last executing test programs: 18.881205784s ago: executing program 1 (id=125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000400006803c00040067636d2861657329000000000000000000000000000000000000000000000000a3e8aa2a0914000000e3de"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 18.791152388s ago: executing program 1 (id=126): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) tgkill(0x0, 0x0, 0x12) 18.140951855s ago: executing program 1 (id=127): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x10, @loopback, 0x8000000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000280)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="7ff4a0eb2a", 0x5}, {0x0}], 0x2}}], 0x2, 0x8000) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) 17.830907473s ago: executing program 1 (id=128): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e402010902"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f00000000c0)={0x0, 0xd69f, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 8.49823901s ago: executing program 0 (id=138): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000006c0), 0x802, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 8.409767755s ago: executing program 0 (id=139): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'netdevsim0\x00', @random="010000201000"}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4103, 0x1007, 0x99) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a09040000000000000000020000003800048034000180090001007866726d00"], 0x8c}}, 0x4000044) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xffffffff, 0x1000, 0x1, 0x282}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/230, 0xe6}], 0x1, 0x401, 0x9) syz_extract_tcp_res$synack(&(0x7f0000000200), 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@newsa={0x138, 0x1a, 0x713, 0x0, 0xfffffffc, {{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x4e21}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@remote, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4d}, {0xc}, {}, 0x0, 0x4, 0xa, 0x1, 0x0, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) 6.397095859s ago: executing program 1 (id=140): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x4c, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000880) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x40c0080) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8c37c2b979564e6e) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) open(0x0, 0x0, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 2.640514921s ago: executing program 0 (id=141): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="b9", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000340)=""/241, 0xf1, 0x40000100, 0x0, 0x0) 559.443629ms ago: executing program 1 (id=142): socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x24, r2, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}}, 0x0) 98.458485ms ago: executing program 0 (id=143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000005300)={0x0, 0x0, &(0x7f00000052c0)={&(0x7f0000005240)={0x14, 0x1, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c884) 95.737675ms ago: executing program 0 (id=144): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xb0a0, 0x1, 0x3}, 0x15, 0x0) landlock_restrict_self(r1, 0x0) listen(r0, 0xa) landlock_restrict_self(r1, 0x0) listen(r0, 0x0) 0s ago: executing program 0 (id=145): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_emit_ethernet(0x7e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6076db4000482f00fe800000000000000000000000000021ff0200000000000000000000000000010420655800000000000008000000000086ddc5e4080088be00000000100000000800000000000000080022eb00000000200080100200000000000008000100000800655800000000"], 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x3, 0x7fff0000}]}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 36.715506][ T31] audit: type=1400 audit(36.660:58): avc: denied { read write } for pid=3092 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.715954][ T31] audit: type=1400 audit(36.660:59): avc: denied { open } for pid=3092 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:46710' (ED25519) to the list of known hosts. [ 46.453166][ T31] audit: type=1400 audit(46.390:60): avc: denied { name_bind } for pid=3095 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 48.041264][ T31] audit: type=1400 audit(47.990:61): avc: denied { execute } for pid=3096 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.044492][ T31] audit: type=1400 audit(47.990:62): avc: denied { execute_no_trans } for pid=3096 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 49.477461][ T31] audit: type=1400 audit(49.430:63): avc: denied { mounton } for pid=3096 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 49.479822][ T31] audit: type=1400 audit(49.430:64): avc: denied { mount } for pid=3096 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.489265][ T3096] cgroup: Unknown subsys name 'net' [ 49.493859][ T31] audit: type=1400 audit(49.440:65): avc: denied { unmount } for pid=3096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.630973][ T3096] cgroup: Unknown subsys name 'cpuset' [ 49.636757][ T3096] cgroup: Unknown subsys name 'hugetlb' [ 49.638186][ T3096] cgroup: Unknown subsys name 'rlimit' [ 49.861125][ T31] audit: type=1400 audit(49.810:66): avc: denied { setattr } for pid=3096 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.862917][ T31] audit: type=1400 audit(49.810:67): avc: denied { mounton } for pid=3096 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 49.865891][ T31] audit: type=1400 audit(49.810:68): avc: denied { mount } for pid=3096 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 49.963314][ T3098] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 49.966751][ T31] audit: type=1400 audit(49.910:69): avc: denied { relabelto } for pid=3098 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 54.293326][ T3096] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.472076][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 55.472399][ T31] audit: type=1400 audit(55.420:73): avc: denied { execmem } for pid=3099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.514854][ T31] audit: type=1400 audit(55.460:74): avc: denied { read } for pid=3101 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.517135][ T31] audit: type=1400 audit(55.470:75): avc: denied { open } for pid=3101 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.525360][ T31] audit: type=1400 audit(55.470:76): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 55.546835][ T31] audit: type=1400 audit(55.490:78): avc: denied { module_request } for pid=3101 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 55.547198][ T31] audit: type=1400 audit(55.490:77): avc: denied { module_request } for pid=3102 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 55.612390][ T31] audit: type=1400 audit(55.560:79): avc: denied { sys_module } for pid=3102 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.010583][ T31] audit: type=1400 audit(55.960:80): avc: denied { ioctl } for pid=3101 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=675 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.824543][ T3101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.830397][ T3101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.919630][ T3102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.925795][ T3102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.456024][ T3101] hsr_slave_0: entered promiscuous mode [ 57.462814][ T3101] hsr_slave_1: entered promiscuous mode [ 57.551857][ T3102] hsr_slave_0: entered promiscuous mode [ 57.552660][ T3102] hsr_slave_1: entered promiscuous mode [ 57.554874][ T3102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.555055][ T3102] Cannot create hsr debugfs directory [ 57.778607][ T31] audit: type=1400 audit(57.730:81): avc: denied { create } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.780530][ T31] audit: type=1400 audit(57.730:82): avc: denied { write } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.786048][ T3101] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.796096][ T3101] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.801558][ T3101] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.805896][ T3101] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.858991][ T3102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.865451][ T3102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.872927][ T3102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.878092][ T3102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.189327][ T3101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.289801][ T3102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.536009][ T3101] veth0_vlan: entered promiscuous mode [ 59.549360][ T3101] veth1_vlan: entered promiscuous mode [ 59.592112][ T3101] veth0_macvtap: entered promiscuous mode [ 59.599851][ T3101] veth1_macvtap: entered promiscuous mode [ 59.635591][ T3101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.636088][ T3101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.637467][ T3101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.637524][ T3101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.877966][ T3101] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.062745][ T3102] veth0_vlan: entered promiscuous mode [ 60.089148][ T3102] veth1_vlan: entered promiscuous mode [ 60.162921][ T3102] veth0_macvtap: entered promiscuous mode [ 60.180605][ T3102] veth1_macvtap: entered promiscuous mode [ 60.250599][ T3102] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.252218][ T3102] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.255809][ T3102] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.261790][ T3102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.478817][ T31] kauditd_printk_skb: 110 callbacks suppressed [ 60.479034][ T31] audit: type=1326 audit(60.430:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.0.1" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef168 code=0x7ffc0000 [ 60.481203][ T31] audit: type=1326 audit(60.430:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.0.1" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef168 code=0x7ffc0000 [ 60.483410][ T31] audit: type=1326 audit(60.430:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.0.1" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef168 code=0x7ffc0000 [ 60.484148][ T31] audit: type=1326 audit(60.430:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.0.1" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef168 code=0x7ffc0000 [ 60.487753][ T31] audit: type=1326 audit(60.440:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.0.1" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef168 code=0x7ffc0000 [ 60.493021][ T31] audit: type=1326 audit(60.440:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.0.1" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef168 code=0x7ffc0000 [ 60.493209][ T31] audit: type=1326 audit(60.440:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.0.1" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef168 code=0x7ffc0000 [ 60.493288][ T31] audit: type=1326 audit(60.440:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.0.1" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef168 code=0x7ffc0000 [ 60.499008][ T31] audit: type=1326 audit(60.450:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.0.1" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef168 code=0x7ffc0000 [ 60.500384][ T31] audit: type=1326 audit(60.450:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.0.1" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef168 code=0x7ffc0000 [ 60.638564][ T3784] ======================================================= [ 60.638564][ T3784] WARNING: The mand mount option has been deprecated and [ 60.638564][ T3784] and is ignored by this kernel. Remove the mand [ 60.638564][ T3784] option from the mount to silence this warning. [ 60.638564][ T3784] ======================================================= [ 62.607267][ T3796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4'. [ 67.808548][ T31] kauditd_printk_skb: 150 callbacks suppressed [ 67.812196][ T31] audit: type=1326 audit(67.760:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3801 comm="syz.1.8" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x7ffc0000 [ 67.814099][ T31] audit: type=1326 audit(67.760:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3801 comm="syz.1.8" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef168 code=0x7ffc0000 [ 67.822599][ T31] audit: type=1326 audit(67.760:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3801 comm="syz.1.8" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef168 code=0x7ffc0000 [ 67.829264][ T31] audit: type=1326 audit(67.760:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3801 comm="syz.1.8" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef168 code=0x7ffc0000 [ 67.832804][ T31] audit: type=1326 audit(67.760:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3801 comm="syz.1.8" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef168 code=0x7ffc0000 [ 67.837212][ T31] audit: type=1326 audit(67.770:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3801 comm="syz.1.8" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef168 code=0x7ffc0000 [ 67.840223][ T31] audit: type=1326 audit(67.770:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3801 comm="syz.1.8" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef168 code=0x7ffc0000 [ 67.858270][ T31] audit: type=1326 audit(67.810:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3801 comm="syz.1.8" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef168 code=0x7ffc0000 [ 67.862200][ T31] audit: type=1326 audit(67.810:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3801 comm="syz.1.8" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef168 code=0x7ffc0000 [ 67.869128][ T31] audit: type=1326 audit(67.810:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3801 comm="syz.1.8" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xef168 code=0x7ffc0000 [ 68.437372][ T3810] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.863825][ T3816] trusted_key: syz.0.14 sent an empty control message without MSG_MORE. [ 72.652866][ T3833] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19'. [ 73.312505][ T3839] syz_tun: entered allmulticast mode [ 73.314865][ T31] kauditd_printk_skb: 34 callbacks suppressed [ 73.315084][ T31] audit: type=1400 audit(73.260:397): avc: denied { write } for pid=3838 comm="syz.0.22" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.318993][ T3838] syz_tun: left allmulticast mode [ 74.978804][ T31] audit: type=1400 audit(74.910:398): avc: denied { bind } for pid=3846 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.381454][ T31] audit: type=1400 