last executing test programs: 1.044928444s ago: executing program 2 (id=4098): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000840), 0x0) 169.366706ms ago: executing program 1 (id=4178): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x0, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380), 0x0, 0xad, 0xb12531df61d0214, 0x0, 0x0}) 169.192991ms ago: executing program 2 (id=4179): r0 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x20, 0x0) 169.043746ms ago: executing program 0 (id=4180): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) 165.067522ms ago: executing program 3 (id=4181): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f0000b9000004000000040000000c000180cafc"], 0x78}}, 0x0) 114.668102ms ago: executing program 1 (id=4182): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 114.489112ms ago: executing program 0 (id=4183): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=@other={'trylock', ' ', 'none'}, 0xd) 114.401343ms ago: executing program 2 (id=4184): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x8812, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x7fffffff, 0x2}, 0x20) 114.328242ms ago: executing program 3 (id=4185): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x4000, 0x100000001}) 114.222296ms ago: executing program 1 (id=4186): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000009c0)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000200)="7da5", 0x2}], 0x1, &(0x7f0000000980)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x9, 0xb, 0x4, 0x8, 0x80000000, 0x7cd5, 0x1}}], 0x30, 0x4040081}, 0x90f0) 114.112028ms ago: executing program 0 (id=4187): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000047cfe000400370014000180080002000000000008000300"], 0x2c}}, 0x0) 107.488454ms ago: executing program 3 (id=4188): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x2, @local}, {0xa, 0x0, 0xffffffd, @empty, 0x8}, 0xffffffffffffffff, {[0x0, 0x4, 0x0, 0x80]}}, 0x5c) 107.342453ms ago: executing program 2 (id=4189): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x1}) 88.00408ms ago: executing program 3 (id=4190): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000340)=0x1, 0x4) 57.370484ms ago: executing program 0 (id=4191): r0 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xe}}) 56.684822ms ago: executing program 1 (id=4192): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000280)={0x9, @raw_data="4c5d3e144f8b7cd57053474f0efec924dee607941d590db41c2cfb356281d23e9f3fceb2023d7033052cedd690a4d38cb9480b3e7a25903197017aafb6a837ea72165335c6586d60d50b9ac7b055ae8b9d9f23db423d5839c30a601adddbcf2156b3d4cb747766d2ca6180c0272a2661cb0d8c41e5f123d80f73f10e57b16253b676f4a04e288ef167ca5dfa22726dc00468c2b90f9161e1c6d9c8e2ad31bfaa7a8ab944d671feeecdb89827a56b82ca4c87e65ec3a6af8ca3ee954b397fd953521a547984731de3"}) 56.530432ms ago: executing program 3 (id=4193): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0xfffffffc, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x6, 0x6, "6ed0"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) 52.950171ms ago: executing program 2 (id=4194): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) 52.81132ms ago: executing program 0 (id=4195): madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x12) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.718411ms ago: executing program 1 (id=4196): r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/560]}, 0x2a8) 3.547093ms ago: executing program 2 (id=4197): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x64, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x7}}, [@mark={0xc}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x64}}, 0x4004040) 3.277448ms ago: executing program 3 (id=4198): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7, 0x2}}, 0x14}}, 0x0) 130.166µs ago: executing program 0 (id=4199): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) 0s ago: executing program 1 (id=4200): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) time(0x0) 0s ago: executing program 0 (id=4203): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000240)={0x5e, 0x0, 0x3b, 0x3b, 0x0}) kernel console output (not intermixed with test programs): [ 38.293395][ T39] audit: type=1400 audit(1726319469.014:82): avc: denied { siginh } for pid=5314 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.430349][ T39] audit: type=1400 audit(1726319470.164:83): avc: denied { read } for pid=4816 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.436059][ T39] audit: type=1400 audit(1726319470.164:84): avc: denied { append } for pid=4816 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.442002][ T39] audit: type=1400 audit(1726319470.164:85): avc: denied { open } for pid=4816 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.448044][ T39] audit: type=1400 audit(1726319470.164:86): avc: denied { getattr } for pid=4816 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:17547' (ED25519) to the list of known hosts. [ 40.219861][ T39] audit: type=1400 audit(1726319470.954:87): avc: denied { name_bind } for pid=5322 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 42.256425][ T5324] cgroup: Unknown subsys name 'net' [ 42.429503][ T5324] cgroup: Unknown subsys name 'rlimit' [ 42.629714][ T5327] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.346622][ T5324] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.549967][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 46.549982][ T39] audit: type=1400 audit(1726319477.284:105): avc: denied { execmem } for pid=5333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.562939][ T39] audit: type=1400 audit(1726319477.304:106): avc: denied { mounton } for pid=5338 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 46.578316][ T39] audit: type=1400 audit(1726319477.304:107): avc: denied { mounton } for pid=5337 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 46.590555][ T39] audit: type=1400 audit(1726319477.304:108): avc: denied { mount } for pid=5337 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 46.598942][ T39] audit: type=1400 audit(1726319477.304:109): avc: denied { read } for pid=5339 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.605375][ T39] audit: type=1400 audit(1726319477.304:110): avc: denied { read } for pid=5337 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.611777][ T39] audit: type=1400 audit(1726319477.304:111): avc: denied { open } for pid=5339 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.620030][ T39] audit: type=1400 audit(1726319477.304:112): avc: denied { mounton } for pid=5339 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.716121][ T39] audit: type=1400 audit(1726319477.454:113): avc: denied { mount } for pid=5337 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.721675][ T39] audit: type=1400 audit(1726319477.454:114): avc: denied { mounton } for pid=5337 comm="syz-executor" path="/syzkaller.WVaiWe/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.862878][ T5435] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 50.865646][ T5435] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 50.866950][ T5443] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 50.867843][ T5435] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 50.870283][ T5443] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 50.871859][ T5435] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 50.874035][ T5443] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 50.874120][ T5446] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 50.875389][ T5446] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 50.875721][ T5435] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 50.876634][ T5435] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 50.877126][ T5443] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 50.877491][ T5443] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 50.877675][ T5443] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 50.879312][ T4773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 50.882061][ T5449] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 50.887989][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 50.891408][ T5449] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 50.893750][ T4773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 50.895384][ T5449] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 50.898370][ T5435] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 50.900657][ T5449] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 50.908977][ T5449] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 50.911051][ T5449] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.189018][ T5433] chnl_net:caif_netlink_parms(): no params data found [ 51.297141][ T5432] chnl_net:caif_netlink_parms(): no params data found [ 51.364413][ T5437] chnl_net:caif_netlink_parms(): no params data found [ 51.424042][ T5433] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.427308][ T5433] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.429200][ T5433] bridge_slave_0: entered allmulticast mode [ 51.431588][ T5433] bridge_slave_0: entered promiscuous mode [ 51.438789][ T5433] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.440894][ T5433] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.442918][ T5433] bridge_slave_1: entered allmulticast mode [ 51.445198][ T5433] bridge_slave_1: entered promiscuous mode [ 51.551586][ T5433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.601248][ T5433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.618215][ T5432] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.620027][ T5432] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.621869][ T5432] bridge_slave_0: entered allmulticast mode [ 51.624242][ T5432] bridge_slave_0: entered promiscuous mode [ 51.626710][ T5445] chnl_net:caif_netlink_parms(): no params data found [ 51.666307][ T5432] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.668949][ T5432] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.671530][ T5432] bridge_slave_1: entered allmulticast mode [ 51.675232][ T5432] bridge_slave_1: entered promiscuous mode [ 51.745076][ T5433] team0: Port device team_slave_0 added [ 51.787157][ T5437] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.788941][ T5437] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.790786][ T5437] bridge_slave_0: entered allmulticast mode [ 51.793163][ T5437] bridge_slave_0: entered promiscuous mode [ 51.797578][ T5433] team0: Port device team_slave_1 added [ 51.809578][ T5432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.813606][ T5437] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.815434][ T5437] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.817300][ T5437] bridge_slave_1: entered allmulticast mode [ 51.819539][ T5437] bridge_slave_1: entered promiscuous mode [ 51.851022][ T5432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.945162][ T5432] team0: Port device team_slave_0 added [ 51.976255][ T5433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.978756][ T5433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.989247][ T5433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.033064][ T5432] team0: Port device team_slave_1 added [ 52.036270][ T5437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.039116][ T5433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.040947][ T5433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.047681][ T5433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.054100][ T5445] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.056009][ T5445] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.057900][ T5445] bridge_slave_0: entered allmulticast mode [ 52.060202][ T5445] bridge_slave_0: entered promiscuous mode [ 52.094224][ T5437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.135077][ T5437] team0: Port device team_slave_0 added [ 52.137057][ T5445] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.138969][ T5445] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.140855][ T5445] bridge_slave_1: entered allmulticast mode [ 52.143302][ T5445] bridge_slave_1: entered promiscuous mode [ 52.162795][ T5432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.164579][ T5432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.170734][ T5432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.174918][ T5432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.176701][ T5432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.183154][ T5432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.187656][ T5437] team0: Port device team_slave_1 added [ 52.270435][ T5437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.272222][ T5437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.278536][ T5437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.284304][ T5445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.289160][ T5445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.294575][ T5433] hsr_slave_0: entered promiscuous mode [ 52.296689][ T5433] hsr_slave_1: entered promiscuous mode [ 52.300058][ T5437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.301827][ T5437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.309573][ T5437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.352652][ T5445] team0: Port device team_slave_0 added [ 52.402162][ T5445] team0: Port device team_slave_1 added [ 52.436873][ T5432] hsr_slave_0: entered promiscuous mode [ 52.438958][ T5432] hsr_slave_1: entered promiscuous mode [ 52.440862][ T5432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.443297][ T5432] Cannot create hsr debugfs directory [ 52.479543][ T5437] hsr_slave_0: entered promiscuous mode [ 52.481630][ T5437] hsr_slave_1: entered promiscuous mode [ 52.485514][ T5437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.487509][ T5437] Cannot create hsr debugfs directory [ 52.494395][ T5445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.496147][ T5445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.502707][ T5445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.541838][ T5445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.543749][ T5445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.550393][ T5445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.680278][ T5445] hsr_slave_0: entered promiscuous mode [ 52.682885][ T5445] hsr_slave_1: entered promiscuous mode [ 52.685327][ T5445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.687318][ T5445] Cannot create hsr debugfs directory [ 52.903025][ T5444] Bluetooth: hci1: command tx timeout [ 52.912794][ T5444] Bluetooth: hci0: command tx timeout [ 52.946288][ T5433] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.955769][ T5433] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.960183][ T5433] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.967288][ T5433] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.982655][ T5444] Bluetooth: hci3: command tx timeout [ 52.983496][ T5449] Bluetooth: hci2: command tx timeout [ 53.001752][ T5445] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.008961][ T5445] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.014732][ T5445] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.020387][ T5445] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.084485][ T5432] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.088542][ T5432] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.093237][ T5432] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.098057][ T5432] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.147390][ T5437] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.151241][ T5437] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.155852][ T5437] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.160194][ T5437] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.178551][ T5433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.221624][ T5433] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.235086][ T5445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.243598][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.246169][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.267850][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.270089][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.285442][ T5445] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.293788][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.295697][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.317900][ T5432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.325005][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.326961][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.343338][ T5437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.364155][ T5432] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.380738][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.383187][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.397855][ T5437] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.409784][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.411593][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.424677][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.425327][ T39] kauditd_printk_skb: 31 callbacks suppressed [ 53.425335][ T39] audit: type=1400 audit(1726319484.170:146): avc: denied { sys_module } for pid=5433 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.426569][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.445581][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.448195][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.495839][ T5432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.526367][ T5433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.552344][ T5433] veth0_vlan: entered promiscuous mode [ 53.563282][ T5433] veth1_vlan: entered promiscuous mode [ 53.586567][ T5445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.609299][ T5433] veth0_macvtap: entered promiscuous mode [ 53.618224][ T5433] veth1_macvtap: entered promiscuous mode [ 53.633190][ T5433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.641350][ T5432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.650250][ T5433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.657007][ T5437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.663944][ T5433] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.666232][ T5433] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.668364][ T5433] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.670472][ T5433] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.677172][ T5445] veth0_vlan: entered promiscuous mode [ 53.690314][ T5445] veth1_vlan: entered promiscuous mode [ 53.743892][ T5432] veth0_vlan: entered promiscuous mode [ 53.749274][ T5445] veth0_macvtap: entered promiscuous mode [ 53.753745][ T5437] veth0_vlan: entered promiscuous mode [ 53.769331][ T5445] veth1_macvtap: entered promiscuous mode [ 53.775699][ T5432] veth1_vlan: entered promiscuous mode [ 53.779496][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.781790][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.785612][ T5437] veth1_vlan: entered promiscuous mode [ 53.815466][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.817071][ T5445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.817582][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.820274][ T5445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.821597][ T5445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.837296][ T5432] veth0_macvtap: entered promiscuous mode [ 53.841194][ T5445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.845901][ T5445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.849379][ T5445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.855961][ T5445] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.856152][ T39] audit: type=1400 audit(1726319484.600:147): avc: denied { mounton } for pid=5433 comm="syz-executor" path="/syzkaller.Ny7O2y/syz-tmp" dev="sda1" ino=1947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 53.858308][ T5445] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.869155][ T5445] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.871466][ T5445] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.879912][ T5432] veth1_macvtap: entered promiscuous mode [ 53.900886][ T39] audit: type=1400 audit(1726319484.640:148): avc: denied { bpf } for pid=5495 comm="syz.2.60" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.913926][ T5437] veth0_macvtap: entered promiscuous mode [ 53.919562][ T5437] veth1_macvtap: entered promiscuous mode [ 53.931800][ T39] audit: type=1400 audit(1726319484.670:149): avc: denied { prog_load } for pid=5497 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.937773][ T39] audit: type=1400 audit(1726319484.670:150): avc: denied { perfmon } for pid=5497 comm="syz.2.62" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.943453][ T39] audit: type=1400 audit(1726319484.670:151): avc: denied { prog_run } for pid=5497 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.957320][ T5432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.960692][ T5432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.964071][ T5432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.967960][ T5432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.971886][ T5432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.980682][ T5432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.984771][ T5432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.987623][ T5432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.990154][ T5432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.998133][ T5432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.029583][ T5437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.033302][ T5437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.036474][ T5437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.039848][ T5437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.042713][ T5437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.046032][ T5437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.049835][ T5437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.057400][ T5437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.060644][ T5437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.064094][ T5437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.070477][ T5437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.074529][ T5437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.078186][ T5437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.084621][ T5437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.087504][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.090209][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.091320][ T5432] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.094933][ T5432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.097686][ T5432] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.100450][ T5432] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.118213][ T5437] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.120680][ T5437] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.123445][ T5437] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.125974][ T5437] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.149123][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.151767][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.219848][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.221882][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.264268][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.266619][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.290308][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.292414][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.298356][ T39] audit: type=1400 audit(1726319485.040:152): avc: denied { map_create } for pid=5523 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 54.308080][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.310275][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.331654][ T5449] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 54.787138][ T39] audit: type=1400 audit(1726319485.530:153): avc: denied { map_read map_write } for pid=5608 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 54.992917][ T5449] Bluetooth: hci0: command tx timeout [ 54.994432][ T5449] Bluetooth: hci1: command tx timeout [ 55.007391][ T39] audit: type=1400 audit(1726319485.750:154): avc: denied { write } for pid=5649 comm="syz.1.134" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 55.072717][ T5449] Bluetooth: hci2: command tx timeout [ 55.090144][ T39] audit: type=1400 audit(1726319485.830:155): avc: denied { sqpoll } for pid=5667 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 55.467538][ T5734] tmpfs: Bad value for 'mpol' [ 55.627495][ T5761] tmpfs: Bad value for 'mpol' [ 55.741847][ T5784] cgroup: Name too long [ 55.953740][ T5824] capability: warning: `syz.0.221' uses deprecated v2 capabilities in a way that may be insecure [ 56.090872][ T5850] cgroup: Name too long [ 56.361870][ T5907] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 56.536669][ T25] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 56.730481][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.735086][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 56.739493][ T25] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 56.748140][ T25] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 56.750911][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 56.755507][ T25] usb 6-1: SerialNumber: syz [ 56.773039][ T25] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 56.776517][ T25] usb-storage 6-1:1.0: USB Mass Storage device detected [ 56.798060][ T25] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 57.004714][ T35] usb 6-1: USB disconnect, device number 2 [ 57.057234][ T5449] Bluetooth: hci0: command tx timeout [ 57.057406][ T5444] Bluetooth: hci3: command tx timeout [ 57.137597][ T5444] Bluetooth: hci2: command tx timeout [ 58.057790][ T6174] futex_wake_op: syz.1.394 tries to shift op by 144; fix this program [ 58.089460][ T6178] dccp_invalid_packet: invalid packet type [ 58.388428][ T6216] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 58.402958][ T6220] UBIFS error (pid: 6220): cannot open "ubifs", error -22 [ 58.923400][ T6279] syz.2.446: attempt to access beyond end of device [ 58.923400][ T6279] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 58.954678][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 58.954695][ T39] audit: type=1400 audit(1726319489.699:169): avc: denied { write } for pid=6280 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 59.136919][ T5444] Bluetooth: hci3: command tx timeout [ 59.138873][ T5444] Bluetooth: hci0: command tx timeout [ 59.228353][ T5444] Bluetooth: hci2: command tx timeout [ 59.308902][ T39] audit: type=1400 audit(1726319490.059:170): avc: denied { create } for pid=6324 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.530793][ T39] audit: type=1400 audit(1726319490.279:171): avc: denied { create } for pid=6346 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.536101][ T6352] IPv6: addrconf: prefix option has invalid lifetime [ 59.717131][ T39] audit: type=1400 audit(1726319490.469:172): avc: denied { create } for pid=6367 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 59.838791][ T6384] nfs4: Bad value for 'source' [ 59.954562][ T6404] IPv6: addrconf: prefix option has invalid lifetime [ 60.039772][ T6415] NILFS (nullb0): couldn't find nilfs on the device [ 60.139448][ T6433] futex_wake_op: syz.0.522 tries to shift op by 32; fix this program [ 60.156634][ T25] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 60.225415][ T39] audit: type=1400 audit(1726319490.969:173): avc: denied { create } for pid=6447 comm="syz.2.