./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3365905966 <...> [ 23.549188][ T3184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.571962][ T3184] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 34.006921][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 34.006938][ T27] audit: type=1400 audit(1665531462.172:73): avc: denied { transition } for pid=3405 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 34.037096][ T27] audit: type=1400 audit(1665531462.182:74): avc: denied { write } for pid=3405 comm="sh" path="pipe:[26547]" dev="pipefs" ino=26547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 Warning: Permanently added '10.128.0.118' (ECDSA) to the list of known hosts. execve("./syz-executor3365905966", ["./syz-executor3365905966"], 0x7ffd27ee6d20 /* 10 vars */) = 0 brk(NULL) = 0x555555a9b000 brk(0x555555a9bc40) = 0x555555a9bc40 arch_prctl(ARCH_SET_FS, 0x555555a9b300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3365905966", 4096) = 28 brk(0x555555abcc40) = 0x555555abcc40 brk(0x555555abd000) = 0x555555abd000 mprotect(0x7f0500a01000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9b5d0) = 3613 ./strace-static-x86_64: Process 3613 attached [pid 3613] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3613] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3613] setsid() = 1 [pid 3613] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3613] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3613] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3613] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3613] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 3613] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3613] unshare(CLONE_NEWNS) = 0 [pid 3613] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3613] unshare(CLONE_NEWIPC) = 0 [pid 3613] unshare(CLONE_NEWCGROUP) = 0 [pid 3613] unshare(CLONE_NEWUTS) = 0 [pid 3613] unshare(CLONE_SYSVSEM) = 0 [pid 3613] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3613] write(3, "16777216", 8) = 8 [pid 3613] close(3) = 0 [pid 3613] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3613] write(3, "536870912", 9) = 9 [pid 3613] close(3) = 0 [pid 3613] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3613] write(3, "1024", 4) = 4 [pid 3613] close(3) = 0 [pid 3613] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3613] write(3, "8192", 4) = 4 [pid 3613] close(3) = 0 [pid 3613] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3613] write(3, "1024", 4) = 4 [pid 3613] close(3) = 0 [pid 3613] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3613] write(3, "1024", 4) = 4 [pid 3613] close(3) = 0 [pid 3613] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3613] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3613] close(3) = 0 [pid 3613] getpid() = 1 [pid 3613] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 12]) = 0 [pid 3614] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x60\x00\x00\x00\x10\x00\x39\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x98\x00\x00\x00\x00\x00\x00\x40\x00\x12\x80\x08\x00\x01\x00\x73\x69\x74\x00\x34\x00\x02\x80\x08\x00\x01\x00\x02\x00\x00\x00\x06\x00\x0f\x00\x02\x00\x00\x00\x06\x00\x11\x00\x4e\x21\x00\x00\x06\x00\x11\x00\x4e\x24\x00\x00\x08\x00\x02\x00\xac\x14\x14\x16\x06\x00\x10\x00\xff\x0f\x00\x00", iov_len=96}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_DONTROUTE|MSG_PROBE|MSG_EOR|MSG_CONFIRM|MSG_MORE|MSG_BATCH|MSG_FASTOPEN) = 96 [pid 3614] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_INET, sin_port=htons(20000), sin_addr=inet_addr("224.0.0.1")}, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=[{cmsg_len=28, cmsg_level=SOL_IP, cmsg_type=IP_PKTINFO, cmsg_data={ipi_ifindex=if_nametoindex("bond0"), ipi_spec_dst=inet_addr("0.0.0.0"), ipi_addr=inet_addr("172.20.20.187")}}], msg_controllen=32, msg_flags=0}}], 1, 0) = -1 ENETUNREACH (Network is unreachable) [pid 3614] close(3) = 0 [pid 3614] close(4) = 0 [pid 3614] close(5) = 0 [pid 3614] close(6) = -1 EBADF (Bad file descriptor) [pid 3614] close(7) = -1 EBADF (Bad file descriptor) [pid 3614] close(8) = -1 EBADF (Bad file descriptor) [pid 3614] close(9) = -1 EBADF (Bad file descriptor) [pid 3614] close(10) = -1 EBADF (Bad file descriptor) [pid 3614] close(11) = -1 EBADF (Bad file descriptor) [pid 3614] close(12) = -1 EBADF (Bad file descriptor) [pid 3614] close(13) = -1 EBADF (Bad file descriptor) [pid 3614] close(14) = -1 EBADF (Bad file descriptor) [pid 3614] close(15) = -1 EBADF (Bad file descriptor) [pid 3614] close(16) = -1 EBADF (Bad file descriptor) [pid 3614] close(17) = -1 EBADF (Bad file descriptor) [pid 3614] close(18) = -1 EBADF (Bad file descriptor) [pid 3614] close(19) = -1 EBADF (Bad file descriptor) [pid 3614] close(20) = -1 EBADF (Bad file descriptor) [pid 3614] close(21) = -1 EBADF (Bad file descriptor) [pid 3614] close(22) = -1 EBADF (Bad file descriptor) [pid 3614] close(23) = -1 EBADF (Bad file descriptor) [pid 3614] close(24) = -1 EBADF (Bad file descriptor) [ 43.679306][ T27] audit: type=1400 audit(1665531471.822:77): avc: denied { mount } for pid=3613 comm="syz-executor336" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 43.702274][ T27] audit: type=1400 audit(1665531471.822:78): avc: denied { mounton } for pid=3613 comm="syz-executor336" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [pid 3614] close(25) = -1 EBADF (Bad file descriptor) [pid 3614] close(26) = -1 EBADF (Bad file descriptor) [pid 3614] close(27) = -1 EBADF (Bad file descriptor) [pid 3614] close(28) = -1 EBADF (Bad file descriptor) [pid 3614] close(29) = -1 EBADF (Bad file descriptor) [pid 3614] exit_group(0) = ? [pid 3614] +++ exited with 0 +++ [pid 3613] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3613] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3613] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9b5d0) = 3 ./strace-static-x86_64: Process 3615 attached [pid 3615] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3615] setpgid(0, 0) = 0 [pid 3615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3615] write(3, "1000", 4) = 4 [pid 3615] close(3) = 0 [pid 3615] socket(AF_INET6, SOCK_DGRAM, IPPROTO_IP) = 3 [pid 3615] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 3615] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 5 [pid 3615] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 3615] getsockname(5, {sa_family=AF_NETLINK, nl_pid=3, nl_groups=00000000}, [20 => 12]) = 0 [pid 3615] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x60\x00\x00\x00\x10\x00\x39\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x98\x00\x00\x00\x00\x00\x00\x40\x00\x12\x80\x08\x00\x01\x00\x73\x69\x74\x00\x34\x00\x02\x80\x08\x00\x01\x00\x03\x00\x00\x00\x06\x00\x0f\x00\x02\x00\x00\x00\x06\x00\x11\x00\x4e\x21\x00\x00\x06\x00\x11\x00\x4e\x24\x00\x00\x08\x00\x02\x00\xac\x14\x14\x16\x06\x00\x10\x00\xff\x0f\x00\x00", iov_len=96}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_DONTROUTE|MSG_PROBE|MSG_EOR|MSG_CONFIRM|MSG_MORE|MSG_BATCH|MSG_FASTOPEN) = 96 [pid 3615] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_INET, sin_port=htons(20000), sin_addr=inet_addr("224.0.0.1")}, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=[{cmsg_len=28, cmsg_level=SOL_IP, cmsg_type=IP_PKTINFO, cmsg_data={ipi_ifindex=if_nametoindex("dummy0"), ipi_spec_dst=inet_addr("0.0.0.0"), ipi_addr=inet_addr("172.20.20.187")}}], msg_controllen=32, msg_flags=0}}], 1, 0) = -1 ENETUNREACH (Network is unreachable) [pid 3615] close(3) = 0 [pid 3615] close(4) = 0 [pid 3615] close(5) = 0 [pid 3615] close(6) = -1 EBADF (Bad file descriptor) [pid 3615] close(7) = -1 EBADF (Bad file descriptor) [pid 3615] close(8) = -1 EBADF (Bad file descriptor) [pid 3615] close(9) = -1 EBADF (Bad file descriptor) [pid 3615] close(10) = -1 EBADF (Bad file descriptor) [pid 3615] close(11) = -1 EBADF (Bad file descriptor) [pid 3615] close(12) = -1 EBADF (Bad file descriptor) [pid 3615] close(13) = -1 EBADF (Bad file descriptor) [pid 3615] close(14) = -1 EBADF (Bad file descriptor) [pid 3615] close(15) = -1 EBADF (Bad file descriptor) [pid 3615] close(16) = -1 EBADF (Bad file descriptor) [pid 3615] close(17) = -1 EBADF (Bad file descriptor) [pid 3615] close(18) = -1 EBADF (Bad file descriptor) [pid 3615] close(19) = -1 EBADF (Bad file descriptor) [pid 3615] close(20) = -1 EBADF (Bad file descriptor) [pid 3615] close(21) = -1 EBADF (Bad file descriptor) [pid 3615] close(22) = -1 EBADF (Bad file descriptor) [pid 3615] close(23) = -1 EBADF (Bad file descriptor) [pid 3615] close(24) = -1 EBADF (Bad file descriptor) [pid 3615] close(25) = -1 EBADF (Bad file descriptor) [pid 3615] close(26) = -1 EBADF (Bad file descriptor) [pid 3615] close(27) = -1 EBADF (Bad file descriptor) [pid 3615] close(28) = -1 EBADF (Bad file descriptor) [pid 3615] close(29) = -1 EBADF (Bad file descriptor) [pid 3615] exit_group(0) = ? [pid 3615] +++ exited with 0 +++ [pid 3613] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3613] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3613] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9b5d0) = 4 ./strace-static-x86_64: Process 3616 attached [pid 3616] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3616] setpgid(0, 0) = 0 [pid 3616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3616] write(3, "1000", 4) = 4 [pid 3616] close(3) = 0 [pid 3616] socket(AF_INET6, SOCK_DGRAM, IPPROTO_IP) = 3 [pid 3616] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 3616] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 5 [pid 3616] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 3616] getsockname(5, {sa_family=AF_NETLINK, nl_pid=4, nl_groups=00000000}, [20 => 12]) = 0 [pid 3616] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x60\x00\x00\x00\x10\x00\x39\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x98\x00\x00\x00\x00\x00\x00\x40\x00\x12\x80\x08\x00\x01\x00\x73\x69\x74\x00\x34\x00\x02\x80\x08\x00\x01\x00\x04\x00\x00\x00\x06\x00\x0f\x00\x02\x00\x00\x00\x06\x00\x11\x00\x4e\x21\x00\x00\x06\x00\x11\x00\x4e\x24\x00\x00\x08\x00\x02\x00\xac\x14\x14\x16\x06\x00\x10\x00\xff\x0f\x00\x00", iov_len=96}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_DONTROUTE|MSG_PROBE|MSG_EOR|MSG_CONFIRM|MSG_MORE|MSG_BATCH|MSG_FASTOPEN) = 96 [pid 3616] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_INET, sin_port=htons(20000), sin_addr=inet_addr("224.0.0.1")}, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=[{cmsg_len=28, cmsg_level=SOL_IP, cmsg_type=IP_PKTINFO, cmsg_data={ipi_ifindex=if_nametoindex("eql"), ipi_spec_dst=inet_addr("0.0.0.0"), ipi_addr=inet_addr("172.20.20.187")}}], msg_controllen=32, msg_flags=0}}], 1, 0) = -1 ENETUNREACH (Network is unreachable) [pid 3616] close(3) = 0 [pid 3616] close(4) = 0 [pid 3616] close(5) = 0 [pid 3616] close(6) = -1 EBADF (Bad file descriptor) [pid 3616] close(7) = -1 EBADF (Bad file descriptor) [pid 3616] close(8) = -1 EBADF (Bad file descriptor) [pid 3616] close(9) = -1 EBADF (Bad file