last executing test programs: 2m29.088710139s ago: executing program 2 (id=10564): r0 = open(&(0x7f0000000080)='./bus\x00', 0x148447, 0x10) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0xd8}) mmap$IORING_OFF_CQ_RING(0x0, 0xc00000, 0x1000005, 0x13, r0, 0x8000000) 2m29.041142531s ago: executing program 2 (id=10566): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200, 0x489c}, 0x3c) 2m28.997509465s ago: executing program 2 (id=10568): r0 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvfrom$inet6(r0, 0x0, 0x0, 0x100, 0x0, 0x0) 2m28.916850088s ago: executing program 2 (id=10571): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x007'], 0x50) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 2m28.897071587s ago: executing program 2 (id=10573): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) 2m28.865284784s ago: executing program 2 (id=10575): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x4, 0x4) getsockopt$inet_int(r0, 0x0, 0x2, 0x0, &(0x7f0000000080)) 2m12.804528489s ago: executing program 32 (id=10575): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x4, 0x4) getsockopt$inet_int(r0, 0x0, 0x2, 0x0, &(0x7f0000000080)) 1m43.439760428s ago: executing program 4 (id=12024): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) 1m43.439424147s ago: executing program 4 (id=12025): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000008240), 0x1, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) write$binfmt_register(r0, &(0x7f0000008280)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x38, 0x3a, 'system_u:object_r:dlm_control_device_t:s0', 0x3a, 'system_u:object_r:dlm_control_device_t:s0', 0x3a, './file0'}, 0x79) 1m43.349409107s ago: executing program 4 (id=12027): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000004c80)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc) getpeername(r0, 0x0, &(0x7f0000005680)) 1m43.338572923s ago: executing program 4 (id=12030): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 1m43.258612147s ago: executing program 4 (id=12033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 1m42.760133323s ago: executing program 4 (id=12046): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r1]) 1m42.683993861s ago: executing program 33 (id=12046): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r1]) 2.12593743s ago: executing program 3 (id=14029): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) 1.812429854s ago: executing program 3 (id=14034): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='f', 0x1) 1.643100498s ago: executing program 3 (id=14038): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) recvmsg$unix(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41) ioctl$SIOCSIFHWADDR(r0, 0x8905, &(0x7f0000000340)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) 1.450929736s ago: executing program 3 (id=14042): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x140e, 0x100, 0x70bd27, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) 1.212588702s ago: executing program 1 (id=14045): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) 991.548778ms ago: executing program 5 (id=14048): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x2, 0x8, 0x1, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x287, 0x3, 0xfffffff7, 0x400001, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x4, 0x4, 0x20001e5b, 0x3, 0xe66, 0x3, 0x6, 0x4006, 0x0, 0x3]}) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f0000000240)) 879.129494ms ago: executing program 1 (id=14049): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 736.796114ms ago: executing program 5 (id=14050): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x440, 0x0, 0x7fffffff}]}) 734.332102ms ago: executing program 1 (id=14052): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xa) ioctl$TCSETA(r0, 0x5406, &(0x7f00000013c0)={0x4, 0x7, 0xfffd, 0x7f, 0x14, "40999f49f937a4fd"}) 512.367618ms ago: executing program 1 (id=14054): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)="2e49ba771097", 0x6) 485.887651ms ago: executing program 1 (id=14055): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000}) 484.423481ms ago: executing program 0 (id=14056): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000300)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000003c0)={0x20, 0x0, &(0x7f0000000380), 0x6, 0x818}) 395.030037ms ago: executing program 0 (id=14057): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000081}]}) 370.116557ms ago: executing program 1 (id=14058): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) 335.270831ms ago: executing program 5 (id=14059): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x10000000, 0x1}, {0x0, 0x2, 0x7}, {0x40000, 0xffffffff, 0xae8}, 0x0, 0x3504, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x890) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x10c, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0x6b8f, 0x2, 0x4, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x10c}}, 0x8000) 285.881724ms ago: executing program 0 (id=14060): bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 241.704241ms ago: executing program 0 (id=14061): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) fanotify_mark(r1, 0x2, 0x1016, r0, 0x0) 211.913161ms ago: executing program 3 (id=14062): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000010, 0x0, 0x4}]}) 210.737678ms ago: executing program 5 (id=14063): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x13, r1, 0x81000000) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 142.177941ms ago: executing program 5 (id=14064): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x20, r0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="10100000"], 0x11d0}, 0x7, 0x3ed763469f8f58cc}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 110.359064ms ago: executing program 0 (id=14065): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15.624915ms ago: executing program 3 (id=14066): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r0, 0xaeb, 0x1) 100.382µs ago: executing program 0 (id=14067): openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) 0s ago: executing program 5 (id=14068): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) read(r0, &(0x7f0000000340)=""/1003, 0x29f) kernel console output (not intermixed with test programs): ode balance-rr(0) [ 280.030613][T27213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10247'. [ 280.041106][T27207] bond8 (unregistering): Released all slaves [ 280.330692][T27246] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 280.344513][T27246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.491153][T27262] 9pnet_fd: p9_fd_create_tcp (27262): problem binding to privport [ 280.737482][T27286] nbd: must specify an index to disconnect [ 280.871837][ T1474] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 280.877459][ T1474] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 280.880626][T27300] openvswitch: netlink: Actions may not be safe on all matching packets [ 280.889688][ T1474] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 280.893136][ T1474] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 280.896732][ T1474] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 280.900578][ T1474] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 280.903938][ T1474] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 280.907089][ T1474] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 280.910219][ T1474] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 280.914090][ T1474] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 280.946777][ T1474] hid-generic 0000:0000:0004.0002: hidraw1: HID v0.03 Device [syz1] on syz0 [ 281.011963][T27305] fido_id[27305]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 281.554754][T27347] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 281.653175][T27355] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 281.737579][T27363] program syz.3.10315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.898858][T27377] tipc: MTU too low for tipc bearer [ 282.157565][T27396] pim6reg: left allmulticast mode [ 282.225528][T27401] netlink: 'syz.1.10334': attribute type 1 has an invalid length. [ 282.785658][T27450] netlink: 'syz.3.10358': attribute type 3 has an invalid length. [ 282.850852][T27457] ptrace attach of "/syz-executor exec"[5985] was attempted by " [ 282.851657][T27456] Bluetooth: MGMT ver 1.23 [ 282.936664][T27459] fuse: Invalid rootmode [ 283.513127][T27522] bridge_slave_0: entered promiscuous mode [ 283.701463][ T42] kauditd_printk_skb: 273 callbacks suppressed [ 283.701477][ T42] audit: type=1400 audit(2000000015.684:36661): avc: denied { execmem } for pid=27539 comm="syz.3.10401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 283.715976][ T42] audit: type=1400 audit(2000000015.684:36662): avc: denied { execstack } for pid=27539 comm="syz.3.10401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 283.821013][T27550] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 283.857600][ T42] audit: type=1400 audit(2000000015.824:36663): avc: denied { read write } for pid=27551 comm="syz.2.10407" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 283.868009][ T42] audit: type=1400 audit(2000000015.833:36664): avc: denied { open } for pid=27551 comm="syz.2.10407" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 283.884935][ T1349] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 283.914134][ T42] audit: type=1400 audit(2000000015.871:36665): avc: denied { create } for pid=27555 comm="syz.3.10409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 283.947437][T27557] fido_id[27557]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 283.963276][ T42] audit: type=1400 audit(2000000015.927:36666): avc: denied { setopt } for pid=27555 comm="syz.3.10409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 283.985910][ T42] audit: type=1400 audit(2000000015.946:36667): avc: denied { mounton } for pid=27559 comm="syz.2.10411" path="/2630/file0" dev="tmpfs" ino=13253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 284.001640][ T42] audit: type=1400 audit(2000000015.946:36668): avc: denied { mount } for pid=27559 comm="syz.2.10411" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 284.009492][ T42] audit: type=1400 audit(2000000015.946:36669): avc: denied { remount } for pid=27559 comm="syz.2.10411" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 284.023263][ T42] audit: type=1400 audit(2000000015.983:36670): avc: denied { unmount } for pid=5982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 284.071597][T27567] netlink: 'syz.2.10414': attribute type 2 has an invalid length. [ 284.075323][T27567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10414'. [ 284.192774][ C0] sr 2:0:0:0: [sr0] tag#7 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 284.197150][ C0] sr 2:0:0:0: [sr0] tag#7 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 284.232634][T27581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10420'. [ 284.472855][T27613] overlay: filesystem on ./file0 is read-only [ 285.181720][T27676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10465'. [ 285.265575][T27684] macvlan0: entered promiscuous mode [ 285.617377][T27721] netlink: 'syz.3.10483': attribute type 10 has an invalid length. [ 285.697363][T27727] SELinux: security policydb version 18 (MLS) not backwards compatible [ 285.704528][T27727] SELinux: failed to load policy [ 285.894553][T27739] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10491'. [ 285.992845][T27744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10494'. [ 285.996653][T27744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10494'. [ 286.003665][T27744] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 286.008167][T27744] iwpm_mapping_info_cb: Unable to parse nlmsg [ 286.026165][T27750] netlink: 'syz.3.10496': attribute type 1 has an invalid length. [ 286.030277][T27750] netlink: 220 bytes leftover after parsing attributes in process `syz.3.10496'. [ 286.175967][T27769] overlayfs: regular lower layers cannot follow data lower layers [ 286.352956][T27789] raw_sendmsg: syz.2.10503 forgot to set AF_INET. Fix it! [ 286.465365][T27800] atomic_op ffff888034634998 conn xmit_atomic 0000000000000000 [ 286.863819][T27835] bond4: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 286.870293][T27835] bond4 (unregistering): Released all slaves [ 286.902570][T27838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10531'. [ 286.906687][T27838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10531'. [ 287.368708][T27866] openvswitch: netlink: Missing key (keys=40, expected=100) [ 287.497366][T27878] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10548'. [ 287.769056][T27897] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 287.773075][T27897] overlayfs: missing 'lowerdir' [ 287.839286][T27896] hid-generic 0003:0627:0001.0001: pid 27896 passed too large report [ 288.583296][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 288.584374][ T5984] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 289.178466][ T42] kauditd_printk_skb: 177 callbacks suppressed [ 289.178480][ T42] audit: type=1400 audit(2000000020.812:36848): avc: denied { read write } for pid=27961 comm="syz.0.10589" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 289.189690][ T42] audit: type=1400 audit(2000000020.812:36849): avc: denied { open } for pid=27961 comm="syz.0.10589" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 289.282952][ T42] audit: type=1400 audit(2000000020.905:36850): avc: denied { bpf } for pid=27963 comm="syz.0.10590" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 289.299108][ T42] audit: type=1400 audit(2000000020.905:36851): avc: denied { perfmon } for pid=27963 comm="syz.0.10590" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 289.328127][ T42] audit: type=1400 audit(2000000020.952:36852): avc: denied { read } for pid=27965 comm="syz.0.10591" dev="nsfs" ino=4026532884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 289.341907][ T42] audit: type=1400 audit(2000000020.952:36853): avc: denied { open } for pid=27965 comm="syz.0.10591" path="net:[4026532884]" dev="nsfs" ino=4026532884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 289.514900][ T42] audit: type=1400 audit(2000000021.130:36854): avc: denied { create } for pid=27973 comm="syz.0.10595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 289.525149][ T42] audit: type=1400 audit(2000000021.139:36855): avc: denied { setopt } for pid=27973 comm="syz.0.10595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 289.767037][T27986] veth1_macvtap: Device is already in use. [ 289.825275][ T42] audit: type=1400 audit(2000000021.420:36856): avc: denied { connect } for pid=27987 comm="syz.0.10602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 289.836851][ T42] audit: type=1400 audit(2000000021.429:36857): avc: denied { write } for pid=27987 comm="syz.0.10602" path="socket:[83967]" dev="sockfs" ino=83967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 289.965490][T27998] netlink: 'syz.1.10607': attribute type 1 has an invalid length. [ 289.968942][T27998] __nla_validate_parse: 3 callbacks suppressed [ 289.968959][T27998] netlink: 5120 bytes leftover after parsing attributes in process `syz.1.10607'. [ 290.334865][T28020] netlink: 'syz.1.10618': attribute type 23 has an invalid length. [ 290.527312][T28031] nftables ruleset with unbound chain [ 290.556533][T28033] comedi comedi2: dac02: I/O base address or length out of range [ 290.714289][T28043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10627'. [ 290.723478][T28043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10627'. [ 