last executing test programs: 4.209563351s ago: executing program 0 (id=77): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 2.712043964s ago: executing program 0 (id=79): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x6, 0xc}, &(0x7f0000000140)=0x90) 2.63276495s ago: executing program 0 (id=80): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x800, 0x4}, 0x10) write(r0, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r0, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) 2.543157307s ago: executing program 0 (id=81): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1f769a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.31846831s ago: executing program 1 (id=84): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000001d"], 0x20) 1.19206165s ago: executing program 1 (id=85): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f00000002c0), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f00000000c0), 0x0}, 0x20) 873.654544ms ago: executing program 1 (id=86): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000020, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='ext4_es_remove_extent\x00', r1}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r2, 0x20, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001a40)=""/4096, 0x1000}}, 0x10) 873.348334ms ago: executing program 0 (id=87): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x7845, 0x10100, 0x0, 0x10000}, &(0x7f0000000040), &(0x7f00000019c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) connect$inet6(r0, &(0x7f0000001980)={0xa, 0x4e20, 0x3d, @private1, 0xfffff79b}, 0x1c) 507.337842ms ago: executing program 1 (id=88): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x5, 0x6, 0x8}, 0x10) 506.703701ms ago: executing program 0 (id=89): syz_open_dev$vcsn(&(0x7f00000004c0), 0x2, 0x484101) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd62, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 181.486846ms ago: executing program 1 (id=90): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfd8cb6d8384c3454}, 0x0) 0s ago: executing program 1 (id=91): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r3, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) kernel console output (not intermixed with test programs): [ 55.216513][ T31] audit: type=1400 audit(55.130:68): avc: denied { read write } for pid=3077 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.221044][ T31] audit: type=1400 audit(55.140:69): avc: denied { open } for pid=3077 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:53438' (ED25519) to the list of known hosts. [ 65.953439][ T31] audit: type=1400 audit(65.820:70): avc: denied { name_bind } for pid=3078 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 67.788160][ T31] audit: type=1400 audit(67.700:71): avc: denied { execute } for pid=3080 comm="sh" name="syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 67.800317][ T31] audit: type=1400 audit(67.710:72): avc: denied { execute_no_trans } for pid=3080 comm="sh" path="/syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 71.869197][ T31] audit: type=1400 audit(71.780:73): avc: denied { mounton } for pid=3080 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 71.870505][ T31] audit: type=1400 audit(71.780:74): avc: denied { mount } for pid=3080 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 71.879205][ T3080] cgroup: Unknown subsys name 'net' [ 71.891540][ T31] audit: type=1400 audit(71.810:75): avc: denied { unmount } for pid=3080 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.247192][ T3080] cgroup: Unknown subsys name 'cpuset' [ 72.262114][ T3080] cgroup: Unknown subsys name 'hugetlb' [ 72.263421][ T3080] cgroup: Unknown subsys name 'rlimit' [ 72.607593][ T31] audit: type=1400 audit(72.520:76): avc: denied { setattr } for pid=3080 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.612786][ T31] audit: type=1400 audit(72.530:77): avc: denied { mounton } for pid=3080 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 72.613943][ T31] audit: type=1400 audit(72.530:78): avc: denied { mount } for pid=3080 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 72.878168][ T3082] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 72.885228][ T31] audit: type=1400 audit(72.800:79): avc: denied { relabelto } for pid=3082 comm="mkswap" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 