audit(75.330:399): avc: denied { block_suspend } for pid=3852 comm="syz.0.29" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.403135][ T31] audit: type=1400 audit(75.350:400): avc: denied { allowed } for pid=3852 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 75.518690][ T31] audit: type=1400 audit(75.470:401): avc: denied { create } for pid=3852 comm="syz.0.29" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.523682][ T31] audit: type=1400 audit(75.470:402): avc: denied { map } for pid=3852 comm="syz.0.29" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.525860][ T31] audit: type=1400 audit(75.470:403): avc: denied { read write } for pid=3852 comm="syz.0.29" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 78.167285][ T31] audit: type=1400 audit(78.110:404): avc: denied { create } for pid=3865 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.169862][ T31] audit: type=1400 audit(78.120:405): avc: denied { getopt } for pid=3865 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.348942][ T31] audit: type=1400 audit(78.300:406): avc: denied { map_create } for pid=3872 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 78.350943][ T31] audit: type=1400 audit(78.300:407): avc: denied { map_read map_write } for pid=3872 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 78.355333][ T31] audit: type=1400 audit(78.300:408): avc: denied { prog_load } for pid=3872 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 78.362154][ T31] audit: type=1400 audit(78.300:409): avc: denied { bpf } for pid=3872 comm="syz.0.35" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.366173][ T31] audit: type=1400 audit(78.300:410): avc: denied { perfmon } for pid=3872 comm="syz.0.35" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.450512][ T31] audit: type=1400 audit(78.400:411): avc: denied { mount } for pid=3874 comm="syz.0.36" name="/" dev="ramfs" ino=3184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 79.306265][ T3870] fuse: root generation should be zero [ 79.375270][ T31] audit: type=1400 audit(79.320:412): avc: denied { unmount } for pid=3102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 79.465599][ T31] audit: type=1326 audit(79.410:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3880 comm="syz.1.37" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x7ffc0000 [ 79.471603][ T31] audit: type=1326 audit(79.420:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3880 comm="syz.1.37" exe="/syz-executor" sig=0 arch=40000028 syscall=108 compat=0 ip=0x131f30 code=0x7ffc0000 [ 79.495031][ T3882] ptrace attach of "/syz-executor exec"[3101] was attempted by "/syz-executor exec"[3882] [ 79.503004][ T31] audit: type=1326 audit(79.430:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3880 comm="syz.1.37" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x7ffc0000 [ 82.162782][ T3895] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 82.907350][ T3901] netlink: 56 bytes leftover after parsing attributes in process `syz.1.44'. [ 91.344675][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 91.345503][ T31] audit: type=1400 audit(91.290:419): avc: denied { ioctl } for pid=3905 comm="syz.0.46" path="socket:[3224]" dev="sockfs" ino=3224 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.586156][ T31] audit: type=1400 audit(91.530:420): avc: denied { create } for pid=3910 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.595059][ T31] audit: type=1400 audit(91.540:421): avc: denied { write } for pid=3910 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.587419][ T719] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.747110][ T719] usb 1-1: Using ep0 maxpacket: 32 [ 92.758276][ T719] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 92.758593][ T719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.762408][ T719] usb 1-1: config 0 descriptor?? [ 96.488387][ T3922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.490730][ T3922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.534602][ T3778] usb 1-1: USB disconnect, device number 2 [ 106.635178][ T31] audit: type=1400 audit(106.580:422): avc: denied { append } for pid=3931 comm="syz.0.50" name="tun" dev="devtmpfs" ino=675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.056818][ T3778] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.210949][ T3778] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 107.211235][ T3778] usb 1-1: config 0 interface 0 has no altsetting 0 [ 107.221613][ T3778] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 107.221844][ T3778] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 107.222003][ T3778] usb 1-1: Product: syz [ 107.222106][ T3778] usb 1-1: Manufacturer: syz [ 107.222204][ T3778] usb 1-1: SerialNumber: syz [ 107.237551][ T3778] usb 1-1: config 0 descriptor?? [ 107.254658][ T3778] usb 1-1: selecting invalid altsetting 0 [ 107.454991][ T1784] usb 1-1: USB disconnect, device number 3 [ 107.757963][ T31] audit: type=1400 