last executing test programs: 40.612400101s ago: executing program 1 (id=48): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0xe, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB='@\t#'], 0x0}, 0x0) 39.230242046s ago: executing program 1 (id=49): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) close_range(r4, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x13) 33.531203676s ago: executing program 1 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf250b000000080002000000000030000680060005004e230000080006001400000008000700", @ANYRES32, @ANYBLOB="1400040000000000000000000000ffff7f00000108000400070000003c000180"], 0xf0}, 0x1, 0x0, 0x0, 0x20000080}, 0x804) 28.701019587s ago: executing program 0 (id=52): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 24.420350897s ago: executing program 1 (id=53): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000100)={0x40, 0x10, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.180119722s ago: executing program 0 (id=54): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0xa0700000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000340)='statm\x00') pread64(r2, &(0x7f0000000100)=""/13, 0xd, 0x9) 15.809558885s ago: executing program 0 (id=55): mkdirat(0xffffffffffffff9c, 0x0, 0xe0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x3, 0x4, 0x7d, 0x2, @vifc_lcl_addr=@private=0xa010102, @multicast2}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 15.631498248s ago: executing program 0 (id=56): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000d40)="0b036c00e0ff64000200475400f6a13bb10000000800884848030054dcca7753c1cee40a7f0ad8a7de42ae207a5afeca4af98b3c530ceba536f3a9deac1dd2c382c8e207cbecf1af38ea934a4e0ee17f714b33fdf7a1fdab084546448b8badc4d1559b2cc509d1359e468056cb4785616853c8bb78b4", 0x76, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 15.56148634s ago: executing program 0 (id=57): syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 13.700717983s ago: executing program 1 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.982941566s ago: executing program 1 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r3, &(0x7f0000004400), 0x3fffffffffffff2, 0x6000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) 0s ago: executing program 0 (id=60): ptrace$setregs(0xd, 0x0, 0x4, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = fsopen(0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x20006004) r4 = openat$cgroup_procs(r2, 0x0, 0x2, 0x0) pread64(r4, 0x0, 0x0, 0x800000000004) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f27, 0x1f, 0x10000, 0x4, 0x3, 0xcc7, 0x4, 0x80008, 0xe, 0x6, 0x2, 0x1, 0x7, 0x1, 0x6, 0x10000105, 0x0, 0x1a44d, 0x3, 0x3fff7fff, 0x89, 0x10, 0x1, 0x20001e58, 0x80000b, 0xe69, 0x3c, 0x8, 0x6, 0xffffffff, 0xeffffff8]}) kernel console output (not intermixed with test programs): [ 47.482718][ T29] audit: type=1400 audit(47.400:56): avc: denied { read write } for pid=3088 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.486630][ T29] audit: type=1400 audit(47.410:57): avc: denied { open } for pid=3088 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:62847' (ED25519) to the list of known hosts. [ 61.333202][ T29] audit: type=1400 audit(61.250:58): avc: denied { name_bind } for pid=3091 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 63.042146][ T29] audit: type=1400 audit(62.960:59): avc: denied { execute } for pid=3092 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 63.105933][ T29] audit: type=1400 audit(62.980:60): avc: denied { execute_no_trans } for pid=3092 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 65.969100][ T29] audit: type=1400 audit(65.890:61): avc: denied { mounton } for pid=3092 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.977882][ T29] audit: type=1400 audit(65.900:62): avc: denied { mount } for pid=3092 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.996005][ T3092] cgroup: Unknown subsys name 'net' [ 66.004306][ T29] audit: type=1400 audit(65.920:63): avc: denied { unmount } for