last executing test programs: 12.024554684s ago: executing program 1 (id=134): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x3ff, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x10000, 0x7, 0x0, 0xa, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x7, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x7fffffff, 0x0, 0x25, 0x0, &(0x7f0000000400)="938ad371454eca23b9fcdf3377b9796eb8c086ba43c617fbbf0a5ef38ab049c1b51b950d0e", 0x0, 0x3, 0x0, 0xffffffb1}, 0x50) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) setresuid(0x0, 0x0, 0xee00) keyctl$get_persistent(0x16, 0x0, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1}, 0x6e) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(r5, 0xffffffffffffffff, 0x0) 5.092833409s ago: executing program 0 (id=138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) 4.490935085s ago: executing program 1 (id=139): r0 = gettid() r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = dup(r1) r4 = accept4(r2, 0x0, 0x0, 0x0) recvfrom(r4, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x10000000000000) sendfile(r4, r3, 0x0, 0x8a000) tkill(r0, 0x7) 2.165959502s ago: executing program 0 (id=140): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, r1, 0x1, 0x0, 0x0, {0x1e}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) 1.649827322s ago: executing program 1 (id=141): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) io_setup(0xa0000, 0x0) 1.561531989s ago: executing program 0 (id=142): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020000000a"], 0x50}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0) 1.050890977s ago: executing program 0 (id=143): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f0000000740)='syz1\x00', 0x1ff) 1.050331787s ago: executing program 1 (id=144): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0xc2042, 0x4) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) brk(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x0, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2066}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) 710.238453ms ago: executing program 0 (id=145): r0 = socket$rds(0x15, 0x5, 0x0) accept(r0, 0x0, 0x0) 459.945851ms ago: executing program 0 (id=146): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 459.640931ms ago: executing program 1 (id=147): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000280)=0x0) dup3(r1, r0, 0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) 0s ago: executing program 1 (id=148): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="05000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x15) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) kernel console output (not intermixed with test programs): [ 57.078263][ T31] audit: type=1400 audit(57.010:68): avc: denied { read write } for pid=3106 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.079364][ T31] audit: type=1400 audit(57.020:69): avc: denied { open } for pid=3106 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:57599' (ED25519) to the list of known hosts. [ 68.429685][ T31] audit: type=1400 audit(68.360:70): avc: denied { name_bind } for pid=3107 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 70.788827][ T31] audit: type=1400 audit(70.720:71): avc: denied { execute } for pid=3109 comm="sh" name="syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 70.808365][ T31] audit: type=1400 audit(70.750:72): avc: denied { execute_no_trans } for pid=3109 comm="sh" path="/syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 74.655954][ T31] audit: type=1400 audit(74.590:73): avc: denied { mounton } for pid=3109 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 74.659867][ T31] audit: type=1400 audit(74.600:74): avc: denied { mount } for pid=3109 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 74.680697][ T3109] cgroup: Unknown subsys name 'net' [ 74.690489][ T31] audit: type=1400 audit(74.630:75): avc: denied { unmount } for pid=3109 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 74.963217][ T3109] cgroup: Unknown subsys name 'hugetlb' [ 74.964408][ T3109] cgroup: Unknown subsys name 'rlimit' [ 75.219082][ T31] audit: type=1400 audit(75.160:76): avc: denied { setattr } for pid=3109 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.220341][ T31] audit: type=1400 audit(75.160:77): avc: denied { mounton } for pid=3109 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 75.221202][ T31] audit: type=1400 audit(75.160:78): avc: denied { mount } for pid=3109 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 75.440511][ T3111] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 75.441958][ T31] audit: type=1400 audit(75.380:79): avc: denied { relabelto } for pid=3111 comm="mkswap" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 75.449372][ T31] audit: type=1400 audit(75.380:80): avc: denied { write } for pid=3111 comm="mkswap" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 75.483042][ T31] audit: type=1400 audit(75.420:81): avc: denied { read } for pid=3109 comm="syz-executor" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 75.484028][ T31] audit: type=1400 audit(75.420:82): avc: denied { open } for pid=3109 comm="syz-executor" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 82.804354][ T3109] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.051171][ T31] audit: type=1400 audit(84.990:83): avc: denied { execmem } for pid=3112 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 85.136649][ T31] audit: type=1400 audit(85.070:84): avc: denied { mounton } for pid=3114 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 85.137619][ T31] audit: type=1400 audit(85.070:85): avc: denied { mounton } for pid=3115 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 85.144242][ T31] audit: type=1400 audit(85.070:86): avc: denied { mount } for pid=3114 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 85.145229][ T31] audit: type=1400 audit(85.080:88): avc: denied { open } for pid=3114 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.156636][ T31] audit: type=1400 audit(85.070:87): avc: denied { read } for pid=3115 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.157549][ T31] audit: type=1400 audit(85.090:89): avc: denied { mounton } for pid=3114 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 85.180741][ T31] audit: type=1400 audit(85.120:91): avc: denied { module_request } for pid=3115 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 85.181634][ T31] audit: type=1400 audit(85.120:90): avc: denied { module_request } for pid=3114 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 85.306944][ T31] audit: type=1400 audit(85.240:92): avc: denied { sys_module } for pid=3114 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 87.497929][ T3114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.502358][ T3114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.679098][ T3115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.687500][ T3115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.575259][ T3114] hsr_slave_0: entered promiscuous mode [ 88.584018][ T3114] hsr_slave_1: entered promiscuous mode [ 88.900462][ T3115] hsr_slave_0: entered promiscuous mode [ 88.904414][ T3115] hsr_slave_1: entered promiscuous mode [ 88.908484][ T3115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.909080][ T3115] Cannot create hsr debugfs directory [ 89.123917][ T3114] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.143569][ T3114] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.162105][ T3114] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.180012][ T3114] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.365552][ T3115] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.379405][ T3115] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.391271][ T3115] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.400114][ T3115] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.025843][ T3114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.110609][ T3115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.303311][ T3115] veth0_vlan: entered promiscuous mode [ 93.330025][ T3115] veth1_vlan: entered promiscuous mode [ 93.392989][ T3115] veth0_macvtap: entered promiscuous mode [ 93.405582][ T3115] veth1_macvtap: entered promiscuous mode [ 93.480536][ T3115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.481354][ T3115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.481699][ T3115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.482047][ T3115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.583362][ T3114] veth0_vlan: entered promiscuous mode [ 93.652941][ T3114] veth1_vlan: entered promiscuous mode [ 93.673815][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 93.673911][ T31] audit: type=1400 audit(93.610:97): avc: denied { mount } for pid=3115 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.677742][ T31] audit: type=1400 audit(93.620:98): avc: denied { mounton } for pid=3115 comm="syz-executor" path="/syzkaller.UAMmmU/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 93.683463][ T31] audit: type=1400 audit(93.620:99): avc: denied { mount } for pid=3115 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 93.702108][ T31] audit: type=1400 audit(93.640:100): avc: denied { unmount } for pid=3115 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 93.712417][ T31] audit: type=1400 audit(93.650:101): avc: denied { mounton } for pid=3115 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 93.715947][ T31] audit: type=1400 audit(93.650:102): avc: denied { mount } for pid=3115 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 93.747317][ T3114] veth0_macvtap: entered promiscuous mode [ 93.760303][ T3114] veth1_macvtap: entered promiscuous mode [ 93.851107][ T31] audit: type=1400 audit(93.790:103): avc: denied { read write } for pid=3115 comm="syz-executor" name="loop1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.857077][ T31] audit: type=1400 audit(93.790:104): avc: denied { open } for pid=3115 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.858162][ T31] audit: type=1400 audit(93.790:105): avc: denied { ioctl } for pid=3115 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=636 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.859106][ T3114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.859624][ T3114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.860006][ T3114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.860736][ T3114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.079730][ T31] audit: type=1400 audit(94.020:106): avc: denied { mounton } for pid=3796 comm="syz.0.1" path="/0/file0" dev="tmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.635775][ T31] audit: type=1400 audit(101.570:107): avc: denied { prog_load } for pid=3803 comm="syz.1.