last executing test programs: 32m30.955910686s ago: executing program 0 (id=4616): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x4d0041, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000140)={r2, 0x3, &(0x7f0000000080)=[0x6, 0x8, 0x2], &(0x7f00000000c0)=[0x4, 0x2, 0x6, 0x761b, 0x5], &(0x7f0000000100)=[0x6]}) r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0x1, 0x41) sendto$llc(r3, &(0x7f00000001c0)=',', 0x1, 0x8000, 0x0, 0x0) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000200)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8, 0x1) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000380)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e23, @empty}, {0x2, 0x4e24, @empty}, 0xe4, 0x0, 0x0, 0x0, 0x36, &(0x7f0000000340), 0x8000, 0x1, 0x8}) write$P9_RWSTAT(r1, &(0x7f0000000400)={0x7, 0x7f, 0x2}, 0x7) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r4, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c811}, 0x4000010) getsockopt$inet_buf(r1, 0x0, 0x25, &(0x7f0000000600)=""/44, &(0x7f0000000640)=0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r6) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc081}, 0x4001) semget(0x3, 0x1, 0x1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000bc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xfc, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x51c7b9a64ae2627}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8040}, 0x1006) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000fc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d40)={0x220, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xe3}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_OURS={0x1c8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c4, 0x3, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '\xc2.-(,!/&V\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5a14}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\\!-O@^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!-\x19\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'rng\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x67add821}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/nvme-fabrics\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ':+-\'\xa6\x94:!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-\xed\\.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vcs#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r9, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, r10, 0x200, 0x70bd2d, 0xca, {}, [""]}, 0x14}}, 0x10) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000002140)={{}, 0x0, 0x0, @unused=[0x50, 0x6, 0x5, 0x5], @devid}) 32m29.676501947s ago: executing program 0 (id=4619): r0 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x20008840) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x20000001) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$selinux_member(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 32m28.576715096s ago: executing program 0 (id=4620): r0 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000004) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x20008800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000100)=@v2={0x3, 0x0, 0x13, 0x2, 0xbf, "e254558e573632843cf3080b6d948eb8e81873dac363c36cf3839ed1fbe46b77a2032c0287e77f19d46f77676e2fa31fc1bef71f71044c52666069eb3ef1652d9522f84c2221e756ce8ed36cfe950878a9fdb79362d55523d4e613bbb0aa032fc90fe878f9b48279b8612582e4d2a7e3caf766cf7813a925e5130f919fa95576db882930fc3f88e69106eac69d73e0047a13c77e8f784ff3fa87a5771d48b8b71554ff36f965e5e95af8c143e24dacecb4f50bf7185a80de2f4dc435b27c9b"}, 0xc8, 0x1) landlock_restrict_self(0xffffffffffffffff, 0xc) 32m27.676912275s ago: executing program 0 (id=4623): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 32m27.405760957s ago: executing program 0 (id=4624): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000400)=""/85, 0x0, 0xf000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/84, 0x0, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001540)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000180)={0x0, 0x9}) 32m26.467123045s ago: executing program 0 (id=4625): r0 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000004) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1104}, 0x1, 0x0, 0x0, 0x40084}, 0x48010) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000140)='-B\xd5N\xa6\x90\xe4\xb5q\xe3\x9a\xf4\xf1k\x0f5\xbb\x14\xe3wT\xcb\v\xfb\xc7\x84\xa2m\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x84\x84\x00\x00\x00\x00\x00\x00knZ#\xcf)/\xc8\xd0:\x9cc\x10d\xee\xad\x8bcc\xad\x89\x9ci\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcd\x97\xb4\v\xa9=\xcdJxP5\xa9\xb2\x04K\x98\x934\xd6\xfe7\x0f\x00\x01\x00\x00\x00\xd4\x9d\x04\x1fb\x99\x9b\xd0A\xb8\xa9\xc7\\\xea\xd9\xe3K\xc1Vw\xd6\x05\x00\x00\x00H- \f\xea\xb2\x9d\xf4\x9e\xf7$>\xd2\xb3\xb7\x1d\xac&T4\xd6*u\xaa\x80\x97\xbbAF%\xd9T\v\xa0\xb7+O\xa2\xef\xe3N7\xfe\xaf@\xfe\xfb\xdfl\xb76\xed\xa4.\x0f\x92?\x84\xbd\x95\xc5\x9d\xce\x17\xf7-\x1f\xafH\xeb\xd1Zu\xd3l\xbd\xc7\xa39\x95\b,RM\xe9v\xf73s\xd2\xa4{\xb1\x9c \x05\x1f3)S\x99\xbaq\xbelBBo\xfd\xd1\xcb\xd5p`\xa4\xe1\xc2\xe8u\xc0x\x95\xa3`,\xa4\xb19]\xee\x9d\xb4R\xe9\'2\xe2\x83\x87X\xe2\xb6\xb2\x12xUnh\xa5\xe5G5r\x85s\xc4\xbe\xb8a-\x04\xe5*\x9e\x02+\xd8\x8dv*\x8a\x93w\x02\xed\xf6\x8av\xf3<38T\x97cO\r>\x00\xb8DX\x04e\x0fD\xbb\xe1\xa9\x00\xde\xe4jx\xac\x17\xeb\xcb/\xef0L\xf91\xfd\x82\x1e\xa5\t\x9a\xf0\x91uQ\xddq:2\xdd\a\xd2\xc9d}\xfe\x13\xbc\n\xbb\x12Q', 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 32m26.466860045s ago: executing program 32 (id=4625): r0 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000004) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1104}, 0x1, 0x0, 0x0, 0x40084}, 0x48010) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000140)='-B\xd5N\xa6\x90\xe4\xb5q\xe3\x9a\xf4\xf1k\x0f5\xbb\x14\xe3wT\xcb\v\xfb\xc7\x84\xa2m\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x84\x84\x00\x00\x00\x00\x00\x00knZ#\xcf)/\xc8\xd0:\x9cc\x10d\xee\xad\x8bcc\xad\x89\x9ci\xde\xc5\xe96\xddUE\xc98M\xcd\xfb\xcd\x97\xb4\v\xa9=\xcdJxP5\xa9\xb2\x04K\x98\x934\xd6\xfe7\x0f\x00\x01\x00\x00\x00\xd4\x9d\x04\x1fb\x99\x9b\xd0A\xb8\xa9\xc7\\\xea\xd9\xe3K\xc1Vw\xd6\x05\x00\x00\x00H- \f\xea\xb2\x9d\xf4\x9e\xf7$>\xd2\xb3\xb7\x1d\xac&T4\xd6*u\xaa\x80\x97\xbbAF%\xd9T\v\xa0\xb7+O\xa2\xef\xe3N7\xfe\xaf@\xfe\xfb\xdfl\xb76\xed\xa4.\x0f\x92?\x84\xbd\x95\xc5\x9d\xce\x17\xf7-\x1f\xafH\xeb\xd1Zu\xd3l\xbd\xc7\xa39\x95\b,RM\xe9v\xf73s\xd2\xa4{\xb1\x9c \x05\x1f3)S\x99\xbaq\xbelBBo\xfd\xd1\xcb\xd5p`\xa4\xe1\xc2\xe8u\xc0x\x95\xa3`,\xa4\xb19]\xee\x9d\xb4R\xe9\'2\xe2\x83\x87X\xe2\xb6\xb2\x12xUnh\xa5\xe5G5r\x85s\xc4\xbe\xb8a-\x04\xe5*\x9e\x02+\xd8\x8dv*\x8a\x93w\x02\xed\xf6\x8av\xf3<38T\x97cO\r>\x00\xb8DX\x04e\x0fD\xbb\xe1\xa9\x00\xde\xe4jx\xac\x17\xeb\xcb/\xef0L\xf91\xfd\x82\x1e\xa5\t\x9a\xf0\x91uQ\xddq:2\xdd\a\xd2\xc9d}\xfe\x13\xbc\n\xbb\x12Q', 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 7m16.187008468s ago: executing program 1 (id=7822): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={0x74, r1, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x6, 0x8848, @void, @void, @val={0x3, 0x1, 0x5c}, @void, @val={0x6, 0x2, 0x10}, @void, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x40) 7m14.205619077s ago: executing program 1 (id=7823): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0xb, "34ad5019221abb000000000900", 0xffffffffffffffff}) dup3(r1, r0, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000a00)={0x2020}, 0x2020) 7m13.548116654s ago: executing program 1 (id=7824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg0\x00', 0x1}) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, 0x0) 7m12.653869632s ago: executing program 1 (id=7825): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x50) setresuid(0x0, 0xee01, 0xffffffffffffffff) 7m12.098300348s ago: executing program 1 (id=7826): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x1000) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 7m9.047013088s ago: executing program 1 (id=7827): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='dummy_udc.0', 0xb) 6m23.887426045s ago: executing program 33 (id=7827): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='dummy_udc.0', 0xb) 7.316460607s ago: executing program 3 (id=8495): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3d0, 0x0, 0x0, 0x100, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'veth1_vlan\x00', {}, {0xff}}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@arp={@multicast2, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@random="065dcf9efb68"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'vlan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x100}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) 7.148911159s ago: executing program 3 (id=8496): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d1050120000701020301090212000100001a000904"], 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000000)="f8dbc5cc604d", 0x6}], 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0xfffb, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 5.396243177s ago: executing program 3 (id=8497): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'vlan0\x00', {}, {}, 0x6, 0x1, 0x5a}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1, 0x0, 0x4, 0x3, 0x2], 0x2, 0x1}, {0xffffffffffffffff, [0x5, 0x6, 0x6, 0x6, 0x2, 0x6], 0x2, 0x3}}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'sit0\x00', 'geneve0\x00', {}, {0xff}, 0xff, 0x2, 0x22}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 5.088512019s ago: executing program 3 (id=8498): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x80800) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40000069, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000000)=ANY=[], 0x9) 4.836591482s ago: executing program 3 (id=8499): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)=@newtfilter={0x1e, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0x8, 0xfff5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) 4.646963394s ago: executing program 3 (id=8501): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) eventfd(0x7f) 4.566834855s ago: executing program 2 (id=8502): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 4.194473228s ago: executing program 2 (id=8503): bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x4, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf1600000000bd5930680000fe85"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000200000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c, 0x0, 0x40005}, 0x8840) 3.797156783s ago: executing program 2 (id=8504): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x427a7000) write$cgroup_devices(r2, 0x0, 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)) 548.365054ms ago: executing program 2 (id=8505): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x80, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "345f8cf949a01b515682f44cecac91ba"}, @md5sig={0x1d, 0x12, "d2b653e0c9d32072c19dd6ca814b7d7b"}]}}}}}}}}, 0x0) 239.080478ms ago: executing program 2 (id=8506): keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='{\x00', 0xffffffffffffffff) 0s ago: executing program 2 (id=8507): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd7, 0xd782, 0x8, 0x704, 0x4}, 0x10}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) write$tun(r1, &(0x7f0000000300)={@void, @void, @arp=@ether_ipv4={0x1, 0x86dd, 0x6, 0x4, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @private=0xa010101}}, 0x1c) kernel console output (not intermixed with test programs): 0 to HW filter on device netdevsim1 [ 3532.419206][T26156] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3532.440067][T26156] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3532.454043][T26156] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3532.465761][T26156] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3533.129534][ T28] audit: type=1400 audit(3533.030:543): avc: denied { write } for pid=26502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3533.388527][ T28] audit: type=1400 audit(3533.290:544): avc: denied { write } for pid=26508 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3533.420019][T26156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3533.850592][ T28] audit: type=1400 audit(3533.750:545): avc: denied { write } for pid=26512 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3534.219866][ T28] audit: type=1400 audit(3534.120:546): avc: denied { write } for pid=26520 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3534.793751][ T28] audit: type=1400 audit(3534.700:547): avc: denied { write } for pid=26525 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3535.086980][ T28] audit: type=1400 audit(3534.990:548): avc: denied { write } for pid=26532 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3535.502274][ T28] audit: type=1400 audit(3535.410:549): avc: denied { write } for pid=26538 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3535.810209][ T28] audit: type=1400 audit(3535.710:550): avc: denied { write } for pid=26545 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3536.357555][ T28] audit: type=1400 audit(3536.260:551): avc: denied { write } for pid=26556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3536.676289][ T28] audit: type=1400 audit(3536.580:552): avc: denied { write } for pid=26563 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3536.885936][T26156] veth0_vlan: entered promiscuous mode [ 3536.917570][T26156] veth1_vlan: entered promiscuous mode [ 3537.016595][T26156] veth0_macvtap: entered promiscuous mode [ 3537.028667][T26156] veth1_macvtap: entered promiscuous mode [ 3537.125229][ T1043] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3537.127516][ T1043] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3537.128172][ T1043] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3537.145268][ T1277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3537.284009][ T28] audit: type=1400 audit(3537.190:553): avc: denied { write } for pid=26156 comm="syz-executor" name="loop1" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:ptmx_t:s0" [ 3537.438901][ T28] audit: type=1400 audit(3537.340:554): avc: denied { write } for pid=26568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3538.936912][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 3538.937445][ T28] audit: type=1400 audit(3538.840:557): avc: denied { write } for pid=26590 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3539.542999][ T28] audit: type=1400 audit(3539.440:558): avc: denied { write } for pid=26592 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3539.826386][ T28] audit: type=1400 audit(3539.730:559): avc: denied { write } for pid=26598 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3560.031763][ T28] audit: type=1400 audit(3559.930:560): avc: denied { watch watch_reads } for pid=26746 comm="syz.1.7461" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 3560.376931][T26760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7467'. [ 3572.621409][ T28] audit: type=1326 audit(3572.520:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26867 comm="syz.1.7519" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x10000 [ 3590.911637][ T28] audit: type=1400 audit(3590.810:562): avc: denied { write } for pid=26952 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3591.168219][ T28] audit: type=1400 audit(3591.070:563): avc: denied { write } for pid=26957 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3600.701556][ T28] audit: type=1326 audit(3600.590:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26999 comm="syz.1.7578" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x0 [ 3614.980051][ T28] audit: type=1400 audit(3614.880:565): avc: denied { accept } for pid=27084 comm="syz.2.7611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 3640.006119][ T28] audit: type=1400 audit(3639.910:566): avc: denied { mounton } for pid=27144 comm="syz.2.7634" path="/148/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 