last executing test programs: 4.103844989s ago: executing program 1 (id=5): ftruncate(0xffffffffffffffff, 0x20cf01) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.46392737s ago: executing program 1 (id=6): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000001c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x1, 0x0, 0x0, 0x7f7}}, 0x120) 3.085035171s ago: executing program 1 (id=7): fstatfs(0xffffffffffffffff, &(0x7f0000000040)) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='virt_wifi0\x00') ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x0, 'veth0\x00', {}, 0x40}) connect$nfc_raw(r0, 0x0, 0x0) r1 = openat$nci(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) write$nci(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="4805"], 0x4) fgetxattr(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[], &(0x7f0000000340)=""/21, 0x15) openat$nci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) 2.273077133s ago: executing program 0 (id=9): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) msgget$private(0x0, 0x4) stat(&(0x7f0000000380)='./file0\x00', 0x0) 1.988797436s ago: executing program 1 (id=10): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) 1.965298371s ago: executing program 0 (id=11): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="bffd00000000793c", 0x8) 1.574392004s ago: executing program 1 (id=12): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x16, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "0200", "bc3a20b10f4ad11e"}, 0x38) close(r1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000240)="a905000000", 0x5}], 0x1}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x1, 'wg1\x00', {}, 0x8}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) 1.547775369s ago: executing program 0 (id=13): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=""/95, 0x5f}], 0x1, 0x90, 0x800000) 1.023018348s ago: executing program 0 (id=14): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r2, 0x0, 0xf800) 530.9802ms ago: executing program 0 (id=15): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x401, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) close(r2) unlink(&(0x7f0000000280)='./file1\x00') 349.835105ms ago: executing program 1 (id=16): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 0 (id=17): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000001200)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4}, 0x18) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 49.941315][ T31] audit: type=1400 audit(49.870:68): avc: denied { read write } for pid=3106 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.951578][ T31] audit: type=1400 audit(49.890:69): avc: denied { open } for pid=3106 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:62463' (ED25519) to the list of known hosts. [ 61.775630][ T31] audit: type=1400 audit(61.690:70): avc: denied { name_bind } for pid=3107 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 63.351519][ T31] audit: type=1400 audit(63.280:71): avc: denied { execute } for pid=3109 comm="sh" name="syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 63.359620][ T31] audit: type=1400 audit(63.290:72): avc: denied { execute_no_trans } for pid=3109 comm="sh" path="/syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 67.496076][ T31] audit: type=1400 audit(67.430:73): avc: denied { mounton } for pid=3109 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 67.498637][ T31] audit: type=1400 audit(67.430:74): avc: denied { mount } for pid=3109 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.514789][ T3109] cgroup: Unknown subsys name 'net' [ 67.526783][ T31] audit: type=1400 audit(67.460:75): avc: denied { unmount } for pid=3109 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.739238][ T3109] cgroup: Unknown subsys name 'hugetlb' [ 67.740302][ T3109] cgroup: Unknown subsys name 'rlimit' [ 68.015647][ T31] audit: type=1400 audit(67.950:76): avc: denied { setattr } for pid=3109 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.016654][ T31] audit: type=1400 audit(67.950:77): avc: denied { mounton } for pid=3109 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 68.017460][ T31] audit: type=1400 audit(67.950:78): avc: denied { mount } for pid=3109 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 68.235333][ T3111] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 68.236709][ T31] audit: type=1400 audit(68.170:79): avc: denied { relabelto } for pid=3111 comm="mkswap" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 68.244277][ T31] audit: type=1400 audit(68.170:80): avc: denied { write } for pid=3111 comm="mkswap" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 68.279963][ T31] audit: type=1400 audit(68.210:81): avc: denied { read } for pid=3109 comm="syz-executor" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 68.292094][ T31] audit: type=1400 audit(68.220:82): avc: denied { open } for pid=3109 comm="syz-executor" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 74.431762][ T3109] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.302310][ T31] audit: type=1400 audit(76.240:83): avc: denied { execmem } for pid=3112 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 76.354288][ T31] audit: