last executing test programs: 3.858125646s ago: executing program 0 (id=1122): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x27, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c0"}}, 0x13f) read(r0, &(0x7f0000001000), 0x1000) write$UHID_INPUT2(r0, 0x0, 0x0) 3.47843231s ago: executing program 0 (id=1124): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x200cc004, &(0x7f0000000280)={0xa, 0x4e22, 0x1, @mcast2}, 0x1c) 3.251054371s ago: executing program 0 (id=1126): socket$igmp(0x2, 0x3, 0x2) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x10000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000180)={0x0}) 2.888917094s ago: executing program 1 (id=1127): r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000000c0)="9894604084ced10ec37e9974a3a9", 0xe}], 0x1}}, {{&(0x7f00000001c0)=@ieee802154={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x80, 0x0}}], 0x2, 0x0) 2.780463116s ago: executing program 0 (id=1128): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110c2dbd7000fedbdf256800000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 2.470817198s ago: executing program 1 (id=1129): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) 2.020780432s ago: executing program 1 (id=1130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x800000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x28}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)={0x34, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0) 1.339950548s ago: executing program 1 (id=1131): mknod$loop(&(0x7f0000000240)='./file0\x00', 0x1, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0xb) r3 = dup2(r2, r0) ioctl$OCFS2_IOC_UNRESVSP64(r3, 0x4030582b, &(0x7f0000000200)={0x2, 0x1, 0x5, 0x4, 0xc}) 720.441443ms ago: executing program 1 (id=1132): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) socket$inet6(0xa, 0x1, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0) read(r6, &(0x7f0000000100)=""/43, 0x2b) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20040400) unshare(0xc000000) 119.184629ms ago: executing program 0 (id=1133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}]}]}, 0xa0}, 0x1, 0xfffff000}, 0x0) 209.93µs ago: executing program 1 (id=1134): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000011}, 0x4004800) 0s ago: executing program 0 (id=1135): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0) write$cgroup_pid(r0, &(0x7f0000000300), 0x12) kernel console output (not intermixed with test programs): [ 45.001084][ T28] audit: type=1400 audit(44.840:91): avc: denied { read write } for pid=3097 comm="scp" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.004522][ T28] audit: type=1400 audit(44.850:92): avc: denied { open } for pid=3097 comm="scp" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:11321' (ED25519) to the list of known hosts. [ 63.722538][ T28] audit: type=1400 audit(63.560:93): avc: denied { name_bind } for pid=3100 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 64.939774][ T28] audit: type=1400 audit(64.780:94): avc: denied { execute } for pid=3101 comm="sh" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 64.945455][ T28] audit: type=1400 audit(64.790:95): avc: denied { execute_no_trans } for pid=3101 comm="sh" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 68.294952][ T28] audit: type=1400 audit(68.140:96): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 68.304092][ T28] audit: type=1400 audit(68.150:97): avc: denied { mount } for pid=3101 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.319952][ T3101] cgroup: Unknown subsys name 'net' [ 68.329629][ T28] audit: type=1400 audit(68.170:98): avc: denied { unmount } for pid=3101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.465091][ T3101] cgroup: Unknown subsys name 'cpuset' [ 68.471557][ T3101] cgroup: Unknown subsys name 'hugetlb' [ 68.472616][ T3101] cgroup: Unknown subsys name 'rlimit' [ 68.680280][ T28] audit: type=1400 audit(68.520:99): avc: denied { setattr } for pid=3101 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.867400][ T3103] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 68.870038][ T28] audit: type=1400 audit(68.710:100): avc: denied { relabelto } for pid=3103 comm="mkswap" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 68.876067][ T28] audit: type=1400 audit(68.720:101): avc: denied { write } for pid=3103 comm="mkswap" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 68.908838][ T28] audit: type=1400 audit(68.750:102): avc: denied { read } for pid=3101 comm="syz-executor" name="swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 68.911078][ T28] audit: type=1400 audit(68.750:103): avc: denied { open } for pid=3101 comm="syz-executor" path="/swap-file" dev="vda" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 75.109853][ T3101] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.499368][ T28] audit: type=1400 audit(77.340:104): avc: denied { execmem } for pid=3104 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 77.559678][ T28] audit: type=1400 audit(77.400:105): avc: denied { read } for pid=3106 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.563215][ T28] audit: type=1400 audit(77.410:106): avc: denied { open } for pid=3106 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.570134][ T28] audit: type=1400 audit(77.410:107): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 77.597821][ T28] audit: type=1400 audit(77.440:108): avc: denied { module_request } for pid=3106 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 77.685781][ T28] audit: type=1400 audit(77.530:109): avc: denied { sys_module } for pid=3106 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 78.434128][ T28] audit: type=1400 audit(78.280:110): avc: denied { ioctl } for pid=3107 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=678 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.558083][ T3107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.590421][ T3107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.656151][ T3106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.666584][ T3106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.514688][ T3107] hsr_slave_0: entered promiscuous mode [ 80.518340][ T3107] hsr_slave_1: entered promiscuous mode [ 80.632592][ T3106] hsr_slave_0: entered promiscuous mode [ 80.635533][ T3106] hsr_slave_1: entered promiscuous mode [ 80.642708][ T3106] debugfs: 'hsr0' already exists in 'hsr' [ 80.644144][ T3106] Cannot create hsr debugfs directory [ 81.106223][ T28] audit: type=1400 audit(80.950:111): avc: denied { create } for pid=3107 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.113481][ T28] audit: type=1400 audit(80.950:112): avc: denied { write } for pid=3107 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.128303][ T28] audit: type=1400 audit(80.970:113): avc: denied { read } for pid=3107 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.155154][ T3107] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.168133][ T3107] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.174026][ T3107] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.186011][ T3107] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.200366][ T3107] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.208900][ T3107] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.215032][ T3107] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.224852][ T3107] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.229184][ T3106] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.238236][ T3106] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.284922][ T3106] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.292023][ T3106] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.303834][ T3106] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.309535][ T3106] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.311747][ T3106] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.318465][ T3106] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.946856][ T3106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.089103][ T3107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.757643][ T3106] veth0_vlan: entered promiscuous mode [ 84.779229][ T3106] veth1_vlan: entered promiscuous mode [ 84.800115][ T3107] veth0_vlan: entered promiscuous mode [ 84.827255][ T3107] veth1_vlan: entered promiscuous mode [ 84.860350][ T3106] veth0_macvtap: entered promiscuous mode [ 84.873607][ T3106] veth1_macvtap: entered promiscuous mode [ 84.929265][ T3107] veth0_macvtap: entered promiscuous mode [ 84.956109][ T3107] veth1_macvtap: entered promiscuous mode [ 85.001900][ T2447] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.003123][ T2447] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.084051][ T28] audit: type=1400 audit(84.930:114): avc: denied { mount } for pid=3106 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 85.089159][ T28] audit: type=1400 audit(84.930:115): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/syzkaller.UiINnh/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 85.092563][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.093741][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.096439][ T28] audit: type=1400 audit(84.940:116): avc: denied { mount } for pid=3106 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 85.109112][ T28] audit: type=1400 audit(84.950:117): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/syzkaller.UiINnh/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 85.114707][ T28] audit: type=1400 audit(84.960:118): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/syzkaller.UiINnh/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=1882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 85.131459][ T28] audit: type=1400 audit(84.970:119): avc: denied { unmount } for pid=3106 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 85.142056][ T28] audit: type=1400 audit(84.980:120): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 85.147644][ T28] audit: type=1400 audit(84.990:121): avc: denied { mount } for pid=3106 comm="syz-executor" name="/" dev="gadgetfs" ino=1884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 85.172022][ T28] audit: type=1400 audit(85.010:122): avc: denied { mount } for pid=3106 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 85.174732][ T28] audit: type=1400 audit(85.010:123): avc: denied { mounton } for pid=3106 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 85.201911][ T2474] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.202342][ T2474] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.202765][ T2474] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.203049][ T2474] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.264440][ T3106] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.902607][ T3714] process 'syz.0.1' launched '/dev/fd/6' with NULL argv: empty string added [ 86.633007][ T3723] tap0: tun_chr_ioctl cmd 1074025673 [ 90.159268][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 90.160278][ T28] audit: type=1400 audit(90.000:143): avc: denied { prog_load } for pid=3753 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 90.281710][ T28] audit: type=1400 audit(90.120:144): avc: denied { mount } for pid=3755 comm="syz.0.17" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 90.378705][ T28] audit: type=1400 audit(90.220:145): avc: denied { unmount } for pid=3106 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 90.425298][ T28] audit: type=1400 audit(90.270:146): avc: denied { create } for pid=3758 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.732500][ T28] audit: type=1400 audit(90.580:147): avc: denied { setopt } for pid=3767 comm="syz.0.22" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.754737][ T28] audit: type=1400 audit(90.600:148): avc: denied { bind } for pid=3767 comm="syz.0.22" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.756759][ T28] audit: type=1400 audit(90.600:149): avc: denied { name_bind } for pid=3767 comm="syz.0.22" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 90.771723][ T28] audit: type=1400 audit(90.600:150): avc: denied { node_bind } for pid=3767 comm="syz.0.22" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 90.802652][ T28] audit: type=1400 audit(90.650:151): avc: denied { write } for pid=3767 comm="syz.0.22" laddr=172.20.20.170 lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.543531][ T28] audit: type=1400 audit(91.390:152): avc: denied { map } for pid=3778 comm="syz.0.27" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2674 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.931882][ T2891] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.101108][ T2891] usb 1-1: Using ep0 maxpacket: 8 [ 92.112387][ T2891] usb 1-1: unable to get BOS descriptor or descriptor too short [ 92.114103][ T2891] usb 1-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=a5.73 [ 92.126074][ T2891] usb 1-1: config 1 has an invalid interface number: 229 but max is 0 [ 92.128236][ T2891] usb 1-1: config 1 has no interface number 0 [ 92.131463][ T2891] usb 1-1: config 1 interface 229 has no altsetting 0 [ 92.144381][ T2891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.145607][ T2891] usb 1-1: Product: syz [ 92.146336][ T2891] usb 1-1: Manufacturer: syz [ 92.147020][ T2891] usb 1-1: SerialNumber: syz [ 92.393997][ T2891] usb 1-1: selecting invalid altsetting 1 [ 92.397094][ T2891] comedi comedi5: could not switch to alternate setting 1 [ 92.399395][ T2891] usbduxfast 1-1:1.229: driver 'usbduxfast' failed to auto-configure device. [ 92.416810][ T2891] usb 1-1: USB disconnect, device number 2 [ 92.651866][ T3806] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3806 comm=syz.1.31 [ 94.628812][ T3821] FAULT_INJECTION: forcing a failure. [ 94.628812][ T3821] name failslab, interval 1, probability 0, space 0, times 1 [ 94.629885][ T3821] CPU: 1 UID: 0 PID: 3821 Comm: syz.1.38 Not tainted syzkaller #0 PREEMPT [ 94.630145][ T3821] Hardware name: ARM-Versatile Express [ 94.630408][ T3821] Call trace: [ 94.630711][ T3821] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 94.631699][ T3821] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 94.631795][ T3821] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 94.631866][ T3821] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 94.631932][ T3821] r7:8482ee40 r6:00000000 r5:8482ee40 r4:82b1ac48 [ 94.631951][ T3821] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 94.632008][ T3821] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 94.632078][ T3821] r8:00000000 r7:8482ee40 r6:805184c4 r5:00000cc0 r4:83002d80 [ 94.632097][ T3821] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 94.632155][ T3821] [<80546804>] (kmem_cache_alloc_noprof) from [<805184c4>] (anon_vma_clone+0x14c/0x4cc) [ 94.632245][ T3821] r10:82cd9198 r9:85d29eb0 r8:85d29eb0 r7:8437c820 r6:85c0e100 r5:8437c800 [ 94.632279][ T3821] r4:8437c820 [ 94.632299][ T3821] [<80518378>] (anon_vma_clone) from [<80526e94>] (__split_vma+0x15c/0x434) [ 94.632383][ T3821] r10:20000000 r9:20ff7fff r8:ea66df3c r7:20ff8000 r6:82e4a79c r5:8437c800 [ 94.632407][ T3821] r4:85c0e100 [ 94.632425][ T3821] [<80526d38>] (__split_vma) from [<805271e0>] (vms_gather_munmap_vmas+0x74/0x4fc) [ 94.632489][ T3821] r10:ea66de3c r9:7f000000 r8:ea66de48 r7:00000000 r6:20ff8000 r5:ea66de78 [ 94.632511][ T3821] r4:ea66df3c [ 94.632528][ T3821] [<8052716c>] (vms_gather_munmap_vmas) from [<80529f14>] (do_vmi_align_munmap+0xfc/0x278) [ 94.632593][ T3821] r10:ea66de3c r9:7f000000 r8:00002000 r7:00000000 r6:20ff8000 r5:20ffc000 [ 94.632616][ T3821] r4:ea66df3c [ 94.632633][ T3821] [<80529e18>] (do_vmi_align_munmap) from [<8052a110>] (do_vmi_munmap+0x80/0xfc) [ 94.632694][ T3821] r10:0000005b r9:00004000 r8:20ff8000 r7:00000001 r6:ea66df3c r5:8485a000 [ 94.632715][ T3821] r4:20ffc000 [ 94.632732][ T3821] [<8052a090>] (do_vmi_munmap) from [<8052bf98>] (__vm_munmap+0xc8/0x194) [ 94.632794][ T3821] r8:8485a14c r7:8485a000 r6:ea66df30 r5:20ff8000 r4:00000000 [ 94.632814][ T3821] [<8052bed0>] (__vm_munmap) from [<8050e244>] (sys_munmap+0x14/0x18) [ 94.632911][ T3821] r9:8482ee40 r8:8020029c r7:0000005b r6:0035630c r5:00000000 r4:00000000 [ 94.632932][ T3821] [<8050e230>] (sys_munmap) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 94.633064][ T3821] Exception stack(0xea66dfa8 to 0xea66dff0) [ 94.633230][ T3821] dfa0: 00000000 00000000 20ff8000 00004000 00000000 00000000 [ 94.633287][ T3821] dfc0: 00000000 00000000 0035630c 0000005b 003562d8 00000000 00000001 76f670dc [ 94.633336][ T3821] dfe0: 76f66e88 76f66e78 00018fa0 00130a50 [ 95.211362][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 95.228036][ T28] audit: type=1400 audit(95.050:163): avc: denied { sqpoll } for pid=3830 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 98.316024][ T3846] tun0: tun_chr_ioctl cmd 1074025680 [ 100.980297][ T28] audit: type=1400 audit(100.820:164): avc: denied { unmount } for pid=3860 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 103.256946][ T28] audit: type=1400 audit(103.100:165): avc: denied { ioctl } for pid=3867 comm="syz.0.54" path="socket:[2791]" dev="sockfs" ino=2791 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.806585][ T28] audit: type=1400 audit(103.650:166): avc: denied { view } for pid=3867 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 103.836803][ T3869] netlink: 76 bytes leftover after parsing attributes in process `syz.0.54'. [ 106.157036][ T3898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 106.808465][ T28] audit: type=1400 audit(106.650:167): avc: denied { create } for pid=3899 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.926925][ T3914] Zero length message leads to an empty skb [ 109.361904][ T28] audit: type=1400 audit(109.200:168): avc: denied { mounton } for pid=3917 comm="syz.0.68" path="/proc/96/task" dev="proc" ino=3152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 109.642881][ T3900] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3900 comm=syz.1.65 [ 110.751204][ T28] audit: type=1400 audit(110.590:169): avc: denied { create } for pid=3924 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.791794][ T28] audit: type=1400 audit(110.630:170): avc: denied { write } for pid=3924 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.507767][ T3948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 114.444169][ T3974] netlink: 7 bytes leftover after parsing attributes in process `syz.0.90'. [ 114.979799][ T28] audit: type=1400 audit(114.820:171): avc: denied { create } for pid=3977 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.064312][ T28] audit: type=1400 audit(114.910:172): avc: denied { bind } for pid=3977 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.071453][ T28] audit: type=1400 audit(114.910:173): avc: denied { setopt } for pid=3977 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.098172][ T28] audit: type=1400 audit(114.940:174): avc: denied { accept } for pid=3977 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.225483][ T28] audit: type=1400 audit(115.070:175): avc: denied { write } for pid=3977 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.236330][ T28] audit: type=1400 audit(115.080:176): avc: denied { read } for pid=3977 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 117.970081][ T28] audit: type=1400 audit(117.810:177): avc: denied { write } for pid=4014 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.552588][ T28] audit: type=1400 audit(118.400:178): avc: denied { create } for pid=4028 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 118.560037][ T28] audit: type=1400 audit(118.400:179): avc: denied { write } for pid=4028 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 120.171000][ T4040] bridge_slave_0: entered promiscuous mode [ 120.374294][ T28] audit: type=1400 audit(120.220:180): avc: denied { bind } for pid=4041 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.376357][ T28] audit: type=1400 audit(120.220:181): avc: denied { name_bind } for pid=4041 comm="syz.0.116" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 120.378223][ T28] audit: type=1400 audit(120.220:182): avc: denied { node_bind } for pid=4041 comm="syz.0.116" saddr=ff02::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 120.900195][ T28] audit: type=1400 audit(120.740:183): avc: denied { create } for pid=4034 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 120.902625][ T28] audit: type=1400 audit(120.740:184): avc: denied { ioctl } for pid=4034 comm="syz.1.114" path="socket:[2965]" dev="sockfs" ino=2965 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 125.047879][ T28] audit: type=1400 audit(124.890:185): avc: denied { ioctl } for pid=4064 comm="syz.0.125" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=3332 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 129.633472][ T28] audit: type=1400 audit(129.480:186): avc: denied { connect } for pid=4091 comm="syz.1.137" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.682987][ T28] audit: type=1400 audit(129.510:187): avc: denied { read } for pid=4091 comm="syz.1.137" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.162269][ T4103] syz.1.142 uses obsolete (PF_INET,SOCK_PACKET) [ 131.175909][ T28] audit: type=1400 audit(131.020:188): avc: denied { ioctl } for pid=4102 comm="syz.1.142" path="socket:[3023]" dev="sockfs" ino=3023 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.045970][ T4128] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 138.976336][ T28] audit: type=1400 audit(138.820:189): avc: denied { lock } for pid=4168 comm="syz.0.166" path="socket:[3476]" dev="sockfs" ino=3476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.288165][ T28] audit: type=1400 audit(139.130:190): avc: denied { mount } for pid=4177 comm="syz.1.170" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 139.424655][ T28] audit: type=1400 audit(139.270:191): avc: denied { write } for pid=4179 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 145.215300][ T4220] *** NOT YET: opcode 85 *** [ 145.505772][ T4224] bond1: entered allmulticast mode [ 145.507254][ T4224] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.217517][ T4272] ªªªªªª: renamed from vlan0 (while UP) [ 147.649853][ T28] audit: type=1400 audit(147.480:192): avc: denied { name_bind } for pid=4274 comm="syz.1.198" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 148.559033][ T4280] netlink: 'syz.1.201': attribute type 1 has an invalid length. [ 157.301679][ T4356] netlink: 44 bytes leftover after parsing attributes in process `syz.0.216'. [ 159.605423][ T4367] Illegal XDP return value 4294967274 on prog (id 12) dev N/A, expect packet loss! [ 169.029464][ T4399] macvlan2: entered promiscuous mode [ 169.031217][ T4399] bond0: entered promiscuous mode [ 169.035219][ T4399] bond_slave_0: entered promiscuous mode [ 169.042461][ T4399] bond_slave_1: entered promiscuous mode [ 169.052116][ T4399] macvlan2: entered allmulticast mode [ 169.052402][ T4399] bond0: entered allmulticast mode [ 169.055192][ T4399] bond_slave_0: entered allmulticast mode [ 169.061331][ T4399] bond_slave_1: entered allmulticast mode [ 169.066779][ T4399] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 171.985765][ T28] audit: type=1400 audit(171.810:193): avc: denied { mounton } for pid=4419 comm="syz.0.238" path="/107/file0" dev="tmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 173.357242][ T4424] ip6erspan0: entered allmulticast mode [ 178.092150][ T4453] FAULT_INJECTION: forcing a failure. [ 178.092150][ T4453] name failslab, interval 1, probability 0, space 0, times 0 [ 178.093555][ T4453] CPU: 1 UID: 0 PID: 4453 Comm: syz.0.247 Not tainted syzkaller #0 PREEMPT [ 178.093912][ T4453] Hardware name: ARM-Versatile Express [ 178.094255][ T4453] Call trace: [ 178.095772][ T4453] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 178.097235][ T4453] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 178.097404][ T4453] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 178.097548][ T4453] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 178.097612][ T4453] r7:000000b8 r6:00000000 r5:84fb0000 r4:82b1ac48 [ 178.097629][ T4453] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 178.097700][ T4453] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 178.097810][ T4453] r8:84fb0000 r7:000000b8 r6:8060d10c r5:00400dc0 r4:83001f00 [ 178.097830][ T4453] [<80568de8>] (should_failslab) from [<805488cc>] (__kmalloc_cache_noprof+0x58/0x338) [ 178.097888][ T4453] [<80548874>] (__kmalloc_cache_noprof) from [<8060d10c>] (fsnotify_alloc_group+0x44/0xb8) [ 178.098001][ T4453] r10:84fb0000 r9:00000001 r8:82a22dc0 r7:00000002 r6:81c27f14 r5:00000001 [ 178.098054][ T4453] r4:00000000 [ 178.098076][ T4453] [<8060d0c8>] (fsnotify_alloc_group) from [<8061570c>] (sys_fanotify_init+0xd8/0x484) [ 178.098168][ T4453] r7:00000002 r6:00001000 r5:00000000 r4:00000000 [ 178.098187][ T4453] [<80615634>] (sys_fanotify_init) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 178.098366][ T4453] Exception stack(0xdfa05fa8 to 0xdfa05ff0) [ 178.098530][ T4453] 5fa0: 00000000 00000000 00000000 00001000 00000000 00000000 [ 178.098606][ T4453] 5fc0: 00000000 00000000 0035630c 0000016f 003562d8 00000000 00000001 76f200dc [ 178.098643][ T4453] 5fe0: 76f1fe88 76f1fe78 00018fa0 00130a50 [ 178.098721][ T4453] r10:0000016f r9:84fb0000 r8:8020029c r7:0000016f r6:0035630c r5:00000000 [ 178.098764][ T4453] r4:00000000 [ 178.379359][ T28] audit: type=1400 audit(178.220:194): avc: denied { getopt } for pid=4458 comm="syz.0.250" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.422562][ T4461] fuse: Bad value for 'fd' [ 178.546653][ T4466] capability: warning: `syz.1.254' uses 32-bit capabilities (legacy support in use) [ 180.011831][ T28] audit: type=1400 audit(179.850:195): avc: denied { read } for pid=4496 comm="syz.0.263" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 180.013850][ T28] audit: type=1400 audit(179.850:196): avc: denied { open } for pid=4496 comm="syz.0.263" path="/119/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 180.038922][ T4503] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 180.040198][ T4503] block device autoloading is deprecated and will be removed. [ 180.063535][ T28] audit: type=1400 audit(179.910:197): avc: denied { ioctl } for pid=4496 comm="syz.0.263" path="/119/file0/file0" dev="fuse" ino=64 ioctlcmd=0x910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 180.400018][ T28] audit: type=1400 audit(180.240:198): avc: denied { getopt } for pid=4509 comm="syz.0.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 184.402126][ T4522] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 189.981818][ T4554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.284'. [ 190.074816][ T4554] bond1: entered promiscuous mode [ 190.075608][ T4554] bond1: entered allmulticast mode [ 190.076701][ T4554] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.106542][ T4554] erspan1: entered allmulticast mode [ 190.134268][ T4554] erspan1: entered promiscuous mode [ 190.135822][ T4554] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 194.294183][ T28] audit: type=1400 audit(194.140:199): avc: denied { setopt } for pid=4601 comm="syz.0.