Warning: Permanently added '[localhost]:57738' (ED25519) to the list of known hosts. [ 242.300888][ T28] audit: type=1400 audit(241.930:58): avc: denied { name_bind } for pid=3095 comm="sshd" src=30001 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 242.864728][ T28] audit: type=1400 audit(242.490:59): avc: denied { execute } for pid=3097 comm="sh" name="syz-fuzzer" dev="vda" ino=1735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 242.866364][ T28] audit: type=1400 audit(242.490:60): avc: denied { execute_no_trans } for pid=3097 comm="sh" path="/syz-fuzzer" dev="vda" ino=1735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 1970/01/01 00:04:04 fuzzer started 1970/01/01 00:04:09 dialing manager at localhost:30001 [ 250.969194][ T28] audit: type=1400 audit(250.590:61): avc: denied { mounton } for pid=3105 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 250.983101][ T28] audit: type=1400 audit(250.610:62): avc: denied { mount } for pid=3105 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 251.050338][ T3105] cgroup: Unknown subsys name 'net' [ 251.118993][ T28] audit: type=1400 audit(250.730:63): avc: denied { unmount } for pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 251.803729][ T3105] cgroup: Unknown subsys name 'rlimit' [ 252.708763][ T28] audit: type=1400 audit(252.330:64): avc: denied { mounton } for pid=3105 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 252.715239][ T28] audit: type=1400 audit(252.340:65): avc: denied { mount } for pid=3105 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 252.762797][ T28] audit: type=1400 audit(252.380:66): avc: denied { setattr } for pid=3105 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 253.654213][ T3107] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 253.678745][ T28] audit: type=1400 audit(253.280:67): avc: denied { relabelto } for pid=3107 comm="mkswap" name="swap-file" dev="vda" ino=1740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 253.683008][ T28] audit: type=1400 audit(253.310:68): avc: denied { write } for pid=3107 comm="mkswap" path="/swap-file" dev="vda" ino=1740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 253.841280][ T28] audit: type=1400 audit(253.470:69): avc: denied { read } for pid=3105 comm="syz-executor" name="swap-file" dev="vda" ino=1740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 253.845729][ T28] audit: type=1400 audit(253.470:70): avc: denied { open } for pid=3105 comm="syz-executor" path="/swap-file" dev="vda" ino=1740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 253.883130][ T3105] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 1970/01/01 00:04:13 syscalls: 3111 1970/01/01 00:04:13 code coverage: CONFIG_KCOV is not enabled 1970/01/01 00:04:13 comparison tracing: CONFIG_KCOV is not enabled 1970/01/01 00:04:13 extra coverage: CONFIG_KCOV is not enabled 1970/01/01 00:04:13 delay kcov mmap: CONFIG_KCOV is not enabled 1970/01/01 00:04:13 setuid sandbox: enabled 1970/01/01 00:04:13 namespace sandbox: enabled 1970/01/01 00:04:13 Android sandbox: enabled 1970/01/01 00:04:13 fault injection: enabled 1970/01/01 00:04:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:04:13 net packet injection: enabled 1970/01/01 00:04:13 net device setup: enabled 1970/01/01 00:04:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:04:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:04:13 NIC VF setup: PCI device 0000:00:11.0 is not available 1970/01/01 00:04:13 USB emulation: enabled 1970/01/01 00:04:13 hci packet injection: /dev/vhci does not exist 1970/01/01 00:04:13 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:04:13 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:04:13 swap file: enabled 1970/01/01 00:04:13 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:04:14 fetching corpus: 49, signal 117/4104 (executing program) 1970/01/01 00:04:14 fetching corpus: 99, signal 216/6164 (executing program) 1970/01/01 00:04:14 fetching corpus: 149, signal 316/8223 (executing program) 1970/01/01 00:04:14 fetching corpus: 199, signal 410/10263 (executing program) 1970/01/01 00:04:14 fetching corpus: 249, signal 521/12291 (executing program) 1970/01/01 00:04:14 fetching corpus: 299, signal 623/14312 (executing program) 1970/01/01 00:04:14 fetching corpus: 349, signal 723/16309 (executing program) 1970/01/01 00:04:14 fetching corpus: 399, signal 827/18291 (executing program) 1970/01/01 00:04:15 fetching corpus: 449, signal 925/20257 (executing program) 1970/01/01 00:04:15 fetching corpus: 499, signal 1014/22207 (executing program) 1970/01/01 00:04:15 fetching corpus: 549, signal 1116/24142 (executing program) 1970/01/01 00:04:15 fetching corpus: 599, signal 1196/26076 (executing program) 1970/01/01 00:04:15 fetching corpus: 649, signal 1288/27914 (executing program) 1970/01/01 00:04:15 fetching corpus: 699, signal 1412/27914 (executing program) 1970/01/01 00:04:15 fetching corpus: 749, signal 1549/27914 (executing program) 1970/01/01 00:04:15 fetching corpus: 799, signal 1654/27914 (executing program) 1970/01/01 00:04:16 fetching corpus: 849, signal 1749/27914 (executing program) 1970/01/01 00:04:16 fetching corpus: 899, signal 1860/27914 (executing program) 1970/01/01 00:04:16 fetching corpus: 949, signal 1952/27914 (executing program) 1970/01/01 00:04:16 fetching corpus: 999, signal 2049/27914 (executing program) 1970/01/01 00:04:16 fetching corpus: 1049, signal 2163/27914 (executing program) 1970/01/01 00:04:16 fetching corpus: 1099, signal 2259/27914 (executing program) 1970/01/01 00:04:16 fetching corpus: 1149, signal 2379/27914 (executing program) 1970/01/01 00:04:16 fetching corpus: 1199, signal 2459/27914 (executing program) 1970/01/01 00:04:16 fetching corpus: 1249, signal 2566/27914 (executing program) 1970/01/01 00:04:17 fetching corpus: 1299, signal 2641/27914 (executing program) 1970/01/01 00:04:17 fetching corpus: 1349, signal 2735/27914 (executing program) 1970/01/01 00:04:17 fetching corpus: 1399, signal 2829/27914 (executing program) 1970/01/01 00:04:17 fetching corpus: 1449, signal 2917/27914 (executing program) 1970/01/01 00:04:17 fetching corpus: 1499, signal 2998/27917 (executing program) 1970/01/01 00:04:17 fetching corpus: 1549, signal 3086/27917 (executing program) 1970/01/01 00:04:17 fetching corpus: 1599, signal 3183/27917 (executing program) 1970/01/01 00:04:17 fetching corpus: 1649, signal 3261/27917 (executing program) 1970/01/01 00:04:18 fetching corpus: 1699, signal 3365/27918 (executing program) 1970/01/01 00:04:18 fetching corpus: 1749, signal 3446/27918 (executing program) 1970/01/01 00:04:18 fetching corpus: 1799, signal 3516/27918 (executing program) 1970/01/01 00:04:18 fetching corpus: 1849, signal 3593/27918 (executing program) 1970/01/01 00:04:18 fetching corpus: 1899, signal 3687/27921 (executing program) 1970/01/01 00:04:18 fetching corpus: 1949, signal 3751/27921 (executing program) 1970/01/01 00:04:18 fetching corpus: 1999, signal 3857/27921 (executing program) 1970/01/01 00:04:18 fetching corpus: 2049, signal 