last executing test programs: 13.746595968s ago: executing program 0 (id=38): prlimit64(0x0, 0x0, 0x0, &(0x7f0000000280)) 13.662260612s ago: executing program 0 (id=39): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x11, 0x39, 0x5b, 0x40, 0x5d8, 0x810c, 0x185f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x1, 0xf0, 0x8, [{{0x9, 0x4, 0xc8, 0x8, 0x1, 0x7f, 0xf8, 0xae, 0x4c, [], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x7, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) socket(0x11, 0x800000003, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000002900)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_ep_read(r0, 0x1, 0xfffffffffffffe96, 0x0) 10.001042479s ago: executing program 1 (id=44): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="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"]) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 5.48559783s ago: executing program 1 (id=45): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000140)=0x81) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002380)={0x48, 0x0, &(0x7f0000001300)=[@register_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001380)='r'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x5, 0x0, &(0x7f0000000b40)="0abcc6a2e5"}) 5.350917176s ago: executing program 1 (id=46): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x18, 0x0, 0x0) 5.2720126s ago: executing program 1 (id=47): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) 5.147227777s ago: executing program 1 (id=48): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) setuid(0xee00) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) 4.541127648s ago: executing program 1 (id=49): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="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"]) 2.323322061s ago: executing program 0 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x398, 0x188, 0x230, 0xfeffffff, 0x188, 0x188, 0x300, 0x300, 0xffffffff, 0x300, 0x300, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, '\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1, @multicast1, @local, @icmp_id=0x66, @icmp_id=0x67}}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'pimreg0\x00', 'ip_vti0\x00', {}, {}, 0x0, 0x3}, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x7}, [@common=@ttl={{0x28}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0xd}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast1, @icmp_id=0x64, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1f, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @icmp_id=0x65, @gre_key=0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) 2.084504923s ago: executing program 0 (id=51): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000c7ce360863078120abd001e402010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00032800000028036f"]}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x38, @string={0x38, 0x3, "d3af0fb0618a354bd5ede648483d1f047d629d815e4bbd3ea40e60b549cddff8f61d63063d72118043be49e8c3351050c01980e9747a"}}}, 0x0) 274.460515ms ago: executing program 0 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000300)={0x0, "95a19221718b25bf7a8aebfda9bfe9fb554f9a12a67316dc9a551c698d5e363b62e234597ccdfc4e6d0b6f1f4c3e9d5165727e488be06f4aca152269af556744", 0x30}, 0x48, 0xfffffffffffffffe) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000380)={0x3, r0, 'id1\x00'}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x0, 0xee01, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x100}, 0x0, 0x0, 0x3, 0x7ff, 0x3, 0x7, 0x2ddb8435, 0x5, 0x1000, 0x6}) 0s ago: executing program 0 (id=53): syz_usb_connect(0x0, 0xbc, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3e, 0x97, 0x98, 0x8, 0x424, 0xcf30, 0xc8a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x18, 0x0, 0x2, 0x91, 0x4e, 0xfe, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x1ff, 0x7f, 0x1a, 0x9, [@generic={0x8, 0x3, "c626a8bda629"}, @generic={0x7e, 0xf, "8887f5df2d05871db14961b87da002c22f7f99343f7d125e62cfe14fcb9cdbcd70f9d4419b025dd65d4ee17af08329eda05464d1c0360b60eb155e84f9d9110611e2a38d6cfbc28bb98ddc8b33f72ecf2e0d5ac58db367bad157c58557661a5cc194ebaa15626a1adaad5e81a9b2144c306158102bb991ef282d5d82"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0xc, 0x1}}]}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): [ 47.586753][ T31] audit: type=1400 audit(47.510:56): avc: denied { read write } for pid=3093 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.589304][ T31] audit: type=1400 audit(47.510:57): avc: denied { open } for pid=3093 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:56336' (ED25519) to the list of known hosts. [ 57.663995][ T31] audit: type=1400 audit(57.580:58): avc: denied { name_bind } for pid=3096 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 59.328091][ T31] audit: type=1400 