last executing test programs: 13.990315273s ago: executing program 0 (id=34): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xe1b4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xf3a, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x8001, 0x8, 0x6, 0x2, 0x1a, "673caa226d6df00f7fbd86f91d654485f15a44"}) r4 = io_uring_setup(0xfe1, 0x0) socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='!\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r5}]}, 0x24}}, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12.260700442s ago: executing program 0 (id=35): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x24, r1, 0x1, 0x70bd2b, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x24}}, 0x80) 11.971774683s ago: executing program 0 (id=36): socket$kcm(0x2, 0xa, 0x73) socket$kcm(0x2, 0xa, 0x73) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000340)={0x7, 0x3, &(0x7f0000000240)=[0x56, 0x1, 0x1], &(0x7f0000000280), &(0x7f00000002c0), 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x141601) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x1c, 0x0, @gue={{0x1, 0x1, 0x1, 0xc0, 0x100, @void}, "6b3e750a01ab8a6eaa9f16475e4f3e77"}}}}}}, 0x0) 2.800288224s ago: executing program 1 (id=40): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96", 0xb, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000080) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="400001", @ANYBLOB="14"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 1.699422655s ago: executing program 0 (id=41): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a00000000000000", @ANYRES32, @ANYRESHEX=r0], 0x270}, 0x1, 0x0, 0x0, 0x22008015}, 0x4) 1.579816317s ago: executing program 0 (id=42): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x100}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r0, 0x2) sendto$inet6(r0, &(0x7f00000004c0)="fe9b9ee16e", 0x5, 0x20000041, &(0x7f00000001c0)={0xa, 0x2, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, 0x1c) 1.360184332s ago: executing program 0 (id=43): openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000100)=""/195, 0xc3}, {0x0}, {0x0}, {0x0}], 0x4) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) 1.359898321s ago: executing program 1 (id=44): r0 = socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0xc0d0, &(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10) 1.258278392s ago: executing program 1 (id=45): openat$dsp1(0xffffffffffffff9c, 0x0, 0x88a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) 480.633117ms ago: executing program 1 (id=46): getgid() socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f0000000500)="ad02da73b0bf2981ebf3577526b5cfa18e81f870dccda555138093a43c6867ffa9be67400f66d8a6e5d265211d764a4ca96601ea5590caf651834ea34ceb47a0b3f8aefb554df8ebbb27311ab3", 0x4d, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 320.799545ms ago: executing program 1 (id=47): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$inet(0x2, 0x80001, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='!\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r0}]}, 0x24}}, 0x0) 0s ago: executing program 1 (id=48): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_parport\x00', [0x294, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x200009ea, 0x20000010, 0x40000, 0x8, 0x4008, 0x746f, 0x8, 0x5, 0x8, 0x7a2e6ff0, 0x4, 0x7ffd]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$COMEDI_CMD(r0, 0x80406409, 0x0) syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): [ 41.334720][ T28] audit: type=1400 audit(41.250:89): avc: denied { write } for pid=3082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.604419][ T28] audit: type=1400 audit(41.520:90): avc: denied { write } for pid=3086 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.841993][ T28] audit: type=1400 audit(45.760:91): avc: denied { read write } for pid=3091 comm="scp" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.843926][ T28] audit: type=1400 audit(45.760:92): avc: denied { open } for pid=3091 comm="scp" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:39671' (ED25519) to the list of known hosts. [ 63.954428][ T28] audit: type=1400 audit(63.860:93): avc: denied { name_bind } for pid=3094 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 65.139943][ T28] audit: type=1400 audit(65.040:94): avc: denied { execute } for pid=3095 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 65.179117][ T28] audit: type=1400 audit(65.080:95): avc: denied { execute_no_trans } for pid=3095 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 68.517271][ T28] audit: type=1400 audit(68.440:96): avc: denied { mounton } for pid=3095 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 68.521309][ T28] audit: type=1400 audit(68.440:97): avc: denied { mount } for pid=3095 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.532386][ T3095] cgroup: Unknown subsys name 'net' [ 68.541555][ T28] audit: type=1400 audit(68.460:98): avc: denied { unmount } for pid=3095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.701721][ T3095] cgroup: Unknown subsys name 'cpuset' [ 68.706610][ T3095] cgroup: Unknown subsys name 'hugetlb' [ 68.707688][ T3095] cgroup: Unknown subsys name 'rlimit' [ 68.882932][ T28] audit: type=1400 audit(68.800:99): avc: denied { setattr } for pid=3095 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.884906][ T28] audit: type=1400 audit(68.800:100): avc: denied { mounton } for pid=3095 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 68.889245][ T28] audit: type=1400 audit(68.800:101): avc: denied { mount } for pid=3095 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 69.057771][ T3097] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 69.060785][ T28] audit: type=1400 audit(68.980:102): avc: denied { relabelto } for pid=3097 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 69.063788][ T28] audit: type=1400 audit(68.980:103): avc: denied { write } for pid=3097 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 69.092926][ T28] audit: type=1400 audit(69.010:104): avc: denied { read } for pid=3095 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 69.096094][ T28] audit: type=1400 audit(69.010:105): avc: denied { open } for pid=3095 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 75.848948][ T3095] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.059397][ T28] audit: type=1400 audit(77.980:106): avc: denied { execmem } for pid=3098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 78.128028][ T28] audit: type=1400 audit(78.050:107): avc: denied { read } for pid=3100 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.128582][ T28] audit: type=1400 audit(78.050:108): avc: denied { open } for pid=3100 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.148341][ T28] audit: type=1400 audit(78.070:109): avc: denied { mounton } for pid=3100 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 78.176975][ T28] audit: type=1400 audit(78.100:110): avc: denied { module_request } for pid=3100 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 78.179086][ T28] audit: type=1400 audit(78.100:111): avc: denied { module_request } for pid=3101 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 78.262752][ T28] audit: type=1400 audit(78.180:112): avc: denied { sys_module } for pid=3101 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 78.894855][ T28] audit: type=1400 audit(78.810:113): avc: denied { ioctl } for pid=3101 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=678 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.922127][ T3100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.931001][ T3100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.022623][ T3101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.032090][ T3101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.732046][ T3100] hsr_slave_0: entered promiscuous mode [ 80.735269][ T3100] hsr_slave_1: entered promiscuous mode [ 80.842408][ T3101] hsr_slave_0: entered promiscuous mode [ 80.847312][ T3101] hsr_slave_1: entered promiscuous mode [ 80.849438][ T3101] debugfs: 'hsr0' already exists in 'hsr' [ 80.852689][ T3101] Cannot create hsr debugfs directory [ 81.196176][ T28] audit: type=1400 audit(81.110:114): avc: denied { create } for pid=3100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.196562][ T28] audit: type=1400 audit(81.110:115): avc: denied { write } for pid=3100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.203545][ T3100] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.214418][ T3100] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.218901][ T3100] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.222889][ T3100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.229330][ T3100] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.232286][ T3100] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.242919][ T3100] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.248362][ T3100] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.314918][ T3101] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.322049][ T3101] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.330318][ T3101] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.337505][ T3101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.341401][ T3101] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.348498][ T3101] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.357348][ T3101] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.364908][ T3101] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.057372][ T3100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.079605][ T3101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.443588][ T3100] veth0_vlan: entered promiscuous mode [ 84.474174][ T3100] veth1_vlan: entered promiscuous mode [ 84.553037][ T3100] veth0_macvtap: entered promiscuous mode [ 84.582950][ T3100] veth1_macvtap: entered promiscuous mode [ 84.685223][ T961] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.686679][ T961] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.686787][ T961] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.686859][ T961] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.856372][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 84.856705][ T28] audit: type=1400 audit(84.770:117): avc: denied { mount } for pid=3100 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.867208][ T28] audit: type=1400 audit(84.790:118): avc: denied { mounton } for pid=3100 comm="syz-executor" path="/syzkaller.dlvuSt/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.883860][ T28] audit: type=1400 audit(84.790:119): avc: denied { mount } for pid=3100 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.889103][ T3101] veth0_vlan: entered promiscuous mode [ 84.895030][ T28] audit: type=1400 audit(84.810:120): avc: denied { mounton } for pid=3100 comm="syz-executor" path="/syzkaller.dlvuSt/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 84.914648][ T28] audit: type=1400 audit(84.830:121): avc: denied { mounton } for pid=3100 comm="syz-executor" path="/syzkaller.dlvuSt/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 84.918426][ T3101] veth1_vlan: entered promiscuous mode [ 84.954321][ T28] audit: type=1400 audit(84.870:122): avc: denied { unmount } for pid=3100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.963604][ T28] audit: type=1400 audit(84.880:123): avc: denied { mounton } for pid=3100 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.969832][ T28] audit: type=1400 audit(84.880:124): avc: denied { mount } for pid=3100 comm="syz-executor" name="/" dev="gadgetfs" ino=3118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 84.991659][ T28] audit: type=1400 audit(84.910:125): avc: denied { mount } for pid=3100 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.993726][ T28] audit: type=1400 audit(84.910:126): avc: denied { mounton } for pid=3100 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 85.011262][ T3101] veth0_macvtap: entered promiscuous mode [ 85.033771][ T3101] veth1_macvtap: entered promiscuous mode [ 85.119515][ T3100] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.140720][ T961] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.142092][ T961] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.146870][ T961] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.147295][ T961] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.889102][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 89.889502][ T28] audit: type=1400 audit(89.810:146): avc: denied { ioctl } for pid=3736 comm="syz.0.5" path="socket:[2369]" dev="sockfs" ino=2369 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.558880][ T28] audit: type=1400 audit(90.480:147): avc: denied { append } for pid=3743 