290.732452][T28043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10627'. [ 290.741987][T28043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10627'. [ 291.895145][T28071] CacheFiles: Failed to register: -95 [ 292.076975][T28085] smc: net device lo erased user defined pnetid SYZ0 [ 292.317766][T28107] Bluetooth: MGMT ver 1.23 [ 292.971682][T28151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10679'. [ 293.084577][T28157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10682'. [ 293.088498][T28157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10682'. [ 293.092984][T28157] geneve0: entered promiscuous mode [ 293.172174][T28162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10684'. [ 293.183423][T28162] macsec2: entered promiscuous mode [ 293.185862][T28162] batadv0: entered promiscuous mode [ 293.188543][T28162] macsec2: entered allmulticast mode [ 293.193414][T28162] batadv0: entered allmulticast mode [ 293.197215][T28162] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 293.202244][T28162] batadv0: left allmulticast mode [ 293.204602][T28162] batadv0: left promiscuous mode [ 293.326655][T28168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10687'. [ 293.989589][T28192] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 293.992578][T28192] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 294.002331][T28192] vhci_hcd vhci_hcd.0: Device attached [ 294.013388][T28194] vhci_hcd: connection closed [ 294.016823][ T13] vhci_hcd vhci_hcd.3: stop threads [ 294.021362][ T13] vhci_hcd vhci_hcd.3: release socket [ 294.026470][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 294.400972][T28212] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 294.536129][ T42] kauditd_printk_skb: 105 callbacks suppressed [ 294.536148][ T42] audit: type=1400 audit(2000000025.828:36963): avc: denied { write } for pid=28222 comm="syz.1.10709" name="001" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 294.538346][T28223] hub 8-0:1.0: USB hub found [ 294.554268][T28223] hub 8-0:1.0: 1 port detected [ 294.588726][ T42] audit: type=1400 audit(2000000025.865:36964): avc: denied { read } for pid=28224 comm="syz.3.10710" dev="nsfs" ino=4026533192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 294.610051][ T42] audit: type=1400 audit(2000000025.874:36965): avc: denied { open } for pid=28224 comm="syz.3.10710" path="net:[4026533192]" dev="nsfs" ino=4026533192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 294.632664][ T42] audit: type=1400 audit(2000000025.874:36966): avc: denied { read } for pid=28224 comm="syz.3.10710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 294.652782][ T42] audit: type=1400 audit(2000000025.921:36967): avc: denied { perfmon } for pid=28229 comm="syz.3.10713" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 294.670262][ T42] audit: type=1400 audit(2000000025.921:36968): avc: denied { map_read map_write } for pid=28229 comm="syz.3.10713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 294.683378][ T42] audit: type=1400 audit(2000000025.921:36969): avc: denied { create } for pid=28228 comm="syz.1.10714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 294.694624][ T42] audit: type=1400 audit(2000000025.921:36970): avc: denied { write } for pid=28228 comm="syz.1.10714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 294.715095][ T42] audit: type=1400 audit(2000000025.931:36971): avc: denied { prog_load } for pid=28229 comm="syz.3.10713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 294.725011][ T42] audit: type=1400 audit(2000000025.931:36972): avc: denied { bpf } for pid=28229 comm="syz.3.10713" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 295.386115][T28276] program syz.0.10735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.492987][T28286] __nla_validate_parse: 4 callbacks suppressed [ 295.493002][T28286] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10740'. [ 295.739550][T28309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10751'. [ 296.830748][T28378] veth0: entered promiscuous mode [ 296.835313][T28377] veth0: left promiscuous mode [ 297.090224][T28395] lo: MTU too low for tipc bearer [ 297.099684][T28395] tipc: Enabling of bearer rejected, failed to enable media [ 297.351343][T28416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10802'. [ 297.379016][T28416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10802'. [ 297.388422][T28416] netlink: 'syz.1.10802': attribute type 6 has an invalid length. [ 297.475233][ T6060] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.484747][ T6060] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.492661][ T6060] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.506061][ T6060] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 297.627480][T28433] devpts: Bad value for 'max' [ 297.946461][T28453] block nbd0: not configured, cannot reconfigure [ 298.411241][T28481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.726186][ T6091] logitech-hidpp-device 0005:046D:B012.0004: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 298.783720][T28509] fido_id[28509]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 299.334509][T28537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10856'. [ 299.338400][T28537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10856'. [ 299.342368][T28537] netlink: 'syz.3.10856': attribute type 12 has an invalid length. [ 299.406446][T28541] rdma_op ffff888035bd41f0 conn xmit_rdma 0000000000000000 [ 299.451995][T28546] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10859'. [ 299.478900][T28548] netlink: 'syz.0.10861': attribute type 2 has an invalid length. [ 299.762809][T28569] SELinux: security_context_str_to_sid (4msevS:"-XF@) failed with errno=-22 [ 299.933214][ T42] kauditd_printk_skb: 171 callbacks suppressed [ 299.933236][ T42] audit: type=1400 audit(2000000030.881:37144): avc: denied { read write } for pid=28582 comm="syz.1.10879" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 299.947089][ T42] audit: type=1400 audit(2000000030.881:37145): avc: denied { open } for pid=28582 comm="syz.1.10879" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 299.959458][ T42] audit: type=1400 audit(2000000030.890:37146): avc: denied { ioctl } for pid=28582 comm="syz.1.10879" path="/dev/sg0" dev="devtmpfs" ino=720 ioctlcmd=0x2270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 299.994012][ T42] audit: type=1400 audit(2000000030.928:37147): avc: denied { mount } for pid=28584 comm="syz.3.10880" name="/" dev="9p" ino=78395525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 300.046873][ T42] audit: type=1400 audit(2000000030.974:37148): avc: denied { write } for pid=28590 comm="syz.1.10882" name="event1" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 300.057198][ T42] audit: type=1400 audit(2000000030.974:37149): avc: denied { open } for pid=28590 comm="syz.1.10882" path="/dev/input/event1" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 300.160710][T28599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10888'. [ 300.164615][T28599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10888'. [ 300.189572][T28601] macvtap1: entered allmulticast mode [ 300.191745][T28601] bond0: entered allmulticast mode [ 300.193856][T28601] team0: entered allmulticast mode [ 300.204506][T28601] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 300.213374][T28601] bond0: left allmulticast mode [ 300.219163][T28601] team0: left allmulticast mode [ 300.359427][ T42] audit: type=1400 audit(2000000031.265:37150): avc: denied { read write } for pid=28614 comm="syz.1.10894" name="vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 300.379715][ T42] audit: type=1400 audit(2000000031.274:37151): avc: denied { open } for pid=28614 comm="syz.1.10894" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 300.389117][ T42] audit: type=1400 audit(2000000031.274:37152): avc: denied { ioctl } for pid=28614 comm="syz.1.10894" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 300.401660][ T42] audit: type=1400 audit(2000000031.274:37153): avc: denied { read write } for pid=28616 comm="syz.3.10895" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 300.623013][T28636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10902'. [ 300.627025][ T1474] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 300.725633][T28642] syz_tun: refused to change device tx_queue_len [ 300.787647][ T1474] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 300.798483][ T1474] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 300.802024][ T1474] usb 8-1: config 1 has no interface number 0 [ 300.806454][ T1474] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 300.815361][ T1474] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 300.821342][ T1474] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.830074][ T1474] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.835210][ T1474] usb 8-1: Product: syz [ 300.837027][ T1474] usb 8-1: Manufacturer: syz [ 300.843142][ T1474] usb 8-1: SerialNumber: syz [ 300.849746][T28618] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 300.878444][T28652] comedi comedi3: s526: I/O base address not correctly aligned [ 300.916460][T28656] __nla_validate_parse: 1 callbacks suppressed [ 300.916480][T28656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10913'. [ 301.083399][T28618] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 301.202116][T28681] tmpfs: Bad value for 'mpol' [ 301.277140][T28685] syz.0.10925 (28685) used obsolete PPPIOCDETACH ioctl [ 301.344943][ T1474] sierra_net 8-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 301.526261][ T1474] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71 [ 301.545695][ T1474] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71 [ 301.550138][ T1474] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71 [ 301.555836][ T1474] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71 [ 301.575470][ T1474] usb 8-1: USB disconnect, device number 8 [ 301.584055][ T1474] sierra_net 8-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 302.480188][T28705] netlink: 168 bytes leftover after parsing attributes in process `syz.3.10934'. [ 302.575239][ T1474] sierra_net 8-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 304.350763][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 304.376475][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 304.385027][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 304.391623][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 304.395213][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.873276][T28842] CUSE: info not properly terminated [ 304.964120][T28806] vcan0 speed is unknown, defaulting to 1000 [ 305.034113][T28851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11000'. [ 305.038563][T28851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11000'. [ 305.044066][T28851] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 305.200313][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.206848][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.524110][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.530628][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.716447][T28806] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.721838][T28806] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.730373][T28806] bridge_slave_0: entered allmulticast mode [ 305.735783][T28806] bridge_slave_0: entered promiscuous mode [ 305.784345][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.789663][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.805268][T28806] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.808642][T28806] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.815260][T28806] bridge_slave_1: entered allmulticast mode [ 305.821609][T28806] bridge_slave_1: entered promiscuous mode [ 305.886289][ T42] kauditd_printk_skb: 128 callbacks suppressed [ 305.886310][ T42] audit: type=1400 audit(2000000036.449:37282): avc: denied { mount } for pid=28895 comm="syz.1.11016" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 305.895750][T28806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.906000][T28806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.910939][ T42] audit: type=1400 audit(2000000036.468:37283): avc: denied { search } for pid=28895 comm="syz.1.11016" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 305.924504][ T42] audit: type=1400 audit(2000000036.468:37284): avc: denied { append } for pid=28895 comm="syz.1.11016" name="free_buffer" dev="tracefs" ino=3187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 305.934771][ T42] audit: type=1400 audit(2000000036.468:37285): avc: denied { open } for pid=28895 comm="syz.1.11016" path="/2611/tracefs_dir/free_buffer" dev="tracefs" ino=3187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 305.972897][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.980913][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.007996][T28806] team0: Port device team_slave_0 added [ 306.017928][T28806] team0: Port device team_slave_1 added [ 306.034173][ T42] audit: type=1400 audit(2000000036.589:37286): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=33726 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 306.053932][ T42] audit: type=1400 audit(2000000036.599:37287): avc: denied { unmount } for pid=5986 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 306.092192][ T42] audit: type=1400 audit(2000000036.636:37288): avc: denied { create } for pid=28900 comm="syz.1.11018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 306.093729][T28806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.101833][T28806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.105004][ T42] audit: type=1400 audit(2000000036.645:37289): avc: denied { setopt } for pid=28900 comm="syz.1.11018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 306.114161][T28806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.125159][T28806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.127812][T28806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.139078][T28806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.144312][ T42] audit: type=1400 audit(2000000036.692:37290): avc: denied { write } for pid=28903 comm="syz.1.11020" name="packet" dev="proc" ino=4026533184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 306.167612][ T42] audit: type=1400 audit(2000000036.711:37291): avc: denied { create } for pid=28905 comm="syz.0.11021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 306.202213][T28806] hsr_slave_0: entered promiscuous mode [ 306.207305][T28806] hsr_slave_1: entered promiscuous mode [ 306.211418][T28806] debugfs: 'hsr0' already exists in 'hsr' [ 306.220916][T28806] Cannot create hsr debugfs directory [ 306.253830][T28910] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 306.374410][T28922] UHID_CREATE from different security context by process 5755 (syz.0.11029), this is not allowed. [ 306.623056][ T5984] Bluetooth: hci4: command tx timeout [ 306.892720][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.921115][ T13] bond_slave_1: left promiscuous mode [ 306.924620][ T13] bond0 (unregistering): Released all slaves [ 306.938380][ T13] bond1 (unregistering): Released all slaves [ 306.950748][ T13] bond2 (unregistering): Released all slaves [ 306.964583][ T13] bond3 (unregistering): Released all slaves [ 306.977211][ T13] bond4 (unregistering): Released all slaves [ 306.990630][ T13] bond5 (unregistering): Released all slaves [ 307.004489][ T13] bond6 (unregistering): Released all slaves [ 307.021713][ T13] bond7 (unregistering): Released all slaves [ 307.062257][T28949] vlan3: entered allmulticast mode [ 307.064687][T28949] bond0: entered allmulticast