last executing test programs: 18m42.208314886s ago: executing program 1 (id=487): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = getpid() ptrace$cont(0x7, r0, 0x5, 0xa9e) sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2) listen(r1, 0x807) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) capset(&(0x7f0000000240)={0x20071026}, &(0x7f00000002c0)={0x200000, 0x200000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20014054}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0xc010}}], 0x2, 0x40000) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) read$char_usb(r3, &(0x7f0000000180)=""/120, 0x78) sendfile(r5, r3, 0x0, 0x1c) creat(&(0x7f0000000f40)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x2eb4, 0x2000007ff) mount$fuse(0x0, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), 0x200800, &(0x7f0000001040)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18m28.599474953s ago: executing program 1 (id=491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000000a40)={@void, @val={0x0, 0x83, 0x8, 0xe057, 0x15, 0xd}, @ipv6=@icmpv6={0x6, 0x6, '\x00', 0x60, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x6a, '\x00', {0x4, 0x6, 'A\x00', 0x8, 0x3c, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, @local, [@srh={0x2b, 0x2, 0x4, 0x0, 0x0, 0x18, 0x6}, @srh={0x2f, 0x2, 0x4, 0x2, 0x0, 0x40, 0x10}]}}}}}, 0x92) 18m28.376002179s ago: executing program 1 (id=492): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x168, 0x0, 0x168, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 'team_slave_0\x00', 'sit0\x00', {}, {}, 0x0, 0x2, 0x20}, 0x0, 0x70, 0xd0, 0x0, {0x100000000000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0x0, 0xffffffff], 0x4e22, 0x4e24, 0x4e00, 0x4e20, 0x6, 0x37, 0x2d, 0x100, 0x4}}}, {{@ip={@loopback, @private=0xe010102, 0xffffff00, 0xffffffff, 'wg1\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x33, 0x3, 0x60}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@multicast1, @loopback, 0xff000000, 0x0, 'bond_slave_1\x00', 'wg1\x00', {}, {}, 0x6c}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 18m28.289270549s ago: executing program 1 (id=493): io_setup(0x1, &(0x7f0000000400)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x1002}) r2 = eventfd2(0x7, 0x1) io_submit(r0, 0x1, &(0x7f0000002880)=[&(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x81, r1, 0x0, 0x0, 0x3, 0x0, 0x1, r2}]) 18m28.039947668s ago: executing program 1 (id=494): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000e40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c00)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb}, 0x14}}, 0x20000004) 18m27.958280888s ago: executing program 1 (id=495): setresgid(0x0, 0xee00, 0xee00) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2d) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000440), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000540)=0x0) r5 = syz_ublk_setup_io_uring(0x467c, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r4, &(0x7f0000000580)={0x0, 0xd17, 0x10, 0x21, 0x80, 0x0, r5}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe702, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x542b, 0x2, 0x4, 0x1bf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bffc, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x404, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x880cc2, 0x20) 17m42.640430518s ago: executing program 32 (id=495): setresgid(0x0, 0xee00, 0xee00) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2d) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000440), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000540)=0x0) r5 = syz_ublk_setup_io_uring(0x467c, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r4, &(0x7f0000000580)={0x0, 0xd17, 0x10, 0x21, 0x80, 0x0, r5}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe702, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x542b, 0x2, 0x4, 0x1bf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bffc, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x404, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x880cc2, 0x20) 15m2.86877884s ago: executing program 2 (id=899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x20, 0x0, 0x2, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) 15m2.728945066s ago: executing program 2 (id=901): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000003400)={0x80, 0x9, 0x3, 0x80000007, 0x0, 0x7}) 15m2.368368388s ago: executing program 2 (id=902): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="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", 0x142}, {&(0x7f0000000700)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fbc84589ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe953054720185010000f188", 0x320}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[], 0x30}}, 0x40) 15m1.729795682s ago: executing program 2 (id=904): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='debugfs\x00', 0x1214040, 0x0) mount(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)='tracefs\x00', 0x1214040, 0x0) mount$fuseblk(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000d40)='.\x00', &(0x7f0000000d80)='./file0\x00', 0x0, 0x1005848, 0x0) 15m1.018637185s ago: executing program 2 (id=906): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x31, 0x455965fb809f3fbf}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x40}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 14m59.737116633s ago: executing program 2 (id=907): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/ahci\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000180)='new_id\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='8', 0x1) 14m59.736988124s ago: executing program 33 (id=907): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/ahci\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000180)='new_id\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='8', 0x1) 3m38.15791546s ago: executing program 3 (id=2151): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$macvtap(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = dup(r0) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000340)) 3m38.011630317s ago: executing program 3 (id=2152): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000003d0007010000000005000000017c00000400fc800c000180060006003b00000014000280080004"], 0x38}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) 3m38.007864207s ago: executing program 3 (id=2153): bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x3, 0x4, &(0x7f0000000f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x200020}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m37.90313989s ago: executing program 3 (id=2154): ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8917, &(0x7f0000000100)) 3m37.825021359s ago: executing program 3 (id=2155): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') lseek(r0, 0x7, 0x1) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8e}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000600)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000f40)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000fc0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001000), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001040)=0x6) r4 = socket$kcm(0x23, 0x5, 0x0) listen(r4, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)={0x184, 0x10, 0x701, 0x0, 0x0, {0xa}, [@nested={0x16e, 0xae, 0x0, 0x1, [@nested={0x28, 0x19, 0x0, 0x1, [@nested={0x4, 0xb1}, @nested={0x4, 0x1a}, @nested={0x4, 0x10c}, @nested={0x4, 0x95}, @typed={0x8, 0x7, 0x0, 0x0, @pid}, @typed={0xc, 0xad, 0x0, 0x0, @u64=0x2}]}, @nested={0x6f, 0xcf, 0x0, 0x1, [@generic="d58564f01ad678ce02514e39d1bac41f744e59298ec3a538e773476f2069d1f791a037e321951527dcdf47fdd47f36ad775dfc9c4699285cf4154e18ac71a54bf77b90458a91f5a2577363e39951b7f0c55959f926e8a8", @typed={0x14, 0x21, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}]}, @generic="e6e1ff08046d42f743af2a923a78a8664367df3669d6094a26fa7bbabc78f2e0b2c5a5f80b82981301bda04d272d7abaa8586af092802d4a498d90635e2782bd8a82bb58ff9c28d7a94a60c5b64ac0c7bf8b0d28ebce359c9ab5860e2963655cbd3fc24c4294a10b724e9ed96abf6a6c1af7d04ea6353b1fbacac0612f0ceac13bf265afb88ec09aa616067792cd1dd6dd50b4228df5a006374219b0f2d351d5cea1a50961ad358fc90a7ba11e4d6cda6b6ab1f3195f06b1ab737b5117ce745db461f7eb79b6b1246dc5c4aa929c930969cb", @generic]}]}, 0x184}}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r7], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) getdents64(r0, 0xffffffffffffffff, 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8244905000000faac8a6f770600dcca55f232c01f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f400000f22425e4097ed62cbc891061017cfa6fa26fc785a5a7088c60897d4a6148a1c1e43f00001bde5ebeac671e8e8fdecb03588aa623fa715c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347f5e1352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187e7f60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d2bf8d28582e76ccb7b37b41215c184e73000000"], &(0x7f0000000840)='GPL\x00', 0x4, 0xbc, &(0x7f0000000880)=""/188, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000980), 0x8, 0x10, &(0x7f00000009c0), 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xf, 0x4, 0x8, 0x12}, 0x50) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a80)=ANY=[], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@map=r8, 0x26, 0x0, 0xf51, &(0x7f0000000b00)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = openat$macvtap(0xffffffffffffff9c, &(0x7f0000000000), 0x48a41, 0x0) write$tun(r9, 0x0, 0x32) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x2, 0x106) 3m27.930455137s ago: executing program 3 (id=2164): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141442, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x4000087, 0x2, 0x0) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, 0x0, 0x0) shutdown(r4, 0x1) unshare(0x22020600) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000e7c000/0x1000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) lseek(r0, 0x289e0cb5, 0x0) 2m38.392034889s ago: executing program 34 (id=2164): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141442, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x4000087, 0x2, 0x0) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, 0x0, 0x0) shutdown(r4, 0x1) unshare(0x22020600) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000e7c000/0x1000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) lseek(r0, 0x289e0cb5, 0x0) 15.956211518s ago: executing program 0 (id=2473): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000100780)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000fffffff29500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x3e, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 15.473519223s ago: executing program 0 (id=2474): syz_clone(0x100211, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000005d00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005dc0)={&(0x7f0000005e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000005f80)={0x0, 0xffffffb2, &(0x7f0000005fc0)={&(0x7f0000006000)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x4004000) 15.084548088s ago: executing program 0 (id=2475): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./debug\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)='+p', 0x2) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write(r1, &(0x7f0000000680)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,hdr_digest,data_digest', 0x4b) 13.77993009s ago: executing program 0 (id=2477): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1f5) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r0, &(0x7f0000000070)="730500", 0x3) 13.645854215s ago: executing program 0 (id=2480): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x7f6e}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x180) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write(r2, &(0x7f0000001500)='7', 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000180)={0x210a, r0}, 0x0) 13.416488122s ago: executing program 0 (id=2482): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x850}, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a80)=""/4123, 0x101b}, {&(0x7f0000005480)=""/4094, 0xffe}, {&(0x7f0000002c00)=""/183, 0xb7}, {&(0x7f0000002b80)=""/119, 0x77}, {&(0x7f0000004480)=""/4094, 0xffe}, {&(0x7f0000003c00)=""/246, 0xf6}, {&(0x7f0000001ac0)=""/142, 0x8e}, {&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000001c40)=""/216, 0xd8}, {&(0x7f0000001b80)=""/149, 0x95}], 0xa}, 0x10082) 4.836421798s ago: executing program 4 (id=2504): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="68000000100001040000000000000000000000000000000001000000000000000f00030073797a6b616c6c6572300000340012800a00010076786c616e00000024000280"], 0x68}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) bind$packet(r1, &(0x7f00000002c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) write(r1, &(0x7f0000000300)="ffffffffffff00aabbccddee080045000028000100004011f8cbd00000", 0x1d) 4.553055061s ago: executing program 4 (id=2505): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x80, &(0x7f0000000440)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000004c0)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002580)='./file0\x00', 0x0, 0x2d) syz_fuse_handle_req(r1, &(0x7f00000025c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000045c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004680)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.618206482s ago: executing program 4 (id=2506): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0xc00, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000001c0)={'dt2801\x00', [0x40404f26, 0x9, 0x2, 0xf0000, 0xc, 0x8, 0xfff, 0x4c95238c, 0xa, 0x1000, 0x802, 0x1600, 0x5, 0xa0000001, 0x809, 0x400e1c6, 0x6, 0x2, 0x402, 0x199, 0xdecf, 0x3, 0xb, 0x402, 0x2, 0x3, 0xef, 0x0, 0x2a4, 0x8000003]}) 1.248774045s ago: executing program 4 (id=2507): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9) write(r2, &(0x7f00000001c0)='27', 0x2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000200)={'bridge0\x00', @multicast}) 228.462253ms ago: executing program 4 (id=2508): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9980030000800000300012800e00010069703665727370616e0000001c0002800400120014000700ff0200"], 0xb8}, 0x1, 0x0, 0x0, 0x48c5}, 0x0) 0s ago: executing program 4 (id=2509): r0 = openat$comedi(0xffffff9c, &(0x7f00000000c0)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000480)={'8255\x00', [0x1d00, 0x4, 0x8, 0x7, 0x3fe, 0x8, 0xfffffffc, 0x40, 0xffd, 0x7ffe, 0x3, 0x725, 0x8, 0x2, 0x13, 0x40, 0xfffbffab, 0x9, 0x34d, 0x1, 0x1000, 0x9, 0x0, 0x204, 0x2a14, 0x200, 0x4, 0x29, 0x7, 0xe, 0x4]}) kernel console output (not intermixed with test programs): _socket permissive=1 [ 1180.288442][ T9858] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 1180.601763][ T9866] netlink: 'syz.3.1397': attribute type 1 has an invalid length. [ 1184.917186][ T9898] batadv_slave_0: entered promiscuous mode [ 1184.919712][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1410'. [ 1184.945901][ T9898] batadv_slave_0 (unregistering): left promiscuous mode [ 1188.370072][ T1304] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1188.370220][ T1304] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.058637][ T1304] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1189.059129][ T1304] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.359758][ T1304] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1189.359909][ T1304] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.517511][ T1304] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1189.517594][ T1304] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.820691][ T1304] bond_slave_1: left promiscuous mode [ 1189.998957][ T1304] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1190.015584][ T1304] ip6gretap1 (unregistering): left allmulticast mode [ 1190.244610][ T1304] bond0 (unregistering): left allmulticast mode [ 1190.245036][ T1304] bond_slave_1: left allmulticast mode [ 1190.362821][ T1304] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 1190.363852][ T1304] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 1190.374408][ T1304] macvlan2 (unregistering): left allmulticast mode [ 1190.405523][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1190.418082][ T1304] bond0 (unregistering): Released all slaves [ 1190.422964][ T1304] bond1 (unregistering): Released all slaves [ 1190.746100][ T1304] hsr_slave_0: left promiscuous mode [ 1190.755544][ T1304] hsr_slave_1: left promiscuous mode [ 1190.795923][ T1304] veth1_macvtap: left promiscuous mode [ 1190.796099][ T1304] veth0_macvtap: left promiscuous mode [ 1190.796357][ T1304] veth1_vlan: left promiscuous mode [ 1190.796486][ T1304] veth0_vlan: left promiscuous mode [ 1193.281477][ T29] audit: type=1400 audit(1444.761:484): avc: denied { write } for pid=9963 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1193.766416][ T29] audit: type=1400 audit(1445.213:485): avc: denied { write } for pid=9999 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1194.025353][ T2972] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1194.681434][ T9925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1194.692837][ T9925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1194.832420][ T29] audit: type=1400 audit(1446.192:486): avc: denied { write } for pid=10055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1195.110357][ T29] audit: type=1400 audit(1446.459:487): avc: denied { write } for pid=10091 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1195.421759][ T2972] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1196.225171][ T9925] hsr_slave_0: entered promiscuous mode [ 1196.226993][ T9925] hsr_slave_1: entered promiscuous mode [ 1196.455448][ T29] audit: type=1400 audit(1447.696:488): avc: denied { write } for pid=10118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1196.914476][ T29] audit: type=1400 audit(1448.111:489): avc: denied { write } for pid=10214 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1197.230329][ T9925] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1197.253488][ T9925] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1197.255846][ T9925] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1197.263509][ T9925] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1197.269436][ T9925] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1197.287144][ T9925] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1197.297230][ T9925] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1197.307899][ T9925] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1198.568243][ T29] audit: type=1400 audit(1449.644:490): avc: denied { write } for pid=10253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1198.710806][ T9925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1199.019988][ T29] audit: type=1400 audit(1450.068:491): avc: denied { write } for pid=10258 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1199.609343][ T29] audit: type=1400 audit(1450.603:492): avc: denied { write } for pid=10263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1199.940238][ T29] audit: type=1400 audit(1450.908:493): avc: denied { write } for pid=10268 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1200.076530][T10271] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 1200.386119][T10281] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1200.515537][ T29] audit: type=1400 audit(1451.443:494): avc: denied { write } for pid=10275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1201.040293][ T29] audit: type=1400 audit(1451.923:495): avc: denied { write } for pid=10292 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1201.285771][T10302] netlink: 'syz.3.1425': attribute type 1 has an invalid length. [ 1201.990263][ T29] audit: type=1400 audit(1452.809:496): avc: denied { write } for pid=10305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1202.500416][ T29] audit: type=1400 audit(1453.271:497): avc: denied { write } for pid=10316 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1203.892413][ T29] audit: type=1400 audit(1454.545:498): avc: denied { write } for pid=10323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1205.078048][ T29] audit: type=1400 audit(1455.652:499): avc: denied { write } for pid=10331 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1205.737291][ T9925] veth0_vlan: entered promiscuous mode [ 1205.821724][ T9925] veth1_vlan: entered promiscuous mode [ 1206.153511][ T9925] veth0_macvtap: entered promiscuous mode [ 1206.300406][ T9925] veth1_macvtap: entered promiscuous mode [ 1206.423487][ T9422] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.423882][ T9422] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.424112][ T9422] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.424212][ T9422] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.425382][ T29] audit: type=1400 audit(1456.898:500): avc: denied { read } for pid=10344 comm="syz.3.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1206.500028][ T29] audit: type=1400 audit(1456.963:501): avc: denied { write } for pid=10339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1206.608573][ T29] audit: type=1400 audit(1457.064:502): avc: denied { create } for pid=9925 comm="syz-executor" name="macvtap0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1206.848084][ T29] audit: type=1400 audit(1457.286:503): avc: denied { write } for pid=10348 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1206.980959][ T29] audit: type=1400 audit(1457.406:504): avc: denied { setopt } for pid=10344 comm="syz.3.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1208.671413][ T29] audit: type=1400 audit(1458.975:505): avc: denied { getopt } for pid=10375 comm="syz.3.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1214.035490][ T29] audit: type=1400 audit(1463.922:506): avc: denied { bind } for pid=10415 comm="syz.3.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1214.167438][ T29] audit: type=1400 audit(1464.042:507): avc: denied { setopt } for pid=10415 comm="syz.3.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1215.808277][T10427] device-mapper: table: 248:7: thin: Error opening pool device (-ENOENT) [ 1215.808392][T10427] device-mapper: ioctl: error adding target to table [ 1216.428334][T10317] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1216.590356][T10317] usb 1-1: Using ep0 maxpacket: 16 [ 1216.593366][T10317] usb 1-1: New USB device found: idVendor=046d, idProduct=08f3, bcdDevice=b.28 [ 1216.599337][T10317] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1216.599445][T10317] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.599476][T10317] usb 1-1: config 0 has no interface number 0 [ 1216.630509][T10445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1216.634661][T10445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1216.670190][T10317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.670296][T10317] usb 1-1: Product: syz [ 1216.670327][T10317] usb 1-1: Manufacturer: syz [ 1216.670351][T10317] usb 1-1: SerialNumber: syz [ 1216.678428][T10317] usb 1-1: config 0 descriptor?? [ 1217.393754][ T7508] usb 1-1: USB disconnect, device number 93 [ 1217.738929][ T7508] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1217.917322][ T7508] usb 1-1: Using ep0 maxpacket: 16 [ 1217.920608][ T7508] usb 1-1: New USB device found: idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 1217.927876][ T7508] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 1217.927988][ T7508] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.928020][ T7508] usb 1-1: config 0 has no interface number 0 [ 1217.928065][ T7508] usb 1-1: config 0 interface 98 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1217.928108][ T7508] usb 1-1: config 0 interface 98 has no altsetting 0 [ 1218.005953][ T29] audit: type=1400 audit(1467.587:508): avc: denied { mount } for pid=10472 comm="syz.3.1477" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1218.025053][ T7508] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.025165][ T7508] usb 1-1: Product: syz [ 1218.025221][ T7508] usb 1-1: Manufacturer: syz [ 1218.025260][ T7508] usb 1-1: SerialNumber: syz [ 1218.030375][ T7508] usb 1-1: config 0 descriptor?? [ 1218.067909][ T7508] asix 1-1:0.98: probe with driver asix failed with error -22 [ 1218.288095][ T7508] usb 1-1: USB disconnect, device number 94 [ 1222.202670][ T29] audit: type=1400 audit(1471.445:509): avc: denied { write } for pid=10501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1222.567440][ T29] audit: type=1400 audit(1471.796:510): avc: denied { write } for pid=10505 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1223.863241][T10518] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1488'. [ 1224.854030][T10522] FAULT_INJECTION: forcing a failure. [ 1224.854030][T10522] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.854245][T10522] CPU: 0 UID: 0 PID: 10522 Comm: syz.3.1490 Tainted: G L syzkaller #0 PREEMPT [ 1224.854319][T10522] Tainted: [L]=SOFTLOCKUP [ 1224.854338][T10522] Hardware name: ARM-Versatile Express [ 1224.854365][T10522] Call trace: [ 1224.854407][T10522] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1224.854521][T10522] r7:60000013 r6:60000013 r5:82542818 r4:00000000 [ 1224.854540][T10522] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 1224.854596][T10522] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 1224.854735][T10522] r7:00000400 r6:00000000 r5:85540000 r4:83516624 [ 1224.854758][T10522] [<8021f5fc>] (dump_stack) from [<80a5fb40>] (should_fail_ex+0x1c0/0x220) [ 1224.854820][T10522] [<80a5f980>] (should_fail_ex) from [<8059bfc4>] (should_failslab+0x6c/0x94) [ 1224.854899][T10522] r8:85540000 r7:00000400 r6:80824d00 r5:00400dc0 r4:83c02300 [ 1224.854918][T10522] [<8059bf58>] (should_failslab) from [<8057a974>] (__kmalloc_cache_noprof+0x58/0x338) [ 1224.854973][T10522] [<8057a91c>] (__kmalloc_cache_noprof) from [<80824d00>] (copy_ipcs+0x78/0x404) [ 1224.855087][T10522] r10:83689728 r9:8341e380 r8:4c000680 r7:85540000 r6:8353f6b8 r5:8341e380 [ 1224.855121][T10522] r4:8341fc20 [ 1224.855137][T10522] [<80824c88>] (copy_ipcs) from [<80285464>] (create_new_namespaces+0xb4/0x454) [ 1224.855215][T10522] r9:8341e380 r8:4c000680 r7:00000000 r6:85540000 r5:8767f348 r4:86509900 [ 1224.855232][T10522] [<802853b0>] (create_new_namespaces) from [<80285c98>] (unshare_nsproxy_namespaces+0x84/0xa4) [ 1224.855390][T10522] r10:00000151 r9:85540000 r8:8020029c r7:8341e380 r6:dfbf1f70 r5:873d3c40 [ 1224.855412][T10522] r4:4c000680 [ 1224.855429][T10522] [<80285c14>] (unshare_nsproxy_namespaces) from [<80250eb8>] (ksys_unshare+0x1a8/0x3d4) [ 1224.855502][T10522] r7:873d3c40 r6:85540000 r5:00000000 r4:4c000680 [ 1224.855519][T10522] [<80250d10>] (ksys_unshare) from [<802510f4>] (sys_unshare+0x10/0x14) [ 1224.855585][T10522] r7:00000151 r6:00356308 r5:00000000 r4:00000000 [ 1224.855602][T10522] [<802510e4>] (sys_unshare) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1224.855663][T10522] Exception stack(0xdfbf1fa8 to 0xdfbf1ff0) [ 1224.855705][T10522] 1fa0: 00000000 00000000 4c000680 00000000 00000000 00000000 [ 1224.855742][T10522] 1fc0: 00000000 00000000 00356308 00000151 003562d8 00000000 00000001 76f280dc [ 1224.855769][T10522] 1fe0: 76f27e88 76f27e78 00019290 00137bd0 [ 1225.363202][T10524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1225.363864][T10524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1225.844140][T10528] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1226.744324][ T29] audit: type=1400 audit(1475.635:511): avc: denied { write } for pid=10529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1226.839781][T10535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.840870][T10535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.238976][ T29] audit: type=1400 audit(1477.038:512): avc: denied { write } for pid=10540 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1228.880513][ T29] audit: type=1400 audit(1477.629:513): avc: denied { write } for pid=10542 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1229.765688][ T29] audit: type=1400 audit(1478.441:514): avc: denied { write } for pid=10547 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1231.712057][ T29] audit: type=1400 audit(1480.232:515): avc: denied { write } for pid=10550 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1232.360381][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 1232.553791][ T29] audit: type=1400 audit(1481.016:516): avc: denied { write } for pid=10555 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1247.306079][ T3077] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 1247.561211][ T3077] usb 1-1: not running at top speed; connect to a high speed hub [ 1247.561356][ T3077] usb 1-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 1247.577798][ T3077] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.577932][ T3077] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1247.578037][ T3077] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.152845][ T7506] usb 1-1: USB disconnect, device number 95 [ 1248.837691][ T29] audit: type=1400 audit(1496.043:517): avc: denied { getopt } for pid=10590 comm="syz.0.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1254.786335][ T29] audit: type=1400 audit(1501.535:518): avc: denied { shutdown } for pid=10617 comm="syz.3.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1254.802633][ T29] audit: type=1400 audit(1501.544:519): avc: denied { read } for pid=10617 comm="syz.3.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1260.126083][ T29] audit: type=1400 audit(1506.463:520): avc: denied { ioctl } for pid=10668 comm="syz.0.1531" path="socket:[15915]" dev="sockfs" ino=15915 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1261.379518][T10678] netlink: 'syz.0.1536': attribute type 46 has an invalid length. [ 1261.379658][T10678] netlink: 'syz.0.1536': attribute type 28 has an invalid length. [ 1261.379696][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1536'. [ 1261.480420][T10679] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1535'. [ 1263.086944][T10693] netlink: 'syz.3.1542': attribute type 29 has an invalid length. [ 1263.106880][T10693] netlink: 'syz.3.1542': attribute type 29 has an invalid length. [ 1266.702275][T10717] netlink: 'syz.3.1552': attribute type 10 has an invalid length. [ 1269.578700][T10750] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1560'. [ 1269.616152][T10750] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1560'. [ 1272.547261][T10783] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1575'. [ 1272.988756][T10786] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1576'. [ 1277.532739][T10823] netlink: 'syz.3.1592': attribute type 29 has an invalid length. [ 1277.621257][T10823] netlink: 'syz.3.1592': attribute type 29 has an invalid length. [ 1278.423634][T10827] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1593'. [ 1278.427687][T10827] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1593'. [ 1278.893117][T10834] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1597'. [ 1279.647678][T10839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1600'. [ 1279.647774][T10839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1600'. [ 1280.925796][ T29] audit: type=1400 audit(1525.662:521): avc: denied { ioctl } for pid=10848 comm="syz.3.1605" path="socket:[16166]" dev="sockfs" ino=16166 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1281.882474][T10857] raw_sendmsg: syz.0.1607 forgot to set AF_INET. Fix it! [ 1286.725158][T10896] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1623'. [ 1286.725386][T10896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1623'. [ 1286.994835][ T29] audit: type=1400 audit(1531.264:522): avc: denied { create } for pid=10907 comm="syz.0.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1287.021521][ T29] audit: type=1400 audit(1531.283:523): avc: denied { ioctl } for pid=10907 comm="syz.0.1624" path="socket:[16848]" dev="sockfs" ino=16848 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1287.474359][T10918] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1629'. [ 1288.514028][T10928] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1634'. [ 1290.186048][T10944] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1641'. [ 1290.252576][T10944] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1641'. [ 1293.016318][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1649'. [ 1293.016880][T10970] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1649'. [ 1293.017242][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1649'. [ 1293.960100][ T29] audit: type=1400 audit(1537.698:524): avc: denied { create } for pid=10977 comm="syz.3.