last executing test programs: 24.684942259s ago: executing program 0 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0xb84a, 0x0, 0x1, 0xfffffffb}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 19.299950164s ago: executing program 1 (id=39): sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x7, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a80016002000", 0x36}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) 18.891650846s ago: executing program 1 (id=40): setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x3a, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0xed6, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 18.202193594s ago: executing program 1 (id=41): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, r0, 0x0, 0x0, 0x3b0}]) 17.743991579s ago: executing program 1 (id=42): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 17.293421384s ago: executing program 1 (id=43): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x14}}, 0x4000054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 10.58934185s ago: executing program 0 (id=44): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) unshare(0x22020600) unshare(0x2a020400) 10.451333968s ago: executing program 0 (id=45): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 10.22489566s ago: executing program 0 (id=46): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000170a0108000000000000fd00020000000900020073797a38000000000900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) 10.029866431s ago: executing program 0 (id=47): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e008dff00"}) 9.8513987s ago: executing program 0 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bb, 0x1, 0x5, 0x1c3}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 0s ago: executing program 1 (id=49): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x3, 0x1f, 0x10000, 0x4, 0x2, 0xcc7, 0x4, 0x80008, 0xe, 0x6, 0x337, 0x4000001, 0x1, 0x1, 0x6, 0x10000105, 0x1, 0x6, 0x3, 0x3fff7fff, 0x89, 0x10, 0x1, 0x8, 0x80000b, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) kernel console output (not intermixed with test programs): [ 48.327001][ T31] audit: type=1400 audit(48.230:56): avc: denied { read write } for pid=3114 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.329011][ T31] audit: type=1400 audit(48.230:57): avc: denied { open } for pid=3114 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:21371' (ED25519) to the list of known hosts. [ 59.949440][ T31] audit: type=1400 audit(59.850:58): avc: denied { name_bind } for pid=3117 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 61.269341][ T31] audit: type=1400 audit(61.160:59): avc: denied { execute } for pid=3118 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 61.271988][ T31] audit: type=1400 audit(61.170:60): avc: denied { execute_no_trans } for pid=3118 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 64.538314][ T31] audit: type=1400 audit(64.440:61): avc: denied { mounton } for pid=3118 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.545207][ T31] audit: type=1400 audit(64.450:62): avc: denied { mount } for pid=3118 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.566804][ T3118] cgroup: Unknown subsys name 'net' [ 64.577818][ T31] audit: type=1400 audit(64.480:63): avc: denied { unmount } for pid=3118 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.783184][ T3118] cgroup: Unknown subsys name 'cpuset' [ 64.789399][ T3118] cgroup: Unknown subsys name 'hugetlb' [ 64.791310][ T3118] cgroup: Unknown subsys name 'rlimit' [ 65.109673][ T31] audit: type=1400 audit(65.010:64): avc: denied { setattr } for pid=3118 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.117163][ T31] audit: type=1400 audit(65.020:65): avc: denied { mounton } for pid=3118 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 65.123451][ T31] audit: type=1400 audit(65.030:66): avc: denied { mount } for pid=3118 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 65.340012][ T3120] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 65.345766][ T31] audit: type=1400 audit(65.250:67): avc: denied { relabelto } for pid=3120 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 65.353307][ T31] audit: type=1400 audit(65.260:68): avc: denied { write } for pid=3120 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 65.404546][ T31] audit: type=1400 audit(65.310:69): avc: denied { read } for pid=3118 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 65.412742][ T31] audit: type=1400 audit(65.310:70): avc: denied { open } for pid=3118 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 69.697205][ T1161] sched: DL replenish lagged too much [ 72.214425][ T3118] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.267119][ T31] audit: type=1400 audit(74.170:71): avc: denied { execmem } for pid=3121 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 74.330049][ T31] audit: type=1400 audit(74.230:72): avc: denied { read } for pid=3123 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 74.337896][ T31] audit: type=1400 audit(74.240:73): avc: denied { open } for pid=3123 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 74.350852][ T31] audit: type=1400 audit(74.250:74): avc: denied { mounton } for pid=3123 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 74.381513][ T31] audit: type=1400 audit(74.280:75): avc: denied { module_request } for pid=3123 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 74.384692][ T31] audit: type=1400 audit(74.280:76): avc: denied { module_request } for pid=3124 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 74.463554][ T31] audit: type=1400 audit(74.370:77): avc: denied { sys_module } for pid=3123 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.205673][ T31] audit: type=1400 audit(75.110:78): avc: denied { ioctl } for pid=3123 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=676 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.403508][ T3124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.409007][ T3123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.416324][ T3124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.420512][ T3123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.206792][ T3124] hsr_slave_0: entered promiscuous mode [ 77.210177][ T3124] hsr_slave_1: entered promiscuous mode [ 77.263114][ T3123] hsr_slave_0: entered promiscuous mode [ 77.264139][ T3123] hsr_slave_1: entered promiscuous mode [ 77.265081][ T3123] debugfs: 'hsr0' already exists in 'hsr' [ 77.265463][ T3123] Cannot create hsr debugfs directory [ 77.740033][ T31] audit: type=1400 audit(77.640:79): avc: denied { create } for pid=3124 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.745208][ T31] audit: type=1400 audit(77.640:80): avc: denied { write } for pid=3124 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.753877][ T3124] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.767005][ T3124] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.774583][ T3124] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.788951][ T3124] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.876448][ T3123] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.886022][ T3123] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.895762][ T3123] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.901485][ T3123] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.503112][ T3124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.668016][ T3123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.360539][ T3124] veth0_vlan: entered promiscuous mode [ 81.399657][ T3124] veth1_vlan: entered promiscuous mode [ 81.501082][ T3124] veth0_macvtap: entered promiscuous mode [ 81.523953][ T3124] veth1_macvtap: entered promiscuous mode [ 81.549520][ T3123] veth0_vlan: entered promiscuous mode [ 81.599621][ T3123] veth1_vlan: entered promiscuous mode [ 81.635507][ T2972] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.635953][ T2972] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.636165][ T2972] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.636284][ T2972] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.769271][ T3123] veth0_macvtap: entered promiscuous mode [ 81.795238][ T3123] veth1_macvtap: entered promiscuous mode [ 81.799526][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 81.803537][ T31] audit: type=1400 audit(81.700:82): avc: denied { mount } for pid=3124 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 81.806506][ T31] audit: type=1400 audit(81.710:83): avc: denied { mounton } for pid=3124 comm="syz-executor" path="/syzkaller.itc3z3/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.809159][ T31] audit: type=1400 audit(81.710:84): avc: denied { mount } for pid=3124 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 