descriptor) [pid 3616] close(10) = -1 EBADF (Bad file descriptor) [pid 3616] close(11) = -1 EBADF (Bad file descriptor) [pid 3616] close(12) = -1 EBADF (Bad file descriptor) [pid 3616] close(13) = -1 EBADF (Bad file descriptor) [pid 3616] close(14) = -1 EBADF (Bad file descriptor) [pid 3616] close(15) = -1 EBADF (Bad file descriptor) [pid 3616] close(16) = -1 EBADF (Bad file descriptor) [pid 3616] close(17) = -1 EBADF (Bad file descriptor) [pid 3616] close(18) = -1 EBADF (Bad file descriptor) [pid 3616] close(19) = -1 EBADF (Bad file descriptor) [pid 3616] close(20) = -1 EBADF (Bad file descriptor) [pid 3616] close(21) = -1 EBADF (Bad file descriptor) [pid 3616] close(22) = -1 EBADF (Bad file descriptor) [pid 3616] close(23) = -1 EBADF (Bad file descriptor) [pid 3616] close(24) = -1 EBADF (Bad file descriptor) [pid 3616] close(25) = -1 EBADF (Bad file descriptor) [pid 3616] close(26) = -1 EBADF (Bad file descriptor) [pid 3616] close(27) = -1 EBADF (Bad file descriptor) [pid 3616] close(28) = -1 EBADF (Bad file descriptor) [pid 3616] close(29) = -1 EBADF (Bad file descriptor) [pid 3616] exit_group(0) = ? [pid 3616] +++ exited with 0 +++ [pid 3613] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3613] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3613] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9b5d0) = 5 ./strace-static-x86_64: Process 3617 attached [pid 3617] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3617] setpgid(0, 0) = 0 [pid 3617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3617] write(3, "1000", 4) = 4 [pid 3617] close(3) = 0 [pid 3617] socket(AF_INET6, SOCK_DGRAM, IPPROTO_IP) = 3 [pid 3617] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 3617] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 5 [pid 3617] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 3617] getsockname(5, {sa_family=AF_NETLINK, nl_pid=5, nl_groups=00000000}, [20 => 12]) = 0 [pid 3617] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x60\x00\x00\x00\x10\x00\x39\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x98\x00\x00\x00\x00\x00\x00\x40\x00\x12\x80\x08\x00\x01\x00\x73\x69\x74\x00\x34\x00\x02\x80\x08\x00\x01\x00\x05\x00\x00\x00\x06\x00\x0f\x00\x02\x00\x00\x00\x06\x00\x11\x00\x4e\x21\x00\x00\x06\x00\x11\x00\x4e\x24\x00\x00\x08\x00\x02\x00\xac\x14\x14\x16\x06\x00\x10\x00\xff\x0f\x00\x00", iov_len=96}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_DONTROUTE|MSG_PROBE|MSG_EOR|MSG_CONFIRM|MSG_MORE|MSG_BATCH|MSG_FASTOPEN) = 96 [pid 3617] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_INET, sin_port=htons(20000), sin_addr=inet_addr("224.0.0.1")}, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=[{cmsg_len=28, cmsg_level=SOL_IP, cmsg_type=IP_PKTINFO, cmsg_data={ipi_ifindex=if_nametoindex("ifb0"), ipi_spec_dst=inet_addr("0.0.0.0"), ipi_addr=inet_addr("172.20.20.187")}}], msg_controllen=32, msg_flags=0}}], 1, 0) = -1 ENETUNREACH (Network is unreachable) [pid 3617] close(3) = 0 [pid 3617] close(4) = 0 [pid 3617] close(5) = 0 [pid 3617] close(6) = -1 EBADF (Bad file descriptor) [pid 3617] close(7) = -1 EBADF (Bad file descriptor) [pid 3617] close(8) = -1 EBADF (Bad file descriptor) [pid 3617] close(9) = -1 EBADF (Bad file descriptor) [pid 3617] close(10) = -1 EBADF (Bad file descriptor) [pid 3617] close(11) = -1 EBADF (Bad file descriptor) [pid 3617] close(12) = -1 EBADF (Bad file descriptor) [pid 3617] close(13) = -1 EBADF (Bad file descriptor) [pid 3617] close(14) = -1 EBADF (Bad file descriptor) [pid 3617] close(15) = -1 EBADF (Bad file descriptor) [pid 3617] close(16) = -1 EBADF (Bad file descriptor) [pid 3617] close(17) = -1 EBADF (Bad file descriptor) [pid 3617] close(18) = -1 EBADF (Bad file descriptor) [pid 3617] close(19) = -1 EBADF (Bad file descriptor) [pid 3617] close(20) = -1 EBADF (Bad file descriptor) [pid 3617] close(21) = -1 EBADF (Bad file descriptor) [pid 3617] close(22) = -1 EBADF (Bad file descriptor) [pid 3617] close(23) = -1 EBADF (Bad file descriptor) [pid 3617] close(24) = -1 EBADF (Bad file descriptor) [pid 3617] close(25) = -1 EBADF (Bad file descriptor) [pid 3617] close(26) = -1 EBADF (Bad file descriptor) [pid 3617] close(27) = -1 EBADF (Bad file descriptor) [pid 3617] close(28) = -1 EBADF (Bad file descriptor) [pid 3617] close(29) = -1 EBADF (Bad file descriptor) [pid 3617] exit_group(0) = ? [pid 3617] +++ exited with 0 +++ [pid 3613] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3613] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3613] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9b5d0) = 6 ./strace-static-x86_64: Process 3618 attached [pid 3618] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3618] setpgid(0, 0) = 0 [pid 3618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3618] write(3, "1000", 4) = 4 [pid 3618] close(3) = 0 [pid 3618] socket(AF_INET6, SOCK_DGRAM, IPPROTO_IP) = 3 [pid 3618] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 3618] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 5 [pid 3618] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 3618] getsockname(5, {sa_family=AF_NETLINK, nl_pid=6, nl_groups=00000000}, [20 => 12]) = 0 [pid 3618] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x60\x00\x00\x00\x10\x00\x39\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x98\x00\x00\x00\x00\x00\x00\x40\x00\x12\x80\x08\x00\x01\x00\x73\x69\x74\x00\x34\x00\x02\x80\x08\x00\x01\x00\x06\x00\x00\x00\x06\x00\x0f\x00\x02\x00\x00\x00\x06\x00\x11\x00\x4e\x21\x00\x00\x06\x00\x11\x00\x4e\x24\x00\x00\x08\x00\x02\x00\xac\x14\x14\x16\x06\x00\x10\x00\xff\x0f\x00\x00", iov_len=96}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_DONTROUTE|MSG_PROBE|MSG_EOR|MSG_CONFIRM|MSG_MORE|MSG_BATCH|MSG_FASTOPEN) = 