[ 51.450929][ T39] audit: type=1400 audit(1652322025.813:74): avc: denied { write } for pid=3574 comm="sh" path="pipe:[27527]" dev="pipefs" ino=27527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 [ 93.406265][ T40] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:19858' (ECDSA) to the list of known hosts. [ 172.871984][ T39] audit: type=1400 audit(1652322147.253:75): avc: denied { execute } for pid=3680 comm="sh" name="syz-execprog" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 172.903217][ T39] audit: type=1400 audit(1652322147.253:76): avc: denied { execute_no_trans } for pid=3680 comm="sh" path="/syz-execprog" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2022/05/12 02:22:27 parsed 1 programs [ 173.524431][ T39] audit: type=1400 audit(1652322147.903:77): avc: denied { getattr } for pid=3680 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 173.548790][ T39] audit: type=1400 audit(1652322147.903:78): avc: denied { read } for pid=3680 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 173.570978][ T39] audit: type=1400 audit(1652322147.903:79): avc: denied { open } for pid=3680 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 173.602832][ T39] audit: type=1400 audit(1652322147.923:80): avc: denied { read } for pid=3680 comm="syz-execprog" name="raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 173.606935][ T3687] cgroup: Unknown subsys name 'net' [ 173.627728][ T39] audit: type=1400 audit(1652322147.923:81): avc: denied { open } for pid=3680 comm="syz-execprog" path="/dev/raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 173.664074][ T39] audit: type=1400 audit(1652322147.923:82): avc: denied { read } for pid=3680 comm="syz-execprog" name="vhci" dev="devtmpfs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 173.692042][ T39] audit: type=1400 audit(1652322147.923:83): avc: denied { open } for pid=3680 comm="syz-execprog" path="/dev/vhci" dev="devtmpfs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 173.722395][ T39] audit: type=1400 audit(1652322147.973:84): avc: denied { mounton } for pid=3687 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 173.919808][ T3687] cgroup: Unknown subsys name 'rlimit' 2022/05/12 02:22:28 executed programs: 0 [ 175.262366][ T3708] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.262369][ T3711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.263362][ T3711] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.271816][ T3712] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.272105][ T3708] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.273938][ T3713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.274181][ T3714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.274977][ T3713] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.275487][ T3713] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.275880][ T3713] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 175.275883][ T3714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.276227][ T3714] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 175.276231][ T3713] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.276406][ T3714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.279833][ T3711] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.291851][ T3712] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.292956][ T3712] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.299638][ T3711] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.306647][ T3712] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.314922][ T3711] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.321920][ T3712] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 175.330614][ T3711] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 175.337252][ T3712] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.343781][ T3711] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.515837][ T3700] chnl_net:caif_netlink_parms(): no params data found [ 175.578650][ T3697] chnl_net:caif_netlink_parms(): no params data found [ 175.727412][ T3700] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.735930][ T3700] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.749016][ T3700] device bridge_slave_0 entered promiscuous mode [ 175.760004][ T3700] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.767665][ T3700] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.776231][ T3700] device bridge_slave_1 entered promiscuous mode [ 175.851666][ T3699] chnl_net:caif_netlink_parms(): no params data found [ 175.906054][ T3700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.917960][ T3700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.934206][ T3697] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.943550][ T3697] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.954200][ T3697] device bridge_slave_0 entered promiscuous mode [ 175.967851][ T3697] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.976735][ T3697] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.986045][ T3697] device bridge_slave_1 entered promiscuous mode [ 176.053179][ T3700] team0: Port device team_slave_0 added [ 176.065211][ T3700] team0: Port device team_slave_1 added [ 176.168984][ T3697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.219675][ T3697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.230852][ T3700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.238375][ T3700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.264530][ T3700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.336408][ T3700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.344148][ T3700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.370035][ T3700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.381213][ T3698] chnl_net:caif_netlink_parms(): no params data found [ 176.405499][ T3699] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.412903][ T3699] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.421124][ T3699] device bridge_slave_0 entered promiscuous mode [ 176.431535][ T3697] team0: Port device team_slave_0 added [ 176.441221][ T3697] team0: Port device team_slave_1 added [ 176.458041][ T3699] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.464697][ T3699] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.472286][ T3699] device bridge_slave_1 entered promiscuous mode [ 176.569303][ T3697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.576655][ T3697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.602244][ T3697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.636854][ T3699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.646673][ T3697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.653786][ T3697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.679413][ T3697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.702483][ T3700] device hsr_slave_0 entered promiscuous mode [ 176.711736][ T3700] device hsr_slave_1 entered promiscuous mode [ 176.720381][ T3699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.791832][ T3698] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.799121][ T3698] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.807492][ T3698] device bridge_slave_0 entered promiscuous mode [ 176.864045][ T3698] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.874653][ T3698] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.883102][ T3698] device bridge_slave_1 entered promiscuous mode [ 176.894414][ T3697] device hsr_slave_0 entered promiscuous mode [ 176.901467][ T3697] device hsr_slave_1 entered promiscuous mode [ 176.908443][ T3697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.916894][ T3697] Cannot create hsr debugfs directory [ 176.943195][ T3699] team0: Port device team_slave_0 added [ 176.984626][ T3699] team0: Port device team_slave_1 added [ 177.016332][ T3698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.032367][ T3698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.132144][ T3699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.139252][ T3699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.165779][ T3699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.182849][ T3699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.189865][ T3699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.215685][ T3699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.234681][ T3698] team0: Port device team_slave_0 added [ 177.247337][ T3698] team0: Port device team_slave_1 added [ 177.321380][ T175] Bluetooth: hci0: command 0x0409 tx timeout [ 177.321385][ T50] Bluetooth: hci1: command 0x0409 tx timeout [ 177.338880][ T3698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.346105][ T3698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.372171][ T3698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.388665][ T3698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.397043][ T3698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.400861][ T175] Bluetooth: hci3: command 0x0409 tx timeout [ 177.430410][ T3698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.490351][ T40] Bluetooth: hci2: command 0x0409 tx timeout [ 177.514303][ T3699] device hsr_slave_0 entered promiscuous mode [ 177.523545][ T3699] device hsr_slave_1 entered promiscuous mode [ 177.531240][ T3699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.539369][ T3699] Cannot create hsr debugfs directory [ 177.602515][ T3698] device hsr_slave_0 entered promiscuous mode [ 177.613832][ T3698] device hsr_slave_1 entered promiscuous mode [ 177.620025][ T3698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.627718][ T3698] Cannot create hsr debugfs directory [ 177.844731][ T3700] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 177.855746][ T3700] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 177.873190][ T3700] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 177.886842][ T3700] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 177.921380][ T3697] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 177.935689][ T3697] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 177.957176][ T3697] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 177.981855][ T3697] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 178.010523][ T3699] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 178.024339][ T3699] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 178.044419][ T3699] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 178.055076][ T3699] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 178.149942][ T3698] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 178.161758][ T3698] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 178.171578][ T3698] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 178.194062][ T3698] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 178.236519][ T3700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.277932][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.288155][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.315946][ T3697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.326733][ T3700] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.352327][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.364814][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.377079][ T2003] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.387420][ T2003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.398678][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.410634][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.422017][ T2003] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.431383][ T2003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.442258][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.462914][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.474700][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.489294][ T3699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.498898][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.522889][ T3697] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.537547][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.565052][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.575206][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.596480][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.604582][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.613289][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.621905][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.631523][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.639674][ T2003] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.646783][ T2003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.654674][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.669255][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.677321][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.692982][ T3699] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.702573][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.713793][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.723400][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.732466][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.741296][ T3736] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.748323][ T3736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.773332][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.785310][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.797775][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.807242][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.818593][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.829721][ T3702] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.838748][ T3702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.849156][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.860939][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.885697][ T3698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.894831][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.915295][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.926436][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.938337][ T3736] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.948924][ T3736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.958480][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.969241][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.979195][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.991399][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.001602][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.029573][ T3700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.053480][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.062852][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.072680][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.085750][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.097981][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.108131][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.117954][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.132583][ T39] kauditd_printk_skb: 18 callbacks suppressed [ 179.132598][ T39] audit: type=1400 audit(1652322153.513:103): avc: denied { module_request } for pid=3700 comm="syz-executor.2" kmod="netdev-xfrm0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 179.152225][ T3698] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.169576][ T39] audit: type=1400 audit(1652322153.533:104): avc: denied { sys_module } for pid=3700 comm="syz-executor.2" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 179.206431][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.215901][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.224971][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.233716][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.242788][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.252099][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.262177][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.271357][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.283025][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.298446][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.308538][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.317214][ T3739] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.324681][ T3739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.332855][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.341760][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.351190][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.371136][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.382747][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.392887][ T3734] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.400416][ T3736] Bluetooth: hci1: command 0x041b tx timeout [ 179.402522][ T3734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.406201][ T3702] Bluetooth: hci0: command 0x041b tx timeout [ 179.423476][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.432476][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.444343][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.475494][ T173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.481862][ T3735] Bluetooth: hci3: command 0x041b tx timeout [ 179.497938][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.505712][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.513701][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.537888][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.546851][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.558463][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.567771][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.570513][ T3702] Bluetooth: hci2: command 0x041b tx timeout [ 179.586397][ T3699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.604864][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.613075][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.621038][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.647146][ T3698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 179.659227][ T3698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.672103][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.681080][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.689832][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.699740][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.708292][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.716848][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.725870][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.734123][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.744285][ T3700] device veth0_vlan entered promiscuous mode [ 179.804895][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.813799][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.822107][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.837207][ T3697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.859513][ T3700] device veth1_vlan entered promiscuous mode [ 179.883097][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.893138][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.920851][ T3698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.935322][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.946180][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.955489][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.966607][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.979141][ T3700] device veth0_macvtap entered promiscuous mode [ 180.008024][ T3700] device veth1_macvtap entered promiscuous mode [ 180.020634][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.032308][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 180.047939][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.059803][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.072957][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.083598][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.099929][ T3699] device veth0_vlan entered promiscuous mode [ 180.121265][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.130960][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.157651][ T3699] device veth1_vlan entered promiscuous mode [ 180.171144][ T3700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.194671][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.211270][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.219852][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.229200][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.237374][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.252304][ T3700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.267799][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 180.276807][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.284478][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.291942][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.300197][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.310561][ T3697] device veth0_vlan entered promiscuous mode [ 180.331738][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.342200][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.361626][ T3700] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.371761][ T3700] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.381495][ T3700] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.390558][ T3700] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.415986][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.426351][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.440580][ T3699] device veth0_macvtap entered promiscuous mode [ 180.462250][ T3697] device veth1_vlan entered promiscuous mode [ 180.475351][ T3699] device veth1_macvtap entered promiscuous mode [ 180.511228][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.519978][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 180.528814][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.537311][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 180.545546][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.555424][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.565593][ T3698] device veth0_vlan entered promiscuous mode [ 180.585472][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.593340][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.601947][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.610664][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.633075][ T3699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.654673][ T3699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.669368][ T3699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.688038][ T3698] device veth1_vlan entered promiscuous mode [ 180.705172][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.713871][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.723534][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.734243][ T3697] device veth0_macvtap entered promiscuous mode [ 180.752230][ T3697] device veth1_macvtap entered promiscuous mode [ 180.759843][ T3699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.777533][ T3699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.788976][ T3699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.802951][ T3699] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.811680][ T3699] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.820707][ T3699] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.831262][ T3699] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.846122][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.849590][ T3720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.862434][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 180.866251][ T3720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.875229][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.891732][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.901564][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 180.940200][ T3698] device veth0_macvtap entered promiscuous mode [ 180.952572][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.963599][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.987689][ T3697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.000140][ T3697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.010027][ T3697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.021069][ T3697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.034556][ T3697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.045205][ T173] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.053325][ T173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.062289][ T173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.075909][ T3698] device veth1_macvtap entered promiscuous mode [ 181.084906][ T3697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.096497][ T3697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.107603][ T3697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.118999][ T3697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.131819][ T3697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.146942][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.155336][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.164351][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.176842][ T3733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.177836][ T3697] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.185038][ T3733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.193481][ T3697] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.209834][ T3697] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.218808][ T3697] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.248105][ T3698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.260244][ T3698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.270633][ T3698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.281368][ T3698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.291966][ T3698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.302798][ T3698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.314129][ T3698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.324551][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 181.336036][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.347001][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.370231][ T39] audit: type=1400 audit(1652322155.743:105): avc: denied { mounton } for pid=3700 comm="syz-executor.2" path="/dev/binderfs" dev="devtmpfs" ino=2379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 181.397941][ T39] audit: type=1400 audit(1652322155.753:106): avc: denied { mount } for pid=3700 comm="syz-executor.2" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 181.428523][ T3698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.431871][ T3733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.440320][ T3698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.449763][ T3733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.459215][ T3698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.459232][ T3698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.459251][ T3698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.480632][ T3739] Bluetooth: hci1: command 0x040f tx timeout [ 181.480684][ T3738] Bluetooth: hci0: command 0x040f tx timeout [ 181.486836][ T3698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.520313][ T3698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.530837][ T3698] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.539885][ T3698] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.549076][ T3698] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.558461][ T3698] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.563923][ T3739] Bluetooth: hci3: command 0x040f tx timeout [ 181.590447][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.599615][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.608630][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.638319][ T39] audit: type=1400 audit(1652322156.013:107): avc: denied { read write } for pid=3700 comm="syz-executor.2" name="loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.668657][ T3739] Bluetooth: hci2: command 0x040f tx timeout [ 181.680973][ T3720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.683813][ T39] audit: type=1400 audit(1652322156.023:108): avc: denied { open } for pid=3700 comm="syz-executor.2" path="/dev/loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 2022/05/12 02:22:36 executed programs: 4 [ 181.695002][ T3733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.728413][ T3720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.730956][ T39] audit: type=1400 audit(1652322156.023:109): avc: denied { ioctl } for pid=3700 comm="syz-executor.2" path="/dev/loop2" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.738107][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 181.756240][ T3733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.761669][ T39] audit: type=1400 audit(1652322156.103:110): avc: denied { read } for pid=3109 comm="syslogd" name="log" dev="sda1" ino=1125 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 181.774941][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.879179][ T3720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.890502][ T3720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.896366][ T3777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.908516][ T3777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.908928][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 181.934599][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.950575][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.959193][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.971902][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.572778][ T173] Bluetooth: hci1: command 0x0419 tx timeout [ 183.578726][ T173] Bluetooth: hci0: command 0x0419 tx timeout [ 183.644375][ T2003] Bluetooth: hci3: command 0x0419 tx timeout [ 183.720329][ T2003] Bluetooth: hci2: command 0x0419 tx timeout 2022/05/12 02:22:41 executed programs: 885 2022/05/12 02:22:46 executed programs: 1776 2022/05/12 02:22:51 executed programs: 2675 [ 200.922378][ T1351] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.929049][ T1351] ieee802154 phy1 wpan1: encryption failed: -22 2022/05/12 02:22:56 executed programs: 3560 2022/05/12 02:23:01 executed programs: 4377 2022/05/12 02:23:06 executed programs: 5160 2022/05/12 02:23:11 executed programs: 6041 2022/05/12 02:23:16 executed programs: 6989 [ 226.698564][ T3705] Bluetooth: hci1: link tx timeout [ 226.703658][ T3705] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 226.713056][ T3705] Bluetooth: hci1: link tx timeout [ 226.717772][ T3705] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa 2022/05/12 02:23:21 executed programs: 7911 [ 226.901856][ T3705] Bluetooth: hci3: link tx timeout [ 226.906701][ T3705] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 226.915385][ T3705] Bluetooth: hci3: link tx timeout [ 226.920026][ T3705] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 226.995752][ T3705] Bluetooth: hci0: link tx timeout [ 227.001750][ T3705] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 227.010205][ T3705] Bluetooth: hci0: link tx timeout [ 227.014890][ T3705] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 227.040757][ T3705] Bluetooth: hci2: link tx timeout [ 227.045664][ T3705] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 227.053572][ T3705] Bluetooth: hci2: link tx timeout [ 227.058252][ T3705] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 228.760304][ T3737] Bluetooth: hci1: command 0x0406 tx timeout [ 229.000768][ T3737] Bluetooth: hci3: command 0x0406 tx timeout [ 229.080418][ T3737] Bluetooth: hci2: command 0x0406 tx timeout [ 229.086729][ T50] Bluetooth: hci0: command 0x0406 tx timeout 2022/05/12 02:23:26 executed programs: 8880 2022/05/12 02:23:31 executed programs: 9906 2022/05/12 02:23:36 executed programs: 10913 2022/05/12 02:23:41 executed programs: 11930 2022/05/12 02:23:46 executed programs: 12928 2022/05/12 02:23:51 executed programs: 13974 2022/05/12 02:23:56 executed programs: 15042 [ 262.363159][ T1351] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.365173][ T2868] ------------[ cut here ]------------ [ 262.371169][ T1351] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.376923][ T2868] refcount_t: addition on 0; use-after-free. [ 262.388503][ T2868] WARNING: CPU: 1 PID: 2868 at lib/refcount.c:25 refcount_warn_saturate+0x169/0x1e0 [ 262.401074][ T2868] Modules linked in: [ 262.410180][ T2868] CPU: 1 PID: 2868 Comm: krfcommd Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 262.419999][ T2868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 262.429154][ T2868] RIP: 0010:refcount_warn_saturate+0x169/0x1e0 [ 262.435661][ T2868] Code: 09 31 ff 89 de e8 97 44 81 fd 84 db 0f 85 36 ff ff ff e8 aa 40 81 fd 48 c7 c7 80 61 26 8a c6 05 0f 00 ad 09 01 e8 e7 f5 30 05 <0f> 0b e9 17 ff ff ff e8 8b 40 81 fd 0f b6 1d f4 ff ac 09 31 ff 89 [ 262.456929][ T2868] RSP: 0018:ffffc9002186fba0 EFLAGS: 00010282 [ 262.463850][ T2868] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 262.479513][ T2868] RDX: ffff88801ccac0c0 RSI: ffffffff815f4a18 RDI: fffff5200430df66 [ 262.497259][ T2868] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000001 [ 262.507447][ T2868] R10: ffffffff815ef3ee R11: 0000000000000000 R12: ffff88802ace4080 [ 262.516373][ T2868] R13: ffff88802ace4000 R14: dffffc0000000000 R15: ffff888020938000 [ 262.526414][ T2868] FS: 0000000000000000(0000) GS:ffff88802cb00000(0000) knlGS:0000000000000000 [ 262.537389][ T2868] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.547577][ T2868] CR2: 0000555556cac708 CR3: 000000000ba8e000 CR4: 0000000000150ee0 [ 262.558324][ T2868] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 262.570419][ T2868] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 262.578292][ T2868] Call Trace: [ 262.581607][ T2868] [ 262.584708][ T2868] bt_accept_dequeue+0x302/0x630 [ 262.589883][ T2868] l2cap_sock_accept+0x290/0x5a0 [ 262.594995][ T2868] ? l2cap_sock_getsockopt+0x13c0/0x13c0 [ 262.600772][ T2868] ? __init_waitqueue_head+0xd0/0xd0 [ 262.606440][ T2868] ? security_socket_post_create+0x97/0xc0 [ 262.613835][ T2868] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 262.620322][ T2868] ? l2cap_sock_getsockopt+0x13c0/0x13c0 [ 262.625889][ T2868] kernel_accept+0x178/0x350 [ 262.630729][ T2868] rfcomm_run+0x37d/0x4a30 [ 262.635401][ T2868] ? find_held_lock+0x2d/0x110 [ 262.640529][ T2868] ? rfcomm_check_accept+0x240/0x240 [ 262.645888][ T2868] ? lock_downgrade+0x6e0/0x6e0 [ 262.650949][ T2868] ? __init_waitqueue_head+0xd0/0xd0 [ 262.656193][ T2868] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 262.662259][ T2868] ? lockdep_hardirqs_on+0x79/0x100 [ 262.667393][ T2868] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 262.673877][ T2868] ? __kthread_parkme+0x15f/0x220 [ 262.678997][ T2868] ? rfcomm_check_accept+0x240/0x240 [ 262.684325][ T2868] kthread+0x2e9/0x3a0 [ 262.688363][ T2868] ? kthread_complete_and_exit+0x40/0x40 [ 262.694038][ T2868] ret_from_fork+0x1f/0x30 [ 262.698543][ T2868] [ 262.701622][ T2868] Kernel