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 195.959672][ T28] audit: type=1400 audit(195.800:200): avc: denied { mount } for pid=4613 comm="syz.0.292" name="/" dev="ramfs" ino=3988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 195.969783][ T28] audit: type=1400 audit(195.810:201): avc: denied { mounton } for pid=4613 comm="syz.0.292" path="/144/file0" dev="ramfs" ino=3988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 196.018640][ T28] audit: type=1400 audit(195.860:202): avc: denied { unmount } for pid=3106 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 201.703187][ T28] audit: type=1400 audit(201.550:203): avc: denied { map } for pid=4655 comm="syz.0.299" path="pipe:[4023]" dev="pipefs" ino=4023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 202.165018][ T4661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.168462][ T4661] IPv6: NLM_F_CREATE should be set when creating new route [ 203.511312][ T4628] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.521848][ T4628] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.525513][ T4628] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.528364][ T4628] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.135906][ T4718] FAULT_INJECTION: forcing a failure. [ 218.135906][ T4718] name failslab, interval 1, probability 0, space 0, times 0 [ 218.148428][ T4718] CPU: 1 UID: 0 PID: 4718 Comm: syz.0.321 Not tainted syzkaller #0 PREEMPT [ 218.148572][ T4718] Hardware name: ARM-Versatile Express [ 218.148600][ T4718] Call trace: [ 218.148643][ T4718] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 218.148745][ T4718] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 218.148764][ T4718] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 218.148830][ T4718] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 218.148891][ T4718] r7:8400a4c0 r6:00000000 r5:8400a4c0 r4:82b1ac48 [ 218.148909][ T4718] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 218.148965][ T4718] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 218.149034][ T4718] r8:00000000 r7:8400a4c0 r6:805cb8c0 r5:00000cc0 r4:830bdcc0 [ 218.149052][ T4718] [<80568de8>] (should_failslab) from [<80546c44>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 218.149112][ T4718] [<80546be4>] (kmem_cache_alloc_lru_noprof) from [<805cb8c0>] (alloc_inode+0xa0/0xd0) [ 218.149184][ T4718] r10:00000167 r9:8400a4c0 r8:825438f4 r7:00000080 r6:81c25ce0 r5:833a8c00 [ 218.149206][ T4718] r4:00000000 [ 218.149222][ T4718] [<805cb820>] (alloc_inode) from [<805afe40>] (create_pipe_files+0x3c/0x24c) [ 218.149284][ T4718] r7:00000080 r6:dfa79f58 r5:8400a4c0 r4:00000000 [ 218.149300][ T4718] [<805afe04>] (create_pipe_files) from [<805b00a4>] (do_pipe2+0x54/0x140) [ 218.149393][ T4718] r9:8400a4c0 r8:8020029c r7:00000167 r6:00000000 r5:00000080 r4:00000000 [ 218.149416][ T4718] [<805b0050>] (do_pipe2) from [<805b0258>] (sys_pipe2+0x10/0x14) [ 218.149484][ T4718] r8:8020029c r7:00000167 r6:0035630c r5:00000000 r4:00000000 [ 218.149501][ T4718] [<805b0248>] (sys_pipe2) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 218.149549][ T4718] Exception stack(0xdfa79fa8 to 0xdfa79ff0) [ 218.149588][ T4718] 9fa0: 00000000 00000000 00000000 00000080 00000000 00000000 [ 218.149623][ T4718] 9fc0: 00000000 00000000 0035630c 00000167 003562d8 00000000 00000001 76f200dc [ 218.149652][ T4718] 9fe0: 76f1fe88 76f1fe78 00018fa0 00130a50 [ 219.422866][ T4734] netlink: 76 bytes leftover after parsing attributes in process `syz.1.329'. [ 220.784724][ T28] audit: type=1400 audit(220.630:204): avc: denied { cmd } for pid=4739 comm="iou-wrk-4740" path="socket:[5158]" dev="sockfs" ino=5158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 221.995846][ T28] audit: type=1326 audit(221.840:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4739 comm="syz.1.332" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x0 [ 223.267290][ T28] audit: type=1400 audit(223.110:206): avc: denied { create } for pid=4763 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 223.426854][ T28] audit: type=1400 audit(223.270:207): avc: denied { unmount } for pid=3106 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 223.859653][ T4781] netlink: 60 bytes leftover after parsing attributes in process `syz.1.343'. [ 225.293844][ T28] audit: type=1400 audit(225.140:208): avc: denied { audit_write } for pid=4804 comm="syz.0.350" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 230.479501][ T28] audit: type=1400 audit(230.320:209): avc: denied { mount } for pid=4810 comm="syz.1.353" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 231.658045][ T28] audit: type=1400 audit(231.500:210): avc: denied { ioctl } for pid=4825 comm="syz.0.358" path="socket:[5291]" dev="sockfs" ino=5291 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 232.321112][ T28] audit: type=1400 audit(232.160:211): avc: denied { setopt } for pid=4831 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 236.174322][ T4862] fuse: Bad value for 'fd' [ 237.853224][ T4870] FAULT_INJECTION: forcing a failure. [ 237.853224][ T4870] name failslab, interval 1, probability 0, space 0, times 0 [ 237.855021][ T4870] CPU: 1 UID: 0 PID: 4870 Comm: syz.0.376 Not tainted syzkaller #0 PREEMPT [ 237.855141][ T4870] Hardware name: ARM-Versatile Express [ 237.855169][ T4870] Call trace: [ 237.855211][ T4870] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 237.855329][ T4870] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 237.855349][ T4870] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 237.855399][ T4870] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 237.855457][ T4870] r7:84879880 r6:00000000 r5:84879880 r4:82b1ac48 [ 237.855476][ T4870] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 237.855533][ T4870] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 237.855601][ T4870] r8:00000000 r7:84879880 r6:805b1b34 r5:00000cc0 r4:830bdb40 [ 237.855623][ T4870] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 237.855690][ T4870] [<80546804>] (kmem_cache_alloc_noprof) from [<805b1b34>] (do_getname+0x2c/0x14c) [ 237.855770][ T4870] r10:00000015 r9:84879880 r8:00000001 r7:00000000 r6:00000000 r5:825438f8 [ 237.855794][ T4870] r4:00000000 [ 237.855810][ T4870] [<805b1b08>] (do_getname) from [<805b83b4>] (user_path_at+0x30/0x6c) [ 237.855870][ T4870] r10:00000015 r9:84879880 r8:00000000 r7:dfaf5f6c r6:ffffff9c r5:00000001 [ 237.855895][ T4870] r4:00000000 r3:dfaf5f6c [ 237.855913][ T4870] [<805b8384>] (user_path_at) from [<805d8d64>] (sys_mount+0x1bc/0x260) [ 237.855975][ T4870] r7:85f166c0 r6:864d0bc0 r5:00000000 r4:00000000 [ 237.855995][ T4870] [<805d8ba8>] (sys_mount) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 237.856047][ T4870] Exception stack(0xdfaf5fa8 to 0xdfaf5ff0) [ 237.856091][ T4870] 5fa0: 00000000 00000000 20000200 00000000 20000300 00024000 [ 237.856126][ T4870] 5fc0: 00000000 00000000 00356318 00000015 003562d8 00000000 00000001 76f200dc [ 237.856152][ T4870] 5fe0: 76f1fe88 76f1fe78 00018fa0 00130a50 [ 237.856187][ T4870] r10:00000015 r9:84879880 r8:8020029c r7:00000015 r6:00356318 r5:00000000 [ 237.856207][ T4870] r4:00000000 [ 239.191675][ T4874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 243.873048][ T4896] FAULT_INJECTION: forcing a failure. [ 243.873048][ T4896] name failslab, interval 1, probability 0, space 0, times 0 [ 243.873487][ T4896] CPU: 0 UID: 0 PID: 4896 Comm: syz.0.385 Not tainted syzkaller #0 PREEMPT [ 243.873585][ T4896] Hardware name: ARM-Versatile Express [ 243.873616][ T4896] Call trace: [ 243.873665][ T4896] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 243.874600][ T4896] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 243.876853][ T4896] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 243.877031][ T4896] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 243.877107][ T4896] r7:84fc1880 r6:00000000 r5:84fc1880 r4:82b1ac48 [ 243.877127][ T4896] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 243.877189][ T4896] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 243.877266][ T4896] r8:00000000 r7:84fc1880 r6:805d01b4 r5:00000dc0 r4:830bd180 [ 243.877426][ T4896] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 243.877803][ T4896] [<80546804>] (kmem_cache_alloc_noprof) from [<805d01b4>] (alloc_vfsmnt+0x28/0x1e0) [ 243.879638][ T4896] r10:00000001 r9:833f2200 r8:00000040 r7:8231dd18 r6:8254391c r5:833f2200 [ 243.879675][ T4896] r4:833f21f8 [ 243.880600][ T4896] [<805d018c>] (alloc_vfsmnt) from [<805d1f50>] (clone_mnt+0x20/0x210) [ 243.882914][ T4896] r7:836a3990 r6:00000040 r5:833f2200 r4:833f21f8 [ 243.882976][ T4896] [<805d1f30>] (clone_mnt) from [<805d6230>] (__do_loopback+0x104/0x11c) [ 243.883091][ T4896] r9:833f2200 r8:00000040 r7:836a3990 r6:dfa15f4c r5:833f2230 r4:833f21f8 [ 243.883113][ T4896] [<805d612c>] (__do_loopback) from [<805d6a70>] (vfs_open_tree+0x1c8/0x2f0) [ 243.883263][ T4896] r9:00000000 r8:00000004 r7:833c6c00 r6:84fc1880 r5:867ba000 r4:00000101 [ 243.883292][ T4896] [<805d68a8>] (vfs_open_tree) from [<805d7904>] (sys_open_tree+0x38/0x74) [ 243.883363][ T4896] r10:000001ac r9:84fc1880 r8:8020029c r7:200001c0 r6:ffffff9c r5:00000101 [ 243.883387][ T4896] r4:00000004 [ 243.883410][ T4896] [<805d78cc>] (sys_open_tree) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 243.883465][ T4896] Exception stack(0xdfa15fa8 to 0xdfa15ff0) [ 243.884992][ T4896] 5fa0: 00000000 00000000 ffffff9c 200001c0 00000101 00000000 [ 243.885230][ T4896] 5fc0: 00000000 00000000 00356310 000001ac 003562d8 00000000 00000001 76f200dc [ 243.885266][ T4896] 5fe0: 76f1fe88 76f1fe78 00018fa0 00130a50 [ 243.885303][ T4896] r7:000001ac r6:00356310 r5:00000000 r4:00000000 [ 255.048545][ T28] audit: type=1400 audit(254.890:212): avc: denied { create } for pid=4948 comm="syz.1.406" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 255.080990][ T28] audit: type=1400 audit(254.920:213): avc: denied { unlink } for pid=3107 comm="syz-executor" name="file1" dev="tmpfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 256.311063][ T28] audit: type=1400 audit(256.150:214): avc: denied { create } for pid=4954 comm="syz.0.409" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 256.577044][ T28] audit: type=1400 audit(256.400:215): avc: denied { unlink } for pid=3106 comm="syz-executor" name="bus" dev="tmpfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 257.018164][ T4961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'. [ 257.841786][ T28] audit: type=1400 audit(257.690:216): avc: denied { bind } for pid=4971 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 257.899981][ T28] audit: type=1400 audit(257.740:217): avc: denied { map } for pid=4971 comm="syz.1.417" path="socket:[6181]" dev="sockfs" ino=6181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 257.904239][ T28] audit: type=1400 audit(257.750:218): avc: denied { read } for pid=4971 comm="syz.1.417" path="socket:[6181]" dev="sockfs" ino=6181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 260.132510][ T4985] device-mapper: table: 248:0: zero-length target [ 260.133661][ T4985] device-mapper: ioctl: error adding target to table [ 263.232262][ T5002] capability: warning: `syz.1.428' uses deprecated v2 capabilities in a way that may be insecure [ 269.270139][ T28] audit: type=1400 audit(269.110:219): avc: denied { mounton } for pid=5034 comm="syz.0.441" path="/219/file0" dev="tmpfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 269.804446][ T5039] fuse: Bad value for 'fd' [ 270.375217][ T28] audit: type=1326 audit(270.220:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.1.444" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 270.394447][ T28] audit: type=1326 audit(270.220:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.1.444" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 270.411264][ T28] audit: type=1326 audit(270.250:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.1.444" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 270.426689][ T28] audit: type=1326 audit(270.250:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.1.444" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 270.427160][ T28] audit: type=1326 audit(270.250:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.1.444" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 270.427389][ T28] audit: type=1326 audit(270.250:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.1.444" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 270.427595][ T28] audit: type=1326 audit(270.250:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.1.444" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 270.427794][ T28] audit: type=1326 audit(270.250:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.1.444" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 270.427993][ T28] audit: type=1326 audit(270.250:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.1.444" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 271.063541][ T5050] fuse: Bad value for 'fd' [ 276.229271][ T28] kauditd_printk_skb: 310 callbacks suppressed [ 276.229615][ T28] audit: type=1326 audit(276.070:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.1.448" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 276.229890][ T28] audit: type=1326 audit(276.070:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.1.448" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 276.253975][ T28] audit: type=1326 audit(276.090:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.1.448" exe="/syz-executor" sig=0 arch=40000028 syscall=125 compat=0 ip=0x13073c code=0x7ffc0000 [ 276.265183][ T28] audit: type=1326 audit(276.100:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.1.448" exe="/syz-executor" sig=0 arch=40000028 syscall=175 compat=0 ip=0x10dfe4 code=0x7ffc0000 [ 276.266089][ T28] audit: type=1326 audit(276.110:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.1.448" exe="/syz-executor" sig=0 arch=40000028 syscall=435 compat=0 ip=0x1318bc code=0x7ffc0000 [ 276.283115][ T28] audit: type=1326 audit(276.130:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.1.448" exe="/syz-executor" sig=0 arch=40000028 syscall=338 compat=0 ip=0x10d5d8 code=0x7ffc0000 [ 276.294261][ T28] audit: type=1326 audit(276.140:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.1.448" exe="/syz-executor" sig=0 arch=40000028 syscall=175 compat=0 ip=0x10e054 code=0x7ffc0000 [ 276.294820][ T28] audit: type=1326 audit(276.140:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.1.448" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 276.312531][ T28] audit: type=1326 audit(276.160:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.1.448" exe="/syz-executor" sig=0 arch=40000028 syscall=175 compat=0 ip=0x10d650 code=0x7ffc0000 [ 276.312991][ T28] audit: type=1326 audit(276.160:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.1.448" exe="/syz-executor" sig=0 