last executing test programs: 14.364240886s ago: executing program 0 (id=21): socket(0x1e, 0x4, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 14.075418104s ago: executing program 0 (id=22): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x2, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @multicast1}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000400"}, 0x2, 0x0, 0x1}}}, 0x118) 13.83737753s ago: executing program 0 (id=23): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f00000013c0)="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", 0x403, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000001180)="25e57608af7f", 0x6, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000026c0)='?', 0xd0b9, 0x0, 0x0, 0x0) 13.614296596s ago: executing program 0 (id=25): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) io_setup(0x3, &(0x7f0000000180)=0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 13.395663602s ago: executing program 0 (id=28): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 13.192215298s ago: executing program 0 (id=29): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setfsgid(0xee01) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000004000000e47f0000010000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000004000)={0xf, {"a2e3ad21ed0d0df91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b32346d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 4.495717166s ago: executing program 1 (id=35): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newtfilter={0x80, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x50, 0x2, [@TCA_FLOW_EMATCHES={0x4c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x8}, {0x4}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x1, 0x1, 0x40}, {0x9, 0x3, 0x9, 0x1, 0x1}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x2, 0x0, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd0}}]}]}}]}, 0x80}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.920621473s ago: executing program 1 (id=36): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7eb8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 826.525047ms ago: executing program 1 (id=37): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) 411.336329ms ago: executing program 1 (id=38): socket$kcm(0x10, 0x2, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x40c89}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r2}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_ROLE={0x8}, @IFLA_GTP_LOCAL={0x8, 0x7, @broadcast}]}}}]}, 0x50}}, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) 272.576293ms ago: executing program 1 (id=39): unshare(0x4000400) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=40): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x1000000000, 0x0) kernel console output (not intermixed with test programs): [ 52.546802][ T31] audit: type=1400 audit(52.420:68): avc: denied { read write } for pid=3085 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.549705][ T31] audit: type=1400 audit(52.420:69): avc: denied { open } for pid=3085 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:60530' (ED25519) to the list of known hosts. [ 63.893204][ T31] audit: type=1400 audit(63.760:70): avc: denied { name_bind } for pid=3086 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 65.868275][ T31] audit: type=1400 audit(65.740:71): avc: denied { execute } for pid=3088 comm="sh" name="syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 65.885292][ T31] audit: type=1400 audit(65.760:72): avc: denied { execute_no_trans } for pid=3088 comm="sh" path="/syz-executor" dev="vda" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 69.711589][ T31] audit: type=1400 audit(69.590:73): avc: denied { mounton } for pid=3088 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 69.715772][ T31] audit: type=1400 audit(69.590:74): avc: denied { mount } for pid=3088 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.734959][ T3088] cgroup: Unknown subsys name 'net' [ 69.743694][ T31] audit: type=1400 audit(69.620:75): avc: denied { unmount } for pid=3088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.892921][ T3088] cgroup: Unknown subsys name 'cpuset' [ 69.899085][ T3088] cgroup: Unknown subsys name 'hugetlb' [ 69.900116][ T3088] cgroup: Unknown subsys name 'rlimit' [ 70.152519][ T31] audit: type=1400 audit(70.030:76): avc: denied { setattr } for