panic - not syncing: panic_on_warn set ... [ 262.708525][ T2868] CPU: 1 PID: 2868 Comm: krfcommd Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 262.718425][ T2868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 262.727248][ T2868] Call Trace: [ 262.730480][ T2868] [ 262.733534][ T2868] dump_stack_lvl+0xcd/0x134 [ 262.738175][ T2868] panic+0x2d7/0x636 [ 262.742100][ T2868] ? panic_print_sys_info.part.0+0x10b/0x10b [ 262.747894][ T2868] ? __warn.cold+0x1d1/0x2c5 [ 262.752359][ T2868] ? refcount_warn_saturate+0x169/0x1e0 [ 262.757815][ T2868] __warn.cold+0x1e2/0x2c5 [ 262.762201][ T2868] ? wake_up_klogd.part.0+0x8e/0xd0 [ 262.767444][ T2868] ? refcount_warn_saturate+0x169/0x1e0 [ 262.772875][ T2868] report_bug+0x1bd/0x210 [ 262.777421][ T2868] handle_bug+0x3c/0x60 [ 262.781564][ T2868] exc_invalid_op+0x14/0x40 [ 262.785995][ T2868] asm_exc_invalid_op+0x12/0x20 [ 262.790758][ T2868] RIP: 0010:refcount_warn_saturate+0x169/0x1e0 [ 262.796493][ T2868] Code: 09 31 ff 89 de e8 97 44 81 fd 84 db 0f 85 36 ff ff ff e8 aa 40 81 fd 48 c7 c7 80 61 26 8a c6 05 0f 00 ad 09 01 e8 e7 f5 30 05 <0f> 0b e9 17 ff ff ff e8 8b 40 81 fd 0f b6 1d f4 ff ac 09 31 ff 89 [ 262.815736][ T2868] RSP: 0018:ffffc9002186fba0 EFLAGS: 00010282 [ 262.822086][ T2868] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 262.829917][ T2868] RDX: ffff88801ccac0c0 RSI: ffffffff815f4a18 RDI: fffff5200430df66 [ 262.837684][ T2868] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000001 [ 262.846611][ T2868] R10: ffffffff815ef3ee R11: 0000000000000000 R12: ffff88802ace4080 [ 262.854337][ T2868] R13: ffff88802ace4000 R14: dffffc0000000000 R15: ffff888020938000 [ 262.862121][ T2868] ? wake_up_klogd.part.0+0x8e/0xd0 [ 262.867049][ T2868] ? vprintk+0x88/0x90 [ 262.870892][ T2868] bt_accept_dequeue+0x302/0x630 [ 262.876008][ T2868] l2cap_sock_accept+0x290/0x5a0 [ 262.880847][ T2868] ? l2cap_sock_getsockopt+0x13c0/0x13c0 [ 262.886327][ T2868] ? __init_waitqueue_head+0xd0/0xd0 [ 262.891472][ T2868] ? security_socket_post_create+0x97/0xc0 [ 262.897044][ T2868] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 262.902915][ T2868] ? l2cap_sock_getsockopt+0x13c0/0x13c0 [ 262.908378][ T2868] kernel_accept+0x178/0x350 [ 262.913160][ T2868] rfcomm_run+0x37d/0x4a30 [ 262.917541][ T2868] ? find_held_lock+0x2d/0x110 [ 262.923182][ T2868] ? rfcomm_check_accept+0x240/0x240 [ 262.928878][ T2868] ? lock_downgrade+0x6e0/0x6e0 [ 262.934465][ T2868] ? __init_waitqueue_head+0xd0/0xd0 [ 262.940420][ T2868] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 262.946883][ T2868] ? lockdep_hardirqs_on+0x79/0x100 [ 262.952212][ T2868] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 262.959122][ T2868] ? __kthread_parkme+0x15f/0x220 [ 262.965089][ T2868] ? rfcomm_check_accept+0x240/0x240 [ 262.971249][ T2868] kthread+0x2e9/0x3a0 [ 262.976135][ T2868] ? kthread_complete_and_exit+0x40/0x40 [ 262.982933][ T2868] ret_from_fork+0x1f/0x30 [ 262.988161][ T2868] [ 262.992800][ T2868] Kernel Offset: disabled [ 262.997896][ T2868] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:23:57 Registers: info registers vcpu 0 RAX=ffffffff90074ee0 RBX=ffffffff8bd7f5e0 RCX=0000000000000004 RDX=0000000000000000 RSI=0000000000000002 RDI=ffffffff8bd7f5e8 RBP=0000000000000000 RSP=ffffc900033efa38 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffff88802b4aa0c0 R14=0000000000000002 R15=0000000000000000 RIP=ffffffff815c7a53 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f34e53a0000 CR3=000000004c9a0000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f34e4f707c000007f34e4f707c8 XMM02=00007f34e4f707e000007f34e4f707c0 XMM03=00007f34e4f707c800007f34e4f707c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff845b180c RDI=ffffffff90899800 RBP=ffffffff908997c0 RSP=ffffc9002186f520 R8 =000000000000002a R9 =0000000000000000 R10=ffffffff845b17fd R11=000000000000001f R12=0000000000000000 R13=fffffbfff211334b R14=fffffbfff2113302 R15=dffffc0000000000 RIP=ffffffff845b1832 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffb8f5691b8 CR3=00000000193d3000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=a57ba07de1f1889a4d772c4d0df74b62 XMM01=00000000000000000000000000000000 XMM02=0000000000000000414fffffe0000000 XMM03=32322035312e322e302e303120303635 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=ffffffff8a26a560 RSP=ffffc90002e0fee0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000002 R13=ffffffff89d5c540 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff896d191c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5b16379840 ffffffff 00c00000 GS =0000 ffff88802cc00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2c8d1a0000 CR3=000000001c8cb000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00ff000000000000ff00000000000000 XMM02=ffffffffffff00ff0000000000000000 XMM03=000000000000000000000000000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=ffff000000000000ffff000000000000 XMM06=ffffffffffffff00ffffffffffffffff XMM07=00000000000000000000000000000000 XMM08=65726168732f6372732f2e2e2f2e2e00 XMM09=00000000000000000000000000000000 XMM10=73732607809ee36373732602d7cca252 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=ffffffff900b14e0 RBX=1ffff920005cdf43 RCX=1ffffffff20162a6 RDX=dffffc0000000000 RSI=0000000000000040 RDI=ffffffff900b1530 RBP=0000000000000040 RSP=ffffc90002e6f9e0 R8 =0000000000000000 R9 =ffffffff900729a7 R10=fffffbfff200e534 R11=0000000000000001 R12=ffff888023a1ccf0 R13=0000000000000006 R14=0000000000000535 R15=ffff888023a1cd10 RIP=ffffffff815c5c16 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555558f2400 ffffffff 00c00000 GS =0000 ffff88802cd00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555558fb848 CR3=00000000169e7000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=00000000000000004253740dc85d43dc XMM02=00000000000000005931608782dc365e XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000