last executing test programs: 1m58.970048885s ago: executing program 0 (id=2188): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2200}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x1}}}}]}, 0x38}}, 0x40) 1m58.91935369s ago: executing program 0 (id=2192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) 1m58.904521575s ago: executing program 0 (id=2196): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 1m58.869596285s ago: executing program 0 (id=2199): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) writev(r0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000040)="b845d9", 0x3}], 0x2) 1m58.83329801s ago: executing program 0 (id=2203): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 1m58.775921285s ago: executing program 0 (id=2207): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000004f80), 0x101002, 0x0) lseek(r0, 0x3, 0x1) 1m43.790530479s ago: executing program 32 (id=2207): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000004f80), 0x101002, 0x0) lseek(r0, 0x3, 0x1) 20.466496797s ago: executing program 3 (id=7561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000040000000000008100000001800018014000200776c616e30000000000000000000000008000c0003000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 20.413635091s ago: executing program 3 (id=7566): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x19, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x16, 0x301, 0x70bd25, 0x0, {0x7}}, 0x14}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 20.345470079s ago: executing program 3 (id=7571): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) lseek(r0, 0x0, 0x4) 20.269846244s ago: executing program 3 (id=7575): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40000000000007b, 0x4004) 20.205933912s ago: executing program 3 (id=7576): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 20.193509927s ago: executing program 3 (id=7580): r0 = getpid() r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, r1) 5.130681515s ago: executing program 33 (id=7580): r0 = getpid() r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, r1) 2.729495561s ago: executing program 1 (id=8183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000580)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x5, 0xb, 0x80, 0x6}, @mpls={[], @ipv6=@icmpv6={0x1, 0x6, "50638f", 0x60, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @remote, {[], @dest_unreach={0x1, 0x0, 0x0, 0x3, '\x00', {0x7, 0x6, "5900b2", 0x8, 0xc, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, [], "9aa5e9003ea70dd4fbf67e8b0ef51918f0d744035866537389a40425a61f6d9e1a27cc9b4f4f2fd4acb1551e76b50e73"}}}}}}, 0x96) 2.651020255s ago: executing program 1 (id=8186): unshare(0x600) r0 = timerfd_create(0x7, 0x800) sync_file_range(r0, 0xffffffffffff8000, 0x3a99, 0x4) 2.57379697s ago: executing program 1 (id=8187): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f00000001c0)=0x100, 0x4) 2.573478754s ago: executing program 1 (id=8189): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0xa11f, 0x100, 0x4, 0x1}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000100), 0xfffffd79) 2.5112792s ago: executing program 1 (id=8192): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000080)={0x8, 0x1, 0x8, 0x3, 0xe, "3eccd20005001800"}) 2.510754867s ago: executing program 1 (id=8196): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x20801, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 761.003949ms ago: executing program 5 (id=8270): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x6, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 760.510288ms ago: executing program 5 (id=8273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) capset(&(0x7f0000000180)={0x19980330}, &(0x7f00000001c0)={0x0, 0x4, 0x8d, 0xfffffffb, 0x9, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 690.834253ms ago: executing program 5 (id=8275): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000200)={[{@uid={'uid', 0x3d, 0xee00}}]}) 641.273944ms ago: executing program 5 (id=8278): syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000001300)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 428.692567ms ago: executing program 2 (id=8280): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) 428.400078ms ago: executing program 2 (id=8281): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20020800) recvmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}], 0x7, 0x10160, 0x0) 358.261517ms ago: executing program 2 (id=8283): io_uring_setup(0x7939, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x1, 0x215}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x40000000) 291.006959ms ago: executing program 2 (id=8285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 221.250668ms ago: executing program 4 (id=8286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETFILTEREBPF(r0, 0x400454ce, 0x0) 221.01886ms ago: executing program 2 (id=8287): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) prctl$PR_SET_PTRACER(0x59616d61, r0) 219.850901ms ago: executing program 2 (id=8294): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xb, 0x8, 0x7fc00002}]}) userfaultfd(0x80801) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x40082104, 0x0) 112.84633ms ago: executing program 4 (id=8288): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) bind$can_raw(r0, &(0x7f0000000080), 0x10) 112.570932ms ago: executing program 4 (id=8289): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x4f27, 0x5, 0x3, 0x4, 0x5, 0xfffffbfd, 0xf, 0x4, 0xa, 0xfffffffc, 0x2, 0x1, 0xfffffffe, 0x8, 0x2, 0x101, 0x4, 0x1a449, 0x3, 0x352f, 0x99, 0x86, 0x0, 0x20001e58, 0x7, 0xe67, 0x3c, 0x8, 0xfffffffe, 0x0, 0xfffffff8]}) 112.300331ms ago: executing program 5 (id=8290): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)={0x19}) 72.823292ms ago: executing program 4 (id=8291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) 293.725µs ago: executing program 4 (id=8292): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) 78.229µs ago: executing program 5 (id=8293): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='ntfs3\x00', 0x8000, 0x0) 0s ago: executing program 4 (id=8295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf250500000008000300f3"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): t(1753755219.471:670): avc: denied { read write } for pid=15133 comm="syz.1.4393" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 116.211146][T15159] netlink: 'syz.1.4405': attribute type 1 has an invalid length. [ 116.282035][T15171] xt_l2tp: v2 doesn't support IP mode [ 116.301764][T15176] netlink: 'syz.3.4412': attribute type 2 has an invalid length. [ 116.326334][ C2] ata1: illegal qc_active transition (00000000->00000020) [ 116.645595][ T1111] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 116.650423][ T1111] ata1.00: configured for UDMA/100 [ 116.861546][T15245] block nbd2: NBD_DISCONNECT [ 116.925456][T15257] IPv6: NLM_F_CREATE should be specified when creating new route [ 116.975472][T15263] : entered promiscuous mode [ 117.019836][T15271] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 117.025794][T15271] Error validating options; rc = [-22] [ 117.062787][T15279] Cannot find add_set index 0 as target [ 117.179989][T15300] delete_channel: no stack [ 117.218504][T15311] IPv6: NLM_F_CREATE should be specified when creating new route [ 117.353220][T15333] 9pnet_fd: p9_fd_create_tcp (15333): problem binding to privport [ 117.516084][T15365] xt_TPROXY: Can be used only with -p tcp or -p udp [ 117.569829][T15369] kernel read not supported for file /policy (pid: 15369 comm: syz.3.4508) [ 117.612182][T15379] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.615103][T15382] tmpfs: Bad value for 'mpol' [ 117.619778][T15383] trusted_key: encrypted_key: master key parameter '' is invalid [ 117.691161][T15397] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 117.693857][T15397] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 117.698884][T15397] vhci_hcd vhci_hcd.0: Device attached [ 117.710265][T15397] vhci_hcd vhci_hcd.0: port 0 already used [ 117.714108][T15398] vhci_hcd: connection closed [ 117.715564][ T46] vhci_hcd: stop threads [ 117.720063][ T46] vhci_hcd: release socket [ 117.722299][ T46] vhci_hcd: disconnect device [ 117.891344][T15421] xt_nat: multiple ranges no longer supported [ 117.904404][ T837] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 118.055469][ T837] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 118.055499][ T837] usb 6-1: config 0 interface 0 has no altsetting 0 [ 118.058038][ T837] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 118.069362][ T837] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 118.069383][ T837] usb 6-1: Product: syz [ 118.069393][ T837] usb 6-1: Manufacturer: syz [ 118.069403][ T837] usb 6-1: SerialNumber: syz [ 118.071323][ T837] usb 6-1: config 0 descriptor?? [ 118.106575][ T837] usb 6-1: selecting invalid altsetting 0 [ 118.152533][T15441] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 118.309757][ T6298] usb 6-1: USB disconnect, device number 7 [ 118.428746][T15472] Process accounting resumed [ 118.549742][T15493] validate_nla: 2 callbacks suppressed [ 118.549759][T15493] netlink: 'syz.3.4568': attribute type 2 has an invalid length. [ 118.625974][T15505] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 118.818341][T15531] wireguard0: entered promiscuous mode [ 118.820211][T15531] wireguard0: entered allmulticast mode [ 119.005451][T15566] 9pnet: Found fid 0 not clunked [ 119.083787][T15579] netlink: 'syz.4.4609': attribute type 1 has an invalid length. [ 119.105313][T15584] tmpfs: Bad value for 'mpol' [ 119.117321][T15586] netlink: 'syz.4.4614': attribute type 23 has an invalid length. [ 119.118594][T15588] netlink: 'syz.2.4613': attribute type 8 has an invalid length. [ 119.178405][T15591] usb usb4: usbfs: interface 0 claimed by hub while 'syz.3.4616' sets config #1 [ 119.213716][T15604] netlink: 'syz.3.4622': attribute type 9 has an invalid length. [ 119.289051][T15615] xt_cluster: node mask cannot exceed total number of nodes [ 119.302725][T15618] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 119.349703][T15624] xt_hashlimit: invalid rate [ 119.395540][T15628] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 119.398237][T15628] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 119.401425][T15628] vhci_hcd vhci_hcd.0: Device attached [ 119.408639][T15629] vhci_hcd: cannot find the pending unlink 1023 [ 119.411155][T15629] vhci_hcd: connection closed [ 119.411590][ T1175] vhci_hcd: stop threads [ 119.416016][ T1175] vhci_hcd: release socket [ 119.416037][ T1175] vhci_hcd: disconnect device [ 119.441598][T15632] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 119.559766][T15646] comedi comedi2: dac02: I/O port conflict (0xb,8) [ 119.603473][T15652] kAFS: unable to lookup cell '/,cL' [ 119.607987][T15651] mkiss: ax0: crc mode is auto. [ 119.883840][T15669] tipc: Trying to set illegal importance in message [ 120.044820][T15682] IPv6: sit1: Disabled Multicast RS [ 120.097630][T15689] syz.2.4663: attempt to access beyond end of device [ 120.097630][T15689] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 120.103490][T15689] gfs2: error -5 reading superblock [ 120.238606][T15707] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 120.298540][T15715] syz.4.4676: attempt to access beyond end of device [ 120.298540][T15715] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 120.308493][T15715] XFS (nbd4): SB validate failed with error -5. [ 120.331449][T15726] netlink: 'syz.2.4679': attribute type 2 has an invalid length. [ 120.336792][T15726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.467072][T15744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.587971][T15764] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 120.745747][T15788] openvswitch: netlink: IP tunnel dst address not specified [ 120.875008][T15808] xt_l2tp: v2 tid > 0xffff: 150994944 [ 120.939756][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 120.939773][ T40] audit: type=1400 audit(1753755224.361:693): avc: denied { write } for pid=15817 comm="syz.1.4725" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 120.952003][ T40] audit: type=1400 audit(1753755224.361:694): avc: denied { ioctl } for pid=15817 comm="syz.1.4725" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 