3640.022254][T27145] FAULT_INJECTION: forcing a failure. [ 3640.022254][T27145] name failslab, interval 1, probability 0, space 0, times 0 [ 3640.024310][T27145] CPU: 1 UID: 0 PID: 27145 Comm: syz.2.7634 Not tainted syzkaller #0 PREEMPT [ 3640.024439][T27145] Hardware name: ARM-Versatile Express [ 3640.024465][T27145] Call trace: [ 3640.024507][T27145] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3640.024610][T27145] r7:60000113 r6:60000113 r5:82336570 r4:00000000 [ 3640.024632][T27145] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3640.024686][T27145] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3640.024749][T27145] r7:848124c0 r6:00000000 r5:848124c0 r4:82b1ac48 [ 3640.024765][T27145] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3640.024817][T27145] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 3640.024878][T27145] r8:00000000 r7:848124c0 r6:806640dc r5:00000cc0 r4:830e5300 [ 3640.024894][T27145] [<80568de8>] (should_failslab) from [<80546c44>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 3640.024952][T27145] [<80546be4>] (kmem_cache_alloc_lru_noprof) from [<806640dc>] (proc_alloc_inode+0x24/0x5c) [ 3640.025026][T27145] r10:860aa500 r9:00000000 r8:83149b50 r7:860aa500 r6:81c2a080 r5:862dcc00 [ 3640.025049][T27145] r4:862dcc00 [ 3640.025065][T27145] [<806640b8>] (proc_alloc_inode) from [<805cb844>] (alloc_inode+0x24/0xd0) [ 3640.025117][T27145] [<805cb820>] (alloc_inode) from [<805cb900>] (new_inode+0x10/0x68) [ 3640.025171][T27145] r7:860aa500 r6:83149a40 r5:82b271a8 r4:862dcc00 [ 3640.025188][T27145] [<805cb8f0>] (new_inode) from [<80664e88>] (proc_get_inode+0x28/0x168) [ 3640.025252][T27145] r9:00000000 r8:83149b50 r7:860aa500 r6:83149a40 r5:82b271a8 r4:862dcc00 [ 3640.025271][T27145] [<80664e60>] (proc_get_inode) from [<806660d8>] (proc_fill_super+0x1a0/0x2e0) [ 3640.025328][T27145] r5:85c6a540 r4:862dcc00 [ 3640.025355][T27145] [<80665f38>] (proc_fill_super) from [<805a79c8>] (get_tree_nodev+0x60/0x90) [ 3640.025420][T27145] r9:00000000 r8:830ed740 r7:80665f38 r6:00000000 r5:860aa500 r4:862dcc00 [ 3640.025439][T27145] [<805a7968>] (get_tree_nodev) from [<80664fe0>] (proc_get_tree+0x18/0x1c) [ 3640.025494][T27145] r7:00004000 r6:ea46df6c r5:860aa500 r4:00000020 [ 3640.025509][T27145] [<80664fc8>] (proc_get_tree) from [<805a3bb0>] (vfs_get_tree+0x2c/0x118) [ 3640.025556][T27145] [<805a3b84>] (vfs_get_tree) from [<805d1c20>] (fc_mount+0x14/0x7c) [ 3640.025607][T27145] r6:ea46df6c r5:860aa500 r4:00000020 [ 3640.025626][T27145] [<805d1c0c>] (fc_mount) from [<805d7e64>] (path_mount+0x424/0xb70) [ 3640.025681][T27145] r5:00000000 r4:00000020 [ 3640.025697][T27145] [<805d7a40>] (path_mount) from [<805d8d84>] (sys_mount+0x1dc/0x260) [ 3640.025756][T27145] r10:00000015 r9:848124c0 r8:00000000 r7:00000000 r6:830ed740 r5:00000000 [ 3640.025777][T27145] r4:00000000 [ 3640.025793][T27145] [<805d8ba8>] (sys_mount) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3640.025848][T27145] Exception stack(0xea46dfa8 to 0xea46dff0) [ 3640.025893][T27145] dfa0: 00000000 00000000 00000000 20000080 20000240 00004000 [ 3640.025930][T27145] dfc0: 00000000 00000000 00356318 00000015 003562d8 00000000 00000001 76f270dc [ 3640.025985][T27145] dfe0: 76f26e88 76f26e78 00018fa0 00130a50 [ 3640.026028][T27145] r10:00000015 r9:848124c0 r8:8020029c r7:00000015 r6:00356318 r5:00000000 [ 3640.026049][T27145] r4:00000000 [ 3640.092849][T27145] proc_fill_super: get root inode failed [ 3642.297672][T27153] FAULT_INJECTION: forcing a failure. [ 3642.297672][T27153] name failslab, interval 1, probability 0, space 0, times 0 [ 3642.298099][T27153] CPU: 0 UID: 0 PID: 27153 Comm: syz.2.7638 Not tainted syzkaller #0 PREEMPT [ 3642.298183][T27153] Hardware name: ARM-Versatile Express [ 3642.298212][T27153] Call trace: [ 3642.298255][T27153] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3642.298353][T27153] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3642.298550][T27153] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3642.298662][T27153] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3642.298845][T27153] r7:848124c0 r6:00000000 r5:848124c0 r4:82b1ac48 [ 3642.298880][T27153] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3642.299304][T27153] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 3642.299598][T27153] r8:00000000 r7:848124c0 r6:807bc224 r5:00000cc0 r4:830e5a80 [ 3642.299711][T27153] [<80568de8>] (should_failslab) from [<80546c44>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 3642.299905][T27153] [<80546be4>] (kmem_cache_alloc_lru_noprof) from [<807bc224>] (debugfs_alloc_inode+0x24/0x28) [ 3642.299988][T27153] r10:82cf0344 r9:81d127e0 r8:848124c0 r7:81cd6450 r6:81cd5e34 r5:83394c00 [ 3642.300023][T27153] r4:8540dcc0 [ 3642.300060][T27153] [<807bc200>] (debugfs_alloc_inode) from [<805cb844>] (alloc_inode+0x24/0xd0) [ 3642.300155][T27153] [<805cb820>] (alloc_inode) from [<805cb900>] (new_inode+0x10/0x68) [ 3642.300217][T27153] r7:81cd6450 r6:00000001 r5:00008100 r4:8540dcc0 [ 3642.300234][T27153] [<805cb8f0>] (new_inode) from [<807bc744>] (__debugfs_create_file+0xa4/0x1dc) [ 3642.300349][T27153] r9:81d127e0 r8:848124c0 r7:81cd6450 r6:00000001 r5:00008100 r4:8540dcc0 [ 3642.300401][T27153] [<807bc6a0>] (__debugfs_create_file) from [<807bc8ac>] (debugfs_create_file_full+0x30/0x38) [ 3642.300477][T27153] r10:848124c0 r9:00000001 r8:00000001 r7:81a39718 r6:00000001 r5:00000001 [ 3642.300512][T27153] r4:8513739c [ 3642.300617][T27153] [<807bc87c>] (debugfs_create_file_full) from [<80a05da0>] (ref_tracker_dir_debugfs+0xe4/0x184) [ 3642.300735][T27153] [<80a05cbc>] (ref_tracker_dir_debugfs) from [<81661f38>] (alloc_netdev_mqs+0xc4/0x4b0) [ 3642.300806][T27153] r5:00000001 r4:85137000 [ 3642.300821][T27153] [<81661e74>] (alloc_netdev_mqs) from [<81a37b8c>] (vlan_ioctl_handler+0x3b4/0x480) [ 3642.301159][T27153] r10:848124c0 r9:00000001 r8:85bec000 r7:85d1b800 r6:00000005 r5:00000005 [ 3642.301570][T27153] r4:00000000 [ 3642.301606][T27153] [<81a377d8>] (vlan_ioctl_handler) from [<816313e0>] (sock_ioctl+0xd4/0x4c0) [ 3642.301728][T27153] r9:00000005 r8:8619cd00 r7:85bec000 r6:20000040 r5:854db440 r4:82e3a3e8 [ 3642.301754][T27153] [<8163130c>] (sock_ioctl) from [<805bdf78>] (sys_ioctl+0x244/0xb5c) [ 3642.301820][T27153] r9:00000005 r8:8619cd00 r7:20000040 r6:00008983 r5:8619cd01 r4:00000000 [ 3642.301837][T27153] [<805bdd34>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3642.301884][T27153] Exception stack(0xea4edfa8 to 0xea4edff0) [ 3642.301923][T27153] dfa0: 00000000 00000000 00000005 00008983 20000040 00000000 [ 3642.302063][T27153] dfc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f270dc [ 3642.302098][T27153] dfe0: 76f26e88 76f26e78 00018fa0 00130a50 [ 3642.302133][T27153] r10:00000036 r9:848124c0 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 3642.302154][T27153] r4:00000000 [ 3642.366958][T27153] debugfs: out of free dentries, can not create file 'netdev@8513739c' [ 3643.976435][T27157] ip6gre1: entered allmulticast mode [ 3644.004717][T23069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3646.836801][T27168] FAULT_INJECTION: forcing a failure. [ 3646.836801][T27168] name failslab, interval 1, probability 0, space 0, times 0 [ 3646.837228][T27168] CPU: 0 UID: 0 PID: 27168 Comm: syz.2.7643 Not tainted syzkaller #0 PREEMPT [ 3646.837318][T27168] Hardware name: ARM-Versatile Express [ 3646.837344][T27168] Call trace: [ 3646.837383][T27168] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3646.837487][T27168] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3646.837506][T27168] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3646.837556][T27168] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3646.837617][T27168] r7:8660b100 r6:00000000 r5:8660b100 r4:82b1ac48 [ 3646.837632][T27168] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3646.837686][T27168] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 3646.837752][T27168] r8:00000000 r7:8660b100 r6:80679880 r5:00000dc0 r4:830bdf00 [ 3646.837771][T27168] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 3646.837825][T27168] [<80546804>] (kmem_cache_alloc_noprof) from [<80679880>] (__kernfs_new_node+0x54/0x25c) [ 3646.837893][T27168] r10:8301d9c0 r9:8660b100 r8:82543a18 r7:8582a630 r6:82329244 r5:8301d9c0 [ 3646.837924][T27168] r4:8582a630 [ 3646.837940][T27168] [<8067982c>] (__kernfs_new_node) from [<8067b128>] (kernfs_new_node+0x7c/0x84) [ 3646.838034][T27168] r10:8301d9c0 r9:00000000 r8:00000002 r7:82329244 r6:00000000 r5:00008124 [ 3646.838056][T27168] r4:8582a630 [ 3646.838072][T27168] [<8067b0ac>] (kernfs_new_node) from [<8067d6ec>] (__kernfs_create_file+0x30/0xc8) [ 3646.838135][T27168] r10:82b63a8c r9:00000003 r8:8582a630 r7:00000000 r6:00000000 r5:81c2d878 [ 3646.838154][T27168] r4:8582a630 [ 3646.838171][T27168] [<8067d6bc>] (__kernfs_create_file) from [<8067e5a0>] (sysfs_add_file_mode_ns+0x8c/0x148) [ 3646.838220][T27168] r5:82b63b30 r4:8582a630 [ 3646.838237][T27168] [<8067e514>] (sysfs_add_file_mode_ns) from [<8067f920>] (internal_create_group+0x1ec/0x54c) [ 3646.838295][T27168] r7:00000000 r6:ffffee4b r5:81d5c34c r4:00000124 [ 3646.838313][T27168] [<8067f734>] (internal_create_group) from [<8067fd08>] (internal_create_groups+0x50/0x90) [ 3646.838373][T27168] r10:82a0b770 r9:00000000 r8:00000000 r7:82b63a78 r6:85bc0400 r5:82b63a78 [ 3646.838393][T27168] r4:85bc0400 [ 3646.838410][T27168] [<8067fcb8>] (internal_create_groups) from [<8067fd60>] (sysfs_create_groups+0x18/0x1c) [ 3646.838472][T27168] r9:00000001 r8:00000000 r7:00000000 r6:8310fc00 r5:00000000 r4:85bc0400 [ 3646.838490][T27168] [<8067fd48>] (sysfs_create_groups) from [<80bdc2c8>] (device_add+0x50c/0x834) [ 3646.838543][T27168] [<80bdbdbc>] (device_add) from [<80bfb664>] (wakeup_source_device_create+0xc0/0xd8) [ 3646.838612][T27168] r10:82a0b770 r9:00000001 r8:ffffffff r7:8619cd00 r6:00000000 r5:00000000 [ 3646.838632][T27168] r4:85bc0400 [ 3646.838648][T27168] [<80bfb5a4>] (wakeup_source_device_create) from [<80bfba94>] (wakeup_source_sysfs_add+0x14/0x24) [ 3646.838710][T27168] r7:8619cd00 r6:8235becc r5:00000000 r4:85b92b80 [ 3646.838726][T27168] [<80bfba80>] (wakeup_source_sysfs_add) from [<80bf9b3c>] (wakeup_source_register+0x90/0x160) [ 3646.838781][T27168] r5:00000000 r4:85b92b80 [ 3646.838797][T27168] [<80bf9aac>] (wakeup_source_register) from [<80616f90>] (ep_create_wakeup_source+0xac/0xcc) [ 3646.838861][T27168] r8:ffffffff r7:8619cd00 r6:866eaa00 r5:866eaa00 r4:846e8c00 [ 3646.838880][T27168] [<80616ee4>] (ep_create_wakeup_source) from [<806193b4>] (do_epoll_ctl_file+0x850/0xc58) [ 3646.838936][T27168] r5:846e8c0c r4:846e8c00 [ 3646.838954][T27168] [<80618b64>] (do_epoll_ctl_file) from [<80619834>] (do_epoll_ctl+0x78/0xdc) [ 3646.839014][T27168] r10:000000fb r9:00000000 r8:8619cd01 r7:85fb0701 r6:ea555f68 r5:8619cd00 [ 3646.839036][T27168] r4:00000004 [ 3646.839051][T27168] [<806197bc>] (do_epoll_ctl) from [<8061994c>] (sys_epoll_ctl+0xb4/0x108) [ 3646.839109][T27168] r9:8660b100 r8:b5403587 r7:00000005 r6:00000004 r5:20000000 r4:00000001 [ 3646.839127][T27168] [<80619898>] (sys_epoll_ctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3646.839171][T27168] Exception stack(0xea555fa8 to 0xea555ff0) [ 3646.839207][T27168] 5fa0: 00000000 00000000 00000005 00000001 00000004 20000000 [ 3646.839239][T27168] 5fc0: 00000000 00000000 00356314 000000fb 003562d8 00000000 00000001 76f270dc [ 3646.839267][T27168] 5fe0: 76f26e88 76f26e78 00018fa0 00130a50 [ 3646.839298][T27168] r8:8020029c r7:000000fb r6:00356314 r5:00000000 r4:00000000 [ 3647.976451][T27176] FAULT_INJECTION: forcing a failure. [ 3647.976451][T27176] name failslab, interval 1, probability 0, space 0, times 0 [ 3647.977989][T27176] CPU: 1 UID: 0 PID: 27176 Comm: syz.1.7646 Not tainted syzkaller #0 PREEMPT [ 3647.978100][T27176] Hardware name: ARM-Versatile Express [ 3647.978128][T27176] Call trace: [ 3647.978172][T27176] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3647.978275][T27176] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3647.978297][T27176] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3647.978354][T27176] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3647.978414][T27176] r7:00000038 r6:00000000 r5:86773100 r4:82b1ac48 [ 3647.978445][T27176] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3647.978504][T27176] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 3647.978588][T27176] r8:86773100 r7:00000038 r6:80356964 r5:00000dc0 r4:83001240 [ 3647.978611][T27176] [<80568de8>] (should_failslab) from [<805488cc>] (__kmalloc_cache_noprof+0x58/0x338) [ 3647.978673][T27176] [<80548874>] (__kmalloc_cache_noprof) from [<80356964>] (refill_pi_state_cache+0x3c/0x80) [ 3647.978746][T27176] r10:000000f0 r9:20048000 r8:86773100 r7:e83c9f58 r6:86773100 r5:86773100 [ 3647.978769][T27176] r4:00000000 [ 3647.978786][T27176] [<80356928>] (refill_pi_state_cache) from [<80357f48>] (futex_requeue+0x488/0xe04) [ 3647.978840][T27176] r5:0000000c r4:00000001 [ 3647.978856][T27176] [<80357ac0>] (futex_requeue) from [<803558f8>] (do_futex+0xf4/0x1d0) [ 3647.978913][T27176] r10:000000f0 r9:0000000c r8:86773100 r7:00000001 r6:00000000 r5:0000000c [ 3647.978936][T27176] r4:00000001 [ 3647.978954][T27176] [<80355804>] (do_futex) from [<8035626c>] (sys_futex_time32+0x11c/0x1bc) [ 3647.979007][T27176] r4:00000000 [ 3647.979026][T27176] [<80356150>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3647.979076][T27176] Exception stack(0xe83c9fa8 to 0xe83c9ff0) [ 3647.979117][T27176] 9fa0: 20048000 00000000 00000000 0000000c 00000001 00000000 [ 3647.979159][T27176] 9fc0: 20048000 00000000 0035631c 000000f0 003562d8 00000000 00000001 76f300dc [ 3647.979186][T27176] 9fe0: 76f2fe88 76f2fe78 00018fa0 00130a50 [ 3647.979223][T27176] r9:86773100 r8:8020029c r7:000000f0 r6:0035631c r5:00000000 r4:20048000 [ 3648.011803][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3648.842679][T27185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7650'. [ 3656.251801][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3670.725829][T27241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7670'. [ 3670.934842][T27241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7670'. [ 3672.891871][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3673.689827][ T28] audit: type=1400 audit(3673.590:567): avc: denied { write } for pid=27248 comm="syz.2.7673" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 3673.692327][ T28] audit: type=1400 audit(3673.600:568): avc: denied { open } for pid=27248 comm="syz.2.7673" path="/174/tracing/events/sched/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 3674.578645][T27253] .: renamed from bond0 (while UP) [ 3674.585217][ T28] audit: type=1400 audit(3674.490:569): avc: denied { read } for pid=27251 comm="syz.1.7674" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 3681.693225][T27289] FAULT_INJECTION: forcing a failure. [ 3681.693225][T27289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3681.694900][T27289] CPU: 0 UID: 0 PID: 27289 Comm: syz.2.7686 Not tainted syzkaller #0 PREEMPT [ 3681.695021][T27289] Hardware name: ARM-Versatile Express [ 3681.695047][T27289] Call trace: [ 3681.695087][T27289] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3681.695194][T27289] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3681.695213][T27289] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3681.695265][T27289] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3681.695328][T27289] r7:80391c50 r6:00000000 r5:84811880 r4:82b54788 [ 3681.695345][T27289] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3681.695399][T27289] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 3681.695457][T27289] r8:831125cc r7:80391c50 r6:00000001 r5:dfd65f5c r4:00000008 [ 3681.695474][T27289] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 3681.695522][T27289] [<809fdf1c>] (should_fail_usercopy) from [<8169dd50>] (bpf_prog_create_from_user+0x70/0x16c) [ 3681.695578][T27289] [<8169dce0>] (bpf_prog_create_from_user) from [<80393c90>] (do_seccomp+0x25c/0xce4) [ 