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1299.572099][T11026] FAULT_INJECTION: forcing a failure. [ 1299.572099][T11026] name failslab, interval 1, probability 0, space 0, times 0 [ 1299.572526][T11026] CPU: 0 UID: 0 PID: 11026 Comm: syz.3.1670 Tainted: G L syzkaller #0 PREEMPT [ 1299.572592][T11026] Tainted: [L]=SOFTLOCKUP [ 1299.572611][T11026] Hardware name: ARM-Versatile Express [ 1299.572634][T11026] Call trace: [ 1299.572672][T11026] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1299.572778][T11026] r7:60000013 r6:60000013 r5:82542818 r4:00000000 [ 1299.572797][T11026] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 1299.572850][T11026] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 1299.572911][T11026] r7:85bccc80 r6:00000000 r5:85bccc80 r4:83516624 [ 1299.572928][T11026] [<8021f5fc>] (dump_stack) from [<80a5fb40>] (should_fail_ex+0x1c0/0x220) [ 1299.572985][T11026] [<80a5f980>] (should_fail_ex) from [<8059bfc4>] (should_failslab+0x6c/0x94) [ 1299.573053][T11026] r8:00000000 r7:85bccc80 r6:80601db4 r5:00000cc0 r4:83cbacc0 [ 1299.573072][T11026] [<8059bf58>] (should_failslab) from [<80578cec>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 1299.573135][T11026] [<80578c8c>] (kmem_cache_alloc_lru_noprof) from [<80601db4>] (alloc_inode+0xa0/0xd0) [ 1299.573205][T11026] r10:00000000 r9:84224aa0 r8:85bccc80 r7:871ee600 r6:81e31658 r5:854fa800 [ 1299.573225][T11026] r4:00000000 [ 1299.573246][T11026] [<80601d14>] (alloc_inode) from [<80601df4>] (new_inode+0x10/0x68) [ 1299.573314][T11026] r7:871ee600 r6:00000000 r5:865bdf80 r4:00000000 [ 1299.573330][T11026] [<80601de4>] (new_inode) from [<806c0290>] (devpts_pty_new+0x48/0x194) [ 1299.573402][T11026] r9:84224aa0 r8:85bccc80 r7:871ee600 r6:00000000 r5:865bdf80 r4:00000000 [ 1299.573419][T11026] [<806c0248>] (devpts_pty_new) from [<80b4567c>] (ptmx_open+0xf8/0x164) [ 1299.573502][T11026] r9:865bdf80 r8:86c46e00 r7:83725564 r6:84eb3a28 r5:844b9e00 r4:00000000 [ 1299.573525][T11026] [<80b45584>] (ptmx_open) from [<805de9c4>] (chrdev_open+0xbc/0x234) [ 1299.573596][T11026] r9:844b9e00 r8:85bccc80 r7:8276fbc4 r6:844b9e00 r5:84eb3a28 r4:8372557c [ 1299.573613][T11026] [<805de908>] (chrdev_open) from [<805d1c14>] (do_dentry_open+0x12c/0x500) [ 1299.573872][T11026] r9:844b9e00 r8:85bccc80 r7:805de908 r6:84eb3a28 r5:00000000 r4:844b9e00 [ 1299.573893][T11026] [<805d1ae8>] (do_dentry_open) from [<805d3a20>] (vfs_open_consume+0x3c/0xf8) [ 1299.573955][T11026] r7:dfbedf20 r6:844b9e28 r5:00000000 r4:844b9e00 [ 1299.573972][T11026] [<805d39e4>] (vfs_open_consume) from [<805efaa0>] (path_openat+0x438/0xa98) [ 1299.574032][T11026] r6:00000000 r5:00000000 r4:dfbede58 [ 1299.574047][T11026] [<805ef668>] (path_openat) from [<805f01b8>] (do_file_open+0xb8/0x150) [ 1299.574121][T11026] r10:00000142 r9:85bccc80 r8:00000001 r7:ffffff9c r6:dfbedf20 r5:85bccc80 [ 1299.574141][T11026] r4:854b6600 [ 1299.574157][T11026] [<805f0100>] (do_file_open) from [<805d3e08>] (do_sys_openat2+0xb8/0xf0) [ 1299.574221][T11026] r8:8020029c r7:20000380 r6:ffffff9c r5:854b6600 r4:00000004 [ 1299.574238][T11026] [<805d3d50>] (do_sys_openat2) from [<805d42f4>] (sys_openat+0x88/0xd8) [ 1299.574299][T11026] r7:00000142 r6:00356314 r5:20000380 r4:ffffff9c [ 1299.574317][T11026] [<805d426c>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1299.574366][T11026] Exception stack(0xdfbedfa8 to 0xdfbedff0) [ 1299.574407][T11026] dfa0: 00000000 00000000 ffffff9c 20000380 00000041 00000000 [ 1299.574442][T11026] dfc0: 00000000 00000000 00356314 00000142 003562d8 00000000 00000001 76f280dc [ 1299.574469][T11026] dfe0: 76f27e88 76f27e78 00019290 00137bd0 [ 1299.574493][T11026] r5:00000000 r4:00000000 [ 1300.310319][T11033] md: array md0 already has disks! [ 1300.372693][T11033] md: md0: array is limited to 27 devices [ 1301.224991][T11038] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.374655][T11038] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.471507][T11038] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.539103][T11038] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.214030][ T29] audit: type=1400 audit(1545.312:525): avc: denied { getopt } for pid=11063 comm="syz.3.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1311.192840][ T29] audit: type=1400 audit(1553.592:526): avc: denied { ioctl } for pid=11115 comm="syz.0.1701" path="socket:[17162]" dev="sockfs" ino=17162 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1313.907189][T11189] gtp0: entered promiscuous mode [ 1314.203562][ T29] audit: type=1400 audit(1556.379:527): avc: denied { name_bind } for pid=11202 comm="syz.3.1723" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 1314.580829][T11212] netlink: 'syz.3.1726': attribute type 1 has an invalid length. [ 1314.580962][T11212] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1726'. [ 1314.847716][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1729'. [ 1315.155042][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1731'. [ 1315.370396][ T29] audit: type=1400 audit(1557.459:528): avc: denied { getopt } for pid=11223 comm="syz.0.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1323.596668][T11283] macvlan0: entered promiscuous mode [ 1324.296109][ T29] audit: type=1400 audit(1565.692:529): avc: denied { ioctl } for pid=11285 comm="syz.0.1749" path="socket:[17336]" dev="sockfs" ino=17336 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1326.163522][ T29] audit: type=1400 audit(1567.418:530): avc: denied { ioctl } for pid=11295 comm="syz.0.1752" path="socket:[17352]" dev="sockfs" ino=17352 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1327.529874][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1756'. [ 1327.530042][T11311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1756'. [ 1327.870239][T11321] IPv6: addrconf: prefix option has invalid lifetime [ 1335.416535][T11385] netlink: 'syz.0.1784': attribute type 1 has an invalid length. [ 1335.740010][T11389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1785'. [ 1336.090379][T11394] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1788'. [ 1338.555489][T11413] syzkaller1: entered allmulticast mode [ 1342.610048][T11463] skbuff: bad partial csum: csum=65535/2 headroom=2 headlen=65543 [ 1343.448462][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1810'. [ 1344.222033][T11480] syzkaller0: entered promiscuous mode [ 1344.222151][T11480] syzkaller0: entered allmulticast mode [ 1344.535144][T11485] netlink: 'syz.3.1814': attribute type 64 has an invalid length. [ 1344.536872][T11485] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1814'. [ 1347.457802][T11514] netlink: 'syz.3.1820': attribute type 1 has an invalid length. [ 1347.569033][T11514] bond1: entered promiscuous mode [ 1347.573545][T11514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1347.629422][T11514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1347.641992][T11514] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 1347.642209][T11514] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1347.643883][T11514] bond1: (slave gre1): Opening slave failed [ 1347.708272][T11516] syzkaller1: entered promiscuous mode [ 1347.708377][T11516] syzkaller1: entered allmulticast mode [ 1348.967825][T11566] netlink: 'syz.3.1826': attribute type 3 has an invalid length. [ 1348.967945][T11566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1826'. [ 1348.967998][T11566] netlink: 'syz.3.1826': attribute type 3 has an invalid length. [ 1348.968031][T11566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1826'. [ 1348.971318][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1826'. [ 1349.852511][T11575] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1829'. [ 1349.890611][T11578] netlink: 'syz.3.1830': attribute type 1 has an invalid length. [ 1350.015168][T11575] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1829'. [ 1350.057948][T11580] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1831'. [ 1350.171861][T11584] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 1353.713888][T11610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1844'. [ 1353.714079][T11610] netlink: 'syz.3.1844': attribute type 22 has an invalid length. [ 1353.714120][T11610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1844'. [ 1354.761791][ T29] audit: type=1400 audit(1593.816:531): avc: denied { shutdown } for pid=11618 comm="syz.3.1847" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1355.140339][T11625] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1850'. [ 1356.627392][ T29] audit: type=1400 audit(1595.533:532): avc: denied { map } for pid=11645 comm="syz.0.1860" path="socket:[18779]" dev="sockfs" ino=18779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1356.627588][ T29] audit: type=1400 audit(1595.533:533): avc: denied { read } for pid=11645 comm="syz.0.1860" path="socket:[18779]" dev="sockfs" ino=18779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1356.942822][T11648] netlink: 'syz.0.1861': attribute type 3 has an invalid length. [ 1358.678260][T11662] ip6erspan0: entered allmulticast mode [ 1360.580350][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1874'. [ 1361.705300][T11693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1878'. [ 1364.553658][ T29] audit: type=1400 audit(1602.843:534): avc: denied { setopt } for pid=11705 comm="syz.0.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1367.236396][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1897'. [ 1367.401929][T11758] syzkaller1: entered promiscuous mode [ 1367.402051][T11758] syzkaller1: entered allmulticast mode [ 1368.231013][T11783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1370.382879][T11817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1915'. [ 1370.382963][T11817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1915'. [ 1378.264157][T11831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1379.501775][T11854] Dropped outbound packet type=8847 [ 1380.718231][T11866] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1385.641740][ T29] audit: type=1400 audit(1622.318:535): avc: denied { connect } for pid=11909 comm="syz.3.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1390.972264][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1970'. [ 1393.453627][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'. [ 1394.645030][T11993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1983'. [ 1395.239461][T12000] block nbd0: not configured, cannot reconfigure [ 1395.686364][ T11] SELinux: failure in sel_netif_sid_slow(), invalid network interface (84) [ 1396.450574][ T29] audit: type=1400 audit(1632.296:536): avc: denied { write } for pid=12008 comm="syz.0.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1396.547869][ T29] audit: type=1400 audit(1632.388:537): avc: denied { bind } for pid=12008 comm="syz.0.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1397.923459][T12031] syzkaller0: left promiscuous mode [ 1397.923627][T12031] syzkaller0: left allmulticast mode [ 1399.213393][T12041] comedi: valid board names for 8255 driver are: [ 1399.213487][T12041] 8255 [ 1399.213503][T12041] comedi: valid board names for vmk80xx driver are: [ 1399.213517][T12041] vmk80xx [ 1399.213529][T12041] comedi: valid board names for usbduxsigma driver are: [ 1399.213542][T12041] usbduxsigma [ 1399.213553][T12041] comedi: valid board names for usbduxfast driver are: [ 1399.213566][T12041] usbduxfast [ 1399.213579][T12041] comedi: valid board names for usbdux driver are: [ 1399.213591][T12041] usbdux [ 1399.213602][T12041] comedi: valid board names for ni6501 driver are: [ 1399.213614][T12041] ni6501 [ 1399.213626][T12041] comedi: valid board names for dt9812 driver are: [ 1399.213638][T12041] dt9812 [ 1399.213650][T12041] comedi: valid board names for ni_labpc_cs driver are: [ 1399.213663][T12041] ni_labpc_cs [ 1399.213682][T12041] comedi: valid board names for ni_daq_700 driver are: [ 1399.213696][T12041] ni_daq_700 [ 1399.213707][T12041] comedi: valid board names for labpc_pci driver are: [ 1399.213720][T12041] labpc_pci [ 1399.213732][T12041] comedi: valid board names for adl_pci9118 driver are: [ 1399.213745][T12041] pci9118dg [ 1399.213757][T12041] pci9118hg [ 1399.213768][T12041] pci9118hr [ 1399.213781][T12041] comedi: valid board names for 8255_pci driver are: [ 1399.213793][T12041] 8255_pci [ 1399.213805][T12041] comedi: valid board names for comedi_parport driver are: [ 1399.213819][T12041] comedi_parport [ 1399.213832][T12041] comedi: valid board names for comedi_test driver are: [ 1399.213845][T12041] comedi_test [ 1399.213856][T12041] comedi: valid board names for comedi_bond driver are: [ 1399.213868][T12041] comedi_bond [ 1403.737563][ T29] audit: type=1400 audit(1639.015:538): avc: denied { write } for pid=12060 comm="syz.3.2012" name="nullb" dev="configfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1404.051779][T12064] null_blk: disk my_zoned_dev created [ 1415.109443][ T5820] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1415.193311][ T5996] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1416.049310][T10946] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1416.320449][ T1304] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1416.320897][ T1304] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1417.276892][T10317] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1421.000110][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1430.610285][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1436.439244][ T1304] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1436.439454][ T1304] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1436.439531][ T1304] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1436.439608][ T1304] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1449.331797][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1454.869196][T12171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1454.869691][T12171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1454.882934][T12171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1454.883244][T12171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1455.990966][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2045'. [ 1455.991095][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2045'. [ 1455.991615][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2045'. [ 1456.031728][T12179] pim6reg: entered allmulticast mode [ 1459.527562][T12199] hsr_slave_0: Caught tx_queue_len zero misconfig [ 1460.472743][T12203] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2051'. [ 1462.637704][T12211] nbd: must specify an index to disconnect [ 1464.066568][T12219] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2059'. [ 1467.726371][T12242] lo: Caught tx_queue_len zero misconfig [ 1472.097887][T12263] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2078'. [ 1472.959259][T12267] syzkaller0: entered promiscuous mode [ 1472.959631][T12267] syzkaller0: entered allmulticast mode [ 1472.985848][T12267] syzkaller0: left promiscuous mode [ 1472.985995][T12267] syzkaller0: left allmulticast mode [ 1478.711995][T12310] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2097'. [ 1478.727987][T12310] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2097'. [ 1480.968332][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2099'. [ 1480.970510][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2099'. [ 1480.971409][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2099'. [ 1485.406285][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1510.458768][T12424] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1510.458835][T12424] block device autoloading is deprecated and will be removed. [ 1511.307663][T12432] device-mapper: table: 248:8: multipath: error getting device (-EBUSY) [ 1511.307804][T12432] device-mapper: ioctl: error adding target to table [ 1511.397388][T12424] md/raid1:md3: active with 1 out of 3 mirrors [ 1511.471060][T12424] md3: detected capacity change from 0 to 4096 [ 1511.639608][T12433] md_update_sb: can't update sb for read-only array md3 [ 1512.674246][T12445] FAULT_INJECTION: forcing a failure. [ 1512.674246][T12445] name failslab, interval 1, probability 0, space 0, times 0 [ 1512.674341][T12445] CPU: 0 UID: 0 PID: 12445 Comm: syz.3.2150 Tainted: G L syzkaller #0 PREEMPT [ 1512.674374][T12445] Tainted: [L]=SOFTLOCKUP [ 1512.674381][T12445] Hardware name: ARM-Versatile Express [ 1512.674394][T12445] Call trace: [ 1512.674430][T12445] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1512.674537][T12445] r7:60000013 r6:60000013 r5:82542818 r4:00000000 [ 1512.674552][T12445] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 1512.674587][T12445] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 1512.674616][T12445] r7:85b98000 r6:00000000 r5:85b98000 r4:83516624 [ 1512.674623][T12445] [<8021f5fc>] (dump_stack) from [<80a5fb40>] (should_fail_ex+0x1c0/0x220) [ 1512.674649][T12445] [<80a5f980>] (should_fail_ex) from [<8059bfc4>] (should_failslab+0x6c/0x94) [ 1512.674684][T12445] r8:00000000 r7:85b98000 r6:83c02000 r5:00400dc0 r4:00000030 [ 1512.674691][T12445] [<8059bf58>] (should_failslab) from [<805798dc>] (__kmalloc_noprof+0xa8/0x3c8) [ 1512.674737][T12445] [<80579834>] (__kmalloc_noprof) from [<808970dc>] (landlock_merge_ruleset+0x54/0x49c) [ 1512.674812][T12445] r10:85b98000 r9:85b98000 r8:87500700 r7:00000000 r6:88f87680 r5:87500700 [ 1512.674833][T12445] r4:00000001 [ 1512.674851][T12445] [<80897088>] (landlock_merge_ruleset) from [<80891934>] (sys_landlock_restrict_self+0x150/0x4f0) [ 1512.674925][T12445] r10:85b98000 r9:85b98000 r8:00000001 r7:000001be r6:88f87680 r5:87500700 [ 1512.674942][T12445] r4:00000000 [ 1512.674949][T12445] [<808917e4>] (sys_landlock_restrict_self) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1512.674984][T12445] Exception stack(0xdfca5fa8 to 0xdfca5ff0) [ 1512.675051][T12445] 5fa0: 00000000 00000000 00000003 00000000 00000000 00000000 [ 1512.675092][T12445] 5fc0: 00000000 00000000 0035630c 000001be 003562d8 00000000 00000001 76f280dc [ 1512.675116][T12445] 5fe0: 76f27e88 76f27e78 00019290 00137bd0 [ 1512.675149][T12445] r10:000001be r9:85b98000 r8:8020029c r7:000001be r6:0035630c r5:00000000 [ 1512.675165][T12445] r4:00000000 [ 1513.018553][ T107] pim6reg: left allmulticast mode [ 1513.153054][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2148'. [ 1513.153197][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2148'. [ 1513.153320][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2148'. [ 1513.418670][ T107] bond0 (unregistering): (slave 30): Releasing backup interface [ 1513.439958][ T107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1513.444283][ T107] bond0 (unregistering): Released all slaves [ 1513.466723][ T107] bond1 (unregistering): Released all slaves [ 1513.530903][T12443] pim6reg: entered allmulticast mode [ 1513.626789][ T107] hsr_slave_0: left promiscuous mode [ 1513.649932][ T107] hsr_slave_1: left promiscuous mode [ 1513.690001][ T107] veth1_macvtap: left promiscuous mode [ 1513.690199][ T107] veth0_macvtap: left promiscuous mode [ 1513.690447][ T107] veth1_vlan: left promiscuous mode [ 1513.690590][ T107] veth0_vlan: left promiscuous mode [ 1514.289347][ T29] audit: type=1400 