last executing test programs: 3m25.827210564s ago: executing program 1 (id=3067): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 3m25.822251262s ago: executing program 1 (id=3071): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1201b9008000", 0x0, 0x0, 0x0, 0x0, 0x0}) 3m25.774148391s ago: executing program 1 (id=3075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 3m25.70807829s ago: executing program 1 (id=3079): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 3m25.707525509s ago: executing program 1 (id=3083): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 3m25.633185812s ago: executing program 1 (id=3087): r0 = socket$inet_udp(0x2, 0x2, 0x0) fgetxattr(r0, &(0x7f0000001700)=@known='system.sockprotoname\x00', &(0x7f0000001740)=""/72, 0x48) 3m9.604634101s ago: executing program 32 (id=3087): r0 = socket$inet_udp(0x2, 0x2, 0x0) fgetxattr(r0, &(0x7f0000001700)=@known='system.sockprotoname\x00', &(0x7f0000001740)=""/72, 0x48) 1.011966871s ago: executing program 2 (id=11362): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89b1, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) 839.17458ms ago: executing program 2 (id=11369): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xb, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000740)={{0x1, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffffffffffd, 0x5, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) 740.505435ms ago: executing program 0 (id=11373): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 724.606922ms ago: executing program 4 (id=11375): r0 = syz_open_dev$radio(&(0x7f0000002040), 0x3, 0x2) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000002080)={0x0, "432e8e0e0ff1fcc4834efc7ee1c3927c3d59655f7878a7f2de909f3ffdfbf739", 0x0, 0x100, 0x0, 0x1}) 649.140065ms ago: executing program 0 (id=11376): r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000200), 0x101, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000600)={{0x2926, 0x8}, {0x0, 0x1}, 0xfe, 0x1}) 646.975451ms ago: executing program 2 (id=11384): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 595.90391ms ago: executing program 4 (id=11377): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) 595.708974ms ago: executing program 3 (id=11378): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000002380)=""/165, 0xa5}], 0x1, 0x3, 0x4) 490.977949ms ago: executing program 2 (id=11379): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 473.678355ms ago: executing program 3 (id=11380): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x545d, &(0x7f0000000200)) 473.468953ms ago: executing program 0 (id=11381): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) 473.198533ms ago: executing program 4 (id=11382): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000740)={0x2, 0x1, 0x2, 0x8, 0x1d1, &(0x7f0000000340)="73b8b93e6d4c455c432105ec07ab65623d0fed63af74d446418e79eb9451c58ebd3258eda0cde76e5f6f663c12a59bbd93c3da3211cc9791ca85645772d1ea6759f16fa6f84418425006fd4595327b8d1434c74967edd199a49ef1e2d0de81d0e7d71aa43fca71fa7e4767cc413a08bf7a1fa08c6655f21f7e022fc800351bc40b80f778c432c0f683bdca118eea3ed34117c7dd049606acee62b96069480b69e0dd80875713ed7d0f8b314c470f7f002f8cdcf22ddef7d3e80f1559325f84200119be5b4e2bab26f46c651844ebc7e7dfe780cea0efdf6582aee934fb1faed1929c48003802a9a3675621cfeab55b2db721614fdef2ac88e36fb9764425ccbc5df18afe15d6d2bb9c85f33c4529dd4f033f7079627f5b7851907b6d1eea42fdc649de9e7a1fad4a5695d9e5567f699a7c5a9a8bfbb1ab9f17b6075069be28dc41cee2ce976eaa2bb33e27933922a7d2188f03821fd9055d193b4164c71e38c38b52db4cc1881de9d515c72daa674380974e3bd67ea1fc01c037cc0bef2d5b88f9580dfb4d52c8f0262e401b39995e6366dfc21d9ec7552fa04b6795ce9af54514aa06ee76c9e3e8ce31e4890ba2af164a589aced5a5fdce649527222ff62729a0a91e1c03ca67f270e162f5a4a591d5708aa3f6616ed017e7e7c69a1467f3277edba16bfbf4574f4a4c2194c58045f19805ce9e46cc97ff6b5a8c4f3d12b77489fa12c65d0f58906316b44d6ef824e1ecb52589f5c0dc2de4020e61d86622bafb7fe71b6127290e010291d9bea6c769459e2b6dbb991d1b379d37fe376ea7770692ef1389585a54a98561ea428ad74bceeaed0376f27f2ea86b191f8f15c11a8bd1ce71cf6536497e1e28480f2c8075d379b68ac196ce5e784f005c7f6ff600b2ef3cdca4660f5b712773dfb18aeaef4bd38b1ec7e5e492768a85b3ed2401b854d586bb62b70aa5369e91fdc74a280a7adcf46ddb47628886bf14b5678c7296ee64fdd99846a07b15cb62695d38b6a14940368472f6eae6f49faa622bbf6a9c5568036729226454d4b2f95485533b343e46b9a50201a145b204ac8bddd1ea25ce198d26b1344aa68b9ca7d35ebd13e70165ed40a554e3409f796fe6adf31825faab1073b4a0e7d19a4a1a524d9f4e02a17c4d870b418dacbdeb368df96c7759068d9e636f643c8472586c21b3929b5f9867e2cd0536e03ec462fba5100e46343d58e803d949ae1bb39ca85f496c64c45afb4b30f12ade87d9f98b4633522a47bfb11731aa6ee024f3513457dce809725b4d7b388d500627127978dd9dd9662cbd2ea2228c711098d09d1dbfd594f619485857a694671423e17702581b000eb45d5528b6f6f831389d4eedbe1cab0d0ae5293b7c7b944861b3e2d75196b8c0b0fa563b83d73ae6101435bbe4fb8923d07c1885a12f7e51059f3b47c8ef7a984f"}) 339.429556ms ago: executing program 0 (id=11383): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000006600), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) 338.811051ms ago: executing program 3 (id=11385): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0x18, 0x31, 0x10b, 0x70bd2c, 0x25dedbfc, {}, [{0x4}]}, 0x18}}, 0x20000000) 324.97302ms ago: executing program 4 (id=11386): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) 221.691425ms ago: executing program 3 (id=11387): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x4, 0x100) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0x7f, 0x40004, "0fdd4e7a27411e6e14759f39790522bba76830cb56cd9f2c", {0x24, 0x3}, 0x340}) 221.536817ms ago: executing program 0 (id=11388): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000040)) 118.175979ms ago: executing program 4 (id=11389): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x2c0, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x17}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'dvmrp0\x00', {}, {}, 0x84, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) 115.763597ms ago: executing program 2 (id=11390): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) 115.478691ms ago: executing program 3 (id=11391): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f0000004780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000) 94.211944ms ago: executing program 0 (id=11392): r0 = eventfd(0x0) poll(&(0x7f00000008c0)=[{r0}], 0x1, 0xc6) 3.877004ms ago: executing program 4 (id=11393): r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 3.523617ms ago: executing program 2 (id=11394): mkdir(&(0x7f0000000080)='./file1\x00', 0xb) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x12, &(0x7f0000000200)={'trans=virtio,', {[{@noextend}]}}) 0s ago: executing program 3 (id=11395): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100000000000000e80007000000", @ANYRES32, @ANYBLOB="000000000a0005"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): was attempted by ""[22436] [ 177.944924][T22440] dns_resolver: Unsupported server list version (0) [ 177.956124][T22442] sctp: [Deprecated]: syz.3.7853 (pid 22442) Use of int in max_burst socket option deprecated. [ 177.956124][T22442] Use struct sctp_assoc_value instead [ 178.089050][T22458] : renamed from bond0 [ 178.209271][T22469] overlayfs: missing 'lowerdir' [ 178.238480][T22475] overlay: Bad value for 'workdir' [ 178.280577][T22482] netlink: 'syz.2.7869': attribute type 16 has an invalid length. [ 178.283741][T22482] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.7869'. [ 178.478172][T22507] netlink: 'syz.4.7883': attribute type 1 has an invalid length. [ 178.481538][T22507] netlink: 'syz.4.7883': attribute type 3 has an invalid length. [ 178.484683][T22507] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7883'. [ 178.736841][T22543] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 178.777728][T22549] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7903'. [ 178.941929][ T6064] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 178.963955][T22584] cgroup: noprefix used incorrectly [ 179.015653][T22591] delete_channel: no stack [ 179.115881][T22612] netlink: 'syz.2.7933': attribute type 21 has an invalid length. [ 179.166510][ T6064] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 179.346529][T22647] netlink: 'syz.0.7951': attribute type 64 has an invalid length. [ 179.350241][T22647] netlink: 'syz.0.7951': attribute type 4 has an invalid length. [ 179.485827][ T6064] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 179.600197][T22688] netlink: 'syz.2.7969': attribute type 7 has an invalid length. [ 179.752488][T22728] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 179.755890][T22729] dlm: no local IP address has been set [ 179.758222][T22728] SELinux: failed to load policy [ 179.758687][T22729] dlm: cannot start dlm midcomms -107 [ 179.831272][T22741] openvswitch: netlink: Actions may not be safe on all matching packets [ 179.948538][T22763] netlink: 'syz.4.8003': attribute type 11 has an invalid length. [ 180.047919][T22783] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.174343][T22811] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 180.239073][T22821] netlink: 'syz.4.8031': attribute type 21 has an invalid length. [ 180.393156][T22850] netlink: 'syz.0.8045': attribute type 1 has an invalid length. [ 180.517569][T22874] tmpfs: Bad value for 'mpol' [ 180.532398][T22878] program syz.3.8058 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.697072][T22902] program syz.0.8070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.819892][T22922] xt_cgroup: path and classid specified [ 180.965083][T22940] bio_check_eod: 4 callbacks suppressed [ 180.965097][T22940] syz.0.8090: attempt to access beyond end of device [ 180.965097][T22940] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 180.970541][T22940] VFS: unable to read V7 FS superblock on device nbd0. [ 180.975932][T22940] VFS: could not find a valid V7 on nbd0. [ 181.059859][T22955] qrtr: Invalid version 0 [ 181.116665][ T39] kauditd_printk_skb: 104 callbacks suppressed [ 181.116678][ T39] audit: type=1400 audit(2000000056.520:59386): avc: denied { ioctl } for pid=22964 comm="syz.4.8102" path="socket:[66259]" dev="sockfs" ino=66259 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.131045][T22967] MINIX-fs: blocksize too small for device [ 181.179300][T22975] xt_cgroup: invalid path, errno=-2 [ 181.229753][T22967] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 181.236879][T22982] netlink: 'syz.3.8110': attribute type 27 has an invalid length. [ 181.268595][T22989] fuse: Bad value for 'fd' [ 181.326752][T22998] Cannot find del_set index 128 as target [ 181.441121][ T39] audit: type=1400 audit(2000000056.819:59387): avc: denied { getopt } for pid=23015 comm="syz.2.8127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 181.485741][ T39] audit: type=1400 audit(2000000056.866:59388): avc: denied { bind } for pid=23022 comm="syz.2.8131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.495817][T23026] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 181.556849][ T39] audit: type=1400 audit(2000000056.931:59389): avc: denied { read } for pid=23030 comm="syz.4.8135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 181.583592][ T39] audit: type=1400 audit(2000000056.959:59390): avc: denied { write } for pid=23041 comm="syz.2.8140" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 181.591521][T23042] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 181.593437][ T39] audit: type=1400 audit(2000000056.969:59391): avc: denied { unlink } for pid=6066 comm="syz-executor" name="file1" dev="tmpfs" ino=11134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 181.610673][ T39] audit: type=1400 audit(2000000056.978:59392): avc: denied { ioctl } for pid=23044 comm="syz.4.8141" path="socket:[66567]" dev="sockfs" ino=66567 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.610836][T23047] bridge0: port 2(netdevsim0) entered blocking state [ 181.623261][T23047] bridge0: port 2(netdevsim0) entered disabled state [ 181.625425][T23047] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 181.633775][T23050] __nla_validate_parse: 11 callbacks suppressed [ 181.633793][T23050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8144'. [ 181.741952][ T39] audit: type=1400 audit(2000000057.109:59393): avc: denied { create } for pid=23063 comm="syz.3.8151" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 181.762199][ T39] audit: type=1400 audit(2000000057.118:59394): avc: denied { mounton } for pid=23067 comm="syz.0.8153" path="/2020/bus" dev="tmpfs" ino=10178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 181.772526][ T39] audit: type=1400 audit(2000000057.128:59395): avc: denied { unlink } for pid=6066 comm="syz-executor" name="file0" dev="tmpfs" ino=11150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 181.811741][T23078] xt_hashlimit: overflow, try lower: 0/0 [ 181.876974][T23084] xt_CT: No such helper "pptp" [ 181.958903][T23096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8166'. [ 181.962145][T23096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8166'. [ 182.079884][T23103] "syz.3.8170" (23103) uses obsolete ecb(arc4) skcipher [ 182.108600][T23113] xt_socket: unknown flags 0x8 [ 182.326209][T23136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8185'. [ 182.467725][T23154] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 182.740872][T23190] netlink: 'syz.3.8211': attribute type 1 has an invalid length. [ 182.744994][T23190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.849568][T23204] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 182.852954][T23204] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 182.868231][T23207] netlink: 'syz.0.8218': attribute type 15 has an invalid length. [ 182.975141][T23220] program syz.3.8224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.056915][T23228] xt_CONNSECMARK: invalid mode: 0 [ 183.100759][T23211] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 183.144600][T23237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8234'. [ 183.242112][T23251] efs: device does not support 512 byte blocks [ 183.245163][T23251] device does not support 512 byte blocks [ 183.245163][T23251] [ 183.326490][T23259] xt_TCPMSS: Only works on TCP SYN packets [ 183.335829][T23251] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 183.420617][T23265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.464828][T23272] openvswitch: netlink: Actions may not be safe on all matching packets [ 183.752206][T23316] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 183.858777][T23329] usb usb8: usbfs: process 23329 (syz.3.8279) did not claim interface 0 before use [ 183.987881][T23315] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 184.125640][T23367] netlink: 196 bytes leftover after parsing attributes in process `syz.0.8299'. [ 184.128322][T23367] netlink: 196 bytes leftover after parsing attributes in process `syz.0.8299'. [ 184.130870][T23367] netlink: 19 bytes leftover after parsing attributes in process `syz.0.8299'. [ 184.179048][T23374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8301'. [ 184.182557][T23374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8301'. [ 184.271630][T23389] bridge0: port 1() entered disabled state [ 184.302657][T23394] ip6t_srh: unknown srh invflags 7863 [ 184.496556][T23421] : renamed from bond0 (while UP) [ 184.582812][T23435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.674758][T23453] validate_nla: 1 callbacks suppressed [ 184.674778][T23453] netlink: 'syz.4.8339': attribute type 39 has an invalid length. [ 184.782372][T23466] sctp: [Deprecated]: syz.2.8347 (pid 23466) Use of int in max_burst socket option deprecated. [ 184.782372][T23466] Use struct sctp_assoc_value instead [ 184.783950][T23467] dns_resolver: Unsupported server list version (0) [ 184.821067][T23462] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 184.822940][T23469] ptrace attach of "/syz-executor exec"[6059] was attempted by ""[23469] [ 184.870715][T23473] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 185.027448][T23499] netlink: 'syz.4.8363': attribute type 1 has an invalid length. [ 185.072521][T23506] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.341950][T23537] syz.2.8383: attempt to access beyond end of device [ 185.341950][T23537] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 185.347491][T23537] syz.2.8383: attempt to access beyond end of device [ 185.347491][T23537] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 185.352594][T23537] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 185.356580][T23537] syz.2.8383: attempt to access beyond end of device [ 185.356580][T23537] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 185.362993][T23537] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 185.365374][ T64] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 185.370195][T23537] syz.2.8383: attempt to access beyond end of device [ 185.370195][T23537] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 185.375256][T23537] syz.2.8383: attempt to access beyond end of device [ 185.375256][T23537] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 