81.823389][ T31] audit: type=1400 audit(81.730:85): avc: denied { mounton } for pid=3124 comm="syz-executor" path="/syzkaller.itc3z3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 81.825575][ T31] audit: type=1400 audit(81.730:86): avc: denied { mounton } for pid=3124 comm="syz-executor" path="/syzkaller.itc3z3/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=1904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 81.849761][ T31] audit: type=1400 audit(81.750:87): avc: denied { unmount } for pid=3124 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 81.867195][ T31] audit: type=1400 audit(81.770:88): avc: denied { mounton } for pid=3124 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 81.869571][ T31] audit: type=1400 audit(81.770:89): avc: denied { mount } for pid=3124 comm="syz-executor" name="/" dev="gadgetfs" ino=1912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 81.878953][ T2972] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.886056][ T2972] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.889281][ T31] audit: type=1400 audit(81.780:90): avc: denied { mount } for pid=3124 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 81.898078][ T31] audit: type=1400 audit(81.800:91): avc: denied { mounton } for pid=3124 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 81.903395][ T2972] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.907240][ T2972] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.059245][ T3124] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.992943][ T2902] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.001384][ T3827] syz.1.5 uses obsolete (PF_INET,SOCK_PACKET) [ 83.153915][ T2902] usb 1-1: Using ep0 maxpacket: 8 [ 83.166859][ T2902] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 83.167527][ T2902] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 83.167635][ T2902] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 83.187986][ T2902] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.188273][ T2902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.188490][ T2902] usb 1-1: Product: syz [ 83.188536][ T2902] usb 1-1: Manufacturer: syz [ 83.188624][ T2902] usb 1-1: SerialNumber: syz [ 83.648699][ T3819] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 83.650261][ T3819] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.305922][ T2902] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 84.324632][ T2902] cdc_ncm 1-1:1.0: bind() failure [ 84.343885][ T2902] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 84.344246][ T2902] cdc_ncm 1-1:1.1: bind() failure [ 84.358628][ T2902] usb 1-1: USB disconnect, device number 2 [ 85.012839][ T2902] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 85.253380][ T2902] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.253702][ T2902] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.253942][ T2902] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.254024][ T2902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.499413][ T2902] usb 1-1: usb_control_msg returned -32 [ 85.499791][ T2902] usbtmc 1-1:16.0: can't read capabilities [ 86.816296][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 86.820105][ T31] audit: type=1400 audit(86.720:107): avc: denied { map_create } for pid=3833 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 94.713417][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.863463][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 94.874640][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 94.874970][ T23] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 94.875248][ T23] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 94.895438][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.895806][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.896026][ T23] usb 2-1: Product: syz [ 94.896221][ T23] usb 2-1: Manufacturer: syz [ 94.896384][ T23] usb 2-1: SerialNumber: syz [ 95.333882][ T23] cdc_ncm 2-1:1.0: bind() failure [ 95.341614][ T23] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 95.344588][ T23] cdc_ncm 2-1:1.1: bind() failure [ 95.357029][ T23] usb 2-1: USB disconnect, device number 2 [ 95.508363][ T31] audit: type=1400 audit(95.410:108): avc: denied { bind } for pid=3881 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.515843][ T31] audit: type=1400 audit(95.420:109): avc: denied { setopt } for pid=3881 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.719033][ T31] audit: type=1400 audit(95.620:110): avc: denied { ioctl } for pid=3881 comm="syz.1.12" path="socket:[1999]" dev="sockfs" ino=1999 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.001563][ T31] audit: type=1400 audit(95.900:111): avc: denied { map_read map_write } for pid=3889 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 96.541934][ C0] hrtimer: interrupt took 9846752 ns [ 99.269929][ T2902] usb 1-1: USB disconnect, device number 3 [ 99.527954][ T31] audit: type=1400 audit(99.430:112): avc: denied { create } for pid=3907 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.552905][ T31] audit: type=1400 audit(99.450:113): avc: denied { bind } for pid=3907 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 100.067031][ T31] audit: type=1400 audit(99.970:114): avc: denied { setopt } for pid=3907 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 100.107697][ T31] audit: type=1400 audit(100.010:115): avc: denied { accept } for pid=3907 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 103.025749][ T31] audit: type=1400 audit(102.930:116): avc: denied { sqpoll } for pid=3897 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 107.316100][ T31] audit: type=1400 audit(107.220:117): avc: denied { create } for pid=3927 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.009214][ T31] audit: type=1400 audit(107.910:118): avc: denied { map } for pid=3927 comm="syz.0.21" path="/dev/audio1" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.011003][ T31] audit: type=1400 audit(107.910:119): avc: denied { execute } for pid=3927 comm="syz.0.21" path="/dev/audio1" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 109.826238][ T31] audit: type=1400 audit(109.730:120): avc: denied { write } for pid=3930 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.788975][ T31] audit: type=1400 audit(112.690:121): avc: denied { mounton } for pid=3949 comm="syz.0.26" path="/12/file0" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.897342][ T3952] process 'syz.0.26' launched './file0' with NULL argv: empty string added [ 113.954121][ T31] audit: type=1400 audit(113.860:122): avc: denied { unmount } for pid=3123 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 114.306948][ T31] audit: type=1400 audit(114.210:123): avc: denied { relabelfrom } for pid=3960 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 114.307288][ T31] audit: type=1400 audit(114.210:124): avc: denied { relabelto } for pid=3960 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 115.112114][ T726] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.282270][ T726] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 115.282633][ T726] usb 1-1: config 0 interface 0 has no altsetting 0 [ 115.283121][ T726] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 115.283258][ T726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.309611][ T726] usb 1-1: config 0 descriptor?? [ 115.779465][ T726] ntrig 0003:1B96:0004.0001: hidraw0: USB HID v0.06 Device [HID 1b96:0004] on usb-dummy_hcd.0-1/input0 [ 115.976356][ T726] ntrig 0003:1B96:0004.0001: Firmware version: 1.0.23.54.6 (c293 d6fe) [ 116.253551][ T45] usb 1-1: USB disconnect, device number 4 [ 116.633573][ T31] audit: type=1400 audit(116.520:125): avc: denied { create } for pid=3995 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 116.640421][ T31] audit: type=1400 audit(116.540:126): avc: denied { create } for pid=3995 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.675732][ T31] audit: type=1400 audit(121.580:127): avc: denied { connect } for pid=4003 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.680336][ T31] audit: type=1400 audit(121.580:128): avc: denied { shutdown } for pid=4003 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.808819][ T31] audit: type=1400 audit(121.710:129): avc: denied { name_bind } for pid=4005 comm="syz.1.35" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 121.809226][ T31] audit: type=1400 audit(121.710:130): avc: denied { node_bind } for pid=4005 comm="syz.1.35" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 121.829001][ T31] audit: type=1400 audit(121.730:131): avc: denied { map } for pid=4005 comm="syz.1.35" path="socket:[3118]" dev="sockfs" ino=3118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 122.029287][ T31] audit: type=1400 