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.278180][ T6445] could not allocate digest TFM handle sha224-neon [ 60.339038][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 60.341654][ T25] usb 6-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 60.343827][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.349575][ T25] usb 6-1: config 0 descriptor?? [ 60.472182][ T39] audit: type=1400 audit(1726319491.219:174): avc: denied { create } for pid=6483 comm="syz.0.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.534366][ T39] audit: type=1400 audit(1726319491.279:175): avc: denied { create } for pid=6492 comm="syz.3.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 60.587629][ T25] usbhid 6-1:0.0: can't add hid device: -71 [ 60.589253][ T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 60.593190][ T25] usb 6-1: USB disconnect, device number 3 [ 60.817125][ T39] audit: type=1400 audit(1726319491.559:176): avc: denied { create } for pid=6533 comm="syz.0.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 60.945838][ T39] audit: type=1400 audit(1726319491.689:177): avc: denied { create } for pid=6553 comm="syz.0.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 61.195123][ T6598] NILFS (nullb0): couldn't find nilfs on the device [ 61.804446][ T6716] cgroup2: Unknown parameter 'm' [ 62.345005][ T39] audit: type=1400 audit(1726319722.085:178): avc: denied { open } for pid=6834 comm="syz.0.719" path="/dev/ttyq5" dev="devtmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 62.468505][ T6863] dccp_invalid_packet: P.Data Offset(3) too small [ 63.042552][ T6971] binder: Unknown parameter 's„Tu“' [ 63.163265][ T6991] 9pnet_fd: p9_fd_create_tcp (6991): problem connecting socket to 127.0.0.1 [ 63.781356][ T7061] 9pnet_fd: p9_fd_create_tcp (7061): problem connecting socket to 127.0.0.1 [ 63.890105][ T7073] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 64.180710][ T986] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.234140][ T7117] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 64.235943][ T7117] PKCS7: Only support pkcs7_signedData type [ 64.386025][ T986] usb 5-1: Using ep0 maxpacket: 32 [ 64.391447][ T986] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 64.393978][ T986] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 64.406815][ T986] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 64.410719][ T986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.418145][ T7141] dccp_invalid_packet: P.Data Offset(224) too large [ 64.427874][ T986] usb 5-1: config 0 descriptor?? [ 64.429675][ T7075] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.651265][ T986] usblp 5-1:0.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x03F0 pid 0x6C17 [ 64.661858][ T986] usb 5-1: USB disconnect, device number 2 [ 64.692972][ T986] usblp0: removed [ 65.757620][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 65.948634][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 65.952663][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.956195][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58879, setting to 1024 [ 65.960578][ T10] usb 8-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 65.963588][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.981454][ T10] usb 8-1: config 0 descriptor?? [ 65.983321][ T7264] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.222619][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 66.224257][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 66.239739][ T10] usb 8-1: USB disconnect, device number 2 [ 66.325046][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 66.325057][ T39] audit: type=1400 audit(1726319726.065:180): avc: denied { create } for pid=7324 comm="syz.2.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 66.503173][ T7339] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 67.130683][ T39] audit: type=1400 audit(1726319726.875:181): avc: denied { create } for pid=7416 comm="syz.1.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 67.328257][ T39] audit: type=1326 audit(1726322305.064:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.2.1024" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbba7f7def9 code=0x0 [ 67.413268][ T7464] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 67.414788][ T7464] PKCS7: Only support pkcs7_signedData type [ 68.131412][ T986] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.312661][ T986] usb 5-1: config 0 has an invalid interface number: 248 but max is 0 [ 68.315275][ T986] usb 5-1: config 0 has no interface number 0 [ 68.316824][ T986] usb 5-1: config 0 interface 248 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 68.325777][ T986] usb 5-1: New USB device found, idVendor=1b3d, idProduct=9316, bcdDevice= 4.3d [ 68.328118][ T986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.332776][ T986] usb 5-1: config 0 descriptor?? [ 68.339175][ T986] ftdi_sio 5-1:0.248: FTDI USB Serial Device converter detected [ 68.342484][ T986] ftdi_sio ttyUSB0: unknown device type: 0x43d [ 68.439338][ T7622] binder: Binderfs stats mode cannot be changed during a remount [ 68.538660][ T986] usb 5-1: USB disconnect, device number 3 [ 68.542047][ T986] ftdi_sio 5-1:0.248: device disconnected [ 68.572142][ T5449] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 68.575180][ T5449] Bluetooth: hci0: Injecting HCI hardware error event [ 68.577635][ T5449] Bluetooth: hci0: hardware error 0x00 [ 68.738753][ T5440] Bluetooth: hci2: command 0x0406 tx timeout [ 69.697878][ T39] audit: type=1400 audit(1726322308.449:183): avc: denied { write } for pid=7723 comm="syz.0.1161" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.715014][ T39] audit: type=1400 audit(1726322308.449:184): avc: denied { remove_name } for pid=7723 comm="syz.0.1161" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.728315][ T39] audit: type=1400 audit(1726322308.449:185): avc: denied { unlink } for pid=7723 comm="syz.0.1161" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.898866][ T39] audit: type=1400 audit(1726322308.649:186): avc: denied { create } for pid=7757 comm="syz.3.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.922242][ T39] audit: type=1400 audit(1726322308.679:187): avc: denied { audit_write } for pid=7763 comm="syz.3.1181" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 70.659384][ T5449] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 70.843801][ T7935] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 70.868994][ T39] audit: type=1400 audit(1726322309.609:188): avc: denied { sys_module } for pid=7936 comm="syz.3.1267" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 71.292375][ T1381] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.294211][ T1381] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.505072][ T8048] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 71.666923][ T8082] syz.3.1339(8082): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 71.722663][ T39] audit: type=1400 audit(1726322310.475:189): avc: denied { create } for pid=8091 comm="syz.2.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 71.865706][ T8118] dccp_invalid_packet: pskb_may_pull failed [ 72.289367][ T39] audit: type=1400 audit(1726322311.040:190): avc: denied { create } for pid=8190 comm="syz.3.1394" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.336333][ T39] audit: type=1400 audit(1726322311.080:191): avc: denied { create } for pid=8201 comm="syz.3.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 73.109331][ T39] audit: type=1400 audit(1726322311.844:192): avc: denied { create } for pid=8364 comm="syz.0.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.316229][ T8407] futex_wake_op: syz.0.1502 tries to shift op by -1; fix this program [ 73.400464][ T8424] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 73.500594][ T5449] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 73.573965][ T8453] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 73.767851][ T39] audit: type=1400 audit(1726322312.499:193): avc: denied { create } for pid=8492 comm="syz.3.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 73.779992][ T39] audit: type=1400 audit(1726322312.509:194): avc: denied { write } for pid=8492 comm="syz.3.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 73.808335][ T8503] mmap: syz.3.1549 (8503): VmData 37392384 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 73.811895][ T8501] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1548'. [ 73.817430][ T8506] mmap: syz.0.1550 (8506) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.854790][ T39] audit: type=1400 audit(1726322312.578:195): avc: denied { read } for pid=8508 comm="syz.0.1553" name="ptp0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.862944][ T39] audit: type=1400 audit(1726322312.588:196): avc: denied { open } for pid=8508 comm="syz.0.1553" path="/dev/ptp0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.871154][ T39] audit: type=1400 audit(1726322312.588:197): avc: denied { ioctl } for pid=8508 comm="syz.0.1553" path="/dev/ptp0" dev="devtmpfs" ino=715 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.903069][ T39] audit: type=1400 audit(1726322312.638:198): avc: denied { create } for pid=8520 comm="syz.0.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 74.010025][ T8539] overlayfs: unescaped trailing colons in lowerdir mount option. [ 74.397347][ T8621] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.568303][ T8655] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1624'. [ 74.765547][ T8693] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 74.767435][ T8693] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 74.774965][ T8693] vhci_hcd vhci_hcd.0: Device attached [ 74.790089][ T8695] vhci_hcd: connection closed [ 74.791769][ T45] vhci_hcd: stop threads [ 74.794588][ T45] vhci_hcd: release socket [ 74.796231][ T45] vhci_hcd: disconnect device [ 75.135639][ T8768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1679'. [ 75.145419][ T8772] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 75.259856][ T8789] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1689'. [ 75.366548][ T8812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1700'. [ 75.381945][ T8815] warning: `syz.0.1699' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.413314][ T8821] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1703'. [ 75.546015][ T8840] xt_hashlimit: max too large, truncated to 1048576 [ 75.611662][ T8854] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1719'. [ 75.680061][ T8868] futex_wake_op: syz.3.1725 tries to shift op by -1; fix this program [ 75.745181][ T8882] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.771631][ T8885] netlink: 'syz.3.1733': attribute type 27 has an invalid length. [ 75.938473][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1748'. [ 75.963807][ T8922] tmpfs: Bad value for 'mpol' [ 76.081568][ T8948] netlink: 'syz.1.1763': attribute type 2 has an invalid length. [ 76.162816][ T8962] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 76.213332][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1774'. [ 76.289114][ T8988] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 76.462081][ T1303] cfg80211: failed to load regulatory.db [ 76.480274][ T9025] netlink: 'syz.1.1801': attribute type 29 has an invalid length. [ 76.540661][ T9032] netlink: 548 bytes leftover after parsing attributes in process `syz.3.1802'. [ 76.842541][ T9094] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 76.919037][ T39] kauditd_printk_skb: 67 callbacks suppressed [ 76.919048][ T39] audit: type=1400 audit(1726322315.626:266): avc: denied { map } for pid=9107 comm="syz.0.1843" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 76.929394][ T39] audit: type=1400 audit(1726322315.626:267): avc: denied { read write } for pid=9107 comm="syz.0.1843" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 76.965243][ T9117] SELinux: policydb version -583164826 does not match my version range 15-33 [ 76.967964][ T9117] SELinux: failed to load policy [ 76.975115][ T39] audit: type=1400 audit(1726322315.685:268): avc: denied { getopt } for pid=9118 comm="syz.2.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 77.040992][ T39] audit: type=1400 audit(1726322315.745:269): avc: denied { setopt } for pid=9128 comm="syz.1.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.052032][ T39] audit: type=1400 audit(1726322315.755:270): avc: denied { read } for pid=9126 comm="syz.2.1854" name="fb0" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 77.058552][ T39] audit: type=1400 audit(1726322315.755:271): avc: denied { open } for pid=9126 comm="syz.2.1854" path="/dev/fb0" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 77.066934][ T39] audit: type=1400 audit(1726322315.755:272): avc: denied { ioctl } for pid=9126 comm="syz.2.1854" path="/dev/fb0" dev="devtmpfs" ino=639 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 77.128070][ T9145] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 77.132588][ T39] audit: type=1400 audit(1726322315.834:273): avc: denied { setopt } for pid=9143 comm="syz.0.