pid=3092 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.147282][ T3092] cgroup: Unknown subsys name 'cpuset' [ 66.153189][ T3092] cgroup: Unknown subsys name 'hugetlb' [ 66.157031][ T3092] cgroup: Unknown subsys name 'rlimit' [ 66.351993][ T29] audit: type=1400 audit(66.270:64): avc: denied { setattr } for pid=3092 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.357483][ T29] audit: type=1400 audit(66.270:65): avc: denied { mounton } for pid=3092 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.357907][ T29] audit: type=1400 audit(66.280:66): avc: denied { mount } for pid=3092 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.551306][ T3094] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 66.553720][ T29] audit: type=1400 audit(66.470:67): avc: denied { relabelto } for pid=3094 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.561468][ T29] audit: type=1400 audit(66.480:68): avc: denied { write } for pid=3094 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 66.595604][ T29] audit: type=1400 audit(66.510:69): avc: denied { read } for pid=3092 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.597909][ T29] audit: type=1400 audit(66.520:70): avc: denied { open } for pid=3092 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 74.143514][ T3092] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.844167][ T29] audit: type=1400 audit(75.760:71): avc: denied { execmem } for pid=3095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 75.906624][ T29] audit: type=1400 audit(75.820:72): avc: denied { read } for pid=3097 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 75.911136][ T29] audit: type=1400 audit(75.830:73): avc: denied { open } for pid=3097 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 75.925928][ T29] audit: type=1400 audit(75.830:74): avc: denied { mounton } for pid=3097 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 75.940406][ T29] audit: type=1400 audit(75.860:75): avc: denied { module_request } for pid=3098 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 75.940747][ T29] audit: type=1400 audit(75.860:76): avc: denied { module_request } for pid=3097 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 76.024584][ T29] audit: type=1400 audit(75.940:77): avc: denied { sys_module } for pid=3098 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 76.690852][ T29] audit: type=1400 audit(76.610:78): avc: denied { ioctl } for pid=3098 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=676 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.664754][ T3098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.674555][ T3098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.872027][ T3097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.881312][ T3097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.578765][ T3098] hsr_slave_0: entered promiscuous mode [ 78.580944][ T3098] hsr_slave_1: entered promiscuous mode [ 78.846643][ T3097] hsr_slave_0: entered promiscuous mode [ 78.852482][ T3097] hsr_slave_1: entered promiscuous mode [ 78.854524][ T3097] debugfs: 'hsr0' already exists in 'hsr' [ 78.856102][ T3097] Cannot create hsr debugfs directory [ 79.087558][ T29] audit: type=1400 audit(79.000:79): avc: denied { create } for pid=3098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.089903][ T29] audit: type=1400 audit(79.010:80): avc: denied { write } for pid=3098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.104791][ T3098] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.127653][ T3098] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.142995][ T3098] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.161155][ T3098] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.317998][ T3097] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.324621][ T3097] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.333893][ T3097] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.342715][ T3097] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.681058][ T3098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.036647][ T3097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.322494][ T3098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.096395][ T3097] veth0_vlan: entered promiscuous mode [ 82.114390][ T3097] veth1_vlan: entered promiscuous mode [ 82.162087][ T3097] veth0_macvtap: entered promiscuous mode [ 82.172545][ T3097] veth1_macvtap: entered promiscuous mode [ 82.222850][ T54] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.223982][ T54] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.227470][ T54] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.229269][ T54] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.348787][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 82.349204][ T29] audit: type=1400 audit(82.270:82): avc: denied { mount } for pid=3097 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.366080][ T29] audit: type=1400 audit(82.270:83): avc: denied { mounton } for pid=3097 comm="syz-executor" path="/syzkaller.6ZObdb/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 82.366397][ T29] audit: type=1400 audit(82.280:84): avc: denied { mount } for pid=3097 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 82.375512][ T29] audit: type=1400 audit(82.290:85): avc: denied { mounton } for pid=3097 comm="syz-executor" path="/syzkaller.6ZObdb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 82.378644][ T29] audit: type=1400 audit(82.300:86): avc: denied { mounton } for pid=3097 comm="syz-executor" path="/syzkaller.6ZObdb/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 82.402721][ T29] audit: type=1400 audit(82.320:87): avc: denied { unmount } for pid=3097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 82.414806][ T29] audit: type=1400 audit(82.330:88): avc: denied { mounton } for pid=3097 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 82.417896][ T3098] veth0_vlan: entered promiscuous mode [ 82.419020][ T29] audit: type=1400 audit(82.340:89): avc: denied { mount } for pid=3097 comm="syz-executor" name="/" dev="gadgetfs" ino=2262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 82.424443][ T29] audit: type=1400 audit(82.340:90): avc: denied { mount } for pid=3097 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 82.428049][ T29] audit: type=1400 audit(82.350:91): avc: denied { mounton } for pid=3097 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 82.442148][ T3098] veth1_vlan: entered promiscuous mode [ 82.487625][ T3097] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.564561][ T3098] veth0_macvtap: entered promiscuous mode [ 82.580540][ T3098] veth1_macvtap: entered promiscuous mode [ 82.660807][ T1259] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.661156][ T1259] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.661473][ T1259] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.661562][ T1259] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.880626][ T3810] process 'syz.1.7' launched '/dev/fd/4' with NULL argv: empty string added [ 84.770570][ T3820] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 85.550277][ T3833] dns_resolver: Unsupported server list version (0) [ 86.230870][ T3840] netlink: 'syz.1.16': attribute type 10 has an invalid length. [ 87.020097][ T3846] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18'. [ 87.610757][ T3870] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.677739][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 87.678212][ T29] audit: type=1400 audit(87.550:121): avc: denied { ioctl } for pid=3869 comm="syz.1.20" path="socket:[2393]" dev="sockfs" ino=2393 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.681888][ T3870] Zero length message leads to an empty skb [ 91.894458][ T3874] ptrace attach of "/syz-executor exec"[3098] was attempted by " [ 97.279421][ T29] audit: type=1400 audit(97.200:122): avc: denied { setopt } for pid=3875 comm="syz.0.22" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.289146][ T29] audit: type=1400 audit(97.210:123): avc: denied { bind } for pid=3875 comm="syz.0.22" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.292438][ T29] audit: type=1400 audit(97.210:124): avc: denied { name_bind } for pid=3875 comm="syz.0.22" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 97.294923][ T29] audit: type=1400 audit(97.210:125): avc: denied { node_bind } for pid=3875 comm="syz.0.22" saddr=fec0:ffff::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 99.599656][ T29] audit: type=1400 audit(99.520:126): avc: denied { bind } for pid=3884 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.604239][ T29] audit: type=1400 audit(99.520:127): avc: denied { write } for pid=3884 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.296846][ T3889] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.435009][ T3889] *** NOT YET: opcode db *** [ 100.459064][ T29] audit: type=1400 audit(100.370:128): avc: denied { accept } for pid=3886 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 100.556966][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.756963][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 100.773169][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 100.774026][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 100.798088][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 100.798701][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.801045][ T43] usb 2-1: Product: syz [ 100.802635][ T43] usb 2-1: Manufacturer: syz [ 100.804057][ T43] usb 2-1: SerialNumber: syz [ 100.810376][ T43] usb 2-1: config 0 descriptor?? [ 102.598713][ T3904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.30'. [ 111.083929][ T43] usb 2-1: USB disconnect, device number 2 [ 111.924097][ T3919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.33'. [ 112.235990][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.386322][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 112.399035][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 112.399373][ T9] usb 2-1: config 0 has no interface number 0 [ 112.411825][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=72.08 [ 112.413345][ T9] usb 2-1: New USB device strings: Mfr=198, Product=120, SerialNumber=3 [ 112.413459][ T9] usb 2-1: Product: syz [ 112.413491][ T9] usb 2-1: Manufacturer: syz [ 112.413522][ T9] usb 2-1: SerialNumber: syz [ 112.417703][ T9] usb 2-1: config 0 descriptor?? [ 112.629656][ T29] audit: type=1400 audit(112.550:129): avc: denied { append } for pid=3920 comm="syz.1.34" name="i2c-1" dev="devtmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.345754][ C1] hrtimer: interrupt took 577712 ns [ 120.336105][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.505938][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 120.514450][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.514960][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.516058][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.516169][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.516268][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.516314][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.728844][ T10] usb 2-1: USB disconnect, device number 3 [ 120.744107][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 120.744430][ T9] usbtmc 1-1:16.0: can't read capabilities [ 120.823934][ T3953] syzkaller0: entered promiscuous mode [ 120.824385][ T3953] syzkaller0: entered allmulticast mode [ 120.837183][ T29] audit: type=1400 audit(120.750:130): avc: denied { write } for pid=3952 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.962223][ T41] usb 1-1: USB disconnect, device number 2 [ 121.030388][ T29] audit: type=1400 audit(120.950:131): avc: denied { create } for pid=3968 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.036179][ T29] audit: type=1400 audit(120.950:132): avc: denied { write } for pid=3968 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.125502][ T29] audit: type=1400 audit(121.040:133): avc: denied { create } for pid=3973 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.197803][ T29] audit: type=1400 audit(121.120:134): avc: denied { wake_alarm } for pid=3976 comm="syz.1.43" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 124.925489][ T29] audit: type=1400 audit(124.840:135): avc: denied { map } for pid=3987 comm="syz.1.47" path="socket:[3331]" dev="sockfs" ino=3331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.925837][ T29] audit: type=1400 audit(124.840:136): avc: denied { read } for pid=3987 comm="syz.1.47" path="socket:[3331]" dev="sockfs" ino=3331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.953715][ T3988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 125.555984][ T702] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.715670][ T702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.716001][ T702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.716395][ T702] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 125.716507][ T702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.729548][ T702] usb 2-1: config 0 descriptor?? [ 126.203120][ T702] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 126.203726][ T702] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 126.203867][ T702] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 126.203969][ T702] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 126.204069][ T702] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 126.204167][ T702] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 126.204344][ T702] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 126.227040][ T702] prodikeys 0003:041E:2801.0001: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input0 [ 126.443724][ T3046] usb 2-1: USB disconnect, device number 4 [ 130.391125][ T29] audit: type=1400 audit(130.310:137): avc: denied { map } for pid=4015 comm="syz.1.49" path="/dev/dri/card0" dev="devtmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.393225][ T29] audit: type=1400 audit(130.310:138): avc: denied { execute } for pid=4015 comm="syz.1.49" path="/dev/dri/card0" dev="devtmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.589475][ T4022] netlink: 56 bytes leftover after parsing attributes in process `syz.1.50'. [ 133.591316][ T4022] netlink: 96 bytes leftover after parsing attributes in process `syz.1.50'. [ 141.586626][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 141.735689][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 141.756137][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 141.756450][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.756858][ T10] usb 2-1: Product: syz [ 141.756911][ T10] usb 2-1: Manufacturer: syz [ 141.756943][ T10] usb 2-1: SerialNumber: syz [ 141.760580][ T10] usb 2-1: config 0 descriptor?? [ 148.602982][ T29] audit: type=1400 audit(148.520:139): avc: denied { mounton } for pid=4039 comm="syz.0.54" path="/proc/56/task" dev="proc" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 149.967101][ T4045] dvmrp6: entered allmulticast mode [ 149.980456][ T4045] pimreg: entered allmulticast mode [ 149.990653][ T4044] pimreg: left allmulticast mode [ 150.445903][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 150.603815][ T10] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 150.604272][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 150.617021][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 150.617335][ T10] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 150.617826][ T10] usb 1-1: Product: syz [ 150.617891][ T10] usb 1-1: Manufacturer: syz [ 150.617982][ T10] usb 1-1: SerialNumber: syz [ 150.622387][ T10] usb 1-1: config 0 descriptor?? [ 150.640255][ T10] usb 1-1: selecting invalid altsetting 0 [ 151.991583][ T41] usb 2-1: USB disconnect, device number 5 [ 163.181732][ T29] audit: type=1400 audit(163.100:140): avc: denied { create } for pid=4085 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 163.192804][ T29] audit: type=1400 audit(163.110:141): avc: denied { read } for pid=4085 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 165.247907][ T3046] usb 1-1: USB disconnect, device number 3 [ 166.136104][ T4103] genirq: Flags mismatch irq 31. 