3946/27921 (executing program) 1970/01/01 00:04:18 fetching corpus: 2099, signal 4024/27921 (executing program) 1970/01/01 00:04:18 fetching corpus: 2149, signal 4107/27921 (executing program) 1970/01/01 00:04:18 fetching corpus: 2199, signal 4199/27922 (executing program) 1970/01/01 00:04:19 fetching corpus: 2249, signal 4280/27922 (executing program) 1970/01/01 00:04:19 fetching corpus: 2299, signal 4358/27922 (executing program) 1970/01/01 00:04:19 fetching corpus: 2349, signal 4444/27922 (executing program) 1970/01/01 00:04:19 fetching corpus: 2399, signal 4516/27922 (executing program) 1970/01/01 00:04:19 fetching corpus: 2449, signal 4600/27922 (executing program) 1970/01/01 00:04:19 fetching corpus: 2499, signal 4674/27922 (executing program) 1970/01/01 00:04:19 fetching corpus: 2549, signal 4754/27922 (executing program) 1970/01/01 00:04:19 fetching corpus: 2599, signal 4841/27922 (executing program) 1970/01/01 00:04:19 fetching corpus: 2649, signal 4941/27922 (executing program) 1970/01/01 00:04:20 fetching corpus: 2699, signal 5018/27922 (executing program) 1970/01/01 00:04:20 fetching corpus: 2749, signal 5089/27922 (executing program) 1970/01/01 00:04:20 fetching corpus: 2799, signal 5175/27923 (executing program) 1970/01/01 00:04:20 fetching corpus: 2849, signal 5276/27923 (executing program) 1970/01/01 00:04:20 fetching corpus: 2899, signal 5355/27923 (executing program) 1970/01/01 00:04:20 fetching corpus: 2949, signal 5435/27923 (executing program) 1970/01/01 00:04:20 fetching corpus: 2999, signal 5520/27923 (executing program) 1970/01/01 00:04:21 fetching corpus: 3049, signal 5613/27923 (executing program) 1970/01/01 00:04:21 fetching corpus: 3099, signal 5704/27923 (executing program) 1970/01/01 00:04:21 fetching corpus: 3149, signal 5778/27926 (executing program) 1970/01/01 00:04:21 fetching corpus: 3199, signal 5855/27930 (executing program) 1970/01/01 00:04:21 fetching corpus: 3249, signal 5956/27930 (executing program) 1970/01/01 00:04:21 fetching corpus: 3299, signal 6046/27930 (executing program) 1970/01/01 00:04:21 fetching corpus: 3349, signal 6120/27930 (executing program) 1970/01/01 00:04:22 fetching corpus: 3399, signal 6208/27930 (executing program) 1970/01/01 00:04:22 fetching corpus: 3449, signal 6283/27930 (executing program) 1970/01/01 00:04:22 fetching corpus: 3499, signal 6350/27930 (executing program) 1970/01/01 00:04:22 fetching corpus: 3549, signal 6430/27931 (executing program) 1970/01/01 00:04:22 fetching corpus: 3599, signal 6507/27932 (executing program) 1970/01/01 00:04:22 fetching corpus: 3649, signal 6579/27932 (executing program) 1970/01/01 00:04:22 fetching corpus: 3699, signal 6673/27932 (executing program) 1970/01/01 00:04:22 fetching corpus: 3749, signal 6745/27932 (executing program) 1970/01/01 00:04:22 fetching corpus: 3799, signal 6832/27932 (executing program) 1970/01/01 00:04:22 fetching corpus: 3849, signal 6922/27932 (executing program) 1970/01/01 00:04:22 fetching corpus: 3899, signal 6999/27932 (executing program) 1970/01/01 00:04:22 fetching corpus: 3949, signal 7072/27932 (executing program) 1970/01/01 00:04:23 fetching corpus: 3999, signal 7168/27932 (executing program) 1970/01/01 00:04:23 fetching corpus: 4049, signal 7236/27932 (executing program) 1970/01/01 00:04:23 fetching corpus: 4099, signal 7304/27932 (executing program) 1970/01/01 00:04:23 fetching corpus: 4149, signal 7385/27932 (executing program) 1970/01/01 00:04:23 fetching corpus: 4199, signal 7460/27932 (executing program) 1970/01/01 00:04:23 fetching corpus: 4249, signal 7525/27932 (executing program) 1970/01/01 00:04:23 fetching corpus: 4299, signal 7611/27932 (executing program) 1970/01/01 00:04:23 fetching corpus: 4349, signal 7681/27932 (executing program) 1970/01/01 00:04:23 fetching corpus: 4399, signal 7758/27932 (executing program) 1970/01/01 00:04:24 fetching corpus: 4449, signal 7834/27932 (executing program) 1970/01/01 00:04:24 fetching corpus: 4499, signal 7914/27932 (executing program) 1970/01/01 00:04:24 fetching corpus: 4549, signal 7991/27932 (executing program) 1970/01/01 00:04:24 fetching corpus: 4599, signal 8062/27932 (executing program) 1970/01/01 00:04:24 fetching corpus: 4649, signal 8144/27932 (executing program) 1970/01/01 00:04:24 fetching corpus: 4699, signal 8217/27933 (executing program) 1970/01/01 00:04:24 fetching corpus: 4749, signal 8291/27933 (executing program) 1970/01/01 00:04:24 fetching corpus: 4799, signal 8350/27933 (executing program) 1970/01/01 00:04:24 fetching corpus: 4849, signal 8440/27933 (executing program) 1970/01/01 00:04:24 fetching corpus: 4899, signal 8518/27933 (executing program) 1970/01/01 00:04:25 fetching corpus: 4949, signal 8583/27933 (executing program) 1970/01/01 00:04:25 fetching corpus: 4999, signal 8661/27933 (executing program) 1970/01/01 00:04:25 fetching corpus: 5049, signal 8732/27933 (executing program) 1970/01/01 00:04:25 fetching corpus: 5099, signal 8802/27933 (executing program) 1970/01/01 00:04:25 fetching corpus: 5149, signal 8870/27933 (executing program) 1970/01/01 00:04:25 fetching corpus: 5199, signal 8942/27933 (executing program) 1970/01/01 00:04:25 fetching corpus: 5249, signal 9016/27933 (executing program) 1970/01/01 00:04:25 fetching corpus: 5299, signal 9089/27933 (executing program) 1970/01/01 00:04:25 fetching corpus: 5349, signal 9154/27933 (executing program) 1970/01/01 00:04:25 fetching corpus: 5399, signal 9219/27934 (executing program) 1970/01/01 00:04:25 fetching corpus: 5449, signal 9275/27934 (executing program) 1970/01/01 00:04:25 fetching corpus: 5499, signal 9343/27936 (executing program) 1970/01/01 00:04:26 fetching corpus: 5549, signal 9433/27936 (executing program) 1970/01/01 00:04:26 fetching corpus: 5599, signal 9497/27936 (executing program) 1970/01/01 00:04:26 fetching corpus: 5649, signal 9559/27936 (executing program) 1970/01/01 00:04:26 fetching corpus: 5699, signal 9633/27936 (executing program) 1970/01/01 00:04:26 fetching corpus: 5749, signal 9712/27936 (executing program) 1970/01/01 00:04:26 fetching corpus: 5799, signal 9775/27936 (executing program) 1970/01/01 00:04:26 fetching corpus: 5849, signal 9845/27936 (executing program) 1970/01/01 00:04:26 fetching corpus: 5899, signal 9942/27939 (executing program) 1970/01/01 00:04:26 fetching corpus: 5949, signal 10003/27939 (executing program) 1970/01/01 00:04:27 fetching corpus: 5999, signal 10070/27939 (executing program) 1970/01/01 00:04:27 fetching corpus: 6049, signal 10146/27940 (executing program) 1970/01/01 00:04:27 fetching corpus: 6099, signal 10225/27941 (executing program) 1970/01/01 00:04:27 fetching corpus: 6149, signal 10304/27941 (executing program) 1970/01/01 00:04:27 fetching corpus: 6199, signal 10367/27941 (executing program) 1970/01/01 00:04:28 fetching corpus: 6249, signal 10441/27941 (executing program) 1970/01/01 00:04:28 fetching corpus: 6299, signal 10508/27941 (executing program) 1970/01/01 00:04:28 fetching corpus: 6349, signal 10577/27941 (executing program) 1970/01/01 00:04:28 fetching