120.990784][ T40] audit: type=1400 audit(1753755224.411:695): avc: denied { append } for pid=15825 comm="syz.1.4729" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.033952][T15832] sctp: [Deprecated]: syz.1.4732 (pid 15832) Use of int in maxseg socket option. [ 121.033952][T15832] Use struct sctp_assoc_value instead [ 121.152089][T15840] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 121.156788][T15840] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 121.160650][T15840] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 121.170164][T15840] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 121.174535][T15840] geneve3: entered promiscuous mode [ 121.176715][T15840] geneve3: entered allmulticast mode [ 121.248633][ T40] audit: type=1400 audit(1753755224.671:696): avc: denied { setopt } for pid=15848 comm="syz.1.4740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 121.616808][T15890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.084714][T15943] xt_cgroup: invalid path, errno=-2 [ 122.199266][ T40] audit: type=1400 audit(1753755225.621:697): avc: denied { getopt } for pid=15958 comm="syz.3.4795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 122.255672][ T40] audit: type=1326 audit(1753755225.681:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15968 comm="syz.2.4800" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd038e9a9 code=0x7ff00000 [ 122.265419][ T40] audit: type=1326 audit(1753755225.681:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15968 comm="syz.2.4800" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd038e9a9 code=0x7ff00000 [ 122.274690][ T40] audit: type=1326 audit(1753755225.681:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15968 comm="syz.2.4800" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd038e9a9 code=0x7ff00000 [ 122.282050][ T40] audit: type=1326 audit(1753755225.681:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15968 comm="syz.2.4800" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd038e9a9 code=0x7ff00000 [ 122.295832][ T40] audit: type=1326 audit(1753755225.681:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15968 comm="syz.2.4800" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd038e9a9 code=0x7ff00000 [ 122.311559][T15975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.371778][T15981] netlink: 'syz.4.4806': attribute type 12 has an invalid length. [ 122.505756][T15993] x_tables: ip6_tables: TCPOPTSTRIP.0 target: invalid size 32 (kernel) != (user) 22 [ 122.572007][T16000] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 122.574674][T16000] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 122.589413][T16000] vhci_hcd vhci_hcd.0: Device attached [ 122.792095][T16020] __nla_validate_parse: 17 callbacks suppressed [ 122.792113][T16020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4823'. [ 122.832834][ T6163] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 122.846823][T16022] tmpfs: Bad value for 'huge' [ 123.130857][T16040] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4834'. [ 123.350912][T16001] vhci_hcd: connection reset by peer [ 123.355774][ T1150] vhci_hcd: stop threads [ 123.357487][ T1150] vhci_hcd: release socket [ 123.370613][ T1150] vhci_hcd: disconnect device [ 123.461051][T16066] openvswitch: netlink: Flow actions attr not present in new flow. [ 123.697183][T16082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4855'. [ 123.699418][T16084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.012913][T16108] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4868'. [ 124.089375][T16117] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.092966][T16117] IPv6: NLM_F_REPLACE set, but no existing node found! [ 124.508491][T16161] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4895'. [ 124.601741][T16172] netlink: 'syz.1.4899': attribute type 11 has an invalid length. [ 124.604397][T16172] netlink: 'syz.1.4899': attribute type 10 has an invalid length. [ 124.606747][T16172] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4899'. [ 124.690623][T16183] netlink: 'syz.1.4904': attribute type 10 has an invalid length. [ 124.713224][T16183] veth0_vlan: left promiscuous mode [ 124.727465][T16183] veth0_vlan: entered promiscuous mode [ 124.731662][T16183] team0: Device veth0_vlan failed to register rx_handler [ 124.960436][T16205] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 125.019839][T16215] netlink: 'syz.1.4919': attribute type 2 has an invalid length. [ 125.165270][T16230] Cannot find del_set index 128 as target [ 125.232329][T16236] netlink: 'syz.4.4930': attribute type 1 has an invalid length. [ 125.237025][T16236] netlink: 'syz.4.4930': attribute type 3 has an invalid length. [ 125.240036][T16236] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4930'. [ 125.244066][T16236] NCSI netlink: No device for ifindex 0 [ 125.331551][T16252] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 125.334355][T16252] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 125.368183][T16257] netlink: 'syz.3.4940': attribute type 1 has an invalid length. [ 125.370732][T16257] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4940'. [ 125.413913][T16268] BIDI support in bsg has been removed. [ 125.466233][T16278] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 125.472465][T16282] syz.4.4952: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 125.499529][T16285] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 125.510897][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.514878][T16282] ,cpuset= [ 125.516244][T16285] SELinux: failed to load policy [ 125.520479][T16282] /,mems_allowed=0-1 [ 125.529853][T16282] CPU: 0 UID: 0 PID: 16282 Comm: syz.4.4952 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 125.529880][T16282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.529891][T16282] Call Trace: [ 125.529899][T16282] [ 125.529906][T16282] dump_stack_lvl+0x16c/0x1f0 [ 125.529934][T16282] warn_alloc+0x248/0x3a0 [ 125.529963][T16282] ? __pfx_warn_alloc+0x10/0x10 [ 125.529997][T16282] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 125.530018][T16282] ? stack_depot_save_flags+0x3e0/0xa40 [ 125.530046][T16282] ? kasan_save_stack+0x42/0x60 [ 125.530061][T16282] ? kasan_save_stack+0x33/0x60 [ 125.530076][T16282] ? kasan_save_track+0x14/0x30 [ 125.530091][T16282] ? xskq_create+0x52/0x1d0 [ 125.530109][T16282] ? xsk_setsockopt+0x640/0x840 [ 125.530124][T16282] ? do_sock_setsockopt+0xf3/0x1d0 [ 125.530153][T16282] ? xskq_create+0xfb/0x1d0 [ 125.530173][T16282] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 125.530207][T16282] ? xskq_create+0xfb/0x1d0 [ 125.530234][T16282] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 125.530269][T16282] ? xskq_create+0xfb/0x1d0 [ 125.530288][T16282] vmalloc_user_noprof+0x9e/0xe0 [ 125.530314][T16282] ? xskq_create+0xfb/0x1d0 [ 125.530334][T16282] xskq_create+0xfb/0x1d0 [ 125.530355][T16282] xsk_setsockopt+0x640/0x840 [ 125.530375][T16282] ? __pfx_xsk_setsockopt+0x10/0x10 [ 125.530393][T16282] ? find_held_lock+0x2b/0x80 [ 125.530423][T16282] ? selinux_socket_setsockopt+0x6a/0x80 [ 125.530454][T16282] ? __pfx_xsk_setsockopt+0x10/0x10 [ 125.530472][T16282] do_sock_setsockopt+0xf3/0x1d0 [ 125.530503][T16282] __sys_setsockopt+0x1a0/0x230 [ 125.530531][T16282] __x64_sys_setsockopt+0xbd/0x160 [ 125.530552][T16282] ? do_syscall_64+0x91/0x4c0 [ 125.530574][T16282] ? lockdep_hardirqs_on+0x7c/0x110 [ 125.530596][T16282] do_syscall_64+0xcd/0x4c0 [ 125.530621][T16282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.530640][T16282] RIP: 0033:0x7fafe378e9a9 [ 125.530657][T16282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.530674][T16282] RSP: 002b:00007fafe46b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 125.530692][T16282] RAX: ffffffffffffffda RBX: 00007fafe39b5fa0 RCX: 00007fafe378e9a9 [ 125.530706][T16282] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 125.530718][T16282] RBP: 00007fafe3810d69 R08: 0000000000000004 R09: 0000000000000000 [ 125.530727][T16282] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.530738][T16282] R13: 0000000000000000 R14: 00007fafe39b5fa0 R15: 00007fffa484e628 [ 125.530763][T16282] [ 125.530769][T16282] Mem-Info: [ 125.641108][T16282] active_anon:9759 inactive_anon:0 isolated_anon:0 [ 125.641108][T16282] active_file:5062 inactive_file:22473 isolated_file:0 [ 125.641108][T16282] unevictable:1768 dirty:470 writeback:0 [ 125.641108][T16282] slab_reclaimable:7025 slab_unreclaimable:85830 [ 125.641108][T16282] mapped:24651 shmem:2408 pagetables:1763 [ 125.641108][T16282] sec_pagetables:309 bounce:0 [ 125.641108][T16282] kernel_misc_reclaimable:0 [ 125.641108][T16282] free:454647 free_pcp:23675 free_cma:0 [ 125.660632][T16282] Node 0 active_anon:38952kB inactive_anon:0kB active_file:20192kB inactive_file:89620kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98600kB dirty:1876kB writeback:0kB shmem:6096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13200kB pagetables:6564kB sec_pagetables:1240kB all_unreclaimable? no Balloon:0kB [ 125.676640][T16282] Node 1 active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:272kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 125.692401][T16282] Node 0 DMA free:11096kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:124kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 125.705801][T16282] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 125.708241][T16282] Node 0 DMA32 free:294028kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38952kB inactive_anon:0kB active_file:20192kB inactive_file:89496kB unevictable:3536kB writepending:1876kB present:2080628kB managed:1263964kB mlocked:0kB bounce:0kB free_pcp:51676kB local_pcp:9036kB free_cma:0kB [ 125.721059][T16282] lowmem_reserve[]: 0 0 0 0 0 [ 125.723216][T16282] Node 1 Normal free:1515600kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:272kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:44328kB local_pcp:12364kB free_cma:0kB [ 125.735993][T16282] lowmem_reserve[]: 0 0 0 0 0 [ 125.738113][T16282] Node 0 DMA: 8*4kB (UM) 7*8kB (U) 8*16kB (U) 8*32kB (U) 6*64kB (U) 8*128kB (UM) 6*256kB (UM) 5*512kB (UM) 5*1024kB (UM) 0*2048kB 0*4096kB = 11096kB [ 125.744806][T16282] Node 0 DMA32: 1315*4kB (UME) 972*8kB (UME) 380*16kB (UME) 469*32kB (UM) 766*64kB (UME) 465*128kB (UME) 242*256kB (UME) 111*512kB (UME) 34*1024kB (UM) 0*2048kB 0*4096kB = 296268kB [ 125.747642][T16313] CIFS mount error: No usable UNC path provided in device string! [ 125.747642][T16313] [ 125.752356][T16282] Node 1 Normal: 205*4kB (UME) 224*8kB (UME) 222*16kB (UME) 287*32kB (UME) 180*64kB (UME) 160*128kB (UME) 137*256kB (UME) 126*512kB (UME) 103*1024kB (UM) 6*2048kB (UM) 306*4096kB (M) = 1518068kB [ 125.759724][T16313] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 125.765602][T16282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 125.765623][T16282] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 125.765637][T16282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 125.765650][T16282] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 125.765663][T16282] 29940 total pagecache pages [ 125.787212][T16282] 0 pages in swap cache [ 125.788988][T16282] Free swap = 124996kB [ 125.790748][T16282] Total swap = 124996kB [ 125.792471][T16282] 1048443 pages RAM [ 125.794200][T16282] 0 pages HighMem/MovableOnly [ 125.796203][T16282] 283123 pages reserved [ 125.798069][T16282] 0 pages cma reserved [ 125.899537][T16335] [U] zͻi[27| [ 125.901372][T16335] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 125.906155][T16335] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 125.909018][T16335] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 125.922050][T16335] [U] 8)X)YvxRĻbmbN@ox;JD, [ 125.924303][T16335] [U] *Cn3v7KEXgt_3 [ 125.925972][T16335] [U] D/QazҬEHgE1$_ks=R@ [ 125.928011][T16335] [U] ϼcEv @ [ 125.929315][T16335] [U] a% [ 125.930367][T16335] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 125.936284][T16335] [U] f1p3 [ 125.937386][T16335] [U] N0[L;a_l&kMC [ 125.938973][T16335] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 125.944687][T16334] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4 audit_backlog_limit=64 [ 146.254636][ T40] audit: type=1326 audit(1753755249.642:41086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18752 comm="syz.4.6146" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe378e9a9 code=0x50000 [ 146.264937][T18822] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 146.264952][T18822] audit: backlog limit exceeded [ 146.273494][T18822] audit: audit_backlog=65 > audit_backlog_limit=64 [ 146.275661][T18822] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 146.277170][ T40] audit: type=1326 audit(1753755249.642:41087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18752 comm="syz.4.6146" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafe378e9a9 code=0x50000 [ 146.463884][T18840] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6187'. [ 146.523458][T18847] netlink: 57 bytes leftover after parsing attributes in process `syz.2.6188'. [ 146.579022][T18852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6191'. [ 146.583250][T18852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6191'. [ 146.994184][T18902] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 147.162448][T18917] netlink: 'syz.2.6218': attribute type 25 has an invalid length. [ 147.352287][T18941] netlink: 'syz.1.6225': attribute type 2 has an invalid length. [ 147.356373][T18941] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6225'. [ 147.816260][T18985] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 147.874203][T18990] netlink: 'syz.1.6249': attribute type 3 has an invalid length. [ 147.877635][T18990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6249'. [ 148.904393][T19069] ksmbd: Unknown IPC event: 1, ignore. [ 148.911236][T19071] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 149.044410][T19089] netlink: 'syz.4.6293': attribute type 5 has an invalid length. [ 149.053859][T19089] ip6erspan1: entered promiscuous mode [ 149.085761][T19095] libceph: resolve ' [ 149.085761][T19095] -&fYǝa2i [ 149.085761][T19095] .?