last executing test programs: 2m45.398939586s ago: executing program 1 (id=3181): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000c40)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1001}}}}}}}, 0x0) 2m42.135785107s ago: executing program 1 (id=3184): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 2m41.665690331s ago: executing program 1 (id=3185): fanotify_init(0x0, 0x0) pipe2(0x0, 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(0x0, 0x2000, 0x2000002, 0x13, 0xffffffffffffffff, 0x8000000) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{0x0, 0x1d}, {&(0x7f0000000200)=""/29, 0x1d}], 0x2) 2m38.279793396s ago: executing program 1 (id=3188): gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)) 2m37.819569158s ago: executing program 1 (id=3189): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7d6a}, 0x30, 0x0) landlock_restrict_self(r3, 0x0) getdents64(r2, 0x0, 0x0) 2m37.10052241s ago: executing program 1 (id=3191): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) 1m51.952356475s ago: executing program 32 (id=3191): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) 5.130959666s ago: executing program 2 (id=3441): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) pwrite64(r0, &(0x7f0000000400)="b9", 0x1, 0xffffffff) 4.728853942s ago: executing program 2 (id=3443): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000049c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000004040)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 4.56303771s ago: executing program 2 (id=3445): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg(r0, &(0x7f0000001800)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x1, 0x0, {0xa, 0x4e24, 0x7, @mcast2}}}, 0x80, 0x0}, 0x8080) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) 2.498614255s ago: executing program 0 (id=3451): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.18933874s ago: executing program 0 (id=3452): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.988968213s ago: executing program 2 (id=3453): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0xffffffff}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 1.83905799s ago: executing program 2 (id=3454): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.83886144s ago: executing program 0 (id=3455): capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000380)={0x7, 0x7, 0x4, 0x1ff, 0x101, 0x1}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.478949421s ago: executing program 0 (id=3456): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x5d3, 0xfffffffffffffffd, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @random="429e82211cf8", @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x28, 0x29, 0x1, @remote, @mcast2, {[@dstopts={0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}, @fragment={0xb2, 0x0, 0x4, 0x0, 0x0, 0x11, 0x68}, @dstopts={0x73, 0x0, '\x00', [@padn]}]}}}}}, 0x0) 225.313564ms ago: executing program 2 (id=3457): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x1b4}, {&(0x7f0000000700)="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", 0x147}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000180)="398b2593a2dc7e", 0x7}, {&(0x7f0000000200)="135c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc32641c81b34ace8a835e48fad535a4", 0x60}, {&(0x7f0000000400)="7f96b1c0057470ba3ad9c683aafbd45ff640c70156ed616124c8d5f2ae803a3fb2703e02865d049bec0875e912a8e3c258991aeb6ae7f2acae1946a4495103af0d7d41775462593f51df475710215facd37b35605811f4af67f99977c186c32df773c81e81f1543adb", 0x69}, {&(0x7f0000000640)="37f00163ee64590eddc69225a76b0c705b43d255bb682c28fc62b9d27da33e7dd1c9f3f87d7292ca519c643a0c26e00455b5456afb57a36b83100e28affe312181753618c81414e3782b174522a8ff7ddff631", 0x53}], 0x4) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5", 0x246) 209.930025ms ago: executing program 0 (id=3461): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x356, 0xa0, 0xc80, 0x600, 0x0, 0x7, 0x0, 0xffffffff, {0x9, 0x7}, {0x27, 0x0, 0x1}, {0x401, 0x7}, {0x1, 0x4, 0x1}, 0x3, 0x0, 0xe512, 0x7fff, 0x1, 0x6e, 0x10, 0x2, 0x803, 0x80, 0x8fac, 0x8, 0x8, 0x100, 0x0, 0x6}) 0s ago: executing program 0 (id=3458): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001400)={'comedi_parport\x00', [0x100, 0xd, 0x4d0, 0x2, 0x1, 0x100, 0x2001, 0x20000000, 0x6, 0x9, 0x0, 0xf, 0x1, 0x401, 0xfffd, 0x0, 0x0, 0x8, 0xea9, 0x401, 0x7, 0x2, 0x4, 0x9, 0x3, 0x7, 0x7, 0x0, 0x7, 0x7, 0x8]}) r1 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x0, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0xe1, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x0, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x7fffffff, 0x4, 0x7ffd]}) kernel console output (not intermixed with test programs): 6][T16348] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 2122.837022][T16348] [<809fdf1c>] (should_fail_usercopy) from [<81630a38>] (copy_msghdr_from_user+0x50/0x1e0) [ 2122.837075][T16348] [<816309e8>] (copy_msghdr_from_user) from [<81630c40>] (___sys_sendmsg+0x78/0xd0) [ 2122.837132][T16348] r8:20004040 r7:00000000 r6:836b5440 r5:ea641f28 r4:ea641e74 [ 2122.837150][T16348] [<81630bc8>] (___sys_sendmsg) from [<81632e3c>] (__sys_sendmsg+0x8c/0xe0) [ 2122.837212][T16348] r9:83e0b100 r8:86523900 r7:20004040 r6:20000500 r5:86523901 r4:00000003 [ 2122.837230][T16348] [<81632db0>] (__sys_sendmsg) from [<81632ea4>] (sys_sendmsg+0x14/0x18) [ 2122.837294][T16348] r8:8020029c r7:00000128 r6:0012f454 r5:00000000 r4:00000000 [ 2122.837310][T16348] [<81632e90>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2122.837356][T16348] Exception stack(0xea641fa8 to 0xea641ff0) [ 2122.837391][T16348] 1fa0: 00000000 00000000 00000003 20000500 20004040 00000000 [ 2122.837428][T16348] 1fc0: 00000000 00000000 0012f454 00000128 003562d8 00000000 00000001 76fc50dc [ 2122.837456][T16348] 1fe0: 76fc4e88 76fc4e78 00018fa0 00130a50 [ 2124.918081][ T28] audit: type=1400 audit(2124.840:534): avc: denied { read } for pid=16354 comm="syz.1.2978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2125.674284][T16357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16357 comm=syz.1.2979 [ 2126.417436][T16360] veth0_to_team: entered promiscuous mode [ 2131.504307][T16389] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1547 sclass=netlink_tcpdiag_socket pid=16389 comm=syz.1.2986 [ 2131.539379][T16385] FAULT_INJECTION: forcing a failure. [ 2131.539379][T16385] name failslab, interval 1, probability 0, space 0, times 0 [ 2131.539808][T16385] CPU: 1 UID: 0 PID: 16385 Comm: syz.0.2984 Tainted: G L syzkaller #0 PREEMPT [ 2131.539894][T16385] Tainted: [L]=SOFTLOCKUP [ 2131.539914][T16385] Hardware name: ARM-Versatile Express [ 2131.539938][T16385] Call trace: [ 2131.540003][T16385] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2131.540115][T16385] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 2131.540137][T16385] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 2131.540197][T16385] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 2131.540257][T16385] r7:85140c40 r6:00000000 r5:85140c40 r4:82b1ac48 [ 2131.540275][T16385] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 2131.540332][T16385] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 2131.540401][T16385] r8:00000000 r7:85140c40 r6:81b495c4 r5:00000cc0 r4:83002840 [ 2131.540421][T16385] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 2131.540477][T16385] [<80546804>] (kmem_cache_alloc_noprof) from [<81b495c4>] (mas_alloc_nodes+0xd4/0x10c) [ 2131.540578][T16385] r10:76e21000 r9:76efffff r8:ea929ee8 r7:76e21000 r6:00000cc0 r5:00000001 [ 2131.540626][T16385] r4:ea929ee8 [ 2131.540648][T16385] [<81b494f0>] (mas_alloc_nodes) from [<81b4caf8>] (mas_preallocate+0x17c/0x25c) [ 2131.540718][T16385] r7:76e21000 r6:00000cc0 r5:8590b800 r4:ea929ee8 [ 2131.540740][T16385] [<81b4c97c>] (mas_preallocate) from [<80526e7c>] (__split_vma+0x144/0x434) [ 2131.540815][T16385] r6:82e4a79c r5:8590b800 r4:84e68d00 [ 2131.540835][T16385] [<80526d38>] (__split_vma) from [<80527b0c>] (vma_modify+0x4a4/0x9ac) [ 2131.540900][T16385] r10:85292400 r9:00000000 r8:00000000 r7:00000000 r6:00000001 r5:84e68d00 [ 2131.540920][T16385] r4:ea929dc8 [ 2131.540935][T16385] [<80527668>] (vma_modify) from [<8052a244>] (vma_modify_flags+0xb8/0xf4) [ 2131.541002][T16385] r10:81c23e00 r9:ea929e8c r8:ea929ee8 r7:85292400 r6:ea929e70 r5:00000000 [ 2131.541025][T16385] r4:84e68d00 [ 2131.541041][T16385] [<8052a18c>] (vma_modify_flags) from [<80511e40>] (mprotect_fixup+0xac/0x348) [ 2131.541102][T16385] r8:00000001 r7:8496b800 r6:ea929ee4 r5:00000021 r4:84e68d00 [ 2131.541120][T16385] [<80511d94>] (mprotect_fixup) from [<805122e8>] (do_mprotect_pkey.constprop.0+0x20c/0x3ec) [ 2131.541297][T16385] r10:00000073 r9:00000003 r8:85140c40 r7:76e21000 r6:76e00000 r5:84e68d00 [ 