last executing test programs: 1.13414007s ago: executing program 0 (id=1): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000012c0)={0x40, 0x3, 0x5, {0x5, 0x4, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_FUNCS(r1, 0x705, &(0x7f0000000240)=0x1) 701.718692ms ago: executing program 1 (id=2): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) rename(0x0, 0x0) write(r0, &(0x7f0000001200)="1c0000001e005f0214ffffffff070000000000001d00000000000001", 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x20, &(0x7f0000005a40)) 439.139447ms ago: executing program 1 (id=3): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2814\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0x6, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x3, 0x81, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) 274.557585ms ago: executing program 1 (id=4): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000640)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@fd={0x73622a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1d}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=5): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f27, 0x5, 0x4, 0x4, 0x5, 0x6, 0x6, 0x7, 0xa, 0x100, 0x2, 0x80000, 0x1, 0x8, 0x1e, 0x1, 0x0, 0x1a449, 0x3, 0x6, 0x81, 0xcaa7, 0x4, 0x1e58, 0xb, 0x3, 0x3c, 0x8, 0x6, 0x0, 0x5]}) kernel console output (not intermixed with test programs): [ 48.945384][ T31] audit: type=1400 audit(48.850:56): avc: denied { read write } for pid=3094 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.947829][ T31] audit: type=1400 audit(48.850:57): avc: denied { open } for pid=3094 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:21445' (ED25519) to the list of known hosts. [ 58.594062][ T31] audit: type=1400 audit(58.500:58): avc: denied { name_bind } for pid=3097 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 59.908257][ T31] audit: type=1400 audit(59.810:59): avc: denied { execute } for pid=3098 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 59.946866][ T31] audit: type=1400 audit(59.850:60): avc: denied { execute_no_trans } for pid=3098 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 64.269457][ T31] audit: type=1400 audit(64.170:61): avc: denied { mounton } for pid=3098 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.274200][ T31] audit: type=1400 audit(64.180:62): avc: denied { mount } for pid=3098 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.292826][ T3098] cgroup: Unknown subsys name 'net' [ 64.303218][ T31] audit: type=1400 audit(64.210:63): avc: denied { unmount } for pid=3098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.504544][ T3098] cgroup: Unknown subsys name 'cpuset' [ 64.510432][ T3098] cgroup: Unknown subsys name 'hugetlb' [ 64.511405][ T3098] cgroup: Unknown subsys name 'rlimit' [ 64.756181][ T31] audit: type=1400 audit(64.660:64): avc: denied { setattr } for pid=3098 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.757944][ T31] audit: type=1400 audit(64.660:65): avc: denied { mounton } for pid=3098 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 64.763007][ T31] audit: type=1400 audit(64.660:66): avc: denied { mount } for pid=3098 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 64.949896][ T3100] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 64.953721][ T31] audit: type=1400 audit(64.860:67): avc: denied { relabelto } for pid=3100 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 64.959871][ T31] audit: type=1400 audit(64.860:68): avc: denied { write } for pid=3100 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 64.998688][ T31] audit: type=1400 audit(64.900:69): avc: denied { read } for pid=3098 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 65.000740][ T31] audit: type=1400 audit(64.900:70): avc: denied { open } for pid=3098 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 72.105690][ T3098] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.845624][ T31] audit: type=1400 audit(73.750:71): avc: denied { execmem } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.910038][ T31] audit: type=1400 audit(73.810:72): avc: denied { read } for pid=3103 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.913181][ T31] audit: type=1400 audit(73.820:73): avc: denied { open } for pid=3103 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.924412][ T31] audit: type=1400 audit(73.830:74): avc: denied { mounton } for pid=3104 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 73.941037][ T31] audit: type=1400 audit(73.850:76): avc: denied { module_request } for pid=3103 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 73.943482][ T31] audit: type=1400 audit(73.850:75): avc: denied { module_request } for pid=3104 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 74.010027][ T31] audit: type=1400 audit(73.910:77): avc: denied { sys_module } for pid=3103 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.575832][ T31] audit: type=1400 audit(74.480:78): avc: denied { ioctl } for pid=3104 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=675 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.573425][ T3104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.582115][ T3104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.708397][ T3103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.714984][ T3103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.457201][ T3103] hsr_slave_0: entered promiscuous mode [ 76.464092][ T3103] hsr_slave_1: entered promiscuous mode [ 76.585270][ T3104] hsr_slave_0: entered promiscuous mode [ 76.587293][ T3104] hsr_slave_1: entered promiscuous mode [ 76.588282][ T3104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.588694][ T3104] Cannot create hsr debugfs directory [ 76.942720][ T31] audit: type=1400 audit(76.850:79): avc: denied { create } for pid=3103 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.949524][ T31] audit: type=1400 audit(76.850:80): avc: denied { write } for pid=3103 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.955722][ T3103] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.974747][ T3103] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.986724][ T3103] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.997480][ T3103] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.031930][ T3104] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.043562][ T3104] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.056586][ T3104] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.066097][ T3104] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.507257][ T3103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.769809][ T3104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.597465][ T3103] veth0_vlan: entered promiscuous mode [ 79.621059][ T3103] veth1_vlan: entered promiscuous mode [ 79.692802][ T3103] veth0_macvtap: entered promiscuous mode [ 79.707739][ T3103] veth1_macvtap: entered promiscuous mode [ 79.773279][ T3103] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.773965][ T3103] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.775968][ T3103] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.776220][ T3103] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.911448][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 79.912399][ T31] audit: type=1400 audit(79.820:82): avc: denied { mount } for pid=3103 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.925934][ T31] audit: type=1400 audit(79.830:83): avc: denied { mounton } for pid=3103 comm="syz-executor" path="/syzkaller.avLRhW/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 79.940935][ T31] audit: type=1400 audit(79.850:84): avc: denied { mount } for pid=3103 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 79.948040][ T31] audit: type=1400 audit(79.850:85): avc: denied { mounton } for pid=3103 comm="syz-executor" path="/syzkaller.avLRhW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 79.961853][ T31] audit: type=1400 audit(79.870:86): avc: denied { mounton } for pid=3103 comm="syz-executor" path="/syzkaller.avLRhW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 79.991334][ T31] audit: type=1400 audit(79.890:87): avc: denied { unmount } for pid=3103 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 79.995204][ T31] audit: type=1400 audit(79.900:88): avc: denied { mounton } for pid=3103 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 79.997605][ T31] audit: type=1400 audit(79.900:89): avc: denied { mount } for pid=3103 comm="syz-executor" name="/" dev="gadgetfs" ino=2001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 80.004849][ T31] audit: type=1400 audit(79.910:90): avc: denied { mount } for pid=3103 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.007433][ T31] audit: type=1400 audit(79.910:91): avc: denied { mounton } for pid=3103 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 80.082996][ T3103] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.197993][ T3104] veth0_vlan: entered promiscuous mode [ 80.224500][ T3104] veth1_vlan: entered promiscuous mode [ 80.302703][ T3104] veth0_macvtap: entered promiscuous mode [ 80.314796][ T3104] veth1_macvtap: entered promiscuous mode [ 80.387865][ T3104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.388223][ T3104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.388471][ T3104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.388544][ T3104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.510472][ T3052] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.662007][ T3052] usb 1-1: Using ep0 maxpacket: 8 [ 80.676344][ T3052] usb 1-1: config 0 interface 0 has no altsetting 0 [ 80.678476][ T3052] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 80.682933][ T3052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.691181][ T3052] usb 1-1: config 0 descriptor?? [ 80.941102][ T3807] comedi: valid board names for 8255 driver are: [ 80.941667][ T3807] 8255 [ 80.944389][ T3807] comedi: valid board names for vmk80xx driver are: [ 80.944740][ T3807] vmk80xx [ 80.944971][ T3807] comedi: valid board names for usbduxsigma driver are: [ 80.945253][ T3807] usbduxsigma [ 80.945323][ T3807] comedi: valid board names for usbduxfast driver are: [ 80.945374][ T3807] usbduxfast [ 80.945418][ T3807] comedi: valid board names for usbdux driver are: [ 80.945466][ T3807] usbdux [ 80.945515][ T3807] comedi: valid board names for ni6501 driver are: [ 80.945567][ T3807] ni6501 [ 80.945611][ T3807] comedi: valid board names for dt9812 driver are: [ 80.945654][ T3807] dt9812 [ 80.945696][ T3807] comedi: valid board names for ni_labpc_cs driver are: [ 80.945759][ T3807] ni_labpc_cs [ 80.945814][ T3807] comedi: valid board names for ni_daq_700 driver are: [ 80.945857][ T3807] ni_daq_700 [ 80.945902][ T3807] comedi: valid board names for labpc_pci driver are: [ 80.945949][ T3807] labpc_pci [ 80.946069][ T3807] comedi: valid board names for adl_pci9118 driver are: [ 80.946151][ T3807] pci9118dg [ 80.946230][ T3807] pci9118hg [ 80.946310][ T3807] pci9118hr [ 80.946372][ T3807] comedi: valid board names for 8255_pci driver are: [ 80.946421][ T3807] 8255_pci [ 80.946461][ T3807] comedi: valid board names for comedi_parport driver are: [ 80.946502][ T3807] comedi_parport [ 80.946784][ T3807] comedi: valid board names for comedi_test driver are: [ 80.946865][ T3807] comedi_test [ 80.946909][ T3807] comedi: valid board names for comedi_bond driver are: [ 80.946955][ T3807] comedi_bond [ 81.234823][ T3052] mcp2221 0003:04D8:00DD.0001: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 81.356126][ T3815] 8<--- cut here --- [ 81.356487][ T3815] Unable to handle