last executing test programs: 1.762594622s ago: executing program 1 (id=1126): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/module/ueagle_atm/parameters/sync_wait\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0', 0x1) 1.684908508s ago: executing program 1 (id=1129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.373564435s ago: executing program 1 (id=1145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20083, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000000, 0x0, 0x6}, {0x40000001, 0x0, 0x1}]}) 1.247834591s ago: executing program 1 (id=1150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) 1.243316587s ago: executing program 2 (id=1152): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.185791265s ago: executing program 1 (id=1153): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000040)) 1.185510779s ago: executing program 2 (id=1154): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/pci_bus/0000:01/rescan\x00', 0x1, 0x21) write(r0, &(0x7f0000000400)='1', 0x1) 1.044161191s ago: executing program 2 (id=1157): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000080)={r2, r1, 0x1, 0x3, 0x2}) 655.91713ms ago: executing program 1 (id=1167): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 511.63658ms ago: executing program 0 (id=1172): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x3) 507.182953ms ago: executing program 3 (id=1173): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x14, 0x3a, 0xff, @mcast1, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 455.693206ms ago: executing program 0 (id=1174): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x4, 0x29a13e, 0x1058a}) 402.551274ms ago: executing program 0 (id=1175): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @loopback, {[@routing={0x32, 0x0, 0x1, 0x4}]}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) setns(0xc9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 345.589158ms ago: executing program 3 (id=1176): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 345.414166ms ago: executing program 3 (id=1177): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0xee00, 0x0) 175.700042ms ago: executing program 2 (id=1178): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r0, 0x8b21, &(0x7f0000000040)) 173.154835ms ago: executing program 2 (id=1186): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)="489ab1aabb2ff7e98c0d098e41a3b37a5abd17cdd9ee79c08137fcada4466f061ad14d270e3fd2b6c6c5a55e3a9991c2a5e23984610fe4c3ee1f8e888a38e78e15d9b49d76e4df00cfc42caebb01577a32eaea73437e6c", 0xd62) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) 75.472514ms ago: executing program 0 (id=1179): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x3) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200)=[0x1], 0x0, 0x2) 75.229113ms ago: executing program 3 (id=1180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) 74.933508ms ago: executing program 2 (id=1181): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 11.799101ms ago: executing program 3 (id=1182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 9.266172ms ago: executing program 0 (id=1183): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) 156.955µs ago: executing program 3 (id=1184): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x51}}, 0x8) listen(r0, 0x5) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 0s ago: executing program 0 (id=1185): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/1000, 0x3e8) kernel console output (not intermixed with test programs): [ 44.726701][ T42] audit: type=1400 audit(1786038564.159:118): avc: denied { write } for pid=5648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.783302][ T42] audit: type=1400 audit(1786038564.219:119): avc: denied { write } for pid=5651 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.869958][ T42] audit: type=1400 audit(1786038564.309:120): avc: denied { write } for pid=5654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:13272' (ED25519) to the list of known hosts. [ 48.730513][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 48.730525][ T42] audit: type=1400 audit(1786038568.169:141): avc: denied { mounton } for pid=5691 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.741203][ T42] audit: type=1400 audit(1786038568.179:142): avc: denied { mount } for pid=5691 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.744215][ T5691] cgroup: Unknown subsys name 'net' [ 48.754237][ T42] audit: type=1400 audit(1786038568.189:143): avc: denied { unmount } for pid=5691 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.900762][ T5691] cgroup: Unknown subsys name 'cpuset' [ 48.905303][ T5691] cgroup: Unknown subsys name 'rlimit' [ 49.076645][ T42] audit: type=1400 audit(1786038568.509:144): avc: denied { setattr } for pid=5691 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.086062][ T42] audit: type=1400 audit(1786038568.519:145): avc: denied { create } for pid=5691 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.094538][ T42] audit: type=1400 audit(1786038568.519:146): avc: denied { write } for pid=5691 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.103156][ T42] audit: type=1400 audit(1786038568.519:147): avc: denied { read } for pid=5691 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.111646][ T42] audit: type=1400 audit(1786038568.529:148): avc: denied { mounton } for pid=5691 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 49.122335][ T42] audit: type=1400 audit(1786038568.529:149): avc: denied { mount } for pid=5691 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 49.131920][ T42] audit: type=1400 audit(1786038568.539:150): avc: denied { read } for pid=5447 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.151916][ T5720] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 50.370062][ T5691] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.881497][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 54.881515][ T42] audit: type=1400 audit(1786038574.319:158): avc: denied { execmem } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.023497][ T42] audit: type=1400 audit(1786038574.459:159): avc: denied { create } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.032741][ T42] audit: type=1400 audit(1786038574.459:160): avc: denied { read write } for pid=5733 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.041215][ T42] audit: type=1400 audit(1786038574.459:161): avc: denied { open } for pid=5733 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.053017][ T42] audit: type=1400 audit(1786038574.489:162): avc: denied { ioctl } for pid=5734 comm="syz-executor" path="socket:[6580]" dev="sockfs" ino=6580 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.076571][ T5747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.080042][ T5747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.081024][ T5746] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.083012][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.084054][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.084307][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.084943][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.085223][ T5747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.088419][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.094064][ T5748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.096162][ T42] audit: type=1400 audit(1786038574.529:163): avc: denied { read } for pid=5733 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.097590][ T5747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.100689][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.102501][ T5747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.103533][ T42] audit: type=1400 audit(1786038574.529:164): avc: denied { open } for pid=5733 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.103561][ T42] audit: type=1400 audit(1786038574.539:165): avc: denied { mounton } for pid=5733 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 55.104392][ T5748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.105111][ T5748] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.107628][ T42] audit: type=1400 audit(1786038574.549:166): avc: denied { module_request } for pid=5733 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 55.108181][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.109441][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.109931][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.117202][ T5747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.154380][ T42] audit: type=1400 audit(1786038574.589:167): avc: denied { sys_module } for pid=5734 