comm="syz.0.7" name="dsp" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.898072][ T28] audit: type=1400 audit(90.820:148): avc: denied { create } for pid=3747 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.642845][ T28] audit: type=1400 audit(91.560:149): avc: denied { sqpoll } for pid=3757 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 91.936250][ T3708] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.096036][ T3708] usb 1-1: Using ep0 maxpacket: 32 [ 92.108241][ T3708] usb 1-1: config 0 has no interfaces? [ 92.127245][ T3708] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 92.127435][ T3708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.127621][ T3708] usb 1-1: Product: syz [ 92.127761][ T3708] usb 1-1: Manufacturer: syz [ 92.127845][ T3708] usb 1-1: SerialNumber: syz [ 92.135900][ T3708] usb 1-1: config 0 descriptor?? [ 92.899524][ T40] usb 1-1: USB disconnect, device number 2 [ 95.898867][ T28] audit: type=1400 audit(95.820:150): avc: denied { ioctl } for pid=3775 comm="syz.1.14" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=2414 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.005795][ T28] audit: type=1400 audit(95.920:151): avc: denied { create } for pid=3777 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.012152][ T28] audit: type=1400 audit(95.930:152): avc: denied { setopt } for pid=3777 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.019316][ T28] audit: type=1400 audit(95.940:153): avc: denied { connect } for pid=3777 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.028301][ T28] audit: type=1400 audit(95.950:154): avc: denied { read } for pid=3777 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.533312][ T28] audit: type=1400 audit(96.450:155): avc: denied { write } for pid=3777 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.591103][ T28] audit: type=1400 audit(98.510:156): avc: denied { setopt } for pid=3780 comm="syz.1.16" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.602897][ T3781] syz_tun: entered allmulticast mode [ 102.987410][ T28] audit: type=1400 audit(102.910:157): avc: denied { create } for pid=3797 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.433381][ T28] audit: type=1400 audit(105.350:158): avc: denied { name_bind } for pid=3801 comm="syz.0.22" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 105.433854][ T28] audit: type=1400 audit(105.350:159): avc: denied { node_bind } for pid=3801 comm="syz.0.22" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 115.605791][ T28] audit: type=1400 audit(115.520:160): avc: denied { create } for pid=3825 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.630170][ T28] audit: type=1400 audit(115.550:161): avc: denied { bind } for pid=3825 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.634470][ T28] audit: type=1400 audit(115.550:162): avc: denied { connect } for pid=3825 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.939749][ T28] audit: type=1400 audit(116.860:163): avc: denied { associate } for pid=3832 comm="syz.0.31" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 117.117525][ T3835] netlink: 40 bytes leftover after parsing attributes in process `syz.0.32'. [ 117.151633][ T3835] Zero length message leads to an empty skb [ 117.268192][ T28] audit: type=1400 audit(117.190:164): avc: denied { write } for pid=3837 comm="syz.0.33" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.176115][ T28] audit: type=1400 audit(118.090:165): avc: denied { map_create } for pid=3839 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 118.184737][ T28] audit: type=1400 audit(118.100:166): avc: denied { write } for pid=3830 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.358053][ T3850] syz.0.36 uses obsolete (PF_INET,SOCK_PACKET) [ 121.847537][ T28] audit: type=1400 audit(121.770:167): avc: denied { name_bind } for pid=3849 comm="syz.0.36" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 129.690862][ T3870] netlink: 592 bytes leftover after parsing attributes in process `syz.0.41'. [ 129.837487][ T28] audit: type=1400 audit(129.760:168): avc: denied { name_bind } for pid=3872 comm="syz.0.42" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 130.020230][ T28] audit: type=1400 audit(129.940:169): avc: denied { wake_alarm } for pid=3875 