audit(107.710:423): avc: denied { connect } for pid=3965 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.760475][ T31] audit: type=1400 audit(107.710:424): avc: denied { name_connect } for pid=3965 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 108.263251][ T31] audit: type=1400 audit(108.210:425): avc: denied { shutdown } for pid=3965 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.265286][ T31] audit: type=1400 audit(108.210:426): avc: denied { name_connect } for pid=3965 comm="syz.0.52" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 110.335781][ T31] audit: type=1400 audit(110.280:427): avc: denied { write } for pid=3968 comm="syz.0.53" name="ip_mr_cache" dev="proc" ino=4026532707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 110.834536][ T31] audit: type=1400 audit(110.780:428): avc: denied { ioctl } for pid=3978 comm="syz.0.55" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=3277 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 112.116791][ T1784] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.358951][ T1784] usb 1-1: Using ep0 maxpacket: 16 [ 112.397704][ T1784] usb 1-1: config index 0 descriptor too short (expected 64036, got 36) [ 112.407255][ T1784] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 112.408166][ T1784] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 112.409134][ T1784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.410132][ T1784] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 112.410978][ T1784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.414804][ T1784] usb 1-1: config 0 descriptor?? [ 112.859370][ T1784] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 112.860587][ T1784] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 112.861239][ T1784] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 112.861766][ T1784] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 112.862260][ T1784] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 112.863638][ T1784] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 113.129931][ C0] usb 1-1: input irq status -75 received [ 113.350079][ T3778] usb 1-1: USB disconnect, device number 4 [ 115.245925][ T4020] syzkaller0: entered promiscuous mode [ 115.246629][ T4020] syzkaller0: entered allmulticast mode [ 119.503673][ T31] audit: type=1400 audit(119.450:429): avc: denied { map } for pid=4037 comm="syz.0.66" path="/dev/dsp" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.605371][ T31] audit: type=1400 audit(119.550:430): avc: denied { sqpoll } for pid=4041 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 119.674199][ T31] audit: type=1400 audit(119.620:431): avc: denied { write } for pid=4041 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.879237][ T31] audit: type=1400 audit(119.830:432): avc: denied { create } for pid=4050 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.256901][ T3778] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 121.429641][ T3778] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 121.430000][ T3778] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 121.430096][ T3778] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.430136][ T3778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.780758][ T3778] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 121.799066][ T3778] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 122.077446][ T31] audit: type=1400 audit(122.030:433): avc: denied { setopt } for pid=4050 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.096752][ T4053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.097264][ T4053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.255632][ T4053] binder: 4050:4053 ioctl 4018620d 0 returned -22 [ 122.258187][ T4053] binder: 4050:4053 ioctl c0306201 0 returned -14 [ 122.406909][ T31] audit: type=1400 audit(122.200:434): avc: denied { read } for pid=4050 comm="syz.0.70" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.407189][ T31] audit: type=1400 audit(122.200:435): avc: denied { open } for pid=4050 comm="syz.0.70" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.407361][ T31] audit: type=1400 audit(122.200:436): avc: denied { ioctl } for pid=4050 comm="syz.0.70" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.407486][ T31] audit: type=1400 audit(122.210:437): avc: denied { write } for pid=4050 comm="syz.0.70" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.407618][ T31] audit: type=1400 audit(122.210:438): avc: denied { map } for pid=4050 comm="syz.0.70" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 128.362840][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 128.365849][ T31] audit: type=1400 audit(128.310:440): avc: denied { write } for pid=4076 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.368388][ T31] audit: type=1400 audit(128.310:441): avc: denied { nlmsg_write } for pid=4076 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 134.892387][ T719] usb 1-1: USB disconnect, device