last executing test programs: 1.669430676s ago: executing program 3 (id=2647): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x2802) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r0, 0x8044610a, 0x0) 1.480524971s ago: executing program 3 (id=2651): mkdir(&(0x7f0000000300)='./bus\x00', 0x40) getxattr(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00', 0x0, 0x0) 1.332444319s ago: executing program 3 (id=2653): mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./mnt\x00', 0x1ff) mount(&(0x7f0000000f00)=@filename='ubi0_0\x00', &(0x7f0000000e00)='./mnt\x00', &(0x7f0000001000)='ubifs\x00', 0x0, 0x0) 1.174907481s ago: executing program 0 (id=2657): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9fca6a011550000000001007f8e1aced1d0abf462df24cc3daabfe7e9455053be297d", 0x23}, 0x1, 0x0, 0x0, 0x810}, 0x24004014) 1.1747404s ago: executing program 3 (id=2658): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x34}}, 0x10) 1.023437273s ago: executing program 0 (id=2662): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b63, 0x4) 841.471506ms ago: executing program 1 (id=2663): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x800) ioctl$MEMGETOOBSEL(r0, 0x80c84d0a, 0x0) 841.111426ms ago: executing program 2 (id=2664): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=@dellinkprop={0x28, 0x12, 0x201, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0xa, 0xffffffffffffffff}]}, 0x28}}, 0x0) 783.162303ms ago: executing program 0 (id=2665): r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) lseek(r0, 0x3, 0x1) 740.217307ms ago: executing program 1 (id=2666): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000d80)=@l={0x92, 0x1, 0xb0, 0x6, 0x7, 0x2, 0x7}) 603.882282ms ago: executing program 0 (id=2667): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x81}]}, 0x3c}}, 0x0) 603.692174ms ago: executing program 1 (id=2668): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0xf, 0x2, {{0x0, 0x0, 0x0, 0xfffffffd}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xe, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040081}, 0x880) 499.27222ms ago: executing program 1 (id=2669): timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_delete(r0) 498.926275ms ago: executing program 0 (id=2670): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x660, 0x1b8, 0x2e8, 0x1b8, 0x1b8, 0x418, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x0, 0x24}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x100, 0x8, 0xb34f, 0x57c1, 0xffff, 0x6, 0xb561a16a5759827b}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@frag={{0x30}}, @common=@ah={{0x30}, {[0x4d2, 0x4d4], 0x6, 0x2, 0x2}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x67]}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) 498.685723ms ago: executing program 2 (id=2671): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa3) 210.964377ms ago: executing program 2 (id=2672): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001800000004000000", 0x1c) 210.791809ms ago: executing program 1 (id=2673): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x708}) 210.560819ms ago: executing program 0 (id=2674): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ppoll(&(0x7f0000000000)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) 197.438679ms ago: executing program 2 (id=2675): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0x7, 0x3ff, 0x7]}, &(0x7f00000001c0)=0x44) 138.773721ms ago: executing program 3 (id=2676): r0 = socket(0x15, 0x5, 0x0) getsockname$llc(r0, 0x0, &(0x7f00000008c0)) 76.091108ms ago: executing program 2 (id=2677): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) 51.594704ms ago: executing program 1 (id=2678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x4040) 51.429593ms ago: executing program 3 (id=2679): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e64"]) 0s ago: executing program 2 (id=2680): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x9b, 0x7, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x80, 0x8000, 0x5, 0x8}}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:17368' (ED25519) to the list of known hosts. [ 41.189720][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 41.189740][ T43] audit: type=1400 audit(1790376242.322:141): avc: denied { mounton } for pid=5722 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.193475][ T43] audit: type=1400 audit(1790376242.332:142): avc: denied { mount } for pid=5722 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.195482][ T5722] cgroup: Unknown subsys name 'net' [ 41.211662][ T43] audit: type=1400 audit(1790376242.352:143): avc: denied { unmount } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.323789][ T5722] cgroup: Unknown subsys name 'cpuset' [ 41.325812][ T5722] cgroup: Unknown subsys name 'rlimit' [ 41.508960][ T43] audit: type=1400 audit(1790376242.642:144): avc: denied { setattr } for pid=5722 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.510964][ T43] audit: type=1400 audit(1790376242.642:145): avc: denied { create } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.510991][ T43] audit: type=1400 audit(1790376242.642:146): avc: denied { write } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.511010][ T43] audit: type=1400 audit(1790376242.642:147): avc: denied { read } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.526647][ T43] audit: type=1400 audit(1790376242.662:148): avc: denied { mounton } for pid=5722 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 41.527638][ T43] audit: type=1400 audit(1790376242.662:149): avc: denied { mount } for pid=5722 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 41.534432][ T43] audit: type=1400 audit(1790376242.672:150): avc: denied { read } for pid=5451 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 41.565489][ T5731] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.264683][ T5722] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.361813][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 46.361824][ T43] audit: type=1400 audit(1790376247.502:162): avc: denied { mount } for pid=5738 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.362844][ T43] audit: type=1400 audit(1790376247.502:163): avc: denied { mounton } for pid=5738 comm="syz-executor" path="/syzkaller.mZvTDw/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 46.364064][ T43] audit: type=1400 audit(1790376247.502:164): avc: denied { mount } for pid=5738 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 46.366283][ T43] audit: type=1400 audit(1790376247.502:165): avc: denied { mounton } for pid=5738 comm="syz-executor" path="/syzkaller.mZvTDw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 46.367184][ T43] audit: type=1400 audit(1790376247.502:166): avc: denied { mounton } for pid=5738 comm="syz-executor" path="/syzkaller.mZvTDw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 46.368415][ T43] audit: type=1400 audit(1790376247.502:167): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 46.370894][ T43] audit: type=1400 audit(1790376247.502:168): avc: denied { mounton } for pid=5738 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 46.371713][ T43] audit: type=1400 audit(1790376247.512:169): avc: denied { mount } for pid=5738 comm="syz-executor" name="/" dev="gadgetfs" ino=7341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 46.375212][ T43] audit: type=1400 audit(1790376247.512:170): avc: denied { mount } for pid=5738 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 46.375652][ T43] audit: type=1400 audit(1790376247.512:171): avc: denied { mounton } for pid=5738 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 48.078529][ T5940] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.025686][ T5970] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.055419][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.056841][ T66] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.060355][ T66] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.060582][ T66] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.062486][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.063700][ T66] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.064523][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.065534][ T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.065694][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.066312][ T66] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.066506][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.089999][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.112151][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.127232][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.219253][ T5977] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.222997][ T5977] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.223610][ T5977] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.279559][ T5977] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.307166][ T5977] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.108386][ T5970] Bluetooth: hci2: command tx timeout [ 53.111549][ T5970] Bluetooth: hci1: command tx timeout [ 53.183890][ T5970] Bluetooth: hci0: command tx timeout [ 53.432335][ T5970] Bluetooth: hci3: command tx timeout [ 53.822461][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.831376][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.831494][ T5971] bridge_slave_0: entered allmulticast mode [ 53.833916][ T5971] bridge_slave_0: entered promiscuous mode [ 53.936007][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.936088][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.936206][ T5971] bridge_slave_1: entered allmulticast mode [ 53.937599][ T5971] bridge_slave_1: entered promiscuous mode [ 54.132151][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.132234][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.132368][ T5979] bridge_slave_0: entered allmulticast mode [ 54.133742][ T5979] bridge_slave_0: entered promiscuous mode [ 54.183202][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.184130][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.184252][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.184354][ T5979] bridge_slave_1: entered allmulticast mode [ 54.185809][ T5979] bridge_slave_1: entered promiscuous mode [ 54.274999][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.315489][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.315594][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.316435][ T5967] bridge_slave_0: entered allmulticast mode [ 54.317914][ T5967] bridge_slave_0: entered promiscuous mode [ 54.395573][ T5979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.411357][ T5979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.439010][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.439144][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.439249][ T5967] bridge_slave_1: entered allmulticast mode [ 54.440531][ T5967] bridge_slave_1: entered promiscuous mode [ 54.462188][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.462259][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.462512][ T5968] bridge_slave_0: entered allmulticast mode [ 54.463881][ T5968] bridge_slave_0: entered promiscuous mode [ 54.466543][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.466699][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.466812][ T5968] bridge_slave_1: entered allmulticast mode [ 54.469542][ T5968] bridge_slave_1: entered promiscuous mode [ 54.476340][ T5971] team0: Port device team_slave_0 added [ 54.479286][ T5971] team0: Port device team_slave_1 added [ 54.550479][ T5979] team0: Port device team_slave_0 added [ 54.551455][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.551468][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.551487][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.555945][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.586380][ T5979] team0: Port device team_slave_1 added [ 54.587071][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.587086][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.587108][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.598052][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.649142][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.702630][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.702646][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.702689][ T5979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.720188][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.728804][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.728820][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.728838][ T5979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.744362][ T5967] team0: Port device team_slave_0 added [ 54.746877][ T5967] team0: Port device team_slave_1 added [ 54.892824][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.892842][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.892864][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.895114][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.895129][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.895150][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.940664][ T5979] hsr_slave_0: entered promiscuous mode [ 54.953967][ T5979] hsr_slave_1: entered promiscuous mode [ 54.957098][ T5968] team0: Port device team_slave_0 added [ 54.962707][ T5971] hsr_slave_0: entered promiscuous mode [ 54.964056][ T5971] hsr_slave_1: entered promiscuous mode [ 54.964683][ T5971] debugfs: 'hsr0' already exists in 'hsr' [ 54.964788][ T5971] Cannot