last executing test programs: 2.690813405s ago: executing program 1 (id=1226): setns(0xc9, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f000000ae80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f000000aec0)={0x0, 0x0, &(0x7f000000af00)={&(0x7f000000af40)={0x14, r0, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) 2.541805723s ago: executing program 1 (id=1227): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./sys\x00', &(0x7f00000006c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm_intel/parameters/vmentry_l1d_flush\x00', 0x2, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10}, 0x10) 2.442773743s ago: executing program 1 (id=1229): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='ra', 0x2) 2.17012352s ago: executing program 1 (id=1233): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x700, &(0x7f0000000380)=ANY=[@ANYBLOB='dyn']) fchownat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xee01, 0xee01, 0x1000) umount2(&(0x7f0000000440)='./file0\x00', 0x9) 1.858235176s ago: executing program 1 (id=1237): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$cgroup(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x30a0024, &(0x7f0000000040)={[{@name={'name', 0x3d, 'noprefix'}}]}) 1.695975551s ago: executing program 1 (id=1238): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000300)='7', 0x1) syz_usb_disconnect(r0) 1.138267131s ago: executing program 0 (id=1242): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='\x01') syz_io_uring_setup(0x66a9, &(0x7f0000000140)={0x0, 0x6e96, 0x10000, 0x2, 0x166}, &(0x7f0000000080), &(0x7f0000001040), &(0x7f0000000000)) 1.137967455s ago: executing program 3 (id=1243): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/net/bridge0/bridge/priority\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000004e80)={0x2020}, 0x2020) 1.014059757s ago: executing program 3 (id=1245): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/syz_tun/napi_defer_hard_irqs\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) 949.699075ms ago: executing program 0 (id=1247): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0', 0x1) 819.628705ms ago: executing program 3 (id=1248): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)="8d", 0x1) 774.502054ms ago: executing program 0 (id=1249): mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='bfq', 0x3) 628.409458ms ago: executing program 2 (id=1250): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='2\n}', 0x3) 628.260531ms ago: executing program 3 (id=1251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r2, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 560.299694ms ago: executing program 2 (id=1252): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1d7) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000880)="0177f29f", 0x4) 553.761485ms ago: executing program 3 (id=1253): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r0, &(0x7f0000000640)='1', 0x1) 406.463102ms ago: executing program 0 (id=1254): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/class/vtconsole/vtcon0/bind\x00', 0x1, 0x0) write(r0, &(0x7f00000007c0)='!', 0x1) 406.314308ms ago: executing program 3 (id=1255): syz_usb_connect(0x0, 0x2e, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000200000040440647800001db80d36609021c0001010080fa0904030000010100000a240100010a0002"], 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000002c0)={[{0x7f, 0x1003, 0x5, 0x2, 0xae, 0x40, 0x2d, 0x2, 0x1, 0x8, 0xa, 0x4, 0x7}, {0x2, 0x7ff, 0xc8, 0x4, 0x1, 0x0, 0x1, 0x0, 0x6, 0xc, 0x0, 0x9, 0xb64}, {0x3ff, 0x6, 0x9, 0x2, 0xf3, 0x4, 0x1, 0x43, 0x5, 0x6, 0x81, 0x4, 0xb4}], 0x2}) r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x3, 0x0) ioctl(r0, 0xc4c85512, &(0x7f00000002c0)) 311.687122ms ago: executing program 2 (id=1256): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='0', 0x1) 241.421964ms ago: executing program 2 (id=1257): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000", @ANYBLOB, @ANYRES8=r0], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) 217.529358ms ago: executing program 0 (id=1258): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0x12, 0x4, &(0x7f0000001440)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 122.027992ms ago: executing program 2 (id=1259): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="8211da", 0x3}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 119.163757ms ago: executing program 0 (id=1260): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x9, 0xac8, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000003c0)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@remote, 0x4e23, 0x3, 0x1c8, 0x12d63, 0x7}}, 0x44) sendmsg$sock(r1, &(0x7f0000000440)={&(0x7f00000005c0)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 0s ago: executing program 2 (id=1261): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./config\x00', &(0x7f0000000680)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='usbip-vudc.0', 0xc) kernel console output (not intermixed with test programs): (1792485267.982:291): avc: denied { open } for pid=6094 comm="syz.0.63" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 124.623806][ T43] audit: type=1400 audit(1792485267.982:292): avc: denied { ioctl } for pid=6094 comm="syz.0.63" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 124.872697][ T6102] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 125.331863][ T50] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 125.510415][ T50] usb 7-1: Using ep0 maxpacket: 16 [ 125.513455][ T50] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 125.516397][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 125.518172][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.518198][ T50] usb 7-1: Product: syz [ 125.518208][ T50] usb 7-1: Manufacturer: syz [ 125.518219][ T50] usb 7-1: SerialNumber: syz [ 125.532783][ T50] usb 7-1: config 0 descriptor?? [ 125.546338][ T50] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 125.546368][ T50] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 125.638826][ T43] audit: type=1400 audit(1792485268.982:293): avc: denied { read write } for pid=6112 comm="syz.3.70" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 125.638880][ T43] audit: type=1400 audit(1792485268.982:294): avc: denied { open } for pid=6112 comm="syz.3.70" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 125.643898][ T43] audit: type=1400 audit(1792485268.992:295): avc: denied { create_files_as } for pid=6112 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=kernel_service permissive=1 [ 125.646176][ T6113] CacheFiles: mkdir cache failed with error -1 [ 125.646235][ T6113] CacheFiles: Failed to register: -1 [ 125.865889][ T5759] Bluetooth: hci1: command 0x0406 tx timeout [ 125.883961][ T50] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 125.892250][ T6118] FAULT_INJECTION: forcing a failure. [ 125.892250][ T6118] name failslab, interval 1, probability 0, space 0, times 0 [ 125.892283][ T6118] CPU: 0 UID: 0 PID: 6118 Comm: syz.3.71 Not tainted syzkaller #0 PREEMPT(full) [ 125.892306][ T6118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.892318][ T6118] Call Trace: [ 125.892326][ T6118] [ 125.892335][ T6118] dump_stack_lvl+0x100/0x190 [ 125.892409][ T6118] should_fail_ex.cold+0x5/0xa [ 125.892448][ T6118] should_failslab+0xc2/0x120 [ 125.892492][ T6118] kmem_cache_alloc_noprof+0x92/0x6a0 [ 125.892520][ T6118] ? pidfs_register_pid_gfp+0x98/0x1f0 [ 125.892557][ T6118] pidfs_register_pid_gfp+0x98/0x1f0 [ 125.892579][ T6118] __pidfs_register_pids+0x76/0xd0 [ 125.892600][ T6118] unix_socketpair+0x323/0xca0 [ 125.892642][ T6118] ? __pfx_unix_socketpair+0x10/0x10 [ 125.892664][ T6118] ? _raw_spin_unlock+0x28/0x50 [ 125.892703][ T6118] ? bpf_lsm_socket_post_create+0x9/0x10 [ 125.892731][ T6118] ? security_socket_post_create+0x85/0x270 [ 125.892774][ T6118] ? __sock_create+0xa3/0x860 [ 125.892814][ T6118] ? selinux_socket_socketpair+0x13/0x1c0 [ 125.892841][ T6118] __sys_socketpair+0x2f7/0x5b0 [ 125.892870][ T6118] ? __pfx___sys_socketpair+0x10/0x10 [ 125.892899][ T6118] ? xfd_validate_state+0x129/0x190 [ 125.892943][ T6118] __x64_sys_socketpair+0x96/0x100 [ 125.892971][ T6118] ? lockdep_hardirqs_on+0x7d/0x110 [ 125.893000][ T6118] do_syscall_64+0x123/0x790 [ 125.893032][ T6118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.893053][ T6118] RIP: 0033:0x7f1f58f9e559 [ 125.893072][ T6118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.893090][ T6118] RSP: 002b:00007f1f59f13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 125.893112][ T6118] RAX: ffffffffffffffda RBX: 00007f1f59225fa0 RCX: 00007f1f58f9e559 [ 125.893124][ T6118] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 125.893136][ T6118] RBP: 00007f1f59035b20 R08: 0000000000000000 R09: 0000000000000000 [ 125.893147][ T6118] R10: 0000200000002400 R11: 0000000000000246 R12: 0000000000000000 [ 125.893160][ T6118] R13: 00007f1f59226038 R14: 00007f1f59225fa0 R15: 00007fffea53b538 [ 125.893196][ T6118] [ 125.959276][ T50] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 125.959324][ T50] em28xx 7-1:0.0: board has no eeprom [ 126.003084][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.022378][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.022761][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.023107][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.023454][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.023798][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.024157][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.024505][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.024844][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.025213][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.025547][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.025886][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.026227][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.026582][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.026917][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.027538][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.028565][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.028938][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.029311][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.029657][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.030005][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.031414][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.032559][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.036406][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.038789][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.045610][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.046003][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.055663][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.056067][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.056452][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.056833][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.060585][ T50] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 126.060604][ T50] em28xx 7-1:0.0: dvb set to bulk mode. [ 126.062628][ T5848] em28xx 7-1:0.0: Binding DVB extension [ 126.064943][ T6106] em28xx 7-1:0.0: writing to i2c device at 0x4 failed (error=-5) [ 126.065873][ T6106] i2c i2c-2: new_device: Instantiated device saa7115 at 0x02 [ 126.110013][ T50] usb 7-1: USB disconnect, device number 2 [ 126.140471][ T50] em28xx 7-1:0.0: Disconnecting em28xx [ 126.194371][ T5848] em28xx 7-1:0.0: Registering input extension [ 126.195030][ T50] em28xx 7-1:0.0: Closing input extension [ 126.284115][ T50] em28xx: Freeing device [ 126.781881][ T6133] syz.3.76 uses obsolete (PF_INET,SOCK_PACKET) [ 126.785235][ T6135] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 126.785268][ T6135] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 126.785284][ T6135] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x7251 instead [ 126.785302][ T6135] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x8ec8 instead [ 126.788988][ T6135] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 126.789012][ T6135] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 126.789028][ T6135] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 126.789047][ T6135] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 126.789074][ T6135] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 126.789104][ T6135] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 126.789118][ T6135] jffs2: Further such events for this erase block will not be printed [ 126.789466][ T6135] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 126.789485][ T6135] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 126.789502][ T6135] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x7251 instead [ 126.789521][ T6135] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x8ec8 instead [ 126.789536][ T6135] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 126.789551][ T6135] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 126.789565][ T6135] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 126.789584][ T6135] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 126.789614][ T6135] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 126.789644][ T6135] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 126.789657][ T6135] jffs2: Further such events for this erase block will not be printed [ 126.831948][ T6135] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 126.831966][ T6135] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 126.837962][ T6137] netlink: 'syz.2.78': attribute type 1 has an invalid length. [ 126.887238][ T6139] netlink: 60 bytes leftover after parsing attributes in process `syz.0.77'. [ 127.032011][ T6142] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 127.179738][ T6137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.409435][ T6141] bond1: (slave veth1): Enslaving as an active interface with a down link [ 127.960514][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 127.960553][ T43] audit: type=1400 audit(1792485271.312:299): avc: denied { write } for pid=6171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.020409][ T43] audit: type=1400 audit(1792485271.372:300): avc: denied { ioctl } for pid=6175 comm="syz.3.84" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 128.020455][ T43] audit: type=1400 audit(1792485271.372:301): avc: denied { set_context_mgr } for pid=6175 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 128.023339][ T43] audit: type=1400 audit(1792485271.382:302): avc: denied { call } for pid=6175 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 128.146083][ T43] audit: type=1400 audit(1792485271.492:303): avc: denied { write } for pid=6177 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.547202][ T43] audit: type=1400 audit(1792485271.902:304): avc: denied { write } for pid=6187 comm="syz.2.89" path="socket:[12658]" dev="sockfs" ino=12658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.906451][ T43] audit: type=1400 audit(1792485272.262:305): avc: denied { write } for pid=6197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.928468][ T43] audit: type=1400 