2131.541333][T16385] r4:00000000 [ 2131.541353][T16385] [<805120dc>] (do_mprotect_pkey.constprop.0) from [<805124d8>] (sys_mprotect+0x10/0x14) [ 2131.541423][T16385] r10:0000007d r9:85140c40 r8:8020029c r7:0000007d r6:00100000 r5:00021000 [ 2131.541450][T16385] r4:76e00000 [ 2131.541468][T16385] [<805124c8>] (sys_mprotect) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2131.541532][T16385] Exception stack(0xea929fa8 to 0xea929ff0) [ 2131.541585][T16385] 9fa0: 76e00000 00021000 76e00000 00021000 00000003 fff00000 [ 2131.541637][T16385] 9fc0: 76e00000 00021000 00100000 0000007d 00320000 00001000 76f00000 001ce330 [ 2131.541669][T16385] 9fe0: 00000000 76f4ecbc 00113fd4 0013073c [ 2135.198325][ T28] audit: type=1400 audit(2135.120:535): avc: denied { unmount } for pid=14122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2136.487644][ T28] audit: type=1400 audit(2136.410:536): avc: denied { map } for pid=16416 comm="syz.0.2995" path="socket:[34617]" dev="sockfs" ino=34617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2136.801718][T16419] FAULT_INJECTION: forcing a failure. [ 2136.801718][T16419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2136.802062][T16419] CPU: 1 UID: 0 PID: 16419 Comm: syz.1.2996 Tainted: G L syzkaller #0 PREEMPT [ 2136.802151][T16419] Tainted: [L]=SOFTLOCKUP [ 2136.802167][T16419] Hardware name: ARM-Versatile Express [ 2136.802190][T16419] Call trace: [ 2136.802231][T16419] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2136.802356][T16419] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 2136.802378][T16419] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 2136.802429][T16419] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 2136.802488][T16419] r7:00000000 r6:00000000 r5:85111880 r4:82b54788 [ 2136.802506][T16419] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 2136.802557][T16419] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 2136.802617][T16419] r8:76fc4f08 r7:00000000 r6:00000000 r5:dfa75f68 r4:00000002 [ 2136.802635][T16419] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 2136.802714][T16419] [<809fdf1c>] (should_fail_usercopy) from [<805e2370>] (simple_read_from_buffer+0x80/0x140) [ 2136.802771][T16419] [<805e22f0>] (simple_read_from_buffer) from [<806683c0>] (proc_fail_nth_read+0xb8/0x108) [ 2136.802844][T16419] r10:80668308 r9:00000001 r8:00000002 r7:dfa75f68 r6:0000000f r5:76fc4f08 [ 2136.802868][T16419] r4:85111880 r3:dfa75e9f [ 2136.802883][T16419] [<80668308>] (proc_fail_nth_read) from [<805a0968>] (vfs_read+0xc0/0x328) [ 2136.802982][T16419] r8:85111880 r7:dfa75f68 r6:76fc4f08 r5:866fa280 r4:0000000f [ 2136.803016][T16419] [<805a08a8>] (vfs_read) from [<805a15b4>] (ksys_read+0x74/0xec) [ 2136.803128][T16419] r10:00000003 r9:85111880 r8:8020029c r7:00000000 r6:00000000 r5:866fa280 [ 2136.803158][T16419] r4:866fa283 [ 2136.803229][T16419] [<805a1540>] (ksys_read) from [<805a163c>] (sys_read+0x10/0x14) [ 2136.803324][T16419] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 2136.803374][T16419] [<805a162c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2136.803464][T16419] Exception stack(0xdfa75fa8 to 0xdfa75ff0) [ 2136.803506][T16419] 5fa0: 00000000 00000000 00000004 76fc4f08 0000000f 00000000 [ 2136.803561][T16419] 5fc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76fc50dc [ 2136.803591][T16419] 5fe0: 76fc4e58 76fc4e44 0010bc74 00112858 [ 2137.309254][T16425] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=7 sclass=netlink_audit_socket pid=16425 comm=syz.1.2997 [ 2139.077110][ T86] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 2139.238017][ T86] usb 1-1: not running at top speed; connect to a high speed hub [ 2139.239111][ T86] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2139.248283][ T86] usb 1-1: config 1 interface 0 altsetting 79 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2139.249473][ T86] usb 1-1: config 1 interface 0 altsetting 79 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 2139.250596][ T86] usb 1-1: config 1 interface 0 altsetting 79 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2139.252377][ T86] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2139.278644][ T86] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2139.279775][ T86] usb 1-1: Product: syz [ 2139.280599][ T86] usb 1-1: Manufacturer: syz [ 2139.281355][ T86] usb 1-1: SerialNumber: syz [ 2139.299291][T16431] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2139.300579][T16431] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2139.535239][ T86] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 2139.547386][ T86] usb 1-1: USB disconnect, device number 73 [ 2145.619320][T16469] FAULT_INJECTION: forcing a failure. [ 2145.619320][T16469] name failslab, interval 1, probability 0, space 0, times 0 [ 2145.620849][T16469] CPU: 0 UID: 0 PID: 16469 Comm: syz.0.3008 Tainted: G L syzkaller #0 PREEMPT [ 2145.620953][T16469] Tainted: [L]=SOFTLOCKUP [ 2145.620968][T16469] Hardware name: ARM-Versatile Express [ 2145.620989][T16469] Call trace: [ 2145.621023][T16469] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2145.621109][T16469] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 2145.621124][T16469] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 2145.621165][T16469] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 2145.621214][T16469] r7:83f63d40 r6:00000000 r5:83f63d40 r4:82b1ac48 [ 2145.621227][T16469] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 2145.621271][T16469] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 2145.621335][T16469] r8:00000000 r7:83f63d40 r6:83001300 r5:00000dc0 r4:00000064 [ 2145.621349][T16469] [<80568de8>] (should_failslab) from [<80547834>] (__kmalloc_noprof+0xa8/0x3c8) [ 2145.621394][T16469] [<8054778c>] (__kmalloc_noprof) from [<8154ad20>] (constrain_params_by_rules+0x80/0x560) [ 2145.621457][T16469] r10:82a0b150 r9:8671e800 r8:8538c400 r7:8671ea28 r6:8538c594 r5:8538c400 [ 2145.621478][T16469] r4:00000000 [ 2145.621493][T16469] [<8154aca0>] (constrain_params_by_rules) from [<8154b3e8>] (snd_pcm_hw_refine+0x1e8/0x450) [ 2145.621551][T16469] r10:82a0b150 r9:0000000c r8:84d3f800 r7:8671ea28 r6:8538c594 r5:8538c400 [ 2145.621573][T16469] r4:00000014 [ 2145.621587][T16469] [<8154b200>] (snd_pcm_hw_refine) from [<81552260>] (snd_pcm_hw_param_last+0xc8/0x1d8) [ 2145.621647][T16469] r10:00001000 r9:8254373c r8:84d3f800 r7:84d3f800 r6:00000000 r5:0000000f [ 2145.621666][T16469] r4:8538c400 [ 2145.621681][T16469] [<81552198>] (snd_pcm_hw_param_last) from [<81563cf0>] (snd_pcm_hw_param_near.constprop.0+0x174/0x248) [ 2145.621744][T16469] r9:8254373c r8:84d3f800 r7:0000000f r6:86334c00 r5:00000100 r4:8538c400 [ 2145.621761][T16469] [<81563b7c>] (snd_pcm_hw_param_near.constprop.0) from [<8156473c>] (snd_pcm_oss_change_params_locked+0x6d4/0xce4) [ 2145.621828][T16469] r10:00001000 r9:00200000 r8:8671e800 r7:00000001 r6:00001000 r5:84d3f800 [ 2145.621847][T16469] r4:8538c400 [ 2145.621863][T16469] [<81564068>] (snd_pcm_oss_change_params_locked) from [<8156524c>] (snd_pcm_oss_make_ready+0x4c/0xa8) [ 2145.621958][T16469] r10:83f63d40 r9:00000003 r8:dfcb1ed0 r7:8671eab0 r6:8671e800 r5:84d3f800 [ 2145.621977][T16469] r4:800c5011 [ 2145.621991][T16469] [<81565200>] (snd_pcm_oss_make_ready) from [<815669e8>] (snd_pcm_oss_ioctl+0xb60/0xf88) [ 2145.622049][T16469] r7:84d3f800 r6:20000080 r5:838d2381 r4:800c5011 [ 2145.622066][T16469] [<81565e88>] (snd_pcm_oss_ioctl) from [<805bdf78>] (sys_ioctl+0x244/0xb5c) [ 2145.622130][T16469] r10:83f63d40 r9:00000003 r8:838d2380 r7:20000080 r6:800c5011 r5:838d2381 [ 2145.622151][T16469] r4:00000000 [ 2145.622166][T16469] [<805bdd34>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2145.622211][T16469] Exception stack(0xdfcb1fa8 to 0xdfcb1ff0) [ 2145.622245][T16469] 1fa0: 00000000 00000000 00000003 800c5011 20000080 00000000 [ 2145.622287][T16469] 1fc0: 00000000 00000000 0012f454 00000036 003562d8 00000000 00000001 76f500dc [ 2145.622316][T16469] 1fe0: 76f4fe88 76f4fe78 00018fa0 00130a50 [ 2145.622353][T16469] r10:00000036 r9:83f63d40 r8:8020029c r7:00000036 r6:0012f454 r5:00000000 [ 2145.622373][T16469] r4:00000000 [ 2151.377566][T16484] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=16484 comm=syz.1.3014 [ 2151.440509][T16485] FAULT_INJECTION: forcing a failure. [ 2151.440509][T16485] name failslab, interval 1, probability 0, space 0, times 0 [ 2151.442357][T16485] CPU: 0 UID: 0 PID: 16485 Comm: syz.0.3013 Tainted: G L syzkaller #0 PREEMPT [ 2151.442485][T16485] Tainted: [L]=SOFTLOCKUP [ 2151.442515][T16485] Hardware name: ARM-Versatile Express [ 2151.442553][T16485] Call trace: [ 2151.442602][T16485] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2151.442751][T16485] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 