last executing test programs: 5m25.401656375s ago: executing program 2 (id=3314): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x15, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 5m25.389215782s ago: executing program 2 (id=3317): r0 = socket$inet_tcp(0x2, 0x1, 0x0) flistxattr(r0, &(0x7f0000000bc0)=""/4096, 0x1000) 5m25.314474958s ago: executing program 2 (id=3324): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0xa000, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 5m25.307130532s ago: executing program 2 (id=3328): setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 5m25.240028478s ago: executing program 2 (id=3329): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 5m25.23553365s ago: executing program 2 (id=3332): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x2000000, 0x0, 0x0, 0x6}, 0x2}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 5m8.853224309s ago: executing program 32 (id=3332): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x2000000, 0x0, 0x0, 0x6}, 0x2}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 4m7.745292798s ago: executing program 4 (id=7688): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100001f000100000000000400000005"], 0x114}], 0x1}, 0x0) 4m7.671061358s ago: executing program 4 (id=7690): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x40000000) 4m7.58741502s ago: executing program 4 (id=7694): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) kcmp(r1, r1, 0x0, 0xffffffffffffffff, r0) 4m7.529662784s ago: executing program 4 (id=7697): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4b, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, 0x0}) 4m7.517280758s ago: executing program 4 (id=7699): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 4m7.42974703s ago: executing program 4 (id=7701): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) 3m51.428050709s ago: executing program 33 (id=7701): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) 2m12.441902779s ago: executing program 0 (id=12255): setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9071, 0xffffffffffffffff, 0x0) getitimer(0x2, &(0x7f00000001c0)) 2m12.267103421s ago: executing program 0 (id=12262): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) 2m12.25627325s ago: executing program 0 (id=12265): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) 2m12.223960291s ago: executing program 0 (id=12268): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x20, 0xde, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x2f, 0x0, @empty, @private=0xa010101}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000008c0)={'ip_vti0\x00', r1, 0x7800, 0x7800, 0xfffffff0, 0x0, {{0x5, 0x4, 0x1, 0x38, 0x14, 0x65, 0x0, 0xec, 0x29, 0x0, @broadcast, @remote}}}}) 2m12.149192778s ago: executing program 0 (id=12275): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) 2m12.095364534s ago: executing program 0 (id=12278): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="000001e6b9"]) 1m55.869643963s ago: executing program 34 (id=12278): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="000001e6b9"]) 1m46.132309488s ago: executing program 5 (id=12702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040) 1m46.097457445s ago: executing program 5 (id=12698): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) 1m46.049554731s ago: executing program 5 (id=12703): mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040)=[{}], 0x144, 0x1, 0x0, 0x2, 0x0, 0x2}) 1m46.047085175s ago: executing program 5 (id=12704): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000811800028004000100100003800c000180080001"], 0x44}}, 0x0) 1m46.018410655s ago: executing program 5 (id=12707): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) 1m45.948608978s ago: executing program 5 (id=12709): prlimit64(0x0, 0x8, &(0x7f0000000140)={0x3, 0x3e3}, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 1m45.625631149s ago: executing program 6 (id=12725): unshare(0x22020400) r0 = eventfd(0x2) syz_io_uring_setup(0x7793, &(0x7f0000000440)={0x0, 0x251b9, 0x26, 0x6, 0x2d7, 0x0, r0}, 0x0, 0x0) 1m45.577178799s ago: executing program 6 (id=12726): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) listen(r0, 0x5) 1m45.57120311s ago: executing program 6 (id=12736): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m44.89652378s ago: executing program 6 (id=12740): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) 1m44.844313573s ago: executing program 6 (id=12732): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) 1m44.800291987s ago: executing program 6 (id=12747): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000b80)={0x5, 0x1, 0x2a, 0x5, 'syz1\x00', 0x5}) 1m29.6546996s ago: executing program 35 (id=12709): prlimit64(0x0, 0x8, &(0x7f0000000140)={0x3, 0x3e3}, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 1m28.65493941s ago: executing program 36 (id=12747): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000b80)={0x5, 0x1, 0x2a, 0x5, 'syz1\x00', 0x5}) 23.530874844s ago: executing program 8 (id=14676): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x3c0, 0x1d8, 0x1d8, 0x3c0, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x9400, 0x70, 0xd8, 0x94}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f", 0x1f) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080"], 0x24}}, 0x0) 23.476566364s ago: executing program 8 (id=14678): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3fffe0040, 0x0, 0x5f) 23.476052871s ago: executing program 8 (id=14679): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000002f3144e900000000030006000720000002004000e0000001000000f5000000000800120002000100000000000000000030006c000201009f6eae02000000adb20200000000152c000000000000000001020014bb7acde1b8e96408d700000000030005000020000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 23.414009754s ago: executing program 8 (id=14680): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r0 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e9c515c4a2c", 0x31, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 23.386027477s ago: executing program 8 (id=14683): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) 23.306809267s ago: executing program 8 (id=14686): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) 7.292135671s ago: executing program 37 (id=14686): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) 2.114744545s ago: executing program 3 (id=15324): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x28}}, 0x4) 2.110094643s ago: executing program 3 (id=15327): syz_usb_connect(0x4, 0x36, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x8000001, 0x1}, 0x8) close(r0) 1.947135548s ago: executing program 9 (id=15340): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='i2c_read\x00', r0}, 0x18) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r1, 0x0, 0x0, 0x0) 1.893612376s ago: executing program 9 (id=15341): timerfd_create(0x8, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r0, r1, 0x0) 1.017017014s ago: executing program 9 (id=15353): write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f", 0x1f) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080", @ANYRES32=0x0], 0x24}}, 0x0) 950.516508ms ago: executing program 9 (id=15362): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r0, &(0x7f0000000000)="b6c237801b86dbb96b63655e03e68966e449df81ff43e6d52c92eeee579e12cac4487ab4edd4a4110edf309172ce01b41d2395fd83800394cde7115935a91c32a76cf09ead70dc0ab1ece66c3f05b80800e95fa66c65043292e68d6365bfc47bff19d04e53f1073fd195fbd76ec951148658d1cd6eb3e4c438ca9109ef3a3be0f2536a6433d525df107f06a5439556d9238fc99f71aefc", 0xfffffd05) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) close(0x3) 482.008628ms ago: executing program 3 (id=15355): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 453.930112ms ago: executing program 3 (id=15358): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$qrtrtun(r0, &(0x7f00000000c0)=""/167, 0xffffff18) 426.077972ms ago: executing program 3 (id=15361): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x1, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xcd3f, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0xfffffffb, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x7, 0xb4e, 0x0, 0x800, 0x3, 0x3, 0x6, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x5, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964c, 0x2d5, 0x149, 0x1], [0x66a9, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x13e, 0xffffffff, 0x4, 0x2, 0x0, 0x7, 0x7, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x1ff, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x200004c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x3, 0x1, 0x2, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x40000009], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x5, 0xc9, 0x2, 0x400, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0x200d5d, 0xa0c787d, 0x1, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x2, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0xfffff773, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0xf, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0x5, 0x2, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0xb, 0x8ac1, 0x3, 0x4, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffbfff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xf, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 342.82695ms ago: executing program 3 (id=15367): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800"], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 279.651749ms ago: executing program 7 (id=15369): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x18, 0x0, 0xcb, r2}, [@IFA_LOCAL={0x8, 0x2, @remote}, @IFA_FLAGS={0x8, 0x8, 0x10}]}, 0x28}}, 0x0) 279.29182ms ago: executing program 7 (id=15371): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x38) 279.205802ms ago: executing program 1 (id=15372): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 278.856616ms ago: executing program 7 (id=15373): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x80000003}, 0x18) 227.149562ms ago: executing program 1 (id=15374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='i2c_read\x00', r0}, 0x18) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r1, 0x0, 0x0, 0x0) 226.039852ms ago: executing program 1 (id=15375): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10) getpriority(0x0, 0x0) 225.917236ms ago: executing program 1 (id=15376): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x220001, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 220.352046ms ago: executing program 7 (id=15382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 5.41944ms ago: executing program 1 (id=15377): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000002000010027bd7000000000000a002040000000070000000014000200fe88000000000000000000000000010108000d"], 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 5.306592ms ago: executing program 7 (id=15378): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 4.983886ms ago: executing program 9 (id=15379): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) getpeername$inet(r0, 0x0, &(0x7f0000000040)) 4.698712ms ago: executing program 7 (id=15380): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.588837ms ago: executing program 9 (id=15381): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x3c, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e6400"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 0s ago: executing program 1 (id=15383): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x6) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x3, 0x4f, "0c41920887e8d2b791f19dd026d76d7fcb366b", 0x4, 0x200}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x8) kernel console output (not intermixed with test programs): 349.878743][ T445] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.881064][ T445] bridge_slave_1: entered allmulticast mode [ 349.883648][ T445] bridge_slave_1: entered promiscuous mode [ 349.916692][ T445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.922888][ T445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.962033][ T46] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.002984][ T504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12786'. [ 350.010197][ T445] team0: Port device team_slave_0 added [ 350.013735][ T445] team0: Port device team_slave_1 added [ 350.045454][ T445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.049430][ T445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.061749][ T445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.093391][ T46] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.104145][ T445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.106333][ T445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.115379][ T445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.157067][ T445] hsr_slave_0: entered promiscuous mode [ 350.159879][ T445] hsr_slave_1: entered promiscuous mode [ 350.162343][ T445] debugfs: 'hsr0' already exists in 'hsr' [ 350.164471][ T445] Cannot create hsr debugfs directory [ 350.178553][ T46] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.369533][ T5979] Bluetooth: hci1: command tx timeout [ 350.398590][ T219] netdevsim netdevsim6 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.424610][ T12] netdevsim netdevsim6 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.440661][ T61] netdevsim netdevsim6 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.446337][ T445] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 350.454684][ T445] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 350.459263][ T445] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 350.463805][ T445] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 350.468932][ T561] openvswitch: netlink: IPv4 tunnel dst address is zero [ 350.469938][ T12] netdevsim netdevsim6 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.475256][ T46] bridge_slave_1: left allmulticast mode [ 350.477171][ T46] bridge_slave_1: left promiscuous mode [ 350.479183][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.494914][ T46] bridge_slave_0: left allmulticast mode [ 350.496971][ T46] bridge_slave_0: left promiscuous mode [ 350.499266][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.849160][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.883746][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.904308][ T46] bond0 (unregistering): Released all slaves [ 351.338791][ T445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.348293][ T445] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.353879][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.356183][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.362623][ T219] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.365079][ T219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.395007][ T5979] Bluetooth: hci3: command tx timeout [ 351.629045][ T445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.667175][ T46] hsr_slave_0: left promiscuous mode [ 351.669383][ T46] hsr_slave_1: left promiscuous mode [ 351.671427][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.675604][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.678997][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.681422][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.713424][ T5328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 351.720045][ T5328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 351.720883][ T46] veth1_macvtap: left promiscuous mode [ 351.723376][ T5328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 351.723950][ T46] veth0_macvtap: left promiscuous mode [ 351.728497][ T46] veth1_vlan: left promiscuous mode [ 351.729039][ T5328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 351.730290][ T46] veth0_vlan: left promiscuous mode [ 