create hsr debugfs directory [ 54.996560][ T5968] team0: Port device team_slave_1 added [ 55.078835][ T5967] hsr_slave_0: entered promiscuous mode [ 55.079801][ T5967] hsr_slave_1: entered promiscuous mode [ 55.080451][ T5967] debugfs: 'hsr0' already exists in 'hsr' [ 55.080469][ T5967] Cannot create hsr debugfs directory [ 55.177508][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.177525][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.177543][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.179861][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.179876][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.179895][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.187010][ T5970] Bluetooth: hci1: command tx timeout [ 55.187041][ T5970] Bluetooth: hci2: command tx timeout [ 55.271192][ T5977] Bluetooth: hci0: command tx timeout [ 55.511825][ T5977] Bluetooth: hci3: command tx timeout [ 55.556196][ T5968] hsr_slave_0: entered promiscuous mode [ 55.557225][ T5968] hsr_slave_1: entered promiscuous mode [ 55.558003][ T5968] debugfs: 'hsr0' already exists in 'hsr' [ 55.558022][ T5968] Cannot create hsr debugfs directory [ 56.046518][ T5971] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.063921][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.065061][ T5971] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.072319][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.075822][ T5971] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.087092][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.088249][ T5971] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.095382][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.265068][ T5979] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.343267][ T5979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.394231][ T5979] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.398878][ T5979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.399671][ T5979] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.417981][ T5979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.419735][ T5979] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.425525][ T5979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.729217][ T5968] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.743182][ T5968] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.808595][ T5968] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.840374][ T5968] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.841250][ T5968] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.872223][ T5968] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.928807][ T5968] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.935088][ T5968] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.054463][ T5967] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.059962][ T5967] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.078445][ T5967] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.085681][ T5967] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.122757][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.138375][ T5967] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.143349][ T5967] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.165094][ T5979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.170338][ T5967] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.174292][ T5967] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.272004][ T5977] Bluetooth: hci2: command tx timeout [ 57.272038][ T5977] Bluetooth: hci1: command tx timeout [ 57.274478][ T5979] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.336898][ T4677] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.337048][ T4677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.341051][ T5970] Bluetooth: hci0: command tx timeout [ 57.348428][ T5971] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.394295][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.394381][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.438036][ T4677] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.438165][ T4677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.462014][ T4677] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.462105][ T4677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.584944][ T5970] Bluetooth: hci3: command tx timeout [ 57.658001][ T5971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.753738][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.788898][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.815245][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.846909][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.846999][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.849401][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.849483][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.893621][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.938051][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.938143][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.987415][ T5968] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.987439][ T5968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.016109][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.016208][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.032318][ T5979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.103579][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.240461][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.283925][ T5979] veth0_vlan: entered promiscuous mode [ 59.341900][ T5970] Bluetooth: hci1: command tx timeout [ 59.341929][ T5970] Bluetooth: hci2: command tx timeout [ 59.366115][ T5971] veth0_vlan: entered promiscuous mode [ 59.405917][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.407404][ T5979] veth1_vlan: entered promiscuous mode [ 59.426107][ T5977] Bluetooth: hci0: command tx timeout [ 59.463197][ T5968] veth0_vlan: entered promiscuous mode [ 59.464622][ T5971] veth1_vlan: entered promiscuous mode [ 59.616962][ T5968] veth1_vlan: entered promiscuous mode [ 59.661277][ T5977] Bluetooth: hci3: command tx timeout [ 59.667122][ T5979] veth0_macvtap: entered promiscuous mode [ 59.696170][ T5971] veth0_macvtap: entered promiscuous mode [ 59.700318][ T5971] veth1_macvtap: entered promiscuous mode [ 59.727802][ T5967] veth0_vlan: entered promiscuous mode [ 59.744838][ T5979] veth1_macvtap: entered promiscuous mode [ 59.768928][ T5968] veth0_macvtap: entered promiscuous mode [ 59.776382][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.780170][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.819060][ T5967] veth1_vlan: entered promiscuous mode [ 59.973162][ T5968] veth1_macvtap: entered promiscuous mode [ 59.999948][ T5967] veth0_macvtap: entered promiscuous mode [ 60.015203][ T5967] veth1_macvtap: entered promiscuous mode [ 60.046077][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.049903][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.260747][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.303681][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.326714][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.363452][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.448056][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.883150][ T6047] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.885761][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.885780][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.031770][ T6047] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.031817][ T6047] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.031849][ T6047] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.031880][ T6047] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.031912][ T6047] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.031943][ T6047] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.031976][ T6047] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.032009][ T6047] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.032041][ T6047] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.032072][ T6047] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.032104][ T6047] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.032134][ T6047] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.032166][ T6047] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.032207][ T6047] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.046459][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.046481][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.143434][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.143454][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.207097][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.207118][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.261894][ T4560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.261914][ T4560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.307034][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.307058][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.432036][ T4560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.432056][ T4560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.589733][ T43] kauditd_printk_skb: 51 callbacks suppressed [ 61.589750][ T43] audit: type=1400 audit(1790376262.692:223): avc: denied { ioctl } for pid=6122 comm="syz.1.195" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.608852][ T43] audit: type=1400 audit(1790376262.742:224): avc: denied { prog_load } for pid=6121 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 61.608897][ T43] audit: type=1400 audit(1790376262.742:225): avc: denied { bpf } for pid=6121 comm="syz.0.194" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.608925][ T43] audit: type=1400 audit(1790376262.742:226): avc: denied { perfmon } for pid=6121 comm="syz.0.194" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.649140][ T43] audit: type=1400 audit(1790376262.782:227): avc: denied { prog_run } for pid=6121 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 61.761517][ T4560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.761541][ T4560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.843148][ T9] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 61.844014][ T5977] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 62.045455][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 62.045499][ T9] usb 6-1: New USB device found, idVendor=1430, idProduct=6cdc, bcdDevice=85.cc [ 62.048775][ T9] usb 6-1: config 8 has an invalid interface number: 198 but max is 0 [ 62.048805][ T9] usb 6-1: config 8 has no interface number 0 [ 62.048841][ T9] usb 6-1: config 8 interface 198 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 62.076836][ T9] usb 6-1: string descriptor 0 read error: -22 [ 62.076950][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.084651][ T6123] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 62.315507][ T9] usb 6-1: USB disconnect, device number 2 [ 62.324788][ T43] audit: type=1400 audit(1790376263.462:228): avc: denied { mounton } for pid=6140 comm="syz.2.203" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 62.374533][ T6141] befs: (nullb0): No write support. Marking filesystem read-only [ 62.375876][ T6141] befs: (nullb0): invalid magic header [ 62.476549][ T43] audit: type=1400 audit(1790376263.602:229): avc: denied { write } for pid=6144 comm="syz.3.205" name="ip_tables_targets" dev="proc" ino=4026533494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 62.708559][ T43] audit: type=1400 audit(1790376263.842:230): avc: denied { unmount } for pid=5979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 62.980855][ T43] audit: type=1400 audit(1790376264.112:231): avc: denied { create } for pid=6167 comm="syz.1.217" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 62.989570][ T6170] qnx4: no qnx4 filesystem (no root dir). [ 63.051335][ T43] audit: type=1400 audit(1790376264.192:232): avc: denied { map_create } for pid=6171 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.669625][ T5977] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10 [ 64.902426][ T6233] could not allocate digest TFM handle cryptd(blake2b-160) [ 65.799011][ T5977] Bluetooth: hci2: command tx timeout [ 65.931903][ T6285] tmpfs: Bad value for 'mpol' [ 67.343066][ T6327] IPv6: addrconf: prefix option has invalid lifetime [ 67.565313][ T6333] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 67.771535][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 67.771554][ T43] audit: type=1400 audit(1790376268.902:236): avc: denied { unmount } for pid=5967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 68.942000][ T5977] Bluetooth: hci2: command tx timeout [ 69.072841][ T5977] Bluetooth: hci3: failed to read key size for handle 200 [ 69.109359][ T6404] virtio-fs: tag not found [ 69.322361][ T6416] ======================================================= [ 69.322361][ T6416] WARNING: The mand mount option has been deprecated and [ 69.322361][ T6416] and is ignored by this kernel. Remove the mand [ 69.322361][ T6416] option from the mount to silence this warning. [ 69.322361][ T6416] ======================================================= [ 69.322484][ T6416] 9pnet_virtio: no channels available for device 127.0.0.1 [ 70.025169][ T6461] tmpfs: Bad value for 'mpol' [ 70.175347][ T6469] ceph: Path missing in source [ 70.337031][ T43] audit: type=1400 audit(1790376271.472:237): avc: denied { unmount } for pid=5967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 71.020437][ T6503] futex_wake_op: