last executing test programs: 8.909933383s ago: executing program 0 (id=1): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x71096000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10c}}, 0x28040800) r5 = socket$inet6(0xa, 0x5, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x1a1101, 0x0) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x6e) 4.816942937s ago: executing program 1 (id=5): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x601, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x22030, 0x9}}, 0x20}, 0x1, 0x0, 0x0, 0x20045808}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0xc, 0xed, 0x6be8, 0x48, @rand_addr=' \x01\x00', @private0, 0x7, 0x10, 0x8, 0x2}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016", 0x33}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x8, [@enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x100}]}, @union={0x6, 0x3, 0x0, 0x5, 0x1, 0x1, [{0x7, 0x4, 0x1}, {0x2, 0x5, 0x8001}, {0x0, 0x4, 0x6}]}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0x70, 0xa0, 0x1, 0xfffffff8}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.036867529s ago: executing program 1 (id=6): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) 3.910907088s ago: executing program 1 (id=7): r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000380)) 3.829634173s ago: executing program 1 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c00028008000340000000020800014000d100140800024000000012040005800c000480060001008a9500000900010073797a3000"], 0x110}}, 0x0) 3.709304152s ago: executing program 1 (id=9): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 3.608987898s ago: executing program 0 (id=10): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x9, 0x0, 0x0, 0x0, 0x6, 0x1000, &(0x7f0000001cc0)=""/4096, 0x40f00, 0x4}, 0x94) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x7f, 0x4, 0x0, 0xb9ff, 0x9}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xffff, 0x0, 0x0, 0x17}) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 3.536308973s ago: executing program 1 (id=11): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12021, 0x0) syz_clone(0x41000, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x2, 0x1) getxattr(0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c450) 981.279964ms ago: executing program 0 (id=12): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x81, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000480)=r6) 879.360271ms ago: executing program 0 (id=13): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x601, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x22030, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20045808}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0xc, 0xed, 0x6be8, 0x48, @rand_addr=' \x01\x00', @private0, 0x7, 0x10, 0x8, 0x2}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0x20, 0xa0, 0x1, 0xfffffff8}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d0001"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 0 (id=14): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x80000005, 0x3ff, 0x802, 0x1600, 0x1, 0x0, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadc, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) kernel console output (not intermixed with test programs): [ 58.593123][ T28] audit: type=1400 audit(58.460:56): avc: denied { read write } for pid=3074 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.597971][ T28] audit: type=1400 audit(58.460:57): avc: denied { open } for pid=3074 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:54853' (ED25519) to the list of known hosts. [ 75.660471][ T28] audit: type=1400 audit(75.530:58): avc: denied { name_bind } for pid=3077 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 77.499399][ T28] audit: type=1400 audit(77.350:59): avc: denied { execute } for pid=3078 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 77.517928][ T28] audit: type=1400 audit(77.390:60): avc: denied { execute_no_trans } for pid=3078 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 82.557931][ T28] audit: type=1400 audit(82.420:61): avc: denied { mounton } for pid=3078 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 82.568988][ T28] audit: type=1400 audit(82.440:62): avc: denied { mount } for pid=3078 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 82.589769][ T3078] cgroup: Unknown subsys name 'net' [ 82.599753][ T28] audit: type=1400 audit(82.470:63): avc: denied { unmount } for