last executing test programs: 31m37.261794401s ago: executing program 0 (id=16): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd53, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x50) 31m37.100753401s ago: executing program 0 (id=17): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x4, 0x0, 'syz1\x00', 0x0}) 31m36.352953385s ago: executing program 0 (id=18): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 31m35.60707171s ago: executing program 0 (id=19): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x51, 0xff, 0x560c, {0x7ffd, 0x595}, {0xfffa, 0x2}, @rumble={0x5, 0x9}}) 31m33.314486392s ago: executing program 0 (id=20): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6, 0xfe}]}}}}}}}, 0x0) 31m33.082604353s ago: executing program 0 (id=22): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000035d, 0x20000084) recvmmsg(r1, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) write(0xffffffffffffffff, &(0x7f0000000200)="89", 0xffe3) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 30m48.003639485s ago: executing program 32 (id=22): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000035d, 0x20000084) recvmmsg(r1, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) write(0xffffffffffffffff, &(0x7f0000000200)="89", 0xffe3) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 29m32.001230422s ago: executing program 1 (id=121): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmodat(r0, 0x0, 0xfffffffb) 29m31.559959014s ago: executing program 1 (id=122): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r1, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90) 29m30.305073341s ago: executing program 1 (id=123): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000002840)='/dev/comedi4\x00', 0x40300, 0x0) ioctl$COMEDI_POLL(r0, 0x640f) 29m29.702624214s ago: executing program 1 (id=124): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, r1, 0x0) 29m26.902553099s ago: executing program 1 (id=125): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0}) 29m26.75334566s ago: executing program 1 (id=126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 28m41.334863813s ago: executing program 33 (id=126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 26m44.682893569s ago: executing program 2 (id=295): syz_emit_ethernet(0x80, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) read$FUSE(r0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000980)=ANY=[@ANYBLOB="07001f00000000000000000086dd60"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 26m44.42306328s ago: executing program 2 (id=296): r0 = socket$kcm(0x29, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) 26m44.328811071s ago: executing program 2 (id=297): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26m44.146059621s ago: executing program 2 (id=298): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x80000001, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}}, 0x0) 26m31.527927789s ago: executing program 2 (id=313): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000005180)={0x2020}, 0x2020) 26m30.934866952s ago: executing program 2 (id=315): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)='A;', 0x2, 0xc8c0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffe89}, 0x201}], 0x3ffffffffffff40, 0x10022, 0x0) 25m45.502278696s ago: executing program 34 (id=315): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)='A;', 0x2, 0xc8c0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffe89}, 0x201}], 0x3ffffffffffff40, 0x10022, 0x0) 25m9.825822257s ago: executing program 3 (id=364): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r0], 0x18}, 0x2000c8d0) 25m9.422333739s ago: executing program 3 (id=366): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705810340"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xa4, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)="02") 25m9.147140941s ago: executing program 3 (id=368): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r0, &(0x7f00000002c0)=""/4096, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 25m7.550402749s ago: executing program 3 (id=369): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b010902"], 0x0) 25m7.41068392s ago: executing program 3 (id=370): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x40, 0x5, 0x51, "58630050d733fcb786c256f1bae819fbe490b2f882611ce949be0084803d1058e965d4832a23479025675cc58e86fa42e2c2385a0eb46a3627b1e34dc7270a3b312da7a05e97b2585ccd9d04ef8256bbbc"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x81, 0x3, "3a80c5"}, &(0x7f0000000440)={0x20, 0x82, 0x1, '0'}, 0x0, 0x0, 0x0}) 25m7.090116452s ago: executing program 3 (id=372): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x5, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010200", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x5, '\x00', {0x2, 0x6, "0f44f7", 0x800, 0x2f, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, [], "40da70cffac70148"}}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40000000000035d, 0x20000084) recvmmsg(r3, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x400) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r7, 0x1e67e000) ioctl$MON_IOCT_RING_SIZE(r7, 0x9204, 0x49cdee) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, &(0x7f0000000240)) 24m21.957419583s ago: executing program 35 (id=372): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x5, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010200", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x5, '\x00', {0x2, 0x6, "0f44f7", 0x800, 0x2f, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, [], "40da70cffac70148"}}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40000000000035d, 0x20000084) recvmmsg(r3, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x400) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r7, 0x1e67e000) ioctl$MON_IOCT_RING_SIZE(r7, 0x9204, 0x49cdee) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, &(0x7f0000000240)) 17m36.653322636s ago: executing program 5 (id=864): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') 17m36.324255888s ago: executing program 5 (id=865): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r3 = dup2(r2, r0) syz_open_pts(r3, 0x42c00) 17m36.112289038s ago: executing program 5 (id=866): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x1, 0xac, 0x5}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 17m19.524584767s ago: executing program 5 (id=880): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x14c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x110, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xf8, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0xc4, 0xf, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x240, 0x1, 0x4, 0x3}}]}, {0x7d, 0x6, "63c05f8c9e4954364707888dd512113a633b28ad3f2e12a124b26d24dfc58593b18028f8543ff49b39492643cccf8af2f593670bb1b3d4fc1e22166a779be7422df4e9a376b24a82be7d26e7b54c5246ae4544f04fc515e293453ed76d22be5bdece4e77995202370e6b066c011dc25a92aae4918c98173768"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 17m19.191850269s ago: executing program 5 (id=882): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x6, 0x1, 0x4000000fffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) 17m18.000142746s ago: executing program 5 (id=884): r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x308c3, 0xc4a48b7f26be2e0b}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 16m32.893427377s ago: executing program 36 (id=884): r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x308c3, 0xc4a48b7f26be2e0b}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m32.255473291s ago: executing program 6 (id=2351): syz_open_dev$evdev(0x0, 0x200, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000001, 0x0, 0x3}, @loopback, @private=0xa010101}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[], 0x20) 1m30.899597157s ago: executing program 6 (id=2352): wait4(0x0, 0x0, 0x1, 0x0) 1m30.637888719s ago: executing program 6 (id=2353): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) 1m29.403077815s ago: executing program 6 (id=2354): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x3b, 0x3000}, 0x0) splice(r0, 0x0, r2, 0x0, 0x725e65a6, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900099a453001f", 0x7, 0x20004080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, 0x0, 0x0) 1m26.773038508s ago: executing program 6 (id=2356): write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1m26.641640508s ago: executing program 6 (id=2357): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000035d, 0x20000084) recvmmsg(r2, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r6 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x400) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r6, 0x1e67e000) ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x49cdee) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10000807, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, &(0x7f0000000240)) 45.451472153s ago: executing program 4 (id=2365): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x8b, 0x100000500) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 42.824981806s ago: executing program 4 (id=2366): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 42.733370007s ago: executing program 4 (id=2367): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000340)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) 42.434335369s ago: executing program 4 (id=2368): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 41.979739441s ago: executing program 4 (id=2369): pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) write$FUSE_ATTR(r0, &(0x7f00000003c0)={0x78, 0xffffffffffffffda, 0x0, {0x9, 0x3, 0x0, {0x0, 0x8, 0x0, 0x6, 0xbce5, 0x0, 0xfffffff7, 0x3, 0x80000000, 0x8000, 0x9, 0x0, 0x0, 0x401, 0x5}}}, 0x78) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r2, 0x16) 40.958460346s ago: executing program 37 (id=2357): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000035d, 0x20000084) recvmmsg(r2, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r6 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x400) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r6, 0x1e67e000) ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x49cdee) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10000807, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, &(0x7f0000000240)) 30.04389607s ago: executing program 4 (id=2373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000035d, 0x20000084) recvmmsg(r1, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.082447905s ago: executing program 7 (id=2378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x38, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}}, 0x8800) 802.843126ms ago: executing program 7 (id=2379): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0xc1}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 552.792017ms ago: executing program 7 (id=2380): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)="dce4", 0x2) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) 433.200408ms ago: executing program 7 (id=2381): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet6(r0, &(0x7f0000000ac0)="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", 0xfe4, 0x4000000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) shutdown(r0, 0x1) 242.561609ms ago: executing program 7 (id=2382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x14, 0x2, 0x6, 0x5, 0x7, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x8404) 0s ago: executing program 7 (id=2383): syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0) r0 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$proc_mixer(r0, &(0x7f0000000380)=[{'TREBLE', @val={' \'', 'CD Capture'}}], 0x29) kernel console output (not intermixed with test programs): uld_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 1423.510535][T10915] r8:000002e0 r7:00000000 r6:dfddde38 r5:00000000 r4:003562e0 [ 1423.510553][T10915] [<809fdf04>] (should_fail) from [<803544f4>] (get_futex_key+0xa8/0x558) [ 1423.510610][T10915] [<8035444c>] (get_futex_key) from [<80359ec0>] (futex_wait_setup+0x88/0x29c) [ 1423.510696][T10915] r10:b5003500 r9:b5403587 r8:b5003500 r7:003562e0 r6:003562e0 r5:84fd3100 [ 1423.510717][T10915] r4:7efffffc [ 1423.510733][T10915] [<80359e38>] (futex_wait_setup) from [<8035a158>] (__futex_wait+0x84/0x104) [ 1423.510795][T10915] r10:00000000 r9:00000000 r8:00000000 r7:00000002 r6:003562e0 r5:84fd3100 [ 1423.510815][T10915] r4:00000000 [ 1423.510830][T10915] [<8035a0d4>] (__futex_wait) from [<8035a258>] (futex_wait+0x80/0x10c) [ 1423.510889][T10915] r9:00000000 r8:0000c350 r7:003562e0 r6:00000000 r5:00000000 r4:00000002 [ 1423.510908][T10915] [<8035a1d8>] (futex_wait) from [<803559b8>] (do_futex+0x1b4/0x1d0) [ 1423.510968][T10915] r10:000000f0 r9:00000000 r8:84fd3100 r7:00000000 r6:003562e0 r5:00000080 [ 1423.510987][T10915] r4:00000000 [ 1423.511005][T10915] [<80355804>] (do_futex) from [<8035626c>] (sys_futex_time32+0x11c/0x1bc) [ 1423.511145][T10915] r4:00000000 [ 1423.511164][T10915] [<80356150>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1423.511211][T10915] Exception stack(0xdfdddfa8 to 0xdfdddff0) [ 1423.511249][T10915] dfa0: 00131dd8 ffffffff 003562e0 00000080 00000000 00000000 [ 1423.511282][T10915] dfc0: 00131dd8 ffffffff 76fe77d4 000000f0 00340000 00000000 00000001 76fe70dc [ 1423.511307][T10915] dfe0: 76fe6f38 76fe6f28 00021b8c 00130a50 [ 1423.511340][T10915] r9:84fd3100 r8:8020029c r7:000000f0 r6:76fe77d4 r5:ffffffff r4:00131dd8 [ 1430.951788][T10942] device-mapper: ioctl: Invalid ioctl structure: name , dev f800 [ 1432.646231][T10949] FAULT_INJECTION: forcing a failure. [ 1432.646231][T10949] name failslab, interval 1, probability 0, space 0, times 0 [ 1432.646758][T10949] CPU: 0 UID: 0 PID: 10949 Comm: syz.4.1626 Tainted: G L syzkaller #0 PREEMPT [ 1432.646862][T10949] Tainted: [L]=SOFTLOCKUP [ 1432.646883][T10949] Hardware name: ARM-Versatile Express [ 1432.646908][T10949] Call trace: [ 1432.646953][T10949] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1432.647783][T10949] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1432.647818][T10949] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1432.649127][T10949] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1432.651233][T10949] r7:ffffffff r6:00000000 r5:84f5c980 r4:82b1ac48 [ 1432.651274][T10949] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1432.651341][T10949] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1432.651409][T10949] r8:84f5c980 r7:ffffffff r6:83001180 r5:00000cc0 r4:000000a0 [ 1432.651429][T10949] [<80568de8>] (should_failslab) from [<80547c00>] (__kmalloc_node_track_caller_noprof+0xac/0x3d8) [ 1432.651496][T10949] [<80547b54>] (__kmalloc_node_track_caller_noprof) from [<804d4d04>] (kmemdup_noprof+0x28/0x44) [ 1432.651560][T10949] r10:82c866f4 r9:82a22dc0 r8:82a22ec0 r7:85fc5740 r6:81cd86b0 r5:00000000 [ 1432.651580][T10949] r4:000000a0 [ 1432.651599][T10949] [<804d4cdc>] (kmemdup_noprof) from [<807d2bd4>] (setup_mq_sysctls+0x40/0x10c) [ 1432.651671][T10949] r7:85fc5740 r6:85fc567c r5:00000000 r4:85fc5400 [ 1432.651694][T10949] [<807d2b94>] (setup_mq_sysctls) from [<807d2454>] (copy_ipcs+0x1c8/0x404) [ 1432.651759][T10949] r10:82c866f4 r9:82a22dc0 r8:82a22ec0 r7:85fc5740 r6:85fc5400 r5:00000000 [ 1432.651781][T10949] r4:82a240e0 r3:84f5c980 [ 1432.651796][T10949] [<807d228c>] (copy_ipcs) from [<802836cc>] (create_new_namespaces+0xb4/0x2f0) [ 1432.651866][T10949] r9:82a22dc0 r8:4a000200 r7:00000000 r6:84f5c980 r5:860bcb68 r4:85c69900 [ 1432.651887][T10949] [<80283618>] (create_new_namespaces) from [<80283cc0>] (unshare_nsproxy_namespaces+0x84/0xa4) [ 1432.651957][T10949] r10:00000151 r9:84f5c980 r8:00000000 r7:82a22dc0 r6:dfaadf60 r5:8673c900 [ 1432.652000][T10949] r4:4a000200 [ 1432.652016][T10949] [<80283c3c>] (unshare_nsproxy_namespaces) from [<80250bb8>] (ksys_unshare+0x17c/0x430) [ 1432.652085][T10949] r7:00000000 r6:8673c900 r5:84f5c980 r4:4a000200 [ 1432.652104][T10949] [<80250a3c>] (ksys_unshare) from [<80250e7c>] (sys_unshare+0x10/0x14) [ 1432.652170][T10949] r10:00000151 r9:84f5c980 r8:8020029c r7:00000151 r6:00356308 r5:00000000 [ 1432.652190][T10949] r4:00000000 [ 1432.652206][T10949] [<80250e6c>] (sys_unshare) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1432.652256][T10949] Exception stack(0xdfaadfa8 to 0xdfaadff0) [ 1432.652299][T10949] dfa0: 00000000 00000000 4a000200 00000000 00000000 00000000 [ 1432.652332][T10949] dfc0: 00000000 00000000 00356308 00000151 003562d8 00000000 00000001 76fe70dc [ 1432.652363][T10949] dfe0: 76fe6e88 76fe6e78 00018fa0 00130a50 [ 1436.890377][ T28] audit: type=1400 audit(1437.796:1428): avc: denied { audit_write } for pid=10958 comm="syz.6.1629" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1438.739303][ T28] audit: type=1400 audit(1439.646:1429): avc: denied { watch } for pid=10973 comm="syz.4.1636" path="/proc/99" dev="proc" ino=18123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1439.574021][T10984] FAULT_INJECTION: forcing a failure. [ 1439.574021][T10984] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.608016][T10984] CPU: 0 UID: 0 PID: 10984 Comm: syz.4.1640 Tainted: G L syzkaller #0 PREEMPT [ 1439.608268][T10984] Tainted: [L]=SOFTLOCKUP [ 1439.608303][T10984] Hardware name: ARM-Versatile Express [ 1439.608344][T10984] Call trace: [ 1439.608420][T10984] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1439.608599][T10984] r7:60030113 r6:60030113 r5:82336570 r4:00000000 [ 1439.608639][T10984] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1439.608732][T10984] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1439.608831][T10984] r7:84020c40 r6:00000000 r5:84020c40 r4:82b1ac48 [ 1439.608859][T10984] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1439.608919][T10984] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1439.609025][T10984] r8:00000000 r7:84020c40 r6:805c25ec r5:00000cc0 r4:830bdc00 [ 1439.609048][T10984] [<80568de8>] (should_failslab) from [<80546c44>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 1439.609118][T10984] [<80546be4>] (kmem_cache_alloc_lru_noprof) from [<805c25ec>] (__d_alloc+0x30/0x220) [ 1439.609192][T10984] r10:830c2800 r9:82543900 r8:81e613c0 r7:830c2800 r6:830e9d10 r5:dfc65ef0 [ 1439.609214][T10984] r4:82bf3128 [ 1439.609230][T10984] [<805c25bc>] (__d_alloc) from [<805c5c70>] (d_alloc_pseudo+0x10/0x3c) [ 1439.609296][T10984] r9:84020c40 r8:81e613c0 r7:00000002 r6:830e9d10 r5:852d8ac0 r4:82bf3128 [ 1439.609317][T10984] [<805c5c60>] (d_alloc_pseudo) from [<805a3374>] (alloc_file_pseudo+0x7c/0x154) [ 1439.609374][T10984] [<805a32f8>] (alloc_file_pseudo) from [<8162e1c4>] (sock_alloc_file+0x48/0xc4) [ 1439.609447][T10984] r10:00000119 r9:84020c40 r8:8020029c r7:00000119 r6:852d8ac0 r5:852d8a40 [ 1439.609473][T10984] r4:00000000 [ 1439.609491][T10984] [<8162e17c>] (sock_alloc_file) from [<81631968>] (__sys_socket+0xd4/0x118) [ 1439.609551][T10984] r6:852d8a40 r5:00000006 r4:00000000 [ 1439.609571][T10984] [<81631894>] (__sys_socket) from [<816319bc>] (sys_socket+0x10/0x14) [ 1439.609635][T10984] r6:00356310 r5:00000000 r4:00000000 [ 1439.609653][T10984] [<816319ac>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1439.609705][T10984] Exception stack(0xdfc65fa8 to 0xdfc65ff0) [ 1439.609746][T10984] 5fa0: 00000000 00000000 00000010 00000003 00000000 00000000 [ 1439.609786][T10984] 5fc0: 00000000 00000000 00356310 00000119 003562d8 00000000 00000001 76fe70dc [ 1439.609816][T10984] 5fe0: 76fe6e88 76fe6e78 00018fa0 00130a50 [ 1444.466689][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1655'. [ 1448.517162][T11042] netlink: 'syz.6.1661': attribute type 13 has an invalid length. [ 1448.766823][T11047] trusted_key: syz.4.1662 sent an empty control message without MSG_MORE. [ 1449.451186][T11050] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11050 comm=syz.4.1663 [ 1453.753715][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1668'. [ 1460.968157][T11103] FAULT_INJECTION: forcing a failure. [ 1460.968157][T11103] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.975678][T11103] CPU: 0 UID: 0 PID: 11103 Comm: syz.4.1683 Tainted: G L syzkaller #0 PREEMPT [ 1460.975850][T11103] Tainted: [L]=SOFTLOCKUP [ 1460.975878][T11103] Hardware name: ARM-Versatile Express [ 1460.975907][T11103] Call trace: [ 1460.975960][T11103] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1460.976090][T11103] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1460.976109][T11103] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1460.976156][T11103] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1460.976207][T11103] r7:00000000 r6:00000000 r5:833f0c40 r4:82b1ac48 [ 1460.976221][T11103] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1460.976267][T11103] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1460.976326][T11103] r8:833f0c40 r7:00000000 r6:83001480 r5:00000cc0 r4:00000118 [ 1460.976342][T11103] [<80568de8>] (should_failslab) from [<805482f8>] (__kvmalloc_node_noprof+0xb8/0x530) [ 1460.976395][T11103] [<80548240>] (__kvmalloc_node_noprof) from [<807d7408>] (sys_add_key+0x1ac/0x280) [ 1460.976502][T11103] r10:00000135 r9:833f0c40 r8:8020029c r7:20000400 r6:00000000 r5:00000118 [ 1460.976584][T11103] r4:00000009 [ 1460.976614][T11103] [<807d725c>] (sys_add_key) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1460.976684][T11103] Exception stack(0xdfbf9fa8 to 0xdfbf9ff0) [ 1460.976747][T11103] 9fa0: ffffffff 00000000 20000000 00000000 20000400 00000118 [ 1460.976790][T11103] 9fc0: ffffffff 00000000 00356318 00000135 003562d8 00000000 00000001 76fe70dc [ 1460.976824][T11103] 9fe0: 76fe6e88 76fe6e78 00018fa0 00130a50 [ 1460.976864][T11103] r8:8020029c r7:00000135 r6:00356318 r5:00000000 r4:ffffffff [ 1462.044740][T11105] bond0: (slave bond_slave_0): Releasing backup interface [ 1462.127855][T11105] bond0: (slave bond_slave_1): Releasing backup interface [ 1462.200349][T11105] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1466.720245][T11140] FAULT_INJECTION: forcing a failure. [ 1466.720245][T11140] name failslab, interval 1, probability 0, space 0, times 0 [ 1466.725696][T11140] CPU: 0 UID: 0 PID: 11140 Comm: syz.4.1698 Tainted: G L syzkaller #0 PREEMPT [ 1466.725852][T11140] Tainted: [L]=SOFTLOCKUP [ 1466.725877][T11140] Hardware name: ARM-Versatile Express [ 1466.725903][T11140] Call trace: [ 1466.725953][T11140] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1466.726066][T11140] r7:60000113 r6:60000113 r5:82336570 r4:00000000 [ 1466.726088][T11140] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1466.726145][T11140] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1466.726267][T11140] r7:8380a4c0 r6:00000000 r5:8380a4c0 r4:82b1ac48 [ 1466.726287][T11140] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1466.726347][T11140] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1466.726422][T11140] r8:00000000 r7:8380a4c0 r6:81b495c4 r5:00000cc0 r4:83002840 [ 1466.726450][T11140] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 1466.726513][T11140] [<80546804>] (kmem_cache_alloc_noprof) from [<81b495c4>] (mas_alloc_nodes+0xd4/0x10c) [ 1466.726602][T11140] r10:20004000 r9:20004fff r8:ea7f5e48 r7:20004000 r6:00000cc0 r5:00000001 [ 1466.726630][T11140] r4:ea7f5e48 [ 1466.726648][T11140] [<81b494f0>] (mas_alloc_nodes) from [<81b4caf8>] (mas_preallocate+0x17c/0x25c) [ 1466.726725][T11140] r7:20004000 r6:00000cc0 r5:85e05c80 r4:ea7f5e48 [ 1466.726746][T11140] [<81b4c97c>] (mas_preallocate) from [<80526e7c>] (__split_vma+0x144/0x434) [ 1466.726814][T11140] r6:82e4a79c r5:85e05c80 r4:9340c500 [ 1466.726839][T11140] [<80526d38>] (__split_vma) from [<8052724c>] (vms_gather_munmap_vmas+0xe0/0x4fc) [ 1466.726907][T11140] r10:ea7f5d1c r9:7f000000 r8:ea7f5d28 r7:82e4a79c r6:82e4a7a0 r5:ea7f5d58 [ 1466.726928][T11140] r4:9340c500 [ 1466.726947][T11140] [<8052716c>] (vms_gather_munmap_vmas) from [<80529f14>] (do_vmi_align_munmap+0xfc/0x278) [ 1466.727016][T11140] r10:ea7f5d1c r9:7f000000 r8:00002000 r7:00000000 r6:20001000 r5:20004000 [ 1466.727038][T11140] r4:ea7f5e48 [ 1466.727058][T11140] [<80529e18>] (do_vmi_align_munmap) from [<8052a110>] (do_vmi_munmap+0x80/0xfc) [ 1466.727125][T11140] r10:00000000 r9:9340c500 r8:20001000 r7:00000000 r6:ea7f5e48 r5:86182000 [ 1466.727148][T11140] r4:20004000 [ 1466.727167][T11140] [<8052a090>] (do_vmi_munmap) from [<8051354c>] (move_vma+0x4d4/0x6c0) [ 1466.727233][T11140] r8:20001000 r7:8380a4c0 r6:ea7f5e48 r5:00000000 r4:ea7f5f38 [ 1466.727252][T11140] [<80513078>] (move_vma) from [<805137e8>] (mremap_to+0xb0/0x124) [ 1466.727320][T11140] r10:000000a3 r9:20001000 r8:8618214c r7:86182000 r6:8380a4c0 r5:86182000 [ 1466.727342][T11140] r4:ea7f5f38 [ 1466.727361][T11140] [<80513738>] (mremap_to) from [<80513b80>] (sys_mremap+0x324/0x8e0) [ 1466.727418][T11140] r5:00000002 r4:00000003 [ 1466.727445][T11140] [<8051385c>] (sys_mremap) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1466.727498][T11140] Exception stack(0xea7f5fa8 to 0xea7f5ff0) [ 1466.727543][T11140] 5fa0: 20005000 00000000 20001000 00003000 00004000 00000003 [ 1466.727584][T11140] 5fc0: 20005000 00000000 00356318 000000a3 003562d8 00000000 00000001 76fe70dc [ 1466.727614][T11140] 5fe0: 76fe6e88 76fe6e78 00018fa0 00130a50 [ 1466.727653][T11140] r10:000000a3 r9:8380a4c0 r8:8020029c r7:000000a3 r6:00356318 r5:00000000 [ 1466.727675][T11140] r4:20005000 [ 1467.843322][T11148] FAULT_INJECTION: forcing a failure. [ 1467.843322][T11148] name failslab, interval 1, probability 0, space 0, times 0 [ 1467.876567][T11148] CPU: 0 UID: 0 PID: 11148 Comm: syz.4.1702 Tainted: G L syzkaller #0 PREEMPT [ 1467.876739][T11148] Tainted: [L]=SOFTLOCKUP [ 1467.876762][T11148] Hardware name: ARM-Versatile Express [ 1467.876788][T11148] Call trace: [ 1467.876842][T11148] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1467.876999][T11148] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1467.877025][T11148] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1467.877087][T11148] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1467.877170][T11148] r7:833f0c40 r6:00000000 r5:833f0c40 r4:82b1ac48 [ 1467.877191][T11148] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1467.877253][T11148] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1467.877329][T11148] r8:00000000 r7:833f0c40 r6:805c25ec r5:00000cc0 r4:830bdc00 [ 1467.877349][T11148] [<80568de8>] (should_failslab) from [<80546c44>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 1467.877412][T11148] [<80546be4>] (kmem_cache_alloc_lru_noprof) from [<805c25ec>] (__d_alloc+0x30/0x220) [ 1467.877494][T11148] r10:83856c00 r9:82543900 r8:81cf530c r7:83856c00 r6:831def10 r5:ea881e00 [ 1467.877516][T11148] r4:8238f9fc [ 1467.877534][T11148] [<805c25bc>] (__d_alloc) from [<805c5c70>] (d_alloc_pseudo+0x10/0x3c) [ 1467.877609][T11148] r9:833f0c40 r8:81cf530c r7:00000002 r6:831def10 r5:8517ac00 r4:8238f9fc [ 1467.877630][T11148] [<805c5c60>] (d_alloc_pseudo) from [<805a3374>] (alloc_file_pseudo+0x7c/0x154) [ 1467.877682][T11148] [<805a32f8>] (alloc_file_pseudo) from [<8061a35c>] (anon_inode_create_getfile+0x7c/0xc4) [ 1467.877753][T11148] r10:867ce814 r9:00080002 r8:867ce800 r7:82543984 r6:8517ac00 r5:81cf530c [ 1467.877776][T11148] r4:8238f9fc [ 1467.877794][T11148] [<8061a2e0>] (anon_inode_create_getfile) from [<80906910>] (io_uring_setup+0x764/0x87c) [ 1467.877873][T11148] r9:867cebb0 r8:00000000 r7:20000240 r6:b5403587 r5:867ce800 r4:833f0c40 [ 1467.877894][T11148] [<809061ac>] (io_uring_setup) from [<80906a70>] (sys_io_uring_setup+0x48/0x88) [ 1467.877979][T11148] r10:000001a9 r9:833f0c40 r8:8020029c r7:000001a9 r6:00004ded r5:20000240 [ 1467.878002][T11148] r4:82a0b710 [ 1467.878020][T11148] [<80906a28>] (sys_io_uring_setup) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1467.878076][T11148] Exception stack(0xea881fa8 to 0xea881ff0) [ 1467.878121][T11148] 1fa0: 00000000 00000000 00004ded 20000240 00000000 00000000 [ 1467.878160][T11148] 1fc0: 00000000 00000000 0035630c 000001a9 003562d8 00000000 00000001 76fe70dc [ 1467.878192][T11148] 1fe0: 76fe6e88 76fe6e78 00018fa0 00130a50 [ 1467.878227][T11148] r7:000001a9 r6:0035630c r5:00000000 r4:00000000 [ 1468.238239][T11150] FAULT_INJECTION: forcing a failure. [ 1468.238239][T11150] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.250057][T11150] CPU: 0 UID: 0 PID: 11150 Comm: syz.6.1703 Tainted: G L syzkaller #0 PREEMPT [ 1468.250225][T11150] Tainted: [L]=SOFTLOCKUP [ 1468.250248][T11150] Hardware name: ARM-Versatile Express [ 1468.250274][T11150] Call trace: [ 1468.250320][T11150] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1468.250437][T11150] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1468.250459][T11150] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1468.250517][T11150] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1468.250579][T11150] r7:00000004 r6:00000000 r5:84006200 r4:82b1ac48 [ 1468.250598][T11150] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1468.250661][T11150] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1468.250732][T11150] r8:84006200 r7:00000004 r6:80a0a378 r5:00000dc0 r4:83001240 [ 1468.250754][T11150] [<80568de8>] (should_failslab) from [<805488cc>] (__kmalloc_cache_noprof+0x58/0x338) [ 1468.250812][T11150] [<80548874>] (__kmalloc_cache_noprof) from [<80a0a378>] (group_cpus_evenly+0x50/0x18c) [ 1468.250879][T11150] r10:84006200 r9:ea60dd80 r8:00000000 r7:8338d8bc r6:00000001 r5:8338d8c0 [ 1468.250899][T11150] r4:00000000 [ 1468.250915][T11150] [<80a0a328>] (group_cpus_evenly) from [<808c1e88>] (blk_mq_map_queues+0x38/0x104) [ 1468.250995][T11150] r10:84006200 r9:82a0b2d4 r8:00000000 r7:8338d8bc r6:00000000 r5:8338d8c0 [ 1468.251022][T11150] r4:00000000 [ 1468.251041][T11150] [<808c1e50>] (blk_mq_map_queues) from [<808b463c>] (blk_mq_update_queue_map+0xb4/0xc4) [ 1468.251111][T11150] r7:8338d8bc r6:00000000 r5:8338d8c8 r4:8338d8bc [ 1468.251130][T11150] [<808b4588>] (blk_mq_update_queue_map) from [<808bdccc>] (blk_mq_alloc_tag_set+0x188/0x3f8) [ 1468.251194][T11150] r9:82a0b2d4 r8:00000000 r7:8338d92c r6:00000000 r5:8338d8c8 r4:8338d8bc [ 1468.251217][T11150] [<808bdb44>] (blk_mq_alloc_tag_set) from [<80c141bc>] (loop_add+0x128/0x2fc) [ 1468.251295][T11150] r10:84006200 r9:8338d8bc r8:862d8300 r7:82d27660 r6:ffffffe4 r5:00000001 [ 1468.251319][T11150] r4:8338d800 r3:00000044 [ 1468.251337][T11150] [<80c14094>] (loop_add) from [<80c15b64>] (loop_control_ioctl+0x58/0x230) [ 1468.251409][T11150] r9:00000005 r8:862d8300 r7:ffffffe4 r6:00004c80 r5:ffffffe4 r4:00000000 [ 1468.251430][T11150] [<80c15b0c>] (loop_control_ioctl) from [<805bdf78>] (sys_ioctl+0x244/0xb5c) [ 1468.251497][T11150] r6:00004c80 r5:862d8301 r4:00000000 [ 1468.251517][T11150] [<805bdd34>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1468.251570][T11150] Exception stack(0xea60dfa8 to 0xea60dff0) [ 1468.251609][T11150] dfa0: 00000000 00000000 00000005 00004c80 ffffffe4 00000000 [ 1468.251641][T11150] dfc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f090dc [ 1468.251668][T11150] dfe0: 76f08e88 76f08e78 00018fa0 00130a50 [ 1468.251701][T11150] r10:00000036 r9:84006200 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 1468.251721][T11150] r4:00000000 [ 1473.295604][T11189] FAULT_INJECTION: forcing a failure. [ 