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 101.639307][ T31] audit: type=1400 audit(101.570:108): avc: denied { bpf } for pid=3803 comm="syz.1.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.642536][ T31] audit: type=1400 audit(101.580:109): avc: denied { create } for pid=3803 comm="syz.1.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.645766][ T31] audit: type=1400 audit(101.580:110): avc: denied { ioctl } for pid=3803 comm="syz.1.3" path="socket:[1921]" dev="sockfs" ino=1921 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.826713][ T31] audit: type=1400 audit(103.760:111): avc: denied { map_create } for pid=3810 comm="syz.1.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 103.840910][ T31] audit: type=1400 audit(103.780:112): avc: denied { perfmon } for pid=3810 comm="syz.1.5" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.905057][ T31] audit: type=1400 audit(106.840:113): avc: denied { unmount } for pid=3114 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 107.000075][ T31] audit: type=1400 audit(106.940:114): avc: denied { name_bind } for pid=3815 comm="syz.0.6" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 109.843864][ T31] audit: type=1400 audit(109.780:115): avc: denied { map_read map_write } for pid=3818 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 109.931823][ T31] audit: type=1400 audit(109.870:116): avc: denied { prog_run } for pid=3818 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 109.982096][ T31] audit: type=1400 audit(109.920:117): avc: denied { write } for pid=3818 comm="syz.0.7" name="netstat" dev="proc" ino=4026532690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 123.599231][ T31] audit: type=1400 audit(123.540:118): avc: denied { ioctl } for pid=3853 comm="syz.1.14" path="socket:[1976]" dev="sockfs" ino=1976 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.824020][ T31] audit: type=1400 audit(131.760:119): avc: denied { name_bind } for pid=3865 comm="syz.1.17" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 131.832630][ T31] audit: type=1400 audit(131.760:120): avc: denied { node_bind } for pid=3865 comm="syz.1.17" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 131.893993][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 132.057152][ T31] audit: type=1400 audit(131.990:121): avc: denied { create } for pid=3865 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 133.898936][ T3872] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.805738][ T31] audit: type=1400 audit(134.680:122): avc: denied { create } for pid=3873 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.858668][ T31] audit: type=1400 audit(134.680:123): avc: denied { ioctl } for pid=3873 comm="syz.1.21" path="socket:[2451]" dev="sockfs" ino=2451 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.887964][ T3874] netlink: 64 bytes leftover after parsing attributes in process `syz.1.21'. [ 134.975729][ T31] audit: type=1400 audit(134.910:124): avc: denied { create } for pid=3873 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 135.572432][ T31] audit: type=1400 audit(135.510:125): avc: denied { setopt } for pid=3880 comm="syz.1.24" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.585767][ T31] audit: type=1400 audit(135.520:126): avc: denied { read } for pid=3880 comm="syz.1.24" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 136.139753][ T3885] raw_sendmsg: syz.1.24 forgot to set AF_INET. Fix it! [ 136.139733][ T31] audit: type=1400 audit(136.070:127): avc: denied { write } for pid=3880 comm="syz.1.24" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.018787][ T31] audit: type=1326 audit(163.960:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.0.34" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x7ffc0000 [ 164.020142][ T31] audit: type=1326 audit(163.960:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.0.34" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x7ffc0000 [ 164.023285][ T31] audit: type=1326 audit(163.960:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.0.34" exe="/syz-executor" sig=0 arch=40000028 syscall=363 compat=0 ip=0x132da0 code=0x7ffc0000 [ 164.024446][ T31] audit: type=1326 audit(163.960:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.0.34" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x7ffc0000 [ 164.029532][ T31] audit: type=1326 audit(163.970:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.0.34" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x7ffc0000 [ 188.736017][ T3942] Zero length message leads to an empty skb [ 188.751254][ T31] audit: type=1400 audit(188.690:133): avc: denied { write } for pid=3941 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 192.362093][ T31] audit: type=1400 audit(192.300:134): avc: denied { create } for pid=3950 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 192.488055][ T31] audit: type=1400 audit(192.430:135): avc: denied { setopt } for pid=3950 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 