syz.3.376 tries to shift op by 32; fix this program [ 71.178188][ T6504] (syz.0.379,6504,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 71.178224][ T6504] (syz.0.379,6504,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 71.360233][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.360318][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.593191][ T6528] cgroup: noprefix used incorrectly [ 71.626564][ T6526] libceph: secret too big 3051 [ 72.643757][ T6558] CIFS: VFS: UNC: path must begin with // or \\ [ 72.643771][ T6558] Malformed UNC in devname [ 72.643771][ T6558] [ 72.643837][ T6558] CIFS: VFS: Malformed UNC in devname [ 72.724159][ T43] audit: type=1400 audit(1790376273.852:238): avc: denied { read write } for pid=6559 comm="syz.0.408" name="usbmon9" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 72.724730][ T43] audit: type=1400 audit(1790376273.852:239): avc: denied { open } for pid=6559 comm="syz.0.408" path="/dev/usbmon9" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 72.766954][ T6564] tmpfs: Bad value for 'mpol' [ 72.979258][ T43] audit: type=1400 audit(1790376274.072:240): avc: denied { mount } for pid=6571 comm="syz.2.414" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.077906][ T6578] gfs2: not a GFS2 filesystem [ 74.213846][ T5970] Bluetooth: hci2: Malformed HCI Event [ 74.439298][ T6616] tmpfs: Bad value for 'mpol' [ 74.897955][ T5970] Bluetooth: hci0: unexpected event for opcode 0x080b [ 75.775072][ T6660] gfs2: gfs2 mount does not exist [ 75.783043][ T43] audit: type=1400 audit(1790376276.892:241): avc: denied { mounton } for pid=6659 comm="syz.1.458" path="/syzcgroup/unified/syz1" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 76.124962][ T6679] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 76.391926][ T6691] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 76.392432][ T6691] exFAT-fs (nullb0): invalid boot record signature [ 76.392450][ T6691] exFAT-fs (nullb0): failed to read boot sector [ 76.392462][ T6691] exFAT-fs (nullb0): failed to recognize exfat type [ 76.490492][ T1042] cfg80211: failed to load regulatory.db [ 76.879310][ T5970] Bluetooth: hci1: unexpected cc 0x042d length: 1 < 7 [ 76.909717][ T6714] hfsplus: unable to find HFS+ superblock [ 77.024817][ T6721] gfs2: error -5 reading superblock [ 77.557486][ T6735] qnx6: unable to set blocksize [ 77.659774][ T6737] tmpfs: Bad value for 'mpol' [ 77.796548][ T6743] Invalid ELF header type: 0 != 1 [ 77.840988][ T5970] Bluetooth: hci0: command 0x2016 tx timeout [ 77.842668][ T43] audit: type=1400 audit(1790376278.932:242): avc: denied { module_load } for pid=6742 comm="syz.1.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 77.953519][ T43] audit: type=1400 audit(1790376279.072:243): avc: denied { mount } for pid=6744 comm="syz.1.499" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 77.983326][ T43] audit: type=1400 audit(1790376279.112:244): avc: denied { unmount } for pid=5968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 78.756639][ T5977] Bluetooth: hci1: unexpected cc 0x200b length: 2 > 1 [ 79.192527][ T43] audit: type=1400 audit(1790376280.332:245): avc: denied { create } for pid=6790 comm="syz.2.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.471996][ T43] audit: type=1400 audit(1790376280.582:246): avc: denied { allowed } for pid=6804 comm="syz.1.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 79.475425][ T43] audit: type=1400 audit(1790376280.582:247): avc: denied { map } for pid=6804 comm="syz.1.529" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.475680][ T43] audit: type=1400 audit(1790376280.582:248): avc: denied { read write } for pid=6804 comm="syz.1.529" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.639150][ T43] audit: type=1326 audit(1790376280.772:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6807 comm="syz.0.532" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f091b39e159 code=0x0 [ 79.979714][ T6829] PKCS7: Unknown OID: [98] 1.2.10824.113549.1.1.1 [ 79.979733][ T6829] Unsupported pkey algo: 106 [ 80.233355][ T6835] MTD: Couldn't look up './cgroup': -15 [ 80.558528][ T6851] binder: Bad value for 'max' [ 80.558528][ T43] audit: type=1400 audit(1790376281.692:250): avc: denied { mounton } for pid=6850 comm="syz.2.553" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.946379][ T43] audit: type=1400 audit(1790376282.082:251): avc: denied { sqpoll } for pid=6866 comm="syz.3.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 81.115347][ T6875] cgroup: none used incorrectly [ 81.150928][ T5977] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 81.224998][ T43] audit: type=1400 audit(1790376282.362:252): avc: denied { create } for pid=6880 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 81.484565][ T43] audit: type=1400 audit(1790376282.614:253): avc: denied { append } for pid=6894 comm="syz.1.573" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.008036][ T6924] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 83.209726][ T5977] Bluetooth: hci2: ACL packet too small [ 83.340698][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 83.340730][ T43] audit: type=1400 audit(1790376284.495:256): avc: denied { execute } for pid=6979 comm="syz.3.614" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 84.095494][ T43] audit: type=1400 audit(1790376285.253:257): avc: denied { read write } for pid=7011 comm="syz.1.630" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.095880][ T43] audit: type=1400 audit(1790376285.253:258): avc: denied { open } for pid=7011 comm="syz.1.630" path="/dev/uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.445661][ T7028] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 84.489072][ T43] audit: type=1400 audit(1790376285.631:259): avc: denied { map_read map_write } for pid=7029 comm="syz.2.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 84.699600][ T7038] FAT-fs (nbd2): unable to read boot sector [ 84.759573][ T7043] tmpfs: Bad value for 'mpol' [ 85.982692][ T43] audit: type=1326 audit(1790376287.092:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7083 comm="syz.0.664" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f091b39e159 code=0x0 [ 86.220613][ T5977] Bluetooth: hci3: unexpected cc 0x2005 length: 4 > 1 [ 87.077625][ T7122] MINIX-fs: blocksize too small for device [ 87.100087][ T7129] tmpfs: Unknown parameter 'dont_measure' [ 87.466985][ T5977] Bluetooth: hci3: unexpected cc 0x0c22 length: 4 > 1 [ 88.211054][ T7169] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 88.241052][ T7169] cramfs: wrong magic [ 88.916569][ T7207] mmap: syz.3.725 (7207) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.983375][ T43] audit: type=1400 audit(1790376289.951:261): avc: denied { read } for pid=7208 comm="syz.3.727" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 88.983765][ T43] audit: type=1400 audit(1790376289.951:262): avc: denied { open } for pid=7208 comm="syz.3.727" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 89.099352][ T43] audit: type=1400 audit(1790376290.083:263): avc: denied { kexec_image_load } for pid=7213 comm="syz.3.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 90.213065][ T5977] Bluetooth: hci0: Malformed LE Event: 0x0d [ 90.339185][ T5977] Bluetooth: Frame is too long (len 10, expected len 8) [ 90.339218][ T5977] Bluetooth: Wrong link type (-71) [ 90.453222][ T7257] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 90.488748][ T7215] kexec: Could not allocate control_code_buffer [ 90.585113][ T43] audit: type=1400 audit(1790376291.470:264): avc: denied { create } for pid=7260 comm="syz.3.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 91.075545][ T7273] /dev/sr0: Can't open blockdev [ 91.373533][ T7288] Invalid source name [ 91.373554][ T7288] UBIFS error (pid: 7288): cannot open "/dev/sg0", error -22 [ 91.768589][ T5977] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 92.883669][ T43] audit: type=1400 audit(1790376293.603:265): avc: denied { unmount } for pid=5979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 92.899096][ T7347] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 92.900921][ T7347] VFS: Can't find a romfs filesystem on dev nullb0. [ 92.900921][ T7347] [ 93.072043][ T7354] PKCS7: Unsupported SignedData version [ 93.197050][ T7362] No source specified [ 93.628302][ T7388] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 93.676397][ T7388] cramfs: wrong magic [ 93.981118][ T5977] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 94.125129][ T5977] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 94.806598][ T7420] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 94.806789][ T7420] Error validating options; rc = [-22] [ 94.914211][ T7426] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 94.914451][ T7426] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 94.914468][ T7426] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 94.914903][ T7426] UDF-fs: Scanning with blocksize 512 failed [ 94.926125][ T7426] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 94.926223][ T7426] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 94.926237][ T7426] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 94.926246][ T7426] UDF-fs: Scanning with blocksize 1024 failed [ 94.938817][ T7426] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 94.938928][ T7426] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 94.938944][ T7426] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 94.938956][ T7426] UDF-fs: Scanning with blocksize 2048 failed [ 94.952664][ T7426] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 94.952779][ T7426] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 94.952800][ T7426] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 94.952815][ T7426] UDF-fs: Scanning with blocksize 4096 failed [ 94.952824][ T7426] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 95.837334][ T7478] cgroup: Need name or subsystem set [ 96.453220][ T7509] futex_wake_op: syz.1.873 tries to shift op by -1; fix this program [ 96.606153][ T43] audit: type=1400 audit(1790376297.049:266): avc: denied { mount } for pid=7510 comm="syz.0.874" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 96.994099][ T7528] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 96.994289][ T7528] qnx6: wrong signature (magic) in superblock #1. [ 96.994297][ T7528] qnx6: unable to read the first superblock [ 96.994731][ T43] audit: type=1400 audit(1790376297.410:267): avc: denied { mounton } for pid=7527 comm="syz.0.881" path="/syzcgroup/unified/syz0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 97.084479][ T5977] Bluetooth: hci2: unexpected event for opcode 0x204e [ 97.816922][ T7544] 9pnet_fd: p9_fd_create_unix (7544): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 98.130958][ T43] audit: type=1400 audit(1790376298.463:268): avc: denied { write } for pid=7561 comm="syz.0.899" name="001" dev="devtmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 98.183653][ T43] audit: type=1400 audit(1790376298.509:269): avc: denied { append } for pid=7563 comm="syz.1.900" name="hidraw0" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 98.372357][ T7568] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 98.372384][ T7568] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.376447][ T7568] vhci_hcd vhci_hcd.0: Device attached [ 98.379816][ T7569] vhci_hcd: connection closed [ 98.382675][ T12] vhci_hcd vhci_hcd.0: stop threads [ 98.382996][ T12] vhci_hcd vhci_hcd.0: release socket [ 98.383023][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 99.391307][ T7602] futex_wake_op: syz.2.919 tries to shift op by -1; fix this program [ 99.672590][ T7619] PKCS7: Unsupported SignerInfo version [ 99.852033][ T5970] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 99.974919][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 100.155670][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 100.156454][ T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 100.157514][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.157533][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 100.159663][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.159681][ T9] usb 6-1: Product: syz [ 100.159693][ T9] usb 6-1: Manufacturer: syz [ 100.159704][ T9] usb 6-1: SerialNumber: syz [ 100.173975][ T9] r8152-cfgselector 6-1: Unknown version 0x0000 [ 100.173992][ T9] r8152-cfgselector 6-1: config 0 descriptor?? [ 100.466868][ T9] r8152-cfgselector 6-1: USB disconnect, device number 3 [ 100.648210][ T43] audit: type=1400 audit(1790376300.791:270): avc: denied { view } for pid=7652 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 101.261466][ T7682] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 101.395940][ T5970] Bluetooth: hci2: unexpected event for opcode 0x100c [ 102.484652][ T5970] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 103.144039][ T7753] NILFS (nullb0): couldn't find nilfs on the device [ 103.819538][ T5970] Bluetooth: hci3: unexpected event for opcode 0x0407 [ 104.135727][ T5970] Bluetooth: to_multiplier 0 < 10 [ 105.723514][ T43] audit: type=1400 audit(1790376305.470:271): avc: denied { mount } for pid=7844 comm="syz.0.1038" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 105.753374][ T43] audit: type=1400 audit(1790376305.507:272): avc: denied { unmount } for pid=5971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 105.831926][ T7849] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 106.298662][ T851] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 106.396385][ T5977] Bluetooth: hci0: command 0x2016 tx timeout [ 106.484961][ T851] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 106.499394][ T851] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 106.499417][ T851] usb 8-1: config 1 has no interface number 0 [ 106.499450][ T851] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 106.501454][ T851] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.501475][ T851] usb 8-1: Product: syz [ 106.501487][ T851] usb 8-1: Manufacturer: syz [ 106.501500][ T851] usb 8-1: SerialNumber: syz [ 106.631297][ T7855] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 106.647414][ T851] usb 8-1: Error in usbnet_get_endpoints (-22) [ 106.852302][ T851] usb 8-1: USB disconnect, device number 2 [ 107.346354][ T5977] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 107.547117][ T7919] futex_wake_op: syz.3.1075 tries to shift op by 32; fix this program [ 107.624884][ T43] audit: type=1400 audit(1790376307.233:273): avc: denied { create } for pid=7923 comm="syz.1.