last executing test programs: 36.169108827s ago: executing program 0 (id=78): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r0, 0x1, 0x0, 0x0, {{0x6c}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) 35.759692163s ago: executing program 0 (id=79): syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa008100000086dd60010400000000000001000000665d3bbd00000000000002ff0200000000000000000000000000010004000000000000c9"], 0x0) 35.629023555s ago: executing program 0 (id=81): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) 35.532990993s ago: executing program 0 (id=82): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x700, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000090601020000000000000000000000000900020073797a3100000000100007800c00fdea15fca977229a14000500010006"], 0x38}}, 0x0) 35.300418294s ago: executing program 0 (id=83): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 35.179222525s ago: executing program 0 (id=84): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00'}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000005c0), 0x200005d8) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000700)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 10.239605374s ago: executing program 1 (id=101): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', '', [{0x20, '#!2'}, {0x20, '#! '}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {}], 0xa, "8855d1bef46f70e481dbdabbfc3bcc3f005c1079e7344e4392717247b88b05708cd1663511237737ac00004c03fa9d00005380"}, 0xfffffe59) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)='c', 0x1}], 0x1}, 0x0) close(r1) rt_sigreturn() clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = gettid() clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x0) tkill(r3, 0x7) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, r2+60000000}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADDIR(r4, &(0x7f0000000080), 0x1001f) 9.199711977s ago: executing program 1 (id=102): mlockall(0x1) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() msgctl$IPC_RMID(r0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r1, 0x107, 0x5, 0x0, 0x0) 2.869289713s ago: executing program 1 (id=104): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 2.510674085s ago: executing program 1 (id=105): pipe2(0x0, 0x80000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() eventfd(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = memfd_create(&(0x7f0000000600)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10x0, 0x0}) rt_sigreturn() timer_settime(0x0, 0x1, &(0x7f0000000100)={{}, {r3, r4+60000000}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r5, r6, 0x100000af5, 0x0) sendmmsg$inet(r0, &(0x7f0000001a80), 0x1, 0x0) 0s ago: executing program 1 (id=107): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200000000000000006b79009500000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x2, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r2, 0x25, 0x2, @val=@iter={0x0}}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) kernel console output (not intermixed with test programs): syzkaller login: [ 48.543697][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 48.543802][ T31] audit: type=1400 audit(48.450:68): avc: denied { read write } for pid=2998 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.545090][ T31] audit: type=1400 audit(48.460:69): avc: denied { open } for pid=2998 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:15658' (ED25519) to the list of known hosts. [ 57.715175][ T31] audit: type=1400 audit(57.630:70): avc: denied { name_bind } for pid=2999 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.199286][ T31] audit: type=1400 audit(60.110:71): avc: denied { execute } for pid=3001 comm="sh" name="syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 60.209436][ T31] audit: type=1400 audit(60.120:72): avc: denied { execute_no_trans } for pid=3001 comm="sh" path="/syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 63.943223][ T31] audit: type=1400 audit(63.860:73): avc: denied { mounton } for pid=3001 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 63.946616][ T31] audit: type=1400 audit(63.860:74): avc: denied { mount } for pid=3001 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.956326][ T3001] cgroup: Unknown subsys name 'net' [ 63.962504][ T31] audit: type=1400 audit(63.880:75): avc: denied { unmount } for pid=3001 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.198261][ T3001] cgroup: Unknown subsys name 'hugetlb' [ 64.200179][ T3001] cgroup: Unknown subsys name 'rlimit' [ 64.457654][ T31] audit: type=1400 audit(64.370:76): avc: denied { setattr } for pid=3001 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.459853][ T31] audit: type=1400 audit(64.370:77): avc: denied { mounton } for pid=3001 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 64.460678][ T31] audit: type=1400 audit(64.380:78): avc: denied { mount } for pid=3001 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 64.723299][ T3003] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 64.730144][ T31] audit: type=1400 audit(64.640:79): avc: denied { relabelto } for pid=3003 comm="mkswap" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 64.731053][ T31] audit: type=1400 audit(64.640:80): avc: denied { write } for pid=3003 comm="mkswap" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 64.762034][ T31] audit: type=1400 audit(64.680:81): avc: denied { read } for pid=3001 comm="syz-executor" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 64.769826][ T31] audit: type=1400 audit(64.680:82): avc: denied { open } for pid=3001 comm="syz-executor" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 71.684010][ T3001] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.592816][ T31] audit: type=1400 audit(73.510:83): avc: denied { execmem } for pid=3004 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.679285][ T31] audit: type=1400 audit(73.580:84): avc: denied { mounton } for pid=3006 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 73.680530][ T31] audit: type=1400 audit(73.590:85): avc: denied { mount } for pid=3006 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 73.681275][ T31] audit: type=1400 audit(73.590:86): avc: denied { read } for pid=3006 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.681904][ T31] audit: type=1400 audit(73.590:87): avc: denied { open } for pid=3006 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.682630][ T31] audit: type=1400 audit(73.600:88): avc: denied { mounton } for pid=3006 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 73.704470][ T31] audit: type=1400 audit(73.620:89): avc: denied { module_request } for pid=3007 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 73.705318][ T31] audit: type=1400 audit(73.620:90): avc: denied { module_request } for pid=3006 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 73.793401][ T31] audit: type=1400 audit(73.710:91): avc: denied { sys_module } for pid=3007 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.703304][ T31] audit: type=1400 audit(74.620:92): avc: denied { ioctl } for pid=3007 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=691 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.907274][ T3006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.915044][ T3006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.014420][ T3007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.023891][ T3007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.906217][ T3007] hsr_slave_0: entered promiscuous mode [ 76.911390][ T3007] hsr_slave_1: entered promiscuous mode [ 77.003339][ T3006] hsr_slave_0: entered promiscuous mode [ 77.006192][ T3006] hsr_slave_1: entered promiscuous mode [ 77.008250][ T3006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.009692][ T3006] Cannot create hsr debugfs directory [ 77.363793][ T3007] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.382058][ T3007] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.399551][ T3007] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.424583][ T3007] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.464092][ T3006] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.474944][ T3006] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.485501][ T3006] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.495486][ T3006] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.203492][ T3007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.208354][ T3006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.308486][ T3006] veth0_vlan: entered promiscuous mode [ 81.321334][ T3006] veth1_vlan: entered promiscuous mode [ 81.367974][ T3006] veth0_macvtap: entered promiscuous mode [ 81.375503][ T3006] veth1_macvtap: entered promiscuous mode [ 81.425192][ T3006] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.426525][ T3006] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.427015][ T3006] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.427431][ T3006] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.554121][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 81.554203][ T31] audit: type=1400 audit(81.470:96): avc: denied { mount } for pid=3006 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 81.563941][ T31] audit: type=1400 audit(81.480:97): avc: denied { mounton } for pid=3006 comm="syz-executor" path="/syzkaller.wOns5Y/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.564013][ T3007] veth0_vlan: entered promiscuous mode [ 81.580408][ T31] audit: type=1400 audit(81.480:98): avc: denied { mount } for pid=3006 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 81.592391][ T3007] veth1_vlan: entered promiscuous mode [ 81.606995][ T31] audit: type=1400 audit(81.520:99): avc: denied { unmount } for pid=3006 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 81.623239][ T31] audit: type=1400 audit(81.530:100): avc: denied { mounton } for pid=3006 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 81.628302][ T31] audit: type=1400 audit(81.540:101): avc: denied { mount } for pid=3006 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 81.644626][ T3007] veth0_macvtap: entered promiscuous mode [ 81.655503][ T3007] veth1_macvtap: entered promiscuous mode [ 81.764857][ T3007] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.765678][ T3007] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.766154][ T3007] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.766539][ T3007] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.803462][ T31] audit: type=1400 audit(81.720:102): avc: denied { read write } for pid=3006 comm="syz-executor" name="loop0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.810003][ T31] audit: type=1400 audit(81.720:103): avc: denied { open } for pid=3006 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.811414][ T31] audit: type=1400 audit(81.720:104): avc: denied { ioctl } for pid=3006 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=635 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 82.068304][ T31] audit: type=1400 audit(81.980:105): avc: denied { create } for pid=3690 comm="syz.0.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 83.480621][ T3745] input: syz0 as /devices/virtual/input/input3 [ 87.729290][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.890170][ T24] usb 1-1: device descriptor read/64, error -71 [ 88.169574][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.319524][ T24] usb 1-1: device descriptor read/64, error -71 [ 88.439847][ T24] usb usb1-port1: attempt power cycle [ 88.849482][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 88.883027][ T24] usb 1-1: device descriptor read/8, error -71 [ 89.159384][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 89.192664][ T24] usb 1-1: device descriptor read/8, error -71 [ 89.309714][ T24] usb usb1-port1: unable to enumerate USB device [ 98.039035][ T3650] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 98.199102][ T3650] usb 1-1: device descriptor read/64, error -71 [ 98.469518][ T3650] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 98.619247][ T3650] usb 1-1: device descriptor read/64, error -71 [ 98.740305][ T3650] usb usb1-port1: attempt power cycle [ 99.149513][ T3650] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 99.191770][ T3650] usb 1-1: device descriptor read/8, error -71 [ 99.459566][ T3650] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 99.492054][ T3650] usb 1-1: device descriptor read/8, error -71 [ 99.619595][ T3650] usb usb1-port1: unable to enumerate USB device [ 111.442262][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 111.442397][ T31] audit: type=1400 audit(111.360:122): avc: denied { ioctl } for pid=3827 comm="syz.0.63" path="socket:[2536]" dev="sockfs" ino=2536 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.713983][ T31] audit: type=1400 audit(111.630:123): avc: denied { create } for pid=3832 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.720979][ T31] audit: type=1400 audit(111.630:124): avc: denied { write } for pid=3832 comm="syz.0.64" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.818458][ T3854] syz.0.73 uses obsolete (PF_INET,SOCK_PACKET) [ 113.871288][ T31] audit: type=1400 audit(113.780:125): avc: denied { create } for pid=3879 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.900087][ T31] audit: type=1400 audit(113.810:126): avc: denied { write } for pid=3879 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.986213][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.072576][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.127505][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.158185][ T3885] Zero length message leads to an empty skb [ 114.185625][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.266477][ T3888] input: syz0 as /devices/virtual/input/input4 [ 114.514987][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.525484][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.532350][ T11] bond0 (unregistering): Released all slaves [ 114.663285][ T11] hsr_slave_0: left promiscuous mode [ 114.672059][ T11] hsr_slave_1: left promiscuous mode [ 114.690256][ T11] veth1_macvtap: left promiscuous mode [ 114.690951][ T11] veth0_macvtap: left promiscuous mode [ 114.691532][ T11] veth1_vlan: left promiscuous mode [ 114.691980][ T11] veth0_vlan: left promiscuous mode [ 117.033359][ T3872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.051666][ T3872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.435827][ T3872] hsr_slave_0: entered promiscuous mode [ 118.445682][ T3872] hsr_slave_1: entered promiscuous mode [ 119.397060][ T3872] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 119.421926][ T3872] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 119.446743][ T3872] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 119.471823][ T3872] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 120.613633][ T3872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.766825][ T3872] veth0_vlan: entered promiscuous mode [ 125.822179][ T3872] veth1_vlan: entered promiscuous mode [ 125.930688][ T3872] veth0_macvtap: entered promiscuous mode [ 125.952155][ T3872] veth1_macvtap: entered promiscuous mode [ 126.017628][ T3872] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.020032][ T3872] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.020385][ T3872] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.020773][ T3872] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.957587][ T31] audit: type=1400 audit(126.870:127): avc: denied { name_bind } for pid=4312 comm="syz.1.87" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 126.958208][ T31] audit: type=1400 audit(126.870:128): avc: denied { node_bind } for pid=4312 comm="syz.1.87" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 127.075476][ T31] audit: type=1400 audit(126.990:129): avc: denied { prog_load } for pid=4312 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 127.077633][ T31] audit: type=1400 audit(126.990:130): avc: denied { bpf } for pid=4312 comm="syz.1.87" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 127.362659][ T31] audit: type=1400 audit(127.280:131): avc: denied { setopt } for pid=4312 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 127.365334][ T31] audit: type=1400 audit(127.280:132): avc: denied { connect } for pid=4312 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 127.368036][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 127.559939][ T31] audit: type=1400 audit(127.470:133): avc: denied { map_create } for pid=4318 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 127.582510][ T31] audit: type=1400 audit(127.500:134): avc: denied { create } for pid=4318 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.589994][ T31] audit: type=1400 audit(127.510:135): avc: denied { setopt } for pid=4318 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.974665][ T31] audit: type=1400 audit(132.890:136): avc: denied { getopt } for pid=4332 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.306872][ T4339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 147.383132][ T4362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.390732][ T4362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.523078][ T4362] hsr_slave_0: entered promiscuous mode [ 148.524658][ T4362] hsr_slave_1: entered promiscuous mode [ 148.526267][ T4362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.526548][ T4362] Cannot create hsr debugfs directory [ 148.734178][ T4362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.812355][ T4362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.875685][ T4362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.927012][ T4362] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.041015][ T4362] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 149.044675][ T4362] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 149.048351][ T4362] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 149.056326][ T4362] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.560094][ T31] audit: type=1400 audit(149.470:137): avc: denied { perfmon } for pid=4686 comm="syz.1.107" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 149.590477][ T31] audit: type=1400 audit(149.480:138): avc: denied { prog_run } for pid=4686 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 149.712000][ C1] 8<--- cut here --- [ 149.712324][ C1] Unable to handle kernel NULL pointer dereference at virtual address 00000001 when read [ 149.712646][ C1] [00000001] *pgd=85315003, *pmd=fe587003 [ 149.713897][ C1] Internal error: Oops: 205 [#1] PREEMPT SMP ARM [ 149.714384][ C1] Modules linked in: [ 149.715034][ C1] CPU: 1 PID: 4688 Comm: syz.1.107 Not tainted 6.10.0-syzkaller #0 [ 149.715996][ C1] Hardware name: ARM-Versatile Express [ 149.716834][ C1] PC is at __cpu_map_flush+0x18/0x54 [ 149.717802][ C1] LR is at xdp_do_check_flushed+0xc4/0x1f0 [ 149.717996][ C1] pc : [<803f8b88>] lr : [<81442060>] psr: a0000013 [ 149.718177][ C1] sp : df805e30 ip : df805e50 fp : df805e4c [ 149.718297][ C1] r10: ddde4f80 r9 : ddde51c0 r8 : df805ed0 [ 149.718451][ C1] r7 : df805ecb r6 : eb7fdc70 r5 : ddde5070 r4 : 00000001 [ 149.718785][ C1] r3 : 8024b544 r2 : 00000001 r1 : 00000004 r0 : eb7fdc70 [ 149.719278][ C1] Flags: NzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 149.719506][ C1] Control: 30c5387d Table: 853f5bc0 DAC: 00000000 [ 149.719837][ C1] Register r0 information: 2-page vmalloc region starting at 0xeb7fc000 allocated at kernel_clone+0xac/0x3e4 [ 149.720878][ C1] Register r1 information: non-paged memory [ 149.721413][ C1] Register r2 information: non-paged memory [ 149.721783][ C1] Register r3 information: non-slab/vmalloc memory [ 149.722294][ C1] Register r4 information: non-paged memory [ 149.722569][ C1] Register r5 information: non-slab/vmalloc memory [ 149.722951][ C1] Register r6 information: 2-page vmalloc region starting at 0xeb7fc000 allocated at kernel_clone+0xac/0x3e4 [ 149.723484][ C1] Register r7 information: 2-page vmalloc region starting at 0xdf804000 allocated at start_kernel+0x5d0/0x778 [ 149.724044][ C1] Register r8 information: 2-page vmalloc region starting at 0xdf804000 allocated at start_kernel+0x5d0/0x778 [ 149.724490][ C1] Register r9 information: non-slab/vmalloc memory [ 149.724775][ C1] Register r10 information: non-slab/vmalloc memory [ 149.725042][ C1] Register r11 information: 2-page vmalloc region starting at 0xdf804000 allocated at start_kernel+0x5d0/0x778 [ 149.725482][ C1] Register r12 information: 2-page vmalloc region starting at 0xdf804000 allocated at start_kernel+0x5d0/0x778 [ 149.726213][ C1] Process syz.1.107 (pid: 4688, stack limit = 0xeb7fc000) [ 149.726988][ C1] Stack: (0xdf805e30 to 0xdf806000) [ 149.727480][ C1] 5e20: eb7fdc80 ddde5070 eb7fdc70 df805ecb [ 149.727837][ C1] 5e40: df805e74 df805e50 81442060 803f8b7c ddde5070 00000040 df805ecb 00000001 [ 149.728302][ C1] 5e60: ddde5070 00000040 df805ea4 df805e78 8140f8d8 81441fa8 824b5f80 82606000 [ 149.728814][ C1] 5e80: 00000000 ddde5070 ffffc545 0000012c df805ed0 ddde51c0 df805f64 df805ea8 [ 149.729539][ C1] 5ea0: 81410100 8140f8a0 849ea400 83ed0c00 00000000 ffffc545 00010180 5b92f000 [ 149.730073][ C1] 5ec0: 824b5f80 82604d40 00903d58 819050d0 df805ed0 df805ed0 df805ed8 df805ed8 [ 149.730412][ C1] 5ee0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 149.730868][ C1] 5f00: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 149.731362][ C1] 5f20: 00000000 00000000 00000000 00000000 8029d0e8 92102805 8260408c 8260408c [ 149.731846][ C1] 5f40: 00000004 00000003 00400140 00000101 849ea400 00000008 df805fdc df805f68 [ 149.732292][ C1] 5f60: 8024afd4 8140fdd4 ddde1708 824b2710 824b2718 00400140 82604d40 ffffc544 [ 149.732684][ C1] 5f80: 821b96a0 00000000 824b4c40 0000000a 827f0148 8260c5d0 821a69b4 824aa3f8 [ 149.733086][ C1] 5fa0: df805f68 82604080 df805fc4 df805fb8 8190474c 60000013 00000001 00000000 [ 149.733599][ C1] 5fc0: eb7fde58 84b9b2cc 84b9b128 00000000 df805fec df805fe0 802012d0 8024ae84 [ 149.734020][ C1] 5fe0: df805ffc df805ff0 80208800 802012c8 eb7fddbc df806000 818b55e4 802087fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 149.734557][ C1] Call trace: frame