last executing test programs: 11m4.167593735s ago: executing program 0 (id=3306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x48c4}, 0x20000808) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x4080, 0x0) lstat(0x0, &(0x7f0000000600)) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000700)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000007c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000ac0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000b80), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000d40)='1', 0x1) 10m53.451165592s ago: executing program 0 (id=3308): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000d40)='syzkaller\x00', 0x2, 0xfffffffffffffe65, &(0x7f0000000d80)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) 10m53.297108389s ago: executing program 0 (id=3309): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/138, 0x8a}, {&(0x7f0000000340)=""/4094, 0xffe}], 0x2}, 0x2}], 0x1, 0x0, 0x0) 10m53.20741453s ago: executing program 0 (id=3310): socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 10m53.108410351s ago: executing program 0 (id=3311): ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 10m42.846693845s ago: executing program 0 (id=3316): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000440)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x4000087, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) unshare(0x22020600) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/kmsg\x00', 0x1, 0x0) 9m57.018408803s ago: executing program 32 (id=3316): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000440)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x4000087, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) unshare(0x22020600) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/kmsg\x00', 0x1, 0x0) 9m35.265207223s ago: executing program 2 (id=3352): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x50}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000d00), 0xa0602, 0x0) writev(r1, &(0x7f0000000d40)=[{&(0x7f0000000d80)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 9m33.924970138s ago: executing program 2 (id=3353): r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x0, 0xf, 0x28, "539f1721036d2cf61daa51081597ffb43c5f53591287b492290cd96962713806a17ca2bed89ff947"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m33.843941357s ago: executing program 2 (id=3354): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x800) 9m33.307170269s ago: executing program 2 (id=3355): socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x3, &(0x7f0000000640)={0x0, 0x4}, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a80)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000ac0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000b00)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000b80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x204}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdf0b, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 9m30.726158457s ago: executing program 2 (id=3356): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000340)) 9m30.61576016s ago: executing program 2 (id=3357): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x800007, r1}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{&(0x7f0000000b40)=@xdp, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)=""/138}, {&(0x7f0000000d00)=""/122}, {&(0x7f0000000d80)=""/60}, {&(0x7f0000000dc0)=""/48}, {&(0x7f0000000e00)=""/4086}]}, 0x100}], 0xefac5e4abd76da, 0x0, 0x0) 8m44.757303082s ago: executing program 33 (id=3357): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x800007, r1}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{&(0x7f0000000b40)=@xdp, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)=""/138}, {&(0x7f0000000d00)=""/122}, {&(0x7f0000000d80)=""/60}, {&(0x7f0000000dc0)=""/48}, {&(0x7f0000000e00)=""/4086}]}, 0x100}], 0xefac5e4abd76da, 0x0, 0x0) 6m7.802877959s ago: executing program 3 (id=3623): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 6m7.684713524s ago: executing program 3 (id=3625): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @empty, 0x9}, {0xa, 0x5, 0x13, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x848a}, r1, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x9}, {0xa, 0x4e23, 0x6, @mcast1, 0x7fffffff}, r1, 0x80d}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000340)={0x12, 0x6, 0xfa00, {0x0, r1, r0}}, 0x18) 6m7.423976334s ago: executing program 3 (id=3626): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='7', 0x1) get_robust_list(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000180)='proc\x00', &(0x7f00000001c0)='\\', 0x1) 6m7.084032313s ago: executing program 3 (id=3629): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, "d92984bd1c8411e88509de050000000000f2170e65e3f50327e42200000004e7ed000000000a0000000000190000000000000000000400", 0x3f}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x87, "750538d1ee2c668071a336d9bd3517076db9ad1f6a120d8bced7f81cd80669b740a5418d69d000d2c145e20004000000ffffffffffffffe400", 0x37}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000900)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) 6m6.833302001s ago: executing program 3 (id=3630): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x0, 0x0) close(0x3) open_by_handle_at(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="100000000200000012"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xac9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x11b}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m6.605067434s ago: executing program 3 (id=3632): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0xfd67, &(0x7f0000000240), 0x1}}], 0x4000210, 0x10002, 0x0) 5m20.909067968s ago: executing program 34 (id=3632): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0xfd67, &(0x7f0000000240), 0x1}}], 0x4000210, 0x10002, 0x0) 17.373358873s ago: executing program 1 (id=4371): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='3', 0x4e) flock(r0, 0x2) 17.082500686s ago: executing program 1 (id=4372): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x42, 0x6, 0x1, 0xcc, 0x1}, 0x50) 16.901367947s ago: executing program 1 (id=4373): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a80008801c00078008000500000000ff"], 0xd8}}, 0x0) 16.659760795s ago: executing program 1 (id=4374): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000cc0)=ANY=[@ANYBLOB="200a83"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000400)={0x24, &(0x7f0000000180)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001640)={0x24, &(0x7f0000001380)={0x40, 0xb, 0x48, "fffcf222237e2f7b6c3f9c05cd40b2625980d2184c9ab3bf8e57cdecebc88fadba4f53e53f0770139984cab576bf99fcb9b300d3b213bac0d24e6138f30f4efdae010b215b8f40dc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.084467256s ago: executing program 1 (id=4384): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x21234, 0x33}, @in6=@loopback, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x2, 0x4000, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='=', 0x1}], 0x1}}], 0x1, 0x4000801) 5.076248332s ago: executing program 4 (id=4385): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000013000100010000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000004101000014001a80100004800c00028008000100"], 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) 4.40379688s ago: executing program 4 (id=4386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x30, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x30}}, 0xc000) 3.403005796s ago: executing program 4 (id=4387): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='100', 0x3) getsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000080), &(0x7f0000000280)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./gadget/dummy_udc\x00', 0x2, 0x84) write(r1, &(0x7f00000002c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) 2.468522424s ago: executing program 1 (id=4388): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000cc0)=ANY=[@ANYBLOB="200a83"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000400)={0x24, &(0x7f0000000180)={0x0, 0xf, 0x14, "539f1721036d2cf61daa51081597ffb43c5f5359"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001640)={0x24, &(0x7f0000001380)={0x40, 0xb, 0x48, "fffcf222237e2f7b6c3f9c05cd40b2625980d2184c9ab3bf8e57cdecebc88fadba4f53e53f0770139984cab576bf99fcb9b300d3b213bac0d24e6138f30f4efdae010b215b8f40dc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 951.56397ms ago: executing program 4 (id=4389): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x7) ppoll(&(0x7f00000000c0)=[{r0, 0x2386}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) 452.034427ms ago: executing program 4 (id=4390): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000002c0)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) 0s ago: executing program 4 (id=4391): r0 = openat$comedi(0xffffff9c, &(0x7f0000000180)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000001c0)={'8255\x00', [0x3f00, 0x5, 0xd09a, 0xffffffff, 0x5, 0xfffffffe, 0x20000004, 0x4, 0x1002, 0x7fffbfff, 0x5, 0x2, 0x407, 0xfffffffe, 0x4, 0x4, 0x5, 0x0, 0x100830, 0x8, 0x10000, 0x8, 0x0, 0x80000001, 0x20000002, 0x8001, 0x4, 0x151, 0x0, 0x2, 0x6]}) kernel console output (not intermixed with test programs): 323799][T16817] [<8059bd08>] (should_failslab) from [<80579b58>] (__kmalloc_node_track_caller_noprof+0xac/0x3d8) [ 4936.323863][T16817] [<80579aac>] (__kmalloc_node_track_caller_noprof) from [<80988574>] (kvasprintf+0x64/0xd4) [ 4936.323940][T16817] r10:86ccff00 r9:87359400 r8:00000025 r7:00000cc0 r6:8256f990 r5:00000024 [ 4936.323968][T16817] r4:dfb35ef0 [ 4936.323989][T16817] [<80988510>] (kvasprintf) from [<8098869c>] (kasprintf+0x34/0x58) [ 4936.324084][T16817] r8:86ccff01 r7:00000001 r6:fffffdf9 r5:dfb35f60 r4:8ca2afc0 [ 4936.324105][T16817] [<80988668>] (kasprintf) from [<806316d8>] (logfc+0x78/0x1fc) [ 4936.324173][T16817] r3:82542828 r2:00000065 r1:8256f990 [ 4936.324195][T16817] [<80631664>] (logfc) from [<80631a08>] (vfs_parse_fs_param+0x114/0x13c) [ 4936.324277][T16817] r7:00000001 r6:fffffdf9 r5:dfb35f60 r4:87359400 [ 4936.324302][T16817] [<806318f4>] (vfs_parse_fs_param) from [<80633d84>] (sys_fsconfig+0x31c/0x514) [ 4936.324371][T16817] r6:87359404 r5:00000000 r4:00000002 [ 4936.324394][T16817] [<80633a68>] (sys_fsconfig) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 4936.324447][T16817] Exception stack(0xdfb35fa8 to 0xdfb35ff0) [ 4936.324491][T16817] 5fa0: 00000001 00000000 00000003 00000002 20000180 200001c0 [ 4936.324529][T16817] 5fc0: 00000001 00000000 00356318 000001af 003562d8 00000000 00000001 76fa10dc [ 4936.324562][T16817] 5fe0: 76fa0e88 76fa0e78 00018ff8 001311f0 [ 4936.324601][T16817] r10:000001af r9:845ed780 r8:8020029c r7:000001af r6:00356318 r5:00000000 [ 4936.324625][T16817] r4:00000001 [ 4938.332458][ T29] audit: type=1400 audit(4938.230:681): avc: denied { connect } for pid=16834 comm="syz.1.3602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 4938.588554][T16838] FAULT_INJECTION: forcing a failure. [ 4938.588554][T16838] name failslab, interval 1, probability 0, space 0, times 0 [ 4938.588730][T16838] CPU: 0 UID: 0 PID: 16838 Comm: syz.1.3603 Not tainted syzkaller #0 PREEMPT [ 4938.588795][T16838] Hardware name: ARM-Versatile Express [ 4938.588842][T16838] Call trace: [ 4938.588901][T16838] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 4938.589029][T16838] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 4938.589061][T16838] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 4938.589127][T16838] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 4938.589209][T16838] r7:84d19900 r6:00000000 r5:84d19900 r4:835165e4 [ 4938.589236][T16838] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 4938.589309][T16838] [<80a5f334>] (should_fail_ex) from [<8059bd74>] (should_failslab+0x6c/0x94) [ 4938.589402][T16838] r8:00000000 r7:84d19900 r6:80845d50 r5:00000dc0 r4:83c026c0 [ 4938.589432][T16838] [<8059bd08>] (should_failslab) from [<805787b8>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 4938.589497][T16838] [<8057875c>] (kmem_cache_alloc_noprof) from [<80845d50>] (security_file_alloc+0x30/0x184) [ 4938.589582][T16838] r10:83de1c00 r9:84d19900 r8:878cc880 r7:84df9100 r6:836f5ff4 r5:878cc880 [ 4938.589609][T16838] r4:878cc880 [ 4938.589631][T16838] [<80845d20>] (security_file_alloc) from [<805d8da4>] (init_file+0x48/0xfc) [ 