last executing test programs: 1m27.348500535s ago: executing program 0 (id=10564): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000140)=0x1, 0x4) 1m27.288457187s ago: executing program 0 (id=10566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) 1m27.225131387s ago: executing program 0 (id=10570): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x6, r1, 0x1, 0xd, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064002d00475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) 1m27.050410451s ago: executing program 0 (id=10576): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m26.960342804s ago: executing program 0 (id=10578): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 1m26.794515837s ago: executing program 0 (id=10587): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01864c1, &(0x7f0000000200)={r1, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000000)={0x0, 0x0, r2}) 1m26.76727845s ago: executing program 32 (id=10587): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01864c1, &(0x7f0000000200)={r1, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000000)={0x0, 0x0, r2}) 1m4.998010197s ago: executing program 1 (id=10808): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000100)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f0000000040), 0x0}, 0x20) 1m4.997069413s ago: executing program 1 (id=10809): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x510}]}, 0x34}}, 0x0) 1m4.98036361s ago: executing program 1 (id=10811): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) newfstatat(0xffffffffffffff9c, &(0x7f0000009980)='./file0\x00', &(0x7f00000099c0), 0x800) 1m4.926787612s ago: executing program 1 (id=10814): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000004c0)=0x752d8238, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1m4.874988358s ago: executing program 1 (id=10817): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 1m4.82726025s ago: executing program 1 (id=10819): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x1000, @remote}, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000891}, 0x20004044) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x30, 0x0) 48.779292679s ago: executing program 33 (id=10819): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x1000, @remote}, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000891}, 0x20004044) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x30, 0x0) 17.391090246s ago: executing program 4 (id=11804): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0xf, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfecc}, 0x40000002) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 16.448475284s ago: executing program 4 (id=11817): r0 = syz_io_uring_setup(0xec6, &(0x7f0000000000)={0x0, 0xe6c2, 0x10000, 0x0, 0xeb}, &(0x7f0000000080), &(0x7f0000000440)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80000011}) 16.366334586s ago: executing program 4 (id=11819): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xb}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) 16.1978999s ago: executing program 4 (id=11825): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 16.139076819s ago: executing program 4 (id=11827): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[], 0x0) 15.625397669s ago: executing program 4 (id=11842): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) 15.53355758s ago: executing program 34 (id=11842): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) 806.573913ms ago: executing program 5 (id=12005): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000200)='n', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x12160, 0x0) 765.393417ms ago: executing program 2 (id=12007): syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0xbde, &(0x7f0000000640)={0x0, 0xe827, 0x80, 0x1, 0x3c2}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 735.086582ms ago: executing program 5 (id=12009): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) 656.233689ms ago: executing program 6 (id=12012): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000)=0xfffffffe, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x25, @loopback, 0x7}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000700)=ANY=[], 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 652.68641ms ago: executing program 5 (id=12013): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) sendmmsg$alg(r1, &(0x7f0000004180)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}], 0x1, 0x4) 568.854225ms ago: executing program 3 (id=12014): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x2fa, 0xf400, 0x0, 0x0, 0x0) 568.64806ms ago: executing program 5 (id=12015): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') 534.41033ms ago: executing program 6 (id=12016): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010109}]}, &(0x7f0000000280)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r2, 0x9}, &(0x7f0000000200)=0x8) 525.979884ms ago: executing program 3 (id=12017): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x300}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 484.921038ms ago: executing program 5 (id=12018): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000200)={0x15, 0x65, 0xffff, 0xa0, 0x8, '9P2000.L'}, 0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x1, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 425.081989ms ago: executing program 2 (id=12019): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0xf) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f0000001340)="89d87df03855", 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x4c}}, 0xa3) 402.659515ms ago: executing program 3 (id=12020): r0 = socket$packet(0x11, 0x2, 0x300) r1 = fsopen(&(0x7f0000000180)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f0000000140)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 260.105879ms ago: executing program 6 (id=12021): socketpair$unix(0x1, 0x2, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff00b1]}, 0x0, 0x0, 0x8) 191.754158ms ago: executing program 3 (id=12022): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x2, {0xa, 0x4e23, 0x7fffffff, @loopback, 0x10}}}, 0x3a) getpeername(r0, 0x0, &(0x7f0000000540)) 191.562117ms ago: executing program 6 (id=12023): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000380)={r2, 0x0, 0x1ff, 0x0, 0x0, [0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x20000000, 0x100, 0xd], [0x1000010000000, 0x0, 0x7fffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c64d2, &(0x7f0000000200)={r3, 0x80000}) 189.427031ms ago: executing program 3 (id=12024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 175.476446ms ago: executing program 2 (id=12025): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000140)={0x3, "344ad1"}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x1, 0x20, 0x40, 0x282, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x4}) 111.157645ms ago: executing program 6 (id=12026): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 82.098192ms ago: executing program 2 (id=12027): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000004ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800002ef20f5e870078000026b87aeabbc900bbc9000f302f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x6b}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 76.897462ms ago: executing program 6 (id=12028): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) socket$nl_route(0x10, 0x3, 0x0) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r0, 0x60}], 0x1, 0x0, 0x0, 0x0) 75.70887ms ago: executing program 5 (id=12029): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba1282", 0x12}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 75.425392ms ago: executing program 2 (id=12030): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r2 = gettid() tkill(r2, 0x16) 331.399µs ago: executing program 2 (id=12031): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 0s ago: executing program 3 (id=12032): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="f78d9ca300ff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="a00000"], 0xa0}], 0x1, 0x44010) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x60) kernel console output (not intermixed with test programs): r's value: 66 [ 414.686357][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 414.689966][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 414.695140][ T10] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 414.699259][ T10] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 414.702187][ T10] usb 8-1: Product: syz [ 414.703576][ T10] usb 8-1: Manufacturer: syz [ 414.715608][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 414.718959][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 414.723722][ T10] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 414.726210][ T10] cdc_wdm 8-1:1.0: Unknown control protocol [ 414.762789][ T1129] xt_hashlimit: size too large, truncated to 1048576 [ 414.974543][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 414.976893][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 414.979071][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 414.981216][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 414.983507][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 414.985714][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 414.987982][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 414.990080][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 414.992142][ T10] usb 8-1: USB disconnect, device number 16 [ 414.994075][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 414.994086][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 414.994094][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 415.450234][ T1181] netlink: 'syz.1.10319': attribute type 10 has an invalid length. [ 415.467847][ T1181] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 416.388671][ T1227] can0: slcan on ttyS3. [ 416.490856][ T1243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10341'. [ 416.504467][ T1243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10341'. [ 416.507522][ T1243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10341'. [ 416.518973][ T1246] netlink: 120 bytes leftover after parsing attributes in process `syz.1.10342'. [ 416.654188][ T970] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 416.740146][ T40] kauditd_printk_skb: 141 callbacks suppressed [ 416.740163][ T40] audit: type=1400 audit(2000000418.927:63592): avc: denied { open } for pid=1254 comm="syz.3.10345" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 416.761245][ T40] audit: type=1400 audit(2000000418.936:63593): avc: denied { ioctl } for pid=1254 comm="syz.3.10345" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 416.840362][ T970] usb 5-1: config 0 has no interfaces? [ 416.842745][ T970] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 416.847121][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.858569][ T970] usb 5-1: config 0 descriptor?? [ 417.098907][ T970] usb 5-1: USB disconnect, device number 24 [ 417.135106][ T40] audit: type=1400 audit(2000000419.291:63595): avc: denied { sendto } for pid=5841 comm="sshd-session" saddr=fe80::9012:6fff:fe59:4a7a daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 417.145536][ T40] audit: type=1400 audit(2000000419.291:63594): avc: denied { sendto } for pid=33 comm="ksoftirqd/3" saddr=fe80::9012:6fff:fe59:4a7a daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 417.203384][ T40] audit: type=1400 audit(2000000419.357:63596): avc: denied { recv } for pid=5841 comm="sshd-session" saddr=127.0.0.1 src=48596 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 417.388539][ T40] audit: type=1400 audit(2000000419.525:63597): avc: denied { write } for pid=1264 comm="syz.1.10346" name="mcfilter" dev="proc" ino=4026532922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 417.417642][ T1225] can0 (unregistered): slcan off ttyS3. [ 417.581461][ T40] audit: type=1400 audit(2000000419.712:63598): avc: denied { allowed } for pid=1289 comm="syz.3.10350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 417.600492][ T40] audit: type=1400 audit(2000000419.712:63599): avc: denied { create } for pid=1289 comm="syz.3.10350" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 417.626982][ T40] audit: type=1400 audit(2000000419.712:63600): avc: denied { map } for pid=1289 comm="syz.3.10350" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=92328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 417.648224][ T40] audit: type=1400 audit(2000000419.712:63601): avc: denied { read write } for pid=1289 comm="syz.3.10350" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=92328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 418.213666][ T1320] overlayfs: failed to clone upperpath [ 418.754844][ T1349] veth0_to_team: entered promiscuous mode [ 418.758285][ T1349] gretap0: entered promiscuous mode [ 419.064670][ T1368] netlink: 'syz.3.10371': attribute type 32 has an invalid length. [ 419.068235][ T1368] __nla_validate_parse: 2 callbacks suppressed [ 419.068249][ T1368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10371'. [ 419.145272][ T1368] bond4: Setting coupled_control to off (0) [ 419.261237][ T1406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10377'. [ 419.465219][ T1426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10385'. [ 419.542431][ T1425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10384'. [ 420.167017][ T1461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10392'. [ 420.177863][ T1461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10392'. [ 420.296873][ T1467] team0: No ports can be present during mode change [ 420.303542][ T1472] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10397'. [ 420.644134][ T1478] block nbd2: server does not support multiple connections per device. [ 420.648440][ T1478] block nbd2: shutting down sockets [ 420.984394][ T1519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10411'. [ 420.988365][ T1519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10411'. [ 420.992341][ T1519] netlink: 'syz.2.10411': attribute type 19 has an invalid length. [ 421.338793][ T1546] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 421.341286][ T1546] dvmrp1: linktype set to 804 [ 421.689819][ T1576] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10429'. [ 421.750414][ T1583] netem: incorrect gi model size [ 422.154399][ T40] kauditd_printk_skb: 112 callbacks suppressed [ 422.154412][ T40] audit: type=1400 audit(2000000423.985:63714): avc: denied { map_create } for pid=1605 comm="syz.3.10442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 422.156378][ T1606] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 422.190129][ T40] audit: type=1400 audit(2000000424.022:63715): avc: denied { map } for pid=1607 comm="syz.3.10443" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=93584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 422.204287][ T40] audit: type=1400 audit(2000000424.032:63716): avc: denied { read write } for pid=1607 comm="syz.3.10443" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=93584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 422.355668][ T40] audit: type=1400 audit(2000000424.181:63717): avc: denied { sendto } for pid=5841 comm="sshd-session" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 422.366664][ T40] audit: type=1400 audit(2000000424.181:63718): avc: denied { read } for pid=1617 comm="syz.0.10447" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 422.374505][ T40] audit: type=1400 audit(2000000424.181:63719): avc: denied { sendto } for pid=1610 