audit(1792485272.292:306): avc: denied { write } for pid=6198 comm="syz.3.92" name="/" dev="9p" ino=71827691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.928518][ T43] audit: type=1400 audit(1792485272.292:307): avc: denied { add_name } for pid=6198 comm="syz.3.92" name="blkio.throttle.io_service_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.025177][ T43] audit: type=1400 audit(1792485272.352:308): avc: denied { write } for pid=6198 comm="syz.3.92" name="blkio.throttle.io_service_bytes" dev="9p" ino=71827815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 129.264788][ T6209] overlayfs: failed to resolve './file0': -2 [ 129.465945][ T6216] Zero length message leads to an empty skb [ 129.547231][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.96'. [ 130.231749][ T6237] ip6gre1: entered promiscuous mode [ 130.231771][ T6237] ip6gre1: entered allmulticast mode [ 130.238370][ T5792] bond1: (slave veth1): link status definitely up, 10000 Mbps full duplex [ 130.239251][ T5792] bond1: (slave veth1): making interface the new active one [ 130.259904][ T5792] bond1: active interface up! [ 130.445113][ T6247] netlink: 'syz.0.102': attribute type 1 has an invalid length. [ 130.613850][ T6251] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.652749][ T6247] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.367689][ T5759] Bluetooth: hci0: command 0x1405 tx timeout [ 131.367806][ T5754] Bluetooth: hci0: Opcode 0x1405 failed: -110 [ 131.876830][ T6280] FAULT_INJECTION: forcing a failure. [ 131.876830][ T6280] name failslab, interval 1, probability 0, space 0, times 0 [ 131.876877][ T6280] CPU: 3 UID: 0 PID: 6280 Comm: syz.1.109 Not tainted syzkaller #0 PREEMPT(full) [ 131.876900][ T6280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.876923][ T6280] Call Trace: [ 131.876950][ T6280] [ 131.876960][ T6280] dump_stack_lvl+0x100/0x190 [ 131.877009][ T6280] should_fail_ex.cold+0x5/0xa [ 131.877035][ T6280] should_failslab+0xc2/0x120 [ 131.877070][ T6280] __kmalloc_noprof+0xfc/0x840 [ 131.877095][ T6280] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 131.877115][ T6280] ? mpi_alloc_limb_space+0x31/0x60 [ 131.877162][ T6280] mpi_alloc_limb_space+0x31/0x60 [ 131.877188][ T6280] mpi_alloc+0x199/0x230 [ 131.877215][ T6280] mpi_read_raw_from_sgl+0x251/0x620 [ 131.877243][ T6280] ? __pfx_mpi_read_raw_from_sgl+0x10/0x10 [ 131.877267][ T6280] ? kasan_save_track+0x14/0x30 [ 131.877299][ T6280] ? mpi_alloc+0x46/0x230 [ 131.877331][ T6280] rsa_enc+0x15d/0x3b0 [ 131.877357][ T6280] ? __pfx_rsa_enc+0x10/0x10 [ 131.877383][ T6280] ? __virt_addr_valid+0x239/0x430 [ 131.877406][ T6280] ? sg_init_one+0xf5/0x1b0 [ 131.877432][ T6280] rsassa_pkcs1_verify+0x4eb/0xc20 [ 131.877460][ T6280] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 131.877495][ T6280] ? rsa_max_size+0xd/0x70 [ 131.877519][ T6280] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 131.877541][ T6280] public_key_verify_signature+0x5ee/0x910 [ 131.877571][ T6280] ? __pfx_public_key_verify_signature+0x10/0x10 [ 131.877609][ T6280] ? asymmetric_key_generate_id+0x7e/0x180 [ 131.877635][ T6280] x509_check_for_self_signed+0x325/0x510 [ 131.877664][ T6280] x509_cert_parse+0x60c/0x910 [ 131.877703][ T6280] x509_key_preparse+0x65/0x9c0 [ 131.877734][ T6280] asymmetric_key_preparse+0xce/0x1d0 [ 131.877753][ T6280] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 131.877775][ T6280] __key_create_or_update+0x413/0xe30 [ 131.877810][ T6280] ? __pfx___key_create_or_update+0x10/0x10 [ 131.877839][ T6280] ? lookup_user_key+0x3f3/0x1300 [ 131.877878][ T6280] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 131.877906][ T6280] ? __pfx_keyring_search_iterator+0x10/0x10 [ 131.877928][ T6280] key_create_or_update+0x42/0x60 [ 131.877950][ T6280] __do_sys_add_key+0x2e8/0x460 [ 131.877974][ T6280] ? __pfx___do_sys_add_key+0x10/0x10 [ 131.878007][ T6280] do_syscall_64+0x123/0x790 [ 131.878051][ T6280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.878072][ T6280] RIP: 0033:0x7f4ccc59e559 [ 131.878104][ T6280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.878123][ T6280] RSP: 002b:00007f4ccd380028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 131.878143][ T6280] RAX: ffffffffffffffda RBX: 00007f4ccc825fa0 RCX: 00007f4ccc59e559 [ 131.878155][ T6280] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 131.878166][ T6280] RBP: 00007f4ccc635b20 R08: 000000003ada4a96 R09: 0000000000000000 [ 131.878178][ T6280] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 131.878188][ T6280] R13: 00007f4ccc826038 R14: 00007f4ccc825fa0 R15: 00007ffe85185b98 [ 131.878215][ T6280] [ 132.101230][ T6282] process 'syz.0.110' launched './file0' with NULL argv: empty string added [ 133.133655][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 133.133693][ T43] audit: type=1400 audit(1792485276.492:333): avc: denied { write } for pid=6305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.270458][ T1977] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 133.441310][ T1977] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 133.443127][ T1977] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.490799][ T43] audit: type=1400 audit(1792485276.792:334): avc: denied { execute } for pid=6312 comm="syz.1.116" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=1028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.722403][ T6315] FAULT_INJECTION: forcing a failure. [ 133.722403][ T6315] name failslab, interval 1, probability 0, space 0, times 0 [ 133.722432][ T6315] CPU: 1 UID: 0 PID: 6315 Comm: syz.1.117 Not tainted syzkaller #0 PREEMPT(full) [ 133.722450][ T6315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.722460][ T6315] Call Trace: [ 133.722466][ T6315] [ 133.722473][ T6315] dump_stack_lvl+0x100/0x190 [ 133.722502][ T6315] should_fail_ex.cold+0x5/0xa [ 133.722526][ T6315] should_failslab+0xc2/0x120 [ 133.722551][ T6315] __kmalloc_cache_node_noprof+0x94/0x720 [ 133.722575][ T6315] ? __alloc_workqueue+0x6f2/0x1950 [ 133.722602][ T6315] __alloc_workqueue+0x6f2/0x1950 [ 133.722640][ T6315] alloc_workqueue_noprof+0xc7/0x130 [ 133.722668][ T6315] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 133.722689][ T6315] ? __pfx_dev_set_name+0x10/0x10 [ 133.722730][ T6315] ? __kasan_kmalloc+0xaa/0xb0 [ 133.722753][ T6315] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 133.722773][ T6315] hci_register_dev+0x240/0xcc0 [ 133.722799][ T6315] hci_uart_tty_ioctl+0x8fd/0xcb0 [ 133.722831][ T6315] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 133.722850][ T6315] tty_ioctl+0x12f4/0x1870 [ 133.722875][ T6315] ? __pfx_tty_ioctl+0x10/0x10 [ 133.722887][ T6315] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 133.722915][ T6315] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 133.722944][ T6315] ? __fget_files+0x34/0x3d0 [ 133.722976][ T6315] ? selinux_file_ioctl+0x13b/0x290 [ 133.722998][ T6315] ? selinux_file_ioctl+0xb6/0x290 [ 133.723023][ T6315] ? __pfx_tty_ioctl+0x10/0x10 [ 133.723038][ T6315] __x64_sys_ioctl+0x18e/0x210 [ 133.723058][ T6315] do_syscall_64+0x123/0x790 [ 133.723086][ T6315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.723102][ T6315] RIP: 0033:0x7f4ccc59e559 [ 133.723116][ T6315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.723129][ T6315] RSP: 002b:00007f4ccd380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.723145][ T6315] RAX: ffffffffffffffda RBX: 00007f4ccc825fa0 RCX: 00007f4ccc59e559 [ 133.723154][ T6315] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 133.723162][ T6315] RBP: 00007f4ccc635b20 R08: 0000000000000000 R09: 0000000000000000 [ 133.723170][ T6315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.723179][ T6315] R13: 00007f4ccc826038 R14: 00007f4ccc825fa0 R15: 00007ffe85185b98 [ 133.723199][ T6315] [ 133.765739][ T43] audit: type=1400 audit(1792485277.092:335): avc: denied { write } for pid=6311 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.766809][ T6315] Bluetooth: Can't register HCI device [ 133.818458][ T1977] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 134.091023][ T43] audit: type=1400 audit(1792485277.452:336): avc: denied { create } for pid=6318 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 134.091948][ T43] audit: type=1400 audit(1792485277.452:337): avc: denied { bind } for pid=6318 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 134.092608][ T43] audit: type=1400 audit(1792485277.452:338): avc: denied { listen } for pid=6318 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 134.257526][ T5847] usb 8-1: USB disconnect, device number 2 [ 134.590712][ T43] audit: type=1400 audit(1792485277.932:339): avc: denied { write } for pid=6321 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.778400][ T6326] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 134.869457][ T43] audit: type=1400 audit(1792485278.222:340): avc: denied { write } for pid=6324 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.987840][ T43] audit: type=1800 audit(1792485278.332:341): pid=6332 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.121" name=08 dev="sda1" ino=2039 res=0 errno=0 [ 135.575348][ T43] audit: type=1400 audit(1792485278.932:342): avc: denied { mount } for pid=6327 comm="syz.1.120" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 135.576459][ T6330] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 135.950424][ T1977] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 136.119439][ T1977] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 136.136476][ T1977] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.136641][ T1977] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.189330][ T1977] usb 8-1: config 0 descriptor?? [ 136.585909][ T1977] usbhid 8-1:0.0: can't add hid device: -71 [ 136.585988][ T1977] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 136.600627][ T6362] CIFS: Attempting to mount //127.0.0.1/share [ 136.610163][ T1977] usb 8-1: USB disconnect, device number 3 [ 136.700448][ T6363] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 137.413750][ T6362] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 137.414442][ T6362] CIFS: VFS: cifs_mount failed w/return code = -11 [ 137.703300][ T6381] FAULT_INJECTION: forcing a failure. [ 137.703300][ T6381] name failslab, interval 1, probability 0, space 0, times 0 [ 137.703334][ T6381] CPU: 3 UID: 0 PID: 6381 Comm: syz.0.131 Not tainted syzkaller #0 PREEMPT(full) [ 137.703357][ T6381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.703369][ T6381] Call Trace: [ 137.703377][ T6381] [ 137.703385][ T6381] dump_stack_lvl+0x100/0x190 [ 137.703420][ T6381] should_fail_ex.cold+0x5/0xa [ 137.703447][ T6381] should_failslab+0xc2/0x120 [ 137.703476][ T6381] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 137.703504][ T6381] ? __alloc_skb+0x140/0x710 [ 137.703528][ T6381] __alloc_skb+0x140/0x710 [ 137.703571][ T6381] ? __alloc_skb+0x5b7/0x710 [ 137.703590][ T6381] ? __pfx___alloc_skb+0x10/0x10 [ 137.703609][ T6381] ? genl_rcv_msg+0x4be/0x800 [ 137.703639][ T6381] netlink_ack+0x117/0xb80 [ 137.703665][ T6381] netlink_rcv_skb+0x333/0x420 [ 137.703684][ T6381] ? __pfx_genl_rcv_msg+0x10/0x10 [ 137.703707][ T6381] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 137.703737][ T6381] ? netlink_deliver_tap+0x1ae/0xcc0 [ 137.703771][ T6381] genl_rcv+0x28/0x40 [ 137.703788][ T6381] netlink_unicast+0x65f/0x950 [ 137.703810][ T6381] ? __pfx_netlink_unicast+0x10/0x10 [ 137.703837][ T6381] netlink_sendmsg+0xa02/0x1020 [ 137.703863][ T6381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.703888][ T6381] ? selinux_socket_sendmsg+0x198/0x2f0 [ 137.703921][ T6381] ? __sys_sendto+0x48b/0x4e0 [ 137.703938][ T6381] __sys_sendto+0x48b/0x4e0 [ 137.703954][ T6381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.703974][ T6381] ? __pfx___sys_sendto+0x10/0x10 [ 137.703998][ T6381] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 137.704044][ T6381] __x64_sys_sendto+0xe0/0x1c0 [ 137.704062][ T6381] ? do_syscall_64+0xae/0x790 [ 137.704092][ T6381] ? lockdep_hardirqs_on+0x7d/0x110 [ 137.704119][ T6381] do_syscall_64+0x123/0x790 [ 137.704151][ T6381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.704169][ T6381] RIP: 0033:0x7f24fbd5ed8e [ 137.704185][ T6381] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 137.704202][ T6381] RSP: 002b:00007f24fccb7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 137.704222][ T6381] RAX: ffffffffffffffda RBX: 00007f24fccb96c0 RCX: 00007f24fbd5ed8e [ 137.704235][ T6381] RDX: 0000000000000020 RSI: 00007f24fccb8000 RDI: 0000000000000005 [ 137.704247][ T6381] RBP: 0000000000000000 R08: 00007f24fccb7f04 R09: 000000000000000c [ 137.704258][ T6381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 137.704270][ T6381] R13: 00007f24fccb7f58 R14: 00007f24fccb8000 R15: 0000000000000000 [ 137.704303][ T6381] [ 137.782406][ T5847] hid-generic 0003:0001:0001.0002: hidraw1: USB HID v0.01 Mouse [syz1] on syz0 [ 138.049724][ T6383] fido_id[6383]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 138.510525][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 138.510545][ T43] audit: type=1400 audit(1792485281.852:358): avc: denied { mount } for pid=6384 comm="syz.3.134" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 138.556549][ T43] audit: type=1400 audit(1792485281.892:359): avc: denied { write } for pid=6384 comm="syz.3.134" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 138.618423][ T43] audit: type=1400 audit(1792485281.982:360): avc: denied { create } for pid=6385 comm="syz.0.132" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 138.678247][ T43] audit: type=1400 audit(1792485282.042:361): avc: denied { unmount } for pid=5744 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 138.955130][ T6398] netlink: 'syz.1.136': attribute type 1 has an invalid length. [ 138.958494][ T6394] bond1: (slave vlan2): making interface the new active one [ 138.997193][ T6394] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 139.085806][ T43] audit: type=1400 audit(1792485282.442:362): avc: denied { write } for pid=6397 comm="syz.1.136" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.140860][ T6398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.179066][ T6396] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 139.317327][ T6390] ceph: No mds server is up or the cluster is laggy [ 139.766618][ T43] audit: type=1400 audit(1792485283.112:363): avc: denied { mmap_zero } for pid=6406 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 139.769630][ T43] audit: type=1400 audit(1792485283.112:364): avc: denied { map } for pid=6406 comm="syz.0.139" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 139.769696][ T43] audit: type=1400 audit(1792485283.112:365): avc: denied { read write } for pid=6406 comm="syz.0.139" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 139.782001][ T43] audit: type=1400 audit(1792485283.112:366): avc: denied { map } for pid=6406 comm="syz.0.139" path="socket:[14337]" dev="sockfs" ino=14337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 139.784859][ T6405] batman_adv: batadv0: Adding interface: dummy0 [ 139.784877][ T6405] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.784903][ T6405] batman_adv: batadv0: Interface activated: dummy0 [ 