type=1400 audit(76.290:84): avc: denied { mounton } for pid=3115 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 76.354858][ T31] audit: type=1400 audit(76.290:85): avc: denied { mounton } for pid=3114 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 76.355276][ T31] audit: type=1400 audit(76.290:86): avc: denied { mount } for pid=3114 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 76.361158][ T31] audit: type=1400 audit(76.290:87): avc: denied { read } for pid=3115 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.361669][ T31] audit: type=1400 audit(76.290:88): avc: denied { open } for pid=3115 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.363004][ T31] audit: type=1400 audit(76.300:89): avc: denied { mounton } for pid=3115 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 76.379660][ T31] audit: type=1400 audit(76.310:90): avc: denied { module_request } for pid=3115 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 76.461805][ T31] audit: type=1400 audit(76.390:91): avc: denied { sys_module } for pid=3114 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 77.059041][ T31] audit: type=1400 audit(76.990:92): avc: denied { ioctl } for pid=3115 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=691 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.316654][ T3115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.353020][ T3115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.399705][ T3114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.408350][ T3114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.307478][ T3114] hsr_slave_0: entered promiscuous mode [ 79.315141][ T3114] hsr_slave_1: entered promiscuous mode [ 79.457807][ T3115] hsr_slave_0: entered promiscuous mode [ 79.459657][ T3115] hsr_slave_1: entered promiscuous mode [ 79.462820][ T3115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.463285][ T3115] Cannot create hsr debugfs directory [ 79.756732][ T3114] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.774543][ T3114] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.785800][ T3114] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.804076][ T3114] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.858975][ T3115] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.867005][ T3115] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.872498][ T3115] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.880479][ T3115] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.535931][ T3115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.683511][ T3114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.520620][ T3115] veth0_vlan: entered promiscuous mode [ 83.536688][ T3115] veth1_vlan: entered promiscuous mode [ 83.587447][ T3115] veth0_macvtap: entered promiscuous mode [ 83.599831][ T3115] veth1_macvtap: entered promiscuous mode [ 83.662569][ T3115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.663448][ T3115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.663671][ T3115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.663942][ T3115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.820546][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 83.820643][ T31] audit: type=1400 audit(83.750:96): avc: denied { mount } for pid=3115 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.834709][ T31] audit: type=1400 audit(83.770:97): avc: denied { mounton } for pid=3115 comm="syz-executor" path="/syzkaller.gWlO7d/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.841811][ T31] audit: type=1400 audit(83.770:98): avc: denied { mount } for pid=3115 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.857649][ T31] audit: type=1400 audit(83.790:99): avc: denied { unmount } for pid=3115 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.863800][ T31] audit: type=1400 audit(83.800:100): avc: denied { mounton } for pid=3115 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 83.867586][ T31] audit: type=1400 audit(83.800:101): avc: denied { mount } for pid=3115 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 83.960551][ T3114] veth0_vlan: entered promiscuous mode [ 83.996010][ T3114] veth1_vlan: entered promiscuous mode [ 84.025568][ T31] audit: type=1400 audit(83.960:102): avc: denied { read write } for pid=3115 comm="syz-executor" name="loop1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.026571][ T31] audit: type=1400 audit(83.960:103): avc: denied { open } for pid=3115 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.027488][ T31] audit: type=1400 audit(83.960:104): avc: denied { ioctl } for pid=3115 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=636 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.087577][ T3114] veth0_macvtap: entered promiscuous mode [ 84.098494][ T3114] veth1_macvtap: entered promiscuous mode [ 84.163177][ T31] audit: type=1400 audit(84.090:105): avc: denied { create } for pid=3794 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 84.186378][ T3114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.187087][ T3114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.187614][ T3114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.188182][ T3114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.983711][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 86.254279][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.254967][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.255663][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.256120][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.256630][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.257174][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.257744][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.258156][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x4 [ 86.258660][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.259209][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x2 [ 86.259982][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.260596][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.282506][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.283075][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.283750][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.284030][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.284329][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.284714][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.285062][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.286613][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.290141][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.311313][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.311842][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.312208][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.312561][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.312893][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.313743][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.314152][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.314505][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.314862][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.315153][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.315474][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.315896][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.316371][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.316754][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.317150][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.317507][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.317895][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.318251][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.318616][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.319000][ T3832] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 86.351875][ T3832] hid-generic 0001:0000:0000.0001: hidraw0: HID v7.f7 Device [syz1] on syz1 [ 89.369736][ T31] kauditd_printk_skb: 75 callbacks suppressed [ 89.369845][ T31] audit: type=1400 audit(89.300:181): avc: denied { create } for pid=3883 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.682558][ T31] audit: type=1400 audit(89.610:182): avc: denied { create } for pid=3886 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.683515][ T31] audit: type=1400 audit(89.610:183): avc: denied { ioctl } for pid=3886 comm="syz.0.17" path="socket:[2330]" dev="sockfs" ino=2330 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.684540][ T31] audit: type=1400 audit(89.620:184): avc: denied { bind } for pid=3886 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.702898][ T31] audit: type=1400 audit(89.630:185): avc: denied { connect } for pid=3886 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.705558][ T31] audit: type=1400 audit(89.630:186): avc: denied { write } for pid=3886 comm="syz.0.17" path="socket:[2330]" dev="sockfs" ino=2330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.839038][ T3887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 89.841407][ C1] ------------[ cut here ]------------ [ 89.844617][ C1] WARNING: CPU: 1 PID: 3833 at lib/refcount.c:28 refcount_warn_saturate+0x13c/0x174 [ 89.846760][ C1] refcount_t: underflow; use-after-free. [ 89.847017][ C1] Modules linked in: [ 89.848034][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 89.848800][ C1] CPU: 1 UID: 0 PID: 3833 Comm: kworker/1:4 Not tainted 6.11.0-syzkaller #0 [ 89.849571][ C1] Hardware name: ARM-Versatile Express [ 89.850256][ C1] Workqueue: events nsim_dev_trap_report_work [ 89.850682][ C1] Call trace: frame pointer underflow [ 89.851849][ C1] [<81966cb8>] (dump_backtrace) from [<81966db4>] (show_stack+0x18/0x1c) [ 89.852530][ C1] r7:00000000 r6:826228c4 r5:00000000 r4:8200e404 [ 89.853004][ C1] [<81966d9c>] (show_stack) from [<81984a58>] (dump_stack_lvl+0x54/0x7c) [ 89.853464][ C1] [<81984a04>] (dump_stack_lvl) from [<81984a98>] (dump_stack+0x18/0x1c) [ 89.853910][ C1] r5:00000000 r4:8286ed18 [ 89.854131][ C1] [<81984a80>] (dump_stack) from [<8196785c>] (panic+0x120/0x368) [ 89.854509][ C1] [<8196773c>] (panic) from [<802421d4>] (get_taint+0x0/0x1c) [ 89.854947][ C1] r3:8260c5c4 r2:00000001 r1:81ff6c38 r0:81ffea04 [ 89.855317][ C1] r7:8081a110 [ 89.855547][ C1] [<80242160>] (check_panic_on_warn) from [<80242328>] (__warn+0x7c/0x180) [ 89.856062][ C1] [<802422ac>] (__warn) from [<80242614>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 89.856643][ C1] r8:00000009 r7:8205cdc4 