72.886758][ T31] audit: type=1400 audit(72.800:80): avc: denied { write } for pid=3082 comm="mkswap" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 72.919956][ T31] audit: type=1400 audit(72.830:81): avc: denied { read } for pid=3080 comm="syz-executor" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 72.924965][ T31] audit: type=1400 audit(72.840:82): avc: denied { open } for pid=3080 comm="syz-executor" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 80.052663][ T3080] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.334747][ T31] audit: type=1400 audit(82.250:83): avc: denied { execmem } for pid=3083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 82.402098][ T31] audit: type=1400 audit(82.320:84): avc: denied { read } for pid=3085 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 82.409455][ T31] audit: type=1400 audit(82.320:85): avc: denied { open } for pid=3085 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 82.414832][ T31] audit: type=1400 audit(82.330:86): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 82.444946][ T31] audit: type=1400 audit(82.360:87): avc: denied { module_request } for pid=3086 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 82.447514][ T31] audit: type=1400 audit(82.360:88): avc: denied { module_request } for pid=3085 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 82.540789][ T31] audit: type=1400 audit(82.450:89): avc: denied { sys_module } for pid=3086 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 83.269560][ T31] audit: type=1400 audit(83.180:90): avc: denied { ioctl } for pid=3086 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=677 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.881967][ T3086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.898208][ T3086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.096139][ T3085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.102556][ T3085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.014644][ T3086] hsr_slave_0: entered promiscuous mode [ 86.020522][ T3086] hsr_slave_1: entered promiscuous mode [ 86.233627][ T3085] hsr_slave_0: entered promiscuous mode [ 86.237131][ T3085] hsr_slave_1: entered promiscuous mode [ 86.242758][ T3085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.243327][ T3085] Cannot create hsr debugfs directory [ 86.500165][ T31] audit: type=1400 audit(86.420:91): avc: denied { create } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.503070][ T31] audit: type=1400 audit(86.420:92): avc: denied { write } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.515418][ T3086] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.563321][ T3086] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.573978][ T3086] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.595183][ T3086] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.833158][ T3085] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.846134][ T3085] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.857392][ T3085] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.870316][ T3085] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.705091][ T3086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.892771][ T3085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.689931][ T3086] veth0_vlan: entered promiscuous mode [ 91.732798][ T3086] veth1_vlan: entered promiscuous mode [ 91.736538][ T3085] veth0_vlan: entered promiscuous mode [ 91.775550][ T3085] veth1_vlan: entered promiscuous mode [ 91.837996][ T3086] veth0_macvtap: entered promiscuous mode [ 91.869769][ T3086] veth1_macvtap: entered promiscuous mode [ 91.882438][ T3085] veth0_macvtap: entered promiscuous mode [ 91.906272][ T3085] veth1_macvtap: entered promiscuous mode [ 91.982386][ T3086] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.983229][ T3086] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.983591][ T3086] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.983909][ T3086] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.025393][ T3085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.025965][ T3085] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.026347][ T3085] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.026669][ T3085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.177266][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 