last executing test programs: 2m9.04551488s ago: executing program 1 (id=272): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000003180), 0x200, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) 2m8.834428941s ago: executing program 1 (id=273): syz_open_dev$loop(0x0, 0x7, 0x180862) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sync() 2m7.169686178s ago: executing program 1 (id=275): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xc0080f4}, 0x840) 2m6.809035797s ago: executing program 1 (id=276): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) 2m6.414255218s ago: executing program 1 (id=277): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 2m5.856756807s ago: executing program 1 (id=278): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, 0x0, 0x80) 2m5.828820858s ago: executing program 32 (id=278): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, 0x0, 0x80) 6.394589355s ago: executing program 0 (id=375): capset(&(0x7f0000000080)={0x19980330}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@isofs_parent={0x14, 0x2, {0x2e, 0x4, 0x7, 0xfe4b, 0x7d, 0x80101}}, 0x301400) 6.173261066s ago: executing program 0 (id=376): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a900)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r1, 0x0, 0x2) 3.400562622s ago: executing program 0 (id=377): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0) r0 = syz_io_uring_setup(0x9ee, &(0x7f00000003c0)={0x0, 0xc95c, 0x100, 0x3, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x5745, 0x0, 0x0, 0x0, 0x0) 2.438101442s ago: executing program 2 (id=379): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x24044881}, 0x800) 1.883969971s ago: executing program 0 (id=380): capset(&(0x7f0000000080)={0x19980330}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@isofs_parent={0x14, 0x2, {0x2e, 0x4, 0x7, 0xfe4b, 0x7d, 0x80101}}, 0x301400) 1.485488952s ago: executing program 2 (id=381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, 0x0, 0x2, 0x3, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 1.404344906s ago: executing program 0 (id=382): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0) 1.056951384s ago: executing program 2 (id=383): socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ftruncate(0xffffffffffffffff, 0x7f) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x2, 0x2, @loopback, 0x8}, 0x1c) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x3}, 0x1c) shutdown(r2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010029bd7000fddb"], 0x1c}}, 0x200440c0) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x1000000, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x21, 0x0) 984.839988ms ago: executing program 0 (id=384): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0x1f, 0x36, 0x40, 0x424, 0xcf18, 0x4b60, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc2, 0x0, 0x2, 0x6b, 0x76, 0xf2, 0x0, [], [{{0x9, 0x5, 0x6, 0xc, 0x10, 0xa, 0x80, 0x9}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x5, 0x0, 0x33}}]}}]}}]}}, 0x0) 575.963999ms ago: executing program 2 (id=385): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) write$UHID_INPUT(r0, &(0x7f0000001780)={0x8, {"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", 0x1000}}, 0x1006) 265.149996ms ago: executing program 2 (id=386): capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x0, 0x0, 0x100}) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@isofs_parent={0x14, 0x2, {0x2e, 0x4, 0x7, 0xfe4b, 0x7d, 0x80101}}, 0x301400) 0s ago: executing program 2 (id=387): r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:38662' (ED25519) to the list of known hosts. [ 151.638758][ T30] audit: type=1400 audit(151.040:46): avc: denied { name_bind } for pid=3312 comm="sshd-session" src=30002 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 152.017176][ T30] audit: type=1400 audit(151.420:47): avc: denied { execute } for pid=3313 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 152.027254][ T30] audit: type=1400 audit(151.430:48): avc: denied { execute_no_trans } for pid=3313 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 157.826717][ T30] audit: type=1400 audit(157.230:49): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 157.837928][ T30] audit: type=1400 audit(157.240:50): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 157.870760][ T3313] cgroup: Unknown subsys name 'net' [ 157.892078][ T30] audit: type=1400 audit(157.290:51): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 158.128044][ T3313] cgroup: Unknown subsys name 'cpuset' [ 158.166670][ T3313] cgroup: Unknown subsys name 'rlimit' [ 158.377370][ T30] audit: type=1400 audit(157.780:52): avc: denied { setattr } for pid=3313 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.388378][ T30] audit: type=1400 audit(157.790:53): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 158.394885][ T30] audit: type=1400 audit(157.790:54): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 158.879721][ T3315] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 158.887838][ T30] audit: type=1400 audit(158.290:55): avc: denied { relabelto } for pid=3315 comm="mkswap" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 158.895299][ T30] audit: type=1400 audit(158.300:56): avc: denied { write } for pid=3315 comm="mkswap" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 158.979031][ T30] audit: type=1400 audit(158.380:57): avc: denied { read } for pid=3313 comm="syz-executor" name="swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 158.987366][ T30] audit: type=1400 audit(158.390:58): avc: denied { open } for pid=3313 comm="syz-executor" path="/swap-file" dev="vda" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 159.003523][ T3313] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 166.902002][ T30] audit: type=1400 audit(166.290:59): avc: denied { execmem } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 166.946402][ T30] audit: type=1400 audit(166.350:60): avc: denied { read } for pid=3318 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 166.951825][ T30] audit: type=1400 audit(166.350:61): avc: denied { open } for pid=3318 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 166.957462][ T30] audit: type=1400 audit(166.360:62): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 166.990320][ T30] audit: type=1400 audit(166.390:63): avc: denied { module_request } for pid=3318 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 167.172032][ T30] audit: type=1400 audit(166.570:64): avc: denied { sys_module } for pid=3320 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 171.565109][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.656168][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.852073][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.879233][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.748154][ T3320] hsr_slave_0: entered promiscuous mode [ 173.764611][ T3320] hsr_slave_1: entered promiscuous mode [ 174.218075][ T3318] hsr_slave_0: entered promiscuous mode [ 174.228464][ T3318] hsr_slave_1: entered promiscuous mode [ 174.236495][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 174.240851][ T3318] Cannot create hsr debugfs directory [ 175.587716][ T30] audit: type=1400 audit(174.990:65): avc: denied { create } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.607057][ T30] audit: type=1400 audit(175.010:66): avc: denied { write } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.645234][ T30] audit: type=1400 audit(175.050:67): avc: denied { read } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.667435][ T3320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 175.735618][ T3320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 175.766058][ T3320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 175.821033][ T3320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.023234][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 176.054510][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 176.089127][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 176.133993][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 177.536836][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.916619][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.244099][ T3320] veth0_vlan: entered promiscuous mode [ 184.351118][ T3320] veth1_vlan: entered promiscuous mode [ 184.678608][ T3320] veth0_macvtap: entered promiscuous mode [ 184.744369][ T3320] veth1_macvtap: entered promiscuous mode [ 185.188032][ T2123] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.207056][ T2123] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.209159][ T2123] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.214013][ T2123] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.426418][ T3318] veth0_vlan: entered promiscuous mode [ 185.539362][ T30] audit: type=1400 audit(184.940:68): avc: denied { mount } for pid=3320 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 185.553334][ T30] audit: type=1400 audit(184.950:69): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/syzkaller.dfCkCP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 185.578508][ T30] audit: type=1400 audit(184.970:70): avc: denied { mount } for pid=3320 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 185.579267][ T30] audit: type=1400 audit(184.980:71): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/syzkaller.dfCkCP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 185.596874][ T30] audit: type=1400 audit(184.990:72): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/syzkaller.dfCkCP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 185.627711][ T30] audit: type=1400 audit(185.030:73): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 185.641287][ T30] audit: type=1400 audit(185.040:74): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 185.648128][ T30] audit: type=1400 audit(185.050:75): avc: denied { mount } for pid=3320 comm="syz-executor" name="/" dev="gadgetfs" ino=3865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 185.660819][ T30] audit: type=1400 audit(185.060:76): avc: denied { mount } for pid=3320 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 185.664979][ T30] audit: type=1400 audit(185.070:77): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 185.687590][ T3318] veth1_vlan: entered promiscuous mode [ 185.768206][ T3320] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 186.111569][ T3318] veth0_macvtap: entered promiscuous mode [ 186.178434][ T3318] veth1_macvtap: entered promiscuous mode [ 186.491567][ T26] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.492983][ T26] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.502807][ T26] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.504965][ T26] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.665769][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 190.666417][ T30] audit: type=1400 audit(190.070:90): avc: denied { prog_run } for pid=3486 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 191.524509][ T30] audit: type=1400 audit(190.930:91): avc: denied { read write } for pid=3468 comm="syz.0.1" name="vhost-vsock" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 191.544468][ T30] audit: type=1400 audit(190.950:92): avc: denied { open } for pid=3468 comm="syz.0.1" path="/dev/vhost-vsock" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 191.571226][ T30] audit: type=1400 audit(190.970:93): avc: denied { ioctl } for pid=3468 comm="syz.0.1" path="/dev/vhost-vsock" dev="devtmpfs" ino=715 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 197.931989][ T3509] Illegal XDP return value 4294967274 on prog (id 2) dev N/A, expect packet loss! [ 205.796396][ T30] audit: type=1400 audit(205.200:94): avc: denied { create } for pid=3540 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 217.708999][ T30] audit: type=1400 audit(217.070:95): avc: denied { create } for pid=3586 