last executing test programs: 20.896409915s ago: executing program 2 (id=513): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0xb8e]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 20.850764996s ago: executing program 2 (id=515): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) 20.814593229s ago: executing program 2 (id=518): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@uuid_on}]}) 20.788099171s ago: executing program 2 (id=521): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4003b9, 'syz0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'virt_wifi0\x00', 'pimreg\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) 20.728785616s ago: executing program 2 (id=524): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) statx(r0, 0x0, 0x1000, 0x20, &(0x7f0000000040)) 20.72858454s ago: executing program 2 (id=525): timer_create(0x3, 0x0, &(0x7f00009b1ffc)=0x0) rt_sigsuspend(&(0x7f0000000200), 0x8) timer_settime(r0, 0x0, &(0x7f0000000040), 0x0) 5.662845428s ago: executing program 32 (id=525): timer_create(0x3, 0x0, &(0x7f00009b1ffc)=0x0) rt_sigsuspend(&(0x7f0000000200), 0x8) timer_settime(r0, 0x0, &(0x7f0000000040), 0x0) 1.249442953s ago: executing program 1 (id=1230): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$alg(r0, &(0x7f0000000240)=""/4096, 0xfffffdef) 1.187925995s ago: executing program 1 (id=1235): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 1.055616906s ago: executing program 1 (id=1239): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="29000300010003", 0x7) 979.745861ms ago: executing program 1 (id=1243): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x2) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x3, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) 887.549212ms ago: executing program 1 (id=1246): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), 0x8) 548.054299ms ago: executing program 0 (id=1265): pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 536.512849ms ago: executing program 4 (id=1260): r0 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xc8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\x16\x82\xe8=\xa3\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\xba\x89#=2G0x0}) sendto$packet(r0, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4, 0x8080, &(0x7f0000000080)={0x11, 0x8100, r1, 0x1, 0x32, 0x6, @remote}, 0x14) 387.266526ms ago: executing program 3 (id=1266): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) 387.176779ms ago: executing program 0 (id=1267): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000010c0)={0x8, "99bdb1b0c7251b0894d402060074bd856e3c10db57c3f7484d9ed4190db800f3"}) ioctl$SW_SYNC_IOC_INC(r0, 0xc0285700, &(0x7f0000000180)=0x8) 386.856558ms ago: executing program 4 (id=1268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {0xa, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x54}}, 0x0) 319.2605ms ago: executing program 4 (id=1269): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000880)=""/4089, 0x1a000}], 0x1}, 0x0) 318.872907ms ago: executing program 0 (id=1271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000200100000004000180100002800c000180"], 0x28}}, 0x0) 318.45574ms ago: executing program 4 (id=1272): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) 316.248181ms ago: executing program 0 (id=1273): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 316.139882ms ago: executing program 3 (id=1274): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) shutdown(r0, 0x0) 229.663318ms ago: executing program 4 (id=1275): r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80084803, 0x0) 310.502µs ago: executing program 1 (id=1276): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x2, 0x0) 198.524µs ago: executing program 3 (id=1277): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'sit0\x00', @ifru_settings={0x4, 0x0, @te1=0x0}}) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)) 0s ago: executing program 3 (id=1278): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f043}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000600)={0x0, 0x8, 0x4, {0x1, @win={{}, 0x0, 0x5, 0x0, 0x0, 0x0}}}) 0s ago: executing program 1 (id=1286): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): [ 38.111721][ T39] audit: type=1400 audit(1733401942.229:82): avc: denied { siginh } for pid=5841 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.121625][ T39] audit: type=1400 audit(1733401943.259:83): avc: denied { read } for pid=5332 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.129245][ T39] audit: type=1400 audit(1733401943.259:84): avc: denied { append } for pid=5332 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.137172][ T39] audit: type=1400 audit(1733401943.259:85): avc: denied { open } for pid=5332 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.144812][ T39] audit: type=1400 audit(1733401943.259:86): avc: denied { getattr } for pid=5332 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:15744' (ED25519) to the list of known hosts. [ 39.963780][ T39] audit: type=1400 audit(1733401944.099:87): avc: denied { name_bind } for pid=5857 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.682048][ T5865] cgroup: Unknown subsys name 'net' [ 41.843069][ T5865] cgroup: Unknown subsys name 'cpuset' [ 41.846475][ T5865] cgroup: Unknown subsys name 'rlimit' [ 42.063388][ T5916] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.827134][ T5865] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.413132][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 45.413146][ T39] audit: type=1400 audit(1733401949.549:105): avc: denied { execmem } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.557841][ T39] audit: type=1400 audit(1733401949.689:106): avc: denied { create } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.563492][ T39] audit: type=1400 audit(1733401949.689:107): avc: denied { read write } for pid=5933 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.570433][ T39] audit: type=1400 audit(1733401949.689:108): avc: denied { open } for pid=5933 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.578731][ T39] audit: type=1400 audit(1733401949.689:109): avc: denied { ioctl } for pid=5933 comm="syz-executor" path="socket:[7616]" dev="sockfs" ino=7616 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.593365][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.602749][ T5936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.605638][ T5936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.608589][ T5936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.611806][ T5936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.614930][ T5936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.618203][ T5936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.621133][ T5936] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 45.623716][ T5936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.625075][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.628795][ T5938] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 45.630394][ T5943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.630806][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.635383][ T5943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.638874][ T5943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.643440][ T5943] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.643526][ T39] audit: type=1400 audit(1733401949.779:110): avc: denied { read } for pid=5933 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.644285][ T5938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.644590][ T5938] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 45.644765][ T5938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.646249][ T5936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.652970][ T39] audit: type=1400 audit(1733401949.779:111): avc: denied { open } for pid=5933 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.657526][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.657619][ T39] audit: type=1400 audit(1733401949.779:112): avc: denied { mounton } for pid=5933 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.663201][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.685853][ T67] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 45.688791][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.786884][ T39] audit: type=1400 audit(1733401949.919:113): avc: denied { module_request } for pid=5937 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.851921][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 45.876885][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 45.888155][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 45.997838][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.999752][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.002639][ T5937] bridge_slave_0: entered allmulticast mode [ 46.005182][ T5937] bridge_slave_0: entered promiscuous mode [ 46.021260][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.023669][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.026117][ T5941] bridge_slave_0: entered allmulticast mode [ 46.028749][ T5941] bridge_slave_0: entered promiscuous mode [ 46.032217][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 46.040105][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.042681][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.045172][ T5937] bridge_slave_1: entered allmulticast mode [ 46.048080][ T5937] bridge_slave_1: entered promiscuous mode [ 46.054856][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.057414][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.060035][ T5941] bridge_slave_1: entered allmulticast mode [ 46.062860][ T5941] bridge_slave_1: entered promiscuous mode [ 46.131366][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.162424][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.166437][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.168961][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.170854][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.172739][ T5933] bridge_slave_0: entered allmulticast mode [ 46.174782][ T5933] bridge_slave_0: entered promiscuous mode [ 46.219701][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.237560][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.240272][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.242824][ T5933] bridge_slave_1: entered allmulticast mode [ 46.245676][ T5933] bridge_slave_1: entered promiscuous mode [ 46.280355][ T5941] team0: Port device team_slave_0 added [ 46.310073][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.312066][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.313988][ T5945] bridge_slave_0: entered allmulticast mode [ 46.315998][ T5945] bridge_slave_0: entered promiscuous mode [ 46.319368][ T5941] team0: Port device team_slave_1 added [ 46.337837][ T5937] team0: Port device team_slave_0 added [ 46.353911][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.356580][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.359171][ T5945] bridge_slave_1: entered allmulticast mode [ 46.362523][ T5945] bridge_slave_1: entered promiscuous