4938.589700][T16838] r7:84df9100 r6:00000002 r5:83519a00 r4:878cc880 [ 4938.589727][T16838] [<805d8d5c>] (init_file) from [<805d95f4>] (alloc_empty_file+0x68/0x13c) [ 4938.589801][T16838] r7:84df9100 r6:00000002 r5:83519a00 r4:82760918 [ 4938.589837][T16838] [<805d958c>] (alloc_empty_file) from [<805d9774>] (alloc_file_pseudo+0xac/0x154) [ 4938.589964][T16838] r8:81ef96f0 r7:00000002 r6:83cfd810 r5:86092a80 r4:825a6d60 [ 4938.590010][T16838] [<805d96c8>] (alloc_file_pseudo) from [<80651e54>] (anon_inode_create_getfile+0x7c/0xc4) [ 4938.590099][T16838] r10:87277814 r9:00080002 r8:87277800 r7:827609bc r6:86092a80 r5:81ef96f0 [ 4938.590130][T16838] r4:825a6d60 [ 4938.590152][T16838] [<80651dd8>] (anon_inode_create_getfile) from [<8096253c>] (io_uring_setup+0x768/0x880) [ 4938.590240][T16838] r9:87277bc8 r8:00000000 r7:20000080 r6:b5403587 r5:87277800 r4:84d19900 [ 4938.590286][T16838] [<80961dd4>] (io_uring_setup) from [<8096269c>] (sys_io_uring_setup+0x48/0x88) [ 4938.590372][T16838] r10:000001a9 r9:84d19900 r8:8020029c r7:000001a9 r6:00001593 r5:20000080 [ 4938.590400][T16838] r4:8340b770 [ 4938.590421][T16838] [<80962654>] (sys_io_uring_setup) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 4938.590479][T16838] Exception stack(0xdfc19fa8 to 0xdfc19ff0) [ 4938.590530][T16838] 9fa0: e8761c7c 000e4e1c 00001593 20000080 00000000 00000000 [ 4938.590577][T16838] 9fc0: e8761c7c 000e4e1c 00000001 000001a9 00000000 00000000 00000001 76f980dc [ 4938.590612][T16838] 9fe0: 76f97e48 76f97e38 00014884 001311f0 [ 4938.590650][T16838] r7:000001a9 r6:00000001 r5:000e4e1c r4:e8761c7c [ 4942.204850][ T29] audit: type=1400 audit(4942.100:682): avc: denied { write } for pid=16863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4943.029549][ T29] audit: type=1400 audit(4942.920:683): avc: denied { write } for pid=16876 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4943.938194][T16894] FAULT_INJECTION: forcing a failure. [ 4943.938194][T16894] name failslab, interval 1, probability 0, space 0, times 0 [ 4943.938349][T16894] CPU: 1 UID: 0 PID: 16894 Comm: syz.1.3624 Not tainted syzkaller #0 PREEMPT [ 4943.938404][T16894] Hardware name: ARM-Versatile Express [ 4943.938433][T16894] Call trace: [ 4943.938491][T16894] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 4943.938651][T16894] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 4943.938677][T16894] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 4943.938748][T16894] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 4943.938817][T16894] r7:00000034 r6:00000000 r5:85605780 r4:835165e4 [ 4943.938838][T16894] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 4943.938897][T16894] [<80a5f334>] (should_fail_ex) from [<8059bd74>] (should_failslab+0x6c/0x94) [ 4943.938972][T16894] r8:85605780 r7:00000034 r6:802717b8 r5:00000dc0 r4:83c01240 [ 4943.938998][T16894] [<8059bd08>] (should_failslab) from [<8057a824>] (__kmalloc_cache_noprof+0x58/0x338) [ 4943.939059][T16894] [<8057a7cc>] (__kmalloc_cache_noprof) from [<802717b8>] (call_usermodehelper_setup+0x48/0xb8) [ 4943.939134][T16894] r10:000001ae r9:85605780 r8:834f2ef0 r7:834f2ef0 r6:86ca07c0 r5:834f301c [ 4943.939161][T16894] r4:86ca07c0 [ 4943.939183][T16894] [<80271770>] (call_usermodehelper_setup) from [<8032bf88>] (__request_module+0x150/0x2e4) [ 4943.939260][T16894] r7:8060605c r6:87127b00 r5:00000002 r4:86ca07c0 [ 4943.939282][T16894] [<8032be38>] (__request_module) from [<8060605c>] (get_fs_type+0x8c/0x120) [ 4943.939351][T16894] r3:872c6400 r2:00000003 r1:8256e8ec [ 4943.939387][T16894] r8:00000003 r7:00000003 r6:872c6400 r5:00000000 r4:00000000 [ 4943.939410][T16894] [<80605fd0>] (get_fs_type) from [<806337dc>] (sys_fsopen+0x64/0x150) [ 4943.939578][T16894] r9:85605780 r8:8020029c r7:000001ae r6:00000000 r5:00000000 r4:872c6400 [ 4943.939607][T16894] [<80633778>] (sys_fsopen) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 4943.939667][T16894] Exception stack(0xe028dfa8 to 0xe028dff0) [ 4943.939721][T16894] dfa0: 00000000 00000000 20000840 00000000 00000000 00000000 [ 4943.939765][T16894] dfc0: 00000000 00000000 0035630c 000001ae 003562d8 00000000 00000001 76f980dc [ 4943.939797][T16894] dfe0: 76f97e88 76f97e78 00018ff8 001311f0 [ 4943.939835][T16894] r7:000001ae r6:0035630c r5:00000000 r4:00000000 [ 4944.455646][ T29] audit: type=1400 audit(4944.350:684): avc: denied { bind } for pid=16899 comm="syz.3.3629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 4947.292932][ T29] audit: type=1400 audit(4947.180:685): avc: denied { map } for pid=16922 comm="syz.1.3639" path="socket:[36938]" dev="sockfs" ino=36938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 4947.293184][ T29] audit: type=1400 audit(4947.180:686): avc: denied { read } for pid=16922 comm="syz.1.3639" path="socket:[36938]" dev="sockfs" ino=36938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 4949.041864][ T8741] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 4949.242367][ T8741] usb 2-1: Using ep0 maxpacket: 32 [ 4949.249496][ T8741] usb 2-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 4949.307387][ T8741] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 4949.307538][ T8741] usb 2-1: config 0 has no interface number 0 [ 4949.355551][ T8741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4949.355676][ T8741] usb 2-1: Product: syz [ 4949.355717][ T8741] usb 2-1: Manufacturer: syz [ 4949.355761][ T8741] usb 2-1: SerialNumber: syz [ 4949.365013][ T8741] usb 2-1: config 0 descriptor?? [ 4949.974137][ T8741] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 4949.974287][ T8741] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 4951.776446][ T8741] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 4951.776963][ T8741] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 4961.819807][T15075] usb 2-1: USB disconnect, device number 93 [ 4962.535218][T16948] FAULT_INJECTION: forcing a failure. [ 4962.535218][T16948] name failslab, interval 1, probability 0, space 0, times 0 [ 4962.535393][T16948] CPU: 1 UID: 0 PID: 16948 Comm: syz.1.3644 Not tainted syzkaller #0 PREEMPT [ 4962.535499][T16948] Hardware name: ARM-Versatile Express [ 4962.535529][T16948] Call trace: [ 4962.535582][T16948] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 4962.535696][T16948] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 4962.535723][T16948] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 4962.535786][T16948] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 4962.535852][T16948] r7:83fa8c80 r6:00000000 r5:83fa8c80 r4:835165e4 [ 4962.535874][T16948] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 4962.535933][T16948] [<80a5f334>] (should_fail_ex) from [<8059bd74>] (should_failslab+0x6c/0x94) [ 4962.536007][T16948] r8:00000000 r7:83fa8c80 r6:83c016c0 r5:00000c40 r4:00001000 [ 4962.536031][T16948] [<8059bd08>] (should_failslab) from [<8057978c>] (__kmalloc_noprof+0xa8/0x3c8) [ 4962.536090][T16948] [<805796e4>] (__kmalloc_noprof) from [<8088b61c>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 4962.536170][T16948] r10:00000000 r9:83cc3800 r8:00000000 r7:8401a6e8 r6:86ccff28 r5:00001000 [ 4962.536213][T16948] r4:00000000 [ 4962.536245][T16948] [<8088b5e0>] (tomoyo_realpath_from_path) from [<80887994>] (tomoyo_check_open_permission+0x150/0x1c0) [ 4962.536329][T16948] r10:00000000 r9:854b74c0 r8:00000000 r7:86ccff28 r6:00000006 r5:00000002 [ 4962.536358][T16948] r4:00000001 r3:00000001 [ 4962.536377][T16948] [<80887844>] (tomoyo_check_open_permission) from [<8088c4c0>] (tomoyo_file_open+0x34/0x38) [ 4962.536450][T16948] r9:86ccff00 r8:83fa8c80 r7:00000000 r6:8466ed40 r5:81e28f24 r4:86ccff00 [ 4962.536471][T16948] [<8088c48c>] (tomoyo_file_open) from [<808471a0>] (security_file_open+0x70/0x184) [ 4962.536540][T16948] r5:81e28f24 r4:86ccff00 [ 4962.536562][T16948] [<80847130>] (security_file_open) from [<805d1998>] (do_dentry_open+0xd8/0x500) [ 4962.536628][T16948] r5:81e28f24 r4:86ccff00 [ 4962.536648][T16948] [<805d18c0>] (do_dentry_open) from [<805d37f8>] (vfs_open_consume+0x3c/0xf8) [ 4962.536717][T16948] r7:ea825f20 r6:86ccff28 r5:00000000 r4:86ccff00 [ 4962.536743][T16948] [<805d37bc>] (vfs_open_consume) from [<805ef860>] (path_openat+0x438/0xa98) [ 4962.536812][T16948] r6:00000000 r5:00000000 r4:ea825e58 [ 4962.536834][T16948] [<805ef428>] (path_openat) from [<805eff78>] (do_file_open+0xb8/0x150) [ 4962.536902][T16948] r10:00000142 r9:83fa8c80 r8:00000001 r7:ffffff9c r6:ea825f20 r5:83fa8c80 [ 4962.536930][T16948] r4:83df9b40 [ 4962.536950][T16948] [<805efec0>] (do_file_open) from [<805d3be0>] (do_sys_openat2+0xb8/0xf0) [ 4962.537021][T16948] r8:8020029c r7:20000500 r6:ffffff9c r5:83df9b40 r4:00000004 [ 4962.537045][T16948] [<805d3b28>] (do_sys_openat2) from [<805d40cc>] (sys_openat+0x88/0xd8) [ 4962.537118][T16948] r7:00000142 r6:00356314 r5:20000500 r4:ffffff9c [ 4962.537143][T16948] [<805d4044>] (sys_openat) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 4962.537199][T16948] Exception stack(0xea825fa8 to 0xea825ff0) [ 4962.537255][T16948] 5fa0: 00000000 00000000 ffffff9c 20000500 00000002 00000000 [ 4962.537295][T16948] 5fc0: 00000000 00000000 00356314 00000142 003562d8 00000000 00000001 76f980dc [ 4962.537327][T16948] 5fe0: 76f97e88 76f97e78 00018ff8 001311f0 [ 4962.537358][T16948] r5:00000000 r4:00000000 [ 4962.537466][T16948] ERROR: Out of memory at tomoyo_realpath_from_path. [ 4963.412099][ T3691] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 4963.582111][ T3691] usb 2-1: Using ep0 maxpacket: 32 [ 4963.587912][ T3691] usb 2-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 4963.606565][ T3691] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 4963.606702][ T3691] usb 2-1: config 0 has no interface number 0 [ 4963.647928][ T3691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4963.648060][ T3691] usb 2-1: Product: syz [ 4963.648103][ T3691] usb 2-1: Manufacturer: syz [ 4963.648138][ T3691] usb 2-1: SerialNumber: syz [ 4963.656947][ T3691] usb 2-1: config 0 descriptor?? [ 4964.089390][ T3691] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 4964.089540][ T3691] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 4965.785291][ T3691] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 4965.785742][ T3691] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 4975.813757][T15075] usb 2-1: USB disconnect, device number 94 [ 4976.918019][T16977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3651'. [ 4977.056292][T16977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 4977.075976][T16977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3651'. [ 4978.972202][T15075] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 4979.132289][T15075] usb 2-1: Using ep0 maxpacket: 32 [ 4979.212258][T15075] usb 2-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 4979.227379][T15075] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 4979.227540][T15075] usb 2-1: config 0 has no interface number 0 [ 4979.252280][T15075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 4979.252406][T15075] usb 2-1: Product: syz [ 4979.252443][T15075] usb 2-1: Manufacturer: syz [ 4979.252472][T15075] usb 2-1: SerialNumber: syz [ 4979.298872][T15075] usb 2-1: config 0 descriptor?? [ 4979.918371][T15075] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 4979.918521][T15075] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 4981.768787][T15075] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 4981.769320][T15075] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 4991.804698][ T8741] usb 2-1: USB disconnect, device number 95 [ 4992.932352][T16960] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 4993.137340][T16960] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 4993.186633][T16960] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 4993.186876][T16960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 4993.196764][T16960] usb 2-1: config 0 descriptor?? [ 4993.215389][T16960] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 4994.196693][T17032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4994.214653][T17032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4995.668670][T17032] hsr_slave_0: entered promiscuous mode [ 4995.686924][T17032] hsr_slave_1: entered promiscuous mode [ 4995.689441][T17032] debugfs: 'hsr0' already exists in 'hsr' [ 4995.689510][T17032] Cannot create hsr debugfs directory [ 4997.456141][T17032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5002.600574][T17032] veth0_vlan: entered promiscuous mode [ 5002.650099][T17032] veth1_vlan: entered promiscuous mode [ 5002.794350][T17032] veth0_macvtap: entered promiscuous mode [ 5002.827777][T17032] veth1_macvtap: entered promiscuous mode [ 5003.715305][T17355] syzkaller1: entered promiscuous mode [ 5003.715376][T17355] syzkaller1: entered allmulticast mode [ 5004.089719][T17363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5004.095401][T17363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5007.617124][ T7732] usb 2-1: USB disconnect, device number 96 [ 5008.612444][T17398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5008.613186][T17398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5009.553628][T17417] bond0: (slave bond_slave_0): Releasing backup interface [ 5009.587870][T17417] bond0: (slave bond_slave_1): Releasing backup interface [ 5009.618653][T17417] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 5009.642367][ T7732] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 5009.806961][ T7732] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 5009.822437][ T7732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 5009.822529][ T7732] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 5009.822618][ T7732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 5009.829178][ T7732] usb 2-1: config 0 descriptor?? [ 5009.905025][ T7732] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 5016.319456][ T29] audit: type=1400 audit(5016.210:687): avc: denied { mounton } for pid=17445 comm="syz.4.3688" path="/24/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 5016.393901][T17446] FAULT_INJECTION: forcing a failure. [ 5016.393901][T17446] name failslab, interval 1, probability 0, space 0, times 0 [ 5016.394069][T17446] CPU: 0 UID: 0 PID: 17446 Comm: syz.4.3688 Not tainted syzkaller #0 PREEMPT [ 5016.394124][T17446] Hardware name: ARM-Versatile Express [ 5016.394153][T17446] Call trace: [ 5016.394208][T17446] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5016.394332][T17446] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5016.394359][T17446] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5016.394421][T17446] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5016.394488][T17446] r7:85e6cb00 r6:00000000 r5:85e6cb00 r4:835165e4 [ 5016.394513][T17446] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5016.394576][T17446] [<80a5f334>] (should_fail_ex) from [<8059bd74>] (should_failslab+0x6c/0x94) [ 5016.394660][T17446] r8:00000000 r7:85e6cb00 r6:8039d3a0 r5:00000dc0 r4:83cf5900 [ 5016.394685][T17446] [<8059bd08>] (should_failslab) from [<805787b8>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 5016.394753][T17446] [<8057875c>] (kmem_cache_alloc_noprof) from [<8039d3a0>] (taskstats_exit+0x260/0x398) [ 5016.394831][T17446] r10:00000000 r9:00000001 r8:00000000 r7:84450f00 r6:84450f00 r5:836d011c [ 5016.394860][T17446] r4:85e6cb00 [ 5016.394880][T17446] [<8039d140>] (taskstats_exit) from [<80258b3c>] (do_exit+0x1c0/0xad0) [ 5016.394957][T17446] r10:84c24540 r9:00000001 r8:dfa15e98 r7:84450f00 r6:00000000 r5:00000000 [ 5016.394985][T17446] r4:85e6cb00 [ 5016.395007][T17446] [<8025897c>] (do_exit) from [<80259620>] (do_group_exit+0x40/0x8c) [ 5016.395063][T17446] r7:84c245f4 [ 5016.395084][T17446] [<802595e0>] (do_group_exit) from [<8026a608>] (get_signal+0x994/0xaa8) [ 5016.395148][T17446] r7:84c245f4 r4:85e6cb00 [ 5016.395174][T17446] [<80269c74>] (get_signal) from [<8022b7cc>] (do_work_pending+0x228/0x4fc) [ 5016.395255][T17446] r10:000000f0 r9:001311f0 r8:fffffe00 r7:001311ec r6:00000001 r5:dfa15fb0 [ 5016.395283][T17446] r4:85e6cb00 [ 5016.395302][T17446] [<8022b5a4>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 5016.395359][T17446] Exception stack(0xdfa15fb0 to 0xdfa15ff8) [ 5016.395404][T17446] 5fa0: 003562e0 00000080 00000000 00000000 [ 5016.395471][T17446] 5fc0: 00132578 ffffffff 76f3d7d4 000000f0 00340000 00000000 00000001 76f3d0dc [ 5016.395511][T17446] 5fe0: 76f3cf38 76f3cf28 00021de4 001311ec 60000010 003562e0 [ 5016.395552][T17446] r10:000000f0 r9:85e6cb00 r8:8020029c r7:000000f0 r6:76f3d7d4 r5:ffffffff [ 5016.395576][T17446] r4:00132578 [ 5019.896819][T17484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5019.898651][T17484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5021.184421][T17497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5021.185926][T17497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5021.919756][T17509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5021.927474][T17509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5022.238079][ T29] audit: type=1326 audit(5022.130:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17514 comm="syz.4.3717" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x0 [ 5024.357499][T15075] usb 2-1: USB disconnect, device number 97 [ 5026.158961][ T3691] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 5026.320682][ T3691] usb 2-1: Using ep0 maxpacket: 32 [ 5026.362412][ T3691] usb 2-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 5026.486355][ T3691] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 5026.486499][ T3691] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 5026.486556][ T3691] usb 2-1: config 0 interface 0 has no altsetting 0 [ 5026.544496][ T29] audit: type=1400 audit(5026.440:689): avc: denied { mount } for pid=17535 comm="syz.4.3721" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 5026.562496][ T3691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5026.562631][ T3691] usb 2-1: Product: syz [ 5026.562667][ T3691] usb 2-1: Manufacturer: syz [ 5026.562697][ T3691] usb 2-1: SerialNumber: syz [ 5026.722152][ T3691] usb 2-1: config 0 descriptor?? [ 5027.204887][ T3691] gs_usb 2-1:0.0: Couldn't get device config: (err=-71) [ 5027.205135][ T3691] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 5027.224614][ T3691] usb 2-1: USB disconnect, device number 98 [ 5027.399942][T17547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5027.400575][T17547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5028.585293][T17564] FAULT_INJECTION: forcing a failure. [ 5028.585293][T17564] name failslab, interval 1, probability 0, space 0, times 0 [ 5028.585456][T17564] CPU: 1 UID: 0 PID: 17564 Comm: syz.1.3726 Not tainted syzkaller #0 PREEMPT [ 5028.585514][T17564] Hardware name: ARM-Versatile Express [ 5028.585542][T17564] Call trace: [ 5028.585591][T17564] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5028.585697][T17564] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5028.585723][T17564] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5028.585793][T17564] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5028.585856][T17564] r7:855e5780 r6:00000000 r5:855e5780 r4:835165e4 [ 5028.585875][T17564] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5028.585931][T17564] [<80a5f334>] (should_fail_ex) from [<8059bd74>] (should_failslab+0x6c/0x94) [ 5028.585997][T17564] r8:00000000 r7:855e5780 r6:83c01300 r5:00000dc0 r4:00000078 [ 5028.586016][T17564] [<8059bd08>] (should_failslab) from [<8057978c>] (__kmalloc_noprof+0xa8/0x3c8) [ 5028.586066][T17564] [<805796e4>] (__kmalloc_noprof) from [<816d5cdc>] (sock_kmalloc+0x58/0x84) [ 5028.586138][T17564] r10:8cb86a00 r9:00000000 r8:dfa19d38 r7:00000020 r6:00000000 r5:00000078 [ 5028.586162][T17564] r4:86a02114 [ 5028.586181][T17564] [<816d5c84>] (sock_kmalloc) from [<81905f48>] (__tcp_md5_do_add+0x84/0x1b4) [ 5028.586242][T17564] r5:00000002 r4:00000009 [ 5028.586265][T17564] [<81905ec4>] (__tcp_md5_do_add) from [<8190ae28>] (tcp_md5_do_add+0x64/0xf8) [ 5028.586332][T17564] r10:00000009 r9:00000000 r8:00000000 r7:00000020 r6:00000002 r5:dfa19d38 [ 5028.586355][T17564] r4:86a02000 [ 5028.586371][T17564] [<8190adc4>] (tcp_md5_do_add) from [<8190b52c>] (tcp_v4_parse_md5_keys+0xd4/0x21c) [ 5028.586444][T17564] r10:dfa19ecc r9:dfa19e50 r8:86e35000 r7:00000000 r6:86a02000 r5:00000000 [ 5028.586467][T17564] r4:0000000e [ 5028.586485][T17564] [<8190b458>] (tcp_v4_parse_md5_keys) from [<818e9f5c>] (do_tcp_setsockopt+0x4b0/0xbb4) [ 5028.586552][T17564] r7:86a02000 r6:00000000 r5:000000d8 r4:8190b458 [ 5028.586573][T17564] [<818e9ab0>] (do_tcp_setsockopt) from [<818ea6b0>] (tcp_setsockopt+0x50/0x58) [ 5028.586639][T17564] r10:00000126 r9:855e5780 r8:000000d8 r7:841ebbc0 r6:0000000e r5:00000006 [ 5028.586662][T17564] r4:818ea660 [ 5028.586681][T17564] [<818ea664>] (tcp_setsockopt) from [<816d2f78>] (sock_common_setsockopt+0x38/0x40) [ 5028.586735][T17564] r4:818ea660 [ 5028.586763][T17564] [<816d2f44>] (sock_common_setsockopt) from [<816ce15c>] (do_sock_setsockopt+0x70/0xc8) [ 5028.586820][T17564] r4:816d2f40 [ 5028.586838][T17564] [<816ce0ec>] (do_sock_setsockopt) from [<816d1ec0>] (__sys_setsockopt+0x7c/0xc4) [ 5028.586903][T17564] r8:00000000 r7:8785db00 r6:8785db01 r5:0000000e r4:00000006 [ 5028.586923][T17564] [<816d1e44>] (__sys_setsockopt) from [<816d1f24>] (sys_setsockopt+0x1c/0x24) [ 5028.586989][T17564] r8:8020029c r7:00000126 r6:00356318 r5:00000000 r4:000000d8 [ 5028.587009][T17564] [<816d1f08>] (sys_setsockopt) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5028.587060][T17564] Exception stack(0xdfa19fa8 to 0xdfa19ff0) [ 5028.587102][T17564] 9fa0: 000000d8 00000000 00000004 00000006 0000000e 20000440 [ 5028.587139][T17564] 9fc0: 000000d8 00000000 00356318 00000126 003562d8 00000000 00000001 76f980dc [ 5028.587169][T17564] 9fe0: 76f97e88 76f97e78 00018ff8 001311f0 [ 5034.762657][T17614] usb usb2: usbfs: process 17614 (syz.1.3749) did not claim interface 0 before use [ 5034.972037][T17617] FAULT_INJECTION: forcing a failure. [ 5034.972037][T17617] name failslab, interval 1, probability 0, space 0, times 0 [ 5034.972196][T17617] CPU: 0 UID: 0 PID: 17617 Comm: syz.1.3751 Not tainted syzkaller #0 PREEMPT [ 5034.972254][T17617] Hardware name: ARM-Versatile Express [ 5034.972283][T17617] Call trace: [ 5034.972334][T17617] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5034.972452][T17617] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5034.972480][T17617] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5034.972540][T17617] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5034.972619][T17617] r7:8ce6a580 r6:00000000 r5:8ce6a580 r4:835165e4 [ 5034.972644][T17617] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5034.972710][T17617] [<80a5f334>] (should_fail_ex) from [<8059bd74>] (should_failslab+0x6c/0x94) [ 5034.972787][T17617] r8:00000000 r7:8ce6a580 r6:83c02000 r5:00400dc0 r4:00000020 [ 5034.972812][T17617] [<8059bd08>] (should_failslab) from [<8057978c>] (__kmalloc_noprof+0xa8/0x3c8) [ 5034.972872][T17617] [<805796e4>] (__kmalloc_noprof) from [<8083ca14>] (lsm_blob_alloc+0x28/0x3c) [ 5034.972947][T17617] r10:00000008 r9:81edc45c r8:8ce6a580 r7:00400cc0 r6:83f6ef80 r5:83d11c80 [ 5034.972972][T17617] r4:83d11ce4 [ 5034.972991][T17617] [<8083c9ec>] (lsm_blob_alloc) from [<80847b1c>] (security_prepare_creds+0x2c/0x21c) [ 5034.973052][T17617] r5:83d11c80 r4:83d11c80 [ 5034.973072][T17617] [<80847af0>] (security_prepare_creds) from [<8028a520>] (prepare_creds+0x234/0x3c8) [ 5034.973138][T17617] r7:8341e440 r6:8341fbe0 r5:83f6ef80 r4:83d11c80 [ 5034.973159][T17617] [<8028a2ec>] (prepare_creds) from [<8082c7ec>] (join_session_keyring+0x18/0x140) [ 5034.973225][T17617] r7:00000001 r6:00000000 r5:00000003 r4:00000001 [ 5034.973248][T17617] [<8082c7d4>] (join_session_keyring) from [<8082cf3c>] (lookup_user_key+0x628/0x848) [ 5034.973313][T17617] r7:00000001 r6:fffffffd r5:00000003 r4:00000001 [ 5034.973335][T17617] [<8082c914>] (lookup_user_key) from [<8082993c>] (sys_add_key+0x104/0x280) [ 5034.973405][T17617] r10:00000135 r9:8ce6a580 r8:00000000 r7:00000000 r6:87880840 r5:00000000 [ 5034.973429][T17617] r4:00000006 [ 5034.973448][T17617] [<80829838>] (sys_add_key) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5034.973502][T17617] Exception stack(0xdf9f1fa8 to 0xdf9f1ff0) [ 5034.973545][T17617] 1fa0: fffffffd 00000000 200008c0 20000900 00000000 00000000 [ 5034.973582][T17617] 1fc0: fffffffd 00000000 00356318 00000135 003562d8 00000000 00000001 76f980dc [ 5034.973620][T17617] 1fe0: 76f97e88 76f97e78 00018ff8 001311f0 [ 5034.973659][T17617] r8:8020029c r7:00000135 r6:00356318 r5:00000000 r4:fffffffd [ 5035.371902][ T29] audit: type=1400 audit(5035.260:690): avc: denied { nlmsg_read } for pid=17622 comm="syz.4.3753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 5037.220281][T17638] fuse: Unknown parameter 'grou00000000000000000000' [ 