221.355756][ T31] audit: type=1400 audit(221.290:136): avc: denied { setopt } for pid=3979 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 225.576878][ T31] audit: type=1400 audit(225.510:137): avc: denied { write } for pid=3979 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 236.340219][ T31] audit: type=1400 audit(236.280:138): avc: denied { create } for pid=3983 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 242.623037][ T31] audit: type=1400 audit(242.560:139): avc: denied { create } for pid=3996 comm="syz.1.57" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 242.641819][ T31] audit: type=1400 audit(242.580:140): avc: denied { ioctl } for pid=3996 comm="syz.1.57" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=2606 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 247.168593][ T4018] input: syz0 as /devices/virtual/input/input4 [ 247.637362][ T90] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 247.866893][ T90] usb 2-1: Using ep0 maxpacket: 16 [ 247.903477][ T90] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.904266][ T90] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.905217][ T90] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 247.905924][ T90] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 247.916886][ T90] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.928889][ T90] usb 2-1: config 0 descriptor?? [ 248.402637][ T90] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 248.403214][ T90] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 248.403560][ T90] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 248.403971][ T90] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 248.404308][ T90] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 248.404640][ T90] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 248.405171][ T90] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 248.405801][ T90] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 248.417256][ T90] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 248.417761][ T90] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 248.461217][ T90] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input5 [ 248.500236][ T90] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 248.607488][ T90] usb 2-1: USB disconnect, device number 2 [ 252.871207][ T4098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'. [ 267.417264][ T4039] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 267.634848][ T4039] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.635535][ T4039] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 267.636028][ T4039] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 267.637448][ T4039] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 267.637881][ T4039] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 267.638344][ T4039] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.671608][ T4039] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.672241][ T4039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.672812][ T4039] usb 2-1: Product: syz [ 267.673059][ T4039] usb 2-1: Manufacturer: syz [ 267.673278][ T4039] usb 2-1: SerialNumber: syz [ 268.279027][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 268.284957][ C1] hrtimer: interrupt took 528720 ns [ 268.558553][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 268.900687][ T4039] cdc_ncm 2-1:1.0: bind() failure [ 268.917766][ T4039] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 268.923161][ T4039] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 268.930862][ T4039] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 268.947064][ T4039] usb 2-1: USB disconnect, device number 3 [ 273.659778][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 273.679801][ T24] usb 1-1: no configurations [ 273.680645][ T24] usb 1-1: can't read configurations, error -22 [ 273.848496][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 274.019276][ T24] usb 1-1: device descriptor read/64, error -32 [ 274.140496][ T24] usb usb1-port1: attempt power cycle [ 274.607878][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 274.647723][ T24] usb 1-1: device descriptor read/8, error -32 [ 274.962905][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 274.998617][ T24] usb 1-1: device descriptor read/8, error -32 [ 275.118890][ T24] usb usb1-port1: unable to enumerate USB device [ 279.949645][ T4139] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 279.997294][ T31] audit: type=1400 audit(279.930:141): avc: denied { connect } for pid=4127 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 284.957342][ T31] audit: type=1400 audit(284.880:142): avc: denied { read } for pid=4142 comm="syz.0.88" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 284.979202][ T31] audit: type=1400 audit(284.880:143): avc: denied { open } for pid=4142 comm="syz.0.88" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 284.998978][ T31] audit: type=1400 audit(284.940:144): avc: denied { ioctl } for pid=4142 comm="syz.0.88" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 305.309097][ T31] audit: type=1326 audit(305.250:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.0.91" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x0 [ 313.603849][ T31] audit: type=1326 