corpus: 6399, signal 10646/27941 (executing program) 1970/01/01 00:04:28 fetching corpus: 6449, signal 10721/27941 (executing program) 1970/01/01 00:04:28 fetching corpus: 6499, signal 10783/27941 (executing program) 1970/01/01 00:04:28 fetching corpus: 6549, signal 10848/27941 (executing program) 1970/01/01 00:04:28 fetching corpus: 6599, signal 10930/27941 (executing program) 1970/01/01 00:04:28 fetching corpus: 6649, signal 10995/27941 (executing program) 1970/01/01 00:04:29 fetching corpus: 6699, signal 11072/27941 (executing program) 1970/01/01 00:04:29 fetching corpus: 6749, signal 11156/27941 (executing program) 1970/01/01 00:04:29 fetching corpus: 6799, signal 11227/27943 (executing program) 1970/01/01 00:04:29 fetching corpus: 6849, signal 11287/27943 (executing program) 1970/01/01 00:04:29 fetching corpus: 6899, signal 11348/27943 (executing program) 1970/01/01 00:04:29 fetching corpus: 6949, signal 11415/27944 (executing program) 1970/01/01 00:04:29 fetching corpus: 6999, signal 11487/27944 (executing program) 1970/01/01 00:04:29 fetching corpus: 7049, signal 11565/27944 (executing program) 1970/01/01 00:04:29 fetching corpus: 7099, signal 11644/27944 (executing program) 1970/01/01 00:04:29 fetching corpus: 7149, signal 11709/27944 (executing program) 1970/01/01 00:04:29 fetching corpus: 7199, signal 11784/27944 (executing program) 1970/01/01 00:04:29 fetching corpus: 7249, signal 11846/27944 (executing program) 1970/01/01 00:04:29 fetching corpus: 7299, signal 11923/27944 (executing program) 1970/01/01 00:04:29 fetching corpus: 7349, signal 11997/27944 (executing program) 1970/01/01 00:04:30 fetching corpus: 7399, signal 12071/27944 (executing program) 1970/01/01 00:04:30 fetching corpus: 7449, signal 12161/27944 (executing program) 1970/01/01 00:04:30 fetching corpus: 7499, signal 12226/27944 (executing program) 1970/01/01 00:04:30 fetching corpus: 7549, signal 12291/27946 (executing program) 1970/01/01 00:04:30 fetching corpus: 7599, signal 12349/27946 (executing program) 1970/01/01 00:04:30 fetching corpus: 7649, signal 12420/27946 (executing program) 1970/01/01 00:04:30 fetching corpus: 7699, signal 12497/27946 (executing program) 1970/01/01 00:04:30 fetching corpus: 7749, signal 12563/27946 (executing program) 1970/01/01 00:04:31 fetching corpus: 7798, signal 12626/27947 (executing program) 1970/01/01 00:04:31 fetching corpus: 7848, signal 12696/27947 (executing program) 1970/01/01 00:04:31 fetching corpus: 7898, signal 12761/27947 (executing program) 1970/01/01 00:04:31 fetching corpus: 7948, signal 12839/27947 (executing program) 1970/01/01 00:04:31 fetching corpus: 7998, signal 12910/27947 (executing program) 1970/01/01 00:04:31 fetching corpus: 8048, signal 12975/27947 (executing program) 1970/01/01 00:04:32 fetching corpus: 8098, signal 13045/27947 (executing program) 1970/01/01 00:04:32 fetching corpus: 8148, signal 13123/27948 (executing program) 1970/01/01 00:04:32 fetching corpus: 8198, signal 13194/27948 (executing program) 1970/01/01 00:04:32 fetching corpus: 8248, signal 13262/27949 (executing program) 1970/01/01 00:04:32 fetching corpus: 8298, signal 13320/27949 (executing program) 1970/01/01 00:04:32 fetching corpus: 8348, signal 13379/27949 (executing program) 1970/01/01 00:04:32 fetching corpus: 8398, signal 13434/27949 (executing program) 1970/01/01 00:04:32 fetching corpus: 8448, signal 13504/27949 (executing program) 1970/01/01 00:04:33 fetching corpus: 8498, signal 13580/27949 (executing program) 1970/01/01 00:04:33 fetching corpus: 8548, signal 13655/27949 (executing program) 1970/01/01 00:04:33 fetching corpus: 8598, signal 13722/27949 (executing program) 1970/01/01 00:04:33 fetching corpus: 8648, signal 13780/27949 (executing program) 1970/01/01 00:04:33 fetching corpus: 8698, signal 13839/27949 (executing program) 1970/01/01 00:04:33 fetching corpus: 8747, signal 13909/27949 (executing program) 1970/01/01 00:04:33 fetching corpus: 8797, signal 13980/27949 (executing program) 1970/01/01 00:04:33 fetching corpus: 8847, signal 14075/27950 (executing program) 1970/01/01 00:04:33 fetching corpus: 8897, signal 14139/27950 (executing program) 1970/01/01 00:04:33 fetching corpus: 8947, signal 14212/27950 (executing program) 1970/01/01 00:04:33 fetching corpus: 8997, signal 14279/27950 (executing program) 1970/01/01 00:04:33 fetching corpus: 9047, signal 14363/27950 (executing program) 1970/01/01 00:04:33 fetching corpus: 9097, signal 14427/27950 (executing program) 1970/01/01 00:04:34 fetching corpus: 9147, signal 14501/27950 (executing program) 1970/01/01 00:04:34 fetching corpus: 9197, signal 14562/27951 (executing program) 1970/01/01 00:04:34 fetching corpus: 9247, signal 14629/27951 (executing program) 1970/01/01 00:04:34 fetching corpus: 9297, signal 14690/27951 (executing program) 1970/01/01 00:04:34 fetching corpus: 9347, signal 14752/27951 (executing program) 1970/01/01 00:04:34 fetching corpus: 9397, signal 14812/27951 (executing program) 1970/01/01 00:04:34 fetching corpus: 9447, signal 14884/27951 (executing program) 1970/01/01 00:04:34 fetching corpus: 9497, signal 14958/27951 (executing program) 1970/01/01 00:04:34 fetching corpus: 9547, signal 15019/27951 (executing program) 1970/01/01 00:04:34 fetching corpus: 9597, signal 15085/27952 (executing program) 1970/01/01 00:04:34 fetching corpus: 9647, signal 15142/27952 (executing program) 1970/01/01 00:04:35 fetching corpus: 9697, signal 15213/27952 (executing program) 1970/01/01 00:04:35 fetching corpus: 9747, signal 15278/27953 (executing program) 1970/01/01 00:04:35 fetching corpus: 9797, signal 15341/27953 (executing program) 1970/01/01 00:04:35 fetching corpus: 9847, signal 15408/27953 (executing program) 1970/01/01 00:04:35 fetching corpus: 9897, signal 15481/27953 (executing program) 1970/01/01 00:04:35 fetching corpus: 9947, signal 15546/27953 (executing program) 1970/01/01 00:04:35 fetching corpus: 9997, signal 15614/27955 (executing program) 1970/01/01 00:04:36 fetching corpus: 10047, signal 15723/27955 (executing program) 1970/01/01 00:04:36 fetching corpus: 10097, signal 15788/27955 (executing program) 1970/01/01 00:04:36 fetching corpus: 10147, signal 15866/27955 (executing program) 1970/01/01 00:04:36 fetching corpus: 10197, signal 15938/27966 (executing program) 1970/01/01 00:04:36 fetching corpus: 10247, signal 15998/27966 (executing program) 1970/01/01 00:04:37 fetching corpus: 10297, signal 16074/27966 (executing program) 1970/01/01 00:04:37 fetching corpus: 10347, signal 16146/27967 (executing program) 1970/01/01 00:04:37 fetching corpus: 10397, signal 16214/27967 (executing program) 1970/01/01 00:04:37 fetching corpus: 10447, signal 16279/27967 (executing program) 1970/01/01 00:04:37 fetching corpus: 10497, signal 16341/27967 (executing program) 1970/01/01 00:04:37 fetching corpus: 10547, signal 16410/27967 (executing program) 1970/01/01 00:04:37 fetching corpus: 10597, signal 16495/27967 (executing program) 1970/01/01 00:04:38 fetching corpus: 10647, signal 16571/27967 (executing program) 1970/01/01 