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.711049][ T7925] can: request_module (can-proto-0) failed. [ 107.784047][ T43] audit: type=1400 audit(1790376307.371:274): avc: denied { mmap_zero } for pid=7931 comm="syz.1.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 108.025514][ T7946] syz.2.1087 (7946): attempted to duplicate a private mapping with mremap. This is not supported. [ 108.106969][ T5977] Bluetooth: hci2: unexpected event for opcode 0x080c [ 108.979371][ T5977] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 110.300940][ T43] audit: type=1400 audit(1790376309.706:275): avc: denied { unmount } for pid=5967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 110.384412][ T5977] Bluetooth: hci3: unexpected event for opcode 0x0c1a [ 110.733417][ T43] audit: type=1326 audit(1790376310.103:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8059 comm="syz.1.1143" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4a9b9e159 code=0x0 [ 110.928706][ T8074] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 111.569466][ T5977] Bluetooth: hci2: unexpected event for opcode 0x0c58 [ 111.717269][ T8112] /dev/sg0: Can't lookup blockdev [ 111.735714][ T8111] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 111.735738][ T8111] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.735840][ T8111] vhci_hcd vhci_hcd.0: Device attached [ 111.753571][ T8113] vhci_hcd: connection closed [ 111.816928][ T12] vhci_hcd vhci_hcd.1: stop threads [ 111.816954][ T12] vhci_hcd vhci_hcd.1: release socket [ 111.816971][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 112.366258][ T43] audit: type=1326 audit(1790376311.607:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8135 comm="syz.2.1181" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d2ed9e159 code=0x0 [ 112.466537][ T43] audit: type=1400 audit(1790376311.699:278): avc: denied { create } for pid=8139 comm="syz.3.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.652397][ T5977] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 112.652473][ T5977] Bluetooth: hci0: Injecting HCI hardware error event [ 112.653888][ T5977] Bluetooth: hci0: hardware error 0x00 [ 112.857548][ T8166] kAFS: Can only specify source 'none' with -o dyn [ 113.865676][ T8203] tmpfs: Bad value for 'mpol' [ 113.906156][ T43] audit: type=1400 audit(2000000000.968:279): avc: denied { write } for pid=8201 comm="syz.0.1215" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.906199][ T43] audit: type=1400 audit(2000000000.987:280): avc: denied { remove_name } for pid=8201 comm="syz.0.1215" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.906228][ T43] audit: type=1400 audit(2000000000.987:281): avc: denied { unlink } for pid=8201 comm="syz.0.1215" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.047577][ T5970] Bluetooth: hci2: unexpected event for opcode 0x041c [ 114.156313][ T5970] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 114.390217][ T43] audit: type=1400 audit(2000000001.430:282): avc: denied { read write } for pid=8226 comm="syz.1.1227" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 114.390501][ T43] audit: type=1400 audit(2000000001.430:283): avc: denied { open } for pid=8226 comm="syz.1.1227" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 115.047971][ T5977] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 115.123367][ T43] audit: type=1400 audit(2000000002.112:284): avc: denied { read write } for pid=8252 comm="syz.3.1240" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 115.123697][ T43] audit: type=1400 audit(2000000002.112:285): avc: denied { open } for pid=8252 comm="syz.3.1240" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 115.556018][ T8275] syz.3.1251 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 115.805304][ T5977] Bluetooth: hci3: unexpected subevent 0x10 length: 5 > 2 [ 116.379158][ T6080] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 116.612894][ T6080] usb 6-1: not running at top speed; connect to a high speed hub [ 116.612927][ T6080] usb 6-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 116.614805][ T6080] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 116.645679][ T6080] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.645706][ T6080] usb 6-1: Product: syz [ 116.645720][ T6080] usb 6-1: Manufacturer: syz [ 116.645734][ T6080] usb 6-1: SerialNumber: syz [ 116.768794][ T8308] syz.2.1266: attempt to access beyond end of device [ 116.768794][ T8308] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 116.768827][ T8308] gfs2: error -5 reading superblock [ 116.936907][ T6080] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 116.937066][ T6080] usb 6-1: MIDIStreaming interface descriptor not found [ 117.092281][ T43] audit: type=1400 audit(2000000003.912:286): avc: denied { create } for pid=8320 comm="syz.0.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.215524][ T6080] usb 6-1: USB disconnect, device number 4 [ 117.338894][ T8334] udevd[8334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.048368][ T5977] Bluetooth: min 0 < 6 [ 118.196394][ T8370] tmpfs: Bad value for 'mpol' [ 118.504083][ T5977] Bluetooth: hci1: link tx timeout [ 118.504275][ T5977] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 118.561752][ T43] audit: type=1400 audit(2000524293.278:287): avc: denied { append } for pid=8385 comm="syz.0.1302" name="frontend0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 118.691603][ T43] audit: type=1400 audit(2000524293.389:288): avc: denied { create } for pid=8391 comm="syz.2.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.077076][ T8418] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0001 with DS=0x3 [ 119.284611][ T8424] futex_wake_op: syz.3.1322 tries to shift op by -1; fix this program [ 119.352559][ C2] Adjusting tsc more than 11% (5144129 vs 7162548) [ 119.483554][ T5970] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 119.544486][ T5970] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 120.348978][ T8467] hpfs: hpfs_map_sector(): read error [ 120.424996][ T5970] Bluetooth: hci3: command 0x0406 tx timeout [ 120.802771][ T43] audit: type=1400 audit(2000524295.171:289): avc: denied { create } for pid=8487 comm="syz.2.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.836585][ T43] audit: type=1400 audit(2000524295.208:290): avc: denied { create } for pid=8492 comm="syz.1.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 120.981136][ T5970] Bluetooth: hci1: unexpected event for opcode 0x200a [ 121.069049][ T8506] tmpfs: Bad value for 'mpol' [ 121.309465][ T43] audit: type=1400 audit(2000524295.650:291): avc: denied { open } for pid=8518 comm="syz.3.1369" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 121.355688][ T43] audit: type=1326 audit(2000524295.696:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz.2.1367" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d2ed9e159 code=0x0 [ 121.673102][ T8532] ufs: You didn't specify the type of your ufs filesystem [ 121.673102][ T8532] [ 121.673102][ T8532] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 121.673102][ T8532] [ 121.673102][ T8532] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 121.673133][ T8532] ufs: failed to set blocksize [ 121.957357][ T5970] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 122.083222][ T5970] Bluetooth: hci1: unexpected event for opcode 0x0405 [ 122.720639][ T5970] Bluetooth: hci1: unexpected event for opcode 0x200b [ 122.864991][ T8576] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 123.490962][ T43] audit: type=1400 audit(2000524297.652:293): avc: denied { read } for pid=8599 comm="syz.1.1406" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 123.491432][ T43] audit: type=1400 audit(2000524297.652:294): avc: denied { open } for pid=8599 comm="syz.1.1406" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 123.496861][ T5970] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 123.686860][ T8612] CIFS: Witness protocol support is experimental [ 123.686893][ T8612] CIFS mount error: No usable UNC path provided in device string! [ 123.686893][ T8612] [ 123.687051][ T8612] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 124.304806][ T5970] Bluetooth: hci3: unexpected event for opcode 0x200c [ 125.224517][ T8683] X.509: signatureAlgorithm (106) differs from tbsCertificate.signature (7) [ 125.429795][ T5970] Bluetooth: hci3: unexpected event for opcode 0x042c [ 125.664923][ T8708] tmpfs: User quota block hardlimit too large. [ 125.737619][ T8711] 9pnet_fd: p9_fd_create_tcp (8711): problem connecting socket to 127.0.0.1 [ 125.746678][ T43] audit: type=1400 audit(2000524299.747:295): avc: denied { create } for pid=8710 comm="syz.0.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.984527][ T43] audit: type=1400 audit(2000524299.968:296): avc: denied { read write } for pid=8720 comm="syz.0.1467" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 125.984670][ T43] audit: type=1400 audit(2000524299.968:297): avc: denied { open } for pid=8720 comm="syz.0.1467" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 126.320499][ T43] audit: type=1400 audit(2000524300.273:298): avc: denied { create } for pid=8734 comm="syz.2.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 126.427524][ T8738] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 126.500342][ T43] audit: type=1400 audit(2000524300.439:299): avc: denied { remount } for pid=8739 comm="syz.2.1478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 127.117908][ T8774] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 127.221528][ T8781] capability: warning: `syz.3.1497' uses deprecated v2 capabilities in a way that may be insecure [ 127.312199][ T8786] capability: warning: `syz.3.1500' uses 32-bit capabilities (legacy support in use) [ 127.480792][ T43] audit: type=1400 audit(2000524301.352:300): avc: denied { create } for pid=8795 comm="syz.0.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 128.436280][ T5970] Bluetooth: hci3: unexpected event for opcode 0x2010 [ 128.549465][ T5970] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 129.756921][ T5970] Bluetooth: hci3: unexpected cc 0x204b length: 34 > 3 [ 129.757809][ T5970] Bluetooth: hci3: unexpected event for opcode 0x204b [ 130.717526][ T8909] SQUASHFS error: Failed to read block 0x0: -5 [ 130.717597][ T8909] unable to read squashfs_super_block [ 131.260996][ T8926] hfs: can't find a HFS filesystem on dev sr0 [ 131.463477][ T5970] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 131.531301][ T8940] nfs4: Bad value for 'source' [ 131.731262][ T8947] XFS (loop0): SB validate failed with error -5. [ 131.804873][ T5970] Bluetooth: hci3: Unable to find connection with handle 0x00c8 [ 132.260571][ T8970] MINIX-fs: unable to read superblock [ 132.423370][ T8976] (syz.2.1592,8976,3):ocfs2_get_sector:1713 ERROR: status = -5 [ 132.423403][ T8976] (syz.2.1592,8976,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 132.423425][ T8976] (syz.2.1592,8976,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 132.423445][ T8976] (syz.2.1592,8976,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 132.911423][ T9000] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 132.963460][ T9000] romfs: unable to set blocksize [ 132.963460][ T9000] [ 132.997514][ T5970] Bluetooth: hci2: unexpected event for opcode 0x080e [ 133.297172][ T43] audit: type=1400 audit(2000524306.713:301): avc: denied { create } for pid=9013 comm="syz.1.