Warning: Permanently added '[localhost]:59217' (ED25519) to the list of known hosts. 1970/01/01 00:06:04 parsed 1 programs 1970/01/01 00:06:04 serving rpc on tcp://36947 [ 369.566230][ T28] audit: type=1400 audit(369.320:167): avc: denied { unlink } for pid=4151 comm="syz-executor" name="swap-file" dev="vda" ino=811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 381.009098][ T4151] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 394.437718][ T28] audit: type=1401 audit(394.190:168): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 401.450424][ T4324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.459058][ T4324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.399177][ T4324] hsr_slave_0: entered promiscuous mode [ 402.404993][ T4324] hsr_slave_1: entered promiscuous mode [ 402.809959][ T4324] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 402.820868][ T4324] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.826633][ T4324] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 402.835095][ T4324] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.838394][ T4324] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 402.846013][ T4324] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 402.850324][ T4324] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 402.859898][ T4324] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 403.628238][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.768716][ T4324] veth0_vlan: entered promiscuous mode [ 406.794108][ T4324] veth1_vlan: entered promiscuous mode [ 406.863107][ T4324] veth0_macvtap: entered promiscuous mode [ 406.874661][ T4324] veth1_macvtap: entered promiscuous mode [ 406.944737][ T66] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.945116][ T66] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.945587][ T66] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.945679][ T66] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.295422][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.346109][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.404587][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.490763][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.836915][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.856045][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.860744][ T50] bond0 (unregistering): Released all slaves [ 407.962125][ T50] hsr_slave_0: left promiscuous mode [ 407.964438][ T50] hsr_slave_1: left promiscuous mode [ 407.985025][ T50] veth1_macvtap: left promiscuous mode [ 407.986161][ T50] veth0_macvtap: left promiscuous mode [ 407.986731][ T50] veth1_vlan: left promiscuous mode [ 407.987038][ T50] veth0_vlan: left promiscuous mode [ 409.328531][ T28] audit: type=1400 audit(409.080:169): avc: denied { write } for pid=4695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.692244][ T28] audit: type=1400 audit(409.440:170): avc: denied { write } for pid=4724 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.858973][ T2958] 8021q: adding VLAN 0 to HW filter on device eth9 [ 410.474732][ T28] audit: type=1400 audit(410.230:171): avc: denied { write } for pid=4729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.680870][ T28] audit: type=1400 audit(410.430:172): avc: denied { write } for pid=4732 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.885895][ T2958] 8021q: adding VLAN 0 to HW filter on device eth10 [ 411.745198][ T28] audit: type=1400 audit(411.490:173): avc: denied { write } for pid=4736 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.061144][ T28] audit: type=1400 audit(411.810:174): avc: denied { write } for pid=4739 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.229440][ T2958] 8021q: adding VLAN 0 to HW filter on device eth11 [ 412.985229][ T28] audit: type=1400 audit(412.740:175): avc: denied { write } for pid=4743 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.292302][ T28] audit: type=1400 