last executing test programs: 3.612120495s ago: executing program 0 (id=1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) 3.178895382s ago: executing program 0 (id=3): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000f00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r3, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000002c0)={0x18, r5, r1, 0xeeeeeeee}) 2.909253482s ago: executing program 0 (id=4): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) 738.440179ms ago: executing program 1 (id=12): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x34}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x80) 561.679338ms ago: executing program 1 (id=13): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 429.694263ms ago: executing program 1 (id=14): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000080)={0x9, 0x9, 0x6, 0x2, 0x1ff, 0x4}) 311.020905ms ago: executing program 1 (id=15): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000500)='/dev/comedi0\x00', 0x80800, 0x0) ioctl$COMEDI_POLL(r0, 0x640f) 229.944134ms ago: executing program 0 (id=16): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) 229.759735ms ago: executing program 1 (id=17): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 90.4961ms ago: executing program 0 (id=18): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 210.349µs ago: executing program 1 (id=19): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x240, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) close(0x3) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000600)={'comedi_parport\x00', [0x78, 0x0, 0x0, 0xc, 0x8, 0x6, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x0, 0x101, 0x83, 0x7, 0x3, 0x1b18, 0x16, 0x4, 0x0, 0xffffffff, 0xb, 0x4, 0x3b, 0xc, 0x10000006, 0x664, 0xfffffff8]}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xd, 0x4012011, r0, 0x0) 0s ago: executing program 0 (id=20): r0 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, 0x0) kernel console output (not intermixed with test programs): [ 44.975352][ T28] audit: type=1400 audit(44.890:91): avc: denied { read write } for pid=3095 comm="scp" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.977409][ T28] audit: type=1400 audit(44.890:92): avc: denied { open } for pid=3095 comm="scp" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:24812' (ED25519) to the list of known hosts. [ 63.129536][ T28] audit: type=1400 audit(63.040:93): avc: denied { name_bind } for pid=3098 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 63.925954][ T28] audit: type=1400 audit(63.840:94): avc: denied { execute } for pid=3099 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 63.928727][ T28] audit: type=1400 audit(63.840:95): avc: denied { execute_no_trans } for pid=3099 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 66.967881][ T28] audit: type=1400 audit(66.880:96): avc: denied { mounton } for pid=3099 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.976067][ T28] audit: type=1400 audit(66.890:97): avc: denied { mount } for pid=3099 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.991555][ T3099] cgroup: Unknown subsys name 'net' [ 67.000924][ T28] audit: type=1400 audit(66.910:98): avc: denied { unmount } for pid=3099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.161900][ T3099] cgroup: Unknown subsys name 'cpuset' [ 67.168132][ T3099] cgroup: Unknown subsys name 'hugetlb' [ 67.169067][ T3099] cgroup: Unknown subsys name 'rlimit' [ 67.417945][ T28] audit: type=1400 audit(67.330:99): avc: denied { setattr } for pid=3099 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.421612][ T28] audit: type=1400 audit(67.330:100): avc: denied { mounton } for pid=3099 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 67.425434][ T28] audit: type=1400 audit(67.340:101): avc: denied { mount } for pid=3099 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 67.640069][ T3101] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 67.643160][ T28] audit: type=1400 audit(67.550:102): avc: denied { relabelto } for pid=3101 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 75.045566][ T3099] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.052146][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 77.052496][ T28] audit: type=1400 audit(76.960:106): avc: denied { execmem } for pid=3102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 77.083661][ T28] audit: type=1400 audit(76.990:107): avc: denied { read } for pid=3104 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.084985][ T28] audit: type=1400 audit(77.000:108): avc: denied { open } for pid=3104 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.088963][ T28] audit: type=1400 audit(77.000:109): avc: denied { mounton } for pid=3104 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 77.105783][ T28] audit: type=1400 audit(77.020:110): avc: denied { module_request } for pid=3104 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 77.168220][ T28] audit: type=1400 audit(77.080:111): avc: denied { sys_module } for pid=3105 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 77.727531][ T28] audit: type=1400 audit(77.640:112): avc: denied { ioctl } for pid=3105 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=678 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.924846][ T3105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.932785][ T3105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.040053][ T3104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.053541][ T3104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.859098][ T3105] hsr_slave_0: entered promiscuous mode [ 79.862735][ T3105] hsr_slave_1: entered promiscuous mode [ 79.982635][ T3104] hsr_slave_0: entered promiscuous mode [ 79.993028][ T3104] hsr_slave_1: entered promiscuous mode [ 79.999353][ T3104] debugfs: 'hsr0' already exists in 'hsr' [ 80.000236][ T3104] Cannot create hsr debugfs directory [ 80.376265][ T28] audit: type=1400 audit(80.290:113): avc: denied { create } for pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.378240][ T28] audit: type=1400 audit(80.290:114): avc: denied { write } for pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.384440][ T28] audit: type=1400 audit(80.290:115): avc: denied { read } for pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.390775][ T3105] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.412892][ T3105] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.418064][ T3105] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.425643][ T3105] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.429834][ T3105] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.438155][ T3105] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.449447][ T3105] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.458646][ T3105] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.558196][ T3104] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.569010][ T3104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.583448][ T3104] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.592736][ T3104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.613434][ T3104] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.622600][ T3104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.629559][ T3104] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.642435][ T3104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.337111][ T3105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.438458][ T3104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.131630][ T3105] veth0_vlan: entered promiscuous mode [ 84.150025][ T3105] veth1_vlan: entered promiscuous mode [ 84.229769][ T3105] veth0_macvtap: entered promiscuous mode [ 84.249812][ T3105] veth1_macvtap: entered promiscuous mode [ 84.370335][ T2069] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.371085][ T2069] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.371198][ T2069] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.371322][ T2069] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.380544][ T3104] veth0_vlan: entered promiscuous mode [ 84.403116][ T3104] veth1_vlan: entered promiscuous mode [ 84.497667][ T28] audit: type=1400 audit(84.410:116): avc: denied { mount } for pid=3105 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.505428][ T28] audit: type=1400 audit(84.420:117): avc: denied { mounton } for pid=3105 comm="syz-executor" path="/syzkaller.UdDqoJ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.511797][ T28] audit: type=1400 audit(84.420:118): avc: denied { mount } for pid=3105 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.518827][ T28] audit: type=1400 audit(84.430:119): avc: denied { mounton } for pid=3105 comm="syz-executor" path="/syzkaller.UdDqoJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 84.524235][ T28] audit: type=1400 audit(84.430:120): avc: denied { mounton } for pid=3105 comm="syz-executor" path="/syzkaller.UdDqoJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 84.532274][ T28] audit: type=1400 audit(84.440:121): avc: denied { unmount } for pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.539157][ T28] audit: type=1400 audit(84.450:122): avc: denied { mounton } for pid=3105 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.541683][ T28] audit: type=1400 audit(84.450:123): avc: denied { mount } for pid=3105 comm="syz-executor" name="/" dev="gadgetfs" ino=2349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 84.548973][ T28] audit: type=1400 audit(84.460:124): avc: denied { mount } for pid=3105 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.549153][ T3104] veth0_macvtap: entered promiscuous mode [ 84.553221][ T28] audit: type=1400 audit(84.460:125): avc: denied { mounton } for pid=3105 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 84.573079][ T3104] veth1_macvtap: entered promiscuous mode [ 84.607257][ T3105] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.707747][ T2069] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.708654][ T2069] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.708980][ T2069] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.709234][ T2069] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.065128][ T99] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.254793][ T99] usb 1-1: Using ep0 maxpacket: 32 [ 86.272456][ T99] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.272949][ T99] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.276364][ T99] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 86.277264][ T99] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 86.277336][ T99] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.289372][ T99] usb 1-1: config 0 descriptor?? [ 86.855798][ T99] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0001/input/input3 [ 86.862973][ T99] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0001/input/input4 [ 86.891147][ T99] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 88.296743][ C1] kye 0003:0458:5011.0001: usb_submit_urb(ctrl) failed: -1 [ 88.699475][ T3771] 8<--- cut here --- [ 88.700942][ T3771] Unable to handle kernel paging request at virtual address fee00078 when write [ 88.706796][ T3771] [fee00078] *pgd=80000080007003, *pmd=00000000 [ 88.708522][ T3771] Internal error: Oops: a06 [#1] SMP ARM [ 88.710443][ T3771] Modules linked in: [ 88.711304][ T3771] CPU: 1 UID: 0 PID: 3771 Comm: syz.1.19 Not tainted syzkaller #0 PREEMPT [ 88.711819][ T3771] Hardware name: ARM-Versatile Express [ 88.712252][ T3771] PC is at parport_attach+0x184/0x1e0 [ 88.713290][ T3771] LR is at parport_attach+0x174/0x1e0 [ 88.713559][ T3771] pc : [<8145b0dc>] lr : [<8145b0cc>] psr: 60000013 [ 88.713966][ T3771] sp : dfd21d30 ip : dfd21d30 fp : dfd21d54 [ 88.714235][ T3771] r10: 82d29754 r9 : 00000003 r8 : 8334bb40 [ 88.714522][ T3771] r7 : dfd21d90 r6 : 8334bb40 r5 : 00000000 r4 : 00000000 [ 88.714836][ T3771] r3 : fee00078 r2 : 81e27148 r1 : 00000001 r0 : 8145ad3c [ 88.715208][ T3771] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 88.715517][ T3771] Control: 30c5387d Table: 8636de00 DAC: 00000000 [ 88.715793][ T3771] Register r0 information: non-slab/vmalloc memory [ 88.716616][ T3771] Register r1 information: non-paged memory [ 88.716950][ T3771] Register r2 information: non-slab/vmalloc memory [ 88.717258][ T3771] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 88.717775][ T3771] Register r4 information: NULL pointer [ 88.718033][ T3771] Register r5 information: NULL pointer [ 88.718274][ T3771] Register r6 information: slab kmalloc-192 start 8334bb40 pointer offset 0 size 192 [ 88.719257][ T3771] Register r7 information: 2-page vmalloc region starting at 0xdfd20000 allocated at kernel_clone+0xc4/0x444 [ 88.719762][ T3771] Register r8 information: slab kmalloc-192 start 8334bb40 pointer offset 0 size 192 [ 88.720208][ T3771] Register r9 information: non-paged memory [ 88.720478][ T3771] Register r10 information: non-slab/vmalloc memory [ 88.720762][ T3771] Register r11 information: 2-page vmalloc region starting at 0xdfd20000 allocated at kernel_clone+0xc4/0x444 [ 88.721212][ T3771] Register r12 information: 2-page vmalloc region starting at 0xdfd20000 allocated at kernel_clone+0xc4/0x444 [ 88.721671][ T3771] Process syz.1.19 (pid: 3771, stack limit = 0xdfd20000) [ 88.722052][ T3771] Stack: (0xdfd21d30 to 0xdfd22000) [ 88.722433][ T3771] 1d20: ffffffff 00000004 00000000 82bd2268 [ 88.723056][ T3771] 1d40: 81e27608 00000000 dfd21d8c dfd21d58 81456c40 8145af64 40946400 00000000 [ 88.723328][ T3771] 1d60: dfd21d7c 20000600 8334bb40 b5403587 40946400 00000003 00000003 84725780 [ 88.723739][ T3771] 