kernel paging request at virtual address fee04f27 when write [ 81.356713][ T3815] [fee04f27] *pgd=80000080007003, *pmd=00000000 [ 81.357964][ T3815] Internal error: Oops: a06 [#1] SMP ARM [ 81.360741][ T3815] Modules linked in: [ 81.362877][ T3815] CPU: 0 UID: 0 PID: 3815 Comm: syz.1.5 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT [ 81.364808][ T3815] Hardware name: ARM-Versatile Express [ 81.365814][ T3815] PC is at parport_attach+0x174/0x1d0 [ 81.367715][ T3815] LR is at parport_attach+0x164/0x1d0 [ 81.368450][ T3815] pc : [<81398ba8>] lr : [<81398b98>] psr: 60000013 [ 81.369300][ T3815] sp : dfe2dd38 ip : dfe2dd38 fp : dfe2dd5c [ 81.370209][ T3815] r10: 82b15078 r9 : 00000003 r8 : 8406e000 [ 81.371224][ T3815] r7 : dfe2dd98 r6 : 8406e000 r5 : 00000000 r4 : 00000000 [ 81.372414][ T3815] r3 : fee04f27 r2 : 81e14f0c r1 : 00000001 r0 : 81398818 [ 81.373638][ T3815] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 81.375091][ T3815] Control: 30c5387d Table: 8586b300 DAC: fffffffd [ 81.376051][ T3815] Register r0 information: non-slab/vmalloc memory [ 81.377828][ T3815] Register r1 information: non-paged memory [ 81.378635][ T3815] Register r2 information: non-slab/vmalloc memory [ 81.379342][ T3815] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 81.381260][ T3815] Register r4 information: NULL pointer [ 81.382181][ T3815] Register r5 information: NULL pointer [ 81.383012][ T3815] Register r6 information: slab kmalloc-192 start 8406e000 pointer offset 0 size 192 [ 81.384303][ T3815] Register r7 information: 2-page vmalloc region starting at 0xdfe2c000 allocated at kernel_clone+0xac/0x3e4 [ 81.385287][ T3815] Register r8 information: slab kmalloc-192 start 8406e000 pointer offset 0 size 192 [ 81.386136][ T3815] Register r9 information: non-paged memory [ 81.386709][ T3815] Register r10 information: non-slab/vmalloc memory [ 81.387060][ T3815] Register r11 information: 2-page vmalloc region starting at 0xdfe2c000 allocated at kernel_clone+0xac/0x3e4 [ 81.387979][ T3815] Register r12 information: 2-page vmalloc region starting at 0xdfe2c000 allocated at kernel_clone+0xac/0x3e4 [ 81.389191][ T3815] Process syz.1.5 (pid: 3815, stack limit = 0xdfe2c000) [ 81.390445][ T3815] Stack: (0xdfe2dd38 to 0xdfe2e000) [ 81.391194][ T3815] dd20: 823f88f8 8406e000 [ 81.391755][ T3815] dd40: 829c4b18 829c4b18 81e153cc 00000000 dfe2dd94 dfe2dd60 81394c60 81398a40 [ 81.392660][ T3815] dd60: 200000c0 00000000 dfe2dd84 200000c0 8406e000 b5403587 200000c0 85458c00 [ 81.393369][ T3815] dd80: 40946400 00000003 dfe2de4c dfe2dd98 813908f0 81394b68 656d6f63 705f6964 [ 81.393664][ T3815] dda0: 6f707261 00007472 00000000 00004f27 00000005 00000004 00000004 00000005 [ 81.394088][ T3815] ddc0: 00000006 00000006 00000007 0000000a 00000100 00000002 00080000 00000001 [ 81.394995][ T3815] dde0: 00000008 0000001e 00000001 00000000 0001a449 00000003 00000006 00000081 [ 81.395843][ T3815] de00: 0000caa7 00000004 00001e58 0000000b 00000003 0000003c 00000008 00000006 [ 81.396596][ T3815] de20: 00000000 00000005 00000000 5154f9f4 00000000 848973c0 8406e000 200000c0 [ 81.397335][ T3815] de40: dfe2df14 dfe2de50 813918a4 81390824 00000000 00000000 00000000 5154f9f4 [ 81.398170][ T3815] de60: 00000000 00000000 8246a3fc 0000005f 83ca3e58 8406e030 83ff0eac 85458c00 [ 81.399188][ T3815] de80: dfe2dee4 dfe2de90 8079688c 8078cb7c 00000064 00000001 00000000 dfe2deac [ 81.399866][ T3815] dea0: 85847250 834e27f8 00006400 0000000b dfe2dea0 00000000 00000000 5154f9f4 [ 81.401087][ T3815] dec0: 848973c0 40946400 200000c0 200000c0 00000003 848973c0 dfe2def4 dfe2dee8 [ 81.401577][ T3815] dee0: 807969ac 5154f9f4 dfe2df14 40946400 00000000 848973c1 200000c0 00000003 [ 81.401996][ T3815] df00: 848973c0 85458c00 dfe2dfa4 dfe2df18 8056f16c 813912d4 ecac8b10 85458c00 [ 81.402500][ T3815] df20: dfe2df3c dfe2df30 81a2db68 81a2da38 dfe2df54 dfe2df40 8026203c 802935d8 [ 81.402932][ T3815] df40: dfe2dfb0 40000000 dfe2df84 dfe2df58 802229ec 80261ff8 00000000 8281d09c [ 81.403452][ T3815] df60: dfe2dfb0 0014c4a0 ecac8b10 80222940 00000000 5154f9f4 dfe2dfac 00000000 [ 81.403895][ T3815] df80: 00000000 002f6300 00000036 8020029c 85458c00 00000036 00000000 dfe2dfa8 [ 81.404277][ T3815] dfa0: 80200060 8056f048 00000000 00000000 00000003 40946400 200000c0 00000000 [ 81.404531][ T3815] dfc0: 00000000 00000000 002f6300 00000036 002e0000 00000000 00006364 76b330bc [ 81.404775][ T3815] dfe0: 76b32ec0 76b32eb0 000193a4 00131f40 60000010 00000003 00000000 00000000 [ 81.405120][ T3815] Call trace: [ 81.405399][ T3815] [<81398a34>] (parport_attach) from [<81394c60>] (comedi_device_attach+0x104/0x240) [ 81.405858][ T3815] r6:00000000 r5:81e153cc r4:829c4b18 [ 81.406067][ T3815] [<81394b5c>] (comedi_device_attach) from [<813908f0>] (do_devconfig_ioctl+0xd8/0x1e0) [ 81.406356][ T3815] r10:00000003 r9:40946400 r8:85458c00 r7:200000c0 r6:b5403587 r5:8406e000 [ 81.406599][ T3815] r4:200000c0 [ 81.406891][ T3815] [<81390818>] (do_devconfig_ioctl) from [<813918a4>] (comedi_unlocked_ioctl+0x5dc/0x1b94) [ 81.407498][ T3815] r6:200000c0 r5:8406e000 r4:848973c0 [ 81.407734][ T3815] [<813912c8>] (comedi_unlocked_ioctl) from [<8056f16c>] (sys_ioctl+0x130/0xdc8) [ 81.408342][ T3815] r10:85458c00 r9:848973c0 r8:00000003 r7:200000c0 r6:848973c1 r5:00000000 [ 81.408835][ T3815] r4:40946400 [ 81.408945][ T3815] [<8056f03c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 81.409255][ T3815] Exception stack(0xdfe2dfa8 to 0xdfe2dff0) [ 81.409438][ T3815] dfa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 81.409704][ T3815] dfc0: 00000000 00000000 002f6300 00000036 002e0000 00000000 00006364 76b330bc [ 81.409989][ T3815] dfe0: 76b32ec0 76b32eb0 000193a4 00131f40 [ 81.410161][ T3815] r10:00000036 r9:85458c00 r8:8020029c r7:00000036 r6:002f6300 r5:00000000 [ 81.410314][ T3815] r4:00000000 [ 81.410900][ T3815] Code: e596306c e3a04000 e7f33053 e2433612 (e5c34000) [ 81.411767][ T3815] ---[ end trace 0000000000000000 ]--- [ 81.412663][ T3815] Kernel panic - not syncing: Fatal exception [ 81.415346][ T3815] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:31:25 Registers: info registers vcpu 0 CPU#0 R00=82a6e154 R01=00000000 R02=00000000 R03=85458c00 R04=85458c00 R05=8225c190 R06=829f1b27 R07=60000193 R08=82a6d45c R09=00000ee7 R10=00000000 R11=dfe2db2c R12=00000014 R13=dfe2db20 R14=00646574 R15=80258bb4 PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000001 R01=8225c190 R02=00000001 R03=81a2e3a0 R04=00000006 R05=828f8dc8 R06=00000000 R07=828f8dc0 R08=83846000 R09=00000028 R10=828f8dc8 R11=df805eb4 R12=df805eb8 R13=df805ea8 R14=80340934 R15=81a2e3b0 PSR=20010193 --C- A S svc32 s00=01400800 s01=00000000 d00=0000000001400800 s02=08000b88 s03=04a08080 d01=04a0808008000b88 s04=08010d98 s05=00040806 d02=0004080608010d98 s06=08000100 s07=0b800200 d03=0b80020008000100 s08=84b40800 s09=80808080 d04=8080808084b40800 s10=03208080 s11=00040d80 d05=00040d8003208080 s12=000d9003 s13=82808010 d06=82808010000d9003 s14=0da00303 s15=20800800 d07=208008000da00303 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=0008001f s33=06013cb8 d16=06013cb80008001f s34=08000002 s35=06808086 d17=0680808608000002 s36=e22a0800 s37=000c016e d18=000c016ee22a0800 s38=ff022208 s39=03ffffff d19=03ffffffff022208 s40=02000800 s41=ffffffff d20=ffffffff02000800 s42=ffff0203 s43=0203ffff d21=0203ffffffff0203 s44=ffffffff s45=08000303 d22=08000303ffffffff s46=fffffff3 s47=ffffffff d23=fffffffffffffff3 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=f712dd8c s53=84674a26 d26=84674a26f712dd8c s54=9250ca97 s55=4ab79aa8 d27=4ab79aa89250ca97 s56=9a74eec2 s57=784dd42f d28=784dd42f9a74eec2 s58=87d5e87b s59=248c1bfa d29=248c1bfa87d5e87b s60=9a7ca339 s61=d1109973 d30=d11099739a7ca339 s62=b9e5a442 s63=e9227812 d31=e9227812b9e5a442 FPSCR: 00000000