1473.295604][T11189] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1473.296122][T11189] CPU: 0 UID: 0 PID: 11189 Comm: syz.4.1718 Tainted: G L syzkaller #0 PREEMPT [ 1473.296230][T11189] Tainted: [L]=SOFTLOCKUP [ 1473.296251][T11189] Hardware name: ARM-Versatile Express [ 1473.296276][T11189] Call trace: [ 1473.296317][T11189] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1473.296426][T11189] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1473.296446][T11189] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1473.296504][T11189] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1473.296567][T11189] r7:dfd2dec0 r6:00000000 r5:84006200 r4:82afac00 [ 1473.296583][T11189] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1473.296638][T11189] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 1473.296706][T11189] r8:833ddfc0 r7:dfd2dec0 r6:000000cc r5:20000200 r4:84006200 [ 1473.296723][T11189] [<809fdf04>] (should_fail) from [<80353f88>] (should_fail_futex+0x30/0x34) [ 1473.296790][T11189] [<80353f58>] (should_fail_futex) from [<80356bbc>] (futex_lock_pi_atomic+0xc0/0x520) [ 1473.296840][T11189] [<80356afc>] (futex_lock_pi_atomic) from [<803571fc>] (futex_lock_pi+0x118/0x428) [ 1473.296906][T11189] r10:00000000 r9:00000000 r8:dfd2ddfc r7:84006200 r6:dfd2de00 r5:00000001 [ 1473.296927][T11189] r4:833ddfc0 [ 1473.296945][T11189] [<803570e4>] (futex_lock_pi) from [<80355928>] (do_futex+0x124/0x1d0) [ 1473.297041][T11189] r10:000000f0 r9:00000008 r8:84006200 r7:00000000 r6:20000200 r5:00000008 [ 1473.297064][T11189] r4:00000000 [ 1473.297081][T11189] [<80355804>] (do_futex) from [<8035626c>] (sys_futex_time32+0x11c/0x1bc) [ 1473.297132][T11189] r4:00000000 [ 1473.297150][T11189] [<80356150>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1473.297197][T11189] Exception stack(0xdfd2dfa8 to 0xdfd2dff0) [ 1473.297236][T11189] dfa0: 00000000 34fffffd 20000200 00000008 00000000 00000000 [ 1473.297274][T11189] dfc0: 00000000 34fffffd 0035631c 000000f0 003562d8 00000000 00000001 76fe70dc [ 1473.297303][T11189] dfe0: 76fe6e88 76fe6e78 00018fa0 00130a50 [ 1473.297339][T11189] r9:84006200 r8:8020029c r7:000000f0 r6:0035631c r5:34fffffd r4:00000000 [ 1473.883920][ T28] audit: type=1400 audit(1474.786:1430): avc: denied { mount } for pid=11190 comm="syz.4.1719" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1474.457582][T11193] fuse: Bad value for 'fd' [ 1475.960003][T11205] fuse: Bad value for 'fd' [ 1476.417321][T11208] FAULT_INJECTION: forcing a failure. [ 1476.417321][T11208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1476.427182][T11208] CPU: 0 UID: 0 PID: 11208 Comm: syz.6.1727 Tainted: G L syzkaller #0 PREEMPT [ 1476.427359][T11208] Tainted: [L]=SOFTLOCKUP [ 1476.427382][T11208] Hardware name: ARM-Versatile Express [ 1476.427407][T11208] Call trace: [ 1476.427452][T11208] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1476.427568][T11208] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1476.427588][T11208] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1476.427642][T11208] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1476.427706][T11208] r7:000001a9 r6:00000000 r5:84f5c980 r4:82b54788 [ 1476.427724][T11208] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1476.427792][T11208] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 1476.427857][T11208] r8:8020029c r7:000001a9 r6:00000002 r5:20000180 r4:84f5c980 [ 1476.427876][T11208] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 1476.427925][T11208] [<809fdf1c>] (should_fail_usercopy) from [<809061e4>] (io_uring_setup+0x38/0x87c) [ 1476.427985][T11208] [<809061ac>] (io_uring_setup) from [<80906a70>] (sys_io_uring_setup+0x48/0x88) [ 1476.428055][T11208] r10:000001a9 r9:84f5c980 r8:8020029c r7:000001a9 r6:00000002 r5:20000180 [ 1476.428079][T11208] r4:82a0b710 [ 1476.428097][T11208] [<80906a28>] (sys_io_uring_setup) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1476.428150][T11208] Exception stack(0xe0209fa8 to 0xe0209ff0) [ 1476.428191][T11208] 9fa0: 84458081 0009b986 00000002 20000180 20000480 00000000 [ 1476.428228][T11208] 9fc0: 84458081 0009b986 00000001 000001a9 20000040 00000000 00000001 76f090dc [ 1476.428258][T11208] 9fe0: 76f08e48 76f08e38 00014854 00130a50 [ 1476.428291][T11208] r7:000001a9 r6:00000001 r5:0009b986 r4:84458081 [ 1477.644554][T11217] fuse: Bad value for 'fd' [ 1478.198139][T11221] FAULT_INJECTION: forcing a failure. [ 1478.198139][T11221] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.206843][T11221] CPU: 0 UID: 0 PID: 11221 Comm: syz.6.1734 Tainted: G L syzkaller #0 PREEMPT [ 1478.207001][T11221] Tainted: [L]=SOFTLOCKUP [ 1478.207031][T11221] Hardware name: ARM-Versatile Express [ 1478.207058][T11221] Call trace: [ 1478.207105][T11221] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1478.207219][T11221] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1478.207239][T11221] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1478.207298][T11221] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1478.207364][T11221] r7:84006200 r6:00000000 r5:84006200 r4:82b1ac48 [ 1478.207381][T11221] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1478.207444][T11221] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1478.207518][T11221] r8:00000000 r7:84006200 r6:807d478c r5:00000dc0 r4:830bd480 [ 1478.207540][T11221] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 1478.207598][T11221] [<80546804>] (kmem_cache_alloc_noprof) from [<807d478c>] (key_alloc+0x3b4/0x55c) [ 1478.207666][T11221] r10:82cf03dc r9:00000007 r8:e0349e58 r7:00000000 r6:82b421e0 r5:82b421a8 [ 1478.207686][T11221] r4:86085040 [ 1478.207704][T11221] [<807d43d8>] (key_alloc) from [<807dc29c>] (request_key_auth_new+0x1f8/0x314) [ 1478.207769][T11221] r10:84006200 r9:00000000 r8:86085064 r7:855c3a80 r6:00000000 r5:83375cc0 [ 1478.207789][T11221] r4:86085040 [ 1478.207805][T11221] [<807dc0a4>] (request_key_auth_new) from [<807dbba4>] (request_key_and_link+0x62c/0x73c) [ 1478.207869][T11221] r10:83375d20 r9:00000000 r8:00000000 r7:86163c00 r6:83375cc0 r5:82b4d010 [ 1478.207890][T11221] r4:855c3a80 [ 1478.207908][T11221] [<807db578>] (request_key_and_link) from [<807d75f8>] (sys_request_key+0x11c/0x1ac) [ 1478.207979][T11221] r10:00000136 r9:82b4d010 r8:8020029c r7:860853c0 r6:00000000 r5:86163c00 [ 1478.208001][T11221] r4:0000000a [ 1478.208026][T11221] [<807d74dc>] (sys_request_key) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1478.208080][T11221] Exception stack(0xe0349fa8 to 0xe0349ff0) [ 1478.208118][T11221] 9fa0: 00000000 00000000 20000040 200000c0 200001c0 00000000 [ 1478.208157][T11221] 9fc0: 00000000 00000000 00356314 00000136 003562d8 00000000 00000001 76f090dc [ 1478.208186][T11221] 9fe0: 76f08e88 76f08e78 00018fa0 00130a50 [ 1478.208224][T11221] r9:84006200 r8:8020029c r7:00000136 r6:00356314 r5:00000000 r4:00000000 [ 1485.172388][T11254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1746'. [ 1486.898786][ T28] audit: type=1326 audit(1487.796:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.4.1748" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1486.899147][ T28] audit: type=1326 audit(1487.796:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.4.1748" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1486.899485][ T28] audit: type=1326 audit(1487.796:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.4.1748" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1486.899690][ T28] audit: type=1326 audit(1487.796:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.4.1748" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1486.899883][ T28] audit: type=1326 audit(1487.796:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.4.1748" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1486.900078][ T28] audit: type=1326 audit(1487.796:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.4.1748" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1486.900271][ T28] audit: type=1326 audit(1487.796:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.4.1748" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1486.900477][ T28] audit: type=1326 audit(1487.796:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.4.1748" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1486.900684][ T28] audit: type=1326 audit(1487.796:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.4.1748" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1486.970761][ T28] audit: type=1326 audit(1487.876:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.4.1748" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1510.420426][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 1510.421002][ T28] audit: type=1326 audit(1511.326:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.6.1770" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1510.438116][ T28] audit: type=1326 audit(1511.346:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.6.1770" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1510.452539][ T28] audit: type=1326 audit(1511.356:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.6.1770" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1510.471493][ T28] audit: type=1326 audit(1511.376:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.6.1770" exe="/syz-executor" sig=0 arch=40000028 syscall=322 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1510.481194][ T28] audit: type=1326 audit(1511.376:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.6.1770" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1510.488634][ T28] audit: type=1326 audit(1511.376:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.6.1770" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1510.510727][ T28] audit: type=1326 audit(1511.416:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.6.1770" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1510.511116][ T28] audit: type=1326 audit(1511.416:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.6.1770" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1510.540776][ T28] audit: type=1326 audit(1511.436:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.6.1770" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1510.541150][ T28] audit: type=1326 audit(1511.436:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.6.1770" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1518.133704][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 1518.134215][ T28] audit: type=1400 audit(1519.036:1481): avc: denied { map } for pid=11381 comm="syz.4.1783" path="/dev/ublkc0" dev="devtmpfs" ino=811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1520.399408][T11408] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1787'. [ 1520.492327][T11408] fuse: Unknown parameter '00000000000000000000' [ 1525.321369][T11419] FAULT_INJECTION: forcing a failure. [ 1525.321369][T11419] name failslab, interval 1, probability 0, space 0, times 0 [ 1525.345500][T11419] CPU: 0 UID: 0 PID: 11419 Comm: syz.4.1791 Tainted: G L syzkaller #0 PREEMPT [ 1525.345657][T11419] Tainted: [L]=SOFTLOCKUP [ 1525.345677][T11419] Hardware name: ARM-Versatile Express [ 1525.345700][T11419] Call trace: [ 1525.345742][T11419] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1525.345845][T11419] r7:60000113 r6:60000113 r5:82336570 r4:00000000 [ 1525.345862][T11419] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1525.345911][T11419] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1525.345963][T11419] r7:83e4ee40 r6:00000000 r5:83e4ee40 r4:82b1ac48 [ 1525.345978][T11419] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1525.346085][T11419] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1525.346148][T11419] r8:00000000 r7:83e4ee40 r6:83001240 r5:00000dc0 r4:00000004 [ 1525.346164][T11419] [<80568de8>] (should_failslab) from [<80547834>] (__kmalloc_noprof+0xa8/0x3c8) [ 1525.346213][T11419] [<8054778c>] (__kmalloc_noprof) from [<807ea1c8>] (lsm_blob_alloc+0x28/0x3c) [ 1525.346273][T11419] r10:82cf03dc r9:0000000e r8:dfe21e60 r7:00000001 r6:838e8480 r5:833759c0 [ 1525.346292][T11419] r4:833759f0 [ 1525.346309][T11419] [<807ea1a0>] (lsm_blob_alloc) from [<807fcc64>] (security_key_alloc+0x30/0x228) [ 1525.346362][T11419] r5:833759c0 r4:833759c0 [ 1525.346377][T11419] [<807fcc34>] (security_key_alloc) from [<807d4640>] (key_alloc+0x268/0x55c) [ 1525.346428][T11419] r7:00000000 r6:82b42144 r5:82b421a8 r4:833759c0 [ 1525.346443][T11419] [<807d43d8>] (key_alloc) from [<807d551c>] (keyring_alloc+0x4c/0x98) [ 1525.346499][T11419] r10:83375d20 r9:83375cc0 r8:8560dd00 r7:855c3a80 r6:00000000 r5:00000000 [ 1525.346560][T11419] r4:00000000 [ 1525.346577][T11419] [<807d54d0>] (keyring_alloc) from [<807db260>] (call_sbin_request_key+0x114/0x42c) [ 1525.346632][T11419] r5:838e8480 r4:00000000 [ 1525.346647][T11419] [<807db14c>] (call_sbin_request_key) from [<807dbbd0>] (request_key_and_link+0x658/0x73c) [ 1525.346707][T11419] r9:00000000 r8:00000000 r7:86163f80 r6:83375cc0 r5:82b4d010 r4:855c3a80 [ 1525.346724][T11419] [<807db578>] (request_key_and_link) from [<807d75f8>] (sys_request_key+0x11c/0x1ac) [ 1525.346785][T11419] r10:00000136 r9:82b4d010 r8:8020029c r7:862a8a00 r6:00000000 r5:86163f80 [ 1525.346803][T11419] r4:0000000a [ 1525.346818][T11419] [<807d74dc>] (sys_request_key) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1525.346861][T11419] Exception stack(0xdfe21fa8 to 0xdfe21ff0) [ 1525.346896][T11419] 1fa0: 00000000 00000000 20000040 200000c0 200001c0 00000000 [ 1525.346927][T11419] 1fc0: 00000000 00000000 00356314 00000136 003562d8 00000000 00000001 76fe70dc [ 1525.346950][T11419] 1fe0: 76fe6e88 76fe6e78 00018fa0 00130a50 [ 1525.346981][T11419] r9:83e4ee40 r8:8020029c r7:00000136 r6:00356314 r5:00000000 r4:00000000 [ 1529.587144][ T28] audit: type=1400 audit(1530.486:1482): avc: denied { read } for pid=11437 comm="syz.4.1798" path="socket:[20368]" dev="sockfs" ino=20368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1533.745585][ T28] audit: type=1326 audit(1534.646:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11442 comm="syz.6.1799" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1533.751646][ T28] audit: type=1326 audit(1534.656:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11442 comm="syz.6.1799" exe="/syz-executor" sig=0 arch=40000028 syscall=187 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1533.777668][ T28] audit: type=1326 audit(1534.676:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11442 comm="syz.6.1799" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1533.779610][ T28] audit: type=1326 audit(1534.676:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11442 comm="syz.6.1799" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1544.086584][ T28] audit: type=1400 audit(1544.986:1487): avc: denied { write } for pid=11464 comm="syz.6.1807" name="debug" dev="cgroup2" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1544.087019][ T28] audit: type=1400 audit(1544.986:1488): avc: denied { setattr } for pid=11464 comm="syz.6.1807" name="debug" dev="cgroup2" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1558.516666][ T28] audit: type=1400 audit(1559.406:1489): avc: denied { write } for pid=11491 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1560.068417][ T28] audit: type=1400 audit(1560.976:1490): avc: denied { write } for pid=11497 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1560.081007][ T28] audit: type=1400 audit(1560.986:1491): avc: denied { watch_reads } for pid=11499 comm="syz.4.1819" path="/148/file1" dev="tmpfs" ino=794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1565.697077][T11528] FAULT_INJECTION: forcing a failure. [ 1565.697077][T11528] name failslab, interval 1, probability 