351.733287][ T5328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.462048][ T46] team0 (unregistering): Port device team_slave_1 removed [ 352.545988][ T46] team0 (unregistering): Port device team_slave_0 removed [ 352.594076][ T5328] Bluetooth: hci1: command tx timeout [ 353.111962][ T643] ÿÿÿÿ: renamed from bridge_slave_0 (while UP) [ 353.120446][ T643] bridge0: port 1(ÿÿÿÿ) entered disabled state [ 353.127045][ T650] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.129570][ T650] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.148606][ T636] vxcan1 speed is unknown, defaulting to 1000 [ 353.260349][ T636] lo speed is unknown, defaulting to 1000 [ 353.300540][ T445] veth0_vlan: entered promiscuous mode [ 353.314129][ T445] veth1_vlan: entered promiscuous mode [ 353.376640][ T445] veth0_macvtap: entered promiscuous mode [ 353.380899][ T445] veth1_macvtap: entered promiscuous mode [ 353.388631][ T636] chnl_net:caif_netlink_parms(): no params data found [ 353.407959][ T40] kauditd_printk_skb: 173 callbacks suppressed [ 353.407970][ T40] audit: type=1400 audit(2000000133.257:60838): avc: denied { recv } for pid=5955 comm="sshd-session" saddr=10.0.2.2 src=34572 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 353.454100][ T445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.477556][ T445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.483088][ T636] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.485380][ T636] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.487682][ T636] bridge_slave_0: entered allmulticast mode [ 353.491341][ T636] bridge_slave_0: entered promiscuous mode [ 353.495115][ T636] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.497366][ T636] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.499580][ T636] bridge_slave_1: entered allmulticast mode [ 353.502942][ T636] bridge_slave_1: entered promiscuous mode [ 353.550206][ T40] audit: type=1400 audit(2000000133.388:60839): avc: denied { watch watch_reads } for pid=689 comm="syz.1.12855" path="/3512/file0" dev="tmpfs" ino=17735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 353.567950][ T40] audit: type=1400 audit(2000000133.406:60840): avc: denied { prog_load } for pid=691 comm="syz.7.12856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 353.574323][ T40] audit: type=1400 audit(2000000133.406:60841): avc: denied { bpf } for pid=691 comm="syz.7.12856" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 353.581566][ T40] audit: type=1400 audit(2000000133.406:60842): avc: denied { perfmon } for pid=691 comm="syz.7.12856" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 353.591740][ T40] audit: type=1400 audit(2000000133.406:60843): avc: denied { prog_run } for pid=691 comm="syz.7.12856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 353.602203][ T636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.608348][ T636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.618475][ T5328] Bluetooth: hci3: command tx timeout [ 353.619422][ T40] audit: type=1400 audit(2000000133.462:60844): avc: denied { egress } for pid=53 comm="kworker/2:1" saddr=fe80::1c daddr=ff02::16 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 353.627465][ T40] audit: type=1400 audit(2000000133.462:60845): avc: denied { sendto } for pid=53 comm="kworker/2:1" saddr=fe80::1c daddr=ff02::16 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 353.634599][ T40] audit: type=1400 audit(2000000133.462:60846): avc: denied { read } for pid=695 comm="syz.1.12858" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 353.644448][ T40] audit: type=1400 audit(2000000133.462:60847): avc: denied { open } for pid=695 comm="syz.1.12858" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 353.674408][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.678029][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.685243][ T636] team0: Port device team_slave_0 added [ 353.687570][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.690294][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.696302][ T636] team0: Port device team_slave_1 added [ 353.727320][ T636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.729507][ T636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.738712][ T636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.750811][ T636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.753062][ T636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.761879][ T636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.971432][ T5328] Bluetooth: hci2: command tx timeout [ 354.126361][ T636] hsr_slave_0: entered promiscuous mode [ 354.128605][ T636] hsr_slave_1: entered promiscuous mode [ 354.130684][ T636] debugfs: 'hsr0' already exists in 'hsr' [ 354.133005][ T636] Cannot create hsr debugfs directory [ 354.167510][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.223356][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.225983][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.285376][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.295213][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.298346][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.370298][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.572776][ T61] netdevsim netdevsim3 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.581590][ T12] netdevsim netdevsim3 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.594405][ T61] netdevsim netdevsim3 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.606217][ T61] netdevsim netdevsim3 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.611917][ T46] veth0_to_bridge: left allmulticast mode [ 354.614239][ T46] veth0_to_bridge: left promiscuous mode [ 354.616258][ T46] bridge0: port 3(veth0_to_bridge) entered disabled state [ 354.620013][ T46] bridge_slave_1: left allmulticast mode [ 354.621743][ T46] bridge_slave_1: left promiscuous mode [ 354.623712][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.627853][ T46] bridge_slave_0: left allmulticast mode [ 354.629948][ T46] bridge_slave_0: left promiscuous mode [ 354.631766][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.815910][ T5328] Bluetooth: hci1: command tx timeout [ 355.111560][ T740] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 355.210665][ T751] usb usb5: usbfs: process 751 (syz.1.12883) did not claim interface 0 before use [ 355.547262][ T769] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12892'. [ 355.550942][ T769] netlink: 32 bytes leftover after parsing attributes in process `syz.8.12892'. [ 355.551193][ T46] bond1 (unregistering): Released all slaves [ 355.559911][ T46] bond2 (unregistering): Released all slaves [ 355.580053][ T636] netdevsim netdevsim3 eth21 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.659936][ T46] : left promiscuous mode [ 355.700485][ T636] netdevsim netdevsim3 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.757394][ T46] tipc: Left network mode [ 355.828007][ T636] netdevsim netdevsim3 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.845749][ T792] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.848274][ T792] IPv6: NLM_F_CREATE should be set when creating new route [ 355.850734][ T792] IPv6: NLM_F_CREATE should be set when creating new route [ 355.855324][ T792] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.860750][ T54] hid_parser_main: 73 callbacks suppressed [ 355.860761][ T54] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.869086][ T54] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.869611][ T794] UHID_CREATE from different security context by process 7184 (syz.1.12904), this is not allowed. [ 355.871459][ T54] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.871475][ T54] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.880829][ T54] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.883792][ T54] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.888040][ T54] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.890873][ T54] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.893185][ T54] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.895632][ T54] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 355.905473][ T54] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.03 Device [syz1] on syz1 [ 355.919854][ T636] netdevsim netdevsim3 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.951940][ T802] fido_id[802]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 356.111044][ T820] netlink: 28 bytes leftover after parsing attributes in process `syz.8.12916'. [ 356.113912][ T820] netem: change failed [ 356.142240][ T46] IPVS: stopping master sync thread 30987 ... [ 356.148394][ T46] IPVS: stopping backup sync thread 26114 ... [ 356.185571][ T5328] Bluetooth: hci2: command tx timeout [ 356.391359][ T845] netlink: 'syz.1.12925': attribute type 25 has an invalid length. [ 356.393877][ T845] netlink: 'syz.1.12925': attribute type 28 has an invalid length. [ 356.544679][ T46] hsr_slave_0: left promiscuous mode [ 356.547863][ T46] hsr_slave_1: left promiscuous mode [ 356.550745][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.553722][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.588299][ T46] veth1_macvtap: left promiscuous mode [ 356.590601][ T46] veth0_macvtap: left allmulticast mode [ 356.592875][ T46] veth0_macvtap: left promiscuous mode [ 356.595349][ T46] veth1_vlan: left promiscuous mode [ 356.597482][ T46] veth0_vlan: left promiscuous mode [ 356.651763][ T46] pim6reg (unregistering): left allmulticast mode [ 356.660758][ T46] pimreg3 (unregistering): left allmulticast mode [ 356.806067][ T874] openvswitch: netlink: IP tunnel TTL not specified. [ 357.050356][ T5328] Bluetooth: hci1: command tx timeout [ 357.084676][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 357.242578][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 357.245579][ T24] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 357.247928][ T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 357.251326][ T24] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 357.255466][ T24] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 357.259124][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 357.262650][ T24] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 357.265271][ T878] program syz.7.12941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.268086][ T24] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 357.270439][ T24] usb 6-1: Product: syz [ 357.271637][ T24] usb 6-1: Manufacturer: syz [ 357.273004][ T24] usb 6-1: SerialNumber: syz [ 357.283969][ T24] usb 6-1: config 0 descriptor?? [ 357.288495][ T24] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 357.302706][ T24] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 357.344006][ T46] team0 (unregistering): Port device team_slave_1 removed [ 357.435378][ T46] team0 (unregistering): Port device team_slave_0 removed [ 357.562272][ T876] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 357.562385][ T1469] usb 6-1: USB disconnect, device number 18 [ 357.568978][ C2] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 357.579603][ T1469] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 357.727418][ T5328] Bluetooth: hci3: command tx timeout [ 357.901060][ T74] smc: removing ib device syz1 [ 358.070170][ T455] vxcan1 speed is unknown, defaulting to 1000 [ 358.072657][ T455] syz1: Port: 1 Link DOWN [ 358.418934][ T5328] Bluetooth: hci2: command tx timeout [ 358.600335][ T455] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 358.760675][ T455] usb 6-1: Using ep0 maxpacket: 8 [ 358.763867][ T455] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 358.766937][ T455] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 358.769938][ T455] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 358.773808][ T455] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.780029][ T455] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 358.784485][ T455] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.889704][ T40] kauditd_printk_skb: 121 callbacks suppressed [ 358.889721][ T40] audit: type=1400 audit(2000000138.392:60969): avc: denied { execmem } for pid=906 comm="syz.8.12955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 358.935322][ T909] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12956'. [ 358.988600][ T40] audit: type=1400 audit(2000000138.476:60970): avc: denied { create } for pid=912 comm="syz.7.12958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 358.998425][ T40] audit: type=1400 audit(2000000138.485:60971): avc: denied { ioctl } for pid=912 comm="syz.7.12958" path="socket:[112175]" dev="sockfs" ino=112175 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 359.018398][ T455] usb 6-1: GET_CAPABILITIES returned 0 [ 359.020954][ T455] usbtmc 6-1:16.0: can't read capabilities [ 359.186786][ T40] audit: type=1400 audit(2000000138.663:60972): avc: denied { bind } for pid=920 comm="syz.8.12962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 359.193437][ T40] audit: type=1400 audit(2000000138.673:60973): avc: denied { setopt } for pid=920 comm="syz.8.12962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 359.238844][ T40] audit: type=1400 audit(2000000138.710:60974): avc: denied { write } for pid=890 comm="syz.1.12947" name="usbtmc0" dev="devtmpfs" ino=3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 359.244521][ T29] usb 6-1: USB disconnect, device number 19 [ 359.349997][ T40] audit: type=1400 audit(2000000138.822:60975): avc: denied { create } for pid=928 comm="syz.8.12966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 359.358057][ T40] audit: type=1400 audit(2000000138.822:60976): avc: denied { ioctl } for pid=928 comm="syz.8.12966" path="socket:[113758]" dev="sockfs" ino=113758 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 359.383477][ T40] audit: type=1400 audit(2000000138.850:60977): avc: denied { read } for pid=930 comm="syz.8.12967" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 359.390829][ T40] audit: type=1400 audit(2000000138.850:60978): avc: denied { open } for pid=930 comm="syz.8.12967" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 359.730305][ T957] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 359.736189][ T957] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 359.805737][ T969] binder: 968:969 ioctl c018620c 200000000040 returned -22 [ 360.264656][ T1042] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 360.359673][ T1051] sp0: Synchronizing with TNC [ 360.596808][ T1059] erspan0: entered promiscuous mode [ 360.642996][ T5328] Bluetooth: hci2: command tx timeout [ 360.665085][ T636] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 360.670322][ T636] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 360.675029][ T636] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 360.685402][ T636] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 360.731902][ T636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.743262][ T636] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.748563][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.750900][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.757435][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.759963][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.892202][ T636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.927258][ T636] veth0_vlan: entered promiscuous mode [ 360.932044][ T636] veth1_vlan: entered promiscuous mode [ 360.962461][ T636] veth0_macvtap: entered promiscuous mode [ 360.973745][ T636] veth1_macvtap: entered promiscuous mode [ 360.987065][ T636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.996445][ T636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.003301][ T1160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.007138][ T1160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.012442][ T1160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.015236][ T1160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.050270][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.052643][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.067368][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.070655][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.348350][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 361.510266][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 361.514354][ T24] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 361.517582][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 361.521578][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.527092][ T1097] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 361.531400][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 362.191531][ T24] usb 6-1: USB disconnect, device number 20 [ 362.714382][ T1196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13068'. [ 362.718601][ T1196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13068'. [ 362.759456][ T1200] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13070'. [ 362.971600][ T1217] loop6: detected capacity change from 0 to 524288000 [ 363.108746][ T1239] openvswitch: netlink: Multiple metadata blocks provided [ 363.347913][ T1266] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13101'. [ 363.467389][ T1277] netlink: 32 bytes leftover after parsing attributes in process `syz.7.13106'. [ 363.693365][ T1304] erspan0: entered promiscuous mode [ 363.775331][ T1320] : entered promiscuous mode [ 363.781487][ T1320] : left promiscuous mode [ 363.873856][ T1333] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 364.275641][ T40] kauditd_printk_skb: 239 callbacks suppressed [ 364.275652][ T40] audit: type=1400 audit(2000000143.415:61218): avc: denied { write } for pid=1353 comm="syz.8.13141" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 364.288234][ T40] audit: type=1400 audit(2000000143.415:61219): avc: denied { ioctl } for pid=1354 comm="syz.3.13140" path="/dev/video8" dev="devtmpfs" ino=976 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 364.297858][ T40] audit: type=1400 audit(2000000143.424:61220): avc: denied { open } for pid=1353 comm="syz.8.13141" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 364.316512][ T40] audit: type=1400 audit(2000000143.443:61221): avc: denied { ioctl } for pid=1353 comm="syz.8.13141" path="/dev/input/event0" dev="devtmpfs" ino=941 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 364.326628][ T40] audit: type=1400 audit(2000000143.462:61222): avc: denied { read write } for pid=1360 comm="syz.3.13142" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 364.334285][ T40] audit: type=1400 audit(2000000143.462:61223): avc: denied { open } for pid=1360 comm="syz.3.13142" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 364.341600][ T40] audit: type=1400 audit(2000000143.462:61224): avc: denied { ioctl } for pid=1360 comm="syz.3.13142" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 364.386977][ T40] audit: type=1400 audit(2000000143.527:61225): avc: denied { create } for pid=1367 comm="syz.1.13145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 364.400335][ T40] audit: type=1400 audit(2000000143.527:61226): avc: denied { shutdown } for pid=1367 comm="syz.1.13145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 364.408855][ T40] audit: type=1400 audit(2000000143.527:61227): avc: denied { getopt } for pid=1367 comm="syz.1.13145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 364.568082][ T1391] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13156'. [ 364.713102][ T1404] CUSE: unknown device info "" [ 364.714664][ T1404] CUSE: zero length info key specified [ 364.971521][ T1421] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 366.041025][ T455] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 366.201375][ T455] usb 6-1: Using ep0 maxpacket: 16 [ 366.205957][ T455] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 366.208936][ T455] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 366.212676][ T455] usb 6-1: Product: syz [ 366.214332][ T455] usb 6-1: Manufacturer: syz [ 366.215917][ T455] usb 6-1: SerialNumber: syz [ 366.219587][ T455] usb 6-1: config 0 descriptor?? [ 366.365288][ T1507] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13206'. [ 366.450099][ T455] usb 6-1: USB disconnect, device number 21 [ 366.519373][ T1524] tc_dump_action: action bad kind [ 367.168953][ T1540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13220'. [ 367.602282][ T1554] block nbd3: server does not support multiple connections per device. [ 367.607253][ T1554] block nbd3: shutting down sockets [ 367.711722][ T1572] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 368.100052][ T1623] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13261'. [ 368.102952][ T1623] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.105266][ T1623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.286023][ T3245] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 368.448064][ T3245] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 149, setting to 64 [ 368.452978][ T3245] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 368.455758][ T3245] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.458741][ T3245] usb 6-1: Product: syz [ 368.460053][ T3245] usb 6-1: Manufacturer: syz [ 368.461510][ T3245] usb 6-1: SerialNumber: syz [ 368.464373][ T3245] usb 6-1: config 0 descriptor?? [ 368.897164][ T1691] 9p: Unknown access argument 18446744073709551615: -34 [ 368.907540][ T455] usb 6-1: USB disconnect, device number 22 [ 368.928087][ T5328] Bluetooth: hci2: command tx timeout [ 369.100397][ T1699] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13297'. [ 369.126079][ T1703] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13299'. [ 369.407404][ T1728] EXT4-fs (nbd7): unable to read superblock [ 369.642019][ T40] kauditd_printk_skb: 187 callbacks suppressed [ 369.642035][ T40] audit: type=1400 audit(2000000148.438:61415): avc: denied { create } for pid=1735 comm="syz.1.13316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 369.657290][ T40] audit: type=1400 audit(2000000148.447:61416): avc: denied { bind } for pid=1735 comm="syz.1.13316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 369.665909][ T40] audit: type=1400 audit(2000000148.447:61417): avc: denied { mount } for pid=1736 comm="syz.8.13315" name="/" dev="ramfs" ino=114937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 369.674575][ T40] audit: type=1400 audit(2000000148.466:61418): avc: denied { unmount } for pid=445 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 369.689158][ T40] audit: type=1400 audit(2000000148.485:61419): avc: denied { connect } for pid=1743 comm="syz.8.13319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 369.702787][ T40] audit: type=1400 audit(2000000148.485:61420): avc: denied { write } for pid=1743 comm="syz.8.13319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 369.710191][ T40] audit: type=1400 audit(2000000148.494:61421): avc: denied { write } for pid=1745 comm="syz.1.13320" name="vlan0" dev="proc" ino=4026533463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 369.750659][ T40] audit: type=1400 audit(2000000148.541:61422): avc: denied { connect } for pid=1750 comm="syz.8.13322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 369.757041][ T40] audit: type=1400 audit(2000000148.550:61423): avc: denied { write } for pid=1750 comm="syz.8.13322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 369.830637][ T1759] netlink: 'syz.1.13325': attribute type 14 has an invalid length. [ 369.832260][ T40] audit: type=1400 audit(2000000148.616:61424): avc: denied { mount } for pid=1758 comm="syz.8.13326" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 369.882115][ T1766] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 370.003253][ T1786] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13339'. [ 370.080845][ T1789] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 370.256803][ T1808] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13349'. [ 370.757484][ T6034] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 370.764047][ T1860] netlink: 68 bytes leftover after parsing attributes in process `syz.8.13370'. [ 370.810370][ T1867] openvswitch: netlink: Tunnel attr 16370 out of range max 16 [ 370.916304][ T6034] usb 6-1: Using ep0 maxpacket: 32 [ 370.918511][ T5328] Bluetooth: hci3: ISO packet too small [ 370.920882][ T6034] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.924269][ T6034] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 370.934943][ T6034] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 370.946475][ T6034] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 370.949216][ T6034] usb 6-1: Product: syz [ 370.952652][ T6034] usb 6-1: Manufacturer: syz [ 370.954106][ T6034] usb 6-1: SerialNumber: syz [ 370.963430][ T6034] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input31 [ 370.970569][ T1885] netlink: 'syz.7.13381': attribute type 1 has an invalid length. [ 371.049667][ T1895] netlink: 'syz.8.13386': attribute type 4 has an invalid length. [ 371.082473][ T5328] Bluetooth: hci1: ISO packet too small [ 371.430289][ T3245] usb 6-1: USB disconnect, device number 23 [ 371.430365][ C1] appletouch 6-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 371.515653][ T3245] appletouch 6-1:1.0: input: appletouch disconnected [ 371.545002][ T1910] netlink: 'syz.8.13392': attribute type 1 has an invalid length. [ 371.624624][ T1916] macvtap1: entered allmulticast mode [ 371.626362][ T1916] veth0_macvtap: entered allmulticast mode [ 371.917801][ T1927] batadv_slave_1: entered promiscuous mode [ 371.921105][ T1926] batadv_slave_1: left promiscuous mode [ 372.202479][ T1947] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13408'. [ 372.203165][ T1946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13407'. [ 372.237448][ T1949] netlink: 'syz.8.13409': attribute type 1 has an invalid length. [ 372.240036][ T1949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.064809][ T24] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 373.225898][ T24] usb 13-1: Using ep0 maxpacket: 8 [ 373.231087][ T24] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 373.234235][ T24] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 373.240393][ T24] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 373.243639][ T24] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.249450][ T24] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 373.253301][ T24] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.399141][ T2044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13455'. [ 373.402039][ T2044] netlink: 1 bytes leftover after parsing attributes in process `syz.1.13455'. [ 373.486845][ T2057] __nla_validate_parse: 1 callbacks suppressed [ 373.486856][ T2057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13460'. [ 373.487577][ T24] usb 13-1: GET_CAPABILITIES returned 0 [ 373.498916][ T24] usbtmc 13-1:16.0: can't read capabilities [ 373.703750][ T1469] usb 13-1: USB disconnect, device number 2 [ 374.981903][ T6034] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 375.027341][ T40] kauditd_printk_skb: 205 callbacks suppressed [ 375.027357][ T40] audit: type=1400 audit(2000000153.480:61630): avc: denied { map } for pid=2131 comm="syz.8.13492" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=115350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 375.037360][ T40] audit: type=1400 audit(2000000153.480:61631): avc: denied { read write } for pid=2131 comm="syz.8.13492" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=115350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 375.062957][ T40] audit: type=1400 audit(2000000153.508:61632): avc: denied { perfmon } for pid=2133 comm="syz.8.13494" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 375.072388][ T40] audit: type=1400 audit(2000000153.508:61633): avc: denied { prog_run } for pid=2133 comm="syz.8.13494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 375.077463][ T2134] netlink: 830 bytes leftover after parsing attributes in process `syz.8.13494'. [ 375.080617][ T40] audit: type=1400 audit(2000000153.517:61634): avc: denied { create } for pid=2135 comm="syz.3.13493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 375.091876][ T40] audit: type=1400 audit(2000000153.527:61635): avc: denied { setopt } for pid=2135 comm="syz.3.13493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 375.100793][ T40] audit: type=1400 audit(2000000153.527:61636): avc: denied { ioctl } for pid=2135 comm="syz.3.13493" path="socket:[120852]" dev="sockfs" ino=120852 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 375.112157][ T40] audit: type=1400 audit(2000000153.527:61637): avc: denied { write } for pid=2135 comm="syz.3.13493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 375.127655][ T40] audit: type=1400 audit(2000000153.573:61638): avc: denied { read } for pid=2139 comm="syz.3.13496" dev="nsfs" ino=4026533288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 375.133399][ T2140] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13496'. [ 375.136804][ T40] audit: type=1400 audit(2000000153.573:61639): avc: denied { open } for pid=2139 comm="syz.3.13496" path="net:[4026533288]" dev="nsfs" ino=4026533288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 375.149993][ T6034] usb 12-1: Using ep0 maxpacket: 8 [ 375.161889][ T6034] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 375.173148][ T6034] usb 12-1: config 0 has no interface number 0 [ 375.175771][ T6034] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 375.180297][ T6034] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 375.185012][ T6034] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.191321][ T6034] usb 12-1: config 0 descriptor?? [ 375.201904][ T6034] iowarrior 12-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 375.429590][ T6034] usb 12-1: USB disconnect, device number 2 [ 375.696767][ T2180] sch_fq: defrate 0 ignored. [ 376.157472][ T2199] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.247503][ T2199] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.298683][ T2208] netlink: 36 bytes leftover after parsing attributes in process `syz.7.13528'. [ 376.332595][ T2199] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.434669][ T2199] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.492202][ T2216] netlink: 56 bytes leftover after parsing attributes in process `syz.3.13532'. [ 376.649759][ T2229] netlink: 'syz.1.13538': attribute type 1 has an invalid length. [ 376.652880][ T2229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13538'. [ 376.656334][ T61] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.670057][ T61] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.678840][ T61] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.687800][ T61] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.927828][ T2270] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13556'. [ 377.046654][ T2287] lo speed is unknown, defaulting to 1000 [ 377.188014][ T2315] SELinux: ebitmap: truncated map [ 377.193710][ T2315] SELinux: failed to load policy [ 377.245427][ T2321] misc userio: Can't change port type on an already running userio instance [ 377.250760][ T2323] netlink: 'syz.1.13580': attribute type 9 has an invalid length. [ 377.253482][ T2323] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.13580'. [ 378.073790][ T2389] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.195479][ T2389] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.328496][ T2389] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.372684][ T2389] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.407771][ T2395] netlink: 'syz.7.13622': attribute type 27 