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 217.709615][ T30] audit: type=1400 audit(217.090:96): avc: denied { create } for pid=3586 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 217.710463][ T30] audit: type=1400 audit(217.090:97): avc: denied { connect } for pid=3586 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 221.817769][ T30] audit: type=1400 audit(221.220:98): avc: denied { ioctl } for pid=3599 comm="syz.0.54" path="socket:[4369]" dev="sockfs" ino=4369 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 221.904407][ T3603] loop9: detected capacity change from 0 to 7 [ 221.957353][ T3603] loop9: [ 222.424688][ T30] audit: type=1400 audit(221.830:99): avc: denied { write } for pid=3606 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 225.727698][ T30] audit: type=1400 audit(225.130:100): avc: denied { read } for pid=3631 comm="syz.0.62" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 225.733392][ T30] audit: type=1400 audit(225.130:101): avc: denied { open } for pid=3631 comm="syz.0.62" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 225.746130][ T30] audit: type=1400 audit(225.150:102): avc: denied { ioctl } for pid=3631 comm="syz.0.62" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 226.176498][ T30] audit: type=1400 audit(225.580:103): avc: denied { create } for pid=3633 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 226.270839][ T30] audit: type=1400 audit(225.660:104): avc: denied { setopt } for pid=3633 comm="syz.0.63" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 226.513507][ T30] audit: type=1400 audit(225.920:105): avc: denied { read } for pid=3637 comm="syz.0.65" name="rtc0" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 226.518967][ T30] audit: type=1400 audit(225.920:106): avc: denied { open } for pid=3637 comm="syz.0.65" path="/dev/rtc0" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 226.533312][ T30] audit: type=1400 audit(225.940:107): avc: denied { ioctl } for pid=3637 comm="syz.0.65" path="/dev/rtc0" dev="devtmpfs" ino=708 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 226.598410][ T30] audit: type=1400 audit(225.990:108): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 226.897833][ T30] audit: type=1400 audit(226.300:109): avc: denied { name_bind } for pid=3640 comm="syz.1.67" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 226.947143][ T3642] netlink: 75 bytes leftover after parsing attributes in process `syz.0.66'. [ 227.487438][ T3646] syz.1.67 uses obsolete (PF_INET,SOCK_PACKET) [ 230.507150][ T3672] fuse: Bad value for 'fd' [ 231.748057][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 231.752123][ T30] audit: type=1400 audit(231.150:119): avc: denied { read write } for pid=3684 comm="syz.0.86" name="fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 231.761931][ T30] audit: type=1400 audit(231.160:120): avc: denied { open } for pid=3684 comm="syz.0.86" path="/dev/fuse" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 232.235266][ T30] audit: type=1400 audit(231.640:121): avc: denied { read } for pid=3687 comm="syz.0.88" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 232.238405][ T30] audit: type=1400 audit(231.640:122): avc: denied { open } for pid=3687 comm="syz.0.88" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 232.309152][ T30] audit: type=1400 audit(231.710:123): avc: denied { ioctl } for pid=3687 comm="syz.0.88" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 232.325039][ T30] audit: type=1400 audit(231.730:124): avc: denied { set_context_mgr } for pid=3687 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 232.437019][ T3688] binder: 3687:3688 BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch 0000000000000000 != 0000000000000014 [ 232.437808][ T3688] binder: 3687:3688 ioctl c0306201 20000640 returned -22 [ 233.722089][ T30] audit: type=1400 audit(233.130:125): avc: denied { create } for pid=3700 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 233.738392][ T30] audit: type=1400 audit(233.130:126): avc: denied { bind } for pid=3700 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 234.256356][ T30] audit: type=1400 audit(233.650:127): avc: denied { setopt } for pid=3700 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 234.257038][ T30] audit: type=1400 audit(233.650:128): avc: denied { accept } for pid=3700 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 234.507968][ T3707] netlink: 36 bytes leftover after parsing attributes in process `syz.1.92'. [ 234.525710][ T3707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.92'. [ 234.527200][ T3707] netlink: 36 bytes leftover after parsing attributes in process `syz.1.92'. [ 234.529255][ T3707] netlink: 36 bytes leftover after parsing attributes in process `syz.1.92'. [ 239.423653][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 239.427012][ T30] audit: type=1400 audit(238.830:132): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 240.786613][ T30] audit: type=1400 audit(240.190:133): avc: denied { name_bind } for pid=3731 comm="syz.0.99" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 240.991900][ T30] audit: type=1400 audit(240.390:134): avc: denied { write } for pid=3731 comm="syz.0.99" laddr=::1 lport=1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 243.001902][ T30] audit: type=1400 audit(242.410:135): avc: denied { bind } for pid=3743 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 243.005805][ T30] audit: type=1400 audit(242.410:136): avc: denied { node_bind } for pid=3743 comm="syz.1.103" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 248.927817][ T30] audit: type=1400 audit(248.330:137): avc: denied { read write } for pid=3770 comm="syz.0.112" name="rdma_cm" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 248.928685][ T30] audit: type=1400 audit(248.330:138): avc: denied { open } for pid=3770 comm="syz.0.112" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 250.857467][ T30] audit: type=1400 audit(250.260:139): avc: denied { mounton } for pid=3783 comm="syz.0.117" path="/64/file0" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 254.731914][ T30] audit: type=1400 audit(254.140:140): avc: denied { read } for pid=3809 comm="syz.0.129" name="iommu" dev="devtmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.736964][ T30] audit: type=1400 audit(254.140:141): avc: denied { open } for pid=3809 comm="syz.0.129" path="/dev/iommu" dev="devtmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.753754][ T30] audit: type=1400 audit(254.160:142): avc: denied { ioctl } for pid=3809 comm="syz.0.129" path="/dev/iommu" dev="devtmpfs" ino=614 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 256.296264][ T3818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 258.475022][ T30] audit: type=1400 audit(257.880:143): avc: denied { allowed } for pid=3829 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 258.516340][ T30] audit: type=1400 audit(257.920:144): avc: denied { create } for pid=3829 comm="syz.0.138" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 258.775246][ T3834] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 258.782491][ T30] audit: type=1400 audit(258.180:145): avc: denied { ioctl } for pid=3833 comm="syz.0.140" path="socket:[4762]" dev="sockfs" ino=4762 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 259.215764][ T30] audit: type=1400 audit(258.620:146): avc: denied { execute } for pid=3835 comm="syz.1.139" path="/dev/audio1" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 261.021617][ T30] audit: type=1400 audit(260.420:147): avc: denied { write } for pid=3849 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 264.823126][ T3859] fuse: Bad value for 'group_id' [ 264.826562][ T3859] fuse: Bad value for 'group_id' [ 269.446241][ T30] audit: type=1400 audit(268.850:148): avc: denied { ioctl } for pid=3880 comm="syz.1.157" path="socket:[4842]" dev="sockfs" ino=4842 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 272.026656][ T30] audit: type=1400 audit(271.430:149): avc: denied { kexec_image_load } for pid=3894 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 272.362041][ T3897] Zero length message leads to an empty skb [ 275.601917][ T30] audit: type=1400 audit(275.000:150): avc: denied { map } for pid=3916 comm="syz.1.170" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 275.614675][ T30] audit: type=1400 audit(275.020:151): avc: denied { read write } for pid=3916 comm="syz.1.170" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 278.688809][ T30] audit: type=1400 audit(278.090:152): avc: denied { ioctl } for pid=3927 comm="syz.0.172" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4915 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 279.263775][ T30] audit: type=1400 audit(278.670:153): avc: denied { create } for pid=3931 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 279.277689][ T30] audit: type=1400 audit(278.680:154): avc: denied { write } for pid=3931 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 280.715574][ T30] audit: type=1400 audit(280.120:155): avc: denied { write } for pid=3942 comm="syz.0.177" name="udmabuf" dev="devtmpfs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 283.642902][ T30] audit: type=1400 audit(283.050:156): avc: denied { setopt } for pid=3958 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 283.662213][ T3959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 283.822715][ T30] audit: type=1400 audit(283.230:157): avc: denied { bind } for pid=3958 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 283.824856][ T30] audit: type=1400 audit(283.230:158): avc: denied { write } for pid=3958 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 285.178260][ T3968] SELinux: Context Ü is not valid (left unmapped). [ 287.742575][ T3971] fuse: Unknown parameter 'group_i00000000000000000000' [ 291.137381][ T3983] block nbd1: shutting down sockets [ 294.438436][ T4007] fuse: Bad value for 'user_id' [ 294.441327][ T4007] fuse: Bad value for 'user_id' [ 296.269492][ T30] audit: type=1400 audit(295.670:159): avc: denied { open } for pid=4018 comm="syz.0.208" path="/dev/ptyq5" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 296.324365][ T30] audit: type=1400 audit(295.730:160): avc: denied { ioctl } for pid=4018 comm="syz.0.208" path="/dev/ptyq5" dev="devtmpfs" ino=116 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 297.843591][ T4027] fuse: Bad value for 'user_id' [ 297.861237][ T4027] fuse: Bad value for 'user_id' [ 298.582820][ T4031] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 303.225844][ T30] audit: type=1400 audit(302.630:161): avc: denied { name_bind } for pid=4054 comm="syz.0.220" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 311.327250][ T4098] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 312.252631][ T4103] fuse: Bad value for 'fd' [ 313.994470][ T30] audit: type=1400 audit(313.400:162): avc: denied { write } for pid=4109 comm="syz.0.243" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 314.411496][ T30] audit: type=1400 audit(313.810:163): avc: denied { write } for pid=4115 comm="syz.0.245" name="rtc0" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 315.182448][ T30] audit: type=1400 audit(314.590:164): avc: denied { write } for pid=4123 comm="syz.1.249" name="event0" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 315.193700][ T30] audit: type=1400 audit(314.600:165): avc: denied { open } for pid=4123 comm="syz.1.249" path="/dev/input/event0" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 315.215356][ T30] audit: type=1400 audit(314.620:166): avc: denied { ioctl } for pid=4123 comm="syz.1.249" path="/dev/input/event0" dev="devtmpfs" ino=748 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 322.621432][ T30] audit: type=1400 audit(322.020:167): avc: denied { create } for pid=4142 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 322.661418][ T4143] mmap: syz.0.253 (4143) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 