r6:df805c94 r5:84928c00 r4:00000000 [ 89.857217][ C1] [<80242430>] (warn_slowpath_fmt) from [<8081a110>] (refcount_warn_saturate+0x13c/0x174) [ 89.857820][ C1] r10:20000013 r9:8504215c r8:8401a000 r7:00000000 r6:817f7394 r5:00000002 [ 89.858306][ C1] r4:8401a000 [ 89.858503][ C1] [<80819fd4>] (refcount_warn_saturate) from [<8146782c>] (sk_skb_reason_drop+0x1d8/0x248) [ 89.859182][ C1] [<81467654>] (sk_skb_reason_drop) from [<817f7394>] (j1939_xtp_rx_cts+0x220/0x3d0) [ 89.859704][ C1] r9:8504215c r8:8401a000 r7:8382e6d8 r6:00000df2 r5:85042100 r4:85042114 [ 89.860965][ C1] [<817f7174>] (j1939_xtp_rx_cts) from [<817f8308>] (j1939_tp_recv+0x3f4/0x530) [ 89.861725][ C1] r10:ddde4ec8 r9:00000040 r8:8382e6d0 r7:84856000 r6:84856008 r5:84856000 [ 89.862030][ C1] r4:8467c3c0 [ 89.862147][ C1] [<817f7f14>] (j1939_tp_recv) from [<817f1da0>] (j1939_can_recv+0x1e4/0x2dc) [ 89.862393][ C1] r7:84856000 r6:84856008 r5:84856810 r4:8467c3c0 [ 89.862540][ C1] [<817f1bbc>] (j1939_can_recv) from [<817e7b6c>] (can_rcv_filter+0x9c/0x218) [ 89.862769][ C1] r9:00000040 r8:8479c6a0 r7:98c80000 r6:8467c480 r5:00000001 r4:84b84360 [ 89.863349][ C1] [<817e7ad0>] (can_rcv_filter) from [<817e8510>] (can_receive+0xb4/0xf0) [ 89.866021][ C1] r9:00000040 r8:00000000 r7:8479c000 r6:84681980 r5:84988000 r4:8467c480 [ 89.869019][ C1] [<817e845c>] (can_receive) from [<817e85d0>] (can_rcv+0x84/0xac) [ 89.871100][ C1] r9:00000040 r8:00000001 r7:00000000 r6:00000000 r5:817e854c r4:8467c480 [ 89.871302][ C1] [<817e854c>] (can_rcv) from [<814886a4>] (__netif_receive_skb_one_core+0x5c/0x80) [ 89.871643][ C1] r5:817e854c r4:8479c000 [ 89.871852][ C1] [<81488648>] (__netif_receive_skb_one_core) from [<81488710>] (__netif_receive_skb+0x18/0x5c) [ 89.872144][ C1] r5:ddde4fb0 r4:8467c480 [ 89.872342][ C1] [<814886f8>] (__netif_receive_skb) from [<81488a00>] (process_backlog+0x88/0x15c) [ 89.872599][ C1] r5:ddde4fb0 r4:8467c480 [ 89.872775][ C1] [<81488978>] (process_backlog) from [<81489904>] (__napi_poll+0x34/0x240) [ 89.873084][ C1] r10:ddde4ec0 r9:ddde5100 r8:df805ed0 r7:df805ecb r6:00000040 r5:ddde4fb0 [ 89.873314][ C1] r4:00000001 [ 89.873520][ C1] [<814898d0>] (__napi_poll) from [<8148a13c>] (net_rx_action+0x338/0x420) [ 89.873905][ C1] r9:ddde5100 r8:df805ed0 r7:0000012c r6:ffffade4 r5:ddde4fb0 r4:00000000 [ 89.874153][ C1] [<81489e04>] (net_rx_action) from [<8024b5d8>] (handle_softirqs+0x15c/0x468) [ 89.874396][ C1] r10:00000208 r9:84928c00 r8:00000102 r7:04208060 r6:00000003 r5:00000004 [ 89.874745][ C1] r4:8260408c [ 89.874906][ C1] [<8024b47c>] (handle_softirqs) from [<802012d0>] (__do_softirq+0x14/0x18) [ 89.875235][ C1] r10:844fa900 r9:844fa9fc r8:00000068 r7:847f1400 r6:81b8f560 r5:00000002 [ 89.875439][ C1] r4:60000013 [ 89.875542][ C1] [<802012bc>] (__do_softirq) from [<80208800>] (____do_softirq+0x10/0x14) [ 89.875872][ C1] [<802087f0>] (____do_softirq) from [<81936768>] (call_with_stack+0x1c/0x20) [ 89.877245][ C1] [<8193674c>] (call_with_stack) from [<8020883c>] (do_softirq_own_stack+0x38/0x3c) [ 89.880826][ C1] [<80208804>] (do_softirq_own_stack) from [<8024baf0>] (do_softirq+0x5c/0x64) [ 89.881202][ C1] [<8024ba94>] (do_softirq) from [<8024bbc4>] (__local_bh_enable_ip+0xcc/0xd0) [ 89.881469][ C1] r5:00000002 r4:84928c00 [ 89.881596][ C1] [<8024baf8>] (__local_bh_enable_ip) from [<81991a78>] (_raw_spin_unlock_bh+0x34/0x38) [ 89.881845][ C1] r5:847f14e8 r4:8467c180 [ 89.881960][ C1] [<81991a44>] (_raw_spin_unlock_bh) from [<80d6ef2c>] (nsim_dev_trap_report_work+0x29c/0x33c) [ 89.882218][ C1] [<80d6ec90>] (nsim_dev_trap_report_work) from [<80265ef4>] (process_one_work+0x1b4/0x4f4) [ 89.882450][ C1] r10:82c16205 r9:84928c00 r8:01800000 r7:ddde3f40 r6:82c16200 r5:847f1400 [ 89.884310][ C1] r4:85038800 [ 89.885760][ C1] [<80265d40>] (process_one_work) from [<80266ad8>] (worker_thread+0x1ec/0x3bc) [ 89.886415][ C1] r10:84928c00 r9:8503882c r8:61c88647 r7:ddde3f60 r6:82604d40 r5:ddde3f40 [ 89.886732][ C1] r4:85038800 [ 89.886887][ C1] [<802668ec>] (worker_thread) from [<8026faf4>] (kthread+0x104/0x134) [ 89.887184][ C1] r10:00000000 r9:ea8c5e78 r8:8500bb40 r7:85038800 r6:802668ec r5:84928c00 [ 89.889184][ C1] r4:84bcc0c0 [ 89.890775][ C1] [<8026f9f0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 89.891144][ C1] Exception stack(0xe0225fb0 to 0xe0225ff8) [ 89.891747][ C1] 5fa0: 00000000 00000000 00000000 00000000 [ 89.895531][ C1] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 89.897786][ C1] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 89.898102][ C1] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026f9f0 r4:84bcc0c0 [ 89.902271][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:38:05 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=00000000 R02=00000002 R03=819867e8 R04=826f54c8 R05=826f54c0 R06=00000028 R07=00000006 R08=826f54c8 R09=00000000 R10=0000c350 R11=ebe61d5c R12=ebe61d60 R13=ebe61d50 R14=8198547c R15=819867f8 PSR=60000093 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=82629be4 R01=3fffdfff R02=df805a00 R03=df8059e8 R04=82629be4 R05=00000000 R06=00000394 R07=00000392 R08=df8059f4 R09=3fffe393 R10=00000000 R11=df805a3c R12=df805a40 R13=df8059e0 R14=802bfdcc R15=802bf804 PSR=00000093 ---- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000