347.393115][ T5890] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.396375][ T5890] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 347.399455][ T5890] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 347.402828][ T5890] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 347.406034][ T5890] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 347.409148][ T5890] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 347.412092][ T5890] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 347.416120][ T5890] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 347.419251][ T5890] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 347.422285][ T5890] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 347.425265][ T5890] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 347.428205][ T5890] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 347.431097][ T5890] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 347.433960][ T5890] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 347.437220][ T5890] usb 10-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 347.443328][ T5890] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 347.446358][ T5890] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.449052][ T5890] usb 10-1: Product: syz [ 347.450446][ T5890] usb 10-1: Manufacturer: syz [ 347.452004][ T5890] usb 10-1: SerialNumber: syz [ 347.456337][ T1293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 347.459302][ T1293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 347.462128][ T1293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 347.465026][ T1293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 347.468045][ T1293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 347.470920][ T1293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 347.473794][ T1293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 347.476592][ T1293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 347.479335][ T1293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 347.482242][ T1293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 347.485132][ T1293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 347.489412][ T5890] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 347.492847][ T5890] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 7 [ 347.500169][ T5890] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 347.503999][ T5890] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 347.507635][ T5890] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 347.835116][ T1044] usb 10-1: USB disconnect, device number 6 [ 347.845737][ T1044] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 347.856467][ T1044] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 347.860760][ T1044] keyspan 10-1:1.0: device disconnected [ 347.978015][ T1346] can0: slcan on ttyS3. [ 348.044499][ T1346] can0 (unregistered): slcan off ttyS3. [ 348.295760][ T1370] 9p: Invalid gid '0x00000000ffffffff' [ 349.348053][ T57] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 349.533118][ T57] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.536323][ T57] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.541619][ T57] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 349.544777][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.572773][ T57] usb 5-1: usb_control_msg returned -71 [ 349.574588][ T57] usbtmc 5-1:16.0: can't read capabilities [ 349.583172][ T57] usb 5-1: USB disconnect, device number 23 [ 349.758253][ T1470] Bluetooth: hci3: Frame reassembly failed (-84) [ 349.767423][ T41] Bluetooth: hci3: Frame reassembly failed (-84) [ 349.776924][ T1436] ================================================================== [ 349.779417][ T1436] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 349.781498][ T1436] Read of size 1 at addr ffff88802a780100 by task syz.0.13035/1436 [ 349.785440][ T1436] [ 349.786663][ T1436] CPU: 2 UID: 0 PID: 1436 Comm: syz.0.13035 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.786691][ T1436] Tainted: [L]=SOFTLOCKUP [ 349.786696][ T1436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 349.786721][ T1436] Call Trace: [ 349.786742][ T1436] [ 349.786750][ T1436] dump_stack_lvl+0x100/0x190 [ 349.786797][ T1436] print_report+0x13d/0x4b0 [ 349.786822][ T1436] ? __virt_addr_valid+0x239/0x430 [ 349.786849][ T1436] ? string+0x471/0x4d0 [ 349.786865][ T1436] kasan_report+0xdf/0x1c0 [ 349.786912][ T1436] ? string+0x471/0x4d0 [ 349.786951][ T1436] string+0x471/0x4d0 [ 349.786971][ T1436] ? __pfx_string+0x10/0x10 [ 349.786988][ T1436] ? __kernel_text_address+0xd/0x30 [ 349.787009][ T1436] ? unwind_get_return_address+0x59/0xa0 [ 349.787025][ T1436] vsnprintf+0x422/0x1300 [ 349.787038][ T1436] ? __pfx_vsnprintf+0x10/0x10 [ 349.787049][ T1436] ? stack_depot_save_flags+0x27/0x9d0 [ 349.787100][ T1436] ? __lock_acquire+0x49f/0x1a40 [ 349.787118][ T1436] snprintf+0xc7/0x100 [ 349.787130][ T1436] ? __pfx_snprintf+0x10/0x10 [ 349.787141][ T1436] ? __kasan_slab_free+0x5f/0x80 [ 349.787157][ T1436] ? __x64_sys_ioctl+0xb7/0x210 [ 349.787179][ T1436] ? do_syscall_64+0x115/0x870 [ 349.787192][ T1436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.787206][ T1436] dev_vprintk_emit+0x375/0x3e0 [ 349.787223][ T1436] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 349.787240][ T1436] dev_printk_emit+0xd2/0x10d [ 349.787253][ T1436] ? __pfx_dev_printk_emit+0x10/0x10 [ 349.787270][ T1436] __dev_printk+0xcb/0x100 [ 349.787284][ T1436] _dev_err+0xef/0x127 [ 349.787297][ T1436] ? __pfx__dev_err+0x10/0x10 [ 349.787312][ T1436] ? dummy_queue+0x3ca/0xb00 [ 349.787355][ T1436] ? find_held_lock+0x2b/0x80 [ 349.787372][ T1436] ? raw_process_ep0_io+0x314/0x9c0 [ 349.787407][ T1436] raw_process_ep0_io.cold+0x65/0x7f [ 349.787427][ T1436] raw_ioctl+0x1369/0x2b80 [ 349.787446][ T1436] ? __pfx_raw_ioctl+0x10/0x10 [ 349.787462][ T1436] ? selinux_file_ioctl+0xb6/0x290 [ 349.787487][ T1436] ? __pfx_raw_ioctl+0x10/0x10 [ 349.787504][ T1436] __x64_sys_ioctl+0x18e/0x210 [ 349.787520][ T1436] do_syscall_64+0x115/0x870 [ 349.787532][ T1436] ? clear_bhb_loop+0x40/0x90 [ 349.787544][ T1436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.787556][ T1436] RIP: 0033:0x7faf6dd9dc2b [ 349.787568][ T1436] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 349.787579][ T1436] RSP: 002b:00007faf6ed2ff50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.787590][ T1436] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007faf6dd9dc2b [ 349.787597][ T1436] RDX: 00007faf6ed2ffd0 RSI: 0000000040085503 RDI: 0000000000000003 [ 349.787604][ T1436] RBP: 00007faf6ed2ffd0 R08: 0000000000000000 R09: 0000000000000000 [ 349.787616][ T1436] R10: 0000000000000003 R11: 0000000000000246 R12: 00007faf6ed2ffd8 [ 349.787623][ T1436] R13: 0000000000000000 R14: 00007faf6e025fa0 R15: 00007ffcc37a40b8 [ 349.787633][ T1436] [ 349.787637][ T1436] [ 349.879527][ T1436] Allocated by task 1: [ 349.880747][ T1436] kasan_save_stack+0x30/0x50 [ 349.882235][ T1436] kasan_save_track+0x14/0x30 [ 349.883751][ T1436] __kasan_kmalloc+0xaa/0xb0 [ 349.885197][ T1436] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 349.887208][ T1436] kvasprintf+0xbc/0x150 [ 349.888561][ T1436] kvasprintf_const+0x66/0x1a0 [ 349.890081][ T1436] kobject_set_name_vargs+0x5a/0x140 [ 349.891746][ T1436] dev_set_name+0xc7/0x100 [ 349.893172][ T1436] usb_add_gadget+0x520/0x920 [ 349.894659][ T1436] usb_add_gadget_udc+0x26/0x70 [ 349.896215][ T1436] dummy_udc_probe+0x69e/0x960 [ 349.897742][ T1436] platform_probe+0x106/0x1d0 [ 349.899251][ T1436] really_probe+0x241/0xa60 [ 349.900689][ T1436] __driver_probe_device+0x20e/0x450 [ 349.902340][ T1436] driver_probe_device+0x4a/0x140 [ 349.903935][ T1436] __device_attach_driver+0x1df/0x320 [ 349.905604][ T1436] bus_for_each_drv+0x159/0x1e0 [ 349.907129][ T1436] __device_attach+0x1e4/0x4d0 [ 349.908643][ T1436] device_initial_probe+0xaf/0xd0 [ 349.910207][ T1436] bus_probe_device+0x64/0x160 [ 349.911722][ T1436] device_add+0x121d/0x1970 [ 349.913147][ T1436] platform_device_add+0x35a/0x800 [ 349.914755][ T1436] dummy_hcd_init+0x803/0xc00 [ 349.916301][ T1436] do_one_initcall+0x11d/0x700 [ 349.917817][ T1436] kernel_init_freeable+0x6ea/0x7b0 [ 349.919512][ T1436] kernel_init+0x1f/0x1e0 [ 349.920882][ T1436] ret_from_fork+0x72b/0xd50 [ 349.922334][ T1436] ret_from_fork_asm+0x1a/0x30 [ 349.923867][ T1436] [ 349.924643][ T1436] Freed by task 1456: [ 349.925876][ T1436] kasan_save_stack+0x30/0x50 [ 