96 [pid 3618] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_INET, sin_port=htons(20000), sin_addr=inet_addr("224.0.0.1")}, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=[{cmsg_len=28, cmsg_level=SOL_IP, cmsg_type=IP_PKTINFO, cmsg_data={ipi_ifindex=if_nametoindex("ifb1"), ipi_spec_dst=inet_addr("0.0.0.0"), ipi_addr=inet_addr("172.20.20.187")}}], msg_controllen=32, msg_flags=0}}], 1, 0) = -1 ENETUNREACH (Network is unreachable) [pid 3618] close(3) = 0 [pid 3618] close(4) = 0 [pid 3618] close(5) = 0 [pid 3618] close(6) = -1 EBADF (Bad file descriptor) [pid 3618] close(7) = -1 EBADF (Bad file descriptor) [pid 3618] close(8) = -1 EBADF (Bad file descriptor) [pid 3618] close(9) = -1 EBADF (Bad file descriptor) [pid 3618] close(10) = -1 EBADF (Bad file descriptor) [pid 3618] close(11) = -1 EBADF (Bad file descriptor) [pid 3618] close(12) = -1 EBADF (Bad file descriptor) [pid 3618] close(13) = -1 EBADF (Bad file descriptor) [pid 3618] close(14) = -1 EBADF (Bad file descriptor) [pid 3618] close(15) = -1 EBADF (Bad file descriptor) [pid 3618] close(16) = -1 EBADF (Bad file descriptor) [pid 3618] close(17) = -1 EBADF (Bad file descriptor) [pid 3618] close(18) = -1 EBADF (Bad file descriptor) [pid 3618] close(19) = -1 EBADF (Bad file descriptor) [pid 3618] close(20) = -1 EBADF (Bad file descriptor) [pid 3618] close(21) = -1 EBADF (Bad file descriptor) [pid 3618] close(22) = -1 EBADF (Bad file descriptor) [pid 3618] close(23) = -1 EBADF (Bad file descriptor) [pid 3618] close(24) = -1 EBADF (Bad file descriptor) [pid 3618] close(25) = -1 EBADF (Bad file descriptor) [pid 3618] close(26) = -1 EBADF (Bad file descriptor) [pid 3618] close(27) = -1 EBADF (Bad file descriptor) [pid 3618] close(28) = -1 EBADF (Bad file descriptor) [pid 3618] close(29) = -1 EBADF (Bad file descriptor) [pid 3618] exit_group(0) = ? [pid 3618] +++ exited with 0 +++ [pid 3613] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3613] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3613] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9b5d0) = 7 ./strace-static-x86_64: Process 3619 attached [pid 3619] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3619] setpgid(0, 0) = 0 [pid 3619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3619] write(3, "1000", 4) = 4 [pid 3619] close(3) = 0 [pid 3619] socket(AF_INET6, SOCK_DGRAM, IPPROTO_IP) = 3 [pid 3619] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 3619] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 5 [pid 3619] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 3619] getsockname(5, {sa_family=AF_NETLINK, nl_pid=7, nl_groups=00000000}, [20 => 12]) = 0 [pid 3619] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x60\x00\x00\x00\x10\x00\x39\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x98\x00\x00\x00\x00\x00\x00\x40\x00\x12\x80\x08\x00\x01\x00\x73\x69\x74\x00\x34\x00\x02\x80\x08\x00\x01\x00\x07\x00\x00\x00\x06\x00\x0f\x00\x02\x00\x00\x00\x06\x00\x11\x00\x4e\x21\x00\x00\x06\x00\x11\x00\x4e\x24\x00\x00\x08\x00\x02\x00\xac\x14\x14\x16\x06\x00\x10\x00\xff\x0f\x00\x00", iov_len=96}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_DONTROUTE|MSG_PROBE|MSG_EOR|MSG_CONFIRM|MSG_MORE|MSG_BATCH|MSG_FASTOPEN) = 96 [pid 3619] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_INET, sin_port=htons(20000), sin_addr=inet_addr("224.0.0.1")}, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=[{cmsg_len=28, cmsg_level=SOL_IP, cmsg_type=IP_PKTINFO, cmsg_data={ipi_ifindex=if_nametoindex("eth0"), ipi_spec_dst=inet_addr("0.0.0.0"), ipi_addr=inet_addr("172.20.20.187")}}], msg_controllen=32, msg_flags=0}}], 1, 0) = -1 ENETUNREACH (Network is unreachable) [pid 3619] close(3) = 0 [pid 3619] close(4) = 0 [pid 3619] close(5) = 0 [pid 3619] close(6) = -1 EBADF (Bad file descriptor) [pid 3619] close(7) = -1 EBADF (Bad file descriptor) [pid 3619] close(8) = -1 EBADF (Bad file descriptor) [pid 3619] close(9) = -1 EBADF (Bad file descriptor) [pid 3619] close(10) = -1 EBADF (Bad file descriptor) [pid 3619] close(11) = -1 EBADF (Bad file descriptor) [pid 3619] close(12) = -1 EBADF (Bad file descriptor) [pid 3619] close(13) = -1 EBADF (Bad file descriptor) [pid 3619] close(14) = -1 EBADF (Bad file descriptor) [pid 3619] close(15) = -1 EBADF (Bad file descriptor) [pid 3619] close(16) = -1 EBADF (Bad file descriptor) [pid 3619] close(17) = -1 EBADF (Bad file descriptor) [pid 3619] close(18) = -1 EBADF (Bad file descriptor) [pid 3619] close(19) = -1 EBADF (Bad file descriptor) [pid 3619] close(20) = -1 EBADF (Bad file descriptor) [pid 3619] close(21) = -1 EBADF (Bad file descriptor) [pid 3619] close(22) = -1 EBADF (Bad file descriptor) [pid 3619] close(23) = -1 EBADF (Bad file descriptor) [pid 3619] close(24) = -1 EBADF (Bad file descriptor) [pid 3619] close(25) = -1 EBADF (Bad file descriptor) [pid 3619] close(26) = -1 EBADF (Bad file descriptor) [pid 3619] close(27) = -1 EBADF (Bad file descriptor) [pid 3619] close(28) = -1 EBADF (Bad file descriptor) [pid 3619] close(29) = -1 EBADF (Bad file descriptor) [pid 3619] exit_group(0) = ? [pid 3619] +++ exited with 0 +++ [ 43.725106][ T27] audit: type=1400 audit(1665531471.872:79): avc: denied { mounton } for pid=3613 comm="syz-executor336" path="/dev/binderfs" dev="devtmpfs" ino=2316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 