323.413127][ T30] audit: type=1400 audit(322.790:168): avc: denied { setopt } for pid=4142 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 328.125441][ T30] audit: type=1400 audit(327.530:169): avc: denied { read } for pid=4168 comm="syz.0.264" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 328.141927][ T30] audit: type=1400 audit(327.540:170): avc: denied { open } for pid=4168 comm="syz.0.264" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 328.172609][ T30] audit: type=1400 audit(327.580:171): avc: denied { ioctl } for pid=4168 comm="syz.0.264" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 328.183739][ T30] audit: type=1400 audit(327.580:172): avc: denied { write } for pid=4168 comm="syz.0.264" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 333.092585][ T3463] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 333.311649][ T3463] usb 1-1: Using ep0 maxpacket: 16 [ 333.372915][ T3463] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.373664][ T3463] usb 1-1: config 0 interface 0 has no altsetting 0 [ 333.374529][ T3463] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 333.374748][ T3463] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.398046][ T3463] usb 1-1: config 0 descriptor?? [ 334.694256][ T3463] hid-generic 0003:056A:0331.0001: unknown main item tag 0x0 [ 334.695471][ T3463] hid-generic 0003:056A:0331.0001: unknown main item tag 0x0 [ 334.696286][ T3463] hid-generic 0003:056A:0331.0001: unknown main item tag 0x0 [ 334.696998][ T3463] hid-generic 0003:056A:0331.0001: unknown main item tag 0x0 [ 334.697794][ T3463] hid-generic 0003:056A:0331.0001: unknown main item tag 0x0 [ 334.698603][ T3463] hid-generic 0003:056A:0331.0001: unknown main item tag 0x0 [ 334.699368][ T3463] hid-generic 0003:056A:0331.0001: unknown main item tag 0x0 [ 334.700654][ T3463] hid-generic 0003:056A:0331.0001: unknown main item tag 0x0 [ 334.701494][ T3463] hid-generic 0003:056A:0331.0001: unknown main item tag 0x0 [ 334.702297][ T3463] hid-generic 0003:056A:0331.0001: unknown main item tag 0x0 [ 334.720875][ T3463] hid-generic 0003:056A:0331.0001: unexpected long global item [ 334.723460][ T3463] hid-generic 0003:056A:0331.0001: probe with driver hid-generic failed with error -22 [ 334.736808][ T3463] usb 1-1: USB disconnect, device number 2 [ 335.734210][ T30] audit: type=1400 audit(335.140:173): avc: denied { mount } for pid=4197 comm="syz.1.276" name="/" dev="autofs" ino=7209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 335.952659][ T30] audit: type=1400 audit(335.350:174): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 336.557364][ T122] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.821760][ T122] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.103491][ T122] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.384411][ T122] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.033778][ T30] audit: type=1400 audit(337.420:175): avc: denied { read } for pid=3163 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 342.375902][ T122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.462269][ T122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.517558][ T122] bond0 (unregistering): Released all slaves [ 343.124794][ T122] hsr_slave_0: left promiscuous mode [ 343.161905][ T122] hsr_slave_1: left promiscuous mode [ 343.298519][ T122] veth1_macvtap: left promiscuous mode [ 343.311841][ T122] veth0_macvtap: left promiscuous mode [ 343.314463][ T122] veth1_vlan: left promiscuous mode [ 343.343557][ T122] veth0_vlan: left promiscuous mode [ 358.075501][ T4247] fuse: Bad value for 'fd' [ 359.234196][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.266328][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.737473][ T4201] hsr_slave_0: entered promiscuous mode [ 362.777596][ T4201] hsr_slave_1: entered promiscuous mode [ 365.587977][ T4201] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 365.695754][ T4201] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 365.824670][ T4201] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 365.946804][ T4201] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 370.368381][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.663110][ T4201] veth0_vlan: entered promiscuous mode [ 386.800153][ T4201] veth1_vlan: entered promiscuous mode [ 387.553279][ T4201] veth0_macvtap: entered promiscuous mode [ 387.766639][ T4201] veth1_macvtap: entered promiscuous mode [ 388.402923][ T4215] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.406339][ T4215] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.409557][ T4215] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.412324][ T4215] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.967746][ T30] audit: type=1400 audit(388.370:176): avc: denied { mounton } for pid=4201 comm="syz-executor" path="/syzkaller.bws5J5/syz-tmp" dev="vda" ino=1878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 389.065858][ T30] audit: type=1400 audit(388.460:177): avc: denied { mount } for pid=4201 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 389.387943][ T30] audit: type=1400 audit(388.790:178): avc: denied { mounton } for pid=4201 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 390.368565][ T30] audit: type=1400 audit(389.770:179): avc: denied { read } for pid=4364 comm="syz.2.289" name="mice" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 390.369221][ T30] audit: type=1400 audit(389.770:180): avc: denied { open } for pid=4364 comm="syz.2.289" path="/dev/input/mice" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 390.406672][ T30] audit: type=1400 audit(389.810:181): avc: denied { read } for pid=4364 comm="syz.2.289" name="uinput" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 390.545896][ T4366] input: syz1 as /devices/virtual/input/input1 [ 391.111436][ T30] audit: type=1400 audit(390.510:182): avc: denied { ioctl } for pid=4364 comm="syz.2.289" path="/dev/input/mice" dev="devtmpfs" ino=705 