mode [ 307.079346][ T5437] 8021q: adding VLAN 0 to HW filter on device eth2 [ 307.240680][T28806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 307.249378][T28806] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 307.273400][T28806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 307.297025][T28806] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 307.301125][T28806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 307.327571][T28806] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 307.328645][T28806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 307.369985][T28806] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 307.436165][T28975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11048'. [ 307.535001][T28981] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.11050'. [ 307.556107][T28806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.569200][T28806] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.591691][T28984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11051'. [ 307.657313][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.660254][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.703423][ T5437] 8021q: adding VLAN 0 to HW filter on device eth3 [ 307.714500][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.717137][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.004825][ T5437] 8021q: adding VLAN 0 to HW filter on device eth4 [ 308.148562][T29035] xt_hashlimit: max too large, truncated to 1048576 [ 308.203829][T29043] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 308.228317][T29045] nbd: socks must be embedded in a SOCK_ITEM attr [ 308.488207][T28806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.497537][ T5437] 8021q: adding VLAN 0 to HW filter on device eth5 [ 308.769749][ T6074] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 308.844136][ T5984] Bluetooth: hci4: command tx timeout [ 308.944875][T28806] veth0_vlan: entered promiscuous mode [ 308.954316][T28806] veth1_vlan: entered promiscuous mode [ 309.064497][T28806] veth0_macvtap: entered promiscuous mode [ 309.088981][T28806] veth1_macvtap: entered promiscuous mode [ 309.119485][T28806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.155608][T28806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.264339][ T13] hsr_slave_0: left promiscuous mode [ 309.270482][ T13] hsr_slave_1: left promiscuous mode [ 309.274318][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.277754][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.286793][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.289980][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.302162][ T13] veth1_macvtap: left allmulticast mode [ 309.305032][ T13] veth0_macvtap: left promiscuous mode [ 309.308096][ T13] veth1_vlan: left promiscuous mode [ 309.313061][ T13] veth0_vlan: left promiscuous mode [ 309.712916][ T6060] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.805343][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.809586][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.810415][T29121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11095'. [ 309.824414][T29121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11095'. [ 309.890550][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.891213][ T6060] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.894304][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.924137][ T5977] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.937174][ T5977] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.945181][T29125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11096'. [ 310.379051][T29157] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11107'. [ 310.388202][T29157] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 310.688708][T29185] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11116'. [ 310.692799][T29185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11116'. [ 310.837495][T29193] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11120'. [ 311.015838][T29202] netlink: 'syz.3.11126': attribute type 20 has an invalid length. [ 311.066570][ T5984] Bluetooth: hci4: command tx timeout [ 311.268242][ T42] kauditd_printk_skb: 269 callbacks suppressed [ 311.268259][ T42] audit: type=1400 audit(2000000041.474:37561): avc: denied { allowed } for pid=29223 comm="syz.1.11134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 311.295008][ T42] audit: type=1400 audit(2000000041.484:37562): avc: denied { read write } for pid=28806 comm="syz-executor" name="loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 311.303793][ T42] audit: type=1400 audit(2000000041.484:37563): avc: denied { open } for pid=28806 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 311.312146][ T42] audit: type=1400 audit(2000000041.484:37564): avc: denied { ioctl } for pid=28806 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 311.321496][ T42] audit: type=1400 audit(2000000041.502:37565): avc: denied { create } for pid=29223 comm="syz.1.11134" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 311.328647][ T42] audit: type=1400 audit(2000000041.502:37566): avc: denied { map } for pid=29223 comm="syz.1.11134" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=88019 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 311.344598][ T42] audit: type=1400 audit(2000000041.502:37567): avc: denied { read write } for pid=29223 comm="syz.1.11134" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=88019 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 311.407273][ T42] audit: type=1400 audit(2000000041.605:37568): avc: denied { create } for pid=29233 comm="syz.3.11138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 311.418115][ T42] audit: type=1400 audit(2000000041.615:37569): avc: denied { ioctl } for pid=29233 comm="syz.3.11138" path="socket:[89307]" dev="sockfs" ino=89307 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 311.427305][ T42] audit: type=1400 audit(2000000041.624:37570): avc: denied { setopt } for pid=29233 comm="syz.3.11138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 311.805382][T29273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.135164][T29388] hugetlbfs: Bad value for 'uid' [ 313.137595][T29388] hugetlbfs: Bad value for 'uid' [ 313.289974][ T5984] Bluetooth: hci4: command tx timeout [ 313.594348][T29434] __nla_validate_parse: 5 callbacks suppressed [ 313.594368][T29434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11231'. [ 313.734923][T29450] bond10: (slave batadv0): Device is not bonding slave [ 313.745593][T29450] bond10: option active_slave: invalid value (batadv0) [ 313.760392][T29450] bond10 (unregistering): Released all slaves [ 313.957401][T29470] 0x000000000003-0x000000000005 : "" [ 313.986499][T29470] ftl_cs: FTL header corrupt! [ 314.341397][T29488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11254'. [ 314.534163][T29500] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11260'. [ 314.975054][T29545] program syz.4.11282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.021579][T29549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11285'. [ 315.057590][T29555] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 315.089649][T29559] kAFS: unable to lookup cell '(,c' [ 315.202433][T29566] netlink: 277 bytes leftover after parsing attributes in process `syz.0.11292'. [ 315.459563][T29584] bond1: option xmit_hash_policy: invalid value (6) [ 315.467156][T29584] bond1 (unregistering): Released all slaves [ 315.479580][T29589] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 315.484429][T29590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11300'. [ 315.489411][T29590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11300'. [ 315.489488][T29589] overlayfs: missing 'lowerdir' [ 315.512003][ T5984] Bluetooth: hci4: command tx timeout [ 315.579123][T29594] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 315.787374][T29611] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 315.974694][T29630] CIFS: Attempting to mount //127.0.0.1/share [ 315.977995][T29630] CIFS: VFS: Error connecting to socket. Aborting operation. [ 315.980468][T29630] CIFS: VFS: cifs_mount failed w/return code = -111 [ 316.182217][T29649] 9p: p9: multiple sources not supported [ 316.405022][ T5583] IPVS: starting estimator thread 0... [ 316.505895][T29670] IPVS: using max 33 ests per chain, 79200 per kthread [ 316.802293][ T42] kauditd_printk_skb: 204 callbacks suppressed [ 316.802306][ T42] audit: type=1400 audit(2000000046.658:37775): avc: denied { read } for pid=5437 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 316.815417][ T42] audit: type=1400 audit(2000000046.668:37776): avc: denied { search } for pid=5437 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.825936][ T42] audit: type=1400 audit(2000000046.668:37777): avc: denied { search } for pid=5437 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.836074][ T42] audit: type=1400 audit(2000000046.668:37778): avc: denied { search } for pid=5437 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.845527][ T42] audit: type=1400 audit(2000000046.668:37779): avc: denied { read } for pid=5437 comm="dhcpcd" name="n57" dev="tmpfs" ino=22802 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 316.855743][ T42] audit: type=1400 audit(2000000046.677:37780): avc: denied { open } for pid=5437 comm="dhcpcd" path="/run/udev/data/n57" dev="tmpfs" ino=22802 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 316.876848][ T42] audit: type=1400 audit(2000000046.677:37781): avc: denied { getattr } for pid=5437 comm="dhcpcd" path="/run/udev/data/n57" dev="tmpfs" ino=22802 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 316.896005][T29714] tmpfs: Bad value for 'mpol' [ 316.900034][ T42] audit: type=1400 audit(2000000046.687:37782): avc: denied { recv } for pid=5702 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=33726 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 316.911166][ T42] audit: type=1400 audit(2000000046.724:37783): avc: denied { read write } for pid=5986 comm="syz-executor" name="loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.921788][ T42] audit: type=1400 audit(2000000046.724:37784): avc: denied { open } for pid=5986 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.997349][T29725] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 316.997349][T29725] program syz.3.11364 not setting count and/or reply_len properly [ 317.048791][T29730] overlayfs: conflicting lowerdir path [ 317.438656][T29775] netlink: 'syz.0.11384': attribute type 2 has an invalid length. [ 317.454497][T29775] : entered promiscuous mode [ 317.558947][T29786] netlink: 'syz.0.11389': attribute type 25 has an invalid length. [ 317.616467][T29794] netlink: 'syz.3.11395': attribute type 1 has an invalid length. [ 317.616490][T29794] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11395'. [ 318.064696][T29836] bridge0: port 1() entered blocking state [ 318.076725][T29836] bridge0: port 1() entered disabled state [ 318.079479][T29836] netdevsim netdevsim1 : entered allmulticast mode [ 318.097949][T29837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11415'. [ 318.106540][T29837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11415'. [ 318.651630][T29895] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 319.293199][T29938] __nla_validate_parse: 4 callbacks suppressed [ 319.293212][T29938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11462'. [ 319.611363][T29958] autofs: Bad value for 'fd' [ 319.717382][T29968] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 319.726809][T29969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11477'. [ 319.732541][T29969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11477'. [ 319.738346][T29969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11477'. [ 319.741778][T29969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11477'. [ 319.745824][T29969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11477'. [ 319.780330][T29973] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11479'. [ 319.813695][T29976] netlink: 'syz.0.11480': attribute type 21 has an invalid length. [ 319.816495][T29976] IPv6: NLM_F_CREATE should be specified when creating new route [ 319.820195][T29976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.822681][T29976] IPv6: NLM_F_CREATE should be set when creating new route [ 319.825029][T29976] IPv6: NLM_F_CREATE should be set when creating new route [ 319.827393][T29976] IPv6: NLM_F_CREATE should be set when creating new route [ 319.831454][T29976] netlink: 'syz.0.11480': attribute type 21 has an invalid length. [ 319.834071][T29976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.860648][T29980] program syz.4.11483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.962652][T29993] mmap: syz.1.11489 (29993): VmData 37400576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 320.195682][T30017] scsi_nl_rcv_msg: discarding partial skb [ 320.233337][T30021] nbd: must specify a size in bytes for the device [ 320.605714][T30049] nftables ruleset with unbound set [ 321.088347][T30098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11536'. [ 321.097588][T30098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11536'. [ 321.103602][T30098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11536'. [ 321.207252][T30113] netlink: 'syz.4.11542': attribute type 1 has an invalid length. [ 321.607685][T30164] ip_tables: iptables: counters copy to user failed while replacing table [ 321.805261][T30191] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 321.953553][T30211] netlink: Setting conntrack mark requires 'commit' flag. [ 321.959735][T30211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.210583][ T42] kauditd_printk_skb: 261 callbacks suppressed [ 322.210600][ T42] audit: type=1400 audit(2000000051.721:38046): avc: denied { read write } for pid=30228 comm="syz.1.11595" name="ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 322.234072][ T42] audit: type=1400 audit(2000000051.721:38047): avc: denied { open } for pid=30228 comm="syz.1.11595" path="/dev/ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 322.253183][ T42] audit: type=1400 audit(2000000051.759:38048): avc: denied { prog_load } for pid=30231 comm="syz.0.11597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 322.276240][ T42] audit: type=1400 audit(2000000051.768:38049): avc: denied { allowed } for pid=30231 comm="syz.0.11597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 322.313884][ T42] audit: type=1400 audit(2000000051.815:38050): avc: denied { read write } for pid=30236 comm="syz.0.11599" name="video0" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 322.332502][ T42] audit: type=1400 audit(2000000051.815:38051): avc: denied { open } for pid=30236 comm="syz.0.11599" path="/dev/video0" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 322.350416][ T42] audit: type=1400 audit(2000000051.815:38052): avc: denied { ioctl } for pid=30236 comm="syz.0.11599" path="/dev/video0" dev="devtmpfs" ino=954 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 322.422819][ T42] audit: type=1400 audit(2000000051.918:38053): avc: denied { read } for pid=30240 comm="syz.1.11601" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 322.424247][T30241] program syz.1.11601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.441332][ T42] audit: type=1400 audit(2000000051.918:38054): avc: denied { open } for pid=30240 comm="syz.1.11601" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 322.452789][ T42] audit: type=1400 audit(2000000051.936:38055): avc: denied { read } for pid=30242 comm="syz.3.11603" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 