last executing test programs: 31.079271552s ago: executing program 0 (id=107): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000780)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 29.679258287s ago: executing program 0 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) 24.537969507s ago: executing program 0 (id=109): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000180)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x60, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 22.949130979s ago: executing program 0 (id=110): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0xfe, &(0x7f0000000340)={@multicast, @remote, @void, {@generic={0x9, "281e1a1fc28cdbee80f08023e9882c98f42e9843ef31891bfc95f79b2d6b279429089c1f864cea0cd05c394db6e502e029ab25588163612c76b2a7efa68fb5a2e567bfcc51bf6af1462753ed8466adf764f522ac0939c1a01277b41c65f6f594f1ba1f96aa84ef152ec6a66edc8ff4f3811819ad04137736068bb30ed4b57b0fffd53a86acfe46a5106f1f68e1581d842ada5575ca1c3d10435582d733ef1fff14eaa0c3df49c13b27b4089912e4fd164526ad146e73c4abc633e139fd122c3e30e692ec6403d73f0f7e38dd8adc38894117dc4a683ce90f78c73b972e955beedd0b75ed14da69d6f3ce01a432f89602"}}}, &(0x7f0000000580)={0x0, 0x0, [0x3bc, 0x0, 0x731, 0x36d]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071101a00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) 10.076919833s ago: executing program 1 (id=112): clock_gettime(0x624c1338f0d2282b, 0x0) 9.842346445s ago: executing program 1 (id=113): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x80}, 0x1, 0x7}, 0x24000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x1d3a, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 9.724824016s ago: executing program 1 (id=114): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000180)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x60, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 9.05326373s ago: executing program 1 (id=115): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 8.771920807s ago: executing program 1 (id=116): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000000000000007000000000000007b8af8ff80000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@private0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private}}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 8.395032422s ago: executing program 1 (id=117): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) open$dir(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x0}, 0x90) io_setup(0x7, &(0x7f00000001c0)=0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x0, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000037000000", 0xfe60) connect$inet(0xffffffffffffffff, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 290.307442ms ago: executing program 0 (id=118): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32], 0x0}, 0x90) creat(0x0, 0xecf86c37d53049cc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file0', [{0x20, '#! '}, {0x20, '\\*./'}]}, 0x14) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x2a, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b041000e0ff030002004788aa96a13bb1000000000008004000", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) 0s ago: executing program 0 (id=119): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10005) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="3b02", @ANYRES32=0x0], 0x23b) io_setup(0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0xff08) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x1, @mcast2}, {0xa, 0x0, 0x7fffffff, @local}, r5}}, 0x48) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r6 = semget$private(0x0, 0x0, 0x0) semtimedop(r6, &(0x7f0000000280)=[{}, {0x3, 0x8a, 0x1000}, {0x3, 0x3}], 0x2aaaaaaaaaaaac9d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5a, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@private0, @in6=@initdev}}, {{@in=@local}, 0x0, @in6=@initdev}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYRES16], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 48.423835][ T31] audit: type=1400 audit(48.360:68): avc: denied { read write } for pid=2998 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.428169][ T31] audit: type=1400 audit(48.370:69): avc: denied { open } for pid=2998 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:10517' (ED25519) to the list of known hosts. [ 56.632569][ T31] audit: type=1400 audit(56.570:70): avc: denied { name_bind } for pid=2999 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 58.895407][ T31] audit: type=1400 audit(58.840:71): avc: denied { execute } for pid=3001 comm="sh" name="syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 58.904900][ T31] audit: type=1400 audit(58.840:72): avc: denied { execute_no_trans } for pid=3001 comm="sh" path="/syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 62.013560][ T31] audit: type=1400 audit(61.950:73): avc: denied { mounton } for pid=3001 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 62.017521][ T31] audit: type=1400 audit(61.960:74): avc: denied { mount } for pid=3001 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.032041][ T3001] cgroup: Unknown subsys name 'net' [ 62.040237][ T31] audit: type=1400 audit(61.980:75): avc: denied { unmount } for pid=3001 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.247950][ T3001] cgroup: Unknown subsys name 'hugetlb' [ 62.248938][ T3001] cgroup: Unknown subsys name 'rlimit' [ 62.442861][ T31] audit: type=1400 audit(62.380:76): avc: denied { setattr } for pid=3001 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.443557][ T31] audit: type=1400 audit(62.380:77): avc: denied { mounton } for pid=3001 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 62.444879][ T31] audit: type=1400 audit(62.380:78): avc: denied { mount } for pid=3001 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 62.636846][ T3003] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 62.638824][ T31] audit: type=1400 audit(62.580:79): avc: denied { relabelto } for pid=3003 comm="mkswap" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 62.641478][ T31] audit: type=1400 audit(62.580:80): avc: denied { write } for pid=3003 comm="mkswap" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 62.665231][ T31] audit: type=1400 audit(62.600:81): avc: denied { read } for pid=3001 comm="syz-executor" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 62.671097][ T31] audit: type=1400 audit(62.610:82): avc: denied { open } for pid=3001 comm="syz-executor" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 69.198888][ T3001] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.080726][ T31] audit: type=1400 audit(71.020:83): avc: denied { execmem } for pid=3004 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 71.145935][ T31] audit: type=1400 audit(71.080:84): avc: denied { mounton } for pid=3006 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 71.146813][ T31] audit: type=1400 audit(71.090:85): avc: denied { mount } for pid=3006 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 71.150365][ T31] audit: type=1400 audit(71.090:86): avc: denied { read } for pid=3006 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.151212][ T31] audit: type=1400 audit(71.090:87): avc: denied { open } for pid=3006 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.174524][ T31] audit: type=1400 audit(71.110:88): avc: denied { mounton } for pid=3006 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 71.189050][ T31] audit: type=1400 audit(71.130:89): avc: denied { module_request } for pid=3006 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 71.276800][ T31] audit: type=1400 audit(71.220:90): avc: denied { sys_module } for pid=3006 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.037257][ T31] audit: type=1400 audit(71.980:91): avc: denied { ioctl } for pid=3006 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=691 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.182735][ T3006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.191063][ T3006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.397701][ T3007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.403663][ T3007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.009491][ T3006] hsr_slave_0: entered promiscuous mode [ 74.012406][ T3006] hsr_slave_1: entered promiscuous mode [ 74.348509][ T3007] hsr_slave_0: entered promiscuous mode [ 74.350375][ T3007] hsr_slave_1: entered promiscuous mode [ 74.351703][ T3007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.351992][ T3007] Cannot create hsr debugfs directory [ 74.435689][ T31] audit: type=1400 audit(74.380:92): avc: denied { create } for pid=3006 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.442789][ T3006] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.463625][ T3006] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.471096][ T3006] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.483476][ T3006] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.653781][ T3007] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.673073][ T3007] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.681333][ T3007] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.686367][ T3007] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.278411][ T3007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.346551][ T3006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.960394][ T3006] veth0_vlan: entered promiscuous mode [ 77.969637][ T3006] veth1_vlan: entered promiscuous mode [ 77.996418][ T3006] veth0_macvtap: entered promiscuous mode [ 78.000369][ T3006] veth1_macvtap: entered promiscuous mode [ 78.028491][ T3006] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.029003][ T3006] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.029330][ T3006] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.029523][ T3006] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.149622][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 78.149671][ T31] audit: type=1400 audit(78.090:95): avc: denied { mount } for pid=3006 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.152497][ T31] audit: type=1400 audit(78.090:96): avc: denied { mounton } for pid=3006 comm="syz-executor" path="/syzkaller.wCZuS6/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.162189][ T31] audit: type=1400 audit(78.100:97): avc: denied { mount } for pid=3006 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 78.179273][ T31] audit: type=1400 audit(78.120:98): avc: denied { unmount } for pid=3006 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.184878][ T31] audit: type=1400 audit(78.120:99): avc: denied { mounton } for pid=3006 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 78.191732][ T31] audit: type=1400 audit(78.130:100): avc: denied { mount } for pid=3006 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.303430][ T3007] veth0_vlan: entered promiscuous mode [ 78.315491][ T3007] veth1_vlan: entered promiscuous mode [ 78.327966][ T31] audit: type=1400 audit(78.270:101): avc: denied { read write } for pid=3006 comm="syz-executor" name="loop0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.328714][ T31] audit: type=1400 audit(78.270:102): avc: denied { open } for pid=3006 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.329342][ T31] audit: type=1400 audit(78.270:103): avc: denied { ioctl } for pid=3006 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=635 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.357117][ T3007] veth0_macvtap: entered promiscuous mode [ 78.360903][ T3007] veth1_macvtap: entered promiscuous mode [ 78.388959][ T3007] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.389345][ T3007] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.389714][ T3007] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.390005][ T3007] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.596006][ T31] audit: type=1400 audit(78.530:104): avc: denied { prog_load } for pid=3687 comm="syz.0.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 78.935398][ T3545] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.125128][ T3545] usb 1-1: Using ep0 maxpacket: 8 [ 79.142508][ T3545] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 79.143059][ T3545] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 79.143473][ T3545] usb 1-1: config 135 has no interface number 0 [ 79.143881][ T3545] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.157946][ T3545] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 79.158625][ T3545] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.159053][ T3545] usb 1-1: Product: syz [ 79.159394][ T3545] usb 1-1: Manufacturer: syz [ 79.159659][ T3545] usb 1-1: SerialNumber: syz [ 79.396866][ T3545] usb 1-1: USB disconnect, device number 2 [ 80.248970][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 84.431965][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 84.432412][ T31] audit: type=1400 audit(84.370:115): avc: denied { execute } for pid=3762 comm="syz.0.12" path="/10/blkio.bfq.time_recursive" dev="tmpfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.780136][ T31] audit: type=1400 audit(84.720:116): avc: denied { ioctl } for pid=3765 comm="syz.0.13" path="socket:[1843]" dev="sockfs" ino=1843 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.988735][ T31] audit: type=1400 audit(85.930:117): avc: denied { create } for pid=3770 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.001194][ T31] audit: type=1400 audit(85.930:118): avc: denied { write } for pid=3770 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.010120][ T31] audit: type=1400 audit(85.930:119): avc: denied { nlmsg_write } for pid=3770 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.629544][ T3773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15'. [ 87.197809][ T31] audit: type=1400 audit(87.140:120): avc: denied { create } for pid=3801 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 87.254837][ T31] audit: type=1400 audit(87.190:121): avc: denied { create } for pid=3801 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.256354][ T31] audit: type=1400 audit(87.190:122): avc: denied { write } for pid=3801 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.257032][ T31] audit: type=1400 audit(87.190:123): avc: denied { connect } for pid=3801 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.257718][ T31] audit: type=1400 audit(87.190:124): avc: denied { name_connect } for pid=3801 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 88.956769][ T48] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.964294][ C1] hrtimer: interrupt took 2308928 ns [ 89.274931][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.281032][ T48] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.283589][ T48] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.296582][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.309066][ T48] usb 1-1: config 0 descriptor?? [ 89.808818][ T48] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 89.810276][ T48] plantronics 0003:047F:FFFF.0001: unbalanced collection at end of report description [ 89.829936][ T48] plantronics 0003:047F:FFFF.0001: parse failed [ 89.830458][ T48] plantronics 0003:047F:FFFF.0001: probe with driver plantronics failed with error -22 [ 89.991825][ T8] usb 1-1: USB disconnect, device number 3 [ 97.010664][ T3855] syz.1.22 uses obsolete (PF_INET,SOCK_PACKET) [ 97.012415][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 97.012490][ T31] audit: type=1400 audit(96.950:129): avc: denied { create } for pid=3854 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.039070][ T31] audit: type=1400 audit(96.980:130): avc: denied { ioctl } for pid=3854 comm="syz.1.22" path="socket:[1915]" dev="sockfs" ino=1915 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.351060][ T713] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.648210][ T713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.649677][ T713] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.650602][ T713] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.653389][ T713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.689286][ T713] usb 1-1: config 0 descriptor?? [ 98.187548][ T713] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 98.188657][ T713] plantronics 0003:047F:FFFF.0002: unbalanced collection at end of report description [ 98.189441][ T713] plantronics 0003:047F:FFFF.0002: parse failed [ 98.189833][ T713] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 98.385439][ T24] usb 1-1: USB disconnect, device number 4 [ 99.289648][ T31] audit: type=1400 audit(99.210:131): avc: denied { write } for pid=3891 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.136215][ T31] audit: type=1400 audit(104.080:132): avc: denied { read } for pid=3894 comm="syz.1.31" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 104.137401][ T31] audit: type=1400 audit(104.080:133): avc: denied { open } for pid=3894 comm="syz.1.31" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 104.158657][ T31] audit: type=1400 audit(104.100:134): avc: denied { nlmsg_write } for pid=3895 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 123.335439][ T31] audit: type=1400 audit(123.250:135): avc: denied { create } for pid=3918 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 124.274607][ T31] audit: type=1400 audit(124.210:136): avc: denied { create } for pid=3936 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.354938][ T31] audit: type=1400 audit(124.280:137): avc: denied { bind } for pid=3936 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.858593][ T31] audit: type=1400 audit(124.800:138): avc: denied { setopt } for pid=3936 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.863320][ T31] audit: type=1400 audit(124.800:139): avc: denied { accept } for pid=3936 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 125.527143][ T31] audit: type=1400 audit(125.460:140): avc: denied { create } for pid=3947 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 125.541130][ T31] audit: type=1400 audit(125.480:141): avc: denied { getopt } for pid=3947 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 125.906859][ T3953] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.080206][ T31] audit: type=1400 audit(125.970:142): avc: denied { create } for pid=3950 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.627052][ T31] audit: type=1400 audit(126.570:143): avc: denied { write } for pid=3955 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.967745][ T31] audit: type=1400 audit(126.910:144): avc: denied { connect } for pid=3960 comm="syz.1.52" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.066232][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 146.066309][ T31] audit: type=1400 audit(146.010:149): avc: denied { unmount } for pid=3006 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 146.350233][ T3992] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 147.253978][ T31] audit: type=1400 audit(147.190:150): avc: denied { setopt } for pid=4003 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.462385][ T4010] pim6reg1: entered promiscuous mode [ 147.462828][ T4010] pim6reg1: entered allmulticast mode [ 148.128309][ T31] audit: type=1400 audit(148.060:151): avc: denied { create } for pid=3993 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 148.129193][ T31] audit: type=1400 audit(148.070:152): avc: denied { create } for pid=3993 