audit(59.250:59): avc: denied { execute } for pid=3097 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 59.330648][ T31] audit: type=1400 audit(59.250:60): avc: denied { execute_no_trans } for pid=3097 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 61.982045][ T31] audit: type=1400 audit(61.900:61): avc: denied { mounton } for pid=3097 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 61.986945][ T31] audit: type=1400 audit(61.910:62): avc: denied { mount } for pid=3097 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.001276][ T3097] cgroup: Unknown subsys name 'net' [ 62.011038][ T31] audit: type=1400 audit(61.930:63): avc: denied { unmount } for pid=3097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.157482][ T3097] cgroup: Unknown subsys name 'cpuset' [ 62.165535][ T3097] cgroup: Unknown subsys name 'hugetlb' [ 62.167062][ T3097] cgroup: Unknown subsys name 'rlimit' [ 62.415822][ T31] audit: type=1400 audit(62.340:64): avc: denied { setattr } for pid=3097 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.418119][ T31] audit: type=1400 audit(62.340:65): avc: denied { mounton } for pid=3097 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 62.421988][ T31] audit: type=1400 audit(62.340:66): avc: denied { mount } for pid=3097 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 62.620253][ T3099] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 62.629253][ T31] audit: type=1400 audit(62.550:67): avc: denied { relabelto } for pid=3099 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 70.346241][ T3097] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 72.337570][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 72.344158][ T31] audit: type=1400 audit(72.260:71): avc: denied { execmem } for pid=3100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 72.408904][ T31] audit: type=1400 audit(72.330:72): avc: denied { read } for pid=3102 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.409415][ T31] audit: type=1400 audit(72.330:73): avc: denied { open } for pid=3102 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.420339][ T31] audit: type=1400 audit(72.340:74): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 72.447174][ T31] audit: type=1400 audit(72.370:75): avc: denied { module_request } for pid=3102 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.531729][ T31] audit: type=1400 audit(72.450:76): avc: denied { sys_module } for pid=3102 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.201621][ T31] audit: type=1400 audit(73.120:77): avc: denied { ioctl } for pid=3102 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=675 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.369960][ T3102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.399815][ T3102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.411938][ T3103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.466749][ T3103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.397918][ T3102] hsr_slave_0: entered promiscuous mode [ 75.402663][ T3102] hsr_slave_1: entered promiscuous mode [ 75.486803][ T3103] hsr_slave_0: entered promiscuous mode [ 75.489011][ T3103] hsr_slave_1: entered promiscuous mode [ 75.490345][ T3103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.490525][ T3103] Cannot create hsr debugfs directory [ 75.911419][ T31] audit: type=1400 audit(75.830:78): avc: denied { create } for pid=3102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.920521][ T31] audit: type=1400 audit(75.840:79): avc: denied { write } for pid=3102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.921014][ T31] audit: type=1400 audit(75.840:80): avc: denied { read } for pid=3102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.940472][ T3102] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.959880][ T3102] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.972888][ T3102] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.988576][ T3102] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.006688][ T3103] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.017196][ T3103] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.051435][ T3103] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.080118][ T3103] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.811781][ T3102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.822618][ T3103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.585671][ T3102] veth0_vlan: entered promiscuous mode [ 79.622836][ T3103] veth0_vlan: entered promiscuous mode [ 79.631788][ T3102] veth1_vlan: entered promiscuous mode [ 79.652787][ T3103] veth1_vlan: entered promiscuous mode [ 79.715357][ T3102] veth0_macvtap: entered promiscuous mode [ 79.728501][ T3102] veth1_macvtap: entered promiscuous mode [ 79.778383][ T3103] veth0_macvtap: entered promiscuous mode [ 79.814243][ T3103] veth1_macvtap: entered promiscuous mode [ 79.838103][ T3102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.840664][ T3102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.841076][ T3102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.841300][ T3102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.954229][ T3103] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.955590][ T3103] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.956679][ T3103] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.957650][ T3103] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.048238][ T31] audit: type=1400 audit(79.970:81): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.065681][ T31] audit: type=1400 audit(79.980:82): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/syzkaller.IEWPle/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.097714][ T31] audit: type=1400 audit(80.020:83): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 80.111096][ T31] audit: type=1400 audit(80.030:84): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/syzkaller.IEWPle/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 80.128324][ T31] audit: type=1400 audit(80.050:85): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/syzkaller.IEWPle/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 80.175037][ T31] audit: type=1400 audit(80.090:86): avc: denied { unmount } for pid=3102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 80.191832][ T31] audit: type=1400 audit(80.110:87): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 80.197066][ T31] audit: type=1400 audit(80.110:88): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="gadgetfs" ino=909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 80.215738][ T31] audit: type=1400 audit(80.120:89): avc: denied { mount } for pid=3102 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.218252][ T31] audit: type=1400 audit(80.120:90): avc: denied { mounton } for pid=3102 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 80.280319][ T3103] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.795122][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.968884][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.974520][ T43] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 80.979656][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.988001][ T43] usb 2-1: config 0 descriptor?? [ 81.138783][ T3808] netlink: 616 bytes leftover after parsing attributes in process `syz.0.5'. [ 81.512914][ T43] hid_mf 0003:0079:1846.0001: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.1-1/input0 [ 81.524586][ T43] hid_mf 0003:0079:1846.0001: Invalid report, this should never happen! [ 81.526454][ T43] hid_mf 0003:0079:1846.0001: Force feedback init failed. [ 81.777774][ T43] usb 2-1: USB disconnect, device number 2 [ 81.792828][ T97] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.995994][ T97] usb 1-1: Using ep0 maxpacket: 8 [ 82.015174][ T3828] netlink: 'syz.1.7': attribute type 5 has an invalid length. [ 82.017819][ T3828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7'. [ 82.031465][ T97] usb 1-1: unable to get BOS descriptor or descriptor too short [ 82.105081][ T97] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 82.109603][ T97] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 82.109809][ T97] usb 1-1: config 4 has no interface number 0 [ 82.118218][ T97] usb 1-1: language id specifier not provided by device, defaulting to English [ 82.207124][ T97] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 82.207454][ T97] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.207743][ T97] usb 1-1: SerialNumber: 쑱炭﷒⠅骾踁倈椷纎፯蛌? [ 82.495622][ T97] usb 1-1: USB disconnect, device number 2 [ 85.314283][ T97] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.486921][ T97] usb 1-1: Using ep0 maxpacket: 32 [ 85.523118][ T97] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.564066][ T97] usb 1-1: config 0 has no interfaces? [ 85.564336][ T97] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 85.564661][ T97] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.608594][ T97] usb 1-1: config 0 descriptor?? [ 85.877964][ T97] usb 1-1: USB disconnect, device number 3 [ 86.572854][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 86.573292][ T31] audit: type=1400 audit(86.490:104): avc: denied { create } for pid=3870 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.588349][ T31] audit: type=1400 audit(86.510:105): avc: denied { write } for pid=3870 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.588849][ T31] audit: type=1400 audit(86.510:106): avc: denied { nlmsg_read } for pid=3870 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.588957][ T3871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 86.945593][ T31] audit: type=1400 audit(86.870:107): avc: denied { allowed } for pid=3827 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.984350][ T31] audit: type=1400 audit(86.900:108): avc: denied { create } for pid=3827 comm="syz.1.7" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 86.985060][ T31] audit: type=1400 audit(86.900:109): avc: denied { map } for pid=3827 comm="syz.1.7" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 86.985376][ T31] audit: type=1400 audit(86.900:110): avc: denied { read write } for pid=3827 comm="syz.1.7" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 87.621194][ T31] audit: type=1400 audit(87.540:111): avc: denied { create } for pid=3827 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.631025][ T3868] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.634778][ T31] audit: type=1400 audit(87.550:112): avc: denied { setopt } for pid=3827 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.658577][ T31] audit: type=1400 audit(87.560:113): avc: denied { setopt } for pid=3827 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.641428][ T97] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.860299][ T97] usb 2-1: Using ep0 maxpacket: 32 [ 89.895899][ T97] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 89.896338][ T97] usb 2-1: config 0 has no interface number 0 [ 89.896637][ T97] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.896856][ T97] usb 2-1: config 0 interface 85 has no altsetting 0 [ 89.917996][ T97] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 89.918337][ T97] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.918419][ T97] usb 2-1: Product: syz [ 89.918534][ T97] usb 2-1: Manufacturer: syz [ 89.918603][ T97] usb 2-1: SerialNumber: syz [ 89.925339][ T97] usb 2-1: config 0 descriptor?? [ 90.630532][ T97] appletouch 2-1:0.85: Geyser mode initialized. [ 90.644589][ T97] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input3 [ 90.837074][ T45] usb 2-1: USB disconnect, device number 3 [ 90.853122][ T45] appletouch 2-1:0.85: input: appletouch disconnected [ 91.245253][ T3905] Zero length message leads to an empty skb [ 92.269031][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 92.269448][ T31] audit: type=1400 audit(92.190:115): avc: denied { create } for pid=3913 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.285357][ T31] audit: type=1400 audit(92.200:116): avc: denied { getopt } for pid=3913 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.054058][ T31] audit: type=1400 audit(92.970:117): avc: denied { name_bind } for pid=3919 comm="syz.1.29" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 93.060704][ T31] audit: type=1400 audit(92.980:118): avc: denied { node_bind } for pid=3919 comm="syz.1.29" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 94.146041][ T2889] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.462265][ T2889] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 94.462791][ T2889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.471857][ T2889] usb 1-1: config 0 descriptor?? [ 95.104068][ T31] audit: type=1400 audit(95.010:119): avc: denied { map } for pid=3936 comm="syz.1.32" path="/dev/usbmon0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.269560][ T31] audit: type=1400 audit(95.180:120): avc: denied { create } for pid=3936 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 95.368051][ T31] audit: type=1400 audit(95.270:121): avc: denied { bind } for pid=3936 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 95.766340][ T31] audit: type=1400 audit(95.690:122): avc: denied { getopt } for pid=3939 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.752963][ T3792] usb 1-1: USB disconnect, device number 4 [ 106.104634][ T95] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.273901][ T95] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.278480][ T95] usb 1-1: config 6 has an invalid interface number: 200 but max is 0 [ 106.281178][ T95] usb 1-1: config 6 has no interface number 0 [ 106.283287][ T95] usb 1-1: config 6 interface 200 has no altsetting 0 [ 106.291982][ T95] usb 1-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 106.293114][ T95] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.294502][ T95] usb 1-1: Product: syz [ 106.295327][ T95] usb 1-1: Manufacturer: syz [ 106.296105][ T95] usb 1-1: SerialNumber: syz [ 109.218291][ T3977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.40'. [ 109.794627][ T95] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.944116][ T95] usb 2-1: Using ep0 maxpacket: 32 [ 109.948688][ T95] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 109.952005][ T95] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 109.954355][ T95] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 109.955772][ T95] usb 2-1: config 1 has no interface number 0 [ 109.956697][ T95] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.958288][ T95] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 109.959534][ T95] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 109.960425][ T95] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.997951][ T95] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 113.725810][ T95] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 113.961993][ T43] usb 2-1: USB disconnect, device number 4 [ 113.972834][ T43] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 114.076141][ T31] audit: type=1400 audit(113.990:123): avc: denied { read } for pid=4005 comm="syz.1.45" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.079612][ T31] audit: type=1400 audit(114.000:124): avc: denied { open } for pid=4005 comm="syz.1.45" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.100381][ T31] audit: type=1400 audit(114.020:125): avc: denied { ioctl } for pid=4005 comm="syz.1.45" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x6205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.290413][ T31] audit: type=1400 audit(114.210:126): avc: denied { map_create } for pid=4009 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 114.297414][ T31] audit: type=1400 audit(114.220:127): avc: denied { map_read map_write } for pid=4009 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 114.781968][ T4013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 115.654819][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.976052][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 115.985414][ T45] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 115.985971][ T45] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 115.986049][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 115.986094][ T45] usb 2-1: config 1 has no interface number 0 [ 115.986161][ T45] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.986211][ T45] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 115.986348][ T45] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 115.986400][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.117091][ T45] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 117.096574][ T43] usb 1-1: USB disconnect, device number 5 [ 117.984294][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 118.144528][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 118.238853][ T9] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 118.240900][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 118.242535][ T9] usb 1-1: Product: syz [ 118.244280][ T9] usb 1-1: Manufacturer: syz [ 118.245454][ T9] usb 1-1: SerialNumber: syz [ 118.257935][ T9] usb 1-1: config 0 descriptor?? [ 119.245090][ T9] usb 1-1: USB disconnect, device number 6 [ 120.304686][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 120.474747][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 120.489603][ T9] usb 1-1: config 0 has an invalid interface number: 24 but max is 0 [ 120.494329][ T9] usb 1-1: config 0 has no interface number 0 [ 120.498468][ T9] usb 1-1: config 0 interface 24 altsetting 0 endpoint 0x1 has invalid maxpacket 511, setting to 64 [ 120.533220][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice= c.8a [ 120.535740][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.537575][ T9] usb 1-1: Product: syz [ 120.538844][ T9] usb 1-1: Manufacturer: syz [ 120.539844][ T9] usb 1-1: SerialNumber: syz [ 120.555563][ T9] usb 1-1: config 0 descriptor?? [ 120.817090][ T95] usb 1-1: USB disconnect, device number 7 [ 120.827816][ T95] ------------[ cut here ]------------ [ 120.828470][ T95] WARNING: CPU: 0 PID: 95 at lib/refcount.c:28 refcount_warn_saturate+0x13c/0x174 [ 120.830411][ T95] refcount_t: underflow; use-after-free. [ 120.832576][ T95] Modules linked in: [ 120.835277][ T95] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 120.836762][ T95] CPU: 0 UID: 0 PID: 95 Comm: kworker/0:2 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT [ 120.837735][ T95] Hardware name: ARM-Versatile Express [ 120.838702][ T95] Workqueue: usb_hub_wq hub_event [ 120.839920][ T95] Call trace: [ 120.840817][ T95] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 120.842350][ T95] r7:00000000 r6:8282083c r5:00000000 r4:8225b554 [ 120.843372][ T95] [<80201ae4>] (show_stack) from [<8021fdf4>] (dump_stack_lvl+0x54/0x7c) [ 120.843966][ T95] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 120.844947][ T95] r5:00000000 r4:82a6dd18 [ 120.845242][ T95] [<8021fe1c>] (dump_stack) from [<80202614>] (panic+0x120/0x374) [ 120.846094][ T95] [<802024f4>] (panic) from [<80258578>] (get_taint+0x0/0x1c) [ 120.846735][ T95] r3:8280c684 r2:00000001 r1:8224209c r0:82249a34 [ 120.847400][ T95] r7:808b9934 [ 120.847859][ T95] [<80258504>] (check_panic_on_warn) from [<802586dc>] (__warn+0x80/0x188) [ 120.848622][ T95] [<8025865c>] (__warn) from [<802589cc>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 120.849852][ T95] r8:00000009 r7:822b35d8 r6:df959bfc r5:838a0000 r4:00000000 [ 120.850980][ T95] [<802587e8>] (warn_slowpath_fmt) from [<808b9934>] (refcount_warn_saturate+0x13c/0x174) [ 120.852105][ T95] r10:00000100 r9:829caa68 r8:85ce8488 r7:85ceb474 r6:8484d7b4 r5:85ceb400 [ 120.853031][ T95] r4:858a9a00 [ 120.853225][ T95] [<808b97f8>] (refcount_warn_saturate) from [<819fe3c8>] (kobject_put+0x158/0x1f4) [ 120.853695][ T95] [<819fe270>] (kobject_put) from [<80b2a408>] (put_device+0x18/0x1c) [ 120.854251][ T95] r7:85ceb474 r6:8484d7b4 r5:85ceb400 r4:8484d000 [ 120.855033][ T95] [<80b2a3f0>] (put_device) from [<8141c95c>] (hdm_disconnect+0x90/0x9c) [ 120.855558][ T95] [<8141c8cc>] (hdm_disconnect) from [<80e86c5c>] (usb_unbind_interface+0x84/0x2b4) [ 120.855998][ T95] r7:85ceb474 r6:85ceb430 r5:00000000 r4:85ce8400 [ 120.856276][ T95] [<80e86bd8>] (usb_unbind_interface) from [<80b32490>] (device_remove+0x64/0x6c) [ 120.856779][ T95] r10:00000100 r9:85ce8488 r8:00000044 r7:85ceb474 r6:829caa68 r5:00000000 [ 120.857141][ T95] r4:85ceb430 [ 120.857392][ T95] [<80b3242c>] (device_remove) from [<80b33980>] (device_release_driver_internal+0x18c/0x200) [ 120.857810][ T95] r5:00000000 r4:85ceb430 [ 120.858006][ T95] [<80b337f4>] (device_release_driver_internal) from [<80b33a0c>] (device_release_driver+0x18/0x1c) [ 120.858456][ T95] r9:85ce8488 r8:833b7140 r7:833b7138 r6:833b710c r5:85ceb430 r4:833b7130 [ 120.858809][ T95] [<80b339f4>] (device_release_driver) from [<80b31ae4>] (bus_remove_device+0xcc/0x120) [ 120.859623][ T95] [<80b31a18>] (bus_remove_device) from [<80b2be40>] (device_del+0x148/0x38c) [ 120.860366][ T95] r9:85ce8488 r8:838a0000 r7:04208060 r6:00000000 r5:85ceb430 r4:85ceb474 [ 120.860865][ T95] [<80b2bcf8>] (device_del) from [<80e846ac>] (usb_disable_device+0xd4/0x1e8) [ 120.862551][ T95] r10:00000100 r9:00000000 r8:00000000 r7:85ceb400 r6:85ce8400 r5:85e25308 [ 120.863043][ T95] r4:00000002 [ 120.863209][ T95] [<80e845d8>] (usb_disable_device) from [<80e793bc>] (usb_disconnect+0xec/0x2ac) [ 120.864649][ T95] r9:858a9600 r8:85ce84cc r7:83f86800 r6:85ce8488 r5:85ce8400 r4:60000013 [ 120.865355][ T95] [<80e792d0>] (usb_disconnect) from [<80e7c3b0>] (hub_event+0x1194/0x1950) [ 120.866267][ T95] r10:00000100 r9:83f5012c r8:83f86000 r7:85ce8400 r6:83e1ba00 r5:00000001 [ 120.867301][ T95] r4:00000001 [ 120.867769][ T95] [<80e7b21c>] (hub_event) from [<8027e2a8>] (process_one_work+0x1b4/0x4f4) [ 120.868794][ T95] r10:833b7370 r9:832e5605 r8:838a0000 r7:dddced40 r6:832e5600 r5:83f5012c [ 120.869599][ T95] r4:83930080 [ 120.869915][ T95] [<8027e0f4>] (process_one_work) from [<8027eef0>] (worker_thread+0x1fc/0x3d8) [ 120.871056][ T95] r10:61c88647 r9:838a0000 r8:839300ac r7:82804d40 r6:dddced40 r5:dddced60 [ 120.872051][ T95] r4:83930080 [ 120.872230][ T95] [<8027ecf4>] (worker_thread) from [<80285f1c>] (kthread+0x12c/0x280) [ 120.872634][ T95] r10:00000000 r9:83930080 r8:8027ecf4 r7:df83de60 r6:833f6b80 r5:838a0000 [ 120.872986][ T95] r4:00000001 [ 120.873176][ T95] [<80285df0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 120.873669][ T95] Exception stack(0xdf959fb0 to 0xdf959ff8) [ 120.874152][ T95] 9fa0: 00000000 00000000 00000000 00000000 [ 120.874631][ T95] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 120.875075][ T95] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 120.875696][ T95] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80285df0 [ 120.876768][ T95] r4:8392ce00 [ 120.880033][ T95] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:03:30 Registers: info registers vcpu 0 CPU#0 R00=841f1840 R01=0000005b R02=eb82b000 R03=eb82b018 R04=8389800e R05=841f1840 R06=80a6a940 R07=83898029 R08=82828458 R09=00000000 R10=000003fc R11=df959974 R12=00000002 R13=df959968 R14=8295a27c R15=80a6a950 PSR=80000093 N--- A S svc32 s00=69766564 s01=6e206563 d00=6e20656369766564 s02=7250202c s03=6375646f d01=6375646f7250202c s04=7375205d s05=2d322062 d02=2d3220627375205d s06=4e203a31 s07=55207765 d03=552077654e203a31 s08=64204253 s09=63697665 d04=6369766564204253 s10=74732065 s11=676e6972 d05=676e697274732065 s12=4d203a73 s13=303d7266 d06=303d72664d203a73 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=dddda3c8 R01=00000000 R02=ffffffe3 R03=1e73f480 R04=dddda000 R05=00000001 R06=dddda000 R07=00000001 R08=dddda130 R09=00000000 R10=84b2c800 R11=df805e0c R12=df805e10 R13=df805df8 R14=81a30790 R15=808cf50c PSR=20000193 --C- A S svc32 s00=6e72656b s01=203a6c65 d00=203a6c656e72656b s02=3120205b s03=382e3032 d01=382e30323120205b s04=39303731 s05=205b5d30 d02=205b5d3039303731 s06=39542020 s07=75205d35 d03=75205d3539542020 s08=31206273 s09=203a312d d04=203a312d31206273 s10=20425355 s11=63736964 d05=6373696420425355 s12=656e6e6f s13=202c7463 d06=202c7463656e6e6f s14=69766564 s15=6e206563 d07=6e20656369766564 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000