&*&' (ret=-3): failed [ 149.426131][T19144] ip6t_REJECT: ECHOREPLY is not supported [ 149.452264][T19148] set match dimension is over the limit! [ 149.663977][T19178] openvswitch: netlink: Missing valid actions attribute. [ 149.667086][T19178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.680202][T19180] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.770283][T19191] netlink: 'syz.1.6342': attribute type 20 has an invalid length. [ 149.815050][T19198] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 149.862302][T19206] netlink: 'syz.3.6350': attribute type 21 has an invalid length. [ 149.865517][T19206] netlink: 'syz.3.6350': attribute type 6 has an invalid length. [ 149.868676][T19206] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6350'. [ 149.903157][T19208] [U] [ 149.904104][T19208] [U] [ 149.905027][T19208] [U] [ 149.905942][T19208] [U] [ 149.906909][T19208] [U] [ 149.907870][T19208] [U] [ 149.908800][T19208] [U] [ 149.909713][T19208] [U] [ 149.910688][T19208] [U] [ 149.911604][T19208] [U] [ 149.912542][T19208] [U] [ 149.913406][T19208] [U] [ 149.914774][T19208] [U] [ 149.915719][T19208] [U] [ 149.916686][T19208] [U] [ 149.917676][T19208] [U] [ 149.930373][T19207] [U] [ 150.187742][T19245] NILFS (nullb0): couldn't find nilfs on the device [ 150.247986][T19252] sctp: [Deprecated]: syz.1.6372 (pid 19252) Use of int in maxseg socket option. [ 150.247986][T19252] Use struct sctp_assoc_value instead [ 150.293503][T19258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6376'. [ 150.309255][T19259] block device autoloading is deprecated and will be removed. [ 150.701886][T19307] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 150.705071][T19307] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 150.878991][T19340] NILFS (nbd4): device size too small [ 151.101317][ T6189] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 151.126860][T19356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6423'. [ 151.130637][T19356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6423'. [ 151.228955][T19362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6426'. [ 151.232768][T19362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6426'. [ 151.269547][T19366] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6428'. [ 151.275534][ T6189] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 151.279004][ T6189] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 151.283727][ T6189] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 151.287319][ T6189] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 151.291081][ T6189] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 151.295244][ T6189] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 151.299501][ T6189] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 151.308373][ T6189] usb 7-1: string descriptor 0 read error: -22 [ 151.310489][ T6189] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 151.320577][ T6189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.326808][ T6189] usb 7-1: config 0 descriptor?? [ 151.329783][T19334] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 151.335311][ T6189] hub 7-1:0.0: bad descriptor, ignoring hub [ 151.337561][ T6189] hub 7-1:0.0: probe with driver hub failed with error -5 [ 151.348967][ T6189] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input19 [ 151.363893][ T40] kauditd_printk_skb: 13448 callbacks suppressed [ 151.363909][ T40] audit: type=1400 audit(1753755254.783:54535): avc: denied { read } for pid=5345 comm="acpid" name="mouse2" dev="devtmpfs" ino=2990 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.391299][ T40] audit: type=1400 audit(1753755254.783:54536): avc: denied { open } for pid=5345 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2990 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.411395][ T40] audit: type=1400 audit(1753755254.793:54537): avc: denied { ioctl } for pid=5345 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2990 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.423281][ T40] audit: type=1400 audit(1753755254.853:54538): avc: denied { read write } for pid=6194 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 151.441325][ T40] audit: type=1400 audit(1753755254.853:54539): avc: denied { open } for pid=6194 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 151.451633][ T40] audit: type=1400 audit(1753755254.853:54540): avc: denied { ioctl } for pid=6194 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 151.549236][ T40] audit: type=1400 audit(1753755254.973:54541): avc: denied { read append } for pid=19333 comm="syz.2.6413" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 151.561317][ T40] audit: type=1400 audit(1753755254.973:54542): avc: denied { ioctl open } for pid=19333 comm="syz.2.6413" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 151.575950][ T40] audit: type=1400 audit(1753755255.003:54543): avc: denied { create } for pid=19377 comm="syz.1.6434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.585424][T19378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6433'. [ 151.590299][ T40] audit: type=1400 audit(1753755255.003:54544): avc: denied { write } for pid=19377 comm="syz.1.6434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.808358][T19394] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.823877][ C1] usb_acecad 7-1:0.0: can't resubmit intr, dummy_hcd.2-1/input0, status -1 [ 151.849136][T19396] dummy0: entered promiscuous mode [ 151.915506][ T837] usb 7-1: USB disconnect, device number 7 [ 152.235580][T19432] usb usb4: usbfs: process 19432 (syz.4.6460) did not claim interface 0 before use [ 152.510496][T19468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6477'. [ 152.578391][T19480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6484'. [ 152.603457][T19483] IPVS: length: 184 != 24 [ 152.783495][T19512] SELinux: policydb version 1402900228 does not match my version range 15-34 [ 152.787844][T19512] SELinux: failed to load policy [ 152.797272][T19515] netlink: 'syz.1.6501': attribute type 12 has an invalid length. [ 152.933139][T19539] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 152.963910][ T837] IPVS: starting estimator thread 0... [ 153.002092][T19550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.061168][T19545] IPVS: using max 29 ests per chain, 69600 per kthread [ 153.076674][T19566] xt_time: unknown flags 0xb4 [ 153.192617][T19588] netlink: 'syz.1.6537': attribute type 2 has an invalid length. [ 153.195845][T19588] netlink: 'syz.1.6537': attribute type 1 has an invalid length. [ 153.330198][T19604] IPv6: Can't replace route, no match found [ 153.343043][T19606] program syz.1.6546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.880032][T19689] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 154.312833][T19745] ip6t_srh: unknown srh match flags 4000 [ 154.332124][ T1466] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 154.483154][ T1466] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 154.487617][ T1466] usb 8-1: config 0 interface 0 has no altsetting 0 [ 154.492959][ T1466] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 154.496705][ T1466] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 154.500028][ T1466] usb 8-1: Product: syz [ 154.502429][ T1466] usb 8-1: Manufacturer: syz [ 154.504823][ T1466] usb 8-1: SerialNumber: syz [ 154.509880][ T1466] usb 8-1: config 0 descriptor?? [ 154.518307][ T1466] usb 8-1: selecting invalid altsetting 0 [ 154.659297][T19778] tmpfs: Bad value for 'mpol' [ 154.731608][ T61] usb 8-1: USB disconnect, device number 3 [ 155.023397][T19810] netlink: 'syz.1.6640': attribute type 1 has an invalid length. [ 155.026838][T19810] __nla_validate_parse: 9 callbacks suppressed [ 155.026851][T19810] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6640'. [ 155.074975][T19816] openvswitch: netlink: IP tunnel dst address not specified [ 155.332634][T19836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6650'. [ 155.628735][T19875] netlink: 'syz.1.6668': attribute type 21 has an invalid length. [ 155.632881][T19875] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6668'. [ 155.636649][T19875] netlink: 'syz.1.6668': attribute type 6 has an invalid length. [ 155.639836][T19875] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6668'. [ 155.680133][T19880] Cannot find add_set index 3 as target [ 155.919539][T19913] SELinux: policydb string does not match my string SE Linux [ 155.926459][T19913] SELinux: failed to load policy [ 156.006139][T19923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6690'. [ 156.167484][T19940] XFS (nbd3): no-recovery mounts must be read-only. [ 156.213286][T19945] random: crng reseeded on system resumption [ 156.384224][ T40] kauditd_printk_skb: 178 callbacks suppressed [ 156.384269][ T40] audit: type=1400 audit(1753755259.813:54723): avc: denied { prog_load } for pid=19966 comm="syz.1.6713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 156.400110][ T40] audit: type=1400 audit(1753755259.813:54724): avc: denied { bpf } for pid=19966 comm="syz.1.6713" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 156.410994][ T40] audit: type=1400 audit(1753755259.813:54725): avc: denied { perfmon } for pid=19966 comm="syz.1.6713" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 156.425564][T19973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6715'. [ 156.456463][T19977] netlink: 'syz.2.6719': attribute type 58 has an invalid length. [ 156.493135][ T40] audit: type=1400 audit(1753755259.923:54726): avc: denied { prog_run } for pid=19980 comm="syz.3.6720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 156.532721][ T40] audit: type=1400 audit(1753755259.963:54727): avc: denied { create } for pid=19986 comm="syz.2.6724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 156.540773][ T40] audit: type=1400 audit(1753755259.963:54728): avc: denied { ioctl } for pid=19986 comm="syz.2.6724" path="socket:[55004]" dev="sockfs" ino=55004 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 156.664213][ T40] audit: type=1400 audit(1753755260.093:54729): avc: denied { create } for pid=20005 comm="syz.2.6733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.670662][ T40] audit: type=1400 audit(1753755260.093:54730): avc: denied { ioctl } for pid=20005 comm="syz.2.6733" path="socket:[53233]" dev="sockfs" ino=53233 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.733293][ T40] audit: type=1400 audit(1753755260.163:54731): avc: denied { create } for pid=20014 