audit(1741.053:539): avc: denied { write } for pid=12457 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1514.667109][ T29] audit: type=1400 audit(1741.404:540): avc: denied { write } for pid=12461 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1518.814062][T12448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.818051][T12448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1519.658602][T12448] hsr_slave_0: entered promiscuous mode [ 1519.660006][T12448] hsr_slave_1: entered promiscuous mode [ 1519.660686][T12448] debugfs: 'hsr0' already exists in 'hsr' [ 1519.660731][T12448] Cannot create hsr debugfs directory [ 1520.061293][T12448] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1520.072980][T12448] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1520.074739][T12448] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1520.083073][T12448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1520.090072][T12448] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1520.093547][T12448] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1520.097595][T12448] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1520.106469][T12448] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1520.799810][T12448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1523.814574][T12448] veth0_vlan: entered promiscuous mode [ 1523.860679][T12448] veth1_vlan: entered promiscuous mode [ 1523.975607][T12448] veth0_macvtap: entered promiscuous mode [ 1524.004621][T12448] veth1_macvtap: entered promiscuous mode [ 1524.116003][ T5985] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.116533][ T5985] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.116647][ T5985] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.116715][ T5985] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.555675][ T29] audit: type=1400 audit(1750.532:541): avc: denied { read write } for pid=12768 comm="syz.3.2151" name="macvtap0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1524.555852][ T29] audit: type=1400 audit(1750.532:542): avc: denied { open } for pid=12768 comm="syz.3.2151" path="/macvtap0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1524.559925][ T29] audit: type=1400 audit(1750.532:543): avc: denied { ioctl } for pid=12768 comm="syz.3.2151" path="/macvtap0" dev="tmpfs" ino=13 ioctlcmd=0x800454df scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1530.899537][ T29] audit: type=1400 audit(1756.384:544): avc: denied { setopt } for pid=12806 comm="syz.0.2163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1532.452980][T12809] syzkaller0: entered promiscuous mode [ 1532.453094][T12809] syzkaller0: entered allmulticast mode [ 1537.444526][ T29] audit: type=1400 audit(1762.421:545): avc: denied { shutdown } for pid=12814 comm="syz.3.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1543.362425][T12847] FAULT_INJECTION: forcing a failure. [ 1543.362425][T12847] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.362523][T12847] CPU: 1 UID: 0 PID: 12847 Comm: syz.0.2177 Tainted: G L syzkaller #0 PREEMPT [ 1543.362556][T12847] Tainted: [L]=SOFTLOCKUP [ 1543.362564][T12847] Hardware name: ARM-Versatile Express [ 1543.362574][T12847] Call trace: [ 1543.362611][T12847] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1543.362696][T12847] r7:60000013 r6:60000013 r5:82542818 r4:00000000 [ 1543.362714][T12847] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 1543.362759][T12847] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 1543.362788][T12847] r7:84660000 r6:00000000 r5:84660000 r4:83516624 [ 1543.362795][T12847] [<8021f5fc>] (dump_stack) from [<80a5fb40>] (should_fail_ex+0x1c0/0x220) [ 1543.362821][T12847] [<80a5f980>] (should_fail_ex) from [<8059bfc4>] (should_failslab+0x6c/0x94) [ 1543.362854][T12847] r8:00000000 r7:84660000 r6:83c01300 r5:00000920 r4:00000060 [ 1543.362861][T12847] [<8059bf58>] (should_failslab) from [<805798dc>] (__kmalloc_noprof+0xa8/0x3c8) [ 1543.362888][T12847] [<80579834>] (__kmalloc_noprof) from [<808b4f90>] (skcipher_walk_next+0x308/0x334) [ 1543.362922][T12847] r10:00001000 r9:00000004 r8:00000010 r7:00000fc8 r6:00000000 r5:00000060 [ 1543.362930][T12847] r4:e8319d80 [ 1543.362936][T12847] [<808b4c88>] (skcipher_walk_next) from [<808b510c>] (skcipher_walk_done+0x150/0x1fc) [ 1543.362966][T12847] r10:87409fec r9:ddef5d28 r8:00000fa0 r7:00000060 r6:00000000 r5:e8319d80 [ 1543.362981][T12847] r4:ddef5d28 r3:00000000 [ 1543.362996][T12847] [<808b4fbc>] (skcipher_walk_done) from [<80244a5c>] (cbc_encrypt+0x108/0x138) [ 1543.363048][T12847] r9:8740905c r8:00000f90 r7:00000fa4 r6:87bd4730 r5:87409ffc r4:85dc01e7 [ 1543.363056][T12847] [<80244954>] (cbc_encrypt) from [<808b44c8>] (crypto_skcipher_encrypt+0x3c/0x50) [ 1543.363089][T12847] r10:ddef5d04 r9:836d7a88 r8:ddef5d06 r7:00000010 r6:00001000 r5:872f8d00 [ 1543.363097][T12847] r4:87408000 [ 1543.363112][T12847] [<808b448c>] (crypto_skcipher_encrypt) from [<80833354>] (derived_key_encrypt.constprop.0+0x23c/0x2a8) [ 1543.363164][T12847] [<80833118>] (derived_key_encrypt.constprop.0) from [<808334cc>] (encrypted_read+0x10c/0x29c) [ 1543.363195][T12847] r10:00000000 r9:00000000 r8:00002088 r7:84cf6180 r6:87474000 r5:87408000 [ 1543.363204][T12847] r4:00002047 [ 1543.363210][T12847] [<808333c0>] (encrypted_read) from [<80829bc4>] (__keyctl_read_key+0x54/0x70) [ 1543.363242][T12847] r10:87474000 r9:00002088 r8:87474000 r7:844c1f18 r6:00002088 r5:844c1f00 [ 1543.363250][T12847] r4:00000000 [ 1543.363256][T12847] [<80829b70>] (__keyctl_read_key) from [<8082accc>] (keyctl_read_key+0xac/0x1c8) [ 1543.363289][T12847] r9:00002088 r8:00002088 r7:844c1f00 r6:349b7f55 r5:20000240 r4:00002088 [ 1543.363296][T12847] [<8082ac20>] (keyctl_read_key) from [<8082c2b4>] (sys_keyctl+0x138/0x2a4) [ 1543.363380][T12847] r10:00000137 r9:84660000 r8:8020029c r7:00000137 r6:00356314 r5:00000000 [ 1543.363401][T12847] r4:0000003e r3:349b7f55 [ 1543.363417][T12847] [<8082c17c>] (sys_keyctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1543.363466][T12847] Exception stack(0xe8319fa8 to 0xe8319ff0) [ 1543.363489][T12847] 9fa0: 00000000 00000000 0000000b 3fe47f35 20000240 349b7f55 [ 1543.363505][T12847] 9fc0: 00000000 00000000 00356314 00000137 003562d8 00000000 00000001 76fa00dc [ 1543.363519][T12847] 9fe0: 76f9fe88 76f9fe78 00019290 00137bd0 [ 1543.363530][T12847] r5:00000000 r4:00000000 [ 1543.363725][T12847] trusted_key: encrypted_key: failed to encrypt (-12) [ 1543.365065][T12847] trusted_key: encrypted_key: insufficient parameters specified [ 1561.661140][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1574.945330][T12902] FAULT_INJECTION: forcing a failure. [ 1574.945330][T12902] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1574.945487][T12902] CPU: 0 UID: 0 PID: 12902 Comm: syz.0.2200 Tainted: G L syzkaller #0 PREEMPT [ 1574.945547][T12902] Tainted: [L]=SOFTLOCKUP [ 1574.945562][T12902] Hardware name: ARM-Versatile Express [ 1574.945582][T12902] Call trace: [ 1574.945630][T12902] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1574.945737][T12902] r7:60000013 r6:60000013 r5:82542818 r4:00000000 [ 1574.945753][T12902] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 1574.945800][T12902] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 1574.945855][T12902] r7:20000500 r6:00000000 r5:8642a640 r4:835552b8 [ 1574.945870][T12902] [<8021f5fc>] (dump_stack) from [<80a5fb40>] (should_fail_ex+0x1c0/0x220) [ 1574.945921][T12902] [<80a5f980>] (should_fail_ex) from [<80a5fbb4>] (should_fail+0x14/0x18) [ 1574.945974][T12902] r8:87869280 r7:20000500 r6:8745d580 r5:00000008 r4:00000013 [ 1574.945990][T12902] [<80a5fba0>] (should_fail) from [<80a5fbd4>] (should_fail_usercopy+0x1c/0x20) [ 1574.946033][T12902] [<80a5fbb8>] (should_fail_usercopy) from [<8082a030>] (sys_add_key+0x1bc/0x280) [ 1574.946086][T12902] [<80829e74>] (sys_add_key) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1574.946135][T12902] Exception stack(0xea515fa8 to 0xea515ff0) [ 1574.946174][T12902] 5fa0: ffffffff 00000000 20000480 200004c0 20000500 00000008 [ 1574.946205][T12902] 5fc0: ffffffff 00000000 00356318 00000135 003562d8 00000000 00000001 76fa00dc [ 1574.946231][T12902] 5fe0: 76f9fe88 76f9fe78 00019290 00137bd0 [ 1574.946259][T12902] r8:8020029c r7:00000135 r6:00356318 r5:00000000 r4:ffffffff [ 1575.114550][T12904] FAULT_INJECTION: forcing a failure. [ 1575.114550][T12904] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.114724][T12904] CPU: 0 UID: 0 PID: 12904 Comm: syz.0.2201 Tainted: G L syzkaller #0 PREEMPT [ 1575.114787][T12904] Tainted: [L]=SOFTLOCKUP [ 1575.114803][T12904] Hardware name: ARM-Versatile Express [ 1575.114824][T12904] Call trace: [ 1575.114862][T12904] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1575.114965][T12904] r7:60000093 r6:60000093 r5:82542818 r4:00000000 [ 1575.115016][T12904] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 1575.115065][T12904] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 1575.115120][T12904] r7:8642a640 r6:00000000 r5:8642a640 r4:83516624 [ 1575.115141][T12904] [<8021f5fc>] (dump_stack) from [<80a5fb40>] (should_fail_ex+0x1c0/0x220) [ 1575.115195][T12904] [<80a5f980>] (should_fail_ex) from [<8059bfc4>] (should_failslab+0x6c/0x94) [ 1575.115254][T12904] r8:00000000 r7:8642a640 r6:8026632c r5:00000820 r4:83cf5240 [ 1575.115270][T12904] [<8059bf58>] (should_failslab) from [<80578908>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 1575.115376][T12904] [<805788ac>] (kmem_cache_alloc_noprof) from [<8026632c>] (__send_signal_locked+0x8c/0x510) [ 1575.115445][T12904] r10:00000000 r9:85b12728 r8:00000010 r7:8341fc20 r6:00000001 r5:00000011 [ 1575.115464][T12904] r4:8466d940 [ 1575.115476][T12904] [<802662a0>] (__send_signal_locked) from [<802675b0>] (do_notify_parent+0x260/0x384) [ 1575.115538][T12904] r10:ffffffff r9:83f72300 r8:00000000 r7:85b1af40 r6:00000011 r5:60000093 [ 1575.115558][T12904] r4:85be3fc0 [ 1575.115569][T12904] [<80267350>] (do_notify_parent) from [<80257b54>] (release_task+0x5ac/0x6a4) [ 1575.115630][T12904] r8:83f72300 r7:8642a640 r6:00000000 r5:83688d68 r4:85be3fc0 [ 1575.115645][T12904] [<802575a8>] (release_task) from [<80258fe4>] (do_exit+0x668/0xad0) [ 1575.115717][T12904] r10:8642ad34 r9:00000000 r8:df99de98 r7:8642a640 r6:df99d788 r5:df99d788 [ 1575.115736][T12904] r4:8642a640 [ 1575.115748][T12904] [<8025897c>] (do_exit) from [<80259620>] (do_group_exit+0x40/0x8c) [ 1575.115795][T12904] r7:00137bcc [ 1575.115811][T12904] [<802595e0>] (do_group_exit) from [<8026a608>] (get_signal+0x994/0xaa8) [ 1575.115869][T12904] r7:00137bcc r4:8642a640 [ 1575.115885][T12904] [<80269c74>] (get_signal) from [<8022b7cc>] (do_work_pending+0x228/0x4fc) [ 1575.115952][T12904] r10:000000f0 r9:00137bd0 r8:fffffe00 r7:00137bcc r6:00000001 r5:df99dfb0 [ 1575.115970][T12904] r4:8642a640 [ 1575.115984][T12904] [<8022b5a4>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 1575.116030][T12904] Exception stack(0xdf99dfb0 to 0xdf99dff8) [ 1575.116064][T12904] dfa0: 003562e0 00000080 00000000 00000000 [ 1575.116096][T12904] dfc0: 00138f58 ffffffff 76fa07d4 000000f0 00340000 00000000 00000001 76fa00dc [ 1575.116154][T12904] dfe0: 76f9ff38 76f9ff28 000220b8 00137bcc 60000010 003562e0 [ 1575.116197][T12904] r10:000000f0 r9:8642a640 r8:8020029c r7:000000f0 r6:76fa07d4 r5:ffffffff [ 1575.116215][T12904] r4:00138f58 [ 1575.282442][T12906] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2202'. [ 1575.345315][T12906] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2202'. [ 1575.443078][ T29] audit: type=1400 audit(1797.504:546): avc: denied { ioctl } for pid=12907 comm="syz.0.2203" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1579.093656][T12913] netlink: 'syz.0.2205': attribute type 10 has an invalid length. [ 1579.229455][T12919] FAULT_INJECTION: forcing a failure. [ 1579.229455][T12919] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1579.229630][T12919] CPU: 1 UID: 0 PID: 12919 Comm: syz.0.2206 Tainted: G L syzkaller #0 PREEMPT [ 1579.229692][T12919] Tainted: [L]=SOFTLOCKUP [ 1579.229709][T12919] Hardware name: ARM-Versatile Express [ 1579.229732][T12919] Call trace: [ 1579.229771][T12919] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1579.229884][T12919] r7:60000013 r6:60000013 r5:82542818 r4:00000000 [ 1579.229901][T12919] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 1579.229954][T12919] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 1579.230012][T12919] r7:dfba1df0 r6:00000000 r5:84660000 r4:834f6880 [ 1579.230029][T12919] [<8021f5fc>] (dump_stack) from [<80a5fb40>] (should_fail_ex+0x1c0/0x220) [ 1579.230090][T12919] [<80a5f980>] (should_fail_ex) from [<80a5fbb4>] (should_fail+0x14/0x18) [ 1579.230164][T12919] r8:00000001 r7:dfba1df0 r6:834f6880 r5:76fa0000 r4:00000010 [ 1579.230184][T12919] [<80a5fba0>] (should_fail) from [<8035adbc>] (get_futex_key+0xf4/0x4a8) [ 1579.230241][T12919] [<8035acc8>] (get_futex_key) from [<8035f928>] (futex_wake+0x70/0x25c) [ 1579.230311][T12919] r10:87434a80 r9:00000000 r8:dfba1de0 r7:ffffffff r6:76fa0628 r5:00000001 [ 1579.230331][T12919] r4:00000012 [ 1579.230344][T12919] [<8035f8b8>] (futex_wake) from [<8035c3b8>] (do_futex+0x194/0x1d0) [ 1579.230423][T12919] r10:87434a80 r9:00000001 r8:dfba1e98 r7:85b14600 r6:00000000 r5:b5403587 [ 1579.230441][T12919] r4:00000001 [ 1579.230457][T12919] [<8035c224>] (do_futex) from [<8024e2f4>] (mm_exit_exec_release+0xcc/0xd0) [ 1579.230510][T12919] r4:84660000 [ 1579.230522][T12919] [<8024e228>] (mm_exit_exec_release) from [<80258b58>] (do_exit+0x1dc/0xad0) [ 1579.230571][T12919] r5:87419a40 r4:84660000 [ 1579.230583][T12919] [<8025897c>] (do_exit) from [<80259620>] (do_group_exit+0x40/0x8c) [ 1579.230634][T12919] r7:00137bcc [ 1579.230650][T12919] [<802595e0>] (do_group_exit) from [<8026a608>] (get_signal+0x994/0xaa8) [ 1579.230702][T12919] r7:00137bcc r4:84660000 [ 1579.230717][T12919] [<80269c74>] (get_signal) from [<8022b7cc>] (do_work_pending+0x228/0x4fc) [ 1579.230782][T12919] r10:000000f0 r9:00137bd0 r8:fffffe00 r7:00137bcc r6:00000001 r5:dfba1fb0 [ 1579.230799][T12919] r4:84660000 [ 1579.230813][T12919] [<8022b5a4>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 1579.230860][T12919] Exception stack(0xdfba1fb0 to 0xdfba1ff8) [ 1579.230897][T12919] 1fa0: 003562e0 00000080 00000000 00000000 [ 1579.230931][T12919] 1fc0: 00138f58 ffffffff 76fa07d4 000000f0 00340000 00000000 00000001 76fa00dc [ 1579.230960][T12919] 1fe0: 76f9ff38 76f9ff28 000220b8 00137bcc 60000010 003562e0 [ 1579.230994][T12919] r10:000000f0 r9:84660000 r8:8020029c r7:000000f0 r6:76fa07d4 r5:ffffffff [ 1579.231015][T12919] r4:00138f58 [ 1580.829369][T12931] FAULT_INJECTION: forcing a failure. [ 1580.829369][T12931] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1580.829551][T12931] CPU: 1 UID: 0 PID: 12931 Comm: syz.0.2211 Tainted: G L syzkaller #0 PREEMPT [ 1580.829636][T12931] Tainted: [L]=SOFTLOCKUP [ 1580.829654][T12931] Hardware name: ARM-Versatile Express [ 1580.829677][T12931] Call trace: [ 1580.829717][T12931] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1580.829824][T12931] r7:60000013 r6:60000013 r5:82542818 r4:00000000 [ 1580.829843][T12931] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 1580.829895][T12931] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 1580.829954][T12931] r7:dfc3ddf0 r6:00000000 r5:85bc6600 r4:834f6880 [ 1580.829970][T12931] [<8021f5fc>] (dump_stack) from [<80a5fb40>] (should_fail_ex+0x1c0/0x220) [ 1580.830024][T12931] [<80a5f980>] (should_fail_ex) from [<80a5fbb4>] (should_fail+0x14/0x18) [ 1580.830080][T12931] r8:00000001 r7:dfc3ddf0 r6:834f6880 r5:76fa0000 r4:00000010 [ 1580.830097][T12931] [<80a5fba0>] (should_fail) from [<8035adbc>] (get_futex_key+0xf4/0x4a8) [ 1580.830153][T12931] [<8035acc8>] (get_futex_key) from [<8035f928>] (futex_wake+0x70/0x25c) [ 1580.830218][T12931] r10:87434a80 r9:00000000 r8:dfc3dde0 r7:ffffffff r6:76fa0628 r5:00000001 [ 1580.830238][T12931] r4:00000012 [ 1580.830253][T12931] [<8035f8b8>] (futex_wake) from [<8035c3b8>] (do_futex+0x194/0x1d0) [ 1580.830313][T12931] r10:87434a80 r9:00000001 r8:dfc3de98 r7:846b8c00 r6:00000000 r5:b5403587 [ 1580.830331][T12931] r4:00000001 [ 1580.830345][T12931] [<8035c224>] (do_futex) from [<8024e2f4>] (mm_exit_exec_release+0xcc/0xd0) [ 1580.832173][T12931] r4:85bc6600 [ 1580.832212][T12931] [<8024e228>] (mm_exit_exec_release) from [<80258b58>] (do_exit+0x1dc/0xad0) [ 1580.832289][T12931] r5:8550f840 r4:85bc6600 [ 1580.832307][T12931] [<8025897c>] (do_exit) from [<80259620>] (do_group_exit+0x40/0x8c) [ 1580.832357][T12931] r7:00137bcc [ 1580.832373][T12931] [<802595e0>] (do_group_exit) from [<8026a608>] (get_signal+0x994/0xaa8) [ 1580.833054][T12931] r7:00137bcc r4:85bc6600 [ 1580.834418][T12931] [<80269c74>] (get_signal) from [<8022b7cc>] (do_work_pending+0x228/0x4fc) [ 1580.836396][T12931] r10:000000f0 r9:00137bd0 r8:fffffe00 r7:00137bcc r6:00000001 r5:dfc3dfb0 [ 1580.836593][T12931] r4:85bc6600 [ 1580.836635][T12931] [<8022b5a4>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 1580.836703][T12931] Exception stack(0xdfc3dfb0 to 0xdfc3dff8) [ 1580.836740][T12931] dfa0: 003562e0 00000080 00000000 00000000 [ 1580.836774][T12931] dfc0: 00138f58 ffffffff 76fa07d4 000000f0 00340000 00000000 00000001 76fa00dc [ 1580.836803][T12931] dfe0: 76f9ff38 76f9ff28 000220b8 00137bcc 60000010 003562e0 [ 1580.836840][T12931] r10:000000f0 r9:85bc6600 r8:8020029c r7:000000f0 r6:76fa07d4 