last executing test programs: 9.069386341s ago: executing program 0 (id=47): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = epoll_create1(0x80000) epoll_pwait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x624, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 7.094956931s ago: executing program 1 (id=50): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 5.343100776s ago: executing program 0 (id=51): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x300) 5.304189209s ago: executing program 1 (id=52): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0x3050, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x3, 0x1, 0x1}, 0x18, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x7) r4 = getpgrp(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r4}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) 4.813903172s ago: executing program 0 (id=53): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x4ce, 0x3, 0x9dff, 0xf, "000300eb00cbe600"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x3) 4.660687712s ago: executing program 1 (id=54): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x40000000) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000007c0)=""/217, 0xd9}, {&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000001840)=""/4108, 0x100c}], 0x5}, 0x70003}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0xfffff001}], 0x3, 0x102, 0x0) 1.66891121s ago: executing program 1 (id=55): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0xc0c4) 1.5107559s ago: executing program 0 (id=56): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000c0000000400000001000084010000000a0000000200000006000000000000000000000105000000280000000061002e2e61610061005f"], 0x0, 0x4c}, 0x28) 1.071568409s ago: executing program 0 (id=57): setresgid(0xee00, 0xee01, 0x0) r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 273.564692ms ago: executing program 0 (id=58): syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x20080) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000140)=[0xd0044, 0x2]) 259.833043ms ago: executing program 1 (id=59): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x20000, 0x0) close(r1) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 1 (id=60): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x7, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0xda, 0x802, 0x1600, 0xfffffdfd, 0x1, 0x0, 0xe1cb, 0x6, 0x4, 0x6, 0x395, 0x0, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) kernel console output (not intermixed with test programs): [ 58.007552][ T28] audit: type=1400 audit(57.900:56): avc: denied { read write } for pid=3078 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.008109][ T28] audit: type=1400 audit(57.900:57): avc: denied { open } for pid=3078 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:47973' (ED25519) to the list of known hosts. [ 74.340911][ T28] audit: type=1400 audit(74.230:58): avc: denied { name_bind } for pid=3081 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 76.624117][ T28] audit: type=1400 audit(76.520:59): avc: denied { execute } for pid=3082 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 76.659095][ T28] audit: type=1400 audit(76.530:60): avc: denied { execute_no_trans } for pid=3082 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 81.338698][ T28] audit: type=1400 audit(81.230:61): avc: denied { mounton } for pid=3082 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 81.353247][ T28] audit: type=1400 audit(81.240:62): avc: denied { mount } for pid=3082 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 81.364513][ T3082] cgroup: Unknown subsys name 'net' [ 81.376308][ T28] audit: type=1400 audit(81.270:63): avc: denied { unmount } for pid=3082 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 81.543804][ T3082] cgroup: Unknown subsys name 'cpuset' [ 81.551747][ T3082] cgroup: Unknown subsys name 'hugetlb' [ 81.553823][ T3082] cgroup: Unknown subsys name 'rlimit' [ 81.810506][ T28] audit: type=1400 audit(81.700:64): avc: denied { setattr } for pid=3082 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.817862][ T28] audit: type=1400 