00200001 (comedi_parport) vs. 00200081 (virtio0) [ 166.137432][ T4103] 8<--- cut here --- [ 166.137551][ T4103] Unable to handle kernel paging request at virtual address fee04f27 when write [ 166.137694][ T4103] [fee04f27] *pgd=80000080007003, *pmd=00000000 [ 166.138613][ T4103] Internal error: Oops: a06 [#1] SMP ARM [ 166.141358][ T4103] Modules linked in: [ 166.142324][ T4103] CPU: 0 UID: 0 PID: 4103 Comm: syz.0.60 Not tainted syzkaller #0 PREEMPT [ 166.142845][ T4103] Hardware name: ARM-Versatile Express [ 166.143579][ T4103] PC is at parport_attach+0x174/0x1d0 [ 166.145467][ T4103] LR is at parport_attach+0x164/0x1d0 [ 166.145906][ T4103] pc : [<813cee98>] lr : [<813cee88>] psr: 60000113 [ 166.148652][ T4103] sp : dfbc5d30 ip : dfbc5d30 fp : dfbc5d54 [ 166.154370][ T4103] r10: 82b25910 r9 : 00000003 r8 : 840fe600 [ 166.155564][ T4103] r7 : dfbc5d90 r6 : 840fe600 r5 : 00000000 r4 : 00000000 [ 166.155916][ T4103] r3 : fee04f27 r2 : 81e1777c r1 : 00000001 r0 : 813ceb08 [ 166.156622][ T4103] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 166.156987][ T4103] Control: 30c5387d Table: 84946080 DAC: fffffffd [ 166.157311][ T4103] Register r0 information: non-slab/vmalloc memory [ 166.158181][ T4103] Register r1 information: non-paged memory [ 166.158480][ T4103] Register r2 information: non-slab/vmalloc memory [ 166.158753][ T4103] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 166.159323][ T4103] Register r4 information: NULL pointer [ 166.159577][ T4103] Register r5 information: NULL pointer [ 166.159901][ T4103] Register r6 information: slab kmalloc-192 start 840fe600 pointer offset 0 size 192 [ 166.160934][ T4103] Register r7 information: 2-page vmalloc region starting at 0xdfbc4000 allocated at kernel_clone+0xac/0x3ec [ 166.161430][ T4103] Register r8 information: slab kmalloc-192 start 840fe600 pointer offset 0 size 192 [ 166.161883][ T4103] Register r9 information: non-paged memory [ 166.162137][ T4103] Register r10 information: non-slab/vmalloc memory [ 166.162414][ T4103] Register r11 information: 2-page vmalloc region starting at 0xdfbc4000 allocated at kernel_clone+0xac/0x3ec [ 166.162842][ T4103] Register r12 information: 2-page vmalloc region starting at 0xdfbc4000 allocated at kernel_clone+0xac/0x3ec [ 166.163432][ T4103] Process syz.0.60 (pid: 4103, stack limit = 0xdfbc4000) [ 166.163820][ T4103] Stack: (0xdfbc5d30 to 0xdfbc6000) [ 166.164195][ T4103] 5d20: 823f1658 840fe600 829d1c34 829d1c34 [ 166.164568][ T4103] 5d40: 81e17c3c 840fe644 dfbc5d8c dfbc5d58 813caf24 813ced30 200000c0 00000000 [ 166.164927][ T4103] 5d60: dfbc5d7c 200000c0 840fe600 b5403587 200000c0 85190c00 40946400 00000003 [ 166.165669][ T4103] 5d80: dfbc5e4c dfbc5d90 813c6a70 813cae28 656d6f63 705f6964 6f707261 00007472 [ 166.166469][ T4103] 5da0: 00000000 00004f27 0000001f 00010000 00000004 00000003 00000cc7 00000004 [ 166.169727][ T4103] 5dc0: 00080008 0000000e 00000006 00000002 00000001 00000007 00000001 00000006 [ 166.175209][ T4103] 5de0: 10000105 00000000 0001a44d 00000003 3fff7fff 00000089 00000010 00000001 [ 166.175628][ T4103] 5e00: 20001e58 0080000b 00000e69 0000003c 00000008 00000006 ffffffff effffff8 [ 166.179490][ T4103] 5e20: 00000000 72dcda81 00000000 848e7000 840fe600 200000c0 200000c0 85190c00 [ 166.185280][ T4103] 5e40: dfbc5f14 dfbc5e50 813c7a3c 813c697c 00000000 00000000 00000000 72dcda81 [ 166.185893][ T4103] 5e60: 00000000 00000000 824625b4 0000005f 83e4ac28 840fe630 84125e64 85190c00 [ 166.186356][ T4103] 5e80: dfbc5ee4 dfbc5e90 807a7a38 8079e184 00000064 00000001 00000000 dfbc5eac [ 166.186721][ T4103] 5ea0: 853ee610 834e22a8 00006400 0000000b dfbc5ea0 00000000 00000000 72dcda81 [ 166.187049][ T4103] 5ec0: 848e7000 40946400 200000c0 200000c0 848e7000 00000003 dfbc5ef4 dfbc5ee8 [ 166.187343][ T4103] 5ee0: 807a7b58 72dcda81 dfbc5f14 40946400 00000000 848e7001 200000c0 848e7000 [ 166.187642][ T4103] 5f00: 00000003 85190c00 dfbc5fa4 dfbc5f18 