comm="syz.3.10444" saddr=fe80::9012:6fff:fe59:4a7a daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 422.386560][ T40] audit: type=1400 audit(2000000424.181:63720): avc: denied { open } for pid=1617 comm="syz.0.10447" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 422.402096][ T40] audit: type=1400 audit(2000000424.191:63721): avc: denied { ioctl } for pid=1617 comm="syz.0.10447" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 422.419040][ T40] audit: type=1400 audit(2000000424.237:63722): avc: denied { bpf } for pid=1619 comm="syz.0.10448" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 422.432403][ T40] audit: type=1400 audit(2000000424.237:63723): avc: denied { map_read map_write } for pid=1619 comm="syz.0.10448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 423.336694][ T1657] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 425.135623][ T1711] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 425.620037][ T1759] __nla_validate_parse: 7 callbacks suppressed [ 425.620049][ T1759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10501'. [ 426.174652][ T1785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10510'. [ 426.300871][ T970] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 426.471999][ T970] usb 6-1: Using ep0 maxpacket: 8 [ 426.478304][ T970] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 426.482302][ T970] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 426.495018][ T970] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 426.504099][ T970] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 426.513625][ T970] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 426.525705][ T970] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 426.532521][ T970] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 426.538192][ T970] usb 6-1: config 168 interface 0 has no altsetting 0 [ 426.542383][ T970] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 426.545587][ T970] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 426.549520][ T970] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 426.553273][ T970] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 426.557163][ T970] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 426.561326][ T970] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 426.565712][ T970] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 426.570089][ T970] usb 6-1: config 168 interface 0 has no altsetting 0 [ 426.573126][ T970] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 426.576093][ T970] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 426.586538][ T970] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 426.591744][ T970] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 426.596969][ T970] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 426.603868][ T970] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 426.608815][ T970] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 426.615443][ T970] usb 6-1: config 168 interface 0 has no altsetting 0 [ 426.621071][ T970] usb 6-1: string descriptor 0 read error: -22 [ 426.624393][ T970] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 426.628267][ T970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.648030][ T54] IPVS: starting estimator thread 0... [ 426.650142][ T970] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 426.739399][ T1807] IPVS: using max 26 ests per chain, 62400 per kthread [ 426.926161][ T5294] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 426.935356][ T970] usb 6-1: USB disconnect, device number 20 [ 427.039769][ T1841] binder: 1840:1841 ioctl c0306201 200000000040 returned -22 [ 427.516584][ T40] kauditd_printk_skb: 75 callbacks suppressed [ 427.516600][ T40] audit: type=1400 audit(2000000428.997:63799): avc: denied { create } for pid=1863 comm="syz.2.10537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 427.527876][ T40] audit: type=1400 audit(2000000429.006:63800): avc: denied { write } for pid=1863 comm="syz.2.10537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 427.570000][ T40] audit: type=1400 audit(2000000429.053:63801): avc: denied { read write } for pid=1867 comm="syz.3.10539" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 427.582777][ T40] audit: type=1400 audit(2000000429.053:63802): avc: denied { open } for pid=1867 comm="syz.3.10539" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 427.593211][ T40] audit: type=1400 audit(2000000429.062:63803): avc: denied { ioctl } for pid=1867 comm="syz.3.10539" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 427.754954][ T40] audit: type=1400 audit(2000000429.221:63804): avc: denied { create } for pid=1878 comm="syz.1.10542" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 427.777714][ T40] audit: type=1400 audit(2000000429.230:63805): avc: denied { map } for pid=1878 comm="syz.1.10542" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=94250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 427.808846][ T40] audit: type=1400 audit(2000000429.230:63806): avc: denied { read write } for pid=1878 comm="syz.1.10542" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=94250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 427.825579][ T40] audit: type=1400 audit(2000000429.230:63807): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=37610 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 428.065657][ T40] audit: type=1400 audit(2000000429.520:63808): avc: denied { setopt } for pid=1888 comm="syz.3.10547" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 428.078476][ T1890] syz_tun: entered allmulticast mode [ 428.082381][ T1888] syz_tun: left allmulticast mode [ 428.253717][ T1901] netlink: 'syz.0.10552': attribute type 2 has an invalid length. [ 428.401080][ T1917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10558'. [ 428.404631][ T1917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10558'. [ 428.932029][T31899] bond0: (slave syz_tun): Releasing backup interface [ 429.193967][ T683] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 429.198583][ T683] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 429.203073][ T683] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 429.208096][ T683] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 429.213282][ T683] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 429.247603][ T1999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10590'. [ 429.319882][ T1152] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.360773][ T1992] xfrm0 speed is unknown, defaulting to 1000 [ 429.407793][ T1152] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.513972][ T1152] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.603310][ T1152] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.617329][ T1992] chnl_net:caif_netlink_parms(): no params data found [ 429.690636][ T1992] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.695183][ T1992] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.698306][ T1992] bridge_slave_0: entered allmulticast mode [ 429.702424][ T1992] bridge_slave_0: entered promiscuous mode [ 429.713259][ T1992] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.716641][ T1992] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.719952][ T1992] bridge_slave_1: entered allmulticast mode [ 429.724319][ T1992] bridge_slave_1: entered promiscuous mode [ 429.765400][ T1992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.796204][ T1992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.823264][ T1992] team0: Port device team_slave_0 added [ 429.847044][ T1992] team0: Port device team_slave_1 added [ 429.852380][ T2172] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10598'. [ 429.875370][ T1992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.878554][ T1992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.889748][ T1992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.959615][ T1992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.962570][ T1992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.974932][ T1992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.990444][ T1152] bridge_slave_1: left allmulticast mode [ 429.993778][ T1152] bridge_slave_1: left promiscuous mode [ 429.998394][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.011494][ T1152] bridge_slave_0: left allmulticast mode [ 430.016894][ T1152] bridge_slave_0: left promiscuous mode [ 430.019527][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.193937][T21066] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 430.233820][ T1152] gretap0 (unregistering): left promiscuous mode [ 430.380665][T21066] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 430.385137][T21066] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 430.389143][T21066] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 430.394140][T21066] usb 8-1: config 0 interface 0 has no altsetting 0 [ 430.398859][T21066] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 430.402641][T21066] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 430.407330][T21066] usb 8-1: config 0 interface 0 has no altsetting 0 [ 430.411827][T21066] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 430.416036][T21066] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 430.416310][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.421117][T21066] usb 8-1: config 0 interface 0 has no altsetting 0 [ 430.433295][T21066] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 430.437120][T21066] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 430.448443][T21066] usb 8-1: config 0 interface 0 has no altsetting 0 [ 430.452675][T21066] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 430.456552][T21066] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 430.461775][T21066] usb 8-1: config 0 interface 0 has no altsetting 0 [ 430.465721][T21066] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 430.469501][T21066] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 430.474334][T21066] usb 8-1: config 0 interface 0 has no altsetting 0 [ 430.477766][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.478233][T21066] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 430.485696][T21066] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 430.490328][T21066] usb 8-1: config 0 interface 0 has no altsetting 0 [ 430.494215][T21066] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 430.498079][T21066] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 430.502649][T21066] usb 8-1: config 0 interface 0 has no altsetting 0 [ 430.507886][T21066] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 430.511697][T21066] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 430.515599][T21066] usb 8-1: Product: syz [ 430.517455][T21066] usb 8-1: Manufacturer: syz [ 430.519596][T21066] usb 8-1: SerialNumber: syz [ 430.519994][ T1152] bond0 (unregistering): (slave bond1): Releasing backup interface [ 430.524832][T21066] usb 8-1: config 0 descriptor?? [ 430.532982][T21066] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 430.569158][ T1152] bond0 (unregistering): Released all slaves [ 430.676691][ T1152] bond1 (unregistering): Released all slaves [ 430.752129][ T1992] hsr_slave_0: entered promiscuous mode [ 430.755511][ T1992] hsr_slave_1: entered promiscuous mode [ 430.758853][ T970] usb 8-1: USB disconnect, device number 17 [ 430.760383][ T970] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 430.779916][ T1992] debugfs: 'hsr0' already exists in 'hsr' [ 430.782555][ T1992] Cannot create hsr debugfs directory [ 430.797641][ T2262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10610'. [ 431.152568][ T1992] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 431.157429][ T1992] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 431.161924][ T1992] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 431.166618][ T1992] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 431.400541][ T1992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.422980][ T1992] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.437336][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.440487][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.445746][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.448786][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.457827][ T5294] Bluetooth: hci0: command tx timeout [ 431.519790][ T1152] veth0_to_team: left promiscuous mode [ 431.529460][ T1152] hsr_slave_0: left promiscuous mode [ 431.537113][ T1152] hsr_slave_1: left promiscuous mode [ 431.539614][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.542550][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.545816][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.548212][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.571560][ T1152] veth1_macvtap: left promiscuous mode [ 431.574771][ T1152] veth0_macvtap: left promiscuous mode [ 431.577404][ T1152] veth1_vlan: left promiscuous mode [ 431.579611][ T1152] veth0_vlan: left promiscuous mode [ 431.974381][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 432.017649][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 432.422167][ T2407] can0: slcan on ttyS3. [ 432.510819][ T2413] can0 (unregistered): slcan off ttyS3. [ 432.627008][ T1992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.845073][ T1992] veth0_vlan: entered promiscuous mode [ 432.853442][ T1992] veth1_vlan: entered promiscuous mode [ 432.857430][ T54] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 432.878099][ T1992] veth0_macvtap: entered promiscuous mode [ 432.883870][ T1992] veth1_macvtap: entered promiscuous mode [ 432.892944][ T1992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.903097][ T1992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.910143][ T62] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.914579][ T95] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.917512][ T95] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.920845][ T95] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.941294][ T40] kauditd_printk_skb: 172 callbacks suppressed [ 432.941309][ T40] audit: type=1400 audit(2000000434.074:63981): avc: denied { create } for pid=1992 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 432.961872][ T40] audit: type=1400 audit(2000000434.074:63982): avc: denied { write } for pid=1992 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 432.972438][ T40] audit: type=1400 audit(2000000434.074:63983): avc: denied { read } for pid=1992 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 432.980343][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.984170][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.009976][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.013524][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.018371][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 433.022890][ T40] audit: type=1400 audit(2000000434.148:63984): avc: denied { mounton } for pid=1992 comm="syz-executor" path="/syzkaller.vcmTBc/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 433.026463][ T54] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 433.037085][ T54] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 433.041810][ T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 433.041854][ T40] audit: type=1400 audit(2000000434.148:63985): avc: denied { mount } for pid=1992 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 433.045830][ T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 433.057720][ T40] audit: type=1400 audit(2000000434.148:63986): avc: denied { mounton } for pid=1992 comm="syz-executor" path="/syzkaller.vcmTBc/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 