audit(81.700:65): avc: denied { mounton } for pid=3082 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 81.824606][ T28] audit: type=1400 audit(81.710:66): avc: denied { mount } for pid=3082 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 82.090801][ T3084] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 82.103208][ T28] audit: type=1400 audit(81.990:67): avc: denied { relabelto } for pid=3084 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 82.103609][ T28] audit: type=1400 audit(81.990:68): avc: denied { write } for pid=3084 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 82.144359][ T28] audit: type=1400 audit(82.030:69): avc: denied { read } for pid=3082 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 82.151086][ T28] audit: type=1400 audit(82.030:70): avc: denied { open } for pid=3082 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 90.125605][ T3082] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.342050][ T28] audit: type=1400 audit(92.230:71): avc: denied { execmem } for pid=3085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 92.379091][ T28] audit: type=1400 audit(92.270:72): avc: denied { read } for pid=3087 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.379610][ T28] audit: type=1400 audit(92.270:73): avc: denied { open } for pid=3087 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.386548][ T28] audit: type=1400 audit(92.280:74): avc: denied { mounton } for pid=3087 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 92.423057][ T28] audit: type=1400 audit(92.310:75): avc: denied { module_request } for pid=3087 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 92.548108][ T28] audit: type=1400 audit(92.440:76): avc: denied { sys_module } for pid=3087 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 93.431695][ T28] audit: type=1400 audit(93.320:77): avc: denied { ioctl } for pid=3087 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=677 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.908856][ T3087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.948348][ T3087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.957200][ T3088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.989153][ T3088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.081405][ T3087] hsr_slave_0: entered promiscuous mode [ 96.087859][ T3087] hsr_slave_1: entered promiscuous mode [ 96.189819][ T3088] hsr_slave_0: entered promiscuous mode [ 96.204708][ T3088] hsr_slave_1: entered promiscuous mode [ 96.206856][ T3088] debugfs: 'hsr0' already exists in 'hsr' [ 96.207607][ T3088] Cannot create hsr debugfs directory [ 96.825375][ T28] audit: type=1400 audit(96.720:78): avc: denied { create } for pid=3087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.826086][ T28] audit: type=1400 audit(96.720:79): avc: denied { write } for pid=3087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.839506][ T28] audit: type=1400 audit(96.730:80): avc: denied { read } for pid=3087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.852107][ T3087] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.879354][ T3087] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.895651][ T3087] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.931814][ T3087] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.011061][ T3088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.036639][ T3088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.051678][ T3088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.068516][ T3088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.044787][ T3088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.089006][ T3087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.665982][ T3087] veth0_vlan: entered promiscuous mode [ 101.687965][ T3087] veth1_vlan: entered promiscuous mode [ 101.820736][ T3087] veth0_macvtap: entered promiscuous mode [ 101.847834][ T3087] veth1_macvtap: entered promiscuous mode [ 101.979598][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.980587][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.984003][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.984338][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.182204][ T3088] veth0_vlan: entered promiscuous mode [ 102.229915][ T3088] veth1_vlan: entered promiscuous mode [ 102.253080][ T28] audit: type=1400 audit(102.080:81): avc: denied { mount } for pid=3087 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 102.277345][ T28] audit: type=1400 audit(102.160:82): avc: denied { mounton } for pid=3087 comm="syz-executor" path="/syzkaller.9LwqSA/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 102.295585][ T28] audit: type=1400 audit(102.190:83): avc: denied { mount } for pid=3087 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 102.313833][ T28] audit: type=1400 audit(102.200:84): avc: denied { mounton } for pid=3087 comm="syz-executor" path="/syzkaller.9LwqSA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 102.325696][ T28] audit: type=1400 audit(102.210:85): avc: denied { mounton } for pid=3087 comm="syz-executor" path="/syzkaller.9LwqSA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=1861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 102.338739][ T3088] veth0_macvtap: entered promiscuous mode [ 102.348483][ T28] audit: type=1400 audit(102.240:86): avc: denied { unmount } for pid=3087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 102.365427][ T28] audit: type=1400 audit(102.260:87): avc: denied { mounton } for pid=3087 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 102.371195][ T3088] veth1_macvtap: entered promiscuous mode [ 102.374652][ T28] audit: type=1400 audit(102.260:88): avc: denied { mount } for pid=3087 comm="syz-executor" name="/" dev="gadgetfs" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 102.388393][ T28] audit: type=1400 audit(102.280:89): avc: denied { mount } for pid=3087 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 102.396173][ T28] audit: type=1400 audit(102.290:90): avc: denied { mounton } for pid=3087 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 102.527434][ T3087] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.543225][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.543558][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.543791][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.543843][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.438801][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 107.439287][ T28] audit: type=1400 audit(107.330:115): avc: denied { mounton } for pid=3721 comm="syz.1.11" path="/6/file0" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.490256][ T28] audit: type=1400 audit(107.380:116): avc: denied { mount } for pid=3721 comm="syz.1.11" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 107.553565][ T28] audit: type=1400 audit(107.440:117): avc: denied { unmount } for pid=3088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 110.179413][ T28] audit: type=1400 audit(110.070:118): avc: denied { name_bind } for pid=3731 comm="syz.1.14" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 110.187988][ T28] audit: type=1400 audit(110.080:119): avc: denied { node_bind } for pid=3731 comm="syz.1.14" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 110.268080][ T28] audit: type=1400 audit(110.160:120): avc: denied { map_create } for pid=3731 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 110.270785][ T28] audit: type=1400 audit(110.160:121): avc: denied { map_read map_write } for pid=3731 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 110.368741][ T28] audit: type=1400 audit(110.260:122): avc: denied { prog_run } for pid=3731 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 110.724985][ T28] audit: type=1400 audit(110.620:123): avc: denied { create } for pid=3733 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.957172][ T28] audit: type=1400 audit(110.850:124): avc: denied { create } for pid=3733 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.113486][ T3734] nbd1: detected capacity change from 0 to 63 [ 111.123503][ T3734] block nbd1: NBD_DISCONNECT [ 111.125031][ T3734] block nbd1: Disconnected due to user request. [ 111.126530][ T3734] block nbd1: shutting down sockets [ 112.288912][ T3739] Illegal XDP return value 