last executing test programs: 937.347144ms ago: executing program 0 (id=597): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020050180000280012800b0001006d61637365630000180002800c0004000300000100c28000080005000700000008000500", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 850.05618ms ago: executing program 0 (id=600): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18, 0x80}, 0x4c882) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 741.128551ms ago: executing program 0 (id=602): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0xd00, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r1}) 740.64724ms ago: executing program 1 (id=603): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x14f882) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000000c0)) 740.417552ms ago: executing program 0 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x48, r1, 0x5, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "920a05e6d238c53ebd60f6ffe8d166b53026e3fab7bdafd0"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x48}, 0x1, 0x0, 0x0, 0x408d1}, 0x40800) 676.846826ms ago: executing program 0 (id=605): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") 676.633499ms ago: executing program 1 (id=606): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40, 0x1200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) 668.320277ms ago: executing program 0 (id=608): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000180)=r1) 623.30224ms ago: executing program 1 (id=609): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x2, 0x8, 0x1, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x287, 0x3, 0xfffffff7, 0x400001, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x4, 0x4, 0x20001e5b, 0x3, 0xe66, 0x3, 0x6, 0x4006, 0x0, 0x3]}) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f0000000240)) 552.389365ms ago: executing program 1 (id=610): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e000100"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c800"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x20}}, 0x0) 476.1851ms ago: executing program 3 (id=611): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/lvs/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1d6b 0', 0x6) 475.89586ms ago: executing program 1 (id=612): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}]}], {0x14}}, 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 471.940687ms ago: executing program 3 (id=614): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)=0x800000) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 471.740263ms ago: executing program 1 (id=615): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x80840) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, 0x0) 397.382172ms ago: executing program 3 (id=617): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) recvmsg$unix(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41) ioctl$SIOCSIFHWADDR(r0, 0x8905, &(0x7f0000000340)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) 335.807362ms ago: executing program 3 (id=619): socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000000)={0x0, {0x0, 0x0, @vsb}}) 243.389969ms ago: executing program 2 (id=621): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000082}]}) 175.665911ms ago: executing program 2 (id=622): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000005c0)={0x1, 0x0, [{0x400000ff, 0x0, 0x9}]}) 91.517439ms ago: executing program 3 (id=623): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000500)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xffffffff, 0x0, 0x4}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000dc0)={@remote, @dev, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x4, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @private2}}}}}}, 0x0) 91.345008ms ago: executing program 2 (id=624): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xa) ioctl$TCSETA(r0, 0x5406, &(0x7f00000013c0)={0x4, 0x7, 0xfffd, 0x7f, 0x14, "40999f49f937a4fd"}) 6.937277ms ago: executing program 3 (id=625): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0x1, 0x10005, 0x79, 0x2000003, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0x3, 0x9, 0x80, 0x9, 0xf39e, 0x0, 0x1539b804, 0x7, 0x1, 0x2]}) ioctl$COMEDI_SETWSUBD(r0, 0x6411) 6.720536ms ago: executing program 2 (id=626): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.957599ms ago: executing program 2 (id=627): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x481c, @remote}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x23) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 0s ago: executing program 2 (id=633): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f00000002c0)={0x20, r2, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:39500' (ED25519) to the list of known hosts. [ 54.955016][ T42] audit: type=1400 audit(1786464803.276:138): avc: denied { name_bind } for pid=5716 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 54.997035][ T42] audit: type=1400 audit(1786464803.316:139): avc: denied { execute } for pid=5717 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.006700][ T42] audit: type=1400 audit(1786464803.316:140): avc: denied { execute_no_trans } for pid=5717 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.940386][ T42] audit: type=1400 audit(1786464806.256:141): avc: denied { mounton } for pid=5717 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.951996][ T42] audit: type=1400 audit(1786464806.276:142): avc: denied { mount } for pid=5717 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.956889][ T5717] cgroup: Unknown subsys name 'net' [ 57.966598][ T42] audit: type=1400 audit(1786464806.286:143): avc: denied { unmount } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.188226][ T5717] cgroup: Unknown subsys name 'cpuset' [ 58.196519][ T5717] cgroup: Unknown subsys name 'rlimit' [ 58.389852][ T42] audit: type=1400 audit(1786464806.706:144): avc: denied { setattr } for pid=5717 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.397375][ T42] audit: type=1400 audit(1786464806.706:145): avc: denied { create } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.404903][ T42] audit: type=1400 audit(1786464806.706:146): avc: denied { write } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.413569][ T42] audit: type=1400 audit(1786464806.716:147): avc: denied { read } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.421850][ T42] audit: type=1400 audit(1786464806.726:148): avc: denied { mounton } for pid=5717 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.430677][ T42] audit: type=1400 audit(1786464806.726:149): avc: denied { mount } for pid=5717 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.438133][ T42] audit: type=1400 audit(1786464806.746:150): avc: denied { read } for pid=5436 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.484183][ T5720] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 59.704513][ T5717] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.905325][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 64.905341][ T42] audit: type=1400 audit(1786464813.226:158): avc: denied { execmem } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 65.135600][ T42] audit: type=1400 audit(1786464813.456:159): avc: denied { create } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.146144][ T42] audit: type=1400 audit(1786464813.456:160): avc: denied { read write } for pid=5727 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 65.158466][ T42] audit: type=1400 audit(1786464813.456:161): avc: denied { open } for pid=5727 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 65.167383][ T42] audit: type=1400 audit(1786464813.466:162): avc: denied { ioctl } for pid=5727 comm="syz-executor" path="socket:[7417]" dev="sockfs" ino=7417 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.178490][ T5732] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.184818][ T5732] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.189716][ T5732] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.196397][ T5732] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.197735][ T5740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.198681][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.199393][ T5742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.200882][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.201660][ T5732] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.202418][ T5732] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.203475][ T5740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.204912][ T5740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.205196][ T5740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.207823][ T5740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.210927][ T5732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.216151][ T5740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.224308][ T5737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.228259][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.229482][ T5732] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.231438][ T42] audit: type=1400 audit(1786464813.546:163): avc: denied { read } for pid=5728 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.233865][ T5737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.251051][ T42] audit: type=1400 audit(1786464813.546:164): avc: denied { open } for pid=5728 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.258256][ T42] audit: type=1400 audit(1786464813.546:165): avc: denied { mounton } for pid=5728 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 65.265653][ T42] audit: type=1400 audit(1786464813.556:166): avc: denied { module_request } for pid=5726 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 65.272434][ T42] audit: type=1400 audit(1786464813.556:167): avc: denied { module_request } for pid=5728 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 65.929877][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.933652][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.936312][ T5728] bridge_slave_0: entered allmulticast mode [ 65.939151][ T5728] bridge_slave_0: entered promiscuous mode [ 65.950125][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.954336][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.956785][ T5728] bridge_slave_1: entered allmulticast mode [ 65.959793][ T5728] bridge_slave_1: entered promiscuous mode [ 65.986650][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.997365][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.059113][ T5728] team0: Port device team_slave_0 added [ 66.079466][ T5728] team0: Port device team_slave_1 added [ 66.193124][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.196329][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.199590][ T5726] bridge_slave_0: entered allmulticast mode [ 66.204192][ T5726] bridge_slave_0: entered promiscuous mode [ 66.210017][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.213161][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.224146][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.238085][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.241308][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.252107][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.257979][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.261168][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.264436][ T5733] bridge_slave_0: entered allmulticast mode [ 66.268528][ T5733] bridge_slave_0: entered promiscuous mode [ 66.273247][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.276481][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.279718][ T5726] bridge_slave_1: entered allmulticast mode [ 66.284092][ T5726] bridge_slave_1: entered promiscuous mode [ 66.306091][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.310038][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.313465][ T5733] bridge_slave_1: entered allmulticast mode [ 66.317598][ T5733] bridge_slave_1: entered promiscuous mode [ 66.376590][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.379641][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.382597][ T5727] bridge_slave_0: entered allmulticast mode [ 66.386377][ T5727] bridge_slave_0: entered promiscuous mode [ 66.412303][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.417147][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.421440][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.425137][ T5727] bridge_slave_1: entered allmulticast mode [ 66.429220][ T5727] bridge_slave_1: entered promiscuous mode [ 66.434977][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.451160][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.477920][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.498947][ T5728] hsr_slave_0: entered promiscuous mode [ 66.502703][ T5728] hsr_slave_1: entered promiscuous mode [ 66.535036][ T5733] team0: Port device team_slave_0 added [ 66.538798][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.555609][ T5726] team0: Port device team_slave_0 added [ 66.562107][ T5733] team0: Port device team_slave_1 added [ 66.566034][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.591643][ T5726] team0: Port device team_slave_1 added [ 66.656627][ T5727] team0: Port device team_slave_0 added [ 66.689235][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.694621][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.705139][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.713090][ T5727] team0: Port device team_slave_1 added [ 66.736373][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.739375][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.750179][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.755850][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.758750][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.769391][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.797688][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.800665][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.812587][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.842840][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.845978][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.857819][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.884778][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.887926][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.899684][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.983531][ T5733] hsr_slave_0: entered promiscuous mode [ 66.987225][ T5733] hsr_slave_1: entered promiscuous mode [ 66.990469][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 66.993666][ T5733] Cannot create hsr debugfs directory [ 67.036199][ T5727] hsr_slave_0: entered promiscuous mode [ 67.039580][ T5727] hsr_slave_1: entered promiscuous mode [ 67.044028][ T5727] debugfs: 'hsr0' already exists in 'hsr' [ 67.046490][ T5727] Cannot create hsr debugfs directory [ 67.054872][ T5726] hsr_slave_0: entered promiscuous mode [ 67.058173][ T5726] hsr_slave_1: entered promiscuous mode [ 67.061346][ T5726] debugfs: 'hsr0' already exists in 'hsr' [ 67.063777][ T5726] Cannot create hsr debugfs directory [ 67.282101][ T5737] Bluetooth: hci0: command tx timeout [ 67.282347][ T5732] Bluetooth: hci1: command tx timeout [ 67.286399][ T5738] Bluetooth: hci3: command tx timeout [ 67.289291][ T64] Bluetooth: hci2: command tx timeout [ 67.319955][ T5728] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.336507][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.404086][ T5728] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.410351][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.438218][ T5728] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.444687][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.477933][ T5728] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.484818][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.603693][ T5733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.610065][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.617511][ T5733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.623310][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.626749][ T5733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.634245][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.646767][ T5733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.654883][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.745377][ T5727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.752316][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.761561][ T5727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.768346][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.774855][ T5727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.780711][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.784451][ T5727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.790620][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.873621][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.888893][ T5726] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.896491][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.906219][ T5726] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.915169][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.919062][ T5726] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.925986][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.934778][ T5726] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.940661][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.978433][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.999945][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.003668][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.036318][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.039450][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.064031][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.119601][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.134705][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.137867][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.155038][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.177465][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.180599][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.203550][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.219929][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.223066][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.242205][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.245363][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.288084][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.320128][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.347104][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.350147][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.372101][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.375235][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.636443][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.694121][ T5728] veth0_vlan: entered promiscuous mode [ 68.709790][ T5728] veth1_vlan: entered promiscuous mode [ 68.726507][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.769176][ T5728] veth0_macvtap: entered promiscuous mode [ 68.779283][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.802981][ T5728] veth1_macvtap: entered promiscuous mode [ 68.836232][ T5733] veth0_vlan: entered promiscuous mode [ 68.846458][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.864764][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.873130][ T5733] veth1_vlan: entered promiscuous mode [ 68.904199][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.954053][ T5727] veth0_vlan: entered promiscuous mode [ 68.985227][ T5727] veth1_vlan: entered promiscuous mode [ 69.022781][ T5733] veth0_macvtap: entered promiscuous mode [ 69.035292][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.038329][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.042227][ T5733] veth1_macvtap: entered promiscuous mode [ 69.074114][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.103193][ T5727] veth0_macvtap: entered promiscuous mode [ 69.103241][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.108621][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.109170][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.134849][ T5726] veth0_vlan: entered promiscuous mode [ 69.138253][ T5727] veth1_macvtap: entered promiscuous mode [ 69.168780][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.172591][ T5726] veth1_vlan: entered promiscuous mode [ 69.202147][ T5728] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.205841][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.300889][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.302155][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.307748][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.359448][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.361737][ T64] Bluetooth: hci1: command tx timeout [ 69.363024][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.365459][ T5732] Bluetooth: hci3: command tx timeout [ 69.370750][ T5811] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.371912][ T5738] Bluetooth: hci0: command tx timeout [ 69.376178][ T64] Bluetooth: hci2: command tx timeout [ 69.384165][ T5726] veth0_macvtap: entered promiscuous mode [ 69.401155][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.418840][ T5726] veth1_macvtap: entered promiscuous mode [ 