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.398641][ T9020] syz.2.1616(9020): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 133.433206][ T43] audit: type=1326 audit(2000524306.843:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.3.1615" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a1df9e159 code=0x0 [ 133.708278][ T9032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.864973][ T9040] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 133.864995][ T9040] PKCS7: Only support pkcs7_signedData type [ 134.146007][ T5970] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 134.146050][ T5970] Bluetooth: hci3: Injecting HCI hardware error event [ 134.147122][ T5970] Bluetooth: hci3: hardware error 0x00 [ 134.185008][ T43] audit: type=1400 audit(2000524307.525:303): avc: denied { mount } for pid=9053 comm="syz.0.1630" name="/" dev="pstore" ino=2803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 134.780526][ T9083] affs: No valid root block on device sr0 [ 136.193725][ T9141] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 136.193749][ T9141] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 136.193759][ T9141] PKCS7: Unsupported data type 106 [ 136.444427][ T43] audit: type=1400 audit(2000524309.620:304): avc: denied { mounton } for pid=9149 comm="syz.3.1678" path="/346" dev="tmpfs" ino=1744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 136.444623][ T9152] No source specified [ 136.565632][ T5970] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 136.739772][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.739824][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.069450][ T6054] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 137.236812][ T6054] usb 8-1: unable to get BOS descriptor or descriptor too short [ 137.236855][ T6054] usb 8-1: New USB device found, idVendor=0bda, idProduct=0184, bcdDevice=6f.98 [ 137.238631][ T6054] usb 8-1: config 4 has an invalid interface number: 13 but max is 0 [ 137.238653][ T6054] usb 8-1: config 4 has no interface number 0 [ 137.238681][ T6054] usb 8-1: config 4 interface 13 has no altsetting 0 [ 137.245908][ T6054] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.245931][ T6054] usb 8-1: Product: syz [ 137.245943][ T6054] usb 8-1: Manufacturer: syz [ 137.246055][ T6054] usb 8-1: SerialNumber: syz [ 137.485249][ T9202] PKCS7: Unknown OID: [158] 2.16.840.1.101.3.4.2.13 [ 137.485270][ T9202] Unsupported digest algo: 106 [ 137.508842][ T6054] ums-realtek 8-1:4.13: USB Mass Storage device detected [ 137.687537][ T5977] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 137.687576][ T5977] Bluetooth: hci2: command 0x0406 tx timeout [ 137.687775][ T6054] usb 8-1: USB disconnect, device number 3 [ 138.228983][ T5970] Bluetooth: hci1: unexpected subevent 0x1a length: 30 > 6 [ 138.534035][ T43] audit: type=1400 audit(2000524311.548:305): avc: denied { mounton } for pid=9254 comm="syz.2.1726" path="/syzcgroup/cpu/syz2/memory.limit_in_bytes" dev="cgroup" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 139.156558][ T5970] Bluetooth: Wrong link type (-57) [ 140.477973][ T9349] kAFS: unable to lookup cell 'syz1' [ 140.927611][ T5970] Bluetooth: hci1: unexpected event for opcode 0x0c2d [ 141.601987][ T5970] Bluetooth: hci1: Invalid handle: 0xed88 > 0x0eff [ 143.290420][ T43] audit: type=1400 audit(2000524315.929:306): avc: denied { mount } for pid=9444 comm="syz.3.1820" name="/" dev="hugetlbfs" ino=18190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 143.380709][ T43] audit: type=1400 audit(2000524316.021:307): avc: denied { unmount } for pid=5979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 143.483092][ T9457] tmpfs: Bad value for 'mpol' [ 143.488495][ T9458] ptrace attach of "/syz-executor exec"[5971] was attempted by "/syz-executor exec"[9458] [ 143.590113][ T43] audit: type=1326 audit(2000524316.205:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.2.1829" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d2ed9e159 code=0x0 [ 143.730873][ T9470] syz.1.1835 uses obsolete (PF_INET,SOCK_PACKET) [ 143.731695][ T43] audit: type=1400 audit(2000524316.325:309): avc: denied { create } for pid=9469 comm="syz.1.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.957172][ T5970] Bluetooth: hci1: unexpected event for opcode 0x0c1c [ 144.363361][ T30] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 144.585774][ T30] usb 5-1: unable to get BOS descriptor or descriptor too short [ 144.585819][ T30] usb 5-1: New USB device found, idVendor=0bda, idProduct=b720, bcdDevice=f1.74 [ 144.593351][ T30] usb 5-1: config 12 has an invalid interface number: 29 but max is 0 [ 144.593383][ T30] usb 5-1: config 12 has no interface number 0 [ 144.593424][ T30] usb 5-1: config 12 interface 29 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.692043][ T30] usb 5-1: string descriptor 0 read error: -22 [ 144.692148][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.933970][ T30] usb 5-1: USB disconnect, device number 2 [ 144.965554][ T9519] qnx4: unable to read the superblock [ 145.280267][ T9528] IPv6: addrconf: prefix option has invalid lifetime [ 145.355491][ T43] audit: type=1400 audit(2000524317.838:310): avc: denied { getattr } for pid=9533 comm="syz.2.1865" name="/" dev="failfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 146.617990][ T9592] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 146.618012][ T9592] UDF-fs: Scanning with blocksize 2048 failed [ 146.619008][ T9592] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 146.619026][ T9592] UDF-fs: Scanning with blocksize 4096 failed [ 146.853624][ T9602] hpfs: Bad magic ... probably not HPFS [ 147.227124][ T9613] EXT4-fs (loop2): unable to read superblock [ 147.996911][ T9634] XFS (nullb0): Invalid superblock magic number [ 148.010907][ T43] audit: type=1400 audit(2000524320.291:311): avc: denied { mounton } for pid=9642 comm="syz.0.1918" path="/syzcgroup/unified/syz0" dev="pstore" ino=2803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 148.011792][ T9643] qnx6: unable to read the first superblock [ 148.011924][ T9643] qnx6: unable to read the first superblock [ 148.011932][ T9643] qnx6: unable to read the first superblock [ 148.378686][ T9655] XFS (nbd1): SB validate failed with error -5. [ 149.045422][ T9699] binder: Binderfs stats mode cannot be changed during a remount [ 149.132001][ T9706] NILFS (loop1): device size too small [ 149.210448][ T9711] exFAT-fs (nbd3): unable to read boot sector [ 149.210463][ T9711] exFAT-fs (nbd3): failed to read boot sector [ 149.210470][ T9711] exFAT-fs (nbd3): failed to recognize exfat type [ 149.449138][ T9716] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 149.790076][ T43] audit: type=1400 audit(2000524577.982:312): avc: denied { create } for pid=9739 comm="syz.2.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 150.281365][ T9753] kAFS: unable to lookup cell 'syz0' [ 150.741125][ T9784] [syz.2.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [403c!=40, 4,4000] [ 151.632573][ T9822] ISOFS: Unable to identify CD-ROM format. [ 151.866819][ T9831] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 152.546432][ T9871] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 152.588916][ T1354] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 152.784555][ T1354] usb 7-1: Using ep0 maxpacket: 8 [ 152.795665][ T1354] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 152.823063][ T1354] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 152.823088][ T1354] usb 7-1: config 0 has no interface number 0 [ 152.823125][ T1354] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.828530][ T1354] usb 7-1: config 0 descriptor?? [ 152.957088][ T1354] viperboard 7-1:0.143: version 0.00 found at bus 007 address 002 [ 153.069043][ T1354] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 153.069069][ T1354] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 153.128020][ T1354] usb 7-1: USB disconnect, device number 2 [ 153.250444][ T43] audit: type=1400 audit(2000524581.199:313): avc: denied { create } for pid=9892 comm="syz.3.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.362966][ T5970] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 153.400050][ T43] audit: type=1400 audit(2000524581.340:314): avc: denied { ioctl } for pid=9899 comm="syz.3.2039" path="/dev/sg0" dev="devtmpfs" ino=720 ioctlcmd=0x2282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 153.750475][ T43] audit: type=1400 audit(2000524581.676:315): avc: denied { setopt } for pid=9916 comm="syz.2.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 153.813718][ T43] audit: type=1400 audit(2000524581.733:316): avc: denied { ioctl } for pid=9922 comm="syz.2.2050" path="/dev/video3" dev="devtmpfs" ino=956 ioctlcmd=0x564a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 154.122258][ T9933] netlink: 'syz.2.2053': attribute type 1 has an invalid length. [ 154.122284][ T9933] netlink: 'syz.2.2053': attribute type 1 has an invalid length. [ 154.402472][ T43] audit: type=1400 audit(2000524582.285:317): avc: denied { create } for pid=9947 comm="syz.0.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 154.404483][ T43] audit: type=1400 audit(2000524582.285:318): avc: denied { write } for pid=9947 comm="syz.0.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 154.462577][ T43] audit: type=1400 audit(2000524582.322:319): avc: denied { read write } for pid=5979 comm="syz-executor" name="loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.462628][ T43] audit: type=1400 audit(2000524582.322:320): avc: denied { open } for pid=5979 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.462664][ T43] audit: type=1400 audit(2000524582.322:321): avc: denied { ioctl } for pid=5979 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.613628][ T9951] netlink: 'syz.3.2063': attribute type 2 has an invalid length. [ 154.833825][ T9967] netlink: 'syz.2.2071': attribute type 2 has an invalid length. [ 155.256111][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 155.256126][ T43] audit: type=1400 audit(2000524583.090:328): avc: denied { ioctl } for pid=9990 comm="syz.3.2083" path="/dev/ptyqb" dev="devtmpfs" ino=138 ioctlcmd=0x5439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 155.547671][T10011] netlink: 'syz.2.2091': attribute type 21 has an invalid length. [ 155.547701][T10011] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.557047][ T43] audit: type=1400 audit(2000524583.361:329): avc: denied { ioctl } for pid=10008 comm="syz.3.2092" path="/dev/rtc0" dev="devtmpfs" ino=942 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 155.604953][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2093'. [ 155.719587][ T43] audit: type=1400 audit(2000524583.511:330): avc: denied { ioctl } for pid=10018 comm="syz.3.2096" path="/dev/dri/renderD128" dev="devtmpfs" ino=634 ioctlcmd=0x644f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 155.736857][T10022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2097'. [ 155.746418][ T43] audit: type=1400 audit(2000524583.529:331): avc: denied { write } for pid=10019 comm="syz.0.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 155.830941][ T43] audit: type=1400 audit(2000524583.623:332): avc: denied { ioctl } for pid=10021 comm="syz.2.2095" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x6205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 155.880505][T10028] erspan0: entered promiscuous mode [ 155.880531][T10028] erspan0: entered allmulticast mode [ 156.014561][T10035] random: crng reseeded on system resumption [ 156.038655][ T43] audit: type=1400 audit(2000524583.810:333): avc: denied { ioctl } for pid=10033 comm="syz.1.2103" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 156.271189][T10051] netlink: 'syz.3.2109': attribute type 4 has an invalid length. [ 156.298985][T10049] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 156.510225][ T43] audit: type=1400 audit(2000524584.250:334): avc: denied { bind } for pid=10060 comm="syz.3.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.511087][ T43] audit: type=1400 audit(2000524584.250:335): avc: denied { name_bind } for pid=10060 comm="syz.3.2115" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 156.528805][ T43] audit: type=1400 audit(2000524584.278:336): avc: denied { node_bind } for pid=10060 comm="syz.3.2115" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 156.744360][ T43] audit: type=1400 audit(2000524584.475:337): avc: denied { map } for pid=10074 comm="syz.3.2120" path="/dev/comedi4" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.432991][T10097] ip6gretap1: entered promiscuous mode [ 157.433014][T10097] ip6gretap1: entered allmulticast mode [ 157.994929][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2147'. [ 157.995015][T10131] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.995027][T10131] IPv6: NLM_F_CREATE should be set when creating new route [ 157.995053][T10131] IPv6: NLM_F_CREATE should be set when creating new route [ 158.621506][T10158] mac80211_hwsim hwsim3 c@0Ù: renamed from wlan0 (while UP) [ 158.697274][T10162] comedi comedi1: Minor 0 could not be opened [ 158.878335][T10169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.878360][T10169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.897806][T10169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.897834][T10169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.992895][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2165'. [ 159.015383][T10175] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 159.274990][T10183] SELinux: syz.1.2171 (10183) wrote to user. This is no longer supported. [ 159.367447][T10187] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 159.367651][T10187] Cannot find add_set index 0 as target [ 159.635420][T10198] netlink: 'syz.0.2178': attribute type 23 has an invalid length. [ 159.635495][T10198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2178'. [ 159.855749][T10213] random: crng reseeded on system resumption [ 160.427842][T10243] kernel profiling enabled (shift: 63) [ 160.427864][T10243] profiling shift: 63 too large [ 160.761768][T10255] bond1: Removing last arp target with arp_interval on [ 160.908028][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 160.908046][ T43] audit: type=1400 audit(2000524588.330:344): avc: denied { ioctl } for pid=10264 comm="syz.2.2211" path="/dev/input/event0" dev="devtmpfs" ino=940 ioctlcmd=0x4521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 161.141952][ T43] audit: type=1400 audit(2000524588.583:345): avc: denied { write } for pid=10276 comm="syz.0.2217" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.259563][ T43] audit: type=1400 audit(2000524588.704:346): avc: denied { setopt } for pid=10284 comm="syz.1.2222" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.640689][T10311] ip6t_REJECT: ECHOREPLY is not supported [ 161.894298][T10323] IPv6: Can't replace route, no match found [ 162.020643][T10329] bridge0: port 3(syz_tun) entered blocking state [ 162.020849][T10329] bridge0: port 3(syz_tun) entered disabled state [ 162.020988][T10329] syz_tun: entered allmulticast mode [ 162.022432][T10329] syz_tun: entered promiscuous mode [ 162.024113][T10329] bridge0: port 3(syz_tun) entered blocking state [ 162.024308][T10329] bridge0: port 3(syz_tun) entered forwarding state [ 162.147636][ T43] audit: type=1400 audit(2000524589.518:347): avc: denied { append } for pid=10333 comm="syz.0.2244" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 162.325989][ T43] audit: type=1400 audit(2000524589.706:348): avc: denied { bind } for pid=10342 comm="syz.3.