comm="syz.1.6736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.740825][ T40] audit: type=1400 audit(1753755260.163:54732): avc: denied { write } for pid=20014 comm="syz.1.6736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.922822][T20041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6749'. [ 156.926630][T20041] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 157.001837][T20053] netlink: 129704 bytes leftover after parsing attributes in process `syz.2.6755'. [ 157.025641][T20055] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6756'. [ 157.391034][T20095] netlink: 'syz.1.6775': attribute type 21 has an invalid length. [ 157.570124][T20117] netlink: 'syz.2.6786': attribute type 10 has an invalid length. [ 157.730220][T20139] SET target dimension over the limit! [ 157.789495][T20147] netlink: 'syz.2.6800': attribute type 7 has an invalid length. [ 157.795558][T20147] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6800'. [ 157.842029][T20154] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 157.979375][T20168] netlink: 'syz.3.6810': attribute type 10 has an invalid length. [ 157.983131][T20168] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 157.986399][T20168] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 157.989886][T20168] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 158.111535][T20190] overlayfs: unescaped trailing colons in lowerdir mount option. [ 158.429784][T20238] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 158.676751][T20275] lo speed is unknown, defaulting to 1000 [ 158.680894][T20275] xfrm0 speed is unknown, defaulting to 1000 [ 158.686950][T20275] vxcan1 speed is unknown, defaulting to 1000 [ 158.782769][T20281] ata1.00: invalid multi_count 1 ignored [ 159.081904][T20298] netlink: 'syz.1.6873': attribute type 10 has an invalid length. [ 159.212531][T20310] CIFS mount error: No usable UNC path provided in device string! [ 159.212531][T20310] [ 159.216716][T20310] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 159.246680][T20312] ipt_REJECT: TCP_RESET invalid for non-tcp [ 159.365327][T20324] openvswitch: netlink: Unknown key attributes 2 [ 159.443378][T20332] netlink: 'syz.1.6891': attribute type 2 has an invalid length. [ 159.492544][T20337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.571043][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 159.574640][T20344] netlink: 'syz.3.6897': attribute type 3 has an invalid length. [ 159.578688][T20344] netlink: 'syz.3.6897': attribute type 1 has an invalid length. [ 159.834131][T20377] usb usb8: usbfs: process 20377 (syz.2.6913) did not claim interface 0 before use [ 159.871320][T20381] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20381 comm=syz.2.6916 [ 159.876621][T20381] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20381 comm=syz.2.6916 [ 160.009729][T20399] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 160.012493][T20399] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 160.018005][T20399] vhci_hcd vhci_hcd.0: Device attached [ 160.024492][T20400] vhci_hcd: unknown pdu 1 [ 160.027108][ T12] vhci_hcd: stop threads [ 160.029030][ T12] vhci_hcd: release socket [ 160.033540][ T12] vhci_hcd: disconnect device [ 160.194540][T20418] netlink: 'syz.1.6932': attribute type 4 has an invalid length. [ 160.597711][T20453] netlink: 'syz.3.6948': attribute type 1 has an invalid length. [ 160.600840][T20453] __nla_validate_parse: 12 callbacks suppressed [ 160.600853][T20453] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6948'. [ 160.611619][T20455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6949'. [ 160.614572][T20455] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6949'. [ 160.658884][T20461] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 160.701915][T20467] syz.4.6954: attempt to access beyond end of device [ 160.701915][T20467] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 160.706160][T20467] EXT4-fs (nbd4): unable to read superblock [ 160.713269][T20468] ALSA: mixer_oss: invalid OSS volume ';' [ 160.738084][T20473] netlink: 'syz.3.6958': attribute type 2 has an invalid length. [ 160.876182][T20500] raw_sendmsg: syz.1.6971 forgot to set AF_INET. Fix it! [ 160.914163][T20506] random: crng reseeded on system resumption [ 160.919983][T20507] PM: Enabling pm_trace changes system date and time during resume. [ 160.919983][T20507] PM: Correct system time has to be restored manually after resume. [ 160.958678][T20513] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 160.964796][T20513] bond0: (slave lo): Error: Device can not be enslaved while up [ 161.079689][T20534] lo speed is unknown, defaulting to 1000 [ 161.084287][T20534] xfrm0 speed is unknown, defaulting to 1000 [ 161.088448][T20534] vxcan1 speed is unknown, defaulting to 1000 [ 161.120470][T20543] program syz.1.6992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.376095][T20574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7007'. [ 161.379215][T20574] netlink: 31 bytes leftover after parsing attributes in process `syz.4.7007'. [ 161.383807][T20574] netlink: 'syz.4.7007': attribute type 3 has an invalid length. [ 161.386360][T20574] netlink: 'syz.4.7007': attribute type 2 has an invalid length. [ 161.389271][T20574] netlink: 31 bytes leftover after parsing attributes in process `syz.4.7007'. [ 161.435419][T20582] ipt_REJECT: ECHOREPLY no longer supported. [ 161.449582][T20584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7013'. [ 161.475738][ T40] kauditd_printk_skb: 133 callbacks suppressed [ 161.475755][ T40] audit: type=1400 audit(161.378:54866): avc: denied { mounton } for pid=20585 comm="syz.1.7014" path="/1782/file0" dev="tmpfs" ino=8972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 161.522789][ T40] audit: type=1400 audit(161.428:54867): avc: denied { read write } for pid=20589 comm="syz.4.7016" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 161.526312][T20592] autofs4:pid:20592:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 161.531186][ T40] audit: type=1400 audit(161.428:54868): avc: denied { open } for pid=20589 comm="syz.4.7016" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 161.531229][ T40] audit: type=1400 audit(161.428:54869): avc: denied { create } for pid=20588 comm="syz.2.7015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.554763][ T40] audit: type=1400 audit(161.428:54870): avc: denied { write } for pid=20588 comm="syz.2.7015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.562490][ T40] audit: type=1400 audit(161.428:54871): avc: denied { ioctl } for pid=20589 comm="syz.4.7016" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 161.601463][ T40] audit: type=1400 audit(161.508:54872): avc: denied { read } for pid=20599 comm="syz.1.7021" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 161.609470][ T40] audit: type=1400 audit(161.508:54873): avc: denied { open } for pid=20599 comm="syz.1.7021" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 161.629876][ T40] audit: type=1400 audit(161.518:54874): avc: denied { ioctl } for pid=20599 comm="syz.1.7021" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 161.643387][ T40] audit: type=1400 audit(161.548:54875): avc: denied { read } for pid=20603 comm="syz.4.7024" name="cec4" dev="devtmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.655587][T20610] syz.1.7026 (20610): /proc/20609/oom_adj is deprecated, please use /proc/20609/oom_score_adj instead. [ 161.750021][T20627] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7034'. [ 161.752952][T20627] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7034'. [ 161.792831][T20636] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7038'. [ 162.059259][ T2298] IPVS: starting estimator thread 0... [ 162.151890][T20684] IPVS: using max 26 ests per chain, 62400 per kthread [ 162.194014][T20706] ieee802154 phy1 wpan1: encryption failed: -22 [ 162.232610][T20711] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 162.323217][T20726] bridge7: entered promiscuous mode [ 162.325523][T20726] bridge7: entered allmulticast mode [ 162.742563][T20785] xt_l2tp: unknown flags: f1 [ 163.313661][T20860] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 163.451180][ T2298] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 163.602204][ T2298] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 163.605441][ T2298] usb 8-1: config 0 has no interface number 0 [ 163.607897][ T2298] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 163.616932][ T2298] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 163.623853][ T2298] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 163.627723][ T2298] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.643609][ T2298] usb 8-1: config 0 descriptor?? [ 163.659725][ T2298] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 163.859055][T20849] iowarrior 8-1:0.1: Error -90 while submitting URB [ 163.871582][ T2298] usb 8-1: USB disconnect, device number 4 [ 163.964142][T20951] usb usb5: usbfs: process 20951 (syz.2.7192) did not claim interface 0 before use [ 164.015322][T20959] IPv6: NLM_F_CREATE should be specified when creating new route [ 164.259300][T20995] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 164.307218][T21000] validate_nla: 5 callbacks suppressed [ 164.307235][T21000] netlink: 'syz.1.7217': attribute type 1 has an invalid length. [ 164.587016][T21040] /dev/sg0: Can't lookup blockdev [ 164.630800][T21050] netlink: 'syz.1.7240': attribute type 21 has an invalid length. [ 164.729631][T21067] syz.3.7249: attempt to access beyond end of device [ 164.729631][T21067] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 164.733986][T21067] XFS (nbd3): SB validate failed with error -5. [ 165.299019][T21156] lo speed is unknown, defaulting to 1000 [ 165.306251][T21156] xfrm0 speed is unknown, defaulting to 1000 [ 165.311431][T21156] vxcan1 speed is unknown, defaulting to 1000 [ 165.333144][T21163] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 165.350498][ T24] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 165.375220][ T1466] hid-generic 07FF:18000:0003.0002: item fetching failed at offset 0/4 [ 165.378271][ T1466] hid-generic 07FF:18000:0003.0002: probe with driver hid-generic failed with error -22 [ 165.401382][T21169] input: syz0 as /devices/virtual/input/input20 [ 165.462608][T21173] program syz.2.7298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.504104][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 165.508850][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 165.520800][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 165.525243][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 165.529371][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.537541][ T24] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 165.541699][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.544964][ T24] usb 8-1: Product: syz [ 165.546744][ T24] usb 8-1: Manufacturer: syz [ 165.548692][ T24] usb 8-1: SerialNumber: syz [ 165.556014][ T24] usb 8-1: config 0 descriptor?? [ 165.566725][ T24] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input21 [ 165.746818][T21196] macvlan2: entered promiscuous mode [ 165.749190][T21196] macvlan2: entered allmulticast mode [ 165.950648][ T3245] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 166.017321][T21206] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 166.051921][ T24] usb 8-1: USB disconnect, device number 5 [ 166.064097][T21208] mkiss: ax0: crc mode is auto. [ 166.110673][ T3245] usb 9-1: Using ep0 maxpacket: 8 [ 166.116617][ T3245] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 166.119124][ T3245] usb 9-1: config 179 has no interface number 0 [ 166.121214][ T3245] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 166.124259][ T3245] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 166.129970][ T3245] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 166.135838][ T3245] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 166.141877][ T3245] usb 9-1: config 179 interface 65 has no altsetting 0 [ 166.144808][ T3245] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 166.148624][ T3245] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.174142][ T3245] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input22 [ 166.246050][ T5345] input input22: unable to receive magic message: -110 [ 166.332346][ T5345] input input22: unable to receive magic message: -32 [ 166.363126][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 166.363130][ T2298] usb 9-1: USB disconnect, device number 3 [ 166.368968][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 166.596647][ T40] kauditd_printk_skb: 176 callbacks suppressed [ 166.596661][ T40] audit: type=1400 audit(166.492:55052): avc: denied { create } for pid=21232 comm="syz.3.7325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 166.611120][ T40] audit: type=1400 audit(166.512:55053): avc: denied { ioctl } for pid=21232 comm="syz.3.7325" path="socket:[60041]" dev="sockfs" ino=60041 ioctlcmd=0x8b23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 166.664499][ T40] audit: type=1400 audit(166.562:55054): avc: denied { write } for pid=21238 comm="syz.2.7328" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 166.673900][ T40] audit: type=1400 audit(166.562:55055): avc: denied { open } for pid=21238 comm="syz.2.7328" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 166.684462][ T40] audit: type=1400 audit(166.562:55056): avc: denied { ioctl } for pid=21238 comm="syz.2.7328" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 166.704680][ T40] audit: type=1400 audit(166.602:55057): avc: denied { ioctl } for pid=21240 comm="syz.3.7329" path="socket:[57137]" dev="sockfs" ino=57137 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.752189][T21243] mmap: syz.3.7330 (21243): VmData 37466112 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 167.009423][ T40] audit: type=1400 audit(166.902:55058): avc: denied { bind } for pid=21260 comm="syz.3.7339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 167.017676][ T40] audit: type=1400 audit(166.912:55059): avc: denied { write } for pid=21260 comm="syz.3.7339" path="socket:[58241]" dev="sockfs" ino=58241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 167.030537][ T40] audit: type=1400 audit(166.922:55060): avc: denied { allowed } for pid=21262 comm="syz.2.7340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 167.038441][ T40] audit: type=1400 audit(166.922:55061): avc: denied { create } for pid=21262 comm="syz.2.7340" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 167.119661][T21273] __nla_validate_parse: 9 callbacks suppressed [ 167.119675][T21273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7345'. [ 167.125206][T21273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7345'. [ 167.179101][T21279] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7348'. [ 167.248808][T21288] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7352'. [ 167.252789][T21288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7352'. [ 167.257120][T21288] tipc: MTU too low for tipc bearer [ 167.724327][T21336] IPVS: Unknown mcast interface: nicvf0 [ 168.009299][T21375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7394'. [ 168.013555][T21375] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 168.016211][T21375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.184988][T21401] random: crng reseeded on system resumption [ 168.263920][T21411] netlink: 'syz.1.7412': attribute type 1 has an invalid length. [ 168.267564][T21411] netlink: 216 bytes leftover after parsing attributes in process `syz.1.7412'. [ 168.587431][T21422] sp0: Synchronizing with TNC [ 168.972733][T21455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7431'. [ 168.976535][T21455] IPVS: Error joining to the multicast group [ 168.983700][T21457] sp0: Synchronizing with TNC [ 169.111801][T21467] [U] v3f"S/4:XTzWtlW= [ 169.114437][T21467] [U] J"e:" [ 169.178394][T21478] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 169.393966][T21499] ptrace attach of "/syz-executor exec"[21500] was attempted by "/syz-executor exec"[21499] [ 169.443149][T21506] atomic_op ffff88803a134998 conn xmit_atomic 0000000000000000 [ 169.467968][T21508] CIFS: Unable to determine destination address [ 169.495863][T21510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7456'. [ 169.499758][T21510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7456'. [ 169.987599][T21463] syz.4.7434: vmalloc error: size 283115520, failed to allocated page array size 552960, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 169.995346][T21463] CPU: 3 UID: 0 PID: 21463 Comm: syz.4.7434 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 169.995382][T21463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 169.995396][T21463] Call Trace: [ 169.995402][T21463] [ 169.995408][T21463] dump_stack_lvl+0x16c/0x1f0 [ 169.995434][T21463] warn_alloc+0x248/0x3a0 [ 169.995463][T21463] ? __pfx_warn_alloc+0x10/0x10 [ 169.995500][T21463] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 169.995527][T21463] ? __vmalloc_node_noprof+0xad/0xf0 [ 169.995554][T21463] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 169.995586][T21463] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 169.995618][T21463] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 169.995649][T21463] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 169.995676][T21463] vmalloc_user_noprof+0x9e/0xe0 [ 169.995699][T21463] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 169.995726][T21463] vb2_vmalloc_alloc+0x135/0x3f0 [ 169.995754][T21463] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 169.995781][T21463] __vb2_queue_alloc+0x8c9/0x1280 [ 169.995819][T21463] vb2_core_reqbufs+0xa90/0xfe0 [ 169.995850][T21463] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 169.995877][T21463] ? __pfx___mutex_trylock_common+0x10/0x10 [ 169.995900][T21463] ? rcu_is_watching+0x12/0xc0 [ 169.995923][T21463] ? trace_contention_end+0xdd/0x130 [ 169.995945][T21463] vb2_ioctl_reqbufs+0x291/0x450 [ 169.995971][T21463] ? __pfx_vb2_ioctl_reqbufs+0x10/0x10 [ 169.995993][T21463] ? __pfx___mutex_lock+0x10/0x10 [ 169.996017][T21463] ? kasan_quarantine_put+0x10a/0x240 [ 169.996047][T21463] vidioc_reqbufs+0x86/0x100 [ 169.996072][T21463] v4l_reqbufs+0x152/0x1e0 [ 169.996091][T21463] __video_do_ioctl+0xb3d/0xfc0 [ 169.996134][T21463] ? __might_fault+0xe3/0x190 [ 169.996150][T21463] ? __pfx___video_do_ioctl+0x10/0x10 [ 169.996179][T21463] video_usercopy+0x4cd/0x1720 [ 169.996202][T21463] ? __pfx___video_do_ioctl+0x10/0x10 [ 169.996221][T21463] ? selinux_kernel_read_file+0x70/0x130 [ 169.996239][T21463] ? __pfx_video_usercopy+0x10/0x10 [ 169.996277][T21463] v4l2_ioctl+0x1bd/0x250 [ 169.996295][T21463] ? __pfx_v4l2_ioctl+0x10/0x10 [ 169.996316][T21463] __x64_sys_ioctl+0x18b/0x210 [ 169.996342][T21463] do_syscall_64+0xcd/0x4c0 [ 169.996366][T21463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.996383][T21463] RIP: 0033:0x7fafe378e9a9 [ 169.996400][T21463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.996417][T21463] RSP: 002b:00007fafe46b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.996433][T21463] RAX: ffffffffffffffda RBX: 00007fafe39b5fa0 RCX: 00007fafe378e9a9 [ 169.996444][T21463] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 169.996454][T21463] RBP: 00007fafe3810d69 R08: 0000000000000000 R09: 0000000000000000 [ 169.996465][T21463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.996474][T21463] R13: 0000000000000000 R14: 00007fafe39b5fa0 R15: 00007fffa484e628 [ 169.996497][T21463] [ 169.996516][T21463] Mem-Info: [ 170.114469][T21463] active_anon:5006 inactive_anon:13767 isolated_anon:0 [ 170.114469][T21463] active_file:96 inactive_file:19206 isolated_file:0 [ 170.114469][T21463] unevictable:1772 dirty:267 writeback:0 [ 170.114469][T21463] slab_reclaimable:7368 slab_unreclaimable:85288 [ 170.114469][T21463] mapped:24718 shmem:11086 pagetables:1792 [ 170.114469][T21463] sec_pagetables:313 bounce:0 [ 170.114469][T21463] kernel_misc_reclaimable:0 [ 170.114469][T21463] free:375725 free_pcp:15517 free_cma:0 [ 170.132026][T21463] Node 0 active_anon:0kB inactive_anon:55068kB active_file:384kB inactive_file:76496kB unevictable:3552kB isolated(anon):0kB isolated(file):0kB mapped:98744kB dirty:1004kB writeback:0kB shmem:21108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13584kB pagetables:5904kB sec_pagetables:1252kB all_unreclaimable? no Balloon:0kB [ 170.144874][T21463] Node 1 active_anon:12112kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:128kB dirty:64kB writeback:0kB shmem:15300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:240kB pagetables:1264kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 170.157484][T21463] Node 0 DMA free:5976kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:40kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:220kB local_pcp:64kB free_cma:0kB [ 170.168665][T21463] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 170.171075][T21463] Node 0 DMA32 free:74724kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:45824kB active_file:384kB inactive_file:76496kB unevictable:3552kB writepending:1004kB present:2080628kB managed:1263964kB mlocked:16kB bounce:0kB free_pcp:29324kB local_pcp:27900kB free_cma:0kB [ 170.183283][T21463] lowmem_reserve[]: 0 0 0 0 0 [ 170.185227][T21463] Node 1 Normal free:1439476kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7076kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:3536kB writepending:64kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:38120kB local_pcp:12324kB free_cma:0kB [ 170.197377][T21463] lowmem_reserve[]: 0 0 0 0 0 [ 170.199303][T21463] Node 0 DMA: 9*4kB (UM) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (UM) 5*128kB (UM) 1*256kB (U) 1*512kB (U) 4*1024kB (UM) 0*2048kB 0*4096kB = 5988kB [ 170.205293][T21463] Node 0 DMA32: 680*4kB (UME) 363*8kB (UME) 158*16kB (UME) 135*32kB (UME) 112*64kB (UME) 76*128kB (UME) 66*256kB (UME) 40*512kB (UME) 8*1024kB (UM) 0*2048kB 0*4096kB = 74936kB [ 170.211671][T21463] Node 1 Normal: 3*4kB (E) 8*8kB (ME) 1*16kB (E) 11*32kB (UME) 11*64kB (ME) 6*128kB (E) 3*256kB (ME) 94*512kB (UE) 108*1024kB (U) 6*2048kB (U) 309*4096kB (UM) = 1439356kB [ 170.217694][T21463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 170.221258][T21463] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 170.224839][T21463] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 170.228697][T21463] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 170.232443][T21463] 21746 total pagecache pages [ 170.234324][T21463] 0 pages in swap cache [ 170.235976][T21463] Free swap = 124904kB [ 170.237641][T21463] Total swap = 124996kB [ 170.239312][T21463] 1048443 pages RAM [ 170.240955][T21463] 0 pages HighMem/MovableOnly [ 170.242816][T21463] 283123 pages reserved [ 170.244499][T21463] 0 pages cma reserved [ 170.478865][T21546] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 170.482840][T21546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.862728][T21582] block nbd2: not configured, cannot reconfigure [ 170.913107][T21585] Bluetooth: MGMT ver 1.23 [ 171.221526][T21614] hub 9-0:1.0: USB hub found [ 171.223793][T21614] hub 9-0:1.0: 1 port detected [ 171.510129][T21656] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 171.615898][T21670] openvswitch: netlink: nsh attr 0 has unexpected len 4 expected 0 [ 171.618412][T21670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.650935][ T40] kauditd_printk_skb: 146 callbacks suppressed [ 171.650950][ T40] audit: type=1400 audit(171.543:55208): avc: denied { mount } for pid=21673 comm="syz.3.7534" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 171.662181][ T40] audit: type=1400 audit(171.553:55209): avc: denied { remount } for pid=21673 comm="syz.3.7534" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 171.669502][ T40] audit: type=1400 audit(171.563:55210): avc: denied { unmount } for pid=6200 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 171.725814][ T40] audit: type=1400 audit(171.623:55211): avc: denied { shutdown } for pid=21677 comm="syz.3.7536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 171.917835][ T40] audit: type=1400 audit(171.813:55212): avc: denied { execmem } for pid=21685 comm="syz.2.7540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 171.960875][ T6306] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 171.977383][ T40] audit: type=1400 audit(171.873:55213): avc: denied { read open } for pid=21692 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.990826][ T40] audit: type=1400 audit(171.873:55214): avc: denied { getattr } for pid=21692 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.001478][ T40] audit: type=1400 