00:04:38 fetching corpus: 10697, signal 16630/27968 (executing program) 1970/01/01 00:04:38 fetching corpus: 10747, signal 16692/27968 (executing program) 1970/01/01 00:04:38 fetching corpus: 10797, signal 16776/27968 (executing program) 1970/01/01 00:04:38 fetching corpus: 10846, signal 16844/27968 (executing program) 1970/01/01 00:04:38 fetching corpus: 10896, signal 16925/27968 (executing program) 1970/01/01 00:04:38 fetching corpus: 10946, signal 16987/27968 (executing program) 1970/01/01 00:04:38 fetching corpus: 10996, signal 17052/27968 (executing program) 1970/01/01 00:04:38 fetching corpus: 11046, signal 17115/27968 (executing program) 1970/01/01 00:04:38 fetching corpus: 11096, signal 17182/27968 (executing program) 1970/01/01 00:04:38 fetching corpus: 11146, signal 17250/27968 (executing program) 1970/01/01 00:04:38 fetching corpus: 11196, signal 17330/27968 (executing program) 1970/01/01 00:04:39 fetching corpus: 11246, signal 17401/27968 (executing program) 1970/01/01 00:04:39 fetching corpus: 11296, signal 17460/27968 (executing program) 1970/01/01 00:04:39 fetching corpus: 11346, signal 17525/27968 (executing program) 1970/01/01 00:04:39 fetching corpus: 11396, signal 17595/27969 (executing program) 1970/01/01 00:04:39 fetching corpus: 11446, signal 17668/27969 (executing program) 1970/01/01 00:04:39 fetching corpus: 11496, signal 17739/27969 (executing program) 1970/01/01 00:04:39 fetching corpus: 11546, signal 17797/27969 (executing program) 1970/01/01 00:04:39 fetching corpus: 11596, signal 17860/27969 (executing program) 1970/01/01 00:04:39 fetching corpus: 11646, signal 17931/27969 (executing program) 1970/01/01 00:04:39 fetching corpus: 11696, signal 17993/27971 (executing program) 1970/01/01 00:04:39 fetching corpus: 11746, signal 18050/27971 (executing program) 1970/01/01 00:04:39 fetching corpus: 11796, signal 18119/27971 (executing program) 1970/01/01 00:04:40 fetching corpus: 11846, signal 18186/27971 (executing program) 1970/01/01 00:04:40 fetching corpus: 11896, signal 18257/27971 (executing program) 1970/01/01 00:04:40 fetching corpus: 11946, signal 18330/27971 (executing program) 1970/01/01 00:04:40 fetching corpus: 11996, signal 18395/27971 (executing program) 1970/01/01 00:04:40 fetching corpus: 12046, signal 18455/27971 (executing program) 1970/01/01 00:04:40 fetching corpus: 12096, signal 18516/27971 (executing program) 1970/01/01 00:04:40 fetching corpus: 12146, signal 18578/27971 (executing program) 1970/01/01 00:04:40 fetching corpus: 12195, signal 18651/27971 (executing program) 1970/01/01 00:04:41 fetching corpus: 12245, signal 18714/27971 (executing program) 1970/01/01 00:04:41 fetching corpus: 12295, signal 18767/27971 (executing program) 1970/01/01 00:04:41 fetching corpus: 12345, signal 18827/27971 (executing program) 1970/01/01 00:04:41 fetching corpus: 12395, signal 18886/27971 (executing program) 1970/01/01 00:04:41 fetching corpus: 12445, signal 18950/27971 (executing program) 1970/01/01 00:04:41 fetching corpus: 12495, signal 19040/27971 (executing program) 1970/01/01 00:04:42 fetching corpus: 12545, signal 19101/27971 (executing program) 1970/01/01 00:04:42 fetching corpus: 12595, signal 19185/27972 (executing program) 1970/01/01 00:04:42 fetching corpus: 12645, signal 19243/27972 (executing program) 1970/01/01 00:04:42 fetching corpus: 12695, signal 19311/27973 (executing program) 1970/01/01 00:04:42 fetching corpus: 12745, signal 19383/27973 (executing program) 1970/01/01 00:04:43 fetching corpus: 12795, signal 19453/27973 (executing program) 1970/01/01 00:04:43 fetching corpus: 12845, signal 19513/27973 (executing program) 1970/01/01 00:04:43 fetching corpus: 12895, signal 19571/27973 (executing program) 1970/01/01 00:04:43 fetching corpus: 12945, signal 19635/27973 (executing program) 1970/01/01 00:04:43 fetching corpus: 12995, signal 19711/27973 (executing program) 1970/01/01 00:04:43 fetching corpus: 13045, signal 19796/27973 (executing program) 1970/01/01 00:04:43 fetching corpus: 13095, signal 19858/27973 (executing program) 1970/01/01 00:04:43 fetching corpus: 13145, signal 19929/27973 (executing program) 1970/01/01 00:04:43 fetching corpus: 13195, signal 19994/27973 (executing program) 1970/01/01 00:04:44 fetching corpus: 13245, signal 20060/27973 (executing program) 1970/01/01 00:04:44 fetching corpus: 13295, signal 20130/27973 (executing program) 1970/01/01 00:04:44 fetching corpus: 13345, signal 20189/27973 (executing program) 1970/01/01 00:04:44 fetching corpus: 13395, signal 20265/27973 (executing program) 1970/01/01 00:04:44 fetching corpus: 13445, signal 20332/27973 (executing program) 1970/01/01 00:04:44 fetching corpus: 13495, signal 20405/27973 (executing program) 1970/01/01 00:04:44 fetching corpus: 13545, signal 20464/27975 (executing program) 1970/01/01 00:04:44 fetching corpus: 13595, signal 20524/27975 (executing program) 1970/01/01 00:04:45 fetching corpus: 13644, signal 20596/27975 (executing program) 1970/01/01 00:04:45 fetching corpus: 13694, signal 20672/27975 (executing program) 1970/01/01 00:04:45 fetching corpus: 13744, signal 20742/27975 (executing program) 1970/01/01 00:04:45 fetching corpus: 13794, signal 20807/27975 (executing program) 1970/01/01 00:04:45 fetching corpus: 13844, signal 20876/27975 (executing program) 1970/01/01 00:04:45 fetching corpus: 13894, signal 20941/27975 (executing program) 1970/01/01 00:04:45 fetching corpus: 13944, signal 21002/27975 (executing program) 1970/01/01 00:04:45 fetching corpus: 13994, signal 21074/27976 (executing program) 1970/01/01 00:04:45 fetching corpus: 14044, signal 21137/27977 (executing program) 1970/01/01 00:04:46 fetching corpus: 14094, signal 21197/27977 (executing program) 1970/01/01 00:04:46 fetching corpus: 14144, signal 21261/27977 (executing program) 1970/01/01 00:04:46 fetching corpus: 14194, signal 21337/27977 (executing program) 1970/01/01 00:04:46 fetching corpus: 14244, signal 21394/27977 (executing program) 1970/01/01 00:04:46 fetching corpus: 14294, signal 21461/27977 (executing program) 1970/01/01 00:04:46 fetching corpus: 14344, signal 21534/27977 (executing program) 1970/01/01 00:04:46 fetching corpus: 14394, signal 21601/27978 (executing program) 1970/01/01 00:04:46 fetching corpus: 14444, signal 21667/27978 (executing program) 1970/01/01 00:04:46 fetching corpus: 14494, signal 21733/27978 (executing program) 1970/01/01 00:04:47 fetching corpus: 14544, signal 21829/27978 (executing program) 1970/01/01 00:04:47 fetching corpus: 14594, signal 21893/27978 (executing program) 1970/01/01 00:04:47 fetching corpus: 14644, signal 21954/27978 (executing program) 1970/01/01 00:04:47 fetching corpus: 14694, signal 22022/27978 (executing program) 1970/01/01 00:04:47 fetching corpus: 14744, signal 22086/27978 (executing program) 1970/01/01 00:04:48 fetching corpus: 14794, signal 22151/27980 (executing program) 1970/01/01 00:04:48 fetching corpus: 14844, signal 22210/27983 (executing program) 1970/01/01 00:04:48 fetching corpus: 14894, signal 22275/27985 (executing