0, space 0, times 0 [ 1565.700053][T11528] CPU: 0 UID: 0 PID: 11528 Comm: syz.4.1830 Tainted: G L syzkaller #0 PREEMPT [ 1565.700190][T11528] Tainted: [L]=SOFTLOCKUP [ 1565.700215][T11528] Hardware name: ARM-Versatile Express [ 1565.700242][T11528] Call trace: [ 1565.700290][T11528] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1565.700409][T11528] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1565.700430][T11528] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1565.700502][T11528] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1565.700567][T11528] r7:84fd24c0 r6:00000000 r5:84fd24c0 r4:82b1ac48 [ 1565.700587][T11528] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1565.700649][T11528] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1565.700725][T11528] r8:00000000 r7:84fd24c0 r6:8162ec88 r5:00000cc0 r4:830e5f00 [ 1565.700746][T11528] [<80568de8>] (should_failslab) from [<80546c44>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 1565.700807][T11528] [<80546be4>] (kmem_cache_alloc_lru_noprof) from [<8162ec88>] (sock_alloc_inode+0x24/0x84) [ 1565.700885][T11528] r10:00000119 r9:855e4000 r8:8020029c r7:00000000 r6:81e615c0 r5:830c2800 [ 1565.700908][T11528] r4:00000002 [ 1565.700928][T11528] [<8162ec64>] (sock_alloc_inode) from [<805cb844>] (alloc_inode+0x24/0xd0) [ 1565.701046][T11528] r5:830c2800 r4:00000002 [ 1565.701067][T11528] [<805cb820>] (alloc_inode) from [<8162e538>] (sock_alloc+0x20/0x78) [ 1565.701131][T11528] r7:00000000 r6:00000000 r5:00000001 r4:00000002 [ 1565.701151][T11528] [<8162e518>] (sock_alloc) from [<8162e73c>] (__sock_create+0x80/0x22c) [ 1565.701206][T11528] r5:00000001 r4:00000002 [ 1565.701225][T11528] [<8162e6bc>] (__sock_create) from [<81631928>] (__sys_socket+0x94/0x118) [ 1565.701295][T11528] r10:00000119 r9:84fd24c0 r8:8020029c r7:00000119 r6:84fd24c0 r5:00000002 [ 1565.701318][T11528] r4:00000001 [ 1565.701336][T11528] [<81631894>] (__sys_socket) from [<816319bc>] (sys_socket+0x10/0x14) [ 1565.701397][T11528] r6:00356310 r5:00000000 r4:00000000 [ 1565.701418][T11528] [<816319ac>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1565.701481][T11528] Exception stack(0xdfa45fa8 to 0xdfa45ff0) [ 1565.701524][T11528] 5fa0: 00000000 00000000 00000002 00000001 00000000 00000000 [ 1565.701563][T11528] 5fc0: 00000000 00000000 00356310 00000119 003562d8 00000000 00000001 76fe70dc [ 1565.701594][T11528] 5fe0: 76fe6e88 76fe6e78 00018fa0 00130a50 [ 1565.777800][T11528] socket: no more sockets [ 1569.426022][T11542] FAULT_INJECTION: forcing a failure. [ 1569.426022][T11542] name failslab, interval 1, probability 0, space 0, times 0 [ 1569.429435][T11542] CPU: 0 UID: 0 PID: 11542 Comm: syz.4.1835 Tainted: G L syzkaller #0 PREEMPT [ 1569.429562][T11542] Tainted: [L]=SOFTLOCKUP [ 1569.429580][T11542] Hardware name: ARM-Versatile Express [ 1569.429602][T11542] Call trace: [ 1569.429640][T11542] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1569.429742][T11542] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1569.429759][T11542] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1569.429806][T11542] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1569.429859][T11542] r7:84020c40 r6:00000000 r5:84020c40 r4:82b1ac48 [ 1569.429873][T11542] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1569.429920][T11542] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1569.429988][T11542] r8:00000000 r7:84020c40 r6:8162ec88 r5:00000cc0 r4:830e5f00 [ 1569.430005][T11542] [<80568de8>] (should_failslab) from [<80546c44>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 1569.430054][T11542] [<80546be4>] (kmem_cache_alloc_lru_noprof) from [<8162ec88>] (sock_alloc_inode+0x24/0x84) [ 1569.430114][T11542] r10:00000119 r9:855e4000 r8:8020029c r7:00000000 r6:81e615c0 r5:830c2800 [ 1569.430132][T11542] r4:00000002 [ 1569.430177][T11542] [<8162ec64>] (sock_alloc_inode) from [<805cb844>] (alloc_inode+0x24/0xd0) [ 1569.430236][T11542] r5:830c2800 r4:00000002 [ 1569.430252][T11542] [<805cb820>] (alloc_inode) from [<8162e538>] (sock_alloc+0x20/0x78) [ 1569.430303][T11542] r7:00000000 r6:00000000 r5:00000001 r4:00000002 [ 1569.430320][T11542] [<8162e518>] (sock_alloc) from [<8162e73c>] (__sock_create+0x80/0x22c) [ 1569.430363][T11542] r5:00000001 r4:00000002 [ 1569.430378][T11542] [<8162e6bc>] (__sock_create) from [<81631928>] (__sys_socket+0x94/0x118) [ 1569.430433][T11542] r10:00000119 r9:84020c40 r8:8020029c r7:00000119 r6:84020c40 r5:00000002 [ 1569.430451][T11542] r4:00000001 [ 1569.430467][T11542] [<81631894>] (__sys_socket) from [<816319bc>] (sys_socket+0x10/0x14) [ 1569.430516][T11542] r6:00356310 r5:00000000 r4:00000000 [ 1569.430530][T11542] [<816319ac>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1569.430573][T11542] Exception stack(0xdfa45fa8 to 0xdfa45ff0) [ 1569.430607][T11542] 5fa0: 00000000 00000000 00000002 00000001 00000000 00000000 [ 1569.430636][T11542] 5fc0: 00000000 00000000 00356310 00000119 003562d8 00000000 00000001 76fe70dc [ 1569.430660][T11542] 5fe0: 76fe6e88 76fe6e78 00018fa0 00130a50 [ 1569.519489][T11542] socket: no more sockets [ 1569.810947][T11546] netlink: 'syz.4.1837': attribute type 5 has an invalid length. [ 1569.826012][T11546] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1837'. [ 1569.832646][T11546] bond0: down delay (196616) is not a multiple of miimon (33271), value rounded to 166355 ms [ 1570.949015][T11556] FAULT_INJECTION: forcing a failure. [ 1570.949015][T11556] name failslab, interval 1, probability 0, space 0, times 0 [ 1570.949608][T11556] CPU: 0 UID: 0 PID: 11556 Comm: syz.6.1841 Tainted: G L syzkaller #0 PREEMPT [ 1570.949724][T11556] Tainted: [L]=SOFTLOCKUP [ 1570.949749][T11556] Hardware name: ARM-Versatile Express [ 1570.949780][T11556] Call trace: [ 1570.949832][T11556] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1570.949961][T11556] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1570.949986][T11556] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1570.950051][T11556] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1570.950119][T11556] r7:84fd24c0 r6:00000000 r5:84fd24c0 r4:82b1ac48 [ 1570.950140][T11556] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1570.950274][T11556] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1570.950360][T11556] r8:00000000 r7:84fd24c0 r6:8162ec88 r5:00000cc0 r4:830e5f00 [ 1570.950382][T11556] [<80568de8>] (should_failslab) from [<80546c44>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 1570.950462][T11556] [<80546be4>] (kmem_cache_alloc_lru_noprof) from [<8162ec88>] (sock_alloc_inode+0x24/0x84) [ 1570.950553][T11556] r10:00000119 r9:855e3000 r8:8020029c r7:00000000 r6:81e615c0 r5:830c2800 [ 1570.950581][T11556] r4:00000002 [ 1570.950602][T11556] [<8162ec64>] (sock_alloc_inode) from [<805cb844>] (alloc_inode+0x24/0xd0) [ 1570.950672][T11556] r5:830c2800 r4:00000002 [ 1570.950692][T11556] [<805cb820>] (alloc_inode) from [<8162e538>] (sock_alloc+0x20/0x78) [ 1570.950760][T11556] r7:00000000 r6:00000000 r5:00000001 r4:00000002 [ 1570.950784][T11556] [<8162e518>] (sock_alloc) from [<8162e73c>] (__sock_create+0x80/0x22c) [ 1570.950846][T11556] r5:00000001 r4:00000002 [ 1570.950865][T11556] [<8162e6bc>] (__sock_create) from [<81631928>] (__sys_socket+0x94/0x118) [ 1570.950940][T11556] r10:00000119 r9:84fd24c0 r8:8020029c r7:00000119 r6:84fd24c0 r5:00000002 [ 1570.950972][T11556] r4:00000001 [ 1570.950993][T11556] [<81631894>] (__sys_socket) from [<816319bc>] (sys_socket+0x10/0x14) [ 1570.951053][T11556] r6:00356310 r5:00000000 r4:00000000 [ 1570.951068][T11556] [<816319ac>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1570.951117][T11556] Exception stack(0xdfd3dfa8 to 0xdfd3dff0) [ 1570.951164][T11556] dfa0: 00000000 00000000 00000002 00000001 00000000 00000000 [ 1570.951208][T11556] dfc0: 00000000 00000000 00356310 00000119 003562d8 00000000 00000001 76f090dc [ 1570.951244][T11556] dfe0: 76f08e88 76f08e78 00018fa0 00130a50 [ 1570.986132][T11556] socket: no more sockets [ 1573.079849][T11592] FAULT_INJECTION: forcing a failure. [ 1573.079849][T11592] name failslab, interval 1, probability 0, space 0, times 0 [ 1573.087978][T11592] CPU: 0 UID: 0 PID: 11592 Comm: syz.4.1846 Tainted: G L syzkaller #0 PREEMPT [ 1573.088144][T11592] Tainted: [L]=SOFTLOCKUP [ 1573.088166][T11592] Hardware name: ARM-Versatile Express [ 1573.088191][T11592] Call trace: [ 1573.088238][T11592] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1573.088358][T11592] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1573.088379][T11592] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1573.088440][T11592] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1573.088513][T11592] r7:84fcc980 r6:00000000 r5:84fcc980 r4:82b1ac48 [ 1573.088531][T11592] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1573.088591][T11592] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1573.088664][T11592] r8:00000000 r7:84fcc980 r6:8162ec88 r5:00000cc0 r4:830e5f00 [ 1573.088686][T11592] [<80568de8>] (should_failslab) from [<80546c44>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 1573.088747][T11592] [<80546be4>] (kmem_cache_alloc_lru_noprof) from [<8162ec88>] (sock_alloc_inode+0x24/0x84) [ 1573.088824][T11592] r10:00000119 r9:855e4000 r8:8020029c r7:00000000 r6:81e615c0 r5:830c2800 [ 1573.088850][T11592] r4:00000002 [ 1573.088867][T11592] [<8162ec64>] (sock_alloc_inode) from [<805cb844>] (alloc_inode+0x24/0xd0) [ 1573.088931][T11592] r5:830c2800 r4:00000002 [ 1573.088949][T11592] [<805cb820>] (alloc_inode) from [<8162e538>] (sock_alloc+0x20/0x78) [ 1573.089054][T11592] r7:00000000 r6:00000000 r5:00000001 r4:00000002 [ 1573.089073][T11592] [<8162e518>] (sock_alloc) from [<8162e73c>] (__sock_create+0x80/0x22c) [ 1573.089129][T11592] r5:00000001 r4:00000002 [ 1573.089146][T11592] [<8162e6bc>] (__sock_create) from [<81631928>] (__sys_socket+0x94/0x118) [ 1573.089214][T11592] r10:00000119 r9:84fcc980 r8:8020029c r7:00000119 r6:84fcc980 r5:00000002 [ 1573.089236][T11592] r4:00000001 [ 1573.089253][T11592] [<81631894>] (__sys_socket) from [<816319bc>] (sys_socket+0x10/0x14) [ 1573.089315][T11592] r6:00356310 r5:00000000 r4:00000000 [ 1573.089335][T11592] [<816319ac>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1573.089388][T11592] Exception stack(0xe0161fa8 to 0xe0161ff0) [ 1573.089431][T11592] 1fa0: 00000000 00000000 00000002 00000001 00000000 00000000 [ 1573.089470][T11592] 1fc0: 00000000 00000000 00356310 00000119 003562d8 00000000 00000001 76fe70dc [ 1573.089508][T11592] 1fe0: 76fe6e88 76fe6e78 00018fa0 00130a50 [ 1573.228114][T11592] socket: no more sockets [ 1573.447455][T11593] FAULT_INJECTION: forcing a failure. [ 1573.447455][T11593] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1573.451959][T11593] CPU: 0 UID: 0 PID: 11593 Comm: syz.6.1847 Tainted: G L syzkaller #0 PREEMPT [ 1573.452112][T11593] Tainted: [L]=SOFTLOCKUP [ 1573.452138][T11593] Hardware name: ARM-Versatile Express [ 1573.452164][T11593] Call trace: [ 1573.452213][T11593] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1573.452329][T11593] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1573.452351][T11593] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1573.452409][T11593] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1573.452471][T11593] r7:00000000 r6:00000000 r5:833fb100 r4:82afac00 [ 1573.452488][T11593] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1573.452561][T11593] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 1573.452620][T11593] r8:000002e4 r7:00000000 r6:e0165ed8 r5:00000000 r4:003562e4 [ 1573.452636][T11593] [<809fdf04>] (should_fail) from [<803544f4>] (get_futex_key+0xa8/0x558) [ 1573.452770][T11593] [<8035444c>] (get_futex_key) from [<80358eec>] (futex_wake+0x70/0x25c) [ 1573.452833][T11593] r10:000000f0 r9:00131dd8 r8:e0165ec8 r7:ffffffff r6:003562e4 r5:000f4240 [ 1573.452855][T11593] r4:00000002 [ 1573.452875][T11593] [<80358e7c>] (futex_wake) from [<80355998>] (do_futex+0x194/0x1d0) [ 1573.452937][T11593] r10:000000f0 r9:00000001 r8:833fb100 r7:000f4240 r6:003562e4 r5:00000081 [ 1573.452986][T11593] r4:000f4240 [ 1573.453007][T11593] [<80355804>] (do_futex) from [<8035626c>] (sys_futex_time32+0x11c/0x1bc) [ 1573.453061][T11593] r4:00000000 [ 1573.453079][T11593] [<80356150>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1573.453129][T11593] Exception stack(0xe0165fa8 to 0xe0165ff0) [ 1573.453174][T11593] 5fa0: 00131dd8 ffffffff 003562e4 00000081 000f4240 00000000 [ 1573.453211][T11593] 5fc0: 00131dd8 ffffffff 76f097d4 000000f0 00340000 00000000 00000001 76f090dc [ 1573.453244][T11593] 5fe0: 76f08f38 76f08f28 00021c30 00130a50 [ 1573.453282][T11593] r9:833fb100 r8:8020029c r7:000000f0 r6:76f097d4 r5:ffffffff r4:00131dd8 [ 1574.851793][ T0] CPU1: smp_ops.cpu_die() returned, trying to resuscitate [ 1575.929405][T11608] FAULT_INJECTION: forcing a failure. [ 1575.929405][T11608] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.930050][T11608] CPU: 1 UID: 0 PID: 11608 Comm: syz.6.1852 Tainted: G L syzkaller #0 PREEMPT [ 1575.930170][T11608] Tainted: [L]=SOFTLOCKUP [ 1575.930192][T11608] Hardware name: ARM-Versatile Express [ 1575.930220][T11608] Call trace: [ 1575.930268][T11608] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1575.930387][T11608] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1575.930409][T11608] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1575.930470][T11608] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1575.930549][T11608] r7:833fc980 r6:00000000 r5:833fc980 r4:82b1ac48 [ 1575.930569][T11608] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1575.930634][T11608] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1575.930720][T11608] r8:00000000 r7:833fc980 r6:8162ec88 r5:00000cc0 r4:830e5f00 [ 1575.930742][T11608] [<80568de8>] (should_failslab) from [<80546c44>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 1575.930806][T11608] [<80546be4>] (kmem_cache_alloc_lru_noprof) from [<8162ec88>] (sock_alloc_inode+0x24/0x84) [ 1575.930886][T11608] r10:00000119 r9:855e3000 r8:8020029c r7:00000000 r6:81e615c0 r5:830c2800 [ 1575.930910][T11608] r4:00000002 [ 1575.930929][T11608] [<8162ec64>] (sock_alloc_inode) from [<805cb844>] (alloc_inode+0x24/0xd0) [ 1575.930998][T11608] r5:830c2800 r4:00000002 [ 1575.931019][T11608] [<805cb820>] (alloc_inode) from [<8162e538>] (sock_alloc+0x20/0x78) [ 1575.931086][T11608] r7:00000000 r6:00000000 r5:00000001 r4:00000002 [ 1575.931107][T11608] [<8162e518>] (sock_alloc) from [<8162e73c>] (__sock_create+0x80/0x22c) [ 1575.931166][T11608] r5:00000001 r4:00000002 [ 1575.931186][T11608] [<8162e6bc>] (__sock_create) from [<81631928>] (__sys_socket+0x94/0x118) [ 1575.931260][T11608] r10:00000119 r9:833fc980 r8:8020029c r7:00000119 r6:833fc980 r5:00000002 [ 1575.931284][T11608] r4:00000001 [ 1575.931303][T11608] [<81631894>] (__sys_socket) from [<816319bc>] (sys_socket+0x10/0x14) [ 1575.931366][T11608] r6:00356310 r5:00000000 r4:00000000 [ 1575.931385][T11608] [<816319ac>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1575.931529][T11608] Exception stack(0xe0209fa8 to 0xe0209ff0) [ 1575.931577][T11608] 9fa0: 00000000 00000000 00000002 00000001 00000000 00000000 [ 1575.931618][T11608] 9fc0: 00000000 00000000 00356310 00000119 003562d8 00000000 00000001 76f090dc [ 1575.931650][T11608] 9fe0: 76f08e88 76f08e78 00018fa0 00130a50 [ 1575.932108][T11608] socket: no more sockets [ 1577.491377][T11617] FAULT_INJECTION: forcing a failure. [ 1577.491377][T11617] name failslab, interval 1, probability 0, space 0, times 0 [ 1577.492113][T11617] CPU: 0 UID: 0 PID: 11617 Comm: syz.4.1855 Tainted: G L syzkaller #0 PREEMPT [ 1577.492221][T11617] Tainted: [L]=SOFTLOCKUP [ 1577.492240][T11617] Hardware name: ARM-Versatile Express [ 1577.492266][T11617] Call trace: [ 1577.492311][T11617] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1577.492417][T11617] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1577.492439][T11617] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1577.492495][T11617] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1577.494742][T11617] r7:8415e200 r6:00000000 r5:8415e200 r4:82b1ac48 [ 1577.495901][T11617] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1577.496009][T11617] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1577.496085][T11617] r8:00000000 r7:8415e200 r6:8162ec88 r5:00000cc0 r4:830e5f00 [ 1577.496104][T11617] [<80568de8>] (should_failslab) from [<80546c44>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 1577.496182][T11617] [<80546be4>] (kmem_cache_alloc_lru_noprof) from [<8162ec88>] (sock_alloc_inode+0x24/0x84) [ 1577.496257][T11617] r10:00000119 r9:855e4000 r8:8020029c r7:00000000 r6:81e615c0 r5:830c2800 [ 1577.496279][T11617] r4:00000002 [ 1577.496295][T11617] [<8162ec64>] (sock_alloc_inode) from [<805cb844>] (alloc_inode+0x24/0xd0) [ 1577.496355][T11617] r5:830c2800 r4:00000002 [ 1577.496372][T11617] [<805cb820>] (alloc_inode) from [<8162e538>] (sock_alloc+0x20/0x78) [ 1577.496429][T11617] r7:00000000 r6:00000000 r5:00000001 r4:00000002 [ 1577.496447][T11617] [<8162e518>] (sock_alloc) from [<8162e73c>] (__sock_create+0x80/0x22c) [ 1577.496496][T11617] r5:00000001 r4:00000002 [ 1577.496521][T11617] [<8162e6bc>] (__sock_create) from [<81631928>] (__sys_socket+0x94/0x118) [ 1577.496608][T11617] r10:00000119 r9:8415e200 r8:8020029c r7:00000119 r6:8415e200 r5:00000002 [ 1577.496630][T11617] r4:00000001 [ 1577.496645][T11617] [<81631894>] (__sys_socket) from [<816319bc>] (sys_socket+0x10/0x14) [ 1577.496707][T11617] r6:00356310 r5:00000000 r4:00000000 [ 1577.496725][T11617] [<816319ac>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1577.496772][T11617] Exception stack(0xe0331fa8 to 0xe0331ff0) [ 1577.496812][T11617] 1fa0: 00000000 00000000 00000002 00000001 00000000 00000000 [ 1577.496992][T11617] 1fc0: 00000000 00000000 00356310 00000119 003562d8 00000000 00000001 76fe70dc [ 1577.497484][T11617] 1fe0: 76fe6e88 76fe6e78 00018fa0 00130a50 [ 1577.601695][T11617] socket: no more sockets [ 1580.210665][T11627] FAULT_INJECTION: forcing a failure. [ 1580.210665][T11627] name failslab, interval 1, probability 0, space 0, times 0 [ 1580.281374][T11627] CPU: 0 UID: 0 PID: 11627 Comm: syz.6.1858 Tainted: G L syzkaller #0 PREEMPT [ 1580.281562][T11627] Tainted: [L]=SOFTLOCKUP [ 1580.281589][T11627] Hardware name: ARM-Versatile Express [ 1580.281625][T11627] Call trace: [ 1580.281681][T11627] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1580.281813][T11627] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1580.281838][T11627] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1580.281899][T11627] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1580.281991][T11627] r7:8380a4c0 r6:00000000 r5:8380a4c0 r4:82b1ac48 [ 1580.282013][T11627] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1580.282082][T11627] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1580.282161][T11627] r8:00000000 r7:8380a4c0 r6:8162ec88 r5:00000cc0 r4:830e5f00 [ 1580.282184][T11627] [<80568de8>] (should_failslab) from [<80546c44>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 1580.282245][T11627] [<80546be4>] (kmem_cache_alloc_lru_noprof) from [<8162ec88>] (sock_alloc_inode+0x24/0x84) [ 1580.282323][T11627] r10:00000119 r9:855e3000 r8:8020029c r7:00000000 r6:81e615c0 r5:830c2800 [ 1580.282345][T11627] r4:00000002 [ 1580.282364][T11627] [<8162ec64>] (sock_alloc_inode) from [<805cb844>] (alloc_inode+0x24/0xd0) [ 1580.282429][T11627] r5:830c2800 r4:00000002 [ 1580.282449][T11627] [<805cb820>] (alloc_inode) from [<8162e538>] (sock_alloc+0x20/0x78) [ 1580.282516][T11627] r7:00000000 r6:00000000 r5:00000001 r4:00000002 [ 1580.282537][T11627] [<8162e518>] (sock_alloc) from [<8162e73c>] (__sock_create+0x80/0x22c) [ 1580.282589][T11627] r5:00000001 r4:00000002 [ 1580.282606][T11627] [<8162e6bc>] (__sock_create) from [<81631928>] (__sys_socket+0x94/0x118) [ 1580.282684][T11627] r10:00000119 r9:8380a4c0 r8:8020029c r7:00000119 r6:8380a4c0 r5:00000002 [ 1580.282713][T11627] r4:00000001 [ 1580.282734][T11627] [<81631894>] (__sys_socket) from [<816319bc>] (sys_socket+0x10/0x14) [ 1580.282802][T11627] r6:00356310 r5:00000000 r4:00000000 [ 1580.282822][T11627] [<816319ac>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1580.282875][T11627] Exception stack(0xe02c1fa8 to 0xe02c1ff0) [ 1580.282931][T11627] 1fa0: 00000000 00000000 00000002 00000001 00000000 00000000 [ 1580.282975][T11627] 1fc0: 00000000 00000000 00356310 00000119 003562d8 00000000 00000001 76f090dc [ 1580.283009][T11627] 1fe0: 76f08e88 76f08e78 00018fa0 00130a50 [ 1580.449125][T11627] socket: no more sockets [ 1591.806743][ T6160] md_update_sb: can't update sb for read-only array md0 [ 1592.993901][T11697] mmap: syz.6.1889 (11697) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1596.208177][T11725] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1895'. [ 1598.688240][T11746] FAULT_INJECTION: forcing a failure. [ 1598.688240][T11746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1598.688693][T11746] CPU: 1 UID: 0 PID: 11746 Comm: syz.6.1900 Tainted: G L syzkaller #0 PREEMPT [ 1598.688793][T11746] Tainted: [L]=SOFTLOCKUP [ 1598.688815][T11746] Hardware name: ARM-Versatile Express [ 1598.688840][T11746] Call trace: [ 1598.688882][T11746] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1598.691668][T11746] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1598.691706][T11746] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1598.691772][T11746] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1598.693861][T11746] r7:0000001a r6:00000000 r5:84fd24c0 r4:82b54788 [ 1598.693882][T11746] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1598.694739][T11746] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 1598.694918][T11746] r8:0000000b r7:0000001a r6:0000000b r5:20000d40 r4:9005b188 [ 1598.694938][T11746] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 1598.694996][T11746] [<809fdf1c>] (should_fail_usercopy) from [<8041cd6c>] (bpf_vlog_reverse_ubuf+0x7c/0x30c) [ 1598.695049][T11746] [<8041ccf0>] (bpf_vlog_reverse_ubuf) from [<8041db78>] (bpf_vlog_finalize+0xf4/0x114) [ 1598.695111][T11746] r10:85d10b00 r9:00000002 r8:ffffffea r7:00000017 r6:dfd39d30 r5:9005b188 [ 1598.695132][T11746] r4:00000003 [ 1598.695147][T11746] [<8041da84>] (bpf_vlog_finalize) from [<8041ef08>] (bpf_log_attr_finalize+0x3c/0xf4) [ 1598.695209][T11746] r7:857fc0c0 r6:00000000 r5:00000000 r4:dfd39e80 [ 1598.695226][T11746] [<8041eecc>] (bpf_log_attr_finalize) from [<804589a4>] (btf_new_fd+0x8f8/0x1838) [ 1598.695286][T11746] r6:00000000 r5:00000000 r4:857fc0c0 [ 1598.695302][T11746] [<804580ac>] (btf_new_fd) from [<803eb208>] (__sys_bpf+0x59c/0x219c) [ 1598.695390][T11746] r10:84fd24c0 r9:00000028 r8:00000000 r7:00000028 r6:dfd39e60 r5:00000000 [ 1598.695412][T11746] r4:00000000 [ 1598.695428][T11746] [<803eac6c>] (__sys_bpf) from [<803ed418>] (sys_bpf+0x50/0x6c) [ 1598.695487][T11746] r10:00000182 r9:84fd24c0 r8:8020029c r7:00000182 r6:00356310 r5:00000000 [ 1598.695506][T11746] r4:00000000 [ 1598.695521][T11746] [<803ed3c8>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1598.695567][T11746] Exception stack(0xdfd39fa8 to 0xdfd39ff0) [ 1598.695606][T11746] 9fa0: 00000000 00000000 00000012 20000180 00000028 00000000 [ 1598.695639][T11746] 9fc0: 00000000 00000000 00356310 00000182 003562d8 00000000 00000001 76f090dc [ 1598.695665][T11746] 9fe0: 76f08e88 76f08e78 00018fa0 00130a50 [ 1598.951539][T11748] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1901'. [ 1599.122535][T11748] device-mapper: ioctl: Invalid ioctl structure: name m, dev f801 [ 1600.641069][ T28] audit: type=1400 audit(1601.546:1492): avc: denied { associate } for pid=11772 comm="syz.6.1909" name="netlink" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1600.650877][ T28] audit: type=1400 audit(1601.556:1493): avc: denied { append } for pid=11772 comm="syz.6.1909" name="netlink" dev="proc" ino=4026532678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1601.591071][ T28] audit: type=1400 audit(1602.496:1494): avc: denied { setattr } for pid=11782 comm="syz.6.1913" name="/" dev="configfs" ino=1082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1603.039805][T11797] FAULT_INJECTION: forcing a failure. [ 1603.039805][T11797] name failslab, interval 1, probability 0, space 0, times 0 [ 1603.040292][T11797] CPU: 1 UID: 0 PID: 11797 Comm: syz.6.1920 Tainted: G L syzkaller #0 PREEMPT [ 1603.040407][T11797] Tainted: [L]=SOFTLOCKUP [ 1603.040428][T11797] Hardware name: ARM-Versatile Express [ 1603.040463][T11797] Call trace: [ 1603.040508][T11797] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1603.040721][T11797] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1603.040792][T11797] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1603.040853][T11797] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1603.040986][T11797] r7:000000b8 r6:00000000 r5:84fa8000 r4:82b1ac48 [ 1603.041528][T11797] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1603.041641][T11797] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1603.041746][T11797] r8:84fa8000 r7:000000b8 r6:8060d10c r5:00400dc0 r4:83001f00 [ 1603.041847][T11797] [<80568de8>] (should_failslab) from [<805488cc>] (__kmalloc_cache_noprof+0x58/0x338) [ 1603.042285][T11797] [<80548874>] (__kmalloc_cache_noprof) from [<8060d10c>] (fsnotify_alloc_group+0x44/0xb8) [ 1603.043334][T11797] r10:00000168 r9:84fa8000 r8:00004000 r7:00000168 r6:81c27cb4 r5:00000001 [ 1603.043371][T11797] r4:00000000 [ 1603.043643][T11797] [<8060d0c8>] (fsnotify_alloc_group) from [<806104fc>] (do_inotify_init+0x3c/0x14c) [ 1603.044608][T11797] r7:00000168 r6:00080000 r5:00000000 r4:00000000 [ 1603.045287][T11797] [<806104c0>] (do_inotify_init) from [<80610b18>] (sys_inotify_init1+0x10/0x14) [ 1603.045390][T11797] r9:84fa8000 r8:8020029c r7:00000168 r6:00356308 r5:00000000 r4:00000000 [ 1603.045413][T11797] [<80610b08>] (sys_inotify_init1) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1603.045487][T11797] Exception stack(0xe01d9fa8 to 0xe01d9ff0) [ 1603.045529][T11797] 9fa0: 00000000 00000000 00080000 00000000 00000000 00000000 [ 1603.045565][T11797] 9fc0: 00000000 00000000 00356308 00000168 003562d8 00000000 00000001 76f090dc [ 1603.045597][T11797] 9fe0: 76f08e88 76f08e78 00018fa0 00130a50 [ 1603.240855][T11799] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1603.827374][ T28] audit: type=1400 audit(1604.726:1495): avc: denied { shutdown } for pid=11808 comm="syz.4.1926" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1605.803765][T11821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=11821 comm=syz.4.1931 [ 1608.253597][ T28] audit: type=1326 audit(1609.156:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11837 comm="syz.6.1936" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1608.259149][ T28] audit: type=1326 audit(1609.156:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11837 comm="syz.6.1936" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1608.280758][ T28] audit: type=1326 audit(1609.186:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11837 comm="syz.6.1936" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1608.283343][ T28] audit: type=1326 audit(1609.186:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11837 comm="syz.6.1936" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1608.291571][ T28] audit: type=1326 audit(1609.186:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11837 comm="syz.6.1936" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1608.297207][ T28] audit: type=1326 audit(1609.186:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11837 comm="syz.6.1936" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1608.318895][ T28] audit: type=1326 audit(1609.186:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11837 comm="syz.6.1936" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1608.322966][ T28] audit: type=1326 audit(1609.186:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11837 comm="syz.6.1936" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1608.367546][ T28] audit: type=1326 audit(1609.186:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11837 comm="syz.6.1936" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1608.371404][ T28] audit: type=1326 audit(1609.236:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11837 comm="syz.6.1936" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1613.153793][T11860] raw_sendmsg: syz.4.1947 forgot to set AF_INET. Fix it! [ 1615.040908][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 1615.047334][ T28] audit: type=1400 audit(1615.946:1543): avc: denied { execute } for pid=11867 comm="syz.4.1951" path="/dev/sg0" dev="devtmpfs" ino=812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1623.830638][T11935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=11935 comm=syz.4.1976 [ 1624.605913][T11944] bond0: option slaves: interface +d does not exist! [ 1628.997408][ T28] audit: type=1400 audit(1629.896:1544): avc: denied { lock } for pid=11979 comm="syz.4.1991" path="socket:[21512]" dev="sockfs" ino=21512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1630.703546][ T28] audit: type=1400 audit(1631.606:1545): avc: denied { setcurrent } for pid=11986 comm="syz.6.