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.159234][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.969653][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.973409][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.976128][ T5742] bridge_slave_0: entered allmulticast mode [ 55.979932][ T5742] bridge_slave_0: entered promiscuous mode [ 56.032877][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.036057][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.039249][ T5733] bridge_slave_0: entered allmulticast mode [ 56.043342][ T5733] bridge_slave_0: entered promiscuous mode [ 56.048233][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.052152][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.055350][ T5742] bridge_slave_1: entered allmulticast mode [ 56.058947][ T5742] bridge_slave_1: entered promiscuous mode [ 56.090325][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.093443][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.096976][ T5733] bridge_slave_1: entered allmulticast mode [ 56.100786][ T5733] bridge_slave_1: entered promiscuous mode [ 56.112795][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.115976][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.119714][ T5734] bridge_slave_0: entered allmulticast mode [ 56.123951][ T5734] bridge_slave_0: entered promiscuous mode [ 56.158982][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.162963][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.166275][ T5734] bridge_slave_1: entered allmulticast mode [ 56.170551][ T5734] bridge_slave_1: entered promiscuous mode [ 56.187670][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.194612][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.202308][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.244335][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.261480][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.268619][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.317797][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.320982][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.324175][ T5736] bridge_slave_0: entered allmulticast mode [ 56.328105][ T5736] bridge_slave_0: entered promiscuous mode [ 56.344916][ T5733] team0: Port device team_slave_0 added [ 56.358067][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.361075][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.364257][ T5736] bridge_slave_1: entered allmulticast mode [ 56.368224][ T5736] bridge_slave_1: entered promiscuous mode [ 56.373618][ T5742] team0: Port device team_slave_0 added [ 56.379536][ T5733] team0: Port device team_slave_1 added [ 56.383544][ T5734] team0: Port device team_slave_0 added [ 56.393064][ T5742] team0: Port device team_slave_1 added [ 56.413333][ T5734] team0: Port device team_slave_1 added [ 56.429177][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.431437][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.439285][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.459181][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.462659][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.464888][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.473687][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.484343][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.487195][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.496181][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.506757][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.509209][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.519578][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.526427][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.543587][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.546370][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.555699][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.588771][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.591134][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.601767][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.609367][ T5736] team0: Port device team_slave_0 added [ 56.632429][ T5742] hsr_slave_0: entered promiscuous mode [ 56.635826][ T5742] hsr_slave_1: entered promiscuous mode [ 56.649326][ T5736] team0: Port device team_slave_1 added [ 56.699274][ T5733] hsr_slave_0: entered promiscuous mode [ 56.702513][ T5733] hsr_slave_1: entered promiscuous mode [ 56.706230][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 56.708875][ T5733] Cannot create hsr debugfs directory [ 56.763714][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.767171][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.777682][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.802307][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.805254][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.816008][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.826688][ T5734] hsr_slave_0: entered promiscuous mode [ 56.829985][ T5734] hsr_slave_1: entered promiscuous mode [ 56.832981][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 56.835369][ T5734] Cannot create hsr debugfs directory [ 56.954798][ T5736] hsr_slave_0: entered promiscuous mode [ 56.957631][ T5736] hsr_slave_1: entered promiscuous mode [ 56.960883][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 56.962912][ T5736] Cannot create hsr debugfs directory [ 57.117708][ T5094] Bluetooth: hci0: command tx timeout [ 57.117716][ T5747] Bluetooth: hci1: command tx timeout [ 57.196935][ T5094] Bluetooth: hci3: command tx timeout [ 57.196945][ T5747] Bluetooth: hci2: command tx timeout [ 57.252223][ T5742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.259901][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.262806][ T5742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.268006][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.272044][ T5742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.276973][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.287088][ T5742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.292785][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.356087][ T5736] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.362786][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.367148][ T5736] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.372721][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.375998][ T5736] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.381683][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.386292][ T5736] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.390329][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.445478][ T5733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.451240][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.461457][ T5733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.467900][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.471574][ T5733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.478139][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.481870][ T5733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.486474][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.570897][ T5734] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.579601][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.584734][ T5734] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.591205][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.595163][ T5734] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.603032][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.612261][ T5734] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.618311][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.627056][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.693987][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.714333][ T225] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.717521][ T225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.733786][ T225] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.736690][ T225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.743506][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.786325][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.799294][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.808915][ T225] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.811221][ T225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.828890][ T225] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.831227][ T225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.840647][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.851843][ T225] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.854399][ T225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.863882][ T225] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.866220][ T225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.898536][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.928505][ T5736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.971672][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.985653][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.988790][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.996256][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.999006][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.219827][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.247679][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.280894][ T5742] veth0_vlan: entered promiscuous mode [ 58.303908][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.312132][ T5742] veth1_vlan: entered promiscuous mode [ 58.345773][ T5736] veth0_vlan: entered promiscuous mode [ 58.353988][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.370977][ T5736] veth1_vlan: entered promiscuous mode [ 58.399722][ T5733] veth0_vlan: entered promiscuous mode [ 58.408632][ T5742] veth0_macvtap: entered promiscuous mode [ 58.422608][ T5742] veth1_macvtap: entered promiscuous mode [ 58.458205][ T5734] veth0_vlan: entered promiscuous mode [ 58.461650][ T5733] veth1_vlan: entered promiscuous mode [ 58.475418][ T5736] veth0_macvtap: entered promiscuous mode [ 58.487777][ T5734] veth1_vlan: entered promiscuous mode [ 58.493152][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.496996][ T5736] veth1_macvtap: entered promiscuous mode [ 58.512590][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.544927][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.562775][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.568492][ T5733] veth0_macvtap: entered promiscuous mode [ 58.593037][ T5734] veth0_macvtap: entered promiscuous mode [ 58.607857][ T5733] veth1_macvtap: entered promiscuous mode [ 58.619167][ T5734] veth1_macvtap: entered promiscuous mode [ 58.637531][ T5883] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.652630][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.657033][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.661727][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.695406][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.700269][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.703526][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.712483][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.722018][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.758114][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.767789][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.772838][ T5742] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.821564][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.826940][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.860576][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.863656][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.914342][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.921208][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.929872][ T5883] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.995786][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.000462][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.037861][ T5813] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.041743][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 59.045825][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.046111][ T5813] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.067627][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.072646][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.100100][ T5893] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.6'. [ 59.106927][ T5893] openvswitch: netlink: Message has 512 unknown bytes. [ 59.157027][ T5883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.163422][ T5883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.173399][ T5883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.183324][ T5897] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8'. [ 59.197646][ T5094] Bluetooth: hci1: command tx timeout [ 59.198335][ T5883] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.200666][ T5747] Bluetooth: hci0: command tx timeout [ 59.216351][ T5883] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.220738][ T5883] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.236858][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.243377][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.259191][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.264779][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.267869][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.277227][ T5094] Bluetooth: hci2: command tx timeout [ 59.279944][ T5747] Bluetooth: hci3: command tx timeout [ 59.533479][ T5923] netlink: 'syz.1.18': attribute type 4 has an invalid length. [ 59.536069][ T5923] netlink: 17 bytes leftover after parsing attributes in process `syz.1.18'. [ 59.541086][ T5923] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.18'. [ 59.636830][ T5918] SELinux: failed to load policy [ 59.664140][ T5932] sctp: [Deprecated]: syz.1.22 (pid 5932) Use of int in max_burst socket option. [ 59.664140][ T5932] Use struct sctp_assoc_value instead [ 59.696891][ T60] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.861509][ T60] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 59.868359][ T60] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 59.875062][ T60] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 59.879889][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.883275][ T60] usb 5-1: Product: syz [ 59.885006][ T60] usb 5-1: Manufacturer: syz [ 59.890364][ T60] usb 5-1: SerialNumber: syz [ 59.900716][ T42] kauditd_printk_skb: 56 callbacks suppressed [ 59.900733][ T42] audit: type=1400 audit(1786038579.339:224): avc: denied { shutdown } for pid=5947 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.916217][ T42] audit: type=1400 audit(1786038579.339:225): avc: denied { connect } for pid=5947 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.925135][ T42] audit: type=1400 audit(1786038579.339:226): avc: denied { name_connect } for pid=5947 comm="syz.2.30" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 59.937174][ T42] audit: type=1400 audit(1786038579.339:227): avc: denied { setopt } for pid=5947 comm="syz.2.30" lport=41667 faddr=::ffff:172.30.0.3 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.123530][ T60] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 60.281852][ T42] audit: type=1400 audit(1786038579.719:228): avc: denied { create } for pid=5964 comm="syz.1.37" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.293666][ T42] audit: type=1400 audit(1786038579.719:229): avc: denied { ioctl } for pid=5964 comm="syz.1.37" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10363 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.319751][ T42] audit: type=1400 audit(1786038579.759:230): avc: denied { read write } for pid=5915 comm="syz.0.15" name="lp0" dev="devtmpfs" ino=2842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 60.334925][ T42] audit: type=1400 audit(1786038579.759:231): avc: denied { open } for pid=5915 comm="syz.0.15" path="/dev/usb/lp0" dev="devtmpfs" ino=2842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 60.345010][ T42] audit: type=1400 audit(1786038579.769:232): avc: denied { create } for pid=5968 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 60.345099][ T60] usb 5-1: USB disconnect, device number 2 [ 60.354838][ T42] audit: type=1400 audit(1786038579.779:233): avc: denied { bind } for pid=5968 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 60.368127][ T60] usblp0: removed [ 60.442850][ T5976] warning: `syz.2.