r5:ffffffff [ 1580.836920][T12931] r4:00138f58 [ 1592.053212][T12937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1592.057778][T12937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1593.691174][T12937] hsr_slave_0: entered promiscuous mode [ 1593.699287][T12937] hsr_slave_1: entered promiscuous mode [ 1593.700360][T12937] debugfs: 'hsr0' already exists in 'hsr' [ 1593.700409][T12937] Cannot create hsr debugfs directory [ 1594.240371][T12937] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1594.275752][T12937] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1594.278964][T12937] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1594.295787][T12937] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1594.307038][T12937] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1594.319185][T12937] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1594.330803][T12937] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1594.339319][T12937] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1595.751685][T12937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1597.063796][T12937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1597.769615][T13228] FAULT_INJECTION: forcing a failure. [ 1597.769615][T13228] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1597.769831][T13228] CPU: 0 UID: 0 PID: 13228 Comm: syz.0.2214 Tainted: G L syzkaller #0 PREEMPT [ 1597.769895][T13228] Tainted: [L]=SOFTLOCKUP [ 1597.769912][T13228] Hardware name: ARM-Versatile Express [ 1597.769933][T13228] Call trace: [ 1597.769972][T13228] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1597.770079][T13228] r7:60000013 r6:60000013 r5:82542818 r4:00000000 [ 1597.770096][T13228] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 1597.770149][T13228] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 1597.770224][T13228] r7:dfc95e38 r6:00000000 r5:85bc0000 r4:834f6880 [ 1597.770240][T13228] [<8021f5fc>] (dump_stack) from [<80a5fb40>] (should_fail_ex+0x1c0/0x220) [ 1597.770295][T13228] [<80a5f980>] (should_fail_ex) from [<80a5fbb4>] (should_fail+0x14/0x18) [ 1597.770351][T13228] r8:00000000 r7:dfc95e38 r6:00000004 r5:003562e0 r4:00000000 [ 1597.770404][T13228] [<80a5fba0>] (should_fail) from [<8035ad6c>] (get_futex_key+0xa4/0x4a8) [ 1597.770538][T13228] [<8035acc8>] (get_futex_key) from [<8036090c>] (futex_wait_setup+0x88/0x29c) [ 1597.770612][T13228] r10:b5003500 r9:b5403587 r8:b5003500 r7:003562e0 r6:003562e0 r5:85bc0000 [ 1597.770633][T13228] r4:7efffffc [ 1597.770647][T13228] [<80360884>] (futex_wait_setup) from [<80360ba4>] (__futex_wait+0x84/0x110) [ 1597.770716][T13228] r10:00000000 r9:00000000 r8:00000000 r7:00000002 r6:003562e0 r5:00000000 [ 1597.770735][T13228] r4:85bc0000 [ 1597.770748][T13228] [<80360b20>] (__futex_wait) from [<80360cb0>] (futex_wait+0x80/0x10c) [ 1597.770815][T13228] r9:00000000 r8:0000c350 r7:003562e0 r6:00000000 r5:00000000 r4:00000002 [ 1597.770831][T13228] [<80360c30>] (futex_wait) from [<8035c3d8>] (do_futex+0x1b4/0x1d0) [ 1597.770896][T13228] r10:000000f0 r9:00000000 r8:85bc0000 r7:00000000 r6:003562e0 r5:00000080 [ 1597.770999][T13228] r4:00000000 [ 1597.771018][T13228] [<8035c224>] (do_futex) from [<8035cc8c>] (sys_futex_time32+0x11c/0x1bc) [ 1597.771080][T13228] r4:00000000 [ 1597.771095][T13228] [<8035cb70>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1597.771148][T13228] Exception stack(0xdfc95fa8 to 0xdfc95ff0) [ 1597.771198][T13228] 5fa0: 00138f58 ffffffff 003562e0 00000080 00000000 00000000 [ 1597.771398][T13228] 5fc0: 00138f58 ffffffff 76fa07d4 000000f0 00340000 00000000 00000001 76fa00dc [ 1597.771426][T13228] 5fe0: 76f9ff38 76f9ff28 000220b8 00137bd0 [ 1597.771468][T13228] r9:85bc0000 r8:8020029c r7:000000f0 r6:76fa07d4 r5:ffffffff r4:00138f58 [ 1598.154222][T13234] FAULT_INJECTION: forcing a failure. [ 1598.154222][T13234] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1598.154399][T13234] CPU: 0 UID: 0 PID: 13234 Comm: syz.0.2216 Tainted: G L syzkaller #0 PREEMPT [ 1598.154464][T13234] Tainted: [L]=SOFTLOCKUP [ 1598.154481][T13234] Hardware name: ARM-Versatile Express [ 1598.154503][T13234] Call trace: [ 1598.154543][T13234] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1598.154648][T13234] r7:60000013 r6:60000013 r5:82542818 r4:00000000 [ 1598.154666][T13234] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 1598.154735][T13234] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 1598.154807][T13234] r7:dfc95df0 r6:00000000 r5:86443fc0 r4:834f6880 [ 1598.154823][T13234] [<8021f5fc>] (dump_stack) from [<80a5fb40>] (should_fail_ex+0x1c0/0x220) [ 1598.154885][T13234] [<80a5f980>] (should_fail_ex) from [<80a5fbb4>] (should_fail+0x14/0x18) [ 1598.154937][T13234] r8:00000001 r7:dfc95df0 r6:834f6880 r5:76fa0000 r4:00000010 [ 1598.154953][T13234] [<80a5fba0>] (should_fail) from [<8035adbc>] (get_futex_key+0xf4/0x4a8) [ 1598.155049][T13234] [<8035acc8>] (get_futex_key) from [<8035f928>] (futex_wake+0x70/0x25c) [ 1598.155122][T13234] r10:83ddaf40 r9:00000000 r8:dfc95de0 r7:ffffffff r6:76fa0628 r5:00000001 [ 1598.155143][T13234] r4:00000012 [ 1598.155157][T13234] [<8035f8b8>] (futex_wake) from [<8035c3b8>] (do_futex+0x194/0x1d0) [ 1598.155232][T13234] r10:83ddaf40 r9:00000001 r8:dfc95e98 r7:85b25e00 r6:00000000 r5:b5403587 [ 1598.155251][T13234] r4:00000001 [ 1598.155266][T13234] [<8035c224>] (do_futex) from [<8024e2f4>] (mm_exit_exec_release+0xcc/0xd0) [ 1598.155365][T13234] r4:86443fc0 [ 1598.155384][T13234] [<8024e228>] (mm_exit_exec_release) from [<80258b58>] (do_exit+0x1dc/0xad0) [ 1598.155442][T13234] r5:87418f00 r4:86443fc0 [ 1598.155457][T13234] [<8025897c>] (do_exit) from [<80259620>] (do_group_exit+0x40/0x8c) [ 1598.155512][T13234] r7:00137bcc [ 1598.155528][T13234] [<802595e0>] (do_group_exit) from [<8026a608>] (get_signal+0x994/0xaa8) [ 1598.155588][T13234] r7:00137bcc r4:86443fc0 [ 1598.155604][T13234] [<80269c74>] (get_signal) from [<8022b7cc>] (do_work_pending+0x228/0x4fc) [ 1598.155675][T13234] r10:000000f0 r9:00137bd0 r8:fffffe00 r7:00137bcc r6:00000001 r5:dfc95fb0 [ 1598.155705][T13234] r4:86443fc0 [ 1598.155720][T13234] [<8022b5a4>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 1598.155772][T13234] Exception stack(0xdfc95fb0 to 0xdfc95ff8) [ 1598.155809][T13234] 5fa0: 003562e0 00000080 00000000 00000000 [ 1598.155847][T13234] 5fc0: 00138f58 ffffffff 76fa07d4 000000f0 00340000 00000000 00000001 76fa00dc [ 1598.155877][T13234] 5fe0: 76f9ff38 76f9ff28 000220b8 00137bcc 60000010 003562e0 [ 1598.155912][T13234] r10:000000f0 r9:86443fc0 r8:8020029c r7:000000f0 r6:76fa07d4 r5:ffffffff [ 1598.155930][T13234] r4:00138f58 [ 1598.625567][ T29] audit: type=1400 audit(1818.899:547): avc: denied { cmd } for pid=13237 comm="iou-wrk-13238" path="socket:[22082]" dev="sockfs" ino=22082 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1601.482134][T12937] veth0_vlan: entered promiscuous mode [ 1601.514596][T12937] veth1_vlan: entered promiscuous mode [ 1601.622126][T12937] veth0_macvtap: entered promiscuous mode [ 1601.642677][T12937] veth1_macvtap: entered promiscuous mode [ 1601.784753][ T5996] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.786468][ T5996] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.786549][ T5996] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.786620][ T5996] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.668463][T13287] FAULT_INJECTION: forcing a failure. [ 1604.668463][T13287] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1604.668622][T13287] CPU: 0 UID: 0 PID: 13287 Comm: syz.0.2226 Tainted: G L syzkaller #0 PREEMPT [ 1604.668679][T13287] Tainted: [L]=SOFTLOCKUP [ 1604.668697][T13287] Hardware name: ARM-Versatile Express [ 1604.668720][T13287] Call trace: [ 1604.668760][T13287] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1604.668872][T13287] r7:60000013 r6:60000013 r5:82542818 r4:00000000 [ 1604.668892][T13287] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 1604.668945][T13287] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 1604.669002][T13287] r7:e0221df0 r6:00000000 r5:85bc0000 r4:834f6880 [ 1604.669017][T13287] [<8021f5fc>] (dump_stack) from [<80a5fb40>] (should_fail_ex+0x1c0/0x220) [ 1604.669098][T13287] [<80a5f980>] (should_fail_ex) from [<80a5fbb4>] (should_fail+0x14/0x18) [ 1604.669150][T13287] r8:00000001 r7:e0221df0 r6:834f6880 r5:76fa0000 r4:00000010 [ 1604.669164][T13287] [<80a5fba0>] (should_fail) from [<8035adbc>] (get_futex_key+0xf4/0x4a8) [ 1604.669213][T13287] [<8035acc8>] (get_futex_key) from [<8035f928>] (futex_wake+0x70/0x25c) [ 1604.669276][T13287] r10:8717af40 r9:00000000 r8:e0221de0 r7:ffffffff r6:76fa0628 r5:00000001 [ 1604.669293][T13287] r4:00000012 [ 1604.669305][T13287] [<8035f8b8>] (futex_wake) from [<8035c3b8>] (do_futex+0x194/0x1d0) [ 1604.669367][T13287] r10:8717af40 r9:00000001 r8:e0221e98 r7:85b17600 r6:00000000 r5:b5403587 [ 1604.669389][T13287] r4:00000001 [ 1604.669402][T13287] [<8035c224>] (do_futex) from [<8024e2f4>] (mm_exit_exec_release+0xcc/0xd0) [ 1604.669461][T13287] r4:85bc0000 [ 1604.669475][T13287] [<8024e228>] (mm_exit_exec_release) from [<80258b58>] (do_exit+0x1dc/0xad0) [ 1604.669529][T13287] r5:8550ed00 r4:85bc0000 [ 1604.669544][T13287] [<8025897c>] (do_exit) from [<80259620>] (do_group_exit+0x40/0x8c) [ 1604.669597][T13287] r7:00137bcc [ 1604.669614][T13287] [<802595e0>] (do_group_exit) from [<8026a608>] (get_signal+0x994/0xaa8) [ 1604.669674][T13287] r7:00137bcc r4:85bc0000 [ 1604.669690][T13287] [<80269c74>] (get_signal) from [<8022b7cc>] (do_work_pending+0x228/0x4fc) [ 1604.669751][T13287] r10:000000f0 r9:00137bd0 r8:fffffe00 r7:00137bcc r6:00000001 r5:e0221fb0 [ 1604.669768][T13287] r4:85bc0000 [ 1604.669781][T13287] [<8022b5a4>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 1604.669823][T13287] Exception stack(0xe0221fb0 to 0xe0221ff8) [ 1604.669855][T13287] 1fa0: 003562e0 00000080 00000000 00000000 [ 1604.669884][T13287] 1fc0: 00138f58 ffffffff 76fa07d4 000000f0 00340000 00000000 00000001 76fa00dc [ 1604.669912][T13287] 1fe0: 76f9ff38 76f9ff28 000220b8 00137bcc 60000010 003562e0 [ 1604.669948][T13287] r10:000000f0 r9:85bc0000 r8:8020029c r7:000000f0 r6:76fa07d4 r5:ffffffff [ 1604.669968][T13287] r4:00138f58 [ 1609.928979][T13310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2234'. [ 1610.590256][ T48] block nbd0: Wrong magic (0x30303030) [ 1610.592180][ T48] block nbd0: Wrong magic (0x30303035) [ 1611.201770][T13334] FAULT_INJECTION: forcing a failure. [ 1611.201770][T13334] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.201948][T13334] CPU: 1 UID: 0 PID: 13334 Comm: syz.4.2240 Tainted: G L syzkaller #0 PREEMPT [ 1611.202008][T13334] Tainted: [L]=SOFTLOCKUP [ 1611.202026][T13334] Hardware name: ARM-Versatile Express [ 1611.202048][T13334] Call trace: [ 1611.202097][T13334] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1611.202201][T13334] r7:60000013 r6:60000013 r5:82542818 r4:00000000 [ 1611.202218][T13334] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 1611.202260][T13334] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 1611.202306][T13334] r7:84e28000 r6:00000000 r5:84e28000 r4:83516624 [ 1611.202318][T13334] [<8021f5fc>] (dump_stack) from [<80a5fb40>] (should_fail_ex+0x1c0/0x220) [ 1611.202371][T13334] [<80a5f980>] (should_fail_ex) from [<8059bfc4>] (should_failslab+0x6c/0x94) [ 1611.202435][T13334] r8:00000000 r7:84e28000 r6:816e4a2c r5:00000cc0 r4:83cf5d80 [ 1611.202452][T13334] [<8059bf58>] (should_failslab) from [<80578908>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 1611.202505][T13334] [<805788ac>] (kmem_cache_alloc_noprof) from [<816e4a2c>] (skb_clone+0x60/0x1d0) [ 1611.202632][T13334] r10:00000002 r9:86fbac50 r8:87b92000 r7:87b92000 r6:88883b00 r5:87a4bcc0 [ 1611.202655][T13334] r4:00000cc0 [ 1611.202670][T13334] [<816e49cc>] (skb_clone) from [<81a79ca4>] (pfkey_process+0x4c/0x204) [ 1611.202745][T13334] r7:87b92000 r6:88883b00 r5:87a4bcc0 r4:e0039cbc [ 1611.202763][T13334] [<81a79c58>] (pfkey_process) from [<81a79f74>] (pfkey_sendmsg+0x118/0x2b8) [ 1611.202831][T13334] r10:00000002 r9:86fbac50 r8:87b92000 r7:88883b00 r6:00000018 r5:00000018 [ 1611.202851][T13334] r4:87a4bcc0 [ 1611.202865][T13334] [<81a79e5c>] (pfkey_sendmsg) from [<816cf360>] (__sock_sendmsg+0x44/0xb0) [ 1611.202939][T13334] r10:00040080 r9:00000000 r8:e0039dd4 r7:00000000 r6:862cf440 r5:e0039f28 [ 1611.202957][T13334] r4:00000000 [ 1611.202973][T13334] [<816cf31c>] (__sock_sendmsg) from [<816d0254>] (____sys_sendmsg+0x238/0x2fc) [ 1611.203036][T13334] r7:00000000 r6:00000000 r5:862cf440 r4:e0039f28 [ 1611.203052][T13334] [<816d001c>] (____sys_sendmsg) from [<816d068c>] (___sys_sendmsg+0x9c/0xd0) [ 1611.203131][T13334] r10:00000128 r9:20001cc0 r8:00040080 r7:00000000 r6:862cf440 r5:e0039f28 [ 1611.203151][T13334] r4:00000000 [ 1611.203166][T13334] [<816d05f0>] (___sys_sendmsg) from [<816d2b20>] (__sys_sendmsg+0x8c/0xe0) [ 1611.203236][T13334] r9:84e28000 r8:87b58c80 r7:00040080 r6:20001cc0 r5:87b58c81 r4:00000003 [ 1611.203254][T13334] [<816d2a94>] (__sys_sendmsg) from [<816d2b88>] (sys_sendmsg+0x14/0x18) [ 1611.203346][T13334] r8:8020029c r7:00000128 r6:00356310 r5:00000000 r4:00000000 [ 1611.203364][T13334] [<816d2b74>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1611.203413][T13334] Exception stack(0xe0039fa8 to 0xe0039ff0) [ 1611.203454][T13334] 9fa0: 00000000 00000000 00000003 20001cc0 00040080 00000000 [ 1611.203490][T13334] 9fc0: 00000000 00000000 00356310 00000128 003562d8 00000000 00000001 76f4e0dc [ 1611.203517][T13334] 9fe0: 76f4de88 76f4de78 00019290 00137bd0 [ 1614.734206][ T107] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.830890][ T107] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.937861][ T107] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.027065][ T107] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.423253][ T107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1615.438333][ T107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1615.451175][ T107] bond0 (unregistering): Released all slaves [ 1615.590084][ T107] hsr_slave_0: left promiscuous mode [ 1615.596596][ T107] hsr_slave_1: left promiscuous mode [ 1615.618090][ T107] veth1_macvtap: left promiscuous mode [ 1615.618289][ T107] veth0_macvtap: left promiscuous mode [ 1615.618544][ T107] veth1_vlan: left promiscuous mode [ 1615.618805][ T107] veth0_vlan: left promiscuous mode [ 1616.423248][T13393] fuse: Bad value for 'fd' [ 1616.831115][ T29] audit: type=1400 audit(1835.707:548): avc: denied { write } for pid=13394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1617.211210][ T29] audit: type=1400 audit(1836.057:549): avc: denied { write } for pid=13405 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1617.580342][ T2972] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1618.328183][T13424] FAULT_INJECTION: forcing a failure. [ 1618.328183][T13424] name failslab, interval 1, probability 0, space 0, times 0 [ 1618.328346][T13424] CPU: 0 UID: 0 PID: 13424 Comm: syz.0.2262 Tainted: G L syzkaller #0 PREEMPT [ 1618.328409][T13424] Tainted: [L]=SOFTLOCKUP [ 1618.328426][T13424] Hardware name: ARM-Versatile Express [ 1618.328447][T13424] Call trace: [ 1618.328485][T13424] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1618.328593][T13424] r7:60000013 r6:60000013 r5:82542818 r4:00000000 [ 1618.328612][T13424] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 1618.328664][T13424] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 1618.328735][T13424] r7:00000014 r6:00000000 r5:86443fc0 r4:83516624 [ 1618.328752][T13424] [<8021f5fc>] (dump_stack) from [<80a5fb40>] (should_fail_ex+0x1c0/0x220) [ 1618.328806][T13424] [<80a5f980>] (should_fail_ex) from [<8059bfc4>] (should_failslab+0x6c/0x94) [ 1618.328874][T13424] r8:86443fc0 r7:00000014 r6:80891d18 r5:00400dc0 r4:83c02000 [ 1618.328890][T13424] [<8059bf58>] (should_failslab) from [<8057a974>] (__kmalloc_cache_noprof+0x58/0x338) [ 1618.328944][T13424] [<8057a91c>] (__kmalloc_cache_noprof) from [<80891d18>] (landlock_create_object+0x44/0xa4) [ 1618.329012][T13424] r10:87e99900 r9:870515a0 r8:e0191f50 r7:870515a8 r6:00000000 r5:81ee1ec4 [ 1618.329032][T13424] r4:87e8af18 [ 1618.329047][T13424] [<80891cd4>] (landlock_create_object) from [<80895aec>] (landlock_append_fs_rule+0x1c0/0x3a8) [ 1618.329106][T13424] r7:870515a8 r6:87e8af18 r5:00000008 r4:00000000 [ 1618.329121][T13424] [<8089592c>] (landlock_append_fs_rule) from [<80891330>] (sys_landlock_add_rule+0x3ec/0x8a0) [ 1618.329194][T13424] r10:000001bd r9:86443fc0 r8:8020029c r7:87b58e80 r6:00000001 r5:00000000 [ 1618.329214][T13424] r4:87e99900 [ 1618.329228][T13424] [<80890f44>] (sys_landlock_add_rule) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1618.329279][T13424] Exception stack(0xe0191fa8 to 0xe0191ff0) [ 1618.329325][T13424] 1fa0: 00000000 00000000 00000004 00000001 20000180 00000000 [ 1618.329361][T13424] 1fc0: 00000000 00000000 00356314 000001bd 003562d8 00000000 00000001 76fa00dc [ 1618.329389][T13424] 1fe0: 76f9fe88 76f9fe78 00019290 00137bd0 [ 1618.329424][T13424] r10:000001bd r9:86443fc0 r8:8020029c r7:000001bd r6:00356314 r5:00000000 [ 1618.329441][T13424] r4:00000000 [ 1618.329959][ T29] audit: type=1400 audit(1837.082:550): avc: denied { write } for pid=13419 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1618.626133][ T29] audit: type=1400 audit(1837.359:551): avc: denied { write } for pid=13429 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1618.783881][ T2972] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1619.427727][ T29] audit: type=1400 audit(1838.097:552): avc: denied { write } for pid=13434 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1619.740543][ T29] audit: type=1400 audit(1838.383:553): avc: denied { write } for pid=13438 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1619.963537][ T2972] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1620.140479][ T29] audit: type=1400 audit(1838.753:554): avc: denied { create } for pid=13446 comm="syz.4.