program) 1970/01/01 00:04:49 fetching corpus: 14944, signal 22355/27985 (executing program) 1970/01/01 00:04:49 fetching corpus: 14994, signal 22416/27985 (executing program) 1970/01/01 00:04:49 fetching corpus: 15044, signal 22486/27985 (executing program) 1970/01/01 00:04:49 fetching corpus: 15094, signal 22547/27985 (executing program) 1970/01/01 00:04:49 fetching corpus: 15144, signal 22609/27985 (executing program) 1970/01/01 00:04:49 fetching corpus: 15194, signal 22671/27985 (executing program) 1970/01/01 00:04:50 fetching corpus: 15244, signal 22729/27985 (executing program) 1970/01/01 00:04:50 fetching corpus: 15294, signal 22799/27985 (executing program) 1970/01/01 00:04:50 fetching corpus: 15343, signal 22861/27985 (executing program) 1970/01/01 00:04:50 fetching corpus: 15393, signal 22921/27985 (executing program) 1970/01/01 00:04:50 fetching corpus: 15443, signal 22986/27985 (executing program) 1970/01/01 00:04:50 fetching corpus: 15493, signal 23047/27985 (executing program) 1970/01/01 00:04:50 fetching corpus: 15543, signal 23110/27985 (executing program) 1970/01/01 00:04:50 fetching corpus: 15593, signal 23173/27985 (executing program) 1970/01/01 00:04:50 fetching corpus: 15643, signal 23235/27985 (executing program) 1970/01/01 00:04:50 fetching corpus: 15693, signal 23301/27985 (executing program) 1970/01/01 00:04:51 fetching corpus: 15743, signal 23366/27985 (executing program) 1970/01/01 00:04:51 fetching corpus: 15793, signal 23433/27985 (executing program) 1970/01/01 00:04:51 fetching corpus: 15843, signal 23507/27986 (executing program) 1970/01/01 00:04:51 fetching corpus: 15893, signal 23573/27986 (executing program) 1970/01/01 00:04:51 fetching corpus: 15943, signal 23641/27986 (executing program) 1970/01/01 00:04:51 fetching corpus: 15993, signal 23702/27986 (executing program) 1970/01/01 00:04:51 fetching corpus: 16043, signal 23769/27986 (executing program) 1970/01/01 00:04:51 fetching corpus: 16093, signal 23838/27986 (executing program) 1970/01/01 00:04:51 fetching corpus: 16143, signal 23900/27986 (executing program) 1970/01/01 00:04:51 fetching corpus: 16193, signal 23959/27986 (executing program) 1970/01/01 00:04:52 fetching corpus: 16243, signal 24037/27986 (executing program) 1970/01/01 00:04:52 fetching corpus: 16293, signal 24116/27986 (executing program) 1970/01/01 00:04:52 fetching corpus: 16343, signal 24179/27986 (executing program) 1970/01/01 00:04:52 fetching corpus: 16393, signal 24241/27986 (executing program) 1970/01/01 00:04:52 fetching corpus: 16443, signal 24307/27986 (executing program) 1970/01/01 00:04:52 fetching corpus: 16493, signal 24374/27988 (executing program) 1970/01/01 00:04:52 fetching corpus: 16543, signal 24438/27990 (executing program) 1970/01/01 00:04:52 fetching corpus: 16593, signal 24509/27990 (executing program) 1970/01/01 00:04:52 fetching corpus: 16643, signal 24565/27990 (executing program) 1970/01/01 00:04:52 fetching corpus: 16693, signal 24624/27990 (executing program) 1970/01/01 00:04:52 fetching corpus: 16743, signal 24694/27990 (executing program) 1970/01/01 00:04:53 fetching corpus: 16793, signal 24762/27990 (executing program) 1970/01/01 00:04:53 fetching corpus: 16843, signal 24842/27990 (executing program) 1970/01/01 00:04:53 fetching corpus: 16893, signal 24903/27991 (executing program) 1970/01/01 00:04:53 fetching corpus: 16943, signal 24958/27991 (executing program) 1970/01/01 00:04:53 fetching corpus: 16993, signal 25011/27991 (executing program) 1970/01/01 00:04:53 fetching corpus: 17041, signal 25069/27991 (executing program) 1970/01/01 00:04:53 fetching corpus: 17091, signal 25131/27992 (executing program) 1970/01/01 00:04:54 fetching corpus: 17141, signal 25200/27992 (executing program) 1970/01/01 00:04:54 fetching corpus: 17191, signal 25255/27992 (executing program) 1970/01/01 00:04:54 fetching corpus: 17241, signal 25319/27992 (executing program) 1970/01/01 00:04:54 fetching corpus: 17291, signal 25419/27993 (executing program) 1970/01/01 00:04:54 fetching corpus: 17340, signal 25488/27993 (executing program) 1970/01/01 00:04:54 fetching corpus: 17390, signal 25557/27993 (executing program) 1970/01/01 00:04:54 fetching corpus: 17440, signal 25615/27993 (executing program) 1970/01/01 00:04:55 fetching corpus: 17490, signal 25683/27993 (executing program) 1970/01/01 00:04:55 fetching corpus: 17540, signal 25747/27993 (executing program) 1970/01/01 00:04:55 fetching corpus: 17590, signal 25804/27993 (executing program) 1970/01/01 00:04:55 fetching corpus: 17640, signal 25863/27993 (executing program) 1970/01/01 00:04:55 fetching corpus: 17690, signal 25920/27993 (executing program) 1970/01/01 00:04:55 fetching corpus: 17740, signal 25987/27993 (executing program) 1970/01/01 00:04:55 fetching corpus: 17790, signal 26052/27993 (executing program) 1970/01/01 00:04:56 fetching corpus: 17840, signal 26116/27993 (executing program) 1970/01/01 00:04:56 fetching corpus: 17890, signal 26191/27994 (executing program) 1970/01/01 00:04:56 fetching corpus: 17940, signal 26252/27994 (executing program) 1970/01/01 00:04:57 fetching corpus: 17990, signal 26323/27994 (executing program) 1970/01/01 00:04:57 fetching corpus: 18040, signal 26391/27994 (executing program) 1970/01/01 00:04:57 fetching corpus: 18090, signal 26451/27996 (executing program) 1970/01/01 00:04:57 fetching corpus: 18140, signal 26528/27996 (executing program) 1970/01/01 00:04:57 fetching corpus: 18190, signal 26608/27996 (executing program) 1970/01/01 00:04:57 fetching corpus: 18240, signal 26685/27996 (executing program) 1970/01/01 00:04:57 fetching corpus: 18290, signal 26758/28000 (executing program) 1970/01/01 00:04:58 fetching corpus: 18340, signal 26841/28000 (executing program) 1970/01/01 00:04:58 fetching corpus: 18390, signal 26910/28000 (executing program) 1970/01/01 00:04:58 fetching corpus: 18440, signal 26969/28000 (executing program) 1970/01/01 00:04:58 fetching corpus: 18490, signal 27037/28000 (executing program) 1970/01/01 00:04:58 fetching corpus: 18540, signal 27108/28000 (executing program) 1970/01/01 00:04:58 fetching corpus: 18589, signal 27165/28000 (executing program) 1970/01/01 00:04:58 fetching corpus: 18639, signal 27225/28000 (executing program) 1970/01/01 00:04:58 fetching corpus: 18689, signal 27288/28000 (executing program) 1970/01/01 00:04:58 fetching corpus: 18739, signal 27347/28000 (executing program) 1970/01/01 00:04:58 fetching corpus: 18789, signal 27409/28000 (executing program) 1970/01/01 00:04:58 fetching corpus: 18839, signal 27491/28000 (executing program) 1970/01/01 00:04:58 fetching corpus: 18889, signal 27552/28000 (executing program) 1970/01/01 00:04:59 fetching corpus: 18939, signal 27617/28000 (executing program) 1970/01/01 00:04:59 fetching corpus: 18989, signal 27674/28000 (executing program) 1970/01/01 00:04:59 fetching corpus: 19039, signal 27742/28000 (executing program) 1970/01/01 00:04:59 fetching corpus: 19087, signal 27803/28000 (executing program) 1970/01/01 00:04:59 fetching corpus: 19087, signal 27803/28000 (executing program) [ 347.888202][ C1] ================================================================== [ 347.889713][ C1] BUG: KASAN: slab-use-after-free in reweight_entity+0x720/0x888 [ 347.890309][ C1] Read of size 8 at addr ffff000012ff53f0 by task syz-fuzzer/3103 [ 347.890759][ C1] [ 347.891719][ C1] CPU: 1 PID: 3103 Comm: syz-fuzzer Not tainted 6.6.0-rc6-syzkaller-00182-gce55c22ec8b2 #0 [ 347.892907][ C1] Hardware name: linux,dummy-virt (DT) [ 347.893687][ C1] Call trace: [ 347.893988][ C1] dump_backtrace+0x9c/0x11c [ 347.894626][ C1] show_stack+0x18/0x24 [ 347.895060][ C1] dump_stack_lvl+0x74/0xd4 [ 347.895497][ C1] print_report+0xd8/0x598 [ 347.895805][ C1] kasan_report+0xc8/0x108 [ 347.896115][ C1] __asan_report_load8_noabort+0x20/0x2c [ 347.896452][ C1] reweight_entity+0x720/0x888 [ 347.896785][ C1] update_cfs_group+0x144/0x214 [ 347.897128][ C1] task_tick_fair+0xd8/0x8e0 [ 347.897413][ C1] scheduler_tick+0x218/0x4f8 [ 347.897827][ C1] update_process_times+0x180/0x1f8 [ 347.898245][ C1] tick_sched_handle+0x68/0x12c [ 347.898772][ C1] tick_sched_timer+0x74/0x120 [ 347.899087][ C1] __hrtimer_run_queues+0x580/0xb14 [ 347.899407][ C1] hrtimer_interrupt+0x2a4/0x768 [ 347.899750][ C1] arch_timer_handler_phys+0x40/0x6c [ 347.900103][ C1] handle_percpu_devid_irq+0x19c/0x30c [ 347.900443][ C1] generic_handle_domain_irq+0x78/0xa4 [ 347.900770][ C1] gic_handle_irq+0x54/0x188 [ 347.901085][ C1] call_on_irq_stack+0x24/0x4c [ 347.901393][ C1] do_interrupt_handler+0x12c/0x150 [ 347.901732][ C1] el1_interrupt+0x34/0x54 [ 347.902039][ C1] el1h_64_irq_handler+0x18/0x24 [ 347.902355][ C1] el1h_64_irq+0x64/0x68 [ 347.902674][ C1] charge_memcg+0x15c/0x210 [ 347.902993][ C1] __mem_cgroup_charge+0x38/0xb0 [ 347.903291][ C1] __handle_mm_fault+0x72c/0x2118 [ 347.903637][ C1] handle_mm_fault+0x31c/0x600 [ 347.903952][ C1] do_page_fault+0x220/0xad4 [ 347.904274][ C1] do_translation_fault+0x140/0x198 [ 347.904621][ C1] do_mem_abort+0x68/0x1a4 [ 347.904934][ C1] el0_da+0x64/0x150 [ 347.905268][ C1] el0t_64_sync_handler+0xb8/0x12c [ 347.905610][ C1] el0t_64_sync+0x190/0x194 [ 347.906179][ C1] [ 347.906503][ C1] Allocated by task 3108: [ 347.906957][ C1] kasan_save_stack+0x3c/0x64 [ 347.907319][ C1] kasan_set_track+0x2c/0x40 [ 347.907696][ C1] kasan_save_alloc_info+0x24/0x34 [ 347.908146][ C1] __kasan_slab_alloc+0x8c/0x90 [ 347.908534][ C1] kmem_cache_alloc_node+0x168/0x2d4 [ 347.908946][ C1] copy_process+0x360/0x5520 [ 347.909419][ C1] kernel_clone+0x140/0x7e8 [ 347.909778][ C1] __do_sys_clone+0xb8/0xfc [ 347.910081][ C1] __arm64_sys_clone+0xa4/0xfc [ 347.910387][ C1] invoke_syscall+0x6c/0x258 [ 347.910680][ C1] el0_svc_common.constprop.0+0xac/0x230 [ 347.910976][ C1] do_el0_svc+0x40/0x58 [ 347.911234][ C1] el0_svc+0x58/0x140 [ 347.911510][ C1] el0t_64_sync_handler+0x100/0x12c [ 347.911805][ C1] el0t_64_sync+0x190/0x194 [ 347.912138][ C1] [ 347.912401][ C1] Freed by task 93: [ 347.912701][ C1] kasan_save_stack+0x3c/0x64 [ 347.912981][ C1] kasan_set_track+0x2c/0x40 [ 347.913304][ C1] kasan_save_free_info+0x38/0x5c [ 347.913600][ C1] ____kasan_slab_free+0x120/0x1b8 [ 347.914140][ C1] __kasan_slab_free+0x18/0x24 [ 347.914420][ C1] kmem_cache_free+0x14c/0x4e8 [ 347.914731][ C1] free_task+0xd4/0x11c [ 347.914998][ C1] __put_task_struct+0x1e4/0x27c [ 347.915282][ C1] delayed_put_task_struct+0x138/0x314 [ 347.915578][ C1] rcu_core+0x950/0x1c3c [ 347.915866][ C1] rcu_core_si+0x10/0x1c [ 347.916143][ C1] __do_softirq+0x2e4/0xe1c [ 347.916460][ C1] [ 347.916760][ C1] Last potentially related work creation: [ 347.917111][ C1] kasan_save_stack+0x3c/0x64 [ 347.917532][ C1] __kasan_record_aux_stack+0xb4/0xe4 [ 347.917855][ C1] kasan_record_aux_stack_noalloc+0x14/0x20 [ 347.918205][ C1] __call_rcu_common.constprop.0+0x9c/0x8c0 [ 347.918599][ C1] call_rcu+0x10/0x1c [ 347.918897][ C1] release_task+0xbc8/0x1520 [ 347.919201][ C1] wait_consider_task+0xf14/0x2a5c [ 347.919511][ C1] do_wait+0x5a4/0x994 [ 347.919818][ C1] kernel_wait4+0xec/0x258 [ 347.920183][ C1] __do_sys_wait4+0x130/0x1e8 [ 347.920490][ C1] __arm64_sys_wait4+0x88/0xc8 [ 347.920806][ C1] invoke_syscall+0x6c/0x258 [ 347.921126][ C1] el0_svc_common.constprop.0+0xac/0x230 [ 347.921441][ C1] do_el0_svc+0x40/0x58 [ 347.921757][ C1] el0_svc+0x58/0x140 [ 347.922142][ C1] el0t_64_sync_handler+0x100/0x12c [ 347.922474][ C1] el0t_64_sync+0x190/0x194 [ 347.922804][ C1] [ 347.923066][ C1] Second to last potentially related work creation: [ 347.923398][ C1] kasan_save_stack+0x3c/0x64 [ 347.923733][ C1] __kasan_record_aux_stack+0xb4/0xe4 [ 347.924078][ C1] kasan_record_aux_stack+0x14/0x20 [ 347.924405][ C1] task_work_add+0x94/0x298 [ 347.924735][ C1] task_tick_mm_cid+0xfc/0x14c [ 347.925102][ C1] scheduler_tick+0x22c/0x4f8 [ 347.925417][ C1] update_process_times+0x180/0x1f8 [ 347.925781][ C1] tick_sched_handle+0x68/0x12c [ 347.926162][ C1] tick_sched_timer+0x74/0x120 [ 347.926506][ C1] __hrtimer_run_queues+0x580/0xb14 [ 347.926845][ C1] hrtimer_interrupt+0x2a4/0x768 [ 347.927186][ C1] arch_timer_handler_phys+0x40/0x6c [ 347.927792][ C1] handle_percpu_devid_irq+0x19c/0x30c [ 347.928180][ C1] generic_handle_domain_irq+0x78/0xa4 [ 347.928896][ C1] gic_handle_irq+0x54/0x188 [ 347.929271][ C1] [ 347.929571][ C1] The buggy address belongs to the object at ffff000012ff5340 [ 347.929571][ C1] which belongs to the cache task_struct of size 6848 [ 347.930266][ C1] The buggy address is located 176 bytes inside of [ 347.930266][ C1] freed 6848-byte region [ffff000012ff5340, ffff000012ff6e00) [ 347.930902][ C1] [ 347.931309][ C1] The buggy address belongs to the physical page: [ 347.932348][ C1] page:00000000eeada76c refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x52ff0 [ 347.933355][ C1] head:00000000eeada76c order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 347.933923][ C1] flags: 0x1ffc00000000840(slab|head|node=0|zone=0|lastcpupid=0x7ff) [ 347.934867][ C1] page_type: 0xffffffff() [ 347.935791][ C1] raw: 01ffc00000000840 ffff000009c80dc0 dead000000000100 dead000000000122 [ 347.936224][ C1] raw: 0000000000000000 0000000080040004 00000001ffffffff 0000000000000000 [ 347.936716][ C1] page dumped because: kasan: bad access detected [ 347.937106][ C1] [ 347.937438][ C1] Memory state around the buggy address: [ 347.938309][ C1] ffff000012ff5280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 347.938751][ C1] ffff000012ff5300: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 347.939187][ C1] >ffff000012ff5380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 347.939596][ C1] ^ [ 347.940030][ C1] ffff000012ff5400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 347.940371][ C1] ffff000012ff5480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 347.940796][ C1] ================================================================== [ 347.941311][ C1] Disabling lock debugging due to kernel taint [ 354.287236][ T3104] syz-fuzzer[3104]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 1970/01/01 00:05:53 starting 2 fuzzer processes 00:05:53 executing program 0: r0 = timerfd_create(0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5452, &(0x7f00000001c0)) 00:05:53 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) [ 354.557236][ T28] audit: type=1400 audit(354.180:71): avc: denied { execmem } for pid=3113 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 354.618845][ T28] audit: type=1400 audit(354.240:72): avc: denied { mounton } for pid=3115 comm="syz-executor.0" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 354.620079][ T28] audit: type=1400 audit(354.240:73): avc: denied { mount } for pid=3115 comm="syz-executor.0" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 354.626520][ T28] audit: type=1400 audit(354.250:74): avc: denied { read } for pid=3115 comm="syz-executor.0" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 354.636555][ T28] audit: type=1400 audit(354.260:75): avc: denied { open } for pid=3115 comm="syz-executor.0" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 354.655175][ T28] audit: type=1400 audit(354.270:76): avc: denied { mounton } for pid=3115 comm="syz-executor.0" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 354.716377][ T28] audit: type=1400 audit(354.340:77): avc: denied { module_request } for pid=3116 comm="syz-executor.1" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 354.730965][ T28] audit: type=1400 audit(354.340:78): avc: denied { module_request } for pid=3115 comm="syz-executor.0" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 354.839229][ T28] audit: type=1400 audit(354.460:79): avc: denied { sys_module } for pid=3116 comm="syz-executor.1" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 357.908803][ T3116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.956654][ T3116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.975055][ T3115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.054343][ T3115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.334948][ T3116] hsr_slave_0: entered promiscuous mode [ 359.416822][ T3116] hsr_slave_1: entered promiscuous mode [ 359.730836][ T3115] hsr_slave_0: entered promiscuous mode [ 359.782158][ T3115] hsr_slave_1: entered promiscuous mode [ 359.829099][ T3115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.829908][ T3115] Cannot create hsr debugfs directory [ 360.855530][ T28] audit: type=1400 audit(360.480:80): avc: denied { create } for pid=3116 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 360.856427][ T28] audit: type=1400 audit(360.480:81): avc: denied { write } for pid=3116 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 360.875807][ T28] audit: type=1400 audit(360.500:82): avc: denied { read } for pid=3116 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 360.890770][ T3116] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 360.957318][ T3116] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 361.024208][ T3116] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 361.079235][ T3116] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 361.454670][ T3115] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 361.542635][ T3115] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 361.620373][ T3115] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 361.696673][ T3115] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 362.850125][ T3116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.151598][ T3115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.558914][ T3116] veth0_vlan: entered promiscuous mode [ 367.612411][ T3116] veth1_vlan: entered promiscuous mode [ 367.794454][ T3116] veth0_macvtap: entered promiscuous mode [ 367.811505][ T3116] veth1_macvtap: entered promiscuous mode [ 368.040186][ T3115] veth0_vlan: entered promiscuous mode [ 368.097142][ T3116] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.099721][ T3116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.100079][ T3116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.100861][ T3116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.171719][ T3115] veth1_vlan: entered promiscuous mode [ 368.405574][ T28] audit: type=1400 audit(368.030:83): avc: denied { mounton } for pid=3116 comm="syz-executor.1" path="/dev/binderfs" dev="devtmpfs" ino=1517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 368.446468][ T28] audit: type=1400 audit(368.060:84): avc: denied { mount } for pid=3116 comm="syz-executor.1" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 368.583861][ T3115] veth0_macvtap: entered promiscuous mode [ 368.634486][ T3115] veth1_macvtap: entered promiscuous mode [ 368.876660][ T28] audit: type=1400 audit(368.500:85): avc: denied { read write } for pid=3116 comm="syz-executor.1" name="loop1" dev="devtmpfs" ino=641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 368.885308][ T28] audit: type=1400 audit(368.510:86): avc: denied { open } for pid=3116 comm="syz-executor.1" path="/dev/loop1" dev="devtmpfs" ino=641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 368.892456][ T28] audit: type=1400 audit(368.510:87): avc: denied { ioctl } for pid=3116 comm="syz-executor.1" path="/dev/loop1" dev="devtmpfs" ino=641 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 368.972890][ T3115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.973608][ T3115] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.973987][ T3115] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.974370][ T3115] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.268694][ T28] audit: type=1400 audit(368.890:88): avc: denied { read write } for pid=3253 comm="syz-executor.1" name="vhost-net" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 369.269670][ T28] audit: type=1400 audit(368.890:89): avc: denied { open } for pid=3253 comm="syz-executor.1" path="/dev/vhost-net" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 369.336238][ T28] audit: type=1400 audit(368.960:90): avc: denied { ioctl } for pid=3253 comm="syz-executor.1" path="/dev/vhost-net" dev="devtmpfs" ino=715 ioctlcmd=0x5206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 00:06:09 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) 00:06:09 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) 00:06:09 executing program 0: r0 = timerfd_create(0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5452, &(0x7f00000001c0)) 00:06:09 executing program 0: r0 = timerfd_create(0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5452, &(0x7f00000001c0)) 00:06:09 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) 00:06:10 executing program 0: r0 = timerfd_create(0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5452, &(0x7f00000001c0)) 00:06:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 370.912573][ T28] audit: type=1400 audit(370.540:91): avc: denied { create } for pid=3269 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 370.939414][ T3271] "syz-executor.1" (3271) uses obsolete ecb(arc4) skcipher [ 370.940837][ T28] audit: type=1400 audit(370.570:92): avc: denied { bind } for pid=3269 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 