433.058411][ T54] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 433.068963][ T40] audit: type=1400 audit(2000000434.148:63987): avc: denied { mount } for pid=1992 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 433.074156][ T54] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 433.087750][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.089731][ T40] audit: type=1400 audit(2000000434.148:63988): avc: denied { mounton } for pid=1992 comm="syz-executor" path="/syzkaller.vcmTBc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 433.104329][ T40] audit: type=1400 audit(2000000434.148:63989): avc: denied { mounton } for pid=1992 comm="syz-executor" path="/syzkaller.vcmTBc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=90010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 433.117425][ T40] audit: type=1400 audit(2000000434.148:63990): avc: denied { unmount } for pid=1992 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 433.328149][ T54] usb 6-1: GET_CAPABILITIES returned 0 [ 433.332729][ T54] usbtmc 6-1:16.0: can't read capabilities [ 433.610769][ T2442] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 433.615905][ T1331] usb 6-1: USB disconnect, device number 21 [ 433.692053][ T5294] Bluetooth: hci0: command tx timeout [ 433.695203][ T2539] netlink: 182 bytes leftover after parsing attributes in process `syz.2.10643'. [ 435.133940][ T2667] can0: slcan on pty26. [ 435.243915][ T2655] can0 (unregistered): slcan off pty26. [ 435.279345][ T2692] input: syz1 as /devices/virtual/input/input38 [ 435.370447][ T6133] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 435.415310][ T2713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10686'. [ 435.532589][ T6133] usb 9-1: unable to get BOS descriptor or descriptor too short [ 435.536601][ T6133] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.540205][ T6133] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 435.548358][ T6133] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 435.553589][ T6133] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.557023][ T6133] usb 9-1: Product: syz [ 435.558437][ T6133] usb 9-1: Manufacturer: syz [ 435.560327][ T6133] usb 9-1: SerialNumber: syz [ 435.789138][ T2663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.792724][ T2663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.813006][ T6133] usb 9-1: 0:2 : does not exist [ 435.832647][ T6133] usb 9-1: USB disconnect, device number 2 [ 435.853589][T18851] udevd[18851]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.890857][ T2792] Invalid ELF header magic: != ELF [ 435.916692][ T5294] Bluetooth: hci0: command tx timeout [ 435.933540][ T2798] fuse: Bad value for 'fd' [ 436.141976][ T1331] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 436.246632][ T2831] netlink: 236 bytes leftover after parsing attributes in process `syz.1.10713'. [ 436.251502][ T2831] netlink: 236 bytes leftover after parsing attributes in process `syz.1.10713'. [ 436.301035][ T1331] usb 8-1: Using ep0 maxpacket: 16 [ 436.307332][ T1331] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 436.311815][ T1331] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 436.315187][ T1331] usb 8-1: Product: syz [ 436.317006][ T1331] usb 8-1: Manufacturer: syz [ 436.318928][ T1331] usb 8-1: SerialNumber: syz [ 436.324877][ T1331] usb 8-1: config 0 descriptor?? [ 436.470622][ T2868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10721'. [ 436.475908][ T2868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10721'. [ 436.505917][ T2867] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 436.509353][ T2867] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 436.512752][ T2867] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 436.516174][ T2867] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 436.519705][ T2867] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 436.523009][ T2867] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 436.526772][ T2867] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 436.529796][ T2867] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 436.532954][ T2867] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 436.536342][ T2867] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 436.551538][ T1331] usb 8-1: USB disconnect, device number 18 [ 436.581839][ T2884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10725'. [ 436.585172][ T2884] netlink: 'syz.2.10725': attribute type 21 has an invalid length. [ 438.129956][ T5294] Bluetooth: hci0: command tx timeout [ 438.308605][ T40] kauditd_printk_skb: 295 callbacks suppressed [ 438.308617][ T40] audit: type=1400 audit(2000000439.085:64286): avc: denied { watch } for pid=3009 comm="syz.1.10758" path="/2734/file0" dev="tmpfs" ino=13799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 438.351233][ T40] audit: type=1400 audit(2000000439.132:64287): avc: denied { create } for pid=3011 comm="syz.1.10759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 438.356722][ T3012] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10759'. [ 438.359176][ T40] audit: type=1400 audit(2000000439.141:64288): avc: denied { write } for pid=3011 comm="syz.1.10759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 438.412099][ T40] audit: type=1400 audit(2000000439.188:64289): avc: denied { create } for pid=3013 comm="syz.1.10760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 438.427622][ T40] audit: type=1400 audit(2000000439.188:64290): avc: denied { setopt } for pid=3013 comm="syz.1.10760" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 438.438408][ T40] audit: type=1400 audit(2000000439.188:64291): avc: denied { connect } for pid=3013 comm="syz.1.10760" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 438.448073][ T40] audit: type=1400 audit(2000000439.188:64292): avc: denied { write } for pid=3013 comm="syz.1.10760" laddr=172.20.20.18 lport=4 faddr=10.1.1.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 438.517643][ T40] audit: type=1400 audit(2000000439.291:64293): avc: denied { mounton } for pid=3022 comm="syz.3.10762" path="/2559/file0" dev="tmpfs" ino=12931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 438.547024][ T40] audit: type=1400 audit(2000000439.310:64294): avc: denied { mount } for pid=3022 comm="syz.3.10762" name="/" dev="9p" ino=86245443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 438.568266][ T40] audit: type=1400 audit(2000000439.319:64295): avc: denied { add_name } for pid=3022 comm="syz.3.10762" name="cgroup.kill" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 438.911088][ T6109] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 439.061298][ T3057] netlink: 3900 bytes leftover after parsing attributes in process `syz.2.10772'. [ 439.082251][ T6109] usb 8-1: Using ep0 maxpacket: 8 [ 439.086042][ T6109] usb 8-1: config 0 interface 0 has no altsetting 0 [ 439.089019][ T6109] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 439.093093][ T6109] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.099870][ T6109] usb 8-1: config 0 descriptor?? [ 439.358347][ T3079] team0 (unregistering): Port device team_slave_0 removed [ 439.365003][ T3079] team0 (unregistering): Port device team_slave_1 removed [ 439.548817][ T6109] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 439.754394][ T29] usb 8-1: USB disconnect, device number 19 [ 439.809921][ T57] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 439.969529][ T57] usb 6-1: Using ep0 maxpacket: 8 [ 439.976561][ T57] usb 6-1: config 0 interface 0 has no altsetting 0 [ 439.978729][ T57] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 439.982048][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.985970][ T57] usb 6-1: config 0 descriptor?? [ 440.140674][ T29] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 440.322413][ T29] usb 9-1: Using ep0 maxpacket: 8 [ 440.326956][ T29] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 440.330752][ T29] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 440.335898][ T29] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 440.340138][ T29] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 440.344727][ T29] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.350275][ T29] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 440.353925][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.354282][ T5294] Bluetooth: hci0: command tx timeout [ 440.433076][ T57] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 440.465026][ T3191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10804'. [ 440.468818][ T3191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10804'. [ 440.472598][ T4150] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 440.592858][ T29] usb 9-1: usb_control_msg returned -32 [ 440.595416][ T29] usbtmc 9-1:16.0: can't read capabilities [ 440.645630][ T29] usb 6-1: USB disconnect, device number 22 [ 440.971511][ T3240] usbtmc 9-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 441.188899][ T6109] usb 9-1: USB disconnect, device number 3 [ 445.745651][ T40] kauditd_printk_skb: 98 callbacks suppressed [ 445.745668][ T40] audit: type=1400 audit(2000000446.051:64394): avc: denied { egress } for pid=33 comm="ksoftirqd/3" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 445.756121][ T40] audit: type=1400 audit(2000000446.051:64395): avc: denied { sendto } for pid=33 comm="ksoftirqd/3" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 450.856937][ T40] audit: type=1400 audit(2000000450.819:64396): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=37610 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 450.867099][ T40] audit: type=1400 audit(2000000450.829:64397): avc: denied { create } for pid=3361 comm="syz.4.10810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 450.869994][ T3362] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 450.875338][ T40] audit: type=1400 audit(2000000450.838:64398): avc: denied { mounton } for pid=3360 comm="syz.1.10811" path="/2748/file0" dev="tmpfs" ino=13871 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 450.883093][ T3362] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 450.887534][ T40] audit: type=1400 audit(2000000450.838:64399): avc: denied { mount } for pid=3360 comm="syz.1.10811" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 450.897059][ T40] audit: type=1400 audit(2000000450.838:64400): avc: denied { allowed } for pid=3361 comm="syz.4.10810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 450.903672][ T40] audit: type=1400 audit(2000000450.838:64401): avc: denied { mounton } for pid=3360 comm="syz.1.10811" path="/2748/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 450.903702][ T3362] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 450.911438][ T40] audit: type=1400 audit(2000000450.838:64402): avc: denied { mount } for pid=3360 comm="syz.1.10811" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 450.923393][ T40] audit: type=1400 audit(2000000450.847:64403): avc: denied { create } for pid=3361 comm="syz.4.10810" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 451.005513][ T3376] overlayfs: invalid origin (0000) [ 451.131120][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 451.131135][ T40] audit: type=1400 audit(2000000451.081:64425): avc: denied { prog_load } for pid=3385 comm="syz.3.10821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 451.142991][ T40] audit: type=1400 audit(2000000451.091:64426): avc: denied { create } for pid=3385 comm="syz.3.10821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 451.150575][ T40] audit: type=1400 audit(2000000451.100:64427): avc: denied { bind } for pid=3385 comm="syz.3.10821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 451.159935][ T40] audit: type=1400 audit(2000000451.100:64428): avc: denied { write } for pid=3385 comm="syz.3.10821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 451.220314][ T3388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10823'. [ 451.278340][ T3388] team_slave_0 (unregistering): left promiscuous mode [ 451.281395][ T3388] team_slave_0 (unregistering): left allmulticast mode [ 451.294007][ T3388] team0: Port device team_slave_0 removed [ 451.317171][ T3395] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.10824'. [ 451.327320][ T40] audit: type=1400 audit(2000000451.259:64429): avc: denied { create } for pid=3408 comm="syz.2.10825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 451.334621][ T40] audit: type=1400 audit(2000000451.259:64430): avc: denied { bind } for pid=3408 comm="syz.2.10825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 451.342415][ T40] audit: type=1400 audit(2000000451.259:64431): avc: denied { setopt } for pid=3408 comm="syz.2.10825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 451.349599][ T40] audit: type=1400 audit(2000000451.259:64432): avc: denied { accept } for pid=3408 comm="syz.2.10825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 451.357702][ T40] audit: type=1400 audit(2000000451.259:64433): avc: denied { write } for pid=3408 comm="syz.2.10825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 451.364871][ T40] audit: type=1400 audit(2000000451.259:64434): avc: denied { read } for pid=3408 comm="syz.2.10825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 452.924755][ T3487] netlink: 'syz.2.10850': attribute type 29 has an invalid length. [ 452.929699][ T3487] netlink: 'syz.2.10850': attribute type 29 has an invalid length. [ 452.943526][ T3487] netlink: 500 bytes leftover after parsing attributes in process `syz.2.10850'. [ 452.947205][ T3487] unsupported nla_type 58 [ 454.680540][ T3610] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.10880'. [ 454.684469][ T3610] net_ratelimit: 44 callbacks suppressed [ 454.684483][ T3610] netlink: ct family unspecified [ 454.861541][ T3629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10888'. [ 454.864470][ T3629] netlink: 'syz.3.10888': attribute type 7 has an invalid length. [ 454.866979][ T3629] netlink: 'syz.3.10888': attribute type 8 has an invalid length. [ 454.878335][ T3629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10888'. [ 454.943253][ T3636] netlink: 'syz.3.10891': attribute type 39 has an invalid length. [ 455.348341][ T3671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10900'. [ 455.465690][ T3671] hsr_slave_1 (unregistering): left promiscuous mode [ 455.513366][ T3692] overlayfs: failed to clone upperpath [ 455.738883][ T3710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10913'. [ 456.111533][ T3744] xfrm0 speed is unknown, defaulting to 1000 [ 456.572216][ T40] kauditd_printk_skb: 157 callbacks suppressed [ 456.572232][ T40] audit: type=1400 audit(2000000456.168:64592): avc: denied { execmem } for pid=3789 comm="syz.3.10931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 456.584459][ T40] audit: type=1400 audit(2000000456.177:64593): avc: denied { ioctl } for pid=3789 comm="syz.3.10931" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=79830 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 456.650318][ T40] audit: type=1400 audit(2000000456.242:64594): avc: denied { mount } for pid=3791 comm="syz.2.10932" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 456.734078][ T40] audit: type=1400 audit(2000000456.327:64595): avc: denied { execute } for pid=3794 comm="syz.2.10933" path="/2826/net_prio.prioidx" dev="tmpfs" ino=14296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 456.745281][ T40] audit: type=1400 audit(2000000456.327:64596): avc: denied { create } for pid=3794 comm="syz.2.10933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 456.754186][ T40] audit: type=1400 audit(2000000456.327:64597): avc: denied { bind } for pid=3794 comm="syz.2.10933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 456.790553][ T40] audit: type=1400 audit(2000000456.373:64598): avc: denied { create } for pid=3798 comm="syz.2.10935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 456.803488][ T40] audit: type=1400 audit(2000000456.383:64599): avc: denied { getopt } for pid=3798 comm="syz.2.10935" lport=10 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 456.901105][ T40] audit: type=1400 audit(2000000456.476:64600): avc: denied { connect } for pid=3806 comm="syz.3.10938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 456.991402][ T40] audit: type=1400 audit(2000000456.560:64601): avc: denied { mount } for pid=3812 comm="syz.2.10940" name="/" dev="hugetlbfs" ino=79844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 457.040663][ T3823] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10943'. [ 457.046897][ T3823] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10943'. [ 457.297725][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 457.455934][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 457.459813][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 457.462623][ T9] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 457.468093][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.473948][ T9] usb 9-1: config 0 descriptor?? [ 457.912101][ T9] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 458.130526][ T3819] i2c i2c-2: unsupported multi-msg i2c transaction [ 458.141739][ T970] usb 9-1: USB disconnect, device number 4 [ 458.740895][ T3910] xfrm0 speed is unknown, defaulting to 1000 [ 459.101690][ T3945] syzkaller1: entered promiscuous mode [ 459.105080][ T3945] syzkaller1: entered allmulticast mode [ 459.302633][ T3895] ceph: No mds server is up or the cluster is laggy [ 459.408464][ T29] hid-generic 0005:0006:5508.000A: hidraw1: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 459.430084][ T3966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10970'. [ 459.463116][ T3968] fido_id[3968]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci0/hci0:200/report_descriptor': No such file or directory [ 460.467258][ T4022] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 460.725870][ T4043] Bluetooth: MGMT ver 1.23 [ 460.876619][ T4054] overlayfs: failed to clone upperpath [ 460.897890][ T4057] rdma_rxe: rxe_newlink: failed to add bond0 [ 461.135495][ T970] IPVS: starting estimator thread 0... [ 461.252734][ T4076] IPVS: using max 31 ests per chain, 74400 per kthread [ 461.291854][ T4092] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 461.301235][ T4092] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11011'. [ 461.626350][ T4126] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11023'. [ 461.721985][ T4135] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 461.736339][ T4135] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 461.829365][ T4135] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 461.833726][ T4135] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 461.948372][ T40] kauditd_printk_skb: 143 callbacks suppressed [ 461.948394][ T40] audit: type=1400 audit(2000000461.198:64745): avc: denied { name_bind } for pid=4161 comm="syz.3.11032" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 461.991240][ T40] audit: type=1400 audit(2000000461.235:64746): avc: denied { setopt } for pid=4163 comm="syz.3.11033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 462.012209][ T4135] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 462.016392][ T4135] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 462.023145][ T40] audit: type=1400 audit(2000000461.235:64747): avc: denied { write } for pid=4163 comm="syz.3.11033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 462.079159][ T40] audit: type=1400 audit(2000000461.319:64748): avc: denied { read write } for pid=4170 comm="syz.4.11035" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 462.090420][ T40] audit: type=1400 audit(2000000461.319:64749): avc: denied { open } for pid=4170 comm="syz.4.11035" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 462.104232][ T40] audit: type=1400 audit(2000000461.329:64750): avc: denied { ioctl } for pid=4170 comm="syz.4.11035" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x5628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 462.120700][ T4135] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 462.124929][ T4135] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 462.130324][ T40] audit: type=1400 audit(2000000461.329:64751): avc: denied { execmem } for pid=4170 comm="syz.4.11035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 462.191797][ T40] audit: type=1400 audit(2000000461.422:64752): avc: denied { create } for pid=4181 comm="syz.4.11037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 462.200336][ T40] audit: type=1400 audit(2000000461.432:64753): avc: denied { shutdown } for pid=4181 comm="syz.4.11037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 462.216763][ T40] audit: type=1400 audit(2000000461.441:64754): avc: denied { getopt } for pid=4181 comm="syz.4.11037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 462.311119][ T95] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 462.313897][ T95] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 462.325776][ T1152] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 462.333302][ T1152] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 462.361993][ T1152] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 462.365348][ T1152] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 462.378946][ T1152] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 462.381612][ T1152] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 462.776289][ T4235] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11052'. [ 462.942738][ T5294] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 462.944112][ T683] Bluetooth: hci0: command 0x1407 tx timeout [ 463.442825][ T4252] overlay: filesystem on ./bus is read-only [ 463.515706][ T4256] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 463.664682][ T98] bridge0: port 4(syz_tun) entered disabled state [ 464.407747][ T4297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11074'. [ 464.842252][ T4322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11082'. [ 464.858885][ T4324] lo speed is unknown, defaulting to 1000 [ 464.862301][ T4324] lo speed is unknown, defaulting to 1000 [ 464.866002][ T4324] lo speed is unknown, defaulting to 1000 [ 464.924533][ T4332] ªªªªªª: renamed from lo (while UP) [ 464.934632][ T4334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11084'. [ 464.968425][ T4324] infiniband sz1: set active [ 464.970343][ T4324] infiniband sz1: added ªªªªªª [ 464.978757][ T54] ªªªªªª speed is unknown, defaulting to 1000 [ 465.011870][ T4324] RDS/IB: sz1: added [ 465.015020][ T4324] smc: adding ib device sz1 with port count 1 [ 465.017229][ T4324] smc: ib device sz1 port 1 has no pnetid [ 465.020310][ T54] ªªªªªª speed is unknown, defaulting to 1000 [ 465.024516][ T4324] ªªªªªª speed is unknown, defaulting to 1000 [ 465.063853][ T4347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11089'. [ 465.067220][ T4347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11089'. [ 465.208240][ T4324] ªªªªªª speed is unknown, defaulting to 1000 [ 465.379820][ T4324] ªªªªªª speed is unknown, defaulting to 1000 [ 465.540185][ T4324] ªªªªªª speed is unknown, defaulting to 1000 [ 465.704394][ T4324] ªªªªªª speed is unknown, defaulting to 1000 [ 465.994437][ T4376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11096'. [ 466.091801][ T4378] netlink: 'syz.4.11097': attribute type 1 has an invalid length. [ 466.097197][ T4378] netlink: 'syz.4.11097': attribute type 2 has an invalid length. [ 466.336031][ T4399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11102'. [ 466.413168][ T4405] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.543470][ T4418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11108'. [ 466.985486][ T6109] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 467.046107][ T4446] vxlan0: entered promiscuous mode [ 467.047791][ T4446] vxlan0: entered allmulticast mode [ 467.053403][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.056458][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.059195][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.068868][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.158930][ T6109] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.162300][ T6109] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 467.172917][ T5294] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 467.177062][ T5294] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 467.182393][ T5294] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 467.186430][ T5294] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 467.189430][ T5294] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 467.194865][ T6109] usb 9-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 467.198802][ T6109] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.201820][ T6109] usb 9-1: Product: syz [ 467.203255][ T6109] usb 9-1: Manufacturer: syz [ 467.204771][ T6109] usb 9-1: SerialNumber: syz [ 467.210525][ T6109] usb 9-1: config 0 descriptor?? [ 467.258242][ T4455] xfrm0 speed is unknown, defaulting to 1000 [ 467.262617][ T4455] ªªªªªª speed is unknown, defaulting to 1000 [ 467.329026][ T40] kauditd_printk_skb: 113 callbacks suppressed [ 467.329044][ T40] audit: type=1400 audit(2000000466.228:64868): avc: denied { create } for pid=4472 comm="syz.3.11122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 467.337469][ T40] audit: type=1400 audit(2000000466.228:64869): avc: denied { ioctl } for pid=4472 comm="syz.3.11122" path="socket:[98856]" dev="sockfs" ino=98856 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 467.443168][ T40] audit: type=1400 audit(2000000466.331:64870): avc: denied { execute } for pid=4431 comm="syz.4.11112" name="file0" dev="tmpfs" ino=580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 467.460153][ T6109] usb 9-1: USB disconnect, device number 5 [ 467.465882][ T40] audit: type=1400 audit(2000000466.331:64871): avc: denied { execute_no_trans } for pid=4431 comm="syz.4.11112" path="/110/file0" dev="tmpfs" ino=580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 467.480198][ T40] audit: type=1400 audit(2000000466.340:64872): avc: denied { create } for pid=4431 comm="syz.4.11112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 467.486461][ T40] audit: type=1400 audit(2000000466.340:64873): avc: denied { bind } for pid=4431 comm="syz.4.11112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 467.493085][ T40] audit: type=1400 audit(2000000466.340:64874): avc: denied { name_bind } for pid=4431 comm="syz.4.11112" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 467.500097][ T40] audit: type=1400 audit(2000000466.340:64875): avc: denied { node_bind } for pid=4431 comm="syz.4.11112" saddr=d813:1000:728f:102:301:902:1200:100 src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 467.507738][ T40] audit: type=1400 audit(2000000466.350:64876): avc: denied { map_create } for pid=4497 comm="syz.2.11126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 467.515217][ T40] audit: type=1400 audit(2000000466.350:64877): avc: denied { map_read map_write } for pid=4497 comm="syz.2.11126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 467.792821][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.886387][ T4559] sock: sock_set_timeout: `syz.2.11131' (pid 4559) tries to set negative timeout [ 467.898933][ T4455] chnl_net:caif_netlink_parms(): no params data found [ 467.927933][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.998749][ T4455] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.002421][ T4455] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.004922][ T4455] bridge_slave_0: entered allmulticast mode [ 468.007730][ T4455] bridge_slave_0: entered promiscuous mode [ 468.011448][ T4455] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.015186][ T4455] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.018955][ T4455] bridge_slave_1: entered allmulticast mode [ 468.023391][ T4455] bridge_slave_1: entered promiscuous mode [ 468.056527][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.119834][ T4455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.128557][ T4455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.244743][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.252699][ T4455] team0: Port device team_slave_0 added [ 468.257863][ T4455] team0: Port device team_slave_1 added [ 468.262617][ T4675] input: syz0 as /devices/virtual/input/input39 [ 468.295767][ T4455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.298750][ T4455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.310253][ T4455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.322563][ T4455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.325416][ T4455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.354483][ T4455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.399306][ T4455] hsr_slave_0: entered promiscuous mode [ 468.402650][ T4455] hsr_slave_1: entered promiscuous mode [ 468.405634][ T4455] debugfs: 'hsr0' already exists in 'hsr' [ 468.409246][ T4455] Cannot create hsr debugfs directory [ 468.567726][ T13] batman_adv: batadv0: Interface deactivated: gretap2 [ 468.823054][ T13] batman_adv: batadv0: Removing interface: gretap2 [ 469.197821][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.242490][ T13] bond_slave_0: left promiscuous mode [ 469.246119][ T13] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 469.263750][ T13] @0Ù: left promiscuous mode [ 469.267972][ T13] bond0 (unregistering): Released all slaves [ 469.276321][ T13] bond1 (unregistering): Released all slaves [ 469.283207][ T13] bond2 (unregistering): Released all slaves [ 469.290137][ T13] bond3 (unregistering): Released all slaves [ 469.297657][ T13] bond4 (unregistering): Released all slaves [ 469.437983][ T13] : left promiscuous mode [ 469.445431][ T683] Bluetooth: hci1: command tx timeout [ 469.470498][ T4870] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 469.547609][ T4455] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 469.614885][ T4455] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 469.656881][ T4455] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 469.668276][ T4455] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 469.762772][ T4455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.781255][ T4455] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.791542][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.793888][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.797228][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.799684][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.850325][ T4455] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 469.856160][ T4455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 470.006482][ T4455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.296479][ T13] hsr_slave_0: left promiscuous mode [ 470.298266][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11170'. [ 470.322540][ T13] hsr_slave_1: left promiscuous mode [ 470.325402][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.327826][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.331354][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.334436][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.349566][ T13] veth1_macvtap: left allmulticast mode [ 470.351609][ T13] veth1_macvtap: left promiscuous mode [ 470.353474][ T13] veth0_macvtap: left promiscuous mode [ 470.390495][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.699371][ T13] team0 (unregistering): Port device team_slave_1 removed [ 470.748143][ T13] team0 (unregistering): Port device team_slave_0 removed [ 471.203386][ T4455] veth0_vlan: entered promiscuous mode [ 471.211451][ T4455] veth1_vlan: entered promiscuous mode [ 471.216763][ T4963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11172'. [ 471.220144][ T4963] bridge_slave_0: default FDB implementation only supports local addresses [ 471.251895][ T4455] veth0_macvtap: entered promiscuous mode [ 471.257981][ T4455] veth1_macvtap: entered promiscuous mode [ 471.270835][ T4455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.278641][ T4455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.297740][T29739] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.301313][T29739] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.320908][T29739] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.323952][T29739] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.432066][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.435936][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.463506][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.466189][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.669827][ T683] Bluetooth: hci1: command tx timeout [ 471.748289][ T13] IPVS: stop unused estimator thread 0... [ 472.132820][ T5044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29037 sclass=netlink_route_socket pid=5044 comm=syz.5.11188 [ 472.280480][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.458764][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.529949][ T5079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11195'. [ 472.534243][ T5079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11195'. [ 472.699159][ T40] kauditd_printk_skb: 236 callbacks suppressed [ 472.699177][ T40] audit: type=1400 audit(2000000471.240:65114): avc: denied { read write } for pid=6055 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 472.710684][ T40] audit: type=1400 audit(2000000471.240:65115): avc: denied { open } for pid=6055 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 472.719336][ T40] audit: type=1400 audit(2000000471.240:65116): avc: denied { ioctl } for pid=6055 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 472.727581][ T40] audit: type=1400 audit(2000000471.259:65117): avc: denied { create } for pid=5095 comm="syz.3.11198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 472.737033][ T40] audit: type=1400 audit(2000000471.259:65118): avc: denied { bind } for pid=5095 comm="syz.3.11198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 472.745173][ T40] audit: type=1400 audit(2000000471.259:65119): avc: denied { create } for pid=5095 comm="syz.3.11198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 472.753844][ T40] audit: type=1400 audit(2000000471.259:65120): avc: denied { setopt } for pid=5095 comm="syz.3.11198" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 472.771222][ T40] audit: type=1400 audit(2000000471.259:65121): avc: denied { connect } for pid=5095 comm="syz.3.11198" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 472.780448][ T40] audit: type=1400 audit(2000000471.305:65122): avc: denied { prog_load } for pid=5103 comm="syz.3.11201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 472.793418][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.798681][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.806158][ T40] audit: type=1400 audit(2000000471.305:65123): avc: denied { bpf } for pid=5103 comm="syz.3.11201" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 473.222008][ T5139] netlink: 7 bytes leftover after parsing attributes in process `syz.2.11213'. [ 473.436338][T27307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.552479][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.894521][ T683] Bluetooth: hci1: command tx timeout [ 474.014930][ T5168] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11220'. [ 474.561794][ T5210] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 474.566453][ T5210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.571380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.667955][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.670736][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.402630][ T57] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 475.487986][ T6133] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 475.520406][T27307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.573610][ T57] usb 8-1: Using ep0 maxpacket: 8 [ 475.580513][ T57] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 475.583927][ T57] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 475.588269][ T57] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 475.592468][ T57] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 475.596360][ T57] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.601506][ T57] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 475.605157][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.669374][ T6133] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.674110][ T6133] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.678117][ T6133] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 475.691178][ T6133] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 475.695805][ T6133] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.706634][ T6133] usb 10-1: config 0 descriptor?? [ 475.787879][ T6129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.948720][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.118982][ T683] Bluetooth: hci1: command tx timeout [ 476.152460][ T6133] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 476.169094][ T6133] plantronics 0003:047F:FFFF.000B: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 476.362775][T21066] usb 10-1: USB disconnect, device number 2 [ 476.438383][ T5389] usbtmc 8-1:16.0: simple control status returned 36 [ 476.659067][ T6109] usb 8-1: USB disconnect, device number 20 [ 477.294136][ T5441] netlink: 'syz.2.11295': attribute type 1 has an invalid length. [ 477.841891][ T5499] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 477.896303][ T5499] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 477.903855][ T5499] overlayfs: failed to look up (tracing) for ino (-66) [ 478.136314][ T40] kauditd_printk_skb: 216 callbacks suppressed [ 478.136326][ T40] audit: type=1400 audit(2000000476.326:65340): avc: denied { mount } for pid=5513 comm="syz.2.11321" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 478.330471][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11325'. [ 478.343720][ T5527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11325'. [ 478.355862][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11325'. [ 478.356311][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.362359][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.362365][ T40] audit: type=1400 audit(2000000476.541:65341): avc: denied { create } for pid=5529 comm="syz.4.11326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 478.365001][ T5527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11325'. [ 478.376147][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.381832][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.383713][ T40] audit: type=1400 audit(2000000476.560:65342): avc: denied { write } for pid=5529 comm="syz.4.11326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 478.392365][ T40] audit: type=1400 audit(2000000476.560:65343): avc: denied { nlmsg_write } for pid=5529 comm="syz.4.11326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 478.418307][ T40] audit: type=1400 audit(2000000476.588:65344): avc: denied { execmem } for pid=5534 comm="syz.2.11328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 478.485210][ T40] audit: type=1400 audit(2000000476.663:65345): avc: denied { create } for pid=5542 comm="syz.5.11331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 478.497915][ T40] audit: type=1400 audit(2000000476.672:65346): avc: denied { bind } for pid=5542 comm="syz.5.11331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 478.506130][ T40] audit: type=1400 audit(2000000476.672:65347): avc: denied { setopt } for pid=5542 comm="syz.5.11331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 478.514706][ T40] audit: type=1400 audit(2000000476.672:65348): avc: denied { write } for pid=5542 comm="syz.5.11331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 478.523678][ T40] audit: type=1400 audit(2000000476.672:65349): avc: denied { write } for pid=5545 comm="syz.2.11332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 478.646214][ T5568] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11344'. [ 478.889911][T27307] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 478.990314][ T5599] No such timeout policy "syz1" [ 479.061996][T27307] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.066589][T27307] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.070933][T27307] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 479.076632][T27307] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 479.080996][T27307] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.087670][T27307] usb 8-1: config 0 descriptor?? [ 479.115297][ T57] net_ratelimit: 7 callbacks suppressed [ 479.115315][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.280619][ T5613] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 479.534826][T27307] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd [ 479.545757][T27307] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 479.813953][T21066] usb 8-1: USB disconnect, device number 21 [ 479.926005][ T5664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11361'. [ 480.243695][ T6129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.717503][ T5735] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 480.756453][ C2] vcan0: j1939_tp_rxtimer: 0xffff88806295dc00: rx timeout, send abort [ 480.761705][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88806295dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 480.773793][ T5741] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 481.077662][ T5767] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11383'. [ 481.082312][ T5767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11383'. [ 481.110261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 481.338538][ T4983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.522065][ T5807] bond5: option downdelay: invalid value (18446744073709551615) [ 481.525463][ T5807] bond5: option downdelay: allowed values 0 - 2147483647 [ 481.569673][ T683] Bluetooth: hci0: unexpected event for opcode 0x080d [ 481.574574][ T5807] bond5 (unregistering): Released all slaves [ 481.883967][ T6129] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 482.034102][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.044179][ T6129] usb 10-1: Using ep0 maxpacket: 8 [ 482.057355][ T6129] usb 10-1: config 0 interface 0 has no altsetting 0 [ 482.059950][ T6129] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 482.063387][ T6129] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.081258][ T6129] usb 10-1: config 0 descriptor?? [ 482.232302][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11416'. [ 482.236020][ T5929] netlink: 'syz.3.11416': attribute type 30 has an invalid length. [ 482.239538][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11416'. [ 482.450900][ T4150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.543719][ T6129] mcp2221 0003:04D8:00DD.000D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 482.639434][ T5964] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 482.754646][T27307] usb 10-1: USB disconnect, device number 3 [ 482.919063][ T6009] xt_hashlimit: size too large, truncated to 1048576 [ 483.158386][ T6025] overlayfs: failed to clone upperpath [ 483.287009][ T6037] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 483.576764][ T6129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.672976][ T40] kauditd_printk_skb: 244 callbacks suppressed [ 483.672993][ T40] audit: type=1400 audit(2000000482.509:65594): avc: denied { create } for pid=6089 comm="syz.3.11454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 483.731920][ T40] audit: type=1400 audit(2000000482.556:65595): avc: denied { create } for pid=6110 comm="syz.3.11455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 483.740499][ T40] audit: type=1400 audit(2000000482.565:65596): avc: denied { bind } for pid=6110 comm="syz.3.11455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 483.749222][ T40] audit: type=1400 audit(2000000482.565:65597): avc: denied { setopt } for pid=6110 comm="syz.3.11455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 483.813367][ T40] audit: type=1400 audit(2000000482.640:65598): avc: denied { read write } for pid=6115 comm="syz.4.11459" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 483.836673][ T40] audit: type=1400 audit(2000000482.649:65599): avc: denied { open } for pid=6115 comm="syz.4.11459" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 483.847634][ T40] audit: type=1400 audit(2000000482.649:65600): avc: denied { mounton } for pid=6115 comm="syz.4.11459" path="/212/file0" dev="tmpfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 483.875129][ T40] audit: type=1400 audit(2000000482.649:65601): avc: denied { mount } for pid=6115 comm="syz.4.11459" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 483.890391][ T40] audit: type=1400 audit(2000000482.658:65602): avc: denied { allowed } for pid=6118 comm="syz.3.11458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 483.900850][ T40] audit: type=1400 audit(2000000482.658:65603): avc: denied { create } for pid=6118 comm="syz.3.11458" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 484.035675][ T6153] __nla_validate_parse: 1 callbacks suppressed [ 484.035687][ T6153] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11460'. [ 484.076733][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11463'. [ 484.303406][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11471'. [ 484.679650][ T4983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.761614][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.810761][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.911206][ T6210] PID 6210 killed due to inadequate hugepage pool [ 484.980015][ T6220] xfrm0 speed is unknown, defaulting to 1000 [ 484.983625][ T6220] ªªªªªª speed is unknown, defaulting to 1000 [ 485.155082][ T6238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 485.158443][ T6238] IPv6: NLM_F_CREATE should be set when creating new route [ 485.284183][ T6227] xfrm0 speed is unknown, defaulting to 1000 [ 485.297658][ T6227] ªªªªªª speed is unknown, defaulting to 1000 [ 485.599352][ T6298] erspan0: entered promiscuous mode [ 485.642930][ T833] IPVS: starting estimator thread 0... [ 485.744631][ T6308] IPVS: using max 29 ests per chain, 69600 per kthread [ 485.787607][ T6129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.075494][ T6331] netlink: 212324 bytes leftover after parsing attributes in process `syz.5.11507'. [ 486.130318][T27307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.142249][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.364380][ T6343] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11512'. [ 486.845394][ T6129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.878814][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11525'. [ 486.910038][ T6129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.430957][ T6428] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11544'. [ 487.767684][ T6466] netlink: 44 bytes leftover after parsing attributes in process `syz.5.11557'. [ 488.018383][ T6129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.052699][ T6501] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11573'. [ 488.163445][ T6511] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11576'. [ 488.356327][ T6521] xt_hashlimit: size too large, truncated to 1048576 [ 488.544103][ T6537] bond4: Invalid ad_actor_system MAC address. [ 488.546141][ T6537] bond4: option ad_actor_system: invalid value (255) [ 488.592537][ T6537] bond4 (unregistering): Released all slaves [ 489.046516][ T40] kauditd_printk_skb: 242 callbacks suppressed [ 489.046527][ T40] audit: type=1400 audit(2000000487.530:65846): avc: denied { create } for pid=6638 comm="syz.5.11599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 489.064062][ T40] audit: type=1400 audit(2000000487.539:65847): avc: denied { bind } for pid=6638 comm="syz.5.11599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 489.093593][ T40] audit: type=1400 audit(2000000487.576:65848): avc: denied { allowed } for pid=6644 comm="syz.4.11601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 489.109080][ T40] audit: type=1400 audit(2000000487.586:65849): avc: denied { sys_module } for pid=6641 comm="syz.2.11600" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 489.127389][ T4150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.186632][ T40] audit: type=1400 audit(2000000487.661:65850): avc: denied { create } for pid=6652 comm="syz.2.11604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 489.197708][ T40] audit: type=1400 audit(2000000487.661:65851): avc: denied { prog_load } for pid=6653 comm="syz.5.11605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 489.206343][ T40] audit: type=1400 audit(2000000487.661:65852): avc: denied { prog_run } for pid=6653 comm="syz.5.11605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 489.220816][ T40] audit: type=1400 audit(2000000487.679:65853): avc: denied { setopt } for pid=6652 comm="syz.2.11604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 489.226810][ T40] audit: type=1400 audit(2000000487.689:65854): avc: denied { create } for pid=6652 comm="syz.2.11604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 489.238792][ T40] audit: type=1400 audit(2000000487.698:65855): avc: denied { write } for pid=6652 comm="syz.2.11604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 489.584234][T21066] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 489.766029][T21066] usb 9-1: Using ep0 maxpacket: 8 [ 489.768909][T21066] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 489.771493][T21066] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 489.774701][T21066] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 489.778057][T21066] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 489.781154][T21066] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 489.784916][T21066] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 489.789286][T21066] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.012516][T21066] usb 9-1: usb_control_msg returned -32 [ 490.014194][T21066] usbtmc 9-1:16.0: can't read capabilities [ 490.078085][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.267223][ T4150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.314890][ T6730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.318375][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.402723][ T6740] usbtmc 9-1:16.0: INDICATOR_PULSE returned 0 [ 490.537345][ T6748] xfrm0 speed is unknown, defaulting to 1000 [ 490.541244][ T6748] ªªªªªª speed is unknown, defaulting to 1000 [ 490.616864][ T833] usb 9-1: USB disconnect, device number 6 [ 490.806462][ T6786] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 491.232677][ T4150] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 491.349119][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.390401][ T6839] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input42 [ 491.408604][ T4150] usb 8-1: config 0 has no interfaces? [ 491.412300][ T4150] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 491.419936][ T4150] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.422464][ T4150] usb 8-1: Product: syz [ 491.434057][ T4150] usb 8-1: Manufacturer: syz [ 491.436242][ T4150] usb 8-1: SerialNumber: syz [ 491.439239][ T4150] usb 8-1: config 0 descriptor?? [ 491.760514][ T6875] Invalid argument reading file caps for ./file0 [ 491.941634][ T6819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.945550][ T6819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.953832][T21066] usb 8-1: USB disconnect, device number 22 [ 492.072240][ T6903] __nla_validate_parse: 1 callbacks suppressed [ 492.072257][ T6903] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11671'. [ 492.110298][ T6907] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11672'. [ 492.166891][ T6909] veth0_to_bridge: entered promiscuous mode [ 492.171139][ T6908] veth0_to_bridge: left promiscuous mode [ 492.413352][ T6928] overlayfs: failed to clone upperpath [ 492.462546][ T4983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.685321][ T6947] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11688'. [ 493.131304][ T6977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.147061][ T6977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.151062][ T6977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.287121][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11698'. [ 493.318672][T27307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.072447][ T7038] netlink: 248 bytes leftover after parsing attributes in process `syz.5.11716'. [ 494.191855][ T7050] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11718'. [ 494.334183][T27307] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 494.529962][T27307] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.533458][T27307] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.537007][T27307] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 494.540989][T27307] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 494.543699][T27307] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.552070][T27307] usb 9-1: config 0 descriptor?? [ 494.553800][ T40] kauditd_printk_skb: 222 callbacks suppressed [ 494.553814][ T40] audit: type=1400 audit(2000000492.682:66078): avc: denied { egress } for pid=970 comm="kworker/0:2" saddr=fe80::c daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 494.582298][ T40] audit: type=1400 audit(2000000492.710:66079): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=48596 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 494.710227][ T40] audit: type=1400 audit(2000000492.831:66080): avc: denied { create } for pid=7103 comm="syz.2.11736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 494.722901][ T40] audit: type=1400 audit(2000000492.841:66081): avc: denied { write } for pid=7103 comm="syz.2.11736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 494.728729][ T40] audit: type=1400 audit(2000000492.841:66082): avc: denied { connect } for pid=7103 comm="syz.2.11736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 494.736440][ T40] audit: type=1400 audit(2000000492.841:66083): avc: denied { name_connect } for pid=7103 comm="syz.2.11736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 494.745350][ T40] audit: type=1400 audit(2000000492.841:66084): avc: denied { name_connect } for pid=7103 comm="syz.2.11736" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 494.753603][ T40] audit: type=1400 audit(2000000492.859:66085): avc: denied { shutdown } for pid=7103 comm="syz.2.11736" laddr=fe80::13 lport=50390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 494.763544][ T40] audit: type=1400 audit(2000000492.859:66086): avc: denied { getopt } for pid=7103 comm="syz.2.11736" laddr=fe80::13 lport=50390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 494.793000][ T40] audit: type=1400 audit(2000000492.869:66087): avc: denied { create } for pid=7105 comm="syz.5.11737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 495.042102][T27307] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 495.093934][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11743'. [ 495.103060][ T7127] netlink: 'syz.2.11743': attribute type 30 has an invalid length. [ 495.138969][T29739] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.142578][T29739] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.148149][T29739] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.152226][T29739] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.355087][ T7150] netlink: 'syz.3.11749': attribute type 29 has an invalid length. [ 495.366246][ T7156] netlink: 596 bytes leftover after parsing attributes in process `syz.3.11749'. [ 495.371763][ T7153] netlink: 'syz.3.11749': attribute type 29 has an invalid length. [ 495.372452][ T4150] usb 9-1: USB disconnect, device number 7 [ 495.798432][ T4150] net_ratelimit: 4 callbacks suppressed [ 495.798451][ T4150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.447642][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.569206][ T6109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.575469][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11760'. [ 496.926975][ T6129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.058748][ T7227] batadv0: entered allmulticast mode [ 497.239891][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11777'. [ 497.316569][ T7243] xfrm0 speed is unknown, defaulting to 1000 [ 497.324200][ T7243] ªªªªªª speed is unknown, defaulting to 1000 [ 497.810809][ T7295] netlink: 348 bytes leftover after parsing attributes in process `syz.3.11790'. [ 497.901349][ T7304] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 498.023307][ T6129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.228764][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11799'. [ 498.247369][ T1331] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 498.409905][ T1331] usb 8-1: config 0 has no interfaces? [ 498.415922][ T1331] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 498.422564][ T1331] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 498.429492][ T1331] usb 8-1: SerialNumber: syz [ 498.438731][ T1331] usb 8-1: config 0 descriptor?? [ 498.678324][ T6129] usb 8-1: USB disconnect, device number 23 [ 499.138524][ T4983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.270548][ T7368] netlink: 'syz.3.11813': attribute type 29 has an invalid length. [ 499.298040][ T7368] netlink: 'syz.3.11813': attribute type 29 has an invalid length. [ 499.380043][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11815'. [ 499.383139][ T7377] netlink: 'syz.3.11815': attribute type 21 has an invalid length. [ 499.467579][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11819'. [ 499.614674][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11823'. [ 499.619091][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11823'. [ 499.821003][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.849721][ T7419] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 500.062161][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11838'. [ 500.067102][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11838'. [ 500.263871][ T6129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.285753][ T40] kauditd_printk_skb: 134 callbacks suppressed [ 500.285768][ T40] audit: type=1400 audit(2000000498.039:66222): avc: denied { map } for pid=7452 comm="syz.2.11841" path="socket:[107118]" dev="sockfs" ino=107118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 500.311598][ T40] audit: type=1400 audit(2000000498.048:66223): avc: denied { read } for pid=7452 comm="syz.2.11841" path="socket:[107118]" dev="sockfs" ino=107118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 500.333496][ T40] audit: type=1400 audit(2000000498.086:66224): avc: denied { execute } for pid=7455 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 500.355273][ T40] audit: type=1400 audit(2000000498.086:66225): avc: denied { execute_no_trans } for pid=7455 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 500.363945][ T40] audit: type=1400 audit(2000000498.095:66226): avc: denied { execmem } for pid=7455 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 500.372548][ T40] audit: type=1400 audit(2000000498.095:66227): avc: denied { recv } for pid=29739 comm="kworker/u32:9" saddr=10.0.2.2 src=37610 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 500.401879][ T40] audit: type=1400 audit(2000000498.151:66228): avc: denied { read write } for pid=7461 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 500.410234][ T40] audit: type=1400 audit(2000000498.151:66229): avc: denied { open } for pid=7461 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 500.415559][ T5294] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 500.420497][ T40] audit: type=1400 audit(2000000498.161:66230): avc: denied { ioctl } for pid=7461 comm="syz-executor" path="socket:[107992]" dev="sockfs" ino=107992 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 500.429164][ T5294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 500.438474][ T5294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 500.441551][ T40] audit: type=1400 audit(2000000498.189:66231): avc: denied { create } for pid=7468 comm="syz.2.11846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 500.442364][ T5294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 500.454039][ T5294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 500.647969][ T7461] xfrm0 speed is unknown, defaulting to 1000 [ 500.652001][ T7461] ªªªªªª speed is unknown, defaulting to 1000 [ 500.893955][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.202881][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.214505][ T7461] chnl_net:caif_netlink_parms(): no params data found [ 501.238275][ T6109] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 501.296701][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.343312][ T7461] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.345632][ T7461] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.348112][ T7461] bridge_slave_0: entered allmulticast mode [ 501.351174][ T7461] bridge_slave_0: entered promiscuous mode [ 501.354319][ T7461] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.356631][ T7461] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.358978][ T7461] bridge_slave_1: entered allmulticast mode [ 501.362014][ T6129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.362193][ T7461] bridge_slave_1: entered promiscuous mode [ 501.402461][ T6109] usb 8-1: Using ep0 maxpacket: 8 [ 501.410536][ T6109] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 501.420557][ T6109] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 501.427129][ T6109] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 501.432314][ T6109] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.435481][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.439833][ T6109] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 501.445581][ T6109] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.462487][ T7461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.470454][ T7461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.490134][ T7461] team0: Port device team_slave_0 added [ 501.494684][ T7461] team0: Port device team_slave_1 