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 77.166945][ T9154] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 77.170662][ T9154] VFS: Can't find a romfs filesystem on dev nullb0. [ 77.170662][ T9154] [ 77.310262][ T39] audit: type=1400 audit(1726322316.013:274): avc: denied { mounton } for pid=9179 comm="syz.0.1879" path="/480/file0" dev="tmpfs" ino=2421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.319877][ T9180] syz.0.1879: attempt to access beyond end of device [ 77.319877][ T9180] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 77.325228][ T9180] qnx6: unable to read the first superblock [ 77.327266][ T9180] syz.0.1879: attempt to access beyond end of device [ 77.327266][ T9180] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 77.330576][ T9180] qnx6: unable to read the first superblock [ 77.335188][ T9180] qnx6: unable to read the first superblock [ 77.361288][ T39] audit: type=1400 audit(1726322316.063:275): avc: denied { ioctl } for pid=9188 comm="syz.2.1883" path="mnt:[4026532893]" dev="nsfs" ino=4026532893 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.435959][ T9204] netlink: 'syz.1.1891': attribute type 8 has an invalid length. [ 77.487622][ T9213] syz.0.1895: attempt to access beyond end of device [ 77.487622][ T9213] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 77.574982][ T9229] netlink: 'syz.1.1903': attribute type 1 has an invalid length. [ 77.604268][ T9234] openvswitch: netlink: ct_state flags 00000300 unsupported [ 77.636757][ C1] sr 2:0:0:0: [sr0] tag#29 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 77.639511][ C1] sr 2:0:0:0: [sr0] tag#29 CDB: Maintenance out, sa=0x4 [ 77.641292][ C1] sr 2:0:0:0: [sr0] tag#29 CDB[00]: a4 e4 86 18 b9 4a df be 1d 06 ec db 90 86 c3 5c [ 77.643648][ C1] sr 2:0:0:0: [sr0] tag#29 CDB[10]: 07 [ 77.656164][ T9241] libceph: resolve '40' (ret=-3): failed [ 78.101376][ T9321] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 78.201851][ T9337] €Â: renamed from bridge_slave_0 (while UP) [ 78.386237][ T9224] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 78.388115][ T9224] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 78.404404][ T9224] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 78.407309][ T9224] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 78.417285][ T9224] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 78.418905][ T9224] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 78.579877][ T9412] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 78.596639][ T9415] (syz.0.1990,9415,2):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 78.599288][ T9415] (syz.0.1990,9415,2):ocfs2_fill_super:1178 ERROR: status = -22 [ 78.745663][ T9439] trusted_key: encrypted_key: master key parameter '' is invalid [ 78.811867][ T9447] netlink: 'syz.2.2005': attribute type 2 has an invalid length. [ 78.877329][ T9461] __nla_validate_parse: 11 callbacks suppressed [ 78.877342][ T9461] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2014'. [ 79.015195][ T9481] SELinux: Context system_u:object_r:hald_acl_exec_t:s0 is not valid (left unmapped). [ 79.130649][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2033'. [ 79.289894][ T9526] i2c i2c-1: Invalid block write size 34 [ 79.795376][ T9590] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2077'. [ 79.947191][ T9612] xt_l2tp: v2 doesn't support IP mode [ 80.258124][ T9654] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 80.339031][ T9665] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 80.469816][ T9684] netlink: 'syz.1.2123': attribute type 2 has an invalid length. [ 80.562425][ T9696] xt_hashlimit: overflow, try lower: 17592186044416/2047 [ 80.579690][ T9700] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.584313][ T9700] ip6t_srh: unknown srh match flags 4000 [ 80.675046][ T9714] program syz.1.2137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.868244][ T9750] xt_ecn: cannot match TCP bits for non-tcp packets [ 81.033244][ T9777] Illegal XDP return value 3674986301 on prog (id 200) dev N/A, expect packet loss! [ 81.045774][ T9779] xt_ecn: cannot match TCP bits for non-tcp packets [ 81.149973][ T9799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.174011][ T9803] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 81.457461][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2206'. [ 81.579141][ T9877] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 81.745167][ T9906] netlink: 'syz.2.2232': attribute type 1 has an invalid length. [ 81.747027][ T9906] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2232'. [ 82.046448][ T39] kauditd_printk_skb: 57 callbacks suppressed [ 82.046458][ T39] audit: type=1400 audit(1726322320.720:333): avc: denied { ioctl } for pid=9957 comm="syz.2.2258" path="socket:[22053]" dev="sockfs" ino=22053 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.083422][ T9965] x_tables: duplicate entry at hook 3 [ 82.088423][ T9966] __vm_enough_memory: pid: 9966, comm: syz.1.2261, bytes: 4503599627366400 not enough memory for the allocation [ 82.164701][ T39] audit: type=1326 audit(1726322320.839:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9979 comm="syz.3.2269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb94f7def9 code=0x7ffc0000 [ 82.173068][ T39] audit: type=1326 audit(1726322320.849:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9979 comm="syz.3.2269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb94f7def9 code=0x7ffc0000 [ 82.178972][ T39] audit: type=1326 audit(1726322320.849:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9979 comm="syz.3.2269" exe="/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7fcb94f7def9 code=0x7ffc0000 [ 82.185108][ T39] audit: type=1326 audit(1726322320.849:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9979 comm="syz.3.2269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb94f7def9 code=0x7ffc0000 [ 82.286602][ T39] audit: type=1400 audit(1726322320.959:338): avc: denied { write } for pid=10001 comm="syz.1.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.353602][ T39] audit: type=1326 audit(1726322321.028:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10015 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba7f7def9 code=0x7ffc0000 [ 82.367043][ T39] audit: type=1326 audit(1726322321.028:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10015 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba7f7def9 code=0x7ffc0000 [ 82.385506][ T39] audit: type=1326 audit(1726322321.028:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10015 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fbba7f7def9 code=0x7ffc0000 [ 82.392796][ T39] audit: type=1326 audit(1726322321.028:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10015 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba7f7def9 code=0x7ffc0000 [ 82.538588][T10048] program syz.2.2303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.581317][ T1074] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 82.583197][ T1074] ata1.00: irq_stat 0x40000000 [ 82.584442][ T1074] ata1.00: failed command: ZAC MANAGEMENT OUT [ 82.586154][ T1074] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 28 [ 82.586154][ T1074] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 82.590341][ T1074] ata1.00: status: { DRDY ERR } [ 82.591600][ T1074] ata1.00: error: { ABRT } [ 82.592852][ T1074] ata1.00: device reported invalid CHS sector 0 [ 82.826920][T10100] dlm: Unknown command passed to DLM device : 0 [ 82.826920][T10100] [ 82.886419][T10111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2335'. [ 83.009438][T10135] xt_TPROXY: Can be used only with -p tcp or -p udp [ 83.129697][T10158] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2356'. [ 83.211958][T10174] netlink: 'syz.1.2364': attribute type 21 has an invalid length. [ 83.214880][T10174] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2364'. [ 83.427341][T10214] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 83.485354][ C2] ata1: illegal qc_active transition (00000000->00100000) [ 83.598812][T10246] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "" [ 83.740350][T10272] netlink: 'syz.3.2412': attribute type 10 has an invalid length. [ 83.742457][T10272] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2412'. [ 83.744893][T10272] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 83.747191][T10272] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 83.822780][ T1074] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 83.828622][ T1074] ata1.00: configured for UDMA/100 [ 84.083819][T10335] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2443'. [ 84.086132][T10335] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2443'. [ 84.196865][T10353] binder: 10352:10353 ioctl c00c6211 0 returned -14 [ 84.228318][T10358] netlink: 'syz.3.2455': attribute type 21 has an invalid length. [ 84.471745][T10400] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 84.473574][T10400] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 84.476921][T10400] vhci_hcd vhci_hcd.0: Device attached [ 84.482055][T10401] usbip_core: unknown command [ 84.484565][T10401] vhci_hcd: unknown pdu 0 [ 84.485632][T10401] usbip_core: unknown command [ 84.486992][ T62] vhci_hcd: stop threads [ 84.488212][ T62] vhci_hcd: release socket [ 84.489530][ T62] vhci_hcd: disconnect device [ 84.566604][T10418] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "" [ 84.590167][T10421] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.951515][T10476] overlay: Unknown parameter 'reiser\s\' [ 84.979078][T10481] ip6t_REJECT: ECHOREPLY is not supported [ 85.161085][T10509] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 85.162834][T10509] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 85.165853][T10509] vhci_hcd vhci_hcd.0: Device attached [ 85.171307][T10510] usbip_core: unknown command [ 85.172630][T10510] vhci_hcd: unknown pdu 0 [ 85.174215][T10510] usbip_core: unknown command [ 85.176659][ T62] vhci_hcd: stop threads [ 85.179806][ T62] vhci_hcd: release socket [ 85.181040][ T62] vhci_hcd: disconnect device [ 85.850027][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2534'. [ 85.931203][T10539] autofs4:pid:10539:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(120.1), cmd(0xc018937e) [ 85.936899][T10539] autofs4:pid:10539:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 86.110966][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2555'. [ 86.116552][T10572] TCP: TCP_TX_DELAY enabled [ 86.119442][T10573] wg2: entered promiscuous mode [ 86.121144][T10573] wg2: entered allmulticast mode [ 86.210978][T10585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2562'. [ 86.229371][T10588] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2564'. [ 86.245218][T10591] capability: warning: `syz.1.2566' uses 32-bit capabilities (legacy support in use) [ 86.292836][T10600] xt_limit: Overflow, try lower: 1207959552/384 [ 86.312708][T10602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2571'. [ 86.444632][T10628] netlink: 'syz.1.2583': attribute type 21 has an invalid length. [ 86.473754][T10632] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 86.476955][T10632] overlayfs: missing 'lowerdir' [ 86.534657][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2591'. [ 86.722735][T10674] netlink: 'syz.2.2607': attribute type 21 has an invalid length. [ 86.724744][T10674] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2607'. [ 86.731134][T10674] netlink: 'syz.2.2607': attribute type 5 has an invalid length. [ 86.733171][T10674] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2607'. [ 86.814251][T10691] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 87.201345][ T39] kauditd_printk_skb: 32 callbacks suppressed [ 87.201355][ T39] audit: type=1400 audit(1726322325.847:375): avc: denied { write } for pid=10761 comm="syz.3.2649" name="rtc0" dev="devtmpfs" ino=867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.234779][ T39] audit: type=1400 audit(1726322325.877:376): avc: denied { connect } for pid=10766 comm="syz.3.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.319832][T10777] program syz.1.2657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.324295][ T39] audit: type=1400 audit(1726322325.967:377): avc: denied { setopt } for pid=10780 comm="syz.3.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 87.366781][ T39] audit: type=1400 audit(1726322326.006:378): avc: denied { execute } for pid=10785 comm="syz.3.2661" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=26703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 87.502414][T10808] netlink: 'syz.1.2671': attribute type 1 has an invalid length. [ 87.504583][T10808] netlink: 'syz.1.2671': attribute type 1 has an invalid length. [ 87.549607][T10816] netlink: 'syz.1.2674': attribute type 1 has an invalid length. [ 87.650305][T10824] netlink: 'syz.3.2679': attribute type 1 has an invalid length. [ 87.727788][ T39] audit: type=1400 audit(1726322326.364:379): avc: denied { setopt } for pid=10839 comm="syz.2.2686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.072919][ T39] audit: type=1400 audit(1726322326.702:380): avc: denied { write } for pid=10895 comm="syz.1.2713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.294039][T10929] Cannot find del_set index 4 as target [ 88.300235][ T39] audit: type=1400 audit(1726322326.941:381): avc: denied { accept } for pid=10930 comm="syz.2.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 88.597458][ T39] audit: type=1400 audit(1726322327.229:382): avc: denied { setattr } for pid=10973 comm="syz.1.2752" name="tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 88.765408][ T39] audit: type=1400 audit(1726322327.398:383): avc: denied { read } for pid=10997 comm="syz.3.