number 5 [ 134.985476][ T4095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.78'. [ 136.105364][ T31] audit: type=1400 audit(136.050:442): avc: denied { setopt } for pid=4118 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.976202][ T31] audit: type=1400 audit(138.920:443): avc: denied { execute } for pid=4137 comm="syz.0.95" path="/65/cpu.stat" dev="tmpfs" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 139.017339][ T31] audit: type=1400 audit(138.970:444): avc: denied { prog_run } for pid=4137 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 139.377671][ T4142] sctp: [Deprecated]: syz.0.97 (pid 4142) Use of int in maxseg socket option. [ 139.377671][ T4142] Use struct sctp_assoc_value instead [ 140.433614][ T31] audit: type=1400 audit(140.380:445): avc: denied { mounton } for pid=4147 comm="syz.0.100" path="/70/file0" dev="tmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 140.435588][ T31] audit: type=1400 audit(140.380:446): avc: denied { watch } for pid=4147 comm="syz.0.100" path="/70/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 140.873572][ T4152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.101'. [ 140.875744][ T4152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.101'. [ 140.910755][ T4152] syz_tun: entered promiscuous mode [ 140.918728][ T4152] batadv_slave_1: entered promiscuous mode [ 141.479946][ T31] audit: type=1400 audit(141.430:447): avc: denied { read } for pid=4157 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 141.990833][ T31] audit: type=1400 audit(141.940:448): avc: denied { setopt } for pid=4157 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 143.716712][ T4057] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 143.887045][ T4057] usb 2-1: Using ep0 maxpacket: 8 [ 143.894563][ T4057] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 143.894824][ T4057] usb 2-1: config 0 has no interface number 0 [ 143.894897][ T4057] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 143.895059][ T4057] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 143.895147][ T4057] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 143.895209][ T4057] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 143.895297][ T4057] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 143.899283][ T4057] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.903167][ T4057] usb 2-1: config 0 descriptor?? [ 143.916903][ T4057] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 144.120119][ T4057] usb 2-1: USB disconnect, device number 2 [ 144.123286][ T4057] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 144.176187][ T31] audit: type=1400 audit(144.120:449): avc: denied { setopt } for pid=4180 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.240543][ T4183] netlink: 'syz.1.106': attribute type 10 has an invalid length. [ 144.240863][ T4183] netlink: 2 bytes leftover after parsing attributes in process `syz.1.106'. [ 144.241249][ T4183] nlmon0: entered promiscuous mode [ 144.370877][ T4187] syzkaller1: entered promiscuous mode [ 144.371128][ T4187] syzkaller1: entered allmulticast mode [ 144.527994][ T4193] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 151.652993][ T31] audit: type=1400 audit(151.590:450): avc: denied { setopt } for pid=4242 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.653253][ T31] audit: type=1400 audit(151.590:451): avc: denied { bind } for pid=4242 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.653437][ T31] audit: type=1400 audit(151.590:452): avc: denied { name_bind } for pid=4242 comm="syz.1.127" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 151.653511][ T31] audit: type=1400 audit(151.590:453): avc: denied { node_bind } for pid=4242 comm="syz.1.127" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 152.136890][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 152.295661][ T10] usb 2-1: config 0 has no interfaces? [ 152.309743][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 152.310095][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 152.310176][ T10] usb 2-1: Product: syz [ 152.310258][ T10] usb 2-1: Manufacturer: syz [ 152.310324][ T10] usb 2-1: SerialNumber: syz [ 152.313757][ T10] usb 2-1: config 0 descriptor?? [ 155.187452][ T31] audit: type=1400 audit(155.140:454): avc: denied { setopt } for pid=4252 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.330590][ T4257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 159.994084][ T31] audit: type=1400 audit(159.940:455): avc: denied { ioctl } for pid=4262 comm="syz.0.133" path="socket:[2775]" dev="sockfs" ino=2775 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.316951][ T719] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 160.467107][ T719] usb 1-1: Using ep0 maxpacket: 8 [ 160.474184][ T719] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 160.475628][ T719] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 160.477386][ T719] usb 1-1: config 0 interface 0 has no