last executing test programs: 46m10.592031538s ago: executing program 32 (id=389): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x30, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'vlan1\x00', &(0x7f00000004c0)=@ethtool_link_settings={0x4c, 0x2, 0x4, 0xbd, 0x8, 0x5, 0x4, 0x6, 0x1, 0x4, [0x9, 0x9, 0xff, 0x5, 0x0, 0x7fff, 0x81, 0x401]}}) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) recvmmsg(r1, 0x0, 0x0, 0x100, 0x0) 41m57.402559222s ago: executing program 2 (id=616): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x2000c811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r3, r2}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x92, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) 41m57.040783842s ago: executing program 2 (id=617): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56e, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x6, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc0, 0x8, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)={0x0, 0x10, 0x28, {0x28, 0x2, "f70fa39f030000000000000000cb4fdca0560f920d54f365c5b105000000bf6fc9520808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 41m56.811280697s ago: executing program 2 (id=618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000020000000000f400040000000000000020"], 0x1c, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000520099b1"], 0x14}}, 0x0) 41m50.083310987s ago: executing program 2 (id=623): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x46) 41m49.87312157s ago: executing program 2 (id=624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018008000100666962001c000280080001400000000a080002400000000308000340000000010900020073797a32"], 0x80}}, 0x24010002) 41m49.523527559s ago: executing program 2 (id=625): symlink(&(0x7f0000000280)='.\x02\x00', &(0x7f00000002c0)='.\x02\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x210282, 0x0) write$binfmt_aout(r1, &(0x7f0000001300)={{0x10b, 0x7, 0xc, 0x1fd, 0x4e, 0x4, 0x265, 0x8}, "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x720) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x24, 0x0, 0x0, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x1d, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000b40)={'batadv_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'erspan0\x00', 0x0, 0xf847, 0x41, 0x3, 0xfd, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x66, 0x0, 0xa3, 0x29, 0x0, @remote, @broadcast}}}}) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x41800, 0x10}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c4}, 0x4000020) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 41m4.019945305s ago: executing program 33 (id=625): symlink(&(0x7f0000000280)='.\x02\x00', &(0x7f00000002c0)='.\x02\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x210282, 0x0) write$binfmt_aout(r1, &(0x7f0000001300)={{0x10b, 0x7, 0xc, 0x1fd, 0x4e, 0x4, 0x265, 0x8}, "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x720) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x24, 0x0, 0x0, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x1d, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000b40)={'batadv_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'erspan0\x00', 0x0, 0xf847, 0x41, 0x3, 0xfd, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x66, 0x0, 0xa3, 0x29, 0x0, @remote, @broadcast}}}}) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x41800, 0x10}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c4}, 0x4000020) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 40m3.499989353s ago: executing program 3 (id=701): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102801000000005e500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 40m3.422853902s ago: executing program 3 (id=702): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r0, @ANYBLOB='/\x00\x00\x00\b'], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 40m3.123685655s ago: executing program 3 (id=703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000140)='\x00', 0x1, 0x24008084, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback, 0x2}, 0x1c) creat(&(0x7f0000000100)='./file0\x00', 0x11a) pipe2$9p(&(0x7f0000000400), 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x4) getpgrp(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000000)="9cdd18edbaec576d0e0dc402cd90622cf9c81719c26d52d485cdf334e609a6ba657d7ecc2e8437d731e6c3128633e402a3686b54bb837d9c", 0x38, r1}, 0x68) r6 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) shutdown(r1, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000001e80), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x8, 0x1, @udp='udp:syz2\x00'}}}}, 0x34}}, 0x0) 39m45.03205452s ago: executing program 3 (id=716): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x1, @mcast2, 0x6}, 0x1c) 39m44.76332312s ago: executing program 3 (id=718): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000402609333340000102030109022d000101ff90090904000d020301010509210500770122b10f090581032000030864090502"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\"\x00'], 0x0}, 0x0) 39m44.602585378s ago: executing program 3 (id=719): syz_io_uring_complete(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x64, &(0x7f00000002c0)=0xffffffffffffff11) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setgroups(0x0, 0x0) keyctl$chown(0x4, r3, 0xee01, 0x0) 38m58.664845673s ago: executing program 34 (id=719): syz_io_uring_complete(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x64, &(0x7f00000002c0)=0xffffffffffffff11) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setgroups(0x0, 0x0) keyctl$chown(0x4, r3, 0xee01, 0x0) 37m32.199538125s ago: executing program 0 (id=807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x442432f8a8dde77b}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000140)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 37m31.825659737s ago: executing program 0 (id=808): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101400, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x300, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x80801, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x1000000f, 0x80000006}, 0x0, 0x0) 37m28.861993551s ago: executing program 0 (id=809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000000)={@void, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x7, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}}, 0x2a) 37m27.902695668s ago: executing program 0 (id=810): ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000002c0)={0x14}) 37m27.154072313s ago: executing program 0 (id=811): r0 = syz_open_dev$dri(&(0x7f0000001c40), 0x0, 0x40) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0xb0b0b0b0}) 37m26.713217703s ago: executing program 0 (id=812): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 36m41.034110559s ago: executing program 35 (id=812): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 35m24.324320501s ago: executing program 4 (id=911): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000800)={0xa, 0x4e24, 0x4bf, @dev={0xfe, 0x80, '\x00', 0xf}, 0x34bbe269}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000680)=[{0x0}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000880)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 35m21.802991245s ago: executing program 4 (id=915): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000300)={0x20, 0x14, 0x6, "f99d5133974f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f00000012c0)) 35m21.479760181s ago: executing program 4 (id=917): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) sendmsg$kcm(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e00)="e6", 0x1}], 0x1}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x1ac9) 35m20.971333029s ago: executing program 4 (id=919): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254", 0x6f}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 35m20.704319069s ago: executing program 4 (id=921): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000300)={0x20, 0x14, 0x6, "f99d5133974f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f00000012c0)) 35m20.434513139s ago: executing program 4 (id=923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0) mq_open(&(0x7f0000000000)='batadv_slaveo1\x00', 0x8c2, 0x0, 0x0) 34m34.575229686s ago: executing program 36 (id=923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0) mq_open(&(0x7f0000000000)='batadv_slaveo1\x00', 0x8c2, 0x0, 0x0) 24m33.944294002s ago: executing program 5 (id=1853): syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 24m33.703140169s ago: executing program 5 (id=1854): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3ea}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5", 0x17}], 0x3}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) 24m32.213635147s ago: executing program 5 (id=1857): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x40000000) 24m29.603332811s ago: executing program 5 (id=1861): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3ea}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5", 0x17}], 0x3}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) 24m28.223735296s ago: executing program 5 (id=1862): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000000040)='numa_maps\x00') 24m27.83546884s ago: executing program 5 (id=1863): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mremap(&(0x7f00004fc000/0x1000)=nil, 0x1000, 0x3000, 0x6, &(0x7f0000a9e000/0x3000)=nil) openat(0xffffffffffffff9c, 0x0, 0x202, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) 23m42.65352878s ago: executing program 37 (id=1863): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mremap(&(0x7f00004fc000/0x1000)=nil, 0x1000, 0x3000, 0x6, &(0x7f0000a9e000/0x3000)=nil) openat(0xffffffffffffff9c, 0x0, 0x202, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) 16m27.874884761s ago: executing program 6 (id=2320): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 16m27.874666101s ago: executing program 6 (id=2321): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, 0xffffffffffffffff, 0x2e, 0x4608, @val=@netkit}, 0x1c) 16m27.771997612s ago: executing program 6 (id=2322): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) 16m27.594627632s ago: executing program 6 (id=2323): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000011000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000fffffffffdffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050020010000000000000000000000200001000000003c0000000200000000000000000000000000ffffffffffff0600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000000100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 16m24.985232386s ago: executing program 6 (id=2324): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000680)="1b0000001a000700ab092500090007000aab0700a90100001d6036", 0x1b) 16m24.752949192s ago: executing program 6 (id=2325): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getpriority(0x2, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 15m39.612549523s ago: executing program 38 (id=2325): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getpriority(0x2, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12m4.115284968s ago: executing program 8 (id=2583): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) mremap(&(0x7f00003fd000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) 12m1.262895399s ago: executing program 8 (id=2584): socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r3], 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffff"], 0x30}}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/warn_count', 0x48000, 0x0) read$watch_queue(r5, &(0x7f00000002c0)=""/37, 0x25) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="305c061ce1821f7051667557c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e64174d46de00a5a09fa80393d502b0cd490635d54cdf5bd046cc030000000000005e000000808ce41d86b9b949004fd8fe45b91e8fe7ec7c49750a1b0ade", 0x5e, 0xfffffffffffffffe) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r6 = getpgid(0x0) syz_pidfd_open(r6, 0x0) wait4(r6, &(0x7f0000000100), 0x8, &(0x7f0000000140)) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800220010000104fcffffff0000000000dce483af7be57e69e09a642d1733a7", @ANYRES32=0x0, @ANYRES16], 0x58}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) 11m48.172239787s ago: executing program 8 (id=2586): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7", 0xf) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvfrom$l2tp(r1, 0x0, 0x0, 0x140, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 11m48.022646593s ago: executing program 8 (id=2587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000004bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 11m47.757993612s ago: executing program 8 (id=2588): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r0, 0x0) fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) 11m47.443513436s ago: executing program 8 (id=2589): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x52) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00), 0x80000b7, 0x40000023, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40c82) 10m58.349565399s ago: executing program 39 (id=2589): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x52) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00), 0x80000b7, 0x40000023, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40c82) 3m28.622816909s ago: executing program 7 (id=2976): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000200001000000000000000001020000000200000807160d00060000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x16}, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000001300)=ANY=[@ANYBLOB="200a34000000a1f74cc049b32b1e6b0000000000000000dea29b85d82e5cec068ce8989dea0a3f81e9ed4a8b74b83f25b49d5d73deeffebc5e79a35177a1147c6877533f6f84"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x29000, 0x1000, 0xbb}, 0x20) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0xdf540000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x400102, 0x0) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000240)) 3m27.51660294s ago: executing program 7 (id=2981): r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000002180), 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFBR(r1, 0x8940, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) write$P9_RWALK(r4, 0x0, 0x0) openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0x4004e502, &(0x7f0000000040)=0x2b) 3m27.273993297s ago: executing program 7 (id=2983): landlock_create_ruleset(0x0, 0x0, 0x2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x40) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c015) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) 3m25.180162115s ago: executing program 7 (id=2984): landlock_create_ruleset(0x0, 0x0, 0x2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x40) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c015) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) 3m14.69265745s ago: executing program 7 (id=2986): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x3a1100, 0x0) close(r0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0x5450, 0x0) 3m13.545366085s ago: executing program 7 (id=2987): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 2m25.294446374s ago: executing program 40 (id=2987): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 4.955422139s ago: executing program 9 (id=3248): r0 = openat$mixer(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) 4.706873836s ago: executing program 9 (id=3249): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (fail_nth: 1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0xdf540000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) 4.376323092s ago: executing program 9 (id=3250): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, 0x0) r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000001540), 0x22a000, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x81, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYRES8=r3, @ANYRESDEC, @ANYRES8=r2, @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x95, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x7ff, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) write$FUSE_LSEEK(r2, &(0x7f0000000100)={0x18, 0x0, r6, {0x1}}, 0x18) r7 = accept$alg(r4, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f00000000c0)) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) fcntl$dupfd(r7, 0x0, r4) sendmsg$nl_route(r0, 0x0, 0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80a01, 0x0) r9 = open(&(0x7f0000000000)='.