audit(121.930:132): avc: denied { read } for pid=4007 comm="syz.1.36" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.029806][ T31] audit: type=1400 audit(121.930:133): avc: denied { open } for pid=4007 comm="syz.1.36" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.065195][ T31] audit: type=1400 audit(121.970:134): avc: denied { ioctl } for pid=4007 comm="syz.1.36" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.068792][ T31] audit: type=1400 audit(121.970:135): avc: denied { set_context_mgr } for pid=4007 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 122.118108][ T31] audit: type=1400 audit(122.020:136): avc: denied { map } for pid=4007 comm="syz.1.36" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.917910][ T4014] netlink: 'syz.1.39': attribute type 12 has an invalid length. [ 136.583521][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 136.583807][ T31] audit: type=1400 audit(136.460:138): avc: denied { map } for pid=4035 comm="syz.0.48" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 136.584017][ T31] audit: type=1400 audit(136.490:139): avc: denied { read write } for pid=4035 comm="syz.0.48" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 141.893350][ T31] audit: type=1400 audit(141.800:140): avc: denied { append } for pid=4039 comm="syz.1.49" name="comedi3" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.901258][ T4040] genirq: Flags mismatch irq 31. 00200001 (comedi_parport) vs. 00200081 (virtio0) [ 141.903898][ T4040] 8<--- cut here --- [ 141.904030][ T4040] Unable to handle kernel paging request at virtual address fee00003 when write [ 141.904168][ T4040] [fee00003] *pgd=80000080007003, *pmd=00000000 [ 141.905149][ T4040] Internal error: Oops: a06 [#1] SMP ARM [ 141.908028][ T4040] Modules linked in: [ 141.909143][ T4040] CPU: 1 UID: 0 PID: 4040 Comm: syz.1.49 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT [ 141.909701][ T4040] Hardware name: ARM-Versatile Express [ 141.910363][ T4040] PC is at parport_attach+0x174/0x1d0 [ 141.912519][ T4040] LR is at parport_attach+0x164/0x1d0 [ 141.912854][ T4040] pc : [<813ab4f0>] lr : [<813ab4e0>] psr: 60000013 [ 141.913472][ T4040] sp : dfa21d30 ip : dfa21d30 fp : dfa21d54 [ 141.913715][ T4040] r10: 82b16f00 r9 : 00000003 r8 : 8411b300 [ 141.914036][ T4040] r7 : dfa21d90 r6 : 8411b300 r5 : 00000000 r4 : 00000000 [ 141.914344][ T4040] r3 : fee00003 r2 : 81e15464 r1 : 00000001 r0 : 813ab160 [ 141.914876][ T4040] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 141.915208][ T4040] Control: 30c5387d Table: 859a4400 DAC: 00000000 [ 141.915662][ T4040] Register r0 information: non-slab/vmalloc memory [ 141.916437][ T4040] Register r1 information: non-paged memory [ 141.916728][ T4040] Register r2 information: non-slab/vmalloc memory [ 141.916987][ T4040] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 141.917514][ T4040] Register r4 information: NULL pointer [ 141.917774][ T4040] Register r5 information: NULL pointer [ 141.918066][ T4040] Register r6 information: slab kmalloc-192 start 8411b300 pointer offset 0 size 192 [ 141.919003][ T4040] Register r7 information: 2-page vmalloc region starting at 0xdfa20000 allocated at kernel_clone+0xac/0x3ec [ 141.919461][ T4040] Register r8 information: slab kmalloc-192 start 8411b300 pointer offset 0 size 192 [ 141.919909][ T4040] Register r9 information: non-paged memory [ 141.920166][ T4040] Register r10 information: non-slab/vmalloc memory [ 141.920432][ T4040] Register r11 information: 2-page vmalloc region starting at 0xdfa20000 allocated at kernel_clone+0xac/0x3ec [ 141.920982][ T4040] Register r12 information: 2-page vmalloc region starting at 0xdfa20000 allocated at kernel_clone+0xac/0x3ec [ 141.921835][ T4040] Process syz.1.49 (pid: 4040, stack limit = 0xdfa20000) [ 141.922477][ T4040] Stack: (0xdfa21d30 to 0xdfa22000) [ 141.922853][ T4040] 1d20: 823fe3b4 8411b300 829cf92c 829cf92c [ 141.923193][ T4040] 1d40: 81e15924 8411b344 dfa21d8c dfa21d58 813a7588 813ab388 200000c0 00000000 [ 141.923542][ T4040] 1d60: dfa21d7c 200000c0 8411b300 b5403587 200000c0 838b3c00 40946400 00000003 [ 141.923959][ T4040] 1d80: dfa21e4c dfa21d90 813a3108 813a748c 656d6f63 705f6964 6f707261 00007472 [ 141.924362][ T4040] 1da0: 00000000 00000003 0000001f 00010000 00000004 00000002 00000cc7 00000004 [ 141.924775][ T4040] 1dc0: 00080008 0000000e 00000006 00000337 04000001 00000001 00000001 00000006 [ 