altsetting 0 [ 160.488545][ T719] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 160.488865][ T719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.489137][ T719] usb 1-1: Product: syz [ 160.489337][ T719] usb 1-1: Manufacturer: syz [ 160.489533][ T719] usb 1-1: SerialNumber: syz [ 160.497848][ T719] usb 1-1: config 0 descriptor?? [ 160.509155][ T719] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 160.745833][ T31] audit: type=1400 audit(160.690:456): avc: denied { connect } for pid=4264 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 160.749115][ T31] audit: type=1400 audit(160.700:457): avc: denied { bind } for pid=4264 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 160.753557][ T31] audit: type=1400 audit(160.700:458): avc: denied { write } for pid=4264 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 160.775944][ T31] audit: type=1400 audit(160.720:459): avc: denied { getopt } for pid=4264 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 160.798691][ T719] snd_usb_toneport 1-1:0.0: set_interface failed [ 160.799476][ T719] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 160.800158][ T719] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 160.811237][ T719] usb 1-1: USB disconnect, device number 6 [ 162.317357][ T4292] netlink: 36 bytes leftover after parsing attributes in process `syz.0.139'. [ 162.318876][ T4292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.139'. [ 163.201018][ T10] usb 2-1: USB disconnect, device number 3 [ 169.326796][ T86] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 169.482594][ T86] usb 2-1: config 0 has no interfaces? [ 169.489970][ T86] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 169.490187][ T86] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.490349][ T86] usb 2-1: Product: syz [ 169.490384][ T86] usb 2-1: Manufacturer: syz [ 169.490410][ T86] usb 2-1: SerialNumber: syz [ 169.494767][ T86] usb 2-1: config 0 descriptor?? [ 169.672999][ T4322] 8<--- cut here --- [ 169.674064][ T4322] Unable to handle kernel NULL pointer dereference at virtual address 0000000e when read [ 169.675113][ T4322] [0000000e] *pgd=85827003 [ 169.683746][ T31] audit: type=1400 audit(169.630:460): avc: denied { read } for pid=2910 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 169.683955][ T31] audit: type=1400 audit(169.630:461): avc: denied { search } for pid=2910 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.684105][ T31] audit: type=1400 audit(169.630:462): avc: denied { write } for pid=2910 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 169.684261][ T31] audit: type=1400 audit(169.630:463): avc: denied { add_name } for pid=2910 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.684345][ T31] audit: type=1400 audit(169.630:464): avc: denied { create } for pid=2910 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 169.684472][ T31] audit: type=1400 audit(169.630:465): avc: denied { append open } for pid=2910 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 169.684575][ T31] audit: type=1400 audit(169.630:466): avc: denied { getattr } for pid=2910 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 169.698306][ T4322] , *pmd=df7b4003 [ 169.699915][ T4322] Internal error: Oops: 205 [#1] SMP ARM [ 169.700972][ T4322] Modules linked in: [ 169.701992][ T4322] CPU: 0 UID: 0 PID: 4322 Comm: syz.0.145 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 169.703170][ T4322] Hardware name: ARM-Versatile Express [ 169.703828][ T4322] PC is at io_buffer_select+0x50/0x18c [ 169.704909][ T4322] LR is at xa_load+0x68/0xa4 [ 169.705289][ T4322] pc : [<80889bf4>] lr : [<81a4c414>] psr: 20000013 [ 169.705830][ T4322] sp : e04d9de8 ip : e04d9da8 fp : e04d9e04 [ 169.706893][ T4322] r10: 837a6500 r9 : 00000000 r8 : 80000001 [ 169.708004][ T4322] r7 : e04d9e20 r6 : 00000000 r5 : 85775100 r4 : 859b7180 [ 169.708696][ T4322] r3 : 00000001 r2 : 00000000 r1 : 855eb200 r0 : 00000000 [ 169.709245][ T4322] Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 169.709780][ T4322] Control: 30c5387d Table: 8568e000 DAC: fffffffd [ 169.710732][ T4322] Register r0 information: NULL pointer [ 169.711838][ T4322] Register r1 information: slab kmalloc-64 start 855eb200 pointer offset 0 size 64 [ 169.713290][ T4322] Register r2 information: NULL pointer [ 169.713796][ T4322] Register r3 information: non-paged memory [ 169.714856][ T4322] Register r4 information: slab io_kiocb start 859b7180 pointer offset 0 size 192 [ 169.715830][ T4322] Register r5 information: slab kmalloc-2k start 85775000 pointer offset 256 size 2048 [ 169.717371][ T4322] Register r6 information: NULL pointer [ 169.717989][ T4322] Register r7 information: 2-page vmalloc region starting at 0xe04d8000 allocated at kernel_clone+0xac/0x3e4 [ 169.719289][ T4322] Register r8 information: non-slab/vmalloc memory [ 169.719799][ T4322] Register r9 information: NULL pointer [ 169.720381][ T4322] Register r10 information: slab sock_inode_cache start 837a6500 