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 60.916854][ T5836] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 61.012544][ T6009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.57'. [ 61.016416][ T6009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 61.020433][ T6009] IPv6: NLM_F_CREATE should be set when creating new route [ 61.023099][ T6009] IPv6: NLM_F_CREATE should be set when creating new route [ 61.069813][ T5836] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 61.073502][ T5836] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 61.078249][ T5836] usb 8-1: config 0 interface 0 has no altsetting 0 [ 61.083460][ T6012] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 61.083824][ T5836] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 61.085426][ T6012] syzkaller1: group set to 0 [ 61.090223][ T5836] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 61.093797][ T5836] usb 8-1: Product: syz [ 61.095355][ T5836] usb 8-1: Manufacturer: syz [ 61.097353][ T5836] usb 8-1: SerialNumber: syz [ 61.101779][ T5836] usb 8-1: config 0 descriptor?? [ 61.108663][ T5836] hub 8-1:0.0: bad descriptor, ignoring hub [ 61.110975][ T5836] hub 8-1:0.0: probe with driver hub failed with error -5 [ 61.116090][ T5836] usb 8-1: selecting invalid altsetting 0 [ 61.276926][ T5747] Bluetooth: hci0: command tx timeout [ 61.277347][ T5094] Bluetooth: hci1: command tx timeout [ 61.356728][ T5094] Bluetooth: hci3: command tx timeout [ 61.357051][ T5747] Bluetooth: hci2: command tx timeout [ 61.675497][ T6061] ucsi-stm32g0-i2c 0-0035: i2c read 35, 00 error: -95 [ 61.681050][ T6061] ucsi-stm32g0-i2c 0-0035: probe with driver ucsi-stm32g0-i2c failed with error -95 [ 61.689035][ T6061] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x35 [ 61.697716][ T847] hid-generic 0005:16C0:5505.0002: collection stack underflow [ 61.701386][ T847] hid-generic 0005:16C0:5505.0002: item 0 2 0 12 parsing failed [ 61.705360][ T847] hid-generic 0005:16C0:5505.0002: probe with driver hid-generic failed with error -22 [ 62.033151][ T29] usb 8-1: USB disconnect, device number 2 [ 62.196757][ T29] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 62.350533][ T29] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 62.353689][ T29] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 62.357508][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 62.366141][ T29] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 62.370733][ T29] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 62.373993][ T29] usb 8-1: Product: syz [ 62.375604][ T29] usb 8-1: Manufacturer: syz [ 62.380932][ T29] usb 8-1: SerialNumber: syz [ 62.389042][ T29] usb 8-1: config 0 descriptor?? [ 62.394113][ T29] hub 8-1:0.0: bad descriptor, ignoring hub [ 62.397130][ T29] hub 8-1:0.0: probe with driver hub failed with error -5 [ 62.403420][ T29] usb 8-1: selecting invalid altsetting 0 [ 62.616251][ T6103] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 62.637009][ T6106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.99'. [ 62.721167][ T6069] usb 8-1: USB disconnect, device number 3 [ 62.865988][ T6126] syz.0.109 uses obsolete (PF_INET,SOCK_PACKET) [ 63.244357][ T6161] netlink: 56 bytes leftover after parsing attributes in process `syz.3.124'. [ 63.245366][ T6163] netlink: 44 bytes leftover after parsing attributes in process `syz.2.125'. [ 63.358397][ T5747] Bluetooth: hci0: command tx timeout [ 63.359784][ T5094] Bluetooth: hci1: command tx timeout [ 63.364851][ T6173] sch_fq: defrate 0 ignored. [ 63.438529][ T5094] Bluetooth: hci3: command tx timeout [ 63.440969][ T5747] Bluetooth: hci2: command tx timeout [ 63.727427][ T6204] Bluetooth: MGMT ver 1.23 [ 63.749204][ T6207] kAFS: bad VL server IP address [ 63.962027][ T6229] ipvlan2: entered allmulticast mode [ 63.964621][ T6229] batadv_slave_1: entered allmulticast mode [ 63.972314][ T6229] batman_adv: batadv0: Adding interface: ipvlan2 [ 63.975164][ T6229] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.985958][ T6229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.991557][ T6229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.995441][ T6229] batman_adv: batadv0: Interface activated: ipvlan2 [ 64.078607][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 64.161990][ T6246] netlink: 14 bytes leftover after parsing attributes in process `syz.1.165'. [ 64.239518][ T24] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 64.243827][ T24] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 64.248371][ T24] usb 8-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 64.251544][ T24] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 64.258068][ T24] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 64.261746][ T24] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 64.265739][ T24] usb 8-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 64.270327][ T24] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 64.276762][ T24] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 64.279720][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.282271][ T24] usb 8-1: Product: syz [ 64.283737][ T24] usb 8-1: Manufacturer: syz [ 64.285228][ T24] usb 8-1: SerialNumber: syz [ 64.295508][ T24] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 64.311210][ T24] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 64.326341][ T24] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 64.333237][ T6258] capability: warning: `syz.1.170' uses deprecated v2 capabilities in a way that may be insecure [ 64.390297][ T6262] netlink: 'syz.0.172': attribute type 83 has an invalid length. [ 64.498045][ T6273] Zero length message leads to an empty skb [ 64.499918][ T6217] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 64.508756][ T24] usb 8-1: USB disconnect, device number 4 [ 64.534624][ T24] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 64.555630][ T24] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 64.560893][ T24] ti_usb_3410_5052 8-1:2.0: device disconnected [ 64.601807][ T6281] ALSA: mixer_oss: invalid OSS volume '' [ 64.604270][ T6281] ALSA: mixer_oss: invalid OSS volume '@' [ 64.606722][ T6281] ALSA: mixer_oss: invalid OSS volume '|' [ 64.609690][ T6281] ALSA: mixer_oss: invalid OSS volume '' [ 64.650837][ T6284] overlayfs: invalid origin (0000) [ 64.911313][ T42] kauditd_printk_skb: 94 callbacks suppressed [ 64.911328][ T42] audit: type=1400 audit(1786038584.349:328): avc: denied { create } for pid=6299 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.923228][ T42] audit: type=1400 audit(1786038584.349:329): avc: denied { ioctl } for pid=6299 comm="syz.1.190" path="socket:[13320]" dev="sockfs" ino=13320 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.943138][ T42] audit: type=1400 audit(1786038584.379:330): avc: denied { create } for pid=6301 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.953286][ T42] audit: type=1400 audit(1786038584.389:331): avc: denied { write } for pid=6301 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.005325][ T42] audit: type=1400 audit(1786038584.439:332): avc: denied { create } for pid=6307 comm="syz.1.194" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 65.014774][ T42] audit: type=1400 audit(1786038584.439:333): avc: denied { unlink } for pid=6307 comm="syz.1.194" name="file0" dev="tmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 65.107164][ T6316] process 'syz.0.198' launched './file0' with NULL argv: empty string added [ 65.108411][ T42] audit: type=1400 audit(1786038584.549:334): avc: denied { execute } for pid=6315 comm="syz.0.198" name="file0" dev="tmpfs" ino=376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.121959][ T42] audit: type=1400 audit(1786038584.549:335): avc: denied { execute_no_trans } for pid=6315 comm="syz.0.198" path="/68/file0" dev="tmpfs" ino=376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.188912][ T42] audit: type=1400 audit(1786038584.629:336): avc: denied { setattr } for pid=6321 comm="syz.3.202" name="/" dev="configfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.408904][ T6346] jffs2: notice: (6346) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 65.424000][ T42] audit: type=1400 audit(1786038584.859:337): avc: denied { write } for pid=6344 comm="syz.1.212" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.757006][ T6377] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 65.824380][ T6380] Bluetooth: hci4: Frame reassembly failed (-84) [ 65.830337][ T62] Bluetooth: hci4: Frame reassembly failed (-84) [ 65.903653][ T6389] capability: warning: `syz.2.232' uses 32-bit capabilities (legacy support in use) [ 66.544491][ T6433] netlink: 27 bytes leftover after parsing attributes in process `syz.3.253'. [ 67.043707][ T6464] device-mapper: ioctl: name not supplied when creating device [ 67.266853][ T6479] input: syz0 as /devices/virtual/input/input6 [ 67.584906][ T5822] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 67.648509][ T6491] block nbd3: shutting down sockets [ 67.703683][ T6499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.284'. [ 67.779153][ T5822] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.788817][ T5822] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.804876][ T5822] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 67.822714][ T5822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.851006][ T5747] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 67.851762][ T5094] Bluetooth: hci4: command 0xfc11 tx timeout [ 67.904379][ T6511] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 68.052618][ T5822] usb 7-1: GET_CAPABILITIES returned 0 [ 68.055100][ T5822] usbtmc 7-1:16.0: can't read capabilities [ 68.288982][ T5836] usb 7-1: USB disconnect, device number 2 [ 69.232712][ T6550] loop8: detected capacity change from 0 to 7 [ 69.261071][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 69.279386][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 69.291853][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 69.299126][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 69.304733][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 69.309694][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 69.317545][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 69.321710][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 69.327413][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 69.337731][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 69.398019][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 69.432712][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 69.444021][ T6552] nbd0: detected capacity change from 0 to 63 [ 69.454840][ T1311] block nbd0: Send control failed (result -32) [ 69.460844][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 69.466930][ T65] block nbd0: Receive control failed (result -32) [ 69.467766][ T1311] block nbd0: Request send failed, requeueing [ 69.468923][ T1311] block nbd0: Dead connection, failed to find a fallback [ 69.468955][ T1311] block nbd0: shutting down sockets [ 69.468985][ T1311] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 69.469022][ T1311] Buffer I/O error on dev nbd0, logical block 0, async page read [ 69.469044][ T1311] Buffer I/O error on dev nbd0, logical block 1, async page read [ 69.469055][ T1311] Buffer I/O error on dev nbd0, logical block 2, async page read [ 69.469066][ T1311] Buffer I/O error on dev nbd0, logical block 3, async page read [ 69.469578][ T35] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 69.470020][ T35] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 69.470515][ T5738] ldm_validate_partition_table(): Disk read failed. [ 69.470881][ T5738] Dev nbd0: unable to read RDB block 0 [ 69.471311][ T5738] nbd0: unable to read partition table [ 69.479462][ T6550] ldm_validate_partition_table(): Disk read failed. [ 69.535949][ T5738] ldm_validate_partition_table(): Disk read failed. [ 69.552344][ T5738] Dev nbd0: unable to read RDB block 0 [ 69.554299][ T6550] Dev loop8: unable to read RDB block 0 [ 69.556875][ T5738] nbd0: unable to read partition table [ 69.561506][ T6550] loop8: unable to read partition table [ 69.563930][ T6550] loop8: partition table beyond EOD, truncated [ 69.566650][ T6550] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 69.621452][ T6570] ip_tables: iptables: counters copy to user failed while replacing table [ 69.673216][ T6574] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 69.809967][ T6589] [ 69.896078][ T6580] SELinux: context truncated [ 69.900265][ T6580] SELinux: invalid ocon [ 69.904911][ T6595] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 70.007406][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 70.007421][ T42] audit: type=1400 audit(1786038845.446:373): avc: denied { setopt } for pid=6598 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.012065][ T6580] SELinux: failed to load policy [ 70.302990][ T6617] ======================================================= [ 70.302990][ T6617] WARNING: The mand mount option has been deprecated and [ 70.302990][ T6617] and is ignored by this kernel. Remove the mand [ 70.302990][ T6617] option from the mount to silence this warning. [ 70.302990][ T6617] ======================================================= [ 70.330052][ T42] audit: type=1400 audit(1786038845.766:374): avc: denied { mounton } for pid=6616 comm="syz.2.338" path="/98/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 70.380109][ T42] audit: type=1400 audit(1786038845.816:375): avc: denied { read append } for pid=6619 comm="syz.2.340" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 70.404258][ T42] audit: type=1400 audit(1786038845.816:376): avc: denied { open } for pid=6619 comm="syz.2.340" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 70.415106][ T42] audit: type=1400 audit(1786038845.816:377): avc: denied { map } for pid=6619 comm="syz.2.340" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 70.436211][ T42] audit: type=1400 audit(1786038845.816:378): avc: denied { write execute } for pid=6619 comm="syz.2.340" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 70.639561][ T42] audit: type=1400 audit(1786038846.076:379): avc: denied { watch watch_reads } for pid=6644 comm="syz.3.352" path="/49" dev="tmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.676450][ T6647] netlink: 'syz.2.353': attribute type 5 has an invalid length. [ 70.746191][ T24] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 70.751812][ T42] audit: type=1400 audit(1786038846.186:380): avc: denied { bind } for pid=6654 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 70.759791][ T42] audit: type=1400 audit(1786038846.186:381): avc: denied { prog_load } for pid=6655 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 70.767366][ T42] audit: type=1400 audit(1786038846.196:382): avc: denied { prog_run } for pid=6655 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 70.910167][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.914255][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 70.918574][ T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 70.923507][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.931954][ T24] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 70.935369][ T24] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 70.939155][ T24] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 70.943113][ T24] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 70.952387][ T24] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 70.955199][ T24] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 70.961406][ T24] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 71.079244][ T6682] sctp: [Deprecated]: syz.2.369 (pid 6682) Use of struct sctp_assoc_value in delayed_ack socket option. [ 71.079244][ T6682] Use struct sctp_sack_info instead [ 71.248935][ T6684] usb 5-1: USB disconnect, device number 3 [ 71.264986][ T6684] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 71.277220][ T6684] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 71.287892][ T6684] keyspan 5-1:1.0: device disconnected [ 71.440734][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.443751][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.567637][ T6716] netlink: 56 bytes leftover after parsing attributes in process `syz.3.384'. [ 71.664431][ T6724] printk: legacy console [ttyS0] disabled syzkaller syzkaller login: [ 89.983562][ T7805] printk: legacy console [ttyS0] enabled [ 90.212455][ T7819] vhci_hcd vhci_hcd.0: failed to lookup sock [ 90.828146][ T7839] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 91.118684][ T7858] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 91.166798][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 91.166814][ T42] audit: type=1400 audit(1786039122.612:515): avc: denied { module_request } for pid=7859 comm="syz.3.904" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 91.197644][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'. [ 91.212834][ T7860] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.473643][ T7888] openvswitch: netlink: IP tunnel dst address not specified [ 91.479247][ T7888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.594744][ T7893] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.726511][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.924'. [ 91.744651][ T42] audit: type=1804 audit(1786039123.182:516): pid=7907 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.926" name="/newroot/161/cgroup.controllers" dev="tmpfs" ino=863 res=1 errno=0 [ 91.761900][ T42] audit: type=1800 audit(1786039123.182:517): pid=7907 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.926" name="cgroup.controllers" dev="tmpfs" ino=863 res=0 errno=0 [ 91.840238][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.931'. [ 91.844988][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 91.875642][ T5883] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.886155][ T5883] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.896183][ T5883] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.903736][ T5883] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.032435][ T42] audit: type=1400 audit(1786039123.472:518): avc: denied { kexec_image_load } for pid=7935 comm="syz.1.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 92.073673][ T42] audit: type=1400 audit(1786039123.512:519): avc: denied { setopt } for pid=7940 comm="syz.1.