pid=3078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 82.805227][ T3078] cgroup: Unknown subsys name 'cpuset' [ 82.817733][ T3078] cgroup: Unknown subsys name 'hugetlb' [ 82.818802][ T3078] cgroup: Unknown subsys name 'rlimit' [ 83.054531][ T28] audit: type=1400 audit(82.920:64): avc: denied { setattr } for pid=3078 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.063163][ T28] audit: type=1400 audit(82.930:65): avc: denied { mounton } for pid=3078 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 83.069005][ T28] audit: type=1400 audit(82.930:66): avc: denied { mount } for pid=3078 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 83.369932][ T3080] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 83.373641][ T28] audit: type=1400 audit(83.240:67): avc: denied { relabelto } for pid=3080 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 83.377498][ T28] audit: type=1400 audit(83.240:68): avc: denied { write } for pid=3080 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 83.423796][ T28] audit: type=1400 audit(83.290:69): avc: denied { read } for pid=3078 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 83.428267][ T28] audit: type=1400 audit(83.290:70): avc: denied { open } for pid=3078 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 91.745560][ T3078] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.349155][ T28] audit: type=1400 audit(94.220:71): avc: denied { execmem } for pid=3081 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 94.394121][ T28] audit: type=1400 audit(94.260:72): avc: denied { read } for pid=3083 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 94.397066][ T28] audit: type=1400 audit(94.260:73): avc: denied { open } for pid=3083 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 94.404207][ T28] audit: type=1400 audit(94.270:74): avc: denied { mounton } for pid=3083 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 94.423294][ T28] audit: type=1400 audit(94.290:75): avc: denied { module_request } for pid=3083 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 94.480945][ T28] audit: type=1400 audit(94.350:76): avc: denied { sys_module } for pid=3084 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 95.306622][ T28] audit: type=1400 audit(95.170:77): avc: denied { ioctl } for pid=3084 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=677 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.450053][ T3083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.461506][ T3083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.573317][ T3084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.584461][ T3084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.212518][ T3083] hsr_slave_0: entered promiscuous mode [ 97.221517][ T3083] hsr_slave_1: entered promiscuous mode [ 97.714496][ T3084] hsr_slave_0: entered promiscuous mode [ 97.719106][ T3084] hsr_slave_1: entered promiscuous mode [ 97.721111][ T3084] debugfs: 'hsr0' already exists in 'hsr' [ 97.721933][ T3084] Cannot create hsr debugfs directory [ 97.818281][ T28] audit: type=1400 audit(97.680:78): avc: denied { create } for pid=3083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.818607][ T28] audit: type=1400 audit(97.680:79): avc: denied { write } for pid=3083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.818888][ T28] audit: type=1400 audit(97.680:80): avc: denied { read } for pid=3083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.829137][ T3083] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.848020][ T3083] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.863259][ T3083] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.881599][ T3083] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.174577][ T3084] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.191588][ T3084] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.205973][ T3084] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.243290][ T3084] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.948150][ T3083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.105955][ T3084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.582127][ T3083] veth0_vlan: entered promiscuous mode [ 102.613692][ T3083] veth1_vlan: entered promiscuous mode [ 102.703369][ T3083] veth0_macvtap: entered promiscuous mode [ 102.715632][ T3083] veth1_macvtap: entered promiscuous mode [ 