arch=40000028 syscall=192 compat=0 ip=0x130a50 code=0x7ffc0000 [ 281.576587][ T5079] fuse: Bad value for 'fd' [ 281.868079][ T5085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.460'. [ 283.213327][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 283.213813][ T28] audit: type=1400 audit(283.060:631): avc: denied { mount } for pid=5099 comm="syz.0.467" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 283.241662][ T5100] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 283.243891][ T28] audit: type=1400 audit(283.090:632): avc: denied { search } for pid=5099 comm="syz.0.467" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 283.244100][ T28] audit: type=1400 audit(283.090:633): avc: denied { search } for pid=5099 comm="syz.0.467" name="events" dev="tracefs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 283.298882][ T28] audit: type=1400 audit(283.140:634): avc: denied { unmount } for pid=3106 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 283.977984][ T5109] netlink: 'syz.1.470': attribute type 19 has an invalid length. [ 285.282431][ T5117] fuse: Bad value for 'fd' [ 286.207041][ T5122] fuse: fd is not a fuse device [ 287.427104][ T28] audit: type=1400 audit(287.270:635): avc: denied { write } for pid=5123 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.001954][ T28] audit: type=1400 audit(287.850:636): avc: denied { write } for pid=5137 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.536627][ T28] audit: type=1400 audit(289.380:637): avc: denied { wake_alarm } for pid=5154 comm="syz.1.490" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 289.555140][ T28] audit: type=1400 audit(289.400:638): avc: denied { append } for pid=5153 comm="syz.0.489" name="tun" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 292.289852][ T5172] fuse: Bad value for 'fd' [ 293.873200][ T5183] fuse: Bad value for 'fd' [ 294.886345][ T5193] fuse: Bad value for 'fd' [ 296.371564][ T5205] fuse: fd is not a fuse device [ 298.763390][ T28] audit: type=1400 audit(298.610:639): avc: denied { write } for pid=5221 comm="syz.0.521" name="uprobe_events" dev="tracefs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 298.768809][ T28] audit: type=1400 audit(298.610:640): avc: denied { open } for pid=5221 comm="syz.0.521" path="/256/tracing/uprobe_events" dev="tracefs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 298.875561][ T28] audit: type=1400 audit(298.720:641): avc: denied { unmount } for pid=3106 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 300.385801][ T5242] netlink: 44 bytes leftover after parsing attributes in process `syz.1.530'. [ 307.987628][ T5301] fuse: Bad value for 'fd' [ 309.302030][ T5288] mmap: syz.1.544 (5288) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 310.583852][ T5316] fuse: Bad value for 'fd' [ 311.705164][ T5330] fuse: Bad value for 'fd' [ 311.965573][ T5334] fuse: fd is not a fuse device [ 312.362783][ T28] audit: type=1400 audit(312.210:642): avc: denied { mount } for pid=5345 comm="syz.1.568" name="/" dev="pstore" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 312.378891][ T28] audit: type=1326 audit(312.220:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.1.568" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 312.382346][ T28] audit: type=1326 audit(312.230:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.1.568" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 312.385942][ T28] audit: type=1326 audit(312.230:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.1.568" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x130a50 code=0x7ffc0000 [ 312.391263][ T28] audit: type=1326 audit(312.230:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.1.568" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 312.409471][ T28] audit: type=1326 audit(312.250:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.1.568" exe="/syz-executor" sig=0 arch=40000028 syscall=430 compat=0 ip=0x130a50 code=0x7ffc0000 [ 312.413921][ T28] audit: type=1326 audit(312.260:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.1.568" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 312.420352][ T28] audit: type=1326 audit(312.260:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.1.568" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 312.425707][ T28] audit: type=1326 audit(312.270:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.1.568" exe="/syz-executor" sig=0 arch=40000028 syscall=431 compat=0 ip=0x130a50 code=0x7ffc0000 [ 312.428637][ T28] audit: type=1326 audit(312.270:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.1.568" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 317.919946][ T5379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.583'. [ 317.990183][ T5379] 8021q: adding VLAN 0 to HW filter on device bond2 [ 318.241637][ T5379] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 319.203263][ T5420] fuse: fd is not a fuse device [ 327.006422][ T5496] FAULT_INJECTION: forcing a failure. [ 327.006422][ T5496] name fail_futex, interval 1, probability 0, space 0, times 1 [ 327.007863][ T5496] CPU: 0 UID: 0 PID: 5496 Comm: syz.0.617 Not tainted syzkaller #0 PREEMPT [ 327.007959][ T5496] Hardware name: ARM-Versatile Express [ 327.007980][ T5496] Call trace: [ 327.008015][ T5496] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 327.008101][ T5496] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 327.008116][ T5496] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 327.008158][ T5496] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 327.008208][ T5496] r7:00000000 r6:00000000 r5:84fbbd40 r4:82afac00 [ 327.008229][ T5496] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 327.008276][ T5496] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 327.008325][ T5496] r8:000002e4 r7:00000000 r6:dfb69ed8 r5:00000000 r4:003562e4 [ 327.008338][ T5496] [<809fdf04>] (should_fail) from [<803544f4>] (get_futex_key+0xa8/0x558) [ 327.008380][ T5496] [<8035444c>] (get_futex_key) from [<80358eec>] (futex_wake+0x70/0x25c) [ 327.008433][ T5496] r10:000000f0 r9:00131dd8 r8:dfb69ec8 r7:ffffffff r6:003562e4 r5:000f4240 [ 327.008449][ T5496] r4:00000002 [ 327.008463][ T5496] [<80358e7c>] (futex_wake) from [<80355998>] (do_futex+0x194/0x1d0) [ 327.008515][ T5496] r10:000000f0 r9:00000001 r8:84fbbd40 r7:000f4240 r6:003562e4 r5:00000081 [ 327.008531][ T5496] r4:000f4240 [ 327.008544][ T5496] [<80355804>] (do_futex) from [<8035626c>] (sys_futex_time32+0x11c/0x1bc) [ 327.008584][ T5496] r4:00000000 [ 327.008597][ T5496] [<80356150>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 327.008637][ T5496] Exception stack(0xdfb69fa8 to 0xdfb69ff0) [ 327.008672][ T5496] 9fa0: 00131dd8 ffffffff 003562e4 00000081 000f4240 00000000 [ 327.008701][ T5496] 9fc0: 00131dd8 ffffffff 76f207d4 000000f0 00340000 00000000 00000001 76f200dc [ 327.008723][ T5496] 9fe0: 76f1ff38 76f1ff28 00021c30 00130a50 [ 327.008754][ T5496] r9:84fbbd40 r8:8020029c r7:000000f0 r6:76f207d4 r5:ffffffff r4:00131dd8 [ 328.352472][ T5504] fuse: fd is not a fuse device [ 328.892075][ T5509] FAULT_INJECTION: forcing a failure. [ 328.892075][ T5509] name fail_futex, interval 1, probability 0, space 0, times 0 [ 328.892646][ T5509] CPU: 1 UID: 0 PID: 5509 Comm: syz.0.623 Not tainted syzkaller #0 PREEMPT [ 328.892724][ T5509] Hardware name: ARM-Versatile Express [ 328.892751][ T5509] Call trace: [ 328.892812][ T5509] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 328.893097][ T5509] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 328.893365][ T5509] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 328.893438][ T5509] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 328.893803][ T5509] r7:00000000 r6:00000000 r5:84fc1880 r4:82afac00 [ 328.893831][ T5509] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 328.894802][ T5509] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 328.894891][ T5509] r8:000002e4 r7:00000000 r6:dfbd1ed8 r5:00000000 r4:003562e4 [ 328.895213][ T5509] [<809fdf04>] (should_fail) from [<803544f4>] (get_futex_key+0xa8/0x558) [ 328.895284][ T5509] [<8035444c>] (get_futex_key) from [<80358eec>] (futex_wake+0x70/0x25c) [ 328.895801][ T5509] r10:000000f0 r9:00131dd8 r8:dfbd1ec8 r7:ffffffff r6:003562e4 r5:000f4240 [ 328.895833][ T5509] r4:00000002 [ 328.896755][ T5509] [<80358e7c>] (futex_wake) from [<80355998>] (do_futex+0x194/0x1d0) [ 328.897188][ T5509] r10:000000f0 r9:00000001 r8:84fc1880 r7:000f4240 r6:003562e4 r5:00000081 [ 328.898371][ T5509] r4:000f4240 [ 328.898404][ T5509] [<80355804>] (do_futex) from [<8035626c>] (sys_futex_time32+0x11c/0x1bc) [ 328.899634][ T5509] r4:00000000 [ 328.899693][ T5509] [<80356150>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 328.899822][ T5509] Exception stack(0xdfbd1fa8 to 0xdfbd1ff0) [ 328.899906][ T5509] 1fa0: 00131dd8 ffffffff 003562e4 00000081 000f4240 00000000 [ 328.899990][ T5509] 1fc0: 00131dd8 ffffffff 76f207d4 000000f0 00340000 00000000 00000001 76f200dc [ 328.900044][ T5509] 1fe0: 76f1ff38 76f1ff28 00021c30 00130a50 [ 328.900085][ T5509] r9:84fc1880 r8:8020029c r7:000000f0 r6:76f207d4 r5:ffffffff r4:00131dd8 [ 331.473518][ T5532] syz.1.632 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 333.515235][ T5542] fuse: fd is not a fuse device [ 334.202275][ T5560] fuse: fd is not a fuse device [ 334.356101][ T5562] fuse: fd is not a fuse device [ 335.019912][ T5572] fuse: fd is not a fuse device [ 335.194093][ T5574] fuse: fd is not a fuse device [ 335.714706][ T5582] fuse: fd is not a fuse device [ 335.788376][ T5584] fuse: fd is not a fuse device [ 336.128883][ T5588] netlink: 'syz.1.656': attribute type 5 has an invalid length. [ 336.308239][ T5593] fuse: fd is not a fuse device [ 340.461937][ T5659] netlink: 'syz.1.671': attribute type 1 has an invalid length. [ 340.596378][ T5659] veth3: entered allmulticast mode [ 340.624110][ T5659] bond3: (slave veth3): Enslaving as an active interface with a down link [ 340.656404][ T5659] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 340.825324][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 340.829282][ T28] audit: type=1400 audit(340.670:685): avc: denied { connect } for pid=5708 comm="syz.1.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 341.445368][ T5717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 349.463179][ T28] audit: type=1326 audit(349.310:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.1.694" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 349.465653][ T28] audit: type=1326 audit(349.310:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.1.694" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 349.572943][ T28] audit: type=1326 audit(349.420:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.1.694" exe="/syz-executor" sig=0 arch=40000028 syscall=125 compat=0 ip=0x130a50 code=0x7ffc0000 [ 349.576128][ T28] audit: type=1326 audit(349.420:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.1.694" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 349.581809][ T28] audit: type=1326 audit(349.420:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.1.694" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 350.352689][ T5771] fuse: fd is not a fuse device [ 351.201250][ T5773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.697'. [ 351.255619][ T31] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 351.484170][ T5776] fuse: fd is not a fuse device [ 351.867990][ T5777] FAULT_INJECTION: forcing a failure. [ 351.867990][ T5777] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 351.873992][ T5777] CPU: 0 UID: 0 PID: 5777 Comm: syz.0.699 Not tainted syzkaller #0 PREEMPT [ 351.874143][ T5777] Hardware name: ARM-Versatile Express [ 351.874173][ T5777] Call trace: [ 351.874222][ T5777] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 351.874333][ T5777] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 351.874356][ T5777] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 351.874428][ T5777] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 351.874496][ T5777] r7:00000001 r6:00000000 r5:84826e40 r4:82b1ac9c [ 351.874515][ T5777] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 351.874574][ T5777] [<809fdce0>] (should_fail_ex) from [<80568ee4>] (should_fail_alloc_page+0x68/0x74) [ 351.874646][ T5777] r8:dfbb9df4 r7:00000001 r6:00000000 r5:00440dc0 r4:dfbb9e08 [ 351.874666][ T5777] [<80568e7c>] (should_fail_alloc_page) from [<8052d6f0>] (prepare_alloc_pages+0xf8/0x1b8) [ 351.874727][ T5777] [<8052d5f8>] (prepare_alloc_pages) from [<80536560>] (__alloc_frozen_pages_noprof+0xb0/0x1808) [ 351.874798][ T5777] r10:00000000 r9:84826e40 r8:84826e40 r7:82b19c00 r6:00000000 r5:00440dc0 [ 351.874830][ T5777] r4:84859c00 [ 351.874850][ T5777] [<805364b0>] (__alloc_frozen_pages_noprof) from [<80537cc8>] (__alloc_pages_noprof+0x10/0x60) [ 351.874923][ T5777] r10:00000183 r9:84826e40 r8:833c6900 r7:82b19c00 r6:86624cc8 r5:80003000 [ 351.874947][ T5777] r4:84859c00 [ 351.874964][ T5777] [<80537cb8>] (__alloc_pages_noprof) from [<8050468c>] (__pmd_alloc+0x44/0x218) [ 351.875024][ T5777] [<80504648>] (__pmd_alloc) from [<80237064>] (pgd_alloc+0x1b0/0x1dc) [ 351.875097][ T5777] r9:84826e40 r8:833c6900 r7:84859c00 r6:82543000 r5:80003000 r4:86624cc0 [ 351.875117][ T5777] [<80236eb4>] (pgd_alloc) from [<8024cc48>] (mm_init+0x114/0x224) [ 351.875188][ T5777] r9:84826e40 r8:833c6900 r7:84859ec8 r6:84826e40 r5:00000000 r4:84859c00 [ 351.875209][ T5777] [<8024cb34>] (mm_init) from [<8024d9fc>] (mm_alloc+0x40/0x4c) [ 351.875281][ T5777] r9:84826e40 r8:833c6900 r7:00000005 r6:85f51700 r5:00000000 r4:84859c00 [ 351.875304][ T5777] [<8024d9bc>] (mm_alloc) from [<805ac808>] (alloc_bprm+0xc4/0x304) [ 351.875370][ T5777] r5:00000000 r4:85fb1a00 [ 351.875389][ T5777] [<805ac744>] (alloc_bprm) from [<805acab0>] (do_execveat_common+0x68/0x18c) [ 351.875468][ T5777] r9:84826e40 r8:00000000 r7:00000000 r6:84826e40 r5:833c6900 r4:00000005 [ 351.875489][ T5777] [<805aca48>] (do_execveat_common) from [<805adc94>] (sys_execveat+0x4c/0x68) [ 351.875559][ T5777] r9:84826e40 r8:00001000 r7:00000000 r6:00000000 r5:00000005 r4:833c6900 [ 351.875579][ T5777] [<805adc48>] (sys_execveat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 351.875634][ T5777] Exception stack(0xdfbb9fa8 to 0xdfbb9ff0) [ 351.875677][ T5777] 9fa0: 00001000 00000000 00000005 20000000 00000000 00000000 [ 351.875715][ T5777] 9fc0: 00001000 00000000 00356318 00000183 003562d8 00000000 00000001 76f200dc [ 351.875745][ T5777] 9fe0: 76f1fe88 76f1fe78 00018fa0 00130a50 [ 351.875779][ T5777] r8:8020029c r7:00000183 r6:00356318 r5:00000000 r4:00001000 [ 352.161671][ T28] audit: type=1400 audit(352.000:691): avc: denied { setcurrent } for pid=5780 comm="syz.0.