syzkaller login: [ 37.165619][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 37.165680][ T31] audit: type=1400 audit(37.120:68): avc: denied { read write } for pid=2995 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.175453][ T31] audit: type=1400 audit(37.120:69): avc: denied { open } for pid=2995 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:61442' (ED25519) to the list of known hosts. [ 60.971780][ T31] audit: type=1400 audit(60.920:70): avc: denied { name_bind } for pid=3000 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 62.453365][ T31] audit: type=1400 audit(62.400:71): avc: denied { execute } for pid=3002 comm="sh" name="syz-fuzzer" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 62.482761][ T31] audit: type=1400 audit(62.430:72): avc: denied { execute_no_trans } for pid=3002 comm="sh" path="/syz-fuzzer" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 1970/01/01 00:01:09 fuzzer started 1970/01/01 00:01:11 dialing manager at localhost:30000 [ 71.623406][ T31] audit: type=1400 audit(71.570:73): avc: denied { node_bind } for pid=3002 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 71.637284][ T31] audit: type=1400 audit(71.590:74): avc: denied { name_bind } for pid=3002 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 72.645151][ T31] audit: type=1400 audit(72.580:75): avc: denied { setattr } for pid=3014 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.654482][ T31] audit: type=1400 audit(72.600:76): avc: denied { mounton } for pid=3015 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 72.656589][ T31] audit: type=1400 audit(72.610:77): avc: denied { mount } for pid=3015 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 72.669147][ T31] audit: type=1400 audit(72.620:78): avc: denied { mounton } for pid=3011 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 72.671505][ T31] audit: type=1400 audit(72.620:79): avc: denied { mount } for pid=3011 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.687832][ T3011] cgroup: Unknown subsys name 'net' [ 72.695136][ T31] audit: type=1400 audit(72.640:80): avc: denied { unmount } for pid=3011 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.855919][ T3018] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 72.856031][ T3011] cgroup: Unknown subsys name 'hugetlb' [ 72.856741][ T31] audit: type=1400 audit(72.810:81): avc: denied { relabelto } for pid=3018 comm="mkswap" name="swap-file" dev="vda" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 72.857862][ T3011] cgroup: Unknown subsys name 'rlimit' [ 72.858918][ T31] audit: type=1400 audit(72.810:82): avc: denied { write } for pid=3018 comm="mkswap" path="/swap-file" dev="vda" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 76.836235][ T3013] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 1970/01/01 00:01:16 starting 2 executor processes [ 78.218632][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 78.218721][ T31] audit: type=1400 audit(78.170:85): avc: denied { execmem } for pid=3019 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 78.233451][ T31] audit: type=1400 audit(78.180:86): avc: denied { mounton } for pid=3021 comm="syz-executor.0" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 78.234224][ T31] audit: type=1400 audit(78.180:87): avc: denied { mount } for pid=3021 comm="syz-executor.0" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 78.245211][ T31] audit: type=1400 audit(78.180:88): avc: denied { read } for pid=3021 comm="syz-executor.0" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.246028][ T31] audit: type=1400 audit(78.180:89): avc: denied { open } for pid=3021 comm="syz-executor.0" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.246686][ T31] audit: type=1400 audit(78.190:90): avc: denied { mounton } for pid=3021 comm="syz-executor.0" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 78.252157][ T31] audit: type=1400 audit(78.200:91): avc: denied { module_request } for pid=3021 comm="syz-executor.0" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 78.315510][ T31] audit: type=1400 