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.387336][ T43] audit: type=1400 audit(2000524589.752:349): avc: denied { ioctl } for pid=10347 comm="syz.2.2252" path="socket:[23039]" dev="sockfs" ino=23039 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.610389][T10361] netlink: 'syz.2.2259': attribute type 3 has an invalid length. [ 162.662408][ T43] audit: type=1400 audit(2000524590.005:350): avc: denied { write } for pid=10366 comm="syz.1.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.738618][T10369] syz.2.2264: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 162.821098][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2266'. [ 163.050574][ T43] audit: type=1400 audit(2000524590.342:351): avc: denied { read } for pid=10380 comm="syz.3.2270" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 163.050638][ T43] audit: type=1400 audit(2000524590.342:352): avc: denied { open } for pid=10380 comm="syz.3.2270" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 163.050676][ T43] audit: type=1400 audit(2000524590.342:353): avc: denied { ioctl } for pid=10380 comm="syz.3.2270" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 163.175060][T10388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2273'. [ 163.577488][T10413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2284'. [ 163.577526][T10413] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 163.702950][T10419] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 163.993554][T10432] trusted_key: encrypted_key: master key parameter '' is invalid [ 164.327426][T10450] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2301'. [ 164.753851][T10469] process 'syz.3.2313' launched './file0' with NULL argv: empty string added [ 165.247552][T10493] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 165.311233][T10496] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2327'. [ 167.308162][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 167.308178][ T43] audit: type=1400 audit(2000524594.366:366): avc: denied { setopt } for pid=10605 comm="syz.2.2380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.525349][ T43] audit: type=1400 audit(2000524594.553:367): avc: denied { append } for pid=10611 comm="syz.3.2383" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.663984][T10620] geneve1: entered allmulticast mode [ 167.732920][ T43] audit: type=1400 audit(2000524594.722:368): avc: denied { prog_load } for pid=10621 comm="syz.3.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 168.000218][T10640] overlayfs: empty lowerdir [ 168.142610][T10649] netlink: 'syz.1.2400': attribute type 16 has an invalid length. [ 168.142638][T10649] netlink: 'syz.1.2400': attribute type 17 has an invalid length. [ 168.146510][T10649] erspan0: left promiscuous mode [ 168.146535][T10649] erspan0: left allmulticast mode [ 168.227082][T10649] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.268129][T10649] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.450773][T10649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.452637][T10649] ip6gretap1: left promiscuous mode [ 168.452665][T10649] ip6gretap1: left allmulticast mode [ 168.456557][T10649] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.860135][T10672] netlink: 'syz.2.2411': attribute type 21 has an invalid length. [ 169.062546][ T110] IPVS: starting estimator thread 0... [ 169.163376][T10676] IPVS: using max 27 ests per chain, 64800 per kthread [ 169.178807][ T43] audit: type=1400 audit(2000524596.116:369): avc: denied { write } for pid=10682 comm="syz.2.2417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 169.179218][T10683] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.365662][ T43] audit: type=1400 audit(2000524596.284:370): avc: denied { getopt } for pid=10691 comm="syz.1.2421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.676091][ T43] audit: type=1400 audit(2000524596.574:371): avc: denied { create } for pid=10709 comm="syz.1.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 169.691939][ T43] audit: type=1400 audit(2000524596.584:372): avc: denied { getopt } for pid=10709 comm="syz.1.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 170.030867][T10729] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 170.056139][ T43] audit: type=1326 audit(2000524596.902:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.3.2435" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1df9e159 code=0x7ffc0000 [ 170.056196][ T43] audit: type=1326 audit(2000524596.911:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.3.2435" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1df9e159 code=0x7ffc0000 [ 170.170447][ T43] audit: type=1400 audit(2000524597.033:375): avc: denied { execute } for pid=10734 comm="syz.0.2442" path="/dev/comedi4" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 170.925488][T10779] nvme_fabrics: missing parameter 'transport=%s' [ 170.925506][T10779] nvme_fabrics: missing parameter 'nqn=%s' [ 171.306256][T10792] xt_CT: No such helper "pptp" [ 171.327933][T10801] program syz.3.2473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.665211][T10817] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 172.112453][T10836] netlink: 'syz.2.2491': attribute type 2 has an invalid length. [ 172.657592][ T43] kauditd_printk_skb: 1127 callbacks suppressed [ 172.657612][ T43] audit: type=1326 audit(2000524599.372:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.0.2492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091b39e159 code=0x50000 [ 172.657807][ T43] audit: type=1326 audit(2000524599.372:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.0.2492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091b39e159 code=0x50000 [ 172.658010][ T43] audit: type=1326 audit(2000524599.372:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.0.2492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091b39e159 code=0x50000 [ 172.658313][ T43] audit: type=1326 audit(2000524599.372:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.0.2492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091b39e159 code=0x50000 [ 172.658504][ T43] audit: type=1326 audit(2000524599.372:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.0.2492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091b39e159 code=0x50000 [ 172.658674][ T43] audit: type=1326 audit(2000524599.372:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.0.2492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091b39e159 code=0x50000 [ 172.658858][ T43] audit: type=1326 audit(2000524599.372:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.0.2492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091b39e159 code=0x50000 [ 172.659074][ T43] audit: type=1326 audit(2000524599.372:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.0.2492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091b39e159 code=0x50000 [ 172.659246][ T43] audit: type=1326 audit(2000524599.372:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.0.2492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091b39e159 code=0x50000 [ 172.659474][ T43] audit: type=1326 audit(2000524599.372:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.0.2492" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091b39e159 code=0x50000 [ 172.801996][T10865] libceph: resolve '4' (ret=-3): failed [ 173.133868][T10874] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 173.361849][T10883] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2514'. [ 173.361874][T10883] veth0_to_bond: default FDB implementation only supports local addresses [ 174.969711][T10937] ip6t_srh: unknown srh invflags 51E8 [ 175.315620][T10955] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 175.415751][T10957] bond2 (unregistering): Released all slaves [ 175.804301][T10976] netlink: 'syz.3.2560': attribute type 3 has an invalid length. [ 175.804365][T10976] netlink: 'syz.3.2560': attribute type 3 has an invalid length. [ 175.804399][T10976] netlink: 'syz.3.2560': attribute type 3 has an invalid length. [ 175.804432][T10976] netlink: 'syz.3.2560': attribute type 3 has an invalid length. [ 175.804464][T10976] netlink: 'syz.3.2560': attribute type 3 has an invalid length. [ 175.804495][T10976] netlink: 'syz.3.2560': attribute type 3 has an invalid length. [ 175.804525][T10976] netlink: 'syz.3.2560': attribute type 3 has an invalid length. [ 175.804555][T10976] netlink: 'syz.3.2560': attribute type 3 has an invalid length. [ 175.804584][T10976] netlink: 'syz.3.2560': attribute type 3 has an invalid length. [ 175.804612][T10976] netlink: 'syz.3.2560': attribute type 3 has an invalid length. [ 176.213473][T10992] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2569'. [ 176.213493][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2569'. [ 176.912752][T11023] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2580'. [ 177.072040][T11018] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 177.231302][T11030] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 177.301600][T11030] bond1 (unregistering): Released all slaves [ 177.311031][T11038] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2588'. [ 178.455823][T11090] ata3.00: invalid multi_count 1 ignored [ 178.612997][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2615'. [ 178.709528][T11104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2616'. [ 178.772161][ T43] kauditd_printk_skb: 7037 callbacks suppressed [ 178.772179][ T43] audit: type=1400 audit(2000524605.090:8550): avc: denied { connect } for pid=11105 comm="syz.1.2619" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.052791][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2628'. [ 179.052834][T11122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2628'. [ 179.189730][T11124] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 179.309466][T11134] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 179.309516][T11134] overlayfs: overlapping lowerdir path [ 179.573704][T11144] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2638'. [ 179.732509][T11154] warning: `syz.3.2644' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 179.964245][T11169] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2650'. [ 179.964291][T11169] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2650'. [ 180.191946][T11180] UBIFS error (pid: 11180): cannot open "ubi0_0", error -19 [ 180.381023][T11187] ieee802154 phy0 wpan0: encryption failed: -22 [ 181.111604][ T43] audit: type=1400 audit(2000524607.280:8551): avc: denied { read } for pid=11213 comm="syz.2.2671" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.112136][ T43] audit: type=1400 audit(2000524607.280:8552): avc: denied { open } for pid=11213 comm="syz.2.2671" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.115159][ T43] audit: type=1400 audit(2000524607.280:8553): avc: denied { ioctl } for pid=11213 comm="syz.2.2671" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.167413][T11216] xt_time: unknown flags 0x78 [ 181.426462][ T43] audit: type=1400 audit(2000524607.570:8554): avc: denied { write } for pid=11227 comm="syz.2.2677" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 181.510145][ C3] ================================================================== [ 181.510165][ C3] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 181.510208][ C3] Read of size 1 at addr ffff88803fba1818 by task syz-executor/5967 [ 181.510230][ C3] [ 181.510244][ C3] CPU: 3 UID: 0 PID: 5967 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 181.510274][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.510289][ C3] Call Trace: [ 181.510301][ C3] [ 181.510310][ C3] dump_stack_lvl+0x100/0x190 [ 181.510346][ C3] print_report+0x13d/0x4b0 [ 181.510383][ C3] ? __virt_addr_valid+0x239/0x430 [ 181.510416][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 181.510445][ C3] kasan_report+0xdf/0x1c0 [ 181.510473][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 181.510501][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 181.510529][ C3] __kasan_check_byte+0x36/0x50 [ 181.510552][ C3] lock_acquire+0x132/0x380 [ 181.510572][ C3] ? do_raw_spin_unlock+0x53/0x1e0 [ 181.510594][ C3] ? .slowpath+0x9/0x18 [ 181.510627][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 181.510652][ C3] ? p9_req_put+0xaf/0x250 [ 181.510676][ C3] p9_req_put+0xaf/0x250 [ 181.510697][ C3] req_done+0x1dc/0x2e0 [ 181.510726][ C3] ? __pfx_req_done+0x10/0x10 [ 181.510754][ C3] ? __pfx_req_done+0x10/0x10 [ 181.510781][ C3] vring_interrupt+0x2ef/0x660 [ 181.510803][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 181.510824][ C3] __handle_irq_event_percpu+0x232/0x880 [ 181.510852][ C3] handle_irq_event+0xab/0x1e0 [ 181.510880][ C3] handle_edge_irq+0x34c/0x950 [ 181.510908][ C3] __common_interrupt+0xd8/0x2f0 [ 181.510929][ C3] common_interrupt+0x60/0xe0 [ 181.510953][ C3] asm_common_interrupt+0x26/0x40 [ 181.510973][ C3] RIP: 0010:unwind_next_frame+0x9a/0x2090 [ 181.511003][ C3] Code: 46 19 00 00 49 8b 45 48 48 89 44 24 08 49 8d 45 38 48 89 c2 48 89 04 24 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 <0f> 85 0c 19 00 00 49 8b 45 38 48 89 44 24 10 e8 12 2f 36 00 31 d2 [ 181.511023][ C3] RSP: 0018:ffffc90000708960 EFLAGS: 00000246 [ 181.511041][ C3] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffc90000708924 [ 181.511054][ C3] RDX: 1ffff920000e1141 RSI: ffffffff827f71ef RDI: ffffc900007089d0 [ 181.511067][ C3] RBP: ffffc90000708a18 R08: ffffffff91f77a98 R09: 0000000000000007 [ 181.511080][ C3] R10: 0000000000000200 R11: 0000000000017f9c R12: ffffffff81f5ff20 [ 181.511093][ C3] R13: ffffc900007089d0 R14: 0000000000000000 R15: ffff888030b7a580 [ 181.511107][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 181.511129][ C3] ? __kasan_slab_free+0x5f/0x80 [ 181.511155][ C3] ? __kasan_slab_free+0x5f/0x80 [ 181.511189][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 181.511210][ C3] arch_stack_walk+0x94/0xf0 [ 181.511237][ C3] ? __kasan_slab_free+0x5f/0x80 [ 181.511260][ C3] ? __put_task_struct+0x353/0x590 [ 181.511281][ C3] stack_trace_save+0x8e/0xc0 [ 181.511299][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 181.511319][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 181.511342][ C3] kasan_save_stack+0x30/0x50 [ 181.511365][ C3] ? kasan_save_stack+0x30/0x50 [ 181.511386][ C3] ? kasan_save_track+0x14/0x30 [ 181.511409][ C3] ? kasan_save_free_info+0x3b/0x70 [ 181.511437][ C3] ? __kasan_slab_free+0x5f/0x80 [ 181.511460][ C3] ? kmem_cache_free+0x127/0x6c0 [ 181.511478][ C3] ? __put_task_struct+0x353/0x590 [ 181.511498][ C3] ? rcu_core+0x5f0/0x1260 [ 181.511521][ C3] ? handle_softirqs+0x1e6/0x9d0 [ 181.511542][ C3] ? __irq_exit_rcu+0x16a/0x210 [ 181.511562][ C3] ? irq_exit_rcu+0x9/0x30 [ 181.511582][ C3] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 181.511613][ C3] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 181.511634][ C3] ? __orc_find+0x13/0xf0 [ 181.511660][ C3] ? unwind_next_frame+0x2ec/0x2090 [ 181.511684][ C3] ? arch_stack_walk+0x94/0xf0 [ 181.511708][ C3] ? stack_trace_save+0x8e/0xc0 [ 181.511725][ C3] ? kasan_save_stack+0x30/0x50 [ 181.511746][ C3] ? kasan_save_track+0x14/0x30 [ 181.511770][ C3] ? kasan_save_free_info+0x3b/0x70 [ 181.511799][ C3] ? __kasan_slab_free+0x5f/0x80 [ 181.511836][ C3] kasan_save_track+0x14/0x30 [ 181.511860][ C3] kasan_save_free_info+0x3b/0x70 [ 181.511890][ C3] __kasan_slab_free+0x5f/0x80 [ 181.511916][ C3] kmem_cache_free+0x127/0x6c0 [ 181.511934][ C3] ? key_put+0x62/0x2e0 [ 181.511955][ C3] ? rcu_core+0x5eb/0x1260 [ 181.511979][ C3] ? rcu_core+0x5eb/0x1260 [ 181.512001][ C3] __put_task_struct+0x353/0x590 [ 181.512021][ C3] ? rcu_core+0x5eb/0x1260 [ 181.512043][ C3] rcu_core+0x5f0/0x1260 [ 181.512069][ C3] ? __pfx_rcu_core+0x10/0x10 [ 181.512093][ C3] ? __pfx_sched_balance_domains+0x10/0x10 [ 181.512121][ C3] ? run_timer_base+0x121/0x190 [ 181.512142][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 181.512165][ C3] handle_softirqs+0x1e6/0x9d0 [ 181.512194][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 181.512214][ C3] ? _raw_spin_unlock+0x3e/0x50 [ 181.512239][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 181.512268][ C3] __irq_exit_rcu+0x16a/0x210 [ 181.512290][ C3] irq_exit_rcu+0x9/0x30 [ 181.512311][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 181.512341][ C3] [ 181.512348][ C3] [ 181.512356][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 181.512379][ C3] RIP: 0010:__orc_find+0x13/0xf0 [ 181.512408][ C3] Code: 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 49 89 cd 89 d1 41 54 4c 8d 64 8f fc 55 <53> 48 83 ec 08 85 d2 0f 84 99 00 00 00 49 89 fe 48 89 f0 49 39 fc [ 181.512429][ C3] RSP: 0018:ffffc900035d7710 EFLAGS: 00000206 [ 181.512447][ C3] RAX: ffffffff9229cb26 RBX: 0000000000000001 RCX: 0000000000000009 [ 181.512460][ C3] RDX: 0000000000000009 RSI: ffffffff9229cb26 RDI: ffffffff9189fc08 [ 181.512473][ C3] RBP: ffffc900035d77f8 R08: ffffffff9229cb5c R09: 0000000000000007 [ 181.512487][ C3] R10: 0000000000000200 R11: 0000000000046113 R12: ffffffff9189fc28 [ 181.512500][ C3] R13: ffffffff85611386 R14: ffffc900035d77e5 R15: ffffffff85611386 [ 181.512515][ C3] ? ref_tracker_free+0x376/0x6c0 [ 181.512543][ C3] ? ref_tracker_free+0x376/0x6c0 [ 181.512575][ C3] ? ref_tracker_free+0x376/0x6c0 [ 181.512601][ C3] unwind_next_frame+0x2ec/0x2090 [ 181.512628][ C3] ? ref_tracker_free+0x377/0x6c0 [ 181.512656][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 181.512677][ C3] arch_stack_walk+0x94/0xf0 [ 181.512705][ C3] ? ref_tracker_free+0x377/0x6c0 [ 181.512733][ C3] ? ref_tracker_free+0x377/0x6c0 [ 181.512760][ C3] stack_trace_save+0x8e/0xc0 [ 181.512779][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 181.512795][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 181.512816][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 181.512836][ C3] kasan_save_stack+0x30/0x50 [ 181.512860][ C3] ? kasan_save_stack+0x30/0x50 [ 181.512881][ C3] ? kasan_save_track+0x14/0x30 [ 181.512901][ C3] ? kasan_save_free_info+0x3b/0x70 [ 181.512927][ C3] ? __kasan_slab_free+0x5f/0x80 [ 181.512952][ C3] ? kfree+0x22b/0x6d0 [ 181.512979][ C3] ? ref_tracker_free+0x377/0x6c0 [ 181.513019][ C3] kasan_save_track+0x14/0x30 [ 181.513042][ C3] kasan_save_free_info+0x3b/0x70 [ 181.513072][ C3] __kasan_slab_free+0x5f/0x80 [ 181.513096][ C3] ? ref_tracker_free+0x2f0/0x6c0 [ 181.513124][ C3] kfree+0x22b/0x6d0 [ 181.513155][ C3] ref_tracker_free+0x377/0x6c0 [ 181.513191][ C3] ? __pfx_ref_tracker_free+0x10/0x10 [ 181.513219][ C3] ? __sk_destruct+0x493/0xab0 [ 181.513243][ C3] ? sk_destruct+0xc8/0xf0 [ 181.513266][ C3] ? __sk_free+0xf4/0x3e0 [ 181.513287][ C3] ? sk_free+0x61/0x90 [ 181.513308][ C3] ? tcp_close+0xc6/0x110 [ 181.513331][ C3] ? inet_release+0xed/0x200 [ 181.513349][ C3] ? __sock_release+0xb3/0x260 [ 181.513373][ C3] ? sock_close+0x1c/0x30 [ 181.513397][ C3] ? __fput+0x3ff/0xb50 [ 181.513422][ C3] ? fput_close_sync+0x118/0x250 [ 181.513448][ C3] ? __x64_sys_close+0x8b/0x120 [ 181.513477][ C3] ? do_syscall_64+0x123/0x790 [ 181.513495][ C3] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.513518][ C3] ? preempt_count_add+0x78/0x150 [ 181.513539][ C3] __sk_destruct+0x493/0xab0 [ 181.513563][ C3] sk_destruct+0xc8/0xf0 [ 181.513585][ C3] __sk_free+0xf4/0x3e0 [ 181.513607][ C3] sk_free+0x61/0x90 [ 181.513629][ C3] tcp_close+0xc6/0x110 [ 181.513649][ C3] inet_release+0xed/0x200 [ 181.513668][ C3] __sock_release+0xb3/0x260 [ 181.513691][ C3] ? __pfx_sock_close+0x10/0x10 [ 181.513715][ C3] sock_close+0x1c/0x30 [ 181.513740][ C3] __fput+0x3ff/0xb50 [ 181.513768][ C3] fput_close_sync+0x118/0x250 [ 181.513793][ C3] ? __pfx_fput_close_sync+0x10/0x10 [ 181.513824][ C3] __x64_sys_close+0x8b/0x120 [ 181.513852][ C3] do_syscall_64+0x123/0x790 [ 181.513871][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.513892][ C3] RIP: 0033:0x7f8d2ed5e98e [ 181.513911][ C3] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 181.513931][ C3] RSP: 002b:00007fff317639a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 181.513953][ C3] RAX: ffffffffffffffda RBX: 0000555565609500 RCX: 00007f8d2ed5e98e [ 181.513967][ C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 181.513979][ C3] RBP: 00007fff31763a4c R08: 0000000000000000 R09: 0000000000000000 [ 181.513991][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000291 [ 181.514004][ C3] R13: 00000000000927c0 R14: 000000000002a8f1 R15: 00007fff31763aa0 [ 181.514024][ C3] [ 181.514031][ C3] [ 181.514036][ C3] Allocated by task 11231: [ 181.514047][ C3] kasan_save_stack+0x30/0x50 [ 181.514069][ C3] kasan_save_track+0x14/0x30 [ 181.514139][ C3] __kasan_kmalloc+0xaa/0xb0 [ 181.514160][ C3] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 181.514197][ C3] p9_client_create+0xaf/0xd40 [ 181.514218][ C3] v9fs_session_init+0x3c/0xdd0 [ 181.514242][ C3] v9fs_get_tree+0xb8/0xb50 [ 181.514258][ C3] vfs_get_tree+0x92/0x320 [ 181.514280][ C3] path_mount+0x7d0/0x24c0 [ 181.514304][ C3] __x64_sys_mount+0x293/0x310 [ 181.514328][ C3] do_syscall_64+0x123/0x790 [ 181.514343][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.514359][ C3] [ 181.514363][ C3] Freed by task 11231: [ 181.514372][ C3] kasan_save_stack+0x30/0x50 [ 181.514391][ C3] kasan_save_track+0x14/0x30 [ 181.514412][ C3] kasan_save_free_info+0x3b/0x70 [ 181.514437][ C3] __kasan_slab_free+0x5f/0x80 [ 181.514457][ C3] kfree+0x22b/0x6d0 [ 181.514481][ C3] p9_client_create+0x72d/0xd40 [ 181.514499][ C3] v9fs_session_init+0x3c/0xdd0 [ 181.514521][ C3] v9fs_get_tree+0xb8/0xb50 [ 181.514536][ C3] vfs_get_tree+0x92/0x320 [ 181.514560][ C3] path_mount+0x7d0/0x24c0 [ 181.514584][ C3] __x64_sys_mount+0x293/0x310 [ 181.514609][ C3] do_syscall_64+0x123/0x790 [ 181.514624][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.514640][ C3] [ 181.514646][ C3] The buggy address belongs to the object at ffff88803fba1800 [ 181.514646][ C3] which belongs to the cache kmalloc-512 of size 512 [ 181.514661][ C3] The buggy address is located 24 bytes inside of [ 181.514661][ C3] freed 512-byte region [ffff88803fba1800, ffff88803fba1a00) [ 181.514679][ C3] [ 181.514684][ C3] The buggy address belongs to the physical page: [ 181.514693][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803fba3c00 pfn:0x3fba0 [ 181.514713][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 181.514729][ C3] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 181.514750][ C3] page_type: f5(slab) [ 181.514767][ C3] raw: 00fff00000000240 ffff88801c042c80 ffff88801c0407c8 ffffea0000acb510 [ 181.514784][ C3] raw: ffff88803fba3c00 000000000010000f 00000000f5000000 0000000000000000 [ 181.514803][ C3] head: 00fff00000000240 ffff88801c042c80 ffff88801c0407c8 ffffea0000acb510 [ 181.514819][ C3] head: ffff88803fba3c00 000000000010000f 00000000f5000000 0000000000000000 [ 181.514835][ C3] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 181.514851][ C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 181.514861][ C3] page dumped because: kasan: bad access detected [ 181.514871][ C3] page_owner tracks the page as allocated [ 181.514876][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5971, tgid 5971 (syz-executor), ts 59525253073 [ 181.514907][ C3] post_alloc_hook+0xfd/0x120 [ 181.514932][ C3] get_page_from_freelist+0x110d/0x35d0 [ 181.514950][ C3] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 181.514969][ C3] new_slab+0xa9/0x6e0 [ 181.514983][ C3] refill_objects+0xe3/0x410 [ 181.514999][ C3] __pcs_replace_empty_main+0x35e/0x650 [ 181.515027][ C3] __kmalloc_noprof+0x67c/0x840 [ 181.515047][ C3] fib6_info_alloc+0x40/0x160 [ 181.515067][ C3] ip6_route_info_create+0x14c/0xad0 [ 181.515087][ C3] ip6_route_add+0x4b/0x1d0 [ 181.515109][ C3] addrconf_add_mroute+0x1de/0x350 [ 181.515124][ C3] addrconf_add_dev+0x14e/0x1a0 [ 181.515141][ C3] inet6_addr_add+0xfc/0x9a0 [ 181.515158][ C3] inet6_rtm_newaddr+0x147a/0x1bb0 [ 181.515184][ C3] rtnetlink_rcv_msg+0x95e/0xe90 [ 181.515207][ C3] netlink_rcv_skb+0x159/0x420 [ 181.515225][ C3] page last free pid 5889 tgid 5889 ts 47399355610 stack trace: [ 181.515236][ C3] __free_frozen_pages+0x79f/0x10f0 [ 181.515257][ C3] qlist_free_all+0x47/0xf0 [ 181.515271][ C3] kasan_quarantine_reduce+0x1a0/0x1f0 [ 181.515287][ C3] __kasan_slab_alloc+0x69/0x90 [ 181.515306][ C3] kmem_cache_alloc_noprof+0x269/0x6a0 [ 181.515321][ C3] do_getname+0x35/0x390 [ 181.515343][ C3] __x64_sys_chdir+0xaa/0x280 [ 181.515361][ C3] do_syscall_64+0x123/0x790 [ 181.515374][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.515388][ C3] [ 181.515392][ C3] Memory state around the buggy address: [ 181.515400][ C3] ffff88803fba1700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 181.515411][ C3] ffff88803fba1780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 181.515421][ C3] >ffff88803fba1800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.515429][ C3] ^ [ 181.515437][ C3] ffff88803fba1880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.515448][ C3] ffff88803fba1900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.515457][ C3] ================================================================== [ 181.515466][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 183.165487][ C3] CPU: 3 UID: 0 PID: 5967 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 183.169389][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.183901][ C3] Call Trace: [ 183.185506][ C3] [ 183.210804][ C3] dump_stack_lvl+0x100/0x190 [ 183.220530][ C3] vpanic+0x553/0x970 [ 183.222552][ C3] ? __pfx_vpanic+0x10/0x10 [ 183.224256][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 183.226128][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 183.228211][ C3] panic+0xd1/0xe0 [ 183.239931][ C3] ? __pfx_panic+0x10/0x10 [ 183.242282][ C3] ? end_report.part.0+0x23/0x90 [ 183.244546][ C3] ? rcu_is_watching+0x13/0xc0 [ 183.265280][ C3] ? end_report.part.0+0x23/0x90 [ 183.268299][ C3] check_panic_on_warn.cold+0x19/0x34 [ 183.270840][ C3] end_report.part.0+0x3a/0x90 [ 183.273489][ C3] kasan_report.cold+0xe/0x18 [ 183.275988][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 183.281822][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 183.287600][ C3] __kasan_check_byte+0x36/0x50 [ 183.297569][ C3] lock_acquire+0x132/0x380 [ 183.302362][ C3] ? do_raw_spin_unlock+0x53/0x1e0 [ 183.311866][ C3] ? .slowpath+0x9/0x18 [ 183.324482][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 