3739 on prog (id 2) dev N/A, expect packet loss! [ 115.618311][ T28] audit: type=1400 audit(115.510:125): avc: denied { unmount } for pid=3088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 117.813173][ T28] audit: type=1400 audit(117.700:126): avc: denied { setopt } for pid=3747 comm="syz.1.19" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.387683][ T3750] netlink: 'syz.1.20': attribute type 46 has an invalid length. [ 124.152957][ T28] audit: type=1400 audit(124.030:127): avc: denied { name_bind } for pid=3769 comm="syz.1.28" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 125.855566][ T28] audit: type=1400 audit(125.750:128): avc: denied { ioctl } for pid=3772 comm="syz.1.29" path="socket:[2650]" dev="sockfs" ino=2650 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.856284][ T3773] syzkaller0: entered promiscuous mode [ 125.856641][ T3773] syzkaller0: entered allmulticast mode [ 126.546191][ T28] audit: type=1400 audit(126.440:129): avc: denied { create } for pid=3778 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.564794][ T28] audit: type=1400 audit(126.460:130): avc: denied { setopt } for pid=3778 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.467441][ T28] audit: type=1400 audit(127.360:131): avc: denied { write } for pid=3780 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 128.168063][ T3783] syzkaller0: entered promiscuous mode [ 128.168506][ T3783] syzkaller0: entered allmulticast mode [ 130.616686][ T3798] syzkaller0: entered promiscuous mode [ 130.621119][ T3798] syzkaller0: entered allmulticast mode [ 132.458582][ T28] audit: type=1400 audit(132.350:132): avc: denied { create } for pid=3808 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 133.142139][ T28] audit: type=1400 audit(133.000:133): avc: denied { append } for pid=3812 comm="syz.0.41" name="tun" dev="devtmpfs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.435973][ T3814] Zero length message leads to an empty skb [ 135.425743][ T28] audit: type=1400 audit(135.320:134): avc: denied { create } for pid=3830 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.597473][ T28] audit: type=1400 audit(135.450:135): avc: denied { bind } for pid=3830 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 137.518854][ T28] audit: type=1400 audit(137.410:136): avc: denied { create } for pid=3839 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.536068][ T28] audit: type=1400 audit(137.430:137): avc: denied { bind } for pid=3839 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.555259][ T28] audit: type=1400 audit(137.450:138): avc: denied { accept } for pid=3839 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.581549][ T28] audit: type=1400 audit(137.470:139): avc: denied { allowed } for pid=3839 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 138.658193][ T3843] syzkaller0: entered promiscuous mode [ 138.659679][ T3843] syzkaller0: entered allmulticast mode [ 144.262157][ T28] audit: type=1400 audit(144.150:140): avc: denied { mounton } for pid=3867 comm="syz.0.57" path="/proc/33/task" dev="proc" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 144.683076][ T28] audit: type=1400 audit(144.570:141): avc: denied { ioctl } for pid=3876 comm="syz.1.59" path="socket:[3143]" dev="sockfs" ino=3143 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.849020][ T3887] 8<--- cut here --- [ 144.849701][ T3887] Unable to handle kernel paging request at virtual address fee04f2a when write [ 144.858259][ T28] audit: type=1400 audit(144.750:142): avc: denied { read } for pid=2895 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 144.860804][ T28] audit: type=1400 audit(144.750:143): avc: denied { search } for pid=2895 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.864012][ T28] audit: type=1400 audit(144.750:144): avc: denied { search } for pid=2895 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.866849][ T28] audit: type=1400 audit(144.750:145): avc: denied { add_name } for pid=2895 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.868843][ T28] audit: type=1400 audit(144.750:146): avc: denied { create } for pid=2895 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 