added [ 501.521779][ T7461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.524002][ T7461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.532145][ T7461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.536488][ T7461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.538686][ T7461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.550988][ T7461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.581146][ T7461] hsr_slave_0: entered promiscuous mode [ 501.583547][ T7461] hsr_slave_1: entered promiscuous mode [ 501.585959][ T7461] debugfs: 'hsr0' already exists in 'hsr' [ 501.588055][ T7461] Cannot create hsr debugfs directory [ 501.688218][ T6109] usb 8-1: GET_CAPABILITIES returned 0 [ 501.694540][ T6109] usbtmc 8-1:16.0: can't read capabilities [ 501.903937][ C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 501.907354][ C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 501.910393][ C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 501.917545][ T4983] usb 8-1: USB disconnect, device number 24 [ 501.997120][ T13] bridge_slave_1: left allmulticast mode [ 501.999632][ T13] bridge_slave_1: left promiscuous mode [ 502.029505][ T7788] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11857'. [ 502.036219][ T7788] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11857'. [ 502.044205][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.088778][ T13] bridge_slave_0: left allmulticast mode [ 502.091149][ T13] bridge_slave_0: left promiscuous mode [ 502.093582][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.502431][ T4983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.569972][ T6109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.643180][ T5294] Bluetooth: hci0: command tx timeout [ 502.714445][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.761372][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.799406][ T13] bond0 (unregistering): Released all slaves [ 502.988703][ T7461] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 503.003906][ T7461] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 503.010252][ T7835] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 503.024954][ T7461] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 503.041857][ T7461] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 503.286315][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.480193][ T7867] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.11870'. [ 503.528121][ T7461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.537058][ T7461] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.633368][ T4150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.720356][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.723552][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.743507][T29739] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.746670][T29739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.823692][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11877'. [ 503.997573][ T13] hsr_slave_0: left promiscuous mode [ 503.999882][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.002564][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.009634][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.012211][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.036550][ T13] veth1_macvtap: left promiscuous mode [ 504.038887][ T13] veth0_macvtap: left promiscuous mode [ 504.041176][ T13] veth1_vlan: left promiscuous mode [ 504.042843][ T13] veth0_vlan: left promiscuous mode [ 504.341311][ T7917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.347163][ T7917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.351127][ T7917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.357491][ T7917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.361420][ T7917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.868187][ T5294] Bluetooth: hci0: command tx timeout [ 504.934322][ T13] team0 (unregistering): Port device team_slave_1 removed [ 505.005614][ T13] team0 (unregistering): Port device team_slave_0 removed [ 505.464771][ T13] batadv0 (unregistering): left allmulticast mode [ 505.572825][ T1148] smc: removing ib device sz1 [ 505.585158][ T1331] ªªªªªª speed is unknown, defaulting to 1000 [ 505.587747][ T1331] sz1: Port: 1 Link DOWN [ 505.641595][ T7939] xfrm0 speed is unknown, defaulting to 1000 [ 505.654678][ T40] kauditd_printk_skb: 148 callbacks suppressed [ 505.654692][ T40] audit: type=1400 audit(2000000503.060:66380): avc: denied { search } for pid=5644 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.671909][ T40] audit: type=1400 audit(2000000503.069:66381): avc: denied { search } for pid=5644 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.683706][ T40] audit: type=1400 audit(2000000503.069:66382): avc: denied { search } for pid=5644 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.693890][ T40] audit: type=1400 audit(2000000503.079:66383): avc: denied { read write } for pid=7951 comm="syz.3.11890" name="video37" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 505.703496][ T40] audit: type=1400 audit(2000000503.079:66384): avc: denied { open } for pid=7951 comm="syz.3.11890" path="/dev/video37" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 505.712386][ T40] audit: type=1400 audit(2000000503.097:66385): avc: denied { create } for pid=7951 comm="syz.3.11890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 505.720333][ T40] audit: type=1400 audit(2000000503.097:66386): avc: denied { getopt } for pid=7951 comm="syz.3.11890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 505.742670][ T40] audit: type=1400 audit(2000000503.097:66387): avc: denied { create } for pid=7957 comm="syz.5.11891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 505.752777][ T40] audit: type=1400 audit(2000000503.097:66388): avc: denied { write } for pid=7957 comm="syz.5.11891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 505.761491][ T40] audit: type=1400 audit(2000000503.097:66389): avc: denied { read } for pid=7957 comm="syz.5.11891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 505.789977][ T7461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.050180][ T7993] team0: Device team_slave_1 failed to change mtu [ 506.053079][ T7997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11894'. [ 506.059569][ T7997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11894'. [ 506.323766][ T7461] veth0_vlan: entered promiscuous mode [ 506.328445][ T7461] veth1_vlan: entered promiscuous mode [ 506.367313][ T7461] veth0_macvtap: entered promiscuous mode [ 506.372246][ T7461] veth1_macvtap: entered promiscuous mode [ 506.393800][ T7461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.414916][ T7461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.423059][T29738] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.426652][T29738] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.433618][T29738] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.441264][T29738] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.597424][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.614295][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.631504][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.639591][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.777179][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11907'. [ 507.092378][ T5294] Bluetooth: hci0: command tx timeout [ 507.615018][ T8073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11910'. [ 507.850419][ T13] IPVS: stop unused estimator thread 0... [ 509.025251][ T4983] net_ratelimit: 10 callbacks suppressed [ 509.025263][ T4983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.066234][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.295688][ T8122] fuse: Bad value for 'fd' [ 509.316905][ T5294] Bluetooth: hci0: command tx timeout [ 509.394837][ T8126] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 509.394837][ T8126] The task syz.2.11923 (8126) triggered the difference, watch for misbehavior. [ 510.173105][ T4983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.745067][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11930'. [ 510.748031][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11930'. [ 511.007027][ T40] kauditd_printk_skb: 112 callbacks suppressed [ 511.007040][ T40] audit: type=1400 audit(2000000508.062:66502): avc: denied { create } for pid=8177 comm="syz.5.11939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 511.016716][ T40] audit: type=1400 audit(2000000508.072:66503): avc: denied { read write } for pid=8179 comm="syz.6.11937" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 511.027721][ T40] audit: type=1400 audit(2000000508.072:66504): avc: denied { open } for pid=8179 comm="syz.6.11937" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 511.036873][ T40] audit: type=1400 audit(2000000508.072:66505): avc: denied { ioctl } for pid=8179 comm="syz.6.11937" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 511.045419][ T40] audit: type=1400 audit(2000000508.081:66506): avc: denied { bind } for pid=8177 comm="syz.5.11939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 511.052127][ T40] audit: type=1400 audit(2000000508.081:66507): avc: denied { setopt } for pid=8177 comm="syz.5.11939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 511.060780][ T40] audit: type=1400 audit(2000000508.100:66508): avc: denied { accept } for pid=8177 comm="syz.5.11939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 511.067380][ T40] audit: type=1400 audit(2000000508.100:66509): avc: denied { write } for pid=8177 comm="syz.5.11939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 511.074443][ T40] audit: type=1400 audit(2000000508.109:66510): avc: denied { read } for pid=8177 comm="syz.5.11939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 511.095860][ T40] audit: type=1400 audit(2000000508.146:66511): avc: denied { mounton } for pid=8186 comm="syz.5.11940" path="/172/file0" dev="tmpfs" ino=902 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 511.249941][ T8198] fuse: Bad value for 'fd' [ 511.267573][ T4983] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 511.285460][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.342835][ T8207] fuse: Bad value for 'fd' [ 511.425724][ T4983] usb 11-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 511.431646][ T4983] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 511.437930][ T4983] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 511.441061][ T4983] usb 11-1: SerialNumber: syz [ 511.747119][ T8242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.750786][ T8242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.754049][ T8242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.757653][ T8242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.760573][ T8242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.773401][ T8242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.128516][ T4983] cdc_ether 11-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 512.548022][T22937] usb 11-1: USB disconnect, device number 2 [ 512.557262][T22937] cdc_ether 11-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 513.445249][ T4983] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 513.496590][ T8357] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11976'. [ 513.650590][ T4983] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 513.657573][ T4983] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 513.660719][ T4983] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 513.663471][ T4983] usb 11-1: Product: syz [ 513.664824][ T4983] usb 11-1: Manufacturer: syz [ 513.666548][ T4983] usb 11-1: SerialNumber: syz [ 513.904400][ T4983] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 514.224269][ T34] usb 11-1: USB disconnect, device number 3 [ 514.232039][ T34] usblp0: removed [ 514.623411][ T4983] net_ratelimit: 13 callbacks suppressed [ 514.623426][ T4983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.698007][ T8438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.912989][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.965632][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12002'. [ 515.074385][ T8469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.080141][ T8469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.083959][ T8469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.089042][ T8469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.093657][ T8469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.097279][ T8466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.313703][ T8492] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 515.416770][ T8498] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 515.421822][ T8498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.561628][ T8541] sctp: [Deprecated]: syz.6.12016 (pid 8541) Use of struct sctp_assoc_value in delayed_ack socket option. [ 515.561628][ T8541] Use struct sctp_sack_info instead [ 515.667219][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12024'. [ 515.680190][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12024'. [ 515.792585][ T5294] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 515.796887][ T5294] CPU: 3 UID: 0 PID: 5294 Comm: kworker/u33:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.796919][ T5294] Tainted: [L]=SOFTLOCKUP [ 515.796926][ T5294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 515.796940][ T5294] Workqueue: hci0 hci_rx_work [ 515.796964][ T5294] Call Trace: [ 515.796971][ T5294] [ 515.796977][ T5294] dump_stack_lvl+0x100/0x190 [ 515.796995][ T5294] sysfs_warn_dup.cold+0x1c/0x28 [ 515.797011][ T5294] sysfs_create_dir_ns+0x24b/0x2b0 [ 515.797036][ T5294] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 515.797063][ T5294] ? find_held_lock+0x2b/0x80 [ 515.797088][ T5294] ? kobject_add_internal+0x25f/0x930 [ 515.797109][ T5294] ? kobject_add_internal+0x25f/0x930 [ 515.797131][ T5294] ? do_raw_spin_unlock+0x145/0x1e0 [ 515.797153][ T5294] kobject_add_internal+0x2c8/0x930 [ 515.797178][ T5294] kobject_add+0x16a/0x1e0 [ 515.797195][ T5294] ? __pfx_kobject_add+0x10/0x10 [ 515.797222][ T5294] ? class_to_subsys+0x10f/0x150 [ 515.797266][ T5294] ? kobject_put+0xb9/0x640 [ 515.797284][ T5294] ? _raw_spin_unlock+0x28/0x50 [ 515.797318][ T5294] device_add+0x294/0x1950 [ 515.797339][ T5294] ? __pfx_dev_set_name+0x10/0x10 [ 515.797364][ T5294] ? __pfx_device_add+0x10/0x10 [ 515.797388][ T5294] ? mgmt_send_event_skb+0x2fb/0x460 [ 515.797418][ T5294] hci_conn_add_sysfs+0x1a3/0x260 [ 515.797441][ T5294] le_conn_complete_evt+0x11cb/0x1f40 [ 515.797467][ T5294] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 515.797492][ T5294] hci_le_conn_complete_evt+0x23c/0x3a0 [ 515.797512][ T5294] ? skb_pull_data+0x15f/0x1e0 [ 515.797534][ T5294] hci_le_meta_evt+0x34a/0x5f0 [ 515.797558][ T5294] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 515.797583][ T5294] hci_event_packet+0x682/0x11c0 [ 515.797602][ T5294] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 515.797623][ T5294] ? __pfx_hci_event_packet+0x10/0x10 [ 515.797645][ T5294] ? kcov_remote_start+0x374/0x660 [ 515.797669][ T5294] ? lockdep_hardirqs_on+0x78/0x100 [ 515.797693][ T5294] hci_rx_work+0x451/0xfc0 [ 515.797721][ T5294] process_one_work+0x9c2/0x1840 [ 515.797752][ T5294] ? __pfx_process_one_work+0x10/0x10 [ 515.797781][ T5294] ? assign_work+0x19c/0x250 [ 515.797803][ T5294] worker_thread+0x5da/0xe40 [ 515.797831][ T5294] ? kthread+0x17d/0x730 [ 515.797846][ T5294] ? __pfx_worker_thread+0x10/0x10 [ 515.797867][ T5294] kthread+0x3b3/0x730 [ 515.797887][ T5294] ? __pfx_kthread+0x10/0x10 [ 515.797905][ T5294] ? ret_from_fork+0x79/0xaf0 [ 515.797923][ T5294] ? ret_from_fork+0x79/0xaf0 [ 515.797961][ T5294] ? rcu_is_watching+0x12/0xc0 [ 515.797987][ T5294] ? __pfx_kthread+0x10/0x10 [ 515.798007][ T5294] ret_from_fork+0x754/0xaf0 [ 515.798028][ T5294] ? __pfx_ret_from_fork+0x10/0x10 [ 515.798053][ T5294] ? __switch_to+0x7b9/0x10c0 [ 515.798078][ T5294] ? __pfx_kthread+0x10/0x10 [ 515.798096][ T5294] ret_from_fork_asm+0x1a/0x30 [ 515.798125][ T5294] [ 515.862472][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12031'. [ 515.867692][ T5294] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 515.867755][ T5294] Bluetooth: hci0: failed to register connection device [ 515.881093][ T5294] ================================================================== [ 515.881109][ T5294] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xe75/0x1010 [ 515.911820][ T8571] 8021q: adding VLAN 0 to HW filter on device bond4 [ 515.912526][ T5294] Read of size 8 at addr ffff88803551a480 by task kworker/u33:1/5294 [ 515.933465][ T5294] [ 515.934261][ T5294] CPU: 2 UID: 0 PID: 5294 Comm: kworker/u33:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.934279][ T5294] Tainted: [L]=SOFTLOCKUP [ 515.934284][ T5294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 515.934293][ T5294] Workqueue: hci0 hci_rx_work [ 515.934311][ T5294] Call Trace: [ 515.934316][ T5294] [ 515.934321][ T5294] dump_stack_lvl+0x100/0x190 [ 515.934337][ T5294] print_report+0x156/0x4c9 [ 515.934354][ T5294] ? __virt_addr_valid+0x81/0x620 [ 515.934365][ T5294] ? __phys_addr+0xe8/0x180 [ 515.934376][ T5294] ? l2cap_connect_cfm+0xe75/0x1010 [ 515.934389][ T5294] kasan_report+0xdf/0x1a0 [ 515.934404][ T5294] ? l2cap_connect_cfm+0xe75/0x1010 [ 515.934418][ T5294] l2cap_connect_cfm+0xe75/0x1010 [ 515.934431][ T5294] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 515.934446][ T5294] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 515.934459][ T5294] le_conn_complete_evt+0x195c/0x1f40 [ 515.934473][ T5294] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 515.934487][ T5294] hci_le_conn_complete_evt+0x23c/0x3a0 [ 515.934500][ T5294] ? skb_pull_data+0x15f/0x1e0 [ 515.934512][ T5294] hci_le_meta_evt+0x34a/0x5f0 [ 515.934525][ T5294] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 515.934539][ T5294] hci_event_packet+0x682/0x11c0 [ 515.934551][ T5294] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 515.934565][ T5294] ? __pfx_hci_event_packet+0x10/0x10 [ 515.934578][ T5294] ? kcov_remote_start+0x374/0x660 [ 515.934593][ T5294] ? lockdep_hardirqs_on+0x78/0x100 [ 515.934608][ T5294] hci_rx_work+0x451/0xfc0 [ 515.934622][ T5294] process_one_work+0x9c2/0x1840 [ 515.934638][ T5294] ? __pfx_process_one_work+0x10/0x10 [ 515.934653][ T5294] ? assign_work+0x19c/0x250 [ 515.934664][ T5294] worker_thread+0x5da/0xe40 [ 515.934679][ T5294] ? kthread+0x17d/0x730 [ 515.934690][ T5294] ? __pfx_worker_thread+0x10/0x10 [ 515.934702][ T5294] kthread+0x3b3/0x730 [ 515.934714][ T5294] ? __pfx_kthread+0x10/0x10 [ 515.934725][ T5294] ? ret_from_fork+0x79/0xaf0 [ 515.934738][ T5294] ? ret_from_fork+0x79/0xaf0 [ 515.934750][ T5294] ? rcu_is_watching+0x12/0xc0 [ 515.934764][ T5294] ? __pfx_kthread+0x10/0x10 [ 515.934775][ T5294] ret_from_fork+0x754/0xaf0 [ 515.934787][ T5294] ? __pfx_ret_from_fork+0x10/0x10 [ 515.934800][ T5294] ? __switch_to+0x7b9/0x10c0 [ 515.934815][ T5294] ? __pfx_kthread+0x10/0x10 [ 515.934827][ T5294] ret_from_fork_asm+0x1a/0x30 [ 515.934840][ T5294] [ 515.934844][ T5294] [ 516.012538][ T5294] Allocated by task 5294: [ 516.013974][ T5294] kasan_save_stack+0x30/0x50 [ 516.015883][ T5294] kasan_save_track+0x14/0x30 [ 516.017401][ T5294] __kasan_kmalloc+0xaa/0xb0 [ 516.018981][ T5294] l2cap_chan_create+0x44/0x940 [ 516.020553][ T5294] l2cap_sock_alloc.constprop.0+0xf5/0x1e0 [ 516.022386][ T5294] l2cap_sock_new_connection_cb+0x101/0x260 [ 516.024324][ T5294] l2cap_connect_cfm+0x4e2/0x1010 [ 516.026029][ T5294] le_conn_complete_evt+0x195c/0x1f40 [ 516.027781][ T5294] hci_le_conn_complete_evt+0x23c/0x3a0 [ 516.029633][ T5294] hci_le_meta_evt+0x34a/0x5f0 [ 516.031187][ T5294] hci_event_packet+0x682/0x11c0 [ 516.032765][ T5294] hci_rx_work+0x451/0xfc0 [ 516.034156][ T5294] process_one_work+0x9c2/0x1840 [ 516.035742][ T5294] worker_thread+0x5da/0xe40 [ 516.037258][ T5294] kthread+0x3b3/0x730 [ 516.038571][ T5294] ret_from_fork+0x754/0xaf0 [ 516.040205][ T5294] ret_from_fork_asm+0x1a/0x30 [ 516.042298][ T5294] [ 516.043385][ T5294] Freed by task 8562: [ 516.045098][ T5294] kasan_save_stack+0x30/0x50 [ 516.046645][ T5294] kasan_save_track+0x14/0x30 [ 516.048175][ T5294] kasan_save_free_info+0x3b/0x70 [ 516.049878][ T5294] __kasan_slab_free+0x5f/0x80 [ 516.051971][ T5294] kfree+0x1c7/0x690 [ 516.053632][ T5294] l2cap_chan_put+0x235/0x300 [ 516.055655][ T5294] l2cap_sock_cleanup_listen+0x4d/0x2d0 [ 516.057850][ T5294] l2cap_sock_release+0x69/0x280 [ 516.059679][ T5294] __sock_release+0xb3/0x260 [ 516.061255][ T5294] sock_close+0x1c/0x30 [ 516.062635][ T5294] __fput+0x3ff/0xb40 [ 516.064348][ T5294] task_work_run+0x150/0x240 [ 516.065905][ T5294] exit_to_user_mode_loop+0x100/0x4b0 [ 516.067690][ T5294] do_syscall_64+0x4fe/0xf80 [ 516.069289][ T5294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.071335][ T5294] [ 516.072214][ T5294] The buggy address belongs to the object at ffff88803551a000 [ 516.072214][ T5294] which belongs to the cache kmalloc-2k of size 2048 [ 516.076693][ T5294] The buggy address is located 1152 bytes inside of [ 516.076693][ T5294] freed 2048-byte region [ffff88803551a000, ffff88803551a800) [ 516.081171][ T5294] [ 516.082000][ T5294] The buggy address belongs to the physical page: [ 516.084077][ T5294] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35518 [ 516.086896][ T5294] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 516.089673][ T5294] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 516.092694][ T5294] page_type: f5(slab) [ 516.094371][ T5294] raw: 00fff00000000040 ffff88801b842f00 0000000000000000 dead000000000001 [ 516.098014][ T5294] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 516.101608][ T5294] head: 00fff00000000040 ffff88801b842f00 0000000000000000 dead000000000001 [ 516.105110][ T5294] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 516.108509][ T5294] head: 00fff00000000003 ffffea0000d54601 00000000ffffffff 00000000ffffffff [ 516.111934][ T5294] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 516.115427][ T5294] page dumped because: kasan: bad access detected [ 516.118082][ T5294] page_owner tracks the page as allocated [ 516.120415][ T5294] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6017, tgid 6017 (syz-executor), ts 52751430451, free_ts 24181737478 [ 516.127527][ T5294] post_alloc_hook+0x1e1/0x250 [ 516.129065][ T5294] get_page_from_freelist+0xe3d/0x2e10 [ 516.130717][ T5294] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 516.132500][ T5294] alloc_pages_mpol+0x1fb/0x550 [ 516.134100][ T5294] new_slab+0x2c4/0x440 [ 516.135805][ T5294] ___slab_alloc+0xda3/0x1ca0 [ 516.137858][ T5294] __slab_alloc.isra.0+0x63/0x110 [ 516.140049][ T5294] __kmalloc_cache_noprof+0x531/0x810 [ 516.142222][ T5294] rxrpc_alloc_connection+0xa3/0x770 [ 516.143888][ T5294] rxrpc_prealloc_service_connection+0x26/0x390 [ 516.145850][ T5294] rxrpc_service_prealloc_one+0x2c5/0x1000 [ 516.147759][ T5294] rxrpc_kernel_charge_accept+0xcd/0x110 [ 516.149498][ T5294] afs_charge_preallocation+0xc6/0x320 [ 516.151241][ T5294] afs_open_socket+0x31e/0x3f0 [ 516.152879][ T5294] afs_net_init+0x825/0xb00 [ 516.154349][ T5294] ops_init+0x1e2/0x5f0 [ 516.155735][ T5294] page last free pid 10 tgid 10 stack trace: [ 516.157880][ T5294] __free_frozen_pages+0x822/0x1130 [ 516.159606][ T5294] vfree.part.0+0x12b/0x9d0 [ 516.161078][ T5294] delayed_vfree_work+0x8e/0xd0 [ 516.162639][ T5294] process_one_work+0x9c2/0x1840 [ 516.164256][ T5294] worker_thread+0x5da/0xe40 [ 516.165759][ T5294] kthread+0x3b3/0x730 [ 516.167150][ T5294] ret_from_fork+0x754/0xaf0 [ 516.169036][ T5294] ret_from_fork_asm+0x1a/0x30 [ 516.170998][ T5294] [ 516.171992][ T5294] Memory state around the buggy address: [ 516.174247][ T5294] ffff88803551a380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 516.177498][ T5294] ffff88803551a400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 516.180275][ T5294] >ffff88803551a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 516.182771][ T5294] ^ [ 516.184114][ T5294] ffff88803551a500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 516.186646][ T5294] ffff88803551a580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 516.189354][ T5294] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 516.197704][ T5294] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 516.200868][ T5294] CPU: 2 UID: 0 PID: 5294 Comm: kworker/u33:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.204925][ T5294] Tainted: [L]=SOFTLOCKUP [ 516.206307][ T5294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 516.209577][ T5294] Workqueue: hci0 hci_rx_work [ 516.211565][ T5294] Call Trace: [ 516.212973][ T5294] [ 516.214203][ T5294] dump_stack_lvl+0x100/0x190 [ 516.216145][ T5294] vpanic+0x20d/0x630 [ 516.217808][ T5294] panic+0xd1/0xd1 [ 516.219368][ T5294] ? __pfx_panic+0x10/0x10 [ 516.221225][ T5294] ? l2cap_connect_cfm+0xe75/0x1010 [ 516.222930][ T5294] ? preempt_schedule_common+0x42/0xc0 [ 516.224672][ T5294] check_panic_on_warn.cold+0x19/0x34 [ 516.226371][ T5294] end_report.part.0+0x3a/0x90 [ 516.227929][ T5294] kasan_report.cold+0xe/0x18 [ 516.229441][ T5294] ? l2cap_connect_cfm+0xe75/0x1010 [ 516.231136][ T5294] l2cap_connect_cfm+0xe75/0x1010 [ 516.233019][ T5294] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 516.234958][ T5294] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 516.236846][ T5294] le_conn_complete_evt+0x195c/0x1f40 [ 516.239209][ T5294] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 516.241007][ T5294] hci_le_conn_complete_evt+0x23c/0x3a0 [ 516.242817][ T5294] ? skb_pull_data+0x15f/0x1e0 [ 516.244367][ T5294] hci_le_meta_evt+0x34a/0x5f0 [ 516.245927][ T5294] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 516.248063][ T5294] hci_event_packet+0x682/0x11c0 [ 516.249741][ T5294] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 516.251985][ T5294] ? __pfx_hci_event_packet+0x10/0x10 [ 516.254247][ T5294] ? kcov_remote_start+0x374/0x660 [ 516.256282][ T5294] ? lockdep_hardirqs_on+0x78/0x100 [ 516.258171][ T5294] hci_rx_work+0x451/0xfc0 [ 516.259650][ T5294] process_one_work+0x9c2/0x1840 [ 516.261228][ T5294] ? __pfx_process_one_work+0x10/0x10 [ 516.263080][ T5294] ? assign_work+0x19c/0x250 [ 516.265003][ T5294] worker_thread+0x5da/0xe40 [ 516.266839][ T5294] ? kthread+0x17d/0x730 [ 516.268279][ T5294] ? __pfx_worker_thread+0x10/0x10 [ 516.269987][ T5294] kthread+0x3b3/0x730 [ 516.271277][ T5294] ? __pfx_kthread+0x10/0x10 [ 516.272779][ T5294] ? ret_from_fork+0x79/0xaf0 [ 516.274304][ T5294] ? ret_from_fork+0x79/0xaf0 [ 516.276291][ T5294] ? rcu_is_watching+0x12/0xc0 [ 516.278142][ T5294] ? __pfx_kthread+0x10/0x10 [ 516.279687][ T5294] ret_from_fork+0x754/0xaf0 [ 516.281170][ T5294] ? __pfx_ret_from_fork+0x10/0x10 [ 516.282909][ T5294] ? __switch_to+0x7b9/0x10c0 [ 516.284904][ T5294] ? __pfx_kthread+0x10/0x10 [ 516.286938][ T5294] ret_from_fork_asm+0x1a/0x30 [ 516.288974][ T5294] [ 516.291051][ T5294] Kernel Offset: disabled [ 516.292941][ T5294] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:40:47 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff9153b101 RDX=0000000000000000 RSI=ffffffff8dd35d76 RDI=ffffffff8bfa35a0 RBP=ffffffff81b6a38e RSP=ffffc90006ab7670 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000000adb1 R12=ffff888057374980 R13=ffffc90006ab77a8 R14=0000000000000206 R15=ffffc90006ab77dc RIP=ffffffff8b76cc5c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d65db000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc941bf5ff8 CR3=000000000e392000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc7437e086 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc7437e086 00007ffc7437e08c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc943a08704 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc943a08750 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc943a086c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc943a08742 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc943be4498 00007fc943be4468 00007fc943be44a0 00007fc943be4480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff81b6a0a1 RDI=fffffbfff1cbc65c RBP=ffffffff8e5e32e0 RSP=ffffc900006776a0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000200 R11=0000000000017149 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b79e020 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66db000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f85a0217dac CR3=0000000059de6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73746e6576652e70 6177732e79726f6d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc7437e086 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc7437e086 00007ffc7437e08c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc943a08704 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc943a08750 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc943a086c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc943a08742 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8569ad25 RDI=ffffffff9b207c00 RBP=ffffffff9b207bc0 RSP=ffffc9000f86f1e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3535333038386552 R12=0000000000000000 R13=0000000000000066 R14=0000000000000010 R15=ffffffff8569acc0 RIP=ffffffff8569ad4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67db000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f85a0d4da08 CR3=0000000028338000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff00 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7372656c6c6f7274 6e6f632e70756f72 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff57f465b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff57f465b6 00007fff57f465bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85a0008704 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85a0008750 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85a00086c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85a0008742 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffc900066f7100 RCX=ffffc9002a8d1000 RDX=1ffff11007dff3c8 RSI=ffffffff8b748d02 RDI=ffff888026430000 RBP=ffff88803eff9e40 RSP=ffffc900066f7028 R8 =0000000000000007 R9 =0000000000001000 R10=ffff88803eff9e42 R11=0000000000000000 R12=000000007fffffff R13=0000000000000002 R14=0000000000000000 R15=000000000000008b RIP=ffffffff8b748d1b RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb1e0a6d6c0 ffffffff 00c00000 GS =0000 ffff8880d68db000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2ef14ff8 CR3=0000000056604000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000008 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000030100 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0df0da46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0df0da46 00007fff0df0da4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1dfc08704 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1dfc08750 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1dfc086c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1dfc08742 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1dfde4498 00007fb1dfde4468 00007fb1dfde44a0 00007fb1dfde4480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000480c 000000000000009f 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000