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1620.682286][ T29] audit: type=1400 audit(1839.251:555): avc: denied { write } for pid=13450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1620.902297][ T29] audit: type=1400 audit(1839.454:556): avc: denied { write } for pid=13453 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1621.124157][ T2972] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1625.424910][ T29] audit: type=1326 audit(1843.635:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.0.2272" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x137bd0 code=0x7ffc0000 [ 1625.434498][ T29] audit: type=1326 audit(1843.645:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.0.2272" exe="/syz-executor" sig=0 arch=40000028 syscall=175 compat=0 ip=0x137bd0 code=0x7ffc0000 [ 1625.434709][ T29] audit: type=1326 audit(1843.645:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.0.2272" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x137bd0 code=0x7ffc0000 [ 1625.438464][ T29] audit: type=1326 audit(1843.645:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.0.2272" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x137bd0 code=0x7ffc0000 [ 1634.363545][ T29] audit: type=1400 audit(1851.887:561): avc: denied { write } for pid=13491 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1634.926912][ T29] audit: type=1400 audit(1852.404:562): avc: denied { write } for pid=13494 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1635.743980][ T29] audit: type=1400 audit(1853.142:563): avc: denied { write } for pid=13497 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1636.166808][ T29] audit: type=1400 audit(1853.548:564): avc: denied { write } for pid=13500 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1636.654274][ T29] audit: type=1400 audit(1853.991:565): avc: denied { write } for pid=13505 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1636.836666][ T29] audit: type=1400 audit(1854.167:566): avc: denied { write } for pid=13508 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1637.137257][T13511] FAULT_INJECTION: forcing a failure. [ 1637.137257][T13511] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.137382][T13511] CPU: 1 UID: 0 PID: 13511 Comm: syz.4.2275 Tainted: G L syzkaller #0 PREEMPT [ 1637.137441][T13511] Tainted: [L]=SOFTLOCKUP [ 1637.137455][T13511] Hardware name: ARM-Versatile Express [ 1637.137477][T13511] Call trace: [ 1637.137511][T13511] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1637.137612][T13511] r7:60000013 r6:60000013 r5:82542818 r4:00000000 [ 1637.137628][T13511] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 1637.137679][T13511] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 1637.137742][T13511] r7:84e472c0 r6:00000000 r5:84e472c0 r4:83516624 [ 1637.137758][T13511] [<8021f5fc>] (dump_stack) from [<80a5fb40>] (should_fail_ex+0x1c0/0x220) [ 1637.137812][T13511] [<80a5f980>] (should_fail_ex) from [<8059bfc4>] (should_failslab+0x6c/0x94) [ 1637.137876][T13511] r8:00000000 r7:84e472c0 r6:8080ec08 r5:00000cc0 r4:83cf5c00 [ 1637.137892][T13511] [<8059bf58>] (should_failslab) from [<80578cec>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 1637.137942][T13511] [<80578c8c>] (kmem_cache_alloc_lru_noprof) from [<8080ec08>] (debugfs_alloc_inode+0x24/0x28) [ 1637.138012][T13511] r10:83571188 r9:87253c00 r8:888b6128 r7:825f4ee0 r6:81ed9ab4 r5:8442cc00 [ 1637.138032][T13511] r4:84258330 [ 1637.138045][T13511] [<8080ebe4>] (debugfs_alloc_inode) from [<80601d38>] (alloc_inode+0x24/0xd0) [ 1637.138098][T13511] [<80601d14>] (alloc_inode) from [<80601df4>] (new_inode+0x10/0x68) [ 1637.138155][T13511] r7:825f4ee0 r6:84e472c0 r5:00000000 r4:84258330 [ 1637.138170][T13511] [<80601de4>] (new_inode) from [<8080f8b4>] (debugfs_create_dir+0x60/0x1a4) [ 1637.138242][T13511] r9:87253c00 r8:888b6128 r7:825f4ee0 r6:84e472c0 r5:00000000 r4:84258330 [ 1637.138258][T13511] [<8080f854>] (debugfs_create_dir) from [<80a5f1c0>] (fault_create_debugfs_attr+0x2c/0x200) [ 1637.138322][T13511] r7:879a5d80 r6:825f4ee0 r5:00000000 r4:888b69ec [ 1637.138336][T13511] [<80a5f194>] (fault_create_debugfs_attr) from [<80d3a798>] (nvme_fault_inject_init+0x74/0x114) [ 1637.138404][T13511] r8:888b6128 r7:879a5d80 r6:85c8fee0 r5:00000000 r4:888b69ec [ 1637.138418][T13511] [<80d3a724>] (nvme_fault_inject_init) from [<80d29e78>] (nvme_add_ctrl+0xb4/0xc4) [ 1637.138476][T13511] r7:888b6090 r6:87253c00 r5:00000000 r4:888b6128 [ 1637.138491][T13511] [<80d29dc4>] (nvme_add_ctrl) from [<80d63368>] (nvme_loop_create_ctrl+0xa0/0x464) [ 1637.138542][T13511] r5:00000000 r4:888b6000 [ 1637.138557][T13511] [<80d632c8>] (nvme_loop_create_ctrl) from [<80d432ec>] (nvmf_dev_write+0x1b4/0x308) [ 1637.138621][T13511] r10:83571188 r9:87253c00 r8:85a85288 r7:fe2f8e4b r6:83572a4c r5:8736fa80 [ 1637.138639][T13511] r4:00000014 [ 1637.138653][T13511] [<80d43138>] (nvmf_dev_write) from [<805d7908>] (vfs_write+0xd4/0x42c) [ 1637.138721][T13511] r10:81f7dd1c r9:84e472c0 r8:80d43138 r7:df9c9f68 r6:20000440 r5:8732aa80 [ 1637.138739][T13511] r4:00000014 [ 1637.138753][T13511] [<805d7834>] (vfs_write) from [<805d7dd4>] (ksys_write+0x74/0xec) [ 1637.138819][T13511] r10:00000004 r9:84e472c0 r8:8020029c r7:00000000 r6:00000000 r5:8732aa80 [ 1637.138836][T13511] r4:8732aa81 [ 1637.138850][T13511] [<805d7d60>] (ksys_write) from [<805d7e5c>] (sys_write+0x10/0x14) [ 1637.138909][T13511] r7:00000004 r6:00356310 r5:00000000 r4:00000000 [ 1637.138923][T13511] [<805d7e4c>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1637.138968][T13511] Exception stack(0xdf9c9fa8 to 0xdf9c9ff0) [ 1637.139001][T13511] 9fa0: 00000000 00000000 00000004 20000440 00000014 00000000 [ 1637.139035][T13511] 9fc0: 00000000 00000000 00356310 00000004 003562d8 00000000 00000001 76f4e0dc [ 1637.139061][T13511] 9fe0: 76f4de88 76f4de78 00019290 00137bd0 [ 1637.139105][T13511] debugfs: out of free dentries, can not create directory 'fault_inject' [ 1637.139278][T13511] nvme0: failed to create debugfs attr [ 1637.157311][ T1304] nvmet: connect request for invalid subsystem n! [ 1637.166718][T13511] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n" [ 1637.569441][ T29] audit: type=1400 audit(1854.841:567): avc: denied { write } for pid=13514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1637.955451][ T29] audit: type=1400 audit(1855.191:568): avc: denied { write } for pid=13522 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1641.844181][T13561] device-mapper: table: 248:9: thin-pool: Error creating metadata object (-EIO) [ 1641.888547][T13561] device-mapper: ioctl: error adding target to table [ 1642.598897][ T29] audit: type=1400 audit(1859.483:569): avc: denied { read } for pid=13569 comm="syz.0.2290" path="socket:[23671]" dev="sockfs" ino=23671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1643.946889][ T29] audit: type=1400 audit(1860.729:570): avc: denied { execmem } for pid=13578 comm="syz.4.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1648.231565][T13587] md: array md0 already has disks! [ 1648.326474][T13587] md: could not open device unknown-block(1,1). [ 1648.326702][T13587] md: error, md_import_device() returned -16 [ 1648.656357][T13587] md/raid1:md0: active with 1 out of 2 mirrors [ 1648.657381][T13587] md0: detected capacity change from 0 to 4096 [ 1650.948738][T13593] cgroup: fork rejected by pids controller in /syz0 [ 1651.737156][T13633] vlan1: entered promiscuous mode [ 1651.737456][T13633] vlan1: entered allmulticast mode [ 1651.737488][T13633] veth0_vlan: entered allmulticast mode [ 1652.402918][T13643] FAULT_INJECTION: forcing a failure. [ 1652.402918][T13643] name failslab, interval 1, probability 0, space 0, times 0 [ 1652.403094][T13643] CPU: 0 UID: 0 PID: 13643 Comm: syz.0.2304 Tainted: G L syzkaller #0 PREEMPT [ 1652.403158][T13643] Tainted: [L]=SOFTLOCKUP [ 1652.403179][T13643] Hardware name: ARM-Versatile Express [ 1652.403201][T13643] Call trace: [ 1652.403240][T13643] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1652.403380][T13643] r7:60000013 r6:60000013 r5:82542818 r4:00000000 [ 1652.403400][T13643] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 1652.403456][T13643] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 1652.403526][T13643] r7:85bde600 r6:00000000 r5:85bde600 r4:83516624 [ 1652.403542][T13643] [<8021f5fc>] (dump_stack) from [<80a5fb40>] (should_fail_ex+0x1c0/0x220) [ 1652.403597][T13643] [<80a5f980>] (should_fail_ex) from [<8059bfc4>] (should_failslab+0x6c/0x94) [ 1652.403665][T13643] r8:00000000 r7:85bde600 r6:83c01240 r5:00000dc0 r4:00000018 [ 1652.403678][T13643] [<8059bf58>] (should_failslab) from [<805798dc>] (__kmalloc_noprof+0xa8/0x3c8) [ 1652.403730][T13643] [<80579834>] (__kmalloc_noprof) from [<8083cee4>] (lsm_blob_alloc+0x28/0x3c) [ 1652.403797][T13643] r10:83842654 r9:00000880 r8:844a6480 r7:00000dc0 r6:0000000a r5:86a3bb80 [ 1652.403816][T13643] r4:86a3bd84 [ 1652.403827][T13643] [<8083cebc>] (lsm_blob_alloc) from [<8084f134>] (security_sk_alloc+0x2c/0x21c) [ 1652.403879][T13643] r5:86a3bb80 r4:86a3bb80 [ 1652.403891][T13643] [<8084f108>] (security_sk_alloc) from [<816d35f0>] (sk_prot_alloc+0x70/0x108) [ 1652.403947][T13643] r7:0000000a r6:00000dc0 r5:835fd048 r4:86a3bb80 [ 1652.403962][T13643] [<816d3580>] (sk_prot_alloc) from [<816d6aa4>] (sk_alloc+0x30/0x308) [ 1652.404018][T13643] r9:0000000a r8:00000cc0 r7:00000001 r6:835fd048 r5:86fb9000 r4:835fd00c [ 1652.404033][T13643] [<816d6a74>] (sk_alloc) from [<819d7c48>] (inet6_create+0x100/0x400) [ 1652.404096][T13643] r9:86fb9000 r8:00000006 r7:85c996c0 r6:00000006 r5:835fd048 r4:835fd00c [ 1652.404114][T13643] [<819d7b48>] (inet6_create) from [<816ce34c>] (__sock_create+0xfc/0x22c) [ 1652.404180][T13643] r10:820a08ac r9:86fb9000 r8:85c996c0 r7:00000006 r6:819d7b48 r5:00000001 [ 1652.404197][T13643] r4:0000000a [ 1652.404209][T13643] [<816ce250>] (__sock_create) from [<816ce4e4>] (sock_create_kern+0x24/0x2c) [ 1652.404270][T13643] r10:0000000a r9:00000001 r8:00000000 r7:00000001 r6:86fb9000 r5:86171440 [ 1652.404287][T13643] r4:887e1080 [ 1652.404300][T13643] [<816ce4c0>] (sock_create_kern) from [<81b03c1c>] (smc_create+0xac/0x114) [ 1652.404348][T13643] [<81b03b70>] (smc_create) from [<816ce34c>] (__sock_create+0xfc/0x22c) [ 1652.404406][T13643] r10:820c53bc r9:86fb9000 r8:86171440 r7:00000001 r6:81b03b70 r5:00000001 [ 1652.404423][T13643] r4:0000002b [ 1652.404435][T13643] [<816ce250>] (__sock_create) from [<816d1350>] (__sys_socket+0x94/0x118) [ 1652.404496][T13643] r10:00000119 r9:85bde600 r8:8020029c r7:00000119 r6:85bde600 r5:0000002b [ 1652.404527][T13643] r4:00080801 [ 1652.404542][T13643] [<816d12bc>] (__sys_socket) from [<816d13e4>] (sys_socket+0x10/0x14) [ 1652.404599][T13643] r6:00356310 r5:00000000 r4:00000000 [ 1652.404613][T13643] [<816d13d4>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1652.404657][T13643] Exception stack(0xdfa4dfa8 to 0xdfa4dff0) [ 1652.404694][T13643] dfa0: 00000000 00000000 0000002b 00080801 00000001 00000000 [ 1652.404727][T13643] dfc0: 00000000 00000000 00356310 00000119 003562d8 00000000 00000001 76fa00dc [ 1652.404753][T13643] dfe0: 76f9fe88 76f9fe78 00019290 00137bd0 [ 1653.022586][ T29] audit: type=1400 audit(1869.101:571): avc: denied { write } for pid=13652 comm="syz.0.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1653.659520][T13663] tmpfs: Unsupported parameter 'huge' [ 1654.047356][ T29] audit: type=1400 audit(1870.052:572): avc: denied { view } for pid=13671 comm="syz.0.2318" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1657.266734][ T29] audit: type=1400 audit(1873.024:573): avc: denied { ioctl } for pid=13682 comm="syz.0.2323" path="socket:[23252]" dev="sockfs" ino=23252 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1659.318992][T13687] device-mapper: table: 248:10: raid: Cannot understand number of raid devices parameters (-EINVAL) [ 1659.319115][T13687] device-mapper: ioctl: error adding target to table [ 1660.989341][T10946] atkbd serio2: keyboard reset failed on [ 1665.112853][T13728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2341'. [ 1665.309803][T13731] FAULT_INJECTION: forcing a failure. [ 1665.309803][T13731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1665.309950][T13731] CPU: 1 UID: 0 PID: 13731 Comm: syz.4.2342 Tainted: G L syzkaller #0 PREEMPT [ 1665.310004][T13731] Tainted: [L]=SOFTLOCKUP [ 1665.310021][T13731] Hardware name: ARM-Versatile Express [ 1665.310044][T13731] Call trace: [ 1665.310079][T13731] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1665.310182][T13731] r7:60000013 r6:60000013 r5:82542818 r4:00000000 [ 1665.310199][T13731] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 1665.310249][T13731] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 1665.310305][T13731] r7:00000002 r6:00000000 r5:85bde600 r4:835552b8 [ 1665.310319][T13731] [<8021f5fc>] (dump_stack) from [<80a5fb40>] (should_fail_ex+0x1c0/0x220) [ 1665.310370][T13731] [<80a5f980>] (should_fail_ex) from [<80a5fbb4>] (should_fail+0x14/0x18) [ 1665.310420][T13731] r8:00000000 r7:00000002 r6:20000880 r5:86d09188 r4:00000002 [ 1665.310435][T13731] [<80a5fba0>] (should_fail) from [<80a5fbd4>] (should_fail_usercopy+0x1c/0x20) [ 1665.310478][T13731] [<80a5fbb8>] (should_fail_usercopy) from [<80431d48>] (bpf_verifier_vlog+0x204/0x434) [ 1665.310522][T13731] [<80431b44>] (bpf_verifier_vlog) from [<80470e64>] (__btf_verifier_log+0x34/0x58) [ 1665.310584][T13731] r10:0000000c r9:00000037 r8:81e1fbf4 r7:00000000 r6:88670e18 r5:86d09188 [ 1665.310601][T13731] r4:86d09000 [ 1665.310613][T13731] [<80470e30>] (__btf_verifier_log) from [<804734f8>] (__btf_verifier_log_type+0x114/0x1bc) [ 1665.310699][T13731] r3:85bde600 r2:00000000 r1:82694504 [ 1665.310720][T13731] [<804733e8>] (__btf_verifier_log_type) from [<8047447c>] (btf_datasec_check_meta+0x78/0x224) [ 1665.310789][T13731] r8:81e1fbf4 r7:00000000 r6:88670e18 r5:00000005 r4:88670e18 [ 1665.310810][T13731] [<80474404>] (btf_datasec_check_meta) from [<80471d50>] (btf_check_all_metas+0xec/0x2b4) [ 1665.310882][T13731] r10:88670e30 r9:00000037 r8:81e1fbf4 r7:86d09000 r6:00000000 r5:00000005 [ 1665.310903][T13731] r4:88670e18 [ 1665.310918][T13731] [<80471c64>] (btf_check_all_metas) from [<8047f30c>] (btf_new_fd+0x374/0x1070) [ 1665.310990][T13731] r10:00000000 r9:00000037 r8:86d09000 r7:8276076c r6:00000000 r5:86d09000 [ 1665.311011][T13731] r4:8767b180 [ 1665.311026][T13731] [<8047ef98>] (btf_new_fd) from [<803f4184>] (__sys_bpf+0x4a4/0x2204) [ 1665.311092][T13731] r10:85bde600 r9:00000028 r8:00000000 r7:00000028 r6:e42e1e60 r5:00000000 [ 1665.311155][T13731] r4:00000000 [ 1665.311217][T13731] [<803f3ce0>] (__sys_bpf) from [<803f6500>] (sys_bpf+0x50/0x6c) [ 1665.311297][T13731] r10:00000182 r9:85bde600 r8:8020029c r7:00000182 r6:00356310 r5:00000000 [ 1665.311346][T13731] r4:00000000 [ 1665.311363][T13731] [<803f64b0>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1665.311414][T13731] Exception stack(0xe42e1fa8 to 0xe42e1ff0) [ 1665.311454][T13731] 1fa0: 00000000 00000000 00000012 20000680 00000028 00000000 [ 1665.311489][T13731] 1fc0: 00000000 00000000 00356310 00000182 003562d8 00000000 00000001 76f4e0dc [ 1665.311516][T13731] 1fe0: 76f4de88 76f4de78 00019290 00137bd0 [ 1666.359711][ C1] vcan0: j1939_tp_rxtimer: 0x86514a00: rx timeout, send abort [ 1666.360657][ C1] vcan0: j1939_xtp_rx_abort_one: 0x86514a00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1668.348285][T13748] FAULT_INJECTION: forcing a failure. [ 1668.348285][T13748] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.348452][T13748] CPU: 1 UID: 0 PID: 13748 Comm: syz.4.2350 Tainted: G L syzkaller #0 PREEMPT [ 1668.348511][T13748] Tainted: [L]=SOFTLOCKUP [ 1668.348527][T13748] Hardware name: ARM-Versatile Express [ 1668.348550][T13748] Call trace: [ 1668.348587][T13748] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1668.348701][T13748] r7:60000013 r6:60000013 r5:82542818 r4:00000000 [ 1668.348720][T13748] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 1668.348771][T13748] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 1668.348830][T13748] r7:85bebfc0 r6:00000000 r5:85bebfc0 r4:83516624 [ 1668.348845][T13748] [<8021f5fc>] (dump_stack) from [<80a5fb40>] (should_fail_ex+0x1c0/0x220) [ 1668.348898][T13748] [<80a5f980>] (should_fail_ex) from [<8059bfc4>] (should_failslab+0x6c/0x94) [ 1668.348964][T13748] r8:00000000 r7:85bebfc0 r6:8039d470 r5:00000dc0 r4:83cf5900 [ 1668.348980][T13748] [<8059bf58>] (should_failslab) from [<80578908>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 1668.349033][T13748] [<805788ac>] (kmem_cache_alloc_noprof) from [<8039d470>] (taskstats_exit+0x260/0x398) [ 1668.349102][T13748] r10:00000000 r9:00000001 r8:00000000 r7:854f7000 r6:854f7000 r5:836d011c [ 1668.349121][T13748] r4:85bebfc0 [ 1668.349134][T13748] [<8039d210>] (taskstats_exit) from [<80258b3c>] (do_exit+0x1c0/0xad0) [ 