141.925067][ T4040] 1de0: 10000105 00000001 00000006 00000003 3fff7fff 00000089 00000010 00000001 [ 141.925384][ T4040] 1e00: 00000008 0080000b 00000e69 0000003c 00000008 00000006 00000000 fffffff8 [ 141.925763][ T4040] 1e20: 00000000 b6c9e23b 00000000 84875600 8411b300 200000c0 200000c0 838b3c00 [ 141.926326][ T4040] 1e40: dfa21f14 dfa21e50 813a40d4 813a3014 00000000 00000000 00000000 b6c9e23b [ 141.926740][ T4040] 1e60: 00000000 00000000 8247054c 0000005f 83c61c58 8411b330 84145e1c 838b3c00 [ 141.927115][ T4040] 1e80: dfa21ee4 dfa21e90 8079782c 8078db90 00000064 00000001 00000000 dfa21eac [ 141.927743][ T4040] 1ea0: 8496f550 834d25d8 00006400 0000000b dfa21ea0 00000000 00000000 b6c9e23b [ 141.928045][ T4040] 1ec0: 84875600 40946400 200000c0 200000c0 84875600 00000003 dfa21ef4 dfa21ee8 [ 141.928452][ T4040] 1ee0: 8079794c b6c9e23b dfa21f14 40946400 00000000 84875601 200000c0 84875600 [ 141.929554][ T4040] 1f00: 00000003 838b3c00 dfa21fa4 dfa21f18 8056ce00 813a3b04 ecac8b10 838b3c00 [ 141.930156][ T4040] 1f20: dfa21f3c dfa21f30 81a39338 81a39208 dfa21f54 dfa21f40 8025e490 8028ef8c [ 141.930691][ T4040] 1f40: dfa21fb0 40000000 dfa21f84 dfa21f58 802229ec 8025e44c 00000000 8281cddc [ 141.931107][ T4040] 1f60: dfa21fb0 0014c820 ecac8b10 80222940 00000000 b6c9e23b dfa21fac 00000000 [ 141.931507][ T4040] 1f80: 00000000 002f6308 00000036 8020029c 838b3c00 00000036 00000000 dfa21fa8 [ 141.932335][ T4040] 1fa0: 80200060 8056ccdc 00000000 00000000 00000003 40946400 200000c0 00000000 [ 141.932939][ T4040] 1fc0: 00000000 00000000 002f6308 00000036 002e0000 00000000 00006364 76f820bc [ 141.933338][ T4040] 1fe0: 76f81ec0 76f81eb0 0001948c 001322c0 60000010 00000003 00000000 00000000 [ 141.933923][ T4040] Call trace: [ 141.934568][ T4040] [<813ab37c>] (parport_attach) from [<813a7588>] (comedi_device_attach+0x108/0x250) [ 141.935480][ T4040] r6:8411b344 r5:81e15924 r4:829cf92c [ 141.936032][ T4040] [<813a7480>] (comedi_device_attach) from [<813a3108>] (do_devconfig_ioctl+0x100/0x220) [ 141.936550][ T4040] r10:00000003 r9:40946400 r8:838b3c00 r7:200000c0 r6:b5403587 r5:8411b300 [ 141.936908][ T4040] r4:200000c0 [ 141.937472][ T4040] [<813a3008>] (do_devconfig_ioctl) from [<813a40d4>] (comedi_unlocked_ioctl+0x5dc/0x1c24) [ 141.938173][ T4040] r8:838b3c00 r7:200000c0 r6:200000c0 r5:8411b300 r4:84875600 [ 141.938542][ T4040] [<813a3af8>] (comedi_unlocked_ioctl) from [<8056ce00>] (sys_ioctl+0x130/0xba0) [ 141.939019][ T4040] r10:838b3c00 r9:00000003 r8:84875600 r7:200000c0 r6:84875601 r5:00000000 [ 141.939445][ T4040] r4:40946400 [ 141.939615][ T4040] [<8056ccd0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 141.940020][ T4040] Exception stack(0xdfa21fa8 to 0xdfa21ff0) [ 141.940299][ T4040] 1fa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 141.940733][ T4040] 1fc0: 00000000 00000000 002f6308 00000036 002e0000 00000000 00006364 76f820bc [ 141.940845][ T31] audit: type=1400 audit(141.840:141): avc: denied { read } for pid=2930 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 141.942266][ T4040] 1fe0: 76f81ec0 76f81eb0 0001948c 001322c0 [ 141.942660][ T4040] r10:00000036 r9:838b3c00 r8:8020029c r7:00000036 r6:002f6308 r5:00000000 [ 141.943044][ T4040] r4:00000000 [ 141.943495][ T4040] Code: e596306c e3a04000 e7f33053 e2433612 (e5c34000) [ 141.944158][ T4040] ---[ end trace 0000000000000000 ]--- [ 141.944961][ T4040] Kernel panic - not syncing: Fatal exception [ 141.948168][ T4040] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:13:34 Registers: info registers vcpu 0 CPU#0 R00=829c6a00 R01=8240f850 R02=05af1640 R03=81a39b70 R04=82abc2c0 R05=d4414200 R06=00006dec R07=00000020 R08=dddc6130 R09=dddc6180 R10=05af1640 R11=df801e74 R12=df801e78 R13=df801e68 R14=812ebcf0 R15=81a39b80 PSR=60000193 -ZC- A S svc32 s00=6d726570 s01=69737369 d00=697373696d726570 s02=74786574 s03=7379733d d01=7379733d74786574 s04=626f3a74 s05=7463656a d02=7463656a626f3a74 s06=733a725f s07=64617379 d03=64617379733a725f s08=20745f6d s09=616c6374 d04=616c637420745f6d s10=613d7373 s11=5f6e6f6e d05=5f6e6f6e613d7373 s12=646f6e69 s13=65702065 d06=65702065646f6e69 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000002 R01=eb75f000 R02=eb75f000 R03=eb75f018 R04=8423c440 R05=dfa21a38 R06=00000f01 R07=00000001 R08=82826ee0 R09=00000000 R10=000003d2 R11=dfa219d4 R12=82959084 R13=dfa219b8 R14=82959084 R15=80a796e4 PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000