102.789778][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.791377][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.792314][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.792446][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.955116][ T28] audit: type=1400 audit(102.820:81): avc: denied { mount } for pid=3083 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 102.989134][ T28] audit: type=1400 audit(102.850:82): avc: denied { mounton } for pid=3083 comm="syz-executor" path="/syzkaller.qheVAi/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 103.001030][ T28] audit: type=1400 audit(102.870:83): avc: denied { mount } for pid=3083 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 103.031547][ T28] audit: type=1400 audit(102.900:84): avc: denied { mounton } for pid=3083 comm="syz-executor" path="/syzkaller.qheVAi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 103.046472][ T28] audit: type=1400 audit(102.910:85): avc: denied { mounton } for pid=3083 comm="syz-executor" path="/syzkaller.qheVAi/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 103.075131][ T28] audit: type=1400 audit(102.940:86): avc: denied { unmount } for pid=3083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 103.075225][ T3084] veth0_vlan: entered promiscuous mode [ 103.090623][ T28] audit: type=1400 audit(102.950:87): avc: denied { mounton } for pid=3083 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 103.105483][ T28] audit: type=1400 audit(102.970:88): avc: denied { mount } for pid=3083 comm="syz-executor" name="/" dev="gadgetfs" ino=2289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 103.122342][ T28] audit: type=1400 audit(102.990:89): avc: denied { mount } for pid=3083 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 103.123864][ T3084] veth1_vlan: entered promiscuous mode [ 103.133555][ T28] audit: type=1400 audit(103.000:90): avc: denied { mounton } for pid=3083 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 103.263620][ T3083] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.274051][ T3084] veth0_macvtap: entered promiscuous mode [ 103.302212][ T3084] veth1_macvtap: entered promiscuous mode [ 103.453977][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.454572][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.455480][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.455646][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.707539][ T40] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 104.907689][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 104.913457][ T40] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 104.919013][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.929470][ T40] usb 2-1: config 0 descriptor?? [ 104.950146][ T3694] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 105.399129][ T40] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 105.401209][ T40] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 105.404444][ T40] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 105.408247][ T40] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 105.411629][ T40] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 105.420738][ T40] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 105.622302][ T40] usb 2-1: USB disconnect, device number 2 [ 106.137258][ T40] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.315518][ T40] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 106.317543][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.329133][ T40] usb 2-1: config 0 descriptor?? [ 106.931010][ T40] elan 0003:04F3:0755.0002: unknown main item tag 0x1 [ 107.004705][ T40] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 107.205138][ T11] usb 2-1: USB disconnect, device number 3 [ 108.313442][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 108.313810][ T28] audit: type=1400 audit(108.180:105): avc: denied { create } for pid=3750 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.323677][ T28] audit: type=1400 audit(108.190:106): avc: denied { write } for pid=3750 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.695822][ T28] audit: type=1400 audit(108.560:107): avc: denied { execute } for pid=3756 comm="syz.1.9" name="file1" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.317829][ T28] audit: type=1400 audit(112.190:108): avc: denied { append } for pid=3775 comm="syz.0.14" name="comedi3" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.331312][ T3776] 8<--- cut here --- [ 112.331546][ T3776] Unable to handle kernel