\x00', 0x80, 0x0) r10 = openat$cgroup_pressure(r9, &(0x7f0000000080)='cpu.pressure\x00', 0xe0, 0x0) fsetxattr$trusted_overlay_opaque(r10, &(0x7f0000000040), 0x0, 0x0, 0x0) r11 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.808482963s ago: executing program 1 (id=3253): r0 = openat$mixer(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) 2.646715641s ago: executing program 1 (id=3254): openat$selinux_status(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) 2.455479962s ago: executing program 1 (id=3255): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x3, 0x34888521, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x36) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) (fail_nth: 1) dup3(r2, r0, 0x0) 1.501186476s ago: executing program 9 (id=3256): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)={0x30a40, 0x0, 0x7}, 0x18) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60008040}, 0x4800) 1.362318231s ago: executing program 9 (id=3257): r0 = openat$selinux_status(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000040)="d2f6f8286929caeeb6580c760d7609ec0c7e032c25adbe29f69651143f31436542f98e14c4c61bae72d6d52cc398121ffa285e052ecd539a361728e69d7a35490ed6eac8ff32d04048b8be3e20d6a6a66f4096a8c0369bdebd76bcca4d8ffe6a3ef03c5749f1b174a9ca59473d2f122aaf2635a4ace83a3744dced5866b2fbd1925af0ffd638900e68d84e82fb3959c3ed62968dc5ae444646df", 0x9a) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x81, 0x8080) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r1, r3, r5) sendmsg$nl_route_sched_retired(r0, &(0x7f00000023c0)={&(0x7f00000022c0), 0xc, &(0x7f0000002380)={&(0x7f0000002300)=@newtclass={0x54, 0x28, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xb, 0x2}, {0x10, 0xfff2}, {0x2, 0xa}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x9}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x15}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r0, 0xc0386447, &(0x7f0000002440)={{0x8, 0x4, &(0x7f0000002400)=[{0x4, 0x0, 0x2}, {0x9, 0x0, 0x1}, {0xd, 0x0, 0x7fff}, {0x8, 0x0, 0x4}]}, 0x6, 0x2, 0x10, 0x2, 0x0, 0xfe, 0x3, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r0, 0xc0086448, &(0x7f0000002480)={r6}) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f00000024c0)={r1, 0x1}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x63, &(0x7f0000002500)={'TPROXY\x00'}, &(0x7f0000002540)=0x1e) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000600, r4, &(0x7f0000002580)={0x10000, 0x9, 0x579ab8324d2bfa8, 0x7}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x10824802}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x50, 0x1, 0x7, 0x3, 0x0, 0x0, {0xa8eb55c243a013e7, 0x0, 0x3}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xa}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x5) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000002700)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002800)={'syztnl0\x00', &(0x7f0000002740)={'gretap0\x00', r2, 0x1, 0x1, 0x3, 0x2, {{0x19, 0x4, 0x1, 0x8, 0x64, 0x67, 0x0, 0xa0, 0x29, 0x0, @broadcast, @private=0xa010100, {[@rr={0x7, 0x23, 0xad, [@loopback, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x38}, @multicast1, @multicast2]}, @cipso={0x86, 0x2c, 0x6, [{0x6, 0x11, "c1d2e946c5075485d3ffc1db2e4dc9"}, {0x1, 0x5, "f7a2f0"}, {0x1, 0x5, "64d3b5"}, {0x6, 0xb, "adc8d5417dc592526b"}]}, @end]}}}}}) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000002840)={0x80}) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002940)={r0, r0, 0x35, 0x0, @val=@iter={&(0x7f0000002900), 0x10}}, 0x18) fsetxattr$security_evm(r9, &(0x7f0000002980), &(0x7f00000029c0)=@ng={0x4, 0x17, "cc4d701346084140630bcbd823c248"}, 0x11, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a40), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r8, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x14, r10, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) openat$selinux_commit_pending_bools(0xffffff9c, &(0x7f0000002b40), 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002cc0)={'tunl0\x00', &(0x7f0000002bc0)={'syztnl1\x00', 0x0, 0x700, 0x20, 0x70, 0x6, {{0x37, 0x4, 0x2, 0x4, 0xdc, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp_addr={0x44, 0x2c, 0x88, 0x1, 0x3, [{@private=0xa010100, 0x2}, {@loopback, 0xe3}, {@remote, 0x7}, {@loopback, 0x1}, {@private=0xa010102, 0x3ff}]}, @rr={0x7, 0x23, 0x4f, [@multicast1, @empty, @local, @local, @loopback, @multicast1, @multicast1, @remote]}, @timestamp={0x44, 0x28, 0x3c, 0x0, 0xb, [0x0, 0x4, 0x9, 0x6, 0xe, 0xe, 0x7, 0xbf5, 0x416]}, @cipso={0x86, 0x17, 0x3, [{0x2, 0x6, "a12422da"}, {0x0, 0xb, "f55c1404c7594889e0"}]}, @generic={0x44, 0x9, "754460deb5fa0c"}, @timestamp_addr={0x44, 0x14, 0x33, 0x1, 0x6, [{@broadcast, 0xb7f}, {@multicast2}]}, @timestamp_prespec={0x44, 0x1c, 0x97, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff0000}, {@local, 0x8}, {@broadcast, 0x9c3}]}]}}}}}) r11 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r11, 0x0, 0x63, &(0x7f0000002d00)={'ah\x00'}, &(0x7f0000002d40)=0x1e) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000002d80)=@sr0, r3, &(0x7f0000002dc0)) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x0) 979.823103ms ago: executing program 1 (id=3258): r0 = openat$sw_sync(0xffffff9c, 0x0, 0x48a80, 0x0) r1 = syz_open_dev$rtc(&(0x7f00000002c0), 0xa, 0x80) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$RTC_PIE_ON(r2, 0x7005) 488.159806ms ago: executing program 1 (id=3259): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0xa00, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) 487.744066ms ago: executing program 9 (id=3260): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000380)='\\G', 0x2}], 0x1) 0s ago: executing program 1 (id=3261): r0 = openat$selinux_avc_hash_stats(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = open(&(0x7f0000001580)='./file0\x00', 0x400042, 0x5) dup3(r2, r3, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40020) r4 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) write$P9_RREADLINK(r0, 0x0, 0x0) ioctl$UBLK_U_CMD_DEL_DEV(r0, 0xc0207505, &(0x7f0000000940)={0x0}) r6 = getpgrp(0x0) syz_pidfd_open(r6, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r4, 0xc0207511, &(0x7f00000009c0)={r5, 0xffff, 0x0, 0x0, r6}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x9) r9 = dup3(r8, r7, 0x0) r10 = openat$cgroup_freezer_state(r9, &(0x7f0000000040), 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r10, 0x5450, 0x0) socketpair(0x10, 0x1, 0x2, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r12, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000b00)=ANY=[], 0x184}, 0x1, 0x0, 0x0, 0x2400c844}, 0x14) r13 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f0000000ac0)) fsetxattr$trusted_overlay_opaque(r13, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x1) dup3(r12, r11, 0x0) write(r11, 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) sendmsg$alg(r11, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="40b31acf752630a5160d4f21082fbb4387c1248136449111e673837ec9f4c8945df56e6d582b158cc29a20406acd17d93207e368be7e852291d8a4fb74bffd9e43d37e5c2d22d3dd260fbc72c852b79cb9104de7e3ace72d49463f78517059eb342cb9021df41ce9897ac693256496", 0x6f}, {&(0x7f0000000200)="297fc964e00dbc76e84b1d487e926a6b5f8048cef9a9a91271129fdf65a58f5d740278de16656d20b59705f8dd13c040bd8397e4247fcf380030c770287b23f3c83e0df0e723d7ab77a42fe289819f2d0585b8b35f8f77bab03424b6c85a68cb4d1a3c4433f6f4663ba9f9674f81c771cf2c7ae24d4e272ca450cda43479", 0x7e}, {0x0}, {&(0x7f00000002c0)="20b3b3cf14af21ec7ac1f1612200f19f9a6c1d998f95146bb9e4", 0x1a}, {&(0x7f0000000300)="83b56232ea47eda0459d2e31df558b8d4669f1d60c1657881e3cc09ec01c92", 0x1f}, {&(0x7f0000000340)="c15c035fceacb2cdc69d3fceec46c3851763bfdc262884c1db8bd582caa663cba8b8a46d071d5bfc1963d4162ca8b4aa16d51a973c439cdc1558a44f92612b6fcfe61d0e67d597e6a122f9c589dc3e1b3bd24b4b3f1df0308d859cd683c551fd024ca06b29e7", 0x66}, {&(0x7f0000000440)="b27a06f41952ac851086514901547bbc335c7641f8144513cba5fde41ff7602383484b1d8a41506a852da955943798bf070bc562d2cfd6100d509cad2b0ff9a2025e9a01fed38ea95110991c9cfb0e1aa0ab262032a579e0217aebd9bc66768e9014eff71cbe78774730451dd73420c59d34919caebca0d9209994822318f742392b45cf692bb05329510c827a0d57d6e7c54d", 0x93}, {0x0}], 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="5c000000170100000200000049000000414b4e3ff61358ee7bbd63153159501e91606fb1ecd4f02daf21ccb1be9cb4f85e9649ecefb532631bb779b6fc216d4020859812a9a9526e752ad24ffdaa7ad8725a958c53164623d98cbdc26bb0440000003c00000017010000020000002b0000005ebcc0520937e26caecaf22301a62251c1447860272ac2ca6e4f77fe3d45b5af329507bcb3ecc272d790a50010000000170100000400"], 0xa8, 0x20004094}, 0x4008044) kernel console output (not intermixed with test programs): ed promiscuous mode [ 2001.097979][T13634] veth1_vlan: entered promiscuous mode [ 2001.188010][T13634] veth0_macvtap: entered promiscuous mode [ 2001.201195][T13634] veth1_macvtap: entered promiscuous mode [ 2001.289559][ T28] audit: type=1400 audit(2257.228:1298): avc: denied { write } for pid=14069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2001.296736][ T7272] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2001.298191][ T7272] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2001.298653][ T7272] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2001.298896][ T7272] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2001.889101][ T28] audit: type=1400 audit(2257.828:1299): avc: denied { write } for pid=14076 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2002.348542][ T28] audit: type=1400 audit(2258.288:1300): avc: denied { write } for pid=14078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2002.578074][ T28] audit: type=1400 audit(2258.518:1301): avc: denied { write } for pid=14082 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2003.107140][ T28] audit: type=1400 audit(2259.048:1302): avc: denied { write } for pid=14084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2003.370842][ T28] audit: type=1400 audit(2259.308:1303): avc: denied { write } for pid=14087 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2003.813035][ T28] audit: type=1400 audit(2259.748:1304): avc: denied { write } for pid=14089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2004.706716][T14102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2004.709474][T14102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2004.831423][T14106] kernel read not supported for file /file0 (pid: 14106 comm: syz.6.2057) [ 2004.833192][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 2004.833299][ T28] audit: type=1800 audit(2260.768:1306): pid=14106 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2057" name="file0" dev="mqueue" ino=23489 res=0 errno=0 [ 2004.932216][ T28] audit: type=1400 audit(2260.868:1307): avc: denied { write } for pid=14097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2005.318469][ T28] audit: type=1400 audit(2261.258:1308): avc: denied { write } for pid=14111 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2005.940116][ T28] audit: type=1400 audit(2261.878:1309): avc: denied { write } for pid=14114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2006.251755][ T28] audit: type=1400 audit(2262.188:1310): avc: denied { write } for pid=14117 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2008.308868][ T28] audit: type=1400 audit(2264.248:1311): avc: denied { mounton } for pid=14126 comm="syz.6.2062" path="/8/file0" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2012.351993][T14138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2065'. [ 2012.574273][ T28] audit: type=1400 audit(2268.498:1312): avc: denied { connect } for pid=14122 comm="syz.7.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2015.547917][T14164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2015.549997][T14164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2018.632835][T14184] fuse: Unknown parameter '0x0000000000000003' [ 2018.640769][T14185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2018.644665][T14185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2021.782650][T14199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2021.788555][T14199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2021.973242][T14206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2021.974917][T14206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2027.454179][T14226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2027.457678][T14226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2043.601262][T14273] fuse: Unknown parameter 'fd0x0000000000000003' [ 2047.017254][T14290] fuse: Unknown parameter 'fd0x0000000000000003' [ 2049.979303][T14308] fuse: Unknown parameter 'fd0x0000000000000003' [ 2051.022359][T14316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2051.027385][T14316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2051.274967][T14322] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 2051.275494][T14322] binder: 14321:14322 ioctl 4018620d 20000100 returned -1 [ 2051.588629][T14329] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2124'. [ 2051.594347][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2124'. [ 2068.836179][T14400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2068.838571][T14400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2082.282027][ T28] audit: type=1400 audit(2338.218:1313): avc: denied { write } for pid=14444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2082.570665][ T28] audit: type=1400 audit(2338.508:1314): avc: denied { write } for pid=14447 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2100.309629][T14505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2100.310634][T14505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2109.754174][ T28] audit: type=1326 audit(2365.688:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14533 comm="syz.7.2194" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 2109.765149][ T28] audit: type=1326 audit(2365.708:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14533 comm="syz.7.2194" exe="/syz-executor" sig=0 arch=40000028 syscall=322 compat=0 ip=0x112618 code=0x7ffc0000 [ 2109.768974][ T28] audit: type=1326 audit(2365.708:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14533 comm="syz.7.2194" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 2109.788839][ T28] audit: type=1326 audit(2365.728:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14533 comm="syz.7.2194" exe="/syz-executor" sig=0 arch=40000028 syscall=54 compat=0 ip=0x130810 code=0x7ffc0000 [ 2109.792523][ T28] audit: type=1326 audit(2365.728:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14533 comm="syz.7.2194" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 2109.804911][ T28] audit: type=1326 audit(2365.748:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14533 comm="syz.7.2194" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 2126.514768][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2206'. [ 2131.705888][ T28] audit: type=1400 audit(2387.648:1321): avc: denied { mount } for pid=14582 comm="syz.6.2209" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2146.198367][ T28] audit: type=1326 audit(2402.138:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.6.2216" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x0 [ 2159.620098][T14618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2159.621021][T14618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2160.088774][T14626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2160.146357][T14626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2161.420550][T14636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2161.425209][T14636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2162.064016][T14642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2162.074305][T14642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2172.804019][T14663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2172.805941][T14663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2173.157349][T14667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2173.160405][T14667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2184.920758][ T28] audit: type=1400 audit(2440.858:1323): avc: denied { listen } for pid=14689 comm="syz.7.2238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2187.509566][ T28] audit: type=1326 audit(2443.448:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14691 comm="syz.7.2239" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7fc00000 [ 2210.910631][T14816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2210.912416][T14816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2212.615744][T14833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2212.619835][T14833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2213.848846][T14854] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2278'. [ 2215.106266][T14872] syzkaller0: entered promiscuous mode [ 2215.656168][T14881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2215.657222][T14881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2215.771170][T14885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2215.778514][T14885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2221.191856][T14915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2221.200804][T14915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2224.256097][T14927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2233.686765][T14961] faux_driver vgem: [drm] Unknown color mode 5; guessing buffer size. [ 2235.035025][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2310'. [ 2235.069724][T14967] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2310'. [ 2238.398303][T14990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2238.401440][T14990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2258.268500][T15050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2258.329198][T15050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2269.734568][T15070] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 2274.752909][T15111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2274.756254][T15111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2277.667551][T15125] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2359'. [ 