audit(78.250:92): avc: denied { sys_module } for pid=3021 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 78.869313][ T31] audit: type=1400 audit(78.820:93): avc: denied { ioctl } for pid=3021 comm="syz-executor.0" path="/dev/net/tun" dev="devtmpfs" ino=691 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.768549][ T3021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.790324][ T3021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.809303][ T3023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.813587][ T3023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.406358][ T3021] hsr_slave_0: entered promiscuous mode [ 80.409353][ T3021] hsr_slave_1: entered promiscuous mode [ 80.618637][ T31] audit: type=1400 audit(80.570:94): avc: denied { create } for pid=3021 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.622587][ T3021] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.629747][ T3021] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.633834][ T3021] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.638046][ T3021] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.820710][ T3023] hsr_slave_0: entered promiscuous mode [ 80.822986][ T3023] hsr_slave_1: entered promiscuous mode [ 80.830233][ T3023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.830847][ T3023] Cannot create hsr debugfs directory [ 81.116031][ T3023] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.120649][ T3023] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.124431][ T3023] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.129112][ T3023] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.240948][ T3021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.601645][ T3023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.079106][ T3021] veth0_vlan: entered promiscuous mode [ 83.091469][ T3021] veth1_vlan: entered promiscuous mode [ 83.126046][ T3021] veth0_macvtap: entered promiscuous mode [ 83.131940][ T3021] veth1_macvtap: entered promiscuous mode [ 83.166361][ T3021] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.166844][ T3021] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.167037][ T3021] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.167216][ T3021] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.258700][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 83.258757][ T31] audit: type=1400 audit(83.210:97): avc: denied { mounton } for pid=3021 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 83.268946][ T31] audit: type=1400 audit(83.220:98): avc: denied { mount } for pid=3021 comm="syz-executor.0" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 83.372994][ T31] audit: type=1400 audit(83.320:99): avc: denied { read write } for pid=3021 comm="syz-executor.0" name="loop0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.373817][ T31] audit: type=1400 audit(83.320:100): avc: denied { open } for pid=3021 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.380026][ T31] audit: type=1400 audit(83.320:101): avc: denied { ioctl } for pid=3021 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=635 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7/V\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O7@\xd1\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8J\x81\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}}) io_uring_enter(r1, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r1, 0x52e, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 83.890902][ T3023] veth0_vlan: entered promiscuous mode [ 83.908700][ T3023] veth1_vlan: entered promiscuous mode [ 83.973676][ T3023] veth0_macvtap: entered promiscuous mode [ 83.983242][ T3023] veth1_macvtap: entered promiscuous mode [ 84.030010][ T3023] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.030381][ T3023] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.030758][ T3023] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.031017][ T3023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.076324][ T95] usb 1-1: new high-speed USB device number 2 using dummy_hcd executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "108435", 0x40, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0x0, {[@nop, @exp_fastopen={0xfe, 0xa, 0xf989, "288033aa534c"}, @timestamp={0x8, 0xa}, @generic={0x0, 0x2}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}]}}}}}}}}, 0x0) [ 84.196756][ T31] audit: type=1400 audit(84.150:104): avc: denied { create } for pid=3713 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 executing program 1: mount(&(0x7f0000000000)=@filename='\x00', &(0x7f0000000300)='./cgroup\x00', &(0x7f00000000c0)='mqueue\x00', 0x0, 0x0) [ 84.336146][ T95] usb 1-1: Using ep0 maxpacket: 32 [ 84.340431][ T31] audit: type=1400 audit(84.290:105): avc: denied { mounton } for pid=3715 comm="syz-executor.1" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 84.345504][ T31] audit: type=1400 audit(84.290:106): avc: denied { mount } for pid=3715 comm="syz-executor.1" name="/" dev="mqueue" ino=1440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c200000000bbbbbbbbbb86dd600000000a0c2b"], 0x0) [ 84.456167][ T95] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 84.456920][ T95] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 84.457636][ T95] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 84.457957][ T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff}}) [ 84.469756][ T95] usb 1-1: config 0 descriptor?? [ 84.491682][ T3707] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.509416][ T95] hub 1-1:0.0: USB hub found executing program 1: timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000140)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 84.716176][ T95] hub 1-1:0.0: 2 ports detected [ 87.015432][ T56] hub 1-1:0.0: hub_ext_port_status failed (err = -32) executing program 1: r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000280)="b1000501600000000000000007000000331c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037002102000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008ad20300000000ec1d89e000040781e4b2fff040ff00"/177, 0xb1, 0x4, 0x0, 0x0) executing program 1: r0 = socket(0x18, 0x1, 0x0) listen(r0, 0x0) accept$unix(r0, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) setuid(0xffffffffffffffff) poll(0x0, 0x0, 0xffff) socket(0x0, 0x0, 0x0) executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000280)="ea", 0x1, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x1}, 0x1c) [ 90.087664][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 90.087721][ T31] audit: type=1400 audit(90.040:112): avc: denied { create } for pid=3737 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @val, {@ipv6}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600a843500140600fe8000000000000000000000000000bbfe80a6be452ceeb454a50000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, 0x0, 0x0) [ 90.609438][ T31] audit: type=1400 audit(90.560:113): avc: denied { prog_load } for pid=3744 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 90.610242][ T31] audit: type=1400 audit(90.560:114): avc: denied { bpf } for pid=3744 comm="syz-executor.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 90.626103][ T31] audit: type=1400 audit(90.580:115): avc: denied { perfmon } for pid=3744 comm="syz-executor.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 90.658475][ T31] audit: type=1400 audit(90.610:116): avc: denied { prog_run } for pid=3744 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 executing program 1: sendto$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffff9c, 0x29, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) open$dir(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10) dup(0xffffffffffffffff) shutdown(r0, 0x0) [ 90.850975][ T31] audit: type=1400 audit(90.800:117): avc: denied { create } for pid=3753 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.872236][ T31] audit: type=1400 audit(90.820:118): avc: denied { connect } for pid=3753 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.872784][ T31] audit: type=1400 audit(90.820:119): avc: denied { shutdown } for pid=3753 