audit(171.883:55215): avc: denied { add_name } for pid=21689 comm="dhcpcd-run-hook" name="resolv.conf.eth0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.010700][ T40] audit: type=1400 audit(171.883:55216): avc: denied { create } for pid=21689 comm="dhcpcd-run-hook" name="resolv.conf.eth0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 172.019742][ T40] audit: type=1400 audit(171.883:55217): avc: denied { write open } for pid=21689 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth0.link" dev="tmpfs" ino=10293 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.323099][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 179.323116][ T40] audit: type=1400 audit(179.223:55237): avc: denied { create } for pid=21728 comm="syz.1.7547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 179.335903][ T40] audit: type=1400 audit(179.233:55238): avc: denied { ioctl } for pid=21728 comm="syz.1.7547" path="socket:[60706]" dev="sockfs" ino=60706 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 179.336579][T21734] netlink: 'syz.3.7549': attribute type 15 has an invalid length. [ 179.348225][T21734] __nla_validate_parse: 4 callbacks suppressed [ 179.348235][T21734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7549'. [ 179.361612][ T40] audit: type=1400 audit(179.263:55239): avc: denied { create } for pid=21736 comm="syz.2.7551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 179.367223][T21737] macsec1: entered promiscuous mode [ 179.371905][T21737] macsec1: entered allmulticast mode [ 179.386710][ T40] audit: type=1400 audit(179.273:55240): avc: denied { bind } for pid=21736 comm="syz.2.7551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 179.434023][ T40] audit: type=1400 audit(179.333:55241): avc: denied { mounton } for pid=21744 comm="syz.4.7556" path="/1004/file1" dev="tmpfs" ino=5066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 179.441943][ T40] audit: type=1400 audit(179.333:55242): avc: denied { mount } for pid=21744 comm="syz.4.7556" name="/" dev="hugetlbfs" ino=62828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 179.450056][ T40] audit: type=1400 audit(179.333:55243): avc: denied { create } for pid=21746 comm="syz.3.7555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 179.456185][ T40] audit: type=1400 audit(179.333:55244): avc: denied { read } for pid=21746 comm="syz.3.7555" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 179.463743][ T40] audit: type=1400 audit(179.333:55245): avc: denied { open } for pid=21746 comm="syz.3.7555" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 179.474886][ T40] audit: type=1400 audit(179.333:55246): avc: denied { ioctl } for pid=21746 comm="syz.3.7555" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x460f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 180.378896][T21837] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7599'. [ 180.406383][T21839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7600'. [ 180.409166][T21839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7600'. [ 180.412175][T21841] SELinux: security policydb version 18 (MLS) not backwards compatible [ 180.415621][T21841] SELinux: failed to load policy [ 180.544073][T21853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7608'. [ 180.546070][T21855] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7607'. [ 180.977597][T21872] Zero length message leads to an empty skb [ 181.083506][T21884] overlayfs: workdir and upperdir must be separate subtrees [ 181.165449][T21894] 2g,{: renamed from lo (while UP) [ 181.579813][T21932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7645'. [ 181.723530][T21948] Bluetooth: MGMT ver 1.23 [ 181.964617][T21976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7665'. [ 182.015829][T21985] xt_hashlimit: size too large, truncated to 1048576 [ 182.207787][T22002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7675'. [ 182.786896][T22045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7690'. [ 183.316531][T22071] openvswitch: netlink: IPv6 tunnel dst address is zero [ 183.385028][T22075] sg_read: process 4123 (syz.2.7704) changed security contexts after opening file descriptor, this is not allowed. [ 183.716539][ T1466] Process accounting resumed [ 183.732947][T22103] Process accounting resumed [ 184.533274][ T40] kauditd_printk_skb: 187 callbacks suppressed [ 184.533286][ T40] audit: type=1400 audit(2000000005.039:55434): avc: denied { execmem } for pid=22037 comm="syz.1.7687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 184.596955][ T40] audit: type=1400 audit(2000000005.099:55435): avc: denied { bind } for pid=22149 comm="syz.2.7741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 184.642766][ T40] audit: type=1400 audit(2000000005.149:55436): avc: denied { create } for pid=22151 comm="syz.2.7742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.656095][ T40] audit: type=1400 audit(2000000005.149:55437): avc: denied { bind } for pid=22151 comm="syz.2.7742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.662217][ T40] audit: type=1400 audit(2000000005.159:55438): avc: denied { write } for pid=22151 comm="syz.2.7742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.678164][ T40] audit: type=1400 audit(2000000005.179:55439): avc: denied { append } for pid=22153 comm="syz.2.7743" name="comedi2" dev="devtmpfs" ino=1304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.825269][ T40] audit: type=1400 audit(2000000005.329:55440): avc: denied { setopt } for pid=22167 comm="syz.1.7750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.861862][ T40] audit: type=1400 audit(2000000005.369:55441): avc: denied { connect } for pid=22171 comm="syz.2.7752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.876009][ T40] audit: type=1400 audit(2000000005.369:55442): avc: denied { setopt } for pid=22171 comm="syz.2.7752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.946514][ T40] audit: type=1400 audit(2000000005.449:55443): avc: denied { ioctl } for pid=22183 comm="syz.2.7758" path="socket:[64007]" dev="sockfs" ino=64007 ioctlcmd=0x42c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.961441][ T6298] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 185.005485][T22190] nfs: Bad value for 'source' [ 185.122446][ T6298] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 185.125898][ T6298] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 185.128967][ T6298] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 185.133461][ T6298] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.140010][T22156] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 185.145953][ T6298] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 185.386444][ T6298] usb 9-1: USB disconnect, device number 4 [ 185.542195][T22231] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 185.973921][T22246] netlink: 'syz.1.7788': attribute type 1 has an invalid length. [ 185.976405][T22246] netlink: 220 bytes leftover after parsing attributes in process `syz.1.7788'. [ 185.979346][T22246] netlink: 'syz.1.7788': attribute type 1 has an invalid length. [ 186.098639][T22264] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7797'. [ 186.136220][ T61] hid-generic 0000:0004:0009.0003: unknown main item tag 0x0 [ 186.138764][ T61] hid-generic 0000:0004:0009.0003: unknown main item tag 0x0 [ 186.141505][ T61] hid-generic 0000:0004:0009.0003: unknown main item tag 0x0 [ 186.149001][ T61] hid-generic 0000:0004:0009.0003: hidraw1: HID v0.04 Device [syz0] on syz1 [ 186.232814][T22270] fido_id[22270]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 186.709378][T22309] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 186.865668][T22316] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 186.868242][T22316] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 186.872540][T22316] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 186.874983][T22316] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 186.984263][ T6298] libceph: connect (1)[c::]:6789 error -1 [ 186.986547][ T6298] libceph: mon0 (1)[c::]:6789 connect error [ 187.263723][ T6298] libceph: connect (1)[c::]:6789 error -1 [ 187.265765][ T6298] libceph: mon0 (1)[c::]:6789 connect error [ 187.772482][ T6298] libceph: connect (1)[c::]:6789 error -1 [ 187.775022][ T6298] libceph: mon0 (1)[c::]:6789 connect error [ 187.794392][T22320] ceph: No mds server is up or the cluster is laggy [ 188.267868][T22381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7850'. [ 188.275609][T22383] tmpfs: Group quota block hardlimit too large. [ 188.930638][ T6189] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 189.081306][ T6189] usb 7-1: Using ep0 maxpacket: 16 [ 189.085324][ T6189] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 189.089448][ T6189] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 55, changing to 9 [ 189.094665][ T6189] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 8496, setting to 1024 [ 189.099340][ T6189] usb 7-1: config 0 interface 0 has no altsetting 0 [ 189.107270][ T6189] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 189.111536][ T6189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.114912][ T6189] usb 7-1: Product: syz [ 189.116731][ T6189] usb 7-1: Manufacturer: syz [ 189.118735][ T6189] usb 7-1: SerialNumber: syz [ 189.124648][ T6189] usb 7-1: config 0 descriptor?? [ 189.278025][T22407] netlink: 'syz.1.7862': attribute type 1 has an invalid length. [ 189.283589][T22407] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7862'. [ 189.287451][T22407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7862'. [ 189.337320][ T6189] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input23 [ 189.403047][T22413] tmpfs: Bad value for 'mpol' [ 189.553007][ T40] kauditd_printk_skb: 101 callbacks suppressed [ 189.553024][ T40] audit: type=1400 audit(2000000010.059:55545): avc: denied { ioctl } for pid=22424 comm="syz.1.7871" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=61266 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 189.605292][ T40] audit: type=1400 audit(2000000010.109:55546): avc: denied { read } for pid=5662 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 189.605658][T22429] can0: slcan on ptm0. [ 189.622244][ T40] audit: type=1400 audit(2000000010.129:55547): avc: denied { search } for pid=5662 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.632109][ T40] audit: type=1400 audit(2000000010.129:55548): avc: denied { search } for pid=5662 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.640543][ T40] audit: type=1400 audit(2000000010.129:55549): avc: denied { search } for pid=5662 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.649647][ T40] audit: type=1400 audit(2000000010.129:55550): avc: denied { read } for pid=5662 comm="dhcpcd" name="n138" dev="tmpfs" ino=10389 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 189.659890][ T40] audit: type=1400 audit(2000000010.129:55551): avc: denied { open } for pid=5662 comm="dhcpcd" path="/run/udev/data/n138" dev="tmpfs" ino=10389 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 189.671685][ T40] audit: type=1400 audit(2000000010.129:55552): avc: denied { getattr } for pid=5662 comm="dhcpcd" path="/run/udev/data/n138" dev="tmpfs" ino=10389 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 189.682120][ T40] audit: type=1400 audit(2000000010.149:55553): avc: denied { map_create } for pid=22430 comm="syz.4.7874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 189.690053][ T40] audit: type=1400 audit(2000000010.149:55554): avc: denied { map_read map_write } for pid=22430 comm="syz.4.7874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 189.701283][T22428] can0 (unregistered): slcan off ptm0. [ 189.755621][ T6189] usb 7-1: USB disconnect, device number 8 [ 189.891665][T22456] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 190.242689][T22478] delete_channel: no stack [ 190.401820][T22498] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7899'. [ 190.666499][T22528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7914'. [ 190.669846][T22528] bridge_slave_0: default FDB implementation only supports local addresses [ 190.725005][T22537] can0: slcan on ptm0. [ 190.804540][T22546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7923'. [ 190.823193][T22534] can0 (unregistered): slcan off ptm0. [ 191.050584][ T6298] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 191.129044][T22586] usb usb9: usbfs: process 22586 (syz.1.7936) did not claim interface 15 before use [ 191.200471][ T6298] usb 7-1: Using ep0 maxpacket: 8 [ 191.204585][ T6298] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.209018][ T6298] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 191.213228][ T6298] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.218124][ T6298] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 191.222974][ T6298] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 191.227707][ T6298] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 191.235575][ T6298] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.242722][T22547] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.247564][ T6298] hub 7-1:1.0: bad descriptor, ignoring hub [ 191.250146][ T6298] hub 7-1:1.0: probe with driver hub failed with error -5 [ 191.260824][ T6298] cdc_wdm 7-1:1.0: skipping garbage [ 191.263123][ T6298] cdc_wdm 7-1:1.0: skipping garbage [ 191.274349][ T6298] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 191.276985][ T6298] cdc_wdm 7-1:1.0: Unknown control protocol [ 191.287244][T22596] delete_channel: no stack [ 191.554687][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 191.557329][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 191.560089][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 191.562920][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 191.565399][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 191.567763][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 191.572333][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 191.574847][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 191.614025][T22624] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.7956'. [ 191.617681][T22624] openvswitch: netlink: Message has 5 unknown bytes. [ 191.666297][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 191.668823][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 191.671532][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 191.674127][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 191.780895][ T9] usb 7-1: USB disconnect, device number 9 [ 191.847114][T22615] syz.4.7951 (22615): drop_caches: 1 [ 191.876415][T22615] syz.4.7951 (22615): drop_caches: 1 [ 192.169447][T22666] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7977'. [ 192.518693][T22703] vivid-003: disconnect [ 192.524669][T22703] vivid-003: reconnect [ 193.123887][T22752] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8018'. [ 193.192475][T22752] syz.2.8018 (22752) used greatest stack depth: 19784 bytes left [ 193.259962][T22759] netlink: 'syz.2.8022': attribute type 1 has an invalid length. [ 193.264413][T22759] netlink: 208 bytes leftover after parsing attributes in process `syz.2.8022'. [ 193.267300][T22759] netlink: 'syz.2.8022': attribute type 1 has an invalid length. [ 193.269703][T22759] netlink: 'syz.2.8022': attribute type 2 has an invalid length. [ 193.411675][T22776] ALSA: mixer_oss: invalid OSS volume 'PHONEX0IN' [ 193.452482][T22781] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8032'. [ 193.568174][T22796] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8039'. [ 193.575603][T22789] nvme_fabrics: missing parameter 'transport=%s' [ 193.577593][T22789] nvme_fabrics: missing parameter 'nqn=%s' [ 194.198815][T22834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8057'. [ 194.434907][T22844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8062'. [ 194.437829][T22844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8062'. [ 194.442563][T22844] netlink: 'syz.1.8062': attribute type 11 has an invalid length. [ 194.583655][ T40] kauditd_printk_skb: 232 callbacks suppressed [ 194.583673][ T40] audit: type=1400 audit(2000000015.089:55787): avc: denied { map_create } for pid=22855 comm="syz.1.8068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 194.594220][ T40] audit: type=1400 audit(2000000015.089:55788): avc: denied { map_read map_write } for pid=22855 comm="syz.1.8068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 194.605830][ T40] audit: type=1400 audit(2000000015.089:55789): avc: denied { prog_run } for pid=22855 comm="syz.1.8068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 194.714952][ T40] audit: type=1400 audit(2000000015.219:55790): avc: denied { append } for pid=22868 comm="syz.1.8074" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.759164][ T40] audit: type=1400 audit(2000000015.259:55791): avc: denied { read write } for pid=22870 comm="syz.1.8075" name="video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 194.769379][ T40] audit: type=1400 audit(2000000015.259:55792): avc: denied { open } for pid=22870 comm="syz.1.8075" path="/dev/video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 194.800442][ T40] audit: type=1400 audit(2000000015.269:55793): avc: denied { ioctl } for pid=22870 comm="syz.1.8075" path="/dev/video36" dev="devtmpfs" ino=1067 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 194.822682][ T40] audit: type=1400 audit(2000000015.329:55794): avc: denied { create } for pid=22874 comm="syz.4.8077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 194.837167][ T40] audit: type=1400 audit(2000000015.329:55795): avc: denied { execute } for pid=22877 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 194.847814][ T40] audit: type=1400 audit(2000000015.329:55796): avc: denied { execute_no_trans } for pid=22877 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 195.075609][ T6206] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 195.078963][ T6206] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 195.082416][ T6206] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 195.086129][ T6206] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 195.088742][ T6206] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 195.145996][T22893] lo speed is unknown, defaulting to 1000 [ 195.148468][T22893] xfrm0 speed is unknown, defaulting to 1000 [ 195.151951][T22893] vxcan1 speed is unknown, defaulting to 1000 [ 195.365472][T22893] chnl_net:caif_netlink_parms(): no params data found [ 195.483113][T22893] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.486173][T22893] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.489259][T22893] bridge_slave_0: entered allmulticast mode [ 195.495206][T22893] bridge_slave_0: entered promiscuous mode [ 195.502719][T22893] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.505748][T22893] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.508805][T22893] bridge_slave_1: entered allmulticast mode [ 195.514298][T22893] bridge_slave_1: entered promiscuous mode [ 195.594351][T22939] mkiss: ax0: crc mode is auto. [ 195.598740][T22893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.617371][T22893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.682732][T22893] team0: Port device team_slave_0 added [ 195.689178][T22893] team0: Port device team_slave_1 added [ 195.728037][T22893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.730131][T22893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.737902][T22893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.742467][T22893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.744814][T22893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.753516][T22893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.800211][T22893] hsr_slave_0: entered promiscuous mode [ 195.802704][T22893] hsr_slave_1: entered promiscuous mode [ 195.804839][T22893] debugfs: 'hsr0' already exists in 'hsr' [ 195.806728][T22893] Cannot create hsr debugfs directory [ 196.015244][T22893] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 196.021866][T22893] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 196.028226][T22893] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 196.036400][T22893] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 196.072557][T22893] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.075522][T22893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.079903][T22893] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.084115][T22893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.122974][T22893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.132854][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.138160][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.151673][T22985] tmpfs: Group quota block hardlimit too large. [ 196.174135][T22893] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.182079][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.184414][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.189088][T22991] lo: MTU too low for tipc bearer [ 196.191080][T22991] tipc: Enabling of bearer rejected, failed to enable media [ 196.198533][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.200813][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.240140][T22995] PKCS8: Unsupported PKCS#8 version [ 196.347425][T22893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.541729][T22893] veth0_vlan: entered promiscuous mode [ 196.552126][T22893] veth1_vlan: entered promiscuous mode [ 196.565491][T22893] veth0_macvtap: entered promiscuous mode [ 196.569443][T22893] veth1_macvtap: entered promiscuous mode [ 196.583190][T22893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.588654][T22893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.593242][T22893] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.597452][T22893] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.600238][T22893] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.605700][T22893] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.681650][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.684713][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.706741][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.709966][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.026861][T23085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8163'. [ 197.157816][T23110] random: crng reseeded on system resumption [ 197.170485][ T6206] Bluetooth: hci2: command tx timeout [ 197.322900][T23128] sp0: Synchronizing with TNC [ 197.380318][T23134] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8188'. [ 197.792414][T23177] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 197.795762][T23177] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 197.798983][T23177] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 197.802392][T23177] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 197.805806][T23177] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 197.809161][T23177] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 197.812397][T23177] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 197.815654][T23177] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 197.818884][T23177] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 197.822209][T23177] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 197.880462][ T6189] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 197.949398][T23183] overlayfs: workdir and upperdir must be separate subtrees [ 198.028441][T23193] 2g,{: renamed from lo (while UP) [ 198.033006][ T6189] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 198.035944][ T6189] usb 10-1: config 0 has no interface number 0 [ 198.038312][ T6189] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 198.041953][ T6189] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 198.045740][ T6189] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 198.049519][ T6189] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 198.053775][ T6189] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 198.057223][ T6189] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 198.061805][ T6189] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 198.065066][ T6189] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.071282][ T6189] usb 10-1: config 0 descriptor?? [ 198.074323][T23169] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 198.077706][T23169] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 198.085368][ T6189] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 198.296405][T23169] ldusb 10-1:0.55: Write buffer overflow, 2 bytes dropped [ 198.304496][ T61] usb 10-1: USB disconnect, device number 2 [ 