92.177357][ T31] audit: type=1400 audit(92.090:94): avc: denied { mount } for pid=3086 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 92.199487][ T31] audit: type=1400 audit(92.110:95): avc: denied { mounton } for pid=3086 comm="syz-executor" path="/syzkaller.Ia6PUi/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 92.215380][ T31] audit: type=1400 audit(92.110:96): avc: denied { mount } for pid=3086 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 92.235783][ T31] audit: type=1400 audit(92.150:97): avc: denied { mounton } for pid=3086 comm="syz-executor" path="/syzkaller.Ia6PUi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 92.248160][ T31] audit: type=1400 audit(92.160:98): avc: denied { mounton } for pid=3086 comm="syz-executor" path="/syzkaller.Ia6PUi/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 92.266338][ T31] audit: type=1400 audit(92.180:99): avc: denied { unmount } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 92.277324][ T31] audit: type=1400 audit(92.190:100): avc: denied { mounton } for pid=3086 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 92.285727][ T31] audit: type=1400 audit(92.200:102): avc: denied { mount } for pid=3086 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 92.286824][ T31] audit: type=1400 audit(92.200:101): avc: denied { mount } for pid=3085 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 92.287631][ T31] audit: type=1400 audit(92.200:103): avc: denied { mounton } for pid=3085 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 92.367874][ T3086] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.367888][ T3085] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.187114][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 99.187240][ T31] audit: type=1400 audit(99.100:126): avc: denied { create } for pid=3805 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.465360][ T31] audit: type=1400 audit(100.380:127): avc: denied { name_bind } for pid=3809 comm="syz.1.16" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 100.466563][ T31] audit: type=1400 audit(100.380:128): avc: denied { node_bind } for pid=3809 comm="syz.1.16" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 102.470710][ T31] audit: type=1400 audit(102.390:129): avc: denied { create } for pid=3815 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.484222][ T31] audit: type=1400 audit(102.400:130): avc: denied { ioctl } for pid=3815 comm="syz.1.19" path="socket:[2440]" dev="sockfs" ino=2440 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 103.790788][ T31] audit: type=1400 audit(103.710:131): avc: denied { create } for pid=3819 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.814673][ T31] audit: type=1400 audit(103.720:132): avc: denied { setopt } for pid=3819 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.859728][ T31] audit: type=1400 audit(103.760:133): avc: denied { write } for pid=3819 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.996729][ T31] audit: type=1400 audit(103.910:134): avc: denied { read } for pid=3819 comm="syz.1.21" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 105.137081][ T31] audit: type=1400 audit(105.050:135): avc: denied { create } for pid=3821 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.773956][ T31] audit: type=1400 audit(105.690:136): avc: denied { ioctl } for pid=3821 comm="syz.1.22" path="socket:[2459]" dev="sockfs" ino=2459 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.072437][ T31] audit: type=1400 audit(106.990:137): avc: denied { create } for pid=3827 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.088008][ T31] audit: type=1400 audit(107.000:138): avc: denied { write } for pid=3827 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.896556][ T3833] netlink: 'syz.0.25': attribute type 13 has an invalid length. [ 107.897411][ T3833] netlink: 288 bytes leftover after parsing attributes in process `syz.0.25'. [ 108.130707][ T2879] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.329983][ T2879] usb 2-1: Using ep0 maxpacket: 32 [ 108.366721][ T2879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.367480][ T2879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.368230][ T2879] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 108.373465][ T2879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.383118][ T2879] usb 2-1: config 0 descriptor?? [ 108.412400][ T2879] hub 2-1:0.0: USB hub found [ 108.637324][ T2879] hub 2-1:0.0: 1 port detected [ 108.864714][ T2879] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 108.865329][ T2879] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 108.895156][ T2879] usbhid 2-1:0.0: can't add hid device: -71 [ 108.896025][ T2879] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 108.941042][ T2879] usb 2-1: USB disconnect, device number 2 [ 109.013204][ T3850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 109.132651][ T31] audit: type=1400 audit(109.050:139): avc: denied { write } for pid=3851 comm="syz.1.28" path="socket:[2486]" dev="sockfs" ino=2486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.234793][ T31] audit: type=1400 audit(109.150:140): avc: denied { sqpoll } for pid=3837 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 109.252421][ T31] audit: type=1400 audit(109.160:141): avc: denied { map } for pid=3837 comm="syz.0.26" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 109.261339][ T31] audit: type=1400 audit(109.170:142): avc: denied { read write } for pid=3837 comm="syz.0.26" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 109.357119][ T3856] Zero length message leads to an empty skb [ 109.512483][ T31] audit: type=1400 audit(109.430:143): avc: denied { create } for pid=3860 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.533926][ T31] audit: type=1400 audit(109.450:144): avc: denied { setopt } for pid=3860 comm="syz.0.31" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.935011][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 111.935160][ T31] audit: type=1400 audit(111.850:146): avc: denied { write } for pid=3862 comm="syz.0.32" path="socket:[1944]" dev="sockfs" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.051786][ T31] audit: type=1400 audit(118.970:147): avc: denied { create } for pid=3888 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 119.064207][ T31] audit: type=1400 audit(118.970:148): avc: denied { bind } for pid=3888 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 119.256317][ T31] audit: type=1400 audit(119.170:149): avc: denied { setopt } for pid=3888 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 119.457056][ T31] audit: type=1400 audit(119.370:150): avc: denied { accept } for pid=3895 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 119.465709][ T31] audit: type=1400 audit(119.380:151): avc: denied { write } for pid=3895 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 122.040972][ T31] audit: type=1400 audit(121.960:152): avc: denied { ioctl } for pid=3914 comm="syz.1.51" path="socket:[1998]" dev="sockfs" ino=1998 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.134906][ T31] audit: type=1400 audit(122.050:153): avc: denied { name_bind } for pid=3912 comm="syz.0.50" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 123.789385][ T31] audit: type=1400 audit(123.700:154): avc: denied { create } for pid=3927 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.797905][ T31] audit: type=1400 audit(123.710:155): avc: denied { connect } for pid=3927 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.809875][ T31] audit: type=1400 audit(123.720:156): avc: denied { write } for pid=3927 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.168235][ T3935] syz.0.59 uses obsolete (PF_INET,SOCK_PACKET) [ 124.187162][ T31] audit: type=1400 audit(124.100:157): avc: denied { ioctl } for pid=3934 comm="syz.0.59" path="socket:[2023]" dev="sockfs" ino=2023 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.016907][ T31] audit: type=1400 audit(125.930:158): avc: denied { ioctl } for pid=3949 comm="syz.0.61" path="socket:[2030]" dev="sockfs" ino=2030 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.355803][ T31] audit: type=1400 audit(126.270:159): avc: denied { getopt } for pid=3954 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.472927][ T3957] bond0: option arp_validate: invalid value (65538) [ 131.412184][ T31] audit: type=1400 audit(131.330:160): avc: denied { setopt } for pid=3972 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 131.563312][ T31] audit: type=1400 audit(131.480:161): avc: denied { getopt } for pid=3972 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.199006][ C1] hrtimer: interrupt took 10102720 ns [ 144.561437][ T2879] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 144.753900][ T2879] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 144.756947][ T2879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.770793][ T2879] usb 1-1: config 0 descriptor?? [ 145.100486][ T4018] nbd: must specify at least one socket [ 145.841879][ T2879] usb 1-1: Cannot set autoneg [ 145.842960][ T2879] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 145.852854][ T2879] usb 1-1: USB disconnect, device number 2 [ 146.279385][ T31] audit: type=1400 audit(146.180:162): avc: denied { connect } for pid=4034 comm="syz.0.87" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.660350][ T31] audit: type=1400 audit(150.580:163): avc: denied { create } for pid=4043 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 150.703046][ T31] audit: type=1400 audit(150.610:164): avc: denied { connect } for pid=4043 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 151.759898][ C0] 8<--- cut here --- [ 151.760527][ C0] Unable to handle kernel paging request at virtual address 054a18bc when read [ 151.760943][ C0] [054a18bc] *pgd=85009003, *pmd=00000000 [ 151.763485][ C0] Internal error: Oops: 206 [#1] PREEMPT SMP ARM [ 151.764476][ C0] Modules linked in: [ 151.765543][ C0] CPU: 0 UID: 0 PID: 4046 Comm: syz.1.91 Not tainted 6.12.0-rc4-syzkaller #0 [ 151.768645][ C0] Hardware name: ARM-Versatile Express [ 151.772262][ C0] PC is at llc_conn_state_process+0xa8/0x620 [ 151.776593][ C0] LR is at llc_conn_tmr_common_cb+0xc8/0x1ac [ 151.776900][ C0] pc : [<81527914>] lr : [<815251f8>] psr: 80000113 [ 151.777172][ C0] sp : df801df0 ip : df801e20 fp : df801e1c [ 151.777382][ C0] r10: df801eb8 r9 : 84697000 r8 : 054a18bc [ 151.777590][ C0] r7 : 84697000 r6 : 00000002 r5 : 84463240 r4 : 84463240 [ 151.777855][ C0] r3 : 815285e4 r2 : ffffffff r1 : 00000014 r0 : 84697000 [ 151.778247][ C0] Flags: Nzcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 151.778906][ C0] Control: 30c5387d Table: 84b16d00 DAC: fffffffd [ 151.779416][ C0] Register r0 information: slab kmalloc-1k start 84697000 pointer offset 0 size 1024 [ 151.780272][ C0] Register r1 information: non-paged memory [ 151.780718][ C0] Register r2 information: non-paged memory [ 151.780919][ C0] Register r3 information: non-slab/vmalloc memory [ 151.781256][ C0] Register r4 information: slab skbuff_head_cache start 84463240 pointer offset 0 size 192 [ 151.781651][ C0] Register r5 information: slab skbuff_head_cache start 84463240 pointer offset 0 size 192 [ 151.782008][ C0] Register r6 information: non-paged memory [ 151.782239][ C0] Register r7 information: slab kmalloc-1k start 84697000 pointer offset 0 size 1024 [ 151.782691][ C0] Register r8 information: non-paged memory [ 151.782953][ C0] Register r9 information: slab kmalloc-1k start 84697000 pointer offset 0 size 1024 [ 151.783410][ C0] Register r10 information: 2-page vmalloc region starting at 0xdf800000 allocated at start_kernel+0x5d0/0x778 [ 151.784026][ C0] Register r11 information: 2-page vmalloc region starting at 0xdf800000 allocated at start_kernel+0x5d0/0x778 [ 151.784492][ C0] Register r12 information: 2-page vmalloc region starting at 0xdf800000 allocated at start_kernel+0x5d0/0x778 [ 151.784994][ C0] Process syz.1.91 (pid: 4046, stack limit = 0xdfbc0000) [ 151.785601][ C0] Stack: (0xdf801df0 to 0xdf802000) [ 151.785962][ C0] 1de0: 00000000 84463240 84697000 00000002 [ 151.786334][ C0] 1e00: 846970ec 00000100 ffffc610 df801eb8 df801e44 df801e20 815251f8 81527878 [ 151.786650][ C0] 1e20: 84697268 81527210 83575400 81527210 00000100 ffffc610 df801e54 df801e48 [ 151.786950][ C0] 1e40: 81527228 8152513c df801e8c df801e58 803015e8 8152721c 00000000 84697268 [ 151.787524][ C0] 1e60: 81a04298 d0046134 84697268 81527210 dddc6040 00000000 00000122 83575400 [ 151.787757][ C0] 1e80: df801f04 df801e90 80301a80 803015c4 82604d40 00000000 00000002 827fcfe8 [ 151.788298][ C0] 1ea0: 8260c5d0 ffffc610 df801edc 00000000 00000000 847bacc8 8478581c 00000000 [ 151.788897][ C0] 1ec0: 00000000 00000000 00000000 00000000 00000000 d0046134 00000002 dddc6040 [ 151.789390][ C0] 1ee0: 00000002 00000001 00400040 00000100 83575400 00000002 df801f24 df801f08 [ 151.789855][ C0] 1f00: 80301c10 803017e4 82604084 00000000 00000004 82604084 df801f34 df801f28 [ 151.790603][ C0] 1f20: 80301c3c 80301bb4 df801fac df801f38 8024b524 80301c2c df801f54 df801f48 [ 151.793883][ C0] 1f40: 819ba008 00400040 82604d40 ffffc611 8221fc50 00000000 824bbd00 0000000a [ 151.797910][ C0] 1f60: 827fc2c8 8260c5d0 8220cfbc 824b1208 df801f38 82604080 8029e440 80293dec [ 151.799265][ C0] 1f80: 83575400 83575400 8221fc50 821df450 dfbc1e30 00000000 83575400 b5403587 [ 151.799763][ C0] 1fa0: df801fc4 df801fb0 8024b920 8024b3d8 824bbcdc 8221fc50 df801fd4 df801fc8 [ 151.800252][ C0] 1fc0: 8024bc20 8024b888 df801ffc df801fd8 819b93cc 8024bc1c 81487854 80000113 [ 151.801502][ C0] 1fe0: ffffffff dfbc1e64 00000000 83575400 dfbc1e2c df802000 819698dc 819b935c [ 151.805972][ C0] Call trace: frame pointer underflow [ 151.808981][ C0] [<8152786c>] (llc_conn_state_process) from [<815251f8>] (llc_conn_tmr_common_cb+0xc8/0x1ac) [ 151.809782][ C0] r10:df801eb8 r9:ffffc610 r8:00000100 r7:846970ec r6:00000002 r5:84697000 [ 151.810152][ C0] r4:84463240 r3:00000000 [ 151.810355][ C0] [<81525130>] (llc_conn_tmr_common_cb) from [<81527228>] (llc_conn_ack_tmr_cb+0x18/0x1c) [ 151.810903][ C0] r9:ffffc610 r8:00000100 r7:81527210 r6:83575400 r5:81527210 r4:84697268 [ 151.811171][ C0] [<81527210>] (llc_conn_ack_tmr_cb) from [<803015e8>] (call_timer_fn+0x30/0x220) [ 151.811660][ C0] [<803015b8>] (call_timer_fn) from [<80301a80>] (__run_timers+0x2a8/0x3d0) [ 151.812023][ C0] r9:83575400 r8:00000122 r7:00000000 r6:dddc6040 r5:81527210 r4:84697268 [ 151.812321][ C0] [<803017d8>] (__run_timers) from [<80301c10>] (run_timer_base+0x68/0x78) [ 151.812691][ C0] r10:00000002 r9:83575400 r8:00000100 r7:00400040 r6:00000001 r5:00000002 [ 151.812976][ C0] r4:dddc6040 [ 151.813156][ C0] [<80301ba8>] (run_timer_base) from [<80301c3c>] (run_timer_softirq+0x1c/0x34) [ 151.813612][ C0] r4:82604084 [ 151.813787][ C0] [<80301c20>] (run_timer_softirq) from [<8024b524>] (handle_softirqs+0x158/0x464) [ 151.814217][ C0] [<8024b3cc>] (handle_softirqs) from [<8024b920>] (__irq_exit_rcu+0xa4/0x164) [ 151.814662][ C0] r10:b5403587 r9:83575400 r8:00000000 r7:dfbc1e30 r6:821df450 r5:8221fc50 [ 151.815021][ C0] r4:83575400 [ 151.815845][ C0] [<8024b87c>] (__irq_exit_rcu) from [<8024bc20>] (irq_exit+0x10/0x18) [ 151.816277][ C0] r5:8221fc50 r4:824bbcdc [ 151.816501][ C0] [<8024bc10>] (irq_exit) from [<819b93cc>] (generic_handle_arch_irq+0x7c/0x80) [ 151.816939][ C0] [<819b9350>] (generic_handle_arch_irq) from [<819698dc>] (call_with_stack+0x1c/0x20) [ 151.817397][ C0] r9:83575400 r8:00000000 r7:dfbc1e64 r6:ffffffff r5:80000113 r4:81487854 [ 151.817739][ C0] [<819698c0>] (call_with_stack) from [<80200bcc>] (__irq_svc+0x8c/0xbc) [ 151.818375][ C0] Exception stack(0xdfbc1e30 to 0xdfbc1e78) [ 151.818953][ C0] 1e20: 00000000 7effffff 00000000 b5003500 [ 151.819647][ C0] 1e40: dfbc1ec0 2001e140 00000f04 00000002 00000000 83575400 b5403587 dfbc1f5c [ 151.820642][ C0] 1e60: a101e15f dfbc1e80 8148784c 81487854 80000113 ffffffff [ 151.822374][ C0] [<81487724>] (do_recvmmsg) from [<81488210>] (sys_recvmmsg_time32+0xc4/0xd8) [ 151.828542][ C0] r10:0000016d r9:83575400 r8:00010106 r7:00000002 r6:00000000 r5:200000c0 [ 151.829286][ C0] r4:00000004 [ 151.829504][ C0] [<8148814c>] (sys_recvmmsg_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 151.830000][ C0] Exception stack(0xdfbc1fa8 to 0xdfbc1ff0) [ 151.830351][ C0] 1fa0: 00000000 00000000 00000004 200000c0 00010106 00000002 [ 151.830970][ C0] 1fc0: 00000000 00000000 00286388 0000016d 00000000 00006364 003d0f00 76b4b0bc [ 151.831334][ C0] 1fe0: 76b4aec0 76b4aeb0 00018b10 00133470 [ 151.831624][ C0] r8:8020029c r7:0000016d r6:00286388 r5:00000000 r4:00000000 [ 151.832236][ C0] Code: e3a01014 e0233291 e593300c e0888103 (e5983000) [ 151.834119][ C0] ---[ end trace 0000000000000000 ]--- [ 151.835067][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 151.839663][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:23:20 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=8203d900 R02=00000000 R03=819ba860 R04=826f89c8 R05=826f89c0 R06=00000028 R07=00000006 R08=826f89c8 R09=00000000 R10=00000001 R11=df801adc R12=df801ae0 R13=df801ad0 R14=819b94f4 R15=819ba870 PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000001 R01=8203d900 R02=20000093 R03=00000003 R04=844f4800 R05=00000001 R06=00536dc0 R07=844f4800 R08=00000001 R09=ddde4400 R10=00000000 R11=dfb35c44 R12=dfb35c20 R13=dfb35c30 R14=819ba008 R15=80339940 PSR=20000093 --C- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000