audit(313.540:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.0.93" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x7ffc0000 [ 313.605149][ T31] audit: type=1326 audit(313.540:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.0.93" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x7ffc0000 [ 313.620369][ T31] audit: type=1326 audit(313.560:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.0.93" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132da0 code=0x7ffc0000 [ 313.626140][ T31] audit: type=1326 audit(313.560:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.0.93" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x7ffc0000 [ 313.657104][ T31] audit: type=1326 audit(313.580:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.0.93" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x7ffc0000 [ 313.658021][ T31] audit: type=1326 audit(313.580:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.0.93" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132da0 code=0x7ffc0000 [ 313.661028][ T31] audit: type=1326 audit(313.600:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.0.93" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x7ffc0000 [ 313.663632][ T31] audit: type=1326 audit(313.600:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.0.93" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132da0 code=0x7ffc0000 [ 313.695433][ T31] audit: type=1326 audit(313.620:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.0.93" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x7ffc0000 [ 313.706113][ T31] audit: type=1326 audit(313.640:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.0.93" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x7ffc0000 [ 321.764460][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 321.765125][ T31] audit: type=1400 audit(321.700:166): avc: denied { setattr } for pid=4174 comm="syz.1.95" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 323.463261][ T4189] syz.1.98[4189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.463769][ T4189] syz.1.98[4189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.541993][ T4189] syz.1.98[4189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.542842][ T4189] syz.1.98[4189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.569177][ T4189] pim6reg1: entered promiscuous mode [ 323.579499][ T4189] pim6reg1: entered allmulticast mode [ 334.593551][ T31] audit: type=1400 audit(334.520:167): avc: denied { create } for pid=4202 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 334.605133][ T31] audit: type=1400 audit(334.540:168): avc: denied { connect } for pid=4202 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 334.608364][ T31] audit: type=1400 audit(334.550:169): avc: denied { setopt } for pid=4202 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 341.523853][ T31] audit: type=1400 audit(341.460:170): avc: denied { shutdown } for pid=4243 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 341.524846][ T31] audit: type=1400 audit(341.460:171): avc: denied { getopt } for pid=4243 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 341.525498][ T31] audit: type=1400 audit(341.460:172): avc: denied { connect } for pid=4243 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 341.540060][ T31] audit: type=1400 audit(341.460:173): avc: denied { name_connect } for pid=4243 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 342.328338][ T31] audit: type=1400 audit(342.270:174): avc: denied { create } for pid=4251 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 342.332203][ T31] audit: type=1400 audit(342.270:175): avc: denied { bind } for pid=4251 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 342.339251][ T31] audit: type=1400 audit(342.280:176): avc: denied { write } for pid=4251 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 342.883723][ T31] audit: type=1400 audit(342.820:177): avc: denied { setopt } for pid=4251 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 351.014064][ T31] audit: type=1400 audit(350.950:178): avc: denied { bind } for pid=4282 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 351.014935][ T31] audit: type=1400 audit(350.950:179): avc: denied { name_bind } for pid=4282 comm="syz.0.124" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 351.015833][ T31] audit: type=1400 audit(350.950:180): avc: denied { node_bind } for pid=4282 comm="syz.0.124" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 351.035713][ T31] audit: type=1400 audit(350.970:181): avc: denied { write } for pid=4282 comm="syz.0.124" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 351.056805][ T31] audit: type=1400 audit(350.990:182): avc: denied { name_connect } for pid=4282 comm="syz.0.124" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 351.712099][ T4287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.126'. [ 353.078006][ T31] audit: type=1400 audit(353.020:183): avc: denied { map } for pid=4296 comm="syz.1.131" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 353.079352][ T31] audit: type=1400 audit(353.020:184): avc: denied { read write } for pid=4296 comm="syz.1.131" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 353.353426][ T4300] netlink: 'syz.0.132': attribute type 4 has an invalid length. [ 