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f00000003c0)={0x0, 0x4a00}, 0x10) [ 91.049185][ T31] audit: type=1400 audit(91.000:120): avc: denied { setopt } for pid=3755 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x901, 0x0, 0xc) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f0000000600), &(0x7f0000000200)=0x4) [ 91.183998][ T31] audit: type=1400 audit(91.130:121): avc: denied { getopt } for pid=3757 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000000), 0xb) executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000400)={0x0, 0xa514, 0x3, 0xfff2, 0xefa, 0x0, 0xfff, 0x0, {0x0, @in, 0x0, 0x0, 0x0, 0x1, 0x401}}, &(0x7f0000000340)=0xb0) executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, 0x0, 0x0) executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, {0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x401}}, &(0x7f0000000340)=0xb0) executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000600)={[{@dioread_nolock}, {@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9c7c}}, {@debug}, {@mblk_io_submit}, {@errors_continue}, {@test_dummy_encryption}, {@data_err_abort}, {@nodiscard}]}, 0xfe, 0x43a, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x71e5b314}) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x0) [ 92.858789][ T3775] loop1: detected capacity change from 0 to 512 [ 92.862759][ T3775] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.610629][ T3775] EXT4-fs (loop1): Test dummy encryption mode enabled [ 93.649441][ T3775] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b040601c, mo2=0102] [ 93.651222][ T3775] System zones: 1-12 [ 93.657722][ T3775] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 93.663434][ T3775] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 93.667452][ T3775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.161248][ T3775] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 94.240322][ T3023] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = io_uring_setup(0x3ab6, &(0x7f0000004b00)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000080)={&(0x7f0000002000)={[{0x0}]}, 0x1}, 0x1) executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) [ 94.811202][ T3789] syz-executor.1 (3789): /proc/3788/oom_adj is deprecated, please use /proc/3788/oom_score_adj instead. executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x1) [ 95.046742][ T95] usb 1-1: USB disconnect, device number 2 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, 0x0, 0x0) executing program 1: r0 = mq_open(&(0x7f0000000000)='$\x00', 0x40, 0x0, 0x0) close_range(r0, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) write$P9_RWALK(r0, 0x0, 0x0) executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000000b00)=""/226, 0xe2}, {&(0x7f0000000140)=""/21, 0x15}, {&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000880)=""/64, 0x40}, {&(0x7f00000008c0)=""/54, 0x36}, {&(0x7f0000000cc0)=""/59, 0x3b}, {&(0x7f0000000d00)=""/223, 0xdf}], 0x10}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) executing program 1: r0 = memfd_create(&(0x7f0000000680)='\x01\fD\xd1\x1e\x803\x00\x00\xbf\xecs \xc5\xb55nVg\x1b\xa3\x8a\xcc\xf2!PmENs\xe5\x83Uz\xc0W\xc1\xcc\x97\xd1\x8e\x81\n\xc0\xb3Ac\xfe(\x00\x13\xaeZ\x8bp\x1e\xdc\x18\xddf\xe9\xe1\t\bR) \xa9P9(\xe1-q \xb3\x80\xb9\xdfj\xab\x1b\x91\xb0@\x12\xc5?\aR\xeeL\xd3\xed\xc2_o\xa6\x04\xf5\x9f\x04\xf1\xd5\xe3\xfa\xfd\x161\x13r\xc49\x80\x86\x1a\xbf\xf8H\xe8Cc\x84\xa6y\xb7\xbe\xf5\xcc\xc9Z\x9f\xa6\xcbX\x891\xed\a\xf9\xa6\xd8\xd0\x03\x00\x00\x00\x00\x00\x00\x00\']\by\xb5\xbcI\xbf\xacw\xda\xed\xf0^\xd35\xeb=\xc7\x82;\xb32;\x88\xc5\xa3\xc8\xb9\xf2\xe5\xf4\x93[\x91F\x83?