139.788320][ T43] audit: type=1400 audit(1792485283.142:367): avc: denied { create } for pid=6404 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 140.048753][ T6411] batadv0: mtu less than device minimum [ 140.049820][ T6411] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.050792][ T6411] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.051745][ T6411] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.052649][ T6411] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.053614][ T6411] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.054607][ T6411] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.057568][ T6411] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.058549][ T6411] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.059461][ T6411] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 140.083852][ T6396] infiniband syz0: set active [ 140.083962][ T6396] infiniband syz0: added bond0 [ 140.085542][ T6396] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 140.131601][ T6396] infiniband syz0: Couldn't open port 1 [ 140.131926][ T6396] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 140.131957][ T6396] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 140.131993][ T6396] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 140.163765][ T6396] RDS/IB: syz0: added [ 140.163809][ T6396] smc: adding ib device syz0 with port count 1 [ 140.163824][ T6396] smc: ib device syz0 port 1 has no pnetid [ 141.555351][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 141.667175][ T6431] udc dummy_udc.0: failed to start g1: -19 [ 141.697435][ T6431] UDC core: g1: couldn't find an available UDC or it's busy [ 141.840683][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.440005][ T6443] netlink: 'syz.0.146': attribute type 1 has an invalid length. [ 142.547740][ T6443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.675277][ T6447] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 143.330793][ T5847] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 143.486293][ T6457] smbdirect: ib_dev[rxe0] renamed to [syz1] [ 143.533738][ T5847] usb 8-1: New USB device found, idVendor=045e, idProduct=02ae, bcdDevice=55.0c [ 143.534307][ T5847] usb 8-1: config 0 has no interfaces? [ 143.536287][ T5847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.536310][ T5847] usb 8-1: Product: syz [ 143.536323][ T5847] usb 8-1: Manufacturer: syz [ 143.536336][ T5847] usb 8-1: SerialNumber: syz [ 143.550726][ T5847] usb 8-1: config 0 descriptor?? [ 143.928952][ T6462] 0x000000000003-0x000000010001 : "" [ 143.937804][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 143.937822][ T43] audit: type=1400 audit(1792485287.292:395): avc: denied { read write } for pid=6459 comm="syz.2.149" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 143.937867][ T43] audit: type=1400 audit(1792485287.292:396): avc: denied { open } for pid=6459 comm="syz.2.149" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 143.937900][ T43] audit: type=1400 audit(1792485287.292:397): avc: denied { ioctl } for pid=6459 comm="syz.2.149" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 143.964675][ T6467] netlink: 'syz.0.150': attribute type 13 has an invalid length. [ 144.073790][ T6462] ftl_cs: FTL header corrupt! [ 144.170925][ T43] audit: type=1400 audit(1792485287.512:398): avc: denied { write } for pid=6469 comm="syz.0.151" name="nbd0" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.171936][ T43] audit: type=1400 audit(1792485287.512:399): avc: denied { read } for pid=6469 comm="syz.0.151" name="frontend0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 144.172239][ T43] audit: type=1400 audit(1792485287.512:400): avc: denied { open } for pid=6469 comm="syz.0.151" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 144.177918][ T5847] usb 8-1: USB disconnect, device number 4 [ 144.373407][ T43] audit: type=1400 audit(1792485287.732:401): avc: denied { write } for pid=6471 comm="syz.2.152" name="video2" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 144.388728][ T6472] FAULT_INJECTION: forcing a failure. [ 144.388728][ T6472] name failslab, interval 1, probability 0, space 0, times 0 [ 144.388761][ T6472] CPU: 3 UID: 0 PID: 6472 Comm: syz.2.152 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.388794][ T6472] Tainted: [L]=SOFTLOCKUP [ 144.388801][ T6472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.388814][ T6472] Call Trace: [ 144.388820][ T6472] [ 144.388828][ T6472] dump_stack_lvl+0x100/0x190 [ 144.388862][ T6472] should_fail_ex.cold+0x5/0xa [ 144.388890][ T6472] should_failslab+0xc2/0x120 [ 144.388917][ T6472] kmem_cache_alloc_noprof+0x92/0x6a0 [ 144.388939][ T6472] ? __pfx_map_id_range_down+0x10/0x10 [ 144.388963][ T6472] ? rcu_is_watching+0x13/0xc0 [ 144.388988][ T6472] ? security_inode_alloc+0x3b/0x2c0 [ 144.389017][ T6472] security_inode_alloc+0x3b/0x2c0 [ 144.389043][ T6472] inode_init_always_gfp+0xc6f/0xfb0 [ 144.389076][ T6472] alloc_inode+0x8e/0x250 [ 144.389098][ T6472] sock_alloc+0x44/0x280 [ 144.389119][ T6472] ? security_socket_create+0x7f/0x250 [ 144.389143][ T6472] __sock_create+0xc2/0x860 [ 144.389178][ T6472] ? proc_create_reg+0xd7/0x170 [ 144.389207][ T6472] inet_ctl_sock_create+0x94/0x230 [ 144.389234][ T6472] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 144.389259][ T6472] ? lockdep_init_map_type+0x5c/0x250 [ 144.389282][ T6472] ? lockdep_init_map_type+0x5c/0x250 [ 144.389304][ T6472] ? __pfx_igmp_net_init+0x10/0x10 [ 144.389321][ T6472] igmp_net_init+0xd0/0x150 [ 144.389338][ T6472] ops_init+0x1e2/0x5f0 [ 144.389362][ T6472] setup_net+0x118/0x3a0 [ 144.389384][ T6472] ? __pfx_setup_net+0x10/0x10 [ 144.389414][ T6472] copy_net_ns+0x345/0x7a0 [ 144.389440][ T6472] create_new_namespaces+0x3ea/0xac0 [ 144.389496][ T6472] unshare_nsproxy_namespaces+0xf2/0x220 [ 144.389522][ T6472] ksys_unshare+0x44f/0x980 [ 144.389545][ T6472] ? __pfx_ksys_unshare+0x10/0x10 [ 144.389579][ T6472] __x64_sys_unshare+0x31/0x40 [ 144.389601][ T6472] do_syscall_64+0x123/0x790 [ 144.389630][ T6472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.389648][ T6472] RIP: 0033:0x7fea3e79e559 [ 144.389664][ T6472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.389680][ T6472] RSP: 002b:00007fea3f5a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 144.389698][ T6472] RAX: ffffffffffffffda RBX: 00007fea3ea25fa0 RCX: 00007fea3e79e559 [ 144.389711][ T6472] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 144.389722][ T6472] RBP: 00007fea3e835b20 R08: 0000000000000000 R09: 0000000000000000 [ 144.389733][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.389743][ T6472] R13: 00007fea3ea26038 R14: 00007fea3ea25fa0 R15: 00007fffc5db59a8 [ 144.389769][ T6472] [ 144.389855][ T6472] Failed to initialize the IGMP autojoin socket (err -23) [ 144.422438][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.422505][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.426161][ T5157] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 144.571332][ T5157] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 144.572512][ T5157] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 144.572534][ T5157] usb 5-1: config 1 has no interface number 0 [ 144.574848][ T5157] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.574870][ T5157] usb 5-1: Product: syz [ 144.574882][ T5157] usb 5-1: Manufacturer: syz [ 144.574894][ T5157] usb 5-1: SerialNumber: syz [ 144.591843][ T5157] usb 5-1: 3:1 : does not exist [ 144.591864][ T5157] usb 5-1: 3:2 : does not exist [ 145.098982][ T43] audit: type=1400 audit(1792485288.452:402): avc: denied { setopt } for pid=6477 comm="syz.3.154" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.386278][ T43] audit: type=1400 audit(1792485288.752:403): avc: denied { ioctl } for pid=6481 comm="syz.1.155" path="/dev/video0" dev="devtmpfs" ino=952 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 145.434385][ T1844] usb 5-1: USB disconnect, device number 2 [ 145.715000][ T6488] net_ratelimit: 11 callbacks suppressed [ 145.715020][ T6488] ip_tables: iptables: counters copy to user failed while replacing table [ 145.716408][ T43] audit: type=1400 audit(1792485289.082:404): avc: denied { read } for pid=6485 comm="syz.3.156" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 145.831731][ T6486] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 146.298912][ T6496] xt_HMARK: spi-set and port-set can't be combined [ 146.409494][ T6488] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.409687][ T6488] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 146.429196][ T6488] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 146.451988][ T6488] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.452052][ T6488] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 146.466338][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 146.521015][ T6488] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.521128][ T6488] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 146.573407][ T6488] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 146.597402][ T6488] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.597942][ T6488] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 146.601973][ T6488] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 147.713722][ T6535] tipc: Started in network mode [ 147.713751][ T6535] tipc: Node identity 7f000001, cluster identity 4711 [ 147.714264][ T6535] tipc: Enabling of bearer rejected, failed to enable media [ 147.739271][ T6535] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 147.740043][ T6535] tipc: Enabled bearer , priority 10 [ 147.866687][ T6533] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 147.889769][ T5759] Bluetooth: hci0: command 0x1405 tx timeout [ 147.935713][ T6543] syzkaller0: entered promiscuous mode [ 147.935735][ T6543] syzkaller0: entered allmulticast mode [ 148.322591][ T6555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 148.322623][ T6555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 148.322638][ T6555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x7251 instead [ 148.322655][ T6555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x8ec8 instead [ 148.322668][ T6555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 148.322680][ T6555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 148.322694][ T6555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 148.322710][ T6555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 148.322735][ T6555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 148.322760][ T6555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 148.322773][ T6555] jffs2: Further such events for this erase block will not be printed [ 148.323052][ T6555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 148.323069][ T6555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 148.323083][ T6555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x7251 instead [ 148.323098][ T6555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x8ec8 instead [ 148.323110][ T6555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 148.323121][ T6555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 148.323135][ T6555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 148.323152][ T6555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 148.323190][ T6555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 148.323217][ T6555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 148.323230][ T6555] jffs2: Further such events for this erase block will not be printed [ 148.323565][ T6555] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 148.323575][ T6555] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 148.570521][ T5759] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.570576][ T5759] Bluetooth: hci1: command 0x0406 tx timeout [ 148.640804][ T5754] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.820090][ T6564] lo: entered allmulticast mode [ 148.833166][ T5157] tipc: Node number set to 2130706433 [ 148.947003][ T43] kauditd_printk_skb: 48 callbacks suppressed [ 148.953773][ T43] audit: type=1400 audit(1792485292.222:453): avc: denied { associate } for pid=6558 comm="syz.0.173" name="memory.events" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 148.962847][ T43] audit: type=1400 audit(1792485292.302:454): avc: denied { write } for pid=6569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.981386][ T43] audit: type=1400 audit(1792485292.332:455): avc: denied { write } for pid=6558 comm="syz.0.173" name="/" dev="9p" ino=71827691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.041136][ T43] audit: type=1400 audit(1792485292.392:456): avc: denied { create } for pid=6571 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.062589][ T6575] Invalid source name [ 149.062624][ T6575] UBIFS error (pid: 6575): cannot open "/dev/sg0", error -22 [ 149.062813][ T43] audit: type=1400 audit(1792485292.412:457): avc: denied { mounton } for pid=6574 comm="syz.2.176" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 149.069720][ T43] audit: type=1400 audit(1792485292.412:458): avc: denied { write } for pid=6576 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.158021][ T6572] FAULT_INJECTION: forcing a failure. [ 149.158021][ T6572] name failslab, interval 1, probability 0, space 0, times 0 [ 149.158053][ T6572] CPU: 1 UID: 0 PID: 6572 Comm: syz.3.175 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.158080][ T6572] Tainted: [L]=SOFTLOCKUP [ 149.158087][ T6572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.158099][ T6572] Call Trace: [ 149.158106][ T6572] [ 149.158113][ T6572] dump_stack_lvl+0x100/0x190 [ 149.158148][ T6572] should_fail_ex.cold+0x5/0xa [ 149.158177][ T6572] should_failslab+0xc2/0x120 [ 149.158208][ T6572] __kmalloc_cache_noprof+0x91/0x6d0 [ 149.158231][ T6572] ? kobject_uevent_env+0x263/0x18b0 [ 149.158262][ T6572] kobject_uevent_env+0x263/0x18b0 [ 149.158298][ T6572] netdev_queue_update_kobjects+0x1a7/0x6f0 [ 149.158334][ T6572] netdev_register_kobject+0x2e9/0x410 [ 149.158364][ T6572] register_netdevice+0x15b6/0x25a0 [ 149.158392][ T6572] ? __pfx_register_netdevice+0x10/0x10 [ 149.158423][ T6572] register_netdev+0x34/0x50 [ 149.158444][ T6572] register_candev+0x324/0x760 [ 149.158471][ T6572] ? __pfx_register_candev+0x10/0x10 [ 149.158493][ T6572] ? lockdep_init_map_type+0x5c/0x250 [ 149.158516][ T6572] slcan_open+0x3f3/0x4c0 [ 149.158533][ T6572] ? __pfx_slcan_open+0x10/0x10 [ 149.158549][ T6572] tty_ldisc_open+0xa2/0x120 [ 149.158576][ T6572] tty_set_ldisc+0x325/0x740 [ 149.158603][ T6572] tty_ioctl+0x699/0x1870 [ 149.158631][ T6572] ? __pfx_tty_ioctl+0x10/0x10 [ 149.158649][ T6572] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 149.158680][ T6572] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 149.158710][ T6572] ? __fget_files+0x34/0x3d0 [ 149.158744][ T6572] ? selinux_file_ioctl+0x13b/0x290 [ 149.158767][ T6572] ? selinux_file_ioctl+0xb6/0x290 [ 149.158794][ T6572] ? __pfx_tty_ioctl+0x10/0x10 [ 149.158814][ T6572] __x64_sys_ioctl+0x18e/0x210 [ 149.158840][ T6572] do_syscall_64+0x123/0x790 [ 149.158872][ T6572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.158894][ T6572] RIP: 0033:0x7f1f58f9e559 [ 149.158912][ T6572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.158930][ T6572] RSP: 002b:00007f1f59f13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.158950][ T6572] RAX: ffffffffffffffda RBX: 00007f1f59225fa0 RCX: 00007f1f58f9e559 [ 149.158963][ T6572] RDX: 0000200000000200 RSI: 0000000000005423 RDI: 0000000000000009 [ 149.158976][ T6572] RBP: 00007f1f59035b20 R08: 0000000000000000 R09: 0000000000000000 [ 149.158988][ T6572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.158999][ T6572] R13: 00007f1f59226038 R14: 00007f1f59225fa0 R15: 00007fffea53b538 [ 149.159028][ T6572] [ 149.254039][ T6572] can0: slcan on ttyS3. [ 149.401376][ T43] audit: type=1400 audit(1792485292.752:459): avc: denied { write } for pid=6580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.520353][ T43] audit: type=1400 audit(1792485292.872:460): avc: denied { write } for pid=6587 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.639972][ T6571] can0 (unregistered): slcan off ttyS3. [ 149.793531][ T6593] warning: `syz.1.180' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 149.848944][ T43] audit: type=1400 audit(1792485293.202:461): avc: denied { create } for pid=6590 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 149.871301][ T6593] FAULT_INJECTION: forcing a failure. [ 149.871301][ T6593] name failslab, interval 1, probability 0, space 0, times 0 [ 149.871337][ T6593] CPU: 1 UID: 0 PID: 6593 Comm: syz.1.180 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.871362][ T6593] Tainted: [L]=SOFTLOCKUP [ 149.871369][ T6593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.871380][ T6593] Call Trace: [ 149.871387][ T6593] [ 149.871394][ T6593] dump_stack_lvl+0x100/0x190 [ 149.871426][ T6593] should_fail_ex.cold+0x5/0xa [ 149.871450][ T6593] should_failslab+0xc2/0x120 [ 149.871506][ T6593] kmem_cache_alloc_noprof+0x92/0x6a0 [ 149.871530][ T6593] ? __proc_create+0xc1/0x8f0 [ 149.871549][ T6593] ? __proc_create+0x247/0x8f0 [ 149.871572][ T6593] __proc_create+0x247/0x8f0 [ 149.871593][ T6593] ? __pfx___proc_create+0x10/0x10 [ 149.871630][ T6593] ? __pfx_vsnprintf+0x10/0x10 [ 149.871682][ T6593] proc_create_reg+0x75/0x170 [ 149.871713][ T6593] proc_create_net_data+0x8e/0x1c0 [ 149.871740][ T6593] ? __pfx_proc_create_net_data+0x10/0x10 [ 149.871775][ T6593] xt_proto_init+0x19e/0x780 [ 149.871806][ T6593] ? __pfx_xt_proto_init+0x10/0x10 [ 149.871839][ T6593] ? __pfx_arp_tables_net_init+0x10/0x10 [ 149.871862][ T6593] ops_init+0x1e2/0x5f0 [ 149.871889][ T6593] setup_net+0x118/0x3a0 [ 149.871913][ T6593] ? __pfx_setup_net+0x10/0x10 [ 149.871943][ T6593] copy_net_ns+0x345/0x7a0 [ 149.871972][ T6593] create_new_namespaces+0x3ea/0xac0 [ 149.872004][ T6593] unshare_nsproxy_namespaces+0xf2/0x220 [ 149.872030][ T6593] ksys_unshare+0x44f/0x980 [ 149.872056][ T6593] ? __pfx_ksys_unshare+0x10/0x10 [ 149.872080][ T6593] ? fput+0x7c/0x100 [ 149.872110][ T6593] ? ksys_write+0x1ac/0x250 [ 149.872143][ T6593] __x64_sys_unshare+0x31/0x40 [ 149.872166][ T6593] do_syscall_64+0x123/0x790 [ 149.872197][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.872218][ T6593] RIP: 0033:0x7f4ccc59e559 [ 149.872237][ T6593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.872255][ T6593] RSP: 002b:00007f4ccd380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 149.872278][ T6593] RAX: ffffffffffffffda RBX: 00007f4ccc825fa0 RCX: 00007f4ccc59e559 [ 149.872290][ T6593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 149.872301][ T6593] RBP: 00007f4ccc635b20 R08: 0000000000000000 R09: 0000000000000000 [ 149.872313][ T6593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.872324][ T6593] R13: 00007f4ccc826038 R14: 00007f4ccc825fa0 R15: 00007ffe85185b98 [ 149.872345][ T6593] [ 149.939391][ T5754] Bluetooth: hci0: command 0x1405 tx timeout [ 150.134635][ T43] audit: type=1400 audit(1792485293.472:462): avc: denied { write } for pid=6606 comm="syz.2.185" name="functions" dev="configfs" ino=14634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 150.640564][ T5754] Bluetooth: hci1: command 0x0406 tx timeout [ 150.640600][ T5754] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.727946][ T5759] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.179173][ T6624] bond2: (slave vlan2): making interface the new active one [ 151.224778][ T6629] rdma_rxe: rxe_newlink: failed to add bond0 [ 151.281940][ T6624] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 151.347014][ T5759] Bluetooth: hci0: unexpected event for opcode 0x0401 [ 152.170919][ T5759] Bluetooth: hci0: unexpected event for opcode 0x2016 [ 152.482213][ T5759] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 152.723338][ T5759] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.905439][ T5759] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 153.000232][ T6691] netlink: 'syz.3.222': attribute type 16 has an invalid length. [ 153.000253][ T6691] netlink: 'syz.3.222': attribute type 17 has an invalid length. [ 153.111804][ T6691] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.121799][ T6691] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.252022][ T12] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 153.252415][ T6691] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.349539][ T6703] netlink: 64 bytes leftover after parsing attributes in process `syz.0.226'. [ 153.609285][ T6699] null_blk: disk nullb1 created [ 154.063160][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 154.063181][ T43] audit: type=1400 audit(1792485298.422:481): avc: denied { write } for pid=6713 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.223782][ T43] audit: type=1400 audit(1792485298.562:482): avc: denied { write } for pid=6724 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.337681][ T6726] bond3: entered promiscuous mode [ 154.432221][ T6734] netlink: 'syz.3.235': attribute type 2 has an invalid length. [ 154.432245][ T6734] netlink: 224 bytes leftover after parsing attributes in process `syz.3.235'. [ 154.578107][ T43] audit: type=1400 audit(1792485298.932:483): avc: denied { write } for pid=6732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.650786][ T43] audit: type=1400 audit(1792485299.002:484): avc: denied { read } for pid=6743 comm="syz.2.240" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 154.677392][ T43] audit: type=1400 audit(1792485299.002:485): avc: denied { open } for pid=6743 comm="syz.2.240" path="/dev/dri/card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 154.680205][ T43] audit: type=1400 audit(1792485299.032:486): avc: denied { ioctl } for pid=6743 comm="syz.2.240" path="/dev/dri/card1" dev="devtmpfs" ino=637 ioctlcmd=0x640c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 154.767232][ T43] audit: type=1400 audit(1792485299.122:487): avc: denied { read write } for pid=6748 comm="syz.1.241" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 154.767612][ T43] audit: type=1400 audit(1792485299.122:488): avc: denied { open } for pid=6748 comm="syz.1.241" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 154.769876][ T43] audit: type=1400 audit(1792485299.122:489): avc: denied { ioctl } for pid=6748 comm="syz.1.241" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x4d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 154.858102][ T43] audit: type=1400 audit(1792485299.212:490): avc: denied { write } for pid=6747 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.881460][ T6754] input: syz0 as /devices/virtual/input/input8 [ 155.134231][ T6767] syzkaller0: entered promiscuous mode [ 155.134253][ T6767] syzkaller0: entered allmulticast mode [ 155.870399][ T6805] openvswitch: netlink: Message has 8 unknown bytes. [ 155.922520][ T6810] netlink: 'syz.1.261': attribute type 13 has an invalid length. [ 155.993802][ T6805] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 156.250964][ T6825] netlink: 'syz.3.267': attribute type 6 has an invalid length. [ 156.264690][ T5759] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 156.264759][ T5759] Bluetooth: hci0: Injecting HCI hardware error event [ 156.266520][ T5759] Bluetooth: hci0: hardware error 0x00 [ 156.489788][ T6835] syzkaller0: entered promiscuous mode [ 156.489809][ T6835] syzkaller0: entered allmulticast mode [ 156.502970][ T6839] openvswitch: netlink: IP tunnel dst address not specified [ 156.519542][ T6837] tipc: Started in network mode [ 156.519581][ T6837] tipc: Node identity 7f000001, cluster identity 4711 [ 156.519963][ T6837] tipc: Enabling of bearer rejected, failed to enable media [ 157.033873][ T6853] netlink: 256 bytes leftover after parsing attributes in process `syz.1.277'. [ 157.034189][ T6853] unsupported nlmsg_type 40 [ 157.166955][ T6855] usb usb3: usbfs: process 6855 (syz.3.278) did not claim interface 0 before use [ 158.252100][ T6874] rxe_eth0 speed is unknown, defaulting to 1000 [ 158.419940][ T5759] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 158.863062][ T6906] comedi comedi2: dt2817: I/O base address or length out of range [ 159.331684][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 159.331702][ T43] audit: type=1400 audit(1792485303.682:512): avc: denied { write } for pid=6916 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.535386][ T6930] netlink: 'syz.1.304': attribute type 3 has an invalid length. [ 159.574351][ T43] audit: type=1400 audit(1792485303.932:513): avc: denied { write } for pid=6929 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.631761][ T6935] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 160.733387][ T43] audit: type=1400 audit(1792485305.052:514): avc: denied { write } for pid=6954 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.076349][ T43] audit: type=1400 audit(1792485305.422:515): avc: denied { write } for pid=6963 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.138882][ T43] audit: type=1400 audit(1792485305.452:516): avc: denied { create } for pid=6969 comm="syz.3.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.138932][ T43] audit: type=1400 audit(1792485305.452:517): avc: denied { write } for pid=6969 comm="syz.3.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.355463][ T6976] tipc: Started in network mode [ 161.355492][ T6976] tipc: Node identity 7f000001, cluster identity 4711 [ 161.355934][ T6976] tipc: Enabling of bearer rejected, failed to enable media [ 161.512789][ T43] audit: type=1400 audit(1792485305.862:518): avc: denied { write } for pid=6980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.643654][ T43] audit: type=1400 audit(1792485306.002:519): avc: denied { write } for pid=6989 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.783148][ T6991] tipc: Started in network mode [ 161.783178][ T6991] tipc: Node identity 7f000001, cluster identity 4711 [ 161.783612][ T6991] tipc: Enabling of bearer rejected, failed to enable media [ 161.904585][ T43] audit: type=1400 audit(1792485306.252:520): avc: denied { connect } for pid=6998 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 161.963445][ T7005] sctp: [Deprecated]: syz.1.331 (pid 7005) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.963445][ T7005] Use struct sctp_sack_info instead [ 162.040187][ T43] audit: type=1400 audit(1792485306.392:521): avc: denied { getopt } for pid=7007 comm="syz.2.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.238753][ T7020] ceph: No source [ 162.988458][ T7065] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request [ 163.147890][ T7072] rxe_eth0 speed is unknown, defaulting to 1000 [ 163.376149][ T7081] comedi comedi1: 8255: I/O base address not correctly aligned [ 163.827004][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 164.023877][ T7095] tipc: Enabling of bearer rejected, failed to enable media [ 164.067753][ T7089] tipc: Enabling of bearer rejected, already enabled [ 164.250702][ T7111] netlink: 'syz.1.382': attribute type 2 has an invalid length. [ 164.250723][ T7111] netlink: 'syz.1.382': attribute type 7 has an invalid length. [ 164.287266][ T7111] : entered promiscuous mode [ 164.580802][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 164.580817][ T43] audit: type=1400 audit(1792485308.942:534): avc: denied { setopt } for pid=7117 comm="syz.0.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.927649][ T43] audit: type=1400 audit(1792485309.282:535): avc: denied { getopt } for pid=7123 comm="syz.1.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.086370][ T7133] openvswitch: netlink: Flow key attr not present in new flow. [ 165.790874][ T7152] netlink: 'syz.2.398': attribute type 8 has an invalid length. [ 166.399779][ C1] hpet: Lost 1 RTC interrupts [ 166.435616][ C1] hpet: Lost 1 RTC interrupts [ 166.770607][ T7176] tipc: Enabling of bearer rejected, failed to enable media [ 166.793798][ T7176] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 166.794385][ T7176] tipc: Enabled bearer , priority 10 [ 167.304647][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.411'. [ 167.393346][ T43] audit: type=1400 audit(1792485311.752:536): avc: denied { load_policy } for pid=7197 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 167.394098][ T7198] SELinux: policydb string length 0 does not match expected length 8 [ 167.394374][ T7198] SELinux: failed to load policy [ 167.914446][ T1977] tipc: Node number set to 2130706433 [ 168.809622][ T7226] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 255 out of range (51000000..2150000000) [ 169.416786][ T43] audit: type=1400 audit(1792485313.782:537): avc: denied { getopt } for pid=7243 comm="syz.3.433" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.489627][ T7247] MTD: Couldn't look up 'mtd0/file0': -2 [ 169.680234][ T7259] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes»G [ 169.680278][ T7259] Error validating options; rc = [-22] [ 169.688491][ T7261] capability: warning: `syz.3.440' uses deprecated v2 capabilities in a way that may be insecure [ 169.926409][ T7260] tipc: Enabling of bearer rejected, already enabled [ 170.057796][ T7275] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 170.263460][ T43] audit: type=1400 audit(1792485314.622:538): avc: denied { connect } for pid=7280 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.302879][ T43] audit: type=1400 audit(1792485314.662:539): avc: denied { read } for pid=7282 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 170.516911][ T7296] comedi comedi4: bad chanlist[0]=0x7fffffff chan=65535 range length=2 [ 170.627949][ T43] audit: type=1400 audit(1792485314.982:540): avc: denied { write } for pid=7302 comm="syz.2.