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 352.983475][ T5789] fuse: fd is not a fuse device [ 352.998437][ T5788] FAULT_INJECTION: forcing a failure. [ 352.998437][ T5788] name failslab, interval 1, probability 0, space 0, times 0 [ 353.001064][ T5788] CPU: 0 UID: 0 PID: 5788 Comm: syz.0.705 Not tainted syzkaller #0 PREEMPT [ 353.001211][ T5788] Hardware name: ARM-Versatile Express [ 353.001696][ T5788] Call trace: [ 353.001762][ T5788] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 353.001875][ T5788] r7:60000113 r6:60000113 r5:82336570 r4:00000000 [ 353.001966][ T5788] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 353.005246][ T5788] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 353.010368][ T5788] r7:84fbbd40 r6:00000000 r5:84fbbd40 r4:82b1ac48 [ 353.010471][ T5788] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 353.010560][ T5788] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 353.010667][ T5788] r8:00000000 r7:84fbbd40 r6:83001240 r5:00000dc0 r4:00000004 [ 353.010752][ T5788] [<80568de8>] (should_failslab) from [<80547834>] (__kmalloc_noprof+0xa8/0x3c8) [ 353.011624][ T5788] [<8054778c>] (__kmalloc_noprof) from [<807ea1c8>] (lsm_blob_alloc+0x28/0x3c) [ 353.011756][ T5788] r10:00000000 r9:84fed000 r8:8667e700 r7:00000000 r6:82cf0470 r5:8667fba0 [ 353.013048][ T5788] r4:8667fba0 [ 353.014091][ T5788] [<807ea1a0>] (lsm_blob_alloc) from [<807ea200>] (security_tun_dev_alloc_security+0x24/0x17c) [ 353.016116][ T5788] r5:8667fba0 r4:8667e000 [ 353.016245][ T5788] [<807ea1dc>] (security_tun_dev_alloc_security) from [<80de42b0>] (tun_net_init+0x3c/0x184) [ 353.016834][ T5788] r7:00000000 r6:8667f000 r5:00000000 r4:8667e000 [ 353.016963][ T5788] [<80de4274>] (tun_net_init) from [<81671ca0>] (register_netdevice+0x140/0x9b8) [ 353.017855][ T5788] r10:00000000 r9:84fed000 r8:8667e0d8 r7:00000000 r6:860fd000 r5:8667e000 [ 353.017892][ T5788] r4:00000000 [ 353.018246][ T5788] [<81671b60>] (register_netdevice) from [<80de7178>] (tun_chr_ioctl+0x714/0x1764) [ 353.018476][ T5788] r10:00000000 r9:84fed000 r8:8667e000 r7:00000000 r6:85f5a200 r5:20000040 [ 353.018618][ T5788] r4:8667e700 [ 353.018725][ T5788] [<80de6a64>] (tun_chr_ioctl) from [<805bdf78>] (sys_ioctl+0x244/0xb5c) [ 353.020471][ T5788] r10:84fbbd40 r9:00000004 r8:85f5a200 r7:20000040 r6:400454ca r5:85f5a201 [ 353.020507][ T5788] r4:00000000 [ 353.020525][ T5788] [<805bdd34>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 353.020594][ T5788] Exception stack(0xdfa15fa8 to 0xdfa15ff0) [ 353.020634][ T5788] 5fa0: 00000000 00000000 00000004 400454ca 20000040 00000000 [ 353.020674][ T5788] 5fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f200dc [ 353.020704][ T5788] 5fe0: 76f1fe88 76f1fe78 00018fa0 00130a50 [ 353.020746][ T5788] r10:00000036 r9:84fbbd40 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 353.020768][ T5788] r4:00000000 [ 354.527913][ T5801] fuse: fd is not a fuse device [ 354.583695][ T28] audit: type=1400 audit(354.430:692): avc: denied { getopt } for pid=5798 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 355.911083][ T28] audit: type=1326 audit(355.740:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.0.715" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 355.911470][ T28] audit: type=1326 audit(355.750:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.0.715" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 355.911776][ T28] audit: type=1326 audit(355.750:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.0.715" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 355.911971][ T28] audit: type=1326 audit(355.750:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.0.715" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 355.916816][ T28] audit: type=1326 audit(355.760:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.0.715" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x130a50 code=0x7ffc0000 [ 355.918324][ T28] audit: type=1326 audit(355.760:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.0.715" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 355.928021][ T28] audit: type=1326 audit(355.770:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.0.715" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 355.946014][ T28] audit: type=1326 audit(355.750:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.0.715" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 355.961376][ T28] audit: type=1326 audit(355.800:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.0.715" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 356.516632][ T5809] netlink: 'syz.0.715': attribute type 7 has an invalid length. [ 356.726816][ T5811] fuse: fd is not a fuse device [ 364.838019][ T28] kauditd_printk_skb: 417 callbacks suppressed [ 364.838390][ T28] audit: type=1400 audit(364.680:1119): avc: denied { bind } for pid=5861 comm="syz.0.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 365.211775][ T5865] fuse: Bad value for 'fd' [ 367.343103][ T5885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.745'. [ 367.934280][ T28] audit: type=1326 audit(367.780:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.0.751" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 367.937273][ T28] audit: type=1326 audit(367.780:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.0.751" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 367.937865][ T28] audit: type=1326 audit(367.780:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.0.751" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 367.938128][ T28] audit: type=1326 audit(367.780:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.0.751" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 367.938393][ T28] audit: type=1326 audit(367.780:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.0.751" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 367.968236][ T28] audit: type=1326 audit(367.810:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.0.751" exe="/syz-executor" sig=0 arch=40000028 syscall=192 compat=0 ip=0x130a50 code=0x7ffc0000 [ 367.969061][ T28] audit: type=1326 audit(367.780:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.0.751" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 367.969825][ T28] audit: type=1326 audit(367.810:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.0.751" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 367.970041][ T28] audit: type=1326 audit(367.810:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.0.751" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 370.702015][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 370.702623][ T28] audit: type=1400 audit(370.540:1145): avc: denied { bind } for pid=5907 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 370.753289][ T28] audit: type=1400 audit(370.600:1146): avc: denied { listen } for pid=5907 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 370.926717][ T28] audit: type=1400 audit(370.770:1147): avc: denied { write } for pid=5907 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 371.782618][ T28] audit: type=1400 audit(371.590:1148): avc: denied { read } for pid=5913 comm="syz.0.760" name="trace" dev="tracefs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 372.242323][ T5920] fuse: fd is not a fuse device [ 377.342786][ T5978] ======================================================= [ 377.342786][ T5978] WARNING: The mand mount option has been deprecated and [ 377.342786][ T5978] and is ignored by this kernel. Remove the mand [ 377.342786][ T5978] option from the mount to silence this warning. [ 377.342786][ T5978] ======================================================= [ 378.040986][ T28] audit: type=1326 audit(377.870:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.0.788" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 378.041486][ T28] audit: type=1326 audit(377.880:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.0.788" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 378.046306][ T28] audit: type=1326 audit(377.890:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.0.788" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 378.046626][ T28] audit: type=1326 audit(377.890:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.0.788" exe="/syz-executor" sig=0 arch=40000028 syscall=324 compat=0 ip=0x130a50 code=0x7ffc0000 [ 378.046912][ T28] audit: type=1326 audit(377.890:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.0.788" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 378.047124][ T28] audit: type=1326 audit(377.890:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.0.788" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 378.047322][ T28] audit: type=1326 audit(377.890:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.0.788" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 378.047503][ T28] audit: type=1326 audit(377.890:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.0.788" exe="/syz-executor" sig=0 arch=40000028 syscall=436 compat=0 ip=0x130a50 code=0x7ffc0000 [ 378.047688][ T28] audit: type=1326 audit(377.890:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.0.788" exe="/syz-executor" sig=0 arch=40000028 syscall=248 compat=0 ip=0x130a50 code=0x7ffc0000 [ 379.049190][ T5996] fuse: fd is not a fuse device [ 380.851903][ T6013] fuse: fd is not a fuse device [ 384.422515][ T6036] netlink: 27 bytes leftover after parsing attributes in process `syz.1.806'. [ 388.661771][ T28] audit: type=1326 audit(388.500:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.1.814" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 388.663794][ T28] audit: type=1326 audit(388.500:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.1.814" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 388.674847][ T28] audit: type=1326 audit(388.500:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.1.814" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 388.679780][ T28] audit: type=1326 audit(388.510:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.1.814" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 388.685797][ T28] audit: type=1326 audit(388.510:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.1.814" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 388.690245][ T28] audit: type=1326 audit(388.510:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.1.814" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 388.695343][ T28] audit: type=1326 audit(388.510:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.1.814" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 388.699476][ T28] audit: type=1326 audit(388.510:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.1.814" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 388.707266][ T28] audit: type=1326 audit(388.510:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.1.814" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 388.717235][ T28] audit: type=1326 audit(388.510:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.1.814" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 391.177049][ T6069] fuse: fd is not a fuse device [ 403.485039][ T6125] fuse: Bad value for 'fd' [ 407.088887][ T6163] fuse: fd is not a fuse device [ 407.735065][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 407.742368][ T28] audit: type=1400 audit(407.580:1202): avc: denied { watch watch_reads } for pid=6172 comm="syz.1.864" path="/473" dev="tmpfs" ino=2498 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 407.863167][ T6175] fuse: fd is not a fuse device [ 408.556194][ T6191] fuse: fd is not a fuse device [ 415.771820][ T28] audit: type=1400 audit(415.610:1203): avc: denied { relabelfrom } for pid=6242 comm="syz.0.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 415.772231][ T28] audit: type=1400 audit(415.610:1204): avc: denied { relabelto } for pid=6242 comm="syz.0.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 423.592735][ T6291] fuse: fd is not a fuse device [ 428.072239][ T6304] fuse: fd is not a fuse device [ 429.334442][ T6322] fuse: Bad value for 'fd' [ 433.409389][ T6337] fuse: Bad value for 'fd' [ 435.295093][ T6349] fuse: Bad value for 'fd' [ 442.797657][ T6418] fuse: fd is not a fuse device [ 444.713083][ T6439] fuse: fd is not a fuse device [ 444.996633][ T28] audit: type=1400 audit(444.840:1205): avc: denied { create } for pid=6443 comm="syz.1.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 445.004872][ T28] audit: type=1400 audit(444.850:1206): avc: denied { write } for pid=6443 comm="syz.1.