last executing test programs: 3.961924993s ago: executing program 0 (id=178): userfaultfd(0x801) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xa9}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket(0x2, 0x80805, 0x0) 3.903360359s ago: executing program 0 (id=180): socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 3.434997193s ago: executing program 1 (id=182): r0 = socket(0x10, 0x803, 0x0) unshare(0x4020400) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000500)=0x6, 0x4) 3.34457752s ago: executing program 1 (id=183): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffb}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f00000004c0)='\x7f\xb7\xc1\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01aA$\xf6j\x89\xd9_\xa0\x84\xeaT\x94\xaexuTW\xa7\x93\x8d\xbd\xe6~\xa8\x82\xe7LSw\x8b\x0f<\xe6\xbdh\x97\xd4\xb8\x97\xc0\xd2\x8e\x83#`yx\x96\x10M\xef\xab\xcaR*\xf8a\xdb?\xe0\xd5\xa8\xf1\x9f\\\x17I\x1b\xda$\n\x97\x1d\x8e\xad\xdc\x11\xce\x1e\xe4\xa9\xdb\xfc\xfa\xb5\xcb\xec=\xb2\xb7x\xf6\xa7H\r\xaf\xf4|\x9e\x96?%\x9a\xb0\x00V\xca\xf7b\xc1 \x7f\xb5\x87\x16\xe1?9\xb5\xb8sn\xc8\xa8\xbf7{\x80\x12\xfd\a\x00\xef}\x0484\nU\x14\xfc\xb0mV~\x9d\xa6\x01\f\xef\x8f(.[8\xbd\xdf\x1a\xa6\x80\xa2\x8b,\x11/\x02\"\x10\xf7\xd0l\xbd\xfa\xcd$?I\x82K\v\xcc\x19\xdc\xdb\x87\xbd\xe4\xac\xe2\xac\x06\xc5\x88_\x84K\x8dm\xac\x9b\xe7#\xcb\xa9}\x8f\xe0\x9dYb\x88Z\x9c\xb5\xcbj\n\x1b\xee\x1ev\x01\xaf']}) io_pgetevents(r1, 0x1, 0x1, &(0x7f00000000c0)=[{}], 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) 2.932695017s ago: executing program 0 (id=190): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2, r0}, 0xc) 2.866202265s ago: executing program 0 (id=191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$kcm(0x29, 0x5, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.592743839s ago: executing program 0 (id=192): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8081}, 0x20000000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x18c, 0x203, 0x410, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) 2.305473995s ago: executing program 1 (id=194): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27050200590200000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {0x0}], 0x2}, 0x0) 1.913893081s ago: executing program 3 (id=195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000b80)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf250b00000008000300", @ANYRES32=r2, @ANYBLOB="300050800400050028000880070001"], 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x20000000) 1.91359866s ago: executing program 1 (id=196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0xfffffec2) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000400)={{0x8, 0x4, 0x4, 0x2, 'syz0\x00', 0x40}, 0x3, 0x10000000, 0x1, r0, 0x4, 0x5, 'syz1\x00', &(0x7f0000000000)=['rcu_utilization\x00', '\x85--\x00', '/dev/bus/usb/00#/00#\x00', 'rcu_utilization\x00'], 0x39}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setresuid(0xee01, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff0000000008000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed00efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6342103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033df58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca30ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28defa300"}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x3}, 0x0, 0x0, 0x5c, 0x8}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x6}], 0x70}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$kcm(0x2b, 0x1, 0x0) listen(r7, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x16, 0xa, 0x0, 0x0, 0x8000000, 0x61, 0x10, 0x28}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xce, &(0x7f0000000580)=""/206, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.850198136s ago: executing program 3 (id=197): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000005a40)={@flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x0, 0x1, 0x5}, @fda={0x66646185, 0xa, 0x1, 0x7}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 1.706987958s ago: executing program 3 (id=198): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000011}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x80000001}) dup3(r5, r6, 0x0) mknod(0x0, 0xc000, 0x0) mount(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.074858257s ago: executing program 1 (id=200): syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x7fff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000180001006111980000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x3, 0x6c03, 0x8, 0x5, 0x7f, 0xb2c, 0x9, 0xffff, 0x714}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0xa, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r6}, 0x18) 749.208848ms ago: executing program 3 (id=201): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x541b, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 618.4776ms ago: executing program 2 (id=202): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f00000007c0)="ace55f5fce1c", 0x0, 0x80000000, 0x12, 0x4, 0x0}) 411.711858ms ago: executing program 0 (id=203): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) 411.125977ms ago: executing program 3 (id=204): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27050200590200000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {0x0}], 0x2}, 0x0) 410.993251ms ago: executing program 2 (id=205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000b80)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf250b00000008000300", @ANYRES32=r2, @ANYBLOB="300050800400050028000880070001"], 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x20000000) 410.702329ms ago: executing program 2 (id=206): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000005a40)={@flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fda={0x66646185, 0x0, 0x1, 0x5}, @fda={0x66646185, 0xa, 0x1, 0x7}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 344.596735ms ago: executing program 3 (id=207): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) timer_create(0x7, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) userfaultfd(0x801) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff}, 0x8) sendmmsg$inet6(r2, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)='@SQ', 0x3}], 0x1}}], 0x1, 0x4000091) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x50}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x53, &(0x7f0000000200)=""/83, 0x41100, 0x14, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x0, 0x1ff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f00000002c0)=[0x1], &(0x7f0000000300)=[{0x2, 0x4, 0x7, 0x8}, {0x5, 0x3, 0x9, 0x2}, {0x3, 0x4, 0xb, 0xc}, {0x3, 0x5, 0x1, 0x2}, {0x5, 0x5, 0x5, 0xc}], 0x10, 0x717e}, 0x94) sendmsg$inet(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 274.903591ms ago: executing program 2 (id=208): r0 = syz_io_uring_setup(0x512b, &(0x7f0000000180)={0x0, 0x6f04, 0x130c8, 0x1, 0x2a4}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000000), 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x90000008}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 134.266831ms ago: executing program 2 (id=209): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 76.524391ms ago: executing program 1 (id=210): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) syz_open_dev$dri(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=211): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) recvmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/10, 0xa}, {&(0x7f0000000080)=""/177, 0xb1}], 0x2, 0x0, 0xffffffffffffff34}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:37966' (ED25519) to the list of known hosts. [ 107.066631][ T40] audit: type=1400 audit(1760713048.304:62): avc: denied { name_bind } for pid=5929 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 107.149382][ T40] audit: type=1400 audit(1760713048.384:63): avc: denied { write } for pid=5930 comm="sh" path="pipe:[4993]" dev="pipefs" ino=4993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 107.212629][ T40] audit: type=1400 audit(1760713048.434:64): avc: denied { execute } for