comm="syz.0.43" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 130.052918][ T28] audit: type=1400 audit(129.970:170): avc: denied { read } for pid=3875 comm="syz.0.43" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=2533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 131.368226][ T3889] 8<--- cut here --- [ 131.369308][ T3889] Unable to handle kernel paging request at virtual address fee00294 when write [ 131.378747][ T28] audit: type=1400 audit(131.290:171): avc: denied { read } for pid=2909 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 131.380916][ T28] audit: type=1400 audit(131.300:172): avc: denied { search } for pid=2909 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.393786][ T28] audit: type=1400 audit(131.310:173): avc: denied { write search } for pid=2909 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.394330][ T28] audit: type=1400 audit(131.310:174): avc: denied { add_name } for pid=2909 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.394593][ T28] audit: type=1400 audit(131.310:175): avc: denied { create } for pid=2909 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 131.394825][ T28] audit: type=1400 audit(131.310:176): avc: denied { append open } for pid=2909 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 131.395045][ T28] audit: type=1400 audit(131.310:177): avc: denied { getattr } for pid=2909 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 131.407315][ T3889] [fee00294] *pgd=80000080007003, *pmd=00000000 [ 131.414884][ T3889] Internal error: Oops: a06 [#1] SMP ARM [ 131.416724][ T3889] Modules linked in: [ 131.417667][ T3889] CPU: 1 UID: 0 PID: 3889 Comm: syz.1.48 Not tainted syzkaller #0 PREEMPT [ 131.418182][ T3889] Hardware name: ARM-Versatile Express SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 131.418733][ T3889] PC is at parport_attach+0x184/0x1e0 [ 131.420364][ T3889] LR is at parport_attach+0x174/0x1e0 [ 131.420629][ T3889] pc : [<8145b8b4>] lr : [<8145b8a4>] psr: 60000013 [ 131.420887][ T3889] sp : dfb99d30 ip : dfb99d30 fp : dfb99d54 [ 131.421149][ T3889] r10: 82d29754 r9 : 00000003 r8 : 841906c0 [ 131.421413][ T3889] r7 : dfb99d90 r6 : 841906c0 r5 : 00000000 r4 : 00000000 [ 131.421749][ T3889] r3 : fee00294 r2 : 81e27308 r1 : 00000001 r0 : 8145b514 [ 131.422165][ T3889] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 131.422543][ T3889] Control: 30c5387d Table: 8640e800 DAC: 00000000 [ 131.424149][ T3889] Register r0 information: non-slab/vmalloc memory [ 131.425136][ T3889] Register r1 information: non-paged memory [ 131.425619][ T3889] Register r2 information: non-slab/vmalloc memory [ 131.426105][ T3889] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 131.426714][ T3889] Register r4 information: NULL pointer [ 131.427020][ T3889] Register r5 information: NULL pointer [ 131.427340][ T3889] Register r6 information: slab kmalloc-192 start 841906c0 pointer offset 0 size 192 [ 131.428388][ T3889] Register r7 information: 2-page vmalloc region starting at 0xdfb98000 allocated at kernel_clone+0xc4/0x444 [ 131.429011][ T3889] Register r8 information: slab kmalloc-192 start 841906c0 pointer offset 0 size 192 [ 131.429552][ T3889] Register r9 information: non-paged memory [ 131.429879][ T3889] Register r10 information: non-slab/vmalloc memory [ 131.430157][ T3889] Register r11 information: 2-page vmalloc region starting at 0xdfb98000 allocated at kernel_clone+0xc4/0x444 [ 131.430640][ T3889] Register r12 information: 2-page vmalloc region starting at 0xdfb98000 allocated at kernel_clone+0xc4/0x444 [ 131.431110][ T3889] Process syz.1.48 (pid: 3889, stack limit = 0xdfb98000) [ 131.431567][ T3889] Stack: (0xdfb99d30 to 0xdfb9a000) [ 131.431940][ T3889] 9d20: 824bcb94 841906c0 00000000 82bd2368 [ 131.432305][ T3889] 9d40: 81e277c8 00000000 dfb99d8c dfb99d58 81457430 8145b73c 40946400 00000000 [ 131.432777][ T3889] 9d60: dfb99d7c 20000140 841906c0 b5403587 40946400 00000000 00000003 83f67080 [ 131.433144][ T3889] 9d80: dfb99e4c dfb99d90 81452c3c 81457334 656d6f63 705f6964 6f707261 00007472 [ 131.433531][ T3889] 9da0: 00000000 00000294 00000002 7fffffff 00000008 0000002f 00002006 000000f1 [ 131.433975][ T3889] 9dc0: 00000008 00080ffa 00000002 00000000 00008500 00001003 01000004 0000000f [ 131.434429][ T3889] 9de0: 00010000 