43.749445][ T27] audit: type=1400 audit(1665531471.872:80): avc: denied { mount } for pid=3613 comm="syz-executor336" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [pid 3613] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3613] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3613] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9b5d0) = 8 ./strace-static-x86_64: Process 3620 attached [pid 3620] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3620] setpgid(0, 0) = 0 [pid 3620] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3620] write(3, "1000", 4) = 4 [pid 3620] close(3) = 0 [pid 3620] socket(AF_INET6, SOCK_DGRAM, IPPROTO_IP) = 3 [pid 3620] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 3620] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 5 [pid 3620] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 3620] getsockname(5, {sa_family=AF_NETLINK, nl_pid=8, nl_groups=00000000}, [20 => 12]) = 0 [pid 3620] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x60\x00\x00\x00\x10\x00\x39\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x98\x00\x00\x00\x00\x00\x00\x40\x00\x12\x80\x08\x00\x01\x00\x73\x69\x74\x00\x34\x00\x02\x80\x08\x00\x01\x00\x08\x00\x00\x00\x06\x00\x0f\x00\x02\x00\x00\x00\x06\x00\x11\x00\x4e\x21\x00\x00\x06\x00\x11\x00\x4e\x24\x00\x00\x08\x00\x02\x00\xac\x14\x14\x16\x06\x00\x10\x00\xff\x0f\x00\x00", iov_len=96}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_DONTROUTE|MSG_PROBE|MSG_EOR|MSG_CONFIRM|MSG_MORE|MSG_BATCH|MSG_FASTOPEN) = 96 [pid 3620] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_INET, sin_port=htons(20000), sin_addr=inet_addr("224.0.0.1")}, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=[{cmsg_len=28, cmsg_level=SOL_IP, cmsg_type=IP_PKTINFO, cmsg_data={ipi_ifindex=if_nametoindex("wlan0"), ipi_spec_dst=inet_addr("0.0.0.0"), ipi_addr=inet_addr("172.20.20.187")}}], msg_controllen=32, msg_flags=0}}], 1, 0) = -1 ENETUNREACH (Network is unreachable) [pid 3620] close(3) = 0 [pid 3620] close(4) = 0 [pid 3620] close(5) = 0 [pid 3620] close(6) = -1 EBADF (Bad file descriptor) [pid 3620] close(7) = -1 EBADF (Bad file descriptor) [pid 3620] close(8) = -1 EBADF (Bad file descriptor) [pid 3620] close(9) = -1 EBADF (Bad file descriptor) [pid 3620] close(10) = -1 EBADF (Bad file descriptor) [pid 3620] close(11) = -1 EBADF (Bad file descriptor) [pid 3620] close(12) = -1 EBADF (Bad file descriptor) [pid 3620] close(13) = -1 EBADF (Bad file descriptor) [pid 3620] close(14) = -1 EBADF (Bad file descriptor) [pid 3620] close(15) = -1 EBADF (Bad file descriptor) [pid 3620] close(16) = -1 EBADF (Bad file descriptor) [pid 3620] close(17) = -1 EBADF (Bad file descriptor) [pid 3620] close(18) = -1 EBADF (Bad file descriptor) [pid 3620] close(19) = -1 EBADF (Bad file descriptor) [pid 3620] close(20) = -1 EBADF (Bad file descriptor) [pid 3620] close(21) = -1 EBADF (Bad file descriptor) [pid 3620] close(22) = -1 EBADF (Bad file descriptor) [pid 3620] close(23) = -1 EBADF (Bad file descriptor) [pid 3620] close(24) = -1 EBADF (Bad file descriptor) [pid 3620] close(25) = -1 EBADF (Bad file descriptor) [pid 3620] close(26) = -1 EBADF (Bad file descriptor) [pid 3620] close(27) = -1 EBADF (Bad file descriptor) [pid 3620] close(28) = -1 EBADF (Bad file descriptor) [pid 3620] close(29) = -1 EBADF (Bad file descriptor) [pid 3620] exit_group(0) = ? [pid 3620] +++ exited with 0 +++ [pid 3613] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3613] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3613] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9b5d0) = 9 ./strace-static-x86_64: Process 3621 attached [pid 3621] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3621] setpgid(0, 0) = 0 [pid 3621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3621] write(3, "1000", 4) = 4 [pid 3621] close(3) = 0 [pid 3621] socket(AF_INET6, SOCK_DGRAM, IPPROTO_IP) = 3 [pid 3621] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 3621] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 5 [pid 3621] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 3621] getsockname(5, {sa_family=AF_NETLINK, nl_pid=9, nl_groups=00000000}, [20 => 12]) = 0 [pid 3621] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x60\x00\x00\x00\x10\x00\x39\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x98\x00\x00\x00\x00\x00\x00\x40\x00\x12\x80\x08\x00\x01\x00\x73\x69\x74\x00\x34\x00\x02\x80\x08\x00\x01\x00\x09\x00\x00\x00\x06\x00\x0f\x00\x02\x00\x00\x00\x06\x00\x11\x00\x4e\x21\x00\x00\x06\x00\x11\x00\x4e\x24\x00\x00\x08\x00\x02\x00\xac\x14\x14\x16\x06\x00\x10\x00\xff\x0f\x00\x00", iov_len=96}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_DONTROUTE|MSG_PROBE|MSG_EOR|MSG_CONFIRM|MSG_MORE|MSG_BATCH|MSG_FASTOPEN) = 96 [pid 3621] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_INET, sin_port=htons(20000), sin_addr=inet_addr("224.0.0.1")}, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=[{cmsg_len=28, cmsg_level=SOL_IP, cmsg_type=IP_PKTINFO, cmsg_data={ipi_ifindex=if_nametoindex("wlan1"), ipi_spec_dst=inet_addr("0.0.0.0"), ipi_addr=inet_addr("172.20.20.187")}}], msg_controllen=32, msg_flags=0}}], 1, 0) = -1 ENETUNREACH (Network is unreachable) [pid 3621] close(3) = 0 [pid 3621] close(4) = 0 [pid 3621] close(5) = 0 [pid 3621] close(6) = -1 EBADF (Bad file descriptor) [pid 3621] close(7) = -1 EBADF (Bad file descriptor) [pid 3621] close(8) = -1 EBADF (Bad file descriptor) [pid 