\xfe\xd9\x7ff\xffQ\xff\xc0\x8f\xe4\xb8\xa3\xbf\xceAT\x17\xc6\xd8z\xe0\xd6\xe2\xbe\xf4\xd5\x16\x94\xe0\xbf0\xde\xcaS/\xf7\xeb\x89bmX08\xa2W\xcb\x86\b#s\xb4q6\xe88\x19\x1a\x14Z\xf3\xd7\x92\xe4bT\x02\x00\x10r\x9b~n`m:]#\x989\xc3psjO\x80n\\\xb9\x9b\xeami\xd1\x9cSL\xb6\x87\t\x9bg\xd3\xcf\xc0F\x8c\x9b\x12O\xac`\xb4\x94IH\xb0\xcd\xe9eC\xb1\x8d{\x19\xde\x19\x8e\xb5l\xa6\x1e\r)j\xec\x02\x19SM\xa6\xcf\xb9b)\xe7\xa8\x03~{\xc5\x9b\xa8I\x19j\xa5x\x877Xa\x91\x144\x064w\xc1\xe7J)\xean\xfd\xc6\xa5Y\x84\x82U\xdc\x1bQ\xd54\x01\x98\x88\xc8\xce\x94\xf8d\x9c\xba\x1e\xf3o\x87\xbc\xbaL\x87\b<\xb8o\xc8nd\xe0\xea\xea\xff9\x13l\x00\xd2D\xe1ARO:b\xfb\xbdj\x8c}`\x7f\xe1\xbc\xf7C\t,P\xf8\x0e\x85\xe0n\xa0\x1c\t\xdcF\xf1\x930x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, 0x0, 0x0) executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0x32600) write$cgroup_int(r1, &(0x7f0000000080), 0x12) executing program 1: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000d844000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000000008500000039000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 101.195165][ T31] audit: type=1400 audit(101.140:129): avc: denied { map_create } for pid=3826 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 101.199184][ T31] audit: type=1400 audit(101.150:130): avc: denied { map_read map_write } for pid=3826 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 executing program 1: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x541b, 0x203ffffc) executing program 0: r0 = mq_open(&(0x7f0000000000)='$\x00', 0x40, 0x0, 0x0) close_range(r0, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) write$P9_RWALK(r0, 0x0, 0x0) executing program 1: r0 = semget(0x0, 0x1, 0x601) syz_open_dev$ttys(0xc, 0x2, 0x0) semctl$GETVAL(0x0, 0x1, 0xc, &(0x7f0000000000)=""/181) msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/96) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000140)) executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, &(0x7f0000000500)="a2161a82e412852e800c97b339af6cf32e718bfd7cefcd929fb7ba1589a4c6b3e6df6c2e6dddfa3c760c67194a2dd3b75cf5c7956c9291c7373f54c5a4d25dcdae0874"}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) close(r1) socket$unix(0x1, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x0) timer_create(0x4, &(0x7f0000000000)={0x0, 0x1}, 0x0) r3 = socket$inet6(0xa, 0x0, 0x8000) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000000)=0x189, 0x4) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r6, 0xf50f, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f00000000c0)={0x0, 'bridge_slave_0\x00', {0x4}, 0x8}) [ 164.005418][ T31] audit: type=1400 audit(163.960:131): avc: denied { create } for pid=3833 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 164.008407][ T31] audit: type=1400 audit(163.960:132): avc: denied { ioctl } for pid=3833 comm="syz-executor.1" path="socket:[2606]" dev="sockfs" ino=2606 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 executing program 1: socket$packet(0x11, 0x0, 0x300) r0 = mq_open(&(0x7f0000000100)='\\%\x008e]\"\xed\x9a\x12J\xdf\x94mD\xb6\xc0s,X!\xb0\xa1\xfa\xd3(\xd99L\x96\x85\xf1\x99/=\x89\x97\xaf\xc9\xf1BF\xee\xbf\x02\xb8\x01\xfe\xdf\xf3\xb9\xbd>9\xb2\xe4]\xbd\x14+V\xb5\x1d=-C+\xe7\r\xab\xec0\x80dB\xba\xb3\xfb\xba\x90LQ\xa9\x9f\xdb$Bn\x96\xb6\xa0=~1\xe9\x04\xab\xbe\xeb\x8c\xf3\xca\xcdP\xb7s5\x9a\x94g\xb8\x85\xbeF\xb1G\xebz\xf7\x87|\xa2\xedf\xbbk%\xeb\x9d\x02\xde\xce\xc7m\xab\x0636\x8c\xf8\xf7\xa9\x93\xf3bI4\x93\xce\xd7\xb4\x16<\t\xc6n^\xfe\x89\xb5\x91\xf4T\xf5#>Z\x81\n\x90\xabj\x9fJ.\x03\xbc\xcf9\xa4\xda\xe8}{\xc1\xb6\x11', 0x40, 0x0, 0x0) ioctl$KDFONTOP_COPY(r0, 0x5450, 0x0) executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000100)=@sg0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x400, 0x0) [ 164.263745][ T31] audit: type=1400 audit(164.210:133): avc: denied { mount } for pid=3842 comm="syz-executor.1" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 executing program 1: ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000a80)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) [ 164.322215][ T31] audit: type=1400 audit(164.270:134): avc: denied { unmount } for pid=3023 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc8734c295cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f244a3c307145452ce64dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c65070020d7df0abc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000280)=""/223}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) [ 165.136160][ T3851] 8<--- cut here --- [ 165.136442][ T3851] Unable to handle kernel NULL pointer dereference at virtual address 00000000 when read [ 165.136706][ T3851] [00000000] *pgd=85036003, *pmd=fe676003 [ 165.147589][ T3851] Internal error: Oops: 205 [#1] PREEMPT SMP ARM [ 165.148067][ T3851] Modules linked in: [ 165.148490][ T3851] CPU: 1 PID: 3851 Comm: syz-executor.1 Not tainted 6.9.0-syzkaller #0 [ 165.148890][ T3851] Hardware name: ARM-Versatile Express [ 165.149284][ T3851] PC is at __kmap_local_page_prot+0xc/0x74 [ 165.150140][ T3851] LR is at copy_page_to_iter+0xf8/0x184 [ 165.150445][ T3851] pc : [<804832b0>] lr : [<8080b33c>] psr: 60000013 [ 165.150744][ T3851] sp : dfa05ca0 ip : dfa05cb0 fp : dfa05cac [ 165.151069][ T3851] r10: 00000018 r9 : 8285f4e8 r8 : 00000000 [ 165.151364][ T3851] r7 : 00000000 r6 : 00000000 r5 : 00000000 r4 : 846bf800 [ 165.151561][ T3851] r3 : 00c00000 r2 : 0000071f r1 : 00000000 r0 : 00000000 [ 165.151850][ T3851] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 165.152111][ T3851] Control: 30c5387d Table: 85016d80 DAC: 00000000 [ 165.152324][ T3851] Register r0 information: NULL pointer [ 165.152805][ T3851] Register r1 information: NULL pointer [ 165.152961][ T3851] Register r2 information: non-paged memory [ 165.153113][ T3851] Register r3 information: non-paged memory [ 165.153359][ T3851] Register r4 information: slab kmalloc-1k start 846bf800 pointer offset 0 size 1024 [ 165.153990][ T3851] Register r5 information: NULL pointer [ 165.154142][ T3851] Register r6 information: NULL pointer [ 165.154346][ T3851] Register r7 information: NULL pointer [ 165.154491][ T3851] Register r8 information: NULL pointer [ 165.154642][ T3851] Register r9 information: non-slab/vmalloc memory [ 165.155139][ T3851] Register r10 information: non-paged memory [ 165.155298][ T3851] Register r11 information: 2-page vmalloc region starting at 0xdfa04000 allocated at kernel_clone+0xac/0x3e4 [ 165.155820][ T3851] Register r12 information: 2-page vmalloc region starting at 0xdfa04000 allocated at kernel_clone+0xac/0x3e4 [ 165.156139][ T3851] Process syz-executor.1 (pid: 3851, stack limit = 0xdfa04000) [ 165.156510][ T3851] Stack: (0xdfa05ca0 to 0xdfa06000) [ 165.156760][ T3851] 5ca0: dfa05ce4 dfa05cb0 8080b33c 804832b0 dfa05cd4 dfa05f48 8024d45c 846bf800 [ 165.156981][ T3851] 5cc0: 846bf800 00000000 00000000 00000000 000000b3 00000018 dfa05d34 dfa05ce8 [ 165.157224][ T3851] 5ce0: 8146c74c 8080b250 40000013 84c22f40 842f4e00 842f4ee0 82fad500 842f4ee8 [ 165.157444][ T3851] 5d00: dfa05f48 00000000 dfa05d34 82fad500 000000b3 842f4e00 83e76c00 00000001 [ 165.157702][ T3851] 5d20: 00000000 00000000 dfa05da4 dfa05d38 81693d6c 8146c668 00000000 00000000 [ 165.157916][ T3851] 5d40: 00000000 842f4ee0 842f4ed0 7fffffff 82fad588 842f4efc 82fad734 dfa05f38 [ 165.158132][ T3851] 5d60: 00000000 83e76c00 802a5054 00000100 00000122 bc8d9a7c dfa05f38 81693c1c [ 165.158406][ T3851] 5d80: dfa05f38 84c22f00 00000000 00000000 00000000 dfa05df4 dfa05dc4 dfa05da8 [ 165.158620][ T3851] 5da0: 81692b00 81693c28 00000000 00000000 00000000 81692ac8 dfa05de4 dfa05dc8 [ 165.158832][ T3851] 5dc0: 813da510 81692ad4 dfa05f38 200004c0 84c22f00 00000000 dfa05ea4 dfa05de8 [ 165.159036][ T3851] 5de0: 813da714 813da4cc 00000001 00000000 dfa05e34 00000000 00000000 00000000 [ 165.159247][ T3851] 5e00: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 165.159466][ T3851] 5e20: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 165.159683][ T3851] 5e40: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 165.159894][ T3851] 5e60: 00000000 00000000 00000000 00000000 00000000 bc8d9a7c 05000000 00000000 [ 165.160107][ T3851] 5e80: dfa05f38 200004c0 00000000 84c22f00 83e76c00 00000129 dfa05f24 dfa05ea8 [ 165.160312][ T3851] 5ea0: 813dd7f8 813da690 00000000 00000000 80287b04 00000000 00000000 200006c0 [ 165.160529][ T3851] 5ec0: 000000b3 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 165.160729][ T3851] 5ee0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 bc8d9a7c [ 165.160941][ T3851] 5f00: dfa05f24 84c22f00 00000000 200004c0 00000000 8020029c dfa05fa4 