185.380719][T23537] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 185.384615][T23537] syz.2.8383: attempt to access beyond end of device [ 185.384615][T23537] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 185.388417][T23537] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 185.392952][T23537] syz.2.8383: attempt to access beyond end of device [ 185.392952][T23537] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 185.401698][T23537] syz.2.8383: attempt to access beyond end of device [ 185.401698][T23537] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 185.406819][T23537] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 185.410860][T23537] syz.2.8383: attempt to access beyond end of device [ 185.410860][T23537] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 185.416027][T23537] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 185.421860][T23537] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 185.425248][T23537] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 185.428215][T23537] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 185.504987][ T9] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 185.543599][ T64] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 185.546121][ T64] usb 9-1: config 0 has no interface number 0 [ 185.548049][ T64] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 185.551591][ T64] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 185.555796][ T64] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 185.560495][ T64] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.568135][ T64] usb 9-1: config 0 descriptor?? [ 185.574988][ T64] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 185.667003][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 185.670076][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 185.674015][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 185.685343][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 185.690330][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 185.696948][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 185.700023][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 185.704065][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 185.709880][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 185.714361][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 185.719605][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 185.720469][T23565] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 185.722843][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 185.731844][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 185.737145][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 185.742201][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 185.748761][ T9] usb 5-1: string descriptor 0 read error: -22 [ 185.751463][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 185.755021][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.765843][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 185.807426][T23511] iowarrior 9-1:0.1: Error -90 while submitting URB [ 185.811743][ T58] usb 9-1: USB disconnect, device number 4 [ 185.946530][T23578] netlink: 'syz.3.8404': attribute type 21 has an invalid length. [ 185.953906][T23579] bridge7: entered promiscuous mode [ 185.994539][ T9] usb 5-1: USB disconnect, device number 10 [ 186.473729][ T39] kauditd_printk_skb: 27 callbacks suppressed [ 186.473749][ T39] audit: type=1400 audit(2000000061.524:59423): avc: denied { create } for pid=23608 comm="syz.3.8424" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 186.485840][ T39] audit: type=1400 audit(2000000061.524:59424): avc: denied { map } for pid=23608 comm="syz.3.8424" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=67036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 186.494159][ T39] audit: type=1400 audit(2000000061.524:59425): avc: denied { read write } for pid=23608 comm="syz.3.8424" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=67036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 186.525477][T23615] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 186.720819][T23647] overlay: Bad value for 'workdir' [ 186.759727][T23651] overlayfs: missing 'lowerdir' [ 186.918147][T23679] netlink: 'syz.4.8454': attribute type 16 has an invalid length. [ 187.159789][ T39] audit: type=1400 audit(2000000062.170:59426): avc: denied { ioctl } for pid=23707 comm="syz.3.8467" path="socket:[68892]" dev="sockfs" ino=68892 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 187.203253][ T39] audit: type=1400 audit(2000000062.207:59427): avc: denied { append } for pid=23711 comm="syz.3.8470" name="nbd3" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.334787][ T39] audit: type=1400 audit(2000000062.338:59428): avc: denied { connect } for pid=23726 comm="syz.0.8478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.397516][ T39] audit: type=1400 audit(2000000062.394:59429): avc: denied { create } for pid=23733 comm="syz.3.8481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 187.409989][ T39] audit: type=1400 audit(2000000062.404:59430): avc: denied { getopt } for pid=23733 comm="syz.3.8481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 187.434961][ T39] audit: type=1400 audit(2000000062.432:59431): avc: denied { mount } for pid=23737 comm="syz.2.8483" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 187.481415][T23745] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 187.485509][T23745] SELinux: failed to load policy [ 187.561814][T23757] netdevsim netdevsim0: loading /lib/firmware// failed with error -22 [ 187.564772][T23757] netdevsim netdevsim0: Direct firmware load for / failed with error -22 [ 187.569345][T23757] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 187.804042][T23780] sp0: Synchronizing with TNC [ 188.103742][T23806] SELinux: syz.3.8517 (23806) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 188.160089][T23810] netlink: 'syz.2.8524': attribute type 1 has an invalid length. [ 188.163017][T23810] __nla_validate_parse: 3 callbacks suppressed [ 188.163032][T23810] netlink: 308 bytes leftover after parsing attributes in process `syz.2.8524'. [ 188.410950][T23835] program syz.3.8530 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.425796][T23837] netlink: 'syz.2.8531': attribute type 4 has an invalid length. [ 188.429570][T23837] netlink: 'syz.2.8531': attribute type 11 has an invalid length. [ 188.432561][T23837] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8531'. [ 188.448994][T23839] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 188.480241][T23843] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 188.593138][T23857] xt_cgroup: path and classid specified [ 188.618245][T23853] MINIX-fs: blocksize too small for device [ 188.654645][T23861] program syz.2.8542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.679344][T23863] tmpfs: Bad value for 'mpol' [ 188.736590][T23853] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 188.788074][T23869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8548'. [ 188.876042][ T39] audit: type=1400 audit(2000000063.779:59432): avc: denied { compute_member } for pid=23878 comm="syz.0.8552" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 188.921506][T23888] bio_check_eod: 3 callbacks suppressed [ 188.921519][T23888] syz.2.8558: attempt to access beyond end of device [ 188.921519][T23888] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 188.931934][T23888] VFS: unable to read V7 FS superblock on device nbd2. [ 188.934659][T23888] VFS: could not find a valid V7 on nbd2. [ 189.006931][T23898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8563'. [ 189.010817][T23898] : left allmulticast mode [ 189.012886][T23898] : left promiscuous mode [ 189.014907][T23898] bridge0: port 1() entered disabled state [ 189.066265][T23903] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 189.161318][T23903] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 189.205362][T23909] overlayfs: unescaped trailing colons in lowerdir mount option. [ 189.269092][T23922] program syz.2.8579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.331263][T23932] qrtr: Invalid version 0 [ 189.394689][T23942] trusted_key: encrypted_key: keylen parameter is missing [ 189.399849][T23939] ntfs3(sr0): Primary boot signature is not NTFS. [ 189.405443][T23939] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 189.546883][T23939] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 189.942443][T24020] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8622'. [ 190.092394][T24038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8631'. [ 190.095646][T24038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8631'. [ 190.169853][T24045] ERROR: device name not specified. [ 190.228010][T24055] openvswitch: netlink: Invalid VLAN frame [ 190.568905][T24083] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 190.631552][T24089] xt_HMARK: spi-set and port-set can't be combined [ 190.742472][T24103] usb usb8: usbfs: process 24103 (syz.2.8664) did not claim interface 0 before use [ 190.768456][T24107] ./bus: Can't lookup blockdev [ 190.778405][T24109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8667'. [ 190.907887][T24132] netlink: 'syz.2.8678': attribute type 1 has an invalid length. [ 190.910168][T24132] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.8678'. [ 191.049539][T24156] IPv6: sit1: Disabled Multicast RS [ 191.181672][ T8] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 191.187044][T24170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8697'. [ 191.342030][ T8] usb 9-1: Using ep0 maxpacket: 32 [ 191.346121][ T8] usb 9-1: unable to get BOS descriptor or descriptor too short [ 191.352540][ T8] usb 9-1: config index 0 descriptor too short (expected 34347, got 43) [ 191.355931][ T8] usb 9-1: config 31 has too many interfaces: 196, using maximum allowed: 32 [ 191.359553][ T8] usb 9-1: config 31 has an invalid descriptor of length 0, skipping remainder of the config [ 191.363978][ T8] usb 9-1: config 31 has 1 interface, different from the descriptor's value: 196 [ 191.367565][ T8] usb 9-1: config 31 has no interface number 0 [ 191.370042][ T8] usb 9-1: config 31 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 191.378421][ T8] usb 9-1: config 31 interface 81 altsetting 3 bulk endpoint 0x83 has invalid maxpacket 150 [ 191.382413][ T8] usb 9-1: config 31 interface 81 has no altsetting 0 [ 191.390333][ T8] usb 9-1: string descriptor 0 read error: -22 [ 191.392827][ T8] usb 9-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 191.396819][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.407568][T24136] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 191.417259][ T8] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:31.81/input/input31 [ 191.557454][T24218] netlink: 'syz.0.8721': attribute type 4 has an invalid length. [ 191.575253][T24220] xt_hashlimit: max too large, truncated to 1048576 [ 191.581972][T24220] xt_bpf: check failed: parse error [ 191.910755][ T64] usb 9-1: USB disconnect, device number 5 [ 191.989829][T24262] netlink: 'syz.3.8742': attribute type 2 has an invalid length. [ 192.020553][T24264] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 192.067940][ T8] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 192.192578][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 192.192589][ T39] audit: type=1400 audit(2000000066.875:59453): avc: denied { sys_module } for pid=24273 comm="syz.3.8748" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 192.230804][ T8] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 192.233575][ T8] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.236730][ T8] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 192.239676][ T8] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.242777][ T8] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.247597][ T8] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 192.251540][ T8] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 192.253840][ T8] usb 7-1: Product: syz [ 192.255082][ T8] usb 7-1: Manufacturer: syz [ 192.259187][ T8] cdc_wdm 7-1:1.0: skipping garbage [ 192.261501][ T8] cdc_wdm 7-1:1.0: skipping garbage [ 192.265268][T24280] netlink: 'syz.3.8750': attribute type 10 has an invalid length. [ 192.266326][ T8] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 192.270436][ T8] cdc_wdm 7-1:1.0: Unknown control protocol [ 192.272584][T24280] team0: Device ipvlan1 failed to register rx_handler [ 192.476902][T24300] xt_nfacct: accounting object `syz1' does not exists [ 192.478755][T24252] cdc_wdm 7-1:1.0: Error submitting int urb - -90 [ 192.482480][ T8] usb 7-1: USB disconnect, device number 6 [ 192.561764][ T39] audit: type=1400 audit(2000000067.221:59454): avc: denied { checkpoint_restore } for pid=24313 comm="syz.3.8766" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 192.561850][T24316] netlink: 'syz.0.8767': attribute type 2 has an invalid length. [ 192.799910][ T39] audit: type=1400 audit(2000000067.446:59455): avc: denied { read } for pid=24349 comm="syz.4.8784" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 192.810116][ T39] audit: type=1400 audit(2000000067.446:59456): avc: denied { open } for pid=24349 comm="syz.4.8784" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 192.820283][ T39] audit: type=1400 audit(2000000067.446:59457): avc: denied { ioctl } for pid=24349 comm="syz.4.8784" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 192.842448][T24354] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.999128][T24345] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 193.059514][T24367] tmpfs: Group quota inode hardlimit too large. [ 193.094133][ T64] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 193.171072][ T39] audit: type=1400 audit(2000000067.801:59458): avc: denied { setopt } for pid=24385 comm="syz.0.8801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 193.267081][ T64] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 193.271067][ T64] usb 8-1: config 0 interface 0 has no altsetting 0 [ 193.275411][ T64] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 193.280897][ T64] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.284025][ T64] usb 8-1: Product: syz [ 193.285676][ T64] usb 8-1: Manufacturer: syz [ 193.288071][ T64] usb 8-1: SerialNumber: syz [ 193.292615][ T64] usb 8-1: config 0 descriptor?? [ 193.300786][ T64] usb 8-1: selecting invalid altsetting 0 [ 193.320583][ T39] audit: type=1400 audit(2000000067.942:59459): avc: denied { setopt } for pid=24399 comm="syz.2.8809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 193.405308][T24387] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 193.424466][T24410] netlink: 'syz.0.8814': attribute type 10 has an invalid length. [ 193.441937][T24412] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 193.489731][T24410] macvlan0: entered allmulticast mode [ 193.521694][ T6141] usb 8-1: USB disconnect, device number 8 [ 193.612961][ T39] audit: type=1400 audit(2000000068.204:59460): avc: denied { create } for pid=24433 comm="syz.0.8826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 193.622698][ T39] audit: type=1400 audit(2000000068.204:59461): avc: denied { bind } for pid=24433 comm="syz.0.8826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 193.684223][T24445] __nla_validate_parse: 7 callbacks suppressed [ 193.684245][T24445] netlink: 124 bytes leftover after parsing attributes in process `syz.4.8830'. [ 193.691427][T24445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8830'. [ 194.104778][T24488] netlink: 'syz.0.8852': attribute type 1 has an invalid length. [ 194.107553][T24488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.270436][T24504] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 194.279500][T24506] netlink: 'syz.0.8857': attribute type 39 has an invalid length. [ 194.583552][T24512] : renamed from hsr0 [ 194.583990][ T39] audit: type=1400 audit(2000000069.120:59462): avc: denied { ioctl } for pid=24511 comm="syz.3.8860" path="socket:[69508]" dev="sockfs" ino=69508 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 194.678346][T24519] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 194.723338][T24525] tmpfs: Bad value for 'mpol' [ 195.065215][T24537] JFS: charset not found [ 195.271952][T24562] bridge10: entered promiscuous mode [ 195.297820][T24564] netlink: 4420 bytes leftover after parsing attributes in process `syz.0.8886'. [ 195.503480][T24596] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 195.584104][T24604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8908'. [ 195.638341][ T1020] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 195.709648][T24617] xt_socket: unknown flags 0x8 [ 195.791380][T24628] bridge0: port 3(netdevsim0) entered blocking state [ 195.798170][T24628] bridge0: port 3(netdevsim0) entered disabled state [ 195.801067][T24628] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 195.804739][T24627] xt_CT: No such helper "pptp" [ 195.822994][ T1020] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 195.826317][ T1020] usb 8-1: config 0 has no interface number 0 [ 195.828713][ T1020] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 195.834796][ T1020] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 195.836661][T24632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8927'. [ 195.838577][ T1020] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 195.849210][ T1020] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.858098][ T1020] usb 8-1: config 0 descriptor?? [ 195.862672][ T1020] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 195.873301][T24635] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 195.954913][T24647] fuse: Bad value for 'fd' [ 195.971069][T24651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8932'. [ 196.081410][T24578] iowarrior 8-1:0.1: Error -90 while submitting URB [ 196.085930][T11815] usb 8-1: USB disconnect, device number 9 [ 196.279286][T24689] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.343154][T24697] netlink: 'syz.0.8954': attribute type 11 has an invalid length. [ 196.349842][T24697] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8954'. [ 196.427168][T24707] dlm: no local IP address has been set [ 196.431504][T24707] dlm: cannot start dlm midcomms -107 [ 196.473272][T24713] netlink: 'syz.4.8968': attribute type 64 has an invalid length. [ 196.476019][T24713] netlink: 'syz.4.8968': attribute type 4 has an invalid length. [ 196.478268][T24713] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8968'. [ 196.525191][T24719] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8966'. [ 196.745193][T24754] netlink: 'syz.3.8983': attribute type 1 has an invalid length. [ 196.747793][T24754] netlink: 'syz.3.8983': attribute type 3 has an invalid length. [ 196.750294][T24754] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8983'. [ 196.775176][T24759] sctp: [Deprecated]: syz.0.8993 (pid 24759) Use of int in max_burst socket option deprecated. [ 196.775176][T24759] Use struct sctp_assoc_value instead [ 196.826872][T24769] : renamed from bond0 (while UP) [ 196.878618][ T6061] Bluetooth: hci0: command tx timeout [ 196.891845][T24761] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 196.933701][T24781] random: crng reseeded on system resumption [ 197.774753][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 197.774808][ T39] audit: type=1400 audit(2000000072.086:59464): avc: denied { execute } for pid=24830 comm="syz.0.9019" name="file0" dev="tmpfs" ino=11213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 197.816297][ T39] audit: type=1400 audit(2000000072.086:59465): avc: denied { execute_no_trans } for pid=24830 comm="syz.0.9019" path="/2225/file0" dev="tmpfs" ino=11213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 198.131902][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.189308][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.239280][ T39] audit: type=1800 audit(2000000072.535:59466): pid=24845 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.9034" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 198.295227][T24848] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 198.319901][T24848] bridge0: port 2(netdevsim0) entered disabled state [ 198.337230][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.373318][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.382365][T24848] : left allmulticast mode [ 198.385321][T24848] : left promiscuous mode [ 198.392549][T24848] bridge0: port 1() entered disabled state [ 199.107335][ T39] audit: type=1400 audit(2000000073.349:59467): avc: denied { setopt } for pid=24894 comm="syz.3.9053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 199.185172][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.213507][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.223812][ T39] audit: type=1400 audit(2000000073.452:59468): avc: denied { append } for pid=24899 comm="syz.0.9056" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 199.396156][T24910] ubi31: detaching mtd0 [ 199.410496][T24910] ubi31: mtd0 is detached [ 199.438494][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.514296][ T39] audit: type=1400 audit(2000000073.732:59469): avc: denied { append } for pid=24914 comm="syz.0.9062" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 199.592836][T24919] netlink: zone id is out of range [ 199.608231][T24919] netlink: zone id is out of range [ 199.610250][T24919] netlink: zone id is out of range [ 199.611977][T24919] netlink: zone id is out of range [ 199.615730][T24919] netlink: zone id is out of range [ 199.619554][T24919] netlink: zone id is out of range [ 199.622459][T24919] netlink: zone id is out of range [ 199.629820][T24919] netlink: zone id is out of range [ 199.648532][T24919] netlink: zone id is out of range [ 199.655774][T24919] netlink: zone id is out of range [ 200.017181][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.067277][T24935] sctp: [Deprecated]: syz.3.9071 (pid 24935) Use of int in maxseg socket option. [ 200.067277][T24935] Use struct sctp_assoc_value instead [ 200.106750][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.119979][T24939] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 200.213018][T24943] __nla_validate_parse: 2 callbacks suppressed [ 200.213044][T24943] netlink: 448 bytes leftover after parsing attributes in process `syz.3.9076'. [ 200.235271][T24943] unsupported nla_type 14345 [ 200.345522][ T39] audit: type=1400 audit(2000000074.490:59470): avc: denied { write } for pid=24950 comm="syz.4.9082" name="file0" dev="tmpfs" ino=6526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 200.510003][T24964] : (slave bridge_slave_1): Releasing backup interface [ 200.572206][T24964] : (slave bond_slave_0): Releasing backup interface [ 200.620488][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.692707][T24964] : (slave bond_slave_1): Releasing backup interface [ 200.788484][T24964] team0: Port device team_slave_0 removed [ 200.827552][T24964] team0: Port device team_slave_1 removed [ 200.843543][T24965] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9084'. [ 201.187452][T24994] xt_hashlimit: Unknown mode mask 180, kernel too old? [ 201.219803][T24997] xt_HMARK: spi-set and port-set can't be combined [ 201.381777][T25012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9110'. [ 201.420059][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.519407][ T39] audit: type=1400 audit(2000000075.594:59471): avc: denied { ioctl } for pid=25015 comm="syz.3.9112" path="socket:[72313]" dev="sockfs" ino=72313 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 201.778388][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.875031][T25047] trusted_key: encrypted_key: master key parameter '' is invalid [ 201.890360][T25049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9128'. [ 202.005343][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.120750][T25064] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.183444][T25069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9138'. [ 202.262367][T25069] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 202.388461][T25075] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 202.608339][ T39] audit: type=1326 audit(2000000076.595:59472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25088 comm="syz.0.9147" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b4d8d169 code=0x7ffc0000 [ 202.621169][ T39] audit: type=1326 audit(2000000076.595:59473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25088 comm="syz.0.9147" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b4d8d169 code=0x7ffc0000 [ 202.656523][T25097] netlink: 'syz.0.9152': attribute type 1 has an invalid length. [ 202.853099][T25111] vxfs: WRONG superblock magic 00000000 at 1 [ 202.861728][T25111] vxfs: WRONG superblock magic 00000000 at 8 [ 202.867489][T25111] vxfs: can't find superblock. [ 203.048111][T25111] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 203.115782][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 203.115801][ T39] audit: type=1400 audit(2000000077.100:59480): avc: denied { unmount } for pid=6058 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 203.510115][ T39] audit: type=1400 audit(2000000077.465:59481): avc: denied { setopt } for pid=25153 comm="syz.3.9180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 203.631963][T25166] netlink: 'syz.2.9185': attribute type 13 has an invalid length. [ 203.669406][T25168] netlink: 'syz.3.9186': attribute type 1 has an invalid length. [ 203.683562][T25168] netlink: 'syz.3.9186': attribute type 3 has an invalid length. [ 203.692694][T25168] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9186'. [ 204.228069][ T39] audit: type=1400 audit(2000000078.138:59482): avc: denied { read } for pid=25208 comm="syz.2.9203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 204.373921][ T39] audit: type=1400 audit(2000000078.269:59483): avc: denied { setattr } for pid=25219 comm="syz.0.9209" name="sequencer" dev="devtmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 204.705747][T25249] netlink: 'syz.4.9222': attribute type 2 has an invalid length. [ 204.731078][T25253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9223'. [ 204.748459][T25253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9223'. [ 204.849064][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.851558][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.995801][T25269] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9231'. [ 205.066700][ T39] audit: type=1400 audit(2000000078.915:59484): avc: denied { ioctl } for pid=25274 comm="syz.0.9235" path="socket:[72502]" dev="sockfs" ino=72502 ioctlcmd=0x8947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.213781][T25292] program syz.3.9243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.276197][T25296] net_ratelimit: 1 callbacks suppressed [ 205.276219][T25296] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 205.433489][ T39] audit: type=1400 audit(2000000079.270:59485): avc: denied { write } for pid=25307 comm="syz.2.9249" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 205.477254][ T1095] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 205.480130][ T1095] ata1.00: irq_stat 0x40000000 [ 205.481832][ T1095] ata1.00: failed command: ZAC MANAGEMENT OUT [ 205.497067][ T1095] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 0 [ 205.497067][ T1095] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 205.503398][ T1095] ata1.00: status: { DRDY ERR } [ 205.507379][ T1095] ata1.00: error: { ABRT } [ 205.513343][ T1095] ata1.00: device reported invalid CHS sector 0 [ 205.577945][T25311] netlink: 'syz.2.9253': attribute type 1 has an invalid length. [ 205.603035][T25311] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9253'. [ 205.633920][T25316] Debayer A: ================= START STATUS ================= [ 205.645380][T25316] Debayer A: Debayer Mean Window Size: 3 [ 205.650447][T25316] Debayer A: ================== END STATUS ================== [ 206.057884][T25329] cgroup2: Unknown parameter 'euid' [ 206.673301][ T39] audit: type=1400 audit(2000000080.421:59486): avc: denied { ioctl } for pid=25353 comm="syz.4.9273" path="socket:[73610]" dev="sockfs" ino=73610 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 206.940371][ T39] audit: type=1400 audit(2000000080.664:59487): avc: denied { append } for pid=25376 comm="syz.2.9285" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 206.981773][ T39] audit: type=1400 audit(2000000080.701:59488): avc: denied { map } for pid=25376 comm="syz.2.9285" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 206.995945][ T39] audit: type=1400 audit(2000000080.701:59489): avc: denied { write execute } for pid=25376 comm="syz.2.9285" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 207.074626][T25389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9289'. [ 207.333697][ C2] vkms_vblank_simulate: vblank timer overrun [ 207.525732][ T58] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 207.578895][T25418] cgroup: Invalid name [ 207.613329][T25421] netlink: 'syz.0.9306': attribute type 9 has an invalid length. [ 207.619424][T25421] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9306'. [ 207.733901][ T58] usb 8-1: Using ep0 maxpacket: 8 [ 207.737790][ T58] usb 8-1: config 0 has no interfaces? [ 207.742140][ T58] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 207.744308][T25431] program syz.4.9311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.757184][ C2] vkms_vblank_simulate: vblank timer overrun [ 207.765965][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.801903][ T58] usb 8-1: config 0 descriptor?? [ 207.841369][T25435] Timeout policy `syz0' can only be used by L3 protocol number 24578 [ 207.872786][T25437] netlink: 'syz.2.9314': attribute type 2 has an invalid length. [ 207.888143][T25437] netlink: 'syz.2.9314': attribute type 11 has an invalid length. [ 207.890372][T25439] syz.4.9315: attempt to access beyond end of device [ 207.890372][T25439] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 207.905835][T25437] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9314'. [ 207.930716][T25439] exFAT-fs (nbd4): unable to read boot sector [ 207.938154][T25439] exFAT-fs (nbd4): failed to read boot sector [ 207.949216][T25439] exFAT-fs (nbd4): failed to recognize exfat type [ 208.094441][ C2] vkms_vblank_simulate: vblank timer overrun [ 208.100455][T25399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.146849][T25399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.165720][ C2] vkms_vblank_simulate: vblank timer overrun [ 208.183341][ T58] usb 8-1: USB disconnect, device number 10 [ 208.184221][T25447] overlay: ./bus is not a directory [ 208.217581][ C2] vkms_vblank_simulate: vblank timer overrun [ 208.273126][ C2] vkms_vblank_simulate: vblank timer overrun [ 208.338924][T25451] delete_channel: no stack [ 208.379652][T25452] IPv6: sit1: Disabled Multicast RS [ 208.393595][T25452] sit1: entered allmulticast mode [ 208.561216][ C2] vkms_vblank_simulate: vblank timer overrun [ 208.615480][ C2] vkms_vblank_simulate: vblank timer overrun [ 208.706667][T25465] dns_resolver: Unsupported content type (234) [ 208.888499][ C2] vkms_vblank_simulate: vblank timer overrun [ 209.008927][T25481] netlink: 'syz.3.9336': attribute type 1 has an invalid length. [ 209.157631][T25492] 9pnet_fd: p9_fd_create_unix (25492): problem connecting socket: ./file2: -2 [ 209.239385][T25497] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0 [ 209.306366][ C2] vkms_vblank_simulate: vblank timer overrun [ 209.469789][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 209.469809][ T39] audit: type=1400 audit(2000000083.040:59492): avc: denied { wake_alarm } for pid=25510 comm="syz.0.9350" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 209.525286][T25515] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9351'. [ 209.535982][ T1020] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 209.684381][T25523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9354'. [ 209.749847][ T1020] usb 8-1: Using ep0 maxpacket: 16 [ 209.762733][ T1020] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.793119][ T1020] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 209.804898][ T1020] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.813670][ T1020] usb 8-1: config 0 interface 0 has no altsetting 0 [ 209.832422][ T1020] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 209.843180][ T1020] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.862329][ T1020] usb 8-1: Product: syz [ 209.869234][ T1020] usb 8-1: Manufacturer: syz [ 209.875488][ T1020] usb 8-1: SerialNumber: syz [ 209.886656][ T1020] usb 8-1: config 0 descriptor?? [ 210.163254][ T1020] usb 8-1: Can not set alternate setting to 1, error: -71 [ 210.173634][T25553] program syz.0.9371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.179286][ T1020] synaptics_usb 8-1:0.0: probe with driver synaptics_usb failed with error -71 [ 210.209703][ T1020] usb 8-1: USB disconnect, device number 11 [ 210.671973][T25579] vivid-000: ================= START STATUS ================= [ 210.675936][T25579] vivid-000: RDS Tx I/O Mode: Controls [ 210.696149][T25579] vivid-000: RDS Program ID: 32904 [ 210.721895][T25579] vivid-000: RDS Program Type: 6 [ 210.724256][T25579] vivid-000: RDS PS Name: VIVID-TX [ 210.729063][T25579] vivid-000: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 210.747797][T25579] vivid-000: RDS Stereo: true [ 210.750755][T25579] vivid-000: RDS Artificial Head: false [ 210.789838][T25579] vivid-000: RDS Compressed: false [ 210.791949][T25579] vivid-000: RDS Dynamic PTY: false [ 210.793713][T25579] vivid-000: RDS Traffic Announcement: true [ 210.796005][T25579] vivid-000: RDS Traffic Program: true [ 210.813537][T25579] vivid-000: RDS Music: true [ 210.815256][T25579] vivid-000: ================== END STATUS ================== [ 210.834877][T25584] futex_wake_op: syz.4.9379 tries to shift op by -1; fix this program [ 210.917275][T25588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9386'. [ 211.215858][T25605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9395'. [ 211.249172][ C2] vkms_vblank_simulate: vblank timer overrun [ 211.268240][ T39] audit: type=1400 audit(2000000084.724:59493): avc: denied { bind } for pid=25606 comm="syz.4.9396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 211.324489][ C2] sr 2:0:0:0: [sr0] tag#30 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 211.328380][ C2] sr 2:0:0:0: [sr0] tag#30 CDB: Maintenance in, sa=0x0 a3 00 00 00 00 00 [ 211.441197][ C2] vkms_vblank_simulate: vblank timer overrun [ 211.479531][ C2] vkms_vblank_simulate: vblank timer overrun [ 211.589172][ C2] vkms_vblank_simulate: vblank timer overrun [ 211.706178][T25625] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 211.713536][ T39] audit: type=1400 audit(2000000085.107:59494): avc: denied { write } for pid=25624 comm="syz.4.9403" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 212.029179][T25644] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 212.033402][T25644] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 212.039994][T25644] vhci_hcd vhci_hcd.0: Device attached [ 212.081963][T25645] vhci_hcd: connection closed [ 212.099867][ T1139] vhci_hcd: stop threads [ 212.117158][ T1139] vhci_hcd: release socket [ 212.119869][ T1139] vhci_hcd: disconnect device [ 212.213670][ T39] audit: type=1400 audit(2000000085.612:59495): avc: denied { mounton } for pid=25656 comm="syz.2.9415" path="/2323/file0" dev="tmpfs" ino=11713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 212.265474][T25657] 9pnet: Could not find request transport: xen [ 212.976414][ T39] audit: type=1400 audit(2000000086.314:59496): avc: denied { bind } for pid=25698 comm="syz.3.9436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 213.017824][ T39] audit: type=1400 audit(2000000086.314:59497): avc: denied { name_bind } for pid=25698 comm="syz.3.9436" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 213.041012][ T39] audit: type=1400 audit(2000000086.314:59498): avc: denied { node_bind } for pid=25698 comm="syz.3.9436" saddr=fc00::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 213.229932][ C2] vkms_vblank_simulate: vblank timer overrun [ 213.623229][T25737] netlink: 172 bytes leftover after parsing attributes in process `syz.2.9454'. [ 213.901225][T25718] ufs: You didn't specify the type of your ufs filesystem [ 213.901225][T25718] [ 213.901225][T25718] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 213.901225][T25718] [ 213.901225][T25718] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 213.920981][T25718] ufs: failed to set blocksize [ 214.009144][ C2] vkms_vblank_simulate: vblank timer overrun [ 214.193077][ C2] vkms_vblank_simulate: vblank timer overrun [ 214.252797][T25760] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9464'. [ 214.273164][ C2] vkms_vblank_simulate: vblank timer overrun [ 214.314479][T25760] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9464'. [ 214.346273][T25760] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9464'. [ 214.495207][T25769] wg1 speed is unknown, defaulting to 1000 [ 214.545233][ C2] vkms_vblank_simulate: vblank timer overrun [ 214.581267][ C2] vkms_vblank_simulate: vblank timer overrun [ 214.908274][ T6064] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 214.963995][T25798] netlink: 'syz.0.9482': attribute type 1 has an invalid length. [ 215.033025][T25798] NCSI netlink: No device for ifindex 0 [ 215.101155][ C2] vkms_vblank_simulate: vblank timer overrun [ 215.225068][T25809] fuse: Unknown parameter 'smackfshat' [ 215.235527][ T39] audit: type=1400 audit(2000000088.419:59499): avc: denied { mounton } for pid=25807 comm="syz.0.9486" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 215.275118][ C2] vkms_vblank_simulate: vblank timer overrun [ 215.333622][ T39] audit: type=1400 audit(2000000088.438:59500): avc: denied { setopt } for pid=25810 comm="syz.2.9488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.449831][T25819] program syz.3.9490 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.598102][T25825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.682173][ T6064] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 215.885270][T25834] netlink: 'syz.2.9496': attribute type 39 has an invalid length. [ 216.348283][T25850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9504'. [ 216.469130][ C2] vkms_vblank_simulate: vblank timer overrun [ 216.496602][T25859] ptrace attach of "/syz-executor exec"[13961] was attempted by ""[25859] [ 216.592986][T25864] dns_resolver: Unsupported server list version (0) [ 216.648185][T25870] sctp: [Deprecated]: syz.4.9512 (pid 25870) Use of int in max_burst socket option deprecated. [ 216.648185][T25870] Use struct sctp_assoc_value instead [ 216.823318][T25877] : renamed from bond0 [ 216.997734][T25879] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 217.047093][T25892] netlink: 'syz.0.9523': attribute type 1 has an invalid length. [ 217.072321][T25892] netlink: 'syz.0.9523': attribute type 3 has an invalid length. [ 217.094636][T25892] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9523'. [ 217.149150][T25898] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9526'. [ 217.258843][T25900] netlink: 172 bytes leftover after parsing attributes in process `syz.4.9528'. [ 217.482698][T25908] netlink: 'syz.3.9532': attribute type 64 has an invalid length. [ 217.486827][T25908] netlink: 'syz.3.9532': attribute type 4 has an invalid length. [ 217.510007][T25908] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9532'. [ 217.517508][T25909] netlink: 'syz.4.9534': attribute type 7 has an invalid length. [ 217.555102][T25912] openvswitch: netlink: Actions may not be safe on all matching packets [ 217.957813][T25932] xt_hashlimit: overflow, try lower: 0/0 [ 218.024657][T25934] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.190876][T25944] fuse: Bad value for 'fd' [ 218.485335][T11815] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 218.544366][T25952] xt_CT: No such helper "pptp" [ 218.663076][T25961] "syz.2.9561" (25961) uses obsolete ecb(arc4) skcipher [ 218.686620][T11815] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 218.690482][T11815] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.698510][T11815] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 218.758102][T11815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.762541][T11815] usb 5-1: Product: syz [ 218.764385][T11815] usb 5-1: Manufacturer: syz [ 218.770643][T11815] usb 5-1: SerialNumber: syz [ 218.778620][T11815] usb 5-1: config 0 descriptor?? [ 218.801333][T11815] usb 5-1: selecting invalid altsetting 0 [ 219.078846][ T9] usb 5-1: USB disconnect, device number 12 [ 219.265146][ C2] vkms_vblank_simulate: vblank timer overrun [ 219.536125][ C2] vkms_vblank_simulate: vblank timer overrun [ 219.673913][T25990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9572'. [ 220.034863][T26007] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 220.203634][T26017] netlink: 'syz.4.9587': attribute type 1 has an invalid length. [ 220.210156][T26017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.830201][T26047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9603'. [ 221.197724][T26062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9606'. [ 221.243893][T26060] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 221.283631][ T6046] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 221.438395][ T6046] usb 7-1: device descriptor read/64, error -71 [ 221.602523][T26072] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 221.711699][ T6046] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 221.872651][ T6046] usb 7-1: device descriptor read/64, error -71 [ 221.993167][ T6046] usb usb7-port1: attempt power cycle [ 222.548424][T26101] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9625'. [ 222.548423][ T6046] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 222.569930][ T6046] usb 7-1: device descriptor read/8, error -71 [ 222.912978][ T6046] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 222.961985][ T6046] usb 7-1: device descriptor read/8, error -71 [ 223.124093][ T6046] usb usb7-port1: unable to enumerate USB device [ 223.142657][ T6050] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 223.370233][ T6050] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 223.381537][ T6050] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.383777][T11815] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 223.416887][ T6050] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 223.459265][ T6050] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.467564][ T6050] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.481470][ T6050] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 223.488114][ T6050] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 223.491631][ T6050] usb 9-1: Product: syz [ 223.493489][ T6050] usb 9-1: Manufacturer: syz [ 223.505803][ T6050] cdc_wdm 9-1:1.0: skipping garbage [ 223.514416][ T6050] cdc_wdm 9-1:1.0: skipping garbage [ 223.522413][ T6050] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 223.526157][ T6050] cdc_wdm 9-1:1.0: Unknown control protocol [ 223.625622][T11815] usb 8-1: Using ep0 maxpacket: 32 [ 223.630946][T11815] usb 8-1: unable to get BOS descriptor or descriptor too short [ 223.663125][T11815] usb 8-1: config index 0 descriptor too short (expected 34347, got 43) [ 223.667236][T11815] usb 8-1: config 31 has too many interfaces: 196, using maximum allowed: 32 [ 223.672864][T11815] usb 8-1: config 31 has an invalid descriptor of length 0, skipping remainder of the config [ 223.678150][T11815] usb 8-1: config 31 has 1 interface, different from the descriptor's value: 196 [ 223.684534][T11815] usb 8-1: config 31 has no interface number 0 [ 223.693382][T11815] usb 8-1: config 31 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 223.698749][T11815] usb 8-1: config 31 interface 81 altsetting 3 bulk endpoint 0x83 has invalid maxpacket 150 [ 223.714299][T11815] usb 8-1: config 31 interface 81 has no altsetting 0 [ 223.726648][T26110] cdc_wdm 9-1:1.0: Error submitting int urb - -90 [ 223.754721][ T6046] usb 9-1: USB disconnect, device number 6 [ 223.757881][T11815] usb 8-1: string descriptor 0 read error: -22 [ 223.773378][T11815] usb 8-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 223.781341][T11815] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.798607][T26119] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 223.805145][T11815] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:31.81/input/input34 [ 224.303419][T26125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9638'. [ 224.508098][T11815] usb 8-1: USB disconnect, device number 12 [ 224.508401][ C1] usbtouchscreen 8-1:31.81: usbtouch_irq - usb_submit_urb failed with result: -19 [ 224.892916][T26153] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 225.026136][T26156] vxfs: WRONG superblock magic 00000000 at 1 [ 225.033742][T26156] vxfs: WRONG superblock magic 00000000 at 8 [ 225.040618][T26156] vxfs: can't find superblock. [ 225.149889][T26156] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 225.348638][ T39] audit: type=1400 audit(2000000097.895:59501): avc: denied { getopt } for pid=26170 comm="syz.4.9663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 225.757328][T26190] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.764556][T26190] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.791509][T26190] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.802714][T26190] vxlan0: entered promiscuous mode [ 225.804892][T26190] vxlan0: entered allmulticast mode [ 225.809873][ T39] audit: type=1400 audit(2000000098.325:59502): avc: denied { write } for pid=5336 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.854383][T26190] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.858958][ T39] audit: type=1400 audit(2000000098.325:59503): avc: denied { remove_name } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.884326][T26190] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.884478][T26190] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.949798][ T39] audit: type=1400 audit(2000000098.325:59504): avc: denied { rename } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 225.974617][ T39] audit: type=1400 audit(2000000098.325:59505): avc: denied { add_name } for pid=5336 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.016344][ T39] audit: type=1400 audit(2000000098.325:59506): avc: denied { unlink } for pid=5336 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 226.040665][ T39] audit: type=1400 audit(2000000098.325:59507): avc: denied { create } for pid=5336 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 226.048989][ C3] vkms_vblank_simulate: vblank timer overrun [ 226.105854][T26187] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 226.289310][ C3] vkms_vblank_simulate: vblank timer overrun [ 226.372073][ T39] audit: type=1400 audit(2000000098.830:59508): avc: denied { setopt } for pid=26205 comm="syz.2.9680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 226.513384][ T39] audit: type=1400 audit(2000000098.980:59509): avc: denied { setopt } for pid=26213 comm="syz.2.9689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 226.738964][T26229] netlink: 'syz.0.9691': attribute type 10 has an invalid length. [ 226.754140][T26229] bridge0: port 2(team0) entered disabled state [ 226.761982][T26229] bridge0: port 1() entered disabled state [ 226.924194][T26236] cgroup: Invalid name [ 226.930053][T26240] ksmbd: Unknown IPC event: 1, ignore. [ 226.977496][ T39] audit: type=1400 audit(2000000099.401:59510): avc: denied { read } for pid=26238 comm="syz.4.9694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 227.228151][T26255] netlink: 'syz.2.9702': attribute type 2 has an invalid length. [ 227.231607][T26255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.579695][T26266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9706'. [ 227.611611][ C3] vkms_vblank_simulate: vblank timer overrun [ 227.876288][T26278] : entered promiscuous mode [ 227.947547][T26282] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 228.044646][ C3] vkms_vblank_simulate: vblank timer overrun [ 228.368691][T26297] dns_resolver: Unsupported content type (234) [ 228.412385][T26299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9723'. [ 228.522926][T26304] Debayer A: ================= START STATUS ================= [ 228.542126][T26304] Debayer A: Debayer Mean Window Size: 3 [ 228.565964][T26304] Debayer A: ================== END STATUS ================== [ 228.681974][T26314] Timeout policy `syz1' can only be used by L3 protocol number 35064 [ 228.832999][ C3] vkms_vblank_simulate: vblank timer overrun [ 228.962845][T26327] No such timeout policy "syz0" [ 229.109004][ C3] vkms_vblank_simulate: vblank timer overrun [ 229.121672][T26335] program syz.2.9739 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.150570][T26333] netlink: 'syz.3.9737': attribute type 1 has an invalid length. [ 229.150595][T26333] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9737'. [ 229.302552][ T1095] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 229.305798][ T1095] ata1.00: irq_stat 0x40000000 [ 229.327523][ T1095] ata1.00: failed command: ZAC MANAGEMENT OUT [ 229.334474][ T1095] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 21 [ 229.334474][ T1095] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 229.344915][ T1095] ata1.00: status: { DRDY ERR } [ 229.348051][ T1095] ata1.00: error: { ABRT } [ 229.352108][ T1095] ata1.00: device reported invalid CHS sector 0 [ 229.524284][ C3] vkms_vblank_simulate: vblank timer overrun [ 229.988916][ C3] vkms_vblank_simulate: vblank timer overrun [ 229.998491][T26370] SELinux: truncated policydb string identifier [ 230.008047][T26370] SELinux: failed to load policy [ 230.024212][T26371] delete_channel: no stack [ 230.133433][ C3] vkms_vblank_simulate: vblank timer overrun [ 230.173497][T26376] syz.0.9758: attempt to access beyond end of device [ 230.173497][T26376] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 230.180593][T26376] exFAT-fs (nbd0): unable to read boot sector [ 230.201606][ C3] vkms_vblank_simulate: vblank timer overrun [ 230.211685][T26376] exFAT-fs (nbd0): failed to read boot sector [ 230.214618][T26376] exFAT-fs (nbd0): failed to recognize exfat type [ 230.360804][T26351] orangefs_mount: mount request failed with -4 [ 230.524522][T26391] QAT: Invalid ioctl -2110754303 [ 230.772403][T26406] 9pnet_fd: p9_fd_create_unix (26406): problem connecting socket: ./file2: -2 [ 231.024722][T26415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9778'. [ 231.385235][ C3] vkms_vblank_simulate: vblank timer overrun [ 231.416764][ C3] vkms_vblank_simulate: vblank timer overrun [ 231.464941][ C3] vkms_vblank_simulate: vblank timer overrun [ 231.593695][T26438] netlink: 'syz.4.9787': attribute type 9 has an invalid length. [ 231.610169][T26438] netlink: 244 bytes leftover after parsing attributes in process `syz.4.9787'. [ 231.730413][ C2] ata1: illegal qc_active transition (00000000->00000008) [ 231.865004][T26452] overlay: ./bus is not a directory [ 232.115752][ T1095] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 232.116353][T26466] (unnamed net_device) (uninitialized): peer notification delay (10) is not