2151.442765][T16485] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 2151.442808][T16485] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 2151.442868][T16485] r7:8492d5c0 r6:00000000 r5:8492d5c0 r4:82b1ac48 [ 2151.442896][T16485] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 2151.442979][T16485] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 2151.443078][T16485] r8:00000000 r7:8492d5c0 r6:807ee1c4 r5:00000d40 r4:830bd600 [ 2151.443108][T16485] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 2151.443173][T16485] [<80546804>] (kmem_cache_alloc_noprof) from [<807ee1c4>] (security_inode_alloc+0x30/0x1d0) [ 2151.443269][T16485] r10:834a1c00 r9:00000000 r8:00000000 r7:00000c40 r6:8538cc00 r5:834a1b00 [ 2151.443293][T16485] r4:834a1b00 [ 2151.443318][T16485] [<807ee194>] (security_inode_alloc) from [<805c7dec>] (inode_init_always_gfp+0x184/0x1d8) [ 2151.443400][T16485] r5:00000000 r4:834a1b00 [ 2151.443426][T16485] [<805c7c68>] (inode_init_always_gfp) from [<805cb860>] (alloc_inode+0x40/0xd0) [ 2151.443506][T16485] r10:807aff80 r9:dfb79ba3 r8:dfb79bf8 r7:807aff54 r6:81cd578c r5:8538cc00 [ 2151.443539][T16485] r4:834a1b00 r3:8492d5c0 [ 2151.443561][T16485] [<805cb820>] (alloc_inode) from [<805cb9fc>] (iget5_locked+0xa4/0x10c) [ 2151.443611][T16485] r7:807aff54 r6:00000003 r5:00000000 r4:8538cc00 [ 2151.443626][T16485] [<805cb958>] (iget5_locked) from [<807b2a68>] (fuse_iget+0x5c/0x2d4) [ 2151.443719][T16485] r10:dfb79d58 r9:dfb79bf8 r8:00000000 r7:807aff54 r6:807aff80 r5:8538cc00 [ 2151.443746][T16485] r4:dfb79d30 [ 2151.443772][T16485] [<807b2a0c>] (fuse_iget) from [<807a8070>] (fuse_lookup_name+0x168/0x284) [ 2151.443870][T16485] r10:00000000 r9:dfb79d2c r8:85e3e700 r7:8538cc00 r6:dfb79d58 r5:00000000 [ 2151.443902][T16485] r4:dfb79d30 [ 2151.443932][T16485] [<807a7f08>] (fuse_lookup_name) from [<807a8218>] (fuse_lookup+0x8c/0x170) [ 2151.444021][T16485] r10:00000009 r9:00000001 r8:00000001 r7:00000000 r6:836cbd48 r5:834a18c0 [ 2151.444053][T16485] r4:836cbd48 [ 2151.444072][T16485] [<807a818c>] (fuse_lookup) from [<805b20e8>] (__lookup_slow+0x64/0xfc) [ 2151.444161][T16485] r9:00000000 r8:834a18c0 r7:00000000 r6:dfb79e58 r5:85458a18 r4:836cbd48 [ 2151.444190][T16485] [<805b2084>] (__lookup_slow) from [<805b21b8>] (lookup_slow+0x38/0x50) [ 2151.444279][T16485] r9:00000000 r8:dfb79f40 r7:00000000 r6:dfb79e58 r5:85458a18 r4:834a1940 [ 2151.444306][T16485] [<805b2180>] (lookup_slow) from [<805b6b14>] (path_lookupat+0x198/0x2a4) [ 2151.444361][T16485] r7:00000100 r6:dfb79f40 r5:00000000 r4:dfb79e50 [ 2151.444376][T16485] [<805b697c>] (path_lookupat) from [<805b81bc>] (filename_lookup+0xd8/0x1a8) [ 2151.444413][T16485] r9:00000000 r8:dfb79f40 r7:00000000 r6:8492d5c0 r5:833c5cc0 r4:ffffff9c [ 2151.444421][T16485] [<805b80e4>] (filename_lookup) from [<805bb4b8>] (filename_linkat+0x88/0x290) [ 2151.444475][T16485] r9:00000000 r8:8020029c r7:00000000 r6:00000000 r5:00000000 r4:833c5cc0 [ 2151.444496][T16485] [<805bb430>] (filename_linkat) from [<805bb79c>] (sys_link+0x54/0x78) [ 2151.444555][T16485] r10:00000009 r9:8492d5c0 r8:8020029c r7:00000009 r6:0012f454 r5:833c5f00 [ 2151.444576][T16485] r4:833c5cc0 [ 2151.444591][T16485] [<805bb748>] (sys_link) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2151.444639][T16485] Exception stack(0xdfb79fa8 to 0xdfb79ff0) [ 2151.444672][T16485] 9fa0: 00000000 00000000 20000280 20000400 00000000 00000000 [ 2151.444704][T16485] 9fc0: 00000000 00000000 0012f454 00000009 00356378 00000000 00000001 76f2f0dc [ 2151.444737][T16485] 9fe0: 76f2ee88 76f2ee78 00018fa0 00130a50 [ 2151.444765][T16485] r5:00000000 r4:00000000 [ 2156.848282][ T28] audit: type=1400 audit(2156.770:537): avc: denied { connect } for pid=16513 comm="syz.0.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2156.862124][ T28] audit: type=1400 audit(2156.780:538): avc: denied { shutdown } for pid=16513 comm="syz.0.3025" laddr=::1 lport=52787 faddr=::1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2169.201164][T16593] cgroup: Unknown subsys name 'cpuset' [ 2182.259637][T16657] cgroup: Unknown subsys name 'cpuset' [ 2193.010974][ T28] audit: type=1400 audit(2192.930:539): avc: denied { write } for pid=16701 comm="syz.1.3096" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 2193.015339][ T28] audit: type=1400 audit(2192.930:540): avc: denied { open } for pid=16701 comm="syz.1.3096" path="/299/my_tracefs/events/task/task_rename/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 2193.708875][T16706] bonding: . is being created... [ 2194.099678][T16744] syzkaller0: entered promiscuous mode [ 2194.100239][T16744] syzkaller0: entered allmulticast mode [ 2194.147835][ T28] audit: type=1400 audit(2194.070:541): avc: denied { read } for pid=16747 comm="syz.1.3100" name="dynamic_events" dev="tracefs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 2208.542699][ T28] audit: type=1400 audit(2208.460:542): avc: denied { remount } for pid=16807 comm="syz.1.3126" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 2210.947834][ T28] audit: type=1400 audit(2210.860:543): avc: denied { bind } for pid=16823 comm="syz.1.3132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2210.948098][ T28] audit: type=1400 audit(2210.870:544): avc: denied { listen } for pid=16823 comm="syz.1.3132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2210.964770][ T28] audit: type=1400 audit(2210.880:545): avc: denied { connect } for pid=16823 comm="syz.1.3132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2210.986903][ T28] audit: type=1400 audit(2210.910:546): avc: denied { write } for pid=16823 comm="syz.1.3132" path="socket:[36107]" dev="sockfs" ino=36107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2212.427848][ T28] audit: type=1400 audit(2212.350:547): avc: denied { bind } for pid=16826 comm="syz.0.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2218.808598][T16869] bond0: invalid ARP target specified [ 2225.253422][ T28] audit: type=1400 audit(2225.170:548): avc: denied { mount } for pid=16895 comm="syz.0.3158" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2225.379779][ T28] audit: type=1400 audit(2225.300:549): avc: denied { unmount } for pid=12471 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2232.208155][ T28] audit: type=1400 audit(2232.130:550): avc: denied { mounton } for pid=16924 comm="syz.0.3168" path="/430/file0" dev="tmpfs" ino=2292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 2236.198917][ T28] audit: type=1326 audit(2236.120:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16953 comm="syz.1.3177" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x0 [ 2236.596237][ T28] audit: type=1326 audit(2236.510:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16957 comm="syz.1.3178" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2236.596541][ T28] audit: type=1326 audit(2236.510:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16957 comm="syz.1.3178" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2236.596794][ T28] audit: type=1326 audit(2236.510:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16957 comm="syz.1.3178" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2236.596849][ T28] audit: type=1326 audit(2236.510:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16957 comm="syz.1.3178" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2236.596876][ T28] audit: type=1326 audit(2236.510:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16957 comm="syz.1.3178" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2236.596899][ T28] audit: type=1326 audit(2236.510:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16957 comm="syz.1.3178" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2236.596954][ T28] audit: type=1326 audit(2236.510:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16957 comm="syz.1.3178" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2236.597006][ T28] audit: type=1326 audit(2236.510:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16957 comm="syz.1.3178" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2246.438550][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 2246.439026][ T28] audit: type=1400 audit(2246.360:613): avc: denied { mounton } for pid=16987 comm="syz.1.3189" path="/proc/849/task" dev="proc" ino=36982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2246.789003][ T28] audit: type=1400 audit(2246.710:614): avc: denied { write } for pid=16988 comm="syz.0.3190" name="file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1   /dev/fusefd=0x0000000000000003,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000P)F@s ./file0fuseh-s.file0ރm#։!f۪y&jAcaAC|D9 ^瀘hyfH8fC2l%S`-$mRFZ|H7M[ >Q,EGXIQ5J?V9g4aS3% FhM^6)Q7:L]>]bHYv€r8`)5ݺŦ.=W&W!s.)