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 393.925940][ T4377] autofs: Unknown parameter '0x0000000000000000' [ 398.707680][ T30] audit: type=1400 audit(398.110:183): avc: denied { create } for pid=4390 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 398.777992][ T30] audit: type=1400 audit(398.170:184): avc: denied { write } for pid=4390 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 398.806790][ T30] audit: type=1400 audit(398.200:185): avc: denied { read } for pid=4390 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 400.876185][ T4399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 404.866778][ T30] audit: type=1400 audit(404.270:186): avc: denied { create } for pid=4416 comm="syz.2.308" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 404.926698][ T30] audit: type=1400 audit(404.330:187): avc: denied { mounton } for pid=4416 comm="syz.2.308" path="/19/file0" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 416.474569][ T30] audit: type=1400 audit(415.880:188): avc: denied { create } for pid=4453 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 416.528086][ T30] audit: type=1400 audit(415.930:189): avc: denied { accept } for pid=4453 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 416.536371][ T30] audit: type=1400 audit(415.940:190): avc: denied { bind } for pid=4453 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 417.077148][ T30] audit: type=1400 audit(416.480:191): avc: denied { listen } for pid=4453 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 417.811117][ T30] audit: type=1400 audit(417.190:192): avc: denied { unlink } for pid=4201 comm="syz-executor" name="file0" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 424.235829][ T30] audit: type=1400 audit(423.640:193): avc: denied { write } for pid=4476 comm="syz.2.331" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 427.875986][ T30] audit: type=1400 audit(427.280:194): avc: denied { create } for pid=4489 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 427.893974][ T30] audit: type=1400 audit(427.300:195): avc: denied { getopt } for pid=4489 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 428.238137][ T4494] netlink: 'syz.2.339': attribute type 13 has an invalid length. [ 428.288466][ T4494] gretap0: refused to change device tx_queue_len [ 428.299394][ T4494] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 428.494994][ T30] audit: type=1400 audit(427.900:196): avc: denied { append } for pid=4495 comm="syz.2.340" name="001" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 428.871623][ T30] audit: type=1400 audit(428.270:197): avc: denied { create } for pid=4497 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 428.888456][ T30] audit: type=1400 audit(428.290:198): avc: denied { sys_admin } for pid=4497 comm="syz.2.341" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 429.700963][ T3466] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 429.923582][ T3466] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 429.923968][ T3466] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.946324][ T3466] usb 1-1: config 0 descriptor?? [ 430.307059][ T3466] kaweth 1-1:0.0: Firmware present in device. [ 430.520902][ T3466] kaweth 1-1:0.0: Statistics collection: 0 [ 430.521606][ T3466] kaweth 1-1:0.0: Multicast filter limit: 0 [ 430.530939][ T3466] kaweth 1-1:0.0: MTU: 0 [ 430.531690][ T3466] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 431.193861][ T3466] kaweth 1-1:0.0: Error setting receive filter [ 431.195618][ T3466] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 431.250811][ T3466] usb 1-1: USB disconnect, device number 3 [ 440.625732][ T30] audit: type=1400 audit(440.030:199): avc: denied { bind } for pid=4536 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 440.642636][ T30] audit: type=1400 audit(440.050:200): avc: denied { listen } for pid=4536 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 440.713302][ T30] audit: type=1400 audit(440.120:201): avc: denied { write } for pid=4536 comm="syz.0.357" path="socket:[8063]" dev="sockfs" ino=8063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 440.763436][ T30] audit: type=1400 audit(440.140:202): avc: denied { setopt } for pid=4536 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 446.188270][ T30] audit: type=1400 audit(445.590:203): avc: denied { write } for pid=4561 comm="syz.2.366" name="file0" dev="tmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 446.197177][ T30] audit: type=1400 audit(445.600:204): avc: denied { open } for pid=4561 comm="syz.2.366" path="/44/file0" dev="tmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 446.706423][ T4570] capability: warning: `syz.2.370' uses 32-bit capabilities (legacy support in use) [ 461.981353][ T970] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 462.196430][ T970] usb 1-1: config 0 has an invalid interface number: 194 but max is 0 [ 462.198319][ T970] usb 1-1: config 0 has no interface number 0 [ 462.206303][ T970] usb 1-1: config 0 interface 194 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 462.243635][ T970] usb 1-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=4b.60 [ 462.244145][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.244441][ T970] usb 1-1: Product: syz [ 462.244675][ T970] usb 1-1: Manufacturer: syz [ 462.244834][ T970] usb 1-1: SerialNumber: syz [ 462.268659][ T970] usb 1-1: config 0 descriptor?? [ 462.569233][ T9] usb 1-1: USB disconnect, device number 4 [ 462.694158][ T9] ================================================================== [ 462.695205][ T9] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x1bc/0x1e0 [ 462.695591][ T9] Read of size 8 at addr ffff00001402d8b0 by task kworker/0:0/9 [ 462.695891][ T9] [ 462.696079][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT [ 462.696174][ T9] Hardware name: linux,dummy-virt (DT) [ 462.696505][ T9] Workqueue: usb_hub_wq hub_event [ 462.696700][ T9] Call trace: [ 462.696748][ T9] show_stack+0x18/0x24 (C) [ 