3621] close(9) = -1 EBADF (Bad file descriptor) [pid 3621] close(10) = -1 EBADF (Bad file descriptor) [pid 3621] close(11) = -1 EBADF (Bad file descriptor) [pid 3621] close(12) = -1 EBADF (Bad file descriptor) [pid 3621] close(13) = -1 EBADF (Bad file descriptor) [pid 3621] close(14) = -1 EBADF (Bad file descriptor) [pid 3621] close(15) = -1 EBADF (Bad file descriptor) [pid 3621] close(16) = -1 EBADF (Bad file descriptor) [pid 3621] close(17) = -1 EBADF (Bad file descriptor) [pid 3621] close(18) = -1 EBADF (Bad file descriptor) [pid 3621] close(19) = -1 EBADF (Bad file descriptor) [pid 3621] close(20) = -1 EBADF (Bad file descriptor) [pid 3621] close(21) = -1 EBADF (Bad file descriptor) [pid 3621] close(22) = -1 EBADF (Bad file descriptor) [pid 3621] close(23) = -1 EBADF (Bad file descriptor) [pid 3621] close(24) = -1 EBADF (Bad file descriptor) [pid 3621] close(25) = -1 EBADF (Bad file descriptor) [pid 3621] close(26) = -1 EBADF (Bad file descriptor) [pid 3621] close(27) = -1 EBADF (Bad file descriptor) [pid 3621] close(28) = -1 EBADF (Bad file descriptor) [pid 3621] close(29) = -1 EBADF (Bad file descriptor) [pid 3621] exit_group(0) = ? [pid 3621] +++ exited with 0 +++ [pid 3613] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3613] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3613] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3622 attached , child_tidptr=0x555555a9b5d0) = 10 [pid 3622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3622] setpgid(0, 0) = 0 [pid 3622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3622] write(3, "1000", 4) = 4 [pid 3622] close(3) = 0 [pid 3622] socket(AF_INET6, SOCK_DGRAM, IPPROTO_IP) = 3 [pid 3622] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 3622] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 5 [pid 3622] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 3622] getsockname(5, {sa_family=AF_NETLINK, nl_pid=10, nl_groups=00000000}, [20 => 12]) = 0 [pid 3622] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x60\x00\x00\x00\x10\x00\x39\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x98\x00\x00\x00\x00\x00\x00\x40\x00\x12\x80\x08\x00\x01\x00\x73\x69\x74\x00\x34\x00\x02\x80\x08\x00\x01\x00\x0a\x00\x00\x00\x06\x00\x0f\x00\x02\x00\x00\x00\x06\x00\x11\x00\x4e\x21\x00\x00\x06\x00\x11\x00\x4e\x24\x00\x00\x08\x00\x02\x00\xac\x14\x14\x16\x06\x00\x10\x00\xff\x0f\x00\x00", iov_len=96}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_DONTROUTE|MSG_PROBE|MSG_EOR|MSG_CONFIRM|MSG_MORE|MSG_BATCH|MSG_FASTOPEN) = 96 [pid 3622] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_INET, sin_port=htons(20000), sin_addr=inet_addr("224.0.0.1")}, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_control=[{cmsg_len=28, cmsg_level=SOL_IP, cmsg_type=IP_PKTINFO, cmsg_data={ipi_ifindex=if_nametoindex("hwsim0"), ipi_spec_dst=inet_addr("0.0.0.0"), ipi_addr=inet_addr("172.20.20.187")}}], msg_controllen=32, msg_flags=0}}], 1, 0) = -1 ENETUNREACH (Network is unreachable) [pid 3622] close(3) = 0 [pid 3622] close(4) = 0 [pid 3622] close(5) = 0 [pid 3622] close(6) = -1 EBADF (Bad file descriptor) [pid 3622] close(7) = -1 EBADF (Bad file descriptor) [pid 3622] close(8) = -1 EBADF (Bad file descriptor) [pid 3622] close(9) = -1 EBADF (Bad file descriptor) [pid 3622] close(10) = -1 EBADF (Bad file descriptor) [pid 3622] close(11) = -1 EBADF (Bad file descriptor) [pid 3622] close(12) = -1 EBADF (Bad file descriptor) [pid 3622] close(13) = -1 EBADF (Bad file descriptor) [pid 3622] close(14) = -1 EBADF (Bad file descriptor) [pid 3622] close(15) = -1 EBADF (Bad file descriptor) [pid 3622] close(16) = -1 EBADF (Bad file descriptor) [pid 3622] close(17) = -1 EBADF (Bad file descriptor) [pid 3622] close(18) = -1 EBADF (Bad file descriptor) [pid 3622] close(19) = -1 EBADF (Bad file descriptor) [pid 3622] close(20) = -1 EBADF (Bad file descriptor) [pid 3622] close(21) = -1 EBADF (Bad file descriptor) [pid 3622] close(22) = -1 EBADF (Bad file descriptor) [pid 3622] close(23) = -1 EBADF (Bad file descriptor) [pid 3622] close(24) = -1 EBADF (Bad file descriptor) [pid 3622] close(25) = -1 EBADF (Bad file descriptor) [pid 3622] close(26) = -1 EBADF (Bad file descriptor) [pid 3622] close(27) = -1 EBADF (Bad file descriptor) [pid 3622] close(28) = -1 EBADF (Bad file descriptor) [pid 3622] close(29) = -1 EBADF (Bad file descriptor) [pid 3622] exit_group(0) = ? [pid 3622] +++ exited with 0 +++ [pid 3613] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 3613] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3613] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a9b5d0) = 11 ./strace-static-x86_64: Process 3623 attached [pid 3623] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3623] setpgid(0, 0) = 0 [pid 3623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3623] write(3, "1000", 4) = 4 [pid 3623] close(3) = 0 [pid 3623] socket(AF_INET6, SOCK_DGRAM, IPPROTO_IP) = 3 [pid 3623] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 3623] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 5 [pid 3623] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 3623] getsockname(5, {sa_family=AF_NETLINK, nl_pid=11, nl_groups=00000000}, [20 => 12]) = 0 [pid 3623] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x60\x00\x00\x00\x10\x00\x39\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x98\x00\x00\x00\x00\x00\x00\x40\x00\x12\x80\x08\x00\x01\x00\x73\x69\x74\x00\x34\x00\x02\x80\x08\x00\x01\x00\x0b\x00\x00\x00\x06\x00\x0f\x00\x02\x00\x00\x00\x06\x00\x11\x00\x4e\x21\x00\x00\x06\x00\x11\x00\x4e\x24\x00\x00\x08\x00\x02\x00\xac\x14\x14\x16\x06\x00\x10\x00\xff\x0f\x00\x00", iov_len=96}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_DONTROUTE|MSG_PROBE|MSG_EOR|MSG_CONFIRM|MSG_MORE|MSG_BATCH|MSG_FASTOPEN) = 