#>01A'^䮅nȈgQR~UvCD/p%E:b& Zq`CJjM37`xl!Xۀv`6o{FН,gIKL,gPe[^++ǀ bQ=䌸+?0?Znv?60EFy#H5LⅯ unK"qYBfQdiq kxcK]۠y18_MQAİ"Ϸ RUZWlˌ[dtgvb-Bl\[;ΑŏqM?Xdr ]O "?]:n6Sq\R`V U]Q\@|ή)tP3H8dh.gjo9j|:5yX566 ڔX$ogX?q=w2H*xxBaubrx;21#[v#U~vv'1A T!kmzMxqFQe[ԙcS[K@|ZYŸ 'ĩÊU^B0Sd ;޻p) 5G~M(ylU ou&&3+ 1u䦗fCU-mΖQ0qD"^._g|t>ˊ6y#!rb6hԘki$әhN.v^wkXȔn; 6#< ޏ*t\^M9y [qU7f!:; Nѫ.a w*uU@m`K|0e)^ޔ8c~)$Kt^x,Q ;*5'e\ݖ~sq :,D)0RP=1HT{OM,᐀x(P6M4>s~z͡]y"inkP&;t(v>%`lOsZO6qԑ]8G\{E_Q;CLa M&Fn67I4W֘E-&xܥKJR[hCB:n 8ȿAr'J4-g qĕQQo!˱&]sLr])U;:y]-`Bxo rI?ǒvCfJ52 о j$l6Wƹ܃zCީH`cs̄"M3"Bȕ@uqg86ʹaUj`dfSEz֮"IFBxH`"s٠ϠڎrG^ND(7QI4G>ն>@HMUK?.x?L:5dPU:}"BWXYyTՌt*lv2knRsd$MC?ȁ? *$3Ij{ E* r=ڏem!{U4+\<|뻝OLf]EMҋ!~a1x^ڼH&q}ZX6;K9/PHto^FPByF FN9SM3Ke5)h* mF/.X{7.b!HqqW]Dž^zg1ZFhd`ڷjc̀&:IUkHz X_-LAFg|J,K^Jtk~oKqKp(I (wk¨|ao 2G?';[:@Ic}̼/ zfq|YlV h^ޖ{>拌YVL;k,X8~08,QEe QkyVj g?ت`w7WIDQzh$PFG$wʆbAr"mf+$>]ܨ(|WQ @,6 4}KI^/xɥ;cd>dGnh[;-͉<hhI&}o+N{iu*Jgh4/B$|R|+ `dPz-&7YF*hh C㖹t5a%GТ'7 6oCKI/]b0|6oԅ|@IXqU5/R$mF.p2vdMŘo'?9Q!B@EƼ6bs <'C"L5p})dn u|eM;)oz$VQ6*YVZƱث̔Ƴ;1OnP`WdU]O@,~%ˤ"9IXuC:"\BwFv}z:Je:f?*;&^i"pX*K\!,4_O~$fOs|`gd_]KlFK<~rŵˮsd!<F׸ln;^(+|n{Ѱ!0̯zY)Qdut<]ɁK;%bGy50~nÀ q0³UHSIVS%sn|$\)Z=^:ra(5 j0) u=u)-+6iY ^@}ދĖq#&jvk@$a)gmGwBn>Im.q(r֮3 yȶNز L,K 0K{ݜf@"0Al_~A)GRa?J((HR̫.axzݨ<wH׵$8HC-Y.aq,/qC*#IU$@#44L{j/''dϕxF.;>bCZg^%65ߪh>օA?[Q ЦFt,娇FLF $Q-(՗. I۾gc"N2;ԽTDR.#14>fbj:r^C9`@#|K^tӮ|DVpT7q,nQc*LMoÄ#ո( 5Ad*kpPPu/OkC߃ h*ogzL[;{cʦ{q1UU,q88a] {%Js?%&3b]=C K{Z ;6 {5y, _ u(;8\ rB^Q D<^Ő؝`t* ,/E}] kO].ox"VO/N^^1e7LΎxrc8'g0b;*p!qzKqKr9ľ ]9d4A ;Mgz8ke=ݮ[0ג>4!Y!)d]n!]SkNb:C^ A K,I{~>✌ &d66LHQOU6$A\_704x¬;E(O| } 76%8gTtwyMfJ'dsuc0LlIdThR3JVXDA|u ;hhkVmw%0&q;ɑ3̼'7AoRB :Fj O-м/Ƕ6(~[ 2249.638723][ T28] audit: type=1400 audit(2249.560:615): avc: denied { read } for pid=17004 comm="syz.0.3195" name="kmsg" dev="proc" ino=4026532017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 2249.640651][ T28] audit: type=1400 audit(2249.560:616): avc: denied { open } for pid=17004 comm="syz.0.3195" path="/443/proc/kmsg" dev="proc" ino=4026532017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 2250.274124][T17007] Invalid ELF header len 18 [ 2250.777488][T17009] FAULT_INJECTION: forcing a failure. [ 2250.777488][T17009] name fail_futex, interval 1, probability 0, space 0, times 1 [ 2250.786388][T17009] CPU: 1 UID: 0 PID: 17009 Comm: syz.0.3197 Tainted: G L syzkaller #0 PREEMPT [ 2250.786481][T17009] Tainted: [L]=SOFTLOCKUP [ 2250.786492][T17009] Hardware name: ARM-Versatile Express [ 2250.786504][T17009] Call trace: [ 2250.786526][T17009] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2250.786584][T17009] r7:60000113 r6:60000113 r5:82336570 r4:00000000 [ 2250.786593][T17009] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 2250.786619][T17009] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 2250.786701][T17009] r7:00000000 r6:00000000 r5:84918c40 r4:82afac00 [ 2250.786738][T17009] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 2250.786771][T17009] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 2250.786800][T17009] r8:000002e0 r7:00000000 r6:df9e9e38 r5:00000000 r4:003562e0 [ 2250.786809][T17009] [<809fdf04>] (should_fail) from [<803544f4>] (get_futex_key+0xa8/0x558) [ 2250.786835][T17009] [<8035444c>] (get_futex_key) from [<80359ec0>] (futex_wait_setup+0x88/0x29c) [ 2250.786866][T17009] r10:b5003500 r9:b5403587 r8:b5003500 r7:003562e0 r6:003562e0 r5:84918c40 [ 2250.786875][T17009] r4:7efffffc [ 2250.786883][T17009] [<80359e38>] (futex_wait_setup) from [<8035a158>] (__futex_wait+0x84/0x104) [ 2250.786913][T17009] r10:00000000 r9:00000000 r8:00000000 r7:00000002 r6:003562e0 r5:84918c40 [ 2250.786923][T17009] r4:00000000 [ 2250.786930][T17009] [<8035a0d4>] (__futex_wait) from [<8035a258>] (futex_wait+0x80/0x10c) [ 2250.786960][T17009] r9:00000000 r8:0000c350 r7:003562e0 r6:00000000 r5:00000000 r4:00000002 [ 2250.786968][T17009] [<8035a1d8>] (futex_wait) from [<803559b8>] (do_futex+0x1b4/0x1d0) [ 2250.786997][T17009] r10:000000f0 r9:00000000 r8:84918c40 r7:00000000 r6:003562e0 r5:00000080 [ 2250.787007][T17009] r4:00000000 [ 2250.787014][T17009] [<80355804>] (do_futex) from [<8035626c>] (sys_futex_time32+0x11c/0x1bc) [ 2250.787037][T17009] r4:00000000 [ 2250.787044][T17009] [<80356150>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2250.787067][T17009] Exception stack(0xdf9e9fa8 to 0xdf9e9ff0) [ 2250.787086][T17009] 9fa0: 00131dd8 ffffffff 003562e0 00000080 00000000 00000000 [ 2250.787103][T17009] 9fc0: 00131dd8 ffffffff 76f507d4 000000f0 00340000 00000000 00000001 76f500dc [ 2250.787116][T17009] 9fe0: 76f4ff38 76f4ff28 00021b8c 00130a50 [ 2250.787133][T17009] r9:84918c40 r8:8020029c r7:000000f0 r6:76f507d4 r5:ffffffff r4:00131dd8 [ 2257.506926][ T28] audit: type=1400 audit(2257.410:617): avc: denied { read } for pid=17026 comm="syz.0.3205" name="max_speed" dev="configfs" ino=37023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 2257.507337][ T28] audit: type=1800 audit(2257.420:618): pid=17027 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3205" name="max_speed" dev="configfs" ino=37023 res=0 errno=0 [ 2270.736572][T12938] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2270.886746][T12938] usb 1-1: Using ep0 maxpacket: 8 [ 2270.912853][T12938] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2270.948925][T12938] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 2270.949967][T12938] usb 1-1: config 179 has no interface number 0 [ 2270.952533][T12938] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2270.954644][T12938] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2270.957336][T12938] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2270.959631][T12938] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2270.961657][T12938] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2270.963777][T12938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2270.974852][T17090] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2271.253800][T12938] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input26 [ 2271.932293][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2271.932491][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2271.933269][T12935] usb 1-1: USB disconnect, device number 74 [ 2276.586534][T12935] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2276.748142][T12935] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2276.752311][T12935] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2276.776381][T12935] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2276.803793][T12935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2276.804596][T12935] usb 1-1: Product: syz [ 2276.805146][T12935] usb 1-1: Manufacturer: syz [ 2276.805687][T12935] usb 1-1: SerialNumber: syz [ 2276.829074][T12935] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 2276.839863][T12935] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2276.851645][T12935] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2281.205742][T17125] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 2281.207167][T17125] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 2281.207487][T17125] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 2281.217242][T17124] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -32 [ 2283.278295][T17124] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 2283.283629][T12935] usb 1-1: USB disconnect, device number 75 [ 2283.297722][T12935] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2283.303466][T12935] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2283.309336][T12935] ti_usb_3410_5052 1-1:2.0: device disconnected [ 2285.510279][T17161] comedi: valid board names for 8255 driver are: [ 2285.510525][T17161] 8255 [ 2285.511837][T17161] comedi: valid board names for vmk80xx driver are: [ 2285.513066][T17161] vmk80xx [ 2285.516455][T17161] comedi: valid board names for usbduxsigma driver are: [ 2285.518536][T17161] usbduxsigma [ 2285.518890][T17161] comedi: valid board names for usbduxfast driver are: [ 2285.518988][T17161] usbduxfast [ 2285.519063][T17161] comedi: valid board names for usbdux driver are: [ 2285.519083][T17161] usbdux [ 2285.519092][T17161] comedi: valid board names for ni6501 driver are: [ 2285.519100][T17161] ni6501 [ 2285.519107][T17161] comedi: valid board names for dt9812 driver are: [ 2285.519114][T17161] dt9812 [ 2285.519121][T17161] comedi: valid board names for ni_labpc_cs driver are: [ 2285.519130][T17161] ni_labpc_cs [ 2285.519137][T17161] comedi: valid board names for ni_daq_700 driver are: [ 2285.519144][T17161] ni_daq_700 [ 2285.519173][T17161] comedi: valid board names for labpc_pci driver are: [ 2285.519183][T17161] labpc_pci [ 2285.519197][T17161] comedi: valid board names for adl_pci9118 driver are: [ 2285.519273][T17161] pci9118dg [ 2285.519319][T17161] pci9118hg [ 2285.519337][T17161] pci9118hr [ 2285.519351][T17161] comedi: valid board names for 8255_pci driver are: [ 