5039.384926][T17651] fuse: Unknown parameter 'grou00000000000000000000' [ 5040.423359][T17667] fuse: Unknown parameter 'grou00000000000000000000' [ 5040.665381][T17672] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3773'. [ 5040.867047][T17675] FAULT_INJECTION: forcing a failure. [ 5040.867047][T17675] name failslab, interval 1, probability 0, space 0, times 0 [ 5040.867198][T17675] CPU: 0 UID: 0 PID: 17675 Comm: syz.4.3775 Not tainted syzkaller #0 PREEMPT [ 5040.867251][T17675] Hardware name: ARM-Versatile Express [ 5040.867279][T17675] Call trace: [ 5040.867328][T17675] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5040.867458][T17675] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5040.867486][T17675] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5040.867546][T17675] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5040.867658][T17675] r7:8d410c80 r6:00000000 r5:8d410c80 r4:835165e4 [ 5040.867682][T17675] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5040.867743][T17675] [<80a5f334>] (should_fail_ex) from [<8059bd74>] (should_failslab+0x6c/0x94) [ 5040.867822][T17675] r8:00000000 r7:8d410c80 r6:8039d3a0 r5:00000dc0 r4:83cf5900 [ 5040.867845][T17675] [<8059bd08>] (should_failslab) from [<805787b8>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 5040.867907][T17675] [<8057875c>] (kmem_cache_alloc_noprof) from [<8039d3a0>] (taskstats_exit+0x260/0x398) [ 5040.867982][T17675] r10:00000000 r9:00000001 r8:00000000 r7:87a90600 r6:87a90600 r5:836d011c [ 5040.868007][T17675] r4:8d410c80 [ 5040.868026][T17675] [<8039d140>] (taskstats_exit) from [<80258b3c>] (do_exit+0x1c0/0xad0) [ 5040.868098][T17675] r10:87084a80 r9:00000001 r8:e0229e98 r7:87a90600 r6:00000000 r5:00000000 [ 5040.868124][T17675] r4:8d410c80 [ 5040.868144][T17675] [<8025897c>] (do_exit) from [<80259620>] (do_group_exit+0x40/0x8c) [ 5040.868199][T17675] r7:87084b34 [ 5040.868219][T17675] [<802595e0>] (do_group_exit) from [<8026a608>] (get_signal+0x994/0xaa8) [ 5040.868296][T17675] r7:87084b34 r4:8d410c80 [ 5040.868316][T17675] [<80269c74>] (get_signal) from [<8022b7cc>] (do_work_pending+0x228/0x4fc) [ 5040.868391][T17675] r10:000000f0 r9:001311f0 r8:fffffe00 r7:001311ec r6:00000001 r5:e0229fb0 [ 5040.868416][T17675] r4:8d410c80 [ 5040.868433][T17675] [<8022b5a4>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 5040.868486][T17675] Exception stack(0xe0229fb0 to 0xe0229ff8) [ 5040.868528][T17675] 9fa0: 003562e0 00000080 00000000 00000000 [ 5040.868567][T17675] 9fc0: 00132578 ffffffff 76f3d7d4 000000f0 00340000 00000000 00000001 76f3d0dc [ 5040.868603][T17675] 9fe0: 76f3cf38 76f3cf28 00021de4 001311ec 60000010 003562e0 [ 5040.868644][T17675] r10:000000f0 r9:8d410c80 r8:8020029c r7:000000f0 r6:76f3d7d4 r5:ffffffff [ 5040.868669][T17675] r4:00132578 [ 5041.117624][T17679] netlink: 'syz.1.3778': attribute type 27 has an invalid length. [ 5041.722650][T17687] FAULT_INJECTION: forcing a failure. [ 5041.722650][T17687] name fail_futex, interval 1, probability 0, space 0, times 0 [ 5041.722822][T17687] CPU: 1 UID: 0 PID: 17687 Comm: syz.4.3780 Not tainted syzkaller #0 PREEMPT [ 5041.722881][T17687] Hardware name: ARM-Versatile Express [ 5041.722912][T17687] Call trace: [ 5041.722963][T17687] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5041.723081][T17687] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5041.723143][T17687] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5041.723220][T17687] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5041.723291][T17687] r7:dfe39e38 r6:00000000 r5:8ce6a580 r4:834f6840 [ 5041.723313][T17687] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5041.723379][T17687] [<80a5f334>] (should_fail_ex) from [<80a5f568>] (should_fail+0x14/0x18) [ 5041.723473][T17687] r8:00000000 r7:dfe39e38 r6:00000004 r5:003562e0 r4:00000000 [ 5041.723505][T17687] [<80a5f554>] (should_fail) from [<8035ac9c>] (get_futex_key+0xa4/0x4a8) [ 5041.723569][T17687] [<8035abf8>] (get_futex_key) from [<8036083c>] (futex_wait_setup+0x88/0x29c) [ 5041.723648][T17687] r10:b5003500 r9:b5403587 r8:b5003500 r7:003562e0 r6:003562e0 r5:8ce6a580 [ 5041.723677][T17687] r4:7efffffc [ 5041.723700][T17687] [<803607b4>] (futex_wait_setup) from [<80360ad4>] (__futex_wait+0x84/0x110) [ 5041.723783][T17687] r10:00000000 r9:00000000 r8:00000000 r7:00000002 r6:003562e0 r5:00000000 [ 5041.723816][T17687] r4:8ce6a580 [ 5041.723840][T17687] [<80360a50>] (__futex_wait) from [<80360be0>] (futex_wait+0x80/0x10c) [ 5041.723916][T17687] r9:00000000 r8:0000c350 r7:003562e0 r6:00000000 r5:00000000 r4:00000002 [ 5041.723939][T17687] [<80360b60>] (futex_wait) from [<8035c308>] (do_futex+0x1b4/0x1d0) [ 5041.724011][T17687] r10:000000f0 r9:00000000 r8:8ce6a580 r7:00000000 r6:003562e0 r5:00000080 [ 5041.724038][T17687] r4:00000000 [ 5041.724058][T17687] [<8035c154>] (do_futex) from [<8035cbbc>] (sys_futex_time32+0x11c/0x1bc) [ 5041.724150][T17687] r4:00000000 [ 5041.724172][T17687] [<8035caa0>] (sys_futex_time32) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5041.724242][T17687] Exception stack(0xdfe39fa8 to 0xdfe39ff0) [ 5041.724291][T17687] 9fa0: 00132578 ffffffff 003562e0 00000080 00000000 00000000 [ 5041.724335][T17687] 9fc0: 00132578 ffffffff 76f3d7d4 000000f0 00340000 00000000 00000001 76f3d0dc [ 5041.724370][T17687] 9fe0: 76f3cf38 76f3cf28 00021de4 001311f0 [ 5041.724417][T17687] r9:8ce6a580 r8:8020029c r7:000000f0 r6:76f3d7d4 r5:ffffffff r4:00132578 [ 5041.727878][T17682] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 5042.800512][T17693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3783'. [ 5046.198830][T17711] *** NOT YET: opcode 85 *** [ 5046.721997][T17714] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3792'. [ 5048.423335][T17723] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 5048.423515][T17723] block device autoloading is deprecated and will be removed. [ 5049.785910][T17737] FAULT_INJECTION: forcing a failure. [ 5049.785910][T17737] name fail_futex, interval 1, probability 0, space 0, times 0 [ 5049.786096][T17737] CPU: 1 UID: 0 PID: 17737 Comm: syz.1.3802 Not tainted syzkaller #0 PREEMPT [ 5049.786171][T17737] Hardware name: ARM-Versatile Express [ 5049.786201][T17737] Call trace: [ 5049.786251][T17737] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5049.786376][T17737] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5049.786405][T17737] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5049.786470][T17737] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5049.786542][T17737] r7:ea5b9e38 r6:00000000 r5:85e70000 r4:834f6840 [ 5049.786567][T17737] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5049.786633][T17737] [<80a5f334>] (should_fail_ex) from [<80a5f568>] (should_fail+0x14/0x18) [ 5049.786703][T17737] r8:00000000 r7:ea5b9e38 r6:00000004 r5:003562e0 r4:00000000 [ 5049.786728][T17737] [<80a5f554>] (should_fail) from [<8035ac9c>] (get_futex_key+0xa4/0x4a8) [ 5049.786797][T17737] [<8035abf8>] (get_futex_key) from [<8036083c>] (futex_wait_setup+0x88/0x29c) [ 5049.786881][T17737] r10:b5003500 r9:b5403587 r8:b5003500 r7:003562e0 r6:003562e0 r5:85e70000 [ 5049.786910][T17737] r4:7efffffc [ 5049.786935][T17737] [<803607b4>] (futex_wait_setup) from [<80360ad4>] (__futex_wait+0x84/0x110) [ 5049.787017][T17737] r10:00000000 r9:00000000 r8:00000000 r7:00000002 r6:003562e0 r5:00000000 [ 5049.787047][T17737] r4:85e70000 [ 5049.787068][T17737] [<80360a50>] (__futex_wait) from [<80360be0>] (futex_wait+0x80/0x10c) [ 5049.787159][T17737] r9:00000000 r8:0000c350 r7:003562e0 r6:00000000 r5:00000000 r4:00000002 [ 5049.787187][T17737] [<80360b60>] (futex_wait) from [<8035c308>] (do_futex+0x1b4/0x1d0) [ 5049.787271][T17737] r10:000000f0 r9:00000000 r8:85e70000 r7:00000000 r6:003562e0 r5:00000080 [ 5049.787302][T17737] r4:00000000 [ 5049.787327][T17737] [<8035c154>] (do_futex) from [<8035cbbc>] (sys_futex_time32+0x11c/0x1bc) [ 5049.787394][T17737] r4:00000000 [ 5049.787414][T17737] [<8035caa0>] (sys_futex_time32) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5049.787513][T17737] Exception stack(0xea5b9fa8 to 0xea5b9ff0) [ 5049.787556][T17737] 9fa0: 00132578 ffffffff 003562e0 00000080 00000000 00000000 [ 5049.787592][T17737] 9fc0: 00132578 ffffffff 76f987d4 000000f0 00340000 00000000 00000001 76f980dc [ 5049.787622][T17737] 9fe0: 76f97f38 76f97f28 00021de4 001311f0 [ 5049.787663][T17737] r9:85e70000 r8:8020029c r7:000000f0 r6:76f987d4 r5:ffffffff r4:00132578 [ 5050.294431][ T29] audit: type=1400 audit(5050.190:691): avc: denied { load_policy } for pid=17738 comm="syz.4.3803" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 5050.295387][T17739] SELinux: failed to load policy [ 5051.813461][T17745] FAULT_INJECTION: forcing a failure. [ 5051.813461][T17745] name failslab, interval 1, probability 0, space 0, times 0 [ 5051.813588][T17745] CPU: 1 UID: 0 PID: 17745 Comm: syz.4.3806 Not tainted syzkaller #0 PREEMPT [ 5051.813636][T17745] Hardware name: ARM-Versatile Express [ 5051.813660][T17745] Call trace: [ 5051.813701][T17745] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5051.813808][T17745] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5051.813829][T17745] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5051.813878][T17745] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5051.813934][T17745] r7:ffffffff r6:00000000 r5:855f7080 r4:835165e4 [ 5051.813951][T17745] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5051.814004][T17745] [<80a5f334>] (should_fail_ex) from [<8059bd74>] (should_failslab+0x6c/0x94) [ 5051.814074][T17745] r8:855f7080 r7:ffffffff r6:83c01240 r5:00000cc0 r4:0000001a [ 5051.814096][T17745] [<8059bd08>] (should_failslab) from [<80579b58>] (__kmalloc_node_track_caller_noprof+0xac/0x3d8) [ 5051.814155][T17745] [<80579aac>] (__kmalloc_node_track_caller_noprof) from [<80988574>] (kvasprintf+0x64/0xd4) [ 5051.814237][T17745] r10:00000008 r9:ffffffff r8:0000001a r7:00000cc0 r6:825caf28 r5:00000019 [ 5051.814266][T17745] r4:ea5b9c28 [ 5051.814283][T17745] [<80988510>] (kvasprintf) from [<8028297c>] (__kthread_create_on_node+0x8c/0x184) [ 5051.814349][T17745] r8:825caf28 r7:802792d8 r6:85ee6180 r5:00000000 r4:854e5480 [ 5051.814367][T17745] [<802828f0>] (__kthread_create_on_node) from [<80282aac>] (kthread_create_on_node+0x38/0x5c) [ 5051.814433][T17745] r9:874706c8 r8:8340b4f8 r7:87470608 r6:87470808 r5:87470600 r4:00000000 [ 5051.814454][T17745] [<80282a78>] (kthread_create_on_node) from [<80275b38>] (init_rescuer+0xf8/0x19c) [ 5051.814512][T17745] r4:85ee6180 [ 5051.814531][T17745] [<80275a40>] (init_rescuer) from [<8027e924>] (__alloc_workqueue+0x444/0x72c) [ 5051.814590][T17745] r5:87470600 r4:836894fc [ 5051.814608][T17745] [<8027e4e0>] (__alloc_workqueue) from [<8027ec40>] (alloc_workqueue_noprof+0x34/0x58) [ 5051.814676][T17745] r10:8355f318 r9:84e65678 r8:81f6fd60 r7:8355f324 r6:00000109 r5:87277c00 [ 5051.814698][T17745] r4:8690e800 [ 5051.814715][T17745] [<8027ec0c>] (alloc_workqueue_noprof) from [<81b78eb4>] (nci_register_device+0xa8/0x29c) [ 5051.814784][T17745] r3:ea5b9cf4 r2:00000001 [ 5051.814803][T17745] [<81b78e0c>] (nci_register_device) from [<80cb0ef8>] (virtual_ncidev_open+0x88/0xc4) [ 5051.814866][T17745] r5:86ccfb80 r4:8c8acc00 [ 5051.814888][T17745] [<80cb0e70>] (virtual_ncidev_open) from [<80b80204>] (misc_open+0xc4/0x164) [ 5051.814949][T17745] r5:86ccfb80 r4:83568454 [ 5051.814969][T17745] [<80b80140>] (misc_open) from [<805de784>] (chrdev_open+0xbc/0x234) [ 5051.815038][T17745] r10:00000000 r9:86ccfb80 r8:855f7080 r7:81f3b344 r6:86ccfb80 r5:84e65678 [ 5051.815066][T17745] r4:84487700 r3:80b80140 [ 5051.815086][T17745] [<805de6c8>] (chrdev_open) from [<805d19ec>] (do_dentry_open+0x12c/0x500) [ 5051.815159][T17745] r9:86ccfb80 r8:855f7080 r7:805de6c8 r6:84e65678 r5:00000000 r4:86ccfb80 [ 5051.815182][T17745] [<805d18c0>] (do_dentry_open) from [<805d37f8>] (vfs_open_consume+0x3c/0xf8) [ 5051.815252][T17745] r7:ea5b9f20 r6:86ccfba8 r5:00000000 r4:86ccfb80 [ 5051.815289][T17745] [<805d37bc>] (vfs_open_consume) from [<805ef860>] (path_openat+0x438/0xa98) [ 5051.815354][T17745] r6:00000000 r5:00000000 r4:ea5b9e58 [ 5051.815374][T17745] [<805ef428>] (path_openat) from [<805eff78>] (do_file_open+0xb8/0x150) [ 5051.815472][T17745] r10:00000142 r9:855f7080 r8:00000001 r7:ffffff9c r6:ea5b9f20 r5:855f7080 [ 5051.815501][T17745] r4:83df90c0 [ 5051.815521][T17745] [<805efec0>] (do_file_open) from [<805d3be0>] (do_sys_openat2+0xb8/0xf0) [ 5051.815588][T17745] r8:8020029c r7:20000200 