322.665816][T30268] xt_hashlimit: size too large, truncated to 1048576 [ 323.329751][T27205] udevd[27205]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 323.486413][T30371] loop4: detected capacity change from 0 to 7 [ 323.536691][T30371] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 323.538613][T30371] loop4: partition table partially beyond EOD, truncated [ 323.542633][T30371] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 323.589855][T27205] udevd[27205]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 323.757456][T30393] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 323.782981][ T1349] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 323.792277][T30395] program syz.3.11670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.945142][ T1349] usb 6-1: Using ep0 maxpacket: 32 [ 323.954623][ T1349] usb 6-1: unable to get BOS descriptor or descriptor too short [ 323.957910][ T1349] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 323.970972][ T1349] usb 6-1: string descriptor 0 read error: -22 [ 323.973224][ T1349] usb 6-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 323.982867][ T1349] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 323.988075][ T1349] dw2102: su3000_power_ctrl: 1, initialized 0 [ 323.996082][ T1349] dvb-usb: bulk message failed: -22 (2/0) [ 324.010536][ T1349] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 324.014387][ T1349] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 324.020386][ T1349] usb 6-1: media controller created [ 324.022260][ T1349] dvb-usb: bulk message failed: -22 (6/0) [ 324.025967][ T1349] dw2102: i2c transfer failed. [ 324.027741][ T1349] dvb-usb: bulk message failed: -22 (6/0) [ 324.033254][ T1349] dw2102: i2c transfer failed. [ 324.036200][ T1349] dvb-usb: bulk message failed: -22 (6/0) [ 324.038302][ T1349] dw2102: i2c transfer failed. [ 324.042395][ T1349] dvb-usb: bulk message failed: -22 (6/0) [ 324.044324][ T1349] dw2102: i2c transfer failed. [ 324.045896][ T1349] dvb-usb: bulk message failed: -22 (6/0) [ 324.047689][ T1349] dw2102: i2c transfer failed. [ 324.049338][ T1349] dvb-usb: bulk message failed: -22 (6/0) [ 324.052384][ T1349] dw2102: i2c transfer failed. [ 324.054437][ T1349] dvb-usb: MAC address: 02:02:02:02:02:02 [ 324.077614][ T1349] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 324.115803][ T1349] dvb-usb: bulk message failed: -22 (3/0) [ 324.120129][ T1349] dw2102: command 0x0e transfer failed. [ 324.124625][ T1349] dvb-usb: bulk message failed: -22 (3/0) [ 324.127839][ T1349] dw2102: command 0x0e transfer failed. [ 324.460980][ T1349] dvb-usb: bulk message failed: -22 (3/0) [ 324.463921][ T1349] dw2102: command 0x0e transfer failed. [ 324.471394][ T1349] dvb-usb: bulk message failed: -22 (3/0) [ 324.482234][ T1349] dw2102: command 0x0e transfer failed. [ 324.487311][ T1349] dvb-usb: bulk message failed: -22 (1/0) [ 324.493056][ T1349] dw2102: command 0x51 transfer failed. [ 324.508082][T30375] dvb-usb: bulk message failed: -22 (4/0) [ 324.513471][T30375] dw2102: i2c transfer failed. [ 324.557737][ T1349] DVB: Unable to find symbol ds3000_attach() [ 324.560457][ T1349] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 324.627201][ T1349] rc_core: IR keymap rc-su3000 not found [ 324.631203][ T1349] Registered IR keymap rc-empty [ 324.634780][ T1349] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 324.641240][ T1349] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input30 [ 324.646261][ T1349] dvb-usb: schedule remote query interval to 150 msecs. [ 324.648706][ T1349] dw2102: su3000_power_ctrl: 0, initialized 1 [ 324.650646][ T1349] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 324.657533][ T1349] usb 6-1: USB disconnect, device number 9 [ 324.700649][T30449] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 324.810559][ T1349] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 325.144836][T30471] netlink: 'syz.1.11705': attribute type 1 has an invalid length. [ 325.146648][T30472] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 325.149933][T30472] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 325.154396][T30472] cramfs: wrong magic [ 326.006146][T30539] tipc: Started in network mode [ 326.010507][T30539] tipc: Node identity 4004, cluster identity 4711 [ 326.013491][T30539] tipc: Node number set to 16388 [ 326.493000][T30584] __nla_validate_parse: 13 callbacks suppressed [ 326.493019][T30584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11754'. [ 326.553283][T30590] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11757'. [ 327.342134][T30625] program syz.3.11774 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 327.672005][ T42] kauditd_printk_skb: 247 callbacks suppressed [ 327.672030][ T42] audit: type=1400 audit(2000000056.831:38303): avc: denied { perfmon } for pid=30649 comm="syz.0.11786" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 327.685564][ T42] audit: type=1400 audit(2000000056.840:38304): avc: denied { prog_load } for pid=30649 comm="syz.0.11786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 327.705493][ T42] audit: type=1400 audit(2000000056.868:38305): avc: denied { prog_run } for pid=30649 comm="syz.0.11786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 327.736639][ T42] audit: type=1400 audit(2000000056.887:38306): avc: denied { read } for pid=30655 comm="syz.1.11789" dev="nsfs" ino=4026532904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 327.755130][ T42] audit: type=1400 audit(2000000056.887:38307): avc: denied { open } for pid=30655 comm="syz.1.11789" path="net:[4026532904]" dev="nsfs" ino=4026532904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 327.816795][T30664] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 327.821393][ T42] audit: type=1400 audit(2000000056.971:38308): avc: denied { mac_admin } for pid=30663 comm="syz.3.11793" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 327.832686][ T42] audit: type=1400 audit(2000000056.980:38309): avc: denied { wake_alarm } for pid=30665 comm="syz.1.11794" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 327.841485][ T42] audit: type=1400 audit(2000000056.980:38310): avc: denied { relabelto } for pid=30663 comm="syz.3.11793" name="2896" dev="tmpfs" ino=14580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 327.852181][ T42] audit: type=1400 audit(2000000056.980:38311): avc: denied { associate } for pid=30663 comm="syz.3.11793" name="2896" dev="tmpfs" ino=14580 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0" [ 327.865407][ T42] audit: type=1400 audit(2000000056.999:38312): avc: denied { write } for pid=5993 comm="syz-executor" name="2896" dev="tmpfs" ino=14580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 327.939389][T30678] netlink: 'syz.1.11800': attribute type 2 has an invalid length. [ 327.945097][T30678] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11800'. [ 328.001440][T30684] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 328.056138][T30693] EXT4-fs: Conflicting test_dummy_encryption options [ 328.137686][T30705] netlink: 140 bytes leftover after parsing attributes in process `syz.0.11812'. [ 328.141275][T30705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11812'. [ 328.185326][T30713] netlink: 'syz.0.11817': attribute type 322 has an invalid length. [ 328.298175][T30727] gfs2: path_lookup on c::: returned error -2 [ 328.341609][T30731] vlan2: entered allmulticast mode [ 328.344067][T30731] bridge_slave_0: entered allmulticast mode [ 328.875678][T30784] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 329.237365][T30821] support for cryptoloop has been removed. Use dm-crypt instead. [ 330.057958][T30885] lo: entered allmulticast mode [ 330.060815][T30885] bond0: entered allmulticast mode [ 330.063762][T30885] dummy0: entered allmulticast mode [ 330.070309][T30885] eql: entered allmulticast mode [ 330.073006][T30885] ifb0: entered allmulticast mode [ 330.075618][T30885] ifb1: entered allmulticast mode [ 330.082889][T30885] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 330.090785][T30885] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 330.096300][T30885] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 330.100059][T30885] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 330.103381][T30885] hwsim0: entered allmulticast mode [ 330.106095][T30885] ieee802154 phy0 wpan0: entered allmulticast mode [ 330.109807][T30885] ieee802154 phy1 wpan1: entered allmulticast mode [ 330.113164][T30885] teql0: entered allmulticast mode [ 330.115506][T30885] tunl0: entered allmulticast mode [ 330.117858][T30885] gre0: entered allmulticast mode [ 330.121438][T30885] gretap0: entered allmulticast mode [ 330.123879][T30885] erspan0: entered allmulticast mode [ 330.126669][T30885] ip_vti0: entered allmulticast mode [ 330.129369][T30885] ip6_vti0: entered allmulticast mode [ 330.132405][T30885] sit0: entered allmulticast mode [ 330.135169][T30885] ip6tnl0: entered allmulticast mode [ 330.137818][T30885] ip6gre0: entered allmulticast mode [ 330.140224][T30885] lapb0: entered allmulticast mode [ 330.144004][T30885] lapb1: entered allmulticast mode [ 330.147070][T30885] lapb2: entered allmulticast mode [ 330.149704][T30885] lapb3: entered allmulticast mode [ 330.152940][T30885] lapb4: entered allmulticast mode [ 330.156504][T30885] lapb5: entered allmulticast mode [ 330.161282][T30885] lapb6: entered allmulticast mode [ 330.166598][T30885] lowpan0: entered allmulticast mode [ 330.169118][T30885] macsec0: entered allmulticast mode [ 330.171270][T30885] veth1_macvtap: entered allmulticast mode [ 330.176392][T30885] lapb7: entered allmulticast mode [ 330.179104][T30885] ieee802154 phy2 wpan2: entered allmulticast mode [ 330.181897][T30885] vcan0: entered allmulticast mode [ 330.185541][T30885] lapb9: entered allmulticast mode [ 330.188164][T30885] netdevsim netdevsim2 eth2: entered allmulticast mode [ 330.195224][T30885] netdevsim netdevsim2 eth3: entered allmulticast mode [ 330.198910][T30885] netdevsim netdevsim2 eth4: entered allmulticast mode [ 330.202524][T30885] netdevsim netdevsim2 eth5: entered allmulticast mode [ 330.206777][T30885] wireguard0: entered allmulticast mode [ 330.279383][T30893] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 330.283706][T30893] ALSA: mixer_oss: invalid index 137438 [ 331.107177][T30906] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11907'. [ 331.128274][T30912] netlink: 'syz.4.11908': attribute type 12 has an invalid length. [ 331.172593][T30916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11911'. [ 331.176474][T30916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11911'. [ 331.224452][T30924] F2FS-fs: Conflicting test_dummy_encryption options [ 331.470791][T30956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11930'. [ 331.620858][T30972] netlink: 'syz.4.11937': attribute type 1 has an invalid length. [ 331.624243][T30972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11937'. [ 331.842194][T30981] netlink: 348 bytes leftover after parsing attributes in process `syz.4.11941'. [ 332.184431][T30990] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11946'. [ 332.229016][T30995] IPVS: Error connecting to the multicast addr [ 332.292091][T31003] netlink: Invalid conntrack timeout [ 332.316036][T31003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.324691][T31007] netlink: 'syz.4.11953': attribute type 4 has an invalid length. [ 332.328308][T31007] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11953'. [ 332.407853][T31018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11959'. [ 332.411850][T31018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11959'. [ 332.804172][T31068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11983'. [ 332.842943][T31074] trusted_key: encrypted_key: key trusted:syz not found [ 332.878342][T31081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11989'. [ 332.887269][T31081] netlink: 256 bytes leftover after parsing attributes in process `syz.1.11989'. [ 332.937174][T31085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.056942][ T42] kauditd_printk_skb: 158 callbacks suppressed [ 333.056958][ T42] audit: type=1400 audit(2000000061.865:38471): avc: denied { write } for pid=31096 comm="syz.4.11997" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 333.168937][ T42] audit: type=1400 audit(2000000061.978:38472): avc: denied { create } for pid=31110 comm="syz.3.12004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 333.178927][ T1126] ata1.00: exception Emask 0x0 SAct 0x1000000 SErr 0x0 action 0x6 [ 333.182399][ T1126] ata1.00: waking up from sleep [ 333.184641][ T42] audit: type=1400 audit(2000000061.978:38473): avc: denied { read } for pid=31110 comm="syz.3.12004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 333.195039][ T1126] ata1: hard resetting link [ 333.223879][ T42] audit: type=1400 audit(2000000062.024:38474): avc: denied { listen } for pid=31117 comm="syz.3.12008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 333.232197][ T42] audit: type=1400 audit(2000000062.024:38475): avc: denied { connect } for pid=31117 comm="syz.3.12008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 333.312583][T31130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12012'. [ 333.316567][ T42] audit: type=1400 audit(2000000062.118:38476): avc: denied { mount } for pid=31126 comm="syz.1.12013" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 333.340893][ T42] audit: type=1400 audit(2000000062.137:38477): avc: denied { unmount } for pid=5986 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 333.366445][ T42] audit: type=1400 audit(2000000062.155:38478): avc: denied { read } for pid=31131 comm="syz.1.12014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 333.412496][T31136] netlink: 'syz.0.12016': attribute type 11 has an invalid length. [ 333.425264][ T42] audit: type=1400 audit(2000000062.211:38479): avc: denied { write } for pid=31131 comm="syz.1.12014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 333.514835][T31141] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 333.528619][T31141] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 333.542279][ T1126] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 333.546459][ T42] audit: type=1400 audit(2000000062.324:38480): avc: denied { read } for pid=31149 comm="syz.3.12022" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 333.556993][ T1126] ata1.00: configured for UDMA/100 [ 333.557235][ T1126] ata1: EH complete [ 333.695242][T31160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12028'. [ 334.152938][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 334.155572][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.308988][ T1474] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 334.391215][ T5977] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.469075][ T1474] usb 6-1: Using ep0 maxpacket: 32 [ 334.473170][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.477212][ T1474] usb 6-1: unable to get BOS descriptor or descriptor too short [ 334.486147][ T1474] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 334.486953][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.493086][ T1474] usb 6-1: string descriptor 0 read error: -22 [ 334.495035][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.495196][ T1474] usb 6-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 334.498470][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.512865][ T1474] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 334.515559][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.522050][ T1474] dw2102: su3000_power_ctrl: 1, initialized 0 [ 334.527360][ T1474] dvb-usb: bulk message failed: -22 (2/0) [ 334.553859][ T1474] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 334.594347][ T1474] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 334.598050][ T1474] usb 6-1: media controller created [ 334.600576][ T1474] dvb-usb: bulk message failed: -22 (6/0) [ 334.603135][ T1474] dw2102: i2c transfer failed. [ 334.604415][ T5977] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.605128][ T1474] dvb-usb: bulk message failed: -22 (6/0) [ 334.605168][ T1474] dw2102: i2c transfer failed. [ 334.605204][ T1474] dvb-usb: bulk message failed: -22 (6/0) [ 334.605215][ T1474] dw2102: i2c transfer failed. [ 334.605227][ T1474] dvb-usb: bulk message failed: -22 (6/0) [ 334.605237][ T1474] dw2102: i2c transfer failed. [ 334.605246][ T1474] dvb-usb: bulk message failed: -22 (6/0) [ 334.605254][ T1474] dw2102: i2c transfer failed. [ 334.605263][ T1474] dvb-usb: bulk message failed: -22 (6/0) [ 334.605275][ T1474] dw2102: i2c transfer failed. [ 334.605282][ T1474] dvb-usb: MAC address: 02:02:02:02:02:02 [ 334.616812][ T1474] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.665487][ T1474] dvb-usb: bulk message failed: -22 (3/0) [ 334.671980][ T1474] dw2102: command 0x0e transfer failed. [ 334.680357][ T1474] dvb-usb: bulk message failed: -22 (3/0) [ 334.683683][ T1474] dw2102: command 0x0e transfer failed. [ 334.696289][T31208] netlink: 'syz.3.12050': attribute type 3 has an invalid length. [ 334.774133][ T5977] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.850212][T31196] vcan0 speed is unknown, defaulting to 1000 [ 334.929618][T31222] netlink: 'syz.3.12055': attribute type 1 has an invalid length. [ 334.932836][T31222] netlink: 'syz.3.12055': attribute type 1 has an invalid length. [ 334.978295][ T5977] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.016068][ T1474] dvb-usb: bulk message failed: -22 (3/0) [ 335.018588][ T1474] dw2102: command 0x0e transfer failed. [ 335.020897][ T1474] dvb-usb: bulk message failed: -22 (3/0) [ 335.023241][ T1474] dw2102: command 0x0e transfer failed. [ 335.026120][ T1474] dvb-usb: bulk message failed: -22 (1/0) [ 335.029147][ T1474] dw2102: command 0x51 transfer failed. [ 335.031583][T31194] dvb-usb: bulk message failed: -22 (5/0) [ 335.036611][T31194] dw2102: i2c transfer failed. [ 335.068860][ T1474] DVB: Unable to find symbol ds3000_attach() [ 335.072040][ T1474] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 335.131522][ T1474] rc_core: IR keymap rc-su3000 not found [ 335.133902][ T1474] Registered IR keymap rc-empty [ 335.137337][ T1474] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 335.152334][ T1474] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input31 [ 335.164250][ T1474] dvb-usb: schedule remote query interval to 150 msecs. [ 335.169279][ T1474] dw2102: su3000_power_ctrl: 0, initialized 1 [ 335.172198][ T1474] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 335.182039][ T1474] usb 6-1: USB disconnect, device number 10 [ 335.337491][ T5977] bridge_slave_1: left allmulticast mode [ 335.339687][ T5977] bridge_slave_1: left promiscuous mode [ 335.340433][ T1474] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 335.346849][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.360325][ T5977] bridge_slave_0: left allmulticast mode [ 335.362594][ T5977] bridge_slave_0: left promiscuous mode [ 335.367117][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.627544][ T5977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.658805][ T5977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.699757][ T5977] bond0 (unregistering): Released all slaves [ 335.743942][T31196] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.747233][T31196] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.751814][T31196] bridge_slave_0: entered allmulticast mode [ 335.756358][T31196] bridge_slave_0: entered promiscuous mode [ 335.768239][T31196] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.771629][T31196] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.775759][T31196] bridge_slave_1: entered allmulticast mode [ 335.780528][T31196] bridge_slave_1: entered promiscuous mode [ 335.843595][T31196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.852909][T31196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.880405][T31196] team0: Port device team_slave_0 added [ 335.885499][T31196] team0: Port device team_slave_1 added [ 335.915705][T31196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.918754][T31196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.930045][T31196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.937710][T31196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.940856][T31196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.951944][T31196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.051158][T31196] hsr_slave_0: entered promiscuous mode [ 336.054015][T31196] hsr_slave_1: entered promiscuous mode [ 336.056652][T31196] debugfs: 'hsr0' already exists in 'hsr' [ 336.058833][T31196] Cannot create hsr debugfs directory [ 336.180368][ T5437] 8021q: adding VLAN 0 to HW filter on device eth6 [ 336.442339][T31261] team0: Port device xfrm0 added [ 336.616617][T31269] can0: slcan on ttynull. [ 336.625986][ T5977] hsr_slave_0: left promiscuous mode [ 336.632265][ T5977] hsr_slave_1: left promiscuous mode [ 336.634862][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.637903][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.642308][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.645006][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.658298][ T5977] veth1_macvtap: left promiscuous mode [ 336.660547][ T5977] veth0_macvtap: left promiscuous mode [ 336.662712][ T5977] veth1_vlan: left promiscuous mode [ 336.664524][ T5977] veth0_vlan: left promiscuous mode [ 336.713117][ T5984] Bluetooth: hci0: command tx timeout [ 336.866972][ T5977] team0 (unregistering): Port device team_slave_1 removed [ 336.878039][ T5977] team0 (unregistering): Port device team_slave_0 removed [ 336.979539][ T5437] 8021q: adding VLAN 0 to HW filter on device eth7 [ 337.016176][T31196] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 337.022692][T31196] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 337.026030][T31196] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 337.030171][T31196] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 337.033997][T31196] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 337.040993][T31196] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 337.044479][T31196] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 337.050783][T31196] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 337.112300][T31268] can0 (unregistered): slcan off ttynull. [ 337.120327][T31196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.138626][T31196] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.151321][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.154248][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.184007][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.186422][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.293068][ T5437] 8021q: adding VLAN 0 to HW filter on device eth8 [ 337.535464][ T5437] 8021q: adding VLAN 0 to HW filter on device eth9 [ 337.543217][T31314] CUSE: unknown device info "" [ 337.545415][T31314] CUSE: unknown device info "" [ 337.556423][T31314] CUSE: unknown device info "" [ 337.561038][T31314] CUSE: unknown device info "" [ 337.563317][T31314] CUSE: zero length info key specified [ 337.567554][T31196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.782048][T31196] veth0_vlan: entered promiscuous mode [ 337.805426][T31196] veth1_vlan: entered promiscuous mode [ 337.833230][T31196] veth0_macvtap: entered promiscuous mode [ 337.840792][T31196] veth1_macvtap: entered promiscuous mode [ 337.863049][T31196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.877446][T31196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.900234][ T5977] IPVS: stop unused estimator thread 0... [ 337.914659][ T5926] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.964658][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.968514][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.013893][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.017431][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.043699][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.046724][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.081920][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.330371][T31377] __nla_validate_parse: 2 callbacks suppressed [ 338.330391][T31377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12100'. [ 338.337618][T31377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12100'. [ 338.354308][T31382] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 338.435982][ T42] kauditd_printk_skb: 183 callbacks suppressed [ 338.436000][ T42] audit: type=1400 audit(2000000066.909:38664): avc: denied { read } for pid=31387 comm="syz.0.12105" dev="nsfs" ino=4026532884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 338.451905][T31388] Bluetooth: MGMT ver 1.23 [ 338.465559][ T42] audit: type=1400 audit(2000000066.909:38665): avc: denied { create } for pid=31385 comm="syz.5.12104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 338.479912][ T42] audit: type=1400 audit(2000000066.919:38666): avc: denied { open } for pid=31387 comm="syz.0.12105" path="net:[4026532884]" dev="nsfs" ino=4026532884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 338.492363][T31392] CIFS mount error: No usable UNC path provided in device string! [ 338.492363][T31392] [ 338.502893][T31392] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 338.505016][ T42] audit: type=1400 audit(2000000066.919:38667): avc: denied { bind } for pid=31385 comm="syz.5.12104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 338.515426][ T42] audit: type=1400 audit(2000000066.919:38668): avc: denied { setopt } for pid=31385 comm="syz.5.12104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 338.523738][ T42] audit: type=1400 audit(2000000066.919:38669): avc: denied { bind } for pid=31387 comm="syz.0.12105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 338.532489][ T42] audit: type=1400 audit(2000000066.919:38670): avc: denied { write } for pid=31387 comm="syz.0.12105" path="socket:[97757]" dev="sockfs" ino=97757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 338.544042][ T42] audit: type=1400 audit(2000000066.947:38671): avc: denied { map_create } for pid=31389 comm="syz.1.12106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 338.553820][ T42] audit: type=1400 audit(2000000066.965:38672): avc: denied { map_read map_write } for pid=31389 comm="syz.1.12106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 338.567468][ T42] audit: type=1400 audit(2000000067.021:38673): avc: denied { unmount } for pid=5985 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 338.809027][T31417] bad cache= option: none [ 338.809027][T31417] [ 338.812334][T31417] CIFS: VFS: bad cache= option: none [ 338.914753][T31427] vcan0 speed is unknown, defaulting to 1000 [ 338.937541][ T5984] Bluetooth: hci0: command tx timeout [ 338.968207][ T5583] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 339.141778][ T5583] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 339.153025][ T5583] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.159422][ T5583] usb 6-1: Product: syz [ 339.161567][ T5583] usb 6-1: Manufacturer: syz [ 339.164414][ T5583] usb 6-1: SerialNumber: syz [ 339.189880][ T5583] usb 6-1: config 0 descriptor?? [ 339.422089][ T5583] usb 6-1: USB disconnect, device number 11 [ 339.986912][T31487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12148'. [ 340.474082][T31534] vivid-000: disconnect [ 340.478007][T31533] vivid-000: reconnect [ 340.622053][T31546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12175'. [ 340.723367][T31550] netlink: 200 bytes leftover after parsing attributes in process `syz.3.12177'. [ 340.959344][T31554] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.159574][ T5984] Bluetooth: hci0: command tx timeout [ 341.193141][T31554] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.250862][T31576] netlink: 'syz.0.12189': attribute type 1 has an invalid length. [ 341.262078][T31576] netlink: 244 bytes leftover after parsing attributes in process `syz.0.12189'. [ 341.344635][T31554] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.470161][T31554] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.507703][T31593] [U]  [ 341.512560][ T1474] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 341.625443][T31605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.693171][ T1474] usb 10-1: Using ep0 maxpacket: 32 [ 341.697938][ T1474] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 341.704285][ T1474] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 341.709283][ T1474] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 341.712349][ T1474] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 341.716322][ T1474] usb 10-1: config 1 has no interface number 0 [ 341.718336][ T1474] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 341.723332][ T1474] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 341.729539][ T1474] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.769330][ T1474] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 341.791043][T31615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12208'. [ 341.794018][T31615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12208'. [ 341.832013][ T5926] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.864055][ T5926] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.868683][ T5926] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.874519][ T5926] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.129150][T31646] [U] v3f"S/4:XTzWtlW= [ 342.131074][T31646] [U] J"e:" [ 342.833860][T31686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12241'. [ 342.884771][T31688] vim2m vim2m.0: vidioc_s_fmt queue busy [ 343.216075][T31703] devpts: Bad value for 'max' [ 343.216794][T31704] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12250'. [ 343.222165][T31704] netlink: 'syz.1.12250': attribute type 6 has an invalid length. [ 343.225492][T31704] netlink: 'syz.1.12250': attribute type 5 has an invalid length. [ 343.228676][T31704] netlink: 'syz.1.12250': attribute type 4 has an invalid length. [ 343.273031][T31708] libceph: resolve '0' (ret=-3): failed [ 343.381740][ T5984] Bluetooth: hci0: command tx timeout [ 343.420912][T31720] ip_tables: iptables: counters copy to user failed while replacing table [ 343.482884][T31726] netlink: 'syz.0.12260': attribute type 83 has an invalid length. [ 343.694525][T31747] __nla_validate_parse: 3 callbacks suppressed [ 343.694545][T31747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12272'. [ 343.798718][ T42] kauditd_printk_skb: 126 callbacks suppressed [ 343.798889][ T42] audit: type=1400 audit(2000000071.925:38800): avc: denied { read write } for pid=5986 comm="syz-executor" name="loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.814857][ T42] audit: type=1400 audit(2000000071.925:38801): avc: denied { open } for pid=5986 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.833442][ T42] audit: type=1400 audit(2000000071.925:38802): avc: denied { ioctl } for pid=5986 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=657 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.888643][ T42] audit: type=1400 audit(2000000072.009:38803): avc: denied { read } for pid=31765 comm="syz.3.12280" name="cec3" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.898430][ T42] audit: type=1400 audit(2000000072.009:38804): avc: denied { open } for pid=31765 