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.032739][ T50] e1000 0000:00:06.0 eth0: Reset adapter [ 171.034662][ T7319] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 171.144194][ T43] audit: type=1400 audit(1792485315.482:541): avc: denied { write } for pid=7322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.227501][ T43] audit: type=1400 audit(1792485315.582:542): avc: denied { write } for pid=7325 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.394964][ T43] audit: type=1400 audit(1792485315.752:543): avc: denied { write } for pid=7327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.521240][ T43] audit: type=1400 audit(1792485315.882:544): avc: denied { write } for pid=7330 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.702554][ T43] audit: type=1400 audit(1792485316.052:545): avc: denied { write } for pid=7332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.782179][ T43] audit: type=1400 audit(1792485316.142:546): avc: denied { write } for pid=7335 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.857265][ T43] audit: type=1400 audit(1792485317.212:547): avc: denied { write } for pid=7337 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.284686][ T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 177.538409][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 177.538428][ T43] audit: type=1400 audit(1792485321.892:551): avc: denied { write } for pid=7354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.657586][ T43] audit: type=1400 audit(1792485322.012:552): avc: denied { write } for pid=7357 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.002022][ T43] audit: type=1400 audit(1792485324.362:553): avc: denied { write } for pid=7359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.213717][ T43] audit: type=1400 audit(1792485324.572:554): avc: denied { write } for pid=7362 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.721969][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.187281][ T43] audit: type=1400 audit(1792485332.532:555): avc: denied { create } for pid=7365 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 188.215635][ T43] audit: type=1400 audit(1792485332.562:556): avc: denied { bind } for pid=7365 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 188.891573][ T43] audit: type=1400 audit(1792485333.252:557): avc: denied { append } for pid=7400 comm="syz.0.485" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 189.185499][ T43] audit: type=1400 audit(1792485333.532:558): avc: denied { append } for pid=7413 comm="syz.2.491" name="rtc0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 189.452524][ T7421] ======================================================= [ 189.452524][ T7421] WARNING: The mand mount option has been deprecated and [ 189.452524][ T7421] and is ignored by this kernel. Remove the mand [ 189.452524][ T7421] option from the mount to silence this warning. [ 189.452524][ T7421] ======================================================= [ 189.459698][ T43] audit: type=1400 audit(1792485333.812:559): avc: denied { setopt } for pid=7423 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.876764][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.501'. [ 189.884259][ T43] audit: type=1400 audit(1792485334.232:560): avc: denied { nlmsg_read } for pid=7438 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.090703][ T7449] usb usb8: usbfs: process 7449 (syz.0.505) did not claim interface 0 before use [ 190.335129][ T43] audit: type=1400 audit(1792485334.692:561): avc: denied { write } for pid=7460 comm="syz.2.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.335794][ T43] audit: type=1400 audit(1792485334.692:562): avc: denied { shutdown } for pid=7460 comm="syz.2.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.348757][ T43] audit: type=1400 audit(1792485334.702:563): avc: denied { setopt } for pid=7462 comm="syz.1.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 190.539443][ T43] audit: type=1400 audit(1792485334.892:564): avc: denied { create } for pid=7460 comm="syz.2.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 190.543265][ T7461] ip_tables: iptables: counters copy to user failed while replacing table [ 191.395535][ T7508] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 191.395566][ T7508] CIFS: Attempting to mount //::1/share [ 191.819622][ T7522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.229709][ T7508] CIFS: VFS: Error connecting to socket. Aborting operation. [ 192.229753][ T7508] CIFS: VFS: cifs_mount failed w/return code = -4 [ 192.555552][ T7549] Could not find key with description: [syz0] [ 192.555569][ T7549] process_request_key_err: No key [ 192.555579][ T7549] Could not find valid key in user session keyring for sig specified in mount option: [syz0] [ 192.555590][ T7549] One or more global auth toks could not properly register; rc = [-2] [ 192.555613][ T7549] Error validating options; rc = [-2] [ 192.763146][ T7555] Flash size not aligned to erasesize, reducing to 60KiB [ 192.763234][ T7555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0123 instead [ 192.763252][ T7555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x0001 instead [ 192.763266][ T7555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0040 instead [ 192.763311][ T7555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x5180 instead [ 192.763326][ T7555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0087 instead [ 192.763343][ T7555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000038: 0xc800 instead [ 192.763358][ T7555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x5524 instead [ 192.763373][ T7555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0121 instead [ 192.763386][ T7555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x7f05 instead [ 192.763399][ T7555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x00ff instead [ 192.763412][ T7555] jffs2: Further such events for this erase block will not be printed [ 192.763719][ T7555] jffs2: Empty flash at 0x00000ff4 ends at 0x00000ffc [ 192.763751][ T7555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x0123 instead [ 192.763768][ T7555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0x0001 instead [ 192.763783][ T7555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0x0040 instead [ 192.763797][ T7555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x5180 instead [ 192.763811][ T7555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x0087 instead [ 192.763826][ T7555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001038: 0xc800 instead [ 192.763840][ T7555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x5524 instead [ 192.763853][ T7555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x0121 instead [ 192.763866][ T7555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x7f05 instead [ 192.763878][ T7555] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0x00ff instead [ 192.763890][ T7555] jffs2: Further such events for this erase block will not be printed [ 192.792658][ T7555] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 192.792882][ T7555] jffs2: empty_blocks 13, bad_blocks 0, c->nr_blocks 15 [ 193.303206][ T7575] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 193.332906][ T7576] openvswitch: netlink: IP tunnel TTL not specified. [ 193.431664][ T7578] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 193.592222][ T7590] netlink: 260 bytes leftover after parsing attributes in process `syz.2.569'. [ 193.870639][ T7606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.130463][ T853] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 194.130670][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 194.130688][ T43] audit: type=1400 audit(1792485338.492:569): avc: denied { getopt } for pid=7616 comm="syz.0.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 194.312560][ T853] usb 7-1: Using ep0 maxpacket: 32 [ 194.318240][ T853] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 194.333744][ T853] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 194.349851][ T853] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 194.349872][ T853] usb 7-1: Product: syz [ 194.349882][ T853] usb 7-1: Manufacturer: syz [ 194.349892][ T853] usb 7-1: SerialNumber: syz [ 194.353932][ T853] usb 7-1: config 0 descriptor?? [ 194.354562][ T7607] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 194.620846][ T853] usb 7-1: USB disconnect, device number 3 [ 194.834728][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.593'. [ 194.930422][ T43] audit: type=1400 audit(1792485339.282:570): avc: denied { bind } for pid=7646 comm="syz.3.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 194.930615][ T43] audit: type=1400 audit(1792485339.292:571): avc: denied { name_bind } for pid=7646 comm="syz.3.594" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 194.930897][ T43] audit: type=1400 audit(1792485339.292:572): avc: denied { node_bind } for pid=7646 comm="syz.3.594" saddr=ff01::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 195.088215][ T7658] binder: 7656:7658 ioctl c00c6211 0 returned -14 [ 195.130108][ T7661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.602'. [ 195.143480][ T43] audit: type=1400 audit(1792485339.502:573): avc: denied { append } for pid=7662 comm="syz.1.601" name="nbd1" dev="devtmpfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 195.456994][ T43] audit: type=1400 audit(1792485339.822:574): avc: denied { ioctl } for pid=7678 comm="syz.0.608" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 195.609361][ T7684] SELinux: policydb string does not match my string SE Linux [ 195.609420][ T7684] SELinux: failed to load policy [ 195.609626][ T43] audit: type=1400 audit(1792485339.932:575): avc: denied { load_policy } for pid=7681 comm="syz.1.611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 195.858884][ T43] audit: type=1400 audit(1792485340.212:576): avc: denied { write } for pid=7701 comm="syz.0.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 195.900700][ T43] audit: type=1400 audit(1792485340.252:577): avc: denied { write } for pid=7707 comm="syz.3.624" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 196.368839][ T7729] CacheFiles: Empty tag specified [ 196.999906][ T7722] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 197.309419][ T43] audit: type=1400 audit(1792485341.662:578): avc: denied { accept } for pid=7761 comm="syz.1.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 197.518518][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'. [ 197.850913][ T5847] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 198.011925][ T5847] usb 8-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 198.040892][ T5847] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 198.040925][ T5847] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 198.040959][ T5847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.114892][ T7803] netlink: 16 bytes leftover after parsing attributes in process `syz.0.666'. [ 198.216391][ T7811] overlayfs: missing 'lowerdir' [ 198.247317][ T7809] qrtr: Invalid version 0 [ 198.322765][ T5847] usbhid 8-1:1.0: can't add hid device: -71 [ 198.322851][ T5847] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 198.328495][ T5847] usb 8-1: USB disconnect, device number 5 [ 198.783536][ T7833] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 199.006796][ T7841] Flash size not aligned to erasesize, reducing to 60KiB [ 199.006972][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0123 instead [ 199.006992][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x0001 instead [ 199.007006][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0040 instead [ 199.007020][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x5180 instead [ 199.007032][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0087 instead [ 199.007047][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000038: 0xc800 instead [ 199.007060][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x5524 instead [ 199.007071][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0121 instead [ 199.007084][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x7f05 instead [ 199.007096][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x00ff instead [ 199.007109][ T7841] jffs2: Further such events for this erase block will not be printed [ 199.007448][ T7841] jffs2: Empty flash at 0x00000ff4 ends at 0x00000ffc [ 199.007482][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x0123 instead [ 199.007499][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0x0001 instead [ 199.007514][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0x0040 instead [ 199.007529][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x5180 instead [ 199.007543][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x0087 instead [ 199.007558][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001038: 0xc800 instead [ 199.007571][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x5524 instead [ 199.007585][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x0121 instead [ 199.007599][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x7f05 instead [ 199.007613][ T7841] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0x00ff instead [ 199.007626][ T7841] jffs2: Further such events for this erase block will not be printed [ 199.007944][ T7841] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 199.007955][ T7841] jffs2: empty_blocks 13, bad_blocks 0, c->nr_blocks 15 [ 199.277671][ T7850] overlayfs: missing 'lowerdir' [ 199.720040][ T7871] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 199.720101][ T7871] SELinux: failed to load policy [ 200.035717][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 200.035737][ T43] audit: type=1400 audit(1792485344.392:584): avc: denied { validate_trans } for pid=7886 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 200.513496][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'. [ 200.744451][ T7907] overlayfs: missing 'workdir' [ 201.133332][ T7927] tipc: Enabling of bearer rejected, failed to enable media [ 201.137841][ T7927] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 201.138485][ T7927] tipc: Enabled bearer , priority 10 [ 201.248161][ T7934] rxe_eth0 speed is unknown, defaulting to 1000 [ 201.516743][ T43] audit: type=1400 audit(1792485345.852:585): avc: denied { getopt } for pid=7935 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 201.727627][ T7948] netlink: 36 bytes leftover after parsing attributes in process `syz.2.720'. [ 201.812873][ T7953] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 201.930522][ T3379] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 201.944541][ T43] audit: type=1400 audit(1792485346.292:586): avc: denied { create } for pid=7956 comm="syz.2.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 201.944593][ T43] audit: type=1400 audit(1792485346.292:587): avc: denied { setopt } for pid=7956 comm="syz.2.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 202.089536][ T43] audit: type=1400 audit(1792485346.442:588): avc: denied { setopt } for pid=7960 comm="syz.2.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 202.115556][ T3379] usb 5-1: Using ep0 maxpacket: 8 [ 202.117131][ T3379] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 202.118087][ T3379] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.118106][ T3379] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 202.118141][ T3379] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.118173][ T3379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.154699][ T3379] hub 5-1:1.0: bad descriptor, ignoring hub [ 202.154724][ T3379] hub 5-1:1.0: probe with driver hub failed with error -5 [ 202.155159][ T3379] cdc_wdm 5-1:1.0: skipping garbage [ 202.155174][ T3379] cdc_wdm 5-1:1.0: skipping garbage [ 202.221079][ T3379] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 202.221100][ T3379] cdc_wdm 5-1:1.0: Unknown control protocol [ 202.301135][ T7955] tipc: Enabling of bearer rejected, failed to enable media [ 202.301228][ T9] tipc: Node number set to 2130706433 [ 202.372617][ T7966] tipc: Can't bind to reserved service type 0 [ 202.372698][ T43] audit: type=1400 audit(1792485346.732:589): avc: denied { bind } for pid=7965 comm="syz.2.