mode [ 46.378100][ T5937] team0: Port device team_slave_1 added [ 46.381676][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.392881][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.394763][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.404142][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.423807][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.435669][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.438242][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.447733][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.485131][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.489578][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.501376][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.503498][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.509609][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.530126][ T5933] team0: Port device team_slave_0 added [ 46.542339][ T5945] team0: Port device team_slave_0 added [ 46.544784][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.546628][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.555774][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.571528][ T5933] team0: Port device team_slave_1 added [ 46.574017][ T5945] team0: Port device team_slave_1 added [ 46.622995][ T5941] hsr_slave_0: entered promiscuous mode [ 46.625131][ T5941] hsr_slave_1: entered promiscuous mode [ 46.635430][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.637302][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.645802][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.649418][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.651386][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.658066][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.662537][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.664386][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.671537][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.687454][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.689367][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.696128][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.721111][ T5937] hsr_slave_0: entered promiscuous mode [ 46.723681][ T5937] hsr_slave_1: entered promiscuous mode [ 46.725689][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.728052][ T5937] Cannot create hsr debugfs directory [ 46.783493][ T5945] hsr_slave_0: entered promiscuous mode [ 46.785251][ T5945] hsr_slave_1: entered promiscuous mode [ 46.786876][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.788604][ T5945] Cannot create hsr debugfs directory [ 46.849346][ T5933] hsr_slave_0: entered promiscuous mode [ 46.853194][ T5933] hsr_slave_1: entered promiscuous mode [ 46.855751][ T5933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.858491][ T5933] Cannot create hsr debugfs directory [ 47.052591][ T5941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.058755][ T5941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.065318][ T5941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.072625][ T5941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.097814][ T5937] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.103401][ T5937] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.106944][ T5937] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.111856][ T5937] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.147871][ T5945] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.155518][ T5945] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.158606][ T5945] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.166983][ T5945] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.192994][ T5933] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.196163][ T5933] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.204414][ T5933] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.207955][ T5933] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.224860][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.257647][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.274338][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.276329][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.281240][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.289877][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.291840][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.306563][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.312562][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.314416][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.319610][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.321520][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.340419][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.370517][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.376078][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.385893][ T39] audit: type=1400 audit(1733401951.519:114): avc: denied { sys_module } for pid=5941 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.387325][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.394839][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.402129][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.404789][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.413463][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.425242][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.427150][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.433286][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.435912][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.477335][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.504536][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.517165][ T5941] veth0_vlan: entered promiscuous mode [ 47.529030][ T5941] veth1_vlan: entered promiscuous mode [ 47.555800][ T5937] veth0_vlan: entered promiscuous mode [ 47.562110][ T5941] veth0_macvtap: entered promiscuous mode [ 47.566555][ T5941] veth1_macvtap: entered promiscuous mode [ 47.577161][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.580288][ T5937] veth1_vlan: entered promiscuous mode [ 47.585848][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.588975][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.593127][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.601450][ T5941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.603765][ T5941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.605848][ T5941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.608015][ T5941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.638636][ T5937] veth0_macvtap: entered promiscuous mode [ 47.653045][ T5937] veth1_macvtap: entered promiscuous mode [ 47.660414][ T5945] veth0_vlan: entered promiscuous mode [ 47.672270][ T5288] Bluetooth: hci1: command tx timeout [ 47.672307][ T5936] Bluetooth: hci0: command tx timeout [ 47.676340][ T67] Bluetooth: hci2: command tx timeout [ 47.685183][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.688267][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.691921][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.703620][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.707330][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.711890][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.716589][ T5945] veth1_vlan: entered promiscuous mode [ 47.720745][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.724758][ T5937] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.724872][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.727904][ T5937] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.733357][ T5937] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.736489][ T5937] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.741327][ T5933] veth0_vlan: entered promiscuous mode [ 47.750813][ T67] Bluetooth: hci3: command tx timeout [ 47.756026][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.758176][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.775813][ T5933] veth1_vlan: entered promiscuous mode [ 47.781606][ T5945] veth0_macvtap: entered promiscuous mode [ 47.786666][ T5945] veth1_macvtap: entered promiscuous mode [ 47.799006][ T5941] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.812926][ T5933] veth0_macvtap: entered promiscuous mode [ 47.830732][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.836677][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.839410][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.841200][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.846873][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.851194][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.855124][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.864008][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.867772][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.871797][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.875986][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.881425][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.885768][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.888586][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.894925][ T5945] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.897988][ T5945] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.901204][ T5945] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.903504][ T5945] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.906826][ T5933] veth1_macvtap: entered promiscuous mode [ 47.932632][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.936351][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.939751][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.944172][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.947672][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.952228][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.956063][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.975702][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.979575][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.983856][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.987656][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.994805][ T5933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.998409][ T5933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.001866][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.013850][ T5933] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.017178][ T5933] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.020608][ T5933] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.023723][ T5933] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.036048][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.039523][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.073957][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.077334][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.095121][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.097978][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.133890][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.133911][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.202006][ T6014] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.285807][ T6024] program syz.1.15 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.290634][ T6026] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.426236][ T6052] vlan0: entered promiscuous mode [ 48.436075][ T6052] team0: Port device vlan0 added [ 48.586753][ T6079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.42'. [ 48.712024][ T67] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 48.713765][ T67] Bluetooth: Wrong link type (-22) [ 48.809133][ T6122] capability: warning: `syz.1.61' uses 32-bit capabilities (legacy support in use) [ 48.840080][ T6126] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 48.841944][ T6126] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 48.846579][ T6126] vhci_hcd vhci_hcd.0: Device attached [ 48.858918][ T6129] mmap: syz.2.55 (6129) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.869229][ T6132] pim6reg: entered allmulticast mode [ 48.953607][ T6139] netlink: 72 bytes leftover after parsing attributes in process `syz.2.67'. [ 48.964434][ T6141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 48.995492][ T6143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.69'. [ 49.001112][ T6145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.70'. [ 49.032796][ T6147] QAT: failed to copy from user. [ 49.040206][ T25] vhci_hcd: vhci_device speed not set [ 49.110254][ T25] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 49.113522][ T1018] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 49.138323][ T8] IPVS: starting estimator thread 0... [ 49.241914][ T6158] IPVS: using max 36 ests per chain, 86400 per kthread [ 49.275194][ T1018] usb 6-1: config 0 has no interfaces? [ 49.276702][ T1018] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 49.279211][ T1018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.283527][ T1018] usb 6-1: config 0 descriptor?? [ 49.490408][ T6094] orangefs_mount: mount request failed with -4 [ 49.493875][ T1018] usb 6-1: USB disconnect, device number 2 [ 49.498126][ T6127] vhci_hcd: connection reset by peer [ 49.500921][ T63] vhci_hcd: stop threads [ 49.502784][ T63] vhci_hcd: release socket [ 49.505185][ T63] vhci_hcd: disconnect device [ 49.567494][ T6174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.82'. [ 49.572061][ T25] vhci_hcd: vhci_device speed not set [ 49.750163][ T5936] Bluetooth: hci1: command tx timeout [ 49.750202][ T5288] Bluetooth: hci2: command tx timeout [ 49.750232][ T5946] Bluetooth: hci0: command tx timeout [ 49.840286][ T5288] Bluetooth: hci3: command tx timeout [ 49.998556][ T6206] xt_l2tp: v2 tid > 0xffff: 150994944 [ 50.042914][ T6212] Cannot find map_set index 0 as target [ 50.068677][ T6214] warning: `syz.1.102' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 50.240407][ T6241] netlink: 20 bytes leftover after parsing attributes in process `syz.1.115'. [ 50.243296][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'. [ 50.352822][ T6259] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 50.519291][ T39] kauditd_printk_skb: 101 callbacks suppressed [ 50.519301][ T39] audit: type=1400 audit(1733401954.649:216): avc: denied { sqpoll } for pid=6284 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 50.595567][ T39] audit: type=1400 audit(1733401954.729:217): avc: denied { mount } for pid=6297 comm="syz.1.143" name="/" dev="hugetlbfs" ino=9561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 50.611482][ T39] audit: type=1400 audit(1733401954.749:218): avc: denied { recv } for pid=34 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=58982 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 50.619421][ T39] audit: type=1400 audit(1733401954.749:219): avc: denied { recv } for pid=34 comm="ksoftirqd/3" saddr=127.0.0.1 src=58982 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 50.627899][ T39] audit: type=1400 audit(1733401954.749:220): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 51.053788][ T39] audit: type=1400 audit(1733401955.189:221): avc: denied { create } for pid=6338 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 51.056549][ T6339] ax25_connect(): syz.2.159 uses autobind, please contact jreuter@yaina.de [ 51.058906][ T39] audit: type=1400 audit(1733401955.189:222): avc: denied { write } for pid=6338 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 51.066365][ T39] audit: type=1400 audit(1733401955.189:223): avc: denied { connect } for pid=6338 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 51.115968][ T39] audit: type=1400 audit(1733401955.249:224): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.120060][ T67] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 51.135776][ T6346] team0: entered allmulticast mode [ 51.137415][ T6346] team_slave_0: entered allmulticast mode [ 51.139016][ T6346] team_slave_1: entered allmulticast mode [ 51.144591][ T6346] vlan0: entered allmulticast mode [ 51.144602][ T6346] veth0_vlan: entered allmulticast mode [ 51.194222][ T39] audit: type=1400 audit(1733401955.329:225): avc: denied { connect } for pid=6348 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 51.203469][ T6351] atomic_op ffff88802ca88998 conn xmit_atomic 0000000000000000 [ 51.317007][ T6364] Bluetooth: MGMT ver 1.23 [ 51.564649][ T6393] capability: warning: `syz.1.186' uses deprecated v2 capabilities in a way that may be insecure [ 51.842785][ T67] Bluetooth: hci0: command tx timeout [ 51.842820][ T5936] Bluetooth: hci2: command tx timeout [ 51.844690][ T5288] Bluetooth: hci1: command tx timeout [ 51.911526][ T5288] Bluetooth: hci3: command tx timeout [ 52.046227][ T6452] tmpfs: Bad value for 'mpol' [ 52.228894][ T6477] netlink: 344 bytes leftover after parsing attributes in process `syz.1.224'. [ 52.260227][ T6483] netlink: 'syz.3.225': attribute type 1 has an invalid length. [ 52.655152][ T6547] random: crng reseeded on system resumption [ 52.689598][ T6551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 52.711334][ T898] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 52.766785][ T6560] netlink: 6 bytes leftover after parsing attributes in process `syz.0.259'. [ 52.872905][ T898] usb 7-1: config 0 interface 0 altsetting 18 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 52.875775][ T898] usb 7-1: config 0 interface 0 altsetting 18 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 52.878461][ T898] usb 7-1: config 0 interface 0 altsetting 18 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 52.881718][ T898] usb 7-1: config 0 interface 0 has no altsetting 0 [ 52.885210][ T898] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 52.887494][ T898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.889981][ T898] usb 7-1: Product: syz [ 52.891540][ T898] usb 7-1: Manufacturer: syz [ 52.893220][ T898] usb 7-1: SerialNumber: syz [ 52.898926][ T898] usb 7-1: config 0 descriptor?? [ 52.906567][ T6512] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 52.962857][ T6587] sg_write: data in/out 43/14 bytes for SCSI command 0x9-- guessing data in; [ 52.962857][ T6587] program syz.0.272 not setting count and/or reply_len properly [ 53.171470][ T898] appledisplay 7-1:0.0: Error while getting initial brightness: -110 [ 53.177504][ T898] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -110 [ 53.190592][ T898] usb 7-1: USB disconnect, device number 2 [ 53.406145][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 53.440697][ T1018] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 53.590724][ T1018] usb 6-1: Using ep0 maxpacket: 8 [ 53.593842][ T1018] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 53.598348][ T1018] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.601199][ T1018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 53.603305][ T1018] usb 6-1: SerialNumber: syz [ 53.607843][ T1018] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 53.618420][ T6618] Bluetooth: MGMT ver 1.23 [ 53.707363][ T6622] netlink: 32 bytes leftover after parsing attributes in process `syz.3.288'. [ 53.710670][ T6622] Zero length message leads to an empty skb [ 53.715672][ T6624] ucma_write: process 142 (syz.2.289) changed security contexts after opening file descriptor, this is not allowed. [ 53.825473][ T6631] nbd: couldn't find a device at index 127 [ 53.911036][ T5936] Bluetooth: hci2: command tx timeout [ 53.920140][ T5936] Bluetooth: hci1: command tx timeout [ 53.920180][ T67] Bluetooth: hci0: command tx timeout [ 53.927089][ T6640] netlink: 'syz.0.297': attribute type 4 has an invalid length. [ 53.931564][ T6640] netlink: 17 bytes leftover after parsing attributes in process `syz.0.297'. [ 53.990137][ T67] Bluetooth: hci3: command tx timeout [ 54.024083][ T5973] usb 6-1: USB disconnect, device number 3 [ 54.144918][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.305'. [ 54.150801][ T5288] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 54.848904][ T6724] xfrm0: entered allmulticast mode [ 54.951618][ T6737] netlink: 'syz.1.341': attribute type 1 has an invalid length. [ 55.231257][ T6775] sp0: Synchronizing with TNC [ 55.285650][ T6784] xt_hashlimit: size too large, truncated to 1048576 [ 55.441084][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 55.547991][ T6818] pim6reg527: entered allmulticast mode [ 55.550049][ T39] kauditd_printk_skb: 67 callbacks suppressed [ 55.550058][ T39] audit: type=1400 audit(1733401959.679:293): avc: denied { connect } for pid=6815 comm="syz.1.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.556174][ T39] audit: type=1400 audit(1733401959.679:294): avc: denied { name_connect } for pid=6815 comm="syz.1.379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 55.615329][ T6824] syz.3.384: attempt to access beyond end of device [ 55.615329][ T6824] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 55.618902][ T6824] syz.3.384: attempt to access beyond end of device [ 55.618902][ T6824] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 55.623549][ T6824] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 55.626793][ T6824] syz.3.384: attempt to access beyond end of device [ 55.626793][ T6824] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 55.630258][ T6824] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 55.632735][ T6824] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 55.634699][ T6824] UDF-fs: Scanning with blocksize 512 failed [ 55.636850][ T6824] syz.3.384: attempt to access beyond end of device [ 55.636850][ T6824] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 55.640878][ T6824] syz.3.384: attempt to access beyond end of device [ 55.640878][ T6824] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 55.644234][ T6824] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 55.646805][ T6824] syz.3.384: attempt to access beyond end of device [ 55.646805][ T6824] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 55.653823][ T6824] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 55.656368][ T6824] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 55.658317][ T6824] UDF-fs: Scanning with blocksize 1024 failed [ 55.661317][ T6824] syz.3.384: attempt to access beyond end of device [ 55.661317][ T6824] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 55.664801][ T6824] syz.3.384: attempt to access beyond end of device [ 55.664801][ T6824] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 55.669514][ T6824] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 55.672590][ T6824] syz.3.384: attempt to access beyond end of device [ 55.672590][ T6824] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 55.675942][ T6824] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 55.678466][ T6824] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 55.680814][ T6824] UDF-fs: Scanning with blocksize 2048 failed [ 55.682569][ T6824] syz.3.384: attempt to access beyond end of device [ 55.682569][ T6824] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 55.686044][ T6824] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 55.688668][ T6824] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 55.691362][ T6824] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 55.693569][ T6824] UDF-fs: Scanning with blocksize 4096 failed [ 55.695278][ T6824] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 55.755144][ T39] audit: type=1400 audit(1733401959.889:295): avc: denied { listen } for pid=6836 comm="syz.3.