1668.349199][T13748] r10:83ddf480 r9:00000001 r8:ea3d5e98 r7:854f7000 r6:00000000 r5:00000000 [ 1668.349246][T13748] r4:85bebfc0 [ 1668.349306][T13748] [<8025897c>] (do_exit) from [<80259620>] (do_group_exit+0x40/0x8c) [ 1668.349362][T13748] r7:00137bcc [ 1668.349376][T13748] [<802595e0>] (do_group_exit) from [<8026a608>] (get_signal+0x994/0xaa8) [ 1668.349433][T13748] r7:00137bcc r4:85bebfc0 [ 1668.349448][T13748] [<80269c74>] (get_signal) from [<8022b7cc>] (do_work_pending+0x228/0x4fc) [ 1668.349517][T13748] r10:000000f0 r9:00137bd0 r8:fffffe00 r7:00137bcc r6:00000001 r5:ea3d5fb0 [ 1668.349536][T13748] r4:85bebfc0 [ 1668.349550][T13748] [<8022b5a4>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 1668.349613][T13748] Exception stack(0xea3d5fb0 to 0xea3d5ff8) [ 1668.349651][T13748] 5fa0: 003562e0 00000080 00000000 00000000 [ 1668.349691][T13748] 5fc0: 00138f58 ffffffff 76f4e7d4 000000f0 00340000 00000000 00000001 76f4e0dc [ 1668.349724][T13748] 5fe0: 76f4df38 76f4df28 000220b8 00137bcc 60000010 003562e0 [ 1668.349760][T13748] r10:000000f0 r9:85bebfc0 r8:8020029c r7:000000f0 r6:76f4e7d4 r5:ffffffff [ 1668.349779][T13748] r4:00138f58 [ 1670.897931][ T29] audit: type=1800 audit(1885.595:574): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2349" name="/" dev="fuse" ino=4 res=0 errno=-4 [ 1672.745621][T13764] netlink: 'syz.4.2352': attribute type 10 has an invalid length. [ 1673.060654][T13766] FAULT_INJECTION: forcing a failure. [ 1673.060654][T13766] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1673.060763][T13766] CPU: 0 UID: 0 PID: 13766 Comm: syz.4.2355 Tainted: G L syzkaller #0 PREEMPT [ 1673.060823][T13766] Tainted: [L]=SOFTLOCKUP [ 1673.060839][T13766] Hardware name: ARM-Versatile Express [ 1673.060862][T13766] Call trace: [ 1673.060893][T13766] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1673.060963][T13766] r7:60000013 r6:60000013 r5:82542818 r4:00000000 [ 1673.060972][T13766] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 1673.060997][T13766] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 1673.061048][T13766] r7:ea5e9e38 r6:00000000 r5:83d89980 r4:834f6880 [ 1673.061064][T13766] [<8021f5fc>] (dump_stack) from [<80a5fb40>] (should_fail_ex+0x1c0/0x220) [ 1673.061114][T13766] [<80a5f980>] (should_fail_ex) from [<80a5fbb4>] (should_fail+0x14/0x18) [ 1673.061153][T13766] r8:00000000 r7:ea5e9e38 r6:00000004 r5:003562e0 r4:00000000 [ 1673.061160][T13766] [<80a5fba0>] (should_fail) from [<8035ad6c>] (get_futex_key+0xa4/0x4a8) [ 1673.061190][T13766] [<8035acc8>] (get_futex_key) from [<8036090c>] (futex_wait_setup+0x88/0x29c) [ 1673.061225][T13766] r10:b5003500 r9:b5403587 r8:b5003500 r7:003562e0 r6:003562e0 r5:83d89980 [ 1673.061245][T13766] r4:7efffffc [ 1673.061260][T13766] [<80360884>] (futex_wait_setup) from [<80360ba4>] (__futex_wait+0x84/0x110) [ 1673.061324][T13766] r10:00000000 r9:00000000 r8:00000000 r7:00000002 r6:003562e0 r5:00000000 [ 1673.061339][T13766] r4:83d89980 [ 1673.061346][T13766] [<80360b20>] (__futex_wait) from [<80360cb0>] (futex_wait+0x80/0x10c) [ 1673.061382][T13766] r9:00000000 r8:0000c350 r7:003562e0 r6:00000000 r5:00000000 r4:00000002 [ 1673.061389][T13766] [<80360c30>] (futex_wait) from [<8035c3d8>] (do_futex+0x1b4/0x1d0) [ 1673.061422][T13766] r10:000000f0 r9:00000000 r8:83d89980 r7:00000000 r6:003562e0 r5:00000080 [ 1673.061431][T13766] r4:00000000 [ 1673.061437][T13766] [<8035c224>] (do_futex) from [<8035cc8c>] (sys_futex_time32+0x11c/0x1bc) [ 1673.061463][T13766] r4:00000000 [ 1673.061469][T13766] [<8035cb70>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1673.061492][T13766] Exception stack(0xea5e9fa8 to 0xea5e9ff0) [ 1673.061514][T13766] 9fa0: 00138f58 ffffffff 003562e0 00000080 00000000 00000000 [ 1673.061538][T13766] 9fc0: 00138f58 ffffffff 76f4e7d4 000000f0 00340000 00000000 00000001 76f4e0dc [ 1673.061562][T13766] 9fe0: 76f4df38 76f4df28 000220b8 00137bd0 [ 1673.061615][T13766] r9:83d89980 r8:8020029c r7:000000f0 r6:76f4e7d4 r5:ffffffff r4:00138f58 [ 1676.668943][T13781] fuse: Bad value for 'group_id' [ 1676.669107][T13781] fuse: Bad value for 'group_id' [ 1680.022717][T13795] fuse: Bad value for 'group_id' [ 1680.022773][T13795] fuse: Bad value for 'group_id' [ 1680.188131][T13797] ERROR: Out of memory at tomoyo_memory_ok. [ 1680.188289][T13797] ERROR: Domain ' /sbin/init /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /syz-executor /syz-executor /newroot/534/file0' not defined. [ 1682.227017][ T29] audit: type=1400 audit(1896.062:575): avc: denied { write } for pid=13814 comm="syz.4.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1682.677567][ T29] audit: type=1400 audit(1896.477:576): avc: denied { write } for pid=13825 comm="syz.4.2378" name="functions" dev="configfs" ino=7129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1689.888713][T13858] FAULT_INJECTION: forcing a failure. [ 1689.888713][T13858] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1689.888890][T13858] CPU: 1 UID: 0 PID: 13858 Comm: syz.0.2391 Tainted: G L syzkaller #0 PREEMPT [ 1689.888946][T13858] Tainted: [L]=SOFTLOCKUP [ 1689.888962][T13858] Hardware name: ARM-Versatile Express [ 1689.888982][T13858] Call trace: [ 1689.889015][T13858] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1689.889115][T13858] r7:60000013 r6:60000013 r5:82542818 r4:00000000 [ 1689.889133][T13858] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 1689.889180][T13858] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 1689.889233][T13858] r7:dfa1ded8 r6:00000000 r5:85be0000 r4:834f6880 [ 1689.889247][T13858] [<8021f5fc>] (dump_stack) from [<80a5fb40>] (should_fail_ex+0x1c0/0x220) [ 1689.889296][T13858] [<80a5f980>] (should_fail_ex) from [<80a5fbb4>] (should_fail+0x14/0x18) [ 1689.889348][T13858] r8:00000000 r7:dfa1ded8 r6:00000004 r5:003562e4 r4:00000000 [ 1689.889363][T13858] [<80a5fba0>] (should_fail) from [<8035ad6c>] (get_futex_key+0xa4/0x4a8) [ 1689.889409][T13858] [<8035acc8>] (get_futex_key) from [<8035f928>] (futex_wake+0x70/0x25c) [ 1689.889477][T13858] r10:000000f0 r9:00138f58 r8:dfa1dec8 r7:ffffffff r6:003562e4 r5:000f4240 [ 1689.889494][T13858] r4:00000002 [ 1689.889514][T13858] [<8035f8b8>] (futex_wake) from [<8035c3b8>] (do_futex+0x194/0x1d0) [ 1689.889610][T13858] r10:000000f0 r9:00000001 r8:85be0000 r7:000f4240 r6:003562e4 r5:00000081 [ 1689.889637][T13858] r4:000f4240 [ 1689.889649][T13858] [<8035c224>] (do_futex) from [<8035cc8c>] (sys_futex_time32+0x11c/0x1bc) [ 1689.889704][T13858] r4:00000000 [ 1689.889717][T13858] [<8035cb70>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1689.889774][T13858] Exception stack(0xdfa1dfa8 to 0xdfa1dff0) [ 1689.889813][T13858] dfa0: 00138f58 ffffffff 003562e4 00000081 000f4240 00000000 [ 1689.889845][T13858] dfc0: 00138f58 ffffffff 76fa07d4 000000f0 00340000 00000000 00000001 76fa00dc [ 1689.889871][T13858] dfe0: 76f9ff38 76f9ff28 0002215c 00137bd0 [ 1689.889905][T13858] r9:85be0000 r8:8020029c r7:000000f0 r6:76fa07d4 r5:ffffffff r4:00138f58 [ 1691.023474][T13862] md: could not open device unknown-block(1,1). [ 1691.025743][T13862] md: md_import_device returned -16 [ 1695.321558][T13876] fuse: Unknown parameter 'grou00000000000000000000' [ 1695.332327][T13874] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1695.332624][T13874] block device autoloading is deprecated and will be removed. [ 1695.424696][T13874] md: invalid raid superblock magic on ram9 [ 1695.424918][T13874] md: ram9 does not have a valid v0.0 superblock, not importing! [ 1695.425077][T13874] md: md_import_device returned -22 [ 1696.165285][T13891] fuse: Bad value for 'fd' [ 1696.617472][T13899] FAULT_INJECTION: forcing a failure. [ 1696.617472][T13899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1696.617609][T13899] CPU: 1 UID: 0 PID: 13899 Comm: syz.4.2408 Tainted: G L syzkaller #0 PREEMPT [ 1696.617671][T13899] Tainted: [L]=SOFTLOCKUP [ 1696.617691][T13899] Hardware name: ARM-Versatile Express [ 1696.617712][T13899] Call trace: [ 1696.617749][T13899] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1696.617853][T13899] r7:60000013 r6:60000013 r5:82542818 r4:00000000 [ 1696.617869][T13899] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 1696.617920][T13899] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 1696.617983][T13899] r7:00000002 r6:00000000 r5:83fbcc80 r4:835552b8 [ 1696.618001][T13899] [<8021f5fc>] (dump_stack) from [<80a5fb40>] (should_fail_ex+0x1c0/0x220) [ 1696.618059][T13899] [<80a5f980>] (should_fail_ex) from [<80a5fbb4>] (should_fail+0x14/0x18) [ 1696.618116][T13899] r8:00000002 r7:00000002 r6:86d081a8 r5:86d08188 r4:00000002 [ 1696.618133][T13899] [<80a5fba0>] (should_fail) from [<80a5fbd4>] (should_fail_usercopy+0x1c/0x20) [ 1696.618180][T13899] [<80a5fbb8>] (should_fail_usercopy) from [<80431ca8>] (bpf_verifier_vlog+0x164/0x434) [ 1696.618229][T13899] [<80431b44>] (bpf_verifier_vlog) from [<80470e64>] (__btf_verifier_log+0x34/0x58) [ 1696.618292][T13899] r10:00000000 r9:00000036 r8:81e1fbf4 r7:82541724 r6:872a4018 r5:86d08188 [ 1696.618309][T13899] r4:86d08000 [ 1696.618324][T13899] [<80470e30>] (__btf_verifier_log) from [<80473584>] (__btf_verifier_log_type+0x1a0/0x1bc) [ 1696.618388][T13899] r3:00000049 r2:00000000 r1:8256b870 [ 1696.618409][T13899] [<804733e8>] (__btf_verifier_log_type) from [<804745e4>] (btf_datasec_check_meta+0x1e0/0x224) [ 1696.618479][T13899] r8:81e1fbf4 r7:00000000 r6:872a4018 r5:00000001 r4:872a4018 [ 1696.618499][T13899] [<80474404>] (btf_datasec_check_meta) from [<80471d50>] (btf_check_all_metas+0xec/0x2b4) [ 1696.618568][T13899] r10:872a4034 r9:00000036 r8:81e1fbf4 r7:86d08000 r6:00000000 r5:00000001 [ 1696.618585][T13899] r4:872a4018 [ 1696.618598][T13899] [<80471c64>] (btf_check_all_metas) from [<8047f30c>] (btf_new_fd+0x374/0x1070) [ 1696.618671][T13899] r10:00000000 r9:00000036 r8:86d08000 r7:8276076c r6:00000000 r5:86d08000 [ 1696.618689][T13899] r4:8856cf00 [ 1696.618705][T13899] [<8047ef98>] (btf_new_fd) from [<803f4184>] (__sys_bpf+0x4a4/0x2204) [ 1696.618768][T13899] r10:83fbcc80 r9:00000028 r8:00000000 r7:00000028 r6:dfb29e60 r5:00000000 [ 1696.618785][T13899] r4:00000000 [ 1696.618800][T13899] [<803f3ce0>] (__sys_bpf) from [<803f6500>] (sys_bpf+0x50/0x6c) [ 1696.618864][T13899] r10:00000182 r9:83fbcc80 r8:8020029c r7:00000182 r6:00356310 r5:00000000 [ 1696.618882][T13899] r4:00000000 [ 1696.618899][T13899] [<803f64b0>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1696.618949][T13899] Exception stack(0xdfb29fa8 to 0xdfb29ff0) [ 1696.618989][T13899] 9fa0: 00000000 00000000 00000012 20001b40 00000028 00000000 [ 1696.619024][T13899] 9fc0: 00000000 00000000 00356310 00000182 003562d8 00000000 00000001 76f4e0dc [ 1696.619052][T13899] 9fe0: 76f4de88 76f4de78 00019290 00137bd0 [ 1697.509178][T13908] fuse: Bad value for 'fd' [ 1698.755202][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2415'. [ 1705.310931][T13930] netlink: 'syz.4.2417': attribute type 4 has an invalid length. [ 1705.886172][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1706.323845][ T29] audit: type=1400 audit(1918.306:577): avc: denied { setopt } for pid=13931 comm="syz.4.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1710.145219][T13942] fuse: Bad value for 'user_id' [ 1710.145369][T13942] fuse: Bad value for 'user_id' [ 1713.846135][T13955] fuse: Bad value for 'fd' [ 1714.562022][T13964] Q-> 0) C: SABM(P) [ 1714.562870][ T7438] --> 0) C: SABM(P) [ 1714.563510][ T7438] 03 3f 01 1c .?.. [ 1714.672430][ C0] Q-> 0) C: DISC(P) [ 1714.962136][T14095] fuse: Bad value for 'fd' [ 1715.550878][ T7508] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1715.742190][T14108] fuse: Bad value for 'fd' [ 1715.865569][ T29] audit: type=1400 audit(1927.111:578): avc: denied { write } for pid=14109 comm="syz.0.2439" name="functions" dev="configfs" ino=7129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1716.043200][T14113] md: couldn't update array info. -22 [ 1716.083749][T14113] md: could not open device unknown-block(1,1). [ 1716.083937][T14113] md: md_import_device returned -16 [ 1716.342447][T14119] fuse: Bad value for 'fd' [ 1716.374247][T10946] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1716.666226][T14124] md: couldn't update array info. -22 [ 1716.710846][T14124] md: could not open device unknown-block(1,1). [ 1716.710955][T14124] md: md_import_device returned -16 [ 1717.317406][T14133] fuse: Bad value for 'fd' [ 1717.904268][T14147] fuse: Bad value for 'fd' [ 1718.567750][T14163] fuse: Invalid rootmode [ 1719.060692][T14171] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1719.086248][T14171] rtrs_client L2106: : Failed to resolve address, err: -ENODEV [ 1719.086661][T14171] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 1719.379868][T14175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1719.380718][T14175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1719.797621][T14180] fuse: Invalid rootmode [ 1725.907359][ C1] net_ratelimit: 5 callbacks suppressed [ 1728.779665][T14210] nvme nvme0: failed to connect socket: -101 [ 1729.009469][T14221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1729.010917][T14221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1729.541231][T14232] lo: entered promiscuous mode [ 1729.542366][T14232] tunl0: entered promiscuous mode [ 1729.573970][T14232] gre0: entered promiscuous mode [ 1729.617271][T14232] gretap0: entered promiscuous mode [ 1729.642363][T14232] erspan0: entered promiscuous mode [ 1729.674753][T14232] ip_vti0: entered promiscuous mode [ 1729.692147][T14232] ip6_vti0: entered promiscuous mode [ 1729.695964][T14232] sit0: entered promiscuous mode [ 1729.745504][T14232] ip6tnl0: entered promiscuous mode [ 1729.747795][T14232] ip6gre0: entered promiscuous mode [ 1729.764852][T14232] syz_tun: entered promiscuous mode [ 1729.780729][T14232] ip6gretap0: entered promiscuous mode [ 1729.822557][T14232] bond0: entered promiscuous mode [ 1729.822771][T14232] bond_slave_0: entered promiscuous mode [ 1729.823250][T14232] bond_slave_1: entered promiscuous mode [ 1729.849886][T14232] dummy0: entered promiscuous mode [ 1729.875189][T14232] nlmon0: entered promiscuous mode [ 1729.890404][T14232] vxcan0: entered promiscuous mode [ 1729.910196][T14232] vxcan1: entered promiscuous mode [ 1729.921224][T14232] veth0: entered promiscuous mode [ 1729.942920][T14232] veth1: entered promiscuous mode [ 1729.966040][T14232] wg0: entered promiscuous mode [ 1729.983681][T14232] wg1: entered promiscuous mode [ 1730.005634][T14232] wg2: entered promiscuous mode [ 1730.041272][T14232] veth0_to_bridge: entered promiscuous mode [ 1730.068898][T14232] bridge_slave_0: entered promiscuous mode [ 1730.070604][T14232] veth1_to_bridge: entered promiscuous mode [ 1730.072740][T14232] bridge_slave_1: entered promiscuous mode [ 1730.074202][T14232] veth0_to_bond: entered promiscuous mode [ 1730.077856][T14232] veth1_to_bond: entered promiscuous mode [ 1730.090910][T14232] veth0_to_team: entered promiscuous mode [ 1730.092785][T14232] team_slave_0: entered promiscuous mode [ 1730.093871][T14232] veth1_to_team: entered promiscuous mode [ 1730.096255][T14232] team_slave_1: entered promiscuous mode [ 1730.096527][T14232] veth0_to_batadv: entered promiscuous mode [ 1730.098860][T14232] batadv_slave_0: entered promiscuous mode [ 1730.105881][T14232] veth1_to_batadv: entered promiscuous mode [ 1730.108643][T14232] batadv_slave_1: entered promiscuous mode [ 1730.113493][T14232] xfrm0: entered promiscuous mode [ 1730.115699][T14232] veth0_to_hsr: entered promiscuous mode [ 1730.121273][T14232] veth1_to_hsr: entered promiscuous mode [ 1730.129328][T14232] hsr0: entered promiscuous mode [ 1730.131842][T14232] veth1_virt_wifi: entered promiscuous mode [ 1730.144589][T14232] veth0_virt_wifi: entered promiscuous mode [ 1730.155377][T14232] vlan0: entered promiscuous mode [ 1730.158895][T14232] vlan1: entered promiscuous mode [ 1730.162719][T14232] macvlan0: entered promiscuous mode [ 1730.168318][T14232] macvlan1: entered promiscuous mode [ 1730.170591][T14232] ipvtap0: entered promiscuous mode [ 1730.174524][T14232] ipvlan0: entered promiscuous mode [ 1730.179805][T14232] ipvlan1: entered promiscuous mode [ 1730.199453][T14232] macvtap0: entered promiscuous mode [ 1730.204975][T14232] macsec0: entered promiscuous mode [ 1730.211852][T14232] geneve0: entered promiscuous mode [ 1730.217182][T14232] geneve1: entered promiscuous mode [ 1730.227712][T14232] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1730.234718][T14232] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1730.239728][T14232] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 1730.246448][T14232] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 1730.252496][ T5969] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.252697][ T5969] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.252767][ T5969] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.252827][ T5969] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.527508][T14243] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1730.971935][T14243] md/raid:md4: not clean -- starting background reconstruction [ 1730.972391][T14243] md/raid:md4: layout 65538 not supported [ 1730.972572][T14243] md: pers->run() failed ... [ 1731.542227][ T1304] net_ratelimit: 35 callbacks suppressed [ 1732.173376][T14279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2491'. [ 