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 445.143282][ T6446] fuse: Bad value for 'fd' [ 445.577791][ T6451] fuse: fd is not a fuse device [ 445.882802][ T6457] fuse: Bad value for 'fd' [ 445.983603][ T28] audit: type=1400 audit(445.830:1207): avc: denied { mount } for pid=6458 comm="syz.1.979" name="/" dev="configfs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 446.104194][ T6461] fuse: fd is not a fuse device [ 447.021104][ T6475] fuse: fd is not a fuse device [ 447.302888][ T6477] FAULT_INJECTION: forcing a failure. [ 447.302888][ T6477] name failslab, interval 1, probability 0, space 0, times 0 [ 447.304660][ T6477] CPU: 0 UID: 0 PID: 6477 Comm: syz.0.986 Not tainted syzkaller #0 PREEMPT [ 447.304777][ T6477] Hardware name: ARM-Versatile Express [ 447.304807][ T6477] Call trace: [ 447.304854][ T6477] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 447.304963][ T6477] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 447.304986][ T6477] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 447.305043][ T6477] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 447.305111][ T6477] r7:ffffffff r6:00000000 r5:83ff0c40 r4:82b1ac48 [ 447.305132][ T6477] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 447.305195][ T6477] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 447.305271][ T6477] r8:83ff0c40 r7:ffffffff r6:83001300 r5:00000dc0 r4:00000080 [ 447.305293][ T6477] [<80568de8>] (should_failslab) from [<80547c00>] (__kmalloc_node_track_caller_noprof+0xac/0x3d8) [ 447.305396][ T6477] [<80547b54>] (__kmalloc_node_track_caller_noprof) from [<80be65c0>] (devm_kmalloc+0x40/0xec) [ 447.305534][ T6477] r10:83ff0c40 r9:00000004 r8:00000080 r7:847e96f8 r6:00000dc0 r5:00000014 [ 447.305559][ T6477] r4:80c10a48 [ 447.305577][ T6477] [<80be6580>] (devm_kmalloc) from [<80c10a48>] (pinctrl_bind_pins+0x34/0x2cc) [ 447.305669][ T6477] r9:00000004 r8:00000015 r7:00000000 r6:870c3030 r5:870c3030 r4:847e96f8 [ 447.305695][ T6477] [<80c10a14>] (pinctrl_bind_pins) from [<80be0454>] (really_probe+0x60/0x40c) [ 447.305770][ T6477] r7:00000000 r6:870c3030 r5:870c3030 r4:847e96f8 [ 447.305793][ T6477] [<80be03f4>] (really_probe) from [<80be08a0>] (__driver_probe_device+0xa0/0x21c) [ 447.305870][ T6477] r8:00000015 r7:847e96f8 r6:847e9744 r5:870c3030 r4:847e96f8 [ 447.305892][ T6477] [<80be0800>] (__driver_probe_device) from [<80be0afc>] (driver_probe_device+0x3c/0xc0) [ 447.305975][ T6477] r9:00000004 r8:00000015 r7:847e96f8 r6:847e9744 r5:82d271a4 r4:82d27194 [ 447.305998][ T6477] [<80be0ac0>] (driver_probe_device) from [<80be0d78>] (__driver_attach+0xc0/0x1f0) [ 447.306079][ T6477] r9:00000004 r8:86741938 r7:00000000 r6:847e9744 r5:870c3030 r4:847e96f8 [ 447.306100][ T6477] [<80be0cb8>] (__driver_attach) from [<80bdddec>] (bus_for_each_dev+0x84/0xd4) [ 447.306169][ T6477] r7:00000000 r6:833d4400 r5:80be0cb8 r4:870c3030 [ 447.306189][ T6477] [<80bddd68>] (bus_for_each_dev) from [<80bdfd4c>] (driver_attach+0x24/0x28) [ 447.306253][ T6477] r7:833d4400 r6:00000000 r5:86741900 r4:870c3030 [ 447.306275][ T6477] [<80bdfd28>] (driver_attach) from [<80bdf4a4>] (bus_add_driver+0x110/0x230) [ 447.306334][ T6477] [<80bdf394>] (bus_add_driver) from [<80be1e08>] (driver_register+0x88/0x124) [ 447.306413][ T6477] r8:85f51f00 r7:870c3004 r6:870c3030 r5:85f51f01 r4:870c3030 [ 447.306435][ T6477] [<80be1d80>] (driver_register) from [<810c62e0>] (usb_gadget_register_driver_owner+0x54/0xec) [ 447.306496][ T6477] r5:85f51f01 r4:870c300c [ 447.306516][ T6477] [<810c628c>] (usb_gadget_register_driver_owner) from [<8112f4c8>] (raw_ioctl+0x9f0/0x1228) [ 447.306590][ T6477] r7:870c3004 r6:60000013 r5:85f51f01 r4:870c3000 [ 447.306612][ T6477] [<8112ead8>] (raw_ioctl) from [<805bdf78>] (sys_ioctl+0x244/0xb5c) [ 447.306690][ T6477] r10:83ff0c40 r9:00000004 r8:85f51f00 r7:00000000 r6:00005501 r5:85f51f01 [ 447.306712][ T6477] r4:00000000 [ 447.306731][ T6477] [<805bdd34>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 447.306785][ T6477] Exception stack(0xea6adfa8 to 0xea6adff0) [ 447.306827][ T6477] dfa0: 00000000 76f1ee38 00000004 00005501 00000000 76f1ddc8 [ 447.306866][ T6477] dfc0: 00000000 76f1ee38 76f1de38 00000036 00000000 76f1de00 00000004 00480000 [ 447.306898][ T6477] dfe0: 00000000 76f1ddb0 00320000 0013055c [ 447.306943][ T6477] r10:00000036 r9:83ff0c40 r8:8020029c r7:00000036 r6:76f1de38 r5:76f1ee38 [ 447.306965][ T6477] r4:00000000 [ 447.355122][ T6477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.364775][ T6477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.590146][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.127140][ T6607] syz.0.1019 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=1000 [ 456.152044][ T6607] CPU: 0 UID: 0 PID: 6607 Comm: syz.0.1019 Not tainted syzkaller #0 PREEMPT [ 456.152198][ T6607] Hardware name: ARM-Versatile Express [ 456.152224][ T6607] Call trace: [ 456.152280][ T6607] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 456.152384][ T6607] r7:60000113 r6:60000113 r5:82336570 r4:00000000 [ 456.152405][ T6607] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 456.152461][ T6607] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 456.152525][ T6607] r7:81c1e934 r6:8234b67c r5:dfc35a70 r4:dfc35a70 [ 456.152546][ T6607] [<8021ec7c>] (dump_stack) from [<80205cdc>] (dump_header+0x4c/0x1b0) [ 456.152603][ T6607] [<80205c90>] (dump_header) from [<804a91cc>] (oom_kill_process+0x1b4/0x234) [ 456.152666][ T6607] r7:81c1e934 r6:8234b67c r5:dfc35a70 r4:839a8000 [ 456.152683][ T6607] [<804a9018>] (oom_kill_process) from [<804a99d8>] (out_of_memory+0x114/0x384) [ 456.152740][ T6607] r7:8632e540 r6:82cd43c4 r5:84fd8c40 r4:dfc35a70 [ 456.152756][ T6607] [<804a98c4>] (out_of_memory) from [<80571d88>] (mem_cgroup_out_of_memory+0xa0/0xb8) [ 456.152818][ T6607] r6:00400cc0 r5:8632e540 r4:00000000 [ 456.152835][ T6607] [<80571ce8>] (mem_cgroup_out_of_memory) from [<80578dd4>] (try_charge_memcg+0x41c/0x578) [ 456.152892][ T6607] r6:8632e540 r5:00000001 r4:00000001 [ 456.152910][ T6607] [<805789b8>] (try_charge_memcg) from [<80578f70>] (obj_cgroup_charge_pages+0x40/0x1c8) [ 456.152982][ T6607] r10:00000000 r9:00000000 r8:dfc35bac r7:00400cc0 r6:866f94c0 r5:00000001 [ 456.153006][ T6607] r4:8632e540 [ 456.153026][ T6607] [<80578f30>] (obj_cgroup_charge_pages) from [<80579bcc>] (__memcg_slab_post_alloc_hook+0x1e4/0x5dc) [ 456.153094][ T6607] r7:00000800 r6:830023c0 r5:866f94c0 r4:dded25e0 [ 456.153114][ T6607] [<805799e8>] (__memcg_slab_post_alloc_hook) from [<80547ef0>] (__kmalloc_node_track_caller_noprof+0x39c/0x3d8) [ 456.153187][ T6607] r10:828d7da8 r9:82a0b444 r8:84fd8c40 r7:ffffffff r6:830023c0 r5:00400cc0 [ 456.153209][ T6607] r4:00000424 [ 456.153225][ T6607] [<80547b54>] (__kmalloc_node_track_caller_noprof) from [<804d4d04>] (kmemdup_noprof+0x28/0x44) [ 456.153313][ T6607] r10:00000005 r9:00000000 r8:8644c8d8 r7:00000055 r6:82bf6034 r5:860fd000 [ 456.153335][ T6607] r4:00000424 [ 456.153379][ T6607] [<804d4cdc>] (kmemdup_noprof) from [<8188e898>] (__devinet_sysctl_register+0x58/0x11c) [ 456.153452][ T6607] r7:00000055 r6:8644c8d8 r5:860fd000 r4:8622da70 [ 456.153472][ T6607] [<8188e840>] (__devinet_sysctl_register) from [<8188e9d4>] (devinet_sysctl_register+0x78/0x98) [ 456.153544][ T6607] r8:fffffff0 r7:00000001 r6:8644c8d8 r5:8644c800 r4:8622da00 [ 456.153561][ T6607] [<8188e95c>] (devinet_sysctl_register) from [<8188eaec>] (inetdev_init+0xf8/0x218) [ 456.153631][ T6607] r7:00000001 r6:00000000 r5:8644c800 r4:8622da00 [ 456.153648][ T6607] [<8188e9f4>] (inetdev_init) from [<8188f774>] (inetdev_event+0x450/0x698) [ 456.153707][ T6607] r7:8644ced4 r6:00000000 r5:8644c800 r4:00000005 [ 456.153724][ T6607] [<8188f324>] (inetdev_event) from [<80287138>] (notifier_call_chain+0x8c/0x218) [ 456.153802][ T6607] r10:00000005 r9:00000000 r8:fffffff0 r7:8644ced4 r6:82bf65bc r5:82bf66c4 [ 456.153824][ T6607] r4:8188f324 [ 456.153842][ T6607] [<802870ac>] (notifier_call_chain) from [<802873a8>] (raw_notifier_call_chain+0x20/0x28) [ 456.153917][ T6607] r10:00000000 r9:00000004 r8:00000000 r7:8644ced4 r6:860fd000 r5:00000005 [ 456.153940][ T6607] r4:dfc35dc4 [ 456.153955][ T6607] [<80287388>] (raw_notifier_call_chain) from [<81664b44>] (call_netdevice_notifiers_info+0x54/0xa0) [ 456.154018][ T6607] [<81664af0>] (call_netdevice_notifiers_info) from [<816722c8>] (register_netdevice+0x768/0x9b8) [ 456.154080][ T6607] r6:860fd000 r5:8644c800 r4:00000000 [ 456.154140][ T6607] [<81671b60>] (register_netdevice) from [<81a3765c>] (register_vlan_dev+0x118/0x294) [ 456.154227][ T6607] r10:00000000 r9:00000004 r8:86478880 r7:847e2000 r6:8644cf00 r5:8644c800 [ 456.154251][ T6607] r4:86478880 [ 456.154282][ T6607] [<81a37544>] (register_vlan_dev) from [<81a37bd4>] (vlan_ioctl_handler+0x3fc/0x480) [ 456.154354][ T6607] r10:84fd8c40 r9:00000001 r8:860fd000 r7:847e2000 r6:00000004 r5:8644c800 [ 456.154377][ T6607] r4:00000000 [ 456.154392][ T6607] [<81a377d8>] (vlan_ioctl_handler) from [<816313e0>] (sock_ioctl+0xd4/0x4c0) [ 456.154465][ T6607] r9:00000005 r8:85e69480 r7:860fd000 r6:20000d00 r5:8502b6c0 r4:82e3a3e8 [ 456.154488][ T6607] [<8163130c>] (sock_ioctl) from [<805bdf78>] (sys_ioctl+0x244/0xb5c) [ 456.154559][ T6607] r9:00000005 r8:85e69480 r7:20000d00 r6:00008983 r5:85e69481 r4:00000000 [ 456.154578][ T6607] [<805bdd34>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 456.154627][ T6607] Exception stack(0xdfc35fa8 to 0xdfc35ff0) [ 456.154664][ T6607] 5fa0: 00000000 00000000 00000005 00008983 20000d00 00000000 [ 456.154698][ T6607] 5fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f200dc [ 456.154724][ T6607] 5fe0: 76f1fe88 76f1fe78 00018fa0 00130a50 [ 456.154760][ T6607] r10:00000036 r9:84fd8c40 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 456.154781][ T6607] r4:00000000 [ 456.200274][ T6607] memory: usage 8kB, limit 8kB, failcnt 21 [ 456.201165][ T6607] memory+swap: usage 8kB, limit 8589934588kB, failcnt 0 [ 456.201263][ T6607] kmem: usage 8kB, limit 8589934588kB, failcnt 0 [ 456.201319][ T6607] Memory cgroup stats for /syz0/test: [ 456.243291][ T6607] cache 0 [ 456.243399][ T6607] rss 0 [ 456.243417][ T6607] shmem 0 [ 456.243430][ T6607] mapped_file 0 [ 456.243444][ T6607] dirty 0 [ 456.243493][ T6607] writeback 0 [ 456.243532][ T6607] workingset_refault_anon 0 [ 456.243551][ T6607] workingset_refault_file 0 [ 456.243580][ T6607] swap 0 [ 456.243597][ T6607] swapcached 0 [ 456.243623][ T6607] pgpgin 0 [ 456.243639][ T6607] pgpgout 0 [ 456.243687][ T6607] pgfault 2 [ 456.243706][ T6607] pgmajfault 0 [ 456.243719][ T6607] inactive_anon 0 [ 456.243731][ T6607] active_anon 0 [ 456.243768][ T6607] inactive_file 0 [ 456.243785][ T6607] active_file 0 [ 456.243798][ T6607] unevictable 0 [ 456.243813][ T6607] hierarchical_memory_limit 8192 [ 456.243853][ T6607] hierarchical_memsw_limit 8796093018112 [ 456.243874][ T6607] total_cache 0 [ 456.243887][ T6607] total_rss 0 [ 456.243902][ T6607] total_shmem 0 [ 456.243915][ T6607] total_mapped_file 0 [ 456.243930][ T6607] total_dirty 0 [ 456.243942][ T6607] total_writeback 0 [ 456.243955][ T6607] total_workingset_refault_anon 0 [ 456.243969][ T6607] total_workingset_refault_file 0 [ 456.243981][ T6607] total_swap 0 [ 456.244012][ T6607] total_swapcached 0 [ 456.244029][ T6607] total_pgpgin 0 [ 456.244087][ T6607] total_pgpgout 0 [ 456.244127][ T6607] total_pgfault 2 [ 456.244144][ T6607] total_pgmajfault 0 [ 456.244160][ T6607] total_inactive_anon 0 [ 456.244175][ T6607] total_active_anon 0 [ 456.244188][ T6607] total_inactive_file 0 [ 456.244201][ T6607] total_active_file 0 [ 456.244214][ T6607] total_unevictable 0 [ 456.244227][ T6607] anon_cost 0 [ 456.244278][ T6607] file_cost 0 [ 456.244463][ T6607] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.1019,pid=6605,uid=0 [ 456.263879][ T6607] Memory cgroup out of memory: Killed process 6605 (syz.0.1019) total-vm:39740kB, anon-rss:116kB, file-rss:1480kB, shmem-rss:0kB, UID:0 pgtables:48kB oom_score_adj:1000 [ 456.390253][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.517151][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.623968][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.234962][ T31] bond0 (unregistering): left allmulticast mode [ 458.237247][ T31] bond_slave_0: left allmulticast mode [ 458.238634][ T31] bond_slave_1: left allmulticast mode [ 458.239577][ T31] bond0 (unregistering): left promiscuous mode [ 458.241688][ T31] bond_slave_1: left promiscuous mode [ 458.295824][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.313887][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.324559][ T31] bond0 (unregistering): Released all slaves [ 458.344617][ T31] bond1 (unregistering): Released all slaves [ 458.375049][ T31] bond2 (unregistering): Released all slaves [ 458.416665][ T31] bond3 (unregistering): (slave veth3): Releasing active interface [ 458.442370][ T31] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 458.459868][ T31] bond3 (unregistering): Released all slaves [ 458.621964][ T31] hsr_slave_0: left promiscuous mode [ 458.631991][ T31] hsr_slave_1: left promiscuous mode [ 458.673917][ T31] veth1_macvtap: left promiscuous mode [ 458.674464][ T31] veth0_macvtap: left promiscuous mode [ 458.675190][ T31] veth1_vlan: left promiscuous mode [ 458.675360][ T31] veth0_vlan: left promiscuous mode [ 460.582456][ T28] audit: type=1400 audit(460.430:1208): avc: denied { write } for pid=6647 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.008142][ T28] audit: type=1400 audit(460.850:1209): avc: denied { write } for pid=6692 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.378275][ T2961] 8021q: adding VLAN 0 to HW filter on device eth1 [ 461.575020][ T6757] FAULT_INJECTION: forcing a failure. [ 461.575020][ T6757] name failslab, interval 1, probability 0, space 0, times 0 [ 461.576773][ T6757] CPU: 0 UID: 0 PID: 6757 Comm: syz.0.1026 Not tainted syzkaller #0 PREEMPT [ 461.576883][ T6757] Hardware name: ARM-Versatile Express [ 461.576910][ T6757] Call trace: [ 461.576950][ T6757] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 461.577045][ T6757] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 461.577062][ T6757] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 461.577109][ T6757] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 461.577164][ T6757] r7:83ff3100 r6:00000000 r5:83ff3100 r4:82b1ac48 [ 461.577179][ T6757] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 461.577228][ T6757] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 461.577304][ T6757] r8:00000cc0 r7:83ff3100 r6:8164175c r5:00000cc0 r4:830e5c00 [ 461.577323][ T6757] [<80568de8>] (should_failslab) from [<80547028>] (kmem_cache_alloc_node_noprof+0x60/0x3ec) [ 461.577491][ T6757] [<80546fc8>] (kmem_cache_alloc_node_noprof) from [<8164175c>] (__alloc_skb+0x74/0x2ec) [ 461.577570][ T6757] r10:860fd000 r9:8164194c r8:00000cc0 r7:00000000 r6:830e5c00 r5:ffffffff [ 461.577590][ T6757] r4:dddd0908 [ 461.577605][ T6757] [<816416e8>] (__alloc_skb) from [<8188e7a4>] (inet_netconf_notify_devconf+0x78/0x114) [ 461.577680][ T6757] r9:860fd3f4 r8:860fd000 r7:ffffffff r6:00000050 r5:860fd000 r4:00000004 [ 461.577699][ T6757] [<8188e72c>] (inet_netconf_notify_devconf) from [<818bd7e4>] (mrtsock_destruct+0x9c/0xf4) [ 461.577771][ T6757] r8:860fd000 r7:dfb55e78 r6:8486b840 r5:860fd55c r4:84831000 [ 461.577787][ T6757] [<818bd748>] (mrtsock_destruct) from [<8183b3e4>] (ip_ra_control+0xb0/0x1b8) [ 461.577855][ T6757] r8:00000000 r7:00000000 r6:00000000 r5:8486b840 r4:8604db00 [ 461.577872][ T6757] [<8183b334>] (ip_ra_control) from [<818787c8>] (raw_close+0x1c/0x28) [ 461.577933][ T6757] r10:00000006 r9:83ff3100 r8:8383f310 r7:00000000 r6:81e81d54 r5:8486b840 [ 461.577956][ T6757] r4:8486b840 r3:818787ac [ 461.577972][ T6757] [<818787ac>] (raw_close) from [<81891524>] (inet_release+0x44/0x6c) [ 461.578022][ T6757] r5:8486b840 r4:8569ea40 [ 461.578037][ T6757] [<818914e0>] (inet_release) from [<8162e0e4>] (__sock_release+0x44/0xbc) [ 461.578089][ T6757] r5:8569eb40 r4:8569ea40 [ 461.578105][ T6757] [<8162e0a0>] (__sock_release) from [<8162e174>] (sock_close+0x18/0x20) [ 461.578159][ T6757] r7:8569eac0 r6:85049770 r5:0c2e0003 r4:86ec8000 [ 461.578221][ T6757] [<8162e15c>] (sock_close) from [<805a2e4c>] (__fput+0xd8/0x2f4) [ 461.578278][ T6757] [<805a2d74>] (__fput) from [<805a36c8>] (fput_close_sync+0x58/0xd4) [ 461.578349][ T6757] r9:83ff3100 r8:8020029c r7:00000006 r6:00356308 r5:86ec8000 r4:86ec8078 [ 461.578366][ T6757] [<805a3670>] (fput_close_sync) from [<8059df30>] (sys_close+0x30/0x70) [ 461.578415][ T6757] r5:86ec8000 r4:00000000 [ 461.578430][ T6757] [<8059df00>] (sys_close) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 461.578474][ T6757] Exception stack(0xdfb55fa8 to 0xdfb55ff0) [ 461.578511][ T6757] 5fa0: 00000000 00000000 00000003 00000000 00000000 00000000 [ 461.578544][ T6757] 5fc0: 00000000 00000000 00356308 00000006 003562d8 00000000 00000001 76f200dc [ 461.578571][ T6757] 5fe0: 76f1fe88 76f1fe78 00018fa0 00130a50 [ 461.578596][ T6757] r5:00000000 r4:00000000 [ 462.002464][ T6612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.014504][ T6612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.213781][ T28] audit: type=1400 audit(462.060:1210): avc: denied { write } for pid=6765 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.554514][ T28] audit: type=1400 audit(462.400:1211): avc: denied { write } for pid=6811 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.611129][ T3055] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 462.767503][ T2961] 8021q: adding VLAN 0 to HW filter on device eth2 [ 462.781184][ T3055] usb 1-1: Using ep0 maxpacket: 8 [ 462.784660][ T3055] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 462.825622][ T3055] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 462.825992][ T3055] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 462.826315][ T3055] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 462.826425][ T3055] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 462.826537][ T3055] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 462.826634][ T3055] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 462.826760][ T3055] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 462.839491][ T3055] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.839749][ T3055] usb 1-1: Product: syz [ 462.840039][ T3055] usb 1-1: Manufacturer: syz [ 462.840098][ T3055] usb 1-1: SerialNumber: syz [ 462.848548][ T3055] usb 1-1: config 0 descriptor?? [ 462.866268][ T3055] hub 1-1:0.0: bad descriptor, ignoring hub [ 462.866675][ T3055] hub 1-1:0.0: probe with driver hub failed with error -5 [ 462.884849][ T3055] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input3 [ 463.134480][ T3055] usb 1-1: USB disconnect, device number 3 [ 463.146213][ T6612] hsr_slave_0: entered promiscuous mode [ 463.147652][ T6612] hsr_slave_1: entered promiscuous mode [ 463.758418][ T28] audit: type=1400 audit(463.600:1212): avc: denied { write } for pid=6888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.169761][ T6612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 464.183862][ T6612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 464.190018][ T6612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 464.196043][ T6612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 464.198921][ T6612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 464.213322][ T6612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 464.223078][ T6612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 464.228310][ T6612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.231440][ T28] audit: type=1400 audit(464.070:1213): avc: denied { write } for pid=6966 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.506324][ T6990] fuse: Bad value for 'group_id' [ 464.506708][ T6990] fuse: Bad value for 'group_id' [ 465.161525][ T28] audit: type=1400 audit(465.000:1214): avc: denied { write } for pid=7001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.306438][ T6612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.451726][ T28] audit: type=1400 audit(465.290:1215): avc: denied { write } for pid=7007 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.572611][ T7012] fuse: Bad value for 'group_id' [ 465.581734][ T7012] fuse: Bad value for 'group_id' [ 466.068709][ T28] audit: type=1400 audit(465.910:1216): avc: denied { write } for pid=7017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.537402][ T28] audit: type=1400 audit(466.380:1217): avc: denied { write } for pid=7028 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.163270][ T7040] fuse: Bad value for 'group_id' [ 467.163581][ T7040] fuse: Bad value for 'group_id' [ 467.301369][ T28] audit: type=1400 audit(467.140:1218): avc: denied { write } for pid=7035 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.605128][ T28] audit: type=1400 audit(467.430:1219): avc: denied { write } for pid=7048 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.194751][ T28] audit: type=1400 audit(468.040:1220): avc: denied { write } for pid=7058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.498177][ T28] audit: type=1400 audit(468.340:1221): avc: denied { write } for pid=7065 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.874914][ T28] audit: type=1400 audit(468.720:1222): avc: denied { write } for pid=7070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.043937][ T6612] veth0_vlan: entered promiscuous mode [ 469.056094][ T6612] veth1_vlan: entered promiscuous mode [ 469.115071][ T6612] veth0_macvtap: entered promiscuous mode [ 469.128232][ T6612] veth1_macvtap: entered promiscuous mode [ 469.224908][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.227244][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.291845][ T4758] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.300352][ T28] audit: type=1400 audit(469.140:1223): avc: denied { write } for pid=7078 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.303237][ T4758] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.782527][ T28] audit: type=1400 audit(469.630:1224): avc: denied { write } for pid=7082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.106519][ T28] audit: type=1400 audit(469.950:1225): avc: denied { write } for pid=7093 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.241920][ T28] audit: type=1400 audit(471.080:1226): avc: denied { create } for pid=7105 comm="syz.1.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 471.242262][ T28] audit: type=1400 audit(471.080:1227): avc: denied { setopt } for pid=7105 comm="syz.1.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 471.244616][ T28] audit: type=1400 audit(471.090:1228): avc: denied { bind } for pid=7105 comm="syz.1.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 471.271558][ T28] audit: type=1400 audit(471.100:1229): avc: denied { write } for pid=7105 comm="syz.1.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 472.109461][ T7109] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 473.038092][ T7112] netlink: 'syz.0.1057': attribute type 1 has an invalid length. [ 473.038516][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1057'. [ 473.055678][ T7113] comedi: valid board names for 8255 driver are: [ 473.056535][ T7113] 8255 [ 473.057780][ T7113] comedi: valid board names for vmk80xx driver are: [ 473.058485][ T7113] vmk80xx [ 473.059111][ T7113] comedi: valid board names for usbduxsigma driver are: [ 473.059664][ T7113] usbduxsigma [ 473.060286][ T7113] comedi: valid board names for usbduxfast driver are: [ 473.061378][ T7113] usbduxfast [ 473.061996][ T7113] comedi: valid board names for usbdux driver are: [ 473.065942][ T7113] usbdux [ 473.066696][ T7113] comedi: valid board names for ni6501 driver are: [ 473.067450][ T7113] ni6501 [ 473.068079][ T7113] comedi: valid board names for dt9812 driver are: [ 473.068682][ T7113] dt9812 [ 473.069303][ T7113] comedi: valid board names for ni_labpc_cs driver are: [ 473.070155][ T7113] ni_labpc_cs [ 473.071284][ T7113] comedi: valid board names for ni_daq_700 driver are: [ 473.087313][ T7113] ni_daq_700 [ 473.087992][ T7113] comedi: valid board names for labpc_pci driver are: [ 473.088780][ T7113] labpc_pci [ 473.089360][ T7113] comedi: valid board names for adl_pci9118 driver are: [ 473.090143][ T7113] pci9118dg [ 473.092918][ T7113] pci9118hg [ 473.093254][ T7113] pci9118hr [ 473.093309][ T7113] comedi: valid board names for 8255_pci driver are: [ 473.093334][ T7113] 8255_pci [ 473.093390][ T7113] comedi: valid board names for comedi_parport driver are: [ 473.093414][ T7113] comedi_parport [ 473.093427][ T7113] comedi: valid board names for comedi_test driver are: [ 473.093443][ T7113] comedi_test [ 473.093477][ T7113] comedi: valid board names for comedi_bond driver are: [ 473.093571][ T7113] comedi_bond [ 474.941820][ T28] audit: type=1400 audit(474.780:1230): avc: denied { read } for pid=7133 comm="syz.1.1067" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 474.942225][ T28] audit: type=1400 audit(474.790:1231): avc: denied { open } for pid=7133 comm="syz.1.1067" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 474.949424][ T28] audit: type=1400 audit(474.790:1232): avc: denied { ioctl } for pid=7133 comm="syz.1.1067" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 475.687998][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1074'. [ 475.893013][ T28] audit: type=1400 audit(475.740:1233): avc: denied { create } for pid=7158 comm="syz.0.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 475.897192][ T28] audit: type=1400 audit(475.740:1234): avc: denied { write } for pid=7158 comm="syz.0.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 475.902724][ T28] audit: type=1400 audit(475.740:1235): avc: denied { nlmsg_write } for pid=7158 comm="syz.0.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 476.145021][ T7169] tc action pedit 'at' offset 5 out of bounds [ 476.145654][ T7169] tc action pedit 'at' offset 5 out of bounds [ 476.145984][ T7169] tc action pedit 'at' offset 5 out of bounds [ 476.146127][ T7169] tc action pedit 'at' offset 5 out of bounds [ 476.146255][ T7169] tc action pedit 'at' offset 5 out of bounds [ 476.146384][ T7169] tc action pedit 'at' offset 5 out of bounds [ 476.146820][ T7169] tc action pedit 'at' offset 5 out of bounds [ 476.146974][ T7169] tc action pedit 'at' offset 5 out of bounds [ 476.147100][ T7169] tc action pedit 'at' offset 5 out of bounds [ 476.147257][ T7169] tc action pedit 'at' offset 5 out of bounds [ 476.147515][ T7169] 0: reclassify loop, rule prio 0, protocol 800 [ 476.197998][ T7175] fuse: Unknown parameter 'grou00000000000000000000' [ 476.423365][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'. [ 476.952702][ T2892] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 477.118161][ T2892] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 477.143356][ T2892] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.144712][ T2892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.394541][ T3055] usb 1-1: USB disconnect, device number 4 [ 477.493009][ T7208] fuse: Unknown parameter 'grou00000000000000000000' [ 477.878726][ T7217] FAULT_INJECTION: forcing a failure. [ 477.878726][ T7217] name fail_futex, interval 1, probability 0, space 0, times 0 [ 477.879316][ T7217] CPU: 1 UID: 0 PID: 7217 Comm: syz.1.1089 Not tainted syzkaller #0 PREEMPT [ 477.879417][ T7217] Hardware name: ARM-Versatile Express [ 477.879444][ T7217] Call trace: [ 477.879489][ T7217] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 477.879926][ T7217] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 477.879983][ T7217] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 477.880083][ T7217] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 477.880189][ T7217] r7:00000000 r6:00000000 r5:84f98c40 r4:82afac00 [ 477.880247][ T7217] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 477.880512][ T7217] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 477.880596][ T7217] r8:000002e0 r7:00000000 r6:dfcf9e38 r5:00000000 r4:003562e0 [ 477.880617][ T7217] [<809fdf04>] (should_fail) from [<803544f4>] (get_futex_key+0xa8/0x558) [ 477.880678][ T7217] [<8035444c>] (get_futex_key) from [<80359ec0>] (futex_wait_setup+0x88/0x29c) [ 477.880740][ T7217] r10:b5003500 r9:b5403587 r8:b5003500 r7:003562e0 r6:003562e0 r5:84f98c40 [ 477.880762][ T7217] r4:7efffffc [ 477.880779][ T7217] [<80359e38>] (futex_wait_setup) from [<8035a158>] (__futex_wait+0x84/0x104) [ 477.880853][ T7217] r10:00000000 r9:00000000 r8:00000000 r7:00000002 r6:003562e0 r5:84f98c40 [ 477.880875][ T7217] r4:00000000 [ 477.880890][ T7217] [<8035a0d4>] (__futex_wait) from [<8035a258>] (futex_wait+0x80/0x10c) [ 477.881017][ T7217] r9:00000000 r8:0000c350 r7:003562e0 r6:00000000 r5:00000000 r4:00000002 [ 477.881037][ T7217] [<8035a1d8>] (futex_wait) from [<803559b8>] (do_futex+0x1b4/0x1d0) [ 477.881097][ T7217] r10:000000f0 r9:00000000 r8:84f98c40 r7:00000000 r6:003562e0 r5:00000080 [ 477.881118][ T7217] r4:00000000 [ 477.881135][ T7217] [<80355804>] (do_futex) from [<8035626c>] (sys_futex_time32+0x11c/0x1bc) [ 477.881185][ T7217] r4:00000000 [ 477.881201][ T7217] [<80356150>] (sys_futex_time32) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 477.881246][ T7217] Exception stack(0xdfcf9fa8 to 0xdfcf9ff0) [ 477.881287][ T7217] 9fa0: 00131dd8 ffffffff 003562e0 00000080 00000000 00000000 [ 477.881327][ T7217] 9fc0: 00131dd8 ffffffff 76ff27d4 000000f0 00340000 00000000 00000001 76ff20dc [ 477.881383][ T7217] 9fe0: 76ff1f38 76ff1f28 00021b8c 00130a50 [ 477.881421][ T7217] r9:84f98c40 r8:8020029c r7:000000f0 r6:76ff27d4 r5:ffffffff r4:00131dd8 [ 479.271157][ T28] audit: type=1400 audit(479.110:1236): avc: denied { create } for pid=7226 comm="syz.0.