80578ef0 813c746c ecac8b10 85190c00 [ 166.187945][ T4103] 5f20: dfbc5f3c dfbc5f30 81a618a0 81a61770 dfbc5f54 dfbc5f40 8025c484 8028d914 [ 166.188258][ T4103] 5f40: dfbc5fb0 40000000 dfbc5f84 dfbc5f58 802229ec 8025c440 00000000 8281cfb4 [ 166.188609][ T4103] 5f60: dfbc5fb0 0014ced0 ecac8b10 80222940 00000000 72dcda81 dfbc5fac 00000000 [ 166.188947][ T4103] 5f80: 00000000 00316308 00000036 8020029c 85190c00 00000036 00000000 dfbc5fa8 [ 166.189275][ T4103] 5fa0: 80200060 80578dcc 00000000 00000000 00000003 40946400 200000c0 00000000 [ 166.189623][ T4103] 5fc0: 00000000 00000000 00316308 00000036 00300000 00000000 00006364 76f780bc [ 166.189948][ T4103] 5fe0: 76f77ec0 76f77eb0 00019294 00132970 60000010 00000003 00000000 00000000 [ 166.190380][ T4103] Call trace: [ 166.190841][ T4103] [<813ced24>] (parport_attach) from [<813caf24>] (comedi_device_attach+0x108/0x250) [ 166.191526][ T4103] r6:840fe644 r5:81e17c3c r4:829d1c34 [ 166.191836][ T4103] [<813cae1c>] (comedi_device_attach) from [<813c6a70>] (do_devconfig_ioctl+0x100/0x220) [ 166.192264][ T4103] r10:00000003 r9:40946400 r8:85190c00 r7:200000c0 r6:b5403587 r5:840fe600 [ 166.192648][ T4103] r4:200000c0 [ 166.192914][ T4103] [<813c6970>] (do_devconfig_ioctl) from [<813c7a3c>] (comedi_unlocked_ioctl+0x5dc/0x1c50) [ 166.193315][ T4103] r8:85190c00 r7:200000c0 r6:200000c0 r5:840fe600 r4:848e7000 [ 166.193642][ T4103] [<813c7460>] (comedi_unlocked_ioctl) from [<80578ef0>] (sys_ioctl+0x130/0xba0) [ 166.194074][ T4103] r10:85190c00 r9:00000003 r8:848e7000 r7:200000c0 r6:848e7001 r5:00000000 [ 166.194422][ T4103] r4:40946400 [ 166.194588][ T4103] [<80578dc0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 166.194957][ T4103] Exception stack(0xdfbc5fa8 to 0xdfbc5ff0) [ 166.195589][ T4103] 5fa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 166.195956][ T4103] 5fc0: 00000000 00000000 00316308 00000036 00300000 00000000 00006364 76f780bc [ 166.196625][ T4103] 5fe0: 76f77ec0 76f77eb0 00019294 00132970 [ 166.196943][ T4103] r10:00000036 r9:85190c00 r8:8020029c r7:00000036 r6:00316308 r5:00000000 [ 166.197224][ T4103] r4:00000000 [ 166.197648][ T4103] Code: e596306c e3a04000 e7f33053 e2433612 (e5c34000) [ 166.198233][ T4103] ---[ end trace 0000000000000000 ]--- [ 166.199009][ T4103] Kernel panic - not syncing: Fatal exception [ 166.205842][ T4103] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:58:19 Registers: info registers vcpu 0 CPU#0 R00=dfbc571a R01=813cee98 R02=00000000 R03=00000001 R04=dfbc5acd R05=dfbc5acc R06=8223a9a3 R07=813cee98 R08=dfbc5a34 R09=8223a9a3 R10=00000004 R11=dfbc5704 R12=dfbc5708 R13=dfbc56f8 R14=80350230 R15=803500d4 PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=84c11040 R01=8155b08c R02=dfb89ccc R03=81a6e8b0 R04=00000000 R05=dfb89bd4 R06=81a6ddc0 R07=84c110d4 R08=00000002 R09=dfb89cc4 R10=84c110c8 R11=dfb89c4c R12=00000000 R13=dfb89c90 R14=8183adc0 R15=815731a4 PSR=60000113 -ZC- A S svc32 s00=fff79e08 s01=00011fff d00=00011ffffff79e08 s02=ffffffff s03=00000001 d01=00000001ffffffff s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=0170a600 s09=06100606 d04=061006060170a600 s10=06000000 s11=00000810 d05=0000081006000000 s12=0c800200 s13=0c010d94 d06=0c010d940c800200 s14=00040806 s15=08000100 d07=0800010000040806 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=0c880300 s33=01c70800 d16=01c708000c880300 s34=000c9003 s35=a0030010 d17=a0030010000c9003 s36=1280040c s37=08128003 d18=081280031280040c s38=ffffffef s39=ffffffff d19=ffffffffffffffef s40=2f2e01ff s41=656c6966 d20=656c69662f2e01ff s42=b0030030 s43=0008000c d21=0008000cb0030030 s44=000cb803 s45=03028008 d22=03028008000cb803 s46=10000cc0 s47=0cd00300 d23=0cd0030010000cc0 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=1a2d7587 s53=99988cfd d26=99988cfd1a2d7587 s54=3e6bdd81 s55=7f7931a0 d27=7f7931a03e6bdd81 s56=05078b41 s57=74703892 d28=7470389205078b41 s58=e99abed3 s59=9471a0f5 d29=9471a0f5e99abed3 s60=9295e243 s61=dcbd90f1 d30=dcbd90f19295e243 s62=2208a69e s63=99f809cf d31=99f809cf2208a69e FPSCR: 00000000