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.787041][ T39] audit: type=1400 audit(1733401959.919:296): avc: denied { write } for pid=6836 comm="syz.3.390" lport=41775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.793290][ T39] audit: type=1400 audit(1733401959.919:297): avc: denied { name_connect } for pid=6836 comm="syz.3.390" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 55.829039][ T39] audit: type=1400 audit(1733401959.959:298): avc: denied { shutdown } for pid=6845 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.841668][ T39] audit: type=1400 audit(1733401959.959:299): avc: denied { write } for pid=6845 comm="syz.0.392" path="socket:[11030]" dev="sockfs" ino=11030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.949312][ T39] audit: type=1400 audit(1733401960.079:300): avc: denied { getopt } for pid=6864 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.000123][ T5288] Bluetooth: hci0: command 0x0401 tx timeout [ 56.008165][ T39] audit: type=1400 audit(1733401960.139:301): avc: denied { wake_alarm } for pid=6870 comm="syz.3.402" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.111745][ T6885] netlink: 'syz.3.408': attribute type 10 has an invalid length. [ 56.113930][ T6885] netlink: 'syz.3.408': attribute type 19 has an invalid length. [ 56.116152][ T6885] netlink: 156 bytes leftover after parsing attributes in process `syz.3.408'. [ 56.278893][ T39] audit: type=1400 audit(1733401960.409:302): avc: denied { getopt } for pid=6893 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.283584][ T5288] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 56.470320][ T5288] Bluetooth: hci2: command tx timeout [ 56.473798][ T6913] netlink: 200 bytes leftover after parsing attributes in process `syz.3.422'. [ 56.532557][ T6921] sock: sock_set_timeout: `syz.1.426' (pid 6921) tries to set negative timeout [ 56.617069][ T6930] nbd: illegal input index -1996488704 [ 56.630492][ T1018] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 56.783580][ T1018] usb 5-1: config 0 interface 0 altsetting 18 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 56.787452][ T1018] usb 5-1: config 0 interface 0 altsetting 18 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 56.790751][ T1018] usb 5-1: config 0 interface 0 altsetting 18 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 56.793658][ T1018] usb 5-1: config 0 interface 0 has no altsetting 0 [ 56.798269][ T1018] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 56.802374][ T1018] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.804776][ T1018] usb 5-1: Product: syz [ 56.806317][ T1018] usb 5-1: Manufacturer: syz [ 56.808144][ T1018] usb 5-1: SerialNumber: syz [ 56.813651][ T1018] usb 5-1: config 0 descriptor?? [ 56.815659][ T6902] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 57.033207][ T1018] appledisplay 5-1:0.0: Error while getting initial brightness: -71 [ 57.035815][ T1018] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -71 [ 57.039809][ T1018] usb 5-1: USB disconnect, device number 2 [ 57.041235][ T6986] netlink: 52 bytes leftover after parsing attributes in process `syz.1.456'. [ 57.118255][ T6990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.458'. [ 57.271574][ T7010] netlink: 'syz.1.468': attribute type 27 has an invalid length. [ 57.273699][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.468'. [ 57.299647][ T7017] program syz.3.471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.352037][ T7026] tipc: Started in network mode [ 57.354388][ T7026] tipc: Node identity ac14140f, cluster identity 4711 [ 57.358699][ T7026] tipc: New replicast peer: 10.1.1.2 [ 57.362089][ T7026] tipc: Enabled bearer , priority 10 [ 57.364441][ T7028] netlink: 256 bytes leftover after parsing attributes in process `syz.2.477'. [ 57.446154][ T7046] netlink: 'syz.2.485': attribute type 6 has an invalid length. [ 57.478919][ T7053] VFS: unable to find oldfs superblock on device nbd2 [ 57.744522][ T7101] ======================================================= [ 57.744522][ T7101] WARNING: The mand mount option has been deprecated and [ 57.744522][ T7101] and is ignored by this kernel. Remove the mand [ 57.744522][ T7101] option from the mount to silence this warning. [ 57.744522][ T7101] ======================================================= [ 57.821979][ T7113] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 57.824395][ T7113] overlayfs: missing 'lowerdir' [ 58.491484][ T65] tipc: Node number set to 2886997007 [ 59.011341][ T7197] __nla_validate_parse: 2 callbacks suppressed [ 59.011357][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 59.066135][ T7202] vim2m vim2m.0: vidioc_s_fmt queue busy [ 59.163254][ T7213] netlink: 44 bytes leftover after parsing attributes in process `syz.3.566'. [ 59.201585][ T7216] netlink: 40 bytes leftover after parsing attributes in process `syz.3.568'. [ 59.321315][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'. [ 59.394072][ T7231] usb usb7: usbfs: interface 0 claimed by hub while 'syz.3.575' resets device [ 59.457532][ T7235] rdma_op ffff888023c8e1f0 conn xmit_rdma 0000000000000000 [ 59.470354][ T898] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 59.556101][ T7241] netlink: 20 bytes leftover after parsing attributes in process `syz.3.580'. [ 59.583209][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 59.586738][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.581'. [ 59.589419][ T7243] netlink: 'syz.3.581': attribute type 20 has an invalid length. [ 59.640114][ T898] usb 5-1: Using ep0 maxpacket: 32 [ 59.645302][ T898] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 59.648332][ T898] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 59.652191][ T898] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 59.655454][ T898] usb 5-1: config 1 has no interface number 0 [ 59.657717][ T898] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 59.663470][ T898] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 59.668177][ T898] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 59.671742][ T898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.681153][ T898] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 59.791057][ T7255] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.586'. [ 59.796434][ T7255] openvswitch: netlink: Missing key (keys=40, expected=80) [ 59.888869][ T7261] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 59.916175][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'. [ 59.918584][ T7264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.591'. [ 60.030065][ T7277] IPVS: sync thread started: state = BACKUP, mcast_ifn = vxcan1, syncid = 3, id = 0 [ 60.030428][ T7276] IPVS: stopping backup sync thread 7277 ... [ 60.085176][ T898] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 60.285913][ T35] usb 5-1: USB disconnect, device number 3 [ 60.289086][ T35] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 60.301963][ T7306] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 60.301963][ T7306] program syz.1.610 not setting count and/or reply_len properly [ 60.310203][ T67] Bluetooth: hci3: command 0x0405 tx timeout [ 60.566422][ T7340] syz.3.627 uses obsolete (PF_INET,SOCK_PACKET) [ 60.599760][ T39] kauditd_printk_skb: 27 callbacks suppressed [ 60.599776][ T39] audit: type=1400 audit(1733401964.729:330): avc: denied { bind } for pid=7343 comm="syz.3.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 60.725782][ T7358] gfs2: path_lookup on ™6(ï+‰d‹QÌnB´!eU‚çVè!š`:Ñ 8×DSEíÄðÃÄèÎ Áy|YT¢®{-€íê°”,mb/ returned error -2 [ 60.955871][ T7386] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 60.960108][ T7386] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 60.970655][ T7386] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 60.973770][ T7386] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 61.268736][ T7410] sp0: Synchronizing with TNC [ 61.274316][ T7410] sp0: Found TNC [ 61.611400][ T7428] nbd: must specify a device to reconfigure [ 61.668647][ T39] audit: type=1400 audit(1733401965.799:331): avc: denied { connect } for pid=7429 comm="syz.0.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.686573][ T39] audit: type=1400 audit(1733401965.809:332): avc: denied { shutdown } for pid=7429 comm="syz.0.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.777334][ T7434] mkiss: ax0: crc mode is auto. [ 61.865878][ T39] audit: type=1400 audit(1733401965.999:333): avc: denied { read append } for pid=7439 comm="syz.0.675" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 61.880052][ T39] audit: type=1400 audit(1733401966.009:334): avc: denied { ioctl open } for pid=7439 comm="syz.0.675" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 62.146057][ T7464] overlayfs: missing 'lowerdir' [ 62.268309][ T7476] 9pnet_fd: p9_fd_create_unix (7476): problem connecting socket: éq‰Y’3aK: -111 [ 62.302732][ T39] audit: type=1400 audit(1733401966.439:335): avc: denied { setopt } for pid=7477 comm="syz.0.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.307865][ T39] audit: type=1400 audit(1733401966.439:336): avc: denied { write } for pid=7477 comm="syz.0.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.339291][ T7483] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 62.361709][ T7484] usb usb4: usbfs: process 7484 (syz.0.696) did not claim interface 0 before use [ 62.440911][ T7499] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 62.448936][ T7499] CIFS: Unable to determine destination address [ 62.611702][ T39] audit: type=1400 audit(1733401966.749:337): avc: denied { setattr } for pid=7514 comm="syz.0.709" name="/" dev="9p" ino=38535236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.648675][ T39] audit: type=1400 audit(1733401966.779:338): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 62.712990][ T39] audit: type=1400 audit(1733401966.849:339): avc: denied { create } for pid=7527 comm="syz.1.