pid=5930 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 107.221426][ T40] audit: type=1400 audit(1760713048.434:65): avc: denied { execute_no_trans } for pid=5930 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 112.232517][ T40] audit: type=1400 audit(1760713053.464:66): avc: denied { mounton } for pid=5930 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 112.238401][ T5930] cgroup: Unknown subsys name 'net' [ 112.250731][ T40] audit: type=1400 audit(1760713053.474:67): avc: denied { mount } for pid=5930 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 112.296456][ T40] audit: type=1400 audit(1760713053.544:68): avc: denied { unmount } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 112.478966][ T5930] cgroup: Unknown subsys name 'cpuset' [ 112.510355][ T5930] cgroup: Unknown subsys name 'rlimit' [ 112.882444][ T40] audit: type=1400 audit(1760713054.114:69): avc: denied { setattr } for pid=5930 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.897251][ T40] audit: type=1400 audit(1760713054.114:70): avc: denied { create } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.911316][ T40] audit: type=1400 audit(1760713054.114:71): avc: denied { write } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.922622][ T40] audit: type=1400 audit(1760713054.114:72): avc: denied { read } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.933840][ T40] audit: type=1400 audit(1760713054.134:73): avc: denied { mounton } for pid=5930 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 112.955201][ T40] audit: type=1400 audit(1760713054.134:74): avc: denied { mount } for pid=5930 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 112.972458][ T40] audit: type=1400 audit(1760713054.194:75): avc: denied { read } for pid=5646 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 113.055020][ T5932] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 113.816463][ T50] cfg80211: failed to load regulatory.db [ 115.375819][ T5930] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 125.896048][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 125.896066][ T40] audit: type=1400 audit(1760713067.124:80): avc: denied { execmem } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 126.712270][ T40] audit: type=1400 audit(1760713067.944:81): avc: denied { create } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.727131][ T40] audit: type=1400 audit(1760713067.944:82): avc: denied { create } for pid=5950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.747130][ T40] audit: type=1400 audit(1760713067.944:83): avc: denied { read write } for pid=5951 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 126.767746][ T40] audit: type=1400 audit(1760713067.944:84): avc: denied { read write } for pid=5950 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 126.792854][ T40] audit: type=1400 audit(1760713067.944:85): avc: denied { open } for pid=5951 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 126.802701][ T40] audit: type=1400 audit(1760713067.944:86): avc: denied { open } for pid=5950 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 126.823269][ T40] audit: type=1400 audit(1760713067.974:87): avc: denied { ioctl } for pid=5950 comm="syz-executor" path="socket:[6379]" dev="sockfs" ino=6379 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.844080][ T5954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.871269][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.875247][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 126.897257][ T5963] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.901386][ T5965] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 126.906043][ T5965] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 126.911082][ T5965] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 126.913931][ T5956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.921315][ T5965] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 126.926822][ T5956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.933637][ T5956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 126.940781][ T5956] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 126.946286][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.949886][ T5956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 126.969789][ T40] audit: type=1400 audit(1760713068.184:88): avc: denied { read } for pid=5957 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 126.978406][ T5963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.996133][ T5965] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.998140][ T5965] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.000112][ T5963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.007508][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.011434][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.025510][ T40] audit: type=1400 audit(1760713068.184:89): avc: denied { open } for pid=5957 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 127.709082][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 127.987281][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 128.205223][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.208994][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.218860][ T5950] bridge_slave_0: entered allmulticast mode [ 128.224162][ T5950] bridge_slave_0: entered promiscuous mode [ 128.230845][ T5957] chnl_net:caif_netlink_parms(): no params data found [ 128.289602][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.293496][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.297612][ T5950] bridge_slave_1: entered allmulticast mode [ 128.302978][ T5950] bridge_slave_1: entered promiscuous mode [ 128.395272][ T5960] chnl_net:caif_netlink_parms(): no params data found [ 128.759604][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.782317][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.982956][ T5293] Bluetooth: hci2: command tx timeout [ 129.063412][ T5293] Bluetooth: hci1: command tx timeout [ 129.064340][ T5958] Bluetooth: hci3: command tx timeout [ 129.072104][ T5963] Bluetooth: hci0: command tx timeout [ 129.158283][ T5950] team0: Port device team_slave_0 added [ 129.195148][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.197943][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.200725][ T5951] bridge_slave_0: entered allmulticast mode [ 129.206972][ T5951] bridge_slave_0: entered promiscuous mode [ 129.218184][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.231126][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.236801][ T5951] bridge_slave_1: entered allmulticast mode [ 129.258437][ T5951] bridge_slave_1: entered promiscuous mode [ 129.269356][ T5950] team0: Port device team_slave_1 added [ 129.412503][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.415291][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.419166][ T5957] bridge_slave_0: entered allmulticast mode [ 129.424952][ T5957] bridge_slave_0: entered promiscuous mode [ 129.430436][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.456965][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.460219][ T5957] bridge_slave_1: entered allmulticast mode [ 129.464695][ T5957] bridge_slave_1: entered promiscuous mode [ 129.614315][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.624117][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.626979][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.640542][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.649064][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.665936][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.674724][ T5960] bridge_slave_0: entered allmulticast mode [ 129.679048][ T5960] bridge_slave_0: entered promiscuous mode [ 129.741474][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.746062][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.749941][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.768371][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.778987][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.781720][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.788446][ T5960] bridge_slave_1: entered allmulticast mode [ 129.791966][ T5960] bridge_slave_1: entered promiscuous mode [ 129.802740][ T5957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.809009][ T5957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.061774][ T5951] team0: Port device team_slave_0 added [ 130.089296][ T5951] team0: Port device team_slave_1 added [ 130.169075][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.246171][ T5957] team0: Port device team_slave_0 added [ 130.251159][ T5957] team0: Port device team_slave_1 added [ 130.365986][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.487739][ T5950] hsr_slave_0: entered promiscuous mode [ 130.492891][ T5950] hsr_slave_1: entered promiscuous mode [ 130.532049][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.538024][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.551900][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.615133][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.618331][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.709438][ T5957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.720125][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.723902][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.758726][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.775110][ T5960] team0: Port device team_slave_0 added [ 130.779137][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.782643][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.793815][ T5957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.863783][ T5960] team0: Port device team_slave_1 added [ 131.078437][ T5958] Bluetooth: hci2: command tx timeout [ 131.123201][ T5951] hsr_slave_0: entered promiscuous mode [ 131.128841][ T5951] hsr_slave_1: entered promiscuous mode [ 131.132846][ T5951] debugfs: 'hsr0' already exists in 'hsr' [ 131.136545][ T5951] Cannot create hsr debugfs directory [ 131.152245][ T5958] Bluetooth: hci1: command tx timeout [ 131.153445][ T5293] Bluetooth: hci3: command tx timeout [ 131.157526][ T5958] Bluetooth: hci0: command tx timeout [ 131.192915][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.195973][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.209968][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.216704][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.220064][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.236000][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.420900][ T5957] hsr_slave_0: entered promiscuous mode [ 131.425389][ T5957] hsr_slave_1: entered promiscuous mode [ 131.429823][ T5957] debugfs: 'hsr0' already exists in 'hsr' [ 131.433505][ T5957] Cannot create hsr debugfs directory [ 131.640780][ T5960] hsr_slave_0: entered promiscuous mode [ 131.646387][ T5960] hsr_slave_1: entered promiscuous mode [ 131.651931][ T5960] debugfs: 'hsr0' already exists in 'hsr' [ 131.667061][ T5960] Cannot create hsr debugfs directory [ 132.499490][ T5950] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 132.540892][ T5950] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 132.626306][ T5950] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 132.637281][ T5950] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 132.781533][ T5957] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 132.805119][ T5957] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 132.820919][ T5957] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 132.860506][ T5957] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 132.979154][ T5951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 132.993082][ T5951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 133.041775][ T5951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 133.054657][ T5951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 133.148328][ T5958] Bluetooth: hci2: command tx timeout [ 133.175046][ T5960] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 133.189269][ T5960] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 133.218314][ T5960] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 133.223423][ T5293] Bluetooth: hci0: command tx timeout [ 133.223490][ T5963] Bluetooth: hci1: command tx timeout [ 133.226850][ T5960] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 133.231551][ T5958] Bluetooth: hci3: command tx timeout [ 133.251882][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.342455][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.365534][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.368709][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.389271][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.392486][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.449702][ T5957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.467621][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.509586][ T5957] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.525019][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.533411][ T4037] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.536588][ T4037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.544480][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.551282][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.554527][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.580443][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.583610][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.594130][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 133.594144][ T40] audit: type=1400 audit(1760713074.834:92): avc: denied { sys_module } for pid=5950 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 133.604387][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.609256][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.618711][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.641567][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.644699][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.667938][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.670415][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.725572][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.791517][ T5950] veth0_vlan: entered promiscuous mode [ 133.800963][ T5950] veth1_vlan: entered promiscuous mode [ 133.838067][ T5950] veth0_macvtap: entered promiscuous mode [ 133.844359][ T5950] veth1_macvtap: entered promiscuous mode [ 133.870106][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.878312][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.901472][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.905348][ T4737] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.909295][ T4737] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.920138][ T4737] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.924874][ T4737] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.948404][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.992508][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.008865][ T4737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.012611][ T4737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.052998][ T4037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.055602][ T5957] veth0_vlan: entered promiscuous mode [ 134.056361][ T4037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.075389][ T40] audit: type=1400 audit(1760713075.314:93): avc: denied { mount } for pid=5950 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 134.075682][ T5957] veth1_vlan: entered promiscuous mode [ 134.085256][ T40] audit: type=1400 audit(1760713075.314:94): avc: denied { mounton } for pid=5950 comm="syz-executor" path="/syzkaller.VfwE8R/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 134.088019][ T5951] veth0_vlan: entered promiscuous mode [ 134.097206][ T40] audit: type=1400 audit(1760713075.314:95): avc: denied { mount } for pid=5950 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 134.106267][ T5951] veth1_vlan: entered promiscuous mode [ 134.109676][ T40] audit: type=1400 audit(1760713075.314:96): avc: denied { mounton } for pid=5950 comm="syz-executor" path="/syzkaller.VfwE8R/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 