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 202.531919][ T3379] usb 5-1: USB disconnect, device number 3 [ 202.866219][ T7978] overlayfs: missing 'lowerdir' [ 203.320958][ T7994] misc userio: Invalid payload size [ 203.344894][ T7993] syzkaller0: entered promiscuous mode [ 203.344916][ T7993] syzkaller0: entered allmulticast mode [ 203.411463][ T43] audit: type=1400 audit(1792485347.762:590): avc: denied { read write } for pid=7998 comm="syz.3.743" name="mouse0" dev="devtmpfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 203.411516][ T43] audit: type=1400 audit(1792485347.762:591): avc: denied { open } for pid=7998 comm="syz.3.743" path="/dev/input/mouse0" dev="devtmpfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 203.735710][ T8008] tipc: Enabling of bearer rejected, failed to enable media [ 203.769269][ T8008] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 203.769836][ T8008] tipc: Enabled bearer , priority 10 [ 204.339828][ T8034] netlink: Conntrack attr has 8 unknown bytes [ 204.339858][ T8034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.581335][ T8049] openvswitch: netlink: Duplicate key (type 3). [ 204.809637][ T9] tipc: Node number set to 2130706433 [ 205.072709][ T8069] openvswitch: netlink: IPv4 frag type 17 is out of range max 2 [ 205.293734][ T8079] netlink: 19 bytes leftover after parsing attributes in process `syz.3.778'. [ 205.356618][ T8081] netlink: 'syz.2.780': attribute type 2 has an invalid length. [ 205.431739][ T8079] netlink: 19 bytes leftover after parsing attributes in process `syz.3.778'. [ 205.567185][ T8095] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 205.567246][ T8095] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 205.567259][ T8095] overlayfs: missing 'lowerdir' [ 205.669450][ T8099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.788'. [ 205.682016][ T8101] netlink: 52 bytes leftover after parsing attributes in process `syz.2.790'. [ 205.682046][ T8101] netlink: 52 bytes leftover after parsing attributes in process `syz.2.790'. [ 205.682061][ T8101] netlink: 52 bytes leftover after parsing attributes in process `syz.2.790'. [ 205.863676][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.863731][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.890676][ T8110] nfs: Bad value for 'context' [ 205.891656][ T8105] netlink: 844 bytes leftover after parsing attributes in process `syz.3.792'. [ 205.891680][ T8105] netlink: 844 bytes leftover after parsing attributes in process `syz.3.792'. [ 206.006262][ T8117] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.143619][ T8125] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 206.196520][ T8129] netlink: 'syz.3.803': attribute type 219 has an invalid length. [ 206.276636][ T8134] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 206.425130][ T43] audit: type=1400 audit(1792485350.782:592): avc: denied { append } for pid=8140 comm="syz.2.805" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 206.728963][ T8153] openvswitch: netlink: nsh attr 350 is out of range max 3 [ 206.934952][ T43] audit: type=1400 audit(1792485351.292:593): avc: denied { getopt } for pid=8167 comm="syz.3.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 207.027988][ T8177] tipc: Enabling of bearer rejected, failed to enable media [ 207.038507][ T8177] tipc: Enabling of bearer rejected, already enabled [ 207.659381][ T8199] tipc: Enabling of bearer rejected, failed to enable media [ 207.670227][ T8199] tipc: Enabling of bearer rejected, already enabled [ 208.069681][ T8207] rxe_eth0 speed is unknown, defaulting to 1000 [ 208.277747][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.843'. [ 208.524961][ T8231] syzkaller0: entered promiscuous mode [ 208.524983][ T8231] syzkaller0: entered allmulticast mode [ 208.631723][ T43] audit: type=1400 audit(1792485352.992:594): avc: denied { read } for pid=8235 comm="syz.3.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 209.775104][ T43] audit: type=1400 audit(1792485354.112:595): avc: denied { write } for pid=8267 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.971730][ T8276] openvswitch: netlink: Multiple metadata blocks provided [ 210.075255][ T43] audit: type=1400 audit(1792485354.422:596): avc: denied { write } for pid=8272 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.142927][ T8286] comedi comedi1: no devices specified [ 210.259665][ T8290] ip_tables: iptables: counters copy to user failed while replacing table [ 210.835467][ T43] audit: type=1400 audit(1792485355.192:597): avc: denied { setopt } for pid=8313 comm="syz.0.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.951743][ T8314] xt_ipvs: protocol family 7 not supported [ 211.264548][ T8330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.892'. [ 211.416247][ T8330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.892'. [ 211.458508][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'. [ 211.458549][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'. [ 211.557677][ C3] sd 0:0:0:0: [sda] tag#8 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 211.557723][ C3] sd 0:0:0:0: [sda] tag#8 CDB: Test Unit Ready [ 211.591711][ T8345] CIFS: Attempting to mount //127.0.0.1/share [ 211.595712][ T12] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV [ 211.595743][ T12] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 211.600967][ T8345] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:5445 failed: -ENODEV [ 211.604625][ T12] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV [ 211.604654][ T12] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 211.608247][ T8345] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:445 failed: -ENODEV [ 211.608467][ T8345] CIFS: VFS: cifs_mount failed w/return code = -2 [ 211.635340][ T1977] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 211.673776][ T8349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.900'. [ 211.781520][ T1977] usb 5-1: Using ep0 maxpacket: 32 [ 211.799514][ T1977] usb 5-1: unable to get BOS descriptor or descriptor too short [ 211.799561][ T1977] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 211.842271][ T1977] usb 5-1: config 14 has an invalid interface number: 57 but max is 0 [ 211.842298][ T1977] usb 5-1: config 14 has no interface number 0 [ 211.842328][ T1977] usb 5-1: config 14 interface 57 has no altsetting 0 [ 211.844531][ T1977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.844554][ T1977] usb 5-1: Product: syz [ 211.844566][ T1977] usb 5-1: Manufacturer: syz [ 211.844578][ T1977] usb 5-1: SerialNumber: syz [ 211.885921][ T8357] tipc: Enabling of bearer rejected, failed to enable media [ 211.887817][ T8357] tipc: Enabling of bearer rejected, already enabled [ 212.109668][ T1977] legousbtower 5-1:14.57: interrupt endpoints not found [ 212.114748][ T1977] usb 5-1: USB disconnect, device number 4 [ 212.265655][ T8367] netlink: 'syz.1.907': attribute type 23 has an invalid length. [ 212.344281][ T8369] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 212.344311][ T8369] Error validating options; rc = [-22] [ 212.514530][ T8379] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 212.626134][ T8390] openvswitch: netlink: Missing valid actions attribute. [ 212.626171][ T8390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.755672][ T8398] netlink: 488 bytes leftover after parsing attributes in process `syz.0.921'. [ 212.909004][ T8411] program syz.1.928 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.956654][ T8408] netlink: Failed to add helper -22 [ 212.956698][ T8408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.095873][ T8415] tipc: Enabling of bearer rejected, failed to enable media [ 213.099547][ T8415] tipc: Enabling of bearer rejected, already enabled [ 213.213198][ T43] audit: type=1400 audit(1792485357.562:598): avc: denied { name_connect } for pid=8423 comm="syz.2.935" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 213.255208][ T43] audit: type=1400 audit(1792485357.602:599): avc: denied { setopt } for pid=8428 comm="syz.3.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 213.308160][ T8432] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 213.399655][ T8435] netlink: 868 bytes leftover after parsing attributes in process `syz.2.941'. [ 213.660958][ T43] audit: type=1400 audit(1792485358.022:600): avc: denied { write } for pid=8446 comm="syz.2.946" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 213.661299][ T43] audit: type=1400 audit(1792485358.022:601): avc: denied { open } for pid=8446 comm="syz.2.946" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 213.679111][ T8441] FAULT_INJECTION: forcing a failure. [ 213.679111][ T8441] name failslab, interval 1, probability 0, space 0, times 0 [ 213.679147][ T8441] CPU: 3 UID: 0 PID: 8441 Comm: syz.1.942 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.679175][ T8441] Tainted: [L]=SOFTLOCKUP [ 213.683390][ T8441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.683401][ T8441] Call Trace: [ 213.683410][ T8441] [ 213.683418][ T8441] dump_stack_lvl+0x100/0x190 [ 213.683451][ T8441] should_fail_ex.cold+0x5/0xa [ 213.683474][ T8441] should_failslab+0xc2/0x120 [ 213.683497][ T8441] __kmalloc_noprof+0xfc/0x840 [ 213.683515][ T8441] ? trace_kmalloc+0xeb/0x110 [ 213.683534][ T8441] ? lsm_blob_alloc+0x68/0x90 [ 213.683555][ T8441] lsm_blob_alloc+0x68/0x90 [ 213.683571][ T8441] security_sk_alloc+0x2d/0x290 [ 213.683591][ T8441] sk_prot_alloc+0x12a/0x2a0 [ 213.683617][ T8441] sk_alloc+0x36/0xe80 [ 213.683635][ T8441] __netlink_create+0x5e/0x2c0 [ 213.683660][ T8441] __netlink_kernel_create+0xed/0x750 [ 213.683677][ T8441] ? _raw_write_unlock+0x28/0x50 [ 213.683706][ T8441] ? __pfx___netlink_kernel_create+0x10/0x10 [ 213.683727][ T8441] ? proc_create_reg+0xd7/0x170 [ 213.683750][ T8441] xfrm_user_net_init+0xc6/0x190 [ 213.683771][ T8441] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 213.683791][ T8441] ? __pfx_xfrm_netlink_rcv+0x10/0x10 [ 213.683811][ T8441] ? __pfx_tls_init_net+0x10/0x10 [ 213.683829][ T8441] ? tls_proc_init+0x59/0x70 [ 213.683856][ T8441] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 213.683885][ T8441] ops_init+0x1e2/0x5f0 [ 213.683912][ T8441] setup_net+0x118/0x3a0 [ 213.683934][ T8441] ? __pfx_setup_net+0x10/0x10 [ 213.683961][ T8441] copy_net_ns+0x345/0x7a0 [ 213.683987][ T8441] create_new_namespaces+0x3ea/0xac0 [ 213.684015][ T8441] unshare_nsproxy_namespaces+0xf2/0x220 [ 213.684041][ T8441] ksys_unshare+0x44f/0x980 [ 213.684064][ T8441] ? __pfx_ksys_unshare+0x10/0x10 [ 213.684099][ T8441] __x64_sys_unshare+0x31/0x40 [ 213.684118][ T8441] do_syscall_64+0x123/0x790 [ 213.684144][ T8441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.684165][ T8441] RIP: 0033:0x7f4ccc59e559 [ 213.684181][ T8441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.684197][ T8441] RSP: 002b:00007f4ccd380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 213.684214][ T8441] RAX: ffffffffffffffda RBX: 00007f4ccc825fa0 RCX: 00007f4ccc59e559 [ 213.684228][ T8441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 213.684239][ T8441] RBP: 00007f4ccc635b20 R08: 0000000000000000 R09: 0000000000000000 [ 213.684252][ T8441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.684263][ T8441] R13: 00007f4ccc826038 R14: 00007f4ccc825fa0 R15: 00007ffe85185b98 [ 213.684289][ T8441] [ 213.957100][ T8449] tipc: Enabling of bearer rejected, failed to enable media [ 213.990595][ T8449] tipc: Enabling of bearer rejected, already enabled [ 214.524592][ T8475] netlink: 3 bytes leftover after parsing attributes in process `syz.3.957'. [ 214.604448][ T8479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.959'. [ 214.759434][ T8483] tipc: Enabling of bearer rejected, failed to enable media [ 214.811585][ T8483] tipc: Enabling of bearer rejected, already enabled [ 214.831226][ T8486] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 215.031402][ T8491] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 215.448305][ T8513] netlink: 168 bytes leftover after parsing attributes in process `syz.3.976'. [ 216.056926][ T43] audit: type=1400 audit(1792485360.412:602): avc: denied { accept } for pid=8527 comm="syz.1.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 216.074059][ T43] audit: type=1400 audit(1792485360.422:603): avc: denied { write } for pid=8530 comm="syz.3.984" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 216.308491][ T8546] random: crng reseeded on system resumption [ 216.308575][ T43] audit: type=1400 audit(1792485360.672:604): avc: denied { write } for pid=8544 comm="syz.0.993" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 216.343817][ T43] audit: type=1400 audit(1792485360.682:605): avc: denied { ioctl } for pid=8544 comm="syz.0.993" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 216.547140][ T8561] program syz.0.999 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.550356][ T43] audit: type=1400 audit(1792485360.892:606): avc: denied { ioctl } for pid=8558 comm="syz.1.1000" path="socket:[23566]" dev="sockfs" ino=23566 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 216.761369][ T8572] FAULT_INJECTION: forcing a failure. [ 216.761369][ T8572] name failslab, interval 1, probability 0, space 0, times 0 [ 216.761401][ T8572] CPU: 1 UID: 0 PID: 8572 Comm: syz.1.1004 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.761424][ T8572] Tainted: [L]=SOFTLOCKUP [ 216.761430][ T8572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 216.761440][ T8572] Call Trace: [ 216.761446][ T8572] [ 216.761452][ T8572] dump_stack_lvl+0x100/0x190 [ 216.761481][ T8572] should_fail_ex.cold+0x5/0xa [ 216.761505][ T8572] should_failslab+0xc2/0x120 [ 216.761530][ T8572] kmem_cache_alloc_noprof+0x92/0x6a0 [ 216.761550][ T8572] ? __proc_create+0xc1/0x8f0 [ 216.761570][ T8572] ? __proc_create+0x247/0x8f0 [ 216.761591][ T8572] __proc_create+0x247/0x8f0 [ 216.761611][ T8572] ? __pfx___proc_create+0x10/0x10 [ 216.761631][ T8572] ? __pfx_vsnprintf+0x10/0x10 [ 216.761654][ T8572] ? _raw_write_unlock+0x28/0x50 [ 216.761675][ T8572] ? proc_register+0x56d/0x910 [ 216.761697][ T8572] proc_create_reg+0x75/0x170 [ 216.761720][ T8572] proc_create_seq_private+0x8e/0x180 [ 216.761747][ T8572] ? __pfx_proc_create_seq_private+0x10/0x10 [ 216.761773][ T8572] xt_proto_init+0x3c0/0x780 [ 216.761795][ T8572] ? __pfx_xt_proto_init+0x10/0x10 [ 216.761822][ T8572] ? __pfx_arp_tables_net_init+0x10/0x10 [ 216.761841][ T8572] ops_init+0x1e2/0x5f0 [ 216.761865][ T8572] setup_net+0x118/0x3a0 [ 216.761886][ T8572] ? __pfx_setup_net+0x10/0x10 [ 216.761916][ T8572] copy_net_ns+0x345/0x7a0 [ 216.761940][ T8572] create_new_namespaces+0x3ea/0xac0 [ 216.761964][ T8572] unshare_nsproxy_namespaces+0xf2/0x220 [ 216.761984][ T8572] ksys_unshare+0x44f/0x980 [ 216.762002][ T8572] ? __pfx_ksys_unshare+0x10/0x10 [ 216.762030][ T8572] __x64_sys_unshare+0x31/0x40 [ 216.762048][ T8572] do_syscall_64+0x123/0x790 [ 216.762073][ T8572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.762089][ T8572] RIP: 0033:0x7f4ccc59e559 [ 216.762103][ T8572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.762117][ T8572] RSP: 002b:00007f4ccd380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 216.762133][ T8572] RAX: ffffffffffffffda RBX: 00007f4ccc825fa0 RCX: 00007f4ccc59e559 [ 216.762142][ T8572] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 216.762151][ T8572] RBP: 00007f4ccc635b20 R08: 0000000000000000 R09: 0000000000000000 [ 216.762160][ T8572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.762168][ T8572] R13: 00007f4ccc826038 R14: 00007f4ccc825fa0 R15: 00007ffe85185b98 [ 216.762189][ T8572] [ 217.955986][ T43] audit: type=1400 audit(1792485362.312:607): avc: denied { mounton } for pid=8612 comm="syz.0.1024" path="/255/file0" dev="tmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 218.328699][ T43] audit: type=1400 audit(1792485362.682:608): avc: denied { ioctl } for pid=8631 comm="syz.0.1034" path="socket:[21721]" dev="sockfs" ino=21721 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 218.388619][ T8634] syzkaller0: entered promiscuous mode [ 218.388638][ T8634] syzkaller0: entered allmulticast mode [ 218.607350][ T43] audit: type=1400 audit(1792485362.962:609): avc: denied { setopt } for pid=8642 comm="syz.0.