1d80: dfd21e4c dfd21d90 8145244c 81456b44 656d6f63 705f6964 6f707261 00007472 [ 88.724100][ T3771] 1da0: 00000000 00000078 00000000 00000000 0000000c 00000008 00000006 00100002 [ 88.724404][ T3771] 1dc0: 00000007 00000005 00000100 00000004 00000001 00000001 00020003 00000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 88.724701][ T3771] 1de0: 00000101 00000083 00000007 00000003 00001b18 00000016 00000004 00000000 [ 88.725020][ T3771] 1e00: ffffffff 0000000b 00000004 0000003b 0000000c 10000006 00000664 fffffff8 [ 88.725279][ T3771] 1e20: 00000000 2b086902 00000000 83331580 8334bb40 20000600 40946400 00000003 [ 88.725546][ T3771] 1e40: dfd21f14 dfd21e50 81453770 81452384 00000000 2b086902 00000000 00000000 [ 88.725822][ T3771] 1e60: 82530804 dfd21ea4 0000005f 847bcb68 00000064 8334bb70 dfd21ee4 dfd21e88 [ 88.726123][ T3771] 1e80: 807ea7bc 807e0ad0 00000064 00000001 00000000 dfd21ea4 830e9250 834ef110 [ 88.726402][ T3771] 1ea0: 00006400 0000000b dfd21e98 00000000 00000000 2b086902 00000000 83331580 [ 88.726672][ T3771] 1ec0: 40946400 20000600 20000600 83331580 00000003 84725780 dfd21ef4 dfd21ee8 [ 88.727092][ T3771] 1ee0: 807ea8f0 2b086902 dfd21f14 00000000 83331581 40946400 20000600 83331580 [ 88.727404][ T3771] 1f00: 00000003 84725780 dfd21fa4 dfd21f18 805a2104 81453428 ecac8b10 84725780 [ 88.727797][ T3771] 1f20: dfd21f3c dfd21f30 81b19a54 81b19920 dfd21f54 dfd21f40 8025a6ac 8028e294 [ 88.728238][ T3771] 1f40: dfd21fb0 40000000 dfd21f84 dfd21f58 80220be0 8025a668 00000000 82a1c63c [ 88.728789][ T3771] 1f60: dfd21fb0 0013e9b0 ecac8b10 80220b34 00000000 2b086902 dfd21fac 00000000 [ 88.729094][ T3771] 1f80: 00000000 00346310 00000036 8020029c 84725780 00000036 00000000 dfd21fa8 [ 88.729469][ T3771] 1fa0: 80200060 805a1ecc 00000000 00000000 00000003 40946400 20000600 00000000 [ 88.729768][ T3771] 1fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76ff10dc [ 88.730065][ T3771] 1fe0: 76ff0e88 76ff0e78 00018ebc 00130810 60000010 00000003 00000000 00000000 [ 88.730472][ T3771] Call trace: [ 88.731170][ T3771] [<8145af58>] (parport_attach) from [<81456c40>] (comedi_device_attach+0x108/0x244) [ 88.731818][ T3771] r6:00000000 r5:81e27608 r4:82bd2268 [ 88.732091][ T3771] [<81456b38>] (comedi_device_attach) from [<8145244c>] (do_devconfig_ioctl+0xd4/0x21c) [ 88.732522][ T3771] r10:84725780 r9:00000003 r8:00000003 r7:40946400 r6:b5403587 r5:8334bb40 [ 88.732831][ T3771] r4:20000600 [ 88.732996][ T3771] [<81452378>] (do_devconfig_ioctl) from [<81453770>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 88.733421][ T3771] r8:00000003 r7:40946400 r6:20000600 r5:8334bb40 r4:83331580 [ 88.733667][ T3771] [<8145341c>] (comedi_unlocked_ioctl) from [<805a2104>] (sys_ioctl+0x244/0xb5c) [ 88.734176][ T3771] r10:84725780 r9:00000003 r8:83331580 r7:20000600 r6:40946400 r5:83331581 [ 88.734466][ T3771] r4:00000000 [ 88.734614][ T3771] [<805a1ec0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 88.735059][ T3771] Exception stack(0xdfd21fa8 to 0xdfd21ff0) [ 88.735362][ T3771] 1fa0: 00000000 00000000 00000003 40946400 20000600 00000000 [ 88.735662][ T3771] 1fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76ff10dc [ 88.735992][ T3771] 1fe0: 76ff0e88 76ff0e78 00018ebc 00130810 [ 88.736212][ T3771] r10:00000036 r9:84725780 r8:8020029c r7:00000036 r6:00346310 r5:00000000 [ 88.736534][ T3771] r4:00000000 [ 88.736970][ T3771] Code: e5963064 e3a04000 e7f33053 e2433612 (e5c34000) [ 88.739175][ T3771] ---[ end trace 0000000000000000 ]--- [ 88.813516][ T3771] Kernel panic - not syncing: Fatal exception [ 88.818065][ T3771] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:42:02 Registers: info registers vcpu 0 CPU#0 R00=84e4a6c0 R01=00000000 R02=00000001 R03=817e0b70 R04=85474900 R05=85474900 R06=0000003a R07=82e30c80 R08=84e4a6c0 R09=83134290 R10=83134240 R11=df801be4 R12=85474900 R13=df801be8 R14=817e0ba8 R15=817e87ec PSR=600e0113 -ZC- A S svc32 s00=72656820 s01=2d2d2065 d00=2d2d206572656820 s02=74632862 s03=20296c72 d01=20296c7274632862 s04=6e69205d s05=3a747570 d02=3a7475706e69205d s06=44494820 s07=35343020 d03=3534302044494820 s08=30353a38 s09=61203131 d04=6120313130353a38 s10=642f2073 s11=63697665 d05=63697665642f2073 s12=702f7365 s13=6674616c d06=6674616c702f7365 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000001 R01=8231dcdc R02=00000000 R03=81b1a35c R04=00000006 R05=82af7688 R06=00000000 R07=82af7680 R08=8473f080 R09=82af7688 R10=00000000 R11=df805f24 R12=df805f28 R13=df805f18 R14=80344a90 R15=81b1a36c PSR=20000193 --C- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000