349.927344][ T1436] kasan_save_track+0x14/0x30 [ 349.928840][ T1436] kasan_save_free_info+0x3b/0x70 [ 349.930364][ T1436] __kasan_slab_free+0x5f/0x80 [ 349.931867][ T1436] kfree+0x22b/0x6c0 [ 349.933103][ T1436] kfree_const+0x5a/0x70 [ 349.934449][ T1436] kobject_put+0x218/0x640 [ 349.935889][ T1436] put_device+0x1f/0x30 [ 349.937202][ T1436] platform_remove+0x5f/0x80 [ 349.938667][ T1436] device_remove+0xcb/0x180 [ 349.940130][ T1436] device_release_driver_internal+0x44e/0x620 [ 349.942028][ T1436] unbind_store+0xf8/0x110 [ 349.943465][ T1436] drv_attr_store+0x74/0xb0 [ 349.944916][ T1436] sysfs_kf_write+0xf2/0x150 [ 349.946368][ T1436] kernfs_fop_write_iter+0x3e0/0x5f0 [ 349.948025][ T1436] vfs_write+0x6ac/0x1050 [ 349.949391][ T1436] ksys_write+0x12a/0x250 [ 349.950765][ T1436] do_syscall_64+0x115/0x870 [ 349.952231][ T1436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.954065][ T1436] [ 349.954836][ T1436] The buggy address belongs to the object at ffff88802a780100 [ 349.954836][ T1436] which belongs to the cache kmalloc-16 of size 16 [ 349.959043][ T1436] The buggy address is located 0 bytes inside of [ 349.959043][ T1436] freed 16-byte region [ffff88802a780100, ffff88802a780110) [ 349.963179][ T1436] [ 349.963951][ T1436] The buggy address belongs to the physical page: [ 349.965933][ T1436] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a780 [ 349.968657][ T1436] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 349.970849][ T1436] page_type: f5(slab) [ 349.972125][ T1436] raw: 00fff00000000000 ffff88801bc42640 dead000000000100 dead000000000122 [ 349.974779][ T1436] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000 [ 349.977444][ T1436] page dumped because: kasan: bad access detected [ 349.979450][ T1436] page_owner tracks the page as allocated [ 349.981211][ T1436] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10876655875, free_ts 0 [ 349.987075][ T1436] post_alloc_hook+0xfd/0x120 [ 349.988565][ T1436] get_page_from_freelist+0xf48/0x3530 [ 349.990260][ T1436] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 349.992119][ T1436] new_slab+0xa2/0x640 [ 349.993406][ T1436] refill_objects+0xe3/0x410 [ 349.994856][ T1436] __pcs_replace_empty_main+0x376/0x680 [ 349.996594][ T1436] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 349.998588][ T1436] kvasprintf+0xbc/0x150 [ 349.999943][ T1436] kasprintf+0xc7/0x100 [ 350.001250][ T1436] device_get_devnode+0xb5/0x2c0 [ 350.002805][ T1436] dev_uevent+0x493/0x870 [ 350.004182][ T1436] kobject_uevent_env+0x6eb/0x18b0 [ 350.005812][ T1436] device_add+0x1173/0x1970 [ 350.007263][ T1436] usb_new_device.cold+0x685/0x115c [ 350.008901][ T1436] register_root_hub+0x4e6/0x639 [ 350.010469][ T1436] usb_add_hcd.cold+0xccd/0x1158 [ 350.012033][ T1436] page_owner free stack trace missing [ 350.013702][ T1436] [ 350.014476][ T1436] Memory state around the buggy address: [ 350.016253][ T1436] ffff88802a780000: 00 04 fc fc 00 04 fc fc 00 04 fc fc 00 04 fc fc [ 350.018734][ T1436] ffff88802a780080: 00 04 fc fc 00 00 fc fc fa fb fc fc fa fb fc fc [ 350.021240][ T1436] >ffff88802a780100: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 350.023740][ T1436] ^ [ 350.025021][ T1436] ffff88802a780180: fa fb fc fc fa fb fc fc 00 04 fc fc 00 04 fc fc [ 350.027519][ T1436] ffff88802a780200: 00 04 fc fc 00 00 fc fc 00 00 fc fc 00 00 fc fc [ 350.029988][ T1436] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 350.037420][ T1436] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 350.039858][ T1436] CPU: 2 UID: 0 PID: 1436 Comm: syz.0.13035 Tainted: G L syzkaller #0 PREEMPT(full) [ 350.043236][ T1436] Tainted: [L]=SOFTLOCKUP [ 350.044594][ T1436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 350.047734][ T1436] Call Trace: [ 350.048971][ T1436] [ 350.050033][ T1436] dump_stack_lvl+0x100/0x190 [ 350.051555][ T1436] vpanic+0x552/0x970 [ 350.052825][ T1436] ? __pfx_vpanic+0x10/0x10 [ 350.054408][ T1436] ? rcu_is_watching+0x12/0xc0 [ 350.056064][ T1436] ? string+0x471/0x4d0 [ 350.057418][ T1436] panic+0xd1/0xe0 [ 350.058624][ T1436] ? __pfx_panic+0x10/0x10 [ 350.060043][ T1436] ? string+0x471/0x4d0 [ 350.061359][ T1436] ? preempt_schedule_common+0x42/0xc0 [ 350.063111][ T1436] check_panic_on_warn.cold+0x19/0x34 [ 350.064783][ T1436] end_report.part.0+0x3a/0x90 [ 350.066277][ T1436] kasan_report.cold+0xe/0x18 [ 350.067791][ T1436] ? string+0x471/0x4d0 [ 350.069109][ T1436] string+0x471/0x4d0 [ 350.070404][ T1436] ? __pfx_string+0x10/0x10 [ 350.071853][ T1436] ? __kernel_text_address+0xd/0x30 [ 350.073484][ T1436] ? unwind_get_return_address+0x59/0xa0 [ 350.075254][ T1436] vsnprintf+0x422/0x1300 [ 350.076647][ T1436] ? __pfx_vsnprintf+0x10/0x10 [ 350.078172][ T1436] ? stack_depot_save_flags+0x27/0x9d0 [ 350.079905][ T1436] ? __lock_acquire+0x49f/0x1a40 [ 350.081467][ T1436] snprintf+0xc7/0x100 [ 350.082772][ T1436] ? __pfx_snprintf+0x10/0x10 [ 350.084283][ T1436] ? __kasan_slab_free+0x5f/0x80 [ 350.085845][ T1436] ? __x64_sys_ioctl+0xb7/0x210 [ 350.087410][ T1436] ? do_syscall_64+0x115/0x870 [ 350.088935][ T1436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.090833][ T1436] dev_vprintk_emit+0x375/0x3e0 [ 350.092398][ T1436] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 350.094096][ T1436] dev_printk_emit+0xd2/0x10d [ 350.095583][ T1436] ? __pfx_dev_printk_emit+0x10/0x10 [ 350.097261][ T1436] __dev_printk+0xcb/0x100 [ 350.098639][ T1436] _dev_err+0xef/0x127 [ 350.099887][ T1436] ? __pfx__dev_err+0x10/0x10 [ 350.101326][ T1436] ? dummy_queue+0x3ca/0xb00 [ 350.102757][ T1436] ? find_held_lock+0x2b/0x80 [ 350.104214][ T1436] ? raw_process_ep0_io+0x314/0x9c0 [ 350.105794][ T1436] raw_process_ep0_io.cold+0x65/0x7f [ 350.107415][ T1436] raw_ioctl+0x1369/0x2b80 [ 350.108785][ T1436] ? __pfx_raw_ioctl+0x10/0x10 [ 350.110296][ T1436] ? selinux_file_ioctl+0xb6/0x290 [ 350.111942][ T1436] ? __pfx_raw_ioctl+0x10/0x10 [ 350.113465][ T1436] __x64_sys_ioctl+0x18e/0x210 [ 350.115014][ T1436] do_syscall_64+0x115/0x870 [ 350.116477][ T1436] ? clear_bhb_loop+0x40/0x90 [ 350.117989][ T1436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.119869][ T1436] RIP: 0033:0x7faf6dd9dc2b [ 350.121274][ T1436] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 350.127200][ T1436] RSP: 002b:00007faf6ed2ff50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.129780][ T1436] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007faf6dd9dc2b [ 350.132250][ T1436] RDX: 00007faf6ed2ffd0 RSI: 0000000040085503 RDI: 0000000000000003 [ 350.134707][ T1436] RBP: 00007faf6ed2ffd0 R08: 0000000000000000 R09: 0000000000000000 [ 350.137178][ T1436] R10: 0000000000000003 R11: 0000000000000246 R12: 00007faf6ed2ffd8 [ 350.139647][ T1436] R13: 0000000000000000 R14: 00007faf6e025fa0 R15: 00007ffcc37a40b8 [ 350.142098][ T1436] [ 350.143819][ T1436] Kernel Offset: disabled [ 350.145189][ T1436] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:26:20 Registers: info registers vcpu 0 CPU#0 RAX=0000000000242031 RBX=ffffffff8e891480 RCX=ffffffff8bbb22d5 RDX=0000000000000000 RSI=ffffffff8e1a6f32 RDI=ffffffff8c402680 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100d48678d R10=ffff88806a433c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bbb089f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ddc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c237969 CR3=0000000033e5b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000818181f8 Opmask01=00000000003fffff Opmask02=0000000003bfffff Opmask03=0000000002082001 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e8e9fff030 000055e8e9fff030 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e8e9fcc670 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e8e9fbdfd0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c40ff1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373269b9a881483 7373269ec42a0759 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 51a4dcc1e2dd9b3a 737373762dfdecb2 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003078 303d4e4f53414552 5f4b434f4c425f57 485f4c4c494b4652 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d45 0d004e4f53414552 5f4b434f4c425f57 485f4c4c494b4652 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303030302f30303a 303030306963702f 736563697665642f 3d54524f505f544e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e8e9fb7b20 000055edb7757cd3 0000000000000031 0000000000003331 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3139312c3039312c 4638312c4538312c 