1732.173555][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2491'. [ 1733.950762][T14375] device-mapper: table: 248:11: integrity: Device lookup failed (-EBUSY) [ 1733.950875][T14375] device-mapper: ioctl: error adding target to table [ 1734.447232][T14384] md: array md4 already has disks! [ 1734.662560][T14384] md/raid:md4: not clean -- starting background reconstruction [ 1734.662702][T14384] md/raid:md4: layout 65538 not supported [ 1734.662739][T14384] md: pers->run() failed ... [ 1734.698974][T14235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1734.708478][T14235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1736.859486][T14235] hsr_slave_0: entered promiscuous mode [ 1736.881504][T14235] hsr_slave_1: entered promiscuous mode [ 1736.894050][T14235] debugfs: 'hsr0' already exists in 'hsr' [ 1736.894142][T14235] Cannot create hsr debugfs directory [ 1737.088359][ C1] net_ratelimit: 40 callbacks suppressed [ 1737.223337][T14488] md: array md4 already has disks! [ 1737.273423][T14488] md: could not open device unknown-block(1,9). [ 1737.273611][T14488] md: error, md_import_device() returned -16 [ 1737.450671][T14488] md/raid:md4: not clean -- starting background reconstruction [ 1737.450785][T14488] md/raid:md4: layout 65538 not supported [ 1737.450824][T14488] md: pers->run() failed ... [ 1737.831481][T14235] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1737.831546][T14235] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1737.898755][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2504'. [ 1737.898948][T14553] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2504'. [ 1737.967187][ T1304] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1737.967720][ T1304] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1737.967832][ T1304] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1737.967897][ T1304] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1738.057206][T14235] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1738.057274][T14235] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.197047][T14235] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1738.197110][T14235] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.311190][T14235] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1738.311251][T14235] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.655554][T14235] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1738.694814][T14235] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1738.698019][T14235] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1738.737314][T14235] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1738.741160][T14235] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1738.779977][T14235] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1738.782276][T14235] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1738.813043][T14235] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1739.848582][T14235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1741.308690][T14604] comedi: valid board names for 8255 driver are: [ 1741.308800][T14604] 8255 [ 1741.308821][T14604] comedi: valid board names for vmk80xx driver are: [ 1741.308839][T14604] vmk80xx [ 1741.308853][T14604] comedi: valid board names for usbduxsigma driver are: [ 1741.308870][T14604] usbduxsigma [ 1741.308885][T14604] comedi: valid board names for usbduxfast driver are: [ 1741.308900][T14604] usbduxfast [ 1741.308914][T14604] comedi: valid board names for usbdux driver are: [ 1741.308929][T14604] usbdux [ 1741.308943][T14604] comedi: valid board names for ni6501 driver are: [ 1741.308960][T14604] ni6501 [ 1741.308973][T14604] comedi: valid board names for dt9812 driver are: [ 1741.308988][T14604] dt9812 [ 1741.309001][T14604] comedi: valid board names for ni_labpc_cs driver are: [ 1741.309014][T14604] ni_labpc_cs [ 1741.309035][T14604] comedi: valid board names for ni_daq_700 driver are: [ 1741.309051][T14604] ni_daq_700 [ 1741.309063][T14604] comedi: valid board names for labpc_pci driver are: [ 1741.309077][T14604] labpc_pci [ 1741.309089][T14604] comedi: valid board names for adl_pci9118 driver are: [ 1741.309105][T14604] pci9118dg [ 1741.309119][T14604] pci9118hg [ 1741.309133][T14604] pci9118hr [ 1741.309150][T14604] comedi: valid board names for 8255_pci driver are: [ 1741.309167][T14604] 8255_pci [ 1741.309183][T14604] comedi: valid board names for comedi_parport driver are: [ 1741.309200][T14604] comedi_parport [ 1741.309215][T14604] comedi: valid board names for comedi_test driver are: [ 1741.309231][T14604] comedi_test [ 1741.309244][T14604] comedi: valid board names for comedi_bond driver are: [ 1741.309259][T14604] comedi_bond [ 1742.358626][T14608] FAULT_INJECTION: forcing a failure. [ 1742.358626][T14608] name failslab, interval 1, probability 5, space 0, times 0 [ 1742.358797][T14608] CPU: 1 UID: 0 PID: 14608 Comm: syz.4.2507 Tainted: G L syzkaller #0 PREEMPT [ 1742.358856][T14608] Tainted: [L]=SOFTLOCKUP [ 1742.358871][T14608] Hardware name: ARM-Versatile Express [ 1742.358892][T14608] Call trace: [ 1742.358930][T14608] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1742.359031][T14608] r7:600d0093 r6:600d0093 r5:82542818 r4:00000000 [ 1742.359050][T14608] [<80201ae4>] (show_stack) from [<8021f5e8>] (dump_stack_lvl+0x5c/0x70) [ 1742.359103][T14608] [<8021f58c>] (dump_stack_lvl) from [<8021f614>] (dump_stack+0x18/0x1c) [ 1742.359164][T14608] r7:85542640 r6:00000000 r5:85542640 r4:83516624 [ 1742.359180][T14608] [<8021f5fc>] (dump_stack) from [<80a5fb40>] (should_fail_ex+0x1c0/0x220) [ 1742.359232][T14608] [<80a5f980>] (should_fail_ex) from [<8059bfc4>] (should_failslab+0x6c/0x94) [ 1742.359296][T14608] r8:00000000 r7:85542640 r6:8026632c r5:00000820 r4:83cf5240 [ 1742.359342][T14608] [<8059bf58>] (should_failslab) from [<80578908>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 1742.359394][T14608] [<805788ac>] (kmem_cache_alloc_noprof) from [<8026632c>] (__send_signal_locked+0x8c/0x510) [ 1742.359456][T14608] r10:00000000 r9:84c0db28 r8:00000010 r7:8341fc20 r6:00000001 r5:00000011 [ 1742.359473][T14608] r4:84572640 [ 1742.359485][T14608] [<802662a0>] (__send_signal_locked) from [<802675b0>] (do_notify_parent+0x260/0x384) [ 1742.359541][T14608] r10:ffffffff r9:871e1500 r8:00000000 r7:854e4000 r6:00000011 r5:600d0093 [ 1742.359559][T14608] r4:86430cc0 [ 1742.359572][T14608] [<80267350>] (do_notify_parent) from [<80257b54>] (release_task+0x5ac/0x6a4) [ 1742.359633][T14608] r8:871e1500 r7:85542640 r6:00000000 r5:83688d68 r4:86430cc0 [ 1742.359653][T14608] [<802575a8>] (release_task) from [<80258fe4>] (do_exit+0x668/0xad0) [ 1742.359721][T14608] r10:85542d34 r9:00000000 r8:ea485e98 r7:85542640 r6:ea485788 r5:ea485788 [ 1742.359742][T14608] r4:85542640 [ 1742.359756][T14608] [<8025897c>] (do_exit) from [<80259620>] (do_group_exit+0x40/0x8c) [ 1742.359805][T14608] r7:00137bcc [ 1742.359821][T14608] [<802595e0>] (do_group_exit) from [<8026a608>] (get_signal+0x994/0xaa8) [ 1742.359873][T14608] r7:00137bcc r4:85542640 [ 1742.359887][T14608] [<80269c74>] (get_signal) from [<8022b7cc>] (do_work_pending+0x228/0x4fc) [ 1742.359955][T14608] r10:000000f0 r9:00137bd0 r8:fffffe00 r7:00137bcc r6:00000001 r5:ea485fb0 [ 1742.359976][T14608] r4:85542640 [ 1742.359989][T14608] [<8022b5a4>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 1742.360032][T14608] Exception stack(0xea485fb0 to 0xea485ff8) [ 1742.360067][T14608] 5fa0: 003562e0 00000080 00000000 00000000 [ 1742.360100][T14608] 5fc0: 00138f58 ffffffff 76f4e7d4 000000f0 00340000 00000000 00000001 76f4e0dc [ 1742.360151][T14608] 5fe0: 76f4df38 76f4df28 000220b8 00137bcc 60000010 003562e0 [ 1742.360196][T14608] r10:000000f0 r9:85542640 r8:8020029c r7:000000f0 r6:76f4e7d4 r5:ffffffff [ 1742.360216][T14608] r4:00138f58 [ 1742.522570][T14617] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2508'. [ 1742.647916][T14197] net_ratelimit: 12 callbacks suppressed [ 1742.696033][T14623] 8<--- cut here --- [ 1742.696107][T14623] Unable to handle kernel paging request at virtual address fee01d03 when write [ 1742.696170][T14623] [fee01d03] *pgd=80000080007003, *pmd=00000000 [ 1742.696876][T14623] Internal error: Oops: a06 [#1] SMP ARM [ 1742.699083][ C0] virtqueue callback for 83f9f300 (80e63020) [ 1742.699226][T14623] Modules linked in: [ 1742.699292][ C0] virtqueue interrupt with no work for 83f9f240 [ 1742.699362][ C0] virtqueue interrupt with no work for 83f9f180 [ 1742.699705][ C0] No more buffers in queue [ 1742.699825][ C0] Receiving skb proto 0x0800 len 76 type 0 [ 1742.699908][ C0] No more buffers in queue [ 1742.700455][T14623] [ 1742.700854][T14623] CPU: 1 UID: 0 PID: 14623 Comm: syz.4.2509 Tainted: G L syzkaller #0 PREEMPT [ 1742.701189][T14623] Tainted: [L]=SOFTLOCKUP [ 1742.701341][T14623] Hardware name: ARM-Versatile Express [ 1742.701400][ C0] eth0: xmit 873ece40 52:55:0a:00:02:02 [ 1742.701532][ C0] Added buffer head 31 to 83f9f240 [ 1742.701969][ C0] virtqueue interrupt with no work for 83f9f300 [ 1742.702008][ C0] virtqueue callback for 83f9f240 (80e65394) [ 1742.702052][ C0] virtqueue interrupt with no work for 83f9f180 [ 1742.702137][ C0] Sent skb 873ece40 [ 1742.702187][ C0] No more buffers in queue [ 1742.704732][T14623] PC is at subdev_8255_io+0x60/0x6c [ 1742.705087][T14623] LR is at subdev_8255_io+0x4c/0x6c [ 1742.705334][T14623] pc : [<8155aee8>] lr : [<8155aed4>] psr: 60000013 [ 1742.705647][T14623] sp : ea485cc0 ip : ea485cc0 fp : ea485cdc [ 1742.706023][T14623] r10: 00001d00 r9 : 00000004 r8 : ea485dac [ 1742.706341][T14623] r7 : 00000000 r6 : 0000009b r5 : 83f9e6c0 r4 : 00001d03 [ 1742.706641][T14623] r3 : 0000009b r2 : fee01d03 r1 : 00000001 r0 : 83f9e6c0 [ 1742.707024][T14623] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 1742.707384][T14623] Control: 30c5387d Table: 86c6aa80 DAC: 00000000 [ 1742.707736][T14623] Register r0 information: slab kmalloc-192 start 83f9e6c0 pointer offset 0 size 192 [ 1742.708992][T14623] Register r1 information: non-paged memory [ 1742.709499][T14623] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 1742.710010][T14623] Register r3 information: non-paged memory [ 1742.710251][T14623] Register r4 information: non-paged memory [ 1742.710455][T14623] Register r5 information: slab kmalloc-192 start 83f9e6c0 pointer offset 0 size 192 [ 1742.720092][T14623] Register r6 information: non-paged memory [ 1742.720365][T14623] Register r7 information: NULL pointer [ 1742.720617][T14623] Register r8 information: 2-page vmalloc region starting at 0xea484000 allocated at kernel_clone+0xc4/0x440 [ 1742.721089][T14623] Register r9 information: non-paged memory [ 1742.721339][T14623] Register r10 information: non-paged memory [ 1742.721687][T14623] Register r11 information: 2-page vmalloc region starting at 0xea484000 allocated at kernel_clone+0xc4/0x440 [ 1742.722263][T14623] Register r12 information: 2-page vmalloc region starting at 0xea484000 allocated at kernel_clone+0xc4/0x440 [ 1742.722728][T14623] Process syz.4.2509 (pid: 14623, stack limit = 0xea484000) [ 1742.723028][T14623] Stack: (0xea485cc0 to 0xea486000) [ 1742.723325][T14623] 5cc0: 8155ae88 00001d00 83f9e6c0 00000000 ea485cfc ea485ce0 8155abc4 8155ae94 [ 1742.723625][T14623] 5ce0: 00001d00 80579840 888c9000 888c9000 ea485d1c ea485d00 8155af7c 8155ab78 [ 1742.723962][T14623] 5d00: 83f9e6c0 00000000 888c9000 00000000 ea485d5c ea485d20 8155b12c 8155af00 [ 1742.724266][T14623] 5d20: ffffffff 00000004 8341e380 00000000 00000000 835dfc28 83f9e6c0 00000000 [ 1742.724543][T14623] 5d40: ea485d98 83f9e6c0 00000000 83737400 ea485d94 ea485d60 81549b28 8155b0c4 [ 1742.724815][T14623] 5d60: 40946400 00000000 ea485d84 20000480 83f9e6c0 b5403587 40946400 86430cc0 [ 1742.725131][T14623] 5d80: 83f9e6f0 00000003 ea485e54 ea485d98 81545274 81549a2c 35353238 00000000 [ 1742.725483][T14623] 5da0: 00000000 00000000 00000000 00001d00 00000004 00000008 00000007 000003fe [ 1742.725765][T14623] 5dc0: 00000008 fffffffc 00000040 00000ffd 00007ffe 00000003 00000725 00000008 [ 1742.726081][T14623] 5de0: 00000002 00000013 00000040 fffbffab 00000009 0000034d 00000001 00001000 [ 1742.726404][T14623] 5e00: 00000009 00000000 00000204 00002a14 00000200 00000004 00000029 00000007 [ 1742.726734][T14623] 5e20: 0000000e 00000004 00000000 7ed317de 00000000 8732bc00 83f9e6c0 20000480 [ 1742.727094][T14623] 5e40: 40946400 86430cc0 ea485f14 ea485e58 81546580 815451b4 00000064 84f6d63c [ 1742.727466][T14623] 5e60: ea485ee4 ea485e70 8085eebc 80855228 00000064 00000001 00000000 ea485e90 [ 1742.727764][T14623] 5e80: 00000000 8445e110 840de6e8 40946400 0000000b 00000000 ea485e84 00000000 [ 1742.728048][T14623] 5ea0: 00000000 00000000 00000000 00000000 00000000 7ed317de 00000000 8732bc00 [ 1742.728349][T14623] 5ec0: 40946400 20000480 20000480 8732bc00 00000003 86430cc0 ea485ef4 ea485ee8 [ 1742.728662][T14623] 5ee0: 8085efec 7ed317de ea485f14 00000000 8732bc01 40946400 20000480 8732bc00 [ 1742.728985][T14623] 5f00: 00000003 86430cc0 ea485fa4 ea485f18 805f3f54 8154623c ecac8b10 86430cc0 [ 1742.729324][T14623] 5f20: ea485f3c ea485f30 81c11830 81c116fc ea485f54 ea485f40 8025bc8c 80291138 [ 1742.729661][T14623] 5f40: ea485fb0 40000000 ea485f84 ea485f58 80221c2c 8025bc44 00000000 8341a14c [ 1742.730007][T14623] 5f60: ea485fb0 00145e50 ecac8b10 80221b80 00000000 7ed317de ea485fac 00000000 [ 1742.730342][T14623] 5f80: 00000000 00356310 00000036 8020029c 86430cc0 00000036 00000000 ea485fa8 [ 1742.730645][T14623] 5fa0: 80200060 805f3d1c 00000000 00000000 00000003 40946400 20000480 00000000 [ 1742.730942][T14623] 5fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f4e0dc [ 1742.731219][T14623] 5fe0: 76f4de88 76f4de78 00019290 00137bd0 60000010 00000003 00000000 00000000 [ 1742.731559][T14623] Call trace: [ 1742.731853][T14623] [<8155ae88>] (subdev_8255_io) from [<8155abc4>] (subdev_8255_do_config+0x58/0x60) [ 1742.732483][T14623] r7:00000000 r6:83f9e6c0 r5:00001d00 r4:8155ae88 [ 1742.732868][T14623] [<8155ab6c>] (subdev_8255_do_config) from [<8155af7c>] (subdev_8255_io_init+0x88/0x98) [ 1742.733310][T14623] r4:888c9000 [ 1742.733447][T14623] [<8155aef4>] (subdev_8255_io_init) from [<8155b12c>] (dev_8255_attach+0x74/0x138) [ 1742.733786][T14623] r7:00000000 r6:888c9000 r5:00000000 r4:83f9e6c0 [ 1742.734020][T14623] [<8155b0b8>] (dev_8255_attach) from [<81549b28>] (comedi_device_attach+0x108/0x244) [ 1742.734410][T14623] r10:83737400 r9:00000000 r8:83f9e6c0 r7:ea485d98 r6:00000000 r5:83f9e6c0 [ 1742.734661][T14623] r4:835dfc28 [ 1742.735042][T14623] [<81549a20>] (comedi_device_attach) from [<81545274>] (do_devconfig_ioctl+0xcc/0x218) [ 1742.735670][T14623] r10:00000003 r9:83f9e6f0 r8:86430cc0 r7:40946400 r6:b5403587 r5:83f9e6c0 [ 1742.736064][T14623] r4:20000480 [ 1742.736328][T14623] [<815451a8>] (do_devconfig_ioctl) from [<81546580>] (comedi_unlocked_ioctl+0x350/0x1e90) [ 1742.736874][T14623] r8:86430cc0 r7:40946400 r6:20000480 r5:83f9e6c0 r4:8732bc00 [ 1742.737123][T14623] [<81546230>] (comedi_unlocked_ioctl) from [<805f3f54>] (sys_ioctl+0x244/0xb84) [ 1742.737546][T14623] r10:86430cc0 r9:00000003 r8:8732bc00 r7:20000480 r6:40946400 r5:8732bc01 [ 1742.737835][T14623] r4:00000000 [ 1742.737977][T14623] [<805f3d10>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1742.738266][T14623] Exception stack(0xea485fa8 to 0xea485ff0) [ 1742.738486][T14623] 5fa0: 00000000 00000000 00000003 40946400 20000480 00000000 [ 1742.738860][T14623] 5fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f4e0dc [ 1742.739267][T14623] 5fe0: 76f4de88 76f4de78 00019290 00137bd0 [ 1742.739565][T14623] r10:00000036 r9:86430cc0 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 1742.740015][T14623] r4:00000000 [ 1742.740451][T14623] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 1742.742491][T14623] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1742.779629][ T3112] eth0: xmit 873bf940 52:55:0a:00:02:02 [ 1742.779822][ T3112] Added buffer head 31 to 83f9f240 [ 1742.780207][ C0] virtqueue callback for 83f9f300 (80e63020) [ 1742.780273][ C0] virtqueue callback for 83f9f240 (80e65394) [ 1742.780311][ C0] virtqueue interrupt with no work for 83f9f180 [ 1742.780541][ C0] Sent skb 873bf940 [ 1742.780650][ C0] No more buffers in queue [ 1742.780748][ C0] Receiving skb proto 0x0800 len 46 type 0 [ 1742.780820][ C0] No more buffers in queue [ 1742.781087][ C0] No more buffers in queue [ 1742.781137][ C0] No more buffers in queue [ 1742.788096][T14623] Kernel panic - not syncing: Fatal exception [ 1742.794127][T14623] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:59:25 Registers: info registers vcpu 0 CPU#0 R00=00000001 R01=00000000 R02=00000000 R03=00000003 R04=200e0113 R05=00000000 R06=83fa9980 R07=dddd0580 R08=df801ea8 R09=00000101 R10=83fa9980 R11=df801ee4 R12=85647878 R13=df801e88 R14=00000000 R15=8030fed0 PSR=a00e0113 N-C- A S svc32 s00=65726874 s01=6c6f6873 d00=6c6f687365726874 s02=646c6f68 s03=2030353d d01=2030353d646c6f68 s04=7368205d s05=203a3072 d02=203a30727368205d s06=646e6f62 s07=74656e5f d03=74656e5f646e6f62 s08=5f766564 s09=6e657665 d04=6e6576655f766564 s10=65722074 s11=76696563 d05=7669656365722074 s12=4e206465 s13=45445445 d06=454454454e206465 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=8545bc40 R01=00000020 R02=eb143000 R03=eb143018 R04=84e2602a R05=8545bc40 R06=80b740b0 R07=84e2603c R08=00000000 R09=00000000 R10=0000586c R11=ea4858a4 R12=00000002 R13=ea485898 R14=8355ee54 R15=80b740c0 PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000