2290.589301][T15143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2290.606239][T15143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2292.156027][T15143] hsr_slave_0: entered promiscuous mode [ 2292.160073][T15143] hsr_slave_1: entered promiscuous mode [ 2292.174494][T15143] debugfs: 'hsr0' already exists in 'hsr' [ 2292.175500][T15143] Cannot create hsr debugfs directory [ 2292.870839][T15143] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2292.886834][T15143] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2292.890047][T15143] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2292.911501][T15143] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2292.917913][T15143] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2292.946014][T15143] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2292.949076][T15143] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2292.957769][T15143] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2293.998430][T15143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2299.534721][T15143] veth0_vlan: entered promiscuous mode [ 2299.548886][T15143] veth1_vlan: entered promiscuous mode [ 2299.630542][T15143] veth0_macvtap: entered promiscuous mode [ 2299.642098][T15143] veth1_macvtap: entered promiscuous mode [ 2299.696961][ T4190] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2299.697637][ T4190] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2299.699677][ T4190] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2299.701342][ T4190] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2304.473232][T15485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2304.474707][T15485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2304.880951][T15485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2304.897087][T15485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2317.358795][T15520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2317.359781][T15520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2330.308638][T15550] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2394'. [ 2330.437342][ T28] audit: type=1400 audit(2585.828:1325): avc: denied { write } for pid=15547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2330.921157][ T28] audit: type=1400 audit(2586.295:1326): avc: denied { write } for pid=15554 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2335.782927][ T1986] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2336.023019][ T1986] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2336.085318][ T1986] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2336.146602][ T1986] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2336.607977][ T1986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2336.628515][ T1986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2336.636220][ T1986] bond0 (unregistering): Released all slaves [ 2336.712089][ T1986] hsr_slave_0: left promiscuous mode [ 2336.716406][ T1986] hsr_slave_1: left promiscuous mode [ 2336.727076][ T1986] veth1_macvtap: left promiscuous mode [ 2336.728365][ T1986] veth0_macvtap: left promiscuous mode [ 2336.731133][ T1986] veth1_vlan: left promiscuous mode [ 2336.731982][ T1986] veth0_vlan: left promiscuous mode [ 2338.500819][ T28] audit: type=1400 audit(2593.389:1327): avc: denied { write } for pid=15580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2339.206962][ T28] audit: type=1400 audit(2594.044:1328): avc: denied { write } for pid=15588 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2339.749069][ T2959] 8021q: adding VLAN 0 to HW filter on device eth25 [ 2341.073466][ T28] audit: type=1400 audit(2595.794:1329): avc: denied { write } for pid=15592 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2341.101973][T15595] ======================================================= [ 2341.101973][T15595] WARNING: The mand mount option has been deprecated and [ 2341.101973][T15595] and is ignored by this kernel. Remove the mand [ 2341.101973][T15595] option from the mount to silence this warning. [ 2341.101973][T15595] ======================================================= [ 2341.402450][ T28] audit: type=1400 audit(2596.103:1330): avc: denied { write } for pid=15598 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2341.621262][ T2959] 8021q: adding VLAN 0 to HW filter on device eth26 [ 2342.789320][ T28] audit: type=1400 audit(2597.394:1331): avc: denied { write } for pid=15608 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2343.407582][ T28] audit: type=1400 audit(2597.974:1332): avc: denied { write } for pid=15619 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2343.719613][ T2959] 8021q: adding VLAN 0 to HW filter on device eth27 [ 2344.996237][ T28] audit: type=1400 audit(2599.462:1333): avc: denied { write } for pid=15623 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2345.332116][ T28] audit: type=1400 audit(2599.771:1334): avc: denied { write } for pid=15626 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2345.711211][ T2959] 8021q: adding VLAN 0 to HW filter on device eth28 [ 2350.929881][T15654] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2410'. [ 2350.940650][T15654] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2410'. [ 2355.692627][T15672] fuse: Bad value for 'fd' [ 2357.735351][ T28] audit: type=1400 audit(2611.384:1335): avc: denied { write } for pid=15684 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2358.033102][ T28] audit: type=1400 audit(2611.665:1336): avc: denied { write } for pid=15690 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2358.054312][T15692] fuse: Bad value for 'fd' [ 2359.070641][ T28] audit: type=1400 audit(2612.638:1337): avc: denied { write } for pid=15701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2359.574490][ T28] audit: type=1400 audit(2613.106:1338): avc: denied { write } for pid=15705 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2360.290569][ T28] audit: type=1400 audit(2613.770:1339): avc: denied { write } for pid=15710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2360.726656][ T28] audit: type=1400 audit(2614.182:1340): avc: denied { write } for pid=15713 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2361.539915][ T28] audit: type=1400 audit(2614.950:1341): avc: denied { write } for pid=15716 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2361.954069][ T28] audit: type=1400 audit(2615.333:1342): avc: denied { write } for pid=15719 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2367.983610][T15726] fuse: Bad value for 'fd' [ 2373.259778][T15748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2373.262373][T15748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2394.401472][T15782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2394.405197][T15782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2398.784079][ T28] audit: type=1400 audit(2649.789:1343): avc: denied { watch watch_reads } for pid=15798 comm="syz.7.2447" path="/298/file1" dev="tmpfs" ino=1558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2404.211236][T15833] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2460'. [ 2405.234880][T15841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2405.235762][T15841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2407.106298][T15844] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.5 [ 2407.106932][T15844] PKCS7: Only support pkcs7_signedData type [ 2423.400461][T15873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2423.406040][T15873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2426.360740][T15880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2426.361923][T15880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2440.141569][T15935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2440.143485][T15935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2440.167851][T15935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2440.169821][T15935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2440.214430][T15935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2440.217227][T15935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2440.562575][T15935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2440.563533][T15935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2459.023672][T16021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2459.024518][T16021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2460.479658][T16030] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2525'. [ 2460.481094][T16030] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2525'. [ 2479.814919][T16126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2479.821708][T16126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2480.581117][T16134] syzkaller0: entered promiscuous mode [ 2480.581530][T16134] syzkaller0: entered allmulticast mode [ 2481.361964][T16145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2481.364656][T16145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2482.243367][T16151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2482.253143][T16151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2491.499348][ T28] audit: type=1400 audit(2736.566:1344): avc: denied { watch_reads } for pid=16178 comm="syz.7.2570" path="/346" dev="tmpfs" ino=1797 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2496.261207][T16200] netlink: 'syz.8.2577': attribute type 1 has an invalid length. [ 2496.377744][T16200] bond1: (slave geneve2): making interface the new active one [ 2496.382362][T16200] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 2496.385024][ T1986] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 2496.386904][ T1986] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 2496.389627][ T1986] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 2496.395436][ T1986] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 2508.406344][T16260] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.5 [ 2508.407001][T16260] PKCS7: Only support pkcs7_signedData type [ 2518.516378][T16262] i2c i2c-1: died at extended address code [ 2522.717236][T16282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2522.719929][T16282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2522.736580][T16282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2522.745318][T16282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2523.691892][T16282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2523.703155][T16282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2533.611072][T16302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2533.612107][T16302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2570.393618][ T28] audit: type=1400 audit(2810.391:1345): avc: denied { audit_write } for pid=16329 comm="syz.7.2605" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2573.403492][T16332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2573.424570][T16332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2575.414731][T16332] hsr_slave_0: entered promiscuous mode [ 2575.416519][T16332] hsr_slave_1: entered promiscuous mode [ 2575.417903][T16332] debugfs: 'hsr0' already exists in 'hsr' [ 2575.418155][T16332] Cannot create hsr debugfs directory [ 2576.121798][T16332] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2576.149787][T16332] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2576.155027][T16332] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2576.180729][T16332] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2576.184245][T16332] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2576.202623][T16332] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2576.206340][T16332] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2576.211702][T16332] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2577.912591][T16332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2583.760751][T16636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2583.763728][T16636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2585.988886][T16332] veth0_vlan: entered promiscuous mode [ 2586.034308][T16332] veth1_vlan: entered promiscuous mode [ 2586.301095][T16332] veth0_macvtap: entered promiscuous mode [ 2586.489984][T16332] veth1_macvtap: entered promiscuous mode [ 2586.719758][T14789] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2586.721314][T14789] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2586.722382][T14789] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2586.723290][T14789] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2610.563589][T16703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2610.621326][T16703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2611.594034][T16707] fuse: Unknown parameter 'user_id00000000000000000000' [ 2614.649668][T16710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2614.650663][T16710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2617.856710][T16725] fuse: Unknown parameter 'user_id00000000000000000000' [ 2620.066836][T14785] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2620.068018][T14785] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2620.293837][T14785] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2620.298550][T14785] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2620.477742][T14785] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2620.479562][T14785] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2620.605610][T14785] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2620.606002][T14785] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2621.582484][T14785] bond1 (unregistering): (slave geneve2): Releasing active interface [ 2621.682852][T14785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2621.728899][T14785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2621.745678][T14785] bond0 (unregistering): Released all slaves [ 2621.756744][T14785] bond1 (unregistering): Released all slaves [ 2621.981414][T14785] hsr_slave_0: left promiscuous mode [ 2621.985959][T14785] hsr_slave_1: left promiscuous mode [ 2622.011270][T14785] veth1_macvtap: left promiscuous mode [ 2622.012800][T14785] veth0_macvtap: left promiscuous mode [ 2622.028989][T14785] veth1_vlan: left promiscuous mode [ 2622.042751][T14785] veth0_vlan: left promiscuous mode [ 2624.251138][T16761] fuse: Bad value for 'fd' [ 2624.313762][ T28] audit: type=1400 audit(2860.849:1346): avc: denied { write } for pid=16756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2624.941043][ T28] audit: type=1400 audit(2861.439:1347): avc: denied { write } for pid=16763 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2625.186319][ T2959] 8021q: adding VLAN 0 to HW filter on device eth29 [ 2625.349799][T16770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2625.353299][T16770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2626.002372][T16781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2626.003211][T16781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2626.340360][ T28] audit: type=1400 audit(2862.749:1348): avc: denied { write } for pid=16778 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2627.584601][ T28] audit: type=1400 audit(2863.910:1349): avc: denied { write } for pid=16789 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2628.171902][T16796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2628.228530][T16796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2628.311197][ T2959] 8021q: adding VLAN 0 to HW filter on device eth30 [ 2630.201262][ T28] audit: type=1400 audit(2866.352:1350): avc: denied { write } for pid=16803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2630.251242][T16806] fuse: Bad value for 'fd' [ 2630.945632][ T28] audit: type=1400 audit(2867.054:1351): avc: denied { write } for pid=16808 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2631.781025][ T2959] 8021q: adding VLAN 0 to HW filter on device eth31 [ 2634.183054][ T28] audit: type=1400 audit(2870.067:1352): avc: denied { write } for pid=16814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2634.825197][ T28] audit: type=1400 audit(2870.685:1353): avc: denied { write } for pid=16820 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2635.214333][ T2959] 8021q: adding VLAN 0 to HW filter on device eth32 [ 2648.707833][ T28] audit: type=1400 audit(2883.674:1354): avc: denied { write } for pid=16842 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2649.261625][ T28] audit: type=1400 audit(2884.188:1355): avc: denied { write } for pid=16845 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2650.528641][ T28] audit: type=1400 audit(2885.386:1356): avc: denied { write } for pid=16848 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2651.138682][ T28] audit: type=1400 audit(2885.948:1357): avc: denied { write } for pid=16851 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2652.066688][ T28] audit: type=1400 audit(2886.827:1358): avc: denied { write } for pid=16855 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2652.366082][ T28] audit: type=1400 audit(2887.108:1359): avc: denied { write } for pid=16858 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2655.653353][ T28] audit: type=1400 audit(2890.177:1360): avc: denied { write } for pid=16861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2656.106648][ T28] audit: type=1400 audit(2890.608:1361): avc: denied { write } for pid=16866 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2656.977720][T16875] netlink: 'syz.9.2653': attribute type 5 has an invalid length. [ 2657.362559][T16875] netlink: 'syz.9.2653': attribute type 5 has an invalid length. [ 2657.753127][T16886] fuse: Unknown parameter '0x0000000000000004' [ 2664.618691][T16914] fuse: Unknown parameter '0x0000000000000004' [ 2667.407462][T16917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2667.409289][T16917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2673.887776][T16934] fuse: Unknown parameter '0x0000000000000004' [ 2679.694971][ T28] audit: type=1400 audit(2912.627:1362): avc: denied { write } for pid=16943 comm="syz.9.2670" path="socket:[30326]" dev="sockfs" ino=30326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2679.776012][T16945] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 2683.134480][T16966] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2683.152462][T16966] binder: 16965:16966 unknown command 0 [ 2683.152972][T16966] binder: 16965:16966 ioctl c0306201 20000080 returned -22 [ 2684.488069][T16988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=16988 comm=syz.9.2679 [ 2688.729841][T17006] nbd7: detected capacity change from 0 to 63 [ 2688.740163][ T46] block nbd7: Receive control failed (result -32) [ 2691.961111][T17029] syzkaller0: entered promiscuous mode [ 2691.961352][T17029] syzkaller0: entered allmulticast mode [ 2694.526705][T17043] binder: 17042:17043 ioctl 4018620d 0 returned -22 [ 2704.016469][ T28] audit: type=1400 audit(2935.433:1363): avc: denied { accept } for pid=17049 comm="syz.7.