has an invalid length. [ 378.849245][ T2395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.863671][ T2395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.356218][ T2396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.362613][ T2396] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.404366][ T2396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 379.411244][ T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.414117][ T12] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.420941][ T12] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.423711][ T12] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.471395][ T61] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.491135][ T61] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.497902][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.501018][ T2409] netlink: 'syz.3.13626': attribute type 27 has an invalid length. [ 379.563137][ T2409] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.565817][ T2409] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.962270][ T2409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.972635][ T2409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.515448][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.518976][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.531671][ T2414] erspan0: left promiscuous mode [ 380.547973][ T2414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.551226][ T2414] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.563972][ T40] kauditd_printk_skb: 136 callbacks suppressed [ 380.563985][ T40] audit: type=1400 audit(2000000158.662:61776): avc: denied { write } for pid=2418 comm="syz.1.13624" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 380.601739][ T2414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 380.614897][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.619235][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.625841][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.691733][ T40] audit: type=1400 audit(2000000158.774:61777): avc: denied { create } for pid=2426 comm="syz.7.13629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 380.698534][ T40] audit: type=1400 audit(2000000158.774:61778): avc: denied { bind } for pid=2426 comm="syz.7.13629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 380.707640][ T40] audit: type=1400 audit(2000000158.774:61779): avc: denied { setopt } for pid=2426 comm="syz.7.13629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 380.716021][ T40] audit: type=1400 audit(2000000158.774:61780): avc: denied { read } for pid=2426 comm="syz.7.13629" path="socket:[121865]" dev="sockfs" ino=121865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 380.772093][ T40] audit: type=1400 audit(2000000158.849:61781): avc: denied { create } for pid=2428 comm="syz.3.13630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 380.779152][ T40] audit: type=1400 audit(2000000158.858:61782): avc: denied { ioctl } for pid=2428 comm="syz.3.13630" path="socket:[121404]" dev="sockfs" ino=121404 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 380.798516][ T40] audit: type=1400 audit(2000000158.877:61783): avc: denied { execute_no_trans } for pid=2430 comm="syz.7.13638" path="/227/file0" dev="tmpfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 380.932042][ T40] audit: type=1400 audit(2000000158.999:61784): avc: denied { read write } for pid=2440 comm="syz.7.13634" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 380.939492][ T40] audit: type=1400 audit(2000000158.999:61785): avc: denied { open } for pid=2440 comm="syz.7.13634" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 380.993863][ T2447] tun0: tun_chr_ioctl cmd 1074025675 [ 380.995642][ T2447] tun0: persist disabled [ 381.349902][ T2475] tun0: tun_chr_ioctl cmd 1074025675 [ 381.351646][ T2475] tun0: persist disabled [ 381.572757][ T2494] GUP no longer grows the stack in syz.7.13661 (2494): 200000007000-20000000a000 (200000004000) [ 381.577214][ T2494] CPU: 2 UID: 0 PID: 2494 Comm: syz.7.13661 Not tainted syzkaller #0 PREEMPT(full) [ 381.577230][ T2494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 381.577236][ T2494] Call Trace: [ 381.577240][ T2494] [ 381.577244][ T2494] dump_stack_lvl+0x16c/0x1f0 [ 381.577263][ T2494] gup_vma_lookup+0x1d2/0x220 [ 381.577278][ T2494] __get_user_pages+0x243/0x34a0 [ 381.577296][ T2494] ? xsk_setsockopt+0x6db/0x9a0 [ 381.577306][ T2494] ? do_sock_setsockopt+0xf3/0x1d0 [ 381.577327][ T2494] ? __sys_setsockopt+0x1a0/0x230 [ 381.577339][ T2494] ? __x64_sys_setsockopt+0xbd/0x160 [ 381.577351][ T2494] ? __pfx___get_user_pages+0x10/0x10 [ 381.577370][ T2494] __gup_longterm_locked+0x2dd/0x17e0 [ 381.577385][ T2494] ? __lock_acquire+0xb90/0x1ce0 [ 381.577406][ T2494] ? __pfx___gup_longterm_locked+0x10/0x10 [ 381.577430][ T2494] pin_user_pages+0x13c/0x160 [ 381.577447][ T2494] ? __pfx_pin_user_pages+0x10/0x10 [ 381.577465][ T2494] ? xdp_umem_create+0x652/0x1270 [ 381.577480][ T2494] xdp_umem_create+0x73c/0x1270 [ 381.577495][ T2494] xsk_setsockopt+0x6db/0x9a0 [ 381.577506][ T2494] ? __pfx_xsk_setsockopt+0x10/0x10 [ 381.577517][ T2494] ? find_held_lock+0x2b/0x80 [ 381.577532][ T2494] ? selinux_socket_setsockopt+0x6a/0x80 [ 381.577547][ T2494] ? __pfx_xsk_setsockopt+0x10/0x10 [ 381.577558][ T2494] do_sock_setsockopt+0xf3/0x1d0 [ 381.577575][ T2494] __sys_setsockopt+0x1a0/0x230 [ 381.577590][ T2494] __x64_sys_setsockopt+0xbd/0x160 [ 381.577602][ T2494] ? do_syscall_64+0x91/0x4e0 [ 381.577615][ T2494] ? lockdep_hardirqs_on+0x7c/0x110 [ 381.577628][ T2494] do_syscall_64+0xcd/0x4e0 [ 381.577644][ T2494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.577654][ T2494] RIP: 0033:0x7f6edc18eec9 [ 381.577663][ T2494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.577673][ T2494] RSP: 002b:00007f6eda3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 381.577685][ T2494] RAX: ffffffffffffffda RBX: 00007f6edc3e5fa0 RCX: 00007f6edc18eec9 [ 381.577691][ T2494] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 381.577697][ T2494] RBP: 00007f6edc211f91 R08: 0000000000000020 R09: 0000000000000000 [ 381.577704][ T2494] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 381.577709][ T2494] R13: 00007f6edc3e6038 R14: 00007f6edc3e5fa0 R15: 00007ffda0962cc8 [ 381.577723][ T2494] [ 381.870953][ T5979] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 381.878286][ T5979] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 381.882076][ T5979] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 381.887496][ T5979] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 381.890076][ T5979] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 381.917388][ T2502] lo speed is unknown, defaulting to 1000 [ 382.027869][ T2502] chnl_net:caif_netlink_parms(): no params data found [ 382.071435][ T2528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13675'. [ 382.101444][ T2502] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.103783][ T2502] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.106241][ T2502] bridge_slave_0: entered allmulticast mode [ 382.111664][ T2502] bridge_slave_0: entered promiscuous mode [ 382.114965][ T2502] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.117341][ T2502] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.119784][ T2502] bridge_slave_1: entered allmulticast mode [ 382.122457][ T2502] bridge_slave_1: entered promiscuous mode [ 382.151912][ T2502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.156345][ T2502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.186932][ T2502] team0: Port device team_slave_0 added [ 382.190203][ T2502] team0: Port device team_slave_1 added [ 382.218878][ T2502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.221065][ T2502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.229390][ T2502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.234952][ T2502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.237347][ T2502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.245379][ T2502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.283452][ T2502] hsr_slave_0: entered promiscuous mode [ 382.285699][ T2502] hsr_slave_1: entered promiscuous mode [ 382.288463][ T2502] debugfs: 'hsr0' already exists in 'hsr' [ 382.290577][ T2502] Cannot create hsr debugfs directory [ 382.380077][ T2502] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.470769][ T2502] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.553051][ T2502] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.680912][ T2502] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.852522][ T2562] netlink: 'syz.1.13686': attribute type 27 has an invalid length. [ 382.917190][ T2562] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.092823][ T2562] wg1: left promiscuous mode [ 383.094848][ T2562] wg1: left allmulticast mode [ 383.225843][ T2562] batadv_slave_0: left promiscuous mode [ 383.229673][ T2562] batadv_slave_0: left allmulticast mode [ 383.237734][ T2562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.380212][ T2562] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 383.395667][ T2562] ip6erspan0: left promiscuous mode [ 383.400968][ T2562] xfrm1: left allmulticast mode [ 383.456612][ T2562] geneve3: left promiscuous mode [ 383.458811][ T2562] geneve3: left allmulticast mode [ 383.465182][ T2562] bond4: left promiscuous mode [ 383.469234][ T2562] bond5: left promiscuous mode [ 383.475882][ T455] lo speed is unknown, defaulting to 1000 [ 383.478617][ T455] syz0: Port: 1 Link DOWN [ 383.500452][ T2565] erspan0: left promiscuous mode [ 383.521152][ T2565] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.563077][ T2565] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 383.569797][ T1160] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.572427][ T1160] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.575688][ T54] lo speed is unknown, defaulting to 1000 [ 383.577952][ T54] syz0: Port: 1 Link ACTIVE [ 383.585242][ T1160] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.588546][ T1160] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.619782][ T2502] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 383.624949][ T2502] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 383.631842][ T2502] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 383.637247][ T2502] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 383.679075][ T2502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.690288][ T2502] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.696782][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.699058][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.707208][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.709499][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.821317][ T2502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.974687][ T2502] veth0_vlan: entered promiscuous mode [ 383.979683][ T2502] veth1_vlan: entered promiscuous mode [ 383.996463][ T2502] veth0_macvtap: entered promiscuous mode [ 384.000281][ T2502] veth1_macvtap: entered promiscuous mode [ 384.009070][ T2502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.016396][ T2502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.023998][ T219] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.026844][ T219] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.029749][ T219] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.032772][ T219] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.069109][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.072166][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.076229][ T5979] Bluetooth: hci3: command tx timeout [ 384.095488][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.099270][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.570726][ T2633] netlink: 'syz.1.13704': attribute type 39 has an invalid length. [ 385.314358][ T2678] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13721'. [ 385.417099][ T2682] netlink: 'syz.8.13723': attribute type 11 has an invalid length. [ 385.419585][ T2682] netlink: 44 bytes leftover after parsing attributes in process `syz.8.13723'. [ 385.605150][ T5979] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 385.608063][ T5979] Bluetooth: hci2: Injecting HCI hardware error event [ 385.611252][ T5979] Bluetooth: hci2: hardware error 0x00 [ 386.166023][ T40] kauditd_printk_skb: 173 callbacks suppressed [ 386.166036][ T40] audit: type=1400 audit(2000000163.900:61959): avc: denied { create } for pid=2737 comm="syz.3.13744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 386.175092][ T40] audit: type=1400 audit(2000000163.900:61960): avc: denied { bind } for pid=2737 comm="syz.3.13744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 386.180983][ T40] audit: type=1400 audit(2000000163.900:61961): avc: denied { setopt } for pid=2737 comm="syz.3.13744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 386.289601][ T5328] Bluetooth: hci3: command tx timeout [ 386.305065][ T40] audit: type=1400 audit(2000000164.031:61962): avc: denied { read write } for pid=2756 comm="syz.8.13751" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 386.312739][ T40] audit: type=1400 audit(2000000164.031:61963): avc: denied { open } for pid=2756 comm="syz.8.13751" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 386.320953][ T40] audit: type=1400 audit(2000000164.031:61964): avc: denied { ioctl } for pid=2756 comm="syz.8.13751" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 386.329547][ T40] audit: type=1400 audit(2000000164.041:61965): avc: denied { read write } for pid=5967 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 386.337786][ T40] audit: type=1400 audit(2000000164.041:61966): avc: denied { open } for pid=2502 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 386.346993][ T40] audit: type=1400 audit(2000000164.041:61967): avc: denied { ioctl } for pid=5967 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 386.355318][ T40] audit: type=1400 audit(2000000164.050:61968): avc: denied { create } for pid=2758 comm="syz.8.13752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 386.538751][ T2778] vivid-000: ================= START STATUS ================= [ 386.541158][ T2778] vivid-000: Test Pattern: 100% Blue [ 386.543041][ T2778] vivid-000: Fill Percentage of Frame: 100 [ 386.547859][ T2778] vivid-000: Horizontal Movement: Move Right [ 386.549854][ T2778] vivid-000: Vertical Movement: Move Down Fast [ 386.551786][ T2778] vivid-000: OSD Text Mode: None [ 386.553584][ T2778] vivid-000: Show Border: false [ 386.555174][ T2778] vivid-000: Show Square: true [ 386.557145][ T2778] vivid-000: Sensor Flipped Horizontally: true [ 386.559549][ T2778] vivid-000: Sensor Flipped Vertically: false [ 386.561632][ T2778] vivid-000: Insert SAV Code in Image: true [ 386.563506][ T2778] vivid-000: Insert EAV Code in Image: true [ 386.565456][ T2778] vivid-000: Insert Video Guard Band: true [ 386.567855][ T2778] vivid-000: Reduced Framerate: true [ 386.569813][ T2778] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 386.572244][ T2778] vivid-000: S-Video 000-0 Is Connected To: Output S-Video 023-0 [ 386.574699][ T2778] vivid-000: Enable Capture Cropping: true grabbed [ 386.576768][ T2778] vivid-000: Enable Capture Composing: false grabbed [ 386.579766][ T2778] vivid-000: Enable Capture Scaler: true grabbed [ 386.581921][ T2778] vivid-000: Timestamp Source: End of Frame [ 386.583763][ T2778] vivid-000: Colorspace: Rec. 709 [ 386.585378][ T2778] vivid-000: Transfer Function: Default [ 386.587150][ T2778] vivid-000: Y'CbCr Encoding: Rec. 709 [ 386.589181][ T2778] vivid-000: HSV Encoding: Hue 0-179 [ 386.590837][ T2778] vivid-000: Quantization: Limited Range [ 386.592677][ T2778] vivid-000: Apply Alpha To Red Only: true [ 386.594508][ T2778] vivid-000: Standard Aspect Ratio: 4x3 [ 386.596223][ T2778] vivid-000: DV Timings Signal Mode: Current DV Timings [ 386.598391][ T2778] vivid-000: DV Timings: 640x480p59 inactive [ 386.600753][ T2778] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 386.603081][ T2778] vivid-000: Maximum EDID Blocks: 1 [ 386.604891][ T2778] vivid-000: Limited RGB Range (16-235): true [ 386.606967][ T2778] vivid-000: Rx RGB Quantization Range: RGB Full Range (0-255) [ 386.609294][ T2778] vivid-000: Power Present: 0x00000001 [ 386.611605][ T2778] tpg source WxH: 1280x720 (R'G'B) [ 386.613210][ T2778] tpg field: 1 [ 386.614290][ T2778] tpg crop: (0,0)/1280x720 [ 386.615792][ T2778] tpg compose: (0,0)/1280x720 [ 386.617296][ T2778] tpg colorspace: 3 [ 386.618515][ T2778] tpg transfer function: 6/6 [ 386.619971][ T2778] tpg quantization: 2/2 [ 386.622140][ T2778] tpg RGB range: 2/1 [ 386.623388][ T2778] vivid-000: ================== END STATUS ================== [ 387.019283][ T2855] netlink: 152 bytes leftover after parsing attributes in process `syz.7.13787'. [ 387.022151][ T2855] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13787'. [ 387.083260][ T2871] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13791'. [ 387.099457][ T2873] loop7: detected capacity change from 0 to 7 [ 387.105272][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 387.108139][ C3] buffer_io_error: 27 callbacks suppressed [ 387.108147][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 387.112747][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 387.115568][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 387.118177][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 387.121389][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 387.124129][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 387.126995][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 387.130830][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 387.133809][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 387.136076][ T2880] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13795'. [ 387.136470][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 387.141945][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 387.145269][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 387.148127][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 387.150637][ T414] ldm_validate_partition_table(): Disk read failed. [ 387.152783][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 387.155663][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 387.158162][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 387.161266][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 387.164288][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 387.167389][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 387.200629][ T2881] loop7: detected capacity change from 7 to 0 [ 387.239456][ T2880] team0 (unregistering): Port device team_slave_0 removed [ 387.245870][ T2880] team0 (unregistering): Port device team_slave_1 removed [ 387.261912][ T53] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 387.280478][ T414] Dev loop7: unable to read RDB block 1 [ 387.282347][ T414] loop7: unable to read partition table [ 387.284541][ T414] loop7: partition table beyond EOD, truncated [ 387.348873][ T2889] netlink: 'syz.3.13798': attribute type 39 has an invalid length. [ 387.422676][ T53] usb 6-1: Using ep0 maxpacket: 16 [ 387.425818][ T53] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 387.428171][ T53] usb 6-1: config 0 has no interface number 0 [ 387.430078][ T53] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 387.434088][ T53] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 387.438426][ T53] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 387.441119][ T53] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 387.443477][ T53] usb 6-1: Product: syz [ 387.444935][ T53] usb 6-1: SerialNumber: syz [ 387.447749][ T53] usb 6-1: config 0 descriptor?? [ 387.450961][ T53] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 387.454071][ T53] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input34 [ 387.684929][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 387.688887][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 387.692077][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 387.694592][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 387.696962][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 387.699336][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 387.703017][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 387.705411][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 387.707628][ T24] usb 6-1: USB disconnect, device number 24 [ 387.709515][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 387.709526][ C2] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 387.756446][ T24] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 388.010179][ T5979] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 388.190304][ T2930] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13813'. [ 388.196630][ T2930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13813'. [ 388.212216][ T2929] vivid-000: ================= START STATUS ================= [ 388.215380][ T2929] vivid-000: Test Pattern: 100% Blue [ 388.218051][ T2929] vivid-000: Fill Percentage of Frame: 100 [ 388.220558][ T2929] vivid-000: Horizontal Movement: Move Right [ 388.222991][ T2929] vivid-000: Vertical Movement: Move Down Fast [ 388.225331][ T2929] vivid-000: OSD Text Mode: None [ 388.226925][ T2929] vivid-000: Show Border: false [ 388.232916][ T2929] vivid-000: Show Square: true [ 388.234529][ T2929] vivid-000: Sensor Flipped Horizontally: true [ 388.237460][ T2929] vivid-000: Sensor Flipped Vertically: false [ 388.239377][ T2929] vivid-000: Insert SAV Code in Image: true [ 388.241240][ T2929] vivid-000: Insert EAV Code in Image: true [ 388.243094][ T2929] vivid-000: Insert Video Guard Band: true [ 388.244985][ T2929] vivid-000: Reduced Framerate: true [ 388.250633][ T2929] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 388.253880][ T2929] vivid-000: S-Video 000-0 Is Connected To: Output S-Video 023-0 [ 388.257249][ T2929] vivid-000: Enable Capture Cropping: true grabbed [ 388.259969][ T2929] vivid-000: Enable Capture Composing: false grabbed [ 388.262733][ T2929] vivid-000: Enable Capture Scaler: true grabbed [ 388.265950][ T2929] vivid-000: Timestamp Source: End of Frame [ 388.270451][ T2929] vivid-000: Colorspace: Rec. 709 [ 388.272198][ T2929] vivid-000: Transfer Function: Default [ 388.274356][ T2929] vivid-000: Y'CbCr Encoding: Rec. 709 [ 388.276467][ T2929] vivid-000: HSV Encoding: Hue 0-179 [ 388.278495][ T2929] vivid-000: Quantization: Limited Range [ 388.280352][ T2929] vivid-000: Apply Alpha To Red Only: true [ 388.283620][ T2929] vivid-000: Standard Aspect Ratio: 4x3 [ 388.285425][ T2929] vivid-000: DV Timings Signal Mode: Current DV Timings [ 388.287690][ T2929] vivid-000: DV Timings: 640x480p59 inactive [ 388.290828][ T2929] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 388.293253][ T2929] vivid-000: Maximum EDID Blocks: 1 [ 388.294896][ T2929] vivid-000: Limited RGB Range (16-235): true [ 388.296844][ T2929] vivid-000: Rx RGB Quantization Range: RGB Full Range (0-255) [ 388.301710][ T2929] vivid-000: Power Present: 0x00000001 [ 388.303475][ T2929] tpg source WxH: 1280x720 (R'G'B) [ 388.305638][ T2929] tpg field: 1 [ 388.306767][ T2929] tpg crop: (0,0)/1280x720 [ 388.308250][ T2929] tpg compose: (0,0)/1280x720 [ 388.310572][ T2929] tpg colorspace: 3 [ 388.311862][ T2929] tpg transfer function: 6/6 [ 388.313384][ T2929] tpg quantization: 2/2 [ 388.314774][ T2929] tpg RGB range: 2/1 [ 388.316042][ T2929] vivid-000: ================== END STATUS ================== [ 388.523468][ T5979] Bluetooth: hci3: command tx timeout [ 388.688422][ T2968] could not open pipe file descriptor [ 388.715659][ T2971] openvswitch: netlink: IP tunnel TTL not specified. [ 389.033236][ T3028] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 389.158910][ T3052] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 389.218671][ T3061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13869'. [ 389.334011][ T3061] team0 (unregistering): Port device team_slave_0 removed [ 389.337561][ T3061] team0 (unregistering): Port device team_slave_1 removed [ 389.578527][ T3090] erspan0: entered promiscuous mode [ 389.705313][ T3107] netlink: 27 bytes leftover after parsing attributes in process `syz.8.13885'. [ 389.733143][ T3110] netlink: 72 bytes leftover after parsing attributes in process `syz.3.13887'. [ 389.870469][ T54] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 390.052549][ T54] usb 12-1: Using ep0 maxpacket: 8 [ 390.055991][ T54] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 390.058656][ T54] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 390.061638][ T54] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 390.069013][ T54] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 390.072122][ T54] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 390.076627][ T54] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 390.079378][ T54] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.300060][ T54] usb 12-1: GET_CAPABILITIES returned 0 [ 390.302371][ T54] usbtmc 12-1:16.0: can't read capabilities [ 390.320265][ T3142] netlink: 72 bytes leftover after parsing attributes in process `syz.1.13902'. [ 390.521272][ T3096] usb 12-1: usbtmc_ioctl_clear_out_halt returned -32 [ 390.524924][ T455] usb 12-1: USB disconnect, device number 3 [ 390.526298][ T3163] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 390.652159][ T3175] sp0: Synchronizing with TNC [ 390.655710][ T3174] [U] è [ 390.727486][ T3180] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13919'. [ 390.730699][ T3180] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13919'. [ 390.740589][ T3182] misc userio: Begin command sent, but we're already running [ 390.747032][ T5979] Bluetooth: hci3: command tx timeout [ 391.197414][ T3215] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 391.390628][ T3229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3229 comm=syz.7.13942 [ 391.450600][ T3233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13944'. [ 391.454407][ T3233] netlink: 3 bytes leftover after parsing attributes in process `syz.3.13944'. [ 391.551268][ T40] kauditd_printk_skb: 195 callbacks suppressed [ 391.551285][ T40] audit: type=1400 audit(2000000168.942:62164): avc: denied { create } for pid=3239 comm="syz.7.13955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 391.559325][ T40] audit: type=1400 audit(2000000168.942:62165): avc: denied { setopt } for pid=3239 comm="syz.7.13955" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 391.581207][ T40] audit: type=1400 audit(2000000168.970:62166): avc: denied { map_create } for pid=3241 comm="syz.7.13948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 391.587630][ T40] audit: type=1400 audit(2000000168.970:62167): avc: denied { bind } for pid=3241 comm="syz.7.13948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 391.595732][ T40] audit: type=1400 audit(2000000168.970:62168): avc: denied { write } for pid=3241 comm="syz.7.13948" path="socket:[122477]" dev="sockfs" ino=122477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 391.618153][ T40] audit: type=1400 audit(2000000168.998:62169): avc: denied { mounton } for pid=3246 comm="syz.7.13950" path="/314/file0" dev="tmpfs" ino=1614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 391.627534][ T40] audit: type=1400 audit(2000000168.998:62170): avc: denied { mount } for pid=3246 comm="syz.7.13950" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 391.638477][ T40] audit: type=1400 audit(2000000169.017:62171): avc: denied { unmount } for pid=411 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 391.773052][ T40] audit: type=1400 audit(2000000169.139:62172): avc: denied { create } for pid=3258 comm="syz.3.13957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 391.781473][ T40] audit: type=1400 audit(2000000169.139:62173): avc: denied { setopt } for pid=3258 comm="syz.3.13957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 391.977617][ T3280] misc userio: Begin command sent, but we're already running [ 392.534453][ T3301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3301 comm=syz.3.13976 [ 392.843998][ T3335] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 392.891350][ T3337] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 392.893237][ T3337] syzkaller1: group set to 0 [ 393.484003][ T34] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 393.677834][ T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.681375][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 393.684472][ T34] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 393.691096][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.698549][ T34] usb 6-1: config 0 descriptor?? [ 393.703001][ T34] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 393.705620][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 393.721442][ T34] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 393.724463][ T34] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 393.726726][ T34] usb 6-1: media controller created [ 393.729530][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 393.744527][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 393.747134][ T34] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 393.753120][ T34] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input37 [ 393.762623][ T34] dvb-usb: schedule remote query interval to 150 msecs. [ 393.765108][ T34] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 393.919547][ T34] usb 6-1: USB disconnect, device number 25 [ 393.960098][ T3417] __nla_validate_parse: 4 callbacks suppressed [ 393.960108][ T3417] netlink: 104 bytes leftover after parsing attributes in process `syz.7.14035'. [ 393.988986][ T3421] netlink: 36 bytes leftover after parsing attributes in process `syz.7.14029'. [ 393.995772][ T34] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 394.018631][ T5379] udevd[5379]: worker [413] terminated by signal 33 (Unknown signal 33) [ 394.021309][ T5379] udevd[5379]: worker [413] failed while handling '/devices/virtual/block/loop7' [ 394.091610][ T3429] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 394.094833][ T3429] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 394.098173][ T3429] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 394.101053][ T3429] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 394.104687][ T3429] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 394.107697][ T3429] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 394.112326][ T3429] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 394.116200][ T3429] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 394.119997][ T3429] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 394.403609][ T3441] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 394.722479][ T3467] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 394.725640][ T3467] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 395.123229][ T3515] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 395.127085][ T3515] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 395.504026][ T3570] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 395.525112][ T3573] netlink: 104 bytes leftover after parsing attributes in process `syz.3.14101'. [ 395.577874][ T3583] sp0: Synchronizing with TNC [ 395.582023][ T3582] [U] è`` [ 395.730526][ T3595] netlink: 36 bytes leftover after parsing attributes in process `syz.8.14111'. [ 395.789383][ T3604] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14115'. [ 396.019675][ T3635] netlink: 32 bytes leftover after parsing attributes in process `syz.7.14130'. [ 396.090807][ T3642] tap0: tun_chr_ioctl cmd 1074025672 [ 396.092672][ T3642] tap0: ignored: set checksum enabled [ 396.295649][ T3245] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 396.466632][ T3245] usb 13-1: Using ep0 maxpacket: 32 [ 396.470058][ T3245] usb 13-1: config index 0 descriptor too short (expected 156, got 27) [ 396.473417][ T3245] usb 13-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 396.478062][ T3245] usb 13-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 396.482726][ T3245] usb 13-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 396.486852][ T3245] usb 13-1: config 0 interface 0 has no altsetting 0 [ 396.490944][ T3245] usb 13-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 396.493958][ T3245] usb 13-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 396.496898][ T3245] usb 13-1: Product: syz [ 396.498376][ T3245] usb 13-1: Manufacturer: syz [ 396.500265][ T3245] usb 13-1: SerialNumber: syz [ 396.504794][ T3245] usb 13-1: config 0 descriptor?? [ 396.508150][ T3245] ldusb 13-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 396.515278][ T3245] ldusb 13-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 396.722517][ T3688] sp0: Synchronizing with TNC [ 396.730081][ T3687] [U] è`` [ 396.908167][ T40] kauditd_printk_skb: 201 callbacks suppressed [ 396.908183][ T40] audit: type=1400 audit(2000000173.946:62375): avc: denied { create } for pid=3701 comm="syz.1.14161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 396.919497][ T40] audit: type=1400 audit(2000000173.946:62376): avc: denied { ioctl } for pid=3701 comm="syz.1.14161" path="socket:[122781]" dev="sockfs" ino=122781 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 396.942904][ T40] audit: type=1400 audit(2000000173.975:62377): avc: denied { recv } for pid=5956 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=38044 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 396.963143][ T40] audit: type=1400 audit(2000000174.003:62378): avc: denied { read } for pid=3706 comm="syz.7.14171" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 396.971142][ T40] audit: type=1400 audit(2000000174.003:62379): avc: denied { open } for pid=3706 comm="syz.7.14171" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 396.978851][ T40] audit: type=1400 audit(2000000174.003:62380): avc: denied { ioctl } for pid=3706 comm="syz.7.14171" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 396.990529][ T40] audit: type=1400 audit(2000000174.003:62381): avc: denied { write } for pid=3705 comm="syz.1.14163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 396.998236][ T40] audit: type=1400 audit(2000000174.003:62382): avc: denied { read } for pid=3705 comm="syz.1.14163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 397.107248][ T40] audit: type=1400 audit(2000000174.134:62383): avc: denied { name_bind } for pid=3714 comm="syz.7.14167" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 397.114132][ T40] audit: type=1400 audit(2000000174.134:62384): avc: denied { node_bind } for pid=3714 comm="syz.7.14167" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 397.321396][ T3245] usb 13-1: USB disconnect, device number 3 [ 397.325280][ T3245] ldusb 13-1:0.0: LD USB Device #0 now disconnected [ 397.376903][ T3730] netlink: 'syz.1.14174': attribute type 2 has an invalid length. [ 397.379433][ T3730] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14174'. [ 397.862541][ T3734] tap0: tun_chr_ioctl cmd 1074025672 [ 397.864359][ T3734] tap0: ignored: set checksum enabled [ 398.179719][ T3766] kvm: apic: phys broadcast and lowest prio [ 398.480702][ T3806] @: renamed from vlan0 [ 398.519674][ T3808] kvm: apic: phys broadcast and lowest prio [ 398.538457][ T3814] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14215'. [ 398.542054][ T3814] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14215'. [ 398.722976][ T3838] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.14228'. [ 398.783662][ T3848] netlink: 'syz.1.14234': attribute type 9 has an invalid length. [ 398.827281][ T3853] lo speed is unknown, defaulting to 1000 [ 399.052651][ T3891] vlan3: entered allmulticast mode [ 399.994590][ T3909] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 400.000076][ T3909] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 400.003429][ T3909] overlayfs: failed to set uuid (286/file0, err=-13); falling back to uuid=null. [ 400.756099][ T3928] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14269'. [ 401.030346][ T3940] can0: slcan on ttyS3. [ 401.086082][ T3940] can0 (unregistered): slcan off ttyS3. [ 401.179075][ T3953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.433748][ T4008] overlay: filesystem on ./file0 not supported [ 401.706389][ T4022] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 401.709322][ T4022] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 401.713338][ T4022] overlayfs: failed to set uuid (150/file0, err=-13); falling back to uuid=null. [ 402.171410][ T4049] bond0: option mode: unable to set because the bond device has slaves [ 402.221749][ T4051] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14311'. [ 402.269673][ T40] kauditd_printk_skb: 132 callbacks suppressed [ 402.269683][ T40] audit: type=1400 audit(2000000178.960:62517): avc: denied { bind } for pid=4062 comm="syz.8.14317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 402.280685][ T40] audit: type=1400 audit(2000000178.970:62518): avc: denied { setopt } for pid=4062 comm="syz.8.14317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 402.291778][ T40] audit: type=1400 audit(2000000178.979:62519): avc: denied { mounton } for pid=4065 comm="syz.1.14318" path="/3883/file0" dev="tmpfs" ino=19626 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 402.299620][ T40] audit: type=1400 audit(2000000178.988:62520): avc: denied { create } for pid=4067 comm="syz.7.14319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 402.306349][ T40] audit: type=1400 audit(2000000178.988:62521): avc: denied { bind } for pid=4067 comm="syz.7.14319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 402.313475][ T40] audit: type=1400 audit(2000000178.988:62522): avc: denied { module_request } for pid=4067 comm="syz.7.14319" kmod="crypto-essiv(cbc(aes),sha256)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 402.320977][ T40] audit: type=1400 audit(2000000178.998:62523): avc: denied { unmount } for pid=5967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 402.329272][ T40] audit: type=1400 audit(2000000179.016:62524): avc: denied { create } for pid=4071 comm="syz.8.14320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 402.335267][ T40] audit: type=1400 audit(2000000179.016:62525): avc: denied { setopt } for pid=4071 comm="syz.8.14320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 402.371611][ T40] audit: type=1400 audit(2000000179.063:62526): avc: denied { mounton } for pid=4078 comm="syz.7.14323" path="/438/file0" dev="tmpfs" ino=2245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 402.383845][ T4081] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 402.691385][ T4126] netlink: 108 bytes leftover after parsing attributes in process `syz.7.14344'. [ 402.743246][ T4134] __vm_enough_memory: pid: 4134, comm: syz.7.14348, bytes: 21200337334272 not enough memory for the allocation [ 402.803592][ T4143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14352'. [ 403.641609][ T4187] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14371'. [ 403.724164][ T4195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14373'. [ 403.837605][ T4206] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 403.974941][ T4214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14382'. [ 404.347122][ T4260] pim6reg: entered allmulticast mode [ 404.353769][ T4260] pim6reg: left allmulticast mode [ 404.451785][ T4267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14415'. [ 404.627646][ T4298] __vm_enough_memory: pid: 4298, comm: syz.1.14425, bytes: 21200464801792 not enough memory for the allocation [ 404.693903][ T4303] ptrace attach of "/syz-executor exec"[411] was attempted by ""[4303] [ 404.721990][ T4308] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14429'. [ 405.043130][ T4337] netlink: 6032 bytes leftover after parsing attributes in process `syz.7.14442'. [ 405.676456][ T4391] tun0: tun_chr_ioctl cmd 1074025676 [ 405.678210][ T4391] tun0: owner set to 0 [ 405.714535][ T4395] debugfs: 'ttyS3' already exists in 'caif_serial' [ 405.816570][ T4398] netlink: 'syz.7.14470': attribute type 29 has an invalid length. [ 406.181884][ T4430] Falling back ldisc for ttyS3. [ 406.288519][ T4452] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 406.291646][ T4452] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 406.294873][ T4452] overlayfs: failed to get uuid (495/file0, err=-13); falling back to uuid=null. [ 407.172239][ T4473] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 407.499319][ T455] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 407.659528][ T455] usb 12-1: Using ep0 maxpacket: 8 [ 407.663251][ T455] usb 12-1: config 0 has no interfaces? [ 407.667368][ T455] usb 12-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 407.671106][ T455] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.674255][ T455] usb 12-1: Product: syz [ 407.675947][ T455] usb 12-1: Manufacturer: syz [ 407.677859][ T455] usb 12-1: SerialNumber: syz [ 407.682259][ T455] usb 12-1: config 0 descriptor?? [ 407.685194][ T40] kauditd_printk_skb: 193 callbacks suppressed [ 407.685203][ T40] audit: type=1400 audit(2000000184.030:62720): avc: denied { ioctl } for pid=4461 comm="syz.7.14508" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 407.867224][ T40] audit: type=1400 audit(2000000184.198:62721): avc: denied { connect } for pid=4479 comm="syz.3.14509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 407.903049][ T3245] usb 12-1: USB disconnect, device number 4 [ 407.924103][ T40] audit: type=1400 audit(2000000184.245:62722): avc: denied { read write } for pid=636 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 407.932063][ T40] audit: type=1400 audit(2000000184.245:62723): avc: denied { open } for pid=636 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 407.939850][ T40] audit: type=1400 audit(2000000184.245:62724): avc: denied { ioctl } for pid=636 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 408.175187][ T40] audit: type=1400 audit(2000000184.488:62725): avc: denied { create } for pid=4485 comm="syz.3.14512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 408.182167][ T40] audit: type=1400 audit(2000000184.488:62726): avc: denied { write } for pid=4485 comm="syz.3.14512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 408.536283][ T40] audit: type=1400 audit(2000000184.816:62727): avc: denied { read write } for pid=4493 comm="syz.7.14516" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 408.544668][ T40] audit: type=1400 audit(2000000184.816:62728): avc: denied { open } for pid=4493 comm="syz.7.14516" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 408.552247][ T40] audit: type=1400 audit(2000000184.825:62729): avc: denied { ioctl } for pid=4493 comm="syz.7.14516" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 409.290507][ T4535] Failed to get privilege flags for destination (handle=0x2:0x7) [ 409.411107][ T4545] loop3: detected capacity change from 0 to 1 [ 409.416926][ T4486] Set syz1 is full, maxelem 65536 reached [ 409.418711][ T4545] Dev loop3: unable to read RDB block 1 [ 409.422252][ T4545] loop3: unable to read partition table [ 409.426645][ T4545] loop3: partition table beyond EOD, truncated [ 409.433036][ T4545] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 409.446292][ T4549] __nla_validate_parse: 2 callbacks suppressed [ 409.446302][ T4549] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14543'. [ 409.451118][ T4549] netlink: 'syz.7.14543': attribute type 30 has an invalid length. [ 409.453545][ T4549] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14543'. [ 409.481680][ T4553] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14545'. [ 409.520192][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14548'. [ 409.523087][ T4559] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14548'. [ 410.238747][ T4633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14580'. [ 410.242410][ T4633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14580'. [ 410.281066][ T4635] loop3: detected capacity change from 0 to 1 [ 410.286139][ T4635] Dev loop3: unable to read RDB block 1 [ 410.288517][ T4635] loop3: unable to read partition table [ 410.291383][ T4635] loop3: partition table beyond EOD, truncated [ 410.293903][ T4635] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 410.301741][ T5379] Dev loop3: unable to read RDB block 1 [ 410.304218][ T5379] loop3: unable to read partition table [ 410.306476][ T5379] loop3: partition table beyond EOD, truncated [ 411.367322][ T4674] netlink: 'syz.7.14601': attribute type 8 has an invalid length. [ 411.403734][ T4676] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14602'. [ 411.407764][ T4676] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14602'. [ 411.484486][ T4680] netlink: 'syz.7.14604': attribute type 63 has an invalid length. [ 411.979114][ T6034] IPVS: starting estimator thread 0... [ 412.066032][ T4748] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 412.081323][ T4753] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14638'. [ 412.096817][ T4739] IPVS: using max 46 ests per chain, 110400 per kthread [ 412.376234][ T4777] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 413.212995][ T40] kauditd_printk_skb: 190 callbacks suppressed [ 413.213006][ T40] audit: type=1400 audit(2000000189.203:62920): avc: denied { module_request } for pid=4795 comm="syz.8.14658" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 413.240593][ T40] audit: type=1400 audit(2000000189.231:62921): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=38044 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 413.302370][ T40] audit: type=1400 audit(2000000189.278:62922): avc: denied { create } for pid=4800 comm="syz.7.14660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 413.308930][ T40] audit: type=1400 audit(2000000189.278:62923): avc: denied { write } for pid=4800 comm="syz.7.14660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 413.370685][ T40] audit: type=1400 audit(2000000189.353:62924): avc: denied { name_bind } for pid=4803 comm="syz.7.14661" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 413.377378][ T40] audit: type=1400 audit(2000000189.353:62925): avc: denied { node_bind } for pid=4803 comm="syz.7.14661" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 413.460974][ T40] audit: type=1400 audit(2000000189.427:62926): avc: denied { shutdown } for pid=4805 comm="syz.3.14662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 413.467224][ T40] audit: type=1400 audit(2000000189.427:62927): avc: denied { getopt } for pid=4805 comm="syz.3.14662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 413.473265][ T40] audit: type=1400 audit(2000000189.427:62928): avc: denied { connect } for pid=4805 comm="syz.3.14662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 413.479650][ T40] audit: type=1400 audit(2000000189.427:62929): avc: denied { name_connect } for pid=4805 comm="syz.3.14662" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 413.761958][ T4818] vimc link validate: Scaler:src:16x16 (0x33524742, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 414.910862][ T4880] geneve2: entered promiscuous mode [ 414.912616][ T4880] geneve2: entered allmulticast mode [ 415.119373][ T4886] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 415.190602][ T4894] __nla_validate_parse: 4 callbacks suppressed [ 415.190612][ T4894] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14701'. [ 