183.328257][ C3] ? p9_req_put+0xaf/0x250 [ 183.330769][ C3] p9_req_put+0xaf/0x250 [ 183.333148][ C3] req_done+0x1dc/0x2e0 [ 183.335447][ C3] ? __pfx_req_done+0x10/0x10 [ 183.338050][ C3] ? __pfx_req_done+0x10/0x10 [ 183.340761][ C3] vring_interrupt+0x2ef/0x660 [ 183.346277][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 183.352513][ C3] __handle_irq_event_percpu+0x232/0x880 [ 183.359575][ C3] handle_irq_event+0xab/0x1e0 [ 183.363225][ C3] handle_edge_irq+0x34c/0x950 [ 183.373824][ C3] __common_interrupt+0xd8/0x2f0 [ 183.375726][ C3] common_interrupt+0x60/0xe0 [ 183.377733][ C3] asm_common_interrupt+0x26/0x40 [ 183.379822][ C3] RIP: 0010:unwind_next_frame+0x9a/0x2090 [ 183.381955][ C3] Code: 46 19 00 00 49 8b 45 48 48 89 44 24 08 49 8d 45 38 48 89 c2 48 89 04 24 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 <0f> 85 0c 19 00 00 49 8b 45 38 48 89 44 24 10 e8 12 2f 36 00 31 d2 [ 183.418435][ C3] RSP: 0018:ffffc90000708960 EFLAGS: 00000246 [ 183.420941][ C3] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffc90000708924 [ 183.424109][ C3] RDX: 1ffff920000e1141 RSI: ffffffff827f71ef RDI: ffffc900007089d0 [ 183.427013][ C3] RBP: ffffc90000708a18 R08: ffffffff91f77a98 R09: 0000000000000007 [ 183.429918][ C3] R10: 0000000000000200 R11: 0000000000017f9c R12: ffffffff81f5ff20 [ 183.434928][ C3] R13: ffffc900007089d0 R14: 0000000000000000 R15: ffff888030b7a580 [ 183.438314][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 183.440894][ C3] ? __kasan_slab_free+0x5f/0x80 [ 183.451182][ C3] ? __kasan_slab_free+0x5f/0x80 [ 183.464276][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 183.468083][ C3] arch_stack_walk+0x94/0xf0 [ 183.471057][ C3] ? __kasan_slab_free+0x5f/0x80 [ 183.474297][ C3] ? __put_task_struct+0x353/0x590 [ 183.483352][ C3] stack_trace_save+0x8e/0xc0 [ 183.487384][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 183.490697][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 183.496357][ C3] kasan_save_stack+0x30/0x50 [ 183.499326][ C3] ? kasan_save_stack+0x30/0x50 [ 183.501880][ C3] ? kasan_save_track+0x14/0x30 [ 183.505061][ C3] ? kasan_save_free_info+0x3b/0x70 [ 183.508308][ C3] ? __kasan_slab_free+0x5f/0x80 [ 183.512412][ C3] ? kmem_cache_free+0x127/0x6c0 [ 183.516646][ C3] ? __put_task_struct+0x353/0x590 [ 183.520209][ C3] ? rcu_core+0x5f0/0x1260 [ 183.523387][ C3] ? handle_softirqs+0x1e6/0x9d0 [ 183.526493][ C3] ? __irq_exit_rcu+0x16a/0x210 [ 183.529591][ C3] ? irq_exit_rcu+0x9/0x30 [ 183.532493][ C3] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 183.539030][ C3] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 183.545869][ C3] ? __orc_find+0x13/0xf0 [ 183.548707][ C3] ? unwind_next_frame+0x2ec/0x2090 [ 183.551782][ C3] ? arch_stack_walk+0x94/0xf0 [ 183.554494][ C3] ? stack_trace_save+0x8e/0xc0 [ 183.557314][ C3] ? kasan_save_stack+0x30/0x50 [ 183.559865][ C3] ? kasan_save_track+0x14/0x30 [ 183.562634][ C3] ? kasan_save_free_info+0x3b/0x70 [ 183.566450][ C3] ? __kasan_slab_free+0x5f/0x80 [ 183.570375][ C3] kasan_save_track+0x14/0x30 [ 183.573041][ C3] kasan_save_free_info+0x3b/0x70 [ 183.575829][ C3] __kasan_slab_free+0x5f/0x80 [ 183.578158][ C3] kmem_cache_free+0x127/0x6c0 [ 183.580376][ C3] ? key_put+0x62/0x2e0 [ 183.582192][ C3] ? rcu_core+0x5eb/0x1260 [ 183.584003][ C3] ? rcu_core+0x5eb/0x1260 [ 183.588024][ C3] __put_task_struct+0x353/0x590 [ 183.590518][ C3] ? rcu_core+0x5eb/0x1260 [ 183.592901][ C3] rcu_core+0x5f0/0x1260 [ 183.595029][ C3] ? __pfx_rcu_core+0x10/0x10 [ 183.597211][ C3] ? __pfx_sched_balance_domains+0x10/0x10 [ 183.600731][ C3] ? run_timer_base+0x121/0x190 [ 183.603827][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 183.615523][ C3] handle_softirqs+0x1e6/0x9d0 [ 183.617341][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 183.619524][ C3] ? _raw_spin_unlock+0x3e/0x50 [ 183.622051][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 183.636218][ C3] __irq_exit_rcu+0x16a/0x210 [ 183.638239][ C3] irq_exit_rcu+0x9/0x30 [ 183.640615][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 183.643388][ C3] [ 183.645773][ C3] [ 183.647242][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 183.649893][ C3] RIP: 0010:__orc_find+0x13/0xf0 [ 183.652006][ C3] Code: 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 49 89 cd 89 d1 41 54 4c 8d 64 8f fc 55 <53> 48 83 ec 08 85 d2 0f 84 99 00 00 00 49 89 fe 48 89 f0 49 39 fc [ 183.677662][ C3] RSP: 0018:ffffc900035d7710 EFLAGS: 00000206 [ 183.679638][ C3] RAX: ffffffff9229cb26 RBX: 0000000000000001 RCX: 0000000000000009 [ 183.682953][ C3] RDX: 0000000000000009 RSI: ffffffff9229cb26 RDI: ffffffff9189fc08 [ 183.686913][ C3] RBP: ffffc900035d77f8 R08: ffffffff9229cb5c R09: 0000000000000007 [ 183.712600][ C3] R10: 0000000000000200 R11: 0000000000046113 R12: ffffffff9189fc28 [ 183.715558][ C3] R13: ffffffff85611386 R14: ffffc900035d77e5 R15: ffffffff85611386 [ 183.718535][ C3] ? ref_tracker_free+0x376/0x6c0 [ 183.731368][ C3] ? ref_tracker_free+0x376/0x6c0 [ 183.734662][ C3] ? ref_tracker_free+0x376/0x6c0 [ 183.737165][ C3] unwind_next_frame+0x2ec/0x2090 [ 183.739477][ C3] ? ref_tracker_free+0x377/0x6c0 [ 183.745275][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 183.761830][ C3] arch_stack_walk+0x94/0xf0 [ 183.763825][ C3] ? ref_tracker_free+0x377/0x6c0 [ 183.765859][ C3] ? ref_tracker_free+0x377/0x6c0 [ 183.767939][ C3] stack_trace_save+0x8e/0xc0 [ 183.769937][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 183.772325][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 183.790062][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 183.792847][ C3] kasan_save_stack+0x30/0x50 [ 183.795860][ C3] ? kasan_save_stack+0x30/0x50 [ 183.799660][ C3] ? kasan_save_track+0x14/0x30 [ 183.803329][ C3] ? kasan_save_free_info+0x3b/0x70 [ 183.808075][ C3] ? __kasan_slab_free+0x5f/0x80 [ 183.812365][ C3] ? kfree+0x22b/0x6d0 [ 183.814414][ C3] ? ref_tracker_free+0x377/0x6c0 [ 183.816615][ C3] kasan_save_track+0x14/0x30 [ 183.824213][ C3] kasan_save_free_info+0x3b/0x70 [ 183.826463][ C3] __kasan_slab_free+0x5f/0x80 [ 183.828487][ C3] ? ref_tracker_free+0x2f0/0x6c0 [ 183.847093][ C3] kfree+0x22b/0x6d0 [ 183.849776][ C3] ref_tracker_free+0x377/0x6c0 [ 183.854663][ C3] ? __pfx_ref_tracker_free+0x10/0x10 [ 183.859047][ C3] ? __sk_destruct+0x493/0xab0 [ 183.866060][ C3] ? sk_destruct+0xc8/0xf0 [ 183.867857][ C3] ? __sk_free+0xf4/0x3e0 [ 183.869581][ C3] ? sk_free+0x61/0x90 [ 183.886870][ C3] ? tcp_close+0xc6/0x110 [ 183.890297][ C3] ? inet_release+0xed/0x200 [ 183.892333][ C3] ? __sock_release+0xb3/0x260 [ 183.894251][ C3] ? sock_close+0x1c/0x30 [ 183.896207][ C3] ? __fput+0x3ff/0xb50 [ 183.898256][ C3] ? fput_close_sync+0x118/0x250 [ 183.902408][ C3] ? __x64_sys_close+0x8b/0x120 [ 183.910352][ C3] ? do_syscall_64+0x123/0x790 [ 183.913286][ C3] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.916989][ C3] ? preempt_count_add+0x78/0x150 [ 183.927194][ C3] __sk_destruct+0x493/0xab0 [ 183.929021][ C3] sk_destruct+0xc8/0xf0 [ 183.930655][ C3] __sk_free+0xf4/0x3e0 [ 183.947815][ C3] sk_free+0x61/0x90 [ 183.950248][ C3] tcp_close+0xc6/0x110 [ 183.952221][ C3] inet_release+0xed/0x200 [ 183.954148][ C3] __sock_release+0xb3/0x260 [ 183.956829][ C3] ? __pfx_sock_close+0x10/0x10 [ 183.959918][ C3] sock_close+0x1c/0x30 [ 183.972936][ C3] __fput+0x3ff/0xb50 [ 183.977866][ C3] fput_close_sync+0x118/0x250 [ 183.980534][ C3] ? __pfx_fput_close_sync+0x10/0x10 [ 183.984001][ C3] __x64_sys_close+0x8b/0x120 [ 183.986057][ C3] do_syscall_64+0x123/0x790 [ 183.990182][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.004118][ C3] RIP: 0033:0x7f8d2ed5e98e [ 184.006122][ C3] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.026497][ C3] RSP: 002b:00007fff317639a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 184.030782][ C3] RAX: ffffffffffffffda RBX: 0000555565609500 RCX: 00007f8d2ed5e98e [ 184.042565][ C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 184.046706][ C3] RBP: 00007fff31763a4c R08: 0000000000000000 R09: 0000000000000000 [ 184.054447][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000291 [ 184.066241][ C3] R13: 00000000000927c0 R14: 000000000002a8f1 R15: 00007fff31763aa0 [ 184.072684][ C3] [ 184.087705][ C3] Kernel Offset: disabled [ 184.089823][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:46:22 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000004 RSI=ffffffff8e38df50 RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc90000147ca8 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=ffffffff8ea0f280 R13=ffffc90000147d10 R14=0000000000000001 R15=1ffff92000028f96 RIP=ffffffff81f0b2d7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff4a9ded158 CR3=00000000564eb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7372656c6c6f7274 6e6f632e70756f72 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf129aaa6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf129aaa6 00007ffcf129aaac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff4a9c3564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff4a9c3568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff4a9c357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff4a9c35680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90006680000 RBX=ffff88802acb4000 RCX=0000000001000202 RDX=1ffff11005596a84 RSI=ffffffff8706f10f RDI=0000000000000016 RBP=0000000000000003 RSP=ffffc900006b0ec0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88802ad1c87c R13=dffffc0000000000 R14=ffff88802acb5420 R15=0000000000000000 RIP=ffffffff8706f137 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f349ebbe300 ffffffff 00c00000 GS =0000 ffff8880d5c52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000200000001000 CR3=0000000037cbd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=235a8bdc69502e12 4198b03026cc5376 235a8bdc69502e12 4198b03026cc5376 235a8bdc69502e12 4198b03026cc5376 235a8bdc69502e12 4198b03026cc5376 ZMM18=d2ba4c757a0eb5fa 2e6a884a9c5ec2bf d2ba4c757a0eb5fa 2e6a884a9c5ec2bf d2ba4c757a0eb5fa 2e6a884a9c5ec2bf d2ba4c757a0eb5fa 2e6a884a9c5ec2bf ZMM19=7d10000000000000 0000000000000005 7d10000000000000 0000000000000004 7d10000000000000 0000000000000003 7d10000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 91cd796d3263f443 34d569b7e163e2a6 49827a3e48bf6185 c92138795e31da57 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 86a5f7592ef91790 0280080180030180 0406800306800407 a003280800079003 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01aad5aad5aad5af f9fb100014030604 0010030608000803 4804000003000407 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 91929e4612954810 590d93dc5df60d91 c5cbb7e1a229f927 0cdc22cec301bc5a ZMM25=06e7784106e77841 06e7784106e77841 06e7784106e77841 06e7784106e77841 06e7784106e77841 06e7784106e77841 06e7784106e77841 06e7784106e77841 ZMM26=d1deb185d1deb185 d1deb185d1deb185 d1deb185d1deb185 d1deb185d1deb185 d1deb185d1deb185 d1deb185d1deb185 d1deb185d1deb185 d1deb185d1deb185 ZMM27=133575a5133575a5 133575a5133575a5 133575a5133575a5 133575a5133575a5 133575a5133575a5 133575a5133575a5 133575a5133575a5 133575a5133575a5 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=d50b0000d50b0000 d50b0000d50b0000 d50b0000d50b0000 d50b0000d50b0000 d50b0000d50b0000 d50b0000d50b0000 d50b0000d50b0000 d50b0000d50b0000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffffff877b3ecf RCX=ffffc900026f761c RDX=1ffff920004deee2 RSI=ffffffff8e367a88 RDI=ffffffff877b3ecf RBP=ffffc900026f7710 RSP=ffffc900026f7688 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=00000000000897dc R12=ffffffff81f5ff20 R13=ffffc900026f7788 R14=0000000000000000 R15=ffff888023310000 RIP=ffffffff81d28abc RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4a1ed5da08 CR3=000000005ca6c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81769cc3 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff8e9947c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff8e9947c6 00007fff8e9947cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f091b43564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f091b43568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f091b4357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f091b435680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f091b5f2600 00007f091b5f25e0 00007f091b5f25e8 00007f091b5f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f091c15d020 00007f091b5f25c0 00007f091b5f25d0 00007f091b5f2610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f091b5f25f8 00007f091b5f25c8 00007f091b5f2600 00007f091b5f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b18b15 RDI=ffffffff9bc72f60 RBP=ffffffff9bc72f20 RSP=ffffc90000707d48 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6633303838386652 R12=0000000000000000 R13=0000000000000030 R14=0000000000000005 R15=ffffc90000708060 RIP=ffffffff85b18b3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555565609500 ffffffff 00c00000 GS =0000 ffff8880d5e52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8d2efed158 CR3=000000005669d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 327a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff31763b96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff31763b96 00007fff31763b9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d2ee3564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d2ee3568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d2ee357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d2ee35680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636e00644674754f 6b2065736f6c6320 6f742064656c6961 66007265746c6966 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000