69.429789][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.434927][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.473218][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.482104][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.482179][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.486414][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.492048][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.499878][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.667117][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.673537][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.741675][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.746857][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.773171][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.801584][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.806806][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.861157][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.871159][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.927220][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.936966][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.946675][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 69.961571][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.964559][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.967506][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.970502][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.046529][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 70.046551][ T42] audit: type=1400 audit(1786464818.366:201): avc: denied { write } for pid=5912 comm="syz.2.3" name="cells" dev="proc" ino=4026533487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 70.048717][ T5925] kAFS: bad VL server IP address [ 70.080214][ T5930] openvswitch: netlink: IP tunnel dst address not specified [ 70.085508][ T5930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 70.093454][ T42] audit: type=1400 audit(1786464818.416:202): avc: denied { allowed } for pid=5927 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 70.100885][ T42] audit: type=1400 audit(1786464818.416:203): avc: denied { create } for pid=5927 comm="syz.3.20" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.116096][ T42] audit: type=1400 audit(1786464818.426:204): avc: denied { unmount } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 70.177882][ T42] audit: type=1400 audit(1786464818.496:205): avc: denied { write } for pid=5935 comm="syz.0.23" name="001" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 70.193127][ T42] audit: type=1400 audit(1786464818.506:206): avc: denied { unmount } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.194231][ T5938] Bluetooth: MGMT ver 1.23 [ 70.205064][ T42] audit: type=1400 audit(1786464818.506:207): avc: denied { map } for pid=5935 comm="syz.0.23" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 70.217550][ T5940] Failed to get privilege flags for destination (handle=0x2:0x1) [ 70.220923][ T42] audit: type=1400 audit(1786464818.516:208): avc: denied { bind } for pid=5937 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.237897][ T42] audit: type=1400 audit(1786464818.516:209): avc: denied { write } for pid=5937 comm="syz.3.24" path="socket:[10320]" dev="sockfs" ino=10320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.259215][ T42] audit: type=1400 audit(1786464818.576:210): avc: denied { create } for pid=5944 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.269741][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 70.277489][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 70.468262][ T5967] warning: `syz.3.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.559700][ T5975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.40'. [ 70.613816][ T5976] i2c i2c-1: new_device: Instantiated device isp1301 at 0x02 [ 70.630270][ T5978] overlay: filesystem on ./file0 not supported as upperdir [ 70.632926][ T5980] zero sized request [ 70.952630][ T6006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.55'. [ 71.026307][ T6015] netlink: 'syz.2.59': attribute type 1 has an invalid length. [ 71.086922][ T6021] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 71.225082][ T6031] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 71.236383][ T6032] e1000e 0000:00:02.0: MSI/MSI-X disallowed for future drivers [ 71.431242][ T64] Bluetooth: hci0: command tx timeout [ 71.431969][ T5737] Bluetooth: hci1: command tx timeout [ 71.436770][ T5732] Bluetooth: hci3: command tx timeout [ 71.441137][ T5738] Bluetooth: hci2: command tx timeout [ 71.638689][ T6061] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 71.766250][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'. [ 71.771298][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.90'. [ 71.788555][ T6079] openvswitch: netlink: Missing valid actions attribute. [ 71.794514][ T6079] openvswitch: netlink: Actions may not be safe on all matching packets [ 71.798812][ T6081] Zero length message leads to an empty skb [ 71.967909][ T6097] netlink: 'syz.0.100': attribute type 1 has an invalid length. [ 71.978994][ T6097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.100'. [ 72.069262][ T6108] : renamed from vlan0 (while UP) [ 72.135734][ T6117] netlink: 'syz.0.110': attribute type 2 has an invalid length. [ 72.139692][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 72.157101][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.163762][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.245520][ T6136] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 73.512592][ T5738] Bluetooth: hci2: command tx timeout [ 73.512678][ T5732] Bluetooth: hci3: command tx timeout [ 73.515052][ T5737] Bluetooth: hci0: command tx timeout [ 73.517228][ T64] Bluetooth: hci1: command tx timeout [ 73.752915][ T6171] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 74.073046][ T6185] pi3usb30532 0-0005: Error reading config register -6 [ 74.078457][ T6185] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05 [ 74.749440][ T6210] netlink: 44 bytes leftover after parsing attributes in process `syz.0.152'. [ 74.758483][ T6210] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.901123][ T12] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.066713][ T42] kauditd_printk_skb: 71 callbacks suppressed [ 75.066736][ T42] audit: type=1400 audit(1786464823.386:282): avc: denied { append } for pid=6231 comm="syz.0.164" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 75.092933][ T42] audit: type=1400 audit(1786464823.416:283): avc: denied { ioctl } for pid=6234 comm="syz.3.163" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12434 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.125227][ T42] audit: type=1400 audit(1786464823.446:284): avc: denied { setopt } for pid=6237 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.133019][ T42] audit: type=1400 audit(1786464823.456:285): avc: denied { ioctl } for pid=6237 comm="syz.1.165" path="socket:[11548]" dev="sockfs" ino=11548 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.276125][ T6252] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 75.278915][ T6253] netlink: 36 bytes leftover after parsing attributes in process `syz.0.172'. [ 75.516045][ T42] audit: type=1400 audit(1786464823.836:286): avc: denied { execute } for pid=6274 comm="syz.2.182" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11712 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 75.593615][ T6281] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 75.596357][ T6281] syzkaller1: linktype set to 776 [ 75.757503][ T6295] batadv_slave_1: entered promiscuous mode [ 75.765509][ T6294] batadv_slave_1: left promiscuous mode [ 75.807081][ T42] audit: type=1400 audit(1786464824.126:287): avc: denied { create } for pid=6303 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.819956][ T42] audit: type=1400 audit(1786464824.126:288): avc: denied { write } for pid=6303 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.828455][ T42] audit: type=1400 audit(1786464824.136:289): avc: denied { read } for pid=6303 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.829597][ T6302] kvm: kvm [6301]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000006d) = 0x6 [ 75.887235][ T42] audit: type=1400 audit(1786464824.206:290): avc: denied { setattr } for pid=6308 comm="syz.2.199" name="trace_marker" dev="tracefs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 75.902056][ T42] audit: type=1400 audit(1786464824.216:291): avc: denied { watch_mount } for pid=6310 comm="syz.1.198" path="/48/file0" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.365844][ T6338] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 76.377846][ T6340] loop8: detected capacity change from 0 to 7 [ 76.391422][ T6320] process 'syz.1.203' launched './file0' with NULL argv: empty string added [ 76.401304][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.405562][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 76.412737][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.417219][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 76.427927][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.432030][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 76.437864][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.441975][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 76.445747][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.448906][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 76.452646][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.455733][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 76.459896][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.463982][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 76.467521][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.471809][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 76.478207][ T6340] ldm_validate_partition_table(): Disk read failed. [ 76.479212][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.485366][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 76.488865][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 76.492990][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 76.505963][ T6340] Dev loop8: unable to read RDB block 0 [ 76.509887][ T6340] loop8: unable to read partition table [ 76.513249][ T6340] loop8: partition table beyond EOD, truncated [ 76.516118][ T6340] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 76.577979][ T6350] ======================================================= [ 76.577979][ T6350] WARNING: The mand mount option has been deprecated and [ 76.577979][ T6350] and is ignored by this kernel. Remove the mand [ 76.577979][ T6350] option from the mount to silence this warning. [ 76.577979][ T6350] ======================================================= [ 76.660269][ T6356] netlink: 16 bytes leftover after parsing attributes in process `syz.3.222'. [ 76.739017][ T6365] capability: warning: `syz.1.225' uses 32-bit capabilities (legacy support in use) [ 76.743025][ T6365] program syz.1.225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.831240][ T6373] option changes via remount are deprecated (pid=6348 comm=syz.0.218) [ 77.036621][ T6394] printk: legacy console [ttyS0] disabled syzkaller syzkaller login: [ 79.943596][ T6628] printk: legacy console [ttyS0] enabled [ 80.065616][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'. [ 80.108279][ T42] kauditd_printk_skb: 80 callbacks suppressed [ 80.108295][ T42] audit: type=1400 audit(1786464828.426:372): avc: denied { bind } for pid=6646 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.270371][ T42] audit: type=1400 audit(1786464828.586:373): avc: denied { create } for pid=6656 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.286202][ T42] audit: type=1400 audit(1786464828.596:374): avc: denied { setopt } for pid=6656 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.297273][ T42] audit: type=1400 audit(1786464828.596:375): avc: denied { bind } for pid=6656 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.311637][ T42] audit: type=1400 audit(1786464828.596:376): avc: denied { name_bind } for pid=6656 comm="syz.0.343" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 80.347155][ T42] audit: type=1400 audit(1786464828.596:377): avc: denied { node_bind } for pid=6656 comm="syz.0.343" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 80.371288][ T42] audit: type=1400 audit(1786464828.596:378): avc: denied { write } for pid=6656 comm="syz.0.343" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.386131][ T42] audit: type=1400 audit(1786464828.596:379): avc: denied { connect } for pid=6656 comm="syz.0.343" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.394920][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.347'. [ 80.411716][ T42] audit: type=1400 audit(1786464828.596:380): avc: denied { name_connect } for pid=6656 comm="syz.0.343" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 80.424791][ T42] audit: type=1400 audit(1786464828.666:381): avc: denied { read } for pid=6660 comm="syz.2.345" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 80.525884][ T6677] mmap: syz.0.352 (6677) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.834428][ T6704] veth0: entered promiscuous mode [ 80.837498][ T6704] veth0: left promiscuous mode [ 81.061261][ T6723] netlink: 'syz.2.373': attribute type 4 has an invalid length. [ 81.066886][ T6723] netlink: 17 bytes leftover after parsing attributes in process `syz.2.373'. [ 81.092401][ T6723] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.373'. [ 81.135025][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'. [ 81.145573][ T6732] hsr_slave_0: left promiscuous mode [ 81.152666][ T6732] hsr_slave_1: left promiscuous mode [ 81.170930][ T6735] netlink: 28 bytes leftover after parsing attributes in process `syz.1.379'. [ 82.139780][ T6749] bond0: entered promiscuous mode [ 82.143329][ T6749] bond_slave_0: entered promiscuous mode [ 82.148910][ T6749] bond_slave_1: entered promiscuous mode [ 82.163039][ T6749] batadv0: entered promiscuous mode [ 82.171662][ T6749] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 82.180394][ T6749] bond0: left promiscuous mode [ 82.184804][ T6749] bond_slave_0: left promiscuous mode [ 82.188837][ T6749] bond_slave_1: left promiscuous mode [ 82.201070][ T6749] batadv0: left promiscuous mode [ 82.409469][ T9] cfg80211: failed to load regulatory.db [ 82.590791][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 82.620218][ T6789] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.703644][ T6802] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 83.176645][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 83.215650][ T6853] MPI: mpi too large (16392 bits) [ 84.607099][ T6890] vivid-000: disconnect [ 84.615669][ T6890] vivid-000: reconnect [ 85.425282][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 85.425309][ T42] audit: type=1400 audit(1786464833.746:402): avc: denied { prog_run } for pid=6952 comm="syz.1.