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 63.163307][ T7588] can0: slcan on ttynull. [ 63.242383][ T7586] can0 (unregistered): slcan off ttynull. [ 63.570741][ T7622] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 63.637999][ T7629] CUSE: zero length info key specified [ 63.815363][ T7657] netlink: 'syz.1.779': attribute type 12 has an invalid length. [ 63.874814][ T7668] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 64.044354][ T7693] __nla_validate_parse: 8 callbacks suppressed [ 64.044364][ T7693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.796'. [ 64.048943][ T7693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.796'. [ 64.218180][ T7723] tmpfs: Bad value for 'mpol' [ 64.300530][ T7738] sctp: [Deprecated]: syz.3.816 (pid 7738) Use of struct sctp_assoc_value in delayed_ack socket option. [ 64.300530][ T7738] Use struct sctp_sack_info instead [ 64.341385][ T7744] program syz.0.817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.407086][ T7753] program syz.0.823 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.410115][ T7753] ata1.00: invalid command format 0 [ 64.516400][ T7768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.830'. [ 64.754067][ T7781] Bluetooth: MGMT ver 1.23 [ 65.225100][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'. [ 65.232940][ T7802] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 65.287314][ T7808] netlink: 'syz.0.849': attribute type 10 has an invalid length. [ 65.517075][ T7830] bio_check_eod: 8 callbacks suppressed [ 65.517086][ T7830] syz.1.860: attempt to access beyond end of device [ 65.517086][ T7830] loop1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 65.528938][ T7830] VFS: unable to read V7 FS superblock on device loop1. [ 65.530876][ T7830] VFS: could not find a valid V7 on loop1. [ 65.539445][ T7832] sp0: Synchronizing with TNC [ 65.600055][ T8] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 65.752002][ T8] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 65.754268][ T8] usb 8-1: config 0 has no interface number 0 [ 65.755966][ T8] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 65.758797][ T8] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 65.762468][ T8] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 65.765651][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.772761][ T8] usb 8-1: config 0 descriptor?? [ 65.775020][ T7816] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 65.782900][ T8] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 65.802776][ T39] kauditd_printk_skb: 15 callbacks suppressed [ 65.802787][ T39] audit: type=1400 audit(1733401969.934:355): avc: denied { create } for pid=7862 comm="syz.0.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 65.805906][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'. [ 65.809682][ T39] audit: type=1400 audit(1733401969.934:356): avc: denied { write } for pid=7862 comm="syz.0.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 65.885283][ T7867] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 65.887991][ T7867] UDF-fs: Scanning with blocksize 2048 failed [ 65.891370][ T7867] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 65.893559][ T7867] UDF-fs: Scanning with blocksize 4096 failed [ 65.938128][ T39] audit: type=1400 audit(1733401970.064:357): avc: denied { append } for pid=7870 comm="syz.0.880" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 65.939740][ T7871] sg_write: process 487 (syz.0.880) changed security contexts after opening file descriptor, this is not allowed. [ 65.978062][ T39] audit: type=1400 audit(1733401970.104:358): avc: denied { getopt } for pid=7875 comm="syz.0.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.996566][ T8] usb 8-1: USB disconnect, device number 2 [ 66.274372][ T7905] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 66.276301][ T7905] [U] J"—e:ÀÆ" [ 66.333272][ T39] audit: type=1400 audit(1733401970.464:359): avc: denied { read write } for pid=7908 comm="syz.1.898" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.340870][ T39] audit: type=1400 audit(1733401970.464:360): avc: denied { open } for pid=7908 comm="syz.1.898" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.535003][ T7919] pimreg4: entered allmulticast mode [ 66.640058][ T39] audit: type=1400 audit(1733401970.764:361): avc: denied { bind } for pid=7932 comm="syz.1.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 66.644963][ T39] audit: type=1400 audit(1733401970.774:362): avc: denied { getopt } for pid=7932 comm="syz.1.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 66.810098][ T5973] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 66.884861][ T39] audit: type=1400 audit(1733401971.014:363): avc: denied { create } for pid=7947 comm="syz.0.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 66.892423][ T39] audit: type=1400 audit(1733401971.014:364): avc: denied { listen } for pid=7947 comm="syz.0.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 66.967979][ T5973] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.968005][ T5973] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 66.974871][ T5973] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 66.974894][ T5973] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.976362][ T5973] usb 8-1: config 0 descriptor?? [ 66.979436][ T5973] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 66.988306][ T5973] dvb-usb: bulk message failed: -22 (3/0) [ 67.001406][ T5973] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 67.002894][ T5973] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 67.007351][ T5973] usb 8-1: media controller created [ 67.008764][ T5973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 67.019604][ T5973] dvb-usb: bulk message failed: -22 (6/0) [ 67.022053][ T5973] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 67.026840][ T5973] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input7 [ 67.036454][ T5973] dvb-usb: schedule remote query interval to 150 msecs. [ 67.038958][ T5973] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 67.183340][ T7925] dvb-usb: bulk message failed: -22 (2/0) [ 67.186449][ T65] usb 8-1: USB disconnect, device number 3 [ 67.210353][ T65] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 67.216618][ T7959] [U]  [ 67.340556][ T7971] CIFS mount error: No usable UNC path provided in device string! [ 67.340556][ T7971] [ 67.344147][ T7971] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 67.933194][ T8045] overlayfs: conflicting lowerdir path [ 67.988111][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'. [ 68.016225][ T8053] netlink: 144 bytes leftover after parsing attributes in process `syz.3.967'. [ 68.040216][ T8056] usb usb8: usbfs: process 8056 (syz.0.969) did not claim interface 0 before use [ 68.097017][ T8063] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 68.099560][ T8063] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 68.107880][ T8063] vhci_hcd vhci_hcd.0: Device attached [ 68.279039][ T8081] cifs: Bad value for 'port' [ 68.280134][ T1018] vhci_hcd: vhci_device speed not set [ 68.340556][ T1018] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 68.381182][ T35] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 68.412837][ T8097] program syz.3.988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.547849][ T35] usb 5-1: config 0 has no interfaces? [ 68.547879][ T35] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 68.547899][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.557474][ T35] usb 5-1: config 0 descriptor?? [ 68.741241][ T8140] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 68.761040][ T8064] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 68.762099][ T5973] usb 5-1: USB disconnect, device number 4 [ 68.764322][ T12] vhci_hcd: stop threads [ 68.765658][ T12] vhci_hcd: release socket [ 68.767218][ T12] vhci_hcd: disconnect device [ 68.789053][ T8146] vivid-003: disconnect [ 68.792442][ T8145] vivid-003: reconnect [ 68.913944][ T8160] tipc: Enabling not permitted [ 68.915433][ T8160] tipc: Enabling of bearer rejected, failed to enable media [ 69.086899][ T8175] ALSA: mixer_oss: invalid index 100000 [ 69.155843][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1027'. [ 69.158152][ T8184] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1027'. [ 69.295273][ T8200] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1034'. [ 69.432002][ T8225] sg_write: data in/out 131036/70 bytes for SCSI command 0x0-- guessing data in; [ 69.432002][ T8225] program syz.0.1047 not setting count and/or reply_len properly [ 69.523518][ T8241] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.1055'. [ 69.763420][ T8276] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 69.763420][ T8276] The task syz.0.1070 (8276) triggered the difference, watch for misbehavior. [ 69.778916][ T8280] sp0: Synchronizing with TNC [ 69.781415][ T8278] [U] è [ 69.965124][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'. [ 69.968559][ T8298] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1083'. [ 70.035415][ T8304] random: crng reseeded on system resumption [ 70.242461][ T8315] tipc: Enabling of bearer rejected, media not registered [ 70.693149][ T8341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 70.885887][ T8370] Illegal XDP return value 4294967274 on prog (id 49) dev N/A, expect packet loss! [ 70.913608][ T8373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1118'. [ 71.114221][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.116085][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.150655][ T39] kauditd_printk_skb: 21 callbacks suppressed [ 72.150666][ T39] audit: type=1400 audit(1733401976.284:386): avc: denied { map } for pid=8427 comm="syz.1.1145" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.291121][ T5288] Bluetooth: hci3: unexpected event for opcode 0x200d [ 72.710103][ T57] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 72.863312][ T57] usb 6-1: Using ep0 maxpacket: 32 [ 72.868247][ T57] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 72.873482][ T57] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 72.877601][ T57] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.888129][ T57] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 72.891828][ T57] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 72.894969][ T57] usb 6-1: Product: syz [ 72.897591][ T57] usb 6-1: Manufacturer: syz [ 72.899443][ T57] usb 6-1: SerialNumber: syz [ 72.909657][ T8453] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 72.917102][ T57] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input8 [ 72.989603][ T39] audit: type=1400 audit(1733401977.114:387): avc: denied { execute } for pid=8457 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 72.998518][ T39] audit: type=1400 audit(1733401977.114:388): avc: denied { execute_no_trans } for pid=8457 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 73.010462][ C3] appletouch 6-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 73.116986][ T39] audit: type=1400 audit(1733401977.244:389): avc: denied { read } for pid=8452 comm="syz.1.1157" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 73.118624][ T67] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.123413][ T39] audit: type=1400 audit(1733401977.244:390): avc: denied { open } for pid=8452 comm="syz.1.1157" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 73.139436][ T67] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.143008][ T67] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.147556][ T67] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.149750][ T67] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.154618][ T67] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.161312][ T39] audit: type=1400 audit(1733401977.294:391): avc: denied { mounton } for pid=8462 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 73.190828][ T8] usb 6-1: USB disconnect, device number 4 [ 73.203958][ T8] appletouch 6-1:1.0: input: appletouch disconnected [ 73.258455][ T8462] chnl_net:caif_netlink_parms(): no params data found [ 73.314607][ T8473] program syz.0.1163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.375063][ T39] audit: type=1400 audit(1733401977.504:392): avc: denied { connect } for pid=8474 comm="syz.0.