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1630.995413][T11996] netlink: 'syz.4.1998': attribute type 1 has an invalid length. [ 1630.996796][T11996] netlink: 'syz.4.1998': attribute type 2 has an invalid length. [ 1631.951335][T12019] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2009'. [ 1631.970212][T12021] FAULT_INJECTION: forcing a failure. [ 1631.970212][T12021] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.970883][T12021] CPU: 1 UID: 0 PID: 12021 Comm: syz.4.2010 Tainted: G L syzkaller #0 PREEMPT [ 1631.970994][T12021] Tainted: [L]=SOFTLOCKUP [ 1631.971015][T12021] Hardware name: ARM-Versatile Express [ 1631.971041][T12021] Call trace: [ 1631.971085][T12021] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1631.971265][T12021] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1631.971485][T12021] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1631.971622][T12021] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1631.971713][T12021] r7:84863100 r6:00000000 r5:84863100 r4:82b1ac48 [ 1631.971774][T12021] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1631.971910][T12021] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1631.972010][T12021] r8:00000000 r7:84863100 r6:83001300 r5:00000cc0 r4:00000048 [ 1631.972034][T12021] [<80568de8>] (should_failslab) from [<80547834>] (__kmalloc_noprof+0xa8/0x3c8) [ 1631.972096][T12021] [<8054778c>] (__kmalloc_noprof) from [<809331d8>] (iovec_from_user+0x44/0xb0) [ 1631.972200][T12021] r10:00000001 r9:84863100 r8:e0325e1c r7:00000000 r6:20003400 r5:e0325e1c [ 1631.972348][T12021] r4:00000009 [ 1631.972423][T12021] [<80933194>] (iovec_from_user) from [<8093328c>] (__import_iovec+0x48/0x1c0) [ 1631.972532][T12021] r9:84863100 r8:00000000 r7:e0325e14 r6:e0325e14 r5:e0325e1c r4:00000009 [ 1631.972570][T12021] [<80933244>] (__import_iovec) from [<80933430>] (import_iovec+0x2c/0x34) [ 1631.972760][T12021] r9:84863100 r8:b5403587 r7:20007880 r6:e0325e14 r5:e0325e18 r4:e0325ee8 [ 1631.972795][T12021] [<80933404>] (import_iovec) from [<81630b30>] (copy_msghdr_from_user+0x148/0x1e0) [ 1631.972894][T12021] [<816309e8>] (copy_msghdr_from_user) from [<81630cfc>] (___sys_recvmsg+0x64/0xbc) [ 1631.973016][T12021] r8:852d8a40 r7:00000020 r6:20007880 r5:e0325ee8 r4:e0325e1c [ 1631.973143][T12021] [<81630c98>] (___sys_recvmsg) from [<81630e74>] (do_recvmmsg+0x120/0x2f4) [ 1631.973231][T12021] r8:00000000 r7:00000020 r6:00000000 r5:20007880 r4:e0325ec8 [ 1631.973327][T12021] [<81630d54>] (do_recvmmsg) from [<816334b0>] (sys_recvmmsg_time32+0xc4/0xd8) [ 1631.973444][T12021] r10:0000016d r9:84863100 r8:00000001 r7:00000020 r6:00000000 r5:20007880 [ 1631.973502][T12021] r4:00000003 [ 1631.973528][T12021] [<816333ec>] (sys_recvmmsg_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1631.973588][T12021] Exception stack(0xe0325fa8 to 0xe0325ff0) [ 1631.973646][T12021] 5fa0: 00000000 00000000 00000003 20007880 00000001 00000020 [ 1631.973714][T12021] 5fc0: 00000000 00000000 00356318 0000016d 003562d8 00000000 00000001 76fe70dc [ 1631.973802][T12021] 5fe0: 76fe6e88 76fe6e78 00018fa0 00130a50 [ 1631.973844][T12021] r8:8020029c r7:0000016d r6:00356318 r5:00000000 r4:00000000 [ 1636.157581][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2027'. [ 1637.068219][T12075] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2029'. [ 1639.303271][T12093] bond0: invalid ARP target specified [ 1643.811089][T12124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=12124 comm=syz.6.2048 [ 1644.897421][T12137] veth0_macvtap: entered allmulticast mode [ 1647.454175][ T28] audit: type=1400 audit(1648.356:1546): avc: denied { view } for pid=12160 comm="syz.4.2063" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1648.326204][T12176] FAULT_INJECTION: forcing a failure. [ 1648.326204][T12176] name failslab, interval 1, probability 0, space 0, times 0 [ 1648.327190][T12176] CPU: 0 UID: 0 PID: 12176 Comm: syz.6.2070 Tainted: G L syzkaller #0 PREEMPT [ 1648.327285][T12176] Tainted: [L]=SOFTLOCKUP [ 1648.327307][T12176] Hardware name: ARM-Versatile Express [ 1648.327333][T12176] Call trace: [ 1648.327416][T12176] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1648.327568][T12176] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1648.327612][T12176] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1648.327691][T12176] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1648.327757][T12176] r7:83e4d5c0 r6:00000000 r5:83e4d5c0 r4:82b1ac48 [ 1648.327790][T12176] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1648.327859][T12176] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1648.327962][T12176] r8:00000000 r7:83e4d5c0 r6:80288690 r5:00000cc0 r4:83002c00 [ 1648.327988][T12176] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 1648.328066][T12176] [<80546804>] (kmem_cache_alloc_noprof) from [<80288690>] (prepare_creds+0x24/0x3c8) [ 1648.328138][T12176] r10:00000017 r9:83e4d5c0 r8:8020029c r7:00000017 r6:83e4d5c0 r5:83e4d5c0 [ 1648.328159][T12176] r4:00000000 [ 1648.328178][T12176] [<8028866c>] (prepare_creds) from [<8026e094>] (__sys_setuid+0x30/0x110) [ 1648.328240][T12176] r7:00000017 r6:83e4d5c0 r5:00000000 r4:00000000 [ 1648.328257][T12176] [<8026e064>] (__sys_setuid) from [<8035ca9c>] (sys_setuid16+0x24/0x28) [ 1648.328326][T12176] r7:00000017 r6:00356308 r5:00000000 r4:00000000 [ 1648.328345][T12176] [<8035ca78>] (sys_setuid16) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1648.328398][T12176] Exception stack(0xdfc69fa8 to 0xdfc69ff0) [ 1648.328443][T12176] 9fa0: 00000000 00000000 00000000 00000000 00000000 00000000 [ 1648.328480][T12176] 9fc0: 00000000 00000000 00356308 00000017 003562d8 00000000 00000001 76f090dc [ 1648.328509][T12176] 9fe0: 76f08e88 76f08e78 00018fa0 00130a50 [ 1648.961435][T12180] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2072'. [ 1649.561938][T12186] FAULT_INJECTION: forcing a failure. [ 1649.561938][T12186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1649.563738][T12186] CPU: 1 UID: 0 PID: 12186 Comm: syz.6.2075 Tainted: G L syzkaller #0 PREEMPT [ 1649.563872][T12186] Tainted: [L]=SOFTLOCKUP [ 1649.563897][T12186] Hardware name: ARM-Versatile Express [ 1649.563925][T12186] Call trace: [ 1649.563972][T12186] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1649.564093][T12186] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1649.564115][T12186] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1649.564176][T12186] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1649.564244][T12186] r7:00000094 r6:00000000 r5:84fa55c0 r4:82b54788 [ 1649.564264][T12186] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1649.564325][T12186] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 1649.564403][T12186] r8:00000000 r7:00000094 r6:00000005 r5:dfc05e40 r4:00000000 [ 1649.564424][T12186] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 1649.564479][T12186] [<809fdf1c>] (should_fail_usercopy) from [<803ead50>] (__sys_bpf+0xe4/0x219c) [ 1649.564593][T12186] [<803eac6c>] (__sys_bpf) from [<803ed418>] (sys_bpf+0x50/0x6c) [ 1649.564667][T12186] r10:00000182 r9:84fa55c0 r8:8020029c r7:00000182 r6:00356310 r5:00000000 [ 1649.564692][T12186] r4:00000000 [ 1649.564711][T12186] [<803ed3c8>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1649.564770][T12186] Exception stack(0xdfc05fa8 to 0xdfc05ff0) [ 1649.564814][T12186] 5fa0: 00000000 00000000 00000005 20000440 00000094 00000000 [ 1649.564853][T12186] 5fc0: 00000000 00000000 00356310 00000182 003562d8 00000000 00000001 76f090dc [ 1649.564884][T12186] 5fe0: 76f08e88 76f08e78 00018fa0 00130a50 [ 1650.989118][ T6244] Process accounting resumed [ 1653.697843][T12214] erspan0: entered promiscuous mode [ 1653.799683][ T28] audit: type=1400 audit(1654.706:1547): avc: denied { watch watch_reads } for pid=12210 comm="syz.6.2087" path="/585/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1653.899409][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2089'. [ 1659.538464][T12251] bond0: invalid ARP target specified [ 1664.044984][T12271] VFS: Mount too revealing [ 1665.148671][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.283082][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.408276][T12282] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=12282 comm=syz.4.2114 [ 1665.804671][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.908481][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.707083][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1666.729157][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1666.752748][ T12] bond0 (unregistering): Released all slaves [ 1666.815744][ T12] bond1 (unregistering): (slave veth5): Releasing backup interface [ 1666.853677][ T12] bond1 (unregistering): Released all slaves [ 1667.307922][ T12] hsr_slave_0: left promiscuous mode [ 1667.325666][ T12] hsr_slave_1: left promiscuous mode [ 1667.428805][ T12] veth1_macvtap: left promiscuous mode [ 1667.429310][ T12] veth0_macvtap: left promiscuous mode [ 1668.974760][T12307] ip6gre1: entered allmulticast mode [ 1669.104069][ T37] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1670.083152][ T28] audit: type=1400 audit(1670.986:1548): avc: denied { write } for pid=12344 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1670.563626][ T28] audit: type=1400 audit(1671.466:1549): avc: denied { write } for pid=12369 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1670.798714][ T2966] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1671.271779][T12277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1671.293457][T12277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1671.672598][ T28] audit: type=1400 audit(1672.576:1550): avc: denied { write } for pid=12440 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1671.944208][ T28] audit: type=1400 audit(1672.846:1551): avc: denied { write } for pid=12465 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1672.219680][ T2966] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1672.289754][T12277] hsr_slave_0: entered promiscuous mode [ 1672.291001][T12277] hsr_slave_1: entered promiscuous mode [ 1672.293956][T12277] debugfs: 'hsr0' already exists in 'hsr' [ 1672.294220][T12277] Cannot create hsr debugfs directory [ 1672.965409][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1673.023342][T12277] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1673.033981][T12277] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1673.055846][T12277] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1673.061010][T12277] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1673.067576][T12277] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1673.073351][T12277] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1673.078722][T12277] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1673.093174][T12277] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1673.100833][ T28] audit: type=1400 audit(1674.006:1552): avc: denied { write } for pid=12586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1673.435689][ T28] audit: type=1400 audit(1674.336:1553): avc: denied { write } for pid=12615 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1674.193934][T12277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1674.904283][ T28] audit: type=1400 audit(1675.806:1554): avc: denied { write } for pid=12626 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1675.426258][ T28] audit: type=1400 audit(1676.326:1555): avc: denied { write } for pid=12635 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1676.295828][ T28] audit: type=1400 audit(1677.196:1556): avc: denied { write } for pid=12640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1676.756798][ T28] audit: type=1400 audit(1677.666:1557): avc: denied { write } for pid=12646 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1677.316622][T12657] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1677.464253][ T28] audit: type=1400 audit(1678.366:1558): avc: denied { write } for pid=12653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1677.746308][T12666] binder: 12664:12666 unknown command 0 [ 1677.747592][T12666] binder: 12664:12666 ioctl c0306201 200004c0 returned -22 [ 1677.863454][ T28] audit: type=1400 audit(1678.766:1559): avc: denied { write } for pid=12665 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1678.603008][ T28] audit: type=1400 audit(1679.506:1560): avc: denied { write } for pid=12676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1679.175966][ T28] audit: type=1400 audit(1680.076:1561): avc: denied { write } for pid=12684 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1679.566455][T12695] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1679.667993][T12695] md: could not open device unknown-block(7,0). [ 1679.669845][ T6160] md_update_sb: can't update sb for read-only array md0 [ 1679.769522][ T6160] md_update_sb: can't update sb for read-only array md0 [ 1679.817509][ T6160] md_update_sb: can't update sb for read-only array md0 [ 1679.853604][ T28] audit: type=1400 audit(1680.756:1562): avc: denied { write } for pid=12696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1679.883537][ T6160] md_update_sb: can't update sb for read-only array md0 [ 1680.033348][ T28] audit: type=1400 audit(1680.936:1563): avc: denied { write } for pid=12702 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1680.152867][T12277] veth0_vlan: entered promiscuous mode [ 1680.203643][T12277] veth1_vlan: entered promiscuous mode [ 1680.319614][T12277] veth0_macvtap: entered promiscuous mode [ 1680.329974][T12277] veth1_macvtap: entered promiscuous mode [ 1680.406077][ T2687] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.409393][ T2687] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.457318][T11968] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.507116][ T2687] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.555729][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1680.869269][T12718] *** NOT YET: opcode 85 *** [ 1680.976776][ T28] audit: type=1400 audit(1681.886:1564): avc: denied { write } for pid=12711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1681.397424][ T28] audit: type=1400 audit(1682.306:1565): avc: denied { write } for pid=12725 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1681.411846][T12728] block2mtd: error: cannot open device /dev/ram0 [ 1682.166280][ T28] audit: type=1400 audit(1683.066:1566): avc: denied { write } for pid=12731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1682.459592][ T28] audit: type=1400 audit(1683.366:1567): avc: denied { write } for pid=12735 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1682.586195][T11968] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.589111][T11968] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.593299][T11968] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.598782][T11968] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.486430][T12744] FAULT_INJECTION: forcing a failure. [ 1683.486430][T12744] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1683.488902][T12744] CPU: 0 UID: 0 PID: 12744 Comm: syz.6.2138 Tainted: G L syzkaller #0 PREEMPT [ 1683.489044][T12744] Tainted: [L]=SOFTLOCKUP [ 1683.489067][T12744] Hardware name: ARM-Versatile Express [ 1683.489094][T12744] Call trace: [ 1683.489142][T12744] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1683.489270][T12744] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1683.489294][T12744] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1683.489356][T12744] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1683.489424][T12744] r7:00000000 r6:00000000 r5:84fa8c40 r4:82afac00 [ 1683.489444][T12744] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1683.489513][T12744] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 1683.489580][T12744] r8:00000628 r7:00000000 r6:ea53ddd0 r5:00000010 r4:76f8a628 [ 1683.489600][T12744] [<809fdf04>] (should_fail) from [<803544f4>] (get_futex_key+0xa8/0x558) [ 1683.489654][T12744] [<8035444c>] (get_futex_key) from [<80358eec>] (futex_wake+0x70/0x25c) [ 1683.489713][T12744] r10:83fa9a40 r9:00000000 r8:ea53ddc0 r7:ffffffff r6:76f8a628 r5:00000001 [ 1683.489734][T12744] r4:00000012 [ 1683.489750][T12744] [<80358e7c>] (futex_wake) from [<80355998>] (do_futex+0x194/0x1d0) [ 1683.489812][T12744] r10:83fa9a40 r9:00000001 r8:ea53de90 r7:83fa9a40 r6:00000000 r5:b5403587 [ 1683.489832][T12744] r4:00000001 [ 1683.489848][T12744] [<80355804>] (do_futex) from [<8024ce1c>] (mm_release+0xc4/0xc8) [ 1683.489906][T12744] r4:84fa8c40 [ 1683.489925][T12744] [<8024cd58>] (mm_release) from [<8024e190>] (exit_mm_release+0x24/0x28) [ 1683.490023][T12744] r5:861a5c00 r4:84fa8c40 [ 1683.490045][T12744] [<8024e16c>] (exit_mm_release) from [<80258894>] (do_exit+0x1e8/0xadc) [ 1683.490129][T12744] r5:84fa8c40 r4:861a5c00 [ 1683.490178][T12744] [<802586ac>] (do_exit) from [<8025935c>] (do_group_exit+0x40/0x8c) [ 1683.490243][T12744] r7:00130a4c [ 1683.490263][T12744] [<8025931c>] (do_group_exit) from [<8026a428>] (get_signal+0xa64/0xa8c) [ 1683.490329][T12744] r7:00130a4c r4:84fa8c40 [ 1683.490348][T12744] [<802699c4>] (get_signal) from [<8022b72c>] (do_work_pending+0x220/0x4e0) [ 1683.490421][T12744] r10:000000f0 r9:00130a50 r8:fffffe00 r7:00130a4c r6:00000001 r5:ea53dfb0 [ 1683.490443][T12744] r4:84fa8c40 [ 1683.490462][T12744] [<8022b50c>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 1683.490532][T12744] Exception stack(0xea53dfb0 to 0xea53dff8) [ 1683.490599][T12744] dfa0: 003562e0 00000080 00000000 00000000 [ 1683.490641][T12744] dfc0: 00131dd8 ffffffff 76f8a7d4 000000f0 00340000 00000000 00000001 76f8a0dc [ 1683.490676][T12744] dfe0: 76f89f38 76f89f28 00021b8c 00130a4c 60000010 003562e0 [ 1683.490712][T12744] r10:000000f0 r9:84fa8c40 r8:8020029c r7:000000f0 r6:76f8a7d4 r5:ffffffff [ 1683.490742][T12744] r4:00131dd8 [ 1683.870836][ T28] audit: type=1400 audit(1684.776:1568): avc: denied { create } for pid=12746 comm="syz.4.