3681.695649][T27289] r10:0000017f r9:84811880 r8:83112580 r7:8254373c r6:20000040 r5:84811880 [ 3681.695669][T27289] r4:00000000 [ 3681.695686][T27289] [<80393a34>] (do_seccomp) from [<80394934>] (sys_seccomp+0x10/0x14) [ 3681.695750][T27289] r10:0000017f r9:84811880 r8:8020029c r7:0000017f r6:00356310 r5:00000000 [ 3681.695771][T27289] r4:00000000 [ 3681.695785][T27289] [<80394924>] (sys_seccomp) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3681.695832][T27289] Exception stack(0xdfd65fa8 to 0xdfd65ff0) [ 3681.695869][T27289] 5fa0: 00000000 00000000 00000001 00000000 20000040 00000000 [ 3681.695904][T27289] 5fc0: 00000000 00000000 00356310 0000017f 003562d8 00000000 00000001 76f270dc [ 3681.695930][T27289] 5fe0: 76f26e88 76f26e78 00018fa0 00130a50 [ 3686.764146][T27325] FAULT_INJECTION: forcing a failure. [ 3686.764146][T27325] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3686.772111][T27325] CPU: 0 UID: 0 PID: 27325 Comm: syz.2.7699 Not tainted syzkaller #0 PREEMPT [ 3686.772259][T27325] Hardware name: ARM-Versatile Express [ 3686.772290][T27325] Call trace: [ 3686.772336][T27325] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3686.772462][T27325] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3686.772486][T27325] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3686.772545][T27325] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3686.772610][T27325] r7:00000000 r6:00000000 r5:865324c0 r4:82afac00 [ 3686.772629][T27325] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3686.772688][T27325] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 3686.772755][T27325] r8:000002e4 r7:00000000 r6:dfb8ded8 r5:00000000 r4:003562e4 [ 3686.772775][T27325] [<809fdf04>] (should_fail) from [<803544f4>] (get_futex_key+0xa8/0x558) [ 3686.772833][T27325] [<8035444c>] (get_futex_key) from [<80358eec>] (futex_wake+0x70/0x25c) [ 3686.772903][T27325] r10:000000f0 r9:00131dd8 r8:dfb8dec8 r7:ffffffff r6:003562e4 r5:000f4240 [ 3686.772927][T27325] r4:00000002 [ 3686.772945][T27325] [<80358e7c>] (futex_wake) from [<80355998>] (do_futex+0x194/0x1d0) [ 3686.773014][T27325] r10:000000f0 r9:00000001 r8:865324c0 r7:000f4240 r6:003562e4 r5:00000081 [ 3686.773039][T27325] r4:000f4240 [ 3686.773056][T27325] [<80355804>] (do_futex) from [<8035626c>] (sys_futex_time32+0x11c/0x1bc) [ 3686.773113][T27325] r4:00000000 [ 3686.773162][T27325] [<80356150>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3686.773221][T27325] Exception stack(0xdfb8dfa8 to 0xdfb8dff0) [ 3686.773266][T27325] dfa0: 00131dd8 ffffffff 003562e4 00000081 000f4240 00000000 [ 3686.773306][T27325] dfc0: 00131dd8 ffffffff 76f277d4 000000f0 00340000 00000000 00000001 76f270dc [ 3686.773337][T27325] dfe0: 76f26f38 76f26f28 00021c30 00130a50 [ 3686.773375][T27325] r9:865324c0 r8:8020029c r7:000000f0 r6:76f277d4 r5:ffffffff r4:00131dd8 [ 3687.213921][T27328] FAULT_INJECTION: forcing a failure. [ 3687.213921][T27328] name failslab, interval 1, probability 0, space 0, times 0 [ 3687.244503][T27328] CPU: 0 UID: 0 PID: 27328 Comm: syz.2.7700 Not tainted syzkaller #0 PREEMPT [ 3687.246130][T27328] Hardware name: ARM-Versatile Express [ 3687.246768][T27328] Call trace: [ 3687.246914][T27328] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3687.247220][T27328] r7:60000113 r6:60000113 r5:82336570 r4:00000000 [ 3687.247242][T27328] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3687.247297][T27328] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3687.247360][T27328] r7:865324c0 r6:00000000 r5:865324c0 r4:82b1ac48 [ 3687.247391][T27328] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3687.247452][T27328] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 3687.247525][T27328] r8:00000000 r7:865324c0 r6:807ee1c4 r5:00000d40 r4:830bd600 [ 3687.247546][T27328] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 3687.247605][T27328] [<80546804>] (kmem_cache_alloc_noprof) from [<807ee1c4>] (security_inode_alloc+0x30/0x1d0) [ 3687.247684][T27328] r10:854e0d00 r9:00000000 r8:00000000 r7:00000c40 r6:830c4400 r5:854e0c00 [ 3687.247708][T27328] r4:854e0c00 [ 3687.247726][T27328] [<807ee194>] (security_inode_alloc) from [<805c7dec>] (inode_init_always_gfp+0x184/0x1d8) [ 3687.247788][T27328] r5:00000000 r4:854e0c00 [ 3687.247806][T27328] [<805c7c68>] (inode_init_always_gfp) from [<805cb860>] (alloc_inode+0x40/0xd0) [ 3687.247874][T27328] r10:830c4400 r9:81c27140 r8:00000000 r7:82a22ec0 r6:81c27040 r5:830c4400 [ 3687.247899][T27328] r4:854e0c00 r3:865324c0 [ 3687.247916][T27328] [<805cb820>] (alloc_inode) from [<805e47dc>] (path_from_stashed+0xe0/0x29c) [ 3687.247984][T27328] r7:82a22ec0 r6:830ea410 r5:82a22f04 r4:dfbf9d54 [ 3687.248003][T27328] [<805e46fc>] (path_from_stashed) from [<805f96e8>] (ns_get_path+0x3c/0x48) [ 3687.248073][T27328] r10:00000018 r9:8067372c r8:dfbf9ea4 r7:854701d0 r6:81c0663c r5:865324c0 [ 3687.248095][T27328] r4:dfbf9d54 [ 3687.248114][T27328] [<805f96ac>] (ns_get_path) from [<80673834>] (proc_ns_get_link+0x108/0x130) [ 3687.248175][T27328] r5:865324c0 r4:00000000 [ 3687.248193][T27328] [<8067372c>] (proc_ns_get_link) from [<805b55e4>] (pick_link+0x330/0x424) [ 3687.248252][T27328] r6:00000000 r5:dfbf9dc0 r4:dfbf9e58 [ 3687.248271][T27328] [<805b52b4>] (pick_link) from [<805b5860>] (step_into_slowpath+0x188/0x318) [ 3687.250340][T27328] r9:86114f00 r8:854701d0 r7:00000001 r6:00000000 r5:8558e880 r4:dfbf9e58 [ 3687.250436][T27328] [<805b56d8>] (step_into_slowpath) from [<805b9af4>] (path_openat+0x34c/0xa3c) [ 3687.250518][T27328] r10:00000018 r9:86114f00 r8:865324c0 r7:dfbf9f20 r6:00000000 r5:8558e880 [ 3687.250541][T27328] r4:dfbf9e58 [ 3687.250559][T27328] [<805b97a8>] (path_openat) from [<805ba29c>] (do_file_open+0xb8/0x150) [ 3687.250627][T27328] r10:00000142 r9:865324c0 r8:00000001 r7:ffffff9c r6:dfbf9f20 r5:865324c0 [ 3687.250651][T27328] r4:83879180 [ 3687.250669][T27328] [<805ba1e4>] (do_file_open) from [<8059d7b0>] (do_sys_openat2+0x8c/0xf0) [ 3687.250740][T27328] r8:8020029c r7:76f26e00 r6:ffffff9c r5:83879180 r4:00000005 [ 3687.250759][T27328] [<8059d724>] (do_sys_openat2) from [<8059dcc8>] (sys_openat+0x88/0xd8) [ 3687.250824][T27328] r7:00000142 r6:00000000 r5:76f26e00 r4:ffffff9c [ 3687.250843][T27328] [<8059dc40>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3687.250943][T27328] Exception stack(0xdfbf9fa8 to 0xdfbf9ff0) [ 3687.250988][T27328] 9fa0: 00000000 00000000 ffffff9c 76f26e00 00020002 00000000 [ 3687.251026][T27328] 9fc0: 00000000 00000000 00000000 00000142 003562d8 00000000 00000001 76f270dc [ 3687.251059][T27328] 9fe0: 76f26d88 76f26d74 0010bc74 00112858 [ 3687.251086][T27328] r5:00000000 r4:00000000 [ 3693.183467][T27354] CUSE: unknown device info "" [ 3693.184843][T27354] CUSE: unknown device info "" [ 3693.188169][T27354] CUSE: unknown device info "ÿ" [ 3693.195137][T27354] CUSE: unknown device info "" [ 3693.201862][T27354] CUSE: unknown device info "ý" [ 3693.222307][T27354] CUSE: unknown device info "" [ 3693.223374][T27354] CUSE: unknown device info "" [ 3693.225757][T27354] CUSE: DEVNAME unspecified [ 3695.455264][T27366] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 3696.534238][T27373] FAULT_INJECTION: forcing a failure. [ 3696.534238][T27373] name failslab, interval 1, probability 0, space 0, times 0 [ 3696.535288][T27373] CPU: 0 UID: 0 PID: 27373 Comm: syz.2.7719 Not tainted syzkaller #0 PREEMPT [ 3696.535386][T27373] Hardware name: ARM-Versatile Express [ 3696.535404][T27373] Call trace: [ 3696.535426][T27373] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3696.535496][T27373] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3696.535505][T27373] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3696.535554][T27373] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3696.535609][T27373] r7:83326200 r6:00000000 r5:83326200 r4:82b1ac48 [ 3696.535618][T27373] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3696.535649][T27373] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 3696.535687][T27373] r8:00000000 r7:83326200 r6:8061fdfc r5:00000dc0 r4:830e5cc0 [ 3696.535695][T27373] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 3696.535726][T27373] [<80546804>] (kmem_cache_alloc_noprof) from [<8061fdfc>] (sys_io_setup+0x10c/0xb14) [ 3696.535765][T27373] r10:82b22658 r9:83326200 r8:8254352c r7:20000600 r6:00000008 r5:b5403587 [ 3696.535777][T27373] r4:00000008 [ 3696.535785][T27373] [<8061fcf0>] (sys_io_setup) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3696.535811][T27373] Exception stack(0xdfb89fa8 to 0xdfb89ff0) [ 3696.535832][T27373] 9fa0: 00000000 00000000 00000008 20000600 00000000 00000000 [ 3696.535852][T27373] 9fc0: 00000000 00000000 0035630c 000000f3 003562d8 00000000 00000001 76f270dc [ 3696.535866][T27373] 9fe0: 76f26e88 76f26e78 00018fa0 00130a50 [ 3696.535886][T27373] r10:000000f3 r9:83326200 r8:8020029c r7:000000f3 r6:0035630c r5:00000000 [ 3696.535896][T27373] r4:00000000 [ 3698.072645][T27381] FAULT_INJECTION: forcing a failure. [ 3698.072645][T27381] name failslab, interval 1, probability 0, space 0, times 0 [ 3698.073180][T27381] CPU: 0 UID: 0 PID: 27381 Comm: syz.2.7721 Not tainted syzkaller #0 PREEMPT [ 3698.073285][T27381] Hardware name: ARM-Versatile Express [ 3698.073311][T27381] Call trace: [ 3698.073359][T27381] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3698.073471][T27381] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3698.073495][T27381] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3698.073555][T27381] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3698.073623][T27381] r7:84811880 r6:00000000 r5:84811880 r4:82b1ac48 [ 3698.073641][T27381] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3698.073702][T27381] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 3698.073778][T27381] r8:00000000 r7:84811880 r6:807f3444 r5:00000dc0 r4:830026c0 [ 3698.073797][T27381] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 3698.073859][T27381] [<80546804>] (kmem_cache_alloc_noprof) from [<807f3444>] (security_file_alloc+0x30/0x184) [ 3698.073933][T27381] r10:83394800 r9:84811880 r8:85fb0280 r7:83ea5a00 r6:82cf2468 r5:85fb0280 [ 3698.073957][T27381] r4:85fb0280 [ 3698.074019][T27381] [<807f3414>] (security_file_alloc) from [<805a29d4>] (init_file+0x48/0xfc) [ 3698.074089][T27381] r7:83ea5a00 r6:00000002 r5:82b1dfdc r4:85fb0280 [ 3698.074109][T27381] [<805a298c>] (init_file) from [<805a3224>] (alloc_empty_file+0x68/0x13c) [ 3698.074173][T27381] r7:83ea5a00 r6:00000002 r5:82b1dfdc r4:825438e8 [ 3698.074193][T27381] [<805a31bc>] (alloc_empty_file) from [<805a33a4>] (alloc_file_pseudo+0xac/0x154) [ 3698.074254][T27381] r8:81e613c0 r7:00000002 r6:8383f310 r5:835ca840 r4:82bfb150 [ 3698.074271][T27381] [<805a32f8>] (alloc_file_pseudo) from [<8162e1c4>] (sock_alloc_file+0x48/0xc4) [ 3698.074343][T27381] r10:00000119 r9:84811880 r8:8020029c r7:00000119 r6:835ca840 r5:835ca7c0 [ 3698.074365][T27381] r4:00000000 [ 3698.074383][T27381] [<8162e17c>] (sock_alloc_file) from [<81631968>] (__sys_socket+0xd4/0x118) [ 3698.074442][T27381] r6:835ca7c0 r5:00000005 r4:00000000 [ 3698.074461][T27381] [<81631894>] (__sys_socket) from [<816319bc>] (sys_socket+0x10/0x14) [ 3698.074524][T27381] r6:00356310 r5:00000000 r4:00000000 [ 3698.074543][T27381] [<816319ac>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3698.074602][T27381] Exception stack(0xdfb89fa8 to 0xdfb89ff0) [ 3698.074642][T27381] 9fa0: 00000000 00000000 0000000a 00000002 00000000 00000000 [ 3698.074680][T27381] 9fc0: 00000000 00000000 00356310 00000119 003562d8 00000000 00000001 76f270dc [ 3698.074709][T27381] 9fe0: 76f26e88 76f26e78 00018fa0 00130a50 [ 3699.545428][T27388] FAULT_INJECTION: forcing a failure. [ 3699.545428][T27388] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3699.552482][T27388] CPU: 0 UID: 0 PID: 27388 Comm: syz.2.7724 Not tainted syzkaller #0 PREEMPT [ 3699.552633][T27388] Hardware name: ARM-Versatile Express [ 3699.552661][T27388] Call trace: [ 3699.552705][T27388] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3699.552853][T27388] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3699.552875][T27388] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3699.552929][T27388] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3699.552987][T27388] r7:00000000 r6:00000000 r5:84811880 r4:82afac00 [ 3699.553003][T27388] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3699.553055][T27388] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 3699.553112][T27388] r8:000002e4 r7:00000000 r6:e01e5ed8 r5:00000000 r4:003562e4 [ 3699.553129][T27388] [<809fdf04>] (should_fail) from [<803544f4>] (get_futex_key+0xa8/0x558) [ 3699.553178][T27388] [<8035444c>] (get_futex_key) from [<80358eec>] (futex_wake+0x70/0x25c) [ 3699.553240][T27388] r10:000000f0 r9:00131dd8 r8:e01e5ec8 r7:ffffffff r6:003562e4 r5:000f4240 [ 3699.553263][T27388] r4:00000002 [ 3699.553282][T27388] [<80358e7c>] (futex_wake) from [<80355998>] (do_futex+0x194/0x1d0) [ 3699.553344][T27388] r10:000000f0 r9:00000001 r8:84811880 r7:000f4240 r6:003562e4 r5:00000081 [ 3699.553366][T27388] r4:000f4240 [ 3699.553383][T27388] [<80355804>] (do_futex) from [<8035626c>] (sys_futex_time32+0x11c/0x1bc) [ 3699.553432][T27388] r4:00000000 [ 3699.553449][T27388] [<80356150>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3699.553515][T27388] Exception stack(0xe01e5fa8 to 0xe01e5ff0) [ 3699.553555][T27388] 5fa0: 00131dd8 ffffffff 003562e4 00000081 000f4240 00000000 [ 3699.553589][T27388] 5fc0: 00131dd8 ffffffff 76f277d4 000000f0 00340000 00000000 00000001 76f270dc [ 3699.553616][T27388] 5fe0: 76f26f38 76f26f28 00021c30 00130a50 [ 3699.553650][T27388] r9:84811880 r8:8020029c r7:000000f0 r6:76f277d4 r5:ffffffff r4:00131dd8 [ 3700.475061][T27391] FAULT_INJECTION: forcing a failure. [ 3700.475061][T27391] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3700.476496][T27391] CPU: 0 UID: 0 PID: 27391 Comm: syz.2.7725 Not tainted syzkaller #0 PREEMPT [ 3700.476606][T27391] Hardware name: ARM-Versatile Express [ 3700.476634][T27391] Call trace: [ 3700.476675][T27391] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3700.476783][T27391] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3700.476805][T27391] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3700.476863][T27391] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3700.476924][T27391] r7:00000001 r6:00000000 r5:844bb100 r4:82b1ac9c [ 3700.476941][T27391] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3700.476999][T27391] [<809fdce0>] (should_fail_ex) from [<80568ee4>] (should_fail_alloc_page+0x68/0x74) [ 3700.477068][T27391] r8:df9d5cc4 r7:00000001 r6:00000000 r5:00000cc0 r4:df9d5cd8 [ 3700.477086][T27391] [<80568e7c>] (should_fail_alloc_page) from [<8052d6f0>] (prepare_alloc_pages+0xf8/0x1b8) [ 3700.477142][T27391] [<8052d5f8>] (prepare_alloc_pages) from [<80536560>] (__alloc_frozen_pages_noprof+0xb0/0x1808) [ 3700.477208][T27391] r10:00000000 r9:df9d5e40 r8:844bb100 r7:864953c0 r6:00000000 r5:00000cc0 [ 3700.477229][T27391] r4:00000000 [ 3700.477245][T27391] [<805364b0>] (__alloc_frozen_pages_noprof) from [<80537cc8>] (__alloc_pages_noprof+0x10/0x60) [ 3700.477309][T27391] r10:fffff000 r9:df9d5e40 r8:00000000 r7:864953c0 r6:00000124 r5:00002000 [ 3700.477328][T27391] r4:00000000 [ 3700.477352][T27391] [<80537cb8>] (__alloc_pages_noprof) from [<816469cc>] (alloc_skb_with_frags+0x160/0x1f0) [ 3700.477415][T27391] [<8164686c>] (alloc_skb_with_frags) from [<81635bd4>] (sock_alloc_send_pskb+0x1f4/0x228) [ 3700.477484][T27391] r10:802c7394 r9:df9d5e40 r8:00000000 r7:8603c8d8 r6:df9d5dac r5:844bb100 [ 3700.477504][T27391] r4:8603c800 [ 3700.477520][T27391] [<816359e0>] (sock_alloc_send_pskb) from [<80de50b4>] (tun_get_user+0x1a0/0x1190) [ 3700.477592][T27391] r10:00000124 r9:df9d5e40 r8:00000042 r7:00000ebe r6:00000000 r5:df9d5ef0 [ 3700.477614][T27391] r4:85942700 [ 3700.477631][T27391] [<80de4f14>] (tun_get_user) from [<80de69fc>] (tun_chr_write_iter+0x60/0xc8) [ 3700.477695][T27391] r10:81d879ec r9:844bb100 r8:8603c800 r7:85942700 r6:00000000 r5:df9d5ef0 [ 3700.477718][T27391] r4:df9d5f08 [ 3700.477733][T27391] [<80de699c>] (tun_chr_write_iter) from [<805a1390>] (vfs_write+0x27c/0x42c) [ 3700.477797][T27391] r8:80de699c r7:df9d5f68 r6:20002900 r5:83880800 r4:00000fe2 [ 3700.477815][T27391] [<805a1114>] (vfs_write) from [<805a16b4>] (ksys_write+0x74/0xec) [ 3700.477883][T27391] r10:00000004 r9:844bb100 r8:8020029c r7:00000000 r6:00000056 r5:83880800 [ 3700.477903][T27391] r4:83880801 [ 3700.477919][T27391] [<805a1640>] (ksys_write) from [<805a173c>] (sys_write+0x10/0x14) [ 3700.477998][T27391] r7:00000004 r6:00000000 r5:00000000 r4:00000000 [ 3700.478016][T27391] [<805a172c>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3700.478066][T27391] Exception stack(0xdf9d5fa8 to 0xdf9d5ff0) [ 3700.478105][T27391] 5fa0: 00000000 00000000 000000c8 20002900 00000fe2 00000000 [ 3700.478140][T27391] 5fc0: 00000000 00000000 00000000 00000004 003562d8 00000000 00000001 76f270dc [ 3700.478167][T27391] 5fe0: 76f26e30 76f26e1c 0010bc74 00112858 [ 3705.923370][T27406] FAULT_INJECTION: forcing a failure. [ 3705.923370][T27406] name failslab, interval 1, probability 0, space 0, times 0 [ 3705.925124][T27406] CPU: 0 UID: 0 PID: 27406 Comm: syz.1.7731 Not tainted syzkaller #0 PREEMPT [ 3705.925249][T27406] Hardware name: ARM-Versatile Express [ 3705.925282][T27406] Call trace: [ 3705.925326][T27406] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3705.925435][T27406] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3705.925461][T27406] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3705.925516][T27406] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3705.925580][T27406] r7:844c4980 r6:00000000 r5:844c4980 r4:82b1ac48 [ 3705.925601][T27406] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3705.925656][T27406] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 3705.925725][T27406] r8:00000000 r7:844c4980 r6:805f8070 r5:00000cc0 r4:830bd240 [ 3705.925744][T27406] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 3705.925801][T27406] [<80546804>] (kmem_cache_alloc_noprof) from [<805f8070>] (copy_fs_struct+0x24/0x94) [ 3705.925871][T27406] r10:00000151 r9:844c4980 r8:8020029c r7:00000151 r6:00000000 r5:8614fc40 [ 3705.925892][T27406] r4:62040200 [ 3705.925907][T27406] [<805f804c>] (copy_fs_struct) from [<80250b70>] (ksys_unshare+0x134/0x430) [ 3705.926013][T27406] r7:00000151 r6:00000000 r5:844c4980 r4:62040200 [ 3705.926039][T27406] [<80250a3c>] (ksys_unshare) from [<80250e7c>] (sys_unshare+0x10/0x14) [ 3705.926109][T27406] r10:00000151 r9:844c4980 r8:8020029c r7:00000151 r6:00356308 r5:00000000 [ 3705.926131][T27406] r4:00000000 [ 3705.926149][T27406] [<80250e6c>] (sys_unshare) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3705.926201][T27406] Exception stack(0xdfa6dfa8 to 0xdfa6dff0) [ 3705.926245][T27406] dfa0: 00000000 00000000 62040200 00000000 00000000 00000000 [ 3705.926282][T27406] dfc0: 00000000 00000000 00356308 00000151 003562d8 00000000 00000001 76f300dc [ 3705.926347][T27406] dfe0: 76f2fe88 76f2fe78 00018fa0 00130a50 [ 3707.451898][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3711.958280][T27426] FAULT_INJECTION: forcing a failure. [ 3711.958280][T27426] name failslab, interval 1, probability 0, space 0, times 0 [ 3711.960147][T27426] CPU: 0 UID: 0 PID: 27426 Comm: syz.2.7739 Not tainted syzkaller #0 PREEMPT [ 3711.960264][T27426] Hardware name: ARM-Versatile Express [ 3711.960292][T27426] Call trace: [ 3711.960335][T27426] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3711.960455][T27426] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3711.960477][T27426] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3711.960531][T27426] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3711.960591][T27426] r7:84811880 r6:00000000 r5:84811880 r4:82b1ac48 [ 3711.960609][T27426] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3711.960666][T27426] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 3711.960735][T27426] r8:00000000 r7:84811880 r6:83001240 r5:00000dc0 r4:00000008 [ 3711.960754][T27426] [<80568de8>] (should_failslab) from [<80547834>] (__kmalloc_noprof+0xa8/0x3c8) [ 3711.960812][T27426] [<8054778c>] (__kmalloc_noprof) from [<807ea1c8>] (lsm_blob_alloc+0x28/0x3c) [ 3711.960885][T27426] r10:00000000 r9:00001a81 r8:84811880 r7:00000000 r6:00004000 r5:85fcfc00 [ 3711.960958][T27426] r4:85fcfc28 [ 3711.960980][T27426] [<807ea1a0>] (lsm_blob_alloc) from [<807f88e4>] (security_shm_alloc+0x28/0x1c8) [ 3711.961047][T27426] r5:85fcfc00 r4:85fcfc00 [ 3711.961064][T27426] [<807f88bc>] (security_shm_alloc) from [<807cc7c0>] (newseg+0xcc/0x33c) [ 3711.961119][T27426] r5:84a8ec00 r4:85fcfc00 [ 3711.961136][T27426] [<807cc6f4>] (newseg) from [<807c4d08>] (ipcget+0x5c/0x2e4) [ 3711.961205][T27426] r10:00000133 r9:84a8ed48 r8:8020029c r7:00000133 r6:84a8ec00 r5:81cd8280 [ 3711.961230][T27426] r4:dfb05f80 [ 3711.961248][T27426] [<807c4cac>] (ipcget) from [<807cdafc>] (sys_shmget+0x54/0x7c) [ 3711.961311][T27426] r10:00000133 r9:84811880 r8:8020029c r7:00000133 r6:00356314 r5:00000000 [ 3711.961332][T27426] r4:85cd7690 [ 3711.961350][T27426] [<807cdaa8>] (sys_shmget) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3711.961397][T27426] Exception stack(0xdfb05fa8 to 0xdfb05ff0) [ 3711.961444][T27426] 5fa0: 00000000 00000000 00000000 00004000 00001a81 20ffa000 [ 3711.961483][T27426] 5fc0: 00000000 00000000 00356314 00000133 003562d8 00000000 00000001 76f270dc [ 3711.961511][T27426] 5fe0: 76f26e88 76f26e78 00018fa0 00130a50 [ 3711.961539][T27426] r4:00000000 [ 3718.536151][T27443] FAULT_INJECTION: forcing a failure. [ 3718.536151][T27443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3718.538102][T27443] CPU: 0 UID: 0 PID: 27443 Comm: syz.1.7745 Not tainted syzkaller #0 PREEMPT [ 3718.538237][T27443] Hardware name: ARM-Versatile Express [ 3718.538264][T27443] Call trace: [ 3718.538307][T27443] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3718.538419][T27443] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3718.538441][T27443] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3718.538507][T27443] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3718.538563][T27443] r7:20000140 r6:00000000 r5:86608c40 r4:82b54788 [ 3718.538578][T27443] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3718.538626][T27443] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 3718.538678][T27443] r8:85fb0800 r7:20000140 r6:40187542 r5:85fb0800 r4:20000140 [ 3718.538694][T27443] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 3718.538734][T27443] [<809fdf1c>] (should_fail_usercopy) from [<80c53a30>] (udmabuf_ioctl+0x84/0x258) [ 3718.538791][T27443] [<80c539ac>] (udmabuf_ioctl) from [<805bdf78>] (sys_ioctl+0x244/0xb5c) [ 3718.538844][T27443] r6:40187542 r5:85fb0801 r4:00000000 [ 3718.538862][T27443] [<805bdd34>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3718.538912][T27443] Exception stack(0xdfcd1fa8 to 0xdfcd1ff0) [ 3718.538952][T27443] 1fa0: 00000000 00000000 00000003 40187542 20000140 00000000 [ 3718.538989][T27443] 1fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f300dc [ 3718.539015][T27443] 1fe0: 76f2fe88 76f2fe78 00018fa0 00130a50 [ 3718.539050][T27443] r10:00000036 r9:86608c40 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 3718.539078][T27443] r4:00000000 [ 3729.442105][ T28] audit: type=1400 audit(3729.340:570): avc: denied { mounton } for pid=27476 comm="syz.2.7756" path="/229/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 3729.810377][T27481] FAULT_INJECTION: forcing a failure. [ 3729.810377][T27481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3729.823216][T27481] CPU: 0 UID: 0 PID: 27481 Comm: syz.2.7757 Not tainted syzkaller #0 PREEMPT [ 3729.823385][T27481] Hardware name: ARM-Versatile Express [ 3729.823413][T27481] Call trace: [ 3729.823473][T27481] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3729.823579][T27481] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3729.823599][T27481] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3729.823650][T27481] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3729.823705][T27481] r7:00000012 r6:00000000 r5:86608c40 r4:82b54788 [ 3729.823720][T27481] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3729.823774][T27481] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 3729.823831][T27481] r8:00000011 r7:00000012 r6:00000011 r5:20000d52 r4:83986188 [ 3729.823846][T27481] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 3729.823890][T27481] [<809fdf1c>] (should_fail_usercopy) from [<8041cdc4>] (bpf_vlog_reverse_ubuf+0xd4/0x30c) [ 3729.823946][T27481] [<8041ccf0>] (bpf_vlog_reverse_ubuf) from [<8041db78>] (bpf_vlog_finalize+0xf4/0x114) [ 3729.824003][T27481] r10:85f39e80 r9:00000002 r8:df929dc4 r7:00000022 r6:df929d30 r5:83986188 [ 3729.824024][T27481] r4:00000001 [ 3729.824041][T27481] [<8041da84>] (bpf_vlog_finalize) from [<8041ef08>] (bpf_log_attr_finalize+0x3c/0xf4) [ 3729.824092][T27481] r7:00000000 r6:ffffffea r5:00000000 r4:df929e80 [ 3729.824107][T27481] [<8041eecc>] (bpf_log_attr_finalize) from [<80458bdc>] (btf_new_fd+0xb30/0x1838) [ 3729.824160][T27481] r6:ffffffea r5:00000000 r4:85e126c0 [ 3729.824175][T27481] [<804580ac>] (btf_new_fd) from [<803eb208>] (__sys_bpf+0x59c/0x219c) [ 3729.824236][T27481] r10:86608c40 r9:00000028 r8:00000000 r7:00000028 r6:df929e60 r5:00000000 [ 3729.824255][T27481] r4:00000000 [ 3729.824270][T27481] [<803eac6c>] (__sys_bpf) from [<803ed418>] (sys_bpf+0x50/0x6c) [ 3729.824329][T27481] r10:00000182 r9:86608c40 r8:8020029c r7:00000182 r6:00356310 r5:00000000 [ 3729.824348][T27481] r4:00000000 [ 3729.824362][T27481] [<803ed3c8>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3729.824405][T27481] Exception stack(0xdf929fa8 to 0xdf929ff0) [ 3729.824455][T27481] 9fa0: 00000000 00000000 00000012 20000d80 00000028 00000000 [ 3729.824488][T27481] 9fc0: 00000000 00000000 00356310 00000182 003562d8 00000000 00000001 76f270dc [ 3729.824512][T27481] 9fe0: 76f26e88 76f26e78 00018fa0 00130a50 [ 3731.420538][T27490] tmpfs: Bad value for 'huge' [ 3732.063215][T27495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27495 comm=syz.2.7763 [ 3734.182709][T27510] FAULT_INJECTION: forcing a failure. [ 3734.182709][T27510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3734.211670][T27510] CPU: 0 UID: 0 PID: 27510 Comm: syz.2.7770 Not tainted syzkaller #0 PREEMPT [ 3734.211811][T27510] Hardware name: ARM-Versatile Express [ 3734.211834][T27510] Call trace: [ 3734.211873][T27510] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3734.212022][T27510] r7:60000113 r6:60000113 r5:82336570 r4:00000000 [ 3734.212046][T27510] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3734.212100][T27510] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3734.212158][T27510] r7:0000001c r6:00000000 r5:83e36e40 r4:82b54788 [ 3734.212173][T27510] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3734.212224][T27510] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 3734.212280][T27510] r8:00000003 r7:0000001c r6:00000000 r5:00000000 r4:200011dc [ 3734.212298][T27510] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 3734.212346][T27510] [<809fdf1c>] (should_fail_usercopy) from [<8041ef68>] (bpf_log_attr_finalize+0x9c/0xf4) [ 3734.212396][T27510] [<8041eecc>] (bpf_log_attr_finalize) from [<80459530>] (btf_new_fd+0x1484/0x1838) [ 3734.212485][T27510] r6:00000000 r5:86140000 r4:85e19600 [ 3734.212503][T27510] [<804580ac>] (btf_new_fd) from [<803eb208>] (__sys_bpf+0x59c/0x219c) [ 3734.212567][T27510] r10:83e36e40 r9:00000028 r8:00000000 r7:00000028 r6:df929e60 r5:00000000 [ 3734.212585][T27510] r4:00000000 [ 3734.212599][T27510] [<803eac6c>] (__sys_bpf) from [<803ed418>] (sys_bpf+0x50/0x6c) [ 3734.212656][T27510] r10:00000182 r9:83e36e40 r8:8020029c r7:00000182 r6:00356310 r5:00000000 [ 3734.212674][T27510] r4:00000000 [ 3734.212688][T27510] [<803ed3c8>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3734.212730][T27510] Exception stack(0xdf929fa8 to 0xdf929ff0) [ 3734.212766][T27510] 9fa0: 00000000 00000000 00000012 200011c0 00000028 00000000 [ 3734.212801][T27510] 9fc0: 00000000 00000000 00356310 00000182 003562d8 00000000 00000001 76f270dc [ 3734.212828][T27510] 9fe0: 76f26e88 76f26e78 00018fa0 00130a50 [ 3735.517373][T27521] FAULT_INJECTION: forcing a failure. [ 3735.517373][T27521] name failslab, interval 1, probability 0, space 0, times 0 [ 3735.519191][T27521] CPU: 0 UID: 0 PID: 27521 Comm: syz.1.7772 Not tainted syzkaller #0 PREEMPT [ 3735.519310][T27521] Hardware name: ARM-Versatile Express [ 3735.519342][T27521] Call trace: [ 3735.519388][T27521] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3735.519509][T27521] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3735.519532][T27521] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3735.519593][T27521] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3735.519659][T27521] r7:00001000 r6:00000000 r5:83310000 r4:82b1ac48 [ 3735.519678][T27521] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3735.519741][T27521] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 3735.519819][T27521] r8:83310000 r7:00001000 r6:805d8c3c r5:00000cc0 r4:830016c0 [ 3735.519839][T27521] [<80568de8>] (should_failslab) from [<805488cc>] (__kmalloc_cache_noprof+0x58/0x338) [ 3735.519903][T27521] [<80548874>] (__kmalloc_cache_noprof) from [<805d8c3c>] (sys_mount+0x94/0x260) [ 3735.519990][T27521] r10:00000015 r9:83310000 r8:8020029c r7:00000000 r6:850e72c0 r5:200000c0 [ 3735.520015][T27521] r4:200000c0 [ 3735.520048][T27521] [<805d8ba8>] (sys_mount) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3735.520109][T27521] Exception stack(0xdfce5fa8 to 0xdfce5ff0) [ 3735.520151][T27521] 5fa0: 200000c0 00000000 00000000 00000000 20000080 00004480 [ 3735.520191][T27521] 5fc0: 200000c0 00000000 00356318 00000015 003562d8 00000000 00000001 76f300dc [ 3735.520222][T27521] 5fe0: 76f2fe88 76f2fe78 00018fa0 00130a50 [ 3735.520262][T27521] r10:00000015 r9:83310000 r8:8020029c r7:00000015 r6:00356318 r5:00000000 [ 3735.520283][T27521] r4:200000c0 [ 3737.706456][T27543] netlink: 316 bytes leftover after parsing attributes in process `syz.1.7781'. [ 3738.435455][T27547] FAULT_INJECTION: forcing a failure. [ 3738.435455][T27547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3738.436988][T27547] CPU: 0 UID: 0 PID: 27547 Comm: syz.1.7784 Not tainted syzkaller #0 PREEMPT [ 3738.437091][T27547] Hardware name: ARM-Versatile Express [ 3738.437115][T27547] Call trace: [ 3738.437155][T27547] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3738.437258][T27547] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3738.437278][T27547] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3738.437329][T27547] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3738.437384][T27547] r7:f472f813 r6:00000000 r5:840fb100 r4:82b54788 [ 3738.437399][T27547] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3738.437454][T27547] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 3738.437510][T27547] r8:e01fdf6c r7:f472f813 r6:00000008 r5:00000000 r4:200000c0 [ 3738.437527][T27547] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 3738.437572][T27547] [<809fdf1c>] (should_fail_usercopy) from [<802677dc>] (sys_rt_sigprocmask+0x60/0x188) [ 3738.437624][T27547] [<8026777c>] (sys_rt_sigprocmask) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3738.437676][T27547] Exception stack(0xe01fdfa8 to 0xe01fdff0) [ 3738.437716][T27547] dfa0: 00000000 00000000 f472f813 200000c0 00000000 00000008 [ 3738.437751][T27547] dfc0: 00000000 00000000 00356314 000000af 003562d8 00000000 00000001 76f300dc [ 3738.437778][T27547] dfe0: 76f2fe88 76f2fe78 00018fa0 00130a50 [ 3738.437812][T27547] r9:840fb100 r8:8020029c r7:000000af r6:00356314 r5:00000000 r4:00000000 [ 3739.384882][T27549] device-mapper: ioctl: Empty message received. [ 3744.879591][ T28] audit: type=1400 audit(3744.780:571): avc: denied { search } for pid=27576 comm="syz.2.7794" name="/" dev="configfs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3744.902074][ T28] audit: type=1400 audit(3744.800:572): avc: denied { search } for pid=27576 comm="syz.2.7794" name="usb_gadget" dev="configfs" ino=1245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3744.934191][ T28] audit: type=1400 audit(3744.840:573): avc: denied { write search } for pid=27576 comm="syz.2.7794" name="usb_gadget" dev="configfs" ino=1245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3744.939077][ T28] audit: type=1400 audit(3744.840:574): avc: denied { add_name } for pid=27576 comm="syz.2.7794" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3744.944602][ T28] audit: type=1400 audit(3744.840:575): avc: denied { create } for pid=27576 comm="syz.2.7794" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 3745.012597][ T28] audit: type=1400 audit(3744.920:576): avc: denied { search } for pid=27576 comm="syz.2.7794" name="/" dev="configfs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3745.031481][ T28] audit: type=1400 audit(3744.930:577): avc: denied { search } for pid=27576 comm="syz.2.7794" name="usb_gadget" dev="configfs" ino=1245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3745.031727][ T28] audit: type=1400 audit(3744.930:578): avc: denied { search } for pid=27576 comm="syz.2.7794" name="g1" dev="configfs" ino=63217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3745.031841][ T28] audit: type=1400 audit(3744.930:579): avc: denied { search } for pid=27576 comm="syz.2.7794" name="configs" dev="configfs" ino=63219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3745.031942][ T28] audit: type=1400 audit(3744.930:580): avc: denied { write search } for pid=27576 comm="syz.2.7794" name="configs" dev="configfs" ino=63219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3745.751588][T27294] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 3745.904148][T27294] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 3745.911882][T27294] usb 1-1: Dual-Role OTG device on HNP port [ 3745.913636][T27294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3745.954645][T27294] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 3759.851843][T27627] FAULT_INJECTION: forcing a failure. [ 3759.851843][T27627] name failslab, interval 1, probability 0, space 0, times 0 [ 3759.852832][T27627] CPU: 0 UID: 0 PID: 27627 Comm: syz.1.7802 Not tainted syzkaller #0 PREEMPT [ 3759.852899][T27627] Hardware name: ARM-Versatile Express [ 3759.852912][T27627] Call trace: [ 3759.852942][T27627] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3759.852999][T27627] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3759.853008][T27627] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3759.853034][T27627] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3759.853063][T27627] r7:848124c0 r6:00000000 r5:848124c0 r4:82b1ac48 [ 3759.853070][T27627] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3759.853097][T27627] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 3759.853131][T27627] r8:00000000 r7:848124c0 r6:8024e544 r5:00000cc0 r4:83002e40 [ 3759.853140][T27627] [<80568de8>] (should_failslab) from [<80547028>] (kmem_cache_alloc_node_noprof+0x60/0x3ec) [ 3759.853168][T27627] [<80546fc8>] (kmem_cache_alloc_node_noprof) from [<8024e544>] (copy_process+0x238/0x1d78) [ 3759.853202][T27627] r10:00000000 r9:802501dc r8:00000000 r7:848124c0 r6:ffffffff r5:dfb29f30 [ 3759.853212][T27627] r4:00000000 [ 3759.853219][T27627] [<8024e30c>] (copy_process) from [<802501dc>] (kernel_clone+0xc4/0x43c) [ 3759.853251][T27627] r10:848124c0 r9:848124c0 r8:00000000 r7:00000000 r6:00000000 r5:dfb29f30 [ 3759.853261][T27627] r4:00000000 [ 3759.853268][T27627] [<80250118>] (kernel_clone) from [<8025090c>] (sys_clone+0x78/0x9c) [ 3759.853299][T27627] r10:00000078 r9:848124c0 r8:8020029c r7:00000000 r6:00000000 r5:00000000 [ 3759.853309][T27627] r4:00000000 [ 3759.853316][T27627] [<80250894>] (sys_clone) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3759.853339][T27627] Exception stack(0xdfb29fa8 to 0xdfb29ff0) [ 3759.853360][T27627] 9fa0: 00000000 00000000 00000000 00000000 00000000 00000000 [ 3759.853377][T27627] 9fc0: 00000000 00000000 00000000 00000078 003562d8 00000000 00000001 76f300dc [ 3759.853390][T27627] 9fe0: 76f2fe60 76f2fe50 000194c8 00130a50 [ 3759.853404][T27627] r7:00000078 r6:00000000 r5:00000000 r4:00000000 [ 3761.174034][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 3761.174352][ T28] audit: type=1400 audit(3761.080:603): avc: denied { name_bind } for pid=27630 comm="syz.1.7804" src=18696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 3776.457562][ T28] audit: type=1400 audit(3776.360:604): avc: denied { mounton } for pid=27672 comm="syz.1.7821" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 3776.483170][T27673] tmpfs: Unsupported parameter 'mpol' [ 3781.692168][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3812.825145][T27718] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 3812.832262][T27718] device-mapper: raid: Choosing default region size of 4MiB [ 3812.992852][T27718] device-mapper: table: 248:1: raid: RAID device lookup failure (-ENOENT) [ 3813.002488][T27718] device-mapper: ioctl: error adding target to table [ 3813.593731][T27723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3813.595057][T27723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3833.907899][T27731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3833.938484][T27731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3836.654584][T27731] hsr_slave_0: entered promiscuous mode [ 3836.663950][T27731] hsr_slave_1: entered promiscuous mode [ 3836.673464][T27731] debugfs: 'hsr0' already exists in 'hsr' [ 3836.676535][T27731] Cannot create hsr debugfs directory [ 3836.796056][T27937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3836.799493][T27937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3837.537774][T27937] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7843'. [ 3837.904249][T27731] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3837.923376][T27731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3837.927374][T27731] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3837.964340][T27731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3837.974399][T27731] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3838.015975][T27731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3838.041906][T27731] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3838.063635][T27731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3840.911935][T27731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3851.354821][ T1277] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3851.448142][ T1277] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3851.565741][ T1277] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3851.675696][ T1277] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3851.937325][T27731] veth0_vlan: entered promiscuous mode [ 3852.330564][ T1277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3852.355824][ T1277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3852.373794][ T1277] bond0 (unregistering): Released all slaves [ 3852.403927][T27731] veth1_vlan: entered promiscuous mode [ 3852.482524][ T1277] hsr_slave_0: left promiscuous mode [ 3852.484761][ T1277] hsr_slave_1: left promiscuous mode [ 3852.592285][ T1277] veth1_macvtap: left promiscuous mode [ 3852.592718][ T1277] veth0_macvtap: left promiscuous mode [ 3852.593303][ T1277] veth1_vlan: left promiscuous mode [ 3852.593645][ T1277] veth0_vlan: left promiscuous mode [ 3854.059972][T27731] veth0_macvtap: entered promiscuous mode [ 3854.097663][T27731] veth1_macvtap: entered promiscuous mode [ 3854.532141][T27709] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3854.532385][T27709] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3854.532615][T27709] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3854.532744][T27709] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3855.393421][T28101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7838'. [ 3855.425180][T28101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7838'. [ 3855.721712][ T28] audit: type=1400 audit(3855.620:605): avc: denied { write } for pid=28099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3855.751716][ T28] audit: type=1400 audit(3855.640:606): avc: denied { create } for pid=28099 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3855.752155][ T28] audit: type=1400 audit(3855.640:607): avc: denied { write open } for pid=28099 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.link" dev="tmpfs" ino=82 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3855.752494][ T28] audit: type=1400 audit(3855.640:608): avc: denied { append } for pid=28099 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" dev="tmpfs" ino=82 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3855.834494][ T28] audit: type=1400 audit(3855.690:609): avc: denied { getattr } for pid=28099 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3856.459143][ T28] audit: type=1400 audit(3856.360:610): avc: denied { read } for pid=28106 comm="cmp" name="resolv.conf" dev="tmpfs" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3856.971718][ T28] audit: type=1400 audit(3856.860:611): avc: denied { write } for pid=28109 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3857.003037][ T28] audit: type=1400 audit(3856.880:612): avc: denied { unlink } for pid=28109 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=82 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3857.440238][ T2962] 8021q: adding VLAN 0 to HW filter on device eth5 [ 3859.871795][ T28] audit: type=1400 audit(3859.770:613): avc: denied { write } for pid=28122 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3860.931750][ T28] audit: type=1400 audit(3860.830:614): avc: denied { write } for pid=28130 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3861.513803][ T2962] 8021q: adding VLAN 0 to HW filter on device eth6 [ 3862.684185][T28148] FAULT_INJECTION: forcing a failure. [ 3862.684185][T28148] name failslab, interval 1, probability 0, space 0, times 0 [ 3862.685844][T28148] CPU: 0 UID: 0 PID: 28148 Comm: syz.3.7870 Tainted: G L syzkaller #0 PREEMPT [ 3862.686077][T28148] Tainted: [L]=SOFTLOCKUP [ 3862.686113][T28148] Hardware name: ARM-Versatile Express [ 3862.686140][T28148] Call trace: [ 3862.686182][T28148] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3862.686291][T28148] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3862.686311][T28148] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3862.686368][T28148] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3862.686431][T28148] r7:86530c40 r6:00000000 r5:86530c40 r4:82b1ac48 [ 3862.686457][T28148] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3862.686518][T28148] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 3862.686591][T28148] r8:00000000 r7:86530c40 r6:8162ec88 r5:00000cc0 r4:830e5f00 [ 3862.686611][T28148] [<80568de8>] (should_failslab) from [<80546c44>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 3862.686711][T28148] [<80546be4>] (kmem_cache_alloc_lru_noprof) from [<8162ec88>] (sock_alloc_inode+0x24/0x84) [ 3862.686793][T28148] r10:00000000 r9:85bd9000 r8:00000000 r7:00000000 r6:81e615c0 r5:83394800 [ 3862.686816][T28148] r4:00000001 [ 3862.686833][T28148] [<8162ec64>] (sock_alloc_inode) from [<805cb844>] (alloc_inode+0x24/0xd0) [ 3862.686896][T28148] r5:83394800 r4:00000001 [ 3862.686914][T28148] [<805cb820>] (alloc_inode) from [<8162e538>] (sock_alloc+0x20/0x78) [ 3862.686976][T28148] r7:00000000 r6:00000000 r5:00000001 r4:00000001 [ 3862.686995][T28148] [<8162e518>] (sock_alloc) from [<8162e73c>] (__sock_create+0x80/0x22c) [ 3862.687049][T28148] r5:00000001 r4:00000001 [ 3862.687066][T28148] [<8162e6bc>] (__sock_create) from [<81631b00>] (__sys_socketpair+0x140/0x2ac) [ 3862.687133][T28148] r10:00000000 r9:86530c40 r8:00000000 r7:00000000 r6:00000001 r5:00000001 [ 3862.687158][T28148] r4:00000000 [ 3862.687174][T28148] [<816319c0>] (__sys_socketpair) from [<81631c7c>] (sys_socketpair+0x10/0x14) [ 3862.687242][T28148] r10:00000120 r9:86530c40 r8:8020029c r7:00000120 r6:00356314 r5:00000000 [ 3862.687263][T28148] r4:00000000 [ 3862.687280][T28148] [<81631c6c>] (sys_socketpair) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3862.687330][T28148] Exception stack(0xdfb25fa8 to 0xdfb25ff0) [ 3862.687371][T28148] 5fa0: 00000000 00000000 00000001 00000001 00000000 20000040 [ 3862.687409][T28148] 5fc0: 00000000 00000000 00356314 00000120 003562d8 00000000 00000001 76fa80dc [ 3862.687438][T28148] 5fe0: 76fa7e88 76fa7e78 00018fa0 00130a50 [ 3862.723911][T28148] socket: no more sockets [ 3863.210773][T28150] pimreg: entered allmulticast mode [ 3863.389174][ T28] audit: type=1400 audit(3863.290:615): avc: denied { write } for pid=28147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3863.467474][T28155] comedi: valid board names for 8255 driver are: [ 3863.468575][T28155] 8255 [ 3863.501638][T28155] comedi: valid board names for vmk80xx driver are: [ 3863.504085][T28155] vmk80xx [ 3863.505663][T28155] comedi: valid board names for usbduxsigma driver are: [ 3863.507561][T28155] usbduxsigma [ 3863.510184][T28155] comedi: valid board names for usbduxfast driver are: [ 3863.513393][T28155] usbduxfast [ 3863.515564][T28155] comedi: valid board names for usbdux driver are: [ 3863.517663][T28155] usbdux [ 3863.519250][T28155] comedi: valid board names for ni6501 driver are: [ 3863.532455][T28155] ni6501 [ 3863.532888][T28155] comedi: valid board names for dt9812 driver are: [ 3863.533075][T28155] dt9812 [ 3863.533214][T28155] comedi: valid board names for ni_labpc_cs driver are: [ 3863.533359][T28155] ni_labpc_cs [ 3863.533500][T28155] comedi: valid board names for ni_daq_700 driver are: [ 3863.533643][T28155] ni_daq_700 [ 3863.533781][T28155] comedi: valid board names for labpc_pci driver are: [ 3863.533922][T28155] labpc_pci [ 3863.534087][T28155] comedi: valid board names for adl_pci9118 driver are: [ 3863.534209][T28155] pci9118dg [ 3863.534308][T28155] pci9118hg [ 3863.534383][T28155] pci9118hr [ 3863.534454][T28155] comedi: valid board names for 8255_pci driver are: [ 3863.534576][T28155] 8255_pci [ 3863.534712][T28155] comedi: valid board names for comedi_parport driver are: [ 3863.534853][T28155] comedi_parport [ 3863.534934][T28155] comedi: valid board names for comedi_test driver are: [ 3863.535022][T28155] comedi_test [ 3863.535089][T28155] comedi: valid board names for comedi_bond driver are: [ 3863.535155][T28155] comedi_bond [ 3864.202017][ T28] audit: type=1400 audit(3864.090:616): avc: denied { write } for pid=28159 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3864.813643][ T2962] 8021q: adding VLAN 0 to HW filter on device eth7 [ 3866.856853][ T28] audit: type=1400 audit(3866.750:617): avc: denied { write } for pid=28175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3867.753827][ T28] audit: type=1400 audit(3867.650:618): avc: denied { write } for pid=28184 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3868.285024][ T2962] 8021q: adding VLAN 0 to HW filter on device eth8 [ 3873.093292][T28221] FAULT_INJECTION: forcing a failure. [ 3873.093292][T28221] name failslab, interval 1, probability 0, space 0, times 0 [ 3873.095614][T28221] CPU: 0 UID: 0 PID: 28221 Comm: syz.3.7889 Tainted: G L syzkaller #0 PREEMPT [ 3873.095750][T28221] Tainted: [L]=SOFTLOCKUP [ 3873.095771][T28221] Hardware name: ARM-Versatile Express [ 3873.095796][T28221] Call trace: [ 3873.095839][T28221] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3873.095946][T28221] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3873.095966][T28221] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3873.096036][T28221] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3873.096102][T28221] r7:86530c40 r6:00000000 r5:86530c40 r4:82b1ac48 [ 3873.096120][T28221] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3873.096179][T28221] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 3873.096252][T28221] r8:00000000 r7:86530c40 r6:8162ec88 r5:00000cc0 