r6:ffffff9c r5:83df90c0 r4:00000005 [ 5051.815609][T17745] [<805d3b28>] (do_sys_openat2) from [<805d40cc>] (sys_openat+0x88/0xd8) [ 5051.815665][T17745] r7:00000142 r6:00356314 r5:20000200 r4:ffffff9c [ 5051.815687][T17745] [<805d4044>] (sys_openat) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5051.815741][T17745] Exception stack(0xea5b9fa8 to 0xea5b9ff0) [ 5051.815782][T17745] 9fa0: 00000000 00000000 ffffff9c 20000200 00000002 00000000 [ 5051.815820][T17745] 9fc0: 00000000 00000000 00356314 00000142 003562d8 00000000 00000001 76f3d0dc [ 5051.815849][T17745] 9fe0: 76f3ce88 76f3ce78 00018ff8 001311f0 [ 5051.815876][T17745] r5:00000000 r4:00000000 [ 5051.816502][T17745] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -ENOMEM [ 5056.766016][ T29] audit: type=1400 audit(5056.660:692): avc: denied { mount } for pid=17772 comm="syz.4.3809" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 5057.117407][ T29] audit: type=1400 audit(5057.010:693): avc: denied { unmount } for pid=17032 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 5057.710028][T17784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5057.713203][T17784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5060.708303][T17799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5060.732829][T17799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5061.047932][T17803] fuse: Bad value for 'user_id' [ 5061.048101][T17803] fuse: Bad value for 'user_id' [ 5068.083033][T17813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5068.083503][T17813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5068.528484][T17817] fuse: Bad value for 'fd' [ 5070.394413][T17825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5070.395470][T17825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5071.009528][T17829] fuse: Bad value for 'fd' [ 5071.968950][T17831] FAULT_INJECTION: forcing a failure. [ 5071.968950][T17831] name fail_futex, interval 1, probability 0, space 0, times 0 [ 5071.969105][T17831] CPU: 0 UID: 0 PID: 17831 Comm: syz.4.3828 Not tainted syzkaller #0 PREEMPT [ 5071.969164][T17831] Hardware name: ARM-Versatile Express [ 5071.969192][T17831] Call trace: [ 5071.969240][T17831] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5071.969356][T17831] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5071.969383][T17831] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5071.969443][T17831] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5071.969511][T17831] r7:ea5b9e38 r6:00000000 r5:85e6b200 r4:834f6840 [ 5071.969533][T17831] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5071.969594][T17831] [<80a5f334>] (should_fail_ex) from [<80a5f568>] (should_fail+0x14/0x18) [ 5071.969659][T17831] r8:00000000 r7:ea5b9e38 r6:00000004 r5:003562e0 r4:00000000 [ 5071.969684][T17831] [<80a5f554>] (should_fail) from [<8035ac9c>] (get_futex_key+0xa4/0x4a8) [ 5071.969742][T17831] [<8035abf8>] (get_futex_key) from [<8036083c>] (futex_wait_setup+0x88/0x29c) [ 5071.969826][T17831] r10:b5003500 r9:b5403587 r8:b5003500 r7:003562e0 r6:003562e0 r5:85e6b200 [ 5071.969854][T17831] r4:7efffffc [ 5071.969873][T17831] [<803607b4>] (futex_wait_setup) from [<80360ad4>] (__futex_wait+0x84/0x110) [ 5071.969957][T17831] r10:00000000 r9:00000000 r8:00000000 r7:00000002 r6:003562e0 r5:00000000 [ 5071.969982][T17831] r4:85e6b200 [ 5071.970001][T17831] [<80360a50>] (__futex_wait) from [<80360be0>] (futex_wait+0x80/0x10c) [ 5071.970081][T17831] r9:00000000 r8:0000c350 r7:003562e0 r6:00000000 r5:00000000 r4:00000002 [ 5071.970104][T17831] [<80360b60>] (futex_wait) from [<8035c308>] (do_futex+0x1b4/0x1d0) [ 5071.970183][T17831] r10:000000f0 r9:00000000 r8:85e6b200 r7:00000000 r6:003562e0 r5:00000080 [ 5071.970209][T17831] r4:00000000 [ 5071.970228][T17831] [<8035c154>] (do_futex) from [<8035cbbc>] (sys_futex_time32+0x11c/0x1bc) [ 5071.970295][T17831] r4:00000000 [ 5071.970316][T17831] [<8035caa0>] (sys_futex_time32) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5071.970378][T17831] Exception stack(0xea5b9fa8 to 0xea5b9ff0) [ 5071.970424][T17831] 9fa0: 00132578 ffffffff 003562e0 00000080 00000000 00000000 [ 5071.970466][T17831] 9fc0: 00132578 ffffffff 76f3d7d4 000000f0 00340000 00000000 00000001 76f3d0dc [ 5071.970501][T17831] 9fe0: 76f3cf38 76f3cf28 00021de4 001311f0 [ 5071.970543][T17831] r9:85e6b200 r8:8020029c r7:000000f0 r6:76f3d7d4 r5:ffffffff r4:00132578 [ 5073.604367][T17837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5073.606687][T17837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5075.440402][T17849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5075.446558][T17849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5076.600865][T17861] netlink: 'syz.4.3840': attribute type 21 has an invalid length. [ 5076.800041][T16996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5076.854793][T16996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5076.868519][T16996] bond0 (unregistering): Released all slaves [ 5077.030201][T16996] hsr_slave_0: left promiscuous mode [ 5077.045148][T16996] hsr_slave_1: left promiscuous mode [ 5077.104045][T16996] veth1_macvtap: left promiscuous mode [ 5077.104266][T16996] veth0_macvtap: left promiscuous mode [ 5077.104471][T16996] veth1_vlan: left promiscuous mode [ 5077.104625][T16996] veth0_vlan: left promiscuous mode [ 5078.680500][T17875] usb usb1: usbfs: process 17875 (syz.4.3845) did not claim interface 0 before use [ 5086.384010][T17895] fuse: Invalid rootmode [ 5088.403559][ T8741] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 5088.422369][ T8741] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 5088.545127][T17916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5088.545768][T17916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5088.553894][T17914] FAULT_INJECTION: forcing a failure. [ 5088.553894][T17914] name failslab, interval 1, probability 0, space 0, times 0 [ 5088.554051][T17914] CPU: 1 UID: 0 PID: 17914 Comm: syz.1.3858 Not tainted syzkaller #0 PREEMPT [ 5088.554106][T17914] Hardware name: ARM-Versatile Express [ 5088.554132][T17914] Call trace: [ 5088.554185][T17914] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5088.554318][T17914] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5088.554342][T17914] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5088.554400][T17914] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5088.554466][T17914] r7:00000294 r6:00000000 r5:855ff080 r4:835165e4 [ 5088.554485][T17914] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5088.554559][T17914] [<80a5f334>] (should_fail_ex) from [<8059bd74>] (should_failslab+0x6c/0x94) [ 5088.554638][T17914] r8:855ff080 r7:00000294 r6:817946f4 r5:00000dc0 r4:83c01540 [ 5088.554659][T17914] [<8059bd08>] (should_failslab) from [<8057a824>] (__kmalloc_cache_noprof+0x58/0x338) [ 5088.554722][T17914] [<8057a7cc>] (__kmalloc_cache_noprof) from [<817946f4>] (tcf_block_get_ext+0x26c/0x550) [ 5088.554799][T17914] r10:00000000 r9:86e4b000 r8:86e35000 r7:8276076c r6:85506800 r5:dfb81a54 [ 5088.554824][T17914] r4:855069a8 [ 5088.554844][T17914] [<81794488>] (tcf_block_get_ext) from [<81794a38>] (tcf_block_get+0x60/0xa0) [ 5088.554916][T17914] r10:ffffffff r9:85506be0 r8:8340e9ac r7:dfb81c48 r6:dfb81c48 r5:85506800 [ 5088.554940][T17914] r4:855069a8 [ 5088.554957][T17914] [<817949d8>] (tcf_block_get) from [<817bffc4>] (sfq_init+0x68/0x858) [ 5088.555022][T17914] r6:856876ac r5:85506800 r4:ffffffff [ 5088.555040][T17914] [<817bff5c>] (sfq_init) from [<8178d308>] (qdisc_create+0x14c/0x624) [ 5088.555109][T17914] r10:ffffffff r9:00000000 r8:8340e9ac r7:86e4b000 r6:85506800 r5:00080000 [ 5088.555135][T17914] r4:ffffffff [ 5088.555154][T17914] [<8178d1bc>] (qdisc_create) from [<8178fc5c>] (tc_modify_qdisc+0x474/0x8ec) [ 5088.555231][T17914] r10:ffffffff r9:00000000 r8:86e4b000 r7:dfb81c48 r6:85687680 r5:873ee840 [ 5088.555258][T17914] r4:00000000 [ 5088.555277][T17914] [<8178f7e8>] (tc_modify_qdisc) from [<81723d18>] (rtnetlink_rcv_msg+0x12c/0x340) [ 5088.555353][T17914] r10:00000000 r9:00000000 r8:8383aadc r7:873ee840 r6:8383ac5c r5:00000014 [ 5088.555379][T17914] r4:85687680 [ 5088.555398][T17914] [<81723bec>] (rtnetlink_rcv_msg) from [<818075b8>] (netlink_rcv_skb+0xc0/0x120) [ 5088.555508][T17914] r10:8340f6b0 r9:86e35000 r8:86c9b280 r7:85687680 r6:81723bec r5:873ee840 [ 5088.555533][T17914] r4:00000000 [ 5088.555553][T17914] [<818074f8>] (netlink_rcv_skb) from [<817226cc>] (rtnetlink_rcv+0x18/0x1c) [ 5088.555623][T17914] r7:87277064 r6:873ee840 r5:00000078 r4:87277000 [ 5088.555644][T17914] [<817226b4>] (rtnetlink_rcv) from [<81806dec>] (netlink_unicast+0x3a0/0x420) [ 5088.555707][T17914] [<81806a4c>] (netlink_unicast) from [<81807048>] (netlink_sendmsg+0x1dc/0x46c) [ 5088.555781][T17914] r10:00000000 r9:86fde400 r8:00000000 r7:00000000 r6:00000078 r5:873ee840 [ 5088.555806][T17914] r4:dfb81f28 [ 5088.555825][T17914] [<81806e6c>] (netlink_sendmsg) from [<816cee88>] (__sock_sendmsg+0x44/0xb0) [ 5088.555919][T17914] r10:00000000 r9:00000000 r8:dfb81dd4 r7:00000000 r6:860fc7c0 r5:dfb81f28 [ 5088.555948][T17914] r4:00000000 [ 5088.555970][T17914] [<816cee44>] (__sock_sendmsg) from [<816cfd7c>] (____sys_sendmsg+0x238/0x2fc) [ 5088.556040][T17914] r7:00000000 r6:00000000 r5:860fc7c0 r4:dfb81f28 [ 5088.556062][T17914] [<816cfb44>] (____sys_sendmsg) from [<816d01b4>] (___sys_sendmsg+0x9c/0xd0) [ 5088.556135][T17914] r10:00000128 r9:200000c0 r8:00000000 r7:00000000 r6:860fc7c0 r5:dfb81f28 [ 5088.556160][T17914] r4:00000000 [ 5088.556179][T17914] [<816d0118>] (___sys_sendmsg) from [<816d2648>] (__sys_sendmsg+0x8c/0xe0) [ 5088.556266][T17914] r9:855ff080 r8:8785d680 r7:00000000 r6:200000c0 r5:8785d681 r4:00000004 [ 5088.556290][T17914] [<816d25bc>] (__sys_sendmsg) from [<816d26b0>] (sys_sendmsg+0x14/0x18) [ 5088.556363][T17914] r8:8020029c r7:00000128 r6:00356310 r5:00000000 r4:00000000 [ 5088.556386][T17914] [<816d269c>] (sys_sendmsg) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5088.556439][T17914] Exception stack(0xdfb81fa8 to 0xdfb81ff0) [ 5088.556485][T17914] 1fa0: 00000000 00000000 00000004 200000c0 00000000 00000000 [ 5088.556526][T17914] 1fc0: 00000000 00000000 00356310 00000128 003562d8 00000000 00000001 76f980dc [ 5088.556560][T17914] 1fe0: 76f97e88 76f97e78 00018ff8 001311f0 [ 5088.934947][T17923] FAULT_INJECTION: forcing a failure. [ 5088.934947][T17923] name failslab, interval 1, probability 0, space 0, times 0 [ 5088.935139][T17923] CPU: 0 UID: 0 PID: 17923 Comm: syz.4.3862 Not tainted syzkaller #0 PREEMPT [ 5088.935198][T17923] Hardware name: ARM-Versatile Express [ 5088.935232][T17923] Call trace: [ 5088.935286][T17923] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5088.935403][T17923] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5088.935452][T17923] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5088.935516][T17923] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5088.935584][T17923] r7:855ff080 r6:00000000 r5:855ff080 r4:835165e4 [ 5088.935607][T17923] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5088.935669][T17923] [<80a5f334>] (should_fail_ex) from [<8059bd74>] (should_failslab+0x6c/0x94) [ 5088.935757][T17923] r8:00000000 r7:855ff080 r6:83c01300 r5:00000dc0 r4:00000078 [ 5088.935781][T17923] [<8059bd08>] (should_failslab) from [<8057978c>] (__kmalloc_noprof+0xa8/0x3c8) [ 5088.935849][T17923] [<805796e4>] (__kmalloc_noprof) from [<816d5cdc>] (sock_kmalloc+0x58/0x84) [ 5088.935936][T17923] r10:86c146c0 r9:00000000 r8:dfc39d38 r7:00000020 r6:00000000 r5:00000078 [ 5088.935964][T17923] r4:86a06114 [ 5088.935984][T17923] [<816d5c84>] (sock_kmalloc) from [<81905f48>] (__tcp_md5_do_add+0x84/0x1b4) [ 5088.936051][T17923] r5:00000002 r4:00000009 [ 5088.936075][T17923] [<81905ec4>] (__tcp_md5_do_add) from [<8190ae28>] (tcp_md5_do_add+0x64/0xf8) [ 5088.936149][T17923] r10:00000009 r9:00000000 r8:00000000 r7:00000020 r6:00000002 r5:dfc39d38 [ 5088.936174][T17923] r4:86a06000 [ 5088.936193][T17923] [<8190adc4>] (tcp_md5_do_add) from [<8190b52c>] (tcp_v4_parse_md5_keys+0xd4/0x21c) [ 5088.936270][T17923] r10:dfc39ecc r9:dfc39e50 r8:86de7000 r7:00000000 r6:86a06000 r5:00000000 [ 5088.936292][T17923] r4:0000000e [ 5088.936309][T17923] [<8190b458>] (tcp_v4_parse_md5_keys) from [<818e9f5c>] (do_tcp_setsockopt+0x4b0/0xbb4) [ 5088.936373][T17923] r7:86a06000 r6:00000000 r5:000000d8 r4:8190b458 [ 5088.936390][T17923] [<818e9ab0>] (do_tcp_setsockopt) from [<818ea6b0>] (tcp_setsockopt+0x50/0x58) [ 5088.936465][T17923] r10:00000126 