comm="syz.3.12280" path="/dev/cec3" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.909272][ T42] audit: type=1400 audit(2000000072.019:38805): avc: denied { ioctl } for pid=31765 comm="syz.3.12280" path="/dev/cec3" dev="devtmpfs" ino=987 ioctlcmd=0x6109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.966397][ T42] audit: type=1400 audit(2000000072.075:38806): avc: denied { write } for pid=31771 comm="syz.1.12283" path="socket:[100157]" dev="sockfs" ino=100157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 344.022129][ T42] audit: type=1400 audit(2000000072.131:38807): avc: denied { read write } for pid=31775 comm="syz.1.12285" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 344.041226][ T42] audit: type=1400 audit(2000000072.140:38808): avc: denied { open } for pid=31775 comm="syz.1.12285" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 344.053007][ T42] audit: type=1400 audit(2000000072.140:38809): avc: denied { ioctl } for pid=31775 comm="syz.1.12285" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 344.281329][T31799] netlink: 76 bytes leftover after parsing attributes in process `syz.1.12296'. [ 344.453690][ T1474] snd_usb_pod 10-1:1.1: set_interface failed [ 344.456539][ T1474] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 344.461974][ T1474] snd_usb_pod 10-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 344.471934][ T1474] usb 10-1: USB disconnect, device number 2 [ 344.509775][T31809] tmpfs: Cannot enable quota on remount [ 344.911684][T31827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12307'. [ 344.916908][T31827] nbd: illegal input index 67111936 [ 344.986533][T31836] x_tables: ip6_tables: CHECKSUM target: only valid in mangle table, not syz1 [ 345.013366][T31840] netlink: 'syz.5.12312': attribute type 29 has an invalid length. [ 345.237960][T31851] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.244870][T31851] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.469515][T31851] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.496641][T31851] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.665401][T31851] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.670413][T31851] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.714904][T31889] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 345.717537][T31889] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 345.720248][T31889] vhci_hcd vhci_hcd.0: Device attached [ 345.731613][T31890] vhci_hcd: unknown pdu 1 [ 345.733961][ T13] vhci_hcd vhci_hcd.3: stop threads [ 345.736206][ T13] vhci_hcd vhci_hcd.3: release socket [ 345.738454][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 345.790242][T31895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12337'. [ 345.820763][T31851] netdevsim netdevsim1 (unregistering): left allmulticast mode [ 345.829502][T31851] bridge0: port 1() entered disabled state [ 345.836239][T31851] netdevsim netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.840574][T31851] netdevsim netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.120962][ T5984] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 346.124429][ T5984] Bluetooth: hci0: command 0x0c1a tx timeout [ 346.159655][ T5926] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.163223][ T5926] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.171747][ T5926] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.175374][ T5926] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.179023][ T5926] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.183207][ T5926] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.187895][ T5926] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.193053][ T5926] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.286759][T31928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12354'. [ 346.303038][T31930] [U]  [ 346.379991][T31936] netlink: Invalid conntrack helper [ 346.382084][T31936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.443341][T31944] netlink: 100 bytes leftover after parsing attributes in process `syz.5.12361'. [ 346.724719][T31970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12373'. [ 346.928647][T31992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12383'. [ 346.998094][T32000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12387'. [ 347.004386][T32000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12387'. [ 347.017077][T32000] netlink: 'syz.3.12387': attribute type 7 has an invalid length. [ 347.025196][T32000] netlink: 'syz.3.12387': attribute type 13 has an invalid length. [ 347.038937][T32003] sch_fq: defrate 4294967295 ignored. [ 347.108679][T32009] tmpfs: Cannot change global quota limit on remount [ 347.161136][T32015] ip_tables: iptables: counters copy to user failed while replacing table [ 347.785593][T32032] tipc: Started in network mode [ 347.788070][T32032] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 347.791989][T32032] tipc: Enabling of bearer rejected, failed to enable media [ 348.220974][T32045] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.428583][T32045] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.643221][T32045] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.851324][T32045] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.165132][ T42] kauditd_printk_skb: 158 callbacks suppressed [ 349.165151][ T42] audit: type=1400 audit(2000000076.950:38968): avc: denied { read } for pid=32088 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 349.186965][ T5926] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.250604][ T42] audit: type=1400 audit(2000000077.025:38969): avc: denied { write } for pid=32093 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.276785][ T42] audit: type=1400 audit(2000000077.025:38970): avc: denied { remove_name } for pid=32093 comm="rm" name="resolv.conf.eth8.ipv4ll" dev="tmpfs" ino=23831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.279901][ T5926] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.300815][ T42] audit: type=1400 audit(2000000077.025:38971): avc: denied { unlink } for pid=32093 comm="rm" name="resolv.conf.eth8.ipv4ll" dev="tmpfs" ino=23831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 349.301270][ T5926] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.376725][ T5926] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.403136][ T42] audit: type=1400 audit(2000000077.166:38972): avc: denied { read write } for pid=31196 comm="syz-executor" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.403376][ T42] audit: type=1400 audit(2000000077.166:38973): avc: denied { open } for pid=31196 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.403906][ T42] audit: type=1400 audit(2000000077.166:38974): avc: denied { ioctl } for pid=31196 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.448256][ T42] audit: type=1400 audit(2000000077.203:38975): avc: denied { read write } for pid=32107 comm="syz.5.12433" name="vhost-net" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 349.458578][T32109] 9pnet_fd: Insufficient options for proto=fd [ 349.479413][ T42] audit: type=1400 audit(2000000077.203:38976): avc: denied { open } for pid=32107 comm="syz.5.12433" path="/dev/vhost-net" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 349.504671][ T42] audit: type=1400 audit(2000000077.231:38977): avc: denied { read write } for pid=32108 comm="syz.0.12434" name="vbi0" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 349.608741][T32123] __nla_validate_parse: 4 callbacks suppressed [ 349.608764][T32123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12437'. [ 349.721605][T32137] macsec1: entered promiscuous mode [ 349.729697][T32137] macsec1: entered allmulticast mode [ 349.733473][T32132] ALSA: seq fatal error: cannot create timer (-19) [ 350.859951][T32256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12495'. [ 351.091721][T32283] 8021q: VLANs not supported on team0 [ 351.266575][T32298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12512'. [ 351.387092][T32308] fuse: fd is not a fuse device [ 351.541454][T32318] program syz.1.12522 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.153878][T32367] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 352.196265][T32370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12546'. [ 352.331010][T32380] program syz.0.12550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.480135][T32391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12555'. [ 352.483950][T32391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12555'. [ 352.488757][T32391] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 352.492367][T32391] iwpm_hello_cb: Unable to parse nlmsg [ 352.633246][T32397] syz.0.12558 (32397) used greatest stack depth: 17352 bytes left [ 352.690035][T32404] netlink: 'syz.1.12563': attribute type 2 has an invalid length. [ 352.717610][T32404] : entered promiscuous mode [ 352.752967][T32409] netlink: 348 bytes leftover after parsing attributes in process `syz.3.12564'. [ 352.816653][T32416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.822444][T32417] ip_tables: iptables: counters copy to user failed while replacing table [ 353.014240][T32436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12577'. [ 353.018254][T32436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12577'. [ 353.398596][T32468] team_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 353.448086][T32472] genirq: Flags mismatch irq 2. 00200000 (pcl816) vs. 00200000 (pcmmio) [ 353.553968][T32487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12602'. [ 353.804567][T32516] netlink: 'syz.1.12616': attribute type 1 has an invalid length. [ 353.920640][T32526] Failed to initialize the IGMP autojoin socket (err -2) [ 353.967380][T32533] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 353.983663][T32537] netlink: 'syz.0.12626': attribute type 7 has an invalid length. [ 354.089320][T32547] netlink: 'syz.3.12631': attribute type 5 has an invalid length. [ 354.512148][T32594] team0: entered allmulticast mode [ 354.518832][T32594] team_slave_0: entered allmulticast mode [ 354.521461][T32594] team_slave_1: entered allmulticast mode [ 354.648803][ T42] kauditd_printk_skb: 253 callbacks suppressed [ 354.648821][ T42] audit: type=1400 audit(2000000082.079:39231): avc: denied { mount } for pid=32602 comm="syz.3.12659" name="/" dev="gadgetfs" ino=8787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 354.688054][ T42] audit: type=1400 audit(2000000082.116:39232): avc: denied { unmount } for pid=5993 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 354.698097][ T42] audit: type=1400 audit(2000000082.116:39233): avc: denied { create } for pid=32607 comm="syz.5.12660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 354.707129][ T42] audit: type=1400 audit(2000000082.125:39234): avc: denied { write } for pid=32607 comm="syz.5.12660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 354.716588][ T42] audit: type=1400 audit(2000000082.125:39235): avc: denied { read } for pid=32607 comm="syz.5.12660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 354.733369][ T42] audit: type=1400 audit(2000000082.144:39236): avc: denied { create } for pid=32609 comm="syz.3.12661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 354.748626][ T42] audit: type=1400 audit(2000000082.153:39237): avc: denied { connect } for pid=32609 comm="syz.3.12661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 354.812491][ T42] audit: type=1400 audit(2000000082.228:39238): avc: denied { mount } for pid=32617 comm="syz.0.12665" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 354.823027][ T42] audit: type=1400 audit(2000000082.238:39239): avc: denied { unmount } for pid=32617 comm="syz.0.12665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 354.848096][ T42] audit: type=1400 audit(2000000082.247:39240): avc: denied { setopt } for pid=32619 comm="syz.3.12666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 355.970374][T32704] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3966. macoff=82 [ 356.359081][T32733] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 356.661932][T32749] nvme_fcloop: unknown parameter or missing value 'wwn' [ 356.774554][T32757] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 356.833754][T32761] Falling back ldisc for ttyS3. [ 356.991393][ T304] pimreg: tun_chr_ioctl cmd 1074025672 [ 356.995375][ T304] pimreg: ignored: set checksum enabled [ 357.082273][ T308] ima: Unable to open file: /e (-2) [ 357.082923][ T307] ima: policy update failed [ 357.329896][ T318] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 357.332206][ T318] syzkaller1: owner set to 805 [ 357.748190][ T347] hugetlbfs: syz.3.12755 (347): Using mlock ulimits for SHM_HUGETLB is obsolete [ 358.395463][ T393] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 358.421523][ T393] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 358.442864][ T397] batadv_slave_1: entered promiscuous mode [ 358.448266][ T396] batadv_slave_1: left promiscuous mode [ 358.531297][ T403] kAFS: bad VL server IP address [ 358.577919][ T411] __nla_validate_parse: 4 callbacks suppressed [ 358.577937][ T411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12786'. [ 358.953237][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 359.026182][ T452] bridge_slave_0: invalid flags given to default FDB implementation [ 359.306261][ T470] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12813'. [ 359.712792][ T500] kvm: kvm [499]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6 [ 359.914373][ T6091] hid_parser_main: 92 callbacks suppressed [ 359.914398][ T6091] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 359.919031][ T6091] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 359.921750][ T6091] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 359.925844][ T6091] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 359.929166][ T6091] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 359.932522][ T6091] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 359.937366][ T6091] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 359.940963][ T6091] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 359.944301][ T6091] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 359.951321][ T6091] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 359.967121][ T6091] hid-generic 000A:FFFFFF1D:0002.0005: hidraw1: HID v0.04 Device [syz0] on syz1 [ 360.002602][ T509] fido_id[509]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 360.022473][ T42] kauditd_printk_skb: 248 callbacks suppressed [ 360.022492][ T42] audit: type=1400 audit(2000000087.104:39489): avc: denied { recv } for pid=5702 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=33726 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 360.057776][ T42] audit: type=1400 audit(2000000087.141:39490): avc: denied { read write } for pid=512 comm="syz.1.12832" name="video8" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 360.073137][ T42] audit: type=1400 audit(2000000087.141:39491): avc: denied { open } for pid=512 comm="syz.1.12832" path="/dev/video8" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 360.094476][ T42] audit: type=1400 audit(2000000087.141:39492): avc: denied { ioctl } for pid=512 comm="syz.1.12832" path="/dev/video8" dev="devtmpfs" ino=975 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 360.207899][ T518] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12834'. [ 360.226142][ T518] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12834'. [ 360.231650][ T42] audit: type=1400 audit(2000000087.300:39493): avc: denied { create } for pid=519 comm="syz.0.12835" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 360.244943][ T42] audit: type=1400 