ffffffa8 7ffffffd 000001ff 200009ea 20000010 00040000 00000008 [ 131.434871][ T3889] 9e00: 00004008 0000746f 00000008 00000005 00000008 7a2e6ff0 00000004 00007ffd [ 131.435248][ T3889] 9e20: 00000000 490582c4 00000000 84e06080 841906c0 20000140 40946400 00000000 [ 131.435814][ T3889] 9e40: dfb99f14 dfb99e50 81453f60 81452b74 00000000 490582c4 00000000 00000000 [ 131.436255][ T3889] 9e60: 82531804 dfb99ea4 0000005f 841d8b68 00000064 841906f0 dfb99ee4 dfb99e88 [ 131.436577][ T3889] 9e80: 807eaa84 807e0d98 00000064 00000001 00000000 dfb99ea4 830eb490 834ecbb0 [ 131.436890][ T3889] 9ea0: 00006400 0000000b dfb99e98 00000000 00000000 490582c4 00000000 84e06080 [ 131.437231][ T3889] 9ec0: 40946400 20000140 20000140 84e06080 00000003 83f67080 dfb99ef4 dfb99ee8 [ 131.437606][ T3889] 9ee0: 807eabb8 490582c4 dfb99f14 00000000 84e06081 40946400 20000140 84e06080 [ 131.437948][ T3889] 9f00: 00000003 83f67080 dfb99fa4 dfb99f18 805a2310 81453c18 ecac8b10 83f67080 [ 131.438452][ T3889] 9f20: dfb99f3c dfb99f30 81b1b294 81b1b160 dfb99f54 dfb99f40 8025a6ac 8028e2e4 [ 131.438847][ T3889] 9f40: dfb99fb0 40000000 dfb99f84 dfb99f58 80220be0 8025a668 00000000 82a1c63c [ 131.439212][ T3889] 9f60: dfb99fb0 0013e9b0 ecac8b10 80220b34 00000000 490582c4 dfb99fac 00000000 [ 131.439574][ T3889] 9f80: 00000000 00346310 00000036 8020029c 83f67080 00000036 00000000 dfb99fa8 [ 131.440016][ T3889] 9fa0: 80200060 805a20d8 00000000 00000000 00000003 40946400 20000140 00000000 [ 131.440395][ T3889] 9fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f4f0dc [ 131.440829][ T3889] 9fe0: 76f4ee88 76f4ee78 00018ebc 00130810 60000010 00000003 00000000 00000000 [ 131.441315][ T3889] Call trace: [ 131.441871][ T3889] [<8145b730>] (parport_attach) from [<81457430>] (comedi_device_attach+0x108/0x244) [ 131.442657][ T3889] r6:00000000 r5:81e277c8 r4:82bd2368 [ 131.443011][ T3889] [<81457328>] (comedi_device_attach) from [<81452c3c>] (do_devconfig_ioctl+0xd4/0x21c) [ 131.443499][ T3889] r10:83f67080 r9:00000003 r8:00000000 r7:40946400 r6:b5403587 r5:841906c0 [ 131.443875][ T3889] r4:20000140 [ 131.444078][ T3889] [<81452b68>] (do_devconfig_ioctl) from [<81453f60>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 131.444514][ T3889] r8:00000000 r7:40946400 r6:20000140 r5:841906c0 r4:84e06080 [ 131.444773][ T3889] [<81453c0c>] (comedi_unlocked_ioctl) from [<805a2310>] (sys_ioctl+0x244/0xb5c) [ 131.445426][ T3889] r10:83f67080 r9:00000003 r8:84e06080 r7:20000140 r6:40946400 r5:84e06081 [ 131.445779][ T3889] r4:00000000 [ 131.445979][ T3889] [<805a20cc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 131.446493][ T3889] Exception stack(0xdfb99fa8 to 0xdfb99ff0) [ 131.446852][ T3889] 9fa0: 00000000 00000000 00000003 40946400 20000140 00000000 [ 131.447298][ T3889] 9fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f4f0dc [ 131.447743][ T3889] 9fe0: 76f4ee88 76f4ee78 00018ebc 00130810 [ 131.448146][ T3889] r10:00000036 r9:83f67080 r8:8020029c r7:00000036 r6:00346310 r5:00000000 [ 131.448499][ T3889] r4:00000000 [ 131.449042][ T3889] Code: e5963064 e3a04000 e7f33053 e2433612 (e5c34000) [ 131.452037][ T3889] ---[ end trace 0000000000000000 ]--- [ 131.489259][ T3889] Kernel panic - not syncing: Fatal exception [ 131.491662][ T3889] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:08:15 Registers: info registers vcpu 0 CPU#0 R00=00000001 R01=00000007 R02=7e8c01c0 R03=7e8c02bc R04=00000008 R05=00000000 R06=00000000 R07=0000019e R08=00000001 R09=013b3e18 R10=00000007 R11=7e8c02bc R12=00000001 R13=ebee9ff8 R14=769f0590 R15=769f0590 PSR=60000093 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000001 R01=00000000 R02=00000cc0 R03=00000000 R04=00000001 R05=830c4cc0 R06=00000000 R07=858f4b00 R08=00000000 R09=00000cc0 R10=00000080 R11=ebdd5d0c R12=ebdd5ce0 R13=ebdd5ce0 R14=8055f4fc R15=8055f514 PSR=a00f0013 N-C- A S svc32 s00=72656820 s01=2d2d2065 d00=2d2d206572656820 s02=00000000 s03=00000000 d01=0000000000000000 s04=ef0cee00 s05=ef0cee00 d02=ef0cee00ef0cee00 s06=08040200 s07=80402000 d03=8040200008040200 s08=00000c00 s09=c0200c03 d04=c0200c0300000c00 s10=08040201 s11=80402000 d05=8040200008040201 s12=08040201 s13=80402010 d06=8040201008040201 s14=08040201 s15=80402010 d07=8040201008040201 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000