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.035791][ T5444] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.040234][ T5444] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.050841][ T5444] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.053864][ T5444] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.056303][ T5444] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.059229][ T5444] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.260284][T11033] SELinux: syz.3.2781 (11033) set checkreqprot to 1. This is no longer supported. [ 89.260292][ T39] audit: type=1400 audit(1726322327.885:384): avc: denied { setcheckreqprot } for pid=11032 comm="syz.3.2781" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 89.408574][T11045] program syz.3.2787 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.522662][T11053] __nla_validate_parse: 10 callbacks suppressed [ 89.522678][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2791'. [ 89.674761][T11063] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2795'. [ 89.725066][T11073] befs: (nullb0): No write support. Marking filesystem read-only [ 89.727613][T11073] befs: (nullb0): invalid magic header [ 89.753354][ T1109] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.780797][T11016] chnl_net:caif_netlink_parms(): no params data found [ 89.858414][T11089] delete_channel: no stack [ 89.890687][ T1109] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.895850][T11092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2808'. [ 89.908992][T11098] netlink: 'syz.1.2811': attribute type 3 has an invalid length. [ 89.911060][T11098] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2811'. [ 89.998116][ T1109] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.040242][T11016] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.042245][T11016] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.044175][T11016] bridge_slave_0: entered allmulticast mode [ 90.047946][T11016] bridge_slave_0: entered promiscuous mode [ 90.051153][T11016] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.053033][T11016] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.054934][T11016] bridge_slave_1: entered allmulticast mode [ 90.061798][T11016] bridge_slave_1: entered promiscuous mode [ 90.082294][T11120] syz.3.2821: attempt to access beyond end of device [ 90.082294][T11120] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 90.086016][T11120] VFS: could not find a valid V7 on nbd3. [ 90.118183][ T1109] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.152341][T11128] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2826'. [ 90.164609][T11016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.177568][T11016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.187231][T11131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2827'. [ 90.250570][T11016] team0: Port device team_slave_0 added [ 90.256193][T11016] team0: Port device team_slave_1 added [ 90.314201][T11016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.316102][T11016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.323686][T11016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.325596][T11145] (syz.3.2833,11145,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "û¤üçÿÿÿ" or missing value [ 90.327621][T11016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.330761][T11145] (syz.3.2833,11145,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 90.332558][T11016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.345285][T11016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.382819][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'. [ 90.498311][T11016] hsr_slave_0: entered promiscuous mode [ 90.505222][T11016] hsr_slave_1: entered promiscuous mode [ 90.512689][T11016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.515319][T11016] Cannot create hsr debugfs directory [ 90.594193][T11184] ipt_rpfilter: unknown options [ 90.595045][ T1109] bridge_slave_1: left allmulticast mode [ 90.598149][ T1109] bridge_slave_1: left promiscuous mode [ 90.600693][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.613623][ T1109] bridge_slave_0: left allmulticast mode [ 90.615061][ T1109] bridge_slave_0: left promiscuous mode [ 90.616721][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.653573][T11195] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 90.936333][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.941132][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.946620][ T1109] bond0 (unregistering): Released all slaves [ 90.953090][ T1109] bond1 (unregistering): Released all slaves [ 91.103147][ T5444] Bluetooth: hci4: command tx timeout [ 91.180549][T11254] openvswitch: netlink: Missing key (keys=40, expected=100) [ 91.256218][T11268] netlink: 'syz.3.2891': attribute type 1 has an invalid length. [ 91.258412][T11268] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2891'. [ 91.261384][T11268] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2891'. [ 91.350595][ T1109] hsr_slave_0: left promiscuous mode [ 91.364781][ T1109] hsr_slave_1: left promiscuous mode [ 91.370212][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.372172][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.375700][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.377632][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.407787][ T1109] veth1_macvtap: left promiscuous mode [ 91.409812][ T1109] veth0_macvtap: left promiscuous mode [ 91.411439][ T1109] veth1_vlan: left promiscuous mode [ 91.412970][ T1109] veth0_vlan: left promiscuous mode [ 91.491847][T11300] netlink: 'syz.2.2907': attribute type 3 has an invalid length. [ 91.846657][T11328] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2921'. [ 92.060275][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 92.118037][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 92.616723][T11337] libceph: resolve '40.' (ret=-3): failed [ 92.706100][T11016] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.713597][T11358] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 92.726832][T11016] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.739568][ T39] kauditd_printk_skb: 15 callbacks suppressed [ 92.739578][ T39] audit: type=1400 audit(1726322331.345:400): avc: denied { read } for pid=11361 comm="syz.2.2935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.744713][T11016] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.752003][T11016] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.774296][ T39] audit: type=1400 audit(1726322331.385:401): avc: denied { name_bind } for pid=11367 comm="syz.3.2940" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 92.824401][T11016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.836553][T11016] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.846739][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.848023][ T39] audit: type=1400 audit(1726322331.454:402): avc: denied { write } for pid=11381 comm="syz.3.2944" name="nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.848636][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.867325][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.869371][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.926847][T11396] trusted_key: encrypted_key: master key parameter is missing [ 92.935541][T11016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.005099][T11414] openvswitch: netlink: Missing key (keys=8040, expected=200000) [ 93.014963][T11417] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 93.034826][ T39] audit: type=1400 audit(1726322331.643:403): avc: denied { setopt } for pid=11420 comm="syz.3.2962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.052040][T11016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.090188][T11016] veth0_vlan: entered promiscuous mode [ 93.091082][ T39] audit: type=1326 audit(1726322331.693:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11429 comm="syz.3.2966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb94f7def9 code=0x7ffc0000 [ 93.095841][T11016] veth1_vlan: entered promiscuous mode [ 93.105459][ T39] audit: type=1326 audit(1726322331.693:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11429 comm="syz.3.2966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb94f7def9 code=0x7ffc0000 [ 93.111398][ T39] audit: type=1326 audit(1726322331.703:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11429 comm="syz.3.2966" exe="/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fcb94f7def9 code=0x7ffc0000 [ 93.117864][T11016] veth0_macvtap: entered promiscuous mode [ 93.120937][ T39] audit: type=1326 audit(1726322331.703:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11429 comm="syz.3.2966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb94f7def9 code=0x7ffc0000 [ 93.126389][T11016] veth1_macvtap: entered promiscuous mode [ 93.132690][ T39] audit: type=1326 audit(1726322331.703:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11429 comm="syz.3.2966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb94f7def9 code=0x7ffc0000 [ 93.137226][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.141316][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.143936][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.146270][T11438] netlink: 'syz.2.2970': attribute type 1 has an invalid length. [ 93.146799][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.151725][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.154304][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.157788][T11016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.161294][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.164017][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.167233][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.169931][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.172423][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.176192][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.179729][T11016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.194668][ T5444] Bluetooth: hci4: command 0x041b tx timeout [ 93.219353][T11016] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.221872][T11016] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.224418][T11016] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.226737][T11016] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.250994][ T39] audit: type=1326 audit(1726322331.852:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11451 comm="syz.3.2976" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb94f7def9 code=0x7ffc0000 [ 93.293969][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.296795][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.319842][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.321825][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.342218][T11467] Mount JFS Failure: -22 [ 93.343639][T11467] jfs_mount failed w/return code = -22 [ 93.636722][T11534] netlink: 'syz.1.3017': attribute type 5 has an invalid length. [ 93.702274][T11552] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.875832][T11591] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 93.960803][T11612] 9pnet_fd: p9_fd_create_tcp (11612): problem connecting socket to 127.0.0.1 [ 94.320244][T11690] Cannot find map_set index 0 as target [ 94.575813][T11750] __nla_validate_parse: 5 callbacks suppressed [ 94.575824][T11750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3123'. [ 94.579802][T11750] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3123'. [ 94.583366][T11750] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3123'. [ 94.618459][T11759] deleting an unspecified loop device is not supported. [ 94.671561][T11773] No such timeout policy "syz0" [ 94.867045][T11816] ceph: Path missing in source [ 94.934289][ T56] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 95.019529][T11849] syz.1.3172: attempt to access beyond end of device [ 95.019529][T11849] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 95.023245][T11849] hfs: can't find a HFS filesystem on dev nbd1 [ 95.030407][T11851] netlink: 'syz.2.3173': attribute type 13 has an invalid length. [ 95.131280][T11874] Cannot find set identified by id 0 to match [ 95.136751][ T56] usb 8-1: Using ep0 maxpacket: 32 [ 95.143936][ T56] usb 8-1: config index 0 descriptor too short (expected 26, got 18) [ 95.146133][ T56] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 95.148648][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.152714][ T56] usb 8-1: config 0 descriptor?? [ 95.163416][ T56] as10x_usb: device has been detected [ 95.165514][ T56] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 95.169779][T11878] netlink: 'syz.1.3186': attribute type 5 has an invalid length. [ 95.184768][ T56] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 95.204438][ T56] as10x_usb: error during firmware upload part1 [ 95.213409][ T56] Registered device nBox DVB-T Dongle [ 95.220187][T11884] x_tables: ip_tables: osf match: only valid for protocol 6 [ 95.253666][T11894] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 95.287138][ T5444] Bluetooth: hci4: command 0x041b tx timeout [ 95.344072][T11910] CIFS: iocharset name too long [ 95.358956][T11912] binder: 11911:11912 ioctl c0306201 20000380 returned -14 [ 95.369289][ T35] usb 8-1: USB disconnect, device number 3 [ 95.389580][ T35] Unregistered device nBox DVB-T Dongle [ 95.393315][ T35] as10x_usb: device has been disconnected [ 95.432221][T11924] kernel profiling enabled (shift: 63) [ 95.434083][T11924] profiling shift: 63 too large [ 95.576588][T11950] Unknown options in mask 1f4 [ 95.591143][T11952] kAFS: Can only specify source 'none' with -o dyn [ 95.654294][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3229'. [ 95.875876][T12009] kernel profiling enabled (shift: 63) [ 95.877279][T12009] profiling shift: 63 too large [ 95.890462][T12011] mkiss: ax0: crc mode is auto. [ 96.011700][T12037] openvswitch: netlink: Missing key (keys=20040, expected=80) [ 96.218548][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3287'. [ 96.297682][T12098] mkiss: ax0: crc mode is auto. [ 96.330067][T12108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3299'. [ 96.334161][T12108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3299'. [ 96.408515][T12124] netlink: 'syz.0.3308': attribute type 32 has an invalid length. [ 96.484467][T12138] netlink: 'syz.3.3315': attribute type 3 has an invalid length. [ 96.487879][T12138] netlink: 'syz.3.3315': attribute type 3 has an invalid length. [ 96.495978][T12139] mkiss: ax0: crc mode is auto. [ 96.519961][T12146] befs: (loop3): No write support. Marking filesystem read-only [ 96.523038][T12146] syz.3.3319: attempt to access beyond end of device [ 96.523038][T12146] loop3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 96.533874][T12146] befs: (loop3): unable to read superblock [ 96.591583][T12158] xt_l2tp: missing protocol rule (udp|l2tpip) [ 96.712475][T12183] pim6reg: entered allmulticast mode [ 96.980278][T12247] netlink: 'syz.2.3370': attribute type 32 has an invalid length. [ 96.982445][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3370'. [ 