144.871820][ T28] audit: type=1400 audit(144.750:147): avc: denied { append open } for pid=2895 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 144.874809][ T28] audit: type=1400 audit(144.750:148): avc: denied { getattr } for pid=2895 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 144.885127][ T3887] [fee04f2a] *pgd=80000080007003, *pmd=00000000 [ 144.887968][ T3887] Internal error: Oops: a06 [#1] SMP ARM [ 144.890664][ T3887] Modules linked in: [ 144.891923][ T3887] CPU: 0 UID: 0 PID: 3887 Comm: syz.1.60 Not tainted syzkaller #0 PREEMPT [ 144.892679][ T3887] Hardware name: ARM-Versatile Express [ 144.893192][ T3887] PC is at subdev_8255_io+0x60/0x6c [ 144.895085][ T3887] LR is at subdev_8255_io+0x4c/0x6c [ 144.895563][ T3887] pc : [<81436b38>] lr : [<81436b24>] psr: 60000013 [ 144.896285][ T3887] sp : df9f1cb8 ip : df9f1cb8 fp : df9f1cd4 [ 144.896754][ T3887] r10: 00000000 r9 : 00000084 r8 : df9f1da4 [ 144.897304][ T3887] r7 : 00004f27 r6 : 0000009b r5 : 84269900 r4 : 00004f2a [ 144.897808][ T3887] r3 : 0000009b r2 : fee04f2a r1 : 00000001 r0 : 84269900 [ 144.898703][ T3887] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 144.899502][ T3887] Control: 30c5387d Table: 85f192c0 DAC: fffffffd [ 144.899943][ T3887] Register r0 information: slab kmalloc-192 start 84269900 pointer offset 0 size 192 [ 144.901849][ T3887] Register r1 information: non-paged memory [ 144.902596][ T3887] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 144.903432][ T3887] Register r3 information: non-paged memory [ 144.903837][ T3887] Register r4 information: non-paged memory [ 144.904346][ T3887] Register r5 information: slab kmalloc-192 start 84269900 pointer offset 0 size 192 [ 144.904923][ T3887] Register r6 information: non-paged memory [ 144.906086][ T3887] Register r7 information: non-paged memory [ 144.906512][ T3887] Register r8 information: 2-page vmalloc region starting at 0xdf9f0000 allocated at kernel_clone+0xac/0x428 [ 144.907855][ T3887] Register r9 information: non-paged memory [ 144.908693][ T3887] Register r10 information: NULL pointer [ 144.909246][ T3887] Register r11 information: 2-page vmalloc region starting at 0xdf9f0000 allocated at kernel_clone+0xac/0x428 [ 144.910540][ T3887] Register r12 information: 2-page vmalloc region starting at 0xdf9f0000 allocated at kernel_clone+0xac/0x428 [ 144.911360][ T3887] Process syz.1.60 (pid: 3887, stack limit = 0xdf9f0000) [ 144.911784][ T3887] Stack: (0xdf9f1cb8 to 0xdf9f2000) [ 144.912709][ T3887] 1ca0: 81436ad8 00004f27 [ 144.913196][ T3887] 1cc0: 84269900 00004f27 df9f1cf4 df9f1cd8 81436814 81436ae4 00004f27 805223ec [ 144.914172][ T3887] 1ce0: 85b27000 85b27000 df9f1d14 df9f1cf8 81436bcc 814367c8 84269900 00000000 [ 144.914841][ T3887] 1d00: 85b27000 00004f27 df9f1d54 df9f1d18 81436d7c 81436b50 82b15584 830e3880 [ 144.915786][ T3887] 1d20: 82821780 00000000 00000000 829d6504 84269900 00000000 df9f1d90 84269900 [ 144.916552][ T3887] 1d40: 00000000 82b2df9c df9f1d8c df9f1d58 81425768 81436d14 40946400 00000000 [ 144.917590][ T3887] 1d60: df9f1d7c 200000c0 84269900 b5403587 40946400 83eb3000 00000003 84269930 [ 144.918587][ T3887] 1d80: df9f1e4c df9f1d90 814210a0 81425668 35353238 00000000 00000000 00000000 [ 144.919203][ T3887] 1da0: 00000000 00004f27 00000005 00000007 00000401 00000001 00000cc7 00000fff [ 144.919726][ T3887] 1dc0: 5c952399 00000005 000000da 00000802 00001600 fffffdfd 00000001 00000000 [ 144.920567][ T3887] 1de0: 0000e1cb 00000006 00000004 00000006 00000395 00000000 fffffffd 00000000 [ 144.921494][ T3887] 1e00: fffffff5 ffffeadb 00000003 0000003c 00000008 00000004 08000000 dffffffa [ 144.922571][ T3887] 1e20: 00000000 2d44eb22 00000000 851ffe40 84269900 200000c0 40946400 83eb3000 [ 144.923313][ T3887] 1e40: df9f1f14 df9f1e50 81421c20 81420fd8 00000000 2d44eb22 00000000 00000000 [ 144.923941][ T3887] 1e60: 824b557c df9f1ea4 0000005f 8448aa30 00000064 844d5444 df9f1ee4 df9f1e88 [ 144.924919][ T3887] 1e80: 807cb7cc 807c1ba4 00000064 00000001 00000000 df9f1ea4 830cf790 8342e6e8 [ 144.925784][ T3887] 1ea0: 00006400 0000000b df9f1e98 00000000 00000000 2d44eb22 00000000 851ffe40 [ 144.926869][ T3887] 