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 479.284393][ T28] audit: type=1400 audit(479.130:1237): avc: denied { ioctl } for pid=7226 comm="syz.0.1094" path="socket:[10138]" dev="sockfs" ino=10138 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 479.305802][ T28] audit: type=1400 audit(479.150:1238): avc: denied { ioctl } for pid=7226 comm="syz.0.1094" path="socket:[10139]" dev="sockfs" ino=10139 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 486.241747][ T4758] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.243023][ T4758] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.244046][ T4758] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.245080][ T4758] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.700000][ T7280] FAULT_INJECTION: forcing a failure. [ 486.700000][ T7280] name failslab, interval 1, probability 0, space 0, times 0 [ 486.700205][ T7280] CPU: 0 UID: 0 PID: 7280 Comm: syz.0.1116 Not tainted syzkaller #0 PREEMPT [ 486.700268][ T7280] Hardware name: ARM-Versatile Express [ 486.700293][ T7280] Call trace: [ 486.700333][ T7280] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 486.700506][ T7280] r7:60000193 r6:60000193 r5:82336570 r4:00000000 [ 486.700531][ T7280] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 486.700594][ T7280] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 486.700664][ T7280] r7:84823100 r6:00000000 r5:84823100 r4:82b1ac48 [ 486.700684][ T7280] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 486.700748][ T7280] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 486.700826][ T7280] r8:00000000 r7:84823100 r6:80265fac r5:00000820 r4:830e5180 [ 486.700888][ T7280] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 486.700954][ T7280] [<80546804>] (kmem_cache_alloc_noprof) from [<80265fac>] (__send_signal_locked+0x88/0x4e0) [ 486.701029][ T7280] r10:00000010 r9:831bea28 r8:00000000 r7:00000001 r6:82a240e0 r5:84fb6e40 [ 486.701050][ T7280] r4:00000011 [ 486.701067][ T7280] [<80265f24>] (__send_signal_locked) from [<80267308>] (do_notify_parent+0x260/0x384) [ 486.701133][ T7280] r10:ffffffff r9:00000000 r8:00000000 r7:84f424c0 r6:00000011 r5:60000193 [ 486.701159][ T7280] r4:84fd8c40 [ 486.701176][ T7280] [<802670a8>] (do_notify_parent) from [<80257948>] (release_task+0x5d4/0x614) [ 486.701240][ T7280] r8:00000000 r7:84823100 r6:838c8500 r5:84eb4000 r4:84fd8c40 [ 486.701262][ T7280] [<80257374>] (release_task) from [<80258d18>] (do_exit+0x66c/0xadc) [ 486.701325][ T7280] r10:848237b4 r9:00000000 r8:dfbb1e90 r7:84823100 r6:dfbb17c0 r5:84823100 [ 486.701383][ T7280] r4:dfbb17c0 [ 486.701419][ T7280] [<802586ac>] (do_exit) from [<8025935c>] (do_group_exit+0x40/0x8c) [ 486.701477][ T7280] r7:00130a4c [ 486.701503][ T7280] [<8025931c>] (do_group_exit) from [<8026a428>] (get_signal+0xa64/0xa8c) [ 486.701575][ T7280] r7:00130a4c r4:84823100 [ 486.701596][ T7280] [<802699c4>] (get_signal) from [<8022b72c>] (do_work_pending+0x220/0x4e0) [ 486.701669][ T7280] r10:000000f0 r9:00130a50 r8:fffffe00 r7:00130a4c r6:00000001 r5:dfbb1fb0 [ 486.701697][ T7280] r4:84823100 [ 486.701716][ T7280] [<8022b50c>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 486.701775][ T7280] Exception stack(0xdfbb1fb0 to 0xdfbb1ff8) [ 486.701821][ T7280] 1fa0: 003562e0 00000080 00000000 00000000 [ 486.701865][ T7280] 1fc0: 00131dd8 ffffffff 76f207d4 000000f0 00340000 00000000 00000001 76f200dc [ 486.701905][ T7280] 1fe0: 76f1ff38 76f1ff28 00021b8c 00130a4c 60000010 003562e0 [ 486.701955][ T7280] r10:000000f0 r9:84823100 r8:8020029c r7:000000f0 r6:76f207d4 r5:ffffffff [ 486.701981][ T7280] r4:00131dd8 [ 486.897498][ T28] audit: type=1400 audit(486.740:1239): avc: denied { setopt } for pid=7283 comm="syz.0.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 487.213098][ T3068] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 487.401477][ T3068] usb 2-1: Using ep0 maxpacket: 32 [ 487.403595][ T3068] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 487.421374][ T3068] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 487.421700][ T3068] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 487.421772][ T3068] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 487.421818][ T3068] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 487.421901][ T3068] usb 2-1: config 0 interface 0 has no altsetting 0 [ 487.518215][ T3068] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 487.518580][ T3068] usb 2-1: Product: syz [ 487.518863][ T3068] usb 2-1: Manufacturer: syz [ 487.519024][ T3068] usb 2-1: SerialNumber: syz [ 487.525372][ T3068] usb 2-1: config 0 descriptor?? [ 487.639747][ T3068] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 487.661173][ T3068] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 487.935542][ T2892] usb 2-1: USB disconnect, device number 2 [ 487.939769][ T2892] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 488.013081][ T3068] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 490.669567][ T7341] fuse: Unknown parameter 'group_i00000000000000000000' [ 491.385053][ T7344] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 491.432726][ T7344] gadgetfs: bound to dummy_udc driver [ 491.559866][ T28] audit: type=1400 audit(491.400:1240): avc: denied { unmount } for pid=6612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 491.654856][ T28] audit: type=1400 audit(491.500:1241): avc: denied { search } for pid=7353 comm="syz.0.1135" name="/" dev="configfs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 491.661431][ T28] audit: type=1400 audit(491.500:1242): avc: denied { search } for pid=7353 comm="syz.0.1135" name="usb_gadget" dev="configfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 491.663356][ T28] audit: type=1400 audit(491.500:1243): avc: denied { write search } for pid=7353 comm="syz.0.1135" name="usb_gadget" dev="configfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 491.664300][ T7355] Mass Storage Function, version: 2009/09/11 [ 491.664615][ T7355] LUN: removable file: (no medium) [ 491.668675][ T28] audit: type=1400 audit(491.500:1244): avc: denied { add_name } for pid=7353 comm="syz.0.1135" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 491.682415][ T7355] 8<--- cut here --- [ 491.682854][ T7355] Unable to handle kernel NULL pointer dereference at virtual address 00000010 when write [ 491.682987][ T7355] [00000010] *pgd=85f53003, *pmd=df60c003 [ 491.684211][ T7355] Internal error: Oops: a05 [#1] SMP ARM [ 491.685469][ T28] audit: type=1400 audit(491.500:1245): avc: denied { create } for pid=7353 comm="syz.0.1135" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 491.685976][ T28] audit: type=1400 audit(491.510:1246): avc: denied { search } for pid=7353 comm="syz.0.1135" name="/" dev="configfs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 491.686265][ T28] audit: type=1400 audit(491.510:1247): avc: denied { search } for pid=7353 comm="syz.0.1135" name="usb_gadget" dev="configfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 491.687519][ T28] audit: type=1400 audit(491.510:1248): avc: denied { search } for pid=7353 comm="syz.0.1135" name="g1" dev="configfs" ino=11333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 491.692933][ T7355] Modules linked in: [ 491.693590][ T7355] CPU: 1 UID: 0 PID: 7355 Comm: syz.0.1135 Not tainted syzkaller #0 PREEMPT [ 491.693973][ T7355] Hardware name: ARM-Versatile Express [ 491.694224][ T7355] PC is at fsg_common_set_num_buffers+0x60/0xf4 [ 491.694576][ T7355] LR is at __kmalloc_large_noprof+0x60/0x6c [ 491.694873][ T7355] pc : [<81105094>] lr : [<8053e03c>] psr: a0000013 [ 491.695167][ T7355] sp : dfcb1e58 ip : dfcb1e30 fp : dfcb1e84 [ 491.695456][ T7355] r10: 81c2dadc r9 : 85d56f80 r8 : 868c9400 [ 491.695722][ T7355] r7 : 00000000 r6 : 00000010 r5 : 00000000 r4 : 00000010 [ 491.696028][ T7355] r3 : 00004000 r2 : 00004000 r1 : 86ec0000 r0 : 86ec0000 [ 491.696449][ T7355] Flags: NzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 491.696842][ T7355] Control: 30c5387d Table: 86f58500 DAC: 00000000 [ 491.697149][ T7355] Register r0 information: non-slab/vmalloc memory [ 491.698030][ T7355] Register r1 information: non-slab/vmalloc memory [ 491.698339][ T7355] Register r2 information: non-paged memory [ 491.698672][ T7355] Register r3 information: non-paged memory [ 491.699000][ T7355] Register r4 information: zero-size pointer [ 491.699292][ T7355] Register r5 information: NULL pointer [ 491.699557][ T7355] Register r6 information: zero-size pointer [ 491.699818][ T7355] Register r7 information: NULL pointer [ 491.700057][ T7355] Register r8 information: slab kmalloc-512 start 868c9400 pointer offset 0 size 512 [ 491.701264][ T7355] Register r9 information: slab kmalloc-64 start 85d56f80 pointer offset 0 size 64 [ 491.701805][ T7355] Register r10 information: non-slab/vmalloc memory [ 491.702095][ T7355] Register r11 information: 2-page vmalloc region starting at 0xdfcb0000 allocated at kernel_clone+0xc4/0x43c [ 491.702644][ T7355] Register r12 information: 2-page vmalloc region starting at 0xdfcb0000 allocated at kernel_clone+0xc4/0x43c [ 491.703191][ T7355] Process syz.0.1135 (pid: 7355, stack limit = 0xdfcb0000) [ 491.703507][ T7355] Stack: (0xdfcb1e58 to 0xdfcb2000) [ 491.703728][ T7355] 1e40: 84fc0000 865fdb04 [ 491.704104][ T7355] 1e60: 00000000 865fdbcc 00000012 85d56f84 85d56f80 81c2dadc dfcb1eac dfcb1e88 [ 491.704430][ T7355] 1e80: 81105194 81105040 00cb1eac 796edee4 00000012 8596ce00 dfcb1f08 8596ce18 [ 491.704770][ T7355] 1ea0: dfcb1ed4 dfcb1eb0 80680750 81105134 00000012 868eee00 20000300 dfcb1f68 [ 491.705122][ T7355] 1ec0: 806806a0 84fc0000 dfcb1f64 dfcb1ed8 805a1390 806806ac dfcb1f04 dfcb1ee8 [ 491.705508][ T7355] 1ee0: 8022bb80 8022cb78 00000000 00000000 00010000 00000012 20000300 00000000 [ 491.705930][ T7355] 1f00: 00000001 00000000 868eee00 00000000 00000000 00000000 00000000 00000000 [ 491.706288][ T7355] 1f20: 00000000 00004004 00000000 00000000 dfcb1f54 796edee4 dfcb1f64 868eee03 [ 491.706631][ T7355] 1f40: 868eee00 00000000 00000000 8020029c 84fc0000 00000004 dfcb1f94 dfcb1f68 [ 491.706994][ T7355] 1f60: 805a16b4 805a1120 00000000 00000000 00000000 796edee4 00000000 00000000 [ 491.707319][ T7355] 1f80: 00356310 00000004 dfcb1fa4 dfcb1f98 805a173c 805a164c 00000000 dfcb1fa8 [ 491.707677][ T7355] 1fa0: 80200060 805a1738 00000000 00000000 00000003 20000300 00000012 00000000 [ 491.708036][ T7355] 1fc0: 00000000 00000000 00356310 00000004 003562d8 00000000 00000001 76f200dc [ 491.708364][ T7355] 1fe0: 76f1fe88 76f1fe78 00018fa0 00130a50 60000010 00000003 00000000 00000000 [ 491.708820][ T7355] Call trace: [ 491.709044][ T7355] [<81105034>] (fsg_common_set_num_buffers) from [<81105194>] (fsg_opts_num_buffers_store+0x6c/0xb0) [ 491.709507][ T7355] r10:81c2dadc r9:85d56f80 r8:85d56f84 r7:00000012 r6:865fdbcc r5:00000000 [ 491.709839][ T7355] r4:865fdb04 r3:84fc0000 [ 491.710209][ T7355] [<81105128>] (fsg_opts_num_buffers_store) from [<80680750>] (configfs_write_iter+0xb0/0x124) [ 491.710658][ T7355] r7:8596ce18 r6:dfcb1f08 r5:8596ce00 r4:00000012 [ 491.711040][ T7355] [<806806a0>] (configfs_write_iter) from [<805a1390>] (vfs_write+0x27c/0x42c) [ 491.711423][ T7355] r9:84fc0000 r8:806806a0 r7:dfcb1f68 r6:20000300 r5:868eee00 r4:00000012 [ 491.711704][ T7355] [<805a1114>] (vfs_write) from [<805a16b4>] (ksys_write+0x74/0xec) [ 491.712116][ T7355] r10:00000004 r9:84fc0000 r8:8020029c r7:00000000 r6:00000000 r5:868eee00 [ 491.712393][ T7355] r4:868eee03 [ 491.712607][ T7355] [<805a1640>] (ksys_write) from [<805a173c>] (sys_write+0x10/0x14) [ 491.712975][ T7355] r7:00000004 r6:00356310 r5:00000000 r4:00000000 [ 491.713207][ T7355] [<805a172c>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 491.713593][ T7355] Exception stack(0xdfcb1fa8 to 0xdfcb1ff0) [ 491.713868][ T7355] 1fa0: 00000000 00000000 00000003 20000300 00000012 00000000 [ 491.714210][ T7355] 1fc0: 00000000 00000000 00356310 00000004 003562d8 00000000 00000001 76f200dc [ 491.714570][ T7355] 1fe0: 76f1fe88 76f1fe78 00018fa0 00130a50 [ 491.715026][ T7355] Code: e3a01d33 e3a00901 ebd0e3d2 e3500000 (e5840000) [ 491.716647][ T7355] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 491.785026][ T7355] Kernel panic - not syncing: Fatal exception [ 491.788215][ T7355] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:18:44 Registers: info registers vcpu 0 CPU#0 R00=865bbb78 R01=00000024 R02=00000000 R03=00040000 R04=df97de80 R05=00000000 R06=00000024 R07=76812008 R08=00000000 R09=00000024 R10=00000000 R11=df97dc74 R12=df97dc78 R13=df97dc18 R14=809fdf38 R15=809fdf04 PSR=60030013 -ZC- A S svc32 s00=203a656c s01=206f6e28 d00=206f6e28203a656c s02=00000000 s03=00000000 d01=0000000000000000 s04=ef0cee00 s05=ef0cee00 d02=ef0cee00ef0cee00 s06=08040200 s07=80402000 d03=8040200008040200 s08=00000c00 s09=c0200c03 d04=c0200c0300000c00 s10=08040201 s11=80402000 d05=8040200008040201 s12=08040201 s13=80402010 d06=8040201008040201 s14=08040201 s15=80402010 d07=8040201008040201 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=847cdc40 R01=00000039 R02=eb307000 R03=eb307018 R04=8483402f R05=847cdc40 R06=80b0d898 R07=848340fc R08=00000000 R09=00000000 R10=000007ab R11=dfcb1afc R12=00000002 R13=dfcb1af0 R14=82b5e24c R15=80b0d8a8 PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000