96.986048][T12247] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 97.005349][T12253] netlink: 'syz.1.3373': attribute type 1 has an invalid length. [ 97.008064][T12253] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.3373'. [ 97.094118][T12271] program syz.3.3382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.336738][T12333] netlink: 'syz.1.3411': attribute type 2 has an invalid length. [ 97.339815][T12333] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3411'. [ 97.377316][ T5444] Bluetooth: hci4: command 0x041b tx timeout [ 97.700414][T12415] syz.2.3453: attempt to access beyond end of device [ 97.700414][T12415] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 97.701844][T12424] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 97.704613][T12415] XFS (nbd2): SB validate failed with error -5. [ 97.865732][ T39] kauditd_printk_skb: 40 callbacks suppressed [ 97.865742][ T39] audit: type=1400 audit(1726322336.447:450): avc: denied { setattr } for pid=12454 comm="syz.0.3471" name="loop3" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.905387][T12463] ata1.00: invalid multi_count 1 ignored [ 97.976681][ T39] audit: type=1400 audit(1726322336.556:451): avc: denied { create } for pid=12477 comm="syz.3.3484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 97.983176][ T39] audit: type=1400 audit(1726322336.566:452): avc: denied { append } for pid=12481 comm="syz.0.3483" name="loop0" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.989432][ T39] audit: type=1400 audit(1726322336.566:453): avc: denied { write } for pid=12477 comm="syz.3.3484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 98.081920][T12505] tc_dump_action: action bad kind [ 98.119870][ T39] audit: type=1400 audit(1726322336.696:454): avc: denied { write } for pid=12510 comm="syz.3.3499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.199752][ T39] audit: type=1326 audit(1726322336.775:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12532 comm="syz.3.3509" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb94f7def9 code=0x7ffc0000 [ 98.206916][ T39] audit: type=1326 audit(1726322336.785:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12532 comm="syz.3.3509" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb94f7def9 code=0x7ffc0000 [ 98.213039][ T39] audit: type=1326 audit(1726322336.795:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12532 comm="syz.3.3509" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fcb94f7def9 code=0x7ffc0000 [ 98.222846][ T39] audit: type=1326 audit(1726322336.795:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12532 comm="syz.3.3509" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb94f7def9 code=0x7ffc0000 [ 98.229216][ T39] audit: type=1326 audit(1726322336.795:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12532 comm="syz.3.3509" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb94f7def9 code=0x7ffc0000 [ 98.308156][T12558] validate_nla: 2 callbacks suppressed [ 98.308166][T12558] netlink: 'syz.2.3522': attribute type 3 has an invalid length. [ 98.328559][T12563] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 98.337927][T12567] program syz.3.3527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.410003][T12583] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 98.435619][T12589] tmpfs: Bad value for 'nr_inodes' [ 98.487990][T12601] openvswitch: netlink: Key type 4112 is out of range max 32 [ 98.609533][T12630] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 98.646707][T12639] xt_l2tp: v2 sid > 0xffff: 150994944 [ 98.955775][T12709] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.087692][ T63] IPVS: starting estimator thread 0... [ 99.174630][T12763] ======================================================= [ 99.174630][T12763] WARNING: The mand mount option has been deprecated and [ 99.174630][T12763] and is ignored by this kernel. Remove the mand [ 99.174630][T12763] option from the mount to silence this warning. [ 99.174630][T12763] ======================================================= [ 99.176627][T12741] IPVS: using max 34 ests per chain, 81600 per kthread [ 99.192282][T12765] xt_l2tp: v2 tid > 0xffff: 1610678272 [ 99.411688][T12814] syz.2.3650 uses obsolete (PF_INET,SOCK_PACKET) [ 99.440035][T12817] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 99.441789][T12817] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 99.444564][T12817] vhci_hcd vhci_hcd.0: Device attached [ 99.450663][T12818] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 99.453261][ T13] vhci_hcd: stop threads [ 99.454432][ T13] vhci_hcd: release socket [ 99.455603][ T13] vhci_hcd: disconnect device [ 99.469545][ T5444] Bluetooth: hci4: command 0x041b tx timeout [ 99.574429][T12837] bond0: (slave bond_slave_0): Releasing backup interface [ 99.579434][ T1303] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 99.764887][T12857] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 99.767121][T12857] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 99.769390][T12857] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 99.770782][ T1303] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 99.771801][T12857] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 99.773961][ T1303] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.778750][ T1303] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 99.781339][ T1303] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.784181][ T1303] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.788592][ T1303] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 99.791842][ T1303] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 99.794158][ T1303] usb 6-1: Product: syz [ 99.795251][ T1303] usb 6-1: Manufacturer: syz [ 99.806750][ T1303] cdc_wdm 6-1:1.0: skipping garbage [ 99.808509][ T1303] cdc_wdm 6-1:1.0: skipping garbage [ 99.812758][ T1303] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 99.814349][ T1303] cdc_wdm 6-1:1.0: Unknown control protocol [ 99.819361][ C2] ata1: illegal qc_active transition (00000000->00800000) [ 99.838891][T12867] autofs4:pid:12867:validate_dev_ioctl: path string terminator missing for cmd(0xc0189374) [ 99.891913][T12875] __nla_validate_parse: 8 callbacks suppressed [ 99.891927][T12875] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3679'. [ 99.896591][T12875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3679'. [ 99.899548][T12875] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3679'. [ 99.902507][T12875] netlink: 'syz.0.3679': attribute type 3 has an invalid length. [ 99.904802][T12875] netlink: 'syz.0.3679': attribute type 2 has an invalid length. [ 99.906946][T12875] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3679'. [ 99.952170][T12883] xt_l2tp: invalid flags combination: 0 [ 99.961862][T12885] netlink: 'syz.0.3684': attribute type 4 has an invalid length. [ 100.019209][T12795] cdc_wdm 6-1:1.0: Error submitting int urb - -90 [ 100.024999][ T986] usb 6-1: USB disconnect, device number 4 [ 100.064101][T12903] netlink: 188360 bytes leftover after parsing attributes in process `syz.3.3691'. [ 100.155224][ T1074] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 100.158135][T12922] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3700'. [ 100.158514][ T1074] ata1.00: configured for UDMA/100 [ 100.234544][T12937] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 100.808762][T13040] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 100.929471][T13070] SET target dimension over the limit! [ 100.957822][T13077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3775'. [ 100.974291][T13079] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.3778'. [ 100.976538][T13082] netlink: 'syz.0.3779': attribute type 7 has an invalid length. [ 100.978725][T13082] netlink: 'syz.0.3779': attribute type 8 has an invalid length. [ 100.979082][T13079] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.3778'. [ 100.983234][T13079] netlink: 69 bytes leftover after parsing attributes in process `syz.3.3778'. [ 101.111800][T13110] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 101.114147][T13110] overlayfs: missing 'lowerdir' [ 101.142989][T13118] IPv6: NLM_F_CREATE should be specified when creating new route [ 101.248120][T13146] syz.1.3809 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 101.357159][T13170] netlink: 'syz.1.3823': attribute type 10 has an invalid length. [ 101.510621][T13204] cgroup: Need name or subsystem set [ 101.626314][T13228] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 101.822681][T13273] netlink: 'syz.3.3874': attribute type 11 has an invalid length. [ 101.921555][T13295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13295 comm=syz.3.3885 [ 101.958467][T13305] netlink: 'syz.2.3890': attribute type 3 has an invalid length. [ 101.998875][T13314] ebt_among: src integrity fail: 100 [ 102.123258][T13343] hpfs: Bad magic ... probably not HPFS [ 102.306365][T13388] netlink: 'syz.1.3932': attribute type 1 has an invalid length. [ 102.308371][T13388] netlink: 'syz.1.3932': attribute type 3 has an invalid length. [ 102.507567][T13435] ip6gretap1: entered promiscuous mode [ 102.522199][T13439] syz.1.3957: attempt to access beyond end of device [ 102.522199][T13439] nbd1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 102.526380][T13439] VFS: could not find a valid V7 on nbd1. [ 102.615059][T13457] binder: binder_mmap: 13456 20001000-2000b000 bad vm_flags failed -1 [ 102.903743][T13532] PKCS8: Unsupported PKCS#8 version [ 103.029295][T13562] cannot load conntrack support for proto=3 [ 103.119981][ T39] kauditd_printk_skb: 37 callbacks suppressed [ 103.119991][ T39] audit: type=1326 audit(1726322341.681:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.1.4027" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f0f7def9 code=0x7ffc0000 [ 103.128640][ T39] audit: type=1326 audit(1726322341.691:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.1.4027" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f0f7def9 code=0x7ffc0000 [ 103.134393][ T39] audit: type=1326 audit(1726322341.691:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.1.4027" exe="/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fb5f0f7def9 code=0x7ffc0000 [ 103.146092][ T39] audit: type=1326 audit(1726322341.691:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.1.4027" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f0f7def9 code=0x7ffc0000 [ 103.153438][ T39] audit: type=1326 audit(1726322341.691:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.1.4027" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f0f7def9 code=0x7ffc0000 [ 103.221006][T13608] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 103.321826][ T39] audit: type=1400 audit(1726322341.880:502): avc: denied { setattr } for pid=13629 comm="syz.2.4053" name="PF_CAIF" dev="sockfs" ino=33705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 103.348714][T13638] xt_l2tp: v2 doesn't support IP mode [ 103.528232][ T39] audit: type=1400 audit(1726322342.089:503): avc: denied { ioctl } for pid=13672 comm="syz.2.4074" path="socket:[34663]" dev="sockfs" ino=34663 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.639672][ T39] audit: type=1400 audit(1726322342.198:504): avc: denied { nlmsg_write } for pid=13695 comm="syz.1.4085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 103.749837][ T39] audit: type=1400 audit(1726322342.308:505): avc: denied { block_suspend } for pid=13714 comm="syz.2.4095" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.165559][T13788] program syz.0.4130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.222067][ T39] audit: type=1326 audit(1726322342.776:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.0.4137" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90cd97def9 code=0x7ffc0000 [ 104.334310][T13824] validate_nla: 3 callbacks suppressed [ 104.334321][T13824] netlink: 'syz.1.4149': attribute type 1 has an invalid length. [ 104.338329][T13824] netlink: 'syz.1.4149': attribute type 1 has an invalid length. [ 104.367753][T13832] netlink: 'syz.1.4153': attribute type 11 has an invalid length. [ 104.417802][T13841] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 104.715920][T13903] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 104.768640][T13913] netlink: 'syz.3.4193': attribute type 9 has an invalid length. [ 104.771906][T13913] netlink: 'syz.3.4193': attribute type 7 has an invalid length. [ 104.775393][T13913] netlink: 'syz.3.4193': attribute type 8 has an invalid length. [ 104.854034][ C3] ================================================================== [ 104.856097][ C3] BUG: KASAN: slab-use-after-free in __lock_acquire+0x2de0/0x3cb0 [ 104.858096][ C3] Read of size 8 at addr ffff888028224418 by task syz.0.4203/13936 [ 104.861105][ C3] [ 104.862102][ C3] CPU: 3 UID: 0 PID: 13936 Comm: syz.0.4203 Not tainted 6.11.0-rc7-syzkaller-00145-g57719771a244 #0 [ 104.865169][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.867926][ C3] Call Trace: [ 104.868805][ C3] [ 104.869561][ C3] dump_stack_lvl+0x116/0x1f0 [ 104.870807][ C3] print_report+0xc3/0x620 [ 104.871978][ C3] ? __virt_addr_valid+0x5e/0x590 [ 104.873287][ C3] ? __phys_addr+0xc6/0x150 [ 104.874465][ C3] kasan_report+0xd9/0x110 [ 104.875588][ C3] ? __lock_acquire+0x2de0/0x3cb0 [ 104.876909][ C3] ? __lock_acquire+0x2de0/0x3cb0 [ 104.878196][ C3] __lock_acquire+0x2de0/0x3cb0 [ 104.879474][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 104.880828][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 104.882198][ C3] lock_acquire+0x1b1/0x560 [ 104.883368][ C3] ? p9_req_put+0xaf/0x250 [ 104.884460][ C3] ? __pfx_lock_acquire+0x10/0x10 [ 104.885936][ C3] ? __pfx_lock_release+0x10/0x10 [ 104.887251][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 104.888611][ C3] ? p9_req_put+0xaf/0x250 [ 104.889723][ C3] p9_req_put+0xaf/0x250 [ 104.890743][ C3] req_done+0x1e7/0x2f0 [ 104.891743][ C3] ? __pfx_req_done+0x10/0x10 [ 104.892897][ C3] ? __pfx_req_done+0x10/0x10 [ 104.894130][ C3] vring_interrupt+0x31b/0x400 [ 104.895359][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 104.896696][ C3] __handle_irq_event_percpu+0x229/0x7c0 [ 104.898155][ C3] handle_irq_event+0xab/0x1e0 [ 104.899402][ C3] handle_edge_irq+0x263/0xd10 [ 104.900617][ C3] __common_interrupt+0xdf/0x250 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 104.901826][ C3] common_interrupt+0x52/0xd0 [ 104.903579][ C3] asm_common_interrupt+0x26/0x40 [ 104.905235][ C3] RIP: 0010:write_comp_data+0x8b/0x90 [ 104.906802][ C3] Code: 00 00 4a 8d 34 dd 28 00 00 00 48 39 f2 72 1b 48 83 c7 01 48 89 38 4c 89 44 30 e0 4c 89 4c 30 e8 4c 89 54 30 f0 4a 89 4c d8 20 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 104.911746][ C3] RSP: 0018:ffffc90000908718 EFLAGS: 00000246 [ 104.913314][ C3] RAX: 0000000000000000 RBX: ffffc900009087a0 RCX: ffffffff813cef46 [ 104.915398][ C3] RDX: ffff88803468c880 RSI: 0000000000000000 RDI: 0000000000000005 [ 104.917409][ C3] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 104.919452][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900009087a0 [ 104.921460][ C3] R13: ffffffff81776c00 R14: ffffc90000908860 R15: ffff88803468c880 [ 104.923486][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 104.925090][ C3] ? unwind_next_frame+0x46/0x23a0 [ 104.926432][ C3] unwind_next_frame+0x46/0x23a0 [ 104.927727][ C3] ? exit_mmap+0x1b8/0xb20 [ 104.928900][ C3] ? __mmput+0x12a/0x480 [ 104.930015][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 104.931540][ C3] arch_stack_walk+0x100/0x170 [ 104.932726][ C3] ? __mmput+0x12a/0x480 [ 104.933759][ C3] ? skb_free_head+0x18a/0x1d0 [ 104.934984][ C3] stack_trace_save+0x95/0xd0 [ 104.936165][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 104.937536][ C3] ? hlock_class+0x4e/0x130 [ 104.938702][ C3] ? __pfx_mark_lock+0x10/0x10 [ 104.939902][ C3] ? mark_lock+0xb5/0xc60 [ 104.941028][ C3] kasan_save_stack+0x33/0x60 [ 104.942266][ C3] ? kasan_save_stack+0x33/0x60 [ 104.943521][ C3] ? kasan_save_track+0x14/0x30 [ 104.944776][ C3] ? kasan_save_free_info+0x3b/0x60 [ 104.946120][ C3] ? poison_slab_object+0xf7/0x160 [ 104.947437][ C3] ? __kasan_slab_free+0x32/0x50 [ 104.948694][ C3] ? kmem_cache_free+0x12f/0x3a0 [ 104.949968][ C3] ? skb_free_head+0x18a/0x1d0 [ 104.951204][ C3] ? skb_release_data+0x75c/0x980 [ 104.952463][ C3] ? consume_skb+0xd0/0x160 [ 104.953646][ C3] ? mac80211_hwsim_tx_frame+0x1f3/0x2a0 [ 104.955087][ C3] ? mac80211_hwsim_beacon_tx+0x592/0xa00 [ 104.956486][ C3] ? __iterate_interfaces+0x2d0/0x5d0 [ 104.957875][ C3] ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 104.959727][ C3] ? mac80211_hwsim_beacon+0x105/0x200 [ 104.961122][ C3] ? __hrtimer_run_queues+0x20c/0xcc0 [ 104.962497][ C3] ? hrtimer_run_softirq+0x17d/0x350 [ 104.963863][ C3] ? handle_softirqs+0x216/0x8f0 [ 104.965132][ C3] ? irq_exit_rcu+0xbb/0x120 [ 104.966336][ C3] ? sysvec_apic_timer_interrupt+0x95/0xb0 [ 104.967822][ C3] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 104.969376][ C3] ? rcu_is_watching+0x41/0xc0 [ 104.970626][ C3] ? lock_release+0x4f6/0x6f0 [ 104.971841][ C3] ? __page_table_check_pte_clear+0x2d9/0x580 [ 104.973408][ C3] ? unmap_page_range+0x228a/0x3d30 [ 104.974764][ C3] ? unmap_single_vma+0x194/0x2b0 [ 104.976067][ C3] ? unmap_vmas+0x22f/0x490 [ 104.977246][ C3] ? exit_mmap+0x1b8/0xb20 [ 104.978408][ C3] ? __mmput+0x12a/0x480 [ 104.979507][ C3] kasan_save_track+0x14/0x30 [ 104.980724][ C3] kasan_save_free_info+0x3b/0x60 [ 104.982039][ C3] poison_slab_object+0xf7/0x160 [ 104.983320][ C3] __kasan_slab_free+0x32/0x50 [ 104.984566][ C3] kmem_cache_free+0x12f/0x3a0 [ 104.985820][ C3] ? skb_free_head+0x18a/0x1d0 [ 104.987058][ C3] skb_free_head+0x18a/0x1d0 [ 104.988256][ C3] skb_release_data+0x75c/0x980 [ 104.989506][ C3] ? mac80211_hwsim_tx_frame+0x1f3/0x2a0 [ 104.990920][ C3] ? rcu_is_watching+0x12/0xc0 [ 104.992078][ C3] consume_skb+0xd0/0x160 [ 104.993198][ C3] mac80211_hwsim_tx_frame+0x1f3/0x2a0 [ 104.994618][ C3] mac80211_hwsim_beacon_tx+0x592/0xa00 [ 104.996041][ C3] ? find_held_lock+0x2d/0x110 [ 104.997288][ C3] __iterate_interfaces+0x2d0/0x5d0 [ 104.998630][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 105.000319][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 105.001978][ C3] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 105.003492][ C3] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 105.005300][ C3] mac80211_hwsim_beacon+0x105/0x200 [ 105.006682][ C3] __hrtimer_run_queues+0x20c/0xcc0 [ 105.007994][ C3] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 105.009465][ C3] ? ktime_get_update_offsets_now+0x201/0x310 [ 105.011016][ C3] hrtimer_run_softirq+0x17d/0x350 [ 105.012339][ C3] handle_softirqs+0x216/0x8f0 [ 105.013585][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 105.014965][ C3] irq_exit_rcu+0xbb/0x120 [ 105.016130][ C3] sysvec_apic_timer_interrupt+0x95/0xb0 [ 105.017523][ C3] [ 105.018311][ C3] [ 105.019083][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 105.020730][ C3] RIP: 0010:rcu_is_watching+0x41/0xc0 [ 105.022140][ C3] Code: 03 00 83 f8 07 89 c5 0f 87 82 00 00 00 48 8d 3c ed 80 ab 7c 8d 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <75> 5c 48 03 1c ed 80 ab 7c 8d 48 b8 00 00 00 00 00 fc ff df 48 89 [ 105.027109][ C3] RSP: 0018:ffffc90006a6f528 EFLAGS: 00000246 [ 105.028581][ C3] RAX: dffffc0000000000 RBX: 0000000000037ec8 RCX: ffffffff8169c0b9 [ 105.030641][ C3] RDX: 1ffffffff1af9573 RSI: ffffffff8bb0fb80 RDI: ffffffff8d7cab98 [ 105.032665][ C3] RBP: 0000000000000003 R08: 0000000000000000 R09: fffffbfff20289b3 [ 105.034705][ C3] R10: ffffffff90144d9f R11: 0000000000000000 R12: ffffffff8ddb9f20 [ 105.036736][ C3] R13: 0000000000000008 R14: 000000000003db0c R15: ffffc90006a6fab8 [ 105.038775][ C3] ? lock_release+0xa9/0x6f0 [ 105.039979][ C3] ? rcu_is_watching+0x12/0xc0 [ 105.041228][ C3] lock_release+0x4f6/0x6f0 [ 105.042418][ C3] ? __page_table_check_pte_clear+0x2d4/0x580 [ 105.043995][ C3] ? __pfx_lock_release+0x10/0x10 [ 105.045246][ C3] ? page_ext_put+0x48/0xd0 [ 105.046426][ C3] ? page_table_check_clear.part.0+0x3a7/0x540 [ 105.048009][ C3] __page_table_check_pte_clear+0x2d9/0x580 [ 105.049544][ C3] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 105.051209][ C3] ? const_folio_flags.constprop.0+0x56/0x150 [ 105.052779][ C3] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 105.054650][ C3] unmap_page_range+0x228a/0x3d30 [ 105.055985][ C3] ? __pfx_unmap_page_range+0x10/0x10 [ 105.057386][ C3] ? uprobe_munmap+0x20/0x5d0 [ 105.058555][ C3] unmap_single_vma+0x194/0x2b0 [ 105.059823][ C3] unmap_vmas+0x22f/0x490 [ 105.060950][ C3] ? __pfx_unmap_vmas+0x10/0x10 [ 105.062215][ C3] ? __pfx_lock_release+0x10/0x10 [ 105.063524][ C3] ? lru_add_drain_cpu+0x454/0x860 [ 105.064847][ C3] exit_mmap+0x1b8/0xb20 [ 105.065962][ C3] ? __pfx_exit_mmap+0x10/0x10 [ 105.067209][ C3] __mmput+0x12a/0x480 [ 105.068278][ C3] mmput+0x62/0x70 [ 105.069278][ C3] do_exit+0x9bf/0x2bb0 [ 105.070378][ C3] ? get_signal+0x8f2/0x2770 [ 105.071571][ C3] ? __pfx_do_exit+0x10/0x10 [ 105.072784][ C3] ? do_raw_spin_lock+0x12d/0x2c0 [ 105.074057][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 105.075412][ C3] do_group_exit+0xd3/0x2a0 [ 105.076546][ C3] get_signal+0x25fb/0x2770 [ 105.077683][ C3] ? __pfx_get_signal+0x10/0x10 [ 105.078889][ C3] ? __pfx_do_futex+0x10/0x10 [ 105.080068][ C3] arch_do_signal_or_restart+0x90/0x7e0 [ 105.081473][ C3] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 105.082979][ C3] syscall_exit_to_user_mode+0x150/0x2a0 [ 105.084397][ C3] do_syscall_64+0xda/0x250 [ 105.085514][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.087012][ C3] RIP: 0033:0x7f90cd97def9 [ 105.088151][ C3] Code: Unable to access opcode bytes at 0x7f90cd97decf. [ 105.089880][ C3] RSP: 002b:00007f90ce8330e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 105.091965][ C3] RAX: fffffffffffffe00 RBX: 00007f90cdb35f88 RCX: 00007f90cd97def9 [ 105.093909][ C3] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f90cdb35f88 [ 105.096006][ C3] RBP: 00007f90cdb35f80 R08: 0000000000000000 R09: 0000000000000000 [ 105.098087][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f90cdb35f8c [ 105.100157][ C3] R13: 0000000000000000 R14: 00007fff9083a990 R15: 00007fff9083aa78 [ 105.102230][ C3] [ 105.102997][ C3] [ 105.103593][ C3] Allocated by task 13934: [ 105.104686][ C3] kasan_save_stack+0x33/0x60 [ 105.105885][ C3] kasan_save_track+0x14/0x30 [ 105.107065][ C3] __kasan_kmalloc+0xaa/0xb0 [ 105.108183][ C3] p9_client_create+0xcf/0x1210 [ 105.109392][ C3] v9fs_session_init+0x1f8/0x1a80 [ 105.110647][ C3] v9fs_mount+0xc6/0xa50 [ 105.111717][ C3] legacy_get_tree+0x109/0x220 [ 105.112941][ C3] vfs_get_tree+0x8f/0x380 [ 105.114126][ C3] path_mount+0x14e6/0x1f20 [ 105.115308][ C3] __x64_sys_mount+0x294/0x320 [ 105.116562][ C3] do_syscall_64+0xcd/0x250 [ 105.117766][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.119325][ C3] [ 105.119957][ C3] Freed by task 13934: [ 105.121026][ C3] kasan_save_stack+0x33/0x60 [ 105.122273][ C3] kasan_save_track+0x14/0x30 [ 105.123512][ C3] kasan_save_free_info+0x3b/0x60 [ 105.124825][ C3] poison_slab_object+0xf7/0x160 [ 105.126129][ C3] __kasan_slab_free+0x32/0x50 [ 105.127385][ C3] kfree+0x12a/0x3b0 [ 105.128412][ C3] p9_client_create+0xaaa/0x1210 [ 105.129720][ C3] v9fs_session_init+0x1f8/0x1a80 [ 105.130954][ C3] v9fs_mount+0xc6/0xa50 [ 105.132016][ C3] legacy_get_tree+0x109/0x220 [ 105.133276][ C3] vfs_get_tree+0x8f/0x380 [ 105.134422][ C3] path_mount+0x14e6/0x1f20 [ 105.135601][ C3] __x64_sys_mount+0x294/0x320 [ 105.136841][ C3] do_syscall_64+0xcd/0x250 [ 105.138040][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.139577][ C3] [ 105.140185][ C3] The buggy address belongs to the object at ffff888028224400 [ 105.140185][ C3] which belongs to the cache kmalloc-512 of size 512 [ 105.143764][ C3] The buggy address is located 24 bytes inside of [ 105.143764][ C3] freed 512-byte region [ffff888028224400, ffff888028224600) [ 105.147206][ C3] [ 105.147836][ C3] The buggy address belongs to the physical page: [ 105.149491][ C3] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28224 [ 105.151717][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 105.153830][ C3] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 105.155866][ C3] page_type: 0xfdffffff(slab) [ 105.157073][ C3] raw: 00fff00000000040 ffff88801ac42c80 0000000000000000 dead000000000001 [ 105.159288][ C3] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 105.161598][ C3] head: 00fff00000000040 ffff88801ac42c80 0000000000000000 dead000000000001 [ 105.163840][ C3] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 105.166080][ C3] head: 00fff00000000002 ffffea0000a08901 ffffffffffffffff 0000000000000000 [ 105.168316][ C3] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 105.170555][ C3] page dumped because: kasan: bad access detected [ 105.172219][ C3] page_owner tracks the page as allocated [ 105.173701][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4834, tgid 4834 (udevd), ts 46814742872, free_ts 46802483756 [ 105.178913][ C3] post_alloc_hook+0x2d1/0x350 [ 105.180163][ C3] get_page_from_freelist+0x1351/0x2e50 [ 105.181526][ C3] __alloc_pages_noprof+0x22b/0x2460 [ 105.182911][ C3] alloc_slab_page+0x4e/0xf0 [ 105.184122][ C3] new_slab+0x84/0x260 [ 105.185196][ C3] ___slab_alloc+0xdac/0x1870 [ 105.186440][ C3] __slab_alloc.constprop.0+0x56/0xb0 [ 105.187840][ C3] __kmalloc_cache_noprof+0x2b4/0x300 [ 105.189236][ C3] kernfs_fop_open+0x28b/0xdb0 [ 105.190508][ C3] do_dentry_open+0x91f/0x15f0 [ 105.191754][ C3] vfs_open+0x82/0x3f0 [ 105.192823][ C3] path_openat+0x2141/0x2d20 [ 105.194037][ C3] do_filp_open+0x1dc/0x430 [ 105.195226][ C3] do_sys_openat2+0x17a/0x1e0 [ 105.196453][ C3] __x64_sys_openat+0x175/0x210 [ 105.197735][ C3] do_syscall_64+0xcd/0x250 [ 105.198898][ C3] page last free pid 4834 tgid 4834 stack trace: [ 105.200528][ C3] register_dummy_stack+0x8a/0xd0 [ 105.201858][ C3] init_page_owner+0x48/0xc00 [ 105.203062][ C3] page_ext_init+0x6b8/0xab0 [ 105.204253][ C3] mm_core_init+0x12d/0x220 [ 105.205423][ C3] [ 105.206056][ C3] Memory state around the buggy address: [ 105.207448][ C3] ffff888028224300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 105.209464][ C3] ffff888028224380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 105.211530][ C3] >ffff888028224400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.213580][ C3] ^ [ 105.214844][ C3] ffff888028224480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.216869][ C3] ffff888028224500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.218932][ C3] ================================================================== [ 105.220895][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 105.222689][ C3] CPU: 3 UID: 0 PID: 13936 Comm: syz.0.4203 Not tainted 6.11.0-rc7-syzkaller-00145-g57719771a244 #0 [ 105.225320][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.228060][ C3] Call Trace: [ 105.228935][ C3] [ 105.229682][ C3] dump_stack_lvl+0x3d/0x1f0 [ 105.230886][ C3] panic+0x6dc/0x7c0 [ 105.231910][ C3] ? __pfx_panic+0x10/0x10 [ 105.233073][ C3] ? rcu_is_watching+0x12/0xc0 [ 105.234327][ C3] ? __pfx_lock_release+0x10/0x10 [ 105.235638][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 105.236967][ C3] check_panic_on_warn+0xab/0xb0 [ 105.238263][ C3] end_report+0x117/0x180 [ 105.239379][ C3] kasan_report+0xe9/0x110 [ 105.240537][ C3] ? __lock_acquire+0x2de0/0x3cb0 [ 105.241857][ C3] ? __lock_acquire+0x2de0/0x3cb0 [ 105.243163][ C3] __lock_acquire+0x2de0/0x3cb0 [ 105.244431][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 105.245787][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 105.247135][ C3] lock_acquire+0x1b1/0x560 [ 105.248314][ C3] ? p9_req_put+0xaf/0x250 [ 105.249471][ C3] ? __pfx_lock_acquire+0x10/0x10 [ 105.250789][ C3] ? __pfx_lock_release+0x10/0x10 [ 105.252105][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 105.253442][ C3] ? p9_req_put+0xaf/0x250 [ 105.254590][ C3] p9_req_put+0xaf/0x250 [ 105.255658][ C3] req_done+0x1e7/0x2f0 [ 105.256734][ C3] ? __pfx_req_done+0x10/0x10 [ 105.257955][ C3] ? __pfx_req_done+0x10/0x10 [ 105.259170][ C3] vring_interrupt+0x31b/0x400 [ 105.260422][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 105.261807][ C3] __handle_irq_event_percpu+0x229/0x7c0 [ 105.263267][ C3] handle_irq_event+0xab/0x1e0 [ 105.264507][ C3] handle_edge_irq+0x263/0xd10 [ 105.265760][ C3] __common_interrupt+0xdf/0x250 [ 105.267052][ C3] common_interrupt+0x52/0xd0 [ 105.268208][ C3] asm_common_interrupt+0x26/0x40 [ 105.269461][ C3] RIP: 0010:write_comp_data+0x8b/0x90 [ 105.270847][ C3] Code: 00 00 4a 8d 34 dd 28 00 00 00 48 39 f2 72 1b 48 83 c7 01 48 89 38 4c 89 44 30 e0 4c 89 4c 30 e8 4c 89 54 30 f0 4a 89 4c d8 20 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 105.275633][ C3] RSP: 0018:ffffc90000908718 EFLAGS: 00000246 [ 105.277162][ C3] RAX: 0000000000000000 RBX: ffffc900009087a0 RCX: ffffffff813cef46 [ 105.279196][ C3] RDX: ffff88803468c880 RSI: 0000000000000000 RDI: 0000000000000005 [ 105.281219][ C3] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 105.283275][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900009087a0 [ 105.285306][ C3] R13: ffffffff81776c00 R14: ffffc90000908860 R15: ffff88803468c880 [ 105.287334][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 105.289042][ C3] ? unwind_next_frame+0x46/0x23a0 [ 105.290404][ C3] unwind_next_frame+0x46/0x23a0 [ 105.291707][ C3] ? exit_mmap+0x1b8/0xb20 [ 105.292888][ C3] ? __mmput+0x12a/0x480 [ 105.294022][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 105.295617][ C3] arch_stack_walk+0x100/0x170 [ 105.296875][ C3] ? __mmput+0x12a/0x480 [ 105.298000][ C3] ? skb_free_head+0x18a/0x1d0 [ 105.299171][ C3] stack_trace_save+0x95/0xd0 [ 105.300406][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 105.301769][ C3] ? hlock_class+0x4e/0x130 [ 105.302952][ C3] ? __pfx_mark_lock+0x10/0x10 [ 105.304211][ C3] ? mark_lock+0xb5/0xc60 [ 105.305283][ C3] kasan_save_stack+0x33/0x60 [ 105.306530][ C3] ? kasan_save_stack+0x33/0x60 [ 105.307816][ C3] ? kasan_save_track+0x14/0x30 [ 105.309107][ C3] ? kasan_save_free_info+0x3b/0x60 [ 105.310479][ C3] ? poison_slab_object+0xf7/0x160 [ 105.311823][ C3] ? __kasan_slab_free+0x32/0x50 [ 105.313128][ C3] ? kmem_cache_free+0x12f/0x3a0 [ 105.314409][ C3] ? skb_free_head+0x18a/0x1d0 [ 105.315656][ C3] ? skb_release_data+0x75c/0x980 [ 105.316953][ C3] ? consume_skb+0xd0/0x160 [ 105.318123][ C3] ? mac80211_hwsim_tx_frame+0x1f3/0x2a0 [ 105.319588][ C3] ? mac80211_hwsim_beacon_tx+0x592/0xa00 [ 105.321040][ C3] ? __iterate_interfaces+0x2d0/0x5d0 [ 105.322415][ C3] ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 105.324290][ C3] ? mac80211_hwsim_beacon+0x105/0x200 [ 105.325729][ C3] ? __hrtimer_run_queues+0x20c/0xcc0 [ 105.327049][ C3] ? hrtimer_run_softirq+0x17d/0x350 [ 105.328421][ C3] ? handle_softirqs+0x216/0x8f0 [ 105.329716][ C3] ? irq_exit_rcu+0xbb/0x120 [ 105.330916][ C3] ? sysvec_apic_timer_interrupt+0x95/0xb0 [ 105.332409][ C3] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 105.334021][ C3] ? rcu_is_watching+0x41/0xc0 [ 105.335274][ C3] ? lock_release+0x4f6/0x6f0 [ 105.336513][ C3] ? __page_table_check_pte_clear+0x2d9/0x580 [ 105.338106][ C3] ? unmap_page_range+0x228a/0x3d30 [ 105.339475][ C3] ? unmap_single_vma+0x194/0x2b0 [ 105.340802][ C3] ? unmap_vmas+0x22f/0x490 [ 105.342017][ C3] ? exit_mmap+0x1b8/0xb20 [ 105.343185][ C3] ? __mmput+0x12a/0x480 [ 105.344275][ C3] kasan_save_track+0x14/0x30 [ 105.345477][ C3] kasan_save_free_info+0x3b/0x60 [ 105.346806][ C3] poison_slab_object+0xf7/0x160 [ 105.348110][ C3] __kasan_slab_free+0x32/0x50 [ 105.349344][ C3] kmem_cache_free+0x12f/0x3a0 [ 105.350606][ C3] ? skb_free_head+0x18a/0x1d0 [ 105.351859][ C3] skb_free_head+0x18a/0x1d0 [ 105.353068][ C3] skb_release_data+0x75c/0x980 [ 105.354350][ C3] ? mac80211_hwsim_tx_frame+0x1f3/0x2a0 [ 105.355788][ C3] ? rcu_is_watching+0x12/0xc0 [ 105.357033][ C3] consume_skb+0xd0/0x160 [ 105.358168][ C3] mac80211_hwsim_tx_frame+0x1f3/0x2a0 [ 105.359642][ C3] mac80211_hwsim_beacon_tx+0x592/0xa00 [ 105.361112][ C3] ? find_held_lock+0x2d/0x110 [ 105.362367][ C3] __iterate_interfaces+0x2d0/0x5d0 [ 105.363736][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 105.365321][ C3] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 105.366926][ C3] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 105.368442][ C3] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 105.370228][ C3] mac80211_hwsim_beacon+0x105/0x200 [ 105.371591][ C3] __hrtimer_run_queues+0x20c/0xcc0 [ 105.372862][ C3] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 105.374363][ C3] ? ktime_get_update_offsets_now+0x201/0x310 [ 105.375939][ C3] hrtimer_run_softirq+0x17d/0x350 [ 105.377280][ C3] handle_softirqs+0x216/0x8f0 [ 105.378521][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 105.379901][ C3] irq_exit_rcu+0xbb/0x120 [ 105.381072][ C3] sysvec_apic_timer_interrupt+0x95/0xb0 [ 105.382550][ C3] [ 105.383327][ C3] [ 105.384101][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 105.385664][ C3] RIP: 0010:rcu_is_watching+0x41/0xc0 [ 105.387064][ C3] Code: 03 00 83 f8 07 89 c5 0f 87 82 00 00 00 48 8d 3c ed 80 ab 7c 8d 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <75> 5c 48 03 1c ed 80 ab 7c 8d 48 b8 00 00 00 00 00 fc ff df 48 89 [ 105.392044][ C3] RSP: 0018:ffffc90006a6f528 EFLAGS: 00000246 [ 105.393632][ C3] RAX: dffffc0000000000 RBX: 0000000000037ec8 RCX: ffffffff8169c0b9 [ 105.395682][ C3] RDX: 1ffffffff1af9573 RSI: ffffffff8bb0fb80 RDI: ffffffff8d7cab98 [ 105.397676][ C3] RBP: 0000000000000003 R08: 0000000000000000 R09: fffffbfff20289b3 [ 105.399713][ C3] R10: ffffffff90144d9f R11: 0000000000000000 R12: ffffffff8ddb9f20 [ 105.401761][ C3] R13: 0000000000000008 R14: 000000000003db0c R15: ffffc90006a6fab8 [ 105.403786][ C3] ? lock_release+0xa9/0x6f0 [ 105.404928][ C3] ? rcu_is_watching+0x12/0xc0 [ 105.406170][ C3] lock_release+0x4f6/0x6f0 [ 105.407355][ C3] ? __page_table_check_pte_clear+0x2d4/0x580 [ 105.408932][ C3] ? __pfx_lock_release+0x10/0x10 [ 105.410256][ C3] ? page_ext_put+0x48/0xd0 [ 105.411449][ C3] ? page_table_check_clear.part.0+0x3a7/0x540 [ 105.413022][ C3] __page_table_check_pte_clear+0x2d9/0x580 [ 105.414501][ C3] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 105.416047][ C3] ? const_folio_flags.constprop.0+0x56/0x150 [ 105.417634][ C3] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 105.419493][ C3] unmap_page_range+0x228a/0x3d30 [ 105.420810][ C3] ? __pfx_unmap_page_range+0x10/0x10 [ 105.422223][ C3] ? uprobe_munmap+0x20/0x5d0 [ 105.423463][ C3] unmap_single_vma+0x194/0x2b0 [ 105.424729][ C3] unmap_vmas+0x22f/0x490 [ 105.425850][ C3] ? __pfx_unmap_vmas+0x10/0x10 [ 105.427072][ C3] ? __pfx_lock_release+0x10/0x10 [ 105.428357][ C3] ? lru_add_drain_cpu+0x454/0x860 [ 105.429692][ C3] exit_mmap+0x1b8/0xb20 [ 105.430750][ C3] ? __pfx_exit_mmap+0x10/0x10 [ 105.431955][ C3] __mmput+0x12a/0x480 [ 105.432995][ C3] mmput+0x62/0x70 [ 105.433976][ C3] do_exit+0x9bf/0x2bb0 [ 105.435043][ C3] ? get_signal+0x8f2/0x2770 [ 105.436230][ C3] ? __pfx_do_exit+0x10/0x10 [ 105.437397][ C3] ? do_raw_spin_lock+0x12d/0x2c0 [ 105.438673][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 105.440026][ C3] do_group_exit+0xd3/0x2a0 [ 105.441179][ C3] get_signal+0x25fb/0x2770 [ 105.442310][ C3] ? __pfx_get_signal+0x10/0x10 [ 105.443522][ C3] ? __pfx_do_futex+0x10/0x10 [ 105.444681][ C3] arch_do_signal_or_restart+0x90/0x7e0 [ 105.446046][ C3] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 105.447527][ C3] syscall_exit_to_user_mode+0x150/0x2a0 [ 105.448925][ C3] do_syscall_64+0xda/0x250 [ 105.450077][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.451493][ C3] RIP: 0033:0x7f90cd97def9 [ 105.452607][ C3] Code: Unable to access opcode bytes at 0x7f90cd97decf. [ 105.454340][ C3] RSP: 002b:00007f90ce8330e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 105.456416][ C3] RAX: fffffffffffffe00 RBX: 00007f90cdb35f88 RCX: 00007f90cd97def9 [ 105.458463][ C3] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f90cdb35f88 [ 105.460481][ C3] RBP: 00007f90cdb35f80 R08: 0000000000000000 R09: 0000000000000000 [ 105.462470][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f90cdb35f8c [ 105.464422][ C3] R13: 0000000000000000 R14: 00007fff9083a990 R15: 00007fff9083aa78 [ 105.466353][ C3] [ 105.467614][ C3] Kernel Offset: disabled [ 105.468666][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:12:15 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=1ffff92000c44eec RCX=ffffffff8169c0b9 RDX=0000000000000000 RSI=ffffffff8bb0fb80 RDI=ffffffff8d7cab80 RBP=ffffffff90148098 RSP=ffffc90006227750 R8 =0000000000000000 R9 =fffffbfff20289b3 R10=ffffffff90144d9f R11=0000000000000000 R12=ffffffff8ddb9f20 R13=0000000000000008 R14=000000000003db0c R15=ffffc90006227cc8 RIP=ffffffff8169c0e3 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2f819ff8 CR3=000000000db7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000054 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a0d8 ffffffff8100a0d8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a0d8 ffffffff8100a0d8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a0d8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbba7ff199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbba7ff19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbba7ff19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbba7ff19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbba7ff1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbba7ff1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a0d8 ffffffff8100a0d8 ffffffff8100a0d8 ffffffff8100a0af ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffea0000c8f480 RCX=ffffffff81d1f75c RDX=ffff8880298f4880 RSI=ffffffff81d1f76a RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc90023d9f880 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=00007fb5f03d3000 R13=dffffc0000000000 R14=ffffea0000c8f480 R15=ffffc90023d9fcc8 RIP=ffffffff818bd081 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2f716ff8 CR3=000000000db7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000054 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dda06535d64131fc e05f6a2a1a3248ef ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f737abc80b40980 50bd25570ba00962 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0127e9d6addcfac4 cf5e6ce7fd8bebd7 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b19580d2284a0d51 15ea928d7a3b1235 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000093c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9c23d2209c43da7a 0000004000000040 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9c252c089da41824 9ddaff580009bd04 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00a3aee800000000 0000004000000040 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004000000000 9daec48000000040 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c24d7d73994dc8ed 95ba0c690c16f4a6 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1479b7bd14dd250a fed97273c34b09dd ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5f110b488 00007fb5f110b480 00007fb5f110b478 00007fb5f110b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5f1c6d100 00007fb5f110b440 00007fb500040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5f110b498 00007fb5f110b490 00007fb5f110b488 00007fb5f110b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=000000000017ffff RCX=ffffffff81d292fb RDX=ffff88804c932440 RSI=0000000000048247 RDI=000000000017ffff RBP=0000000000048247 RSP=ffffc9000ca27600 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=1ffff92001944ec0 R13=ffff88804e3b67c0 R14=00007fcb9341a000 R15=0000000000000000 RIP=ffffffff81d29321 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2f91bff8 CR3=000000000db7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a0af ffffffff8100a0d8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a0d8 ffffffff8100a0af ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a0af ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb94ff199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb94ff19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb94ff19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb94ff19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb94ff1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb94ff1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb9510b488 00007fcb9510b480 00007fcb9510b478 00007fcb9510b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb95c6d100 00007fcb9510b440 00007fcb00040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcb9510b498 00007fcb9510b490 00007fcb9510b488 00007fcb9510b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff850313b0 RDI=ffffffff9a5b4fa0 RBP=ffffffff9a5b4f60 RSP=ffffc90000907bd0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7973203a6d6d6f43 R12=0000000000000000 R13=ffffffff9a5b4f60 R14=ffffffff9a5b4fb0 R15=0000000000000079 RIP=ffffffff850313d7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b33f1bffc CR3=000000000db7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000054 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a0d8 ffffffff8100a0d8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a0d8 ffffffff8100a0d8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a0d8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90cd9f199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90cd9f19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90cd9f19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90cd9f19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90cd9f1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90cd9f1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90cdb0b488 00007f90cdb0b480 00007f90cdb0b478 00007f90cdb0b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90ce66d100 00007f90cdb0b440 00007f9000040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90cdb0b498 00007f90cdb0b490 00007f90cdb0b488 00007f90cdb0b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000