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.457650][ T4022] process 'syz.0.70' launched './file1' with NULL argv: empty string added [ 148.501809][ T31] audit: type=1400 audit(148.440:153): avc: denied { execute_no_trans } for pid=4021 comm="syz.0.70" path="/46/file1" dev="tmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.146333][ T4032] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 150.429044][ T31] audit: type=1400 audit(150.370:154): avc: denied { bind } for pid=4033 comm="syz.0.75" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.430256][ T31] audit: type=1400 audit(150.370:155): avc: denied { node_bind } for pid=4033 comm="syz.0.75" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 150.431851][ T31] audit: type=1400 audit(150.370:156): avc: denied { setopt } for pid=4033 comm="syz.0.75" laddr=172.20.20.170 lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 155.521134][ T31] audit: type=1400 audit(155.460:157): avc: denied { create } for pid=4038 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 155.521675][ T31] audit: type=1400 audit(155.460:158): avc: denied { ioctl } for pid=4038 comm="syz.0.77" path="socket:[3147]" dev="sockfs" ino=3147 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 156.376438][ T4044] Zero length message leads to an empty skb [ 164.846163][ T4047] lo: entered allmulticast mode [ 164.850661][ T4047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.725595][ T31] audit: type=1400 audit(168.660:159): avc: denied { mounton } for pid=4055 comm="syz.1.81" path="/25/file0" dev="tmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 169.900533][ T31] audit: type=1400 audit(169.840:160): avc: denied { ioctl } for pid=4062 comm="syz.0.82" path="socket:[2815]" dev="sockfs" ino=2815 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.904900][ T31] audit: type=1400 audit(169.840:161): avc: denied { bind } for pid=4062 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.928924][ T31] audit: type=1400 audit(169.870:162): avc: denied { write } for pid=4062 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.051322][ T31] audit: type=1400 audit(169.990:163): avc: denied { append } for pid=4064 comm="syz.0.83" name="userio" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.218539][ T31] audit: type=1400 audit(181.160:164): avc: denied { getopt } for pid=4087 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.231646][ T31] audit: type=1400 audit(181.170:165): avc: denied { write } for pid=4087 comm="syz.1.87" path="socket:[2848]" dev="sockfs" ino=2848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 181.232541][ T31] audit: type=1400 audit(181.170:166): avc: denied { nlmsg_read } for pid=4087 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 181.401931][ T31] audit: type=1400 audit(181.340:167): avc: denied { checkpoint_restore } for pid=4094 comm="syz.0.91" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 181.516587][ T4097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 181.517255][ T4097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.92'. [ 181.528673][ T4097] gtp0: entered promiscuous mode [ 181.529118][ T4097] gtp0: entered allmulticast mode [ 181.798681][ T31] audit: type=1400 audit(181.740:168): avc: denied { ioctl } for pid=4105 comm="syz.1.93" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=2879 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 181.814861][ T3706] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 182.005597][ T3706] usb 1-1: Using ep0 maxpacket: 32 [ 182.015036][ T3706] usb 1-1: config 0 has no interfaces? [ 182.029256][ T3706] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 182.029801][ T3706] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 182.030158][ T3706] usb 1-1: Product: syz [ 182.030372][ T3706] usb 1-1: Manufacturer: syz [ 182.030605][ T3706] usb 1-1: SerialNumber: syz [ 182.045707][ T3706] usb 1-1: config 0 descriptor?? [ 182.258818][ T3545] usb 1-1: USB disconnect, device number 5 [ 182.456713][ T31] audit: type=1400 audit(182.400:169): avc: denied { read } for pid=4111 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 182.896833][ T31] audit: type=1400 audit(182.840:170): avc: denied { name_bind } for pid=4125 comm="syz.0.97" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 182.961260][ T31] audit: type=1400 audit(182.900:171): avc: denied { write } for pid=4111 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 182.965577][ T4129] trusted_key: syz.1.95 sent an empty control message without MSG_MORE. [ 183.250239][ T31] audit: type=1400 audit(183.190:172): avc: denied { create } for pid=4135 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.679977][ T31] audit: type=1400 audit(184.620:173): avc: denied { map } for pid=4138 comm="syz.1.101" path="/dev/nullb0" dev="devtmpfs" ino=669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.105491][ T3706] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 185.294641][ T3706] usb 2-1: Using ep0 maxpacket: 32 [ 185.309186][ T3706] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 185.309583][ T3706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.313759][ T3706] usb 2-1: config 0 descriptor?? [ 186.195983][ T3813] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 186.386456][ T3813] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 186.387644][ T3813] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.388208][ T3813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.446987][ T3813] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 186.609133][ T3706] usb 1-1: USB disconnect, device number 6 [ 187.425032][ T3813] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 187.685661][ T3813] usb 1-1: Using ep0 maxpacket: 32 [ 187.729551][ T3813] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.733848][ T3813] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.735610][ T3813] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 187.735974][ T3813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.749127][ T3813] hub 1-1:4.0: USB hub found [ 187.976315][ T3813] hub 1-1:4.0: 2 ports detected [ 188.186199][ T4174] ptrace attach of "/syz-executor exec"[3006] was attempted by "/syz-executor exec"[4174] [ 188.218810][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 188.218910][ T31] audit: type=1400 audit(188.160:175): avc: denied { connect } for pid=4173 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.043540][ T3813] hub 1-1:4.0: hub_hub_status failed (err = -32) [ 189.045249][ T3813] hub 1-1:4.0: config failed, can't get hub status (err -32) [ 190.455891][ T3813] usb 1-1: USB disconnect, device number 7 [ 191.144870][ T3813] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 191.439622][ T3813] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 191.445398][ T3813] usb 1-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 191.445965][ T3813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.449412][ T3813] usb 1-1: config 0 descriptor?? [ 191.468443][ T3813] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 191.654964][ T2800] usb 1-1: USB disconnect, device number 8 [ 199.789977][ T50] usb 2-1: USB disconnect, device number 2 [ 200.649764][ T50] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 200.876491][ T50] usb 2-1: Using ep0 maxpacket: 16 [ 200.963322][ T50] usb 2-1: config 0 has no interfaces? [ 201.002734][ T50] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 201.005005][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.005476][ T50] usb 2-1: Product: syz [ 201.007018][ T50] usb 2-1: Manufacturer: syz [ 201.007503][ T50] usb 2-1: SerialNumber: syz [ 201.058050][ T50] r8152-cfgselector 2-1: Unknown version 0x0000 [ 201.061931][ T50] r8152-cfgselector 2-1: config 0 descriptor?? [ 211.345577][ T2799] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 211.659377][ T31] audit: type=1400 audit(211.600:176): avc: denied { create } for pid=4234 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 211.669594][ T31] audit: type=1400 audit(211.610:177): avc: denied { write } for pid=4234 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 212.892697][ T4241] syz.1.116[4241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.893343][ T4241] syz.1.116[4241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.309139][ T31] audit: type=1400 audit(221.250:178): avc: denied { setopt } for pid=4246 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 221.660772][ T4249] 8<--- cut here --- [ 221.662004][ T4249] Unable to handle kernel NULL pointer dereference at virtual address 00000008 when read [ 221.662479][ T4249] [00000008] *pgd=8515f003, *pmd=fe4ff003 [ 221.708867][ T4249] Internal error: Oops: 205 [#1] PREEMPT SMP ARM [ 221.709667][ T4249] Modules linked in: [ 221.710410][ T4249] CPU: 0 UID: 0 PID: 4249 Comm: syz.0.119 Not tainted 6.10.0-syzkaller #0 [ 221.710935][ T4249] Hardware name: ARM-Versatile Express [ 221.711393][ T4249] PC is at path_from_stashed+0x1c/0x308 [ 221.712431][ T4249] LR is at open_namespace+0x44/0xbc [ 221.712693][ T4249] pc : [<8053a98c>] lr : [<8054d128>] psr: 80000013 [ 221.713036][ T4249] sp : dfb21e80 ip : 8451a400 fp : dfb21ec4 [ 221.713308][ T4249] r10: 8451a400 r9 : 00000005 r8 : 8435c300 [ 221.713574][ T4249] r7 : 82cab250 r6 : 8451a400 r5 : 00000000 r4 : 82ccf870 [ 221.713879][ T4249] r3 : dfb21ecc r2 : 00000008 r1 : 82c99800 r0 : 00000008 [ 221.714567][ T4249] Flags: Nzcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 221.718887][ T4249] Control: 30c5387d Table: 84bccc80 DAC: fffffffd [ 221.724138][ T4249] Register r0 information: non-paged memory [ 221.725108][ T4249] Register r1 information: slab kmalloc-1k start 82c99800 pointer offset 0 size 1024 [ 221.726157][ T4249] Register r2 information: non-paged memory [ 221.726456][ T4249] Register r3 information: 2-page vmalloc region starting at 0xdfb20000 allocated at kernel_clone+0xac/0x3e4 [ 221.727110][ T4249] Register r4 information: slab anon_vma_chain start 82ccf870 pointer offset 0 size 40 [ 221.727632][ T4249] Register r5 information: NULL pointer [ 221.727912][ T4249] Register r6 information: slab task_struct start 8451a400 pointer offset 0 size 3072 [ 221.728507][ T4249] Register r7 information: slab mnt_cache start 82cab240 pointer offset 16 size 184 [ 221.729010][ T4249] Register r8 information: slab filp start 8435c300 pointer offset 0 size 160 [ 221.729440][ T4249] Register r9 information: non-paged memory [ 221.729726][ T4249] Register r10 information: slab task_struct start 8451a400 pointer offset 0 size 3072 [ 221.730231][ T4249] Register r11 information: 2-page vmalloc region starting at 0xdfb20000 allocated at kernel_clone+0xac/0x3e4 [ 221.730939][ T4249] Register r12 information: slab task_struct start 8451a400 pointer offset 0 size 3072 [ 221.731496][ T4249] Process syz.0.119 (pid: 4249, stack limit = 0xdfb20000) [ 221.732164][ T4249] Stack: (0xdfb21e80 to 0xdfb22000) [ 221.732595][ T4249] 1e80: 80552018 8451a400 dfb21ebc dfb21e98 8027c9dc 802ac4a4 00000000 82ccf870 [ 221.733005][ T4249] 1ea0: 00000000 8451a400 8490a080 8435c300 00000005 8451a400 dfb21ef4 dfb21ec8 [ 221.733360][ T4249] 1ec0: 8054d128 8053a97c dfb21ef4 00000000 00000000 b92da1f6 82ccf870 82ccf870 [ 221.733698][ T4249] 1ee0: 84909800 00000008 dfb21f14 dfb21ef8 80552150 8054d0f0 0000ff08 00000000 [ 221.734380][ T4249] 1f00: 8435c301 00000000 dfb21fa4 dfb21f18 8051a228 80551fd8 8451a400 00000001 [ 221.737177][ T4249] 1f20: ecac8b10 8451a400 dfb21f44 dfb21f38 8190de40 8190dd10 dfb21f5c dfb21f48 [ 221.743614][ T4249] 1f40: 8024b594 8027af5c 40000000 dfb21fb0 dfb21f84 dfb21f60 80202dd8 8024b550 [ 221.746904][ T4249] 1f60: 8261c90c dfb21fb0 0014b0b0 ecac8b10 80202cc0 b92da1f6 dfb21fac 00000000 [ 221.756915][ T4249] 1f80: 00000000 002662dc 00000036 8020029c 8451a400 00000036 00000000 dfb21fa8 [ 221.758778][ T4249] 1fa0: 80200060 8051a100 00000000 00000000 00000005 0000ff08 00000000 00000000 [ 221.759165][ T4249] 1fc0: 00000000 00000000 002662dc 00000036 7e8eb766 7e8eb767 003d0f00 76bc90bc [ 221.759518][ T4249] 1fe0: 76bc8ec8 76bc8eb8 00018238 00130c00 60000010 00000005 00000000 00000000 [ 221.760034][ T4249] Call trace: [ 221.760585][ T4249] [<8053a970>] (path_from_stashed) from [<8054d128>] (open_namespace+0x44/0xbc) [ 221.762240][ T4249] r10:8451a400 r9:00000005 r8:8435c300 r7:8490a080 r6:8451a400 r5:00000000 [ 221.763091][ T4249] r4:82ccf870 [ 221.763726][ T4249] [<8054d0e4>] (open_namespace) from [<80552150>] (pidfd_ioctl+0x184/0x4c4) [ 221.764529][ T4249] r6:00000008 r5:84909800 r4:82ccf870 [ 221.765123][ T4249] [<80551fcc>] (pidfd_ioctl) from [<8051a228>] (sys_ioctl+0x134/0xda4) [ 221.765688][ T4249] r7:00000000 r6:8435c301 r5:00000000 r4:0000ff08 [ 221.765986][ T4249] [<8051a0f4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 221.766508][ T4249] Exception stack(0xdfb21fa8 to 0xdfb21ff0) [ 221.766795][ T4249] 1fa0: 00000000 00000000 00000005 0000ff08 00000000 00000000 [ 221.767443][ T4249] 1fc0: 00000000 00000000 002662dc 00000036 7e8eb766 7e8eb767 003d0f00 76bc90bc [ 221.767833][ T4249] 1fe0: 76bc8ec8 76bc8eb8 00018238 00130c00 [ 221.768152][ T4249] r10:00000036 r9:8451a400 r8:8020029c r7:00000036 r6:002662dc r5:00000000 [ 221.768477][ T4249] r4:00000000 [ 221.769064][ T4249] Code: e24dd01c e1a07001 e5911004 ee1dcf70 (e5905000) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 221.809263][ T4249] ---[ end trace 0000000000000000 ]--- [ 221.810133][ T4249] Kernel panic - not syncing: Fatal exception [ 221.812735][ T4249] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:34:52 Registers: info registers vcpu 0 CPU#0 R00=8511c000 R01=0007c538 R02=5b91a000 R03=824ba7b0 R04=82ed3000 R05=8511c000 R06=00000820 R07=8451a400 R08=a0000113 R09=826060c8 R10=00000000 R11=df801684 R12=8511c648 R13=df801650 R14=00000000 R15=813f3818 PSR=80000113 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=ce435000 R01=ff788000 R02=00000001 R03=802199d8 R04=7f00f000 R05=00000001 R06=828b3ee8 R07=7f00f000 R08=ff788000 R09=8260cad0 R10=828b4b0c R11=df92ddbc R12=df92ddc0 R13=df92dd90 R14=802109bc R15=802199f0 PSR=80000013 N--- A S svc32 s00=05ec76f0 s01=00000001 d00=0000000105ec76f0 s02=dea713f1 s03=00000000 d01=00000000dea713f1 s04=9d5d527a s05=1f4a4491 d02=1f4a44919d5d527a s06=00000000 s07=00000000 d03=0000000000000000 s08=c761b760 s09=9fc989bc d04=9fc989bcc761b760 s10=00000000 s11=00000000 d05=0000000000000000 s12=ffffffff s13=00000000 d06=00000000ffffffff s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=f45e382a s21=f20f8ed2 d10=f20f8ed2f45e382a s22=4b129b63 s23=00000000 d11=000000004b129b63 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000