a multiple of miimon (100), value rounded to 0 ms [ 232.167895][ T1095] ata1.00: configured for UDMA/100 [ 232.300886][ C3] vkms_vblank_simulate: vblank timer overrun [ 232.320093][ C3] vkms_vblank_simulate: vblank timer overrun [ 232.338703][T26466] bond0: entered promiscuous mode [ 232.340876][T26466] bond0: entered allmulticast mode [ 232.346340][T26466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.492144][T26470] wg1 speed is unknown, defaulting to 1000 [ 232.658504][T26474] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 233.268999][ C3] vkms_vblank_simulate: vblank timer overrun [ 233.428682][T26513] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9822'. [ 233.484482][T26515] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 233.488282][T26515] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 233.658382][T26518] futex_wake_op: syz.3.9818 tries to shift op by -1; fix this program [ 233.938879][T26529] netlink: 'syz.4.9829': attribute type 10 has an invalid length. [ 233.985549][ C3] vkms_vblank_simulate: vblank timer overrun [ 234.020188][T26529] team0: Cannot enslave team device to itself [ 234.185216][T11815] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 234.316903][ C3] vkms_vblank_simulate: vblank timer overrun [ 234.382243][T11815] usb 5-1: Using ep0 maxpacket: 32 [ 234.413142][T11815] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 234.431734][T11815] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 234.447400][T11815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.452866][T11815] usb 5-1: Product: syz [ 234.456120][T11815] usb 5-1: Manufacturer: syz [ 234.462365][T11815] usb 5-1: SerialNumber: syz [ 234.500504][T11815] usb 5-1: config 0 descriptor?? [ 234.508206][T26526] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 234.533389][T11815] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 234.639929][T26562] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9846'. [ 234.763443][ T1020] usb 5-1: USB disconnect, device number 13 [ 235.174974][T26579] IPv6: sit1: Disabled Multicast RS [ 235.178627][T26579] sit1: entered allmulticast mode [ 235.441323][T26585] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.547698][T26589] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 235.749770][T26592] xt_hashlimit: overflow, rate too high: 0 [ 235.922576][T26601] netlink: set zone limit has 8 unknown bytes [ 236.111866][ C3] vkms_vblank_simulate: vblank timer overrun [ 236.203382][T26616] netlink: 'syz.2.9872': attribute type 3 has an invalid length. [ 236.208135][T26616] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9872'. [ 236.612297][T26634] netlink: 'syz.3.9879': attribute type 2 has an invalid length. [ 236.645122][T26634] netlink: 'syz.3.9879': attribute type 1 has an invalid length. [ 236.656040][T26634] netlink: 'syz.3.9879': attribute type 1 has an invalid length. [ 236.868354][T26646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9886'. [ 236.954078][T26651] [U] [ 236.955281][T26651] [U] [ 236.956547][T26651] [U] [ 236.957833][T26651] [U] [ 236.959498][T26651] [U] [ 236.961086][T26651] [U] [ 236.962604][T26651] [U] [ 236.965896][T26651] [U] [ 236.970922][T26651] [U] [ 236.973483][T26651] [U] [ 236.977307][T26651] [U] [ 236.984354][T26651] [U] [ 236.998009][T26651] [U] [ 237.001254][T26651] [U] [ 237.018940][T26651] [U] [ 237.020396][T26651] [U] [ 237.022437][ C3] vkms_vblank_simulate: vblank timer overrun [ 237.030023][T26649] [U] [ 237.110441][T26658] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9893'. [ 237.142609][T26660] netlink: 'syz.4.9894': attribute type 2 has an invalid length. [ 237.150942][ C3] vkms_vblank_simulate: vblank timer overrun [ 237.181168][T26660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9894'. [ 237.380280][T26669] xt_recent: Unsupported userspace flags (00000042) [ 237.417581][T26674] netlink: 'syz.2.9901': attribute type 12 has an invalid length. [ 237.579316][T26679] netlink: 39 bytes leftover after parsing attributes in process `syz.4.9902'. [ 237.803504][T26686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9907'. [ 237.870990][T26690] block device autoloading is deprecated and will be removed. [ 237.891881][T26690] syz.2.9910: attempt to access beyond end of device [ 237.891881][T26690] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 238.065752][T26691] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 238.177305][ C3] vkms_vblank_simulate: vblank timer overrun [ 238.181646][T26704] SET target dimension over the limit! [ 238.288922][ C3] vkms_vblank_simulate: vblank timer overrun [ 238.324399][T26710] vivid-007: ================= START STATUS ================= [ 238.381725][T26710] vivid-007: Generate PTS: true [ 238.384971][T26710] vivid-007: Generate SCR: true [ 238.398370][T26710] tpg source WxH: 640x360 (Y'CbCr) [ 238.405248][T26710] tpg field: 1 [ 238.407576][T26710] tpg crop: 640x360@0x0 [ 238.414598][T26710] tpg compose: 640x360@0x0 [ 238.425037][T26710] tpg colorspace: 8 [ 238.432045][T26710] tpg transfer function: 0/0 [ 238.467970][T26710] tpg Y'CbCr encoding: 0/0 [ 238.469674][T26710] tpg quantization: 0/0 [ 238.472201][T26710] tpg RGB range: 0/2 [ 238.494449][T26710] vivid-007: ================== END STATUS ================== [ 238.752848][ C3] vkms_vblank_simulate: vblank timer overrun [ 238.776699][T26731] ieee802154 phy1 wpan1: encryption failed: -22 [ 239.121158][T26749] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 239.127312][T26749] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 239.134305][T26749] vhci_hcd vhci_hcd.0: Device attached [ 239.156242][T26750] vhci_hcd: unknown pdu 1 [ 239.173340][ T65] vhci_hcd: stop threads [ 239.184976][ T65] vhci_hcd: release socket [ 239.186932][ T65] vhci_hcd: disconnect device [ 239.249012][ C3] vkms_vblank_simulate: vblank timer overrun [ 239.300324][T26743] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 239.359219][T26756] syz.4.9940 uses old SIOCAX25GETINFO [ 239.377153][T26758] ip6gretap1: entered allmulticast mode [ 239.472948][T26761] netlink: 'syz.0.9943': attribute type 28 has an invalid length. [ 239.486929][T26761] netlink: 'syz.0.9943': attribute type 3 has an invalid length. [ 239.493971][T26761] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9943'. [ 239.622893][ C3] vkms_vblank_simulate: vblank timer overrun [ 239.794002][T26770] netlink: 'syz.0.9945': attribute type 1 has an invalid length. [ 239.804321][T26769] netlink: 'syz.2.9947': attribute type 9 has an invalid length. [ 239.876718][ C3] vkms_vblank_simulate: vblank timer overrun [ 240.137006][ C3] vkms_vblank_simulate: vblank timer overrun [ 240.368878][ C3] vkms_vblank_simulate: vblank timer overrun [ 240.920843][ C3] vkms_vblank_simulate: vblank timer overrun [ 241.103014][ T57] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 241.330009][ T57] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 241.378305][ T57] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 241.383170][ T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.403072][T26816] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 241.429673][ T57] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 241.816964][ T6141] usb 9-1: USB disconnect, device number 7 [ 241.916382][T26862] netlink: 'syz.0.9993': attribute type 1 has an invalid length. [ 241.921096][T26862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9993'. [ 242.028091][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 242.028115][ T39] audit: type=1400 audit(2000000113.498:59512): avc: denied { write } for pid=26864 comm="syz.2.9994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 242.266000][T26880] cgroup: Need name or subsystem set [ 242.310005][ C3] vkms_vblank_simulate: vblank timer overrun [ 242.630985][T26900] 8021q: adding VLAN 0 to HW filter on device bond9 [ 242.748550][ T39] audit: type=1400 audit(2000000114.172:59513): avc: denied { ioctl } for pid=26904 comm="syz.4.10013" path="socket:[81078]" dev="sockfs" ino=81078 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 242.785495][T26907] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 243.216014][ T8] IPVS: starting estimator thread 0... [ 243.238686][T26933] program syz.0.10027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.341142][T26934] IPVS: using max 22 ests per chain, 52800 per kthread [ 243.350264][T26938] netlink: 172 bytes leftover after parsing attributes in process `syz.3.10029'. [ 243.499383][T26946] ip6t_srh: unknown srh invflags 7D00 [ 243.888818][ C2] vkms_vblank_simulate: vblank timer overrun [ 244.000110][T26977] PM: Enabling pm_trace changes system date and time during resume. [ 244.000110][T26977] PM: Correct system time has to be restored manually after resume. [ 244.059559][ T39] audit: type=1400 audit(2000000115.397:59514): avc: denied { open } for pid=26980 comm="syz.3.10050" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 244.083818][ C2] vkms_vblank_simulate: vblank timer overrun [ 244.119543][ T39] audit: type=1400 audit(2000000115.397:59515): avc: denied { ioctl } for pid=26980 comm="syz.3.10050" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 244.194697][T26989] netlink: 'syz.0.10054': attribute type 4 has an invalid length. [ 244.199893][T26989] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10054'. [ 244.352801][ C2] vkms_vblank_simulate: vblank timer overrun [ 244.377209][ T39] audit: type=1400 audit(2000000115.687:59516): avc: denied { write } for pid=26996 comm="syz.3.10061" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 244.414516][ C2] vkms_vblank_simulate: vblank timer overrun [ 244.451796][T27003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.542814][T27008] netlink: 'syz.2.10066': attribute type 39 has an invalid length. [ 244.562928][T27009] wg1 speed is unknown, defaulting to 1000 [ 244.603111][T27011] program syz.4.10063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.832806][ C2] vkms_vblank_simulate: vblank timer overrun [ 244.972089][T27024] netlink: 'syz.2.10071': attribute type 1 has an invalid length. [ 244.994097][T27024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.074751][T27028] usb usb8: usbfs: process 27028 (syz.3.10080) did not claim interface 0 before use [ 245.245326][T27038] xt_hashlimit: max too large, truncated to 1048576 [ 245.281067][T27038] xt_bpf: check failed: parse error [ 245.312891][ C2] vkms_vblank_simulate: vblank timer overrun [ 245.399429][T27044] ./bus: Can't lookup blockdev [ 245.565649][T27048] netlink: 'syz.3.10083': attribute type 1 has an invalid length. [ 245.568700][T27048] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.10083'. [ 245.766928][T27059] blktrace: Concurrent blktraces are not allowed on sg0 [ 245.792821][ C2] vkms_vblank_simulate: vblank timer overrun [ 246.085536][ T8] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 246.096785][ C2] vkms_vblank_simulate: vblank timer overrun [ 246.279903][ T8] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 246.321585][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.325528][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 246.328631][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.333422][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.379578][ T8] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 246.400356][ T8] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 246.411146][ T8] usb 5-1: Product: syz [ 246.418401][ T8] usb 5-1: Manufacturer: syz [ 246.479682][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 246.494953][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 246.514241][ T8] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 246.516823][ T8] cdc_wdm 5-1:1.0: Unknown control protocol [ 246.553603][T27086] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10103'. [ 246.632847][ C2] vkms_vblank_simulate: vblank timer overrun [ 246.792617][T27060] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 246.806440][ T1020] usb 5-1: USB disconnect, device number 14 [ 247.177310][T27108] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 247.203543][T27110] netlink: 'syz.3.10114': attribute type 10 has an invalid length. [ 247.249597][T27110] macvlan0: entered allmulticast mode [ 247.253925][T27110] : (slave macvlan0): Error -22 calling dev_set_mtu [ 247.365481][T27114] cgroup: Invalid name [ 247.683785][T27132] ksmbd: Unknown IPC event: 1, ignore. [ 248.084269][T27153] netlink: 108 bytes leftover after parsing attributes in process `syz.3.10136'. [ 248.095917][T27153] netlink: 108 bytes leftover after parsing attributes in process `syz.3.10136'. [ 248.106198][T27153] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10136'. [ 248.132807][ C2] vkms_vblank_simulate: vblank timer overrun [ 248.362172][T27169] netlink: 172 bytes leftover after parsing attributes in process `syz.3.10142'. [ 248.672754][ C2] vkms_vblank_simulate: vblank timer overrun [ 248.783997][ C2] vkms_vblank_simulate: vblank timer overrun [ 249.106649][T27191] 9pnet: Could not find request transport: xen [ 249.299983][T27204] vivid-001: ================= START STATUS ================= [ 249.308141][T27204] vivid-001: RDS Tx I/O Mode: Controls [ 249.310548][T27204] vivid-001: RDS Program ID: 32904 [ 249.312882][T27204] vivid-001: RDS Program Type: 3 [ 249.318771][T27204] vivid-001: RDS PS Name: VIVID-TX [ 249.321288][T27204] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 249.325792][T27204] vivid-001: RDS Stereo: true [ 249.327650][T27204] vivid-001: RDS Artificial Head: false [ 249.330110][T27204] vivid-001: RDS Compressed: false [ 249.332539][T27204] vivid-001: RDS Dynamic PTY: false [ 249.335422][T27204] vivid-001: RDS Traffic Announcement: false [ 249.339423][T27204] vivid-001: RDS Traffic Program: true [ 249.341635][T27204] vivid-001: RDS Music: true [ 249.343639][T27204] vivid-001: ================== END STATUS ================== [ 249.514946][T27209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10165'. [ 249.530443][ T1020] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 249.772348][ T1020] usb 7-1: Using ep0 maxpacket: 16 [ 249.815269][ T1020] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.820893][ T1020] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 249.867228][ T1020] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.891860][ T1020] usb 7-1: config 0 interface 0 has no altsetting 0 [ 249.899205][ T1020] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 249.916605][ T1020] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.920901][ T1020] usb 7-1: Product: syz [ 249.925964][ T1020] usb 7-1: Manufacturer: syz [ 249.928317][ T1020] usb 7-1: SerialNumber: syz [ 249.941082][ T1020] usb 7-1: config 0 descriptor?? [ 250.029072][ T58] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 250.168329][ T1020] usb 7-1: Can not set alternate setting to 1, error: -71 [ 250.171261][ T1020] synaptics_usb 7-1:0.0: probe with driver synaptics_usb failed with error -71 [ 250.200620][ T58] usb 9-1: Using ep0 maxpacket: 8 [ 250.210227][ T1020] usb 7-1: USB disconnect, device number 11 [ 250.221510][ T58] usb 9-1: config 0 has no interfaces? [ 250.249915][ T58] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 250.269203][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.302461][ T58] usb 9-1: config 0 descriptor?? [ 250.504987][T27239] cgroup2: Unknown parameter 'euid' [ 250.568579][T27219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.586578][T27219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.613721][ T6141] usb 9-1: USB disconnect, device number 8 [ 250.656855][T27243] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10179'. [ 250.787934][T27247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10180'. [ 250.794541][T27247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10180'. [ 250.913283][T27254] netlink: 'syz.3.10185': attribute type 13 has an invalid length. [ 251.060760][ C2] vkms_vblank_simulate: vblank timer overrun [ 251.115842][T27259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10188'. [ 251.146119][T27259] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 251.248774][ C2] vkms_vblank_simulate: vblank timer overrun [ 251.441801][ C2] vkms_vblank_simulate: vblank timer overrun [ 251.458267][T27275] team0: left allmulticast mode [ 251.467082][T27275] team_slave_0: left allmulticast mode [ 251.512718][T27275] bridge0: port 2(team0) entered disabled state [ 251.580446][T27275] : left allmulticast mode [ 251.582659][T27275] : left promiscuous mode [ 251.585052][T27275] bridge0: port 1() entered disabled state [ 251.654882][ C2] vkms_vblank_simulate: vblank timer overrun [ 251.694441][T27275] team_slave_0: left promiscuous mode [ 251.778314][T27275] team0: Port device team_slave_0 removed [ 251.807092][T27275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.815645][T27275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.827269][T27275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.830778][T27275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.887645][T27275] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 251.894400][T27275] bridge0: port 3(netdevsim0) entered disabled state [ 251.922928][ C2] vkms_vblank_simulate: vblank timer overrun [ 251.981659][T27285] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 252.106248][T27289] sctp: [Deprecated]: syz.4.10202 (pid 27289) Use of int in maxseg socket option. [ 252.106248][T27289] Use struct sctp_assoc_value instead [ 252.136061][ C2] vkms_vblank_simulate: vblank timer overrun [ 252.179907][ C2] vkms_vblank_simulate: vblank timer overrun [ 252.337122][T27297] QAT: Invalid ioctl -2110754303 [ 252.490702][T27305] netlink: 'syz.2.10210': attribute type 1 has an invalid length. [ 252.493804][T27305] NCSI netlink: No device for ifindex 0 [ 252.604194][T27313] (unnamed net_device) (uninitialized): peer notification delay (10) is not a multiple of miimon (100), value rounded to 0 ms [ 252.635328][T27318] Timeout policy `syz1' can only be used by L3 protocol number 36864 [ 252.681769][T27313] bond10: entered promiscuous mode [ 252.685934][T27313] bond10: entered allmulticast mode [ 252.697000][T27313] 8021q: adding VLAN 0 to HW filter on device bond10 [ 252.783913][T27325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10227'. [ 252.853529][T27329] 9pnet_fd: p9_fd_create_unix (27329): problem connecting socket: ./file2: -2 [ 252.956796][ C2] vkms_vblank_simulate: vblank timer overrun [ 252.991581][T27335] netlink: 'syz.0.10225': attribute type 1 has an invalid length. [ 253.088694][T27341] netlink: 'syz.4.10229': attribute type 10 has an invalid length. [ 253.434886][T27349] netlink: 'syz.0.10233': attribute type 2 has an invalid length. [ 253.440744][T27349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.601787][T27359] SELinux: truncated policydb string identifier [ 253.648428][T27359] SELinux: failed to load policy [ 253.871473][T27370] netlink: 'syz.4.10250': attribute type 11 has an invalid length. [ 253.884552][T27370] __nla_validate_parse: 1 callbacks suppressed [ 253.884570][T27370] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10250'. [ 254.151931][T27381] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10247'. [ 254.181517][T27387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10251'. [ 254.205215][T27387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10251'. [ 254.208881][T27387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10251'. [ 254.222491][T27387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10251'. [ 254.253054][T27387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10251'. [ 254.262230][T27387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10251'. [ 254.295341][T27387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10251'. [ 254.298667][T27387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10251'. [ 254.615878][T27413] xt_limit: Overflow, try lower: 1207959552/384 [ 254.744544][ T39] audit: type=1400 audit(2000000125.379:59517): avc: denied { ioctl } for pid=27417 comm="syz.0.10266" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 254.796929][ C2] vkms_vblank_simulate: vblank timer overrun [ 255.323052][T27449] program syz.0.10283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.346241][T27449] ata1.00: invalid service action 31 [ 255.918511][T27473] netlink: 'syz.4.10295': attribute type 9 has an invalid length. [ 256.019595][T27477] xt_CT: You must specify a L4 protocol and not use inversions on it [ 256.262152][T27493] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 256.308673][ C2] vkms_vblank_simulate: vblank timer overrun [ 256.403942][ C2] vkms_vblank_simulate: vblank timer overrun [ 256.452772][ C2] vkms_vblank_simulate: vblank timer overrun [ 256.520795][ C2] vkms_vblank_simulate: vblank timer overrun [ 256.876930][ C2] vkms_vblank_simulate: vblank timer overrun [ 257.303410][T27540] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 257.888464][T27571] openvswitch: netlink: Flow key attr not present in new flow. [ 258.323121][ C2] vkms_vblank_simulate: vblank timer overrun [ 258.392683][ C2] vkms_vblank_simulate: vblank timer overrun [ 258.453471][ T6061] Bluetooth: hci0: command tx timeout [ 258.984705][ C2] vkms_vblank_simulate: vblank timer overrun [ 259.044459][ T39] audit: type=1400 audit(2000000129.420:59518): avc: denied { read } for pid=27636 comm="syz.0.10375" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 259.077318][ T39] audit: type=1400 audit(2000000129.420:59519): avc: denied { open } for pid=27636 comm="syz.0.10375" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 259.091311][ T39] audit: type=1400 audit(2000000129.420:59520): avc: denied { ioctl } for pid=27636 comm="syz.0.10375" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 259.192717][ C2] vkms_vblank_simulate: vblank timer overrun [ 259.313940][T27652] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 259.873109][T27690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.007867][T27698] __nla_validate_parse: 41 callbacks suppressed [ 260.007890][T27698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10405'. [ 260.818026][T27744] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 260.989037][ T39] audit: type=1400 audit(2000000131.244:59521): avc: denied { create } for pid=27756 comm="syz.3.10431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 261.386856][ T39] audit: type=1400 audit(2000000131.609:59522): avc: denied { read } for pid=27779 comm="syz.0.10451" path="socket:[79822]" dev="sockfs" ino=79822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 261.693061][ T39] audit: type=1400 audit(2000000131.889:59523): avc: denied { write } for pid=27795 comm="syz.0.10452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 261.825020][T27805] netlink: 'syz.3.10457': attribute type 4 has an invalid length. [ 262.192030][T27828] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 262.410233][T27840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10473'. [ 262.416653][T27840] netlink: 31 bytes leftover after parsing attributes in process `syz.2.10473'. [ 262.432599][ C2] vkms_vblank_simulate: vblank timer overrun [ 262.436791][T27840] netlink: 'syz.2.10473': attribute type 3 has an invalid length. [ 262.444818][T27840] netlink: 'syz.2.10473': attribute type 2 has an invalid length. [ 262.472237][T27840] netlink: 31 bytes leftover after parsing attributes in process `syz.2.10473'. [ 262.808651][ C2] vkms_vblank_simulate: vblank timer overrun [ 262.885835][ T39] audit: type=1400 audit(2000000132.975:59524): avc: denied { connect } for pid=27857 comm="syz.0.10482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 263.025632][ C2] vkms_vblank_simulate: vblank timer overrun [ 263.097925][ T39] audit: type=1400 audit(2000000133.199:59525): avc: denied { shutdown } for pid=27861 comm="syz.3.10484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 263.508710][T27887] tipc: Trying to set illegal importance in message [ 263.601425][T27890] i2c i2c-1: Invalid block write size 34 [ 263.622274][T27894] netlink: 'syz.4.10498': attribute type 64 has an invalid length. [ 263.625949][T27894] netlink: 'syz.4.10498': attribute type 4 has an invalid length. [ 263.661499][T27894] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10498'. [ 263.709025][T27898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10502'. [ 263.941922][ C2] vkms_vblank_simulate: vblank timer overrun [ 264.131582][ C2] vkms_vblank_simulate: vblank timer overrun [ 264.353046][ T39] audit: type=1400 audit(2000000134.378:59526): avc: denied { mount } for pid=27914 comm="syz.2.10510" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 264.395029][ T39] audit: type=1400 audit(2000000134.415:59527): avc: denied { unmount } for pid=6059 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 264.599531][ T39] audit: type=1400 audit(2000000134.612:59528): avc: denied { sqpoll } for pid=27927 comm="syz.4.10517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 264.753365][ T39] audit: type=1400 audit(2000000134.752:59529): avc: denied { unmount } for pid=6066 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 265.038905][T27960] xt_l2tp: unknown flags: 17 [ 265.097643][T27958] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 265.099877][T27958] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 265.103666][T27958] vhci_hcd vhci_hcd.0: Device attached [ 265.118213][T27961] vhci_hcd: connection closed [ 265.118431][ T1144] vhci_hcd: stop threads [ 265.122025][ T1144] vhci_hcd: release socket [ 265.123690][ T1144] vhci_hcd: disconnect device [ 265.411305][ T39] audit: type=1326 audit(2000000135.369:59530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27979 comm="syz.0.10540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b4d8d169 code=0x7ffc0000 [ 265.610053][T27988] netlink: 'syz.4.10544': attribute type 12 has an invalid length. [ 265.747261][T27993] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 265.920379][T28005] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 265.996790][T28007] dlm: no locking on control device [ 266.031478][T28011] tmpfs: Bad value for 'mpol' [ 266.198003][T28021] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 266.204852][T28021] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 266.222642][T28025] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 266.238702][T28021] vhci_hcd vhci_hcd.0: Device attached [ 266.417205][ T834] vhci_hcd: vhci_device speed not set [ 266.500889][ T834] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 266.547242][T11815] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 266.737882][T11815] usb 7-1: Using ep0 maxpacket: 16 [ 266.770299][T11815] usb 7-1: config 5 has an invalid interface number: 147 but max is 0 [ 266.794355][T11815] usb 7-1: config 5 has no interface number 0 [ 266.809144][T11815] usb 7-1: config 5 interface 147 has no altsetting 0 [ 266.829252][T11815] usb 7-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=cb.27 [ 266.832375][T11815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.839636][T11815] usb 7-1: Product: syz [ 266.853887][T11815] usb 7-1: Manufacturer: syz [ 266.855867][T11815] usb 7-1: SerialNumber: syz [ 267.124245][T11815] usb 7-1: bad CDC descriptors [ 267.138550][T28022] vhci_hcd: connection reset by peer [ 267.153317][T11815] cdc_acm 7-1:5.147: Zero length descriptor references [ 267.155843][T11815] cdc_acm 7-1:5.147: probe with driver cdc_acm failed with error -22 [ 267.165773][ T65] vhci_hcd: stop threads [ 267.166679][T11815] usb 7-1: USB disconnect, device number 12 [ 267.167626][ T65] vhci_hcd: release socket [ 267.186061][ T65] vhci_hcd: disconnect device [ 267.222014][T28060] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10579'. [ 267.505488][T28072] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 268.162268][T28103] tmpfs: Bad value for 'mpol' [ 268.194678][T28108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.211008][T28108] IPv6: NLM_F_CREATE should be set when creating new route [ 268.232844][T28108] IPv6: NLM_F_CREATE should be set when creating new route [ 268.908135][T28142] program syz.0.10619 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.204022][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 269.204043][ T39] audit: type=1400 audit(2000000138.905:59535): avc: denied { read write } for pid=28162 comm="syz.3.10629" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 269.223557][ T39] audit: type=1400 audit(2000000138.905:59536): avc: denied { open } for pid=28162 comm="syz.3.10629" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 269.713245][T28196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.718572][T28199] xt_hashlimit: Unknown mode mask 180, kernel too old? [ 269.726841][T28197] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10651'. [ 269.870594][T28205] netlink: 'syz.2.10645': attribute type 10 has an invalid length. [ 269.944681][T28205] macvlan0: entered allmulticast mode [ 270.024409][T28214] erspan0: left allmulticast mode [ 270.042000][T28214] erspan0: left promiscuous mode [ 270.044203][T28214] bridge0: port 3(erspan0) entered disabled state [ 270.130512][T28214] : left allmulticast mode [ 270.132607][T28214] : left promiscuous mode [ 270.134638][T28214] bridge0: port 1() entered disabled state [ 270.173886][T28214] bridge_slave_1: left allmulticast mode [ 270.185918][T28214] bridge_slave_1: left promiscuous mode [ 270.188429][T28214] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.341311][T28214] team0: Port device team_slave_0 removed [ 270.356477][T28214] team0: Port device team_slave_1 removed [ 270.378081][T28214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.390341][T28214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.417164][T28214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.421183][T28214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.499200][T28214] team0: Port device geneve0 removed [ 270.528761][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.719768][T28236] xt_limit: Overflow, try lower: 1207959552/384 [ 270.827682][T28242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10664'. [ 270.913967][T28248] netlink: 'syz.2.10669': attribute type 1 has an invalid length. [ 271.081237][T28257] netlink: 'syz.0.10675': attribute type 13 has an invalid length. [ 271.407795][T28277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10684'. [ 271.426559][T28277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10684'. [ 271.792692][T28293] cgroup: Invalid name [ 271.984246][T28302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10695'. [ 271.995746][ T834] vhci_hcd: vhci_device speed not set [ 272.341015][T28319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10704'. [ 272.943874][T28351] netlink: 172 bytes leftover after parsing attributes in process `syz.0.10715'. [ 273.183216][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.242873][T28368] ufs: You didn't specify the type of your ufs filesystem [ 273.242873][T28368] [ 273.242873][T28368] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 273.242873][T28368] [ 273.242873][T28368] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 273.271229][T28368] ufs: failed to set blocksize [ 273.455095][T28380] PM: Enabling pm_trace changes system date and time during resume. [ 273.455095][T28380] PM: Correct system time has to be restored manually after resume. [ 274.312578][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.394978][T28428] cgroup: Need name or subsystem set [ 274.448924][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.592954][T28438] netlink: 'syz.3.10761': attribute type 1 has an invalid length. [ 274.627842][T28438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10761'. [ 274.660201][T28442] netlink: 'syz.2.10771': attribute type 1 has an invalid length. [ 275.173477][T28471] netlink: 'syz.2.10778': attribute type 2 has an invalid length. [ 275.189131][T28471] netlink: 'syz.2.10778': attribute type 1 has an invalid length. [ 275.202106][T28471] netlink: 'syz.2.10778': attribute type 1 has an invalid length. [ 275.279087][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.304810][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.375304][T28483] netlink: 'syz.4.10781': attribute type 3 has an invalid length. [ 275.382551][T28483] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10781'. [ 275.423211][T28486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10786'. [ 275.503766][T28488] (unnamed net_device) (uninitialized): peer notification delay (10) is not a multiple of miimon (100), value rounded to 0 ms [ 275.520391][T28488] bond3: entered promiscuous mode [ 275.528158][T28488] bond3: entered allmulticast mode [ 275.539954][T28488] 8021q: adding VLAN 0 to HW filter on device bond3 [ 275.546401][ T8] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 275.621326][T28493] program syz.2.10796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.730177][ T8] usb 8-1: Using ep0 maxpacket: 32 [ 275.758925][ T8] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 275.791099][ T8] usb 8-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 275.798723][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.809055][ T8] usb 8-1: Product: syz [ 275.824296][ T8] usb 8-1: Manufacturer: syz [ 275.836970][ T8] usb 8-1: SerialNumber: syz [ 275.857616][ T8] usb 8-1: config 0 descriptor?? [ 275.873755][T28478] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 275.898408][ T8] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 275.901670][T28504] netlink: 'syz.2.10790': attribute type 10 has an invalid length. [ 275.974122][T28508] netlink: 108 bytes leftover after parsing attributes in process `syz.0.10802'. [ 275.981688][T28508] netlink: 108 bytes leftover after parsing attributes in process `syz.0.10802'. [ 275.989289][T28508] netlink: 84 bytes leftover after parsing attributes in process `syz.0.10802'. [ 276.120005][ T57] usb 8-1: USB disconnect, device number 13 [ 276.744828][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.153034][T28564] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 277.317007][T28573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.655427][T28587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10836'. [ 277.941156][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.972793][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.441179][ T39] audit: type=1400 audit(2000000147.558:59537): avc: denied { read } for pid=28619 comm="syz.4.10851" path="socket:[84591]" dev="sockfs" ino=84591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 278.633960][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.839294][T28636] tmpfs: Bad value for 'huge' [ 279.000756][ T39] audit: type=1400 audit(2000000148.082:59538): avc: denied { write } for pid=28643 comm="syz.3.10864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 279.226960][T28658] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10872'. [ 279.414216][T28672] usb usb9: usbfs: process 28672 (syz.4.10876) did not claim interface 0 before use [ 279.434453][T28674] netlink: zone id is out of range [ 279.443553][T28674] netlink: del zone limit has 4 unknown bytes [ 279.497083][T28678] xt_cgroup: xt_cgroup: no path or classid specified [ 279.681728][T28686] netlink: 'syz.4.10885': attribute type 4 has an invalid length. [ 279.951039][T28700] xt_TPROXY: Can be used only with -p tcp or -p udp [ 280.024435][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.237664][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.862664][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.207769][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.260567][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.350220][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.504982][ T39] audit: type=1400 audit(2000000150.430:59539): avc: denied { map } for pid=28758 comm="syz.2.10919" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 281.728772][T28770] i2c i2c-1: Invalid block write size 34 [ 281.938936][T28780] mmap: syz.2.10929 (28780): VmData 37462016 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 282.408974][T28810] netlink: 'syz.2.10943': attribute type 21 has an invalid length. [ 282.418873][T28810] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10943'. [ 282.425651][ T39] audit: type=1400 audit(2000000151.281:59540): avc: denied { accept } for pid=28809 comm="syz.0.10944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 282.428214][T28810] netlink: 'syz.2.10943': attribute type 4 has an invalid length. [ 282.432611][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.473069][T28810] netlink: 'syz.2.10943': attribute type 5 has an invalid length. [ 282.493454][T28810] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10943'. [ 282.497863][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.707459][ T39] audit: type=1400 audit(2000000151.543:59541): avc: denied { write } for pid=28818 comm="syz.2.10948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 283.000553][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.088452][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.155204][T28840] openvswitch: netlink: IP tunnel dst address not specified [ 283.233242][T28845] netlink: 'syz.3.10961': attribute type 1 has an invalid length. [ 283.287048][T28845] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10961'. [ 283.483267][ T39] audit: type=1400 audit(2000000152.282:59542): avc: denied { write } for pid=28855 comm="syz.2.10966" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 283.805147][T28873] netlink: 100 bytes leftover after parsing attributes in process `syz.3.10975'. [ 284.247620][T28892] xt_l2tp: unknown flags: 17 [ 285.045623][T28938] ieee802154 phy1 wpan1: encryption failed: -22 [ 285.184574][ T39] audit: type=1400 audit(2000000153.854:59543): avc: denied { accept } for pid=28945 comm="syz.2.11008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 285.252415][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.301842][T28952] /dev/sg0: Can't lookup blockdev [ 285.660945][ T39] audit: type=1400 audit(2000000154.303:59544): avc: denied { create } for pid=28965 comm="syz.0.11018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 285.690747][ T39] audit: type=1400 audit(2000000154.303:59545): avc: denied { write } for pid=28965 comm="syz.0.11018" path="socket:[85730]" dev="sockfs" ino=85730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 285.824454][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.838297][ T39] audit: type=1400 audit(2000000154.462:59546): avc: denied { write } for pid=28970 comm="syz.0.11021" name="net" dev="proc" ino=85733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 285.850338][ T39] audit: type=1400 audit(2000000154.481:59547): avc: denied { add_name } for pid=28970 comm="syz.0.11021" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 285.893787][ T39] audit: type=1400 audit(2000000154.481:59548): avc: denied { create } for pid=28970 comm="syz.0.11021" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 285.928100][ T39] audit: type=1400 audit(2000000154.481:59549): avc: denied { associate } for pid=28970 comm="syz.0.11021" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 286.346319][T29003] netlink: 'syz.4.11037': attribute type 33 has an invalid length. [ 286.670577][ T39] audit: type=1400 audit(2000000155.257:59550): avc: denied { read write } for pid=29026 comm="syz.4.11049" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 286.700974][ T39] audit: type=1400 audit(2000000155.257:59551): avc: denied { open } for pid=29026 comm="syz.4.11049" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 286.704413][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.757795][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.784132][T29033] openvswitch: netlink: Duplicate key (type 32). [ 286.918502][T29042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11056'. [ 286.985183][T29042] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11056'. [ 287.511491][ T39] audit: type=1400 audit(2000000156.052:59552): avc: denied { append } for pid=29075 comm="syz.2.11073" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 288.022750][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.107980][T29104] misc userio: No port type given on /dev/userio [ 289.062544][T29155] cgroup: No subsys list or none specified [ 290.196585][T29204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11133'. [ 290.644033][T29231] xt_TPROXY: Can be used only with -p tcp or -p udp [ 290.758884][T29241] netlink: 'syz.3.11152': attribute type 1 has an invalid length. [ 290.968988][ C3] vkms_vblank_simulate: vblank timer overrun [ 291.032062][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 291.032081][ T39] audit: type=1400 audit(2000000159.317:59556): avc: denied { read } for pid=29252 comm="syz.3.11158" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 291.065827][ T39] audit: type=1400 audit(2000000159.317:59557): avc: denied { open } for pid=29252 comm="syz.3.11158" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 291.083777][ T39] audit: type=1400 audit(2000000159.345:59558): avc: denied { ioctl } for pid=29252 comm="syz.3.11158" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 291.113625][ C3] vkms_vblank_simulate: vblank timer overrun [ 291.178013][T29261] overlayfs: cannot append lower layer [ 291.231098][ T39] audit: type=1400 audit(2000000159.513:59559): avc: denied { setopt } for pid=29262 comm="syz.4.11162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 291.300973][ C3] vkms_vblank_simulate: vblank timer overrun [ 291.330953][T29265] openvswitch: netlink: IP tunnel dst address not specified [ 291.378065][T29267] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 291.405043][T29269] netlink: 232 bytes leftover after parsing attributes in process `syz.3.11166'. [ 291.412137][T29269] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11166'. [ 291.586093][ C3] vkms_vblank_simulate: vblank timer overrun [ 291.726630][T29285] netlink: 'syz.2.11174': attribute type 21 has an invalid length. [ 291.964417][ C3] vkms_vblank_simulate: vblank timer overrun [ 292.043539][ T39] audit: type=1400 audit(2000000160.290:59560): avc: denied { getopt } for pid=29298 comm="syz.4.11182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 292.216397][ C3] vkms_vblank_simulate: vblank timer overrun [ 292.415071][ T39] audit: type=1400 audit(2000000160.627:59561): avc: denied { read } for pid=29316 comm="syz.2.11191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 292.529058][T29326] syz.0.11193: attempt to access beyond end of device [ 292.529058][T29326] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 292.551567][ C3] vkms_vblank_simulate: vblank timer overrun [ 292.555451][T29326] SQUASHFS error: Failed to read block 0x0: -5 [ 292.566947][T29326] unable to read squashfs_super_block [ 292.793696][T29341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11201'. [ 292.832305][T29340] xt_l2tp: missing protocol rule (udp|l2tpip) [ 292.894054][ C3] vkms_vblank_simulate: vblank timer overrun [ 292.941420][T29347] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11206'. [ 292.945174][T29347] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11206'. [ 293.005429][T29351] wg1 speed is unknown, defaulting to 1000 [ 293.307548][ C3] vkms_vblank_simulate: vblank timer overrun [ 293.548146][ T39] audit: type=1400 audit(2000000161.684:59562): avc: denied { mount } for pid=29373 comm="syz.2.11217" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 293.923159][T29389] xt_connbytes: Forcing CT accounting to be enabled [ 293.972611][ C3] vkms_vblank_simulate: vblank timer overrun [ 294.052415][ C3] vkms_vblank_simulate: vblank timer overrun [ 294.352449][T29404] : (slave bridge_slave_1): Releasing backup interface [ 294.502082][T29404] : (slave bond_slave_0): Releasing backup interface [ 294.537867][T29416] program syz.0.11237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.568851][T29404] : (slave bond_slave_1): Releasing backup interface [ 294.680466][ C3] vkms_vblank_simulate: vblank timer overrun [ 294.747778][T29404] team0: Port device team_slave_0 removed [ 294.812740][T29404] team0: Port device team_slave_1 removed [ 294.815942][T29404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.833938][T29404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.862017][T29404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.865474][T29404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.298974][T29432] ksmbd: Unknown IPC event: 1, ignore. [ 295.299762][T29431] netlink: 'syz.3.11242': attribute type 10 has an invalid length. [ 295.335076][ C3] vkms_vblank_simulate: vblank timer overrun [ 295.476329][ C3] vkms_vblank_simulate: vblank timer overrun [ 295.580882][ C3] vkms_vblank_simulate: vblank timer overrun [ 295.821510][ T64] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 295.864526][T29448] (unnamed net_device) (uninitialized): peer notification delay (10) is not a multiple of miimon (100), value rounded to 0 ms [ 295.904455][ C3] vkms_vblank_simulate: vblank timer overrun [ 295.937586][T29448] bond4: entered promiscuous mode [ 295.940051][T29448] bond4: entered allmulticast mode [ 295.947355][T29448] 8021q: adding VLAN 0 to HW filter on device bond4 [ 296.035579][ T64] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 296.052932][ T64] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 296.098159][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.117617][T29442] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 296.135893][ T64] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.422123][T29464] [U] [ 296.423675][T29464] [U] [ 296.429160][T29464] [U] [ 296.431457][T29464] [U] [ 296.434422][T29464] [U] [ 296.435631][T29464] [U] [ 296.436885][T29464] [U] [ 296.439471][T29464] [U] [ 296.446175][T29464] [U] [ 296.452336][T29464] [U] [ 296.454168][T29464] [U] [ 296.458761][T29464] [U] [ 296.464047][T29464] [U] [ 296.467470][T29464] [U] [ 296.471816][T29464] [U] [ 296.476184][T29464] [U] [ 296.508431][ T64] usb 7-1: USB disconnect, device number 13 [ 296.511513][T29463] [U] [ 296.999122][T29481] cgroup: Need name or subsystem set [ 297.178675][T29487] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11271'. [ 297.488237][T29511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.917111][ C3] vkms_vblank_simulate: vblank timer overrun [ 298.064432][ C3] vkms_vblank_simulate: vblank timer overrun [ 298.150444][ C3] vkms_vblank_simulate: vblank timer overrun [ 298.369842][T29551] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 298.373475][T29551] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 298.378898][T29551] vhci_hcd vhci_hcd.0: Device attached [ 298.421108][T29556] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 298.588291][ T57] vhci_hcd: vhci_device speed not set [ 298.653638][ T6141] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 298.657080][ T57] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 298.810028][ T6141] usb 5-1: Using ep0 maxpacket: 16 [ 298.817671][ T6141] usb 5-1: config 5 has an invalid interface number: 147 but max is 0 [ 298.818649][T29572] tmpfs: Bad value for 'mpol' [ 298.841179][ T6141] usb 5-1: config 5 has no interface number 0 [ 298.841215][ T6141] usb 5-1: config 5 interface 147 has no altsetting 0 [ 298.848355][ C3] vkms_vblank_simulate: vblank timer overrun [ 298.862494][ T6141] usb 5-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=cb.27 [ 298.868383][ T6141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.875311][ T6141] usb 5-1: Product: syz [ 298.877836][ T6141] usb 5-1: Manufacturer: syz [ 298.894532][ T6141] usb 5-1: SerialNumber: syz [ 299.156689][ T6141] usb 5-1: bad CDC descriptors [ 299.174517][ T6141] cdc_acm 5-1:5.147: Zero length descriptor references [ 299.176981][ T6141] cdc_acm 5-1:5.147: probe with driver cdc_acm failed with error -22 [ 299.188381][ T6141] usb 5-1: USB disconnect, device number 15 [ 299.189641][T29552] vhci_hcd: connection reset by peer [ 299.219800][ C3] vkms_vblank_simulate: vblank timer overrun [ 299.259730][ T79] vhci_hcd: stop threads [ 299.262406][ T79] vhci_hcd: release socket [ 299.266712][ T79] vhci_hcd: disconnect device [ 299.744336][ C3] vkms_vblank_simulate: vblank timer overrun [ 299.896330][ C3] vkms_vblank_simulate: vblank timer overrun [ 300.197994][T29624] netlink: 'syz.0.11337': attribute type 9 has an invalid length. [ 300.313358][T29633] xt_limit: Overflow, try lower: 1207959552/384 [ 300.566094][T29642] program syz.3.11355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.876293][ C3] vkms_vblank_simulate: vblank timer overrun [ 300.939441][ T1452] IPVS: starting estimator thread 0... [ 301.031022][T29667] IPVS: using max 23 ests per chain, 55200 per kthread [ 301.051081][T29669] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 301.134409][T29675] usb usb9: usbfs: process 29675 (syz.0.11370) did not claim interface 0 before use [ 301.293137][T29683] 8021q: adding VLAN 0 to HW filter on device bond5 [ 302.065515][T29726] xt_l2tp: unknown flags: 17 [ 302.260308][T29738] netlink: 'syz.3.11395': attribute type 5 has an invalid length. [ 302.266995][ C3] ================================================================== [ 302.274899][ C3] BUG: KASAN: slab-use-after-free in __lock_acquire+0x2d90/0x3c40 [ 302.278854][ C3] Read of size 8 at addr ffff88805743e818 by task swapper/3/0 [ 302.282039][ C3] [ 302.284822][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted 6.14.0-rc3-syzkaller-00180-ga3daad821514 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 302.284844][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 302.284854][ C3] Call Trace: [ 302.284862][ C3] [ 302.284869][ C3] dump_stack_lvl+0x116/0x1f0 [ 302.284897][ C3] print_report+0xc3/0x670 [ 302.284915][ C3] ? __virt_addr_valid+0x5e/0x590 [ 302.284932][ C3] ? __phys_addr+0xc6/0x150 [ 302.284948][ C3] kasan_report+0xd9/0x110 [ 302.284964][ C3] ? __lock_acquire+0x2d90/0x3c40 [ 302.284988][ C3] ? __lock_acquire+0x2d90/0x3c40 [ 302.285011][ C3] __lock_acquire+0x2d90/0x3c40 [ 302.285032][ C3] ? __pfx_lock_release+0x10/0x10 [ 302.285051][ C3] ? rcu_is_watching+0x12/0xc0 [ 302.285067][ C3] ? ttwu_queue_wakelist+0x26d/0x400 [ 302.285090][ C3] ? __smp_call_single_queue+0x174/0x1e0 [ 302.285108][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 302.285127][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 302.285142][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 302.285167][ C3] lock_acquire.part.0+0x11b/0x380 [ 302.285293][ C3] ? p9_req_put+0xaf/0x250 [ 302.285311][ C3] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 302.285332][ C3] ? rcu_is_watching+0x12/0xc0 [ 302.285348][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 302.285365][ C3] ? p9_req_put+0xaf/0x250 [ 302.285380][ C3] ? lock_acquire+0x2f/0xb0 [ 302.285399][ C3] ? p9_req_put+0xaf/0x250 [ 302.285414][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 302.285593][ C3] ? p9_req_put+0xaf/0x250 [ 302.285608][ C3] p9_req_put+0xaf/0x250 [ 302.285624][ C3] req_done+0x1e7/0x2f0 [ 302.285647][ C3] ? __pfx_req_done+0x10/0x10 [ 302.285669][ C3] ? __pfx_req_done+0x10/0x10 [ 302.285690][ C3] vring_interrupt+0x31b/0x400 [ 302.285717][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 302.285740][ C3] __handle_irq_event_percpu+0x229/0x7d0 [ 302.285761][ C3] handle_irq_event+0xab/0x1e0 [ 302.285777][ C3] handle_edge_irq+0x263/0xd10 [ 302.285794][ C3] __common_interrupt+0xdf/0x250 [ 302.285815][ C3] common_interrupt+0x61/0xe0 [ 302.285838][ C3] asm_common_interrupt+0x26/0x40 [ 302.285860][ C3] RIP: 0010:handle_softirqs+0x1da/0x8f0 [ 302.285885][ C3] Code: 89 44 24 18 48 89 6c 24 10 48 c7 c7 40 74 6b 8b e8 eb 3d db 09 65 66 c7 05 39 ca 87 7e 00 00 e8 9c 87 45 00 fb bb ff ff ff ff <49> c7 c6 c0 b0 e0 8d 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1 [ 302.285900][ C3] RSP: 0018:ffffc90000708f28 EFLAGS: 00000206 [ 302.285914][ C3] RAX: 00000000000ffd56 RBX: 00000000ffffffff RCX: 1ffffffff20c41b1 [ 302.285925][ C3] RDX: 0000000000000000 RSI: ffffffff8b6ceca0 RDI: ffffffff8bd35600 [ 302.285935][ C3] RBP: ffff88801daaa440 R08: 0000000000000001 R09: 0000000000000001 [ 302.285944][ C3] R10: ffffffff90625117 R11: 0000000000000000 R12: 0000000000000282 [ 302.285954][ C3] R13: 000000000000000a R14: 0000000000000001 R15: 0000000000000000 [ 302.285969][ C3] ? handle_softirqs+0x1d4/0x8f0 [ 302.285988][ C3] ? __pfx_sched_clock_cpu+0x10/0x10 [ 302.286011][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 302.286034][ C3] __irq_exit_rcu+0x109/0x170 [ 302.286054][ C3] irq_exit_rcu+0x9/0x30 [ 302.286074][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 302.286091][ C3] [ 302.286096][ C3] [ 302.286101][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 302.286122][ C3] RIP: 0010:default_idle+0xf/0x20 [ 302.286141][ C3] Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 4f 0f 00 fb f4 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 302.286160][ C3] RSP: 0018:ffffc900001a7e08 EFLAGS: 00000206 [ 302.286171][ C3] RAX: 00000000000ffd53 RBX: 0000000000000003 RCX: ffffffff8b574469 [ 302.286180][ C3] RDX: 0000000000000000 RSI: ffffffff8b6ceca0 RDI: ffffffff8bd35600 [ 302.286190][ C3] RBP: ffffed1003b55488 R08: 0000000000000001 R09: ffffed100d526f85 [ 302.286200][ C3] R10: ffff88806a937c2b R11: 0000000000000000 R12: 0000000000000003 [ 302.286209][ C3] R13: ffff88801daaa440 R14: ffffffff90625110 R15: 0000000000000000 [ 302.286221][ C3] ? ct_kernel_exit+0x139/0x190 [ 302.286240][ C3] default_idle_call+0x6d/0xb0 [ 302.286258][ C3] do_idle+0x329/0x3f0 [ 302.286278][ C3] ? __pfx_do_idle+0x10/0x10 [ 302.286300][ C3] cpu_startup_entry+0x4f/0x60 [ 302.286319][ C3] start_secondary+0x222/0x2b0 [ 302.286339][ C3] ? __pfx_start_secondary+0x10/0x10 [ 302.286360][ C3] common_startup_64+0x13e/0x148 [ 302.286389][ C3] [ 302.286394][ C3] [ 302.295725][ T39] audit: type=1400 audit(2000000169.841:59563): avc: denied { write } for pid=5900 comm="syz-executor" path="pipe:[6028]" dev="pipefs" ino=6028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 302.298660][ C3] Allocated by task 29736: [ 302.598653][ C3] kasan_save_stack+0x33/0x60 [ 302.601397][ C3] kasan_save_track+0x14/0x30 [ 302.604447][ C3] __kasan_kmalloc+0xaa/0xb0 [ 302.607573][ C3] p9_client_create+0xc8/0x1200 [ 302.610829][ C3] v9fs_session_init+0x1f8/0x1a80 [ 302.613570][ C3] v9fs_mount+0xc6/0xa30 [ 302.615928][ C3] legacy_get_tree+0x109/0x220 [ 302.619340][ C3] vfs_get_tree+0x8b/0x340 [ 302.622096][ C3] path_mount+0x14e6/0x1f10 [ 302.625248][ C3] __x64_sys_mount+0x28f/0x310 [ 302.628671][ C3] do_syscall_64+0xcd/0x250 [ 302.631334][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.634714][ C3] [ 302.636323][ C3] Freed by task 29736: [ 302.639209][ C3] kasan_save_stack+0x33/0x60 [ 302.642240][ C3] kasan_save_track+0x14/0x30 [ 302.646637][ C3] kasan_save_free_info+0x3b/0x60 [ 302.651561][ C3] __kasan_slab_free+0x51/0x70 [ 302.654623][ C3] kfree+0x2c4/0x4d0 [ 302.657219][ C3] p9_client_create+0xa58/0x1200 [ 302.660844][ C3] v9fs_session_init+0x1f8/0x1a80 [ 302.663782][ C3] v9fs_mount+0xc6/0xa30 [ 302.665966][ C3] legacy_get_tree+0x109/0x220 [ 302.668504][ C3] vfs_get_tree+0x8b/0x340 [ 302.671310][ C3] path_mount+0x14e6/0x1f10 [ 302.673887][ C3] __x64_sys_mount+0x28f/0x310 [ 302.677377][ C3] do_syscall_64+0xcd/0x250 [ 302.680553][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.684046][ C3] [ 302.686466][ C3] The buggy address belongs to the object at ffff88805743e800 [ 302.686466][ C3] which belongs to the cache kmalloc-512 of size 512 [ 302.695154][ C3] The buggy address is located 24 bytes inside of [ 302.695154][ C3] freed 512-byte region [ffff88805743e800, ffff88805743ea00) [ 302.702140][ C3] [ 302.703484][ C3] The buggy address belongs to the physical page: [ 302.707658][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5743c [ 302.715007][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 302.719981][ C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 302.726242][ C3] page_type: f5(slab) [ 302.728806][ C3] raw: 00fff00000000040 ffff88801b042c80 ffffea00041b9700 0000000000000002 [ 302.733697][ C3] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 302.738676][ C3] head: 00fff00000000040 ffff88801b042c80 ffffea00041b9700 0000000000000002 [ 302.743686][ C3] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 302.749000][ C3] head: 00fff00000000002 ffffea00015d0f01 ffffffffffffffff 0000000000000000 [ 302.753880][ C3] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 302.758834][ C3] page dumped because: kasan: bad access detected [ 302.763076][ C3] page_owner tracks the page as allocated [ 302.767057][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 29441, tgid 29441 (syz.2.11248), ts 296419345221, free_ts 279529818497 [ 302.780838][ C3] post_alloc_hook+0x181/0x1b0 [ 302.784571][ C3] get_page_from_freelist+0xfce/0x2f80 [ 302.790900][ C3] __alloc_frozen_pages_noprof+0x221/0x2470 [ 302.796711][ C3] alloc_pages_mpol+0x1fc/0x540 [ 302.809211][ C3] new_slab+0x23d/0x330 [ 302.810825][ C3] ___slab_alloc+0xc5d/0x1720 [ 302.812703][ C3] __slab_alloc.constprop.0+0x56/0xb0 [ 302.814997][ C3] __kmalloc_cache_noprof+0xfa/0x410 [ 302.829163][ C3] open_substream+0xec/0x9b0 [ 302.831421][ C3] rawmidi_open_priv+0x4d8/0x6e0 [ 302.833738][ C3] snd_rawmidi_kernel_open+0xb5/0x190 [ 302.836533][ C3] midisynth_subscribe+0xe5/0x350 [ 302.839608][ C3] check_and_subscribe_port+0x912/0xc00 [ 302.842831][ C3] snd_seq_port_connect+0x2f6/0x550 [ 302.847464][ C3] snd_seq_ioctl_subscribe_port+0x1fe/0x430 [ 302.853835][ C3] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 302.868947][ C3] page last free pid 28675 tgid 28675 stack trace: [ 302.879083][ C3] free_frozen_pages+0x6db/0xfb0 [ 302.881206][ C3] vfree+0x174/0x950 [ 302.884348][ C3] snd_dma_free_pages+0x51/0x70 [ 302.892858][ C3] snd_pcm_lib_free_pages+0x172/0x390 [ 302.895249][ C3] snd_pcm_release_substream.part.0+0x2a8/0x340 [ 302.897843][ C3] snd_pcm_release_substream+0x5b/0x70 [ 302.905298][ C3] snd_pcm_oss_release+0x135/0x310 [ 302.907531][ C3] __fput+0x3ff/0xb70 [ 302.909568][ C3] task_work_run+0x14e/0x250 [ 302.911653][ C3] syscall_exit_to_user_mode+0x27b/0x2a0 [ 302.924606][ C3] do_syscall_64+0xda/0x250 [ 302.926806][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.929695][ C3] [ 302.930659][ C3] Memory state around the buggy address: [ 302.934209][ C3] ffff88805743e700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 302.953787][ C3] ffff88805743e780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 302.958692][ C3] >ffff88805743e800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 302.963673][ C3] ^ [ 302.966391][ C3] ffff88805743e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 302.969308][ C3] ffff88805743e900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 302.974727][ C3] ================================================================== [ 302.994199][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 302.996774][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted 6.14.0-rc3-syzkaller-00180-ga3daad821514 #0 [ 303.000931][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 303.005613][ C3] Call Trace: [ 303.007005][ C3] [ 303.010522][ C3] dump_stack_lvl+0x3d/0x1f0 [ 303.013426][ C3] panic+0x71d/0x800 [ 303.017172][ C3] ? __pfx_panic+0x10/0x10 [ 303.033016][ C3] ? rcu_is_watching+0x12/0xc0 [ 303.034915][ C3] ? __pfx_lock_release+0x10/0x10 [ 303.036771][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 303.039021][ C3] check_panic_on_warn+0xab/0xb0 [ 303.041966][ C3] end_report+0x117/0x180 [ 303.044444][ C3] kasan_report+0xe9/0x110 [ 303.047572][ C3] ? __lock_acquire+0x2d90/0x3c40 [ 303.050996][ C3] ? __lock_acquire+0x2d90/0x3c40 [ 303.060965][ C3] __lock_acquire+0x2d90/0x3c40 [ 303.073280][ C3] ? __pfx_lock_release+0x10/0x10 [ 303.075713][ C3] ? rcu_is_watching+0x12/0xc0 [ 303.083475][ C3] ? ttwu_queue_wakelist+0x26d/0x400 [ 303.086619][ C3] ? __smp_call_single_queue+0x174/0x1e0 [ 303.089428][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 303.104294][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 303.107284][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 303.109233][ C3] lock_acquire.part.0+0x11b/0x380 [ 303.111320][ C3] ? p9_req_put+0xaf/0x250 [ 303.113396][ C3] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 303.116083][ C3] ? rcu_is_watching+0x12/0xc0 [ 303.128959][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 303.130776][ C3] ? p9_req_put+0xaf/0x250 [ 303.132311][ C3] ? lock_acquire+0x2f/0xb0 [ 303.134472][ C3] ? p9_req_put+0xaf/0x250 [ 303.136928][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 303.149232][ C3] ? p9_req_put+0xaf/0x250 [ 303.150877][ C3] p9_req_put+0xaf/0x250 [ 303.152573][ C3] req_done+0x1e7/0x2f0 [ 303.154620][ C3] ? __pfx_req_done+0x10/0x10 [ 303.157934][ C3] ? __pfx_req_done+0x10/0x10 [ 303.160597][ C3] vring_interrupt+0x31b/0x400 [ 303.177891][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 303.180187][ C3] __handle_irq_event_percpu+0x229/0x7d0 [ 303.182908][ C3] handle_irq_event+0xab/0x1e0 [ 303.197185][ C3] handle_edge_irq+0x263/0xd10 [ 303.199302][ C3] __common_interrupt+0xdf/0x250 [ 303.201364][ C3] common_interrupt+0x61/0xe0 [ 303.203298][ C3] asm_common_interrupt+0x26/0x40 [ 303.205282][ C3] RIP: 0010:handle_softirqs+0x1da/0x8f0 [ 303.208742][ C3] Code: 89 44 24 18 48 89 6c 24 10 48 c7 c7 40 74 6b 8b e8 eb 3d db 09 65 66 c7 05 39 ca 87 7e 00 00 e8 9c 87 45 00 fb bb ff ff ff ff <49> c7 c6 c0 b0 e0 8d 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1 [ 303.232892][ C3] RSP: 0018:ffffc90000708f28 EFLAGS: 00000206 [ 303.235725][ C3] RAX: 00000000000ffd56 RBX: 00000000ffffffff RCX: 1ffffffff20c41b1 [ 303.239095][ C3] RDX: 0000000000000000 RSI: ffffffff8b6ceca0 RDI: ffffffff8bd35600 [ 303.245779][ C3] RBP: ffff88801daaa440 R08: 0000000000000001 R09: 0000000000000001 [ 303.254534][ C3] R10: ffffffff90625117 R11: 0000000000000000 R12: 0000000000000282 [ 303.279335][ C3] R13: 000000000000000a R14: 0000000000000001 R15: 0000000000000000 [ 303.284095][ C3] ? handle_softirqs+0x1d4/0x8f0 [ 303.287871][ C3] ? __pfx_sched_clock_cpu+0x10/0x10 [ 303.290761][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 303.294712][ C3] __irq_exit_rcu+0x109/0x170 [ 303.298531][ C3] irq_exit_rcu+0x9/0x30 [ 303.302640][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 303.308809][ C3] [ 303.311576][ C3] [ 303.328254][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 303.330814][ C3] RIP: 0010:default_idle+0xf/0x20 [ 303.332697][ C3] Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 4f 0f 00 fb f4 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 303.350860][ C3] RSP: 0018:ffffc900001a7e08 EFLAGS: 00000206 [ 303.352941][ C3] RAX: 00000000000ffd53 RBX: 0000000000000003 RCX: ffffffff8b574469 [ 303.356481][ C3] RDX: 0000000000000000 RSI: ffffffff8b6ceca0 RDI: ffffffff8bd35600 [ 303.363230][ C3] RBP: ffffed1003b55488 R08: 0000000000000001 R09: ffffed100d526f85 [ 303.381617][ C3] R10: ffff88806a937c2b R11: 0000000000000000 R12: 0000000000000003 [ 303.386097][ C3] R13: ffff88801daaa440 R14: ffffffff90625110 R15: 0000000000000000 [ 303.390523][ C3] ? ct_kernel_exit+0x139/0x190 [ 303.393385][ C3] default_idle_call+0x6d/0xb0 [ 303.397220][ C3] do_idle+0x329/0x3f0 [ 303.400662][ C3] ? __pfx_do_idle+0x10/0x10 [ 303.404527][ C3] cpu_startup_entry+0x4f/0x60 [ 303.407697][ C3] start_secondary+0x222/0x2b0 [ 303.410754][ C3] ? __pfx_start_secondary+0x10/0x10 [ 303.414025][ C3] common_startup_64+0x13e/0x148 [ 303.418369][ C3] [ 303.437667][ C3] Kernel Offset: disabled [ 303.441931][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:48:47 Registers: info registers vcpu 0 CPU#0 RAX=000000000017810f RBX=0000000000000000 RCX=ffffffff8b574469 RDX=0000000000000000 RSI=ffffffff8b6ceca0 RDI=ffffffff8bd35600 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c6f85 R10=ffff88806a637c2b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90625110 R15=0000000000000000 RIP=ffffffff8b57584f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff88806a600000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f36b08b3f98 CR3=0000000026d14000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa8633680 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa6b4e0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa6b4e0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa6b4e0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa6b4e0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa6b4e0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa6b4e0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=fffff520000d6036 RBX=fffff520000d6039 RCX=ffffffff81694a2e RDX=fffff520000d6039 RSI=0000000000000060 RDI=ffffc900006b0168 RBP=fffff520000d602d RSP=ffffc900006b00d8 R8 =0000000000000001 R9 =fffff520000d6038 R10=ffffc900006b01c7 R11=0000000000000006 R12=0000000000000000 R13=ffffc900006b0228 R14=ffffc900006b0168 R15=ffffc900006b0190 RIP=ffffffff821ced45 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6908e8ed00 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c2c487b CR3=0000000025fd6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000003400003 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697270203a732500 7325207461206465 7269707865207972 746e65203a732500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c5755051f560000 5600055144054140 574c555d40055c57 514b40051f560000 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=27bc59c527bc59c5 27bc59c527bc59c5 27bc59c527bc59c5 27bc59c527bc59c5 27bc59c527bc59c5 27bc59c527bc59c5 27bc59c527bc59c5 27bc59c527bc59c5 ZMM22=8f1c70b68f1c70b6 8f1c70b68f1c70b6 8f1c70b68f1c70b6 8f1c70b68f1c70b6 8f1c70b68f1c70b6 8f1c70b68f1c70b6 8f1c70b68f1c70b6 8f1c70b68f1c70b6 ZMM23=03516ec703516ec7 03516ec703516ec7 03516ec703516ec7 03516ec703516ec7 03516ec703516ec7 03516ec703516ec7 03516ec703516ec7 03516ec703516ec7 ZMM24=53dadb4c53dadb4c 53dadb4c53dadb4c 53dadb4c53dadb4c 53dadb4c53dadb4c 53dadb4c53dadb4c 53dadb4c53dadb4c 53dadb4c53dadb4c 53dadb4c53dadb4c ZMM25=80a5812980a58129 80a5812980a58129 80a5812980a58129 80a5812980a58129 80a5812980a58129 80a5812980a58129 80a5812980a58129 80a5812980a58129 ZMM26=73b3ae5873b3ae58 73b3ae5873b3ae58 73b3ae5873b3ae58 73b3ae5873b3ae58 73b3ae5873b3ae58 73b3ae5873b3ae58 73b3ae5873b3ae58 73b3ae5873b3ae58 ZMM27=8179cf698179cf69 8179cf698179cf69 8179cf698179cf69 8179cf698179cf69 8179cf698179cf69 8179cf698179cf69 8179cf698179cf69 8179cf698179cf69 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=c8310000c8310000 c8310000c8310000 c8310000c8310000 c8310000c8310000 c8310000c8310000 c8310000c8310000 c8310000c8310000 c8310000c8310000 info registers vcpu 2 CPU#2 RAX=fffffbfff1c04383 RBX=ffff88806a83dac0 RCX=1ffff1100d507b5c RDX=00007f36afba2000 RSI=000000000000000c RDI=00007f36afba1000 RBP=ffff88806a83dae4 RSP=ffffc90003677880 R8 =ffff88806a83dad0 R9 =ffff88806a83dae4 R10=ffff888022a7cc8f R11=0000000000000003 R12=00007f36afba1000 R13=ffff88806a83dad0 R14=dffffc0000000000 R15=fffffbfff1c04383 RIP=ffffffff816af310 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556d750500 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f36afba1c18 CR3=00000000593fe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36afa0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36afa0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36afa0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36afa0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36afa0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36afa0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36afb7c488 00007f36afb7c480 00007f36afb7c478 00007f36afb7c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36b06dd100 00007f36afb7c440 00007f36afb7c458 00007f36afb7c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36afb7c498 00007f36afb7c490 00007f36afb7c488 00007f36afb7c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854070f5 RDI=ffffffff9ab80740 RBP=ffffffff9ab80700 RSP=ffffc90000708410 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9ab80700 R15=0000000000000000 RIP=ffffffff8540711f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555851e3808 CR3=000000004c5b8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff814d3f30 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc48320f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc48320f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc48320f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc48320f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc48320f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc48320f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000