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2722.434713][T17075] netlink: 'syz.9.2703': attribute type 1 has an invalid length. [ 2722.438833][T17075] netlink: 'syz.9.2703': attribute type 2 has an invalid length. [ 2726.239154][ T28] audit: type=1400 audit(2956.235:1364): avc: denied { mounton } for pid=17077 comm="syz.7.2705" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2739.998876][T17109] 0: reclassify loop, rule prio 0, protocol 700 [ 2765.793030][T17194] fuse: Unknown parameter 'group_id00000000000000000000' [ 2774.664642][T17214] fuse: Bad value for 'user_id' [ 2774.670591][T17214] fuse: Bad value for 'user_id' [ 2783.000156][T17234] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2742'. [ 2785.834186][ T28] audit: type=1800 audit(3012.009:1365): pid=17236 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2743" name="bus" dev="ramfs" ino=31252 res=0 errno=0 [ 2786.094729][T17238] fuse: Bad value for 'user_id' [ 2786.096049][T17238] fuse: Bad value for 'user_id' [ 2800.095858][T17260] fuse: Bad value for 'user_id' [ 2800.096364][T17260] fuse: Bad value for 'user_id' [ 2808.497228][T17280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2808.506096][T17280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2808.871226][T17284] fuse: Bad value for 'fd' [ 2813.634768][T17302] fuse: Bad value for 'fd' [ 2815.204255][T17305] binder: 17299:17305 ioctl c0306201 0 returned -14 [ 2815.231857][T17305] netlink: 'syz.9.2759': attribute type 10 has an invalid length. [ 2815.244161][T17305] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2759'. [ 2815.245726][T17305] veth1: entered promiscuous mode [ 2815.246543][T17305] veth1: entered allmulticast mode [ 2815.249336][T17305] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 2822.051068][T17324] fuse: Bad value for 'fd' [ 2827.602576][T17341] fuse: Bad value for 'fd' [ 2829.279496][T17348] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2772'. [ 2829.408690][T17350] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2773'. [ 2830.015815][T17362] fuse: Bad value for 'fd' [ 2830.802293][T17373] fuse: Bad value for 'fd' [ 2840.418825][T17399] fuse: Bad value for 'fd' [ 2843.500671][ T28] audit: type=1400 audit(3065.967:1366): avc: denied { write } for pid=17403 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2843.811038][ T28] audit: type=1400 audit(3066.248:1367): avc: denied { write } for pid=17407 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2844.598778][T17412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2844.602249][T17412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2845.092429][T17420] fuse: Invalid rootmode [ 2850.268459][ T28] audit: type=1326 audit(3072.293:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17426 comm="syz.7.2797" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 2850.272501][ T28] audit: type=1326 audit(3072.303:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17426 comm="syz.7.2797" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 2850.282010][ T28] audit: type=1326 audit(3072.303:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17426 comm="syz.7.2797" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 2850.286679][ T28] audit: type=1326 audit(3072.312:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17426 comm="syz.7.2797" exe="/syz-executor" sig=0 arch=40000028 syscall=468 compat=0 ip=0x130810 code=0x7ffc0000 [ 2850.295720][ T28] audit: type=1326 audit(3072.321:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17426 comm="syz.7.2797" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 2850.301078][ T28] audit: type=1326 audit(3072.321:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17426 comm="syz.7.2797" exe="/syz-executor" sig=0 arch=40000028 syscall=436 compat=0 ip=0x130810 code=0x7ffc0000 [ 2850.307462][ T28] audit: type=1326 audit(3072.321:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17426 comm="syz.7.2797" exe="/syz-executor" sig=0 arch=40000028 syscall=248 compat=0 ip=0x130810 code=0x7ffc0000 [ 2850.313138][ T28] audit: type=1326 audit(3072.312:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17426 comm="syz.7.2797" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 2850.594117][T17429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2850.603222][T17429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2853.781912][T17435] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2800'. [ 2859.096599][ T28] audit: type=1326 audit(3080.556:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17432 comm="syz.7.2799" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x0 [ 2860.548514][T17449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2860.555001][T17449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2862.230744][ T28] audit: type=1400 audit(3083.495:1377): avc: denied { sqpoll } for pid=17459 comm="syz.7.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2862.814520][T17465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2862.824216][T17465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2863.097720][T17465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2863.101123][T17465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2866.550430][T17502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2866.552311][T17502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2867.736808][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2821'. [ 2869.414372][ T28] audit: type=1326 audit(3090.214:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17516 comm="syz.7.2824" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 2869.423838][ T28] audit: type=1326 audit(3090.223:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17516 comm="syz.7.2824" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 2869.424085][ T28] audit: type=1326 audit(3090.223:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17516 comm="syz.7.2824" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 2869.424203][ T28] audit: type=1326 audit(3090.223:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17516 comm="syz.7.2824" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 2869.424376][ T28] audit: type=1326 audit(3090.223:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17516 comm="syz.7.2824" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 2869.424487][ T28] audit: type=1326 audit(3090.223:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17516 comm="syz.7.2824" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 2869.424649][ T28] audit: type=1326 audit(3090.223:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17516 comm="syz.7.2824" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 2869.424753][ T28] audit: type=1326 audit(3090.223:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17516 comm="syz.7.2824" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 2869.424922][ T28] audit: type=1326 audit(3090.223:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17516 comm="syz.7.2824" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 2869.425028][ T28] audit: type=1326 audit(3090.223:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17516 comm="syz.7.2824" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 2875.865086][T17541] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2833'. [ 2876.475731][T17547] fuse: Bad value for 'fd' [ 2881.206185][T17571] fuse: Unknown parameter '0x0000000000000003' [ 2882.407627][T17577] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17577 comm=syz.9.2844 [ 2891.163336][T17616] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2857'. [ 2891.171585][T17616] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2857'. [ 2893.374279][T17625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2893.375273][T17625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2901.525388][T17648] netlink: 'syz.9.2867': attribute type 3 has an invalid length. [ 2904.634071][T17671] comedi: valid board names for 8255 driver are: [ 2904.634412][T17671] 8255 [ 2904.634677][T17671] comedi: valid board names for vmk80xx driver are: [ 2904.634822][T17671] vmk80xx [ 2904.634859][T17671] comedi: valid board names for usbduxsigma driver are: [ 2904.634879][T17671] usbduxsigma [ 2904.634892][T17671] comedi: valid board names for usbduxfast driver are: [ 2904.634938][T17671] usbduxfast [ 2904.634957][T17671] comedi: valid board names for usbdux driver are: [ 2904.634973][T17671] usbdux [ 2904.634987][T17671] comedi: valid board names for ni6501 driver are: [ 2904.635001][T17671] ni6501 [ 2904.635015][T17671] comedi: valid board names for dt9812 driver are: [ 2904.635030][T17671] dt9812 [ 2904.635043][T17671] comedi: valid board names for ni_labpc_cs driver are: [ 2904.635058][T17671] ni_labpc_cs [ 2904.635071][T17671] comedi: valid board names for ni_daq_700 driver are: [ 2904.635086][T17671] ni_daq_700 [ 2904.635098][T17671] comedi: valid board names for labpc_pci driver are: [ 2904.635113][T17671] labpc_pci [ 2904.635126][T17671] comedi: valid board names for adl_pci9118 driver are: [ 2904.635141][T17671] pci9118dg [ 2904.635174][T17671] pci9118hg [ 2904.635190][T17671] pci9118hr [ 2904.635203][T17671] comedi: valid board names for 8255_pci driver are: [ 2904.635218][T17671] 8255_pci [ 2904.635233][T17671] comedi: valid board names for comedi_parport driver are: [ 2904.635247][T17671] comedi_parport [ 2904.635260][T17671] comedi: valid board names for comedi_test driver are: [ 2904.635273][T17671] comedi_test [ 2904.635287][T17671] comedi: valid board names for comedi_bond driver are: [ 2904.635586][T17671] comedi_bond [ 2904.682446][T17671] netlink: 'syz.7.2873': attribute type 3 has an invalid length. [ 2904.684183][T17671] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2873'. [ 2904.731867][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 2904.738459][ T28] audit: type=1400 audit(3123.266:1393): avc: denied { mounton } for pid=17670 comm="syz.7.2873" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 2905.779332][T17689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2905.779964][T17689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2906.550125][T17712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2906.550979][T17712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2908.974797][T17741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2908.975867][T17741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2909.501818][T17745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2909.509281][T17745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2911.598314][T17756] syzkaller1: entered allmulticast mode [ 2911.869984][T17762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2911.872545][T17762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2920.999156][T17768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2921.006305][T17768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2926.327530][T17789] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2910'. [ 2934.201873][T17817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2934.213524][T17817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2957.190626][T17867] syz_tun: entered allmulticast mode [ 2957.202943][T17867] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2936'. [ 2957.229130][T17867] syz_tun (unregistering): left allmulticast mode [ 2965.778376][T17924] fuse: Bad value for 'fd' [ 2966.654977][T17939] fuse: Bad value for 'fd' [ 2972.569705][T17955] fuse: Bad value for 'fd' [ 2981.986483][T17978] syz_tun: entered allmulticast mode [ 2982.054950][T17978] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2975'. [ 3018.251651][T17978] syz_tun (unregistering): left allmulticast mode [ 3018.308201][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2976'. [ 3018.332479][T17988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3018.334143][T17988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3043.492903][T18043] FAULT_INJECTION: forcing a failure. [ 3043.492903][T18043] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 3043.494425][T18043] CPU: 0 UID: 0 PID: 18043 Comm: syz.9.2993 Tainted: G L syzkaller #0 PREEMPT [ 3043.494743][T18043] Tainted: [L]=SOFTLOCKUP [ 3043.494801][T18043] Hardware name: ARM-Versatile Express [ 3043.495122][T18043] Call trace: [ 3043.495746][T18043] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3043.496657][T18043] r7:60000013 r6:60000013 r5:8231e0c8 r4:00000000 [ 3043.496888][T18043] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3043.497033][T18043] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3043.497203][T18043] r7:00000000 r6:00000000 r5:84877080 r4:82b4e7c8 [ 3043.497309][T18043] [<8021e390>] (dump_stack) from [<809d2fcc>] (should_fail_ex+0x1c0/0x224) [ 3043.497407][T18043] [<809d2e0c>] (should_fail_ex) from [<809d3044>] (should_fail+0x14/0x18) [ 3043.497500][T18043] r8:76ff2f08 r7:00000000 r6:00000000 r5:dfb49f68 r4:00000002 [ 3043.497578][T18043] [<809d3030>] (should_fail) from [<809d3064>] (should_fail_usercopy+0x1c/0x20) [ 3043.497735][T18043] [<809d3048>] (should_fail_usercopy) from [<805c5fe4>] (simple_read_from_buffer+0x80/0x140) [ 3043.497839][T18043] [<805c5f64>] (simple_read_from_buffer) from [<8064d02c>] (proc_fail_nth_read+0xb8/0x10c) [ 3043.497972][T18043] r10:8064cf74 r9:00000001 r8:00000002 r7:dfb49f68 r6:0000000f r5:76ff2f08 [ 3043.498167][T18043] r4:84877080 r3:dfb49e9f [ 3043.498244][T18043] [<8064cf74>] (proc_fail_nth_read) from [<8058661c>] (vfs_read+0xc0/0x328) [ 3043.498446][T18043] r8:84877080 r7:dfb49f68 r6:76ff2f08 r5:86734300 r4:0000000f [ 3043.498486][T18043] [<8058655c>] (vfs_read) from [<805872b0>] (ksys_read+0x74/0xec) [ 3043.498577][T18043] r10:00000003 r9:84877080 r8:8020029c r7:00000000 r6:00000000 r5:86734300 [ 3043.498616][T18043] r4:86734303 [ 3043.498713][T18043] [<8058723c>] (ksys_read) from [<80587338>] (sys_read+0x10/0x14) [ 3043.498936][T18043] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 3043.499084][T18043] [<80587328>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3043.499274][T18043] Exception stack(0xdfb49fa8 to 0xdfb49ff0) [ 3043.499604][T18043] 9fa0: 00000000 00000000 00000005 76ff2f08 0000000f 00000000 [ 3043.499801][T18043] 9fc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76ff30dc [ 3043.499868][T18043] 9fe0: 76ff2e58 76ff2e44 0010ba34 00112618 [ 3046.659258][ T28] audit: type=1400 audit(3256.084:1394): avc: denied { write } for pid=18049 comm="syz.9.2996" path="socket:[33816]" dev="sockfs" ino=33816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3052.512672][T18068] FAULT_INJECTION: forcing a failure. [ 3052.512672][T18068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3052.513178][T18068] CPU: 1 UID: 0 PID: 18068 Comm: syz.9.3002 Tainted: G L syzkaller #0 PREEMPT [ 3052.513282][T18068] Tainted: [L]=SOFTLOCKUP [ 3052.513303][T18068] Hardware name: ARM-Versatile Express [ 3052.513330][T18068] Call trace: [ 3052.513374][T18068] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3052.513556][T18068] r7:60000013 r6:60000013 r5:8231e0c8 r4:00000000 [ 3052.513581][T18068] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3052.513641][T18068] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3052.513708][T18068] r7:00000000 r6:00000000 r5:83185780 r4:82b4e7c8 [ 3052.513729][T18068] [<8021e390>] (dump_stack) from [<809d2fcc>] (should_fail_ex+0x1c0/0x224) [ 3052.513789][T18068] [<809d2e0c>] (should_fail_ex) from [<809d3044>] (should_fail+0x14/0x18) [ 3052.513857][T18068] r8:dfd29eb8 r7:00000000 r6:76fd1f08 r5:00000001 r4:00000001 [ 3052.513879][T18068] [<809d3030>] (should_fail) from [<809d3064>] (should_fail_usercopy+0x1c/0x20) [ 3052.513953][T18068] [<809d3048>] (should_fail_usercopy) from [<80913888>] (kstrtouint_from_user+0x54/0x13c) [ 3052.514014][T18068] [<80913834>] (kstrtouint_from_user) from [<8064e330>] (proc_fail_nth_write+0x40/0xf4) [ 3052.514117][T18068] r8:8064e2f0 r7:dfd29f68 r6:76fd1f08 r5:83e7bc80 r4:00000001 [ 3052.514182][T18068] [<8064e2f0>] (proc_fail_nth_write) from [<80586ec0>] (vfs_write+0xd4/0x450) [ 3052.514272][T18068] r5:83e7bc80 r4:00000001 [ 3052.514341][T18068] [<80586dec>] (vfs_write) from [<805873b0>] (ksys_write+0x74/0xec) [ 3052.514430][T18068] r10:00000004 r9:83185780 r8:8020029c r7:00000000 r6:00000002 r5:83e7bc80 [ 3052.514538][T18068] r4:83e7bc83 [ 3052.514561][T18068] [<8058733c>] (ksys_write) from [<80587438>] (sys_write+0x10/0x14) [ 3052.514622][T18068] r7:00000004 r6:00000000 r5:00000000 r4:00000000 [ 3052.514640][T18068] [<80587428>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3052.514689][T18068] Exception stack(0xdfd29fa8 to 0xdfd29ff0) [ 3052.514782][T18068] 9fa0: 00000000 00000000 00000005 76fd1f08 00000001 00000000 [ 3052.514826][T18068] 9fc0: 00000000 00000000 00000000 00000004 00346378 00000000 003d0f00 76fd20dc [ 3052.514879][T18068] 9fe0: 76fd1e58 76fd1e44 0010ba34 00112618 [ 3056.397630][ T28] audit: type=1400 audit(3265.199:1395): avc: denied { ioctl } for pid=18078 comm="syz.9.3007" path="socket:[33859]" dev="sockfs" ino=33859 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 3056.426096][ T28] audit: type=1400 audit(3265.218:1396): avc: denied { setopt } for pid=18078 comm="syz.9.3007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 3057.850713][T18091] fuse: Bad value for 'group_id' [ 3057.855706][T18091] fuse: Bad value for 'group_id' [ 3068.380831][T18153] FAULT_INJECTION: forcing a failure. [ 3068.380831][T18153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3068.381234][T18153] CPU: 0 UID: 0 PID: 18153 Comm: syz.9.3039 Tainted: G L syzkaller #0 PREEMPT [ 3068.381334][T18153] Tainted: [L]=SOFTLOCKUP [ 3068.381368][T18153] Hardware name: ARM-Versatile Express [ 3068.381398][T18153] Call trace: [ 3068.381479][T18153] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3068.381635][T18153] r7:60000013 r6:60000013 r5:8231e0c8 r4:00000000 [ 3068.381688][T18153] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3068.381800][T18153] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3068.381887][T18153] r7:0000000c r6:00000000 r5:833ed780 r4:82b4e7c8 [ 3068.381913][T18153] [<8021e390>] (dump_stack) from [<809d2fcc>] (should_fail_ex+0x1c0/0x224) [ 3068.382051][T18153] [<809d2e0c>] (should_fail_ex) from [<809d3044>] (should_fail+0x14/0x18) [ 3068.382130][T18153] r8:b5403587 r7:0000000c r6:20000000 r5:e4515e6c r4:0000000c [ 3068.382247][T18153] [<809d3030>] (should_fail) from [<809d3064>] (should_fail_usercopy+0x1c/0x20) [ 3068.382315][T18153] [<809d3048>] (should_fail_usercopy) from [<815edfd0>] (move_addr_to_kernel+0x34/0xf8) [ 3068.382397][T18153] [<815edf9c>] (move_addr_to_kernel) from [<815ee22c>] (copy_msghdr_from_user+0x198/0x1e0) [ 3068.382516][T18153] r7:200000c0 r6:e4515e28 r5:00000000 r4:e4515f20 [ 3068.382573][T18153] [<815ee094>] (copy_msghdr_from_user) from [<815ee2ec>] (___sys_sendmsg+0x78/0xd0) [ 3068.382704][T18153] r8:00004001 r7:00000000 r6:837eaf40 r5:e4515f20 r4:e4515e6c [ 3068.382741][T18153] [<815ee274>] (___sys_sendmsg) from [<815f0460>] (__sys_sendmsg+0x8c/0xe0) [ 3068.382837][T18153] r9:833ed780 r8:838ccd80 r7:00004001 r6:200000c0 r5:838ccd81 r4:00000003 [ 3068.382911][T18153] [<815f03d4>] (__sys_sendmsg) from [<815f04c8>] (sys_sendmsg+0x14/0x18) [ 3068.383027][T18153] r8:8020029c r7:00000128 r6:0012f214 r5:00000000 r4:00000000 [ 3068.383108][T18153] [<815f04b4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3068.383212][T18153] Exception stack(0xe4515fa8 to 0xe4515ff0) [ 3068.383275][T18153] 5fa0: 00000000 00000000 00000003 200000c0 00004001 00000000 [ 3068.383318][T18153] 5fc0: 00000000 00000000 0012f214 00000128 003462d8 00000000 00000001 76ff30dc [ 3068.383440][T18153] 5fe0: 76ff2e88 76ff2e78 00018ebc 00130810 [ 3071.249027][T18163] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18163 comm=syz.9.3042 [ 3071.699623][T18161] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18161 comm=syz.9.3042 [ 3071.712349][T18161] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18161 comm=syz.9.3042 [ 3071.714740][T18161] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18161 comm=syz.9.3042 [ 3071.723976][T18161] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18161 comm=syz.9.3042 [ 3071.728961][T18161] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18161 comm=syz.9.3042 [ 3071.741702][T18161] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18161 comm=syz.9.3042 [ 3071.744625][T18161] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18161 comm=syz.9.3042 [ 3071.746698][T18161] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18161 comm=syz.9.3042 [ 3071.752345][T18161] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18161 comm=syz.9.3042 [ 3084.104145][T18302] selinux_netlink_send: 56 callbacks suppressed [ 3084.117603][T18302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=18302 comm=syz.9.3054 [ 3084.499704][T18191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3084.512644][T18191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3086.087155][T18191] hsr_slave_0: entered promiscuous mode [ 3086.098817][T18191] hsr_slave_1: entered promiscuous mode [ 3086.131501][T18191] debugfs: 'hsr0' already exists in 'hsr' [ 3086.139004][T18191] Cannot create hsr debugfs directory [ 3087.159271][ T28] audit: type=1400 audit(3293.975:1397): avc: denied { write } for pid=18465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3087.367566][T18490] fuse: Unknown parameter 'group_id00000000000000000000' [ 3087.410796][T18191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3087.440222][T18191] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3087.453741][T18191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3087.474537][T18191] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3087.480875][T18191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3087.501446][T18191] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3087.507854][T18191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3087.568412][T18191] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3087.710812][ T28] audit: type=1400 audit(3294.499:1398): avc: denied { write } for pid=18487 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3087.945667][ T28] audit: type=1400 audit(3294.714:1399): avc: denied { ioctl } for pid=18500 comm="syz.9.3063" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 3089.409142][ T28] audit: type=1400 audit(3296.080:1400): avc: denied { write } for pid=18515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3089.886283][T18191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3090.164996][ T28] audit: type=1400 audit(3296.791:1401): avc: denied { write } for pid=18522 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3090.482799][T18531] fuse: Bad value for 'user_id' [ 3090.483940][T18531] fuse: Bad value for 'user_id' [ 3090.931037][ T28] audit: type=1400 audit(3297.503:1402): avc: granted { setsecparam } for pid=18532 comm="syz.9.3067" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 3091.280392][ T28] audit: type=1400 audit(3297.840:1403): avc: granted { setsecparam } for pid=18532 comm="syz.9.3067" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 3091.795880][ T28] audit: type=1400 audit(3298.317:1404): avc: denied { write } for pid=18535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3093.142877][ T28] audit: type=1400 audit(3299.571:1405): avc: denied { write } for pid=18545 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3093.282907][T18533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3093.292252][T18533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3094.878810][ T28] audit: type=1400 audit(3301.208:1406): avc: denied { write } for pid=18553 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3095.586792][T18567] fuse: Bad value for 'user_id' [ 3095.587467][T18567] fuse: Bad value for 'user_id' [ 3095.588396][ T28] audit: type=1400 audit(3301.863:1407): avc: denied { write } for pid=18565 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3096.241725][ T28] audit: type=1400 audit(3302.472:1408): avc: denied { create } for pid=18570 comm="syz.9.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 3097.449210][ T28] audit: type=1400 audit(3303.604:1409): avc: denied { write } for pid=18574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3098.462225][ T28] audit: type=1400 audit(3304.559:1410): avc: denied { write } for pid=18585 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3098.476334][T18589] fuse: Bad value for 'user_id' [ 3098.487974][T18589] fuse: Bad value for 'user_id' [ 3100.384594][ T28] audit: type=1400 audit(3306.355:1411): avc: denied { write } for pid=18594 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3101.189667][ T28] audit: type=1400 audit(3307.104:1412): avc: denied { write } for pid=18604 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3102.264462][T18191] veth0_vlan: entered promiscuous mode [ 3102.292993][T18191] veth1_vlan: entered promiscuous mode [ 3102.391450][T18191] veth0_macvtap: entered promiscuous mode [ 3102.413775][T18191] veth1_macvtap: entered promiscuous mode [ 3102.658341][T17754] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3102.658754][T17754] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3102.659102][T17754] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3102.659344][T17754] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3103.359196][ T28] audit: type=1400 audit(3309.125:1413): avc: denied { write } for pid=18611 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3108.976148][ T28] audit: type=1400 audit(3314.384:1414): avc: denied { write } for pid=18619 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3109.213289][T18626] fuse: Bad value for 'fd' [ 3112.338014][ T28] audit: type=1400 audit(3317.547:1415): avc: denied { write } for pid=18630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3112.411402][T18636] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3081'. [ 3113.628035][ T28] audit: type=1400 audit(3318.745:1416): avc: denied { write } for pid=18644 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3119.029600][ T28] audit: type=1400 audit(3323.593:1417): avc: denied { write } for pid=18650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3119.727176][ T28] audit: type=1400 audit(3324.444:1418): avc: denied { write } for pid=18660 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3122.461012][ T28] audit: type=1400 audit(3327.018:1419): avc: denied { write } for pid=18664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3123.382442][ T28] audit: type=1400 audit(3327.879:1420): avc: denied { ioctl } for pid=18675 comm="syz.9.3090" path="socket:[34725]" dev="sockfs" ino=34725 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 3123.608598][ T28] audit: type=1400 audit(3328.066:1421): avc: denied { create } for pid=18671 comm="syz.1.3089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 3123.808497][ T28] audit: type=1400 audit(3328.272:1422): avc: denied { write } for pid=18679 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3124.591923][T18612] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 3124.787729][T18612] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 3125.085408][ T28] audit: type=1107 audit(3329.470:1423): pid=18675 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=' 5Ê %UÚB [ 3125.085408][ T28] ¾>é&ƞć :ÎÎoST®5(Æú«3½ù”«´œ´È"Áêh|&rô«G88„y'9Æõ x:ÞN("6—‚ÑH "§:l¡7¿.¢*¿ãm' [ 3125.097437][T18612] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 3125.097631][T18612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3125.097730][T18612] usb 2-1: Product: syz [ 3125.097817][T18612] usb 2-1: Manufacturer: syz [ 3125.097903][T18612] usb 2-1: SerialNumber: syz [ 3125.541685][T18612] rtl8150 2-1:1.0: couldn't reset the device [ 3125.543534][T18612] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 3125.575218][T18612] usb 2-1: USB disconnect, device number 2 [ 3125.692504][ T28] audit: type=1400 audit(3330.031:1424): avc: denied { write } for pid=18689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3130.444606][ T28] audit: type=1400 audit(3334.439:1425): avc: denied { write } for pid=18708 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3134.363774][ T28] audit: type=1400 audit(3338.154:1426): avc: denied { write } for pid=18716 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3135.362107][ T28] audit: type=1400 audit(3339.071:1427): avc: denied { write } for pid=18735 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3136.145013][T18744] FAULT_INJECTION: forcing a failure. [ 3136.145013][T18744] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 3136.165666][T18744] CPU: 1 UID: 0 PID: 18744 Comm: syz.1.3098 Tainted: G L syzkaller #0 PREEMPT [ 3136.165801][T18744] Tainted: [L]=SOFTLOCKUP [ 3136.165820][T18744] Hardware name: ARM-Versatile Express [ 3136.165846][T18744] Call trace: [ 3136.165889][T18744] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3136.166013][T18744] r7:600e0013 r6:600e0013 r5:8231e0c8 r4:00000000 [ 3136.166031][T18744] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3136.166077][T18744] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3136.166130][T18744] r7:00000001 r6:00000000 r5:846ab200 r4:82b1815c [ 3136.166145][T18744] [<8021e390>] (dump_stack) from [<809d2fcc>] (should_fail_ex+0x1c0/0x224) [ 3136.166195][T18744] [<809d2e0c>] (should_fail_ex) from [<80554904>] (should_fail_alloc_page+0x68/0x74) [ 3136.166253][T18744] r8:e02c1dbc r7:00000001 r6:00000000 r5:00140cca r4:e02c1dc8 [ 3136.166269][T18744] [<8055489c>] (should_fail_alloc_page) from [<8051a294>] (prepare_alloc_pages+0xf8/0x1b4) [ 3136.166315][T18744] [<8051a19c>] (prepare_alloc_pages) from [<805235c8>] (__alloc_frozen_pages_noprof+0xb0/0x1620) [ 3136.166378][T18744] r10:00000000 r9:846ab200 r8:76f8c000 r7:76f8c000 r6:00140cca r5:00000000 [ 3136.166398][T18744] r4:e02c1eb8 [ 3136.166412][T18744] [<80523518>] (__alloc_frozen_pages_noprof) from [<80524bac>] (__folio_alloc_noprof+0x14/0x6c) [ 3136.166475][T18744] r10:00000040 r9:85420780 r8:76f8c000 r7:76f8c000 r6:84d3c100 r5:00000000 [ 3136.166493][T18744] r4:e02c1eb8 [ 3136.166507][T18744] [<80524b98>] (__folio_alloc_noprof) from [<804eed04>] (do_anonymous_page+0xf0/0x648) [ 3136.166563][T18744] r5:00000000 r4:e02c1eb8 [ 3136.166579][T18744] [<804eec14>] (do_anonymous_page) from [<804f1bcc>] (handle_mm_fault+0x5bc/0x6b8) [ 3136.166641][T18744] r10:00000040 r9:00000000 r8:00000000 r7:e02c1fb0 r6:76f8cdc0 r5:846ab200 [ 3136.166659][T18744] r4:00001255 [ 3136.166673][T18744] [<804f1610>] (handle_mm_fault) from [<802330dc>] (do_page_fault+0x21c/0x4d0) [ 3136.166736][T18744] r10:00000002 r9:85420780 r8:00000255 r7:846ab200 r6:00000a07 r5:76f8cdc0 [ 3136.166754][T18744] r4:e02c1fb0 [ 3136.166769][T18744] [<80232ec0>] (do_page_fault) from [<8023355c>] (do_DataAbort+0x38/0xac) [ 3136.166824][T18744] r10:003d0f00 r9:00000000 r8:80232ec0 r7:e02c1fb0 r6:76f8cdc0 r5:00000a07 [ 3136.166842][T18744] r4:82a1c750 [ 3136.166857][T18744] [<80233524>] (do_DataAbort) from [<80200edc>] (__dabt_usr+0x5c/0x60) [ 3136.166902][T18744] Exception stack(0xe02c1fb0 to 0xe02c1ff8) [ 3136.166935][T18744] 1fa0: 0018f50c 20001140 00000024 76f8ee64 [ 3136.166965][T18744] 1fc0: 00000000 00000002 20001140 00000024 00000002 00000000 003d0f00 76f8f0dc [ 3136.166994][T18744] 1fe0: 00000000 76f8cdd0 000238d0 00014198 20000010 ffffffff [ 3136.167024][T18744] r8:828c7044 r7:846ab200 r6:ffffffff r5:20000010 r4:00014198 [ 3136.215307][T18744] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 3136.776261][T18714] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 3136.972808][T18714] usb 2-1: config 4 has an invalid interface number: 220 but max is 0 [ 3136.973149][T18714] usb 2-1: config 4 has no interface number 0 [ 3136.973481][T18714] usb 2-1: config 4 interface 220 has no altsetting 0 [ 3137.027689][T18714] usb 2-1: New USB device found, idVendor=086a, idProduct=0102, bcdDevice=66.c8 [ 3137.028419][T18714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3137.028544][T18714] usb 2-1: Product: syz [ 3137.028605][T18714] usb 2-1: Manufacturer: syz [ 3137.028635][T18714] usb 2-1: SerialNumber: syz [ 3137.444073][T18714] emi26 - firmware loader 2-1:4.220: emi26_probe start [ 3137.452827][T18714] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 3137.453466][T18714] usb 2-1: Falling back to sysfs fallback for: emi26/loader.fw [ 3137.454255][ T28] audit: type=1400 audit(3341.045:1428): avc: denied { firmware_load } for pid=18714 comm="kworker/0:3" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 3137.763420][ T28] audit: type=1400 audit(3341.335:1429): avc: denied { write } for pid=18745 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3139.734220][ T28] audit: type=1400 audit(3343.179:1430): avc: denied { write } for pid=18768 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3140.516928][T18773] FAULT_INJECTION: forcing a failure. [ 3140.516928][T18773] name failslab, interval 1, probability 0, space 0, times 1 [ 3140.546487][T18773] CPU: 1 UID: 0 PID: 18773 Comm: syz.1.3102 Tainted: G L syzkaller #0 PREEMPT [ 3140.546645][T18773] Tainted: [L]=SOFTLOCKUP [ 3140.546668][T18773] Hardware name: ARM-Versatile Express [ 3140.546695][T18773] Call trace: [ 