audit(2000000087.310:39494): avc: denied { map } for pid=519 comm="syz.0.12835" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=105039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 360.255813][ T42] audit: type=1400 audit(2000000087.310:39495): avc: denied { read write } for pid=519 comm="syz.0.12835" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=105039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 360.265756][ T42] audit: type=1400 audit(2000000087.328:39496): avc: denied { connect } for pid=521 comm="syz.1.12836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 360.273462][ T42] audit: type=1400 audit(2000000087.328:39497): avc: denied { write } for pid=521 comm="syz.1.12836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 360.317563][ T42] audit: type=1400 audit(2000000087.375:39498): avc: denied { create } for pid=525 comm="syz.0.12838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 360.422344][ T534] binder: BC_ACQUIRE_RESULT not supported [ 360.424202][ T534] binder: 533:534 ioctl c0306201 2000000003c0 returned -22 [ 360.548136][ T547] blkio.reset_stats is deprecated [ 360.633477][ T556] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 360.646511][ T555] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 360.661653][ T555] bond1 (unregistering): Released all slaves [ 360.678617][ T561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12851'. [ 360.684412][ T561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12851'. [ 361.117940][ T606] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 361.492570][ T631] netlink: 68 bytes leftover after parsing attributes in process `syz.0.12885'. [ 361.571952][ T633] Line length is too long: Should be less than 4094 [ 362.009847][ T657] sit0: left promiscuous mode [ 362.703354][ T725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12931'. [ 363.035657][ T757] netlink: 'syz.1.12946': attribute type 21 has an invalid length. [ 363.039499][ T757] netlink: 128 bytes leftover after parsing attributes in process `syz.1.12946'. [ 363.044204][ T757] netlink: 'syz.1.12946': attribute type 5 has an invalid length. [ 363.047933][ T757] netlink: 'syz.1.12946': attribute type 6 has an invalid length. [ 363.051697][ T757] netlink: 3 bytes leftover after parsing attributes in process `syz.1.12946'. [ 363.059953][ T757] netlink: 'syz.1.12946': attribute type 21 has an invalid length. [ 363.065639][ T757] netlink: 'syz.1.12946': attribute type 5 has an invalid length. [ 363.069175][ T757] netlink: 'syz.1.12946': attribute type 6 has an invalid length. [ 363.323944][ T783] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 363.437017][ T793] block2mtd: parameter too long [ 363.562522][ T803] team_slave_0: entered promiscuous mode [ 363.635032][ T809] netlink: 'syz.3.12969': attribute type 12 has an invalid length. [ 363.640533][ T809] netlink: 'syz.3.12969': attribute type 29 has an invalid length. [ 363.645010][ T809] netlink: 'syz.3.12969': attribute type 3 has an invalid length. [ 363.648270][ T809] netlink: 'syz.3.12969': attribute type 2 has an invalid length. [ 363.706093][ T29] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 363.866856][ T29] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 363.871957][ T29] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 363.877959][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.883305][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.890298][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 363.901447][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.907376][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.915879][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 363.922575][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.927861][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.934387][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 363.940411][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.945475][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.962461][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 363.966304][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.969728][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.983830][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 363.998730][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 364.002127][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 364.015887][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 364.018759][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 364.021534][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 364.037228][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 364.044137][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 364.047249][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 364.058581][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 364.062718][ T29] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 364.067271][ T29] usb 10-1: Product: syz [ 364.069275][ T29] usb 10-1: Manufacturer: syz [ 364.079958][ T29] usb 10-1: SerialNumber: syz [ 364.083711][ T29] usb 10-1: config 0 descriptor?? [ 364.112562][ T29] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 364.835885][ T884] bond0: entered promiscuous mode [ 364.837526][ T884] : entered promiscuous mode [ 364.846765][ T884] bond_slave_1: entered promiscuous mode [ 364.862313][ T884] bond0: left promiscuous mode [ 364.864095][ T884] : left promiscuous mode [ 364.869431][ T884] bond_slave_1: left promiscuous mode [ 365.543679][ T910] __nla_validate_parse: 6 callbacks suppressed [ 365.543699][ T910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13014'. [ 365.552972][ T910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13014'. [ 365.559841][ T910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13014'. [ 365.563720][ T910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13014'. [ 365.586361][ T42] kauditd_printk_skb: 209 callbacks suppressed [ 365.586377][ T42] audit: type=1400 audit(2000000348.310:39708): avc: denied { create } for pid=911 comm="syz.0.13015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 365.608213][ T42] audit: type=1400 audit(2000000348.329:39709): avc: denied { write } for pid=911 comm="syz.0.13015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 365.647153][ T42] audit: type=1400 audit(2000000348.366:39710): avc: denied { execute } for pid=915 comm="syz.1.13017" name="file1" dev="tmpfs" ino=15988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 365.655861][ T42] audit: type=1400 audit(2000000348.366:39711): avc: denied { execute_no_trans } for pid=915 comm="syz.1.13017" path="/3167/file1" dev="tmpfs" ino=15988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 365.699603][ T42] audit: type=1400 audit(2000000348.413:39712): avc: denied { sys_module } for pid=917 comm="syz.1.13018" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 365.712037][ T42] audit: type=1400 audit(2000000348.432:39713): avc: denied { read } for pid=919 comm="syz.0.13019" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 365.723111][ T42] audit: type=1400 audit(2000000348.432:39714): avc: denied { open } for pid=919 comm="syz.0.13019" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 365.735710][ T42] audit: type=1400 audit(2000000348.451:39715): avc: denied { ioctl } for pid=919 comm="syz.0.13019" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x6205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 365.905082][ T932] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13024'. [ 365.940547][ T42] audit: type=1400 audit(2000000348.647:39716): avc: denied { mount } for pid=933 comm="syz.0.13025" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 365.945476][ T934] scsi_strcpy_devinfo: vendor string 'b~sb%`Qʮ~G|\D5X2aE' is too long [ 365.971543][ T42] audit: type=1400 audit(2000000348.666:39717): avc: denied { unmount } for pid=5985 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 366.037483][ T936] i2c i2c-0: new_device: Instantiated device ptn36502 at 0x1a [ 366.463265][ C1] usb 10-1: yurex_control_callback - control failed: -2 [ 366.470759][ C1] usb 10-1: yurex_control_callback - control failed: -32 [ 366.475861][ T847] usb 10-1: USB disconnect, device number 3 [ 366.485898][ T847] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 366.777185][ T962] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 366.915795][ T959] smpboot: CPU 1 is now offline [ 367.128794][ T959] smpboot: CPU 3 is now offline [ 367.775289][ T986] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13044'. [ 368.040796][ T992] cramfs: checking physical address 0x0000000101760000 for linear cramfs image [ 368.071029][ T992] cramfs: wrong magic [ 368.132289][ T992] cramfs: wrong magic [ 368.132437][ T997] Attempt to restore checkpoint with obsolete wellknown handles [ 368.342540][ T1004] printk: legacy console [ttyS0] disabled syzkaller syzkaller login: [ 425.333333][ T2972] printk: legacy console [ttyS0] enabled [ 426.064185][ T3010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13874'. [ 426.188828][ T3018] bond0: entered promiscuous mode [ 426.203422][ T3018] team0: entered promiscuous mode [ 426.215433][ T3018] xfrm0: entered promiscuous mode [ 426.233845][ T3018] batadv0: entered promiscuous mode [ 426.237712][ T3018] debugfs: 'hsr0' already exists in 'hsr' [ 426.241242][ T3018] Cannot create hsr debugfs directory [ 426.244606][ T3018] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 426.249874][ T3018] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 426.265583][ T3018] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 426.271637][ T3018] bond0: left promiscuous mode [ 426.276335][ T3018] team0: left promiscuous mode [ 426.279502][ T3018] xfrm0: left promiscuous mode [ 426.282953][ T3018] batadv0: left promiscuous mode [ 426.700031][ T3047] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 427.061134][ T3068] vivid-000: disconnect [ 427.090366][ T3068] vivid-000: reconnect [ 427.563560][ T42] kauditd_printk_skb: 152 callbacks suppressed [ 427.563575][ T42] audit: type=1400 audit(2000000662.312:41124): avc: denied { write } for pid=3096 comm="syz.0.13909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 427.606805][ T42] audit: type=1400 audit(2000000662.321:41125): avc: denied { ioctl } for pid=3096 comm="syz.0.13909" path="socket:[117511]" dev="sockfs" ino=117511 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 427.663638][ T42] audit: type=1400 audit(2000000662.396:41126): avc: denied { module_request } for pid=3102 comm="syz.0.13912" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 427.824525][ T3104] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.078159][ T42] audit: type=1400 audit(2000000662.789:41127): avc: denied { read } for pid=3124 comm="syz.0.13920" dev="nsfs" ino=4026532884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 428.103308][ T42] audit: type=1400 audit(2000000662.808:41128): avc: denied { open } for pid=3124 comm="syz.0.13920" path="net:[4026532884]" dev="nsfs" ino=4026532884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 428.123201][ T42] audit: type=1400 audit(2000000662.808:41129): avc: denied { create } for pid=3124 comm="syz.0.13920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 428.134129][ T42] audit: type=1400 audit(2000000662.808:41130): avc: denied { write } for pid=3124 comm="syz.0.13920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 428.210023][ T1349] libceph: mon0 (1)[c::]:6789 connect error [ 428.256907][ T42] audit: type=1400 audit(2000000662.958:41131): avc: denied { read write } for pid=3126 comm="syz.0.13929" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 428.284389][ T1349] libceph: mon0 (1)[c::]:6789 connect error [ 428.293907][ T42] audit: type=1400 audit(2000000662.976:41132): avc: denied { open } for pid=3126 comm="syz.0.13929" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 428.326238][ T42] audit: type=1400 audit(2000000662.976:41133): avc: denied { ioctl } for pid=3126 comm="syz.0.13929" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 428.395072][ T3131] veth0: entered promiscuous mode [ 428.402491][ T3131] veth0: left promiscuous mode [ 428.593475][T17165] libceph: mon0 (1)[c::]:6789 connect error [ 428.750863][ T3141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13927'. [ 428.908736][ T3120] ceph: No mds server is up or the cluster is laggy [ 429.149485][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 430.196023][ T3180] MPI: mpi too large (16392 bits) [ 431.314270][ T3235] loop9: detected capacity change from 0 to 524287999 [ 431.335966][ T3235] buffer_io_error: 10 callbacks suppressed [ 431.335983][ T3235] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.391225][ T3235] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.443934][ T3235] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.475748][ T3235] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.517632][ T3235] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.568104][ T3235] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.596371][ T3235] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.636931][ T3235] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.656967][ T3235] ldm_validate_partition_table(): Disk read failed. [ 431.680943][ T3235] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.715275][ T3235] Buffer I/O error on dev loop9, logical block 0, async page read [ 431.750309][ T3235] Dev loop9: unable to read RDB block 0 [ 431.764827][ T3235] loop9: unable to read partition table [ 431.797922][ T3235] loop_reread_partitions: partition scan of loop9 (3 x) failed (rc=-5) [ 432.288769][ T24] logitech-hidpp-device 0005:046D:B012.0008: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 432.406032][ T3283] netlink: 'syz.1.13991': attribute type 4 has an invalid length. [ 432.406735][ T3276] fido_id[3276]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 432.437398][ T3285] [ 432.673577][ T3297] can0: slcan on ttyS3. [ 432.816864][ T3304] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14001'. [ 432.943828][ T3297] can0 (unregistered): slcan off ttyS3. [ 433.002701][ T42] kauditd_printk_skb: 122 callbacks suppressed [ 433.002714][ T42] audit: type=1400 audit(2000000667.393:41256): avc: denied { write } for pid=3311 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.082746][ T42] audit: type=1400 audit(2000000667.422:41257): avc: denied { remove_name } for pid=3311 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=25763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.125651][ T42] audit: type=1400 audit(2000000667.422:41258): avc: denied { unlink } for pid=3311 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=25763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 433.188469][ T42] audit: type=1400 audit(2000000667.431:41259): avc: denied { create } for pid=3312 comm="syz.5.14002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 433.220234][ T3322] netlink: 'syz.0.14006': attribute type 4 has an invalid length. [ 433.236793][ T42] audit: type=1400 audit(2000000667.496:41260): avc: denied { create } for pid=3316 comm="syz.3.14004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 433.303961][ T42] audit: type=1400 audit(2000000667.496:41261): avc: denied { bind } for pid=3316 comm="syz.3.14004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 433.340570][ T42] audit: type=1400 audit(2000000667.496:41262): avc: denied { accept } for pid=3316 comm="syz.3.14004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 433.396730][ T42] audit: type=1400 audit(2000000667.496:41263): avc: denied { write } for pid=3316 comm="syz.3.14004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 433.450536][ T42] audit: type=1400 