r9:855ff080 r8:000000d8 r7:860f67c0 r6:0000000e r5:00000006 [ 5088.936493][T17923] r4:818ea660 [ 5088.936513][T17923] [<818ea664>] (tcp_setsockopt) from [<816d2f78>] (sock_common_setsockopt+0x38/0x40) [ 5088.936576][T17923] r4:818ea660 [ 5088.936599][T17923] [<816d2f44>] (sock_common_setsockopt) from [<816ce15c>] (do_sock_setsockopt+0x70/0xc8) [ 5088.936661][T17923] r4:816d2f40 [ 5088.936680][T17923] [<816ce0ec>] (do_sock_setsockopt) from [<816d1ec0>] (__sys_setsockopt+0x7c/0xc4) [ 5088.936765][T17923] r8:00000000 r7:878ccd00 r6:878ccd01 r5:0000000e r4:00000006 [ 5088.936789][T17923] [<816d1e44>] (__sys_setsockopt) from [<816d1f24>] (sys_setsockopt+0x1c/0x24) [ 5088.936863][T17923] r8:8020029c r7:00000126 r6:00356318 r5:00000000 r4:000000d8 [ 5088.936884][T17923] [<816d1f08>] (sys_setsockopt) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5088.936940][T17923] Exception stack(0xdfc39fa8 to 0xdfc39ff0) [ 5088.936983][T17923] 9fa0: 000000d8 00000000 00000004 00000006 0000000e 20000440 [ 5088.937018][T17923] 9fc0: 000000d8 00000000 00356318 00000126 003562d8 00000000 00000001 76f3d0dc [ 5088.937049][T17923] 9fe0: 76f3ce88 76f3ce78 00018ff8 001311f0 [ 5089.140546][T17926] fuse: Bad value for 'rootmode' [ 5089.264519][ T29] audit: type=1400 audit(5089.160:694): avc: denied { getopt } for pid=17927 comm="syz.1.3864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 5091.188176][T17943] fuse: Bad value for 'rootmode' [ 5094.600450][T17961] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3877'. [ 5097.637830][T18004] fuse: Unknown parameter 'use00000000000000000000' [ 5099.602322][T18024] fuse: Unknown parameter 'user_i00000000000000000000' [ 5101.195588][T18035] fuse: Unknown parameter 'user_i00000000000000000000' [ 5103.293407][T18050] fuse: Unknown parameter 'user_i00000000000000000000' [ 5106.836278][T18077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5106.837039][T18077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5107.475055][T18083] input: AT Raw Set 2 keyboard as /devices/platform/bus@8000000/bus@8000000:motherboard-bus/bus@8000000:motherboard-bus:iofpga-bus@300000000/1c060000.kmi/serio0/input/input29 [ 5107.479449][ T29] audit: type=1326 audit(5107.370:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18093 comm="syz.1.3926" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 5107.479685][ T29] audit: type=1326 audit(5107.370:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18093 comm="syz.1.3926" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 5107.485938][ T29] audit: type=1326 audit(5107.370:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18093 comm="syz.1.3926" exe="/syz-executor" sig=0 arch=40000028 syscall=346 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 5107.495646][ T29] audit: type=1326 audit(5107.390:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18093 comm="syz.1.3926" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 5107.497921][ T29] audit: type=1326 audit(5107.390:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18093 comm="syz.1.3926" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 5108.175951][T18106] fuse: Bad value for 'fd' [ 5110.438855][T18118] FAULT_INJECTION: forcing a failure. [ 5110.438855][T18118] name failslab, interval 1, probability 0, space 0, times 0 [ 5110.438954][T18118] CPU: 0 UID: 0 PID: 18118 Comm: syz.4.3931 Not tainted syzkaller #0 PREEMPT [ 5110.438991][T18118] Hardware name: ARM-Versatile Express [ 5110.439008][T18118] Call trace: [ 5110.439035][T18118] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5110.439098][T18118] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5110.439110][T18118] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5110.439142][T18118] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5110.439183][T18118] r7:000003d8 r6:00000000 r5:855e7080 r4:835165e4 [ 5110.439194][T18118] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5110.439226][T18118] [<80a5f334>] (should_fail_ex) from [<8059bd74>] (should_failslab+0x6c/0x94) [ 5110.439267][T18118] r8:855e7080 r7:000003d8 r6:803e5210 r5:00500dc0 r4:83c02300 [ 5110.439294][T18118] [<8059bd08>] (should_failslab) from [<8057a824>] (__kmalloc_cache_noprof+0x58/0x338) [ 5110.439362][T18118] [<8057a7cc>] (__kmalloc_cache_noprof) from [<803e5210>] (bpf_prog_alloc_no_stats+0xa0/0x1cc) [ 5110.439457][T18118] r10:855e7080 r9:00000003 r8:00100cc0 r7:00100cc0 r6:00001000 r5:00500dc0 [ 5110.439503][T18118] r4:dfc96000 [ 5110.439521][T18118] [<803e5170>] (bpf_prog_alloc_no_stats) from [<803e5354>] (bpf_prog_alloc+0x18/0xc8) [ 5110.439568][T18118] r9:00000003 r8:dfc99d30 r7:00000000 r6:ffffffc5 r5:00500cc0 r4:dfc99e98 [ 5110.439585][T18118] [<803e533c>] (bpf_prog_alloc) from [<803f282c>] (bpf_prog_load+0x770/0xc74) [ 5110.439677][T18118] r7:00000000 r6:ffffffc5 r5:00000000 r4:dfc99e98 [ 5110.439698][T18118] [<803f20bc>] (bpf_prog_load) from [<803f4a48>] (__sys_bpf+0xf34/0x2204) [ 5110.439775][T18118] r10:855e7080 r9:00000048 r8:00000000 r7:00000048 r6:00000005 r5:dfc99e40 [ 5110.439798][T18118] r4:00000000 [ 5110.439815][T18118] [<803f3b14>] (__sys_bpf) from [<803f6334>] (sys_bpf+0x50/0x6c) [ 5110.439885][T18118] r10:00000182 r9:855e7080 r8:8020029c r7:00000182 r6:00356310 r5:00000000 [ 5110.439911][T18118] r4:00000000 [ 5110.439928][T18118] [<803f62e4>] (sys_bpf) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5110.439968][T18118] Exception stack(0xdfc99fa8 to 0xdfc99ff0) [ 5110.439993][T18118] 9fa0: 00000000 00000000 00000005 200007c0 00000048 00000000 [ 5110.440012][T18118] 9fc0: 00000000 00000000 00356310 00000182 003562d8 00000000 00000001 76f3d0dc [ 5110.440027][T18118] 9fe0: 76f3ce88 76f3ce78 00018ff8 001311f0 [ 5114.570300][T18132] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3938'. [ 5116.415266][ T3691] input: syz0 as /devices/virtual/misc/uhid/0005:4000B05:0002.0006/input/input30 [ 5116.419965][ T3691] hid-generic 0005:4000B05:0002.0006: input,hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz1 [ 5117.549195][T18180] fuse: Unknown parameter '0x0000000000000004' [ 5119.199319][T18197] syzkaller0: entered promiscuous mode [ 5119.199696][T18197] syzkaller0: entered allmulticast mode [ 5119.688073][T18206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3965'. [ 5119.688447][T18206] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3965'. [ 5132.083296][T18234] fuse: Unknown parameter '0x0000000000000004' [ 5132.978194][T18244] fuse: Unknown parameter '0x0000000000000004' [ 5133.643273][ T29] audit: type=1326 audit(5133.540:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18249 comm="syz.1.3981" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 5133.646052][ T29] audit: type=1326 audit(5133.540:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18249 comm="syz.1.3981" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 5133.646700][ T29] audit: type=1326 audit(5133.540:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18249 comm="syz.1.3981" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 5133.648991][ T29] audit: type=1326 audit(5133.540:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18249 comm="syz.1.3981" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 5133.649824][ T29] audit: type=1326 audit(5133.540:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18249 comm="syz.1.3981" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 5133.650641][ T29] audit: type=1326 audit(5133.540:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18249 comm="syz.1.3981" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 5133.665000][ T29] audit: type=1326 audit(5133.560:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18249 comm="syz.1.3981" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 5133.665139][ T29] audit: type=1326 audit(5133.560:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18249 comm="syz.1.3981" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 5133.665180][ T29] audit: type=1326 audit(5133.560:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18249 comm="syz.1.3981" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 5133.666758][ T29] audit: type=1326 audit(5133.560:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18249 comm="syz.1.3981" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1311f0 code=0x7ffc0000 [ 5135.073915][T18254] fuse: Unknown parameter 'fd0x0000000000000004' [ 5137.804010][T18264] fuse: Unknown parameter 'fd0x0000000000000004' [ 5138.557766][T18266] netlink: 'syz.1.3989': attribute type 1 has an invalid length. [ 5138.729392][T18266] 8021q: adding VLAN 0 to HW filter on device bond2 [ 5139.852284][T18307] fuse: Unknown parameter 'fd0x0000000000000004' [ 5143.690706][T18332] netlink: 'syz.1.4002': attribute type 1 has an invalid length. [ 5143.690858][T18332] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4002'. [ 5143.783048][T18334] FAULT_INJECTION: forcing a failure. [ 5143.783048][T18334] name failslab, interval 1, probability 0, space 0, times 0 [ 5143.783171][T18334] CPU: 0 UID: 0 PID: 18334 Comm: syz.4.4003 Not tainted syzkaller #0 PREEMPT [ 5143.783205][T18334] Hardware name: ARM-Versatile Express [ 5143.783219][T18334] Call trace: [ 5143.783247][T18334] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5143.783310][T18334] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5143.783322][T18334] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5143.783350][T18334] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5143.783385][T18334] r7:84d1d780 r6:00000000 r5:84d1d780 r4:835165e4 [ 5143.783409][T18334] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5143.783511][T18334] [<80a5f334>] (should_fail_ex) from [<8059bd74>] (should_failslab+0x6c/0x94) [ 5143.783550][T18334] r8:00000000 r7:84d1d780 r6:83c016c0 r5:00000c40 r4:00001000 [ 5143.783560][T18334] [<8059bd08>] (should_failslab) from [<8057978c>] (__kmalloc_noprof+0xa8/0x3c8) [ 5143.783589][T18334] [<805796e4>] (__kmalloc_noprof) from [<8088b61c>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 5143.783659][T18334] r10:00000000 r9:8442c800 r8:00000000 r7:860c0990 r6:84684aa8 r5:00001000 [ 5143.783687][T18334] r4:00000000 [ 5143.783710][T18334] [<8088b5e0>] (tomoyo_realpath_from_path) from [<808876e4>] (tomoyo_path_number_perm+0xcc/0x22c) [ 5143.783781][T18334] r10:00000000 r9:00000003 r8:84684a80 r7:00008916 r6:81ee19d4 r5:00000004 [ 5143.783795][T18334] r4:84684aa8 r3:832db580 [ 5143.783804][T18334] [<80887618>] (tomoyo_path_number_perm) from [<8088c038>] (tomoyo_file_ioctl+0x1c/0x20) [ 5143.783840][T18334] r10:84d1d780 r9:00000003 r8:84684a80 r7:00000000 r6:00000000 r5:00008916 [ 5143.783852][T18334] r4:84684a80 [ 5143.783860][T18334] [<8088c01c>] (tomoyo_file_ioctl) from [<80836398>] (security_file_ioctl+0x80/0x1d4) [ 5143.783890][T18334] [<80836318>] (security_file_ioctl) from [<805f3b1c>] (sys_ioctl+0x4c/0xb5c) [ 5143.783926][T18334] r7:00000000 r6:00008916 r5:84684a81 r4:00000000 [ 5143.783935][T18334] [<805f3ad0>] (sys_ioctl) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5143.783961][T18334] Exception stack(0xdf9f9fa8 to 0xdf9f9ff0) [ 5143.783982][T18334] 9fa0: 00000000 00000000 00000003 00008916 00000000 00000000 [ 5143.784000][T18334] 9fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f3d0dc [ 5143.784014][T18334] 9fe0: 76f3ce88 76f3ce78 00018ff8 001311f0 [ 5143.784033][T18334] r10:00000036 r9:84d1d780 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 5143.784044][T18334] r4:00000000 [ 5143.784075][T18334] ERROR: Out of memory at tomoyo_realpath_from_path. [ 5146.494918][T18361] FAULT_INJECTION: forcing a failure. [ 5146.494918][T18361] name failslab, interval 1, probability 0, space 0, times 0 [ 5146.495012][T18361] CPU: 1 UID: 0 PID: 18361 Comm: syz.4.4014 Not tainted syzkaller #0 PREEMPT [ 5146.495040][T18361] Hardware name: ARM-Versatile Express [ 5146.495054][T18361] Call trace: [ 5146.495079][T18361] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5146.495139][T18361] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5146.495152][T18361] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5146.495180][T18361] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5146.495211][T18361] r7:8d412580 r6:00000000 r5:8d412580 r4:835165e4 [ 5146.495221][T18361] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5146.495262][T18361] [<80a5f334>] (should_fail_ex) from [<8059bd74>] (should_failslab+0x6c/0x94) [ 5146.495297][T18361] r8:00000000 r7:8d412580 