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 218.833262][ T8650] CacheFiles: No cache directory specified [ 219.275563][ T8662] netlink: 'syz.3.1045': attribute type 9 has an invalid length. [ 219.419275][ T8673] Cannot find map_set index 135 as target [ 219.721348][ T8686] netlink: 'syz.1.1054': attribute type 2 has an invalid length. [ 219.721366][ T8686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1054'. [ 219.973140][ T43] audit: type=1400 audit(1792485364.332:610): avc: denied { append } for pid=8691 comm="syz.1.1060" name="video7" dev="devtmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 220.090006][ T8694] vivid-000: ================= START STATUS ================= [ 220.090026][ T8694] vivid-000: Test Pattern: 100% White [ 220.090049][ T8694] vivid-000: Fill Percentage of Frame: 100 [ 220.090069][ T8694] vivid-000: Horizontal Movement: No Movement [ 220.090087][ T8694] vivid-000: Vertical Movement: No Movement [ 220.090105][ T8694] vivid-000: OSD Text Mode: All [ 220.090122][ T8694] vivid-000: Show Border: false [ 220.090136][ T8694] vivid-000: Show Square: false [ 220.090153][ T8694] vivid-000: Sensor Flipped Horizontally: false [ 220.090168][ T8694] vivid-000: Sensor Flipped Vertically: false [ 220.090185][ T8694] vivid-000: Insert SAV Code in Image: false [ 220.090203][ T8694] vivid-000: Insert EAV Code in Image: false [ 220.090221][ T8694] vivid-000: Insert Video Guard Band: true [ 220.090239][ T8694] vivid-000: Reduced Framerate: false [ 220.090256][ T8694] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 220.090276][ T8694] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 220.090432][ T8694] vivid-000: Enable Capture Cropping: true [ 220.090452][ T8694] vivid-000: Enable Capture Composing: true [ 220.090472][ T8694] vivid-000: Enable Capture Scaler: true [ 220.090491][ T8694] vivid-000: Timestamp Source: End of Frame [ 220.090510][ T8694] vivid-000: Colorspace: sRGB [ 220.090528][ T8694] vivid-000: Transfer Function: Default [ 220.090548][ T8694] vivid-000: Y'CbCr Encoding: xvYCC 601 [ 220.090567][ T8694] vivid-000: HSV Encoding: Hue 0-179 [ 220.090586][ T8694] vivid-000: Quantization: Default [ 220.090605][ T8694] vivid-000: Apply Alpha To Red Only: false [ 220.090624][ T8694] vivid-000: Standard Aspect Ratio: 4x3 [ 220.090643][ T8694] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 220.090666][ T8694] vivid-000: DV Timings: 640x480p59 inactive [ 220.090709][ T8694] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 220.090729][ T8694] vivid-000: Maximum EDID Blocks: 2 [ 220.090748][ T8694] vivid-000: Limited RGB Range (16-235): false [ 220.090767][ T8694] vivid-000: Rx RGB Quantization Range: Automatic [ 220.090786][ T8694] vivid-000: Power Present: 0x00000001 [ 220.090805][ T8694] tpg source WxH: 3840x2160 (Y'CbCr) [ 220.090818][ T8694] tpg field: 1 [ 220.090825][ T8694] tpg crop: (0,0)/3840x2160 [ 220.090837][ T8694] tpg compose: (0,0)/3840x2160 [ 220.090850][ T8694] tpg colorspace: 8 [ 220.090856][ T8694] tpg transfer function: 0/0 [ 220.090865][ T8694] tpg Y'CbCr encoding: 3/0 [ 220.090873][ T8694] tpg quantization: 0/0 [ 220.090882][ T8694] tpg RGB range: 0/2 [ 220.090891][ T8694] vivid-000: ================== END STATUS ================== [ 220.611810][ T8706] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 220.712690][ T8713] tipc: Enabling of bearer rejected, failed to enable media [ 220.719953][ T8713] tipc: Enabling of bearer rejected, already enabled [ 221.081964][ T43] audit: type=1400 audit(1792485365.432:611): avc: denied { read } for pid=8723 comm="syz.3.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 221.285454][ T43] audit: type=1400 audit(1792485365.632:612): avc: denied { ioctl } for pid=8725 comm="syz.0.1077" path="/dev/usbmon0" dev="devtmpfs" ino=736 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 221.396597][ T43] audit: type=1400 audit(1792485365.752:613): avc: denied { setopt } for pid=8731 comm="syz.3.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 221.486404][ T8734] nftables ruleset with unbound chain [ 221.509695][ T8736] program syz.1.1079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.527550][ T43] audit: type=1400 audit(1792485365.882:614): avc: denied { bind } for pid=8737 comm="syz.2.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 221.657205][ T8740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1082'. [ 221.657705][ T8742] netlink: 'syz.1.1083': attribute type 1 has an invalid length. [ 221.748718][ T43] audit: type=1400 audit(1792485366.102:615): avc: denied { getopt } for pid=8745 comm="syz.1.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 222.573966][ T8778] netlink: 'syz.0.1098': attribute type 1 has an invalid length. [ 222.713983][ T8781] overlay: Bad value for 'upperdir' [ 222.717433][ T8782] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.1100' sets config #1 [ 222.837033][ T8784] dlm: no locking on control device [ 223.231719][ T43] audit: type=1400 audit(1792485367.562:616): avc: denied { setopt } for pid=8803 comm="syz.2.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 223.637438][ T8825] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1121'. [ 223.804679][ T8841] ceph: No source [ 223.913269][ T43] audit: type=1400 audit(1792485368.262:617): avc: denied { ioctl } for pid=8845 comm="syz.1.1130" path="socket:[22830]" dev="sockfs" ino=22830 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 224.058855][ T43] audit: type=1400 audit(1792485368.412:618): avc: denied { mount } for pid=8852 comm="syz.1.1135" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 224.075412][ T43] audit: type=1400 audit(1792485368.442:619): avc: denied { unmount } for pid=5753 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 224.478590][ T8874] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 224.482486][ T43] audit: type=1400 audit(1792485368.832:620): avc: denied { relabelto } for pid=8873 comm="syz.3.1143" name="282" dev="tmpfs" ino=1464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 224.483095][ T43] audit: type=1400 audit(1792485368.832:621): avc: denied { associate } for pid=8873 comm="syz.3.1143" name="282" dev="tmpfs" ino=1464 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_var_run_t:s0" [ 224.566822][ T43] audit: type=1400 audit(1792485368.922:622): avc: denied { write } for pid=5744 comm="syz-executor" name="282" dev="tmpfs" ino=1464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 224.568431][ T43] audit: type=1400 audit(1792485368.922:623): avc: denied { remove_name } for pid=5744 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 224.571364][ T43] audit: type=1400 audit(1792485368.922:624): avc: denied { write } for pid=5744 comm="syz-executor" name="282" dev="tmpfs" ino=1464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 224.575334][ T43] audit: type=1400 audit(1792485368.922:625): avc: denied { write } for pid=5744 comm="syz-executor" name="282" dev="tmpfs" ino=1464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 224.575389][ T43] audit: type=1400 audit(1792485368.922:626): avc: denied { write } for pid=5744 comm="syz-executor" name="282" dev="tmpfs" ino=1464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 224.880585][ T8888] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1150'. [ 225.230924][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 225.390447][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 225.391268][ T9] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 225.392296][ T9] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 225.392334][ T9] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 225.392356][ T9] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.392377][ T9] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 225.394530][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.394551][ T9] usb 6-1: Product: syz [ 225.394562][ T9] usb 6-1: Manufacturer: syz [ 225.394573][ T9] usb 6-1: SerialNumber: syz [ 225.414316][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 225.422077][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input15 [ 225.675512][ T853] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 225.687504][ T9] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 225.687521][ T9] (id 0x00) [ 225.790515][ T9] rc_core: IR keymap rc-imon-pad not found [ 225.790534][ T9] Registered IR keymap rc-empty [ 225.790603][ T9] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 225.790618][ T9] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 225.855986][ T853] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 225.856025][ T853] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 225.868201][ T9] imon:send_packet: packet tx failed (-71) [ 225.888492][ T853] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.888540][ T853] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.888561][ T853] usb 8-1: config 0 interface 0 has no altsetting 0 [ 225.895637][ T9] imon 6-1:155.0: remote input dev register failed [ 225.895764][ T9] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 225.998628][ T853] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.998669][ T853] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.998687][ T853] usb 8-1: config 0 interface 0 has no altsetting 0 [ 226.063760][ T853] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.063813][ T853] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.063834][ T853] usb 8-1: config 0 interface 0 has no altsetting 0 [ 226.086676][ T9] imon 6-1:155.0: unable to initialize intf0, err 0 [ 226.086698][ T9] imon:imon_probe: failed to initialize context! [ 226.086707][ T9] imon 6-1:155.0: unable to register, err -19 [ 226.110902][ T853] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.110948][ T853] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.110968][ T853] usb 8-1: config 0 interface 0 has no altsetting 0 [ 226.132056][ T853] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.132099][ T853] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.132119][ T853] usb 8-1: config 0 interface 0 has no altsetting 0 [ 226.134812][ T9] usb 6-1: USB disconnect, device number 2 [ 226.166898][ T853] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.166943][ T853] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.166961][ T853] usb 8-1: config 0 interface 0 has no altsetting 0 [ 226.195110][ T853] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.195178][ T853] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.195201][ T853] usb 8-1: config 0 interface 0 has no altsetting 0 [ 226.235773][ T853] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.235820][ T853] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.235842][ T853] usb 8-1: config 0 interface 0 has no altsetting 0 [ 226.238050][ T853] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 226.238075][ T853] usb 8-1: Product: syz [ 226.238089][ T853] usb 8-1: Manufacturer: syz [ 226.238102][ T853] usb 8-1: SerialNumber: syz [ 226.256199][ T853] usb 8-1: config 0 descriptor?? [ 226.328566][ T853] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 226.516133][ T853] usb 8-1: USB disconnect, device number 6 [ 226.551731][ T853] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 226.876127][ T8940] tipc: Enabling of bearer rejected, already enabled [ 227.711663][ T42] wacom 0003:056A:003F.0003: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 227.812345][ T8985] fido_id[8985]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 228.328017][ T8998] usb usb8: usbfs: process 8998 (syz.1.1195) did not claim interface 0 before use [ 228.992887][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 229.044359][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 229.285123][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 229.285140][ T43] audit: type=1400 audit(1792485373.642:636): avc: denied { write } for pid=9024 comm="syz.1.1207" name="configs" dev="configfs" ino=14635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 229.285175][ T43] audit: type=1400 audit(1792485373.642:637): avc: denied { remove_name } for pid=9024 comm="syz.1.1207" name="c.1" dev="configfs" ino=10920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 229.285202][ T43] audit: type=1400 audit(1792485373.642:638): avc: denied { rmdir } for pid=9024 comm="syz.1.1207" name="c.1" dev="configfs" ino=10920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 229.417012][ T9027] netlink: 'syz.0.1208': attribute type 1 has an invalid length. [ 229.417035][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1208'. [ 229.417045][ T9027] netlink: 'syz.0.1208': attribute type 1 has an invalid length. [ 229.417057][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1208'. [ 229.417120][ T9027] iwpm_send_hello: Unable to send a nlmsg [ 229.610572][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.610617][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.610673][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.610701][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.811879][ T43] audit: type=1400 audit(1792485374.162:639): avc: denied { append } for pid=9045 comm="syz.0.1216" name="usbmon2" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 230.565464][ T9065] tipc: Enabling of bearer rejected, already enabled [ 231.128236][ T9084] nvme_fcloop: unknown parameter or missing value 'ww' [ 231.133712][ T43] audit: type=1400 audit(1792485375.492:640): avc: denied { unmount } for pid=9081 comm="syz.1.1233" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 231.389876][ T43] audit: type=1400 audit(1792485375.742:641): avc: denied { remount } for pid=9093 comm="syz.1.1237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 231.844769][ T50] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 232.031260][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 232.036935][ T50] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 