00:06:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fchown(r0, 0xffffffffffffffff, 0xffffffffffffffff) 00:06:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 371.350324][ T3276] "syz-executor.1" (3276) uses obsolete ecb(arc4) skcipher 00:06:11 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fchown(r0, 0xffffffffffffffff, 0xffffffffffffffff) 00:06:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 371.651596][ T3279] "syz-executor.1" (3279) uses obsolete ecb(arc4) skcipher 00:06:11 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fchown(r0, 0xffffffffffffffff, 0xffffffffffffffff) 00:06:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:06:11 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fchown(r0, 0xffffffffffffffff, 0xffffffffffffffff) [ 372.168983][ T3284] "syz-executor.1" (3284) uses obsolete ecb(arc4) skcipher 00:06:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_CREATE(r0, &(0x7f0000000200)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0}}, 0x120) 00:06:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "68c13b1e4455887a33eda9880b3049d6451eac"}) 00:06:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_CREATE(r0, &(0x7f0000000200)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0}}, 0x120) 00:06:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "68c13b1e4455887a33eda9880b3049d6451eac"}) 00:06:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_CREATE(r0, &(0x7f0000000200)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0}}, 0x120) 00:06:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "68c13b1e4455887a33eda9880b3049d6451eac"}) 00:06:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_CREATE(r0, &(0x7f0000000200)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0}}, 0x120) 00:06:13 executing program 1: r0 = io_uring_setup(0x7ead, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0x0, 0x0) 00:06:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "68c13b1e4455887a33eda9880b3049d6451eac"}) [ 373.933672][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 373.933835][ T28] audit: type=1400 audit(373.560:97): avc: denied { create } for pid=3303 comm="syz-executor.1" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 00:06:13 executing program 1: r0 = io_uring_setup(0x7ead, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0x0, 0x0) 00:06:13 executing program 0: r0 = io_uring_setup(0x7ead, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0x0, 0x0) 00:06:14 executing program 1: r0 = io_uring_setup(0x7ead, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0x0, 0x0) 00:06:14 executing program 1: r0 = io_uring_setup(0x7ead, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0x0, 0x0) 00:06:14 executing program 0: r0 = io_uring_setup(0x7ead, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0x0, 0x0) 00:06:14 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x10}, 0x10}}, 0x0) 00:06:14 executing program 0: r0 = io_uring_setup(0x7ead, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0x0, 0x0) [ 375.403156][ T28] audit: type=1400 audit(375.030:98): avc: denied { create } for pid=3317 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 375.406714][ T28] audit: type=1400 audit(375.030:99): avc: denied { write } for pid=3317 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 00:06:15 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x10}, 0x10}}, 0x0) 00:06:15 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40345410, &(0x7f00000000c0)=0x2) 00:06:15 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x10}, 0x10}}, 0x0) 00:06:15 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40345410, &(0x7f00000000c0)=0x2) 00:06:15 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x10}, 0x10}}, 0x0) 00:06:16 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) 00:06:16 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40345410, &(0x7f00000000c0)=0x2) 00:06:16 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) 00:06:17 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) VM DIAGNOSIS: 17:04:08 Registers: info registers vcpu 0 CPU#0 PC=ffff800084c7a094 X00=0000000000000000 X01=1fffe00002672340 X02=0000000000000001 X03=1ffff0001132cf61 X04=0000ffff8159bfff X05=ffff800089967ae8 X06=1ffff0001132cf61 X07=0000000000000001 X08=1fffe000026721c0 X09=1ffff0001132cf61 X10=ffff600002718c00 X11=ffff800089967b50 X12=ffff600002718c01 X13=1fffe00001b25838 X14=00000000000001e9 X15=1fffe00001b2583b X16=0000000000000002 X17=ffff7fffe44fa000 X18=ffff00000d92c1e0 X19=0000ffff8159f000 X20=0000000000000000 X21=0000000000000000 X22=ffff800084c7b270 X23=0000000000000001 X24=ffff8000863d0f48 X25=0000000000000000 X26=ffff00000d92b780 X27=ffff8000899679b0 X28=0000ffff8159d000 X29=ffff8000899676f0 X30=ffff8000808be4c8 SP=ffff800089967540 PSTATE=000000c5 ---- EL1h FPCR=00000000 FPSR=00000010 Q00=0000000000000000:0000000000000000 Q01=0000000000000000:c1162e42fefa39ef Q02=1f66bd4ab023dbee:96b90106bd620669 Q03=0000000040000000:0000000000000000 Q04=4010040140100401:4000000000000000 Q05=4010040140100401:4010040140100401 Q06=5555400000400000:5555400000400000 Q07=0000000000000000:0000000000000000 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000000000000000:0000000000000000 Q17=0000000000000000:0000000000000000 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000010:0000003883a335d0 Q31=0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800080435b60 X00=ffff8000864306f0 X01=ffff00000b570000 X02=0000000000000001 X03=0000000000000000 X04=1ffff00010c860de X05=1fffe000016ae002 X06=ffff00000b57002c X07=1fffe000016ae005 X08=00000000f3f3f3f3 X09=00000000f3000000 X10=00000000f2f2f2f2 X11=00000000f2000000 X12=ffff60000d51d7f3 X13=205d314320202020 X14=0000000000000000 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=ffff00000b570a60 X19=ffff8000863d49b8 X20=ffff00000b570000 X21=ffff00006a8ef9b8 X22=ffff7fffe451b000 X23=ffff800085f0d7b0 X24=0000000000000001 X25=0000000000000c1f X26=ffff800085ad7c60 X27=ffff00000dfa60c8 X28=00000035794317d8 X29=ffff8000892a77f0 X30=ffff800084c03be8 SP=ffff8000892a77f0 PSTATE=800000c5 N--- EL1h FPCR=00000000 FPSR=00000011 Q00=5d273541170f2a14:40f9643d608321b3 Q01=0000000000000000:4179bf8000000000 Q02=1f66bd4ab023dbee:96b90106bd620669 Q03=0000000000000000:3fdaf96b6e06798e Q04=0000000000000000:3fe0000000000000 Q05=0000000000000000:3fd3333333333333 Q06=0000000000000000:de420168fb8a11a1 Q07=0000000000000000:769219c90bd3c0c3 Q08=0000000000000000:6777fd1ae5de3078 Q09=0000000000000000:589f5ee1c9ba0706 Q10=0000000000000000:6717ffc52a41b01d Q11=0000000000000000:3620d22c3820f68b Q12=0000000000000000:992da735e5f1c666 Q13=0000000000000000:9894fd6cfbe86eaa Q14=0000000000000000:f2a493e48a2ad01c Q15=0000000000000000:d2fd841c044659e1 Q16=0000000000000000:0bb91f6ed7d7dfa7 Q17=0000000000000000:8f1bbcdc8f1bbcdc Q18=0000000000000000:ca62c1d6ca62c1d6 Q19=0000000000000000:6ed9eba15a827999 Q20=0000000000000000:00000000ee6f6841 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:f64d0c7c697a706e Q31=0000000000000000:0000000000000000