r6:80604ae4 r5:00000cc0 r4:83cba240 [ 5146.495310][T18361] [<8059bd08>] (should_failslab) from [<805787b8>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 5146.495376][T18361] [<8057875c>] (kmem_cache_alloc_noprof) from [<80604ae4>] (dup_fd+0x34/0x3d0) [ 5146.495480][T18361] r10:000001b4 r9:8d412580 r8:83688d70 r7:86c40b00 r6:df9f9f68 r5:86c40b00 [ 5146.495512][T18361] r4:ffffffff [ 5146.495522][T18361] [<80604ab0>] (dup_fd) from [<8060522c>] (sys_close_range+0xa4/0x3ac) [ 5146.495561][T18361] r10:000001b4 r9:8d412580 r8:00000002 r7:ffffffff r6:8d412580 r5:86c40b00 [ 5146.495571][T18361] r4:ffffffff [ 5146.495579][T18361] [<80605188>] (sys_close_range) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5146.495604][T18361] Exception stack(0xdf9f9fa8 to 0xdf9f9ff0) [ 5146.495625][T18361] 9fa0: 00000000 00000000 ffffffff ffffffff 00000002 00000000 [ 5146.495652][T18361] 9fc0: 00000000 00000000 00356310 000001b4 003562d8 00000000 00000001 76f3d0dc [ 5146.495666][T18361] 9fe0: 76f3ce88 76f3ce78 00018ff8 001311f0 [ 5146.495685][T18361] r10:000001b4 r9:8d412580 r8:8020029c r7:000001b4 r6:00356310 r5:00000000 [ 5146.495696][T18361] r4:00000000 [ 5152.552064][T18415] device-mapper: ioctl: Invalid ioctl structure: uuid ú, name , dev f3 [ 5153.239078][T18421] netlink: 'syz.1.4037': attribute type 3 has an invalid length. [ 5153.808837][T18427] FAULT_INJECTION: forcing a failure. [ 5153.808837][T18427] name failslab, interval 1, probability 0, space 0, times 0 [ 5153.808987][T18427] CPU: 0 UID: 0 PID: 18427 Comm: syz.4.4039 Not tainted syzkaller #0 PREEMPT [ 5153.809041][T18427] Hardware name: ARM-Versatile Express [ 5153.809066][T18427] Call trace: [ 5153.809109][T18427] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5153.809238][T18427] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5153.809269][T18427] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5153.809332][T18427] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5153.809402][T18427] r7:000003d8 r6:00000000 r5:84d31900 r4:835165e4 [ 5153.809426][T18427] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5153.809493][T18427] [<80a5f334>] (should_fail_ex) from [<8059bd74>] (should_failslab+0x6c/0x94) [ 5153.809570][T18427] r8:84d31900 r7:000003d8 r6:803e5210 r5:00500dc0 r4:83c02300 [ 5153.809596][T18427] [<8059bd08>] (should_failslab) from [<8057a824>] (__kmalloc_cache_noprof+0x58/0x338) [ 5153.809659][T18427] [<8057a7cc>] (__kmalloc_cache_noprof) from [<803e5210>] (bpf_prog_alloc_no_stats+0xa0/0x1cc) [ 5153.809744][T18427] r10:84d31900 r9:00000006 r8:00100cc0 r7:00100cc0 r6:00001000 r5:00500dc0 [ 5153.809773][T18427] r4:dfaa5000 [ 5153.809795][T18427] [<803e5170>] (bpf_prog_alloc_no_stats) from [<803e5354>] (bpf_prog_alloc+0x18/0xc8) [ 5153.809876][T18427] r9:00000006 r8:dfaa9d30 r7:00000000 r6:fffffffd r5:00500cc0 r4:dfaa9e98 [ 5153.809901][T18427] [<803e533c>] (bpf_prog_alloc) from [<803f282c>] (bpf_prog_load+0x770/0xc74) [ 5153.809995][T18427] r7:00000000 r6:fffffffd r5:00000000 r4:dfaa9e98 [ 5153.810022][T18427] [<803f20bc>] (bpf_prog_load) from [<803f4a48>] (__sys_bpf+0xf34/0x2204) [ 5153.810103][T18427] r10:84d31900 r9:00000094 r8:00000000 r7:00000094 r6:00000005 r5:dfaa9e40 [ 5153.810131][T18427] r4:00000000 [ 5153.810152][T18427] [<803f3b14>] (__sys_bpf) from [<803f6334>] (sys_bpf+0x50/0x6c) [ 5153.810238][T18427] r10:00000182 r9:84d31900 r8:8020029c r7:00000182 r6:00356310 r5:00000000 [ 5153.810265][T18427] r4:00000000 [ 5153.810286][T18427] [<803f62e4>] (sys_bpf) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5153.810348][T18427] Exception stack(0xdfaa9fa8 to 0xdfaa9ff0) [ 5153.810395][T18427] 9fa0: 00000000 00000000 00000005 20000580 00000094 00000000 [ 5153.810437][T18427] 9fc0: 00000000 00000000 00356310 00000182 003562d8 00000000 00000001 76f3d0dc [ 5153.810471][T18427] 9fe0: 76f3ce88 76f3ce78 00018ff8 001311f0 [ 5154.399769][T18437] FAULT_INJECTION: forcing a failure. [ 5154.399769][T18437] name failslab, interval 1, probability 0, space 0, times 0 [ 5154.399934][T18437] CPU: 0 UID: 0 PID: 18437 Comm: syz.4.4044 Not tainted syzkaller #0 PREEMPT [ 5154.399990][T18437] Hardware name: ARM-Versatile Express [ 5154.400020][T18437] Call trace: [ 5154.400071][T18437] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5154.400180][T18437] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5154.400213][T18437] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5154.400269][T18437] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5154.400328][T18437] r7:83fa8c80 r6:00000000 r5:83fa8c80 r4:835165e4 [ 5154.400348][T18437] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5154.400401][T18437] [<80a5f334>] (should_fail_ex) from [<8059bd74>] (should_failslab+0x6c/0x94) [ 5154.400467][T18437] r8:00000000 r7:83fa8c80 r6:805e7304 r5:00000cc0 r4:83cbab40 [ 5154.400486][T18437] [<8059bd08>] (should_failslab) from [<805787b8>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 5154.400540][T18437] [<8057875c>] (kmem_cache_alloc_noprof) from [<805e7304>] (do_getname_kernel+0x38/0xe4) [ 5154.400610][T18437] r10:00000001 r9:83fa8c80 r8:82760928 r7:00000000 r6:83df890c r5:00000007 [ 5154.400633][T18437] r4:20000000 [ 5154.400650][T18437] [<805e72cc>] (do_getname_kernel) from [<805edf1c>] (kern_path+0x20/0x5c) [ 5154.400714][T18437] r9:83fa8c80 r8:00000000 r7:83df8900 r6:dfb15f24 r5:00000001 r4:20000000 [ 5154.400735][T18437] [<805edefc>] (kern_path) from [<808f5308>] (lookup_bdev+0x4c/0xd0) [ 5154.400801][T18437] r6:83fa8c80 r5:dfb15f68 r4:20000000 [ 5154.400824][T18437] [<808f52bc>] (lookup_bdev) from [<80697bcc>] (sys_quotactl+0x90/0x3a8) [ 5154.400950][T18437] r6:83fa8c80 r5:00000000 r4:20000000 [ 5154.400980][T18437] [<80697b3c>] (sys_quotactl) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5154.401038][T18437] Exception stack(0xdfb15fa8 to 0xdfb15ff0) [ 5154.401081][T18437] 5fa0: 00000000 00000000 80000401 20000000 00000000 00000000 [ 5154.401119][T18437] 5fc0: 00000000 00000000 00356314 00000083 003562d8 00000000 00000001 76f3d0dc [ 5154.401150][T18437] 5fe0: 76f3ce88 76f3ce78 00018ff8 001311f0 [ 5154.401187][T18437] r10:00000083 r9:83fa8c80 r8:8020029c r7:00000083 r6:00356314 r5:00000000 [ 5154.401222][T18437] r4:00000000 [ 5155.003181][T18447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5155.003965][T18447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5157.730809][T18460] FAULT_INJECTION: forcing a failure. [ 5157.730809][T18460] name fail_futex, interval 1, probability 0, space 0, times 0 [ 5157.731749][T18460] CPU: 1 UID: 0 PID: 18460 Comm: syz.4.4052 Not tainted syzkaller #0 PREEMPT [ 5157.731846][T18460] Hardware name: ARM-Versatile Express [ 5157.731875][T18460] Call trace: [ 5157.731924][T18460] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5157.732034][T18460] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5157.732060][T18460] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5157.732117][T18460] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5157.732212][T18460] r7:dfe49e38 r6:00000000 r5:855ff080 r4:834f6840 [ 5157.732233][T18460] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5157.732294][T18460] [<80a5f334>] (should_fail_ex) from [<80a5f568>] (should_fail+0x14/0x18) [ 5157.732355][T18460] r8:00000000 r7:dfe49e38 r6:00000004 r5:003562e0 r4:00000000 [ 5157.732378][T18460] [<80a5f554>] (should_fail) from [<8035ac9c>] (get_futex_key+0xa4/0x4a8) [ 5157.732440][T18460] [<8035abf8>] (get_futex_key) from [<8036083c>] (futex_wait_setup+0x88/0x29c) [ 5157.732514][T18460] r10:b5003500 r9:b5403587 r8:b5003500 r7:003562e0 r6:003562e0 r5:855ff080 [ 5157.732540][T18460] r4:7efffffc [ 5157.732561][T18460] [<803607b4>] (futex_wait_setup) from [<80360ad4>] (__futex_wait+0x84/0x110) [ 5157.732634][T18460] r10:00000000 r9:00000000 r8:00000000 r7:00000002 r6:003562e0 r5:00000000 [ 5157.732661][T18460] r4:855ff080 [ 5157.732683][T18460] [<80360a50>] (__futex_wait) from [<80360be0>] (futex_wait+0x80/0x10c) [ 5157.732759][T18460] r9:00000000 r8:0000c350 r7:003562e0 r6:00000000 r5:00000000 r4:00000002 [ 5157.732780][T18460] [<80360b60>] (futex_wait) from [<8035c308>] (do_futex+0x1b4/0x1d0) [ 5157.732853][T18460] r10:000000f0 r9:00000000 r8:855ff080 r7:00000000 r6:003562e0 r5:00000080 [ 5157.732876][T18460] r4:00000000 [ 5157.732896][T18460] [<8035c154>] (do_futex) from [<8035cbbc>] (sys_futex_time32+0x11c/0x1bc) [ 5157.732959][T18460] r4:00000000 [ 5157.732980][T18460] [<8035caa0>] (sys_futex_time32) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5157.733034][T18460] Exception stack(0xdfe49fa8 to 0xdfe49ff0) [ 5157.733077][T18460] 9fa0: 00132578 ffffffff 003562e0 00000080 00000000 00000000 [ 5157.733118][T18460] 9fc0: 00132578 ffffffff 76f3d7d4 000000f0 00340000 00000000 00000001 76f3d0dc [ 5157.733150][T18460] 9fe0: 76f3cf38 76f3cf28 00021de4 001311f0 [ 5157.733198][T18460] r9:855ff080 r8:8020029c r7:000000f0 r6:76f3d7d4 r5:ffffffff r4:00132578 [ 5157.968344][T18463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5157.970263][T18463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5158.777161][T18471] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4056'. [ 5158.777770][T18471] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 5158.778043][T18471] FAULT_INJECTION: forcing a failure. [ 5158.778043][T18471] name failslab, interval 1, probability 0, space 0, times 0 [ 5158.778112][T18471] CPU: 0 UID: 0 PID: 18471 Comm: syz.4.4056 Not tainted syzkaller #0 PREEMPT [ 5158.778150][T18471] Hardware name: ARM-Versatile Express [ 5158.778164][T18471] Call trace: [ 5158.778189][T18471] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5158.778261][T18471] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5158.778273][T18471] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5158.778302][T18471] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5158.778336][T18471] r7:ffffffff r6:00000000 r5:85e58c80 r4:835165e4 [ 5158.778345][T18471] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5158.778392][T18471] [<80a5f334>] (should_fail_ex) from [<8059bd74>] (should_failslab+0x6c/0x94) [ 5158.778476][T18471] r8:85e58c80 r7:ffffffff r6:83c01240 r5:00000cc0 r4:0000000b [ 5158.778487][T18471] [<8059bd08>] (should_failslab) from [<80579b58>] (__kmalloc_node_track_caller_noprof+0xac/0x3d8) [ 5158.778517][T18471] [<80579aac>] (__kmalloc_node_track_caller_noprof) from [<804ff758>] (kstrdup+0x3c/0x60) [ 5158.778561][T18471] r10:86de7000 r9:83f0710c r8:87161c00 r7:86f448d8 r6:804ff7ac r5:0000000a [ 5158.778590][T18471] r4:00000cc0 [ 5158.778611][T18471] [<804ff71c>] (kstrdup) from [<804ff7ac>] (kstrdup_const+0x30/0x34) [ 5158.778673][T18471] r7:86f448d8 r6:00000000 r5:871005c0 r4:86f44c00 [ 5158.778683][T18471] [<804ff77c>] (kstrdup_const) from [<81beb834>] (kobject_rename+0x94/0x144) [ 5158.778719][T18471] [<81beb7a0>] (kobject_rename) from [<80c41444>] (device_rename+0x9c/0x148) [ 5158.778799][T18471] r9:83f0710c r8:8732c300 r7:86f448d8 r6:00000000 r5:86f44c00 r4:86f44c00 [ 5158.778819][T18471] [<80c413a8>] (device_rename) from [<8170ede4>] (netif_change_name+0x148/0x3d8) [ 5158.778871][T18471] r9:00000000 r8:dfcf1a7c r7:86f448d8 r6:8383aa34 r5:00000000 r4:86f44800 [ 5158.778881][T18471] [<8170ec9c>] (netif_change_name) from [<81726ef4>] (do_setlink+0xe00/0x1100) [ 5158.778945][T18471] r10:86de7000 r9:00000000 r8:dfcf1c98 r7:8748e910 r6:dfcf1ae8 r5:86f44800 [ 5158.778971][T18471] r4:8748e900 [ 5158.778990][T18471] [<817260f4>] (do_setlink) from [<817275c4>] (rtnl_setlink+0x1b8/0x3b0) [ 5158.779049][T18471] r10:86de7000 r9:00000002 r8:dfcf1c98 r7:84467840 r6:00000000 r5:86de7000 [ 5158.779062][T18471] r4:8748e900 [ 5158.779071][T18471] [<8172740c>] (rtnl_setlink) from [<81723ec8>] (rtnetlink_rcv_msg+0x2dc/0x340) [ 5158.779110][T18471] r10:00000003 r9:00000000 r8:8383aadc r7:84467840 r6:00000000 r5:8172740c [ 5158.779121][T18471] r4:8748e900 [ 5158.779130][T18471] [<81723bec>] (rtnetlink_rcv_msg) from [<818075b8>] (netlink_rcv_skb+0xc0/0x120) [ 5158.779231][T18471] r10:8340f6b0 r9:86de7000 r8:8ca26c80 r7:8748e900 r6:81723bec r5:84467840 [ 5158.779258][T18471] r4:00000000 [ 5158.779275][T18471] [<818074f8>] (netlink_rcv_skb) from [<817226cc>] (rtnetlink_rcv+0x18/0x1c) [ 5158.779315][T18471] r7:87b84464 r6:84467840 r5:00000039 r4:87b84400 [ 5158.779325][T18471] [<817226b4>] (rtnetlink_rcv) from [<81806dec>] (netlink_unicast+0x3a0/0x420) [ 5158.779356][T18471] [<81806a4c>] (netlink_unicast) from [<81807048>] (netlink_sendmsg+0x1dc/0x46c) [ 