pid=3088 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.155708][ T31] audit: type=1400 audit(70.030:77): avc: denied { mounton } for pid=3088 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 70.163751][ T31] audit: type=1400 audit(70.040:78): avc: denied { mount } for pid=3088 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 70.385525][ T3090] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 70.388278][ T31] audit: type=1400 audit(70.260:79): avc: denied { relabelto } for pid=3090 comm="mkswap" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 70.394630][ T31] audit: type=1400 audit(70.270:80): avc: denied { write } for pid=3090 comm="mkswap" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 70.420071][ T31] audit: type=1400 audit(70.300:81): avc: denied { read } for pid=3088 comm="syz-executor" name="swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 70.424758][ T31] audit: type=1400 audit(70.300:82): avc: denied { open } for pid=3088 comm="syz-executor" path="/swap-file" dev="vda" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 76.943994][ T3088] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.007967][ T31] audit: type=1400 audit(78.880:83): avc: denied { execmem } for pid=3091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 79.067734][ T31] audit: type=1400 audit(78.940:84): avc: denied { read } for pid=3093 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.068742][ T31] audit: type=1400 audit(78.940:85): avc: denied { open } for pid=3093 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 79.073361][ T31] audit: type=1400 audit(78.950:86): avc: denied { mounton } for pid=3093 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 79.091619][ T31] audit: type=1400 audit(78.970:87): avc: denied { module_request } for pid=3094 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 79.170254][ T31] audit: type=1400 audit(79.050:88): avc: denied { sys_module } for pid=3094 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 79.930753][ T31] audit: type=1400 audit(79.810:89): avc: denied { ioctl } for pid=3094 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=677 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.109809][ T3094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.118118][ T3094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.349975][ T3093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.359481][ T3093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.009554][ T3094] hsr_slave_0: entered promiscuous mode [ 82.013540][ T3094] hsr_slave_1: entered promiscuous mode [ 82.363673][ T3093] hsr_slave_0: entered promiscuous mode [ 82.366087][ T3093] hsr_slave_1: entered promiscuous mode [ 82.373949][ T3093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.374479][ T3093] Cannot create hsr debugfs directory [ 82.456669][ T31] audit: type=1400 audit(82.330:90): avc: denied { create } for pid=3094 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.466876][ T3094] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.467879][ T31] audit: type=1400 audit(82.340:91): avc: denied { write } for pid=3094 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.468960][ T31] audit: type=1400 audit(82.340:92): avc: denied { read } for pid=3094 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.481442][ T3094] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.490163][ T3094] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.498146][ T3094] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.751252][ T3093] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.762055][ T3093] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.771566][ T3093] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.776045][ T3093] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.441739][ T3094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.633310][ T3093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.639186][ T3093] veth0_vlan: entered promiscuous mode [ 86.656776][ T3093] veth1_vlan: entered promiscuous mode [ 86.684404][ T3094] veth0_vlan: entered promiscuous mode [ 86.706803][ T3094] veth1_vlan: entered promiscuous mode [ 86.740517][ T3093] veth0_macvtap: entered promiscuous mode [ 86.755115][ T3093] veth1_macvtap: entered promiscuous mode [ 86.805443][ T3093] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.806066][ T3093] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.806377][ T3093] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.806703][ T3093] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.853885][ T3094] veth0_macvtap: entered promiscuous mode [ 86.898583][ T3094] veth1_macvtap: entered promiscuous mode [ 87.079665][ T31] audit: type=1400 audit(86.950:93): avc: denied { mount } for pid=3093 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 87.096761][ T31] audit: type=1400 audit(86.970:94): avc: denied { mounton } for pid=3093 comm="syz-executor" path="/syzkaller.E0V8v1/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 87.102483][ T31] audit: type=1400 audit(86.980:95): avc: denied { mount } for pid=3093 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 87.104361][ T31] audit: type=1400 audit(86.980:96): avc: denied { mounton } for pid=3093 comm="syz-executor" path="/syzkaller.E0V8v1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 87.109151][ T31] audit: type=1400 audit(86.980:97): avc: denied { mounton } for pid=3093 comm="syz-executor" path="/syzkaller.E0V8v1/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 87.114705][ T31] audit: type=1400 audit(86.990:98): avc: denied { unmount } for pid=3093 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 87.120889][ T31] audit: type=1400 audit(87.000:99): avc: denied { mounton } for pid=3093 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 87.135148][ T31] audit: type=1400 audit(87.000:100): avc: denied { mount } for pid=3093 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 87.141106][ T31] audit: type=1400 audit(87.000:101): avc: denied { mounton } for pid=3093 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 87.143098][ T31] audit: type=1400 audit(87.000:102): avc: denied { mount } for pid=3093 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 87.183125][ T3094] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.183754][ T3094] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.184104][ T3094] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.184450][ T3094] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.235471][ T3093] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.869638][ T48] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.102859][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.103613][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.104224][ T48] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 88.104780][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.116418][ T48] usb 1-1: config 0 descriptor?? [ 88.615520][ T48] usbhid 1-1:0.0: can't add hid device: -71 [ 88.616352][ T48] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 88.631703][ T48] usb 1-1: USB disconnect, device number 2 [ 100.305745][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 100.305838][ T31] audit: type=1400 audit(100.180:113): avc: denied { unmount } for pid=3094 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 100.966388][ T31] audit: type=1400 audit(100.840:114): avc: denied { map_create } for pid=3820 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 101.116742][ T31] audit: type=1400 audit(100.990:115): avc: denied { create } for pid=3822 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.120084][ T3823] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.289236][ T3823] nbd1: detected capacity change from 0 to 6 [ 101.756764][ T3826] block nbd1: shutting down sockets [ 101.875419][ T31] audit: type=1400 audit(101.750:116): avc: denied { create } for pid=3828 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.892608][ T31] audit: type=1400 audit(101.770:117): avc: denied { write } for pid=3828 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.896490][ T31] audit: type=1400 audit(101.770:118): avc: denied { nlmsg_write } for pid=3828 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.903408][ T3829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 102.181403][ T3831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.087540][ C1] hrtimer: interrupt took 643520 ns [ 115.373042][ T31] audit: type=1400 audit(115.250:119): avc: denied { create } for pid=3853 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.398949][ T31] audit: type=1400 audit(115.270:120): avc: denied { getopt } for pid=3853 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.760732][ T31] audit: type=1400 audit(124.640:121): avc: denied { create } for pid=3859 