3140.546742][T18773] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3140.546865][T18773] r7:60000013 r6:60000013 r5:8231e0c8 r4:00000000 [ 3140.546889][T18773] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3140.546950][T18773] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3140.547020][T18773] r7:00000000 r6:00000000 r5:8487cb00 r4:82b18108 [ 3140.547040][T18773] [<8021e390>] (dump_stack) from [<809d2fcc>] (should_fail_ex+0x1c0/0x224) [ 3140.547101][T18773] [<809d2e0c>] (should_fail_ex) from [<80554874>] (should_failslab+0x6c/0x94) [ 3140.547173][T18773] r8:00000000 r7:00000000 r6:830016c0 r5:00000c40 r4:00001000 [ 3140.547195][T18773] [<80554808>] (should_failslab) from [<80532a9c>] (__kmalloc_noprof+0xa4/0x39c) [ 3140.547252][T18773] [<805329f8>] (__kmalloc_noprof) from [<80816734>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 3140.547327][T18773] r10:00000000 r9:83849400 r8:00000000 r7:834a2000 r6:838cd328 r5:00001000 [ 3140.547353][T18773] r4:00000000 [ 3140.547374][T18773] [<808166f8>] (tomoyo_realpath_from_path) from [<808127fc>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3140.547450][T18773] r10:00000000 r9:00000004 r8:838cd300 r7:c0189436 r6:81cda124 r5:00000004 [ 3140.547476][T18773] r4:838cd328 r3:828d0400 [ 3140.547496][T18773] [<80812730>] (tomoyo_path_number_perm) from [<80817150>] (tomoyo_file_ioctl+0x1c/0x20) [ 3140.547570][T18773] r10:8487cb00 r9:00000004 r8:838cd300 r7:20000300 r6:20000300 r5:c0189436 [ 3140.547594][T18773] r4:838cd300 [ 3140.547612][T18773] [<80817134>] (tomoyo_file_ioctl) from [<807c2a48>] (security_file_ioctl+0x80/0x1d4) [ 3140.547671][T18773] [<807c29c8>] (security_file_ioctl) from [<805a2128>] (sys_ioctl+0x4c/0xb5c) [ 3140.547738][T18773] r7:20000300 r6:c0189436 r5:838cd301 r4:00000000 [ 3140.547759][T18773] [<805a20dc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3140.547815][T18773] Exception stack(0xe02c1fa8 to 0xe02c1ff0) [ 3140.547867][T18773] 1fa0: 00000000 00000000 00000004 c0189436 20000300 00000000 [ 3140.547907][T18773] 1fc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76f8f0dc [ 3140.547938][T18773] 1fe0: 76f8ee88 76f8ee78 00018ebc 00130810 [ 3140.547977][T18773] r10:00000036 r9:8487cb00 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 3140.548000][T18773] r4:00000000 [ 3140.570366][T18773] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3141.249727][T18780] fuse: Unknown parameter 'use00000000000000000000' [ 3141.440241][ T28] audit: type=1400 audit(3344.760:1431): avc: denied { write } for pid=18775 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3143.366951][ T28] audit: type=1400 audit(3346.567:1432): avc: denied { write } for pid=18791 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3143.435036][ T28] audit: type=1400 audit(3346.641:1433): avc: denied { getopt } for pid=18785 comm="syz.9.3107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 3144.773459][ T28] audit: type=1400 audit(3347.895:1434): avc: denied { write } for pid=18794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3145.570276][T18803] FAULT_INJECTION: forcing a failure. [ 3145.570276][T18803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3145.576905][T18803] CPU: 1 UID: 0 PID: 18803 Comm: syz.9.3110 Tainted: G L syzkaller #0 PREEMPT [ 3145.577054][T18803] Tainted: [L]=SOFTLOCKUP [ 3145.577077][T18803] Hardware name: ARM-Versatile Express [ 3145.577103][T18803] Call trace: [ 3145.577146][T18803] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3145.577253][T18803] r7:60000013 r6:60000013 r5:8231e0c8 r4:00000000 [ 3145.577274][T18803] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3145.577330][T18803] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3145.577393][T18803] r7:00000000 r6:00000000 r5:833f8c80 r4:82b4e7c8 [ 3145.577415][T18803] [<8021e390>] (dump_stack) from [<809d2fcc>] (should_fail_ex+0x1c0/0x224) [ 3145.577473][T18803] [<809d2e0c>] (should_fail_ex) from [<809d3044>] (should_fail+0x14/0x18) [ 3145.577542][T18803] r8:76ff2f08 r7:00000000 r6:00000000 r5:dfcb1f68 r4:00000002 [ 3145.577563][T18803] [<809d3030>] (should_fail) from [<809d3064>] (should_fail_usercopy+0x1c/0x20) [ 3145.577615][T18803] [<809d3048>] (should_fail_usercopy) from [<805c5fe4>] (simple_read_from_buffer+0x80/0x140) [ 3145.577708][T18803] [<805c5f64>] (simple_read_from_buffer) from [<8064d02c>] (proc_fail_nth_read+0xb8/0x10c) [ 3145.577799][T18803] r10:8064cf74 r9:00000001 r8:00000002 r7:dfcb1f68 r6:0000000f r5:76ff2f08 [ 3145.577830][T18803] r4:833f8c80 r3:dfcb1e9f [ 3145.577851][T18803] [<8064cf74>] (proc_fail_nth_read) from [<8058661c>] (vfs_read+0xc0/0x328) [ 3145.577934][T18803] r8:833f8c80 r7:dfcb1f68 r6:76ff2f08 r5:867c0980 r4:0000000f [ 3145.577955][T18803] [<8058655c>] (vfs_read) from [<805872b0>] (ksys_read+0x74/0xec) [ 3145.578046][T18803] r10:00000003 r9:833f8c80 r8:8020029c r7:00000000 r6:00000000 r5:867c0980 [ 3145.578070][T18803] r4:867c0983 [ 3145.578089][T18803] [<8058723c>] (ksys_read) from [<80587338>] (sys_read+0x10/0x14) [ 3145.578158][T18803] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 3145.578177][T18803] [<80587328>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3145.578268][T18803] Exception stack(0xdfcb1fa8 to 0xdfcb1ff0) [ 3145.578313][T18803] 1fa0: 00000000 00000000 00000004 76ff2f08 0000000f 00000000 [ 3145.578351][T18803] 1fc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76ff30dc [ 3145.578381][T18803] 1fe0: 76ff2e58 76ff2e44 0010ba34 00112618 [ 3145.798246][ T28] audit: type=1400 audit(3348.859:1435): avc: denied { write } for pid=18802 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3145.989424][T18807] fuse: Unknown parameter 'use00000000000000000000' [ 3147.226105][T18820] FAULT_INJECTION: forcing a failure. [ 3147.226105][T18820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3147.230522][T18820] CPU: 1 UID: 0 PID: 18820 Comm: syz.9.3113 Tainted: G L syzkaller #0 PREEMPT [ 3147.230599][T18820] Tainted: [L]=SOFTLOCKUP [ 3147.230610][T18820] Hardware name: ARM-Versatile Express [ 3147.230622][T18820] Call trace: [ 3147.230644][T18820] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3147.230700][T18820] r7:60000013 r6:60000013 r5:8231e0c8 r4:00000000 [ 3147.230709][T18820] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3147.230735][T18820] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3147.230765][T18820] r7:00000000 r6:00000000 r5:83806400 r4:82b4e7c8 [ 3147.230773][T18820] [<8021e390>] (dump_stack) from [<809d2fcc>] (should_fail_ex+0x1c0/0x224) [ 3147.230802][T18820] [<809d2e0c>] (should_fail_ex) from [<809d3044>] (should_fail+0x14/0x18) [ 3147.230840][T18820] r8:86cae480 r7:00000000 r6:877a5844 r5:00000000 r4:877a5840 [ 3147.230850][T18820] [<809d3030>] (should_fail) from [<809d3064>] (should_fail_usercopy+0x1c/0x20) [ 3147.230875][T18820] [<809d3048>] (should_fail_usercopy) from [<80c198c8>] (virtual_ncidev_read+0xfc/0x208) [ 3147.230904][T18820] [<80c197cc>] (virtual_ncidev_read) from [<8058661c>] (vfs_read+0xc0/0x328) [ 3147.230976][T18820] r10:80c197cc r9:00000001 r8:83806400 r7:dfd85f68 r6:00000000 r5:851ba300 [ 3147.230988][T18820] r4:00000000 [ 3147.230996][T18820] [<8058655c>] (vfs_read) from [<805872b0>] (ksys_read+0x74/0xec) [ 3147.231032][T18820] r10:00000003 r9:83806400 r8:8020029c r7:00000000 r6:00000000 r5:851ba300 [ 3147.231041][T18820] r4:851ba301 [ 3147.231049][T18820] [<8058723c>] (ksys_read) from [<80587338>] (sys_read+0x10/0x14) [ 3147.231080][T18820] r7:00000003 r6:0012f214 r5:00000000 r4:00000000 [ 3147.231087][T18820] [<80587328>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3147.231111][T18820] Exception stack(0xdfd85fa8 to 0xdfd85ff0) [ 3147.231132][T18820] 5fa0: 00000000 00000000 00000003 00000000 00000000 00000000 [ 3147.231149][T18820] 5fc0: 00000000 00000000 0012f214 00000003 00346378 00000000 003d0f00 76fd20dc [ 3147.231162][T18820] 5fe0: 76fd1e88 76fd1e78 00018ebc 00130810 [ 3147.278107][ T28] audit: type=1400 audit(3350.235:1436): avc: denied { write } for pid=18810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3148.149555][ T28] audit: type=1400 audit(3351.058:1437): avc: denied { write } for pid=18823 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3149.517529][ T28] audit: type=1400 audit(3352.331:1438): avc: denied { setattr } for pid=18828 comm="syz.1.3116" name="" dev="pipefs" ino=34928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 3152.065716][T18813] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3153.328886][T18845] fuse: Unknown parameter 'user_i00000000000000000000' [ 3154.354347][T18862] fuse: Unknown parameter 'user_i00000000000000000000' [ 3154.863121][T18858] FAULT_INJECTION: forcing a failure. [ 3154.863121][T18858] name failslab, interval 1, probability 0, space 0, times 0 [ 3154.875894][T18858] CPU: 1 UID: 0 PID: 18858 Comm: syz.1.3127 Tainted: G L syzkaller #0 PREEMPT [ 3154.876010][T18858] Tainted: [L]=SOFTLOCKUP [ 3154.876036][T18858] Hardware name: ARM-Versatile Express [ 3154.876059][T18858] Call trace: [ 3154.876101][T18858] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3154.876207][T18858] r7:60000013 r6:60000013 r5:8231e0c8 r4:00000000 [ 3154.876228][T18858] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3154.876279][T18858] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3154.876360][T18858] r7:00000000 r6:00000000 r5:840c6400 r4:82b18108 [ 3154.876378][T18858] [<8021e390>] (dump_stack) from [<809d2fcc>] (should_fail_ex+0x1c0/0x224) [ 3154.876435][T18858] [<809d2e0c>] (should_fail_ex) from [<80554874>] (should_failslab+0x6c/0x94) [ 3154.876500][T18858] r8:00000000 r7:00000000 r6:830016c0 r5:00000c40 r4:00001000 [ 3154.876520][T18858] [<80554808>] (should_failslab) from [<80532a9c>] (__kmalloc_noprof+0xa4/0x39c) [ 3154.876571][T18858] [<805329f8>] (__kmalloc_noprof) from [<80816734>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 3154.876638][T18858] r10:00000000 r9:85434800 r8:00000000 r7:834a0d48 r6:8612a028 r5:00001000 [ 3154.876661][T18858] r4:00000000 [ 3154.876677][T18858] [<808166f8>] (tomoyo_realpath_from_path) from [<808127fc>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3154.876755][T18858] r10:00000000 r9:00000004 r8:8612a000 r7:400c4d0f r6:81cda124 r5:00000004 [ 3154.876779][T18858] r4:8612a028 r3:828d0400 [ 3154.876796][T18858] [<80812730>] (tomoyo_path_number_perm) from [<80817150>] (tomoyo_file_ioctl+0x1c/0x20) [ 3154.876866][T18858] r10:840c6400 r9:00000004 r8:8612a000 r7:00000000 r6:00000000 r5:400c4d0f [ 3154.876887][T18858] r4:8612a000 [ 3154.876903][T18858] [<80817134>] (tomoyo_file_ioctl) from [<807c2a48>] (security_file_ioctl+0x80/0x1d4) [ 3154.876954][T18858] [<807c29c8>] (security_file_ioctl) from [<805a2128>] (sys_ioctl+0x4c/0xb5c) [ 3154.877015][T18858] r7:00000000 r6:400c4d0f r5:8612a001 r4:00000000 [ 3154.877034][T18858] [<805a20dc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3154.877081][T18858] Exception stack(0xdfbbdfa8 to 0xdfbbdff0) [ 3154.877119][T18858] dfa0: 00000000 00000000 00000004 400c4d0f 00000000 00000000 [ 3154.877155][T18858] dfc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76f8f0dc [ 3154.877183][T18858] dfe0: 76f8ee88 76f8ee78 00018ebc 00130810 [ 3154.877220][T18858] r10:00000036 r9:840c6400 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 3154.877240][T18858] r4:00000000 [ 3154.926951][T18858] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3155.869670][T18874] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=311 sclass=netlink_audit_socket pid=18874 comm=syz.9.3130 [ 3157.069523][T18886] FAULT_INJECTION: forcing a failure. [ 3157.069523][T18886] name failslab, interval 1, probability 0, space 0, times 0 [ 3157.071547][T18886] CPU: 1 UID: 0 PID: 18886 Comm: syz.1.3137 Tainted: G L syzkaller #0 PREEMPT [ 3157.071674][T18886] Tainted: [L]=SOFTLOCKUP [ 3157.071699][T18886] Hardware name: ARM-Versatile Express [ 3157.071724][T18886] Call trace: [ 3157.071769][T18886] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3157.071881][T18886] r7:60000013 r6:60000013 r5:8231e0c8 r4:00000000 [ 3157.071900][T18886] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3157.071955][T18886] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3157.072017][T18886] r7:00400dc0 r6:00000000 r5:848a7080 r4:82b18108 [ 3157.072036][T18886] [<8021e390>] (dump_stack) from [<809d2fcc>] (should_fail_ex+0x1c0/0x224) [ 3157.072094][T18886] [<809d2e0c>] (should_fail_ex) from [<80554874>] (should_failslab+0x6c/0x94) [ 3157.072169][T18886] r8:0000006c r7:00400dc0 r6:00000000 r5:00000000 r4:830060c0 [ 3157.072189][T18886] [<80554808>] (should_failslab) from [<8052e318>] (__kmalloc_cache_noprof+0x54/0x2f4) [ 3157.072245][T18886] [<8052e2c4>] (__kmalloc_cache_noprof) from [<80593df4>] (alloc_pipe_info+0x6c/0x22c) [ 3157.072355][T18886] r10:851ba301 r9:82b1b2d8 r8:851ba300 r7:00100000 r6:848a7080 r5:82a20880 [ 3157.072381][T18886] r4:00000000 [ 3157.072398][T18886] [<80593d88>] (alloc_pipe_info) from [<805d6d1c>] (splice_direct_to_actor+0x250/0x2dc) [ 3157.072473][T18886] r9:00000000 r8:851ba300 r7:00000000 r6:848a7080 r5:dfd29e98 r4:00000000 [ 3157.072493][T18886] [<805d6acc>] (splice_direct_to_actor) from [<805d6f10>] (do_splice_direct+0x88/0xcc) [ 3157.072558][T18886] r10:851ba301 r9:00000000 r8:838cb080 r7:00000000 r6:00000000 r5:00000000 [ 3157.072580][T18886] r4:dfd29f18 [ 3157.072597][T18886] [<805d6e88>] (do_splice_direct) from [<80585670>] (do_sendfile+0x3a8/0x448) [ 3157.072661][T18886] r7:7ffff000 r6:851ba300 r5:848a7080 r4:00000000 [ 3157.072681][T18886] [<805852c8>] (do_sendfile) from [<805878d0>] (sys_sendfile+0xec/0x100) [ 3157.072752][T18886] r10:00000000 r9:00000000 r8:00000000 r7:000000bb r6:00000004 r5:00000003 [ 3157.072773][T18886] r4:00000000 [ 3157.072790][T18886] [<805877e4>] (sys_sendfile) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3157.072845][T18886] Exception stack(0xdfd29fa8 to 0xdfd29ff0) [ 3157.072885][T18886] 9fa0: 00000000 00000000 00000003 00000004 00000000 7ffff004 [ 3157.072921][T18886] 9fc0: 00000000 00000000 0012f214 000000bb 003462d8 00000000 00000001 76f8f0dc [ 3157.072952][T18886] 9fe0: 76f8ee88 76f8ee78 00018ebc 00130810 [ 3157.072990][T18886] r10:000000bb r9:848a7080 r8:8020029c r7:000000bb r6:0012f214 r5:00000000 [ 3157.073011][T18886] r4:00000000 [ 3157.305716][T18890] fuse: Bad value for 'fd' [ 3158.037757][ T28] audit: type=1400 audit(3360.304:1439): avc: denied { ioctl } for pid=18893 comm="syz.1.3141" path="socket:[36097]" dev="sockfs" ino=36097 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3158.297596][ T28] audit: type=1400 audit(3360.557:1440): avc: denied { remount } for pid=18898 comm="syz.1.3143" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 3158.501511][T18901] fuse: Bad value for 'fd' [ 3159.672672][T18902] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18902 comm=syz.9.3140 [ 3160.175308][ T28] audit: type=1400 audit(3362.307:1441): avc: denied { ioctl } for pid=18918 comm="syz.1.3152" path="socket:[35003]" dev="sockfs" ino=35003 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 3160.799453][T18929] FAULT_INJECTION: forcing a failure. [ 3160.799453][T18929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3160.802933][T18929] CPU: 0 UID: 0 PID: 18929 Comm: syz.1.3157 Tainted: G L syzkaller #0 PREEMPT [ 3160.803018][T18929] Tainted: [L]=SOFTLOCKUP [ 3160.803028][T18929] Hardware name: ARM-Versatile Express [ 3160.803040][T18929] Call trace: [ 3160.803064][T18929] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3160.803122][T18929] r7:60000013 r6:60000013 r5:8231e0c8 r4:00000000 [ 3160.803131][T18929] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3160.803157][T18929] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3160.803189][T18929] r7:20000100 r6:00000000 r5:83e50c80 r4:82b4e7c8 [ 3160.803222][T18929] [<8021e390>] (dump_stack) from [<809d2fcc>] (should_fail_ex+0x1c0/0x224) [ 3160.803277][T18929] [<809d2e0c>] (should_fail_ex) from [<809d3044>] (should_fail+0x14/0x18) [ 3160.803369][T18929] r8:00000880 r7:20000100 r6:dfb3de28 r5:00000000 r4:dfb3df20 [ 3160.803381][T18929] [<809d3030>] (should_fail) from [<809d3064>] (should_fail_usercopy+0x1c/0x20) [ 3160.803408][T18929] [<809d3048>] (should_fail_usercopy) from [<815ee0e4>] (copy_msghdr_from_user+0x50/0x1e0) [ 3160.803439][T18929] [<815ee094>] (copy_msghdr_from_user) from [<815ee2ec>] (___sys_sendmsg+0x78/0xd0) [ 3160.803472][T18929] r8:00000880 r7:00000000 r6:859c4f40 r5:dfb3df20 r4:dfb3de6c [ 3160.803481][T18929] [<815ee274>] (___sys_sendmsg) from [<815f0460>] (__sys_sendmsg+0x8c/0xe0) [ 3160.803515][T18929] r9:83e50c80 r8:86734100 r7:00000880 r6:20000100 r5:86734101 r4:00000003 [ 3160.803524][T18929] [<815f03d4>] (__sys_sendmsg) from [<815f04c8>] (sys_sendmsg+0x14/0x18) [ 3160.803556][T18929] r8:8020029c r7:00000128 r6:0012f214 r5:00000000 r4:00000000 [ 3160.803565][T18929] [<815f04b4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3160.803608][T18929] Exception stack(0xdfb3dfa8 to 0xdfb3dff0) [ 3160.803631][T18929] dfa0: 00000000 00000000 00000003 20000100 00000880 00000000 [ 3160.803649][T18929] dfc0: 00000000 00000000 0012f214 00000128 003462d8 00000000 00000001 76f8f0dc [ 3160.803686][T18929] dfe0: 76f8ee88 76f8ee78 00018ebc 00130810 [ 3160.974085][T18931] fuse: Unknown parameter '0x0000000000000003' [ 3161.808583][T18939] syz_tun: entered allmulticast mode [ 3161.840794][T18939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3162'. [ 3161.917007][T18939] syz_tun (unregistering): left allmulticast mode [ 3162.191446][T18946] FAULT_INJECTION: forcing a failure. [ 3162.191446][T18946] name failslab, interval 1, probability 0, space 0, times 0 [ 3162.195861][T18946] CPU: 1 UID: 0 PID: 18946 Comm: syz.1.3163 Tainted: G L syzkaller #0 PREEMPT [ 3162.196010][T18946] Tainted: [L]=SOFTLOCKUP [ 3162.196029][T18946] Hardware name: ARM-Versatile Express [ 3162.196055][T18946] Call trace: [ 3162.196101][T18946] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3162.196204][T18946] r7:60000013 r6:60000013 r5:8231e0c8 r4:00000000 [ 3162.196225][T18946] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3162.196276][T18946] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3162.196385][T18946] r7:00000000 r6:00000000 r5:840c6400 r4:82b18108 [ 3162.196404][T18946] [<8021e390>] (dump_stack) from [<809d2fcc>] (should_fail_ex+0x1c0/0x224) [ 3162.196459][T18946] [<809d2e0c>] (should_fail_ex) from [<80554874>] (should_failslab+0x6c/0x94) [ 3162.196524][T18946] r8:00000000 r7:00000000 r6:830016c0 r5:00000c40 r4:00001000 [ 3162.196543][T18946] [<80554808>] (should_failslab) from [<80532a9c>] (__kmalloc_noprof+0xa4/0x39c) [ 3162.196594][T18946] [<805329f8>] (__kmalloc_noprof) from [<80816734>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 3162.196660][T18946] r10:00000000 r9:830c0000 r8:00000000 r7:834efaa0 r6:838cd028 r5:00001000 [ 3162.196685][T18946] r4:00000000 [ 3162.196702][T18946] [<808166f8>] (tomoyo_realpath_from_path) from [<808127fc>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3162.196771][T18946] r10:00000000 r9:00000005 r8:838cd000 r7:40044149 r6:81cda124 r5:00000004 [ 3162.196797][T18946] r4:838cd028 r3:828d0400 [ 3162.196815][T18946] [<80812730>] (tomoyo_path_number_perm) from [<80817150>] (tomoyo_file_ioctl+0x1c/0x20) [ 3162.196894][T18946] r10:840c6400 r9:00000005 r8:838cd000 r7:20000580 r6:20000580 r5:40044149 [ 3162.196918][T18946] r4:838cd000 [ 3162.196936][T18946] [<80817134>] (tomoyo_file_ioctl) from [<807c2a48>] (security_file_ioctl+0x80/0x1d4) [ 3162.196992][T18946] [<807c29c8>] (security_file_ioctl) from [<805a2128>] (sys_ioctl+0x4c/0xb5c) [ 3162.197052][T18946] r7:20000580 r6:40044149 r5:838cd001 r4:00000000 [ 3162.197071][T18946] [<805a20dc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3162.197117][T18946] Exception stack(0xe04f5fa8 to 0xe04f5ff0) [ 3162.197156][T18946] 5fa0: 00000000 00000000 00000005 40044149 20000580 00000000 [ 3162.197188][T18946] 5fc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76f8f0dc [ 3162.197215][T18946] 5fe0: 76f8ee88 76f8ee78 00018ebc 00130810 [ 3162.197252][T18946] r10:00000036 r9:840c6400 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 3162.197273][T18946] r4:00000000 [ 3162.242132][T18946] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3163.432731][ T28] audit: type=1400 audit(3365.357:1442): avc: denied { ioctl } for pid=18951 comm="syz.9.3166" path="socket:[36303]" dev="sockfs" ino=36303 ioctlcmd=0x6e86 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 3172.304084][ T28] audit: type=1400 audit(3373.658:1443): avc: denied { append } for pid=18966 comm="syz.1.3171" name="file0" dev="fuse" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 3174.585098][T18990] SELinux: Context system_u:object_r:dhcpd_var_run_t:s0 is not valid (left unmapped). [ 3174.601377][ T28] audit: type=1400 audit(3375.801:1444): avc: denied { relabelto } for pid=18989 comm="syz.1.3177" name="sw_sync" dev="debugfs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcpd_var_run_t:s0" [ 3174.603709][ T28] audit: type=1400 audit(3375.801:1445): avc: denied { associate } for pid=18989 comm="syz.1.3177" name="sw_sync" dev="debugfs" ino=527 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpd_var_run_t:s0" [ 3179.550277][T19015] FAULT_INJECTION: forcing a failure. [ 3179.550277][T19015] name failslab, interval 1, probability 0, space 0, times 0 [ 3179.551688][T19015] CPU: 1 UID: 0 PID: 19015 Comm: syz.9.3183 Tainted: G L syzkaller #0 PREEMPT [ 3179.551771][T19015] Tainted: [L]=SOFTLOCKUP [ 3179.551791][T19015] Hardware name: ARM-Versatile Express [ 3179.551815][T19015] Call trace: [ 3179.551864][T19015] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3179.551967][T19015] r7:60000113 r6:60000113 r5:8231e0c8 r4:00000000 [ 3179.551986][T19015] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3179.552040][T19015] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3179.552098][T19015] r7:00000dc0 r6:00000000 r5:84fdb200 r4:82b18108 [ 3179.552118][T19015] [<8021e390>] (dump_stack) from [<809d2fcc>] (should_fail_ex+0x1c0/0x224) [ 3179.552174][T19015] [<809d2e0c>] (should_fail_ex) from [<80554874>] (should_failslab+0x6c/0x94) [ 3179.552239][T19015] r8:00000000 r7:00000dc0 r6:00000000 r5:00000000 r4:830e4780 [ 3179.552259][T19015] [<80554808>] (should_failslab) from [<80531b4c>] (kmem_cache_alloc_noprof+0x54/0x3b8) [ 3179.552350][T19015] [<80531af8>] (kmem_cache_alloc_noprof) from [<8038fe78>] (taskstats_exit+0x230/0x368) [ 3179.552421][T19015] r10:00000000 r9:00000001 r8:00000000 r7:85c91500 r6:839ccc00 r5:84fdb200 [ 3179.552442][T19015] r4:82cc2e18 [ 3179.552460][T19015] [<8038fc48>] (taskstats_exit) from [<80257670>] (do_exit+0x1cc/0xb04) [ 3179.552527][T19015] r10:85c91500 r9:00000001 r8:ea789e90 r7:85c91500 r6:00000000 r5:00000000 [ 3179.552547][T19015] r4:84fdb200 [ 3179.552563][T19015] [<802574a4>] (do_exit) from [<80258178>] (do_group_exit+0x40/0x8c) [ 3179.552609][T19015] r7:0013080c [ 3179.552623][T19015] [<80258138>] (do_group_exit) from [<802691c4>] (get_signal+0xa8c/0xab4) [ 3179.552676][T19015] r7:0013080c r4:84fdb200 [ 3179.552695][T19015] [<80268738>] (get_signal) from [<8022a744>] (do_work_pending+0x228/0x4f0) [ 3179.552753][T19015] r10:0000012e r9:00130810 r8:fffffdfe r7:0013080c r6:00000001 r5:ea789fb0 [ 3179.552773][T19015] r4:84fdb200 [ 3179.552788][T19015] [<8022a51c>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 3179.552832][T19015] Exception stack(0xea789fb0 to 0xea789ff8) [ 3179.552878][T19015] 9fa0: 00000000 00000000 00000000 00000003 [ 3179.552912][T19015] 9fc0: 00001000 00000000 0012f214 0000012e 003462d8 00000000 003d0f00 76ff30dc [ 3179.552942][T19015] 9fe0: 76ff2e88 76ff2e78 00018ebc 0013080c 60000010 00000000 [ 3179.552976][T19015] r10:0000012e r9:84fdb200 r8:8020029c r7:0000012e r6:0012f214 r5:00000000 [ 3179.552996][T19015] r4:00001000 [ 3180.724925][T19050] FAULT_INJECTION: forcing a failure. [ 3180.724925][T19050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3180.726359][T19050] CPU: 1 UID: 0 PID: 19050 Comm: syz.9.3195 Tainted: G L syzkaller #0 PREEMPT [ 3180.726464][T19050] Tainted: [L]=SOFTLOCKUP [ 3180.726481][T19050] Hardware name: ARM-Versatile Express [ 3180.726501][T19050] Call trace: [ 3180.726535][T19050] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3180.726623][T19050] r7:60000013 r6:60000013 r5:8231e0c8 r4:00000000 [ 3180.726639][T19050] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3180.726682][T19050] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3180.726730][T19050] r7:200007c0 r6:00000000 r5:840c6400 r4:82b4e7c8 [ 3180.726744][T19050] [<8021e390>] (dump_stack) from [<809d2fcc>] (should_fail_ex+0x1c0/0x224) [ 3180.726789][T19050] [<809d2e0c>] (should_fail_ex) from [<809d3044>] (should_fail+0x14/0x18) [ 3180.726840][T19050] r8:00040000 r7:200007c0 r6:ea6f1e28 r5:00000000 r4:ea6f1f20 [ 3180.726856][T19050] [<809d3030>] (should_fail) from [<809d3064>] (should_fail_usercopy+0x1c/0x20) [ 3180.726904][T19050] [<809d3048>] (should_fail_usercopy) from [<815ee0e4>] (copy_msghdr_from_user+0x50/0x1e0) [ 3180.726956][T19050] [<815ee094>] (copy_msghdr_from_user) from [<815ee2ec>] (___sys_sendmsg+0x78/0xd0) [ 3180.727010][T19050] r8:00040000 r7:00000000 r6:837b2040 r5:ea6f1f20 r4:ea6f1e6c [ 3180.727024][T19050] [<815ee274>] (___sys_sendmsg) from [<815f0460>] (__sys_sendmsg+0x8c/0xe0) [ 3180.727079][T19050] r9:840c6400 r8:85343600 r7:00040000 r6:200007c0 r5:85343601 r4:00000003 [ 3180.727094][T19050] [<815f03d4>] (__sys_sendmsg) from [<815f04c8>] (sys_sendmsg+0x14/0x18) [ 3180.727149][T19050] r8:8020029c r7:00000128 r6:0012f214 r5:00000000 r4:00000000 [ 3180.727164][T19050] [<815f04b4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3180.727204][T19050] Exception stack(0xea6f1fa8 to 0xea6f1ff0) [ 3180.727234][T19050] 1fa0: 00000000 00000000 00000003 200007c0 00040000 00000000 [ 3180.727262][T19050] 1fc0: 00000000 00000000 0012f214 00000128 003462d8 00000000 00000001 76ff30dc [ 3180.727285][T19050] 1fe0: 76ff2e88 76ff2e78 00018ebc 00130810 [ 3184.465939][T19077] FAULT_INJECTION: forcing a failure. [ 3184.465939][T19077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3184.467670][T19077] CPU: 1 UID: 0 PID: 19077 Comm: syz.9.3205 Tainted: G L syzkaller #0 PREEMPT [ 3184.467785][T19077] Tainted: [L]=SOFTLOCKUP [ 3184.467806][T19077] Hardware name: ARM-Versatile Express [ 3184.467830][T19077] Call trace: [ 3184.467881][T19077] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3184.467990][T19077] r7:60000013 r6:60000013 r5:8231e0c8 r4:00000000 [ 3184.468010][T19077] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3184.468064][T19077] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3184.468126][T19077] r7:00000000 r6:00000000 r5:8317a580 r4:82b4e7c8 [ 3184.468145][T19077] [<8021e390>] (dump_stack) from [<809d2fcc>] (should_fail_ex+0x1c0/0x224) [ 3184.468202][T19077] [<809d2e0c>] (should_fail_ex) from [<809d3044>] (should_fail+0x14/0x18) [ 3184.468267][T19077] r8:76ff2f08 r7:00000000 r6:00000000 r5:ea789f68 r4:00000002 [ 3184.468319][T19077] [<809d3030>] (should_fail) from [<809d3064>] (should_fail_usercopy+0x1c/0x20) [ 3184.468379][T19077] [<809d3048>] (should_fail_usercopy) from [<805c5fe4>] (simple_read_from_buffer+0x80/0x140) [ 3184.468436][T19077] [<805c5f64>] (simple_read_from_buffer) from [<8064d02c>] (proc_fail_nth_read+0xb8/0x10c) [ 3184.468506][T19077] r10:8064cf74 r9:00000001 r8:00000002 r7:ea789f68 r6:0000000f r5:76ff2f08 [ 3184.468531][T19077] r4:8317a580 r3:ea789e9f [ 3184.468549][T19077] [<8064cf74>] (proc_fail_nth_read) from [<8058661c>] (vfs_read+0xc0/0x328) [ 3184.468624][T19077] r8:8317a580 r7:ea789f68 r6:76ff2f08 r5:85343600 r4:0000000f [ 3184.468645][T19077] [<8058655c>] (vfs_read) from [<805872b0>] (ksys_read+0x74/0xec) [ 3184.468715][T19077] r10:00000003 r9:8317a580 r8:8020029c r7:00000000 r6:00000000 r5:85343600 [ 3184.468737][T19077] r4:85343603 [ 3184.468754][T19077] [<8058723c>] (ksys_read) from [<80587338>] (sys_read+0x10/0x14) [ 3184.468820][T19077] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 3184.468838][T19077] [<80587328>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3184.468899][T19077] Exception stack(0xea789fa8 to 0xea789ff0) [ 3184.468940][T19077] 9fa0: 00000000 00000000 00000004 76ff2f08 0000000f 00000000 [ 3184.468976][T19077] 9fc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76ff30dc [ 3184.469004][T19077] 9fe0: 76ff2e58 76ff2e44 0010ba34 00112618 [ 3188.897898][T19089] FAULT_INJECTION: forcing a failure. [ 3188.897898][T19089] name failslab, interval 1, probability 0, space 0, times 0 [ 3188.899793][T19089] CPU: 0 UID: 0 PID: 19089 Comm: syz.9.3209 Tainted: G L syzkaller #0 PREEMPT [ 3188.900176][T19089] Tainted: [L]=SOFTLOCKUP [ 3188.900356][T19089] Hardware name: ARM-Versatile Express [ 3188.900712][T19089] Call trace: [ 3188.901798][T19089] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3188.902221][T19089] r7:60000013 r6:60000013 r5:8231e0c8 r4:00000000 [ 3188.902304][T19089] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3188.902364][T19089] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3188.902428][T19089] r7:00000000 r6:00000000 r5:83810000 r4:82b18108 [ 3188.902446][T19089] [<8021e390>] (dump_stack) from [<809d2fcc>] (should_fail_ex+0x1c0/0x224) [ 3188.902502][T19089] [<809d2e0c>] (should_fail_ex) from [<80554874>] (should_failslab+0x6c/0x94) [ 3188.902568][T19089] r8:00000000 r7:00000000 r6:830016c0 r5:00000c40 r4:00001000 [ 3188.902586][T19089] [<80554808>] (should_failslab) from [<80532a9c>] (__kmalloc_noprof+0xa4/0x39c) [ 3188.902632][T19089] [<805329f8>] (__kmalloc_noprof) from [<80816734>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 3188.902712][T19089] r10:00000000 r9:830c0000 r8:00000000 r7:834ef440 r6:84d7fea8 r5:00001000 [ 3188.902745][T19089] r4:00000000 [ 3188.902763][T19089] [<808166f8>] (tomoyo_realpath_from_path) from [<808127fc>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3188.902833][T19089] r10:00000000 r9:00000003 r8:84d7fe80 r7:40605346 r6:81cda124 r5:00000004 [ 3188.902855][T19089] r4:84d7fea8 r3:828d0400 [ 3188.902872][T19089] [<80812730>] (tomoyo_path_number_perm) from [<80817150>] (tomoyo_file_ioctl+0x1c/0x20) [ 3188.902949][T19089] r10:83810000 r9:00000003 r8:84d7fe80 r7:00000000 r6:00000000 r5:40605346 [ 3188.902970][T19089] r4:84d7fe80 [ 3188.902987][T19089] [<80817134>] (tomoyo_file_ioctl) from [<807c2a48>] (security_file_ioctl+0x80/0x1d4) [ 3188.903039][T19089] [<807c29c8>] (security_file_ioctl) from [<805a2128>] (sys_ioctl+0x4c/0xb5c) [ 3188.903117][T19089] r7:00000000 r6:40605346 r5:84d7fe81 r4:00000000 [ 3188.903136][T19089] [<805a20dc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3188.903259][T19089] Exception stack(0xeab0dfa8 to 0xeab0dff0) [ 3188.903414][T19089] dfa0: 00000000 00000000 00000003 40605346 00000000 00000000 [ 3188.903463][T19089] dfc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76ff30dc [ 3188.903488][T19089] dfe0: 76ff2e88 76ff2e78 00018ebc 00130810 [ 3188.903563][T19089] r10:00000036 r9:83810000 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 3188.903585][T19089] r4:00000000 [ 3188.962848][T19089] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3190.925587][T19106] FAULT_INJECTION: forcing a failure. [ 3190.925587][T19106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3190.925887][T19106] CPU: 1 UID: 0 PID: 19106 Comm: syz.1.3215 Tainted: G L syzkaller #0 PREEMPT [ 3190.925973][T19106] Tainted: [L]=SOFTLOCKUP [ 3190.925984][T19106] Hardware name: ARM-Versatile Express [ 3190.925997][T19106] Call trace: [ 3190.926021][T19106] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3190.926080][T19106] r7:60000013 r6:60000013 r5:8231e0c8 r4:00000000 [ 3190.926089][T19106] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3190.926116][T19106] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3190.926148][T19106] r7:20000140 r6:00000000 r5:84088c80 r4:82b4e7c8 [ 3190.926156][T19106] [<8021e390>] (dump_stack) from [<809d2fcc>] (should_fail_ex+0x1c0/0x224) [ 3190.926185][T19106] [<809d2e0c>] (should_fail_ex) from [<809d3044>] (should_fail+0x14/0x18) [ 3190.926218][T19106] r8:20044050 r7:20000140 r6:eaa8de28 r5:00000000 r4:eaa8df20 [ 3190.926226][T19106] [<809d3030>] (should_fail) from [<809d3064>] (should_fail_usercopy+0x1c/0x20) [ 3190.926252][T19106] [<809d3048>] (should_fail_usercopy) from [<815ee0e4>] (copy_msghdr_from_user+0x50/0x1e0) [ 3190.926284][T19106] [<815ee094>] (copy_msghdr_from_user) from [<815ee2ec>] (___sys_sendmsg+0x78/0xd0) [ 3190.926372][T19106] r8:20044050 r7:00000000 r6:859c4f40 r5:eaa8df20 r4:eaa8de6c [ 3190.926447][T19106] [<815ee274>] (___sys_sendmsg) from [<815f0460>] (__sys_sendmsg+0x8c/0xe0) [ 3190.926486][T19106] r9:84088c80 r8:8612a000 r7:20044050 r6:20000140 r5:8612a001 r4:00000004 [ 3190.926497][T19106] [<815f03d4>] (__sys_sendmsg) from [<815f04c8>] (sys_sendmsg+0x14/0x18) [ 3190.926532][T19106] r8:8020029c r7:00000128 r6:0012f214 r5:00000000 r4:00000000 [ 3190.926541][T19106] [<815f04b4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3190.926567][T19106] Exception stack(0xeaa8dfa8 to 0xeaa8dff0) [ 3190.926587][T19106] dfa0: 00000000 00000000 00000004 20000140 20044050 00000000 [ 3190.926605][T19106] dfc0: 00000000 00000000 0012f214 00000128 003462d8 00000000 00000001 76f8f0dc [ 3190.926619][T19106] dfe0: 76f8ee88 76f8ee78 00018ebc 00130810 [ 3203.356907][T18714] usb 2-1: emi26_load_firmware - request_firmware() failed [ 3203.377024][T18714] usb 2-1: emi26_load_firmware - error loading firmware: error = -110 [ 3203.387968][T18714] emi26 - firmware loader 2-1:4.220: probe with driver emi26 - firmware loader failed with error -5 [ 3203.421523][T18714] usb 2-1: USB disconnect, device number 3 [ 3204.559721][T19131] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1547 sclass=netlink_audit_socket pid=19131 comm=syz.9.3222 [ 3206.526775][T19143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3206.528230][T19143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3210.991386][T19156] FAULT_INJECTION: forcing a failure. [ 3210.991386][T19156] name failslab, interval 1, probability 0, space 0, times 0 [ 3210.992861][T19156] CPU: 1 UID: 0 PID: 19156 Comm: syz.9.3230 Tainted: G L syzkaller #0 PREEMPT [ 3210.992948][T19156] Tainted: [L]=SOFTLOCKUP [ 3210.992966][T19156] Hardware name: ARM-Versatile Express [ 3210.992989][T19156] Call trace: [ 3210.993033][T19156] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3210.993141][T19156] r7:60000013 r6:60000013 r5:8231e0c8 r4:00000000 [ 3210.993163][T19156] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3210.993220][T19156] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3210.993285][T19156] r7:00000000 r6:00000000 r5:8487cb00 r4:82b18108 [ 3210.993307][T19156] [<8021e390>] (dump_stack) from [<809d2fcc>] (should_fail_ex+0x1c0/0x224) [ 3210.993367][T19156] [<809d2e0c>] (should_fail_ex) from [<80554874>] (should_failslab+0x6c/0x94) [ 