134.122035][ T40] audit: type=1400 audit(1760713075.314:97): avc: denied { mounton } for pid=5950 comm="syz-executor" path="/syzkaller.VfwE8R/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 134.133254][ T40] audit: type=1400 audit(1760713075.314:98): avc: denied { unmount } for pid=5950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 134.136553][ T5950] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 134.140800][ T40] audit: type=1400 audit(1760713075.334:99): avc: denied { mounton } for pid=5950 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 134.145652][ T5960] veth0_vlan: entered promiscuous mode [ 134.153206][ T40] audit: type=1400 audit(1760713075.334:100): avc: denied { mount } for pid=5950 comm="syz-executor" name="/" dev="gadgetfs" ino=7598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 134.162530][ T40] audit: type=1400 audit(1760713075.334:101): avc: denied { mount } for pid=5950 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 134.172838][ T5951] veth0_macvtap: entered promiscuous mode [ 134.178472][ T5960] veth1_vlan: entered promiscuous mode [ 134.185466][ T5951] veth1_macvtap: entered promiscuous mode [ 134.207450][ T6035] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.210483][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.223037][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.232592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 134.236221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 134.248937][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.251887][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.255466][ T5957] veth0_macvtap: entered promiscuous mode [ 134.263235][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.266210][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.278572][ T5957] veth1_macvtap: entered promiscuous mode [ 134.282122][ T5960] veth0_macvtap: entered promiscuous mode [ 134.294692][ T5960] veth1_macvtap: entered promiscuous mode [ 134.317197][ T4737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.319826][ T4737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.329808][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.335714][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.353969][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.361474][ T100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.366309][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.371345][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.374679][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.375717][ T100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.379968][ T100] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.390453][ T100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.395170][ T100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.397979][ T100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.462229][ T100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.465420][ T100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.526751][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.530036][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.532696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 134.568954][ T4737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.572964][ T4737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.592690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 134.612396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 134.615540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 134.618277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 134.620884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 134.642358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 134.645173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 134.670534][ T6042] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6042 comm=syz.0.1 [ 134.735459][ T4037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.738113][ T4037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.918818][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.927878][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.276456][ T5958] Bluetooth: hci2: command tx timeout [ 135.302257][ T5958] Bluetooth: hci3: command tx timeout [ 135.302392][ T5963] Bluetooth: hci0: command tx timeout [ 135.312822][ T5963] Bluetooth: hci1: command tx timeout [ 135.694347][ T5997] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 135.872430][ T5997] usb 6-1: Using ep0 maxpacket: 16 [ 135.881080][ T5997] usb 6-1: config 0 has an invalid interface number: 74 but max is 0 [ 135.884375][ T5997] usb 6-1: config 0 has no interface number 0 [ 135.887560][ T5997] usb 6-1: config 0 interface 74 has no altsetting 0 [ 135.908660][ T5997] usb 6-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=66.36 [ 135.914158][ T5997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.917793][ T5997] usb 6-1: Product: syz [ 135.919619][ T5997] usb 6-1: Manufacturer: syz [ 135.921756][ T5997] usb 6-1: SerialNumber: syz [ 135.948680][ T5997] usb 6-1: config 0 descriptor?? [ 136.193803][ T6060] sock: sock_timestamping_bind_phc: sock not bind to device [ 136.417876][ T6070] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'. [ 136.544215][ T6073] syz.0.11 uses obsolete (PF_INET,SOCK_PACKET) [ 136.848993][ T5997] belkin_sa 6-1:0.74: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 136.859712][ T5997] usb 6-1: bcdDevice: 6636, bfc: 0 [ 136.865566][ T5997] usb 6-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 136.880082][ T5997] usb 6-1: USB disconnect, device number 2 [ 136.888471][ T5997] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 136.898682][ T5997] belkin_sa 6-1:0.74: device disconnected [ 138.126475][ T6100] dlm: no locking on control device [ 139.106009][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 139.121441][ T40] audit: type=1400 audit(1760713080.134:166): avc: denied { create } for pid=6108 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 139.134227][ T40] audit: type=1400 audit(1760713080.134:167): avc: denied { setopt } for pid=6108 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 139.271210][ T40] audit: type=1400 audit(1760713080.504:168): avc: denied { read } for pid=6117 comm="syz.1.27" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 139.285187][ T40] audit: type=1400 audit(1760713080.504:169): avc: denied { open } for pid=6117 comm="syz.1.27" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 139.295474][ T40] audit: type=1400 audit(1760713080.514:170): avc: denied { ioctl } for pid=6117 comm="syz.1.27" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 139.422938][ T40] audit: type=1400 audit(1760713080.654:171): avc: denied { name_bind } for pid=6111 comm="syz.0.26" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 139.432917][ T40] audit: type=1400 audit(1760713080.654:172): avc: denied { node_bind } for pid=6111 comm="syz.0.26" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 139.470890][ T40] audit: type=1400 audit(1760713080.694:173): avc: denied { write } for pid=6117 comm="syz.1.27" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 139.637600][ T40] audit: type=1400 audit(1760713080.874:174): avc: denied { create } for pid=6123 comm="syz.2.28" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 139.650417][ T40] audit: type=1400 audit(1760713080.874:175): avc: denied { mounton } for pid=6123 comm="syz.2.28" path="/7/file0" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 140.517445][ T6147] syz.3.34 (6147): drop_caches: 4 [ 140.819133][ T6155] netlink: 'syz.3.35': attribute type 11 has an invalid length. [ 140.821773][ T6155] netlink: 'syz.3.35': attribute type 4 has an invalid length. [ 140.824301][ T6155] netlink: 224 bytes leftover after parsing attributes in process `syz.3.35'. [ 140.988093][ T6155] syz_tun: entered promiscuous mode [ 140.989968][ T6155] vlan2: entered promiscuous mode [ 141.104499][ T6159] netlink: 56 bytes leftover after parsing attributes in process `syz.0.38'. [ 