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.950054][ T31] audit: type=1400 audit(124.830:122): avc: denied { create } for pid=3859 comm="syz.0.21" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.952490][ T31] audit: type=1400 audit(124.830:123): avc: denied { map } for pid=3859 comm="syz.0.21" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.953611][ T31] audit: type=1400 audit(124.830:124): avc: denied { read write } for pid=3859 comm="syz.0.21" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 125.062031][ T31] audit: type=1400 audit(124.940:125): avc: denied { create } for pid=3862 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 125.072210][ T31] audit: type=1400 audit(124.950:126): avc: denied { write } for pid=3862 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 125.349838][ T31] audit: type=1400 audit(125.230:127): avc: denied { name_bind } for pid=3865 comm="syz.0.23" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 125.359671][ T31] audit: type=1400 audit(125.230:128): avc: denied { node_bind } for pid=3865 comm="syz.0.23" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 125.459234][ T31] audit: type=1400 audit(125.340:129): avc: denied { create } for pid=3867 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.463279][ T31] audit: type=1400 audit(125.340:130): avc: denied { write } for pid=3867 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.470263][ T3868] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24'. [ 125.581840][ T3872] netlink: 24 bytes leftover after parsing attributes in process `syz.1.26'. [ 125.634371][ T3872] Zero length message leads to an empty skb [ 131.584297][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 131.584406][ T31] audit: type=1400 audit(131.440:133): avc: denied { bind } for pid=3883 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.643345][ T31] audit: type=1400 audit(131.470:134): avc: denied { setopt } for pid=3883 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.148511][ T31] audit: type=1400 audit(132.030:135): avc: denied { ioctl } for pid=3883 comm="syz.1.30" path="socket:[2638]" dev="sockfs" ino=2638 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.162358][ T31] audit: type=1400 audit(133.040:136): avc: denied { create } for pid=3891 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 133.700407][ T31] audit: type=1400 audit(133.580:137): avc: denied { write } for pid=3894 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 138.702389][ T31] audit: type=1400 audit(138.580:138): avc: denied { create } for pid=3907 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 138.721095][ T31] audit: type=1400 audit(138.600:139): avc: denied { setopt } for pid=3907 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.277974][ T3912] usercopy: Kernel memory overwrite attempt detected to SLUB object 'task_struct' (offset 80, size 116)! [ 139.279685][ T3912] ------------[ cut here ]------------ [ 139.280074][ T3912] kernel BUG at mm/usercopy.c:102! [ 139.280388][ T3912] Internal error: Oops - BUG: 0 [#1] PREEMPT SMP ARM [ 139.281167][ T3912] Modules linked in: [ 139.281894][ T3912] CPU: 0 UID: 0 PID: 3912 Comm: syz.1.40 Not tainted 6.12.0-syzkaller #0 [ 139.282364][ T3912] Hardware name: ARM-Versatile Express [ 139.283246][ T3912] PC is at usercopy_abort+0x98/0x9c [ 139.284996][ T3912] LR is at __wake_up_klogd.part.0+0x7c/0xac [ 139.285280][ T3912] pc : [<819be580>] lr : [<802be434>] psr: 60000013 [ 139.285862][ T3912] sp : dfb39e38 ip : dfb39d78 fp : dfb39e5c [ 139.286318][ T3912] r10: 0000001a r9 : 8437d400 r8 : 8437b050 [ 139.286633][ T3912] r7 : dde90ce0 r6 : 00000000 r5 : 00000074 r4 : 00000050 [ 139.287452][ T3912] r3 : 8437d400 r2 : 00000000 r1 : 00000000 r0 : 00000066 [ 139.288474][ T3912] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 139.297206][ T3912] Control: 30c5387d Table: 851e3900 DAC: fffffffd [ 139.297959][ T3912] Register r0 information: non-paged memory [ 139.298659][ T3912] Register r1 information: NULL pointer [ 139.298972][ T3912] Register r2 information: NULL pointer [ 139.299259][ T3912] Register r3 information: slab task_struct start 8437d400 pointer offset 0 size 3072 [ 139.300323][ T3912] Register r4 information: non-paged memory [ 139.300658][ T3912] Register r5 information: non-paged memory [ 139.300950][ T3912] Register r6 information: NULL pointer [ 139.301269][ T3912] Register r7 