462.696853][ T9] dump_stack_lvl+0xa4/0xf4 [ 462.696943][ T9] print_report+0xf4/0x5a0 [ 462.697032][ T9] kasan_report+0xc8/0x108 [ 462.697162][ T9] __asan_report_load8_noabort+0x20/0x2c [ 462.697242][ T9] hdm_disconnect+0x1bc/0x1e0 [ 462.697324][ T9] usb_unbind_interface+0x168/0x71c [ 462.697404][ T9] device_remove+0x100/0x14c [ 462.697488][ T9] device_release_driver_internal+0x310/0x47c [ 462.697578][ T9] device_release_driver+0x18/0x24 [ 462.697656][ T9] bus_remove_device+0x1a4/0x348 [ 462.697733][ T9] device_del+0x2d0/0x7b4 [ 462.697817][ T9] usb_disable_device+0x240/0x5ac [ 462.697897][ T9] usb_disconnect+0x22c/0x7ec [ 462.697973][ T9] hub_event+0x10a4/0x365c [ 462.698052][ T9] process_one_work+0x7cc/0x18d4 [ 462.698144][ T9] worker_thread+0x734/0xb84 [ 462.698224][ T9] kthread+0x348/0x5fc [ 462.698310][ T9] ret_from_fork+0x10/0x20 [ 462.698422][ T9] [ 462.698508][ T9] Allocated by task 970: [ 462.698759][ T9] kasan_save_stack+0x3c/0x64 [ 462.698853][ T9] kasan_save_track+0x20/0x3c [ 462.698923][ T9] kasan_save_alloc_info+0x40/0x54 [ 462.698985][ T9] __kasan_kmalloc+0xb8/0xbc [ 462.699054][ T9] __kmalloc_cache_noprof+0x1b4/0x3d0 [ 462.699122][ T9] hdm_probe+0x94/0x13a0 [ 462.699184][ T9] usb_probe_interface+0x22c/0x870 [ 462.699252][ T9] really_probe+0x180/0x7d8 [ 462.699321][ T9] __driver_probe_device+0x15c/0x364 [ 462.699391][ T9] driver_probe_device+0x5c/0x16c [ 462.699452][ T9] __device_attach_driver+0x16c/0x270 [ 462.699513][ T9] bus_for_each_drv+0x104/0x18c [ 462.699645][ T9] __device_attach+0x168/0x35c [ 462.699743][ T9] device_initial_probe+0x14/0x20 [ 462.699843][ T9] bus_probe_device+0x124/0x15c [ 462.699905][ T9] device_add+0xc30/0x12cc [ 462.699973][ T9] usb_set_configuration+0xbb8/0x15b8 [ 462.700037][ T9] usb_generic_driver_probe+0x8c/0xc0 [ 462.700106][ T9] usb_probe_device+0xa4/0x2f4 [ 462.700283][ T9] really_probe+0x180/0x7d8 [ 462.700364][ T9] __driver_probe_device+0x15c/0x364 [ 462.700427][ T9] driver_probe_device+0x5c/0x16c [ 462.700488][ T9] __device_attach_driver+0x16c/0x270 [ 462.700559][ T9] bus_for_each_drv+0x104/0x18c [ 462.700621][ T9] __device_attach+0x168/0x35c [ 462.700682][ T9] device_initial_probe+0x14/0x20 [ 462.700743][ T9] bus_probe_device+0x124/0x15c [ 462.700803][ T9] device_add+0xc30/0x12cc [ 462.700869][ T9] usb_new_device+0x778/0x16cc [ 462.700930][ T9] hub_event+0x1d70/0x365c [ 462.700991][ T9] process_one_work+0x7cc/0x18d4 [ 462.701062][ T9] worker_thread+0x734/0xb84 [ 462.701166][ T9] kthread+0x348/0x5fc [ 462.701266][ T9] ret_from_fork+0x10/0x20 [ 462.701407][ T9] [ 462.701480][ T9] Freed by task 9: [ 462.701569][ T9] kasan_save_stack+0x3c/0x64 [ 462.701648][ T9] kasan_save_track+0x20/0x3c [ 462.701718][ T9] kasan_save_free_info+0x4c/0x74 [ 462.701780][ T9] __kasan_slab_free+0x58/0x78 [ 462.701847][ T9] kfree+0x1bc/0x444 [ 462.701911][ T9] release_mdev+0x10/0x1c [ 462.701974][ T9] device_release+0x80/0x1e8 [ 462.702036][ T9] kobject_put+0x17c/0x430 [ 462.702105][ T9] device_unregister+0x2c/0xbc [ 462.702171][ T9] most_deregister_interface+0x2d8/0x46c [ 462.702241][ T9] hdm_disconnect+0xcc/0x1e0 [ 462.702303][ T9] usb_unbind_interface+0x168/0x71c [ 462.702373][ T9] device_remove+0x100/0x14c [ 462.702436][ T9] device_release_driver_internal+0x310/0x47c [ 462.702498][ T9] device_release_driver+0x18/0x24 [ 462.702569][ T9] bus_remove_device+0x1a4/0x348 [ 462.702632][ T9] device_del+0x2d0/0x7b4 [ 462.702699][ T9] usb_disable_device+0x240/0x5ac [ 462.702768][ T9] usb_disconnect+0x22c/0x7ec [ 462.702837][ T9] hub_event+0x10a4/0x365c [ 462.702899][ T9] process_one_work+0x7cc/0x18d4 [ 462.702981][ T9] worker_thread+0x734/0xb84 [ 462.703053][ T9] kthread+0x348/0x5fc [ 462.703121][ T9] ret_from_fork+0x10/0x20 [ 462.703212][ T9] [ 462.703346][ T9] The buggy address belongs to the object at ffff00001402c000 [ 462.703346][ T9] which belongs to the cache kmalloc-8k of size 8192 [ 462.703522][ T9] The buggy address is located 6320 bytes inside of [ 462.703522][ T9] freed 8192-byte region [ffff00001402c000, ffff00001402e000) [ 462.703619][ T9] [ 462.703772][ T9] The buggy address belongs to the physical page: [ 462.704742][ T9] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54028 [ 462.705142][ T9] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 462.705296][ T9] flags: 0x1ffc00000000040(head|node=0|zone=0|lastcpupid=0x7ff) [ 462.705988][ T9] page_type: f5(slab) [ 462.706577][ T9] raw: 01ffc00000000040 ffff00000dc02280 fffffdffc0820600 dead000000000002 [ 462.706679][ T9] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 462.706857][ T9] head: 01ffc00000000040 ffff00000dc02280 fffffdffc0820600 dead000000000002 [ 462.706922][ T9] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 462.706984][ T9] head: 01ffc00000000003 fffffdffc0500a01 00000000ffffffff 00000000ffffffff [ 462.707042][ T9] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 462.707158][ T9] page dumped because: kasan: bad access detected [ 462.707225][ T9] [ 462.707277][ T9] Memory state around the buggy address: [ 462.707749][ T9] ffff00001402d780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 462.707861][ T9] ffff00001402d800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 462.707948][ T9] >ffff00001402d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 462.708037][ T9] ^ [ 462.708113][ T9] ffff00001402d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 462.708165][ T9] ffff00001402d980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 462.708315][ T9] ================================================================== [ 462.808985][ T9] ------------[ cut here ]------------ [ 462.810575][ T9] refcount_t: underflow; use-after-free. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 462.849398][ T9] WARNING: CPU: 0 PID: 9 at lib/refcount.c:28 refcount_warn_saturate+0x138/0x19c [ 462.850726][ T9] Modules linked in: [ 462.852049][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G B 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT [ 462.852885][ T9] Tainted: [B]=BAD_PAGE [ 462.853295][ T9] Hardware name: linux,dummy-virt (DT) [ 462.853650][ T9] Workqueue: usb_hub_wq hub_event [ 462.854293][ T9] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 462.854855][ T9] pc : refcount_warn_saturate+0x138/0x19c [ 462.855587][ T9] lr : refcount_warn_saturate+0x138/0x19c [ 462.855963][ T9] sp : ffff80008d5b7390 [ 462.856325][ T9] x29: ffff80008d5b7390 x28: ffff00001bd05000 x27: ffff00001bd050d8 [ 462.857234][ T9] x26: ffff6000037a0a1b x25: ffff8000886b6480 x24: ffff00001bd050e0 [ 462.857927][ T9] x23: ffff00001bdbe038 x22: 0000000000000004 x21: 1fffe000037b7c07 [ 462.858630][ T9] x20: ffff00001bdbe038 x19: 0000000000000003 x18: 0000000000000000 [ 462.859337][ T9] x17: 0000000000000000 x16: ffff00006a08a4c4 x15: 0000000000000000 [ 462.860172][ T9] x14: 0000000000000000 x13: 0000000000000000 x12: ffff700011ab6ddb [ 462.861017][ T9] x11: 1ffff00011ab6dda x10: ffff700011ab6dda x9 : dfff800000000000 [ 462.861849][ T9] x8 : ffff80008d5b6ed8 x7 : ffff80008d5b7000 x6 : ffff80008d5b6f50 [ 462.862408][ T9] x5 : ffff80008d5b6f38 x4 : 1ffff00011ab6df0 x3 : 1fffe0000d41313e [ 462.863397][ T9] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff00000e288000 [ 462.864342][ T9] Call trace: [ 462.864759][ T9] refcount_warn_saturate+0x138/0x19c (P) [ 462.865383][ T9] kobject_put+0x29c/0x430 [ 462.865812][ T9] put_device+0x14/0x24 [ 462.866337][ T9] hdm_disconnect+0x168/0x1e0 [ 462.866835][ T9] usb_unbind_interface+0x168/0x71c [ 462.867318][ T9] device_remove+0x100/0x14c [ 462.867715][ T9] device_release_driver_internal+0x310/0x47c [ 462.868524][ T9] device_release_driver+0x18/0x24 [ 462.869025][ T9] bus_remove_device+0x1a4/0x348 [ 462.869574][ T9] device_del+0x2d0/0x7b4 [ 462.869976][ T9] usb_disable_device+0x240/0x5ac [ 462.870430][ T9] usb_disconnect+0x22c/0x7ec [ 462.870765][ T9] hub_event+0x10a4/0x365c [ 462.871075][ T9] process_one_work+0x7cc/0x18d4 [ 462.871502][ T9] worker_thread+0x734/0xb84 [ 462.872007][ T9] kthread+0x348/0x5fc [ 462.872484][ T9] ret_from_fork+0x10/0x20 [ 462.873304][ T9] irq event stamp: 3272 [ 462.873820][ T9] hardirqs last enabled at (3271): [] _raw_spin_unlock_irq+0x30/0x8c [ 462.874896][ T9] hardirqs last disabled at (3272): [] __schedule+0x2e8/0x3180 [ 462.875529][ T9] softirqs last enabled at (2860): [] handle_softirqs+0x88c/0xdb4 [ 462.876211][ T9] softirqs last disabled at (2823): [] __do_softirq+0x14/0x20 [ 462.876944][ T9] ---[ end trace 0000000000000000 ]--- [ 463.417972][ T30] audit: type=1400 audit(462.820:205): avc: denied { ioctl } for pid=4615 comm="syz.0.388" path="socket:[6967]" dev="sockfs" ino=6967 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 464.562972][ T797] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.724377][ T797] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.838036][ T797] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.953915][ T797] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.303728][ T797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.369365][ T797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.448161][ T797] bond0 (unregistering): Released all slaves [ 466.706079][ T797] hsr_slave_0: left promiscuous mode [ 466.727223][ T797] hsr_slave_1: left promiscuous mode [ 466.838136][ T797] veth1_macvtap: left promiscuous mode [ 466.839038][ T797] veth0_macvtap: left promiscuous mode [ 466.844124][ T797] veth1_vlan: left promiscuous mode [ 466.844907][ T797] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 10:52:01 Registers: info registers vcpu 0 CPU#0 PC=ffff800080943fc8 X00=0000000000000001 X01=ffff00000fc91e40 X02=0000000000000001 X03=0000000000000000 X04=1ffff00010000be2 X05=0000000000000000 X06=ffff800080944024 X07=ffff800080005fc0 X08=ffff00000fc91e40 X09=dfff800000000000 X10=ffff700010000bcc X11=1ffff00010000bf9 X12=ffff700010000bfa X13=0008563412005452 X14=1fffe00002a26c65 X15=ffff000021eb68c0 X16=0000000000000000 X17=1fffe00002a26b78 X18=ffff000021eb68d0 X19=ffff8000870c6710 X20=0000000000000000 X21=ffff8000871115f0 X22=0000000000000000 X23=ffff8000800360b8 X24=ffff80008d19f180 X25=0000000000000000 X26=ffff000016cfe140 X27=ffff00006a0a6730 X28=ffff00000fc91e40 X29=ffff800080005f20 X30=ffff8000805550ec SP=ffff800080005fd0 PSTATE=100000c5 ---V EL1h FPCR=00000000 FPSR=00000000 Q00=2525252525252525:2525252525252525 Q01=000000756c6c2570:6f6f6c2f7665642f Q02=0000000000000000:ffffffff00000000 Q03=ffffff000000ff00:0000000000000000 Q04=0000000000000000:fff000f000000000 Q05=bb448243222c92da:e3914ed4e87380b0 Q06=6edc4d3a2914b135:d8e9c869e2695c88 Q07=b20fae707afde253:388e9c6c4fa85ca0 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000ffffe096fbc0:0000ffffe096fbc0 Q17=ffffff80ffffffd0:0000ffffe096fb90 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800081be7134 X00=0000000000000002 X01=0000000000000007 X02=0000000000000000 X03=1fffe00001dbc22f X04=0000000000000018 X05=ffff80008d9e79e0 X06=ffff700011b3cf3c X07=0000000000000001 X08=0000000000000003 X09=dfff800000000000 X10=ffff700011b3cf3c X11=1ffff00011b3cf3c X12=ffff700011b3cf3d X13=205d395420202020 X14=4e20303a302f7265 X15=746e69617420746f X16=2e37312e36206465 X17=79732d3163722d30 X18=0000000000000000 X19=ffff00000ede1080 X20=ffff80008d4db018 X21=ffff800087b3e180 X22=0000000000000079 X23=dfff800000000000 X24=ffff00000edec057 X25=0000000000000006 X26=0000000000000f01 X27=1fffe00001dbc25a X28=ffff00000ede12d0 X29=ffff80008d9e7990 X30=ffff800081be73c0 SP=ffff80008d9e7990 PSTATE=800000c5 N--- EL1h FPCR=00000000 FPSR=00000000 Q00=2525252525252525:2525252525252525 Q01=000000756c6c2570:6f6f6c2f7665642f Q02=65646e69620a0020:0000000000000005 Q03=ffffff000000ff00:0000000000000000 Q04=0000000000000000:fff000f000000000 Q05=bb448243222c92da:e3914ed4e87380b0 Q06=6edc4d3a2914b135:d8e9c869e2695c88 Q07=b20fae707afde253:388e9c6c4fa85ca0 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000ffffd661d230:0000ffffd661d230 Q17=ffffff80ffffffd0:0000ffffd661d200 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000