353.393714][ T4300] netlink: 'syz.0.132': attribute type 4 has an invalid length. [ 356.004632][ T31] audit: type=1326 audit(355.940:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.1.134" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x132da0 code=0x0 [ 362.384733][ T31] audit: type=1400 audit(362.320:186): avc: denied { write } for pid=4317 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 362.407071][ T31] audit: type=1400 audit(362.340:187): avc: denied { nlmsg_write } for pid=4317 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 363.538066][ T31] audit: type=1400 audit(363.480:188): avc: denied { bind } for pid=4321 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 363.548336][ T31] audit: type=1400 audit(363.490:189): avc: denied { setopt } for pid=4321 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 363.582460][ T31] audit: type=1400 audit(363.520:190): avc: denied { accept } for pid=4321 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 363.601462][ T31] audit: type=1400 audit(363.540:191): avc: denied { read } for pid=4321 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 364.146614][ T31] audit: type=1400 audit(364.080:192): avc: denied { write } for pid=4321 comm="syz.1.139" path="socket:[3558]" dev="sockfs" ino=3558 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 366.313264][ T31] audit: type=1400 audit(366.250:193): avc: denied { create } for pid=4334 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 366.325145][ T31] audit: type=1400 audit(366.250:194): avc: denied { write } for pid=4334 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 366.891743][ T31] audit: type=1400 audit(366.830:195): avc: denied { set_context_mgr } for pid=4337 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 367.060116][ T4339] binder: 4337:4339 ioctl c0306201 20000380 returned -14 [ 367.783661][ T4347] ------------[ cut here ]------------ [ 367.784257][ T4347] WARNING: CPU: 0 PID: 4347 at mm/highmem.c:622 kunmap_local_indexed+0x210/0x228 [ 367.785850][ T4347] Modules linked in: [ 367.798419][ T4347] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 367.799721][ T4347] CPU: 0 UID: 0 PID: 4347 Comm: syz.1.148 Not tainted 6.11.0-rc7-syzkaller #0 [ 367.801021][ T4347] Hardware name: ARM-Versatile Express [ 367.806214][ T4347] Call trace: [ 367.807011][ T4347] [<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c) [ 367.807731][ T4347] r7:00000000 r6:826228c4 r5:00000000 r4:8200ca20 [ 367.808126][ T4347] [<8195d25c>] (show_stack) from [<8197af94>] (dump_stack_lvl+0x54/0x7c) [ 367.808662][ T4347] [<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c) [ 367.809193][ T4347] r5:00000000 r4:8286dd18 [ 367.809460][ T4347] [<8197afbc>] (dump_stack) from [<8195dd1c>] (panic+0x120/0x368) [ 367.809844][ T4347] [<8195dbfc>] (panic) from [<802421e4>] (get_taint+0x0/0x1c) [ 367.810240][ T4347] r3:8260c5c4 r2:00000001 r1:81ff5244 r0:81ffd01c [ 367.810537][ T4347] r7:804817e4 [ 367.810755][ T4347] [<80242170>] (check_panic_on_warn) from [<80242338>] (__warn+0x7c/0x180) [ 367.811338][ T4347] [<802422bc>] (__warn) from [<802425b4>] (warn_slowpath_fmt+0x178/0x1f4) [ 367.816255][ T4347] r8:00000009 r7:82024564 r6:dfbd1d14 r5:84d3a400 r4:00000000 [ 367.816968][ T4347] [<80242440>] (warn_slowpath_fmt) from [<804817e4>] (kunmap_local_indexed+0x210/0x228) [ 367.818192][ T4347] r10:ffefdfe8 r9:840e3000 r8:20000000 r7:00000000 r6:00000003 r5:84d3a400 [ 367.818564][ T4347] r4:ffefd000 [ 367.818780][ T4347] [<804815d4>] (kunmap_local_indexed) from [<804f7ed0>] (move_pages+0x7e8/0x14a0) [ 367.819221][ T4347] r7:00000000 r6:850edae0 r5:dedc2e34 r4:ffefb000 [ 367.819518][ T4347] [<804f76e8>] (move_pages) from [<80572eec>] (userfaultfd_ioctl+0x1260/0x2314) [ 367.819977][ T4347] r10:21000000 r9:dfbd1e98 r8:20000040 r7:840e3000 r6:00000001 r5:00000000 [ 367.820344][ T4347] r4:8526a000 [ 367.820544][ T4347] [<80571c8c>] (userfaultfd_ioctl) from [<80520db4>] (sys_ioctl+0x134/0xda4) [ 367.821040][ T4347] r10:84d3a400 r9:00000003 r8:8421ac00 r7:20000040 r6:8421ac01 r5:00000000 [ 367.821412][ T4347] r4:c028aa05 [ 367.821610][ T4347] [<80520c80>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 367.822098][ T4347] Exception stack(0xdfbd1fa8 to 0xdfbd1ff0) [ 367.822575][ T4347] 1fa0: 00000000 00000000 00000003 c028aa05 20000040 00000000 [ 367.823008][ T4347] 1fc0: 00000000 00000000 002862f0 00000036 00000000 00006364 003d0f00 76b3d0bc [ 367.823375][ T4347] 1fe0: 76b3cec0 76b3ceb0 000189d0 00132da0 [ 367.823749][ T4347] r10:00000036 r9:84d3a400 r8:8020029c r7:00000036 r6:002862f0 r5:00000000 [ 367.824112][ T4347] r4:00000000 [ 367.827648][ T4347] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:36:44 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=8200ca20 R02=00000011 R03=8260ca7c R04=82e2a808 R05=5b917000 R06=824b9f80 R07=20000193 R08=8340f22c R09=20000193 R10=8260c5d0 R11=df801ecc R12=df801e98 R13=df801ea8 R14=8197c4cc R15=8147c464 PSR=40000193 -Z-- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=c7d57000 R01=dfb0b000 R02=00000001 R03=802199d8 R04=7f011000 R05=00000001 R06=828bdf68 R07=7f011000 R08=dfb0b000 R09=8260cad0 R10=828beb8c R11=eab2ddbc R12=eab2ddc0 R13=eab2dd90 R14=802109bc R15=802199f0 PSR=80000113 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000