4238312c3938312c 3838312c3538312c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3438312c3138312c 3937312c3737312c 3437312c4436312c 4336312c3636312c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3336312c3136312c 3036312c30462c46 442c30442c46432c 38412c37412c4639 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000008 RBX=ffff88802adc8450 RCX=0000000000000003 RDX=ffff88802918ca80 RSI=ffffc9000013d134 RDI=ffff88802918ca80 RBP=ffff88802ad06038 RSP=ffffc90003af7080 R8 =0000000000000005 R9 =000000000000001f R10=0000000000000003 R11=0000000000000000 R12=ffffc9000013d100 R13=ffff88802adc84ac R14=ffff88802adc8458 R15=0000000000000003 RIP=ffffffff86b26dbf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f97d51a3300 ffffffff 00c00000 GS =0000 ffff8880d5edc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005635b9f40f40 CR3=0000000025d67000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6465636976726573 5f6f692e656c7474 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef4c32de6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef4c32de6 00007ffef4c32dec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9dca354a7 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9dca354e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9dca3564b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb9dca354d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a38b65 RDI=ffffffff9ba07b40 RBP=ffffffff9ba07b00 RSP=ffffc900055171e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000033343154 R12=0000000000000000 R13=0000000000000034 R14=ffffffff9b6fa1eb R15=ffffffff85a38b00 RIP=ffffffff85a38b8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007faf6ed326c0 ffffffff 00c00000 GS =0000 ffff8880d5fdc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b3361aff8 CR3=0000000034409000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc37a45a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc37a45a6 00007ffcc37a45ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf6de354a7 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf6de354e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf6de3564b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf6de354d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000302e63 64755f796d6d7564 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865000a64657275 6769666e6f63203a 7463656e6e6f635f 6273755f7a797300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d40000a41405750 424c434b4a46051f 5146404b4b4a465f 4756505f5f5c5600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf6dff15f8 00007faf6dff15c8 00007faf6dff1600 00007faf6dff15e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff81fdc702 RDX=ffff88801d3c8000 RSI=ffffffff81fdc6dc RDI=ffff88801d3c8000 RBP=ffff88806a643540 RSP=ffffc90000a0f1b0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4c86a9 R14=0000000000000001 R15=ffff88806a73c880 RIP=ffffffff81fdc6de RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc1dc1590f8 CR3=000000005d36c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81b96d6d ffffffff81b96d66 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeed643066 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeed643066 00007ffeed64306c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc1dc2354a7 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc1dc2354e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc1dc23564b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc1dc2354d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81ae5b3a ffffffff81ae5b0c ffffffff81ae5b00 ffffffff81ae5abc ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81ae5b00 ffffffff81ae5abc ffffffff81ae5ab0 ffffffff81ae5a5b ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1010000000d7860c dad7618a99d06676 9d318baa3242e37f 07abd440aa41d664 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b1ada3e758214194 5305620f11231346 03e4af414794c588 89616f4e8304abf4 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38933d93469f167c bb15a5079f87972f 7d7689816c7c315b be35d4145816e136 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fe7fc378580f8609 0000005bdafdd189 382f93ef8a71fb00 00002f6f4b0610ec ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000