2285.519366][T17161] 8255_pci [ 2285.519373][T17161] comedi: valid board names for comedi_parport driver are: [ 2285.519383][T17161] comedi_parport [ 2285.519397][T17161] comedi: valid board names for comedi_test driver are: [ 2285.519413][T17161] comedi_test [ 2285.519440][T17161] comedi: valid board names for comedi_bond driver are: [ 2285.519455][T17161] comedi_bond [ 2288.959174][ T28] audit: type=1800 audit(2288.880:619): pid=17176 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3236" name="idProduct" dev="configfs" ino=37149 res=0 errno=0 [ 2290.396496][ T86] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2290.576580][ T86] usb 1-1: Using ep0 maxpacket: 16 [ 2290.591622][ T86] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2290.667198][ T86] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2290.667539][ T86] usb 1-1: Product: syz [ 2290.667793][ T86] usb 1-1: Manufacturer: syz [ 2290.667861][ T86] usb 1-1: SerialNumber: syz [ 2290.680292][ T86] usb 1-1: config 0 descriptor?? [ 2294.673787][T17190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2294.692469][T17190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2296.044944][T17190] hsr_slave_0: entered promiscuous mode [ 2296.048505][T17190] hsr_slave_1: entered promiscuous mode [ 2296.050297][T17190] debugfs: 'hsr0' already exists in 'hsr' [ 2296.052297][T17190] Cannot create hsr debugfs directory [ 2296.562481][T17190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2296.593759][T17190] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2296.600053][T17190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2296.619109][T17190] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2296.622082][T17190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2296.638496][T17190] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2296.642399][T17190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2296.662363][T17190] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2297.909087][T17190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2301.073028][T12938] usb 1-1: USB disconnect, device number 76 [ 2301.291964][T17190] veth0_vlan: entered promiscuous mode [ 2301.313888][T17190] veth1_vlan: entered promiscuous mode [ 2301.366222][T17190] veth0_macvtap: entered promiscuous mode [ 2301.375461][T17190] veth1_macvtap: entered promiscuous mode [ 2301.461293][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2301.464163][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2301.476337][ T6538] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2301.476531][ T6538] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2301.997844][T12938] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2302.126591][T12938] usb 1-1: device descriptor read/64, error -71 [ 2302.376429][T12938] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 2302.526589][T12938] usb 1-1: device descriptor read/64, error -71 [ 2302.639018][T12938] usb usb1-port1: attempt power cycle [ 2302.976660][T12938] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 2303.001758][T12938] usb 1-1: device descriptor read/8, error -71 [ 2303.236702][T12938] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2303.259267][T12938] usb 1-1: device descriptor read/8, error -71 [ 2303.367208][T12938] usb usb1-port1: unable to enumerate USB device [ 2303.970420][ T28] audit: type=1400 audit(2303.890:620): avc: denied { write } for pid=17515 comm="syz.2.3243" name="functions" dev="configfs" ino=2858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2303.989401][ T28] audit: type=1400 audit(2303.910:621): avc: denied { create } for pid=17515 comm="syz.2.3243" name="uvc.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 2304.698242][T17523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2304.701664][T17523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2304.729158][T17523] FAULT_INJECTION: forcing a failure. [ 2304.729158][T17523] name failslab, interval 1, probability 0, space 0, times 0 [ 2304.730666][T17523] CPU: 0 UID: 0 PID: 17523 Comm: syz.2.3245 Tainted: G L syzkaller #0 PREEMPT [ 2304.730822][T17523] Tainted: [L]=SOFTLOCKUP [ 2304.730845][T17523] Hardware name: ARM-Versatile Express [ 2304.730868][T17523] Call trace: [ 2304.730906][T17523] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2304.731002][T17523] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 2304.731019][T17523] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 2304.731075][T17523] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 2304.731131][T17523] r7:850f6200 r6:00000000 r5:850f6200 r4:82b1ac48 [ 2304.731146][T17523] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 2304.731198][T17523] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 2304.731266][T17523] r8:00000000 r7:850f6200 r6:83001240 r5:00000cc0 r4:0000000c [ 2304.731286][T17523] [<80568de8>] (should_failslab) from [<80547834>] (__kmalloc_noprof+0xa8/0x3c8) [ 2304.731339][T17523] [<8054778c>] (__kmalloc_noprof) from [<8176d434>] (genl_family_rcv_msg_attrs_parse+0x64/0x118) [ 2304.731410][T17523] r10:82554534 r9:00000000 r8:ea5ddd30 r7:861b5b00 r6:8384d540 r5:ea5ddcc0 [ 2304.731431][T17523] r4:00000004 [ 2304.731446][T17523] [<8176d3d0>] (genl_family_rcv_msg_attrs_parse) from [<8176d554>] (genl_family_rcv_msg_doit+0x6c/0x140) [ 2304.731504][T17523] r9:82e3a4c0 r8:ea5ddd30 r7:ea5ddcc0 r6:8384d540 r5:00000004 r4:861b5b00 [ 2304.731521][T17523] [<8176d4e8>] (genl_family_rcv_msg_doit) from [<8176de1c>] (genl_rcv_msg+0x240/0x3a8) [ 2304.731578][T17523] r10:00000002 r9:82e3a4c0 r8:8384d540 r7:ea5ddcc0 r6:00000001 r5:861b5b00 [ 2304.731597][T17523] r4:82554534 [ 2304.731612][T17523] [<8176dbdc>] (genl_rcv_msg) from [<8176c82c>] (netlink_rcv_skb+0xc0/0x120) [ 2304.731669][T17523] r10:89426d84 r9:82e3a4c0 r8:8384d540 r7:861b5b00 r6:8176dbdc r5:8384d540 [ 2304.731688][T17523] r4:00000000 [ 2304.731702][T17523] [<8176c76c>] (netlink_rcv_skb) from [<8176d3c0>] (genl_rcv+0x28/0x38) [ 2304.731766][T17523] r7:83840c00 r6:00000028 r5:83393c64 r4:8384d540 [ 2304.731784][T17523] [<8176d398>] (genl_rcv) from [<8176bff8>] (netlink_unicast+0x270/0x380) [ 2304.731835][T17523] r5:83393c64 r4:83393c00 [ 2304.731850][T17523] [<8176bd88>] (netlink_unicast) from [<8176c2d0>] (netlink_sendmsg+0x1c8/0x444) [ 2304.731910][T17523] r10:00000000 r9:00000000 r8:00000000 r7:89426c00 r6:00000028 r5:8384d540 [ 2304.731931][T17523] r4:ea5ddea0 [ 2304.731947][T17523] [<8176c108>] (netlink_sendmsg) from [<8162f7c4>] (__sock_sendmsg+0x44/0x78) [ 2304.732011][T17523] r10:00000122 r9:866f9400 r8:836ac7c0 r7:76fcbde4 r6:836ac7c0 r5:ea5ddea0 [ 2304.732032][T17523] r4:00000000 [ 2304.732046][T17523] [<8162f780>] (__sock_sendmsg) from [<81632768>] (__sys_sendto+0x110/0x160) [ 2304.732102][T17523] r7:76fcbde4 r6:866f9401 r5:00000000 r4:00000000 [ 2304.732119][T17523] [<81632658>] (__sys_sendto) from [<816327d4>] (sys_sendto+0x1c/0x24) [ 2304.732181][T17523] r9:850f6200 r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76fcbde4 [ 2304.732198][T17523] [<816327b8>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2304.732242][T17523] Exception stack(0xea5ddfa8 to 0xea5ddff0) [ 2304.732282][T17523] dfa0: 76fcbde4 0000000c 00000004 76fcbe78 00000028 00000000 [ 2304.732317][T17523] dfc0: 76fcbde4 0000000c 00000000 00000122 76fcbea0 00000000 76fcbe78 76fcd0dc [ 2304.732344][T17523] dfe0: 76fcbd78 76fcbd64 0010bc74 00112858 [ 2305.189168][T17527] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 2306.615797][T17531] netlink: 'syz.2.3248': attribute type 10 has an invalid length. [ 2306.619836][T17531] syz_tun: entered promiscuous mode [ 2306.998215][ T28] audit: type=1400 audit(2306.920:622): avc: denied { create } for pid=17534 comm="syz.2.3249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2310.005248][T17549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2310.036992][T17549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2310.407533][T17553] bond0: (slave bond_slave_0): Releasing backup interface [ 2311.422842][ T28] audit: type=1400 audit(2311.340:623): avc: denied { search } for pid=17556 comm="syz.2.3257" name="/" dev="configfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2311.427252][ T28] audit: type=1400 audit(2311.350:624): avc: denied { search } for pid=17556 comm="syz.2.3257" name="usb_gadget" dev="configfs" ino=1371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2311.440209][ T28] audit: type=1400 audit(2311.360:625): avc: denied { search } for pid=17556 comm="syz.2.3257" name="/" dev="configfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2311.442050][ T28] audit: type=1400 audit(2311.360:626): avc: denied { search } for pid=17556 comm="syz.2.3257" name="usb_gadget" dev="configfs" ino=1371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2311.447003][ T28] audit: type=1400 audit(2311.360:627): avc: denied { search } for pid=17556 comm="syz.2.3257" name="g1" dev="configfs" ino=2857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2311.449749][ T28] audit: type=1400 audit(2311.360:628): avc: denied { search } for pid=17556 comm="syz.2.3257" name="functions" dev="configfs" ino=2858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2311.452154][ T28] audit: type=1400 audit(2311.360:629): avc: denied { write search } for pid=17556 comm="syz.2.3257" name="functions" dev="configfs" ino=2858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2311.455674][ T28] audit: type=1400 audit(2311.360:630): avc: denied { add_name } for pid=17556 comm="syz.2.3257" name="midi2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2311.470660][ T28] audit: type=1400 audit(2311.390:631): avc: denied { search } for pid=17556 comm="syz.2.3257" name="/" dev="configfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2311.472700][ T28] audit: type=1400 audit(2311.390:632): avc: denied { search } for pid=17556 comm="syz.2.3257" name="usb_gadget" dev="configfs" ino=1371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2312.267931][T17570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2312.279327][T17570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2317.792286][T17594] tc action pedit 'at' offset -4096 out of bounds [ 2317.792844][T17594] tc action pedit 'at' offset -4096 out of bounds [ 2317.792897][T17594] tc action pedit 'at' offset -4096 out of bounds [ 2317.792913][T17594] tc action pedit 'at' offset -4096 out of bounds [ 2317.792929][T17594] tc action pedit 'at' offset -4096 out of bounds [ 2317.792970][T17594] tc action pedit 'at' offset -4096 out of bounds [ 2317.793110][T17594] tc action pedit 'at' offset -4096 out of bounds [ 2317.793169][T17594] tc action pedit 'at' offset -4096 out of bounds [ 2317.793198][T17594] tc action pedit 'at' offset -4096 out of bounds [ 2317.793214][T17594] tc action pedit 'at' offset -4096 out of bounds [ 2317.793355][T17594] TC_ACT_REPEAT abuse ? [ 2318.292694][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 2318.293205][ T28] audit: type=1800 audit(2318.210:647): pid=17600 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3271" name="idProduct" dev="configfs" ino=37482 res=0 errno=0 [ 2318.788919][T17604] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2321.061014][T17629] input: syz1 as /devices/virtual/input/input27 [ 2325.423093][T17647] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2325.717890][T17647] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2326.219920][T17647] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2326.579349][T17647] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2326.922460][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2326.924208][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2326.927725][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2326.937983][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2330.186476][T17679] FAULT_INJECTION: forcing a failure. [ 2330.186476][T17679] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2330.186791][T17679] CPU: 0 UID: 0 PID: 17679 Comm: syz.2.3294 Tainted: G L syzkaller #0 PREEMPT [ 2330.186860][T17679] Tainted: [L]=SOFTLOCKUP [ 2330.186870][T17679] Hardware name: ARM-Versatile Express [ 2330.186882][T17679] Call trace: [ 2330.186904][T17679] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2330.186961][T17679] r7:600f0113 r6:600f0113 r5:82336570 r4:00000000 [ 2330.186970][T17679] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 2330.186996][T17679] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 2330.187025][T17679] r7:00000001 r6:00000000 r5:8398ee40 r4:82afac00 [ 2330.187033][T17679] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 2330.187060][T17679] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 2330.187090][T17679] r8:00000628 r7:00000001 r6:df9c5dd0 r5:82afac00 r4:76fcd000 [ 2330.187098][T17679] [<809fdf04>] (should_fail) from [<8035453c>] (get_futex_key+0xf0/0x558) [ 2330.187123][T17679] [<8035444c>] (get_futex_key) from [<80358eec>] (futex_wake+0x70/0x25c) [ 2330.187153][T17679] r10:85030000 r9:00000000 r8:df9c5dc0 r7:ffffffff r6:76fcd628 r5:00000001 [ 2330.187163][T17679] r4:00000012 [ 2330.187170][T17679] [<80358e7c>] (futex_wake) from [<80355998>] (do_futex+0x194/0x1d0) [ 2330.187200][T17679] r10:85030000 r9:00000001 r8:df9c5e90 r7:85030000 r6:00000000 r5:b5403587 [ 2330.187209][T17679] r4:00000001 [ 2330.187217][T17679] [<80355804>] (do_futex) from [<8024ce1c>] (mm_release+0xc4/0xc8) [ 2330.187242][T17679] r4:8398ee40 [ 2330.187250][T17679] [<8024cd58>] (mm_release) from [<8024e190>] (exit_mm_release+0x24/0x28) [ 2330.187276][T17679] r5:863d0800 r4:8398ee40 [ 2330.187283][T17679] [<8024e16c>] (exit_mm_release) from [<80258894>] (do_exit+0x1e8/0xadc) [ 2330.187320][T17679] r5:8398ee40 r4:863d0800 [ 2330.187336][T17679] [<802586ac>] (do_exit) from [<8025935c>] (do_group_exit+0x40/0x8c) [ 2330.187412][T17679] r7:00130a4c [ 2330.187428][T17679] [<8025931c>] (do_group_exit) from [<8026a428>] (get_signal+0xa64/0xa8c) [ 2330.187476][T17679] r7:00130a4c r4:8398ee40 [ 2330.187491][T17679] [<802699c4>] (get_signal) from [<8022b72c>] (do_work_pending+0x220/0x4e0) [ 2330.187552][T17679] r10:000000f0 r9:00130a50 r8:fffffe00 r7:00130a4c r6:00000001 r5:df9c5fb0 [ 2330.187570][T17679] r4:8398ee40 [ 2330.187586][T17679] [<8022b50c>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 2330.187628][T17679] Exception stack(0xdf9c5fb0 to 0xdf9c5ff8) [ 2330.187658][T17679] 5fa0: 003562e0 00000080 00000000 00000000 [ 2330.187689][T17679] 5fc0: 00131dd8 ffffffff 76fcd7d4 000000f0 00340000 00000000 00000001 76fcd0dc [ 2330.187719][T17679] 5fe0: 76fccf38 76fccf28 00021b8c 00130a4c 60000010 003562e0 [ 2330.187754][T17679] r10:000000f0 r9:8398ee40 r8:8020029c r7:000000f0 r6:76fcd7d4 r5:ffffffff [ 2330.187773][T17679] r4:00131dd8 [ 2331.483647][T17685] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2331.621286][T17685] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2331.749537][T17685] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2331.841113][T17685] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2332.577056][T16734] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2332.707431][T16734] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2332.836719][T16734] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2332.847064][ T2124] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2334.536615][ T40] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2334.867591][ T40] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 2334.870817][ T40] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 2334.871001][ T40] usb 1-1: config 1 has no interface number 0 [ 2334.928303][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2334.928503][ T40] usb 1-1: Product: syz [ 2334.928646][ T40] usb 1-1: Manufacturer: syz [ 2334.928671][ T40] usb 1-1: SerialNumber: syz [ 2335.002762][ T40] usb 1-1: 3:1 : does not exist [ 2335.003136][ T40] usb 1-1: 3:2 : does not exist [ 2337.478799][T17741] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2343.873894][ T28] audit: type=1400 audit(2343.790:648): avc: denied { transfer } for pid=17789 comm="syz.2.3318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2346.959212][ T28] audit: type=1800 audit(2346.880:649): pid=17813 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3324" name="UDC" dev="configfs" ino=38331 res=0 errno=0 [ 2349.047438][T12938] usb 1-1: USB disconnect, device number 81 [ 2354.678337][ T28] audit: type=1400 audit(2354.600:650): avc: denied { write } for pid=17863 comm="syz.0.3337" name="functions" dev="configfs" ino=2858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2356.133445][T17873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2356.143227][T17873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2356.696696][T17877] FAULT_INJECTION: forcing a failure. [ 2356.696696][T17877] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2356.697138][T17877] CPU: 1 UID: 0 PID: 17877 Comm: syz.2.3342 Tainted: G L syzkaller #0 PREEMPT [ 2356.697232][T17877] Tainted: [L]=SOFTLOCKUP [ 2356.697252][T17877] Hardware name: ARM-Versatile Express [ 2356.697276][T17877] Call trace: [ 2356.697315][T17877] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2356.697413][T17877] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 2356.697431][T17877] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 2356.697516][T17877] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 2356.697605][T17877] r7:00000000 r6:00000000 r5:84173100 r4:82afac00 [ 2356.697634][T17877] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 