198.309408][ T61] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 198.675661][T23252] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.8245'. [ 199.165451][T23302] [U] v3f"S/4:XTzWtlW= [ 199.260603][ T6206] Bluetooth: hci2: command tx timeout [ 199.300082][T23319] lo speed is unknown, defaulting to 1000 [ 199.305605][T23319] xfrm0 speed is unknown, defaulting to 1000 [ 199.310123][T23319] vxcan1 speed is unknown, defaulting to 1000 [ 199.597787][ T40] kauditd_printk_skb: 226 callbacks suppressed [ 199.597804][ T40] audit: type=1400 audit(2000000020.099:56023): avc: denied { allowed } for pid=23335 comm="syz.2.8283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 199.616317][T23336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8283'. [ 199.616378][ T40] audit: type=1400 audit(2000000020.119:56024): avc: denied { sqpoll } for pid=23335 comm="syz.2.8283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 199.629542][ T40] audit: type=1400 audit(2000000020.119:56025): avc: denied { prog_run } for pid=23337 comm="syz.4.8284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 199.858362][ T40] audit: type=1400 audit(2000000020.359:56026): avc: denied { ioctl } for pid=23351 comm="syz.4.8289" path="/dev/comedi3" dev="devtmpfs" ino=1305 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 199.959732][ T40] audit: type=1400 audit(2000000020.459:56027): avc: denied { read write } for pid=23361 comm="syz.5.8293" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 199.968083][T23362] ------------[ cut here ]------------ [ 199.969672][ T40] audit: type=1400 audit(2000000020.459:56028): avc: denied { ioctl open } for pid=23361 comm="syz.5.8293" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 199.971275][T23362] kernel BUG at fs/buffer.c:1582! SYZFAIL: failed to recv rpc [ 199.971343][T23362] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 199.971358][T23362] CPU: 3 UID: 0 PID: 23362 Comm: syz.5.8293 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 199.971372][T23362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 199.971379][T23362] RIP: 0010:folio_set_bh+0x18a/0x1e0 [ 199.971398][T23362] Code: df 48 89 fa 4c 01 e3 48 c1 ea 03 80 3c 02 00 75 43 48 89 5d 28 5b 5d 41 5c 41 5d 41 5e 41 5f e9 0c 0c 49 09 e8 c7 01 75 ff 90 <0f> 0b e8 ef 5c da ff e9 a5 fe ff ff 4c 89 ef e8 f2 5b da ff e9 cf [ 199.971410][T23362] RSP: 0018:ffffc900057cf8d8 EFLAGS: 00010283 [ 199.971420][T23362] RAX: 00000000000019e3 RBX: ffffea0000fdcc00 RCX: ffffc900265b9000 [ 199.971427][T23362] RDX: 0000000000080000 RSI: ffffffff8246f759 RDI: 0000000000000006 [ 199.971434][T23362] RBP: ffff888027694828 R08: 0000000000000006 R09: 0000000000004000 [ 199.971441][T23362] R10: 0000000000004000 R11: 0000000000000001 R12: 0000000000004000 [ 199.971447][T23362] R13: 0000000000000002 R14: 0000000000004000 R15: 0000000000000000 [ 199.971453][T23362] FS: 00007fb7e0a816c0(0000) GS:ffff8880d69f9000(0000) knlGS:0000000000000000 [ 199.971478][T23362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.971487][T23362] CR2: 00007fb7e0a80f98 CR3: 0000000050d7e000 CR4: 0000000000352ef0 [ 199.971494][T23362] Call Trace: [ 199.971497][T23362] [ 199.971502][T23362] folio_alloc_buffers+0x295/0x6c0 [ 199.971517][T23362] __getblk_slow+0x1f4/0x560 [ 199.971532][T23362] bdev_getblk+0xd4/0xe0 [ 199.971546][T23362] __bread_gfp+0x86/0x3c0 [ 199.971560][T23362] ntfs_bread+0xd9/0x210 [ 199.971573][T23362] ntfs_fill_super+0x64f/0x4270 [ 199.971587][T23362] ? __pfx_vsnprintf+0x10/0x10 [ 199.971602][T23362] ? snprintf+0xc7/0x100 [ 199.971612][T23362] ? __pfx_snprintf+0x10/0x10 [ 199.971624][T23362] ? __pfx_ntfs_fill_super+0x10/0x10 [ 199.971634][T23362] ? do_raw_spin_lock+0x12c/0x2b0 [ 199.971647][T23362] ? find_held_lock+0x2b/0x80 [ 199.971662][T23362] ? sb_set_blocksize+0x188/0x1d0 [ 199.971677][T23362] ? setup_bdev_super+0x369/0x730 [ 199.971693][T23362] get_tree_bdev_flags+0x389/0x620 [ 199.984264][ T40] audit: type=1400 audit(2000000020.479:56029): avc: denied { write } for pid=5868 comm="syz-executor" path="pipe:[1588]" dev="pipefs" ino=1588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 199.985461][T23362] ? __pfx_ntfs_fill_super+0x10/0x10 [ 199.997640][T23364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8295'. [ 200.003051][T23362] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 200.003077][T23362] ? bpf_lsm_capable+0x9/0x10 [ 200.003092][T23362] ? security_capable+0x7e/0x260 [ 200.003108][T23362] vfs_get_tree+0x8e/0x340 [ 200.003123][T23362] path_mount+0x1482/0x1fd0 [ 200.003136][T23362] ? __pfx_path_mount+0x10/0x10 [ 200.072481][T23362] ? kmem_cache_free+0x2d1/0x4d0 [ 200.074094][T23362] ? putname+0x154/0x1a0 [ 200.075426][T23362] ? putname+0x154/0x1a0 [ 200.076759][T23362] ? __x64_sys_mount+0x28d/0x310 [ 200.078385][T23362] __x64_sys_mount+0x28d/0x310 [ 200.079957][T23362] ? __pfx___x64_sys_mount+0x10/0x10 [ 200.081678][T23362] do_syscall_64+0xcd/0x4c0 [ 200.083195][T23362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.085183][T23362] RIP: 0033:0x7fb7dfb8e9a9 [ 200.086668][T23362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.092758][T23362] RSP: 002b:00007fb7e0a81038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 200.095352][T23362] RAX: ffffffffffffffda RBX: 00007fb7dfdb5fa0 RCX: 00007fb7dfb8e9a9 [ 200.097843][T23362] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000200000000040 [ 200.100488][T23362] RBP: 00007fb7dfc10d69 R08: 0000000000000000 R09: 0000000000000000 [ 200.103202][T23362] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 200.105734][T23362] R13: 0000000000000000 R14: 00007fb7dfdb5fa0 R15: 00007ffc31f2d8c8 [ 200.108265][T23362] [ 200.109289][T23362] Modules linked in: [ 200.111095][T23362] ---[ end trace 0000000000000000 ]--- [ 200.113734][T23362] RIP: 0010:folio_set_bh+0x18a/0x1e0 [ 200.115474][T23362] Code: df 48 89 fa 4c 01 e3 48 c1 ea 03 80 3c 02 00 75 43 48 89 5d 28 5b 5d 41 5c 41 5d 41 5e 41 5f e9 0c 0c 49 09 e8 c7 01 75 ff 90 <0f> 0b e8 ef 5c da ff e9 a5 fe ff ff 4c 89 ef e8 f2 5b da ff e9 cf [ 200.127949][T23362] RSP: 0018:ffffc900057cf8d8 EFLAGS: 00010283 [ 200.130004][T23362] RAX: 00000000000019e3 RBX: ffffea0000fdcc00 RCX: ffffc900265b9000 [ 200.139890][ T40] audit: type=1326 audit(2000000020.629:56030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23347 comm="syz.2.8294" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd038e9a9 code=0x7fc00000 [ 200.150558][T23362] RDX: 0000000000080000 RSI: ffffffff8246f759 RDI: 0000000000000006 [ 200.153378][T23362] RBP: ffff888027694828 R08: 0000000000000006 R09: 0000000000004000 [ 200.156264][T23362] R10: 0000000000004000 R11: 0000000000000001 R12: 0000000000004000 [ 200.159192][T23362] R13: 0000000000000002 R14: 0000000000004000 R15: 0000000000000000 [ 200.164876][T23362] FS: 00007fb7e0a816c0(0000) GS:ffff8880d68f9000(0000) knlGS:0000000000000000 [ 200.167992][T23362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.172095][T23362] CR2: 00007fafe44e7d60 CR3: 0000000050d7e000 CR4: 0000000000352ef0 [ 200.175242][T23362] Kernel panic - not syncing: Fatal exception [ 200.178254][T23362] Kernel Offset: disabled [ 200.179639][T23362] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:32:05 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8560d865 RDI=ffffffff9b0e1160 RBP=ffffffff9b0e1120 RSP=ffffc9000078f880 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000039 R14=ffffffff9b0e1120 R15=ffffffff8560d800 RIP=ffffffff8560d88f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66f9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fafe46b1f98 CR3=00000000599fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa484e9b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fafe3811d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fafe3811d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fafe3811d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fafe3811d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fafe3811de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fafe3811ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000060 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000060 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff82088fb2 RDX=0000000000000001 RSI=00000000ffffff7b RDI=0000000000000005 RBP=80000000332a1007 RSP=ffffc900066bf690 R8 =0000000000000005 R9 =00000000fffffff5 R10=0000000000000001 R11=0000000000000001 R12=80000000332a1007 R13=dffffc0000000000 R14=ffff888029d3e1f0 R15=00007fafe2a3e000 RIP=ffffffff81bbf2a0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558ebaa500 ffffffff 00c00000 GS =0000 ffff8880d67f9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fafe44e56c0 CR3=00000000599fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcafcd7d30 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefc411d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefc411d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefc411d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefc411d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefc411de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faefc411ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a4420a0 RCX=ffffffff81afe47d RDX=ffff888025eac880 RSI=ffffffff81afe459 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc90002807888 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d488415 R15=ffff88806a63b580 RIP=ffffffff81afe45b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68f9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f19992e7d60 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=000000000000000f Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f19987866a3 00007f19987866a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa94f4380 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555581358c7d 0000555581358b40 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558135faa3 000055558135f970 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100005800401 000000080606015c 862080080005e003 00100005d0030010 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0005c00302100005 b003481000049003 f300030008000000 0525dfdbfe0070bd ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2500012608028c03 0100000204060288 0300000024080802 8003028004048003 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04800405a0030008 000590030fffffff ffffff0405800301 0800018004040273 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080004d00302b208 0004c80301d4de08 0004c00306080004 b8030d9192080004 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3966666666666666 660a322e79656b5f 5f20622030383635 6432623966666666 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3735643262396666 6666666666660a34 2e79656b5f5f2062 2030633635643262 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2062203034373564 3262396666666666 6666660a352e7965 6b5f5f2062203030 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6432623966666666 666666660a312e79 656b5f5f20622030 3862376432623966 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030633764326239 6666666666666666 0a73657275746165 6620622030636237 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6432623966666666 666666660a747369 6c5f6e6168635f6f 6974726976206220 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3863376432623966 666666666666660a 64656e6e69705f70 7620622030346337 info registers vcpu 3 CPU#3 RAX=0000000000080000 RBX=0000000000000022 RCX=ffffc900265b9000 RDX=0000000000080000 RSI=ffffffff819b9f10 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc900057cf4b8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000013429 R12=1ffff92000af9e99 R13=0000000000000000 R14=ffff88801c790000 R15=ffffc900057cf580 RIP=ffffffff819b9f19 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb7e0a816c0 ffffffff 00c00000 GS =0000 ffff8880d69f9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb7e0a80f98 CR3=0000000050d7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0f053870 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5bd0411d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5bd0411d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5bd0411d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5bd0411d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5bd0411de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5bd0411ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000