415.292449][ T4908] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 415.537860][ T4938] input: syz0 as /devices/virtual/input/input39 [ 415.718330][ T4953] netlink: 'syz.1.14731': attribute type 8 has an invalid length. [ 417.464189][ T5001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14754'. [ 417.495650][ T3245] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 417.659712][ T3245] usb 6-1: config 0 has no interfaces? [ 417.661499][ T3245] usb 6-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 417.664261][ T3245] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.673512][ T3245] usb 6-1: config 0 descriptor?? [ 417.892800][ T3245] usb 6-1: USB disconnect, device number 26 [ 418.461250][ T5007] overlayfs: failed to clone lowerpath [ 418.799442][ T40] kauditd_printk_skb: 93 callbacks suppressed [ 418.799452][ T40] audit: type=1400 audit(2000000194.422:63023): avc: denied { create } for pid=5023 comm="syz.3.14765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 418.807485][ T40] audit: type=1400 audit(2000000194.432:63024): avc: denied { setopt } for pid=5023 comm="syz.3.14765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 418.813929][ T40] audit: type=1400 audit(2000000194.432:63025): avc: denied { write } for pid=5023 comm="syz.3.14765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 418.820110][ T40] audit: type=1400 audit(2000000194.432:63026): avc: denied { connect } for pid=5023 comm="syz.3.14765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 418.826612][ T40] audit: type=1400 audit(2000000194.432:63027): avc: denied { name_connect } for pid=5023 comm="syz.3.14765" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 419.376484][ T40] audit: type=1400 audit(2000000194.956:63028): avc: denied { create } for pid=5025 comm="syz.1.14766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 419.382484][ T40] audit: type=1400 audit(2000000194.956:63029): avc: denied { bind } for pid=5025 comm="syz.1.14766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 419.388855][ T40] audit: type=1400 audit(2000000194.956:63030): avc: denied { accept } for pid=5025 comm="syz.1.14766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 419.395431][ T40] audit: type=1400 audit(2000000194.956:63031): avc: denied { read } for pid=5025 comm="syz.1.14766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 419.445893][ T40] audit: type=1400 audit(2000000195.030:63032): avc: denied { write } for pid=5033 comm="syz.1.14770" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 419.531727][ T5042] netlink: 64 bytes leftover after parsing attributes in process `syz.7.14774'. [ 419.569223][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14775'. [ 419.575069][ T5047] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14776'. [ 419.577950][ T5047] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14776'. [ 419.950342][ T5068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14786'. [ 419.953277][ T5068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14786'. [ 420.172673][ T5093] dvmrp17: entered allmulticast mode [ 420.175906][ T5093] dvmrp17: left allmulticast mode [ 420.608575][ T5127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.646783][ T5129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14814'. [ 421.186935][ T5144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14821'. [ 421.190790][ T5144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14821'. [ 421.198494][ T5144] gretap0: entered promiscuous mode [ 421.201060][ T5144] batadv_slave_1: entered promiscuous mode [ 421.203590][ T5144] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.242777][ T5148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14823'. [ 421.246247][ T5148] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14823'. [ 421.249642][ T5148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14823'. [ 421.252818][ T5148] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14823'. [ 421.571814][ T5173] netlink: 'syz.3.14836': attribute type 10 has an invalid length. [ 421.575736][ T5173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.581192][ T5173] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 421.851539][ T5196] dvmrp17: entered allmulticast mode [ 421.861006][ T5196] dvmrp17: left allmulticast mode [ 421.961067][ T5206] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 422.063678][ T5215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14857'. [ 422.066583][ T5215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14857'. [ 422.092873][ T5219] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14858'. [ 422.173615][ T5228] gretap0: entered promiscuous mode [ 422.175924][ T5228] batadv_slave_1: entered promiscuous mode [ 422.179065][ T5228] debugfs: 'hsr1' already exists in 'hsr' [ 422.180983][ T5228] Cannot create hsr debugfs directory [ 422.182793][ T5228] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 422.642021][ T5254] netlink: 'syz.7.14875': attribute type 10 has an invalid length. [ 422.645393][ T5254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.656772][ T5254] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 424.326984][ T40] kauditd_printk_skb: 94 callbacks suppressed [ 424.326994][ T40] audit: type=1400 audit(2000000199.595:63127): avc: denied { read write } for pid=5349 comm="syz.1.14916" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 424.340385][ T40] audit: type=1400 audit(2000000199.595:63128): avc: denied { open } for pid=5349 comm="syz.1.14916" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 424.347459][ T40] audit: type=1400 audit(2000000199.595:63129): avc: denied { ioctl } for pid=5349 comm="syz.1.14916" path="/dev/vmci" dev="devtmpfs" ino=708 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 424.404551][ T40] audit: type=1400 audit(2000000199.670:63130): avc: denied { ioctl } for pid=5355 comm="syz.1.14919" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=133665 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 424.448119][ T40] audit: type=1400 audit(2000000199.707:63131): avc: denied { create } for pid=5362 comm="syz.7.14922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 424.456303][ T40] audit: type=1400 audit(2000000199.707:63132): avc: denied { create } for pid=5363 comm="syz.1.14923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 424.464244][ T40] audit: type=1400 audit(2000000199.707:63133): avc: denied { ioctl } for pid=5362 comm="syz.7.14922" path="socket:[133676]" dev="sockfs" ino=133676 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 424.473914][ T40] audit: type=1400 audit(2000000199.717:63134): avc: denied { ioctl } for pid=5363 comm="syz.1.14923" path="socket:[136418]" dev="sockfs" ino=136418 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 424.485255][ T40] audit: type=1400 audit(2000000199.735:63135): avc: denied { create } for pid=5370 comm="syz.7.14924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 424.492275][ T40] audit: type=1400 audit(2000000199.735:63136): avc: denied { write } for pid=5370 comm="syz.7.14924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 425.635840][ T5425] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:19969 [ 426.376031][ T5486] __nla_validate_parse: 9 callbacks suppressed [ 426.376043][ T5486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14975'. [ 426.431928][ T5491] bond0: Device is already in use. [ 426.506616][ T5499] ipvlan3: entered promiscuous mode [ 426.508917][ T5499] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 426.511269][ T5499] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 426.807636][ T5523] binder: BC_ACQUIRE_RESULT not supported [ 426.809492][ T5523] binder: 5522:5523 ioctl c0306201 2000000003c0 returned -22 [ 427.393805][ T5555] netlink: 'syz.7.15009': attribute type 6 has an invalid length. [ 427.400146][ T5555] netlink: 36 bytes leftover after parsing attributes in process `syz.7.15009'. [ 427.405940][ T5555] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.020146][ T5608] netlink: 'syz.7.15036': attribute type 2 has an invalid length. [ 428.025577][ T5609] netem: incorrect ge model size [ 428.027691][ T5609] netem: change failed [ 428.159203][ T5627] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15044'. [ 428.948953][ T24] hid_parser_main: 73 callbacks suppressed [ 428.948967][ T24] hid-generic 0005:0007:0008.000A: unknown main item tag 0x0 [ 428.967149][ T24] hid-generic 0005:0007:0008.000A: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 429.685503][ T40] kauditd_printk_skb: 145 callbacks suppressed [ 429.685521][ T40] audit: type=1400 audit(2000000204.609:63282): avc: denied { write } for pid=5726 comm="syz.7.15089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 429.762430][ T5734] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15092'. [ 429.765313][ T5734] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15092'. [ 429.804647][ T5736] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5736 comm=syz.7.15093 [ 429.836844][ T5738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=5738 comm=syz.7.15094 [ 429.866719][ T40] audit: type=1400 audit(2000000204.777:63283): avc: denied { watch watch_reads } for pid=5739 comm="syz.7.15095" path="/749" dev="tmpfs" ino=3832 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 429.874434][ T40] audit: type=1400 audit(2000000204.777:63284): avc: denied { mac_admin } for pid=5739 comm="syz.7.15095" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 429.882466][ T40] audit: type=1400 audit(2000000204.777:63285): avc: denied { relabelto } for pid=5739 comm="syz.7.15095" name="749" dev="tmpfs" ino=3832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 429.893528][ T40] audit: type=1400 audit(2000000204.777:63286): avc: denied { associate } for pid=5739 comm="syz.7.15095" name="749" dev="tmpfs" ino=3832 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 429.905409][ T40] audit: type=1400 audit(2000000204.787:63287): avc: denied { remove_name } for pid=411 comm="syz-executor" name="binderfs" dev="tmpfs" ino=3836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 429.915230][ T40] audit: type=1400 audit(2000000204.796:63288): avc: denied { rmdir } for pid=411 comm="syz-executor" name="749" dev="tmpfs" ino=3832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 429.924306][ T40] audit: type=1400 audit(2000000204.833:63289): avc: denied { read write } for pid=636 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.934436][ T40] audit: type=1400 audit(2000000204.833:63290): avc: denied { open } for pid=636 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.944672][ T40] audit: type=1400 audit(2000000204.833:63291): avc: denied { ioctl } for pid=636 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.116548][ T5775] overlayfs: failed to clone upperpath [ 430.304808][ T5789] 9p: Unknown uid 00000000004294967295 [ 430.518348][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 430.521652][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 430.525143][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 430.529369][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 430.532280][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 430.533896][ T5806] netlink: 76 bytes leftover after parsing attributes in process `syz.7.15124'. [ 430.552983][ T5799] lo speed is unknown, defaulting to 1000 [ 430.635112][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 430.734513][ T5830] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15132'. [ 430.737438][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.739631][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.742208][ T5799] bridge_slave_0: entered allmulticast mode [ 430.744981][ T5799] bridge_slave_0: entered promiscuous mode [ 430.748820][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.751103][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.754126][ T5799] bridge_slave_1: entered allmulticast mode [ 430.756702][ T5799] bridge_slave_1: entered promiscuous mode [ 430.790880][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.795665][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.808874][ T5840] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15136'. [ 430.846100][ T5799] team0: Port device team_slave_0 added [ 430.850575][ T5799] team0: Port device team_slave_1 added [ 430.965936][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.968110][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.976340][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.981143][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.983325][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.991357][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.029321][ T5799] hsr_slave_0: entered promiscuous mode [ 431.031527][ T5799] hsr_slave_1: entered promiscuous mode [ 431.033574][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 431.035350][ T5799] Cannot create hsr debugfs directory [ 431.164596][ T5799] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 431.169466][ T5799] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 431.175351][ T5799] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 431.181682][ T5799] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 431.197295][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.199567][ T5799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.202009][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.204216][ T5799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.231728][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.241346][ T3967] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.247781][ T3967] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.260246][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.268660][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.271818][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.278328][ T4001] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.280608][ T4001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.383196][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.527603][ T5799] veth0_vlan: entered promiscuous mode [ 431.535348][ T5799] veth1_vlan: entered promiscuous mode [ 431.552486][ T5799] veth0_macvtap: entered promiscuous mode [ 431.560264][ T5799] veth1_macvtap: entered promiscuous mode [ 431.571827][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.578949][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.585031][ T3967] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.588494][ T3967] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.593005][ T3967] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.597485][ T3967] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.630151][ T4001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.632756][ T4001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.645724][ T4001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.648179][ T4001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.236137][ T5946] netlink: 76 bytes leftover after parsing attributes in process `syz.9.15176'. [ 432.636457][ T5991] netlink: 'syz.1.15195': attribute type 2 has an invalid length. [ 432.731111][ T5979] Bluetooth: hci4: command tx timeout [ 433.124260][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15217'. [ 433.370959][ T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 433.520400][ T6034] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 433.532200][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.535686][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.538836][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 433.543282][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 433.547232][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.558684][ T24] usb 6-1: config 0 descriptor?? [ 433.701979][ T6034] usb 14-1: Using ep0 maxpacket: 16 [ 433.704918][ T6034] usb 14-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 433.708160][ T6034] usb 14-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 433.717509][ T6034] usb 14-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 433.722470][ T6034] usb 14-1: config 0 interface 0 has no altsetting 0 [ 433.736120][ T6034] usb 14-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 433.739040][ T6034] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.741510][ T6034] usb 14-1: Product: syz [ 433.743023][ T6034] usb 14-1: Manufacturer: syz [ 433.745010][ T6034] usb 14-1: SerialNumber: syz [ 433.749833][ T6034] usb 14-1: config 0 descriptor?? [ 433.979293][ T6034] input: syz syz as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/input/input40 [ 433.999907][ T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 434.003717][ T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 434.006096][ T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 434.008548][ T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 434.011160][ T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 434.017975][ T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 434.020616][ T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 434.024188][ T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 434.027469][ T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 434.056302][ T24] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 434.282670][ T6034] usb 6-1: USB disconnect, device number 27 [ 434.338401][ T34] usb 14-1: USB disconnect, device number 2 [ 434.376122][ T5364] synaptics_usb 14-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 434.956515][ T5979] Bluetooth: hci4: command tx timeout [ 435.061791][ T40] kauditd_printk_skb: 246 callbacks suppressed [ 435.061801][ T40] audit: type=1400 audit(2000000209.641:63538): avc: denied { create } for pid=6204 comm="syz.1.15289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 435.073660][ T40] audit: type=1400 audit(2000000209.641:63539): avc: denied { ioctl } for pid=6204 comm="syz.1.15289" path="socket:[137105]" dev="sockfs" ino=137105 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 435.102946][ T40] audit: type=1400 audit(2000000209.679:63540): avc: denied { map_create } for pid=6210 comm="syz.7.15290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 435.109015][ T40] audit: type=1400 audit(2000000209.679:63541): avc: denied { map_read map_write } for pid=6210 comm="syz.7.15290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 435.117059][ T40] audit: type=1400 audit(2000000209.679:63542): avc: denied { prog_load } for pid=6210 comm="syz.7.15290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 435.125331][ T40] audit: type=1400 audit(2000000209.679:63543): avc: denied { bpf } for pid=6210 comm="syz.7.15290" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 435.135363][ T40] audit: type=1400 audit(2000000209.679:63544): avc: denied { perfmon } for pid=6210 comm="syz.7.15290" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 435.142283][ T40] audit: type=1400 audit(2000000209.679:63545): avc: denied { create } for pid=6212 comm="syz.3.15293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 435.150767][ T40] audit: type=1400 audit(2000000209.688:63546): avc: denied { write } for pid=6212 comm="syz.3.15293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 435.158870][ T40] audit: type=1400 audit(2000000209.688:63547): avc: denied { nlmsg_write } for pid=6212 comm="syz.3.15293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 435.335823][ T6240] netlink: 75 bytes leftover after parsing attributes in process `syz.3.15303'. [ 435.624179][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15337'. [ 435.685149][ T6301] netlink: 'syz.9.15334': attribute type 1 has an invalid length. [ 436.719569][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15354'. [ 436.722466][ T4000] bond0: (slave bond_slave_0): interface is now down [ 436.725292][ T4000] bond0: (slave bond_slave_1): interface is now down [ 436.729096][ T4000] bond0: (slave bond5): interface is now down [ 436.734261][ T4000] bond0: now running without any active interface! [ 437.176817][ T5979] Bluetooth: hci4: command tx timeout [ 437.276489][ T6359] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 437.289486][ T6363] input: syz1 as /devices/virtual/input/input41 [ 437.333968][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15366'. [ 437.338333][ T6367] netlink: 36 bytes leftover after parsing attributes in process `syz.7.15366'. [ 437.651734][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15377'. [ 437.660132][ T6395] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15377'. [ 437.685113][ T6402] netlink: 32 bytes leftover after parsing attributes in process `syz.9.15381'. [ 437.689680][ T3999] ------------[ cut here ]------------ [ 437.691859][ T3999] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 437.696317][ T3999] WARNING: CPU: 0 PID: 3999 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 [ 437.701175][ T3999] Modules linked in: [ 437.701230][ T3999] CPU: 0 UID: 0 PID: 3999 Comm: kworker/u32:42 Not tainted syzkaller #0 PREEMPT(full) [ 437.701244][ T3999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 437.701252][ T3999] Workqueue: bond0 bond_mii_monitor [ 437.701269][ T3999] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 437.701289][ T3999] Code: 05 ff ff ff e8 b4 3d 43 f8 c6 05 23 7d 1b 07 01 90 ba 48 00 00 00 48 c7 c6 20 09 e6 8c 48 c7 c7 c0 08 e6 8c e8 24 e5 01 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 54 a7 ab 90 e8 7e a5 a9 f8 e9 [ 437.701300][ T3999] RSP: 0018:ffffc90005a3f9f0 EFLAGS: 00010286 [ 437.701309][ T3999] RAX: 0000000000000000 RBX: ffff888034eb2000 RCX: ffffffff817a4388 [ 437.701316][ T3999] RDX: ffff888047c00000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 437.701324][ T3999] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 437.701330][ T3999] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff92000b47f48 [ 437.701337][ T3999] R13: ffff888034eb2cc1 R14: ffffffff8c59e7c0 R15: ffffffff89b186d0 [ 437.701344][ T3999] FS: 0000000000000000(0000) GS:ffff8880d66b2000(0000) knlGS:0000000000000000 [ 437.701370][ T3999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.701380][ T3999] CR2: 00007f9eee9156c0 CR3: 0000000038953000 CR4: 0000000000352ef0 [ 437.701387][ T3999] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 437.701394][ T3999] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 437.701400][ T3999] Call Trace: [ 437.701404][ T3999] [ 437.701410][ T3999] ethtool_op_get_link+0x1d/0x70 [ 437.701426][ T3999] bond_check_dev_link+0x3f9/0x710 [ 437.701438][ T3999] ? __pfx_bond_check_dev_link+0x10/0x10 [ 437.701456][ T3999] bond_mii_monitor+0x3c0/0x2dc0 [ 437.701473][ T3999] ? __pfx_bond_mii_monitor+0x10/0x10 [ 437.701490][ T3999] ? rcu_is_watching+0x12/0xc0 [ 437.701506][ T3999] process_one_work+0x9cc/0x1b70 [ 437.701524][ T3999] ? __pfx_process_one_work+0x10/0x10 [ 437.701540][ T3999] ? assign_work+0x1a0/0x250 [ 437.701553][ T3999] worker_thread+0x6c8/0xf10 [ 437.701571][ T3999] ? __pfx_worker_thread+0x10/0x10 [ 437.701582][ T3999] kthread+0x3c2/0x780 [ 437.701594][ T3999] ? __pfx_kthread+0x10/0x10 [ 437.701606][ T3999] ? rcu_is_watching+0x12/0xc0 [ 437.701619][ T3999] ? __pfx_kthread+0x10/0x10 [ 437.701631][ T3999] ret_from_fork+0x56a/0x730 [ 437.701642][ T3999] ? __pfx_kthread+0x10/0x10 [ 437.701653][ T3999] ret_from_fork_asm+0x1a/0x30 [ 437.701672][ T3999] [ 437.701678][ T3999] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 437.701685][ T3999] CPU: 0 UID: 0 PID: 3999 Comm: kworker/u32:42 Not tainted syzkaller #0 PREEMPT(full) [ 437.701697][ T3999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 437.701704][ T3999] Workqueue: bond0 bond_mii_monitor [ 437.701716][ T3999] Call Trace: [ 437.701719][ T3999] [ 437.701723][ T3999] dump_stack_lvl+0x3d/0x1f0 [ 437.701738][ T3999] vpanic+0x6e8/0x7a0 [ 437.701755][ T3999] ? __pfx_vpanic+0x10/0x10 [ 437.701775][ T3999] ? __linkwatch_sync_dev+0x1ed/0x230 [ 437.701791][ T3999] panic+0xca/0xd0 [ 437.701809][ T3999] ? __pfx_panic+0x10/0x10 [ 437.701829][ T3999] ? check_panic_on_warn+0x1f/0xb0 [ 437.701840][ T3999] check_panic_on_warn+0xab/0xb0 [ 437.701850][ T3999] __warn+0xf6/0x3c0 [ 437.701859][ T3999] ? preempt_schedule_notrace+0x62/0xe0 [ 437.701872][ T3999] ? __linkwatch_sync_dev+0x1ed/0x230 [ 437.701889][ T3999] report_bug+0x3c3/0x580 [ 437.701901][ T3999] ? __linkwatch_sync_dev+0x1ed/0x230 [ 437.701919][ T3999] handle_bug+0x184/0x210 [ 437.701935][ T3999] exc_invalid_op+0x17/0x50 [ 437.701950][ T3999] asm_exc_invalid_op+0x1a/0x20 [ 437.701960][ T3999] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 437.701977][ T3999] Code: 05 ff ff ff e8 b4 3d 43 f8 c6 05 23 7d 1b 07 01 90 ba 48 00 00 00 48 c7 c6 20 09 e6 8c 48 c7 c7 c0 08 e6 8c e8 24 e5 01 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 54 a7 ab 90 e8 7e a5 a9 f8 e9 [ 437.701987][ T3999] RSP: 0018:ffffc90005a3f9f0 EFLAGS: 00010286 [ 437.701995][ T3999] RAX: 0000000000000000 RBX: ffff888034eb2000 RCX: ffffffff817a4388 [ 437.702001][ T3999] RDX: ffff888047c00000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 437.702007][ T3999] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 437.702013][ T3999] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff92000b47f48 [ 437.702019][ T3999] R13: ffff888034eb2cc1 R14: ffffffff8c59e7c0 R15: ffffffff89b186d0 [ 437.702026][ T3999] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 437.702043][ T3999] ? __warn_printk+0x198/0x350 [ 437.702059][ T3999] ? __warn_printk+0x1a5/0x350 [ 437.702077][ T3999] ethtool_op_get_link+0x1d/0x70 [ 437.702091][ T3999] bond_check_dev_link+0x3f9/0x710 [ 437.702103][ T3999] ? __pfx_bond_check_dev_link+0x10/0x10 [ 437.702119][ T3999] bond_mii_monitor+0x3c0/0x2dc0 [ 437.702462][ T3999] ? __pfx_bond_mii_monitor+0x10/0x10 [ 437.702480][ T3999] ? rcu_is_watching+0x12/0xc0 [ 437.702495][ T3999] process_one_work+0x9cc/0x1b70 [ 437.702513][ T3999] ? __pfx_process_one_work+0x10/0x10 [ 437.702529][ T3999] ? assign_work+0x1a0/0x250 [ 437.702542][ T3999] worker_thread+0x6c8/0xf10 [ 437.702559][ T3999] ? __pfx_worker_thread+0x10/0x10 [ 437.702571][ T3999] kthread+0x3c2/0x780 [ 437.702582][ T3999] ? __pfx_kthread+0x10/0x10 [ 437.702594][ T3999] ? rcu_is_watching+0x12/0xc0 [ 437.702608][ T3999] ? __pfx_kthread+0x10/0x10 [ 437.702619][ T3999] ret_from_fork+0x56a/0x730 [ 437.702629][ T3999] ? __pfx_kthread+0x10/0x10 [ 437.702640][ T3999] ret_from_fork_asm+0x1a/0x30 [ 437.702659][ T3999] [ 437.703477][ T3999] Kernel Offset: disabled VM DIAGNOSIS: 21:46:45 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=000000000000000e RCX=ffffffff81aff9e7 RDX=ffff888047c00000 RSI=0000000000000066 RDI=0000000000000001 RBP=ffffffff8d3f1dad RSP=ffffc90005a3eb78 R8 =0000000000000001 R9 =0000000000000000 R10=000000000000000d R11=0000000000000000 R12=000000000000003f R13=0000000000000066 R14=dffffc0000000000 R15=ffffc90005a3ec48 RIP=ffffffff81aff9a0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9eee9156c0 CR3=0000000038953000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd2ae7b90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd2ae7d16 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd2ae7d16 00007ffcd2ae7d1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71c0a12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71c0a12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71c0a12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71c0a12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71c0a1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f71c0a1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000010000 RBX=0000000000000004 RCX=0000000000000835 RDX=0000000000000000 RSI=0000000000010000 RDI=0000000000000035 RBP=0000000000000005 RSP=ffffc900006a0fa8 R8 =0000000000000001 R9 =fffffbfff2156ead R10=ffffffff90ab756b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8169a7e8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0a14917d60 CR3=0000000022ea4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a13db76c3 00007f0a13db76c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf364a9e0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557d779707 000055557d779600 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557d784964 000055557d784960 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557d77cbc7 000055557d77cb60 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0102800402d0a408 0001000000080606 0128861002000280 030380040882e2d0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d808000100000008 0606012798088008 0003d00308080003 c8036b36cb7f6dd7 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 26d09df191b7d2e8 870892410c260803 a203019e020003a0 030608000398031f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffdffffa08000390 030008000388031f fffffff008000380 030d800402d0a408 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000040300100000 005c280807800307 8004168003168004 11a0030008001190 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3061646530336239 6666666666666666 0a332e79656b5f5f 2062203036646530 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3065646530336239 6666666666666666 0a65686361635f71 65725f3970206220 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2030306665303362 3966666666666666 660a70616d727265 5f68736168206220 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6239666666666666 66660a392e79656b 5f5f206220306330 3231336239666666 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3132313362396666 6666666666660a30 312e79656b5f5f20 6220303031323133 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6220303831323133 6239666666666666 66660a31312e7965 6b5f5f2062203034 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b5f5f2062203063 3132313362396666 6666666666660a32 312e79656b5f5f20 info registers vcpu 2 CPU#2 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff88801e2fa440 RSI=ffffffff81608c38 RDI=ffffffff93dbffe0 RBP=0000000000000002 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27b7ffc R10=ffffffff93dbffe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555561d05808 CR3=000000004c6ae000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000040000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff154ae390 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff154ae516 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff154ae516 00007fff154ae51c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9eedc12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9eedc12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9eedc12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9eedc12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9eedc1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9eedc1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff88805e2f4880 RSI=ffffffff81608c38 RDI=ffffffff93dbffe0 RBP=0000000000000003 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff27b7ffc R10=ffffffff93dbffe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555562762500 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffea632eff8 CR3=000000003464b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea632f270 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea63304e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea63304e6 00007ffea63304ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90f8212fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90f8212fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90f8212fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90f8212fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90f821305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90f821313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000