96 [ 43.860056][ T3623] skbuff: skb_under_panic: text:ffffffff87faf860 len:48 put:8 head:ffff88801ddea800 data:ffff88801ddea7fc tail:0x2c end:0xc0 dev:sit1 [ 43.874191][ T3623] ------------[ cut here ]------------ [ 43.879637][ T3623] kernel BUG at net/core/skbuff.c:120! [ 43.885386][ T3623] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 43.891462][ T3623] CPU: 0 PID: 3623 Comm: syz-executor336 Not tainted 6.0.0-syzkaller-09589-g55be6084c8e0 #0 [ 43.901515][ T3623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 43.911559][ T3623] RIP: 0010:skb_panic+0x16c/0x16e [ 43.916583][ T3623] Code: f8 4c 8b 4c 24 10 8b 4b 70 41 56 45 89 e8 4c 89 e2 41 57 48 89 ee 48 c7 c7 00 fb f4 8a ff 74 24 10 ff 74 24 20 e8 17 65 c1 ff <0f> 0b e8 3c 25 fd f7 4c 8b 64 24 18 e8 a2 c3 49 f8 48 c7 c1 60 08 [ 43.936197][ T3623] RSP: 0018:ffffc900033deaf0 EFLAGS: 00010282 [ 43.942264][ T3623] RAX: 0000000000000083 RBX: ffff88807067b6c0 RCX: 0000000000000000 [ 43.950248][ T3623] RDX: ffff888078ec0140 RSI: ffffffff81605668 RDI: fffff5200067bd50 [ 43.958230][ T3623] RBP: ffffffff8af50860 R08: 0000000000000083 R09: 0000000000000000 [ 43.966205][ T3623] R10: 0000000000000400 R11: 66666666663a6b73 R12: ffffffff87faf860 [ 43.974269][ T3623] R13: 0000000000000008 R14: ffff88802bd1c000 R15: 00000000000000c0 [ 43.982242][ T3623] FS: 0000555555a9b300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 43.991181][ T3623] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.997772][ T3623] CR2: 00000000200017c0 CR3: 000000007baee000 CR4: 00000000003506f0 [ 44.005750][ T3623] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.013736][ T3623] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.021714][ T3623] Call Trace: [ 44.024998][ T3623] [ 44.027935][ T3623] ? fou_build_udp+0x30/0x370 [ 44.032634][ T3623] skb_push.cold+0x24/0x24 [ 44.037070][ T3623] fou_build_udp+0x30/0x370 [ 44.041588][ T3623] gue_build_header+0xf7/0x140 [ 44.046389][ T3623] ? __gue_build_header+0x820/0x820 [ 44.051599][ T3623] ? lockdep_softirqs_on+0x1fe/0x340 [ 44.056891][ T3623] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.062372][ T3623] ? __gue_build_header+0x820/0x820 [ 44.067581][ T3623] ip_tunnel_xmit+0x679/0x3170 [ 44.072364][ T3623] ? ip_md_tunnel_xmit+0x18a0/0x18a0 [ 44.077669][ T3623] ? kasan_save_stack+0x1e/0x40 [ 44.082528][ T3623] ? __kasan_kmalloc+0xa6/0xd0 [ 44.087301][ T3623] ? kmem_cache_alloc_trace+0x25a/0x460 [ 44.092865][ T3623] ? ref_tracker_alloc+0x152/0x560 [ 44.097989][ T3623] ? ___neigh_create+0x7c7/0x29a0 [ 44.103030][ T3623] ? ip_finish_output2+0x8a3/0x2170 [ 44.108246][ T3623] ? __ip_finish_output+0x396/0x650 [ 44.113459][ T3623] sit_tunnel_xmit+0x50f/0x2b70 [ 44.118320][ T3623] ? arch_stack_walk+0x5c/0xe0 [ 44.123101][ T3623] ? ipip6_tunnel_unlink+0x270/0x270 [ 44.128391][ T3623] ? skb_crc32c_csum_help+0x70/0x70 [ 44.133609][ T3623] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.139090][ T3623] ? lock_acquire+0x480/0x570 [ 44.143772][ T3623] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.149253][ T3623] ? lock_acquire+0x480/0x570 [ 44.153933][ T3623] ? validate_xmit_xfrm+0x493/0x10e0 [ 44.159240][ T3623] ? netif_skb_features+0x396/0xb90 [ 44.164454][ T3623] dev_hard_start_xmit+0x183/0x880 [ 44.169584][ T3623] __dev_queue_xmit+0x2c31/0x3ad0 [ 44.174626][ T3623] ? arp_solicit+0x1200/0x1200 [ 44.179397][ T3623] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 44.184707][ T3623] ? lock_acquire+0x480/0x570 [ 44.189388][ T3623] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.194859][ T3623] ? lock_release+0x560/0x780 [ 44.199541][ T3623] ? ___neigh_create+0x1824/0x29a0 [ 44.204670][ T3623] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.210148][ T3623] ? lock_acquire+0x480/0x570 [ 44.214828][ T3623] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.220302][ T3623] ? lock_release+0x560/0x780 [ 44.224983][ T3623] ? lock_release+0x780/0x780 [ 44.229663][ T3623] ? ip_finish_output2+0x782/0x2170 [ 44.234874][ T3623] ? lock_downgrade+0x6e0/0x6e0 [ 44.239726][ T3623] ? ___neigh_create+0x1824/0x29a0 [ 44.244849][ T3623] ? trace_hardirqs_on+0x2d/0x120 [ 44.249890][ T3623] ? ___neigh_create+0x1824/0x29a0 [ 44.255012][ T3623] ? __local_bh_enable_ip+0xa0/0x120 [ 44.260306][ T3623] ? ___neigh_create+0xf17/0x29a0 [ 44.265346][ T3623] neigh_connected_output+0x3c0/0x520 [ 44.270732][ T3623] ip_finish_output2+0x782/0x2170 [ 44.275768][ T3623] ? nf_hook+0x20d/0x5b0 [ 44.280020][ T3623] ? ip_fragment.constprop.0+0x240/0x240 [ 44.285667][ T3623] ? ip_mc_finish_output+0x5a0/0x5a0 [ 44.290963][ T3623] ? netif_rx+0x314/0x590 [ 44.295309][ T3623] ? __local_bh_enable_ip+0xa0/0x120 [ 44.300599][ T3623] __ip_finish_output+0x396/0x650 [ 44.305635][ T3623] ip_finish_output+0x2d/0x280 [ 44.310412][ T3623] ip_mc_output+0x21b/0x700 [ 44.314929][ T3623] ip_send_skb+0xd4/0x260 [ 44.319269][ T3623] udp_send_skb+0x725/0x1430 [ 44.323887][ T3623] udp_sendmsg+0x1bb8/0x2740 [ 44.328495][ T3623] ? ip_reply_glue_bits+0xb0/0xb0 [ 44.333532][ T3623] ? tomoyo_supervisor+0x1c2/0xf10 [ 44.338654][ T3623] ? udp_recvmsg+0x12c0/0x12c0 [ 44.343435][ T3623] ? tomoyo_profile+0x50/0x50 [ 44.348127][ T3623] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.353603][ T3623] ? lock_acquire+0x480/0x570 [ 44.358284][ T3623] ? kfree_skbmem+0xef/0x1b0 [ 44.362882][ T3623] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.368367][ T3623] ? lock_acquire+0x480/0x570 [ 44.373050][ T3623] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.378611][ T3623] ? lock_acquire+0x480/0x570 [ 44.383311][ T3623] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.388787][ T3623] ? lock_release+0x560/0x780 [ 44.393467][ T3623] ? lock_downgrade+0x6e0/0x6e0 [ 44.398326][ T3623] ? sock_i_uid+0x8e/0xb0 [ 44.402668][ T3623] udpv6_sendmsg+0x17da/0x2c70 [ 44.407461][ T3623] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.412936][ T3623] ? lock_release+0x560/0x780 [ 44.417616][ T3623] ? udp_lib_get_port+0x556/0x18c0 [ 44.422742][ T3623] ? udp_v6_push_pending_frames+0x200/0x200 [ 44.428649][ T3623] ? udp_lib_lport_inuse+0x3e5/0x490 [ 44.433949][ T3623] ? udp_lib_get_port+0x556/0x18c0 [ 44.439078][ T3623] ? __local_bh_enable_ip+0xa0/0x120 [ 44.444370][ T3623] ? udp_lib_get_port+0x55b/0x18c0 [ 44.449500][ T3623] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.454976][ T3623] ? lock_acquire+0x480/0x570 [ 44.459658][ T3623] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.465133][ T3623] ? lock_release+0x560/0x780 [ 44.469824][ T3623] ? ip6_datagram_release_cb+0x2ba/0x570 [ 44.475470][ T3623] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.480942][ T3623] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.486415][ T3623] ? lock_release+0x560/0x780 [ 44.491100][ T3623] ? inet_autobind+0x130/0x190 [ 44.495875][ T3623] ? lock_downgrade+0x6e0/0x6e0 [ 44.500733][ T3623] ? inet_autobind+0x130/0x190 [ 44.505505][ T3623] ? trace_hardirqs_on+0x2d/0x120 [ 44.510544][ T3623] ? inet_autobind+0x130/0x190 [ 44.515322][ T3623] ? __local_bh_enable_ip+0xa0/0x120 [ 44.520614][ T3623] ? inet_autobind+0x135/0x190 [ 44.525386][ T3623] inet6_sendmsg+0x99/0xe0 [ 44.529820][ T3623] ? inet6_compat_ioctl+0x310/0x310 [ 44.535033][ T3623] sock_sendmsg+0xcf/0x120 [ 44.539467][ T3623] ____sys_sendmsg+0x334/0x8c0 [ 44.544251][ T3623] ? kernel_sendmsg+0x50/0x50 [ 44.548946][ T3623] ___sys_sendmsg+0x110/0x1b0 [ 44.553632][ T3623] ? do_recvmmsg+0x6e0/0x6e0 [ 44.558229][ T3623] ? lock_release+0x560/0x780 [ 44.562912][ T3623] ? finish_task_switch.isra.0+0x2b0/0xc70 [ 44.568739][ T3623] ? lock_downgrade+0x6e0/0x6e0 [ 44.573592][ T3623] ? vtime_account_system+0x2c6/0x530 [ 44.578979][ T3623] ? trace_hardirqs_on+0x2d/0x120 [ 44.584018][ T3623] ? finish_task_switch.isra.0+0x2b5/0xc70 [ 44.589842][ T3623] ? __switch_to+0x5cc/0x1050 [ 44.594525][ T3623] ? __switch_to_asm+0x3a/0x60 [ 44.599305][ T3623] ? __schedule+0xae7/0x5270 [ 44.603910][ T3623] ? trace_hardirqs_on+0x2d/0x120 [ 44.608949][ T3623] ? __fget_light+0x20a/0x270 [ 44.613645][ T3623] __sys_sendmmsg+0x18b/0x460 [ 44.618331][ T3623] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 44.623367][ T3623] ? ptrace_stop.part.0+0x5f4/0x8c0 [ 44.628598][ T3623] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.634072][ T3623] ? lock_release+0x560/0x780 [ 44.638753][ T3623] ? ptrace_notify+0xfa/0x140 [ 44.643436][ T3623] ? lock_downgrade+0x6e0/0x6e0 [ 44.648291][ T3623] ? trace_hardirqs_on+0x2d/0x120 [ 44.653333][ T3623] __x64_sys_sendmmsg+0x99/0x100 [ 44.658280][ T3623] do_syscall_64+0x35/0xb0 [ 44.662712][ T3623] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 44.668619][ T3623] RIP: 0033:0x7f0500994489 [ 44.673035][ T3623] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 44.692647][ T3623] RSP: 002b:00007ffd460367f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 44.701065][ T3623] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f0500994489 [ 44.709038][ T3623] RDX: 0000000000000001 RSI: 00000000200017c0 RDI: 0000000000000003 [ 44.717010][ T3623] RBP: 0000000000000000 R08: 0000000000a01e40 R09: 0000000000a01e40 [ 44.724983][ T3623] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000ab20 [ 44.732960][ T3623] R13: 00007ffd46036820 R14: 00007ffd46036810 R15: 00007ffd46036804 [ 44.740940][ T3623] [ 44.743960][ T3623] Modules linked in: [ 44.747902][ T3623] ---[ end trace 0000000000000000 ]--- [ 44.753426][ T3623] RIP: 0010:skb_panic+0x16c/0x16e [ 44.758481][ T3623] Code: f8 4c 8b 4c 24 10 8b 4b 70 41 56 45 89 e8 4c 89 e2 41 57 48 89 ee 48 c7 c7 00 fb f4 8a ff 74 24 10 ff 74 24 20 e8 17 65 c1 ff <0f> 0b e8 3c 25 fd f7 4c 8b 64 24 18 e8 a2 c3 49 f8 48 c7 c1 60 08 [ 44.778551][ T3623] RSP: 0018:ffffc900033deaf0 EFLAGS: 00010282 [ 44.784644][ T3623] RAX: 0000000000000083 RBX: ffff88807067b6c0 RCX: 0000000000000000 [ 44.792647][ T3623] RDX: ffff888078ec0140 RSI: ffffffff81605668 RDI: fffff5200067bd50 [ 44.800616][ T3623] RBP: ffffffff8af50860 R08: 0000000000000083 R09: 0000000000000000 [ 44.808626][ T3623] R10: 0000000000000400 R11: 66666666663a6b73 R12: ffffffff87faf860 [ 44.816898][ T3623] R13: 0000000000000008 R14: ffff88802bd1c000 R15: 00000000000000c0 [ 44.824900][ T3623] FS: 0000555555a9b300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 44.833879][ T3623] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.840460][ T3623] CR2: 00000000200017c0 CR3: 000000007baee000 CR4: 00000000003506f0 [ 44.848819][ T3623] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.856849][ T3623] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.864859][ T3623] Kernel panic - not syncing: Fatal exception in interrupt [ 44.872215][ T3623] Kernel Offset: disabled [ 44.876534][ T3623] Rebooting in 86400 seconds..