r4:830e5f00 [ 3873.096272][T28221] [<80568de8>] (should_failslab) from [<80546c44>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 3873.096331][T28221] [<80546be4>] (kmem_cache_alloc_lru_noprof) from [<8162ec88>] (sock_alloc_inode+0x24/0x84) [ 3873.096420][T28221] r10:00000000 r9:85bd9000 r8:00000000 r7:00000000 r6:81e615c0 r5:83394800 [ 3873.096445][T28221] r4:00000001 [ 3873.096463][T28221] [<8162ec64>] (sock_alloc_inode) from [<805cb844>] (alloc_inode+0x24/0xd0) [ 3873.096525][T28221] r5:83394800 r4:00000001 [ 3873.096542][T28221] [<805cb820>] (alloc_inode) from [<8162e538>] (sock_alloc+0x20/0x78) [ 3873.096596][T28221] r7:00000000 r6:00000000 r5:00000001 r4:00000001 [ 3873.096613][T28221] [<8162e518>] (sock_alloc) from [<8162e73c>] (__sock_create+0x80/0x22c) [ 3873.096662][T28221] r5:00000001 r4:00000001 [ 3873.096678][T28221] [<8162e6bc>] (__sock_create) from [<81631b00>] (__sys_socketpair+0x140/0x2ac) [ 3873.096743][T28221] r10:00000000 r9:86530c40 r8:00000000 r7:00000000 r6:00000001 r5:00000001 [ 3873.096763][T28221] r4:00000000 [ 3873.096778][T28221] [<816319c0>] (__sys_socketpair) from [<81631c7c>] (sys_socketpair+0x10/0x14) [ 3873.096835][T28221] r10:00000120 r9:86530c40 r8:8020029c r7:00000120 r6:00356314 r5:00000000 [ 3873.096854][T28221] r4:00000000 [ 3873.096868][T28221] [<81631c6c>] (sys_socketpair) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3873.096911][T28221] Exception stack(0xe00e9fa8 to 0xe00e9ff0) [ 3873.096944][T28221] 9fa0: 00000000 00000000 00000001 00000001 00000000 20000040 [ 3873.096987][T28221] 9fc0: 00000000 00000000 00356314 00000120 003562d8 00000000 00000001 76fa80dc [ 3873.097014][T28221] 9fe0: 76fa7e88 76fa7e78 00018fa0 00130a50 [ 3873.123334][T28221] socket: no more sockets [ 3873.654029][T20307] input: syz0 as /devices/virtual/misc/uhid/0005:0009:0306.000A/input/input55 [ 3873.662479][T28227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3873.663346][T28227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3873.666761][T20307] hid-generic 0005:0009:0306.000A: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 3874.061746][T28246] FAULT_INJECTION: forcing a failure. [ 3874.061746][T28246] name failslab, interval 1, probability 0, space 0, times 0 [ 3874.064766][T28246] CPU: 0 UID: 0 PID: 28246 Comm: syz.3.7894 Tainted: G L syzkaller #0 PREEMPT [ 3874.064885][T28246] Tainted: [L]=SOFTLOCKUP [ 3874.064905][T28246] Hardware name: ARM-Versatile Express [ 3874.064929][T28246] Call trace: [ 3874.064973][T28246] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3874.065055][T28246] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3874.065064][T28246] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3874.065091][T28246] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3874.065121][T28246] r7:844c0000 r6:00000000 r5:844c0000 r4:82b1ac48 [ 3874.065129][T28246] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3874.065223][T28246] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 3874.065265][T28246] r8:00000000 r7:844c0000 r6:8162ec88 r5:00000cc0 r4:830e5f00 [ 3874.065273][T28246] [<80568de8>] (should_failslab) from [<80546c44>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 3874.065301][T28246] [<80546be4>] (kmem_cache_alloc_lru_noprof) from [<8162ec88>] (sock_alloc_inode+0x24/0x84) [ 3874.065337][T28246] r10:00000000 r9:85bd9000 r8:00000000 r7:00000000 r6:81e615c0 r5:83394800 [ 3874.065347][T28246] r4:00000001 [ 3874.065355][T28246] [<8162ec64>] (sock_alloc_inode) from [<805cb844>] (alloc_inode+0x24/0xd0) [ 3874.065383][T28246] r5:83394800 r4:00000001 [ 3874.065391][T28246] [<805cb820>] (alloc_inode) from [<8162e538>] (sock_alloc+0x20/0x78) [ 3874.065418][T28246] r7:00000000 r6:00000000 r5:00000001 r4:00000001 [ 3874.065426][T28246] [<8162e518>] (sock_alloc) from [<8162e73c>] (__sock_create+0x80/0x22c) [ 3874.065450][T28246] r5:00000001 r4:00000001 [ 3874.065457][T28246] [<8162e6bc>] (__sock_create) from [<81631b00>] (__sys_socketpair+0x140/0x2ac) [ 3874.065488][T28246] r10:00000000 r9:844c0000 r8:00000000 r7:00000000 r6:00000001 r5:00000001 [ 3874.065497][T28246] r4:00000000 [ 3874.065505][T28246] [<816319c0>] (__sys_socketpair) from [<81631c7c>] (sys_socketpair+0x10/0x14) [ 3874.065539][T28246] r10:00000120 r9:844c0000 r8:8020029c r7:00000120 r6:00356314 r5:00000000 [ 3874.065549][T28246] r4:00000000 [ 3874.065557][T28246] [<81631c6c>] (sys_socketpair) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3874.065581][T28246] Exception stack(0xe4311fa8 to 0xe4311ff0) [ 3874.065601][T28246] 1fa0: 00000000 00000000 00000001 00000001 00000000 20000040 [ 3874.065618][T28246] 1fc0: 00000000 00000000 00356314 00000120 003562d8 00000000 00000001 76fa80dc [ 3874.065631][T28246] 1fe0: 76fa7e88 76fa7e78 00018fa0 00130a50 [ 3874.086312][T28246] socket: no more sockets [ 3875.058782][ T28] audit: type=1400 audit(3874.960:619): avc: denied { create } for pid=28252 comm="syz.3.7896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 3875.092043][ T28] audit: type=1400 audit(3874.990:620): avc: denied { ioctl } for pid=28252 comm="syz.3.7896" path="socket:[64739]" dev="sockfs" ino=64739 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 3875.188016][T28253] syzkaller1: entered promiscuous mode [ 3875.189253][T28253] syzkaller1: entered allmulticast mode [ 3878.852803][T28284] block nbd3: Device being setup by another task [ 3879.339702][ T28] audit: type=1400 audit(3879.240:621): avc: denied { bind } for pid=28289 comm="syz.2.7907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3879.348402][ T28] audit: type=1400 audit(3879.250:622): avc: denied { listen } for pid=28289 comm="syz.2.7907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3879.729989][T28276] block nbd3: shutting down sockets [ 3880.232153][ T28] audit: type=1400 audit(3880.130:623): avc: denied { write } for pid=28292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3881.094919][ T28] audit: type=1400 audit(3881.000:624): avc: denied { write } for pid=28302 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3882.452233][ T28] audit: type=1400 audit(3882.340:625): avc: denied { write } for pid=28312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3883.437010][ T28] audit: type=1400 audit(3883.330:626): avc: denied { write } for pid=28323 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3884.605072][T28341] ubi0: attaching mtd1 [ 3884.606038][T28341] ubi0 error: ubi_attach_mtd_dev: bad write buffer size 0 for 1 min. I/O unit [ 3885.148053][ T28] audit: type=1400 audit(3885.050:627): avc: denied { write } for pid=28340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3886.195583][ T28] audit: type=1400 audit(3886.090:628): avc: denied { write } for pid=28346 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3887.449882][ T28] audit: type=1400 audit(3887.340:629): avc: denied { write } for pid=28351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3888.247397][ T28] audit: type=1400 audit(3888.140:630): avc: denied { write } for pid=28357 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3889.147579][T28371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3889.155061][T28371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3889.589452][T28377] pimreg: left allmulticast mode [ 3889.906831][ T28] audit: type=1400 audit(3889.810:631): avc: denied { view } for pid=28381 comm="syz.3.7927" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 3890.877991][T28394] FAULT_INJECTION: forcing a failure. [ 3890.877991][T28394] name failslab, interval 1, probability 0, space 0, times 0 [ 3890.882000][T28394] CPU: 0 UID: 0 PID: 28394 Comm: syz.3.7933 Tainted: G L syzkaller #0 PREEMPT [ 3890.882177][T28394] Tainted: [L]=SOFTLOCKUP [ 3890.882195][T28394] Hardware name: ARM-Versatile Express [ 3890.882218][T28394] Call trace: [ 3890.882259][T28394] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3890.882368][T28394] r7:60000113 r6:60000113 r5:82336570 r4:00000000 [ 3890.882389][T28394] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3890.882442][T28394] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3890.882501][T28394] r7:0000001c r6:00000000 r5:83e40000 r4:82b1ac48 [ 3890.882517][T28394] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3890.882571][T28394] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 3890.882691][T28394] r8:83e40000 r7:0000001c r6:80665f68 r5:00000dc0 r4:83001240 [ 3890.882714][T28394] [<80568de8>] (should_failslab) from [<805488cc>] (__kmalloc_cache_noprof+0x58/0x338) [ 3890.882775][T28394] [<80548874>] (__kmalloc_cache_noprof) from [<80665f68>] (proc_fill_super+0x30/0x2e0) [ 3890.882850][T28394] r10:86113f00 r9:83309c80 r8:86113f01 r7:83309c80 r6:8956fd00 r5:83309c80 [ 3890.882884][T28394] r4:85bcd000 [ 3890.882904][T28394] [<80665f38>] (proc_fill_super) from [<805a79c8>] (get_tree_nodev+0x60/0x90) [ 3890.882979][T28394] r9:83309c80 r8:86113f01 r7:80665f38 r6:00000000 r5:83309c80 r4:85bcd000 [ 3890.883001][T28394] [<805a7968>] (get_tree_nodev) from [<80664fe0>] (proc_get_tree+0x18/0x1c) [ 3890.883072][T28394] r7:00000000 r6:83309c84 r5:83309c80 r4:00000000 [ 3890.883092][T28394] [<80664fc8>] (proc_get_tree) from [<805a3bb0>] (vfs_get_tree+0x2c/0x118) [ 3890.883142][T28394] [<805a3b84>] (vfs_get_tree) from [<805fc21c>] (vfs_cmd_create+0x54/0xb8) [ 3890.883201][T28394] r6:83309c84 r5:83309c80 r4:00000000 [ 3890.883219][T28394] [<805fc1c8>] (vfs_cmd_create) from [<805fc988>] (sys_fsconfig+0x440/0x514) [ 3890.883282][T28394] r7:00000000 r6:83309c84 r5:00000000 r4:00000006 [ 3890.883300][T28394] [<805fc548>] (sys_fsconfig) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3890.883349][T28394] Exception stack(0xea801fa8 to 0xea801ff0) [ 3890.883389][T28394] 1fa0: 00000000 00000000 00000004 00000006 00000000 00000000 [ 3890.883424][T28394] 1fc0: 00000000 00000000 00356318 000001af 003562d8 00000000 00000001 76fa80dc [ 3890.883451][T28394] 1fe0: 76fa7e88 76fa7e78 00018fa0 00130a50 [ 3890.883483][T28394] r10:000001af r9:83e40000 r8:8020029c r7:000001af r6:00356318 r5:00000000 [ 3890.883504][T28394] r4:00000000 [ 3893.432835][ T28] audit: type=1400 audit(3893.340:632): avc: denied { load_policy } for pid=28395 comm="syz.3.7934" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 3893.435309][T28396] SELinux: policydb string length 0 does not match expected length 8 [ 3893.437765][T28396] SELinux: failed to load policy [ 3896.574580][T28415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3896.577339][T28415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3904.742405][T28435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3904.744239][T28435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3907.734610][ T28] audit: type=1400 audit(3907.640:633): avc: denied { setopt } for pid=28457 comm="syz.2.7956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3908.050513][T28460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3908.062656][T28460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3908.312214][T28464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7958'. [ 3909.506687][T28474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3909.512408][T28474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3910.583054][T28485] binder: 28484:28485 ioctl 4018620d 0 returned -22 [ 3910.638713][T28485] binder: 28484:28485 ioctl c0306201 20000040 returned -22 [ 3910.648402][T28485] binder: 28484:28485 ioctl c0306201 20000640 returned -22 [ 3910.835891][T28487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3910.837618][T28487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3912.341632][T28500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3912.343321][T28500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3912.712649][T28507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3912.713555][T28507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3913.242194][T28515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3913.243298][T28515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3914.058095][T28525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3914.060780][T28525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3914.072639][T28526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3914.073612][T28526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3914.080882][T28525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7979'. [ 3914.452146][T28532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7982'. [ 3914.583055][T28534] usb usb1: usbfs: process 28534 (syz.3.7983) did not claim interface 12 before use [ 3914.663394][T28536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3914.664418][T28536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3915.254390][T28545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7988'. [ 3915.554011][T28550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3915.567767][T28550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3915.954023][T28556] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 3916.610736][T28560] syzkaller0: entered promiscuous mode [ 3916.620589][T28560] syzkaller0: entered allmulticast mode [ 3919.084342][ T28] audit: type=1400 audit(3918.970:634): avc: denied { associate } for pid=28582 comm="syz.2.7997" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 3919.105954][ T28] audit: type=1400 audit(3919.010:635): avc: denied { mounton } for pid=28577 comm="syz.2.7997" path="/proc/815/task" dev="proc" ino=65559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 3921.628815][ T28] audit: type=1400 audit(3921.530:636): avc: denied { setopt } for pid=28608 comm="syz.2.8009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 3923.471786][ T28] audit: type=1400 audit(3923.370:637): avc: denied { write } for pid=28625 comm="syz.2.8017" name="c.1" dev="configfs" ino=63223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3923.850390][T28621] virtio_blk virtio3: 1/0/0 default/read/poll queues [ 3923.895343][T28621] virtio_blk virtio3: [vdb] 262144 512-byte logical blocks (134 MB/128 MiB) [ 3925.016971][ T28] audit: type=1400 audit(3924.920:638): avc: denied { write } for pid=28643 comm="syz.3.8022" name="functions" dev="configfs" ino=63218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3925.051673][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3926.085324][T28658] misc userio: The device must be registered before sending interrupts [ 3926.896288][T28667] comedi: valid board names for 8255 driver are: [ 3926.897495][T28667] 8255 [ 3926.900854][T28667] comedi: valid board names for vmk80xx driver are: [ 3926.902635][T28667] vmk80xx [ 3926.926793][T28667] comedi: valid board names for usbduxsigma driver are: [ 3926.930108][T28667] usbduxsigma [ 3926.933597][T28667] comedi: valid board names for usbduxfast driver are: [ 3926.945199][T28667] usbduxfast [ 3926.952952][T28667] comedi: valid board names for usbdux driver are: [ 3926.955938][T28667] usbdux [ 3926.958361][T28667] comedi: valid board names for ni6501 driver are: [ 3926.961788][T28667] ni6501 [ 3926.988549][T28667] comedi: valid board names for dt9812 driver are: [ 3926.988925][T28667] dt9812 [ 3926.989085][T28667] comedi: valid board names for ni_labpc_cs driver are: [ 3926.989223][T28667] ni_labpc_cs [ 3926.989357][T28667] comedi: valid board names for ni_daq_700 driver are: [ 3926.989495][T28667] ni_daq_700 [ 3926.989625][T28667] comedi: valid board names for labpc_pci driver are: [ 3926.989758][T28667] labpc_pci [ 3926.989910][T28667] comedi: valid board names for adl_pci9118 driver are: [ 3926.990076][T28667] pci9118dg [ 3926.990217][T28667] pci9118hg [ 3926.990337][T28667] pci9118hr [ 3926.990476][T28667] comedi: valid board names for 8255_pci driver are: [ 3926.990609][T28667] 8255_pci [ 3926.990749][T28667] comedi: valid board names for comedi_parport driver are: [ 3927.005432][T28667] comedi_parport [ 3927.005806][T28667] comedi: valid board names for comedi_test driver are: [ 3927.006013][T28667] comedi_test [ 3927.006173][T28667] comedi: valid board names for comedi_bond driver are: [ 3927.006321][T28667] comedi_bond [ 3927.585636][T28671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3927.586932][T28671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3928.408490][T28679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3928.409162][T28679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3929.090025][T28686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3929.091584][T28686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3930.543517][T28695] batadv_slave_1: entered promiscuous mode [ 3930.564799][T28694] batadv_slave_1: left promiscuous mode [ 3931.052842][T28699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3931.064328][T28699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3931.672404][T28705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3931.673530][T28705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3932.701549][T28713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3932.712878][T28713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3933.043555][T28717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3933.053160][T28717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3933.305010][T28721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3933.312156][T28721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3934.282185][T28731] FAULT_INJECTION: forcing a failure. [ 3934.282185][T28731] name failslab, interval 1, probability 0, space 0, times 0 [ 3934.283094][T28731] CPU: 0 UID: 0 PID: 28731 Comm: syz.3.8053 Tainted: G L syzkaller #0 PREEMPT [ 3934.283149][T28731] Tainted: [L]=SOFTLOCKUP [ 3934.283159][T28731] Hardware name: ARM-Versatile Express [ 3934.283170][T28731] Call trace: [ 3934.283192][T28731] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3934.283248][T28731] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 3934.283257][T28731] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 3934.283283][T28731] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 3934.283312][T28731] r7:83e40000 r6:00000000 r5:83e40000 r4:82b1ac48 [ 3934.283321][T28731] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 3934.283349][T28731] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 3934.283383][T28731] r8:00000000 r7:83e40000 r6:805cb8c0 r5:00000cc0 r4:830bdcc0 [ 3934.283391][T28731] [<80568de8>] (should_failslab) from [<80546c44>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 3934.283419][T28731] [<80546be4>] (kmem_cache_alloc_lru_noprof) from [<805cb8c0>] (alloc_inode+0xa0/0xd0) [ 3934.283462][T28731] r10:00000000 r9:83527990 r8:83e40000 r7:85c39400 r6:81c2df58 r5:847b0c00 [ 3934.283472][T28731] r4:00000000 [ 3934.283480][T28731] [<805cb820>] (alloc_inode) from [<805cb900>] (new_inode+0x10/0x68) [ 3934.283508][T28731] r7:85c39400 r6:00000000 r5:84fda4c0 r4:00000000 [ 3934.283516][T28731] [<805cb8f0>] (new_inode) from [<80686338>] (devpts_pty_new+0x48/0x194) [ 3934.283550][T28731] r9:83527990 r8:83e40000 r7:85c39400 r6:00000000 r5:84fda4c0 r4:00000000 [ 3934.283559][T28731] [<806862f0>] (devpts_pty_new) from [<80ae05c4>] (ptmx_open+0xf8/0x164) [ 3934.283592][T28731] r9:84fda4c0 r8:85366200 r7:82d2183c r6:8417b678 r5:8387f300 r4:00000000 [ 3934.283601][T28731] [<80ae04cc>] (ptmx_open) from [<805a8df8>] (chrdev_open+0xbc/0x234) [ 3934.283631][T28731] r9:8387f300 r8:8387f328 r7:825527d0 r6:8387f300 r5:8417b678 r4:82d21854 [ 3934.283640][T28731] [<805a8d3c>] (chrdev_open) from [<8059b744>] (do_dentry_open+0x138/0x50c) [ 3934.283671][T28731] r9:8387f300 r8:8387f328 r7:805a8d3c r6:8417b678 r5:00000000 r4:8387f300 [ 3934.283680][T28731] [<8059b60c>] (do_dentry_open) from [<8059d2c4>] (vfs_open+0x2c/0xe8) [ 3934.283711][T28731] r9:8387f300 r8:83e40000 r7:df945f20 r6:8387f328 r5:82b21e14 r4:8387f300 [ 3934.283719][T28731] [<8059d298>] (vfs_open) from [<805b9bd8>] (path_openat+0x430/0xa3c) [ 3934.283756][T28731] r6:00000000 r5:82b21e14 r4:df945e58 [ 3934.283764][T28731] [<805b97a8>] (path_openat) from [<805ba29c>] (do_file_open+0xb8/0x150) [ 3934.283798][T28731] r10:00000142 r9:83e40000 r8:00000001 r7:ffffff9c r6:df945f20 r5:83e40000 [ 3934.283807][T28731] r4:83879480 [ 3934.283815][T28731] [<805ba1e4>] (do_file_open) from [<8059d7b0>] (do_sys_openat2+0x8c/0xf0) [ 3934.283845][T28731] r8:8020029c r7:20000040 r6:ffffff9c r5:83879480 r4:00000004 [ 3934.283853][T28731] [<8059d724>] (do_sys_openat2) from [<8059dcc8>] (sys_openat+0x88/0xd8) [ 3934.283883][T28731] r7:00000142 r6:00356314 r5:20000040 r4:ffffff9c [ 3934.283891][T28731] [<8059dc40>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3934.283915][T28731] Exception stack(0xdf945fa8 to 0xdf945ff0) [ 3934.283934][T28731] 5fa0: 00000000 00000000 ffffff9c 20000040 00000041 00000000 [ 3934.283954][T28731] 5fc0: 00000000 00000000 00356314 00000142 003562d8 00000000 00000001 76fa80dc [ 3934.283967][T28731] 5fe0: 76fa7e88 76fa7e78 00018fa0 00130a50 [ 3934.283979][T28731] r5:00000000 r4:00000000 [ 3934.486223][T28733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3934.487594][T28733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3935.920119][T28752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3935.924142][T28752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3936.763319][T28760] syzkaller0: entered promiscuous mode [ 3936.764713][T28760] syzkaller0: entered allmulticast mode [ 3937.297245][T28768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3937.298836][T28768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3937.487368][T28772] db_root: cannot open: [ 3938.525105][T28781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3938.529116][T28781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3938.719034][ T28] audit: type=1400 audit(3938.620:639): avc: denied { mounton } for pid=28784 comm="syz.3.8070" path="/" dev="tmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 3940.163081][T28793] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8074'. [ 3964.270390][T28902] fuse: Unknown parameter 'grou00000000000000000000' [ 3968.105299][T28913] fuse: Unknown parameter 'group_i00000000000000000000' [ 3970.375202][T28930] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28930 comm=syz.3.8139 [ 3977.602693][T28947] fuse: Unknown parameter 'group_id00000000000000000000' [ 3978.511668][ T28] audit: type=1400 audit(3978.400:640): avc: denied { create } for pid=28954 comm="syz.2.8148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3978.875137][ T28] audit: type=1326 audit(3978.780:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28951 comm="syz.3.8147" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x0 [ 3981.024292][T28965] fuse: Unknown parameter 'group_id00000000000000000000' [ 3986.133698][T28983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3986.135478][T28983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3990.793146][T28998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3990.797255][T28998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3993.838876][T29012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3993.845402][T29012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3994.556225][T29026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3994.560923][T29026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3994.753450][T29030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3994.756451][T29030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3995.661477][T29041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3995.662759][T29041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3995.776883][T29045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3995.779515][T29045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3995.993566][T29049] fuse: Bad value for 'fd' [ 3996.257262][T29051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8180'. [ 3996.713324][T29055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3996.715637][T29055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3996.877632][T29059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3996.878848][T29059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3996.937750][T29063] fuse: Bad value for 'fd' [ 3999.936596][T29077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3999.953425][T29077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3999.967745][T29076] fuse: Bad value for 'fd' [ 4000.852558][T29089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4000.853664][T29089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4001.573898][T29096] fuse: Bad value for 'fd' [ 4002.952440][T29103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4002.953577][T29103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4005.994690][T29116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4005.998237][T29116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4006.994978][ T28] audit: type=1400 audit(4006.890:642): avc: denied { write } for pid=29114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4008.112280][ T28] audit: type=1400 audit(4007.990:643): avc: denied { write } for pid=29127 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4011.003352][ T28] audit: type=1400 audit(4010.910:644): avc: denied { map } for pid=29135 comm="syz.2.8211" path="socket:[67085]" dev="sockfs" ino=67085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 4021.486246][ T28] audit: type=1400 audit(4021.390:645): avc: denied { watch } for pid=29166 comm="syz.3.8222" path="/232" dev="tmpfs" ino=1220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 4028.864148][ T28] audit: type=1326 audit(4028.770:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29193 comm="syz.3.8232" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4028.865985][ T28] audit: type=1326 audit(4028.770:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29193 comm="syz.3.8232" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4028.870050][ T28] audit: type=1326 audit(4028.770:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29193 comm="syz.3.8232" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4028.895536][ T28] audit: type=1326 audit(4028.790:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29193 comm="syz.3.8232" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4028.895862][ T28] audit: type=1326 audit(4028.790:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29193 comm="syz.3.8232" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4028.896162][ T28] audit: type=1326 audit(4028.790:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29193 comm="syz.3.8232" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4028.896358][ T28] audit: type=1326 audit(4028.790:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29193 comm="syz.3.8232" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4028.896554][ T28] audit: type=1326 audit(4028.790:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29193 comm="syz.3.8232" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4028.896747][ T28] audit: type=1326 audit(4028.790:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29193 comm="syz.3.8232" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4028.896947][ T28] audit: type=1326 audit(4028.790:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29193 comm="syz.3.8232" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4034.363450][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 4034.364878][ T28] audit: type=1400 audit(4034.270:676): avc: denied { setopt } for pid=29208 comm="syz.2.8238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 4043.084382][ T28] audit: type=1326 audit(4042.990:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29223 comm="syz.3.8243" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4043.102166][ T28] audit: type=1326 audit(4043.000:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29223 comm="syz.3.8243" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4043.102577][ T28] audit: type=1326 audit(4043.000:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29223 comm="syz.3.8243" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4043.102801][ T28] audit: type=1326 audit(4043.000:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29223 comm="syz.3.8243" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4043.103211][ T28] audit: type=1326 audit(4043.000:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29223 comm="syz.3.8243" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4043.103432][ T28] audit: type=1326 audit(4043.000:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29223 comm="syz.3.8243" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4043.103636][ T28] audit: type=1326 audit(4043.000:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29223 comm="syz.3.8243" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4043.103835][ T28] audit: type=1326 audit(4043.000:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29223 comm="syz.3.8243" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4043.104033][ T28] audit: type=1326 audit(4043.000:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29223 comm="syz.3.8243" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4043.104230][ T28] audit: type=1326 audit(4043.000:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29223 comm="syz.3.8243" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4082.733507][T29369] fuse: Unknown parameter '00000000000000000003' [ 4084.454551][T29398] trusted_key: encrypted_key: keyword 'updGte' not recognized [ 4084.682741][T29400] fuse: Unknown parameter 'fd00000000000000000003' [ 4088.236133][T29409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4088.243348][T29409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4088.542279][T29414] fuse: Unknown parameter 'fd00000000000000000003' [ 4089.805280][T29421] syzkaller0: entered promiscuous mode [ 4089.816253][T29421] syzkaller0: entered allmulticast mode [ 4090.181790][T29427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4090.188140][T29427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1342:(snd_func_refer) error evaluating name ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5728:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2722:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1342:(snd_func_refer) error evaluating name ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5728:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2722:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory audio: Could not create a backend for voice `lm4549.out' [ 4090.689060][T29433] fuse: Unknown parameter 'fd00000000000000000003' [ 4095.520007][T29458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4095.532314][T29458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4100.784692][T29479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4100.793931][T29479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4101.894380][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 4101.896044][ T28] audit: type=1400 audit(4101.800:710): avc: denied { create } for pid=29491 comm="syz.3.8338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 4101.913129][ T28] audit: type=1400 audit(4101.820:711): avc: denied { setopt } for pid=29491 comm="syz.3.8338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 4102.509378][T29501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8341'. [ 4106.938303][T29559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4106.947744][T29559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4125.246136][ T28] audit: type=1400 audit(4125.150:712): avc: denied { bind } for pid=29582 comm="syz.2.8366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 4125.322167][T29583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8366'. [ 4125.615534][T29590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4125.619140][T29590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4128.313044][T29595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8368'. [ 4131.238039][ T28] audit: type=1400 audit(4131.140:713): avc: denied { transfer } for pid=29615 