paging request at virtual address fee04f2a when write [ 112.344676][ T28] audit: type=1400 audit(112.210:109): avc: denied { read } for pid=2891 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 112.346463][ T28] audit: type=1400 audit(112.210:110): avc: denied { search } for pid=2891 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.348958][ T28] audit: type=1400 audit(112.210:111): avc: denied { search } for pid=2891 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.350804][ T28] audit: type=1400 audit(112.210:112): avc: denied { add_name } for pid=2891 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.352390][ T28] audit: type=1400 audit(112.210:113): avc: denied { create } for pid=2891 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 112.368728][ T3776] [fee04f2a] *pgd=80000080007003 [ 112.370979][ T28] audit: type=1400 audit(112.240:114): avc: denied { append open } for pid=2891 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.379684][ T3776] , *pmd=00000000 [ 112.381163][ T3776] Internal error: Oops: a06 [#1] SMP ARM [ 112.383094][ T3776] Modules linked in: [ 112.384027][ T3776] CPU: 0 UID: 0 PID: 3776 Comm: syz.0.14 Not tainted syzkaller #0 PREEMPT [ 112.384567][ T3776] Hardware name: ARM-Versatile Express [ 112.385001][ T3776] PC is at subdev_8255_io+0x60/0x6c [ 112.386058][ T3776] LR is at subdev_8255_io+0x4c/0x6c [ 112.386338][ T3776] pc : [<8143e4a8>] lr : [<8143e494>] psr: 60000013 [ 112.386998][ T3776] sp : e01f9cb8 ip : e01f9cb8 fp : e01f9cd4 [ 112.387345][ T3776] r10: 00000000 r9 : 00000084 r8 : e01f9da4 [ 112.387701][ T3776] r7 : 00004f27 r6 : 0000009b r5 : 845c2c00 r4 : 00004f2a [ 112.388125][ T3776] r3 : 0000009b r2 : fee04f2a r1 : 00000001 r0 : 845c2c00 [ 112.388544][ T3776] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 112.388982][ T3776] Control: 30c5387d Table: 8604c580 DAC: fffffffd [ 112.389433][ T3776] Register r0 information: slab kmalloc-192 start 845c2c00 pointer offset 0 size 192 [ 112.390833][ T3776] Register r1 information: non-paged memory [ 112.391400][ T3776] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 112.392143][ T3776] Register r3 information: non-paged memory [ 112.392446][ T3776] Register r4 information: non-paged memory [ 112.392741][ T3776] Register r5 information: slab kmalloc-192 start 845c2c00 pointer offset 0 size 192 [ 112.393322][ T3776] Register r6 information: non-paged memory [ 112.393687][ T3776] Register r7 information: non-paged memory [ 112.393950][ T3776] Register r8 information: 2-page vmalloc region starting at 0xe01f8000 allocated at kernel_clone+0xac/0x428 [ 112.394492][ T3776] Register r9 information: non-paged memory [ 112.394740][ T3776] Register r10 information: NULL pointer [ 112.395037][ T3776] Register r11 information: 2-page vmalloc region starting at 0xe01f8000 allocated at kernel_clone+0xac/0x428 [ 112.395549][ T3776] Register r12 information: 2-page vmalloc region starting at 0xe01f8000 allocated at kernel_clone+0xac/0x428 [ 112.396324][ T3776] Process syz.0.14 (pid: 3776, stack limit = 0xe01f8000) [ 112.397026][ T3776] Stack: (0xe01f9cb8 to 0xe01fa000) [ 112.397652][ T3776] 9ca0: 8143e448 00004f27 [ 112.398028][ T3776] 9cc0: 845c2c00 00004f27 e01f9cf4 e01f9cd8 8143e184 8143e454 00004f27 80522770 [ 112.398360][ T3776] 9ce0: 84d93800 84d93800 e01f9d14 e01f9cf8 8143e53c 8143e138 845c2c00 00000000 [ 112.398782][ T3776] 9d00: 84d93800 00004f27 e01f9d54 e01f9d18 8143e6ec 8143e4c0 829d6e04 845c2c00 [ 112.399426][ T3776] 9d20: 00000000 00000000 845c2c00 829d6e04 845c2c00 00000000 e01f9d90 845c2c00 [ 112.399697][ T3776] 9d40: 00000000 82b2efdc e01f9d8c e01f9d58 8142d030 8143e684 40946400 00000000 [ 112.399994][ T3776] 9d60: e01f9d7c 200000c0 845c2c00 b5403587 40946400 00000003 00000003 839a4800 [ 112.400275][ T3776] 9d80: e01f9e4c e01f9d90 8142883c 8142cf30 35353238 00000000 00000000 00000000 [ 112.400563][ T3776] 9da0: 00000000 00004f27 00000005 00000002 00000401 00000001 00000cc7 00000fff [ 112.400826][ T3776] 9dc0: 5c952399 80000005 000003ff 00000802 00001600 00000001 00000000 00000009 [ 112.401105][ T3776] 9de0: 0000e1cb 00000006 00000004 00000003 00000395 80000089 fffffffd 00000000 [ 112.401457][ T3776] 9e00: fffffff5 ffffeadc 00000003 0000003c 00000008 00000004 08000000 dffffffa [ 112.401831][ T3776] 9e20: 00000000 1d0c1267 839a4800 8388f780 845c2c00 200000c0 40946400 00000003 [ 112.402171][ T3776] 9e40: e01f9f14 e01f9e50 81429b60 81428774 00000000 1d0c1267 00000000 00000000 [ 112.402507][ T3776] 9e60: 824b857c e01f9ea4 0000005f 8451c250 00000064 845c2c30 e01f9ee4 e01f9e88 [ 112.402845][ T3776] 9e80: 807cda48 807c3e20 00000064 00000001 00000000 e01f9ea4 830ce490 83439000 [ 112.403190][ T3776] 9ea0: 00006400 0000000b e01f9e98 00000000 00000000 1d0c1267 00000000 8388f780 [ 112.403549][ T3776] 9ec0: 40946400 200000c0 200000c0 8388f780 00000003 839a4800 e01f9ef4 e01f9ee8 [ 112.403892][ T3776] 9ee0: 807cdb78 1d0c1267 e01f9f14 00000000 8388f781 40946400 200000c0 8388f780 [ 112.404243][ T3776] 9f00: 00000003 839a4800 e01f9fa4 e01f9f18 8058f958 81429818 ecac8b10 839a4800 [ 112.404561][ T3776] 9f20: e01f9f3c e01f9f30 81ae1a14 81ae18e0 e01f9f54 e01f9f40 8025a868 8028c368 [ 112.404918][ T3776] 9f40: e01f9fb0 40000000 e01f9f84 e01f9f58 80220bf8 8025a824 00000000 8281d2bc [ 112.405291][ T3776] 9f60: e01f9fb0 0013e480 ecac8b10 80220b4c 00000000 1d0c1267 e01f9fac 00000000 [ 112.405596][ T3776] 9f80: 00000000 00346310 00000036 8020029c 839a4800 00000036 00000000 e01f9fa8 [ 112.406163][ T3776] 9fa0: 80200060 8058f720 00000000 00000000 00000003 40946400 200000c0 00000000 [ 112.406652][ T3776] 9fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f6e0dc [ 112.407335][ T3776] 9fe0: 76f6de88 76f6de78 00018ba0 001302e0 60000010 00000003 00000000 00000000 [ 112.408156][ T3776] Call trace: [ 112.408655][ T3776] [<8143e448>] (subdev_8255_io) from [<8143e184>] (subdev_8255_do_config+0x58/0x60) [ 112.409329][ T3776] r7:00004f27 r6:845c2c00 r5:00004f27 r4:8143e448 [ 112.409753][ T3776] [<8143e12c>] (subdev_8255_do_config) from [<8143e53c>] (subdev_8255_io_init+0x88/0x98) [ 112.410163][ T3776] r4:84d93800 [ 112.410323][ T3776] [<8143e4b4>] (subdev_8255_io_init) from [<8143e6ec>] (dev_8255_attach+0x74/0x120) [ 112.410795][ T3776] r7:00004f27 r6:84d93800 r5:00000000 r4:845c2c00 [ 112.411062][ T3776] [<8143e678>] (dev_8255_attach) from [<8142d030>] (comedi_device_attach+0x10c/0x248) [ 112.411472][ T3776] r10:82b2efdc r9:00000000 r8:845c2c00 r7:e01f9d90 r6:00000000 r5:845c2c00 [ 112.411791][ T3776] r4:829d6e04 [ 112.411951][ T3776] [<8142cf24>] (comedi_device_attach) from [<8142883c>] (do_devconfig_ioctl+0xd4/0x21c) [ 112.412364][ T3776] r10:839a4800 r9:00000003 r8:00000003 r7:40946400 r6:b5403587 r5:845c2c00 [ 112.412694][ T3776] r4:200000c0 [ 112.412856][ T3776] [<81428768>] (do_devconfig_ioctl) from [<81429b60>] (comedi_unlocked_ioctl+0x354/0x1dbc) [ 112.413287][ T3776] r8:00000003 r7:40946400 r6:200000c0 r5:845c2c00 r4:8388f780 [ 112.413577][ T3776] [<8142980c>] (comedi_unlocked_ioctl) from [<8058f958>] (sys_ioctl+0x244/0xb5c) [ 112.414087][ T3776] r10:839a4800 r9:00000003 r8:8388f780 r7:200000c0 r6:40946400 r5:8388f781 [ 112.414489][ T3776] r4:00000000 [ 112.414653][ T3776] [<8058f714>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 112.415097][ T3776] Exception stack(0xe01f9fa8 to 0xe01f9ff0) [ 112.415392][ T3776] 9fa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 112.415725][ T3776] 9fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f6e0dc [ 112.416099][ T3776] 9fe0: 76f6de88 76f6de78 00018ba0 001302e0 [ 112.416698][ T3776] r10:00000036 r9:839a4800 r8:8020029c r7:00000036 r6:00346310 r5:00000000 [ 112.417280][ T3776] r4:00000000 [ 112.417848][ T3776] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 112.420270][ T3776] ---[ end trace 0000000000000000 ]--- [ 112.498919][ T3776] Kernel panic - not syncing: Fatal exception [ 112.502430][ T3776] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:35:36 Registers: info registers vcpu 0 CPU#0 R00=84fdd340 R01=000000c0 R02=00000540 R03=000004b4 R04=85015d24 R05=85015d20 R06=00000000 R07=ebe11d00 R08=ebe11c50 R09=85028744 R10=84d4a3f8 R11=ebe11bb4 R12=00000015 R13=ebe11b20 R14=807e1bd0 R15=807e1bb4 PSR=a00f0013 N-C- A S svc32 s00=72656820 s01=2d2d2065 d00=2d2d206572656820 s02=00000000 s03=00000000 d01=0000000000000000 s04=ef0cee00 s05=ef0cee00 d02=ef0cee00ef0cee00 s06=08040200 s07=80402000 d03=8040200008040200 s08=00000c00 s09=c0200c03 d04=c0200c0300000c00 s10=08040201 s11=80402000 d05=8040200008040201 s12=08040201 s13=80402010 d06=8040201008040201 s14=08040201 s15=80402010 d07=8040201008040201 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=5b719000 R01=000181b7 R02=826c12c4 R03=81ae22e0 R04=00000006 R05=828f8388 R06=00000004 R07=828f8380 R08=844c3c00 R09=828f8388 R10=00000000 R11=e032dacc R12=e032dad0 R13=e032dac0 R14=80341388 R15=81ae22f0 PSR=60000093 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000