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 92.085706][ T42] audit: type=1400 audit(1786039123.512:520): avc: denied { read } for pid=7940 comm="syz.1.942" path="socket:[18310]" dev="sockfs" ino=18310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 92.359422][ T7957] netlink: 68 bytes leftover after parsing attributes in process `syz.2.949'. [ 92.507775][ T7966] netlink: 'syz.3.953': attribute type 29 has an invalid length. [ 92.517229][ T7966] netlink: 'syz.3.953': attribute type 29 has an invalid length. [ 92.527686][ T7966] netlink: 'syz.3.953': attribute type 29 has an invalid length. [ 93.090714][ T7976] macvlan2: entered promiscuous mode [ 93.379835][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'. [ 93.416845][ T8001] MPI: mpi too large (16392 bits) [ 93.501044][ T8009] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 93.560303][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 93.569562][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 93.714034][ T8025] syz_tun: entered allmulticast mode [ 93.720053][ T8023] syz_tun: left allmulticast mode [ 94.156050][ T5747] Bluetooth: hci3: command tx timeout [ 94.656611][ T8071] netlink: 44 bytes leftover after parsing attributes in process `syz.2.997'. [ 95.091010][ T8094] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1008'. [ 95.292609][ T8109] Falling back ldisc for ttyS3. [ 95.339460][ T42] audit: type=1400 audit(1786039126.782:521): avc: denied { setopt } for pid=8110 comm="syz.2.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.352897][ T42] audit: type=1400 audit(1786039126.782:522): avc: denied { write } for pid=8110 comm="syz.2.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.368230][ T42] audit: type=1400 audit(1786039126.782:523): avc: denied { read } for pid=8110 comm="syz.2.1016" lport=8080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.425696][ T34] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.585791][ T5836] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 95.591592][ T34] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 95.597387][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.602934][ T34] usb 5-1: Product: syz [ 95.605340][ T34] usb 5-1: Manufacturer: syz [ 95.607927][ T34] usb 5-1: SerialNumber: syz [ 95.749909][ T8121] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1020'. [ 95.752106][ T5836] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 95.760749][ T5836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.767014][ T5836] usb 6-1: Product: syz [ 95.770314][ T5836] usb 6-1: Manufacturer: syz [ 95.773531][ T5836] usb 6-1: SerialNumber: syz [ 95.853888][ T34] rtl8150 5-1:1.0: couldn't reset the device [ 95.858092][ T34] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 95.866948][ T34] usb 5-1: USB disconnect, device number 4 [ 95.878057][ T8127] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.026081][ T5836] rtl8150 6-1:1.0: couldn't reset the device [ 96.030397][ T5836] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 96.048379][ T5836] usb 6-1: USB disconnect, device number 2 [ 96.064927][ T8132] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 96.218941][ T42] audit: type=1400 audit(1786039127.662:524): avc: denied { checkpoint_restore } for pid=8139 comm="syz.2.1028" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.249776][ T42] audit: type=1400 audit(1786039127.692:525): avc: denied { override_creds } for pid=8141 comm="syz.3.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 96.615645][ T40] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 96.641670][ T8168] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1043'. [ 96.694412][ T42] audit: type=1400 audit(1786039128.132:526): avc: denied { ioctl } for pid=8175 comm="syz.3.1047" path="socket:[21100]" dev="sockfs" ino=21100 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.754726][ T42] audit: type=1400 audit(1786039128.192:527): avc: denied { write } for pid=8180 comm="syz.1.1048" name="instances" dev="tracefs" ino=3597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 96.772332][ T42] audit: type=1400 audit(1786039128.192:528): avc: denied { add_name } for pid=8180 comm="syz.1.1048" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 96.786968][ T42] audit: type=1400 audit(1786039128.192:529): avc: denied { create } for pid=8180 comm="syz.1.1048" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 96.805880][ T40] usb 5-1: Using ep0 maxpacket: 16 [ 96.814623][ T8186] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 96.817739][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.828028][ T40] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.837245][ T40] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 96.843710][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.856813][ T40] usb 5-1: config 0 descriptor?? [ 97.069272][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1058'. [ 97.486805][ T8230] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 97.492839][ T8230] SELinux: failed to load policy [ 97.588394][ T42] audit: type=1326 audit(1786039129.022:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8237 comm="syz.2.1075" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa8c999e0d9 code=0x0 [ 98.058777][ T42] audit: type=1400 audit(1786039129.502:531): avc: denied { write } for pid=8258 comm="syz.1.1084" name="raw" dev="proc" ino=4026532906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 98.448900][ T42] audit: type=1400 audit(1786039129.892:532): avc: denied { read write } for pid=8272 comm="syz.2.1091" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 98.451339][ T8273] program syz.2.1091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.462331][ T42] audit: type=1400 audit(1786039129.892:533): avc: denied { ioctl open } for pid=8272 comm="syz.2.1091" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 98.644929][ T8289] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 99.200494][ T8314] ./sys/bus/nd/drivers/nd_pmem/unbind: Can't lookup blockdev [ 99.387191][ T40] usbhid 5-1:0.0: can't add hid device: -71 [ 99.399598][ T40] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 99.428678][ T40] usb 5-1: USB disconnect, device number 5 [ 99.465292][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1122'. [ 99.470871][ T8340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1122'. [ 99.522231][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1122'. [ 99.546818][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1122'. [ 99.608854][ T8357] e1000e 0000:00:02.0: MSI/MSI-X disallowed for future drivers [ 99.759286][ T8368] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1136'. [ 100.129541][ T8406] pcieport 0000:00:04.0: PCI bridge to [bus 01] [ 100.136001][ T8406] pcieport 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 100.144092][ T8406] pcieport 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 100.159023][ T8406] pcieport 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 100.345050][ T8419] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3966. macoff=82 [ 100.449401][ T8423] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 100.771231][ T8444] vhci_hcd vhci_hcd.0: failed to lookup sock [ 100.866770][ T6069] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 101.039554][ T6069] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 101.047337][ T6069] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 101.053787][ T6069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.147228][ T8456] loop5: detected capacity change from 0 to 6 [ 101.161617][ T8456] loop5: [POWERTEC] p1 p2 p3 [ 101.169167][ T8456] loop5: p1 start 2738982409 is beyond EOD, truncated [ 101.172914][ T8456] loop5: p2 start 3318134482 is beyond EOD, truncated [ 101.176764][ T8456] loop5: p3 start 3832978868 is beyond EOD, truncated [ 101.321310][ T6069] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device [ 101.322373][ T8472] ================================================================== [ 101.330994][ T8472] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 101.335855][ T8472] Read of size 1 at addr ffff888027f56360 by task syz.0.1185/8472 [ 101.343595][ T8472] [ 101.345187][ T8472] CPU: 2 UID: 0 PID: 8472 Comm: syz.0.1185 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.345216][ T8472] Tainted: [L]=SOFTLOCKUP [ 101.345224][ T8472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.345235][ T8472] Call Trace: [ 101.345262][ T8472] [ 101.345270][ T8472] dump_stack_lvl+0x100/0x190 [ 101.345299][ T8472] print_report+0x13d/0x4b0 [ 101.345329][ T8472] ? __virt_addr_valid+0x239/0x430 [ 101.345357][ T8472] ? string+0x471/0x4d0 [ 101.345376][ T8472] kasan_report+0xdf/0x1c0 [ 101.345401][ T8472] ? string+0x471/0x4d0 [ 101.345423][ T8472] string+0x471/0x4d0 [ 101.345444][ T8472] ? __pfx_string+0x10/0x10 [ 101.345465][ T8472] ? mtree_range_walk+0x72b/0xb70 [ 101.345490][ T8472] vsnprintf+0x422/0x1300 [ 101.345516][ T8472] ? __pfx_vsnprintf+0x10/0x10 [ 101.345538][ T8472] ? __lock_acquire+0x49f/0x1a40 [ 101.345561][ T8472] ? __pfx_num_to_str+0x10/0x10 [ 101.345584][ T8472] seq_printf+0x1a4/0x250 [ 101.345602][ T8472] ? __pfx_num_to_str+0x10/0x10 [ 101.345625][ T8472] ? __pfx_seq_printf+0x10/0x10 [ 101.345643][ T8472] ? do_raw_spin_lock+0x128/0x260 [ 101.345670][ T8472] ? seq_put_decimal_ull_width+0x1db/0x3a0 [ 101.345691][ T8472] irq_seq_show+0x390/0x8b0 [ 101.345718][ T8472] seq_read_iter+0xbce/0x1270 [ 101.345741][ T8472] proc_reg_read_iter+0x220/0x310 [ 101.345763][ T8472] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 101.345783][ T8472] vfs_read+0x82e/0xb40 [ 101.345811][ T8472] ? __pfx_vfs_read+0x10/0x10 [ 101.345846][ T8472] ksys_read+0x12a/0x250 [ 101.345873][ T8472] ? __pfx_ksys_read+0x10/0x10 [ 101.345900][ T8472] ? trace_syscall_enter+0xd9/0x110 [ 101.345930][ T8472] do_syscall_64+0x115/0x870 [ 101.345952][ T8472] ? clear_bhb_loop+0x70/0xc0 [ 101.345998][ T8472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.346019][ T8472] RIP: 0033:0x7f371a59e0d9 [ 101.346037][ T8472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.346057][ T8472] RSP: 002b:00007f37187f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.346078][ T8472] RAX: ffffffffffffffda RBX: 00007f371a825fa0 RCX: 00007f371a59e0d9 [ 101.346091][ T8472] RDX: 00000000000003e8 RSI: 0000200000000400 RDI: 0000000000000003 [ 101.346102][ T8472] RBP: 00007f371a635024 R08: 0000000000000000 R09: 0000000000000000 [ 101.346113][ T8472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.346124][ T8472] R13: 00007f371a826038 R14: 00007f371a825fa0 R15: 00007ffcd17ff498 [ 101.346143][ T8472] [ 101.346150][ T8472] [ 101.366393][ T6069] wwan wwan0: port wwan0qmi0 attached [ 101.368106][ T8472] Allocated by task 8388: [ 101.512482][ T8472] kasan_save_stack+0x30/0x50 [ 101.514987][ T8472] kasan_save_track+0x14/0x30 [ 101.517512][ T8472] __kasan_kmalloc+0xaa/0xb0 [ 101.519951][ T8472] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 101.523370][ T8472] kvasprintf+0xbc/0x150 [ 101.526103][ T8472] kasprintf+0xc7/0x100 [ 101.528842][ T8472] drm_debugfs_clients_add+0x15f/0x210 [ 101.532463][ T8472] drm_file_alloc+0x5c6/0xb40 [ 101.535528][ T8472] drm_open_helper+0x1fc/0x540 [ 101.538656][ T8472] drm_open+0x1a0/0x3e0 [ 101.541381][ T8472] drm_stub_open+0x20f/0x380 [ 101.544402][ T8472] chrdev_open+0x234/0x6a0 [ 101.547264][ T8472] do_dentry_open+0x6ab/0x14d0 [ 101.549831][ T8472] vfs_open+0x82/0x3f0 [ 101.552101][ T8472] path_openat+0x2873/0x4280 [ 101.554547][ T8472] do_file_open+0x20e/0x430 [ 101.556974][ T8472] do_sys_openat2+0x10f/0x1e0 [ 101.559503][ T8472] __x64_sys_openat+0x12d/0x210 [ 101.562182][ T8472] do_syscall_64+0x115/0x870 [ 101.564609][ T8472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.567762][ T8472] [ 101.569052][ T8472] Freed by task 8388: [ 101.571198][ T8472] kasan_save_stack+0x30/0x50 [ 101.573763][ T8472] kasan_save_track+0x14/0x30 [ 101.576260][ T8472] kasan_save_free_info+0x3b/0x70 [ 101.579007][ T8472] __kasan_slab_free+0x5f/0x80 [ 101.581635][ T8472] kfree+0x22b/0x6c0 [ 101.583801][ T8472] drm_debugfs_clients_add+0x1a1/0x210 [ 101.586817][ T8472] drm_file_alloc+0x5c6/0xb40 [ 101.589322][ T8472] drm_open_helper+0x1fc/0x540 [ 101.591987][ T8472] drm_open+0x1a0/0x3e0 [ 101.594264][ T8472] drm_stub_open+0x20f/0x380 [ 101.596806][ T8472] chrdev_open+0x234/0x6a0 [ 101.599227][ T8472] do_dentry_open+0x6ab/0x14d0 [ 101.601885][ T8472] vfs_open+0x82/0x3f0 [ 101.604087][ T8472] path_openat+0x2873/0x4280 [ 101.606620][ T8472] do_file_open+0x20e/0x430 [ 101.609027][ T8472] do_sys_openat2+0x10f/0x1e0 [ 101.611627][ T8472] __x64_sys_openat+0x12d/0x210 [ 101.614161][ T8472] do_syscall_64+0x115/0x870 [ 101.616524][ T8472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.619654][ T8472] [ 101.620866][ T8472] The buggy address belongs to the object at ffff888027f56360 [ 101.620866][ T8472] which belongs to the cache kmalloc-8 of size 8 [ 101.628010][ T8472] The buggy address is located 0 bytes inside of [ 101.628010][ T8472] freed 8-byte region [ffff888027f56360, ffff888027f56368) [ 101.635279][ T8472] [ 101.636548][ T8472] The buggy address belongs to the physical page: [ 101.639859][ T8472] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27f56 [ 101.644414][ T8472] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 101.648143][ T8472] page_type: f5(slab) [ 101.650420][ T8472] raw: 00fff00000000000 ffff88801bc42500 dead000000000100 dead000000000122 [ 101.654895][ T8472] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000 [ 101.659275][ T8472] page dumped because: kasan: bad access detected [ 101.662580][ T8472] page_owner tracks the page as allocated [ 101.665514][ T8472] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6304062760, free_ts 6303380208 [ 101.676140][ T8472] post_alloc_hook+0xfd/0x120 [ 101.679221][ T8472] get_page_from_freelist+0xf48/0x3530 [ 101.682819][ T8472] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 101.686683][ T8472] new_slab+0xa2/0x640 [ 101.689343][ T8472] refill_objects+0xe3/0x410 [ 101.692392][ T8472] __pcs_replace_empty_main+0x376/0x680 [ 101.696008][ T8472] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 101.699396][ T8472] kstrdup+0x51/0xe0 [ 101.701434][ T8472] kstrdup_const+0x63/0x80 [ 101.703718][ T8472] __kernfs_new_node+0x9b/0xa10 [ 101.706212][ T8472] kernfs_new_node+0x117/0x150 [ 101.708662][ T8472] kernfs_create_link+0xcc/0x240 [ 101.711229][ T8472] sysfs_do_create_link_sd+0x90/0x140 [ 101.714059][ T8472] sysfs_create_link+0x61/0xc0 [ 101.716519][ T8472] device_add+0xb62/0x1970 [ 101.718834][ T8472] tty_register_device_attr+0x388/0x7f0 [ 101.722160][ T8472] page last free pid 225 tgid 225 stack trace: [ 101.726181][ T8472] __free_frozen_pages+0x79f/0x1090 [ 101.729107][ T8472] __kasan_populate_vmalloc+0x1ea/0x210 [ 101.731997][ T8472] alloc_vmap_area+0x95d/0x2bb0 [ 101.734511][ T8472] __get_vm_area_node+0x1ca/0x330 [ 101.737108][ T8472] __vmalloc_node_range_noprof+0x228/0x1630 [ 101.740212][ T8472] __vmalloc_node_noprof+0xad/0xf0 [ 101.743087][ T8472] copy_process+0x7fb/0x8030 [ 101.745474][ T8472] kernel_clone+0x176/0x9d0 [ 101.747805][ T8472] user_mode_thread+0xcc/0x110 [ 101.750272][ T8472] call_usermodehelper_exec_work+0xcb/0x180 [ 101.753367][ T8472] process_one_work+0xa23/0x1940 [ 101.755930][ T8472] worker_thread+0x5ef/0xe50 [ 101.758314][ T8472] kthread+0x370/0x450 [ 101.760409][ T8472] ret_from_fork+0x72b/0xd50 [ 101.763254][ T8472] ret_from_fork_asm+0x1a/0x30 [ 101.766365][ T8472] [ 101.767715][ T8472] Memory state around the buggy address: [ 101.770646][ T8472] ffff888027f56200: 06 fc fc fc 06 fc fc fc 06 fc fc fc 02 fc fc fc [ 101.775925][ T8472] ffff888027f56280: 02 fc fc fc 02 fc fc fc 06 fc fc fc 05 fc fc fc [ 101.780980][ T8472] >ffff888027f56300: 06 fc fc fc 02 fc fc fc 05 fc fc fc fa fc fc fc [ 101.785663][ T8472] ^ [ 101.789689][ T8472] ffff888027f56380: 02 fc fc fc fa fc fc fc 00 fc fc fc 05 fc fc fc [ 101.794328][ T8472] ffff888027f56400: 00 fc fc fc fa fc fc fc fa fc fc fc 06 fc fc fc [ 101.799132][ T8472] ================================================================== [ 101.803911][ T8472] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 101.807836][ T8472] CPU: 2 UID: 0 PID: 8472 Comm: syz.0.1185 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.814191][ T8472] Tainted: [L]=SOFTLOCKUP [ 101.816730][ T8472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.822719][ T8472] Call Trace: [ 101.824605][ T8472] [ 101.826426][ T8472] dump_stack_lvl+0x100/0x190 [ 101.829291][ T8472] vpanic+0x552/0x970 [ 101.831714][ T8472] ? __pfx_vpanic+0x10/0x10 [ 101.834514][ T8472] ? __pfx_vprintk_emit+0x10/0x10 [ 101.837628][ T8472] ? string+0x471/0x4d0 [ 101.840061][ T8472] panic+0xd1/0xe0 [ 101.842486][ T8472] ? __pfx_panic+0x10/0x10 [ 101.845179][ T8472] ? end_report.part.0+0x23/0x90 [ 101.848173][ T8472] ? rcu_is_watching+0x12/0xc0 [ 101.851012][ T8472] ? end_report.part.0+0x23/0x90 [ 101.854155][ T8472] check_panic_on_warn.cold+0x19/0x34 [ 101.857328][ T8472] end_report.part.0+0x3a/0x90 [ 101.860146][ T8472] kasan_report.cold+0xe/0x18 [ 101.862898][ T8472] ? string+0x471/0x4d0 [ 101.865271][ T8472] string+0x471/0x4d0 [ 101.867597][ T8472] ? __pfx_string+0x10/0x10 [ 101.870267][ T8472] ? mtree_range_walk+0x72b/0xb70 [ 101.873399][ T8472] vsnprintf+0x422/0x1300 [ 101.876147][ T8472] ? __pfx_vsnprintf+0x10/0x10 [ 101.878984][ T8472] ? __lock_acquire+0x49f/0x1a40 [ 101.882059][ T8472] ? __pfx_num_to_str+0x10/0x10 [ 101.885056][ T8472] seq_printf+0x1a4/0x250 [ 101.887470][ T8472] ? __pfx_num_to_str+0x10/0x10 [ 101.890346][ T8472] ? __pfx_seq_printf+0x10/0x10 [ 101.893370][ T8472] ? do_raw_spin_lock+0x128/0x260 [ 101.896256][ T8472] ? seq_put_decimal_ull_width+0x1db/0x3a0 [ 101.899768][ T8472] irq_seq_show+0x390/0x8b0 [ 101.902634][ T8472] seq_read_iter+0xbce/0x1270 [ 101.905460][ T8472] proc_reg_read_iter+0x220/0x310 [ 101.908472][ T8472] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 101.911899][ T8472] vfs_read+0x82e/0xb40 [ 101.914294][ T8472] ? __pfx_vfs_read+0x10/0x10 [ 101.917016][ T8472] ksys_read+0x12a/0x250 [ 101.919440][ T8472] ? __pfx_ksys_read+0x10/0x10 [ 101.922300][ T8472] ? trace_syscall_enter+0xd9/0x110 [ 101.925392][ T8472] do_syscall_64+0x115/0x870 [ 101.928171][ T8472] ? clear_bhb_loop+0x70/0xc0 [ 101.930975][ T8472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.934198][ T8472] RIP: 0033:0x7f371a59e0d9 [ 101.936963][ T8472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.949120][ T8472] RSP: 002b:00007f37187f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.954281][ T8472] RAX: ffffffffffffffda RBX: 00007f371a825fa0 RCX: 00007f371a59e0d9 [ 101.959080][ T8472] RDX: 00000000000003e8 RSI: 0000200000000400 RDI: 0000000000000003 [ 101.963802][ T8472] RBP: 00007f371a635024 R08: 0000000000000000 R09: 0000000000000000 [ 101.968250][ T8472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.972857][ T8472] R13: 00007f371a826038 R14: 00007f371a825fa0 R15: 00007ffcd17ff498 [ 101.977472][ T8472] [ 101.980042][ T8472] Kernel Offset: disabled [ 101.982566][ T8472] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:50:20 Registers: info registers vcpu 0 CPU#0 RAX=ffff88801feef8d0 RBX=000000000000003c RCX=ffff88801bc42780 RDX=ffff88801feef820 RSI=ffff888025b20440 RDI=0000000000000010 RBP=ffffc9000160fc20 RSP=ffffc9000160fb40 R8 =000000000000000b R9 =ffff888025b20b00 R10=0000000000000000 R11=0000000800400040 R12=0000000000000016 R13=ffffea000096c800 R14=ffff888025b20c00 R15=0000000800400034 RIP=ffffffff826f0bd0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f36b114f880 ffffffff 00c00000 GS =0000 ffff8880d5dd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f499425cff8 CR3=00000000512c5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcfeff00 Opmask01=0000000000000107 Opmask02=00000000f7f7df7f Opmask03=0000000000000000 Opmask04=00000000fffff7ff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055697eb465b0 000055697eb455b0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055697eb455b0 000055697eb455b0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055697eb0ce80 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055697eb0ce80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36b0bf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36b0aa742d 000000000000000a 7665645f6e617777 3d45505954564544 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007536b0a07427 0000000000000000 7665645564617777 3745505354564544 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000022e1 0000000000006b63 6f6c00306e617777 2f6e6177772f302e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055697eb00f60 000055697eafcc50 000055697e8c34d0 000055697eb04c10 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055697eb53c40 000055697eb05fc0 000055697eaf7b30 000055697eb079f0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055697eafeaa0 000055697eb12ad0 000055697eaff690 000055697eb01e30 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055697eb16140 000055697eb082b0 000055697eaf77b0 000055697eb0cec0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080080783 RBX=ffff888026fd4000 RCX=ffffffff86f7708e RDX=00000000ffffffff RSI=ffffffff86f7709b RDI=ffff88802c2da540 RBP=0000000000000000 RSP=ffffc900006a0ec0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffff888026fd5808 R14=ffff888026fd5420 R15=0000000000000000 RIP=ffffffff86f770d5 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f14ab36c300 ffffffff 00c00000 GS =0000 ffff8880d5ed8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c3223b3 CR3=00000000277dc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04a3000000020000 0008000400080010 00080000000c0200 0000000000080008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0014010000000000 000800080007000c 00080000000c0000 6be4000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04a0000000200000 0003000000100008 0000000000000004 000c001a00100000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000160000 06e4000000100000 000c00040008000c 00130014000c0000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03e6000000080004 0000000800080000 002000000de80000 14cc00001c380000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000000000000 0000000000000000 00fa000000000356 7e00000000180000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00200000000e0014 000c000000080004 0020000e00000000 0000000000000000 ZMM24=4570695645706956 4570695645706956 4570695645706956 4570695645706956 4570695645706956 4570695645706956 4570695645706956 4570695645706956 ZMM25=705d76b2705d76b2 705d76b2705d76b2 705d76b2705d76b2 705d76b2705d76b2 705d76b2705d76b2 705d76b2705d76b2 705d76b2705d76b2 705d76b2705d76b2 ZMM26=2af59a592af59a59 2af59a592af59a59 2af59a592af59a59 2af59a592af59a59 2af59a592af59a59 2af59a592af59a59 2af59a592af59a59 2af59a592af59a59 ZMM27=1a97271d1a97271d 1a97271d1a97271d 1a97271d1a97271d 1a97271d1a97271d 1a97271d1a97271d 1a97271d1a97271d 1a97271d1a97271d 1a97271d1a97271d ZMM28=000001c0000001bf 000001be000001bd 000001bc000001bb 000001ba000001b9 000001b8000001b7 000001b6000001b5 000001b4000001b3 000001b2000001b1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=210c0000210c0000 210c0000210c0000 210c0000210c0000 210c0000210c0000 210c0000210c0000 210c0000210c0000 210c0000210c0000 210c0000210c0000 info registers vcpu 2 CPU#2 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a32d35 RDI=ffffffff9ba0be80 RBP=ffffffff9ba0be40 RSP=ffffc9000a2c7328 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000061 R14=ffffffff85a35770 R15=dffffc0000000000 RIP=ffffffff85a32d5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f37187f66c0 ffffffff 00c00000 GS =0000 ffff8880d5fd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c41035c CR3=000000003e15d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd17ff986 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd17ff986 00007ffcd17ff98c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f371a635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f371a635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f371a6357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f371a635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f371a7f25f8 00007f371a7f25c8 00007f371a7f2600 00007f371a7f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff8880278b31a8 RCX=0000000000000000 RDX=00000000000000c7 RSI=ffff8880278b3180 RDI=ffff88806a724568 RBP=ffff8880278b2540 RSP=ffffc9000161f1d0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=00000000000000c7 R13=0000000000000005 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e5e07a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556fe45500 ffffffff 00c00000 GS =0000 ffff8880d60d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f49941556c8 CR3=00000000512ac000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555587a81b00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb74f7f2e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb74f7f2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555587a8fb78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10000fffffffffff ff04000000000806 0a0146b00ed81000 001000040046ae08 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2080100010100000 0400000000080608 0146b40210000003 4080100002100000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100000000000 08060401468e2080 1000101000000400 0000000806080146 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b402100000034080 1000021000001000 0fffffffffffff04 0000000008060a01 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0102100001800401 000000080606017b 9031020801800300 0400040800108004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01c70800080046ee 00656c6f736e6f63 2f30537974742f79 74742f7373616c63 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7379732f2e01ff ffffffffffffffc3 081080030fffffff ffffff040010000c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80040880040fffff ffffffff040a0145 ae00736673797301 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 001ca0030008001c 98030008001c9003 0fffffffffffff04 1c80030fffffffff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000