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.383652][ T39] audit: type=1400 audit(1733401977.504:393): avc: denied { write } for pid=8474 comm="syz.0.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.406970][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.433995][ T1018] vhci_hcd: vhci_device speed not set [ 73.452595][ T8462] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.454556][ T8462] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.456979][ T8462] bridge_slave_0: entered allmulticast mode [ 73.459576][ T8462] bridge_slave_0: entered promiscuous mode [ 73.462720][ T8462] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.465282][ T8462] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.468157][ T8462] bridge_slave_1: entered allmulticast mode [ 73.471962][ T8462] bridge_slave_1: entered promiscuous mode [ 73.488336][ T8483] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1168'. [ 73.555258][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.583765][ T8462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.592467][ T8462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.628995][ T8462] team0: Port device team_slave_0 added [ 73.633057][ T8462] team0: Port device team_slave_1 added [ 73.664403][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.686721][ T8462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.688741][ T8462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.695786][ T8462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.699613][ T8462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.702569][ T8462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.709602][ T8462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.772869][ T8502] devtmpfs: Bad value for 'mpol' [ 73.778137][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.781894][ T39] audit: type=1400 audit(1733401977.904:394): avc: denied { mount } for pid=8501 comm="syz.1.1178" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 73.798765][ T39] audit: type=1400 audit(1733401977.904:395): avc: denied { remount } for pid=8501 comm="syz.1.1178" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 73.812657][ T8462] hsr_slave_0: entered promiscuous mode [ 73.818452][ T8462] hsr_slave_1: entered promiscuous mode [ 73.834710][ T8462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.837442][ T8462] Cannot create hsr debugfs directory [ 74.014486][ T12] bridge_slave_1: left allmulticast mode [ 74.016742][ T12] bridge_slave_1: left promiscuous mode [ 74.019420][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.044928][ T12] bridge_slave_0: left allmulticast mode [ 74.047047][ T12] bridge_slave_0: left promiscuous mode [ 74.050684][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.202132][ C0] vkms_vblank_simulate: vblank timer overrun [ 74.581531][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.647074][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.652236][ T12] bond0 (unregistering): Released all slaves [ 74.748571][ T8462] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.192139][ T5288] Bluetooth: hci4: command tx timeout [ 75.541626][ T8462] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.606557][ T8462] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.613284][ T8462] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.665684][ T8577] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.719459][ T8582] nbd: couldn't find a device at index 127 [ 75.743651][ T8462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.753624][ T8462] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.758678][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.761361][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.779679][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.782770][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.806077][ T12] hsr_slave_0: left promiscuous mode [ 75.809601][ T12] hsr_slave_1: left promiscuous mode [ 75.815350][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.818033][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.824518][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.827242][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.854761][ T8598] support for cryptoloop has been removed. Use dm-crypt instead. [ 75.866667][ T12] veth1_macvtap: left promiscuous mode [ 75.869131][ T12] veth0_macvtap: left promiscuous mode [ 75.871360][ T12] veth1_vlan: left promiscuous mode [ 75.872934][ T12] veth0_vlan: left allmulticast mode [ 75.875393][ T12] veth0_vlan: left promiscuous mode [ 75.892078][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1225'. [ 75.894760][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1225'. [ 75.897164][ T8601] netlink: 'syz.3.1225': attribute type 5 has an invalid length. [ 76.057992][ T12] vlan0 (unregistering): left allmulticast mode [ 76.062523][ T12] team0 (unregistering): Port device vlan0 removed [ 76.571512][ T12] team_slave_1 (unregistering): left allmulticast mode [ 76.575333][ T12] team0 (unregistering): Port device team_slave_1 removed [ 76.634435][ T12] team_slave_0 (unregistering): left allmulticast mode [ 76.637177][ T12] team0 (unregistering): Port device team_slave_0 removed [ 77.235854][ T12] team0 (unregistering): left allmulticast mode [ 77.271733][ T5288] Bluetooth: hci4: command tx timeout [ 77.331299][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 77.331315][ T39] audit: type=1400 audit(1733401981.464:400): avc: denied { remount } for pid=8610 comm="syz.0.1228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.453019][ T8462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.685879][ T12] IPVS: stop unused estimator thread 0... [ 77.704993][ T8462] veth0_vlan: entered promiscuous mode [ 77.710882][ T8462] veth1_vlan: entered promiscuous mode [ 77.741821][ T8462] veth0_macvtap: entered promiscuous mode [ 77.745894][ T8462] veth1_macvtap: entered promiscuous mode [ 77.756541][ T8462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.762383][ T8462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.765684][ T8462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.769243][ T8462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.774980][ T8462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.778564][ T8462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.784820][ T8462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.793589][ T8462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.797188][ T8462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.801346][ T8462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.804918][ T8462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.807991][ T8462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.812939][ T8462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.817181][ T8462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.829028][ T8462] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.832031][ T8462] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.834626][ T8462] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.837523][ T8462] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.875398][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.878039][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.903002][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.905738][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.917481][ T39] audit: type=1400 audit(1733401982.044:401): avc: denied { mounton } for pid=8462 comm="syz-executor" path="/syzkaller.0sRPq7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 78.076451][ T8686] vim2m vim2m.0: vidioc_s_fmt queue busy [ 78.082600][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1257'. [ 78.130442][ T8692] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1259'. [ 78.309488][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'. [ 78.695720][ C3] ================================================================== [ 78.698695][ C3] BUG: KASAN: slab-out-of-bounds in selinux_ip_output+0x1e0/0x1f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 78.701816][ C3] Read of size 8 at addr ffff88804d292498 by task syz.1.1286/8734 [ 78.707412][ C3] [ 78.708379][ C3] CPU: 3 UID: 0 PID: 8734 Comm: syz.1.1286 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 78.709616][ T8736] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1279'. [ 78.712386][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.712403][ C3] Call Trace: [ 78.712410][ C3] [ 78.712418][ C3] dump_stack_lvl+0x116/0x1f0 [ 78.712460][ C3] print_report+0xc3/0x620 [ 78.712485][ C3] ? __virt_addr_valid+0x5e/0x590 [ 78.712510][ C3] ? __phys_addr+0xc6/0x150 [ 78.712535][ C3] kasan_report+0xd9/0x110 [ 78.712556][ C3] ? selinux_ip_output+0x1e0/0x1f0 [ 78.718664][ T8736] openvswitch: netlink: Missing key (keys=40, expected=80) [ 78.719436][ C3] ? selinux_ip_output+0x1e0/0x1f0 [ 78.736462][ C3] selinux_ip_output+0x1e0/0x1f0 [ 78.738053][ C3] ? __pfx_selinux_ip_output+0x10/0x10 [ 78.740509][ C3] nf_hook_slow+0xbb/0x200 [ 78.752339][ C3] nf_hook+0x386/0x6d0 [ 78.754067][ C3] ? __pfx_dst_output+0x10/0x10 [ 78.758011][ C3] ? __pfx_nf_hook+0x10/0x10 [ 78.760811][ C3] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 78.763899][ C3] ? __pfx_ip_reply_glue_bits+0x10/0x10 [ 78.766629][ C3] ? __pfx_dst_output+0x10/0x10 [ 78.768817][ C3] ? __ip_make_skb+0x1150/0x1d00 [ 78.771507][ C3] ? do_csum+0x26f/0x2d0 [ 78.774413][ C3] __ip_local_out+0x339/0x640 [ 78.776840][ C3] ? __pfx_dst_output+0x10/0x10 [ 78.779462][ C3] ip_push_pending_frames+0xa0/0x5b0 [ 78.782066][ C3] ip_send_unicast_reply+0xd0e/0x1650 [ 78.784695][ C3] ? __pfx_ip_send_unicast_reply+0x10/0x10 [ 78.786920][ C3] ? __pfx___dev_queue_xmit+0x10/0x10 [ 78.788977][ C3] ? __lock_acquire+0xcc5/0x3c40 [ 78.790803][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 78.792886][ C3] ? mark_lock+0xb5/0xc60 [ 78.794477][ C3] ? tcp_v4_send_reset+0xd35/0x2f20 [ 78.796494][ C3] tcp_v4_send_reset+0x129b/0x2f20 [ 78.798372][ C3] ? hlock_class+0x4e/0x130 [ 78.800058][ C3] ? __pfx_tcp_v4_send_reset+0x10/0x10 [ 78.802024][ C3] ? tcp_parse_options+0x1f5/0x11b0 [ 78.803953][ C3] ? __pfx_tcp_timewait_state_process+0x10/0x10 [ 78.806075][ C3] ? __asan_memmove+0x3c/0x60 [ 78.807590][ C3] ? tcp_v4_rcv+0x3715/0x4380 [ 78.809234][ C3] tcp_v4_rcv+0x3715/0x4380 [ 78.811012][ C3] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 78.812989][ C3] ? __pfx_raw_local_deliver+0x10/0x10 [ 78.815163][ C3] ? rcu_is_watching+0x12/0xc0 [ 78.816940][ C3] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 78.818715][ C3] ip_protocol_deliver_rcu+0xba/0x4c0 [ 78.820679][ C3] ip_local_deliver_finish+0x316/0x570 [ 78.822654][ C3] ip_local_deliver+0x18e/0x1f0 [ 78.824442][ C3] ? __pfx_ip_local_deliver+0x10/0x10 [ 78.826617][ C3] ip_rcv+0x2c3/0x5d0 [ 78.828173][ C3] ? __pfx_ip_rcv+0x10/0x10 [ 78.830178][ C3] __netif_receive_skb_one_core+0x199/0x1e0 [ 78.832959][ C3] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 78.835570][ C3] ? rcu_is_watching+0x12/0xc0 [ 78.837432][ C3] ? process_backlog+0x3f1/0x15f0 [ 78.839283][ C3] ? process_backlog+0x3f1/0x15f0 [ 78.841148][ C3] __netif_receive_skb+0x1d/0x160 [ 78.843015][ C3] process_backlog+0x443/0x15f0 [ 78.844821][ C3] __napi_poll.constprop.0+0xb7/0x550 [ 78.846798][ C3] net_rx_action+0xa94/0x1010 [ 78.848542][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 78.850490][ C3] ? __pfx_mark_lock+0x10/0x10 [ 78.852256][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 78.854151][ C3] ? kvm_sched_clock_read+0x11/0x20 [ 78.856049][ C3] ? sched_clock+0x38/0x60 [ 78.857662][ C3] ? sched_clock_cpu+0x6d/0x4d0 [ 78.859523][ C3] ? mark_held_locks+0x9f/0xe0 [ 78.861381][ C3] handle_softirqs+0x213/0x8f0 [ 78.863199][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 78.865124][ C3] ? irqtime_account_irq+0x18d/0x2e0 [ 78.867003][ C3] ? __dev_queue_xmit+0x89b/0x43e0 [ 78.868859][ C3] do_softirq+0xb2/0xf0 [ 78.870375][ C3] [ 78.871458][ C3] [ 78.872544][ C3] __local_bh_enable_ip+0x100/0x120 [ 78.874414][ C3] ? __dev_queue_xmit+0x89b/0x43e0 [ 78.876263][ C3] __dev_queue_xmit+0x8b0/0x43e0 [ 78.878062][ C3] ? hlock_class+0x4e/0x130 [ 78.879741][ C3] ? __lock_acquire+0x15a9/0x3c40 [ 78.881603][ C3] ? __pfx___dev_queue_xmit+0x10/0x10 [ 78.883600][ C3] ? hlock_class+0x4e/0x130 [ 78.885327][ C3] ? mark_lock+0xb5/0xc60 [ 78.886976][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 78.888951][ C3] ? selinux_ip_postroute+0x73b/0xde0 [ 78.890947][ C3] ? __pfx_mark_lock+0x10/0x10 [ 78.892697][ C3] ? find_held_lock+0x2d/0x110 [ 78.894449][ C3] ? __ip_finish_output+0x49e/0x950 [ 78.896353][ C3] ? __pfx_lock_release+0x10/0x10 [ 78.898185][ C3] ? mark_held_locks+0x9f/0xe0 [ 78.899920][ C3] ip_finish_output2+0xc6c/0x2150 [ 78.901759][ C3] ? __pfx_ip_finish_output2+0x10/0x10 [ 78.903795][ C3] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 78.905708][ C3] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 78.907789][ C3] __ip_finish_output+0x49e/0x950 [ 78.909798][ C3] ip_finish_output+0x35/0x380 [ 78.911425][ C3] ip_output+0x13b/0x2a0 [ 78.912985][ C3] ? __pfx_ip_output+0x10/0x10 [ 78.914741][ C3] ip_local_out+0x33e/0x4a0 [ 78.916407][ C3] __ip_queue_xmit+0x777/0x1970 [ 78.918182][ C3] ? __pfx_ip_queue_xmit+0x10/0x10 [ 78.920044][ C3] __tcp_transmit_skb+0x2b39/0x3df0 [ 78.921910][ C3] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 78.923893][ C3] ? __pfx_lock_release+0x10/0x10 [ 78.925723][ C3] ? ktime_get+0x206/0x300 [ 78.927375][ C3] tcp_write_xmit+0x12b1/0x8560 [ 78.929178][ C3] ? mptcp_sched_get_send+0x378/0x6e0 [ 78.931122][ C3] __tcp_push_pending_frames+0xaf/0x390 [ 78.933121][ C3] tcp_push+0x221/0x6f0 [ 78.934624][ C3] mptcp_push_release.isra.0+0xa8/0xe0 [ 78.936583][ C3] __mptcp_push_pending+0x400/0x560 [ 78.938479][ C3] ? __pfx___mptcp_push_pending+0x10/0x10 [ 78.940551][ C3] ? __virt_addr_valid+0x5e/0x590 [ 78.942393][ C3] ? const_folio_flags.constprop.0+0x56/0x150 [ 78.944565][ C3] ? __phys_addr_symbol+0x30/0x80 [ 78.946180][ C3] ? __check_object_size+0x488/0x710 [ 78.947892][ C3] mptcp_sendmsg+0xce5/0x1f20 [ 78.949612][ C3] ? selinux_socket_post_create+0x721/0x7f0 [ 78.951761][ C3] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 78.953610][ C3] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 78.955455][ C3] inet_sendmsg+0x119/0x140 [ 78.957116][ C3] ____sys_sendmsg+0x98c/0xc90 [ 78.958860][ C3] ? copy_msghdr_from_user+0x10b/0x160 [ 78.960844][ C3] ? __pfx_____sys_sendmsg+0x10/0x10 [ 78.962763][ C3] ___sys_sendmsg+0x135/0x1e0 [ 78.964482][ C3] ? __pfx____sys_sendmsg+0x10/0x10 [ 78.966408][ C3] ? __pfx_lock_release+0x10/0x10 [ 78.968240][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 78.970138][ C3] ? __fget_files+0x206/0x3a0 [ 78.971847][ C3] __sys_sendmsg+0x16e/0x220 [ 78.973535][ C3] ? __pfx___sys_sendmsg+0x10/0x10 [ 78.975369][ C3] ? __x64_sys_futex+0x1e1/0x4c0 [ 78.977179][ C3] do_syscall_64+0xcd/0x250 [ 78.978855][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.981121][ C3] RIP: 0033:0x7f1a0997ff19 [ 78.982797][ C3] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.989644][ C3] RSP: 002b:00007f1a0a767058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.992604][ C3] RAX: ffffffffffffffda RBX: 00007f1a09b45fa0 RCX: 00007f1a0997ff19 [ 78.995432][ C3] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000003 [ 78.998270][ C3] RBP: 00007f1a099f3986 R08: 0000000000000000 R09: 0000000000000000 [ 79.001110][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.003944][ C3] R13: 0000000000000000 R14: 00007f1a09b45fa0 R15: 00007fff923e52a8 [ 79.006754][ C3] [ 79.007880][ C3] [ 79.008672][ C3] The buggy address belongs to the object at ffff88804d292420 [ 79.008672][ C3] which belongs to the cache tw_sock_TCPv6 of size 288 [ 79.013527][ C3] The buggy address is located 120 bytes inside of [ 79.013527][ C3] allocated 288-byte region [ffff88804d292420, ffff88804d292540) [ 79.018569][ C3] [ 79.019475][ C3] The buggy address belongs to the physical page: [ 79.021843][ C3] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4d292 [ 79.024998][ C3] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 79.028022][ C3] memcg:ffff888028219901 [ 79.029547][ C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 79.032191][ C3] page_type: f5(slab) [ 79.033665][ C3] raw: 00fff00000000040 ffff888024483a40 dead000000000122 0000000000000000 [ 79.036718][ C3] raw: 0000000000000000 0000000080170017 00000001f5000000 ffff888028219901 [ 79.039786][ C3] head: 00fff00000000040 ffff888024483a40 dead000000000122 0000000000000000 [ 79.042899][ C3] head: 0000000000000000 0000000080170017 00000001f5000000 ffff888028219901 [ 79.045790][ C3] head: 00fff00000000001 ffffea000134a481 ffffffffffffffff 0000000000000000 [ 79.048671][ C3] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 79.051552][ C3] page dumped because: kasan: bad access detected [ 79.053921][ C3] page_owner tracks the page as allocated [ 79.055866][ C3] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 34, tgid 34 (ksoftirqd/3), ts 78690369290, free_ts 78379089533 [ 79.062440][ C3] post_alloc_hook+0x2d1/0x350 [ 79.064197][ C3] get_page_from_freelist+0xfce/0x2f80 [ 79.066158][ C3] __alloc_pages_noprof+0x223/0x25b0 [ 79.067914][ C3] alloc_pages_mpol_noprof+0x2c9/0x610 [ 79.069635][ C3] new_slab+0x2c9/0x410 [ 79.070953][ C3] ___slab_alloc+0xdac/0x1870 [ 79.072604][ C3] __slab_alloc.constprop.0+0x56/0xb0 [ 79.074543][ C3] kmem_cache_alloc_noprof+0xfa/0x3d0 [ 79.076490][ C3] inet_twsk_alloc+0x120/0x970 [ 79.078230][ C3] tcp_time_wait+0x5f/0xe10 [ 79.079895][ C3] tcp_rcv_state_process+0x4935/0x4c40 [ 79.081860][ C3] tcp_v4_do_rcv+0x1ad/0xa90 [ 79.083558][ C3] tcp_v4_rcv+0x33a0/0x4380 [ 79.085209][ C3] ip_protocol_deliver_rcu+0xba/0x4c0 [ 79.087159][ C3] ip_local_deliver_finish+0x316/0x570 [ 79.089134][ C3] ip_local_deliver+0x18e/0x1f0 [ 79.090900][ C3] page last free pid 8702 tgid 8702 stack trace: [ 79.093149][ C3] free_unref_page+0x661/0x1080 [ 79.094915][ C3] __mmdrop+0xd5/0x460 [ 79.096399][ C3] __mmput+0x404/0x4c0 [ 79.097851][ C3] mmput+0x62/0x70 [ 79.099232][ C3] do_exit+0x9bf/0x2d70 [ 79.100754][ C3] __x64_sys_exit+0x42/0x50 [ 79.102399][ C3] x64_sys_call+0xe97/0x1720 [ 79.104082][ C3] do_syscall_64+0xcd/0x250 [ 79.105661][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.107753][ C3] [ 79.108567][ C3] Memory state around the buggy address: [ 79.110589][ C3] ffff88804d292380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.113515][ C3] ffff88804d292400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.116459][ C3] >ffff88804d292480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.119379][ C3] ^ [ 79.121151][ C3] ffff88804d292500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.124025][ C3] ffff88804d292580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.126900][ C3] ================================================================== [ 79.129956][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 79.132541][ C3] CPU: 3 UID: 0 PID: 8734 Comm: syz.1.1286 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 79.136291][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.140296][ C3] Call Trace: [ 79.141518][ C3] [ 79.142574][ C3] dump_stack_lvl+0x3d/0x1f0 [ 79.144410][ C3] panic+0x71d/0x800 [ 79.146064][ C3] ? mark_held_locks+0x9f/0xe0 [ 79.148155][ C3] ? __pfx_panic+0x10/0x10 [ 79.149839][ C3] ? irqentry_exit+0x3b/0x90 [ 79.151582][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.153524][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 79.155361][ C3] check_panic_on_warn+0xab/0xb0 [ 79.157160][ C3] end_report+0x117/0x180 [ 79.158755][ C3] kasan_report+0xe9/0x110 [ 79.160390][ C3] ? selinux_ip_output+0x1e0/0x1f0 [ 79.162254][ C3] ? selinux_ip_output+0x1e0/0x1f0 [ 79.164121][ C3] selinux_ip_output+0x1e0/0x1f0 [ 79.165917][ C3] ? __pfx_selinux_ip_output+0x10/0x10 [ 79.167904][ C3] nf_hook_slow+0xbb/0x200 [ 79.169683][ C3] nf_hook+0x386/0x6d0 [ 79.171177][ C3] ? __pfx_dst_output+0x10/0x10 [ 79.172952][ C3] ? __pfx_nf_hook+0x10/0x10 [ 79.174634][ C3] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 79.176792][ C3] ? __pfx_ip_reply_glue_bits+0x10/0x10 [ 79.178749][ C3] ? __pfx_dst_output+0x10/0x10 [ 79.180636][ C3] ? __ip_make_skb+0x1150/0x1d00 [ 79.182448][ C3] ? do_csum+0x26f/0x2d0 [ 79.184012][ C3] __ip_local_out+0x339/0x640 [ 79.185757][ C3] ? __pfx_dst_output+0x10/0x10 [ 79.187625][ C3] ip_push_pending_frames+0xa0/0x5b0 [ 79.189557][ C3] ip_send_unicast_reply+0xd0e/0x1650 [ 79.191589][ C3] ? __pfx_ip_send_unicast_reply+0x10/0x10 [ 79.193792][ C3] ? __pfx___dev_queue_xmit+0x10/0x10 [ 79.195855][ C3] ? __lock_acquire+0xcc5/0x3c40 [ 79.197617][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 79.199434][ C3] ? mark_lock+0xb5/0xc60 [ 79.201015][ C3] ? tcp_v4_send_reset+0xd35/0x2f20 [ 79.202919][ C3] tcp_v4_send_reset+0x129b/0x2f20 [ 79.204795][ C3] ? hlock_class+0x4e/0x130 [ 79.206507][ C3] ? __pfx_tcp_v4_send_reset+0x10/0x10 [ 79.208520][ C3] ? tcp_parse_options+0x1f5/0x11b0 [ 79.210400][ C3] ? __pfx_tcp_timewait_state_process+0x10/0x10 [ 79.212648][ C3] ? __asan_memmove+0x3c/0x60 [ 79.214352][ C3] ? tcp_v4_rcv+0x3715/0x4380 [ 79.216060][ C3] tcp_v4_rcv+0x3715/0x4380 [ 79.217715][ C3] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 79.219449][ C3] ? __pfx_raw_local_deliver+0x10/0x10 [ 79.221457][ C3] ? rcu_is_watching+0x12/0xc0 [ 79.223232][ C3] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 79.225027][ C3] ip_protocol_deliver_rcu+0xba/0x4c0 [ 79.226910][ C3] ip_local_deliver_finish+0x316/0x570 [ 79.228813][ C3] ip_local_deliver+0x18e/0x1f0 [ 79.230518][ C3] ? __pfx_ip_local_deliver+0x10/0x10 [ 79.232474][ C3] ip_rcv+0x2c3/0x5d0 [ 79.233937][ C3] ? __pfx_ip_rcv+0x10/0x10 [ 79.235581][ C3] __netif_receive_skb_one_core+0x199/0x1e0 [ 79.237750][ C3] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 79.240066][ C3] ? rcu_is_watching+0x12/0xc0 [ 79.241902][ C3] ? process_backlog+0x3f1/0x15f0 [ 79.243625][ C3] ? process_backlog+0x3f1/0x15f0 [ 79.245451][ C3] __netif_receive_skb+0x1d/0x160 [ 79.247289][ C3] process_backlog+0x443/0x15f0 [ 79.249057][ C3] __napi_poll.constprop.0+0xb7/0x550 [ 79.251350][ C3] net_rx_action+0xa94/0x1010 [ 79.253307][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 79.255995][ C3] ? __pfx_mark_lock+0x10/0x10 [ 79.258051][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 79.260310][ C3] ? kvm_sched_clock_read+0x11/0x20 [ 79.262352][ C3] ? sched_clock+0x38/0x60 [ 79.263998][ C3] ? sched_clock_cpu+0x6d/0x4d0 [ 79.265871][ C3] ? mark_held_locks+0x9f/0xe0 [ 79.267633][ C3] handle_softirqs+0x213/0x8f0 [ 79.269376][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 79.271289][ C3] ? irqtime_account_irq+0x18d/0x2e0 [ 79.273224][ C3] ? __dev_queue_xmit+0x89b/0x43e0 [ 79.275183][ C3] do_softirq+0xb2/0xf0 [ 79.276798][ C3] [ 79.277986][ C3] [ 79.279243][ C3] __local_bh_enable_ip+0x100/0x120 [ 79.281449][ C3] ? __dev_queue_xmit+0x89b/0x43e0 [ 79.283677][ C3] __dev_queue_xmit+0x8b0/0x43e0 [ 79.285521][ C3] ? hlock_class+0x4e/0x130 [ 79.287190][ C3] ? __lock_acquire+0x15a9/0x3c40 [ 79.289004][ C3] ? __pfx___dev_queue_xmit+0x10/0x10 [ 79.290937][ C3] ? hlock_class+0x4e/0x130 [ 79.292585][ C3] ? mark_lock+0xb5/0xc60 [ 79.294167][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 79.296013][ C3] ? selinux_ip_postroute+0x73b/0xde0 [ 79.297931][ C3] ? __pfx_mark_lock+0x10/0x10 [ 79.299653][ C3] ? find_held_lock+0x2d/0x110 [ 79.301390][ C3] ? __ip_finish_output+0x49e/0x950 [ 79.303266][ C3] ? __pfx_lock_release+0x10/0x10 [ 79.305095][ C3] ? mark_held_locks+0x9f/0xe0 [ 79.306837][ C3] ip_finish_output2+0xc6c/0x2150 [ 79.308661][ C3] ? __pfx_ip_finish_output2+0x10/0x10 [ 79.310612][ C3] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 79.312374][ C3] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 79.314237][ C3] __ip_finish_output+0x49e/0x950 [ 79.316059][ C3] ip_finish_output+0x35/0x380 [ 79.317791][ C3] ip_output+0x13b/0x2a0 [ 79.319325][ C3] ? __pfx_ip_output+0x10/0x10 [ 79.321061][ C3] ip_local_out+0x33e/0x4a0 [ 79.322705][ C3] __ip_queue_xmit+0x777/0x1970 [ 79.324473][ C3] ? __pfx_ip_queue_xmit+0x10/0x10 [ 79.326329][ C3] __tcp_transmit_skb+0x2b39/0x3df0 [ 79.328143][ C3] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 79.330020][ C3] ? __pfx_lock_release+0x10/0x10 [ 79.331838][ C3] ? ktime_get+0x206/0x300 [ 79.333439][ C3] tcp_write_xmit+0x12b1/0x8560 [ 79.335209][ C3] ? mptcp_sched_get_send+0x378/0x6e0 [ 79.337148][ C3] __tcp_push_pending_frames+0xaf/0x390 [ 79.339138][ C3] tcp_push+0x221/0x6f0 [ 79.340793][ C3] mptcp_push_release.isra.0+0xa8/0xe0 [ 79.342799][ C3] __mptcp_push_pending+0x400/0x560 [ 79.344723][ C3] ? __pfx___mptcp_push_pending+0x10/0x10 [ 79.346782][ C3] ? __virt_addr_valid+0x5e/0x590 [ 79.348640][ C3] ? const_folio_flags.constprop.0+0x56/0x150 [ 79.350828][ C3] ? __phys_addr_symbol+0x30/0x80 [ 79.352661][ C3] ? __check_object_size+0x488/0x710 [ 79.354560][ C3] mptcp_sendmsg+0xce5/0x1f20 [ 79.356281][ C3] ? selinux_socket_post_create+0x721/0x7f0 [ 79.358414][ C3] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 79.360269][ C3] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 79.362110][ C3] inet_sendmsg+0x119/0x140 [ 79.363757][ C3] ____sys_sendmsg+0x98c/0xc90 [ 79.365515][ C3] ? copy_msghdr_from_user+0x10b/0x160 [ 79.367498][ C3] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.369478][ C3] ___sys_sendmsg+0x135/0x1e0 [ 79.371190][ C3] ? __pfx____sys_sendmsg+0x10/0x10 [ 79.373111][ C3] ? __pfx_lock_release+0x10/0x10 [ 79.374951][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 79.376816][ C3] ? __fget_files+0x206/0x3a0 [ 79.378574][ C3] __sys_sendmsg+0x16e/0x220 [ 79.380352][ C3] ? __pfx___sys_sendmsg+0x10/0x10 [ 79.382309][ C3] ? __x64_sys_futex+0x1e1/0x4c0 [ 79.384177][ C3] do_syscall_64+0xcd/0x250 [ 79.385843][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.388013][ C3] RIP: 0033:0x7f1a0997ff19 [ 79.389597][ C3] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.396624][ C3] RSP: 002b:00007f1a0a767058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.399842][ C3] RAX: ffffffffffffffda RBX: 00007f1a09b45fa0 RCX: 00007f1a0997ff19 [ 79.402754][ C3] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000003 [ 79.405517][ C3] RBP: 00007f1a099f3986 R08: 0000000000000000 R09: 0000000000000000 [ 79.408513][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.411372][ C3] R13: 0000000000000000 R14: 00007f1a09b45fa0 R15: 00007fff923e52a8 [ 79.414322][ C3] [ 79.416134][ C3] Kernel Offset: disabled [ 79.417689][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:33:02 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff888022310ae0 RCX=0000000000010000 RDX=1ffff11004462160 RSI=ffff888022310ac4 RDI=ffff888022310b00 RBP=0000000000008000 RSP=ffffc90005f2f980 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffff888022310000 R14=000000000000067f R15=ffff888022310ae0 RIP=ffffffff8175c359 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555570139500 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc7aca77d60 CR3=00000000274b2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd06f3ad60 00007ffd06f3ad60 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd06f3ce80 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555701538ed 0000555570153860 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557015c614 000055557015c610 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555570150087 000055557014ff60 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557014e384 000055557014e380 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd06f3d2e4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00f400050a000000 00200a0000000000 0000080000000001 00100000001401c2 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00f400050a000000 00200a0000000000 0000080000000001 00100000001401c2 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000002010a030000 004000000000307a 7973000100090000 0001000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000400200088004 001400000000307a 7973000300090000 0001000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0106808010000004 0100000008060601 44c2000800600300 1000500300100040 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90006720000 RBX=ffff888027a20000 RCX=ffffffff865fa752 RDX=00000000ffffffff RSI=ffffffff865fa75f RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc900006b0eb8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000006 R12=0000000000000000 R13=ffff888027a21650 R14=ffff888027a21268 R15=0000000000000000 RIP=ffffffff865fa78c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007efff349ad00 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffeaa3f9d9c CR3=0000000024ffa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=ab1edd2eab1edd2e ab1edd2eab1edd2e ab1edd2eab1edd2e ab1edd2eab1edd2e ab1edd2eab1edd2e ab1edd2eab1edd2e ab1edd2eab1edd2e ab1edd2eab1edd2e ZMM22=b27a6855b27a6855 b27a6855b27a6855 b27a6855b27a6855 b27a6855b27a6855 b27a6855b27a6855 b27a6855b27a6855 b27a6855b27a6855 b27a6855b27a6855 ZMM23=df0ed55edf0ed55e df0ed55edf0ed55e df0ed55edf0ed55e df0ed55edf0ed55e df0ed55edf0ed55e df0ed55edf0ed55e df0ed55edf0ed55e df0ed55edf0ed55e ZMM24=562dbf8e562dbf8e 562dbf8e562dbf8e 562dbf8e562dbf8e 562dbf8e562dbf8e 562dbf8e562dbf8e 562dbf8e562dbf8e 562dbf8e562dbf8e 562dbf8e562dbf8e ZMM25=5ce587df5ce587df 5ce587df5ce587df 5ce587df5ce587df 5ce587df5ce587df 5ce587df5ce587df 5ce587df5ce587df 5ce587df5ce587df 5ce587df5ce587df ZMM26=38ab553e38ab553e 38ab553e38ab553e 38ab553e38ab553e 38ab553e38ab553e 38ab553e38ab553e 38ab553e38ab553e 38ab553e38ab553e 38ab553e38ab553e ZMM27=051adc46051adc46 051adc46051adc46 051adc46051adc46 051adc46051adc46 051adc46051adc46 051adc46051adc46 051adc46051adc46 051adc46051adc46 ZMM28=000001d0000001cf 000001ce000001cd 000001cc000001cb 000001ca000001c9 000001c8000001c7 000001c6000001c5 000001c4000001c3 000001c2000001c1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4009000040090000 4009000040090000 4009000040090000 4009000040090000 4009000040090000 4009000040090000 4009000040090000 4009000040090000 info registers vcpu 2 CPU#2 RAX=000000000006013b RBX=0000000000000002 RCX=ffffffff8b29c759 RDX=0000000000000000 RSI=ffffffff8b6cd840 RDI=ffffffff8bd1b4a0 RBP=ffffed1003ad2000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d690000 R14=ffffffff905f0410 R15=0000000000000000 RIP=ffffffff8b29db3f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f07755eafb8 CR3=000000004f8bc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07747f4830 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07747f483d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07747f4837 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07747f484b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07747f48d1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07747f49af ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0774910488 00007f0774910480 00007f0774910478 00007f0774910450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f077547d100 00007f0774910440 00007f0774910458 00007f07749104a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0774910498 00007f0774910490 00007f0774910488 00007f0774910480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851c98d5 RDI=ffffffff9ab0fbe0 RBP=ffffffff9ab0fba0 RSP=ffffc90000707d00 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000073 R14=ffffffff851c9870 R15=0000000000000000 RIP=ffffffff851c98ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1a0a7676c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020287000 CR3=0000000058f58000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813ea4eb ffffffff813ea518 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813ea518 ffffffff813ea4eb ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff813ea4eb ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35d83f4830 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35d83f483d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35d83f4837 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35d83f484b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35d83f48d1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35d83f49af ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35d8510488 00007f35d8510480 00007f35d8510478 00007f35d8510450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35d907d100 00007f35d8510440 00007f3500040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35d8510498 00007f35d8510490 00007f35d8510488 00007f35d8510480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000