audit(2000000667.712:41264): avc: denied { ioctl } for pid=3326 comm="syz.3.14008" path="socket:[118257]" dev="sockfs" ino=118257 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 433.546243][ T42] audit: type=1400 audit(2000000667.712:41265): avc: denied { write } for pid=3326 comm="syz.3.14008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 434.348074][ T3377] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 435.009561][ T3394] can0: slcan on ttyS3. [ 435.059041][ T3394] can0 (unregistered): slcan off ttyS3. [ 435.479832][ T3412] netlink: 112 bytes leftover after parsing attributes in process `syz.5.14037'. [ 437.081513][ T3486] ================================================================== [ 437.085766][ T3486] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 437.089373][ T3486] Read of size 1 at addr ffff888027c94ea0 by task syz.5.14068/3486 [ 437.094950][ T3486] [ 437.096483][ T3486] CPU: 2 UID: 0 PID: 3486 Comm: syz.5.14068 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.096503][ T3486] Tainted: [L]=SOFTLOCKUP [ 437.096508][ T3486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 437.096515][ T3486] Call Trace: [ 437.096521][ T3486] [ 437.096527][ T3486] dump_stack_lvl+0x100/0x190 [ 437.096548][ T3486] print_report+0x13d/0x4b0 [ 437.096566][ T3486] ? __virt_addr_valid+0x239/0x430 [ 437.096584][ T3486] ? string+0x471/0x4d0 [ 437.096597][ T3486] kasan_report+0xdf/0x1c0 [ 437.096613][ T3486] ? string+0x471/0x4d0 [ 437.096627][ T3486] string+0x471/0x4d0 [ 437.096640][ T3486] ? __pfx_string+0x10/0x10 [ 437.096652][ T3486] ? mtree_range_walk+0x72b/0xb70 [ 437.096667][ T3486] vsnprintf+0x422/0x1300 [ 437.096683][ T3486] ? __pfx_vsnprintf+0x10/0x10 [ 437.096698][ T3486] ? __lock_acquire+0x49f/0x1a40 [ 437.096711][ T3486] ? __pfx_num_to_str+0x10/0x10 [ 437.096726][ T3486] seq_printf+0x1a4/0x250 [ 437.096737][ T3486] ? __pfx_num_to_str+0x10/0x10 [ 437.096750][ T3486] ? __pfx_seq_printf+0x10/0x10 [ 437.096761][ T3486] ? do_raw_spin_lock+0x128/0x260 [ 437.096778][ T3486] ? seq_put_decimal_ull_width+0x1db/0x3a0 [ 437.096791][ T3486] irq_seq_show+0x390/0x8b0 [ 437.096808][ T3486] seq_read_iter+0xbce/0x1270 [ 437.096821][ T3486] proc_reg_read_iter+0x220/0x310 [ 437.096835][ T3486] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 437.096848][ T3486] vfs_read+0x82e/0xb40 [ 437.096866][ T3486] ? __pfx_vfs_read+0x10/0x10 [ 437.096886][ T3486] ksys_read+0x12a/0x250 [ 437.096895][ T3486] ? __pfx_ksys_read+0x10/0x10 [ 437.096906][ T3486] do_syscall_64+0x115/0x870 [ 437.096921][ T3486] ? clear_bhb_loop+0x70/0xc0 [ 437.096933][ T3486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.096944][ T3486] RIP: 0033:0x7f41f3f9e0d9 [ 437.096955][ T3486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.096966][ T3486] RSP: 002b:00007f41f4e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 437.096979][ T3486] RAX: ffffffffffffffda RBX: 00007f41f4225fa0 RCX: 00007f41f3f9e0d9 [ 437.096986][ T3486] RDX: 000000000000029f RSI: 0000200000000340 RDI: 0000000000000003 [ 437.096993][ T3486] RBP: 00007f41f4035024 R08: 0000000000000000 R09: 0000000000000000 [ 437.097000][ T3486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.097006][ T3486] R13: 00007f41f4226038 R14: 00007f41f4225fa0 R15: 00007fffa531b518 [ 437.097017][ T3486] [ 437.097021][ T3486] [ 437.264884][ T3486] Allocated by task 2712: [ 437.267583][ T3486] kasan_save_stack+0x30/0x50 [ 437.270536][ T3486] kasan_save_track+0x14/0x30 [ 437.273510][ T3486] __kasan_kmalloc+0xaa/0xb0 [ 437.276438][ T3486] __kvmalloc_node_noprof+0x34f/0x970 [ 437.279826][ T3486] proc_sys_call_handler+0x2c7/0x5a0 [ 437.283319][ T3486] vfs_write+0x6ac/0x1050 [ 437.286321][ T3486] ksys_write+0x12a/0x250 [ 437.289294][ T3486] do_syscall_64+0x115/0x870 [ 437.292293][ T3486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.296269][ T3486] [ 437.297832][ T3486] Freed by task 2712: [ 437.300506][ T3486] kasan_save_stack+0x30/0x50 [ 437.303499][ T3486] kasan_save_track+0x14/0x30 [ 437.306442][ T3486] kasan_save_free_info+0x3b/0x70 [ 437.309167][ T3486] __kasan_slab_free+0x5f/0x80 [ 437.311669][ T3486] kfree+0x22b/0x6c0 [ 437.313703][ T3486] proc_sys_call_handler+0x4af/0x5a0 [ 437.316514][ T3486] vfs_write+0x6ac/0x1050 [ 437.318761][ T3486] ksys_write+0x12a/0x250 [ 437.321029][ T3486] do_syscall_64+0x115/0x870 [ 437.323434][ T3486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.326522][ T3486] [ 437.327757][ T3486] The buggy address belongs to the object at ffff888027c94ea0 [ 437.327757][ T3486] which belongs to the cache kmalloc-8 of size 8 [ 437.334916][ T3486] The buggy address is located 0 bytes inside of [ 437.334916][ T3486] freed 8-byte region [ffff888027c94ea0, ffff888027c94ea8) [ 437.343311][ T3486] [ 437.344864][ T3486] The buggy address belongs to the physical page: [ 437.349038][ T3486] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027c94f40 pfn:0x27c94 [ 437.355648][ T3486] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 437.360547][ T3486] page_type: f5(slab) [ 437.362603][ T3486] raw: 00fff00000000200 ffff88801bc42500 ffffea00008b9310 ffffea0000a092d0 [ 437.367064][ T3486] raw: ffff888027c94f40 0000000800800079 00000000f5000000 0000000000000000 [ 437.371553][ T3486] page dumped because: kasan: bad access detected [ 437.374898][ T3486] page_owner tracks the page as allocated [ 437.377879][ T3486] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6748332597, free_ts 0 [ 437.387847][ T3486] post_alloc_hook+0xfd/0x120 [ 437.390296][ T3486] get_page_from_freelist+0xf48/0x3530 [ 437.393151][ T3486] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 437.396252][ T3486] new_slab+0xa2/0x640 [ 437.398372][ T3486] refill_objects+0xe3/0x410 [ 437.400776][ T3486] __pcs_replace_empty_main+0x376/0x680 [ 437.403667][ T3486] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 437.407055][ T3486] kstrdup+0x51/0xe0 [ 437.409091][ T3486] kstrdup_const+0x63/0x80 [ 437.411399][ T3486] kvasprintf_const+0x10f/0x1a0 [ 437.414181][ T3486] kobject_set_name_vargs+0x5a/0x140 [ 437.417262][ T3486] dev_set_name+0xc7/0x100 [ 437.419682][ T3486] tty_register_device_attr+0x2fb/0x7f0 [ 437.422559][ T3486] tty_register_driver+0x769/0xb50 [ 437.425234][ T3486] pty_init+0x65d/0xdc0 [ 437.427378][ T3486] do_one_initcall+0x11d/0x700 [ 437.429900][ T3486] page_owner free stack trace missing [ 437.432731][ T3486] [ 437.433945][ T3486] Memory state around the buggy address: [ 437.436867][ T3486] ffff888027c94d80: 06 fc fc fc 06 fc fc fc 06 fc fc fc 06 fc fc fc [ 437.441024][ T3486] ffff888027c94e00: 05 fc fc fc 05 fc fc fc 05 fc fc fc 05 fc fc fc [ 437.445180][ T3486] >ffff888027c94e80: 05 fc fc fc fa fc fc fc 05 fc fc fc fa fc fc fc [ 437.449315][ T3486] ^ [ 437.451938][ T3486] ffff888027c94f00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 437.456117][ T3486] ffff888027c94f80: fa fc fc fc 04 fc fc fc 00 fc fc fc 00 fc fc fc [ 437.460279][ T3486] ================================================================== [ 437.464429][ T3486] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 437.468131][ T3486] CPU: 2 UID: 0 PID: 3486 Comm: syz.5.14068 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.473747][ T3486] Tainted: [L]=SOFTLOCKUP [ 437.475996][ T3486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 437.481263][ T3486] Call Trace: [ 437.482964][ T3486] [ 437.484530][ T3486] dump_stack_lvl+0x100/0x190 [ 437.486954][ T3486] vpanic+0x552/0x970 [ 437.489020][ T3486] ? __pfx_vpanic+0x10/0x10 [ 437.491354][ T3486] ? __pfx_vprintk_emit+0x10/0x10 [ 437.493961][ T3486] ? string+0x471/0x4d0 [ 437.496141][ T3486] panic+0xd1/0xe0 [ 437.498068][ T3486] ? __pfx_panic+0x10/0x10 [ 437.500643][ T3486] ? end_report.part.0+0x23/0x90 [ 437.503853][ T3486] ? rcu_is_watching+0x12/0xc0 [ 437.506971][ T3486] ? end_report.part.0+0x23/0x90 [ 437.509705][ T3486] check_panic_on_warn.cold+0x19/0x34 [ 437.512501][ T3486] end_report.part.0+0x3a/0x90 [ 437.515094][ T3486] kasan_report.cold+0xe/0x18 [ 437.517529][ T3486] ? string+0x471/0x4d0 [ 437.519716][ T3486] string+0x471/0x4d0 [ 437.521777][ T3486] ? __pfx_string+0x10/0x10 [ 437.524150][ T3486] ? mtree_range_walk+0x72b/0xb70 [ 437.526742][ T3486] vsnprintf+0x422/0x1300 [ 437.528997][ T3486] ? __pfx_vsnprintf+0x10/0x10 [ 437.531491][ T3486] ? __lock_acquire+0x49f/0x1a40 [ 437.534089][ T3486] ? __pfx_num_to_str+0x10/0x10 [ 437.536633][ T3486] seq_printf+0x1a4/0x250 [ 437.538887][ T3486] ? __pfx_num_to_str+0x10/0x10 [ 437.541412][ T3486] ? __pfx_seq_printf+0x10/0x10 [ 437.543927][ T3486] ? do_raw_spin_lock+0x128/0x260 [ 437.546555][ T3486] ? seq_put_decimal_ull_width+0x1db/0x3a0 [ 437.549562][ T3486] irq_seq_show+0x390/0x8b0 [ 437.551902][ T3486] seq_read_iter+0xbce/0x1270 [ 437.554363][ T3486] proc_reg_read_iter+0x220/0x310 [ 437.556966][ T3486] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 437.559851][ T3486] vfs_read+0x82e/0xb40 [ 437.561996][ T3486] ? __pfx_vfs_read+0x10/0x10 [ 437.564488][ T3486] ksys_read+0x12a/0x250 [ 437.566678][ T3486] ? __pfx_ksys_read+0x10/0x10 [ 437.569156][ T3486] do_syscall_64+0x115/0x870 [ 437.571617][ T3486] ? clear_bhb_loop+0x70/0xc0 [ 437.575028][ T3486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.579226][ T3486] RIP: 0033:0x7f41f3f9e0d9 [ 437.582354][ T3486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.592523][ T3486] RSP: 002b:00007f41f4e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 437.596893][ T3486] RAX: ffffffffffffffda RBX: 00007f41f4225fa0 RCX: 00007f41f3f9e0d9 [ 437.601007][ T3486] RDX: 000000000000029f RSI: 0000200000000340 RDI: 0000000000000003 [ 437.605141][ T3486] RBP: 00007f41f4035024 R08: 0000000000000000 R09: 0000000000000000 [ 437.609247][ T3486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.613349][ T3486] R13: 00007f41f4226038 R14: 00007f41f4225fa0 R15: 00007fffa531b518 [ 437.617487][ T3486] [ 437.619570][ T3486] Kernel Offset: disabled [ 437.621795][ T3486] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:14:02 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000002 RBX=ffff88806a428400 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8e1a9419 RDI=ffffffff8c400480 RBP=0000000000000287 RSP=ffffc90000127d30 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff8e80a100 R13=0000000000000008 R14=0000000000000100 R15=0000000000000000 RIP=ffffffff8bbdb931 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b32f1dff8 CR3=000000005ceae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81ae6c40 ffffffff8175fc13 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe7d720ed6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe7d720ed6 00007ffe7d720edc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f05f9c35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f05f9c35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f05f9c357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f05f9c35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81ae6bf0 ffffffff81ae6b9b ffffffff81ada848 ffffffff81ada848 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81ada848 ffffffff81ada848 ffffffff81ada81b ffffffff81ada81b ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b58eaa RDX=ffff88801ee92540 RSI=ffffffff81b58ece RDI=ffff88801ee92540 RBP=0000000000000001 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=0000000000000000 RIP=ffffffff81b58ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5eec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fee669efbd0 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff040a0145ae 007366706d747665 6401ffffffffffff ffffed0804800300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7665642f2e01ffff fffffffffffff308 000307fe10000004 01c70800060144ac ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 007665642f2e01ff fffffffffffffff3 08000308000000eb 0000000300000001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000032f6 0000001400000000 0000000000000000 0000000000000017 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000032f6 0000001400000000 0000000000000000 0000000000000017 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 007665642f2e01ff fffffffffffffff3 08000308000000eb 0000000300000001 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00010fffffffffff ff04001000018004 0880040c80040a01 45ae0073666d6172 ZMM25=c847ff8dc847ff8d c847ff8dc847ff8d c847ff8dc847ff8d c847ff8dc847ff8d c847ff8dc847ff8d c847ff8dc847ff8d c847ff8dc847ff8d c847ff8dc847ff8d ZMM26=5affcf585affcf58 5affcf585affcf58 5affcf585affcf58 5affcf585affcf58 5affcf585affcf58 5affcf585affcf58 5affcf585affcf58 5affcf585affcf58 ZMM27=b425b15cb425b15c b425b15cb425b15c b425b15cb425b15c b425b15cb425b15c b425b15cb425b15c b425b15cb425b15c b425b15cb425b15c b425b15cb425b15c ZMM28=000000d0000000cf 000000ce000000cd 000000cc000000cb 000000ca000000c9 000000c8000000c7 000000c6000000c5 000000c4000000c3 000000c2000000c1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ab400000ab400000 ab400000ab400000 ab400000ab400000 ab400000ab400000 ab400000ab400000 ab400000ab400000 ab400000ab400000 ab400000ab400000 info registers vcpu 2 CPU#2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85a350c0 RDI=ffffffff9b9f7ec0 RBP=ffffffff9b9f7e80 RSP=ffffc90005907270 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff373f02a R15=dffffc0000000000 RIP=ffffffff85a350e7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f41f4e186c0 ffffffff 00c00000 GS =0000 ffff8880d5fec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b32d19ff8 CR3=000000003aad2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=0000000080000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa531ba06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa531ba06 00007fffa531ba0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41f4035607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41f4035647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41f40357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41f4035639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41f41f25f8 00007f41f41f25c8 00007f41f41f2600 00007f41f41f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b58eaa RDX=ffff88801f2b2540 RSI=ffffffff81b58ece RDI=ffff88801f2b2540 RBP=0000000000000003 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=0000000000000000 RIP=ffffffff81b58ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005654c9fa1dc8 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000101 Opmask01=0000000000003000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005654c9e825e0 00005654c9e825e0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464646464646464 6464646464646464 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52f1bf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 00000000ff000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 754f4645425d051a 474f475a05414945 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4648051a041a4f49 4b5a594f474b4405 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d6166303030306e 65762c3638783a65 7079743a75706300 5341494c41444f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 505c5b0d0d0d0d53 584b110b05450758 4d444907484d5e00 5341494c41444f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3432302c36313230 2c453032302c4330 32302c423032302c 413032302c393032 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c323832302c4635 32302c443532302c 423532302c413532 302c413432302c34 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3532302c42353230 2c413532302c4134 32302c343432302c 363132302c453032 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c433032302c42 3032302c41303230 2c393032302c3830 32302c363032302c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554500484e2d4945 2f45524144004449 0053242d5457452d 484e2d4953242d54 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000