141.511240][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.514096][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.580875][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.600547][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.000636][ T100] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.003669][ T100] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.008663][ T100] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.014914][ T100] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.912376][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 143.076469][ T29] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 143.083240][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 143.091124][ T29] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 143.102213][ T29] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 143.105627][ T29] usb 7-1: Product: syz [ 143.107377][ T29] usb 7-1: Manufacturer: syz [ 143.109298][ T29] usb 7-1: SerialNumber: syz [ 143.113598][ T29] usb 7-1: config 0 descriptor?? [ 143.121393][ T29] usb 7-1: selecting invalid altsetting 0 [ 143.333221][ T29] usb 7-1: USB disconnect, device number 2 [ 143.360019][ T6222] netlink: 'syz.1.61': attribute type 1 has an invalid length. [ 143.629508][ T6236] netlink: 'syz.1.62': attribute type 2 has an invalid length. [ 144.002265][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 144.162386][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 144.170555][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.176599][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 144.179480][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.181969][ T9] usb 6-1: Product: syz [ 144.183335][ T9] usb 6-1: Manufacturer: syz [ 144.184846][ T9] usb 6-1: SerialNumber: syz [ 144.187596][ T9] usb 6-1: config 0 descriptor?? [ 144.483034][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 144.483050][ T40] audit: type=1400 audit(1760713085.724:209): avc: denied { read write } for pid=6245 comm="syz.2.68" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 144.493307][ T40] audit: type=1400 audit(1760713085.724:210): avc: denied { open } for pid=6245 comm="syz.2.68" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 144.518467][ T40] audit: type=1400 audit(1760713085.754:211): avc: denied { read write } for pid=6247 comm="syz.3.69" name="vbi5" dev="devtmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 144.725049][ T40] audit: type=1400 audit(1760713085.964:212): avc: denied { bind } for pid=6258 comm="syz.3.72" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 144.735241][ T40] audit: type=1400 audit(1760713085.964:213): avc: denied { name_bind } for pid=6258 comm="syz.3.72" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 144.741718][ T40] audit: type=1400 audit(1760713085.964:214): avc: denied { node_bind } for pid=6258 comm="syz.3.72" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 146.146556][ T40] audit: type=1400 audit(1760713087.384:215): avc: denied { create } for pid=6288 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.163089][ T40] audit: type=1400 audit(1760713087.394:216): avc: denied { connect } for pid=6288 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.168901][ T40] audit: type=1400 audit(1760713087.394:217): avc: denied { write } for pid=6288 comm="syz.2.80" path="socket:[8066]" dev="sockfs" ino=8066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.248564][ T6299] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 146.250847][ T6299] macsec1: entered promiscuous mode [ 146.255384][ T6299] macsec1: entered allmulticast mode [ 146.257034][ T6299] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 146.261647][ T6299] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 146.264043][ T6299] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 146.436844][ T40] audit: type=1400 audit(1760713087.674:218): avc: denied { create } for pid=6295 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 146.471511][ T843] usb 6-1: USB disconnect, device number 3 [ 147.164693][ T6321] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.91'. [ 147.297300][ T6324] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 147.432590][ T6329] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len [ 147.436189][ T6329] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 147.690003][ T6341] syzkaller1: entered promiscuous mode [ 147.691857][ T6341] syzkaller1: entered allmulticast mode [ 148.160459][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'. [ 148.167131][ T6359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.106'. [ 149.553335][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 149.553347][ T40] audit: type=1400 audit(1760713090.784:248): avc: denied { write } for pid=6382 comm="syz.0.115" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 149.572422][ T40] audit: type=1400 audit(1760713090.784:249): avc: denied { open } for pid=6382 comm="syz.0.115" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 149.579685][ T40] audit: type=1400 audit(1760713090.794:250): avc: denied { ioctl } for pid=6382 comm="syz.0.115" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 149.635987][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.638156][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 149.719201][ T40] audit: type=1400 audit(1760713090.954:251): avc: denied { getopt } for pid=6399 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 149.728261][ T40] audit: type=1400 audit(1760713090.954:252): avc: denied { read } for pid=6399 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 149.760092][ T40] audit: type=1400 audit(1760713090.994:253): avc: denied { setopt } for pid=6407 comm="syz.0.124" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.372341][ T843] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 150.522242][ T843] usb 5-1: Using ep0 maxpacket: 8 [ 150.526254][ T843] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 150.529839][ T843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.533190][ T843] usb 5-1: Product: syz [ 150.534878][ T843] usb 5-1: Manufacturer: syz [ 150.536368][ T843] usb 5-1: SerialNumber: syz [ 150.540556][ T843] usb 5-1: config 0 descriptor?? [ 150.754726][ T843] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 150.779509][ T40] audit: type=1400 audit(1760713092.014:254): avc: denied { ioctl } for pid=6436 comm="syz.1.132" path="socket:[12339]" dev="sockfs" ino=12339 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 150.843861][ T9] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 150.940969][ T6443] netlink: 96 bytes leftover after parsing attributes in process `syz.3.134'. [ 151.025954][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 151.029310][ T9] usb 7-1: config 0 has no interface number 0 [ 151.031333][ T9] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 151.040785][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.157346][ T843] gspca_sunplus: reg_w_riv err -71 [ 151.159061][ T843] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 151.163142][ T843] usb 5-1: USB disconnect, device number 2 [ 151.194738][ T9] usb 7-1: config 0 descriptor?? [ 151.503429][ T9] usb 7-1: selecting invalid altsetting 1 [ 151.508352][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 151.510453][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 151.699511][ T9] DVB: Unable to find symbol cx22700_attach() [ 151.733519][ T9] DVB: Unable to find symbol tda10046_attach() [ 151.735549][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 151.754079][ T9] usb 7-1: USB disconnect, device number 3 [ 151.756536][ T40] audit: type=1400 audit(1760713092.994:255): avc: denied { name_connect } for pid=6451 comm="syz.1.137" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 151.765462][ T40] audit: type=1400 audit(1760713093.004:256): avc: denied { getopt } for pid=6451 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.772840][ T40] audit: type=1400 audit(1760713093.004:257): avc: denied { write } for pid=6451 comm="syz.1.137" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 151.896349][ T6461] veth0_to_team: entered promiscuous mode [ 151.942396][ T49] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 152.096106][ T49] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.103963][ T49] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 152.117270][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.135827][ T49] usb 5-1: Product: syz [ 152.370542][ T49] usb 5-1: Manufacturer: syz [ 152.372059][ T49] usb 5-1: SerialNumber: syz [ 152.499901][ T49] usb 5-1: config 0 descriptor?? [ 152.507586][ T49] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 152.511438][ T49] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 152.755875][ T132] usb 5-1: USB disconnect, device number 3 [ 153.612314][ T49] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 153.764787][ T49] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.767994][ T49] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 153.770760][ T49] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 153.773823][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.777962][ T49] usb 7-1: config 0 descriptor?? [ 153.781298][ T49] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 153.788347][ T49] dvb-usb: bulk message failed: -22 (3/0) [ 153.792970][ T49] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 153.796732][ T49] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 153.799231][ T49] usb 7-1: media controller created [ 153.803843][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.810119][ T49] dvb-usb: bulk message failed: -22 (6/0) [ 153.812048][ T49] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 153.817584][ T49] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input5 [ 153.825089][ T49] dvb-usb: schedule remote query interval to 150 msecs. [ 153.827388][ T49] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 153.901263][ T6496] Zero length message leads to an empty skb [ 153.984554][ T6182] usb 7-1: USB disconnect, device number 4 [ 153.985186][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 153.989009][ T49] dvb-usb: error while querying for an remote control event. [ 154.002071][ T6182] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 154.803665][ T6527] lo speed is unknown, defaulting to 1000 [ 154.806208][ T6527] lo speed is unknown, defaulting to 1000 [ 154.814473][ T6527] lo speed is unknown, defaulting to 1000 [ 154.837987][ T6527] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 154.863431][ T6527] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 154.929837][ T6527] lo speed is unknown, defaulting to 1000 [ 154.935963][ T6527] lo speed is unknown, defaulting to 1000 [ 154.940294][ T6527] lo speed is unknown, defaulting to 1000 [ 154.947417][ T6527] lo speed is unknown, defaulting to 1000 [ 154.965899][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 154.966063][ T40] audit: type=1400 audit(1760713096.034:264): avc: denied { create } for pid=6518 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 154.977707][ T40] audit: type=1400 audit(1760713096.034:265): avc: denied { write } for pid=6518 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 155.470087][ T40] audit: type=1400 audit(1760713096.704:266): avc: denied { ioctl } for pid=6532 comm="syz.0.164" path="socket:[10808]" dev="sockfs" ino=10808 ioctlcmd=0x52d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.694403][ T40] audit: type=1400 audit(1760713096.934:267): avc: denied { ioctl } for pid=6545 comm="syz.0.169" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 155.837000][ T40] audit: type=1400 audit(1760713097.044:268): avc: denied { execute } for pid=6538 comm="syz.2.167" path="/45/cpu.stat" dev="tmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 156.265651][ T6554] tipc: Enabling of bearer rejected, failed to enable media [ 156.464578][ T40] audit: type=1400 audit(1760713097.704:269): avc: denied { read write } for pid=6560 comm="syz.3.174" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 156.475156][ T40] audit: type=1400 audit(1760713097.704:270): avc: denied { open } for pid=6560 comm="syz.3.174" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 156.487066][ T40] audit: type=1400 audit(1760713097.704:271): avc: denied { create } for pid=6560 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 156.495421][ T40] audit: type=1400 audit(1760713097.704:272): avc: denied { ioctl } for pid=6560 comm="syz.3.174" path="socket:[11544]" dev="sockfs" ino=11544 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 156.564225][ T6566] netlink: 64 bytes leftover after parsing attributes in process `syz.3.174'. [ 156.581067][ T40] audit: type=1400 audit(1760713097.814:273): avc: denied { getopt } for pid=6567 comm="syz.2.176" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 157.062275][ T6182] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 157.235584][ T6182] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.238340][ T6182] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.241571][ T6182] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 157.245012][ T6182] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.252055][ T6182] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 157.255979][ T6182] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 157.258510][ T6182] usb 7-1: Product: syz [ 157.259805][ T6182] usb 7-1: Manufacturer: syz [ 157.264906][ T6182] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 157.665388][ T5622] usb 7-1: USB disconnect, device number 5 [ 158.178988][ T6610] syz_tun: entered allmulticast mode [ 160.402489][ T6655] binder_alloc: 6654: binder_alloc_buf, no vma [ 160.592275][ T6182] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 160.689596][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 160.689607][ T40] audit: type=1400 audit(1760713101.924:282): avc: denied { map } for pid=6663 comm="syz.1.210" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 160.700894][ T40] audit: type=1400 audit(1760713101.924:283): avc: denied { execute } for pid=6663 comm="syz.1.210" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 160.761955][ T6182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.766855][ T6182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.770846][ T6182] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 160.775018][ T6182] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.781595][ T6182] usb 5-1: config 0 descriptor?? [ 160.817875][ T6664] ================================================================== [ 160.821372][ T6664] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 160.824386][ T6664] Read of size 8 at addr ffff888025ad34f8 by task syz.1.210/6664 [ 160.829494][ T6664] [ 160.830565][ T6664] CPU: 0 UID: 0 PID: 6664 Comm: syz.1.210 Not tainted syzkaller #0 PREEMPT(full) [ 160.830589][ T6664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 160.830601][ T6664] Call Trace: [ 160.830608][ T6664] [ 160.830616][ T6664] dump_stack_lvl+0x116/0x1f0 [ 160.830642][ T6664] print_report+0xcd/0x630 [ 160.830669][ T6664] ? __virt_addr_valid+0x81/0x610 [ 160.830689][ T6664] ? __phys_addr+0xe8/0x180 [ 160.830706][ T6664] ? __cpa_addr+0x1d3/0x220 [ 160.830726][ T6664] kasan_report+0xe0/0x110 [ 160.830751][ T6664] ? __cpa_addr+0x1d3/0x220 [ 160.830773][ T6664] __cpa_addr+0x1d3/0x220 [ 160.830794][ T6664] cpa_flush+0xec/0x8a0 [ 160.830819][ T6664] ? __pfx_cpa_flush+0x10/0x10 [ 160.830842][ T6664] ? pgprot2cachemode+0x9a/0x130 [ 160.830858][ T6664] ? __pfx_pgprot2cachemode+0x10/0x10 [ 160.830879][ T6664] set_pages_array_wb+0x238/0x280 [ 160.830905][ T6664] ? __pfx_set_pages_array_wb+0x10/0x10 [ 160.830937][ T6664] ? __pfx_drm_gem_shmem_vm_close+0x10/0x10 [ 160.830961][ T6664] drm_gem_shmem_put_pages_locked+0x27e/0x300 [ 160.830985][ T6664] ? ww_mutex_lock+0x37/0x160 [ 160.831009][ T6664] drm_gem_shmem_vm_close+0x63/0xc0 [ 160.831032][ T6664] __mmap_region+0x6bf/0x27a0 [ 160.831051][ T6664] ? find_held_lock+0x2b/0x80 [ 160.831069][ T6664] ? __pfx___mmap_region+0x10/0x10 [ 160.831090][ T6664] ? finish_task_switch.isra.0+0x21c/0xc10 [ 160.831121][ T6664] ? rcu_is_watching+0x12/0xc0 [ 160.831138][ T6664] ? finish_task_switch.isra.0+0x221/0xc10 [ 160.831167][ T6664] ? lockdep_hardirqs_on+0x7c/0x110 [ 160.831189][ T6664] ? finish_task_switch.isra.0+0x221/0xc10 [ 160.831225][ T6664] ? __lock_acquire+0x622/0x1c90 [ 160.831264][ T6664] ? mm_get_unmapped_area+0x95/0xe0 [ 160.831291][ T6664] mmap_region+0x1ab/0x3f0 [ 160.831312][ T6664] ? __get_unmapped_area+0x267/0x440 [ 160.831338][ T6664] do_mmap+0xa3e/0x1210 [ 160.831365][ T6664] ? __pfx_do_mmap+0x10/0x10 [ 160.831390][ T6664] ? __pfx_down_write_killable+0x10/0x10 [ 160.831415][ T6664] ? setup_signal_shadow_stack+0x172/0x1e0 [ 160.831434][ T6664] vm_mmap_pgoff+0x29e/0x470 [ 160.831460][ T6664] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 160.831492][ T6664] ? __local_bh_enable_ip+0xa4/0x120 [ 160.831512][ T6664] ? __x64_sys_futex+0x1e0/0x4c0 [ 160.831563][ T6664] ? __x64_sys_futex+0x1e9/0x4c0 [ 160.831590][ T6664] ksys_mmap_pgoff+0x7d/0x5c0 [ 160.831615][ T6664] ? xfd_validate_state+0x61/0x180 [ 160.831639][ T6664] __x64_sys_mmap+0x125/0x190 [ 160.831662][ T6664] do_syscall_64+0xcd/0xfa0 [ 160.831680][ T6664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.831696][ T6664] RIP: 0033:0x7f980c78efc9 [ 160.831712][ T6664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.831729][ T6664] RSP: 002b:00007f980d709038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 160.831746][ T6664] RAX: ffffffffffffffda RBX: 00007f980c9e5fa0 RCX: 00007f980c78efc9 [ 160.831758][ T6664] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 160.831767][ T6664] RBP: 00007f980c811f91 R08: ffffffffffffffff R09: 0000000000000000 [ 160.831776][ T6664] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 160.831787][ T6664] R13: 00007f980c9e6038 R14: 00007f980c9e5fa0 R15: 00007fff20f92dc8 [ 160.831805][ T6664] [ 160.831811][ T6664] [ 160.962949][ T6664] Allocated by task 6664: [ 160.964813][ T6664] kasan_save_stack+0x33/0x60 [ 160.966769][ T6664] kasan_save_track+0x14/0x30 [ 160.968704][ T6664] __kasan_kmalloc+0xaa/0xb0 [ 160.970606][ T6664] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 160.972817][ T6664] drm_gem_get_pages+0x144/0xa10 [ 160.974883][ T6664] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 160.977394][ T6664] drm_gem_shmem_mmap+0xc9/0x550 [ 160.979422][ T6664] drm_gem_mmap_obj+0x1b5/0x560 [ 160.981443][ T6664] drm_gem_mmap+0x40b/0x620 [ 160.983238][ T6664] __mmap_region+0x1309/0x27a0 [ 160.985150][ T6664] mmap_region+0x1ab/0x3f0 [ 160.986846][ T6664] do_mmap+0xa3e/0x1210 [ 160.988480][ T6664] vm_mmap_pgoff+0x29e/0x470 [ 160.990308][ T6664] ksys_mmap_pgoff+0x32c/0x5c0 [ 160.992245][ T6664] __x64_sys_mmap+0x125/0x190 [ 160.994179][ T6664] do_syscall_64+0xcd/0xfa0 [ 160.995941][ T6664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.998209][ T6664] [ 160.999162][ T6664] The buggy address belongs to the object at ffff888025ad3400 [ 160.999162][ T6664] which belongs to the cache kmalloc-256 of size 256 [ 161.004578][ T6664] The buggy address is located 0 bytes to the right of [ 161.004578][ T6664] allocated 248-byte region [ffff888025ad3400, ffff888025ad34f8) [ 161.010093][ T6664] [ 161.011066][ T6664] The buggy address belongs to the physical page: [ 161.013674][ T6664] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25ad2 [ 161.017141][ T6664] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 161.020529][ T6664] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 161.023637][ T6664] page_type: f5(slab) [ 161.025318][ T6664] raw: 00fff00000000040 ffff88801b442b40 0000000000000000 dead000000000001 [ 161.028658][ T6664] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 161.032068][ T6664] head: 00fff00000000040 ffff88801b442b40 0000000000000000 dead000000000001 [ 161.035736][ T6664] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 161.039504][ T6664] head: 00fff00000000001 ffffea000096b481 00000000ffffffff 00000000ffffffff [ 161.042992][ T6664] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 161.046433][ T6664] page dumped because: kasan: bad access detected [ 161.049103][ T6664] page_owner tracks the page as allocated [ 161.051402][ T6664] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6261, tgid 6260 (syz.3.73), ts 144767337957, free_ts 130119705026 [ 161.059616][ T6664] post_alloc_hook+0x1c0/0x230 [ 161.061601][ T6664] get_page_from_freelist+0x10a3/0x3a30 [ 161.063798][ T6664] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 161.066254][ T6664] alloc_pages_mpol+0x1fb/0x550 [ 161.068671][ T6664] new_slab+0x24a/0x360 [ 161.070386][ T6664] ___slab_alloc+0xdc4/0x1ae0 [ 161.072321][ T6664] __slab_alloc.constprop.0+0x63/0x110 [ 161.074664][ T6664] __kmalloc_cache_noprof+0x477/0x780 [ 161.077023][ T6664] __mmu_notifier_register+0x4b2/0x770 [ 161.079354][ T6664] mmu_notifier_register+0x74/0x1c0 [ 161.081624][ T6664] kvm_dev_ioctl+0xde4/0x1a80 [ 161.083658][ T6664] __x64_sys_ioctl+0x18e/0x210 [ 161.085584][ T6664] do_syscall_64+0xcd/0xfa0 [ 161.087389][ T6664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.089714][ T6664] page last free pid 5950 tgid 5950 stack trace: [ 161.092211][ T6664] __free_frozen_pages+0x7df/0x1160 [ 161.094167][ T6664] qlist_free_all+0x4d/0x120 [ 161.095585][ T6664] kasan_quarantine_reduce+0x195/0x1e0 [ 161.097271][ T6664] __kasan_slab_alloc+0x69/0x90 [ 161.098748][ T6664] __kmalloc_cache_noprof+0x274/0x780 [ 161.100409][ T6664] kobject_uevent_env+0x265/0x1870 [ 161.102128][ T6664] __kobject_del+0x168/0x1f0 [ 161.103567][ T6664] kobject_put+0x327/0x5a0 [ 161.104954][ T6664] netdev_queue_update_kobjects+0x4e5/0x720 [ 161.106785][ T6664] netif_set_real_num_tx_queues+0x151/0x870 [ 161.108620][ T6664] veth_init_queues+0xe1/0x190 [ 161.110091][ T6664] veth_newlink+0x4f3/0xa00 [ 161.111789][ T6664] rtnl_newlink+0xc45/0x2000 [ 161.113691][ T6664] rtnetlink_rcv_msg+0x95e/0xe90 [ 161.115778][ T6664] netlink_rcv_skb+0x158/0x420 [ 161.117865][ T6664] netlink_unicast+0x5aa/0x870 [ 161.120136][ T6664] [ 161.121299][ T6664] Memory state around the buggy address: [ 161.123925][ T6664] ffff888025ad3380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 161.127271][ T6664] ffff888025ad3400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.130620][ T6664] >ffff888025ad3480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 161.133919][ T6664] ^ [ 161.137196][ T6664] ffff888025ad3500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 161.140487][ T6664] ffff888025ad3580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 161.143562][ T6664] ================================================================== [ 161.147560][ T6664] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 161.150667][ T6664] CPU: 1 UID: 0 PID: 6664 Comm: syz.1.210 Not tainted syzkaller #0 PREEMPT(full) [ 161.154341][ T6664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.158642][ T6664] Call Trace: [ 161.160047][ T6664] [ 161.161323][ T6664] dump_stack_lvl+0x3d/0x1f0 [ 161.163300][ T6664] vpanic+0x640/0x6f0 [ 161.165024][ T6664] panic+0xca/0xd0 [ 161.166600][ T6664] ? __pfx_panic+0x10/0x10 [ 161.168401][ T6664] ? __cpa_addr+0x1d3/0x220 [ 161.170326][ T6664] ? preempt_schedule_common+0x44/0xc0 [ 161.172557][ T6664] ? preempt_schedule_thunk+0x16/0x30 [ 161.174811][ T6664] check_panic_on_warn+0xab/0xb0 [ 161.177061][ T6664] end_report+0x107/0x170 [ 161.178977][ T6664] kasan_report+0xee/0x110 [ 161.180895][ T6664] ? __cpa_addr+0x1d3/0x220 [ 161.182798][ T6664] __cpa_addr+0x1d3/0x220 [ 161.184628][ T6664] cpa_flush+0xec/0x8a0 [ 161.186359][ T6664] ? __pfx_cpa_flush+0x10/0x10 [ 161.188363][ T6664] ? pgprot2cachemode+0x9a/0x130 [ 161.190527][ T6664] ? __pfx_pgprot2cachemode+0x10/0x10 [ 161.192688][ T6664] set_pages_array_wb+0x238/0x280 [ 161.194789][ T6664] ? __pfx_set_pages_array_wb+0x10/0x10 [ 161.197039][ T6664] ? __pfx_drm_gem_shmem_vm_close+0x10/0x10 [ 161.199432][ T6664] drm_gem_shmem_put_pages_locked+0x27e/0x300 [ 161.201945][ T6664] ? ww_mutex_lock+0x37/0x160 [ 161.203914][ T6664] drm_gem_shmem_vm_close+0x63/0xc0 [ 161.206086][ T6664] __mmap_region+0x6bf/0x27a0 [ 161.208053][ T6664] ? find_held_lock+0x2b/0x80 [ 161.210001][ T6664] ? __pfx___mmap_region+0x10/0x10 [ 161.212033][ T6664] ? finish_task_switch.isra.0+0x21c/0xc10 [ 161.214393][ T6664] ? rcu_is_watching+0x12/0xc0 [ 161.216431][ T6664] ? finish_task_switch.isra.0+0x221/0xc10 [ 161.218876][ T6664] ? lockdep_hardirqs_on+0x7c/0x110 [ 161.221052][ T6664] ? finish_task_switch.isra.0+0x221/0xc10 [ 161.223507][ T6664] ? __lock_acquire+0x622/0x1c90 [ 161.225678][ T6664] ? mm_get_unmapped_area+0x95/0xe0 [ 161.227784][ T6664] mmap_region+0x1ab/0x3f0 [ 161.229183][ T6664] ? __get_unmapped_area+0x267/0x440 [ 161.230868][ T6664] do_mmap+0xa3e/0x1210 [ 161.232521][ T6664] ? __pfx_do_mmap+0x10/0x10 [ 161.234414][ T6664] ? __pfx_down_write_killable+0x10/0x10 [ 161.236760][ T6664] ? setup_signal_shadow_stack+0x172/0x1e0 [ 161.239161][ T6664] vm_mmap_pgoff+0x29e/0x470 [ 161.241104][ T6664] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 161.243125][ T6664] ? __local_bh_enable_ip+0xa4/0x120 [ 161.245330][ T6664] ? __x64_sys_futex+0x1e0/0x4c0 [ 161.247280][ T6664] ? __x64_sys_futex+0x1e9/0x4c0 [ 161.249255][ T6664] ksys_mmap_pgoff+0x7d/0x5c0 [ 161.251187][ T6664] ? xfd_validate_state+0x61/0x180 [ 161.253268][ T6664] __x64_sys_mmap+0x125/0x190 [ 161.255215][ T6664] do_syscall_64+0xcd/0xfa0 [ 161.257052][ T6664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.259379][ T6664] RIP: 0033:0x7f980c78efc9 [ 161.261207][ T6664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.268867][ T6664] RSP: 002b:00007f980d709038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 161.272228][ T6664] RAX: ffffffffffffffda RBX: 00007f980c9e5fa0 RCX: 00007f980c78efc9 [ 161.275289][ T6664] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 161.277790][ T6664] RBP: 00007f980c811f91 R08: ffffffffffffffff R09: 0000000000000000 [ 161.280679][ T6664] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 161.283580][ T6664] R13: 00007f980c9e6038 R14: 00007f980c9e5fa0 R15: 00007fff20f92dc8 [ 161.286753][ T6664] [ 161.288734][ T6664] Kernel Offset: disabled [ 161.290462][ T6664] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:58:23 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8530e595 RDI=ffffffff9ae0a820 RBP=ffffffff9ae0a7e0 RSP=ffffc9000d2af028 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000069 R14=ffffffff9ae0a7e0 R15=ffffffff8530e530 RIP=ffffffff8530e5bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f980d7096c0 ffffffff 00c00000 GS =0000 ffff8880d69d6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c25df79 CR3=000000002bc02000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3776612fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3776612fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3776612fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3776612ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f377661307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f377661315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000002c00000000 317a797300010009 0200000040020008 0700000a00000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100110000001400 000000327a797300 0300090000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a0000000000 00000001010a0300 00002c0000000031 7a79730001000902 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000a43 RBX=0000000000000003 RCX=0000000000000000 RDX=0000000000000005 RSI=0000000000000003 RDI=ffff88801eef8ba8 RBP=ffff88801eef8000 RSP=ffffc90000a1f498 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000078 R11=0000000000000001 R12=ffff88801eef8b30 R13=ffff88801eef8ba8 R14=0000000000000000 R15=0000000000000001 RIP=ffffffff8198f6b7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ad6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f244cf18889 CR3=0000000039382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00d4000000020000 0008000400080010 00080000000c0200 0000000000080008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0014010000000000 000800080007000c 00080000000c0000 010c000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00d4000000200000 0002000000100008 0000000000000004 000c001a00100000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008ffffffbe0000 0000030000000000 0008ffffffae0000 03e6000000080004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000800080000 0014000000280000 003c000000500000 0064000000840000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006000000000000 0000000000000000 003a0000000001ba 8140000000180000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00200000000e0014 000c000000080004 0020000e00000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffee00000000 0300000000000008 ffffffde00000000 0300000000000008 ZMM25=67c51b6767c51b67 67c51b6767c51b67 67c51b6767c51b67 67c51b6767c51b67 67c51b6767c51b67 67c51b6767c51b67 67c51b6767c51b67 67c51b6767c51b67 ZMM26=c05fdf43c05fdf43 c05fdf43c05fdf43 c05fdf43c05fdf43 c05fdf43c05fdf43 c05fdf43c05fdf43 c05fdf43c05fdf43 c05fdf43c05fdf43 c05fdf43c05fdf43 ZMM27=0c66c8510c66c851 0c66c8510c66c851 0c66c8510c66c851 0c66c8510c66c851 0c66c8510c66c851 0c66c8510c66c851 0c66c8510c66c851 0c66c8510c66c851 ZMM28=000001a00000019f 0000019e0000019d 0000019c0000019b 0000019a00000199 0000019800000197 0000019600000195 0000019400000193 0000019200000191 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6004000060040000 6004000060040000 6004000060040000 6004000060040000 6004000060040000 6004000060040000 6004000060040000 6004000060040000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=1ffff1100d4c75d2 RSI=0000000000000000 RDI=ffffc9000398fac8 RBP=0000000000000000 RSP=ffffc9000398fac0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b668d45 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556c7b0500 ffffffff 00c00000 GS =0000 ffff8880d6bd6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f394c5b12f8 CR3=000000004e74f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa8c97b50 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f394c412fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f394c412fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f394c412fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f394c412ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f394c41307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f394c41315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a442700 RCX=ffffffff81b12c21 RDX=ffff888022d8a480 RSI=ffffffff81b12bfb RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900016bf878 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=ffffed100d4884e1 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81b12c02 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cd6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055556c7cb5c8 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fce10000 Opmask01=0000000080410101 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563376e7c1e8 0000563376e7c1e8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563376e88dd0 0000563376e88dd0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563376c33bb0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563376e7c1e8 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f244d3f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737325400595c483 7373254566872659 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c068359ada8b4eb 7373737610441d05 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 32706f6f6c2f6b63 6f6c622f6c617574 7269762f73656369 7665642f7379732f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 32706f6f6c2f6b63 6f6c622f6c617574 7269762f73656369 7665642f7379732f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d0d11440f0d0d11 430f0d0d11420f0d 0d11040f0d00040c 005145534b534944 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000033 3332393830303631 0000000000000021 0000000000000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c6d61722c 4142312c4339312c 3739312c3539312c 3339312c3239312c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3139312c3039312c 4638312c4538312c 4238312c3938312c 3838312c3538312c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3438312c3138312c 3937312c3737312c 3437312c4436312c 4336312c3636312c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3336312c3136312c 3036312c30462c46 442c30442c46432c 38412c37412c4639 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000