232.038590][ T50] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 232.038626][ T50] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 232.038655][ T50] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 232.038675][ T50] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 232.038696][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 232.094427][ T50] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 232.094457][ T50] usb 6-1: Product: syz [ 232.094472][ T50] usb 6-1: Manufacturer: syz [ 232.094486][ T50] usb 6-1: SerialNumber: syz [ 232.097206][ T50] usb 6-1: config 0 descriptor?? [ 232.121462][ T50] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 232.129820][ T50] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 232.138277][ T43] audit: type=1400 audit(1792485376.492:642): avc: denied { append } for pid=9109 comm="syz.0.1242" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 232.168125][ T43] audit: type=1400 audit(1792485376.522:643): avc: denied { map } for pid=9109 comm="syz.0.1242" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 232.168259][ T43] audit: type=1400 audit(1792485376.522:644): avc: denied { execute } for pid=9109 comm="syz.0.1242" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 232.379330][ T9121] tipc: Enabling of bearer rejected, already enabled [ 232.409558][ T9099] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 232.429744][ T3379] usb 6-1: USB disconnect, device number 3 [ 232.455662][ T3379] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 232.894814][ T9140] i2c i2c-0: delete_device: Can't find device in list [ 232.901825][ T9139] Console: switching to colour dummy device 80x25 [ 233.055435][ T9144] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1257'. [ 233.055565][ T9144] block nbd0: not configured, cannot reconfigure [ 233.120853][ T34] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 233.123856][ T43] audit: type=1400 audit(1792485377.482:645): avc: denied { setopt } for pid=9145 comm="syz.2.1259" laddr=fe80::5cbe:c5ff:fe53:496f lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 233.206215][ T343] IPVS: starting estimator ** replaying previous printk message ** [ 233.206215][ T343] IPVS: starting estimator thread 0... [ 233.228010][ T9151] ================================================================== [ 233.228027][ T9151] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 233.228085][ T9151] Read of size 192 at addr ffffffff9ccd05c0 by task syz.2.1261/9151 [ 233.228100][ T9151] [ 233.228111][ T9151] CPU: 2 UID: 0 PID: 9151 Comm: syz.2.1261 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.228138][ T9151] Tainted: [L]=SOFTLOCKUP [ 233.228145][ T9151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.228158][ T9151] Call Trace: [ 233.228166][ T9151] [ 233.228173][ T9151] dump_stack_lvl+0x100/0x190 [ 233.228231][ T9151] print_report+0x13d/0x4b0 [ 233.228257][ T9151] ? __virt_addr_valid+0x239/0x430 [ 233.228279][ T9151] ? usb_copy_descriptors+0x18d/0x320 [ 233.228297][ T9151] kasan_report+0xdf/0x1c0 [ 233.228322][ T9151] ? usb_copy_descriptors+0x18d/0x320 [ 233.228345][ T9151] kasan_check_range+0x10f/0x1e0 [ 233.228362][ T9151] __asan_memcpy+0x23/0x60 [ 233.228380][ T9151] usb_copy_descriptors+0x18d/0x320 [ 233.228403][ T9151] usb_assign_descriptors+0xd2/0x470 [ 233.228426][ T9151] f_audio_bind+0x243a/0x3950 [ 233.228455][ T9151] ? __pfx_f_audio_bind+0x10/0x10 [ 233.228479][ T9151] usb_add_function+0x219/0x890 [ 233.228500][ T9151] ? composite_dev_prepare+0x201/0x420 [ 233.228525][ T9151] configfs_composite_bind+0xd83/0x1960 [ 233.228550][ T9151] gadget_bind_driver+0x28c/0xbf0 [ 233.228578][ T9151] ? __pfx_gadget_bind_driver+0x10/0x10 [ 233.228605][ T9151] really_probe+0x241/0xa60 [ 233.228625][ T9151] __driver_probe_device+0x210/0x460 [ 233.228642][ T9151] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 233.228669][ T9151] driver_probe_device+0x4a/0x140 [ 233.228687][ T9151] __driver_attach+0x21f/0x5b0 [ 233.228704][ T9151] ? __pfx___driver_attach+0x10/0x10 [ 233.228721][ T9151] bus_for_each_dev+0x13e/0x1d0 [ 233.228743][ T9151] ? __pfx_bus_for_each_dev+0x10/0x10 [ 233.228765][ T9151] ? bus_add_driver+0x2b5/0x5b0 [ 233.228791][ T9151] bus_add_driver+0x305/0x5b0 [ 233.228817][ T9151] driver_register+0x1e2/0x360 [ 233.228837][ T9151] usb_gadget_register_driver_owner+0x132/0x210 [ 233.228867][ T9151] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 233.228890][ T9151] configfs_write_iter+0x302/0x4e0 [ 233.228916][ T9151] vfs_write+0x6af/0x1050 [ 233.228940][ T9151] ? __pfx_configfs_write_iter+0x10/0x10 [ 233.228963][ T9151] ? __pfx_vfs_write+0x10/0x10 [ 233.228984][ T9151] ? find_held_lock+0x2b/0x80 [ 233.229017][ T9151] ksys_write+0x12a/0x250 [ 233.229038][ T9151] ? __pfx_ksys_write+0x10/0x10 [ 233.229063][ T9151] do_syscall_64+0x123/0x790 [ 233.229091][ T9151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.229110][ T9151] RIP: 0033:0x7fea3e79e559 [ 233.229127][ T9151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.229144][ T9151] RSP: 002b:00007fea3f5a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 233.229165][ T9151] RAX: ffffffffffffffda RBX: 00007fea3ea25fa0 RCX: 00007fea3e79e559 [ 233.229187][ T9151] RDX: 000000000000000c RSI: 0000200000000700 RDI: 0000000000000003 [ 233.229200][ T9151] RBP: 00007fea3e835b20 R08: 0000000000000000 R09: 0000000000000000 [ 233.229212][ T9151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.229224][ T9151] R13: 00007fea3ea26038 R14: 00007fea3ea25fa0 R15: 00007fffc5db59a8 [ 233.229243][ T9151] [ 233.229250][ T9151] [ 233.229254][ T9151] The buggy address belongs to the variable: [ 233.229260][ T9151] ac_header_desc+0x0/0x40 [ 233.229277][ T9151] [ 233.229282][ T9151] The buggy address belongs to the physical page: [ 233.229290][ T9151] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ccd0 [ 233.229325][ T9151] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 233.229351][ T9151] raw: 00fff00000002000 ffffea0000733408 ffffea0000733408 0000000000000000 [ 233.229368][ T9151] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 233.229378][ T9151] page dumped because: kasan: bad access detected [ 233.229399][ T9151] page_owner info is not present (never set?) [ 233.229406][ T9151] [ 233.229410][ T9151] Memory state around the buggy address: [ 233.229419][ T9151] ffffffff9ccd0480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 233.229432][ T9151] ffffffff9ccd0500: 00 00 00 00 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 233.229444][ T9151] >ffffffff9ccd0580: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 233.229453][ T9151] ^ [ 233.229462][ T9151] ffffffff9ccd0600: 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 233.229473][ T9151] ffffffff9ccd0680: 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 233.229482][ T9151] ================================================================== [ 233.229553][ T9151] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 233.591116][ T9151] CPU: 2 UID: 0 PID: 9151 Comm: syz.2.1261 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.596193][ T9151] Tainted: [L]=SOFTLOCKUP [ 233.598209][ T9151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.603804][ T9151] Call Trace: [ 233.605981][ T9151] [ 233.607835][ T9151] dump_stack_lvl+0x100/0x190 [ 233.610474][ T9151] vpanic+0x553/0x970 [ 233.612518][ T9151] ? __pfx_vpanic+0x10/0x10 [ 233.615971][ T9151] ? mark_held_locks+0x40/0x70 [ 233.619384][ T9151] ? irqentry_exit+0x2c9/0xa90 [ 233.621599][ T9151] ? usb_copy_descriptors+0x18d/0x320 [ 233.624299][ T9151] panic+0xd1/0xe0 [ 233.626693][ T9151] ? __pfx_panic+0x10/0x10 [ 233.629419][ T9151] ? usb_copy_descriptors+0x18d/0x320 [ 233.633282][ T9151] ? preempt_schedule_common+0x3c/0xb0 [ 233.636677][ T9151] check_panic_on_warn.cold+0x19/0x34 [ 233.641536][ T9151] end_report.part.0+0x3a/0x90 [ 233.644615][ T9151] kasan_report.cold+0xe/0x18 [ 233.648192][ T9151] ? usb_copy_descriptors+0x18d/0x320 [ 233.651001][ T9151] kasan_check_range+0x10f/0x1e0 [ 233.654197][ T9151] __asan_memcpy+0x23/0x60 [ 233.657002][ T9151] usb_copy_descriptors+0x18d/0x320 [ 233.660293][ T9151] usb_assign_descriptors+0xd2/0x470 [ 233.663687][ T9151] f_audio_bind+0x243a/0x3950 [ 233.666780][ T9151] ? __pfx_f_audio_bind+0x10/0x10 [ 233.670110][ T9151] usb_add_function+0x219/0x890 [ 233.673381][ T9151] ? composite_dev_prepare+0x201/0x420 [ 233.676979][ T9151] configfs_composite_bind+0xd83/0x1960 [ 233.680865][ T9151] gadget_bind_driver+0x28c/0xbf0 [ 233.684211][ T9151] ? __pfx_gadget_bind_driver+0x10/0x10 [ 233.687761][ T9151] really_probe+0x241/0xa60 [ 233.690606][ T9151] __driver_probe_device+0x210/0x460 [ 233.694514][ T9151] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 233.698306][ T9151] driver_probe_device+0x4a/0x140 [ 233.703398][ T9151] __driver_attach+0x21f/0x5b0 [ 233.706466][ T9151] ? __pfx___driver_attach+0x10/0x10 [ 233.709784][ T9151] bus_for_each_dev+0x13e/0x1d0 [ 233.713021][ T9151] ? __pfx_bus_for_each_dev+0x10/0x10 [ 233.716419][ T9151] ? bus_add_driver+0x2b5/0x5b0 [ 233.719439][ T9151] bus_add_driver+0x305/0x5b0 [ 233.722547][ T9151] driver_register+0x1e2/0x360 [ 233.727303][ T9151] usb_gadget_register_driver_owner+0x132/0x210 [ 233.731387][ T9151] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 233.735024][ T9151] configfs_write_iter+0x302/0x4e0 [ 233.739034][ T9151] vfs_write+0x6af/0x1050 [ 233.742707][ T9151] ? __pfx_configfs_write_iter+0x10/0x10 [ 233.746748][ T9151] ? __pfx_vfs_write+0x10/0x10 [ 233.752778][ T9151] ? find_held_lock+0x2b/0x80 [ 233.755948][ T9151] ksys_write+0x12a/0x250 [ 233.758618][ T9151] ? __pfx_ksys_write+0x10/0x10 [ 233.761689][ T9151] do_syscall_64+0x123/0x790 [ 233.765945][ T9151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.769495][ T9151] RIP: 0033:0x7fea3e79e559 [ 233.772674][ T9151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.787665][ T9151] RSP: 002b:00007fea3f5a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 233.792817][ T9151] RAX: ffffffffffffffda RBX: 00007fea3ea25fa0 RCX: 00007fea3e79e559 [ 233.797905][ T9151] RDX: 000000000000000c RSI: 0000200000000700 RDI: 0000000000000003 [ 233.802774][ T9151] RBP: 00007fea3e835b20 R08: 0000000000000000 R09: 0000000000000000 [ 233.807901][ T9151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.813060][ T9151] R13: 00007fea3ea26038 R14: 00007fea3ea25fa0 R15: 00007fffc5db59a8 [ 233.817986][ T9151] [ 233.821168][ T9151] Kernel Offset: disabled [ 233.825479][ T9151] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:36:17 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffff888056f81520 RCX=0000000000000000 RDX=1ffff1100adf02b1 RSI=ffffffff829d0315 RDI=ffff888056f81588 RBP=ffff88805906f3e0 RSP=ffffc900039d7ca8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff88805ad50d58 R13=1ffff9200073afa0 R14=000000002223ba05 R15=0000000000000000 RIP=ffffffff829d033f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555582211500 ffffffff 00c00000 GS =0000 ffff8880d4940000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4ccc7f1158 CR3=0000000035e21000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000fc02fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 337a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffea53ba26 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffea53ba26 00007fffea53ba2c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1f5903614a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1f59036184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1f590362e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1f59036176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000128 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000128 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=fffffbfff1f8f2d0 RBX=fffffbfff1f8f2d1 RCX=ffffffff81c86e7e RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff8fc79680 RBP=fffffbfff1f8f2d0 RSP=ffffc900007df920 R8 =0000000000000000 R9 =fffffbfff1f8f2d0 R10=ffffffff8fc79683 R11=0000000053565049 R12=ffffffff90bdbde0 R13=ffffc900007dfda8 R14=0000000000000000 R15=ffffc900007dfdb4 RIP=ffffffff8280a4de RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4a40000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3844f6 CR3=0000000040a4d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000f80 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ccd35d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe85186086 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe85186086 00007ffe8518608c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ccc63614a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ccc636184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ccc6362e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ccc636176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ccc7f6600 00007f4ccc7f65e0 00007f4ccc7f65e8 00007f4ccc7f6618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ccc7f65f8 00007f4ccc7f65c8 00007f4ccc7f6600 00007f4ccc7f65e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000d8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b33285 RDI=ffffffff9cc845a0 RBP=ffffffff9cc84560 RSP=ffffc90005abef40 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6666666666666652 R12=0000000000000000 R13=0000000000000020 R14=0000000000000007 R15=ffffc90005abf258 RIP=ffffffff85b332af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fea3f5a56c0 ffffffff 00c00000 GS =0000 ffff8880d4b40000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c3860fd CR3=0000000014b25000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000fc02fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f736e6f69746365 6e6e6f632f657375 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc5db5e96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc5db5e96 00007fffc5db5e9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea3e83614a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea3e836184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea3e8362e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea3e836176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000041 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000904fc8eb86 RBX=ffff88806a523d80 RCX=00000000000006e0 RDX=0000000000000090 RSI=ffffffff81fbec15 RDI=ffff8880206ba580 RBP=0000003642a1fb14 RSP=ffffc900006f8e90 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff920000df1dc R13=0000000000000001 R14=0000000000000001 R15=ffff88806a523dc0 RIP=ffffffff81fbec28 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4c40000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f24fccb8ff8 CR3=0000000035e21000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000fc02fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd83c1b586 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd83c1b586 00007ffd83c1b58c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24fbe3614a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24fbe36184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24fbe362e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24fbe36176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24fbff65f8 00007f24fbff65c8 00007f24fbff6600 00007f24fbff65e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000