pointer underflow [ 149.735467][ C1] [<803f8b70>] (__cpu_map_flush) from [<81442060>] (xdp_do_check_flushed+0xc4/0x1f0) [ 149.736218][ C1] r7:df805ecb r6:eb7fdc70 r5:ddde5070 r4:eb7fdc80 [ 149.736580][ C1] [<81441f9c>] (xdp_do_check_flushed) from [<8140f8d8>] (__napi_poll+0x44/0x240) [ 149.737059][ C1] r6:00000040 r5:ddde5070 r4:00000001 [ 149.737281][ C1] [<8140f894>] (__napi_poll) from [<81410100>] (net_rx_action+0x338/0x420) [ 149.737714][ C1] r9:ddde51c0 r8:df805ed0 r7:0000012c r6:ffffc545 r5:ddde5070 r4:00000000 [ 149.738160][ C1] [<8140fdc8>] (net_rx_action) from [<8024afd4>] (handle_softirqs+0x15c/0x468) [ 149.738558][ C1] r10:00000008 r9:849ea400 r8:00000101 r7:00400140 r6:00000003 r5:00000004 [ 149.739428][ C1] r4:8260408c [ 149.739596][ C1] [<8024ae78>] (handle_softirqs) from [<802012d0>] (__do_softirq+0x14/0x18) [ 149.739997][ C1] r10:00000000 r9:84b9b128 r8:84b9b2cc r7:eb7fde58 r6:00000000 r5:00000001 [ 149.740312][ C1] r4:60000013 [ 149.740463][ C1] [<802012bc>] (__do_softirq) from [<80208800>] (____do_softirq+0x10/0x14) [ 149.740828][ C1] [<802087f0>] (____do_softirq) from [<818b55e4>] (call_with_stack+0x1c/0x20) [ 149.741189][ C1] [<818b55c8>] (call_with_stack) from [<8020883c>] (do_softirq_own_stack+0x38/0x3c) [ 149.741565][ C1] [<80208804>] (do_softirq_own_stack) from [<8024b4ec>] (do_softirq+0x5c/0x64) [ 149.742034][ C1] [<8024b490>] (do_softirq) from [<8024b5c0>] (__local_bh_enable_ip+0xcc/0xd0) [ 149.742449][ C1] r5:00000001 r4:849ea400 [ 149.742664][ C1] [<8024b4f4>] (__local_bh_enable_ip) from [<80c4d354>] (tun_get_user+0xdbc/0x1048) [ 149.743136][ C1] r5:8460d780 r4:836de680 [ 149.743322][ C1] [<80c4c598>] (tun_get_user) from [<80c4de60>] (tun_chr_write_iter+0x60/0xc8) [ 149.743863][ C1] r10:81b6d62c r9:20000240 r8:84b9b000 r7:836de680 r6:00000000 r5:eb7fdef0 [ 149.744262][ C1] r4:eb7fdf08 [ 149.744458][ C1] [<80c4de00>] (tun_chr_write_iter) from [<80501a08>] (vfs_write+0x274/0x44c) [ 149.744822][ C1] r8:eb7fdf68 r7:849ea400 r6:00000036 r5:845c6240 r4:80c4de00 [ 149.745146][ C1] [<80501794>] (vfs_write) from [<80501d64>] (ksys_write+0x78/0xf8) [ 149.745483][ C1] r10:00000004 r9:849ea400 r8:8020029c r7:00000000 r6:0000006e r5:845c6240 [ 149.745836][ C1] r4:845c6241 [ 149.745987][ C1] [<80501cec>] (ksys_write) from [<80501df4>] (sys_write+0x10/0x14) [ 149.746381][ C1] r7:00000004 r6:000000c8 r5:20000240 r4:00000036 [ 149.746621][ C1] [<80501de4>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 149.747070][ C1] Exception stack(0xeb7fdfa8 to 0xeb7fdff0) [ 149.747300][ C1] dfa0: 00000036 20000240 000000c8 20000240 00000036 00000000 [ 149.747698][ C1] dfc0: 00000036 20000240 000000c8 00000004 7ebdf766 7ebdf767 003d0f00 76b310bc [ 149.748158][ C1] dfe0: 00000158 76b30eb0 000d5c70 0012e68c [ 149.748901][ C1] Code: e24cb004 e5904000 e1a06000 e1500004 (e4145020) [ 149.750231][ C1] ---[ end trace 0000000000000000 ]--- [ 149.750910][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 149.753822][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:01:35 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=7e9841fc R02=7e98427c R03=00000008 R04=00010000 R05=7e98427c R06=00000001 R07=000000af R08=00000000 R09=7e9841fc R10=7e98427c R11=00000001 R12=005c0edc R13=df991ff8 R14=76b4ede8 R15=76b4ede8 PSR=40000093 -Z-- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=005827e9 s17=00000000 d08=00000000005827e9 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00080004 s33=0004b003 d16=0004b00300080004 s34=fffe8208 s35=b8031fff d17=b8031ffffffe8208 s36=00080004 s37=0004c003 d18=0004c00300080004 s38=c4033004 s39=80840004 d19=80840004c4033004 s40=2401e080 s41=0004c603 d20=0004c6032401e080 s42=10b08084 s43=04c60300 d21=04c6030010b08084 s44=b8808400 s45=c8030210 d22=c8030210b8808400 s46=1c040004 s47=0004cc03 d23=0004cc031c040004 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=f2404358 s53=5efe4946 d26=5efe4946f2404358 s54=f4fe088b s55=da9fc277 d27=da9fc277f4fe088b s56=cd27af4a s57=63dbc0f2 d28=63dbc0f2cd27af4a s58=19dfd44a s59=9f53d044 d29=9f53d04419dfd44a s60=8e318095 s61=83a383df d30=83a383df8e318095 s62=ab174c2b s63=cde83ab3 d31=cde83ab3ab174c2b FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=803f8b88 R01=df8057b0 R02=df8057ac R03=df8057a4 R04=df805ba5 R05=df805802 R06=00000000 R07=803f8b88 R08=00000001 R09=df805b14 R10=df805ba4 R11=df8057dc R12=849ea400 R13=df805798 R14=8032102c R15=80320eb8 PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000