information: non-slab/vmalloc memory [ 139.301712][ T3912] Register r8 information: slab task_struct start 8437b000 pointer offset 80 size 3072 [ 139.302276][ T3912] Register r9 information: slab task_struct start 8437d400 pointer offset 0 size 3072 [ 139.302815][ T3912] Register r10 information: non-paged memory [ 139.303146][ T3912] Register r11 information: 2-page vmalloc region starting at 0xdfb38000 allocated at kernel_clone+0xac/0x3e4 [ 139.303773][ T3912] Register r12 information: 2-page vmalloc region starting at 0xdfb38000 allocated at kernel_clone+0xac/0x3e4 [ 139.304828][ T3912] Process syz.1.40 (pid: 3912, stack limit = 0xdfb38000) [ 139.305731][ T3912] Stack: (0xdfb39e38 to 0xdfb3a000) [ 139.306304][ T3912] 9e20: 8205f678 82030fcc [ 139.306716][ T3912] 9e40: 820464dc 00000050 00000074 8437d400 dfb39e8c dfb39e60 804d5d54 819be4f4 [ 139.307193][ T3912] 9e60: 00000074 dfb39e70 80214800 8437b050 00000074 00000000 8437b0c4 dde90ce0 [ 139.307846][ T3912] 9e80: dfb39ec4 dfb39e90 80514b34 804d5c88 00000074 00000000 dfb39eb4 8437b050 [ 139.309052][ T3912] 9ea0: 00000074 00000000 00000000 00000000 8437d400 0000001a dfb39ef4 dfb39ec8 [ 139.317629][ T3912] 9ec0: 80209db4 805148b8 80200c04 819db038 80000002 00000000 00000000 00000000 [ 139.318338][ T3912] 9ee0: 0000000c 00000000 dfb39f6c dfb39ef8 8020a468 80209d30 00000000 00000000 [ 139.318756][ T3912] 9f00: dfb39f10 dfb39f20 819e36b0 802812d0 40000013 ffffffff 802813ec b5403587 [ 139.319147][ T3912] 9f20: dfb39f54 00000000 8027e354 60000013 81990410 819a7694 dfb39f54 72e30e64 [ 139.319541][ T3912] 9f40: 0000000f 8437b000 0000000f 72e30e64 8437b000 0000000f 00000000 00000000 [ 139.319865][ T3912] 9f60: dfb39fa4 dfb39f70 80252fdc 8020a140 80202cc0 72e30e64 dfb39fac 00000000 [ 139.320279][ T3912] 9f80: 00000000 002862f4 0000001a 8020029c 8437d400 0000001a 00000000 dfb39fa8 [ 139.320722][ T3912] 9fa0: 80200060 80252db0 00000000 00000000 0000000f 00000040 00000000 00000000 [ 139.321034][ T3912] 9fc0: 00000000 00000000 002862f4 0000001a 00000000 00006364 003d0f00 76b4e0bc [ 139.321341][ T3912] 9fe0: 76b4dec0 76b4deb0 00018af0 00133450 60000010 0000000f 00000000 00000000 [ 139.321865][ T3912] Call trace: [ 139.322334][ T3912] [<819be4e8>] (usercopy_abort) from [<804d5d54>] (__check_heap_object+0xd8/0xf4) [ 139.323109][ T3912] [<804d5c7c>] (__check_heap_object) from [<80514b34>] (__check_object_size+0x288/0x304) [ 139.323648][ T3912] r8:dde90ce0 r7:8437b0c4 r6:00000000 r5:00000074 r4:8437b050 [ 139.324005][ T3912] [<805148ac>] (__check_object_size) from [<80209db4>] (fpa_set+0x90/0x118) [ 139.324561][ T3912] r10:0000001a r9:8437d400 r8:00000000 r7:00000000 r6:00000000 r5:00000074 [ 139.324972][ T3912] r4:8437b050 [ 139.325170][ T3912] [<80209d24>] (fpa_set) from [<8020a468>] (arch_ptrace+0x334/0x424) [ 139.325559][ T3912] r6:00000000 r5:0000000c r4:00000000 [ 139.325880][ T3912] [<8020a134>] (arch_ptrace) from [<80252fdc>] (sys_ptrace+0x238/0x4dc) [ 139.326403][ T3912] r7:00000000 r6:00000000 r5:0000000f r4:8437b000 [ 139.326714][ T3912] [<80252da4>] (sys_ptrace) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 139.327431][ T3912] Exception stack(0xdfb39fa8 to 0xdfb39ff0) [ 139.327915][ T3912] 9fa0: 00000000 00000000 0000000f 00000040 00000000 00000000 [ 139.336783][ T3912] 9fc0: 00000000 00000000 002862f4 0000001a 00000000 00006364 003d0f00 76b4e0bc [ 139.337440][ T3912] 9fe0: 76b4dec0 76b4deb0 00018af0 00133450 [ 139.337753][ T3912] r10:0000001a r9:8437d400 r8:8020029c r7:0000001a r6:002862f4 r5:00000000 [ 139.338133][ T3912] r4:00000000 [ 139.338764][ T3912] Code: e30f067c e3480205 e58dc000 ebfff265 (e7f001f2) [ 139.339525][ T3912] ---[ end trace 0000000000000000 ]--- [ 139.340235][ T3912] Kernel panic - not syncing: Fatal exception [ 139.342903][ T3912] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:43:47 Registers: info registers vcpu 0 CPU#0 R00=0000000a R01=00000000 R02=00000000 R03=8437d400 R04=0000000e R05=dfb3989a R06=00000000 R07=819be580 R08=00000001 R09=dfb39bac R10=dfb39c3c R11=dfb39874 R12=fffffff9 R13=dfb39830 R14=dfb3976e R15=8032c9f4 PSR=40000093 -Z-- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000000 R01=00000000 R02=00000000 R03=b5003500 R04=dfad9ec0 R05=20133d00 R06=000099e2 R07=00000002 R08=00000000 R09=8437c800 R10=00010106 R11=dfad9dfc R12=00000004 R13=dfad9db0 R14=00000000 R15=81498268 PSR=60000113 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000