3210.993436][T19156] r8:00000000 r7:00000000 r6:830016c0 r5:00000c40 r4:00001000 [ 3210.993457][T19156] [<80554808>] (should_failslab) from [<80532a9c>] (__kmalloc_noprof+0xa4/0x39c) [ 3210.993513][T19156] [<805329f8>] (__kmalloc_noprof) from [<80816734>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 3210.993584][T19156] r10:00000000 r9:830c0000 r8:00000000 r7:8340ddd0 r6:83e7c728 r5:00001000 [ 3210.993609][T19156] r4:00000000 [ 3210.993626][T19156] [<808166f8>] (tomoyo_realpath_from_path) from [<808127fc>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3210.993702][T19156] r10:00000000 r9:00000003 r8:83e7c700 r7:0000e503 r6:81cda124 r5:00000004 [ 3210.993727][T19156] r4:83e7c728 r3:828d0400 [ 3210.993746][T19156] [<80812730>] (tomoyo_path_number_perm) from [<80817150>] (tomoyo_file_ioctl+0x1c/0x20) [ 3210.993829][T19156] r10:8487cb00 r9:00000003 r8:83e7c700 r7:00000000 r6:00000000 r5:0000e503 [ 3210.993853][T19156] r4:83e7c700 [ 3210.993871][T19156] [<80817134>] (tomoyo_file_ioctl) from [<807c2a48>] (security_file_ioctl+0x80/0x1d4) [ 3210.993928][T19156] [<807c29c8>] (security_file_ioctl) from [<805a2128>] (sys_ioctl+0x4c/0xb5c) [ 3210.993997][T19156] r7:00000000 r6:0000e503 r5:83e7c701 r4:00000000 [ 3210.994017][T19156] [<805a20dc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3210.994071][T19156] Exception stack(0xdfc4dfa8 to 0xdfc4dff0) [ 3210.994114][T19156] dfa0: 00000000 00000000 00000003 0000e503 00000000 00000000 [ 3210.994156][T19156] dfc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76ff30dc [ 3210.994187][T19156] dfe0: 76ff2e88 76ff2e78 00018ebc 00130810 [ 3210.994226][T19156] r10:00000036 r9:8487cb00 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 3210.994249][T19156] r4:00000000 [ 3211.046063][T19156] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3212.052119][T19163] FAULT_INJECTION: forcing a failure. [ 3212.052119][T19163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3212.056850][T19163] CPU: 1 UID: 0 PID: 19163 Comm: syz.9.3233 Tainted: G L syzkaller #0 PREEMPT [ 3212.056983][T19163] Tainted: [L]=SOFTLOCKUP [ 3212.057003][T19163] Hardware name: ARM-Versatile Express [ 3212.057027][T19163] Call trace: [ 3212.057067][T19163] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3212.057169][T19163] r7:60000013 r6:60000013 r5:8231e0c8 r4:00000000 [ 3212.057190][T19163] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3212.057241][T19163] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3212.057308][T19163] r7:00000000 r6:00000000 r5:83810000 r4:82b4e7c8 [ 3212.057328][T19163] [<8021e390>] (dump_stack) from [<809d2fcc>] (should_fail_ex+0x1c0/0x224) [ 3212.057426][T19163] [<809d2e0c>] (should_fail_ex) from [<809d3044>] (should_fail+0x14/0x18) [ 3212.057491][T19163] r8:76ff2f08 r7:00000000 r6:00000000 r5:dfc4df68 r4:00000002 [ 3212.057510][T19163] [<809d3030>] (should_fail) from [<809d3064>] (should_fail_usercopy+0x1c/0x20) [ 3212.057561][T19163] [<809d3048>] (should_fail_usercopy) from [<805c5fe4>] (simple_read_from_buffer+0x80/0x140) [ 3212.057614][T19163] [<805c5f64>] (simple_read_from_buffer) from [<8064d02c>] (proc_fail_nth_read+0xb8/0x10c) [ 3212.057683][T19163] r10:8064cf74 r9:00000001 r8:00000002 r7:dfc4df68 r6:0000000f r5:76ff2f08 [ 3212.057706][T19163] r4:83810000 r3:dfc4de9f [ 3212.057722][T19163] [<8064cf74>] (proc_fail_nth_read) from [<8058661c>] (vfs_read+0xc0/0x328) [ 3212.057794][T19163] r8:83810000 r7:dfc4df68 r6:76ff2f08 r5:83e7c700 r4:0000000f [ 3212.057814][T19163] [<8058655c>] (vfs_read) from [<805872b0>] (ksys_read+0x74/0xec) [ 3212.057880][T19163] r10:00000003 r9:83810000 r8:8020029c r7:00000000 r6:00000000 r5:83e7c700 [ 3212.057901][T19163] r4:83e7c703 [ 3212.057918][T19163] [<8058723c>] (ksys_read) from [<80587338>] (sys_read+0x10/0x14) [ 3212.057980][T19163] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 3212.057996][T19163] [<80587328>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3212.058045][T19163] Exception stack(0xdfc4dfa8 to 0xdfc4dff0) [ 3212.058082][T19163] dfa0: 00000000 00000000 00000004 76ff2f08 0000000f 00000000 [ 3212.058116][T19163] dfc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76ff30dc [ 3212.058144][T19163] dfe0: 76ff2e58 76ff2e44 0010ba34 00112618 [ 3212.389412][T19167] FAULT_INJECTION: forcing a failure. [ 3212.389412][T19167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3212.391716][T19167] CPU: 1 UID: 0 PID: 19167 Comm: syz.9.3235 Tainted: G L syzkaller #0 PREEMPT [ 3212.391858][T19167] Tainted: [L]=SOFTLOCKUP [ 3212.391879][T19167] Hardware name: ARM-Versatile Express [ 3212.391903][T19167] Call trace: [ 3212.391943][T19167] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3212.392044][T19167] r7:60000013 r6:60000013 r5:8231e0c8 r4:00000000 [ 3212.392063][T19167] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3212.392114][T19167] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3212.392170][T19167] r7:00000010 r6:00000000 r5:83810000 r4:82b4e7c8 [ 3212.392187][T19167] [<8021e390>] (dump_stack) from [<809d2fcc>] (should_fail_ex+0x1c0/0x224) [ 3212.392244][T19167] [<809d2e0c>] (should_fail_ex) from [<809d3044>] (should_fail+0x14/0x18) [ 3212.392965][T19167] r8:851b7500 r7:00000010 r6:20000100 r5:dfc4deec r4:00000010 [ 3212.392991][T19167] [<809d3030>] (should_fail) from [<809d3064>] (should_fail_usercopy+0x1c/0x20) [ 3212.393047][T19167] [<809d3048>] (should_fail_usercopy) from [<815edfd0>] (move_addr_to_kernel+0x34/0xf8) [ 3212.393107][T19167] [<815edf9c>] (move_addr_to_kernel) from [<815ef360>] (__sys_bind+0x80/0x110) [ 3212.393170][T19167] r7:859131c0 r6:00000010 r5:851b7501 r4:00000003 [ 3212.393193][T19167] [<815ef2e0>] (__sys_bind) from [<815ef400>] (sys_bind+0x10/0x14) [ 3212.393261][T19167] r9:83810000 r8:8020029c r7:0000011a r6:0012f214 r5:00000000 r4:00000000 [ 3212.393283][T19167] [<815ef3f0>] (sys_bind) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3212.393334][T19167] Exception stack(0xdfc4dfa8 to 0xdfc4dff0) [ 3212.393374][T19167] dfa0: 00000000 00000000 00000003 20000100 00000010 00000000 [ 3212.393409][T19167] dfc0: 00000000 00000000 0012f214 0000011a 003462d8 00000000 00000001 76ff30dc [ 3212.393437][T19167] dfe0: 76ff2e88 76ff2e78 00018ebc 00130810 [ 3217.321870][T19181] FAULT_INJECTION: forcing a failure. [ 3217.321870][T19181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3217.330699][T19181] CPU: 1 UID: 0 PID: 19181 Comm: syz.9.3239 Tainted: G L syzkaller #0 PREEMPT [ 3217.330796][T19181] Tainted: [L]=SOFTLOCKUP [ 3217.330806][T19181] Hardware name: ARM-Versatile Express [ 3217.330820][T19181] Call trace: [ 3217.330842][T19181] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3217.330901][T19181] r7:60000013 r6:60000013 r5:8231e0c8 r4:00000000 [ 3217.330911][T19181] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3217.330939][T19181] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3217.330990][T19181] r7:00000000 r6:00000000 r5:846ab200 r4:82b4e7c8 [ 3217.331012][T19181] [<8021e390>] (dump_stack) from [<809d2fcc>] (should_fail_ex+0x1c0/0x224) [ 3217.331048][T19181] [<809d2e0c>] (should_fail_ex) from [<809d3044>] (should_fail+0x14/0x18) [ 3217.331082][T19181] r8:76ff2f08 r7:00000000 r6:00000000 r5:dfdddf68 r4:00000002 [ 3217.331091][T19181] [<809d3030>] (should_fail) from [<809d3064>] (should_fail_usercopy+0x1c/0x20) [ 3217.331118][T19181] [<809d3048>] (should_fail_usercopy) from [<805c5fe4>] (simple_read_from_buffer+0x80/0x140) [ 3217.331147][T19181] [<805c5f64>] (simple_read_from_buffer) from [<8064d02c>] (proc_fail_nth_read+0xb8/0x10c) [ 3217.331185][T19181] r10:8064cf74 r9:00000001 r8:00000002 r7:dfdddf68 r6:0000000f r5:76ff2f08 [ 3217.331197][T19181] r4:846ab200 r3:dfddde9f [ 3217.331205][T19181] [<8064cf74>] (proc_fail_nth_read) from [<8058661c>] (vfs_read+0xc0/0x328) [ 3217.331247][T19181] r8:846ab200 r7:dfdddf68 r6:76ff2f08 r5:86768c80 r4:0000000f [ 3217.331256][T19181] [<8058655c>] (vfs_read) from [<805872b0>] (ksys_read+0x74/0xec) [ 3217.331292][T19181] r10:00000003 r9:846ab200 r8:8020029c r7:00000000 r6:00000000 r5:86768c80 [ 3217.331302][T19181] r4:86768c83 [ 3217.331311][T19181] [<8058723c>] (ksys_read) from [<80587338>] (sys_read+0x10/0x14) [ 3217.331344][T19181] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 3217.331353][T19181] [<80587328>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3217.331379][T19181] Exception stack(0xdfdddfa8 to 0xdfdddff0) [ 3217.331399][T19181] dfa0: 00000000 00000000 00000005 76ff2f08 0000000f 00000000 [ 3217.331417][T19181] dfc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76ff30dc [ 3217.331431][T19181] dfe0: 76ff2e58 76ff2e44 0010ba34 00112618 [ 3220.425130][ T28] audit: type=1400 audit(3418.698:1446): avc: denied { nlmsg_write } for pid=19194 comm="syz.9.3245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 3220.454701][T19195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3220.459804][T19195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3222.381215][T19211] FAULT_INJECTION: forcing a failure. [ 3222.381215][T19211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3222.390199][T19211] CPU: 1 UID: 0 PID: 19211 Comm: syz.9.3249 Tainted: G L syzkaller #0 PREEMPT [ 3222.390362][T19211] Tainted: [L]=SOFTLOCKUP [ 3222.390383][T19211] Hardware name: ARM-Versatile Express [ 3222.390406][T19211] Call trace: [ 3222.390449][T19211] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3222.390553][T19211] r7:60000013 r6:60000013 r5:8231e0c8 r4:00000000 [ 3222.390573][T19211] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3222.390625][T19211] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3222.390684][T19211] r7:00000000 r6:00000000 r5:8487cb00 r4:82b4e7c8 [ 3222.390702][T19211] [<8021e390>] (dump_stack) from [<809d2fcc>] (should_fail_ex+0x1c0/0x224) [ 3222.390760][T19211] [<809d2e0c>] (should_fail_ex) from [<809d3044>] (should_fail+0x14/0x18) [ 3222.390838][T19211] r8:00000000 r7:00000000 r6:00000000 r5:20000240 r4:e0281f38 [ 3222.390859][T19211] [<809d3030>] (should_fail) from [<809d3064>] (should_fail_usercopy+0x1c/0x20) [ 3222.390908][T19211] [<809d3048>] (should_fail_usercopy) from [<80325f20>] (get_old_itimerspec32+0x38/0x168) [ 3222.390970][T19211] [<80325ee8>] (get_old_itimerspec32) from [<8033c5c4>] (sys_timer_settime32+0x74/0xf0) [ 3222.391040][T19211] r8:00000000 r7:00000000 r6:00000000 r5:20000240 r4:00000000 [ 3222.391058][T19211] [<8033c550>] (sys_timer_settime32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3222.391108][T19211] Exception stack(0xe0281fa8 to 0xe0281ff0) [ 3222.391146][T19211] 1fa0: 00000000 00000000 00000000 00000000 20000240 00000000 [ 3222.391181][T19211] 1fc0: 00000000 00000000 0012f214 00000102 003462d8 00000000 00000001 76ff30dc [ 3222.391209][T19211] 1fe0: 76ff2e88 76ff2e78 00018ebc 00130810 [ 3222.391241][T19211] r8:8020029c r7:00000102 r6:0012f214 r5:00000000 r4:00000000 [ 3225.325553][T19226] FAULT_INJECTION: forcing a failure. [ 3225.325553][T19226] name failslab, interval 1, probability 0, space 0, times 0 [ 3225.326120][T19226] CPU: 0 UID: 0 PID: 19226 Comm: syz.1.3255 Tainted: G L syzkaller #0 PREEMPT [ 3225.326223][T19226] Tainted: [L]=SOFTLOCKUP [ 3225.326246][T19226] Hardware name: ARM-Versatile Express [ 3225.326272][T19226] Call trace: [ 3225.326315][T19226] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3225.329446][T19226] r7:60000013 r6:60000013 r5:8231e0c8 r4:00000000 [ 3225.329475][T19226] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3225.329541][T19226] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3225.329608][T19226] r7:00000000 r6:00000000 r5:840d0000 r4:82b18108 [ 3225.329626][T19226] [<8021e390>] (dump_stack) from [<809d2fcc>] (should_fail_ex+0x1c0/0x224) [ 3225.329687][T19226] [<809d2e0c>] (should_fail_ex) from [<80554874>] (should_failslab+0x6c/0x94) [ 3225.329793][T19226] r8:00000000 r7:00000000 r6:830016c0 r5:00000c40 r4:00001000 [ 3225.329816][T19226] [<80554808>] (should_failslab) from [<80532a9c>] (__kmalloc_noprof+0xa4/0x39c) [ 3225.329881][T19226] [<805329f8>] (__kmalloc_noprof) from [<80816734>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 3225.329956][T19226] r10:00000000 r9:85434800 r8:00000000 r7:85909660 r6:851ba7a8 r5:00001000 [ 3225.329980][T19226] r4:00000000 [ 3225.330056][T19226] [<808166f8>] (tomoyo_realpath_from_path) from [<808127fc>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3225.330174][T19226] r10:00000000 r9:00000005 r8:851ba780 r7:00008933 r6:81cda124 r5:00000004 [ 3225.330204][T19226] r4:851ba7a8 r3:828d0400 [ 3225.330240][T19226] [<80812730>] (tomoyo_path_number_perm) from [<80817150>] (tomoyo_file_ioctl+0x1c/0x20) [ 3225.330339][T19226] r10:840d0000 r9:00000005 r8:851ba780 r7:00000000 r6:00000000 r5:00008933 [ 3225.330462][T19226] r4:851ba780 [ 3225.330583][T19226] [<80817134>] (tomoyo_file_ioctl) from [<807c2a48>] (security_file_ioctl+0x80/0x1d4) [ 3225.330651][T19226] [<807c29c8>] (security_file_ioctl) from [<805a2128>] (sys_ioctl+0x4c/0xb5c) [ 3225.330751][T19226] r7:00000000 r6:00008933 r5:851ba781 r4:00000000 [ 3225.330909][T19226] [<805a20dc>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3225.330964][T19226] Exception stack(0xdfb91fa8 to 0xdfb91ff0) [ 3225.331046][T19226] 1fa0: 00000000 00000000 00000005 00008933 00000000 00000000 [ 3225.331197][T19226] 1fc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76f8f0dc [ 3225.331328][T19226] 1fe0: 76f8ee88 76f8ee78 00018ebc 00130810 [ 3225.331414][T19226] r10:00000036 r9:840d0000 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 3225.331441][T19226] r4:00000000 [ 3225.332965][T19226] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3226.578501][T19240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3226.580167][T19240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3227.916489][T16829] ------------[ cut here ]------------ [ 3227.917098][T16829] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x19c/0x21c, CPU#1: kworker/1:9/16829 [ 3227.919567][T16829] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 3227.920028][T16829] Modules linked in: [ 3227.920958][T16829] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3227.922130][T16829] CPU: 1 UID: 0 PID: 16829 Comm: kworker/1:9 Tainted: G L syzkaller #0 PREEMPT [ 3227.922783][T16829] Tainted: [L]=SOFTLOCKUP [ 3227.923061][T16829] Hardware name: ARM-Versatile Express [ 3227.923577][T16829] Workqueue: events drm_fb_helper_damage_work [ 3227.924095][T16829] Call trace: [ 3227.924393][T16829] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3227.925012][T16829] r7:82a1eab8 r6:00000000 r5:8231e0c8 r4:00000001 [ 3227.925455][T16829] [<80201af0>] (show_stack) from [<8021e37c>] (dump_stack_lvl+0x5c/0x70) [ 3227.926066][T16829] [<8021e320>] (dump_stack_lvl) from [<8021e3a8>] (dump_stack+0x18/0x1c) [ 3227.926635][T16829] r7:82a1eab8 r6:00000000 r5:84696400 r4:82c7bd3c [ 3227.927077][T16829] [<8021e390>] (dump_stack) from [<8020260c>] (vpanic+0x114/0x320) [ 3227.927593][T16829] [<802024f8>] (vpanic) from [<8020284c>] (trace_suspend_resume+0x0/0x104) [ 3227.928098][T16829] r7:80b52948 [ 3227.928349][T16829] [<80202818>] (panic) from [<80250844>] (get_taint+0x0/0x1c) [ 3227.928841][T16829] r3:82a0b544 r2:00000001 r1:82304b90 r0:8230c48c [ 3227.929232][T16829] [<802507cc>] (check_panic_on_warn) from [<802509c0>] (__warn+0x98/0x1ac) [ 3227.929824][T16829] [<80250928>] (__warn) from [<80250cbc>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 3227.930348][T16829] r8:00000009 r7:8239a980 r6:dfa65dfc r5:84696400 r4:00000000 [ 3227.930820][T16829] [<80250ad8>] (warn_slowpath_fmt) from [<80b52948>] (drm_crtc_wait_one_vblank+0x19c/0x21c) [ 3227.931468][T16829] r10:8417b244 r9:ffffff92 r8:00000000 r7:0002e61b r6:00000000 r5:00000000 [ 3227.932030][T16829] r4:830c3000 [ 3227.932273][T16829] [<80b527ac>] (drm_crtc_wait_one_vblank) from [<80b56514>] (drm_client_modeset_wait_for_vblank+0x60/0x74) [ 3227.932997][T16829] r10:8302ae05 r9:830c3000 r8:83332f00 r7:dfa65ec4 r6:830c3000 r5:00000000 [ 3227.933504][T16829] r4:83e3a040 [ 3227.933792][T16829] [<80b564b4>] (drm_client_modeset_wait_for_vblank) from [<80b6fd9c>] (drm_fb_helper_damage_work+0x80/0x1e0) [ 3227.934469][T16829] r7:dfa65ec4 r6:83332fb4 r5:00000000 r4:83332f94 [ 3227.934834][T16829] [<80b6fd1c>] (drm_fb_helper_damage_work) from [<80276058>] (process_one_work+0x1c8/0x5a0) [ 3227.935487][T16829] r9:84696400 r8:01800000 r7:ddde4f00 r6:8302ae00 r5:83332f94 r4:863bdc80 [ 3227.935988][T16829] [<80275e90>] (process_one_work) from [<80276d24>] (worker_thread+0x16c/0x318) [ 3227.936605][T16829] r10:ddde4f00 r9:863bdcb0 r8:84696400 r7:82a03d80 r6:ddde4f20 r5:ddde4f00 [ 3227.937149][T16829] r4:863bdc80 [ 3227.937388][T16829] [<80276bb8>] (worker_thread) from [<80281540>] (kthread+0x11c/0x154) [ 3227.937899][T16829] r10:00000000 r9:dfd75e88 r8:8514f600 r7:863bdc80 r6:80276bb8 r5:84696400 [ 3227.938411][T16829] r4:856feac0 [ 3227.938667][T16829] [<80281424>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3227.939131][T16829] Exception stack(0xdfa65fb0 to 0xdfa65ff8) [ 3227.939565][T16829] 5fa0: 00000000 00000000 00000000 00000000 [ 3227.940083][T16829] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3227.940917][T16829] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3227.942474][T16829] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:80281424 r4:856feac0 [ 3231.612937][T16829] SMP: failed to stop secondary CPUs [ 3231.615697][T16829] Rebooting in 86400 seconds..