audit(413.040:176): avc: denied { write } for pid=4746 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.538603][ T2958] 8021q: adding VLAN 0 to HW filter on device eth12 1970/01/01 00:06:54 executed programs: 0 [ 417.569785][ T4754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.578450][ T4754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.579411][ T4754] hsr_slave_0: entered promiscuous mode [ 418.581049][ T4754] hsr_slave_1: entered promiscuous mode [ 419.093072][ T28] audit: type=1400 audit(418.840:177): avc: denied { write } for pid=5010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.299077][ T4754] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 419.306352][ T4754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 419.309383][ T4754] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 419.316327][ T4754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 419.318614][ T4754] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 419.335601][ T4754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 419.339527][ T4754] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 419.349854][ T4754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 419.557916][ T28] audit: type=1400 audit(419.310:178): avc: denied { write } for pid=5038 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.970601][ T28] audit: type=1400 audit(420.720:179): avc: denied { write } for pid=5049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.659810][ T28] audit: type=1400 audit(421.410:180): avc: denied { write } for pid=5054 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.677372][ T4754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.146599][ T28] audit: type=1400 audit(422.880:181): avc: denied { write } for pid=5059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.301364][ T28] audit: type=1400 audit(424.050:182): avc: denied { write } for pid=5066 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.890449][ T28] audit: type=1400 audit(426.640:183): avc: denied { write } for pid=5076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.788927][ T28] audit: type=1400 audit(427.510:184): avc: denied { write } for pid=5085 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.207056][ T28] audit: type=1400 audit(428.960:185): avc: denied { write } for pid=5090 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.218393][ T28] audit: type=1400 audit(429.960:186): avc: denied { write } for pid=5097 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.789558][ T28] audit: type=1400 audit(431.530:187): avc: denied { write } for pid=5101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.742235][ T28] audit: type=1400 audit(432.490:188): avc: denied { write } for pid=5108 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.936308][ T4754] veth0_vlan: entered promiscuous mode [ 433.058726][ T4754] veth1_vlan: entered promiscuous mode [ 433.405039][ T4754] veth0_macvtap: entered promiscuous mode [ 433.469264][ T4754] veth1_macvtap: entered promiscuous mode [ 433.554674][ T28] audit: type=1400 audit(433.310:189): avc: denied { write } for pid=5111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.617041][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.617510][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.617915][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.618141][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.902080][ T28] audit: type=1400 audit(433.650:190): avc: denied { write } for pid=5114 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 1970/01/01 00:07:13 executed programs: 2 [ 434.796391][ T5117] syz.2.17 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 434.800847][ T5117] CPU: 1 UID: 0 PID: 5117 Comm: syz.2.17 Not tainted syzkaller #0 PREEMPT [ 434.801127][ T5117] Hardware name: ARM-Versatile Express [ 434.801409][ T5117] Call trace: [ 434.801716][ T5117] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 434.802694][ T5117] r7:60000113 r6:60000113 r5:823338f8 r4:00000000 [ 434.802790][ T5117] [<80201a74>] (show_stack) from [<8021e5b8>] (dump_stack_lvl+0x5c/0x70) [ 434.802863][ T5117] [<8021e55c>] (dump_stack_lvl) from [<8021e5e4>] (dump_stack+0x18/0x1c) [ 434.802929][ T5117] r7:81c1e924 r6:82348ad0 r5:dfa09ab0 r4:dfa09ab0 [ 434.802948][ T5117] [<8021e5cc>] (dump_stack) from [<80205cdc>] (dump_header+0x4c/0x1b0) [ 434.803005][ T5117] [<80205c90>] (dump_header) from [<804a7ec8>] (oom_kill_process+0x1b4/0x234) [ 434.803074][ T5117] r7:81c1e924 r6:82348ad0 r5:dfa09ab0 r4:84f88000 [ 434.803094][ T5117] [<804a7d14>] (oom_kill_process) from [<804a86d4>] (out_of_memory+0x114/0x384) [ 434.803157][ T5117] r7:85ac6c00 r6:82cd13c4 r5:84166e40 r4:dfa09ab0 [ 434.803177][ T5117] [<804a85c0>] (out_of_memory) from [<805708b8>] (mem_cgroup_out_of_memory+0xa0/0xb8) [ 434.803246][ T5117] r6:00000cc0 r5:85ac6c00 r4:00000000 [ 434.803266][ T5117] [<80570818>] (mem_cgroup_out_of_memory) from [<80577904>] (try_charge_memcg+0x41c/0x578) [ 434.803340][ T5117] r6:85ac6c00 r5:00000001 r4:00000001 [ 434.803359][ T5117] [<805774e8>] (try_charge_memcg) from [<80577aa0>] (obj_cgroup_charge_pages+0x40/0x1c8) [ 434.803455][ T5117] r10:00000000 r9:00000000 r8:dfa09be4 r7:00000cc0 r6:8555e400 r5:00000001 [ 434.803487][ T5117] r4:85ac6c00 [ 434.803508][ T5117] [<80577a60>] (obj_cgroup_charge_pages) from [<805786fc>] (__memcg_slab_post_alloc_hook+0x1e4/0x5dc) [ 434.803585][ T5117] r7:00000180 r6:830c4cc0 r5:8555e400 r4:dde67480 [ 434.803604][ T5117] [<80578518>] (__memcg_slab_post_alloc_hook) from [<80545ad4>] (kmem_cache_alloc_lru_noprof+0x3c0/0x3e4) [ 434.803684][ T5117] r10:82a0b444 r9:834b1c80 r8:828d8320 r7:84166e40 r6:805c8aa4 r5:00000cc0 [ 434.803802][ T5117] r4:830c4cc0 [ 434.803825][ T5117] [<80545714>] (kmem_cache_alloc_lru_noprof) from [<805c8aa4>] (alloc_inode+0xa0/0xd0) [ 434.803909][ T5117] r10:8550ca04 r9:833c56b0 r8:8558f0a8 r7:00008180 r6:81de3c60 r5:85986800 [ 434.803932][ T5117] r4:8558f0a8 [ 434.803949][ T5117] [<805c8a04>] (alloc_inode) from [<805c8ae4>] (new_inode+0x10/0x68) [ 434.804010][ T5117] r7:00008180 r6:8558f080 r5:81de3d54 r4:8558f0a8 [ 434.804029][ T5117] [<805c8ad4>] (new_inode) from [<8111f9d4>] (gadgetfs_make_inode+0x30/0xb8) [ 434.804116][ T5117] r9:833c56b0 r8:8558f0a8 r7:00008180 r6:8558f080 r5:81de3d54 r4:8558f0a8 [ 434.804137][ T5117] [<8111f9a4>] (gadgetfs_make_inode) from [<8111fa98>] (gadgetfs_create_file+0x3c/0x8c) [ 434.804232][ T5117] r7:833c505c r6:85986800 r5:82455098 r4:8558f0a8 [ 434.804249][ T5117] [<8111fa5c>] (gadgetfs_create_file) from [<8112050c>] (gadgetfs_bind+0x100/0x330) [ 434.804317][ T5117] r7:833c505c r6:8550ca00 r5:82455098 r4:8558f080 [ 434.804338][ T5117] [<8112040c>] (gadgetfs_bind) from [<810bd6cc>] (gadget_bind_driver+0x90/0x2b0) [ 434.804405][ T5117] r10:81de3ccc r9:00000000 r8:00000015 r7:833c56f8 r6:82ba0cc4 r5:82ba0ca0 [ 434.804425][ T5117] r4:8412c000 [ 434.804440][ T5117] [<810bd63c>] (gadget_bind_driver) from [<80bd4b6c>] (really_probe+0xd8/0x40c) [ 434.804513][ T5117] r9:00000000 r8:00000015 r7:00000000 r6:82ba0cc4 r5:00000000 r4:833c56f8 [ 434.804532][ T5117] [<80bd4a94>] (really_probe) from [<80bd4f40>] (__driver_probe_device+0xa0/0x21c) [ 434.804600][ T5117] r8:00000015 r7:833c56f8 r6:833c5744 r5:82ba0cc4 r4:833c56f8 [ 434.804619][ T5117] [<80bd4ea0>] (__driver_probe_device) from [<80bd519c>] (driver_probe_device+0x3c/0xc0) [ 434.804728][ T5117] r9:00000000 r8:00000015 r7:833c56f8 r6:833c5744 r5:82d24004 r4:82d23ff4 [ 434.804754][ T5117] [<80bd5160>] (driver_probe_device) from [<80bd5418>] (__driver_attach+0xc0/0x1f0) [ 434.804822][ T5117] r9:00000000 r8:855502b8 r7:00000000 r6:833c5744 r5:82ba0cc4 r4:833c56f8 [ 434.804842][ T5117] [<80bd5358>] (__driver_attach) from [<80bd248c>] (bus_for_each_dev+0x84/0xd4) [ 434.805004][ T5117] r7:00000000 r6:83309400 r5:80bd5358 r4:82ba0cc4 [ 434.805054][ T5117] [<80bd2408>] (bus_for_each_dev) from [<80bd43ec>] (driver_attach+0x24/0x28) [ 434.805118][ T5117] r7:83309400 r6:00000000 r5:85550280 r4:82ba0cc4 [ 434.805138][ T5117] [<80bd43c8>] (driver_attach) from [<80bd3b44>] (bus_add_driver+0x110/0x230) [ 434.805186][ T5117] [<80bd3a34>] (bus_add_driver) from [<80bd64a8>] (driver_register+0x88/0x124) [ 434.805251][ T5117] r8:0000001f r7:00000012 r6:82ba0cc4 r5:00000000 r4:82ba0cc4 [ 434.805270][ T5117] [<80bd6420>] (driver_register) from [<810baf94>] (usb_gadget_register_driver_owner+0x54/0xec) [ 434.805345][ T5117] r5:00000000 r4:82ba0ca0 [ 434.805376][ T5117] [<810baf40>] (usb_gadget_register_driver_owner) from [<8112194c>] (dev_config+0x2ec/0x618) [ 434.805443][ T5117] r7:00000012 r6:86067080 r5:00000000 r4:8550ca00 [ 434.805482][ T5117] [<81121660>] (dev_config) from [<8059fa28>] (vfs_write+0xd4/0x42c) [ 434.805566][ T5117] r10:81de3ccc r9:84166e40 r8:81121660 r7:dfa09f68 r6:20000400 r5:83981480 [ 434.805589][ T5117] r4:0000001f [ 434.805607][ T5117] [<8059f954>] (vfs_write) from [<8059fef4>] (ksys_write+0x74/0xec) [ 434.805676][ T5117] r10:00000004 r9:84166e40 r8:8020029c r7:00000000 r6:00000000 r5:83981480 [ 434.805761][ T5117] r4:83981483 [ 434.805786][ T5117] [<8059fe80>] (ksys_write) from [<8059ff7c>] (sys_write+0x10/0x14) [ 434.805898][ T5117] r7:00000004 r6:00356310 r5:00000000 r4:00000000 [ 434.805918][ T5117] [<8059ff6c>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 434.806061][ T5117] Exception stack(0xdfa09fa8 to 0xdfa09ff0) [ 434.806284][ T5117] 9fa0: 00000000 00000000 00000003 20000400 0000001f 00000000 [ 434.806355][ T5117] 9fc0: 00000000 00000000 00356310 00000004 003562d8 00000000 00000001 76f4f0dc [ 434.806390][ T5117] 9fe0: 76f4ee88 76f4ee78 00018fa0 001309d0 [ 434.952127][ T5117] memory: usage 0kB, limit 0kB, failcnt 19 [ 434.953381][ T5117] memory+swap: usage 0kB, limit 8589934588kB, failcnt 0 [ 434.957563][ T5117] kmem: usage 0kB, limit 8589934588kB, failcnt 0 [ 434.962006][ T5117] Memory cgroup stats for /syz2/test: [ 434.988436][ T5117] cache 0 [ 434.988634][ T5117] rss 0 [ 434.988769][ T5117] shmem 0 [ 434.988896][ T5117] mapped_file 0 [ 434.989020][ T5117] dirty 0 [ 434.989147][ T5117] writeback 0 [ 434.989272][ T5117] workingset_refault_anon 0 [ 434.989405][ T5117] workingset_refault_file 0 [ 434.989528][ T5117] swap 0 [ 434.989652][ T5117] swapcached 0 [ 434.989773][ T5117] pgpgin 0 [ 434.989895][ T5117] pgpgout 0 [ 434.990020][ T5117] pgfault 0 [ 434.990141][ T5117] pgmajfault 0 [ 434.990261][ T5117] inactive_anon 0 [ 434.990394][ T5117] active_anon 0 [ 434.990516][ T5117] inactive_file 0 [ 434.990687][ T5117] active_file 0 [ 434.990817][ T5117] unevictable 0 [ 434.990938][ T5117] hierarchical_memory_limit 0 [ 434.991083][ T5117] hierarchical_memsw_limit 8796093018112 [ 434.991213][ T5117] total_cache 0 [ 435.026161][ T5117] total_rss 0 [ 435.026518][ T5117] total_shmem 0 [ 435.026648][ T5117] total_mapped_file 0 [ 435.026776][ T5117] total_dirty 0 [ 435.026903][ T5117] total_writeback 0 [ 435.027029][ T5117] total_workingset_refault_anon 0 [ 435.027147][ T5117] total_workingset_refault_file 0 [ 435.027267][ T5117] total_swap 0 [ 435.027402][ T5117] total_swapcached 0 [ 435.027555][ T5117] total_pgpgin 0 [ 435.027679][ T5117] total_pgpgout 0 [ 435.027801][ T5117] total_pgfault 0 [ 435.027925][ T5117] total_pgmajfault 0 [ 435.028047][ T5117] total_inactive_anon 0 [ 435.028199][ T5117] total_active_anon 0 [ 435.028332][ T5117] total_inactive_file 0 [ 435.028484][ T5117] total_active_file 0 [ 435.028608][ T5117] total_unevictable 0 [ 435.028731][ T5117] anon_cost 0 [ 435.028853][ T5117] file_cost 0 [ 435.029234][ T5117] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.17,pid=5116,uid=0 [ 435.119815][ T5117] Memory cgroup out of memory: Killed process 5116 (syz.2.17) total-vm:35896kB, anon-rss:104kB, file-rss:1352kB, shmem-rss:0kB, UID:0 pgtables:48kB oom_score_adj:1000 [ 435.405129][ T5117] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 435.432567][ T5117] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 435.479014][ T5117] udc dummy_udc.1: failed to start USB Gadget filesystem: -12 [ 435.481031][ T5117] gadgetfs gadget.1: probe with driver gadgetfs failed with error -12 [ 435.487293][ T5117] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 435.513918][ T5117] ------------[ cut here ]------------ [ 435.514507][ T5117] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0x134/0x170, CPU#1: syz.2.17/5117 [ 435.516397][ T5117] refcount_t: underflow; use-after-free. [ 435.516871][ T5117] Modules linked in: [ 435.519077][ T5117] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 435.523210][ T5117] CPU: 1 UID: 0 PID: 5117 Comm: syz.2.17 Not tainted syzkaller #0 PREEMPT [ 435.524937][ T5117] Hardware name: ARM-Versatile Express [ 435.528138][ T5117] Call trace: [ 435.529046][ T5117] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 435.530910][ T5117] r7:82a20f78 r6:00000000 r5:823338f8 r4:00000001 [ 435.531158][ T5117] [<80201a74>] (show_stack) from [<8021e5b8>] (dump_stack_lvl+0x5c/0x70) [ 435.534671][ T5117] [<8021e55c>] (dump_stack_lvl) from [<8021e5e4>] (dump_stack+0x18/0x1c) [ 435.539427][ T5117] r7:82a20f78 r6:00000000 r5:84166e40 r4:82c82d40 [ 435.539673][ T5117] [<8021e5cc>] (dump_stack) from [<80202590>] (vpanic+0x114/0x320) [ 435.540045][ T5117] [<8020247c>] (vpanic) from [<802027d0>] (trace_suspend_resume+0x0/0x100) [ 435.540415][ T5117] r7:8092f5a8 [ 435.541484][ T5117] [<8020279c>] (panic) from [<80250a80>] (get_taint+0x0/0x1c) [ 435.543030][ T5117] r3:82a0b144 r2:00000001 r1:8231965c r0:82320fb8 [ 435.546925][ T5117] [<80250a08>] (check_panic_on_warn) from [<80250bfc>] (__warn+0x98/0x1a4) [ 435.549679][ T5117] [<80250b64>] (__warn) from [<80250ef0>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 435.550816][ T5117] r8:00000009 r7:8238d554 r6:dfa09da4 r5:84166e40 r4:00000000 [ 435.551130][ T5117] [<80250d0c>] (warn_slowpath_fmt) from [<8092f5a8>] (refcount_warn_saturate+0x134/0x170) [ 435.551616][ T5117] r10:850839c0 r9:00000000 r8:830e9c10 r7:8346cc00 r6:85e35660 r5:00000000 [ 435.551926][ T5117] r4:8550ca00 [ 435.553517][ T5117] [<8092f474>] (refcount_warn_saturate) from [<8111fd0c>] (put_dev+0x4c/0x6c) [ 435.557012][ T5117] [<8111fcc0>] (put_dev) from [<8111fdd4>] (dev_release+0x48/0x6c) [ 435.559835][ T5117] [<8111fd8c>] (dev_release) from [<805a168c>] (__fput+0xd8/0x2f4) [ 435.561711][ T5117] r5:040f801b r4:83981480 [ 435.562065][ T5117] [<805a15b4>] (__fput) from [<805a193c>] (____fput+0x14/0x18) [ 435.562534][ T5117] r9:00000000 r8:841676d4 r7:82c836ac r6:84166e40 r5:841676a0 r4:00000000 [ 435.562920][ T5117] [<805a1928>] (____fput) from [<8027d7c8>] (task_work_run+0x8c/0xb4) [ 435.564246][ T5117] [<8027d73c>] (task_work_run) from [<80257888>] (do_exit+0x2ac/0xadc) [ 435.573266][ T5117] r9:00000000 r8:dfa09e90 r7:841676d0 r6:84ff1d4c r5:84166e40 r4:84ff1c00 [ 435.573573][ T5117] [<802575dc>] (do_exit) from [<8025828c>] (do_group_exit+0x40/0x8c) [ 435.573870][ T5117] r7:00000004 [ 435.573993][ T5117] [<8025824c>] (do_group_exit) from [<80269358>] (get_signal+0xa68/0xa90) [ 435.574275][ T5117] r7:00000004 r4:84166e40 [ 435.574426][ T5117] [<802688f0>] (get_signal) from [<8022a630>] (do_work_pending+0x124/0x4f0) [ 435.574718][ T5117] r10:00000004 r9:84166e40 r8:0000001f r7:00000004 r6:8020029c r5:dfa09fb0 [ 435.574957][ T5117] r4:84166e40 [ 435.575075][ T5117] [<8022a50c>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 435.575349][ T5117] Exception stack(0xdfa09fb0 to 0xdfa09ff8) [ 435.575549][ T5117] 9fa0: 0000001f 20000400 0000001f 00000000 [ 435.575814][ T5117] 9fc0: 00000000 00000000 00356310 00000004 003562d8 00000000 00000001 76f4f0dc [ 435.576084][ T5117] 9fe0: 76f4ee88 76f4ee78 00018fa0 001309d0 60000010 00000003 [ 435.576331][ T5117] r10:00000004 r9:84166e40 r8:8020029c r7:00000004 r6:00356310 r5:00000000 [ 435.577279][ T5117] r4:00000000 [ 435.579856][ T5117] Rebooting in 86400 seconds..