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 85.474272][ T42] audit: type=1400 audit(1786464833.796:403): avc: denied { append } for pid=6955 comm="syz.1.474" name="loop9" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.477415][ T6956] loop9: detected capacity change from 0 to 524287999 [ 85.497657][ T6956] buffer_io_error: 10 callbacks suppressed [ 85.497675][ T6956] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.507351][ T6956] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.514705][ T6956] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.520622][ T6956] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.520666][ T6956] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.520708][ T6956] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.537881][ T6956] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.543517][ T6956] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.548906][ T6956] ldm_validate_partition_table(): Disk read failed. [ 85.553386][ T6956] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.558646][ T6956] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.565336][ T6956] Dev loop9: unable to read RDB block 0 [ 85.576765][ T6956] loop9: unable to read partition table [ 85.591260][ T6956] loop_reread_partitions: partition scan of loop9 (3 x) failed (rc=-5) [ 85.703568][ T42] audit: type=1400 audit(1786464834.026:404): avc: denied { relabelfrom } for pid=6968 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 85.718765][ T42] audit: type=1400 audit(1786464834.026:405): avc: denied { relabelto } for pid=6968 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 85.747664][ T6972] capability: warning: `syz.0.483' uses deprecated v2 capabilities in a way that may be insecure [ 86.162583][ T42] audit: type=1400 audit(1786464834.486:406): avc: denied { bind } for pid=7018 comm="syz.1.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.173219][ T42] audit: type=1400 audit(1786464834.486:407): avc: denied { name_bind } for pid=7018 comm="syz.1.504" src=18460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 86.184706][ T42] audit: type=1400 audit(1786464834.486:408): avc: denied { node_bind } for pid=7018 comm="syz.1.504" saddr=172.20.20.187 src=18460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 86.196687][ T42] audit: type=1400 audit(1786464834.486:409): avc: denied { connect } for pid=7018 comm="syz.1.504" laddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.209575][ T42] audit: type=1400 audit(1786464834.486:410): avc: denied { getopt } for pid=7018 comm="syz.1.504" laddr=172.20.20.187 faddr=172.20.20.170 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.295749][ T42] audit: type=1400 audit(1786464834.616:411): avc: denied { getopt } for pid=7025 comm="syz.0.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.588502][ T5828] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 87.400199][ T7056] ceph: No mds server is up or the cluster is laggy [ 87.647212][ T7083] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 87.814712][ T7103] [ 87.830087][ T9] logitech-hidpp-device 0005:046D:B012.0002: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 87.867957][ T7106] fido_id[7106]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.094779][ T7132] netlink: 'syz.2.557': attribute type 4 has an invalid length. [ 88.494908][ T7150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.566'. [ 88.945584][ T7165] can0: slcan on ttyS3. [ 89.054468][ T7165] can0 (unregistered): slcan off ttyS3. [ 89.253173][ T34] logitech-hidpp-device 0005:046D:B012.0003: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 89.325800][ T7195] fido_id[7195]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 89.480718][ T7213] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 89.525508][ T7219] [ 89.699692][ T7231] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 89.978899][ T7255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.616'. [ 90.078125][ T7266] netlink: 112 bytes leftover after parsing attributes in process `syz.2.620'. [ 90.395774][ T7287] ================================================================== [ 90.401430][ T7287] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 90.405474][ T7295] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 90.406267][ T7287] Read of size 1 at addr ffff8880275adb60 by task syz.3.625/7287 [ 90.406289][ T7287] [ 90.406322][ T7287] CPU: 0 UID: 0 PID: 7287 Comm: syz.3.625 Not tainted syzkaller #0 PREEMPT(full) [ 90.406360][ T7287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.406371][ T7287] Call Trace: [ 90.406389][ T7287] [ 90.406397][ T7287] dump_stack_lvl+0x100/0x190 [ 90.406427][ T7287] print_report+0x13d/0x4b0 [ 90.406455][ T7287] ? __virt_addr_valid+0x239/0x430 [ 90.406480][ T7287] ? string+0x471/0x4d0 [ 90.406500][ T7287] kasan_report+0xdf/0x1c0 [ 90.406525][ T7287] ? string+0x471/0x4d0 [ 90.406546][ T7287] string+0x471/0x4d0 [ 90.406567][ T7287] ? __pfx_string+0x10/0x10 [ 90.406587][ T7287] vsnprintf+0x422/0x1300 [ 90.406611][ T7287] ? __pfx_vsnprintf+0x10/0x10 [ 90.406630][ T7287] ? kernel_text_address+0x8d/0x100 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 90.406650][ T7287] ? __kernel_text_address+0xd/0x30 [ 90.406671][ T7287] vprintk_store+0x3b0/0xbe0 [ 90.406699][ T7287] ? __pfx_vprintk_store+0x10/0x10 [ 90.406725][ T7287] ? stack_depot_save_flags+0x479/0x9d0 [ 90.406756][ T7287] ? is_printk_cpu_sync_owner+0x32/0x40 [ 90.406775][ T7287] vprintk_emit+0x139/0x6b0 [ 90.406790][ T7287] ? __pfx_vprintk_emit+0x10/0x10 [ 90.406807][ T7287] ? __pfx___mutex_lock+0x10/0x10 [ 90.406830][ T7287] _printk+0xcf/0x110 [ 90.406847][ T7287] ? __pfx__printk+0x10/0x10 [ 90.406862][ T7287] ? do_raw_spin_lock+0x128/0x260 [ 90.406885][ T7287] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 90.406908][ T7287] ? _raw_spin_lock_irqsave+0x52/0x60 [ 90.406928][ T7287] __setup_irq.cold+0x3be/0x3f1 [ 90.406950][ T7287] request_threaded_irq+0x261/0x3e0 [ 90.406973][ T7287] pcl812_attach+0x1b62/0x2300 [ 90.406994][ T7287] comedi_device_attach+0x40e/0x6b0 [ 90.407014][ T7287] do_devconfig_ioctl+0x1b3/0x6d0 [ 90.407034][ T7287] ? comedi_unlocked_ioctl+0x180/0x3310 [ 90.407059][ T7287] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 90.407085][ T7287] ? find_held_lock+0x2b/0x80 [ 90.407102][ T7287] comedi_unlocked_ioctl+0x860/0x3310 [ 90.407135][ T7287] ? tomoyo_path_number_perm+0x188/0x580 [ 90.407163][ T7287] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 90.407190][ T7287] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 90.407213][ T7287] ? do_vfs_ioctl+0x226/0x13e0 [ 90.407237][ T7287] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 90.407261][ T7287] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 90.407291][ T7287] ? __fget_files+0x215/0x3d0 [ 90.407308][ T7287] ? hook_file_ioctl_common+0x140/0x440 [ 90.407329][ T7287] ? selinux_file_ioctl+0x13b/0x290 [ 90.407354][ T7287] ? selinux_file_ioctl+0xb6/0x290 [ 90.407378][ T7287] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 90.407404][ T7287] __x64_sys_ioctl+0x18e/0x210 [ 90.407430][ T7287] do_syscall_64+0x115/0x870 [ 90.407451][ T7287] ? clear_bhb_loop+0x70/0xc0 [ 90.407472][ T7287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.407492][ T7287] RIP: 0033:0x7f4b9f39e0d9 [ 90.407509][ T7287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.407526][ T7287] RSP: 002b:00007f4ba0266028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.407546][ T7287] RAX: ffffffffffffffda RBX: 00007f4b9f625fa0 RCX: 00007f4b9f39e0d9 [ 90.407558][ T7287] RDX: 0000200000000240 RSI: 0000000040946400 RDI: 0000000000000003 [ 90.407569][ T7287] RBP: 00007f4b9f435024 R08: 0000000000000000 R09: 0000000000000000 [ 90.407579][ T7287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.407589][ T7287] R13: 00007f4b9f626038 R14: 00007f4b9f625fa0 R15: 00007fffaba595a8 [ 90.407606][ T7287] [ 90.407613][ T7287] [ 90.655116][ T7287] Allocated by task 5733: [ 90.657936][ T7287] kasan_save_stack+0x30/0x50 [ 90.660897][ T7287] kasan_save_track+0x14/0x30 [ 90.663876][ T7287] __kasan_kmalloc+0xaa/0xb0 [ 90.666923][ T7287] __kmalloc_node_noprof+0x339/0x830 [ 90.670529][ T7287] __vmalloc_node_range_noprof+0x409/0x1630 [ 90.674564][ T7287] __vmalloc_node_noprof+0xad/0xf0 [ 90.678118][ T7287] do_ipt_get_ctl+0x7e0/0xbf0 [ 90.681414][ T7287] nf_getsockopt+0x7c/0xe0 [ 90.684326][ T7287] ip_getsockopt+0x192/0x1e0 [ 90.687509][ T7287] tcp_getsockopt+0xa1/0x110 [ 90.690676][ T7287] do_sock_getsockopt+0x50a/0x6e0 [ 90.694028][ T7287] __sys_getsockopt+0x148/0x260 [ 90.697348][ T7287] __x64_sys_getsockopt+0xbd/0x160 [ 90.700813][ T7287] do_syscall_64+0x115/0x870 [ 90.703928][ T7287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.707900][ T7287] [ 90.709419][ T7287] Freed by task 5733: [ 90.711866][ T7287] kasan_save_stack+0x30/0x50 [ 90.714747][ T7287] kasan_save_track+0x14/0x30 [ 90.717813][ T7287] kasan_save_free_info+0x3b/0x70 [ 90.720893][ T7287] __kasan_slab_free+0x5f/0x80 [ 90.723973][ T7287] kfree+0x22b/0x6c0 [ 90.726451][ T7287] vfree+0x12e/0x750 [ 90.728590][ T7287] do_ipt_get_ctl+0x9d7/0xbf0 [ 90.731032][ T7287] nf_getsockopt+0x7c/0xe0 [ 90.733353][ T7287] ip_getsockopt+0x192/0x1e0 [ 90.735744][ T7287] tcp_getsockopt+0xa1/0x110 [ 90.738139][ T7287] do_sock_getsockopt+0x50a/0x6e0 [ 90.740759][ T7287] __sys_getsockopt+0x148/0x260 [ 90.743290][ T7287] __x64_sys_getsockopt+0xbd/0x160 [ 90.745959][ T7287] do_syscall_64+0x115/0x870 [ 90.748372][ T7287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.751427][ T7287] [ 90.752652][ T7287] The buggy address belongs to the object at ffff8880275adb60 [ 90.752652][ T7287] which belongs to the cache kmalloc-8 of size 8 [ 90.759746][ T7287] The buggy address is located 0 bytes inside of [ 90.759746][ T7287] freed 8-byte region [ffff8880275adb60, ffff8880275adb68) [ 90.768498][ T7287] [ 90.769734][ T7287] The buggy address belongs to the physical page: [ 90.773156][ T7287] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x275ad [ 90.777733][ T7287] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 90.781429][ T7287] page_type: f5(slab) [ 90.783497][ T7287] raw: 00fff00000000000 ffff88801bc42500 dead000000000100 dead000000000122 [ 90.787988][ T7287] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000 [ 90.792457][ T7287] page dumped because: kasan: bad access detected [ 90.795816][ T7287] page_owner tracks the page as allocated [ 90.798797][ T7287] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 7693693956, free_ts 0 [ 90.809162][ T7287] post_alloc_hook+0xfd/0x120 [ 90.811591][ T7287] get_page_from_freelist+0xf48/0x3530 [ 90.814428][ T7287] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 90.817464][ T7287] new_slab+0xa2/0x640 [ 90.819556][ T7287] refill_objects+0xe3/0x410 [ 90.821955][ T7287] __pcs_replace_empty_main+0x376/0x680 [ 90.824815][ T7287] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 90.828178][ T7287] kstrdup+0x51/0xe0 [ 90.830228][ T7287] kstrdup_const+0x63/0x80 [ 90.832526][ T7287] __kernfs_new_node+0x9b/0xa10 [ 90.835026][ T7287] kernfs_new_node+0x117/0x150 [ 90.837529][ T7287] kernfs_create_link+0xcc/0x240 [ 90.840074][ T7287] sysfs_do_create_link_sd+0x90/0x140 [ 90.842846][ T7287] sysfs_create_link+0x61/0xc0 [ 90.845300][ T7287] device_add+0x675/0x1970 [ 90.847562][ T7287] tty_register_device_attr+0x388/0x7f0 [ 90.850433][ T7287] page_owner free stack trace missing [ 90.853212][ T7287] [ 90.854416][ T7287] Memory state around the buggy address: [ 90.857339][ T7287] ffff8880275ada00: 00 fc fc fc 00 fc fc fc 00 fc fc fc 00 fc fc fc [ 90.861501][ T7287] ffff8880275ada80: 00 fc fc fc 00 fc fc fc 00 fc fc fc 05 fc fc fc [ 90.865706][ T7287] >ffff8880275adb00: 00 fc fc fc 04 fc fc fc 05 fc fc fc fa fc fc fc [ 90.870070][ T7287] ^ [ 90.873816][ T7287] ffff8880275adb80: 00 fc fc fc fa fc fc fc 00 fc fc fc 00 fc fc fc [ 90.877991][ T7287] ffff8880275adc00: 00 fc fc fc fa fc fc fc fa fc fc fc 04 fc fc fc [ 90.882169][ T7287] ================================================================== [ 90.886360][ T7287] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 90.890105][ T7287] CPU: 0 UID: 0 PID: 7287 Comm: syz.3.625 Not tainted syzkaller #0 PREEMPT(full) [ 90.894862][ T7287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.900131][ T7287] Call Trace: [ 90.901848][ T7287] [ 90.903370][ T7287] dump_stack_lvl+0x100/0x190 [ 90.905838][ T7287] vpanic+0x552/0x970 [ 90.907977][ T7287] ? __pfx_vpanic+0x10/0x10 [ 90.910375][ T7287] ? __pfx_vprintk_emit+0x10/0x10 [ 90.912971][ T7287] ? string+0x471/0x4d0 [ 90.915046][ T7287] panic+0xd1/0xe0 [ 90.916961][ T7287] ? __pfx_panic+0x10/0x10 [ 90.919247][ T7287] ? end_report.part.0+0x23/0x90 [ 90.921817][ T7287] ? rcu_is_watching+0x12/0xc0 [ 90.924291][ T7287] ? end_report.part.0+0x23/0x90 [ 90.926855][ T7287] check_panic_on_warn.cold+0x19/0x34 [ 90.929638][ T7287] end_report.part.0+0x3a/0x90 [ 90.932126][ T7287] kasan_report.cold+0xe/0x18 [ 90.934590][ T7287] ? string+0x471/0x4d0 [ 90.936880][ T7287] string+0x471/0x4d0 [ 90.938976][ T7287] ? __pfx_string+0x10/0x10 [ 90.941322][ T7287] vsnprintf+0x422/0x1300 [ 90.943568][ T7287] ? __pfx_vsnprintf+0x10/0x10 [ 90.946036][ T7287] ? kernel_text_address+0x8d/0x100 [ 90.948760][ T7287] ? __kernel_text_address+0xd/0x30 [ 90.951451][ T7287] vprintk_store+0x3b0/0xbe0 [ 90.953838][ T7287] ? __pfx_vprintk_store+0x10/0x10 [ 90.956524][ T7287] ? stack_depot_save_flags+0x479/0x9d0 [ 90.959363][ T7287] ? is_printk_cpu_sync_owner+0x32/0x40 [ 90.962232][ T7287] vprintk_emit+0x139/0x6b0 [ 90.964573][ T7287] ? __pfx_vprintk_emit+0x10/0x10 [ 90.967220][ T7287] ? __pfx___mutex_lock+0x10/0x10 [ 90.969832][ T7287] _printk+0xcf/0x110 [ 90.971914][ T7287] ? __pfx__printk+0x10/0x10 [ 90.974294][ T7287] ? do_raw_spin_lock+0x128/0x260 [ 90.976954][ T7287] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 90.979747][ T7287] ? _raw_spin_lock_irqsave+0x52/0x60 [ 90.982547][ T7287] __setup_irq.cold+0x3be/0x3f1 [ 90.985076][ T7287] request_threaded_irq+0x261/0x3e0 [ 90.987822][ T7287] pcl812_attach+0x1b62/0x2300 [ 90.990303][ T7287] comedi_device_attach+0x40e/0x6b0 [ 90.992980][ T7287] do_devconfig_ioctl+0x1b3/0x6d0 [ 90.995590][ T7287] ? comedi_unlocked_ioctl+0x180/0x3310 [ 90.998513][ T7287] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 91.001394][ T7287] ? find_held_lock+0x2b/0x80 [ 91.003827][ T7287] comedi_unlocked_ioctl+0x860/0x3310 [ 91.006656][ T7287] ? tomoyo_path_number_perm+0x188/0x580 [ 91.009579][ T7287] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 91.012589][ T7287] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 91.015630][ T7287] ? do_vfs_ioctl+0x226/0x13e0 [ 91.018158][ T7287] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 91.020806][ T7287] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 91.024424][ T7287] ? __fget_files+0x215/0x3d0 [ 91.026919][ T7287] ? hook_file_ioctl_common+0x140/0x440 [ 91.029834][ T7287] ? selinux_file_ioctl+0x13b/0x290 [ 91.032547][ T7287] ? selinux_file_ioctl+0xb6/0x290 [ 91.035202][ T7287] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 91.038279][ T7287] __x64_sys_ioctl+0x18e/0x210 [ 91.040773][ T7287] do_syscall_64+0x115/0x870 [ 91.043201][ T7287] ? clear_bhb_loop+0x70/0xc0 [ 91.045689][ T7287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.048835][ T7287] RIP: 0033:0x7f4b9f39e0d9 [ 91.051138][ T7287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.061323][ T7287] RSP: 002b:00007f4ba0266028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.065670][ T7287] RAX: ffffffffffffffda RBX: 00007f4b9f625fa0 RCX: 00007f4b9f39e0d9 [ 91.069948][ T7287] RDX: 0000200000000240 RSI: 0000000040946400 RDI: 0000000000000003 [ 91.074170][ T7287] RBP: 00007f4b9f435024 R08: 0000000000000000 R09: 0000000000000000 [ 91.078344][ T7287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.082473][ T7287] R13: 00007f4b9f626038 R14: 00007f4b9f625fa0 R15: 00007fffaba595a8 [ 91.086752][ T7287] [ 91.088977][ T7287] Kernel Offset: disabled [ 91.091229][ T7287] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:13:58 Registers: info registers vcpu 0 CPU#0 RAX=00000000000267e7 RBX=0000000000000000 RCX=ffffc90007603000 RDX=0000000000080000 RSI=ffffffff81e8c2fc RDI=ffff8880241cca80 RBP=0000000000000001 RSP=ffffc9000dc17158 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff92001b82e2d R13=0000000000000000 R14=ffff88802df9a540 R15=ffffc9000dc17220 RIP=ffffffff81e8c305 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4ba02666c0 ffffffff 00c00000 GS =0000 ffff8880d5dec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c2ed1d2 CR3=00000000338fb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffaba59a96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffaba59a96 00007fffaba59a9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b9f435607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b9f435647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b9f4357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b9f435639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b9f5f25f8 00007f4b9f5f25c8 00007f4b9f5f2600 00007f4b9f5f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffffffffffff RBX=dffffc0000000000 RCX=1ffff1100d4a8673 RDX=1ffff11003cd4463 RSI=ffffffff8202ec7e RDI=ffff88801e6a1ba0 RBP=0000000000000001 RSP=ffffc9000370f688 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000002 R11=0000000000000000 R12=0000000000000000 R13=1ffffffff2243275 R14=ffffffff94656880 R15=0000000000000001 RIP=ffffffff8283ac67 RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5eec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa93bd57e20 CR3=000000003c5aa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=000000000000000f Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd932a0400 00007ffd932a0400 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa93b1f2823 00007fa93b1f2823 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa93b1f2e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa93b1f2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555576cec838 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04a8040504800401 eec0080001000000 080606011cdc0008 0004980300000002 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010b800401ee9a08 0001000000080606 011cae0008000bb8 030008000bb00310 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08000ba8031beaed fbde08000ba0030f ffffffffffff040b 9003000000040806 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0b88034008000b80 030804a804050480 0401eec008000100 0000080606011cdc ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000498030000 0002080604900304 0800048803019008 0004800308039002 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 031208000ad80306 08000ad00305dd80 08000ac8030fffff fffe08000ac00306 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000007b RBX=0000000000000000 RCX=00007f4cdf2a4320 RDX=00007f4cdf44b7b8 RSI=00007f4cdf2a4400 RDI=00007f4cdf44b5f8 RBP=00007fff22190270 RSP=00007fff22190150 R8 =0000000000000000 R9 =00007f4cdf55eda0 R10=00007f4cdf27d000 R11=0000000000000207 R12=0000000000000001 R13=0000000000000000 R14=00007f4cdf51f5f0 R15=0000000000000000 RIP=00007f4cdf5364a8 RFL=00000207 [-----PC] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4cdf1b4c80 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4cdf44b008 CR3=000000005a78d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cdf1b4f60 00007f4cdf1b4f60 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00010001010100ff ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a 00007f4cdf222cc8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000002e 322e325f4342494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c4700362e322e32 5f4342494c470035 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cdf2226b0 00007f4cdf2220c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cdf520ab0 00007f4cdf520580 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4cdf51fb20 00007f4cdf520050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85a350c0 RDI=ffffffff9b9f7ec0 RBP=ffffffff9b9f7e80 RSP=ffffc900213370c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff373f02a R15=dffffc0000000000 RIP=ffffffff85a350e7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5c029f66c0 ffffffff 00c00000 GS =0000 ffff8880d60ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b32c23ffc CR3=000000005dbdd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c0555d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0d038aa6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0d038aa6 00007fff0d038aac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c04835607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c04835647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c048357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c04835639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c049f2600 00007f5c049f25e0 00007f5c049f25e8 00007f5c049f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c049f25f8 00007f5c049f25c8 00007f5c049f2600 00007f5c049f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000