dfa05f28 [ 165.161151][ T3851] 5f20: 813ddfd8 813dd77c 00000000 dfa05f38 00000001 fffffff7 dfa05df4 00000000 [ 165.161366][ T3851] 5f40: 00000000 00000000 00000000 00000000 200006c0 000000b3 00000001 00000000 [ 165.161574][ T3851] 5f60: 00000000 00000001 00000000 00000000 00000000 00000000 00000000 00000000 [ 165.161786][ T3851] 5f80: 8020c940 bc8d9a7c 00000000 00000000 0014c2c8 00000129 00000000 dfa05fa8 [ 165.162003][ T3851] 5fa0: 80200060 813ddf70 00000000 00000000 00000003 200004c0 00000000 00000000 [ 165.162307][ T3851] 5fc0: 00000000 00000000 0014c2c8 00000129 7ea9332e 7ea9332f 003d0f00 76bb90fc [ 165.162518][ T3851] 5fe0: 76bb8f08 76bb8ef8 00016d28 00051560 60000010 00000003 00000000 00000000 [ 165.162804][ T3851] Call trace: [ 165.163034][ T3851] [<804832a4>] (__kmap_local_page_prot) from [<8080b33c>] (copy_page_to_iter+0xf8/0x184) [ 165.163454][ T3851] [<8080b244>] (copy_page_to_iter) from [<8146c74c>] (sk_msg_recvmsg+0xf0/0x3cc) [ 165.163725][ T3851] r10:00000018 r9:000000b3 r8:00000000 r7:00000000 r6:00000000 r5:846bf800 [ 165.163944][ T3851] r4:846bf800 [ 165.164046][ T3851] [<8146c65c>] (sk_msg_recvmsg) from [<81693d6c>] (unix_bpf_recvmsg+0x150/0x444) [ 165.164283][ T3851] r10:00000000 r9:00000000 r8:00000001 r7:83e76c00 r6:842f4e00 r5:000000b3 [ 165.164479][ T3851] r4:82fad500 [ 165.164584][ T3851] [<81693c1c>] (unix_bpf_recvmsg) from [<81692b00>] (unix_dgram_recvmsg+0x38/0x4c) [ 165.164912][ T3851] r10:dfa05df4 r9:00000000 r8:00000000 r7:00000000 r6:84c22f00 r5:dfa05f38 [ 165.165243][ T3851] r4:81693c1c [ 165.165354][ T3851] [<81692ac8>] (unix_dgram_recvmsg) from [<813da510>] (sock_recvmsg+0x50/0x78) [ 165.165800][ T3851] r4:81692ac8 [ 165.165949][ T3851] [<813da4c0>] (sock_recvmsg) from [<813da714>] (____sys_recvmsg+0x90/0x184) [ 165.166192][ T3851] r7:00000000 r6:84c22f00 r5:200004c0 r4:dfa05f38 [ 165.166382][ T3851] [<813da684>] (____sys_recvmsg) from [<813dd7f8>] (___sys_recvmsg+0x88/0xbc) [ 165.166743][ T3851] r10:00000129 r9:83e76c00 r8:84c22f00 r7:00000000 r6:200004c0 r5:dfa05f38 [ 165.166924][ T3851] r4:00000000 [ 165.167025][ T3851] [<813dd770>] (___sys_recvmsg) from [<813ddfd8>] (sys_recvmsg+0x74/0xb8) [ 165.167306][ T3851] r8:8020029c r7:00000000 r6:200004c0 r5:00000000 r4:84c22f00 [ 165.167481][ T3851] [<813ddf64>] (sys_recvmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 165.167758][ T3851] Exception stack(0xdfa05fa8 to 0xdfa05ff0) [ 165.167938][ T3851] 5fa0: 00000000 00000000 00000003 200004c0 00000000 00000000 [ 165.168185][ T3851] 5fc0: 00000000 00000000 0014c2c8 00000129 7ea9332e 7ea9332f 003d0f00 76bb90fc [ 165.168423][ T3851] 5fe0: 76bb8f08 76bb8ef8 00016d28 00051560 [ 165.168611][ T3851] r7:00000129 r6:0014c2c8 r5:00000000 r4:00000000 [ 165.169215][ T3851] Code: eaffffe8 e1a0c00d e92dd800 e24cb004 (e5901000) [ 165.205899][ T3851] ---[ end trace 0000000000000000 ]--- [ 165.206432][ T3851] Kernel panic - not syncing: Fatal exception [ 165.208038][ T3851] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:06:03 Registers: info registers vcpu 0 CPU#0 R00=82c0e200 R01=dfab1958 R02=7318a03e R03=81902a8c R04=826f5908 R05=826f5900 R06=00000028 R07=00000006 R08=826f5908 R09=00000000 R10=00000000 R11=dfab1864 R12=dfab1868 R13=dfab1858 R14=81901720 R15=81902a9c PSR=60000093 -ZC- A S svc32 s00=05ec76f0 s01=00000001 d00=0000000105ec76f0 s02=dea713f1 s03=00000000 d01=00000000dea713f1 s04=767d2fca s05=dd7cf40c d02=dd7cf40c767d2fca s06=00000000 s07=00000000 d03=0000000000000000 s08=f604ce60 s09=77f8b713 d04=77f8b713f604ce60 s10=00000000 s11=00000000 d05=0000000000000000 s12=ffffffff s13=00000000 d06=00000000ffffffff s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=8351eec2 s21=098addc0 d10=098addc08351eec2 s22=6a579e6d s23=00000000 d11=000000006a579e6d s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=8ae3f000 R01=dfd7b000 R02=00000001 R03=8021b438 R04=7f00f000 R05=00000001 R06=828afde8 R07=7f00f000 R08=dfd7b000 R09=8260cad4 R10=828b0a0c R11=df9b5dac R12=df9b5db0 R13=df9b5d80 R14=802109fc R15=8021b450 PSR=80000113 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000