1ec0: 40946400 200000c0 200000c0 851ffe40 00000003 83eb3000 df9f1ef4 df9f1ee8 [ 144.927538][ T3887] 1ee0: 807cb8fc 2d44eb22 df9f1f14 00000000 851ffe41 40946400 200000c0 851ffe40 [ 144.928604][ T3887] 1f00: 00000003 83eb3000 df9f1fa4 df9f1f18 8058f558 81421b28 ecac8b10 83eb3000 [ 144.929089][ T3887] 1f20: df9f1f3c df9f1f30 81ad9c34 81ad9b00 df9f1f54 df9f1f40 8025a85c 8028bff0 [ 144.929837][ T3887] 1f40: df9f1fb0 40000000 df9f1f84 df9f1f58 80220bf8 8025a818 00000000 8281d27c [ 144.930508][ T3887] 1f60: df9f1fb0 0013ddc0 ecac8b10 80220b4c 00000000 2d44eb22 df9f1fac 00000000 [ 144.931221][ T3887] 1f80: 00000000 00346310 00000036 8020029c 83eb3000 00000036 00000000 df9f1fa8 [ 144.931854][ T3887] 1fa0: 80200060 8058f320 00000000 00000000 00000003 40946400 200000c0 00000000 [ 144.932302][ T3887] 1fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f440dc [ 144.932867][ T3887] 1fe0: 76f43e88 76f43e78 00018734 0012fc20 60000010 00000003 00000000 00000000 [ 144.933452][ T3887] Call trace: [ 144.934095][ T3887] [<81436ad8>] (subdev_8255_io) from [<81436814>] (subdev_8255_do_config+0x58/0x60) [ 144.935319][ T3887] r7:00004f27 r6:84269900 r5:00004f27 r4:81436ad8 [ 144.936387][ T3887] [<814367bc>] (subdev_8255_do_config) from [<81436bcc>] (subdev_8255_io_init+0x88/0x98) [ 144.936819][ T3887] r4:85b27000 [ 144.938220][ T3887] [<81436b44>] (subdev_8255_io_init) from [<81436d7c>] (dev_8255_attach+0x74/0x120) [ 144.939014][ T3887] r7:00004f27 r6:85b27000 r5:00000000 r4:84269900 [ 144.939470][ T3887] [<81436d08>] (dev_8255_attach) from [<81425768>] (comedi_device_attach+0x10c/0x248) [ 144.940034][ T3887] r10:82b2df9c r9:00000000 r8:84269900 r7:df9f1d90 r6:00000000 r5:84269900 [ 144.940486][ T3887] r4:829d6504 [ 144.940718][ T3887] [<8142565c>] (comedi_device_attach) from [<814210a0>] (do_devconfig_ioctl+0xd4/0x21c) [ 144.941288][ T3887] r10:84269930 r9:00000003 r8:83eb3000 r7:40946400 r6:b5403587 r5:84269900 [ 144.941722][ T3887] r4:200000c0 [ 144.941934][ T3887] [<81420fcc>] (do_devconfig_ioctl) from [<81421c20>] (comedi_unlocked_ioctl+0x104/0x1c80) [ 144.942455][ T3887] r8:83eb3000 r7:40946400 r6:200000c0 r5:84269900 r4:851ffe40 [ 144.942794][ T3887] [<81421b1c>] (comedi_unlocked_ioctl) from [<8058f558>] (sys_ioctl+0x244/0xb5c) [ 144.943567][ T3887] r10:83eb3000 r9:00000003 r8:851ffe40 r7:200000c0 r6:40946400 r5:851ffe41 [ 144.944156][ T3887] r4:00000000 [ 144.944396][ T3887] [<8058f314>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 144.945001][ T3887] Exception stack(0xdf9f1fa8 to 0xdf9f1ff0) [ 144.945726][ T3887] 1fa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 144.946202][ T3887] 1fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f440dc [ 144.946596][ T3887] 1fe0: 76f43e88 76f43e78 00018734 0012fc20 [ 144.946931][ T3887] r10:00000036 r9:83eb3000 r8:8020029c r7:00000036 r6:00346310 r5:00000000 [ 144.947734][ T3887] r4:00000000 [ 144.948392][ T3887] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 144.951613][ T3887] ---[ end trace 0000000000000000 ]--- [ 144.963531][ T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 145.067175][ T3887] Kernel panic - not syncing: Fatal exception [ 145.071755][ T3887] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:32:10 Registers: info registers vcpu 0 CPU#0 R00=df801bfc R01=00000000 R02=00000000 R03=84764800 R04=df801c50 R05=df801c50 R06=82c35200 R07=df801ca8 R08=82c35200 R09=83e83000 R10=df801ca8 R11=df801c8c R12=df801b68 R13=df801c48 R14=817ae374 R15=817ae7ec PSR=600e0113 -ZC- A S svc32 s00=72656820 s01=2d2d2065 d00=2d2d206572656820 s02=74656b63 s03=72657020 d01=7265702074656b63 s04=6e6f6374 s05=74786574 d02=747865746e6f6374 s06=6f6f723d s07=79733a74 d03=79733a746f6f723d s08=6d646173 s09=733a725f d04=733a725f6d646173 s10=64617379 s11=20745f6d d05=20745f6d64617379 s12=616c6374 s13=623d7373 d06=623d7373616c6374 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=826c12c4 R01=5b719000 R02=0002543f R03=81ada500 R04=00000006 R05=828f8348 R06=8474e000 R07=828f8340 R08=8474e000 R09=828f8348 R10=00000000 R11=df99dd4c R12=df99dd50 R13=df99dd40 R14=80341078 R15=81ada510 PSR=80000093 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000