comm="syz.2.8374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 4138.132250][T29654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4138.137578][T29654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4138.280327][ T28] audit: type=1400 audit(4138.180:714): avc: denied { map } for pid=29652 comm="syz.2.8387" path="socket:[68410]" dev="sockfs" ino=68410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 4140.003403][T29665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4140.006749][T29665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4140.533102][T29654] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=785 sclass=netlink_tcpdiag_socket pid=29654 comm=syz.2.8387 [ 4144.504138][T29678] syzkaller0: entered promiscuous mode [ 4144.505393][T29678] syzkaller0: entered allmulticast mode [ 4154.445400][T29759] input: syz0 as /devices/virtual/input/input58 [ 4154.771964][T29767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4154.779922][T29767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4155.143097][ T28] audit: type=1400 audit(4155.050:715): avc: denied { relabelfrom } for pid=29773 comm="syz.2.8419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 4155.148131][ T28] audit: type=1400 audit(4155.050:716): avc: denied { relabelto } for pid=29773 comm="syz.2.8419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 4155.196893][T29773] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 4158.635055][T29793] syzkaller1: entered promiscuous mode [ 4158.643187][T29793] syzkaller1: entered allmulticast mode [ 4161.652439][ T28] audit: type=1326 audit(4161.560:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29807 comm="syz.3.8426" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4161.657560][ T28] audit: type=1326 audit(4161.560:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29807 comm="syz.3.8426" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4161.664908][ T28] audit: type=1326 audit(4161.560:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29807 comm="syz.3.8426" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4161.670659][ T28] audit: type=1326 audit(4161.560:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29807 comm="syz.3.8426" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4161.684986][ T28] audit: type=1326 audit(4161.590:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29807 comm="syz.3.8426" exe="/syz-executor" sig=0 arch=40000028 syscall=192 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4161.690149][ T28] audit: type=1326 audit(4161.590:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29807 comm="syz.3.8426" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4161.703815][ T28] audit: type=1326 audit(4161.610:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29807 comm="syz.3.8426" exe="/syz-executor" sig=0 arch=40000028 syscall=6 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4161.706853][ T28] audit: type=1326 audit(4161.610:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29807 comm="syz.3.8426" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4161.713648][ T28] audit: type=1326 audit(4161.620:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29807 comm="syz.3.8426" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4161.720226][ T28] audit: type=1326 audit(4161.620:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29807 comm="syz.3.8426" exe="/syz-executor" sig=0 arch=40000028 syscall=258 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4169.302735][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 4169.303169][ T28] audit: type=1326 audit(4169.210:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29828 comm="syz.2.8431" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4169.325949][ T28] audit: type=1326 audit(4169.230:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29828 comm="syz.2.8431" exe="/syz-executor" sig=0 arch=40000028 syscall=274 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4169.330444][ T28] audit: type=1326 audit(4169.230:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29828 comm="syz.2.8431" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4169.337337][ T28] audit: type=1326 audit(4169.240:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29828 comm="syz.2.8431" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4169.342899][ T28] audit: type=1326 audit(4169.250:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29828 comm="syz.2.8431" exe="/syz-executor" sig=0 arch=40000028 syscall=275 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4169.349816][ T28] audit: type=1326 audit(4169.250:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29828 comm="syz.2.8431" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4169.355178][ T28] audit: type=1326 audit(4169.260:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29828 comm="syz.2.8431" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4170.874334][ T28] audit: type=1326 audit(4170.770:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29842 comm="syz.2.8435" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4170.875053][ T28] audit: type=1326 audit(4170.770:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29842 comm="syz.2.8435" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4170.875410][ T28] audit: type=1326 audit(4170.770:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29842 comm="syz.2.8435" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4180.092401][T29870] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8444'. [ 4181.397942][T29882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4181.398910][T29882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4182.029081][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 4182.029522][ T28] audit: type=1326 audit(4181.930:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29890 comm="syz.3.8452" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4182.064631][ T28] audit: type=1326 audit(4181.940:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29890 comm="syz.3.8452" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4182.074917][ T28] audit: type=1326 audit(4181.980:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29890 comm="syz.3.8452" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4182.075381][ T28] audit: type=1326 audit(4181.980:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29890 comm="syz.3.8452" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4182.075614][ T28] audit: type=1326 audit(4181.980:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29890 comm="syz.3.8452" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4182.159436][ T28] audit: type=1326 audit(4182.060:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29890 comm="syz.3.8452" exe="/syz-executor" sig=0 arch=40000028 syscall=380 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4182.162323][ T28] audit: type=1326 audit(4182.060:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29890 comm="syz.3.8452" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4182.167398][ T28] audit: type=1326 audit(4182.060:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29890 comm="syz.3.8452" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4182.173910][ T28] audit: type=1326 audit(4182.060:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29890 comm="syz.3.8452" exe="/syz-executor" sig=0 arch=40000028 syscall=311 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4182.177003][ T28] audit: type=1326 audit(4182.060:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29890 comm="syz.3.8452" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4182.494595][T29895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8453'. [ 4182.505026][T29895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8453'. [ 4187.474151][T29919] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8463'. [ 4187.844493][T29925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4187.849026][T29925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4190.082597][T29944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4190.085281][T29944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4194.063863][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 4194.066417][ T28] audit: type=1400 audit(4193.960:762): avc: denied { create } for pid=29960 comm="syz.3.8475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 4194.468499][T29961] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8475'. [ 4194.535927][T29961] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8475'. [ 4194.586520][T29961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8475'. [ 4197.013887][ T28] audit: type=1400 audit(4196.920:763): avc: denied { setopt } for pid=29975 comm="syz.3.8477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 4200.773272][ T28] audit: type=1400 audit(4200.680:764): avc: denied { bind } for pid=30000 comm="syz.2.8488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 4203.112332][T30017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8491'. [ 4205.689503][T30032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4205.694119][T30032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4208.344150][ T28] audit: type=1326 audit(4208.250:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30046 comm="syz.2.8502" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4208.354953][ T28] audit: type=1326 audit(4208.260:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30046 comm="syz.2.8502" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4208.372015][ T28] audit: type=1326 audit(4208.270:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30046 comm="syz.2.8502" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4208.372418][ T28] audit: type=1326 audit(4208.270:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30046 comm="syz.2.8502" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4208.372643][ T28] audit: type=1326 audit(4208.270:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30046 comm="syz.2.8502" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4208.409624][ T28] audit: type=1326 audit(4208.310:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30046 comm="syz.2.8502" exe="/syz-executor" sig=0 arch=40000028 syscall=192 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4208.414214][ T28] audit: type=1326 audit(4208.310:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30046 comm="syz.2.8502" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4208.419024][ T28] audit: type=1326 audit(4208.310:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30046 comm="syz.2.8502" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4208.436007][ T28] audit: type=1326 audit(4208.340:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30046 comm="syz.2.8502" exe="/syz-executor" sig=0 arch=40000028 syscall=296 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4208.436500][ T28] audit: type=1326 audit(4208.340:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30046 comm="syz.2.8502" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 4213.164371][T30060] ------------[ cut here ]------------ [ 4213.165409][T30060] WARNING: ./include/linux/skbuff.h:3243 at tcf_skbmod_act+0x5e0/0x69c, CPU#0: syz.2.8507/30060 [ 4213.170247][T30060] Modules linked in: [ 4213.172583][T30060] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 4213.173331][T30060] CPU: 0 UID: 0 PID: 30060 Comm: syz.2.8507 Tainted: G L syzkaller #0 PREEMPT [ 4213.173780][T30060] Tainted: [L]=SOFTLOCKUP [ 4213.174015][T30060] Hardware name: ARM-Versatile Express [ 4213.174235][T30060] Call trace: [ 4213.174424][T30060] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 4213.174784][T30060] r7:82a20f78 r6:00000000 r5:82336570 r4:00000001 [ 4213.175118][T30060] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 4213.175456][T30060] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 4213.175779][T30060] r7:82a20f78 r6:00000000 r5:8660c980 r4:82c85d40 [ 4213.176017][T30060] [<8021ec7c>] (dump_stack) from [<80202590>] (vpanic+0x114/0x320) [ 4213.176320][T30060] [<8020247c>] (vpanic) from [<802027d0>] (trace_suspend_resume+0x0/0x100) [ 4213.176650][T30060] r7:8170f304 [ 4213.177285][T30060] [<8020279c>] (panic) from [<80251b50>] (get_taint+0x0/0x1c) [ 4213.177581][T30060] r3:82a0b144 r2:00000001 r1:8231c298 r0:82323c10 [ 4213.177786][T30060] [<80251ad8>] (check_panic_on_warn) from [<80251ccc>] (__warn+0x98/0x1a4) [ 4213.178110][T30060] [<80251c34>] (__warn) from [<80251f50>] (warn_slowpath_fmt+0x178/0x1f4) [ 4213.178416][T30060] r8:00000009 r7:82335d94 r6:dfaf9b34 r5:8660c980 r4:00000000 [ 4213.178652][T30060] [<80251ddc>] (warn_slowpath_fmt) from [<8170f304>] (tcf_skbmod_act+0x5e0/0x69c) [ 4213.179018][T30060] r10:00000018 r9:5b4fd000 r8:00000000 r7:865de300 r6:00000010 r5:85c586c0 [ 4213.179274][T30060] r4:86238240 [ 4213.179414][T30060] [<8170ed24>] (tcf_skbmod_act) from [<816fdedc>] (tcf_action_exec+0xac/0x154) [ 4213.179746][T30060] r10:86238240 r9:00000020 r8:85cb8280 r7:dfaf9c64 r6:00000001 r5:865de300 [ 4213.180016][T30060] r4:00000000 [ 4213.180154][T30060] [<816fde30>] (tcf_action_exec) from [<81754a34>] (basic_classify+0xbc/0xf8) [ 4213.180473][T30060] r10:00000000 r9:85854c00 r8:dfaf9be8 r7:86238240 r6:82516e2c r5:dfaf9c64 [ 4213.181046][T30060] r4:85c43c00 [ 4213.181225][T30060] [<81754978>] (basic_classify) from [<816f7540>] (tcf_classify+0x194/0x418) [ 4213.181615][T30060] r10:00000000 r9:00000000 r8:dfaf9c64 r7:84ba9d00 r6:86238240 r5:00000000 [ 4213.181907][T30060] r4:84ba9d00 r3:81754978 [ 4213.182169][T30060] [<816f73ac>] (tcf_classify) from [<8165c8b8>] (tc_run+0x14c/0x1d4) [ 4213.182509][T30060] r10:5b4fd000 r9:00000001 r8:a42ea9a0 r7:dfaf9cd0 r6:ff7e79a0 r5:853fb594 [ 4213.182803][T30060] r4:86238240 [ 4213.182955][T30060] [<8165c76c>] (tc_run) from [<8166a0d8>] (__netif_receive_skb_core.constprop.0+0x3cc/0xf64) [ 4213.183348][T30060] r10:00000000 r9:866ac000 r8:dfaf9d74 r7:828d5598 r6:82516e2c r5:8524b808 [ 4213.183648][T30060] r4:86238240 [ 4213.183798][T30060] [<81669d0c>] (__netif_receive_skb_core.constprop.0) from [<8166af28>] (__netif_receive_skb_one_core+0x40/0x84) [ 4213.184227][T30060] r10:8964f12c r9:dfaf9e40 r8:866ad700 r7:8964f30c r6:00000000 r5:8660c980 [ 4213.184509][T30060] r4:866ac000 [ 4213.184650][T30060] [<8166aee8>] (__netif_receive_skb_one_core) from [<8166afb4>] (__netif_receive_skb+0x18/0x5c) [ 4213.185012][T30060] r5:8660c980 r4:86238240 [ 4213.185182][T30060] [<8166af9c>] (__netif_receive_skb) from [<8166b034>] (netif_receive_skb+0x3c/0x268) [ 4213.185514][T30060] r5:8660c980 r4:86238240 [ 4213.185684][T30060] [<8166aff8>] (netif_receive_skb) from [<80de5db0>] (tun_get_user+0xe9c/0x1190) [ 4213.186068][T30060] r7:8964f30c r6:00000000 r5:86238240 r4:866ac700 [ 4213.186286][T30060] [<80de4f14>] (tun_get_user) from [<80de69fc>] (tun_chr_write_iter+0x60/0xc8) [ 4213.186649][T30060] r10:81d879ec r9:8660c980 r8:8964f000 r7:866ac700 r6:00000000 r5:dfaf9ef0 [ 4213.186934][T30060] r4:dfaf9f08 [ 4213.187085][T30060] [<80de699c>] (tun_chr_write_iter) from [<805a1390>] (vfs_write+0x27c/0x42c) [ 4213.187435][T30060] r8:80de699c r7:dfaf9f68 r6:20000300 r5:85fb0600 r4:0000001c [ 4213.187700][T30060] [<805a1114>] (vfs_write) from [<805a16b4>] (ksys_write+0x74/0xec) [ 4213.188027][T30060] r10:00000004 r9:8660c980 r8:8020029c r7:00000000 r6:00000000 r5:85fb0600 [ 4213.188316][T30060] r4:85fb0601 [ 4213.188474][T30060] [<805a1640>] (ksys_write) from [<805a173c>] (sys_write+0x10/0x14) [ 4213.188794][T30060] r7:00000004 r6:00356310 r5:00000000 r4:00000000 [ 4213.189027][T30060] [<805a172c>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4213.189352][T30060] Exception stack(0xdfaf9fa8 to 0xdfaf9ff0) [ 4213.189615][T30060] 9fa0: 00000000 00000000 00000004 20000300 0000001c 00000000 [ 4213.189925][T30060] 9fc0: 00000000 00000000 00356310 00000004 003562d8 00000000 00000001 76f270dc [ 4213.190269][T30060] 9fe0: 76f26e88 76f26e78 00018fa0 00130a50 [ 4213.191821][T30060] Rebooting in 86400 seconds..