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1684.279931][T12752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1684.283621][T12752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1684.499646][T12756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1684.527226][T12756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1684.549044][T12756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1684.549686][T12756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1691.986592][ T28] audit: type=1400 audit(1692.896:1569): avc: denied { mount } for pid=12772 comm="syz.4.2148" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1692.001229][T12773] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1692.056473][T12773] md: could not open device unknown-block(1,0). [ 1692.060441][ T6160] md_update_sb: can't update sb for read-only array md0 [ 1692.096714][ T6160] md_update_sb: can't update sb for read-only array md0 [ 1692.354122][ T28] audit: type=1400 audit(1693.256:1570): avc: denied { unmount } for pid=10300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1693.009713][T12779] comedi: valid board names for 8255 driver are: [ 1693.011586][T12779] 8255 [ 1693.012920][T12779] comedi: valid board names for vmk80xx driver are: [ 1693.013818][T12779] vmk80xx [ 1693.014481][T12779] comedi: valid board names for usbduxsigma driver are: [ 1693.015937][T12779] usbduxsigma [ 1693.016651][T12779] comedi: valid board names for usbduxfast driver are: [ 1693.019916][T12779] usbduxfast [ 1693.020754][T12779] comedi: valid board names for usbdux driver are: [ 1693.022477][T12779] usbdux [ 1693.023156][T12779] comedi: valid board names for ni6501 driver are: [ 1693.024014][T12779] ni6501 [ 1693.024661][T12779] comedi: valid board names for dt9812 driver are: [ 1693.030707][T12779] dt9812 [ 1693.031654][T12779] comedi: valid board names for ni_labpc_cs driver are: [ 1693.032792][T12779] ni_labpc_cs [ 1693.033489][T12779] comedi: valid board names for ni_daq_700 driver are: [ 1693.034354][T12779] ni_daq_700 [ 1693.039667][T12779] comedi: valid board names for labpc_pci driver are: [ 1693.041874][T12779] labpc_pci [ 1693.042624][T12779] comedi: valid board names for adl_pci9118 driver are: [ 1693.043943][T12779] pci9118dg [ 1693.044780][T12779] pci9118hg [ 1693.046406][T12779] pci9118hr [ 1693.047046][T12779] comedi: valid board names for 8255_pci driver are: [ 1693.047998][T12779] 8255_pci [ 1693.048639][T12779] comedi: valid board names for comedi_parport driver are: [ 1693.049588][T12779] comedi_parport [ 1693.050271][T12779] comedi: valid board names for comedi_test driver are: [ 1693.051177][T12779] comedi_test [ 1693.052833][T12779] comedi: valid board names for comedi_bond driver are: [ 1693.054692][T12779] comedi_bond [ 1693.332886][T12786] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1695.275902][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1708.728220][ T28] audit: type=1400 audit(1709.636:1571): avc: denied { create } for pid=12819 comm="syz.4.2165" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1708.735448][ T28] audit: type=1400 audit(1709.636:1572): avc: denied { map } for pid=12819 comm="syz.4.2165" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1708.747400][ T28] audit: type=1400 audit(1709.656:1573): avc: denied { read write } for pid=12819 comm="syz.4.2165" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1708.900481][T12824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2166'. [ 1708.903342][T12824] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2166'. [ 1715.279167][ T28] audit: type=1400 audit(1716.186:1574): avc: denied { lock } for pid=12831 comm="syz.6.2169" path="socket:[23297]" dev="sockfs" ino=23297 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1719.420206][ T28] audit: type=1400 audit(1720.316:1575): avc: denied { remount } for pid=12847 comm="syz.4.2173" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1719.696679][T12853] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1719.736673][T12853] md: could not open device unknown-block(7,0). [ 1719.896071][T12853] md/raid1:md0: active with 1 out of 1 mirrors [ 1719.900271][T12856] md_update_sb: can't update sb for read-only array md0 [ 1719.957027][T12856] md_update_sb: can't update sb for read-only array md0 [ 1720.066041][ T28] audit: type=1400 audit(1720.976:1576): avc: denied { write } for pid=12858 comm="syz.4.2176" name="functions" dev="configfs" ino=6227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1722.042104][T12874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1722.043085][T12874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1723.449686][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2183'. [ 1723.825158][T12882] bond0 (unregistering): Released all slaves [ 1724.075722][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1724.397606][T12888] FAULT_INJECTION: forcing a failure. [ 1724.397606][T12888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1724.398131][T12888] CPU: 0 UID: 0 PID: 12888 Comm: syz.4.2184 Tainted: G L syzkaller #0 PREEMPT [ 1724.398237][T12888] Tainted: [L]=SOFTLOCKUP [ 1724.398260][T12888] Hardware name: ARM-Versatile Express [ 1724.398287][T12888] Call trace: [ 1724.398334][T12888] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1724.398451][T12888] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1724.398474][T12888] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1724.400373][T12888] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1724.401114][T12888] r7:00000009 r6:00000000 r5:84026200 r4:82b54788 [ 1724.401140][T12888] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1724.401872][T12888] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 1724.401941][T12888] r8:00000008 r7:00000009 r6:00000008 r5:20000d49 r4:85408988 [ 1724.402144][T12888] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 1724.402206][T12888] [<809fdf1c>] (should_fail_usercopy) from [<8041cdc4>] (bpf_vlog_reverse_ubuf+0xd4/0x30c) [ 1724.402378][T12888] [<8041ccf0>] (bpf_vlog_reverse_ubuf) from [<8041db60>] (bpf_vlog_finalize+0xdc/0x114) [ 1724.402482][T12888] r10:8666b340 r9:0000002c r8:0000002c r7:00000012 r6:dfd61d30 r5:85408988 [ 1724.402566][T12888] r4:00000011 [ 1724.402646][T12888] [<8041da84>] (bpf_vlog_finalize) from [<8041ef08>] (bpf_log_attr_finalize+0x3c/0xf4) [ 1724.402718][T12888] r7:86dd96c0 r6:ffffffea r5:85408988 r4:dfd61e80 [ 1724.402741][T12888] [<8041eecc>] (bpf_log_attr_finalize) from [<80458bdc>] (btf_new_fd+0xb30/0x1838) [ 1724.402859][T12888] r6:ffffffea r5:85408988 r4:86dd96c0 [ 1724.402958][T12888] [<804580ac>] (btf_new_fd) from [<803eb208>] (__sys_bpf+0x59c/0x219c) [ 1724.403103][T12888] r10:84026200 r9:00000028 r8:00000000 r7:00000028 r6:dfd61e60 r5:00000000 [ 1724.403198][T12888] r4:00000000 [ 1724.403264][T12888] [<803eac6c>] (__sys_bpf) from [<803ed418>] (sys_bpf+0x50/0x6c) [ 1724.403378][T12888] r10:00000182 r9:84026200 r8:8020029c r7:00000182 r6:00356310 r5:00000000 [ 1724.403467][T12888] r4:00000000 [ 1724.403562][T12888] [<803ed3c8>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1724.403698][T12888] Exception stack(0xdfd61fa8 to 0xdfd61ff0) [ 1724.403773][T12888] 1fa0: 00000000 00000000 00000012 20000d80 00000028 00000000 [ 1724.403916][T12888] 1fc0: 00000000 00000000 00356310 00000182 003562d8 00000000 00000001 76fe70dc [ 1724.404012][T12888] 1fe0: 76fe6e88 76fe6e78 00018fa0 00130a50 [ 1726.949661][ T28] audit: type=1400 audit(1727.856:1577): avc: denied { read } for pid=12891 comm="syz.4.2186" path="socket:[23626]" dev="sockfs" ino=23626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1729.071683][T12903] request_module fs-cifs succeeded, but still no fs? [ 1735.289468][T12926] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1735.356113][T12856] md_update_sb: can't update sb for read-only array md0 [ 1735.413189][T12856] md_update_sb: can't update sb for read-only array md0 [ 1735.455974][T12926] md: could not open device unknown-block(1,0). [ 1735.457264][T12856] md_update_sb: can't update sb for read-only array md0 [ 1735.508873][T12856] md_update_sb: can't update sb for read-only array md0 [ 1735.529732][T12856] md_update_sb: can't update sb for read-only array md0 [ 1735.917740][T12934] FAULT_INJECTION: forcing a failure. [ 1735.917740][T12934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1735.926105][T12934] CPU: 0 UID: 0 PID: 12934 Comm: syz.6.2199 Tainted: G L syzkaller #0 PREEMPT [ 1735.926259][T12934] Tainted: [L]=SOFTLOCKUP [ 1735.926278][T12934] Hardware name: ARM-Versatile Express [ 1735.926302][T12934] Call trace: [ 1735.926345][T12934] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1735.926453][T12934] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1735.926474][T12934] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1735.926546][T12934] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1735.926608][T12934] r7:20000200 r6:00000000 r5:84fce200 r4:82b54788 [ 1735.926628][T12934] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1735.926683][T12934] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 1735.926743][T12934] r8:855de828 r7:20000200 r6:0000002c r5:00000bd8 r4:00000000 [ 1735.926762][T12934] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 1735.926811][T12934] [<809fdf1c>] (should_fail_usercopy) from [<80932138>] (_copy_to_iter+0x1e0/0x7b0) [ 1735.926861][T12934] [<80931f58>] (_copy_to_iter) from [<8164d200>] (simple_copy_to_iter+0x2c/0x88) [ 1735.926932][T12934] r10:00000de6 r9:00000c04 r8:00000000 r7:dfaa5ef8 r6:00000000 r5:dfaa5ef8 [ 1735.926980][T12934] r4:00000c04 [ 1735.927004][T12934] [<8164d1d4>] (simple_copy_to_iter) from [<8164d3dc>] (__skb_datagram_iter+0x64/0x3f4) [ 1735.927046][T12934] r5:00000c04 r4:00000c04 [ 1735.927053][T12934] [<8164d378>] (__skb_datagram_iter) from [<8164ddfc>] (skb_copy_datagram_iter+0x4c/0x120) [ 1735.927090][T12934] r10:00000de6 r9:00000c04 r8:836696c0 r7:dfaa5ef8 r6:00000000 r5:00000c04 [ 1735.927100][T12934] r4:862a7c00 [ 1735.927108][T12934] [<8164ddb0>] (skb_copy_datagram_iter) from [<8176a72c>] (netlink_recvmsg+0xbc/0x284) [ 1735.927144][T12934] r9:00000c04 r8:836696c0 r7:dfaa5ee8 r6:02040040 r5:862a7c00 r4:86360800 [ 1735.927153][T12934] [<8176a670>] (netlink_recvmsg) from [<8162f3a0>] (sock_recvmsg+0x50/0x78) [ 1735.927185][T12934] r10:dfaa5d54 r9:02040040 r8:200004c0 r7:02040040 r6:836696c0 r5:dfaa5ee8 [ 1735.927195][T12934] r4:8176a670 [ 1735.927202][T12934] [<8162f350>] (sock_recvmsg) from [<8162f59c>] (____sys_recvmsg+0x90/0x184) [ 1735.927232][T12934] r7:00000000 r6:836696c0 r5:200037c0 r4:dfaa5ee8 [ 1735.927240][T12934] [<8162f50c>] (____sys_recvmsg) from [<81630d20>] (___sys_recvmsg+0x88/0xbc) [ 1735.927276][T12934] r10:000003b4 r9:84fce200 r8:836696c0 r7:02040000 r6:200037c0 r5:dfaa5ee8 [ 1735.927286][T12934] r4:00000000 [ 1735.927310][T12934] [<81630c98>] (___sys_recvmsg) from [<81630e74>] (do_recvmmsg+0x120/0x2f4) [ 1735.927346][T12934] r8:dfaa5f68 r7:02040000 r6:00000000 r5:200037c0 r4:dfaa5ec8 [ 1735.927355][T12934] [<81630d54>] (do_recvmmsg) from [<81633468>] (sys_recvmmsg_time32+0x7c/0xd8) [ 1735.927388][T12934] r10:0000016d r9:84fce200 r8:000003b4 r7:02040000 r6:20003700 r5:200037c0 [ 1735.927398][T12934] r4:00000004 [ 1735.927406][T12934] [<816333ec>] (sys_recvmmsg_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1735.927431][T12934] Exception stack(0xdfaa5fa8 to 0xdfaa5ff0) [ 1735.927451][T12934] 5fa0: 20003700 00000000 00000004 200037c0 000003b4 02040000 [ 1735.927469][T12934] 5fc0: 20003700 00000000 00356318 0000016d 003562d8 00000000 00000001 76f8a0dc [ 1735.927488][T12934] 5fe0: 76f89e88 76f89e78 00018fa0 00130a50 [ 1735.927552][T12934] r8:8020029c r7:0000016d r6:00356318 r5:00000000 r4:20003700 [ 1758.024078][T12996] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2220'. [ 1764.199400][T13009] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2224'. [ 1779.765715][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1815.620666][ T28] audit: type=1400 audit(1816.526:1578): avc: denied { connect } for pid=13083 comm="syz.6.2248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1815.656908][T13084] fuse: Bad value for 'fd' [ 1818.117421][T13115] futex_wake_op: syz.6.2253 tries to shift op by 144; fix this program [ 1819.668598][ T28] audit: type=1400 audit(1820.576:1579): avc: denied { ioctl } for pid=13122 comm="syz.6.2257" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=24651 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1843.941471][T13181] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1844.079796][ T28] audit: type=1400 audit(1844.986:1580): avc: denied { write } for pid=13182 comm="syz.4.2278" name="functions" dev="configfs" ino=6227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1844.096535][ T28] audit: type=1400 audit(1845.006:1581): avc: denied { write } for pid=13182 comm="syz.4.2278" name="functions" dev="configfs" ino=6227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1844.097832][ T28] audit: type=1400 audit(1845.006:1582): avc: denied { remove_name } for pid=13182 comm="syz.4.2278" name="uac2.usb0" dev="configfs" ino=24707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1844.099482][ T28] audit: type=1400 audit(1845.006:1583): avc: denied { rmdir } for pid=13182 comm="syz.4.2278" name="uac2.usb0" dev="configfs" ino=24707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1858.545744][ T28] audit: type=1326 audit(1859.446:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13216 comm="syz.4.2292" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1858.546214][ T28] audit: type=1326 audit(1859.446:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13216 comm="syz.4.2292" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1858.566867][ T28] audit: type=1326 audit(1859.466:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13216 comm="syz.4.2292" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1858.567296][ T28] audit: type=1326 audit(1859.466:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13216 comm="syz.4.2292" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1858.567662][ T28] audit: type=1326 audit(1859.466:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13216 comm="syz.4.2292" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1858.568102][ T28] audit: type=1326 audit(1859.476:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13216 comm="syz.4.2292" exe="/syz-executor" sig=0 arch=40000028 syscall=283 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1858.568318][ T28] audit: type=1326 audit(1859.476:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13216 comm="syz.4.2292" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1858.568531][ T28] audit: type=1326 audit(1859.476:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13216 comm="syz.4.2292" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1863.368913][T13238] netlink: 2724 bytes leftover after parsing attributes in process `syz.4.2301'. [ 1863.369490][T13238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2301'. [ 1863.370456][T13238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2301'. [ 1868.916855][T13265] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2305'. [ 1869.801578][T13269] FAULT_INJECTION: forcing a failure. [ 1869.801578][T13269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1869.815706][T13269] CPU: 1 UID: 0 PID: 13269 Comm: syz.4.2309 Tainted: G L syzkaller #0 PREEMPT [ 1869.815876][T13269] Tainted: [L]=SOFTLOCKUP [ 1869.816633][T13269] Hardware name: ARM-Versatile Express [ 1869.816671][T13269] Call trace: [ 1869.816724][T13269] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1869.816876][T13269] r7:60000113 r6:60000113 r5:82336570 r4:00000000 [ 1869.816935][T13269] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1869.817034][T13269] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1869.817165][T13269] r7:02040000 r6:00000000 r5:8414ee40 r4:82b54788 [ 1869.817186][T13269] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1869.817248][T13269] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 1869.817354][T13269] r8:00000001 r7:02040000 r6:20003700 r5:200037c0 r4:20003700 [ 1869.817389][T13269] [<809fdf04>] (should_fail) from [<809fdf38>] (should_fail_usercopy+0x1c/0x20) [ 1869.817444][T13269] [<809fdf1c>] (should_fail_usercopy) from [<8032a690>] (put_old_timespec32+0x34/0xac) [ 1869.817513][T13269] [<8032a65c>] (put_old_timespec32) from [<8163347c>] (sys_recvmmsg_time32+0x90/0xd8) [ 1869.817578][T13269] r5:200037c0 r4:00000001 [ 1869.817619][T13269] [<816333ec>] (sys_recvmmsg_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1869.817675][T13269] Exception stack(0xdfb15fa8 to 0xdfb15ff0) [ 1869.817715][T13269] 5fa0: 20003700 00000000 00000004 200037c0 00000001 02040000 [ 1869.817750][T13269] 5fc0: 20003700 00000000 00356318 0000016d 003562d8 00000000 00000001 76fe70dc [ 1869.817778][T13269] 5fe0: 76fe6e88 76fe6e78 00018fa0 00130a50 [ 1869.817812][T13269] r8:8020029c r7:0000016d r6:00356318 r5:00000000 r4:20003700 [ 1872.866525][T13277] syz_tun: entered allmulticast mode [ 1873.932224][T13281] gadgetfs: bound to dummy_udc driver [ 1874.706871][T13292] FAULT_INJECTION: forcing a failure. [ 1874.706871][T13292] name failslab, interval 1, probability 0, space 0, times 0 [ 1874.713525][T13292] CPU: 0 UID: 0 PID: 13292 Comm: syz.4.2317 Tainted: G L syzkaller #0 PREEMPT [ 1874.713636][T13292] Tainted: [L]=SOFTLOCKUP [ 1874.713659][T13292] Hardware name: ARM-Versatile Express [ 1874.713683][T13292] Call trace: [ 1874.713713][T13292] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1874.713814][T13292] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1874.713831][T13292] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1874.713890][T13292] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1874.713947][T13292] r7:ffffffff r6:00000000 r5:8401c980 r4:82b1ac48 [ 1874.713961][T13292] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1874.713991][T13292] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1874.714032][T13292] r8:8401c980 r7:ffffffff r6:83001240 r5:00000cc0 r4:00000022 [ 1874.714050][T13292] [<80568de8>] (should_failslab) from [<80547c00>] (__kmalloc_node_track_caller_noprof+0xac/0x3d8) [ 1874.714109][T13292] [<80547b54>] (__kmalloc_node_track_caller_noprof) from [<804d4e30>] (kstrdup+0x3c/0x60) [ 1874.714160][T13292] r10:82554534 r9:855e4000 r8:82af7338 r7:dfa7db60 r6:803266fc r5:00000021 [ 1874.714170][T13292] r4:00000cc0 [ 1874.714178][T13292] [<804d4df4>] (kstrdup) from [<803266fc>] (__request_module+0xfc/0x2e4) [ 1874.714241][T13292] r7:8176f66c r6:8401c980 r5:00000002 r4:86697280 [ 1874.714257][T13292] [<80326600>] (__request_module) from [<8176f66c>] (ctrl_getfamily+0xc4/0x1bc) [ 1874.714302][T13292] r3:00000010 r2:00000010 r1:8250911c [ 1874.714318][T13292] r8:dfa7dd30 r7:dfa7dcc0 r6:dfa7dc08 r5:8339b698 r4:00000000 [ 1874.714327][T13292] [<8176f5a8>] (ctrl_getfamily) from [<8176d5d8>] (genl_family_rcv_msg_doit+0xf0/0x140) [ 1874.714356][T13292] r6:8559d6c0 r5:865db800 r4:8339b690 [ 1874.714364][T13292] [<8176d4e8>] (genl_family_rcv_msg_doit) from [<8176de1c>] (genl_rcv_msg+0x240/0x3a8) [ 1874.714397][T13292] r10:00000002 r9:855e4000 r8:8559d6c0 r7:dfa7dcc0 r6:00000001 r5:8339b680 [ 1874.714407][T13292] r4:82554534 [ 1874.714414][T13292] [<8176dbdc>] (genl_rcv_msg) from [<8176c82c>] (netlink_rcv_skb+0xc0/0x120) [ 1874.714445][T13292] r10:867b5d84 r9:855e4000 r8:8559d6c0 r7:8339b680 r6:8176dbdc r5:8559d6c0 [ 1874.714462][T13292] r4:00000000 [ 1874.714470][T13292] [<8176c76c>] (netlink_rcv_skb) from [<8176d3c0>] (genl_rcv+0x28/0x38) [ 1874.714499][T13292] r7:86028080 r6:00000020 r5:867cfc64 r4:8559d6c0 [ 1874.714507][T13292] [<8176d398>] (genl_rcv) from [<8176bff8>] (netlink_unicast+0x270/0x380) [ 1874.714534][T13292] r5:867cfc64 r4:867cfc00 [ 1874.714541][T13292] [<8176bd88>] (netlink_unicast) from [<8176c2d0>] (netlink_sendmsg+0x1c8/0x444) [ 1874.714572][T13292] r10:00000000 r9:00000000 r8:00000000 r7:867b5c00 r6:00000020 r5:8559d6c0 [ 1874.714582][T13292] r4:dfa7dea0 [ 1874.714589][T13292] [<8176c108>] (netlink_sendmsg) from [<8162f7c4>] (__sock_sendmsg+0x44/0x78) [ 1874.714623][T13292] r10:00000122 r9:838f7780 r8:834a4f40 r7:76fe5de4 r6:834a4f40 r5:dfa7dea0 [ 1874.714633][T13292] r4:00000000 [ 1874.714643][T13292] [<8162f780>] (__sock_sendmsg) from [<81632768>] (__sys_sendto+0x110/0x160) [ 1874.714710][T13292] r7:76fe5de4 r6:838f7781 r5:00000000 r4:00000000 [ 1874.714728][T13292] [<81632658>] (__sys_sendto) from [<816327d4>] (sys_sendto+0x1c/0x24) [ 1874.714824][T13292] r9:8401c980 r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76fe5de4 [ 1874.714871][T13292] [<816327b8>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1874.714925][T13292] Exception stack(0xdfa7dfa8 to 0xdfa7dff0) [ 1874.714964][T13292] dfa0: 76fe5de4 0000000c 00000005 76fe5e78 00000020 00000000 [ 1874.714998][T13292] dfc0: 76fe5de4 0000000c 00000000 00000122 76fe5e98 00000000 76fe5e78 76fe70dc [ 1874.715025][T13292] dfe0: 76fe5d78 76fe5d64 0010bc74 00112858 [ 1882.237376][ T28] audit: type=1804 audit(1883.146:1592): pid=13313 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2324" name="/newroot/415/file0" dev="tmpfs" ino=2220 res=1 errno=0 [ 1892.395758][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1898.719613][T13397] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2343'. [ 1929.371828][T13434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1929.378118][T13434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1961.050102][ T8426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1961.060548][ T8426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1961.071870][ T8426] bond0 (unregistering): Released all slaves [ 1961.145845][ T8426] hsr_slave_0: left promiscuous mode [ 1961.149548][ T8426] hsr_slave_1: left promiscuous mode [ 1961.490607][T13459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1961.500494][T13459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1962.071225][ T28] audit: type=1400 audit(1962.976:1593): avc: denied { write } for pid=13628 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1962.089561][T13459] hsr_slave_0: entered promiscuous mode [ 1962.091327][T13459] hsr_slave_1: entered promiscuous mode [ 1962.092951][T13459] debugfs: 'hsr0' already exists in 'hsr' [ 1962.093707][T13459] Cannot create hsr debugfs directory [ 1962.354595][ T28] audit: type=1400 audit(1963.256:1594): avc: denied { write } for pid=13677 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1962.509859][T13459] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1962.521141][T13459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1962.527355][T13459] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1962.543983][T13459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1962.550172][T13459] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1962.561712][T13459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1962.567696][T13459] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1962.577089][T13459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1962.601946][ T2966] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1963.007038][T13459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1963.591421][ T28] audit: type=1400 audit(1964.496:1595): avc: denied { write } for pid=13746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1963.881558][ T28] audit: type=1400 audit(1964.786:1596): avc: denied { write } for pid=13754 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1964.124290][ T2966] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1964.970826][ T28] audit: type=1400 audit(1965.876:1597): avc: denied { write } for pid=13764 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1965.078604][T13459] veth0_vlan: entered promiscuous mode [ 1965.103252][T13459] veth1_vlan: entered promiscuous mode [ 1965.174508][T13459] veth0_macvtap: entered promiscuous mode [ 1965.204035][T13459] veth1_macvtap: entered promiscuous mode [ 1965.310626][ T8426] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1965.346283][T11968] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1965.348576][T11968] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1965.380681][ T8426] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1965.479021][ T28] audit: type=1400 audit(1966.386:1598): avc: denied { write } for pid=13771 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1965.681058][ T2966] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1966.634325][ T28] audit: type=1400 audit(1967.536:1599): avc: denied { write } for pid=13782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1966.820768][ T28] audit: type=1400 audit(1967.726:1600): avc: denied { write } for pid=13780 comm="syz.7.2371" name="functions" dev="configfs" ino=6227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1966.998356][ T28] audit: type=1400 audit(1967.906:1601): avc: denied { write } for pid=13786 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1967.199183][ T2966] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1978.596544][ T28] audit: type=1400 audit(1979.506:1602): avc: denied { write } for pid=13819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1978.857141][ T28] audit: type=1400 audit(1979.766:1603): avc: denied { write } for pid=13822 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1979.398478][ T28] audit: type=1400 audit(1980.306:1604): avc: denied { write } for pid=13825 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1979.613549][ T28] audit: type=1400 audit(1980.516:1605): avc: denied { write } for pid=13828 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1980.134640][ T28] audit: type=1400 audit(1981.036:1606): avc: denied { write } for pid=13831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1980.311241][ T28] audit: type=1400 audit(1981.216:1607): avc: denied { write } for pid=13834 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1980.874350][ T28] audit: type=1400 audit(1981.776:1608): avc: denied { write } for pid=13837 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1981.362998][ T28] audit: type=1400 audit(1982.266:1609): avc: denied { write } for pid=13840 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1999.019012][T13860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1999.022145][T13860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1342:(snd_func_refer) error evaluating name ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5728:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2722:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory ALSA lib confmisc.c:855:(parse_card) cannot find card '0' ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_card_inum returned error: No such file or directory ALSA lib confmisc.c:422:(snd_func_concat) error evaluating strings ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_concat returned error: No such file or directory ALSA lib confmisc.c:1342:(snd_func_refer) error evaluating name ALSA lib conf.c:5205:(_snd_config_evaluate) function snd_func_refer returned error: No such file or directory ALSA lib conf.c:5728:(snd_config_expand) Evaluate error: No such file or directory ALSA lib pcm.c:2722:(snd_pcm_open_noupdate) Unknown PCM default alsa: Could not initialize DAC alsa: Failed to open `default': alsa: Reason: No such file or directory audio: Could not create a backend for voice `lm4549.out' [ 2000.258543][ T9684] ------------[ cut here ]------------ [ 2000.259198][ T9684] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x19c/0x21c, CPU#1: kworker/1:7/9684 [ 2000.261279][ T9684] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2000.262192][ T9684] Modules linked in: [ 2000.263803][ T9684] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2000.264625][ T9684] CPU: 1 UID: 0 PID: 9684 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT [ 2000.265436][ T9684] Tainted: [L]=SOFTLOCKUP [ 2000.265831][ T9684] Hardware name: ARM-Versatile Express [ 2000.266439][ T9684] Workqueue: events drm_fb_helper_damage_work [ 2000.267400][ T9684] Call trace: [ 2000.268291][ T9684] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2000.269021][ T9684] r7:82a20f78 r6:00000000 r5:82336570 r4:00000001 [ 2000.269549][ T9684] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 2000.270183][ T9684] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 2000.270830][ T9684] r7:82a20f78 r6:00000000 r5:84136200 r4:82c85d40 [ 2000.271335][ T9684] [<8021ec7c>] (dump_stack) from [<80202590>] (vpanic+0x114/0x320) [ 2000.271960][ T9684] [<8020247c>] (vpanic) from [<802027d0>] (trace_suspend_resume+0x0/0x100) [ 2000.272717][ T9684] r7:80b7e56c [ 2000.273067][ T9684] [<8020279c>] (panic) from [<80251b50>] (get_taint+0x0/0x1c) [ 2000.273870][ T9684] r3:82a0b144 r2:00000001 r1:8231c298 r0:82323c10 [ 2000.274306][ T9684] [<80251ad8>] (check_panic_on_warn) from [<80251ccc>] (__warn+0x98/0x1a4) [ 2000.274863][ T9684] [<80251c34>] (__warn) from [<80251fc0>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 2000.275618][ T9684] r8:00000009 r7:823b4824 r6:dfbfddbc r5:84136200 r4:00000000 [ 2000.276164][ T9684] [<80251ddc>] (warn_slowpath_fmt) from [<80b7e56c>] (drm_crtc_wait_one_vblank+0x19c/0x21c) [ 2000.276917][ T9684] r10:84184844 r9:ffffff92 r8:00000000 r7:0001d3f4 r6:00000000 r5:00000000 [ 2000.277471][ T9684] r4:83e95800 [ 2000.278218][ T9684] [<80b7e3d0>] (drm_crtc_wait_one_vblank) from [<80b82128>] (drm_client_modeset_wait_for_vblank+0x60/0x74) [ 2000.279338][ T9684] r10:83e95450 r9:83e958c4 r8:83e95988 r7:00000000 r6:83e95800 r5:00000000 [ 2000.280276][ T9684] r4:833d7040 [ 2000.281215][ T9684] [<80b820c8>] (drm_client_modeset_wait_for_vblank) from [<80b9d558>] (drm_fb_helper_damage_work+0x190/0x3d4) [ 2000.282081][ T9684] r7:00000000 r6:841b52b4 r5:841b5294 r4:841b5200 [ 2000.282656][ T9684] [<80b9d3c8>] (drm_fb_helper_damage_work) from [<802772b8>] (process_one_work+0x1c8/0x580) [ 2000.283431][ T9684] r10:8302ae05 r9:84136200 r8:01800000 r7:ddde5000 r6:8302ae00 r5:841b5294 [ 2000.283837][ T9684] r4:863f8c80 [ 2000.284095][ T9684] [<802770f0>] (process_one_work) from [<80277f64>] (worker_thread+0x16c/0x318) [ 2000.284778][ T9684] r10:ddde5000 r9:863f8cb0 r8:84136200 r7:82a03d80 r6:ddde5020 r5:ddde5000 [ 2000.285385][ T9684] r4:863f8c80 [ 2000.285671][ T9684] [<80277df8>] (worker_thread) from [<802827b4>] (kthread+0x11c/0x154) [ 2000.286981][ T9684] r10:00000000 r9:df905e88 r8:93514000 r7:863f8c80 r6:80277df8 r5:84136200 [ 2000.288739][ T9684] r4:85aa6240 [ 2000.289498][ T9684] [<80282698>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 2000.290012][ T9684] Exception stack(0xdfbfdfb0 to 0xdfbfdff8) [ 2000.290379][ T9684] dfa0: 00000000 00000000 00000000 00000000 [ 2000.291774][ T9684] dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 2000.292457][ T9684] dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 2000.292990][ T9684] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80282698 r4:85aa6240 [ 2004.943102][ T9684] SMP: failed to stop secondary CPUs [ 2004.945562][ T9684] Rebooting in 86400 seconds..