pointer offset 0 size 576 [ 169.721491][ T4322] Register r11 information: 2-page vmalloc region starting at 0xe04d8000 allocated at kernel_clone+0xac/0x3e4 [ 169.722448][ T4322] Register r12 information: 2-page vmalloc region starting at 0xe04d8000 allocated at kernel_clone+0xac/0x3e4 [ 169.723463][ T4322] Process syz.0.145 (pid: 4322, stack limit = 0xe04d8000) [ 169.724275][ T4322] Stack: (0xe04d9de8 to 0xe04da000) [ 169.724790][ T4322] 9de0: 859b7180 854f3d00 00000000 00000040 e04d9e54 e04d9e08 [ 169.725452][ T4322] 9e00: 80892f20 80889bb0 85775128 000000e8 85900000 00000001 01000000 00000000 [ 169.726385][ T4322] 9e20: 00000000 d9323846 e04d9e54 859b7180 81cf0bd4 00000000 00000000 00000000 [ 169.727619][ T4322] 9e40: 80000001 84489800 e04d9e7c e04d9e58 808823a4 80892cfc 859b7180 80000001 [ 169.728290][ T4322] 9e60: 0000000a 81cf0b5c 85660900 00000000 e04d9ebc e04d9e80 80886e74 80882364 [ 169.729101][ T4322] 9e80: 00000000 00000000 00000000 81cf0bd4 00000000 85775000 859b71ec 859b7180 [ 169.729832][ T4322] 9ea0: 85900000 00000000 00000000 84489800 e04d9f14 e04d9ec0 8088798c 80886e38 [ 169.730781][ T4322] 9ec0: 8088e348 81a4c3b8 e04d9f24 e04d9ed8 00000001 00000001 81cf0b5c 00000001 [ 169.732264][ T4322] 9ee0: 85775000 d9323846 85660a80 00000000 85775000 000027e2 85660a80 00000000 [ 169.733186][ T4322] 9f00: 84489800 00000000 e04d9fa4 e04d9f18 80888434 8088778c ecac8b10 85775040 [ 169.733940][ T4322] 9f20: 00000000 00000000 81a50190 81a50060 e04d9f54 e04d9f40 8026b438 8029ce24 [ 169.734635][ T4322] 9f40: e04d9fb0 40000000 e04d9f84 e04d9f58 802229dc 8026b3f4 00000000 8281d05c [ 169.735136][ T4322] 9f60: e04d9fb0 0014c490 ecac8b10 80222930 00000000 d9323846 e04d9fac 00000000 [ 169.735674][ T4322] 9f80: 00000000 002e630c 000001aa 8020029c 84489800 000001aa 00000000 e04d9fa8 [ 169.736382][ T4322] 9fa0: 80200060 80888308 00000000 00000000 00000007 000027e2 00000000 00000000 [ 169.737626][ T4322] 9fc0: 00000000 00000000 002e630c 000001aa 002d0000 00000000 00006364 76b260bc [ 169.738735][ T4322] 9fe0: 76b25ec0 76b25eb0 0001939c 00131f30 60000010 00000007 00000000 00000000 [ 169.739961][ T4322] Call trace: [ 169.740543][ T4322] [<80889ba4>] (io_buffer_select) from [<80892f20>] (io_recvmsg+0x230/0x420) [ 169.741441][ T4322] r7:00000040 r6:00000000 r5:854f3d00 r4:859b7180 [ 169.742022][ T4322] [<80892cf0>] (io_recvmsg) from [<808823a4>] (__io_issue_sqe+0x4c/0x1c0) [ 169.742703][ T4322] r10:84489800 r9:80000001 r8:00000000 r7:00000000 r6:00000000 r5:81cf0bd4 [ 169.743249][ T4322] r4:859b7180 [ 169.743570][ T4322] [<80882358>] (__io_issue_sqe) from [<80886e74>] (io_issue_sqe+0x48/0x59c) [ 169.744218][ T4322] r9:00000000 r8:85660900 r7:81cf0b5c r6:0000000a r5:80000001 r4:859b7180 [ 169.744910][ T4322] [<80886e2c>] (io_issue_sqe) from [<8088798c>] (io_submit_sqes+0x20c/0x938) [ 169.745770][ T4322] r10:84489800 r9:00000000 r8:00000000 r7:85900000 r6:859b7180 r5:859b71ec [ 169.746872][ T4322] r4:85775000 [ 169.747187][ T4322] [<80887780>] (io_submit_sqes) from [<80888434>] (sys_io_uring_enter+0x138/0x780) [ 169.748241][ T4322] r10:00000000 r9:84489800 r8:00000000 r7:85660a80 r6:000027e2 r5:85775000 [ 169.748993][ T4322] r4:00000000 [ 169.749528][ T4322] [<808882fc>] (sys_io_uring_enter) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 169.750662][ T4322] Exception stack(0xe04d9fa8 to 0xe04d9ff0) [ 169.751263][ T4322] 9fa0: 00000000 00000000 00000007 000027e2 00000000 00000000 [ 169.752403][ T4322] 9fc0: 00000000 00000000 002e630c 000001aa 002d0000 00000000 00006364 76b260bc [ 169.753489][ T4322] 9fe0: 76b25ec0 76b25eb0 0001939c 00131f30 [ 169.754015][ T4322] r10:000001aa r9:84489800 r8:8020029c r7:000001aa r6:002e630c r5:00000000 [ 169.754709][ T4322] r4:00000000 [ 169.755382][ T4322] Code: e3130001 0a00002f e5910000 e1d120be (e1d030be) [ 169.757259][ T4322] ---[ end trace 0000000000000000 ]--- [ 169.827391][ T4322] Kernel panic - not syncing: Fatal exception [ 169.831523][ T4322] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:01:33 Registers: info registers vcpu 0 CPU#0 R00=829bc740 R01=00000024 R02=ffffffff R03=81a509c8 R04=82ab52c0 R05=592f5a00 R06=000082b4 R07=00000027 R08=84d98c1c R09=84d98848 R10=00000000 R11=ec5b5c6c R12=ec5b5c70 R13=ec5b5c60 R14=812cc33c R15=81a509d8 PSR=60010013 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=846b43e0 R01=00000000 R02=0000002c R03=00000000 R04=84513ac8 R05=84513608 R06=84513ac8 R07=00000000 R08=00000000 R09=00000001 R10=84512000 R11=ec589c24 R12=ec589be8 R13=ec589c28 R14=80786ec0 R15=8029e9e8 PSR=200f0093 --C- A S svc32 s00=72656820 s01=2d2d2065 d00=2d2d206572656820 s02=00000000 s03=00000000 d01=0000000000000000 s04=ef0cee00 s05=ef0cee00 d02=ef0cee00ef0cee00 s06=08040200 s07=80402000 d03=8040200008040200 s08=00000c00 s09=c0200c03 d04=c0200c0300000c00 s10=08040201 s11=80402000 d05=8040200008040201 s12=08040201 s13=80402010 d06=8040201008040201 s14=08040201 s15=80402010 d07=8040201008040201 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000