2356.697693][T17877] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 2356.697775][T17877] r8:000002e4 r7:00000000 r6:df83ded8 r5:00000000 r4:003562e4 [ 2356.697807][T17877] [<809fdf04>] (should_fail) from [<803544f4>] (get_futex_key+0xa8/0x558) [ 2356.697859][T17877] [<8035444c>] (get_futex_key) from [<80358eec>] (futex_wake+0x70/0x25c) [ 2356.697948][T17877] r10:000000f0 r9:00131dd8 r8:df83dec8 r7:ffffffff r6:003562e4 r5:000f4240 [ 2356.697988][T17877] r4:00000002 [ 2356.698014][T17877] [<80358e7c>] (futex_wake) from [<80355998>] (do_futex+0x194/0x1d0) [ 2356.698088][T17877] r10:000000f0 r9:00000001 r8:84173100 r7:000f4240 r6:003562e4 r5:00000081 [ 2356.698112][T17877] r4:000f4240 [ 2356.698149][T17877] [<80355804>] (do_futex) from [<8035626c>] (sys_futex_time32+0x11c/0x1bc) [ 2356.698247][T17877] r4:00000000 [ 2356.698280][T17877] [<80356150>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2356.698364][T17877] Exception stack(0xdf83dfa8 to 0xdf83dff0) [ 2356.698429][T17877] dfa0: 00131dd8 ffffffff 003562e4 00000081 000f4240 00000000 [ 2356.698506][T17877] dfc0: 00131dd8 ffffffff 76fcd7d4 000000f0 00340000 00000000 00000001 76fcd0dc [ 2356.698597][T17877] dfe0: 76fccf38 76fccf28 00021c30 00130a50 [ 2356.698719][T17877] r9:84173100 r8:8020029c r7:000000f0 r6:76fcd7d4 r5:ffffffff r4:00131dd8 [ 2358.566638][T17890] UBLK_F_QUIESCE requires UBLK_F_USER_RECOVERY [ 2358.807792][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3348'. [ 2358.947847][T17891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3346'. [ 2364.121856][ T28] audit: type=1400 audit(2364.040:651): avc: denied { write } for pid=17954 comm="syz.2.3360" name="functions" dev="configfs" ino=2858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2364.860523][T17966] Mass Storage Function, version: 2009/09/11 [ 2364.861750][T17966] LUN: removable file: (no medium) [ 2364.868579][ T28] audit: type=1400 audit(2364.780:652): avc: denied { write } for pid=17965 comm="syz.2.3362" name="functions" dev="configfs" ino=2858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2364.877868][T17966] Unable to locate . in LUN.NUMBER [ 2364.896798][ T28] audit: type=1400 audit(2364.800:653): avc: denied { write } for pid=17965 comm="syz.2.3362" name="mass_storage.0" dev="configfs" ino=38482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2365.087580][ T28] audit: type=1400 audit(2365.010:654): avc: denied { map } for pid=17969 comm="syz.2.3363" path="socket:[39103]" dev="sockfs" ino=39103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2365.257207][ T28] audit: type=1400 audit(2365.170:655): avc: denied { write } for pid=17971 comm="syz.2.3365" name="configs" dev="configfs" ino=2859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2365.262810][ T28] audit: type=1400 audit(2365.180:656): avc: denied { write } for pid=17971 comm="syz.2.3365" name="configs" dev="configfs" ino=2859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2365.288334][ T28] audit: type=1400 audit(2365.210:657): avc: denied { remove_name } for pid=17971 comm="syz.2.3365" name="c.1" dev="configfs" ino=38494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2365.288779][ T28] audit: type=1400 audit(2365.210:658): avc: denied { rmdir } for pid=17971 comm="syz.2.3365" name="c.1" dev="configfs" ino=38494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2366.057896][T17978] VFS: file-max limit 0 reached [ 2366.532661][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2366.629014][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2366.722715][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2366.785395][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2367.144998][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2367.159923][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2367.170613][ T37] bond0 (unregistering): Released all slaves [ 2367.180078][ T37] . (unregistering): Released all slaves [ 2367.299891][ T37] hsr_slave_0: left promiscuous mode [ 2367.333025][ T37] hsr_slave_1: left promiscuous mode [ 2367.354872][ T37] veth1_macvtap: left promiscuous mode [ 2367.355699][ T37] veth0_macvtap: left promiscuous mode [ 2367.357940][ T37] veth1_vlan: left promiscuous mode [ 2367.370147][ T37] veth0_vlan: left promiscuous mode [ 2368.411347][ T28] audit: type=1400 audit(2368.330:659): avc: denied { mount } for pid=18009 comm="syz.2.3374" name="/" dev="ramfs" ino=38676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2368.557713][ T28] audit: type=1400 audit(2368.460:660): avc: denied { write } for pid=18007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2369.050748][ T2963] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2370.114913][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 2370.118310][ T28] audit: type=1400 audit(2370.030:662): avc: denied { write } for pid=18031 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2370.586883][ T28] audit: type=1400 audit(2370.500:663): avc: denied { write } for pid=18036 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2370.779905][ T2963] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2372.012201][ T28] audit: type=1400 audit(2371.930:664): avc: denied { write } for pid=18042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2373.467911][ T28] audit: type=1400 audit(2373.380:665): avc: denied { write } for pid=18049 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2374.034962][ T2963] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2375.553032][ T28] audit: type=1400 audit(2375.470:666): avc: denied { write } for pid=18066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2376.195593][ T28] audit: type=1400 audit(2376.110:667): avc: denied { write } for pid=18072 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2376.577150][T18075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2376.577697][T18075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1342:(snd_func_refer) error evaluating name ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5728:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2722:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1342:(snd_func_refer) error evaluating name ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5728:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2722:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory audio: Could not create a backend for voice `lm4549.out' [ 2376.868936][ T2963] 8021q: adding VLAN 0 to HW filter on device eth4 [ 2378.910075][T18088] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2378.998386][T18088] block device autoloading is deprecated and will be removed. [ 2379.002321][T18088] md: loop0 has zero or unknown size, marking faulty! [ 2382.807952][T18115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2382.813214][T18115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2387.881026][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3413'. [ 2388.216491][T18159] VFS: file-max limit 0 reached [ 2389.997282][T18182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2390.009177][T18182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2390.049670][ T28] audit: type=1400 audit(2389.970:668): avc: denied { write } for pid=18180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2390.289373][ T28] audit: type=1400 audit(2390.210:669): avc: denied { write } for pid=18189 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2390.452448][T18192] random: crng reseeded on system resumption [ 2390.808357][ T28] audit: type=1400 audit(2390.720:670): avc: denied { write } for pid=18194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2391.142609][ T28] audit: type=1400 audit(2391.060:671): avc: denied { write } for pid=18197 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2391.693295][ T28] audit: type=1400 audit(2391.610:672): avc: denied { write } for pid=18208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2391.970470][T18213] random: crng reseeded on system resumption [ 2392.106454][ T28] audit: type=1400 audit(2392.020:673): avc: denied { write } for pid=18211 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2392.888314][ T28] audit: type=1400 audit(2392.810:674): avc: denied { write } for pid=18218 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2393.090214][ T28] audit: type=1400 audit(2393.010:675): avc: denied { write } for pid=18223 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2395.169185][T18231] netlink: 'syz.0.3437': attribute type 10 has an invalid length. [ 2399.191528][T18252] binder_alloc: 18251: binder_alloc_buf, no vma [ 2399.293830][ T28] audit: type=1400 audit(2399.210:676): avc: denied { write } for pid=18255 comm="syz.2.3445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2401.905081][T18280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2401.910077][T18280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2402.687171][T18308] ip6_vti0: entered promiscuous mode [ 2403.927556][T18315] 8<--- cut here --- [ 2403.933188][T18315] Unable to handle kernel paging request at virtual address fee00100 when write [ 2403.937941][ T28] audit: type=1400 audit(2403.860:677): avc: denied { search } for pid=2915 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2403.941259][T18315] [fee00100] *pgd=80000080007003, *pmd=00000000 [ 2403.953960][T18315] Internal error: Oops: a06 [#1] SMP ARM [ 2403.955731][T18315] Modules linked in: [ 2403.956190][T18315] CPU: 0 UID: 0 PID: 18315 Comm: syz.0.3458 Tainted: G L syzkaller #0 PREEMPT [ 2403.956626][T18315] Tainted: [L]=SOFTLOCKUP [ 2403.956825][T18315] Hardware name: ARM-Versatile Express [ 2403.957086][T18315] PC is at parport_attach+0x5c/0x1e8 [ 2403.957417][T18315] LR is at parport_attach+0x50/0x1e8 [ 2403.957704][T18315] pc : [<814a0758>] lr : [<814a074c>] psr: 60000013 [ 2403.958012][T18315] sp : dfb55d30 ip : dfb55d30 fp : dfb55d54 [ 2403.958322][T18315] r10: 82d32f9c r9 : 00000003 r8 : 84223d80 [ 2403.958623][T18315] r7 : dfb55d90 r6 : dfb55d90 r5 : 84223d80 r4 : 00000000 [ 2403.958982][T18315] r3 : fee00100 r2 : 00000000 r1 : 00000000 r0 : 00000000 [ 2403.959384][T18315] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 2403.959744][T18315] Control: 30c5387d Table: 85f6e180 DAC: fffffffd [ 2403.960085][T18315] Register r0 information: NULL pointer [ 2403.960729][T18315] Register r1 information: NULL pointer [ 2403.961033][T18315] Register r2 information: NULL pointer [ 2403.961320][T18315] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 2403.961947][T18315] Register r4 information: NULL pointer [ 2403.962159][T18315] Register r5 information: slab kmalloc-192 start 84223d80 pointer offset 0 size 192 [ 2403.963215][T18315] Register r6 information: 2-page vmalloc region starting at 0xdfb54000 allocated at kernel_clone+0xc4/0x43c [ 2403.963717][T18315] Register r7 information: 2-page vmalloc region starting at 0xdfb54000 allocated at kernel_clone+0xc4/0x43c [ 2403.964202][T18315] Register r8 information: slab kmalloc-192 start 84223d80 pointer offset 0 size 192 [ 2403.964687][T18315] Register r9 information: non-paged memory [ 2403.965000][T18315] Register r10 information: non-slab/vmalloc memory [ 2403.965358][T18315] Register r11 information: 2-page vmalloc region starting at 0xdfb54000 allocated at kernel_clone+0xc4/0x43c [ 2403.965895][T18315] Register r12 information: 2-page vmalloc region starting at 0xdfb54000 allocated at kernel_clone+0xc4/0x43c [ 2403.966382][T18315] Process syz.0.3458 (pid: 18315, stack limit = 0xdfb54000) [ 2403.966665][T18315] Stack: (0xdfb55d30 to 0xdfb56000) [ 2403.967018][T18315] 5d20: ffffffff 00000004 82bda4a4 81e2e9e8 [ 2403.967378][T18315] 5d40: 00000000 dfb55d90 dfb55d8c dfb55d58 8149c3e8 814a0708 40946400 00000000 [ 2403.967838][T18315] 5d60: dfb55d7c 20001400 84223d80 b5403587 40946400 00000003 00000003 84173100 [ 2403.968157][T18315] 5d80: dfb55e4c dfb55d90 81497bec 8149c2ec 656d6f63 705f6964 6f707261 00007472 [ 2403.968525][T18315] 5da0: 00000000 00000100 0000000d 000004d0 00000002 00000001 00000100 00002001 [ 2403.968821][T18315] 5dc0: 20000000 00000006 00000009 00000000 0000000f 00000001 00000401 0000fffd [ 2403.969112][T18315] 5de0: 00000000 00000000 00000008 00000ea9 00000401 00000007 00000002 00000004 [ 2403.969460][T18315] 5e00: 00000009 00000003 00000007 00000007 00000000 00000007 00000007 00000008 [ 2403.969829][T18315] 5e20: 00000000 edd2e087 00000000 838cf280 84223d80 20001400 40946400 00000003 [ 2403.970177][T18315] 5e40: dfb55f14 dfb55e50 81498f14 81497b2c 00000000 edd2e087 00000000 00000000 [ 2403.970530][T18315] 5e60: 8254e844 dfb55ea4 0000005f 845a2990 00000064 84223db0 dfb55ee4 dfb55e88 [ 2403.970930][T18315] 5e80: 8080b76c 80801e24 00000064 00000001 00000000 dfb55ea4 85974e10 83429e58 [ 2403.971291][T18315] 5ea0: 00006400 0000000b dfb55e98 00000000 00000000 edd2e087 00000000 838cf280 [ 2403.971640][T18315] 5ec0: 40946400 20001400 20001400 838cf280 00000003 84173100 dfb55ef4 dfb55ee8 [ 2403.971986][T18315] 5ee0: 8080b8a0 edd2e087 dfb55f14 00000000 838cf281 40946400 20001400 838cf280 [ 2403.972352][T18315] 5f00: 00000003 84173100 dfb55fa4 dfb55f18 805bdf78 81498bcc ecac8b10 84173100 [ 2403.972718][T18315] 5f20: dfb55f3c dfb55f30 81b6ec00 81b6eacc dfb55f54 dfb55f40 8025b878 8028f548 [ 2403.973125][T18315] 5f40: dfb55fb0 40000000 dfb55f84 dfb55f58 80221bdc 8025b834 00000000 82a1eb0c [ 2403.973505][T18315] 5f60: dfb55fb0 0013ebf0 ecac8b10 80221b30 00000000 edd2e087 dfb55fac 00000000 [ 2403.973878][T18315] 5f80: 00000000 00356310 00000036 8020029c 84173100 00000036 00000000 dfb55fa8 [ 2403.974214][T18315] 5fa0: 80200060 805bdd40 00000000 00000000 00000003 40946400 20001400 00000000 [ 2403.974573][T18315] 5fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f500dc [ 2403.974957][T18315] 5fe0: 76f4fe88 76f4fe78 00018fa0 00130a50 60000010 00000003 00000000 00000000 [ 2403.975351][T18315] Call trace: [ 2403.975552][T18315] [<814a06fc>] (parport_attach) from [<8149c3e8>] (comedi_device_attach+0x108/0x244) [ 2403.976198][T18315] r7:dfb55d90 r6:00000000 r5:81e2e9e8 r4:82bda4a4 [ 2403.976424][T18315] [<8149c2e0>] (comedi_device_attach) from [<81497bec>] (do_devconfig_ioctl+0xcc/0x218) [ 2403.976847][T18315] r10:84173100 r9:00000003 r8:00000003 r7:40946400 r6:b5403587 r5:84223d80 [ 2403.977188][T18315] r4:20001400 [ 2403.977384][T18315] [<81497b20>] (do_devconfig_ioctl) from [<81498f14>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 2403.977825][T18315] r8:00000003 r7:40946400 r6:20001400 r5:84223d80 r4:838cf280 [ 2403.978201][T18315] [<81498bc0>] (comedi_unlocked_ioctl) from [<805bdf78>] (sys_ioctl+0x244/0xb5c) [ 2403.978607][T18315] r10:84173100 r9:00000003 r8:838cf280 r7:20001400 r6:40946400 r5:838cf281 [ 2403.979014][T18315] r4:00000000 [ 2403.979196][T18315] [<805bdd34>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2403.979615][T18315] Exception stack(0xdfb55fa8 to 0xdfb55ff0) [ 2403.979905][T18315] 5fa0: 00000000 00000000 00000003 40946400 20001400 00000000 [ 2403.980256][T18315] 5fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f500dc [ 2403.980617][T18315] 5fe0: 76f4fe88 76f4fe78 00018fa0 00130a50 [ 2403.980872][T18315] r10:00000036 r9:84173100 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 2403.981190][T18315] r4:00000000 [ 2403.981635][T18315] Code: ebb6552a e5953064 e7f33053 e2433612 (e5c34000) [ 2403.983077][T18315] ---[ end trace 0000000000000000 ]--- [ 2404.163971][T18315] Kernel panic - not syncing: Fatal exception [ 2404.165996][T18315] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:13:59 Registers: info registers vcpu 0 CPU#0 R00=00f94188 R01=00000000 R02=0001bb80 R03=00f98c00 R04=00020600 R05=00000100 R06=00f94188 R07=00f1be78 R08=00f1b1d8 R09=0059d01c R10=00000e05 R11=7e8c82bc R12=00000000 R13=7e8c8108 R14=76a8094c R15=76a174ec PSR=20030010 --C- A S usr32 s00=30303031 s01=778e3030 d00=778e303030303031 s02=08060601 s03=01000002 d01=0100000208060601 s04=b0030008 s05=82080009 d02=82080009b0030008 s06=015abe02 s07=08080606 d03=08080606015abe02 s08=02010000 s09=08000980 d04=0800098002010000 s10=017ca400 s11=00080606 d05=00080606017ca400 s12=02010000 s13=98080000 d06=9808000002010000 s14=1ffffffb s15=00000001 d07=000000011ffffffb s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=03048002 s33=80020480 d16=8002048003048002 s34=05800305 s35=01980800 d17=0198080005800305 s36=00058803 s37=8a030402 d18=8a03040200058803 s38=0c020005 s39=00058c03 d19=00058c030c020005 s40=03088204 s41=08000590 d20=0800059003088204 s42=c3a08080 s43=0598031c d21=0598031cc3a08080 s44=03000800 s45=020005a0 d22=020005a003000800 s46=05a20300 s47=03000200 d23=0300020005a20300 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=d74bbe34 s53=9d17c06b d26=9d17c06bd74bbe34 s54=01de57e4 s55=1e6fc63a d27=1e6fc63a01de57e4 s56=6c331110 s57=0cb2b6a6 d28=0cb2b6a66c331110 s58=353078eb s59=c56e9640 d29=c56e9640353078eb s60=1040b663 s61=3cd06335 d30=3cd063351040b663 s62=2f117606 s63=5b6f3413 d31=5b6f34132f117606 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000008 R01=00000008 R02=df807000 R03=00020005 R04=00000002 R05=82a0b77c R06=81c01eb4 R07=830b3618 R08=200f0013 R09=83178000 R10=00000000 R11=df8d1d7c R12=00000002 R13=df8d1d58 R14=80a0ae08 R15=80a0ae28 PSR=200f0093 --C- A S svc32 s00=72656820 s01=2d2d2065 d00=2d2d206572656820 s02=00000000 s03=00000000 d01=0000000000000000 s04=ef0cee00 s05=ef0cee00 d02=ef0cee00ef0cee00 s06=08040200 s07=80402000 d03=8040200008040200 s08=00000c00 s09=c0200c03 d04=c0200c0300000c00 s10=08040201 s11=80402000 d05=8040200008040201 s12=08040201 s13=80402010 d06=8040201008040201 s14=08040201 s15=80402010 d07=8040201008040201 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000