5158.779394][T18471] r10:00000000 r9:8c847000 r8:00000000 r7:00000000 r6:00000039 r5:84467840 [ 5158.779406][T18471] r4:dfcf1de8 [ 5158.779415][T18471] [<81806e6c>] (netlink_sendmsg) from [<816cf770>] (sock_write_iter+0x110/0x180) [ 5158.779529][T18471] r10:00000000 r9:00000001 r8:85e58c80 r7:854d0f00 r6:865ac040 r5:00000000 [ 5158.779543][T18471] r4:dfcf1ed0 [ 5158.779552][T18471] [<816cf660>] (sock_write_iter) from [<805d4b5c>] (do_iter_readv_writev+0x130/0x220) [ 5158.779614][T18471] r7:00000000 r6:00000000 r5:854d0f00 r4:00004004 [ 5158.779637][T18471] [<805d4a2c>] (do_iter_readv_writev) from [<805d62a4>] (vfs_writev+0x134/0x39c) [ 5158.779696][T18471] r10:00000092 r9:00000001 r8:85e58c80 r7:00000000 r6:854d0f00 r5:00000000 [ 5158.779708][T18471] r4:816cf660 [ 5158.779717][T18471] [<805d6170>] (vfs_writev) from [<805d661c>] (do_writev+0x110/0x148) [ 5158.779772][T18471] r9:00000001 r8:20000040 r7:00000000 r6:854d0f00 r5:854d0f01 r4:85e58c80 [ 5158.779800][T18471] [<805d650c>] (do_writev) from [<805d7dd4>] (sys_writev+0x14/0x18) [ 5158.779860][T18471] r9:85e58c80 r8:8020029c r7:00000092 r6:00356310 r5:00000000 r4:00000000 [ 5158.779871][T18471] [<805d7dc0>] (sys_writev) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5158.779898][T18471] Exception stack(0xdfcf1fa8 to 0xdfcf1ff0) [ 5158.779921][T18471] 1fa0: 00000000 00000000 00000004 20000040 00000001 00000000 [ 5158.779940][T18471] 1fc0: 00000000 00000000 00356310 00000092 003562d8 00000000 00000001 76f3d0dc [ 5158.779954][T18471] 1fe0: 76f3ce88 76f3ce78 00018ff8 001311f0 [ 5159.212441][T18473] FAULT_INJECTION: forcing a failure. [ 5159.212441][T18473] name fail_futex, interval 1, probability 0, space 0, times 0 [ 5159.212598][T18473] CPU: 0 UID: 0 PID: 18473 Comm: syz.4.4057 Not tainted syzkaller #0 PREEMPT [ 5159.212657][T18473] Hardware name: ARM-Versatile Express [ 5159.212688][T18473] Call trace: [ 5159.212740][T18473] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5159.212917][T18473] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5159.212951][T18473] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5159.213017][T18473] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5159.213092][T18473] r7:dfb4de38 r6:00000000 r5:855ff080 r4:834f6840 [ 5159.213118][T18473] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5159.213183][T18473] [<80a5f334>] (should_fail_ex) from [<80a5f568>] (should_fail+0x14/0x18) [ 5159.213249][T18473] r8:00000000 r7:dfb4de38 r6:00000004 r5:003562e0 r4:00000000 [ 5159.213295][T18473] [<80a5f554>] (should_fail) from [<8035ac9c>] (get_futex_key+0xa4/0x4a8) [ 5159.213360][T18473] [<8035abf8>] (get_futex_key) from [<8036083c>] (futex_wait_setup+0x88/0x29c) [ 5159.213439][T18473] r10:b5003500 r9:b5403587 r8:b5003500 r7:003562e0 r6:003562e0 r5:855ff080 [ 5159.213466][T18473] r4:7efffffc [ 5159.213487][T18473] [<803607b4>] (futex_wait_setup) from [<80360ad4>] (__futex_wait+0x84/0x110) [ 5159.213567][T18473] r10:00000000 r9:00000000 r8:00000000 r7:00000002 r6:003562e0 r5:00000000 [ 5159.213592][T18473] r4:855ff080 [ 5159.213611][T18473] [<80360a50>] (__futex_wait) from [<80360be0>] (futex_wait+0x80/0x10c) [ 5159.213689][T18473] r9:00000000 r8:0000c350 r7:003562e0 r6:00000000 r5:00000000 r4:00000002 [ 5159.213712][T18473] [<80360b60>] (futex_wait) from [<8035c308>] (do_futex+0x1b4/0x1d0) [ 5159.213789][T18473] r10:000000f0 r9:00000000 r8:855ff080 r7:00000000 r6:003562e0 r5:00000080 [ 5159.213817][T18473] r4:00000000 [ 5159.213836][T18473] [<8035c154>] (do_futex) from [<8035cbbc>] (sys_futex_time32+0x11c/0x1bc) [ 5159.213900][T18473] r4:00000000 [ 5159.213921][T18473] [<8035caa0>] (sys_futex_time32) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5159.213979][T18473] Exception stack(0xdfb4dfa8 to 0xdfb4dff0) [ 5159.214025][T18473] dfa0: 00132578 ffffffff 003562e0 00000080 00000000 00000000 [ 5159.214065][T18473] dfc0: 00132578 ffffffff 76f3d7d4 000000f0 00340000 00000000 00000001 76f3d0dc [ 5159.214099][T18473] dfe0: 76f3cf38 76f3cf28 00021de4 001311f0 [ 5159.214138][T18473] r9:855ff080 r8:8020029c r7:000000f0 r6:76f3d7d4 r5:ffffffff r4:00132578 [ 5161.633159][T18484] FAULT_INJECTION: forcing a failure. [ 5161.633159][T18484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5161.633394][T18484] CPU: 1 UID: 0 PID: 18484 Comm: syz.4.4061 Not tainted syzkaller #0 PREEMPT [ 5161.633458][T18484] Hardware name: ARM-Versatile Express [ 5161.633487][T18484] Call trace: [ 5161.633540][T18484] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5161.633659][T18484] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5161.633687][T18484] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5161.633750][T18484] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5161.633813][T18484] r7:00000001 r6:00000000 r5:83fbb200 r4:83555278 [ 5161.633832][T18484] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5161.633897][T18484] [<80a5f334>] (should_fail_ex) from [<80a5f568>] (should_fail+0x14/0x18) [ 5161.633963][T18484] r8:00000001 r7:00000001 r6:00000001 r5:200014c0 r4:86bb0188 [ 5161.633985][T18484] [<80a5f554>] (should_fail) from [<80a5f588>] (should_fail_usercopy+0x1c/0x20) [ 5161.634036][T18484] [<80a5f56c>] (should_fail_usercopy) from [<804317ac>] (bpf_vlog_reverse_ubuf+0x1a4/0x30c) [ 5161.634095][T18484] [<80431608>] (bpf_vlog_reverse_ubuf) from [<80432444>] (bpf_vlog_finalize+0xb0/0x114) [ 5161.634165][T18484] r10:ffffffea r9:00000050 r8:85ab7100 r7:00000001 r6:dfd51d50 r5:86bb0188 [ 5161.634193][T18484] r4:00000002 [ 5161.634224][T18484] [<80432394>] (bpf_vlog_finalize) from [<80433978>] (bpf_log_attr_finalize+0x3c/0xf4) [ 5161.634292][T18484] r7:b5403587 r6:00000000 r5:00000050 r4:dfd51e80 [ 5161.634318][T18484] [<8043393c>] (bpf_log_attr_finalize) from [<8047f014>] (btf_new_fd+0x224/0x1088) [ 5161.634392][T18484] r6:00000000 r5:00000050 r4:8cf4c900 [ 5161.634418][T18484] [<8047edf0>] (btf_new_fd) from [<803f3fb8>] (__sys_bpf+0x4a4/0x2204) [ 5161.634499][T18484] r10:83fbb200 r9:00000028 r8:00000000 r7:00000028 r6:dfd51e60 r5:00000000 [ 5161.634528][T18484] r4:00000000 [ 5161.634551][T18484] [<803f3b14>] (__sys_bpf) from [<803f6334>] (sys_bpf+0x50/0x6c) [ 5161.634632][T18484] r10:00000182 r9:83fbb200 r8:8020029c r7:00000182 r6:00356310 r5:00000000 [ 5161.634660][T18484] r4:00000000 [ 5161.634683][T18484] [<803f62e4>] (sys_bpf) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5161.634743][T18484] Exception stack(0xdfd51fa8 to 0xdfd51ff0) [ 5161.634793][T18484] 1fa0: 00000000 00000000 00000012 20001380 00000028 00000000 [ 5161.634840][T18484] 1fc0: 00000000 00000000 00356310 00000182 003562d8 00000000 00000001 76f3d0dc [ 5161.634880][T18484] 1fe0: 76f3ce88 76f3ce78 00018ff8 001311f0 [ 5162.513938][T18488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4063'. [ 5162.514333][T18488] netlink: 'syz.4.4063': attribute type 2 has an invalid length. [ 5162.514385][T18488] netlink: 'syz.4.4063': attribute type 1 has an invalid length. [ 5162.514447][T18488] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4063'. [ 5162.874156][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 5162.874314][ T29] audit: type=1400 audit(5162.770:815): avc: denied { mount } for pid=18493 comm="syz.4.4066" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 5162.921859][ T29] audit: type=1400 audit(5162.810:816): avc: denied { unmount } for pid=17032 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 5163.159309][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4068'. [ 5163.159557][T18498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4068'. [ 5163.196753][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4068'. [ 5163.196875][T18498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4068'. [ 5166.177328][T18511] FAULT_INJECTION: forcing a failure. [ 5166.177328][T18511] name fail_futex, interval 1, probability 0, space 0, times 0 [ 5166.177422][T18511] CPU: 0 UID: 0 PID: 18511 Comm: syz.4.4072 Not tainted syzkaller #0 PREEMPT [ 5166.177483][T18511] Hardware name: ARM-Versatile Express [ 5166.177504][T18511] Call trace: [ 5166.177530][T18511] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5166.177593][T18511] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5166.177606][T18511] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5166.177636][T18511] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5166.177671][T18511] r7:dfa91e38 r6:00000000 r5:845f1900 r4:834f6840 [ 5166.177687][T18511] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5166.177718][T18511] [<80a5f334>] (should_fail_ex) from [<80a5f568>] (should_fail+0x14/0x18) [ 5166.177778][T18511] r8:00000000 r7:dfa91e38 r6:00000004 r5:003562e0 r4:00000000 [ 5166.177812][T18511] [<80a5f554>] (should_fail) from [<8035ac9c>] (get_futex_key+0xa4/0x4a8) [ 5166.177847][T18511] [<8035abf8>] (get_futex_key) from [<8036083c>] (futex_wait_setup+0x88/0x29c) [ 5166.177903][T18511] r10:b5003500 r9:b5403587 r8:b5003500 r7:003562e0 r6:003562e0 r5:845f1900 [ 5166.177931][T18511] r4:7efffffc [ 5166.177956][T18511] [<803607b4>] (futex_wait_setup) from [<80360ad4>] (__futex_wait+0x84/0x110) [ 5166.178012][T18511] r10:00000000 r9:00000000 r8:00000000 r7:00000002 r6:003562e0 r5:00000000 [ 5166.178024][T18511] r4:845f1900 [ 5166.178033][T18511] [<80360a50>] (__futex_wait) from [<80360be0>] (futex_wait+0x80/0x10c) [ 5166.178074][T18511] r9:00000000 r8:0000c350 r7:003562e0 r6:00000000 r5:00000000 r4:00000002 [ 5166.178089][T18511] [<80360b60>] (futex_wait) from [<8035c308>] (do_futex+0x1b4/0x1d0) [ 5166.178169][T18511] r10:000000f0 r9:00000000 r8:845f1900 r7:00000000 r6:003562e0 r5:00000080 [ 5166.178184][T18511] r4:00000000 [ 5166.178194][T18511] [<8035c154>] (do_futex) from [<8035cbbc>] (sys_futex_time32+0x11c/0x1bc) [ 5166.178227][T18511] r4:00000000 [ 5166.178237][T18511] [<8035caa0>] (sys_futex_time32) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5166.178274][T18511] Exception stack(0xdfa91fa8 to 0xdfa91ff0) [ 5166.178298][T18511] 1fa0: 00132578 ffffffff 003562e0 00000080 00000000 00000000 [ 5166.178319][T18511] 1fc0: 00132578 ffffffff 76f3d7d4 000000f0 00340000 00000000 00000001 76f3d0dc [ 5166.178336][T18511] 1fe0: 76f3cf38 76f3cf28 00021de4 001311f0 [ 5166.178357][T18511] r9:845f1900 r8:8020029c r7:000000f0 r6:76f3d7d4 r5:ffffffff r4:00132578 [ 5166.287379][T18513] netlink: 'syz.4.4073': attribute type 1 has an invalid length. [ 5166.354286][T18513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 5169.353768][T18557] FAULT_INJECTION: forcing a failure. [ 5169.353768][T18557] name fail_futex, interval 1, probability 0, space 0, times 0 [ 5169.353942][T18557] CPU: 0 UID: 0 PID: 18557 Comm: syz.4.4077 Not tainted syzkaller #0 PREEMPT [ 5169.354007][T18557] Hardware name: ARM-Versatile Express [ 5169.354036][T18557] Call trace: [ 5169.354088][T18557] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5169.354209][T18557] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5169.354239][T18557] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5169.354301][T18557] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5169.354375][T18557] r7:dfad9e38 r6:00000000 r5:845fcb00 r4:834f6840 [ 5169.354397][T18557] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5169.354456][T18557] [<80a5f334>] (should_fail_ex) from [<80a5f568>] (should_fail+0x14/0x18) [ 5169.354515][T18557] r8:00000000 r7:dfad9e38 r6:00000004 r5:003562e0 r4:00000000 [ 5169.354540][T18557] [<80a5f554>] (should_fail) from [<8035ac9c>] (get_futex_key+0xa4/0x4a8) [ 5169.354597][T18557] [<8035abf8>] (get_futex_key) from [<8036083c>] (futex_wait_setup+0x88/0x29c) [ 5169.354671][T18557] r10:b5003500 r9:b5403587 r8:b5003500 r7:003562e0 r6:003562e0 r5:845fcb00 [ 5169.354738][T18557] r4:7efffffc [ 5169.354763][T18557] [<803607b4>] (futex_wait_setup) from [<80360ad4>] (__futex_wait+0x84/0x110) [ 5169.354845][T18557] r10:00000000 r9:00000000 r8:00000000 r7:00000002 r6:003562e0 r5:00000000 [ 5169.354871][T18557] r4:845fcb00 [ 5169.354891][T18557] [<80360a50>] (__futex_wait) from [<80360be0>] (futex_wait+0x80/0x10c) [ 5169.354966][T18557] r9:00000000 r8:0000c350 r7:003562e0 r6:00000000 r5:00000000 r4:00000002 [ 5169.354992][T18557] [<80360b60>] (futex_wait) from [<8035c308>] (do_futex+0x1b4/0x1d0) [ 5169.355067][T18557] r10:000000f0 r9:00000000 r8:845fcb00 r7:00000000 r6:003562e0 r5:00000080 [ 5169.355092][T18557] r4:00000000 [ 5169.355111][T18557] [<8035c154>] (do_futex) from [<8035cbbc>] (sys_futex_time32+0x11c/0x1bc) [ 5169.355171][T18557] r4:00000000 [ 5169.355190][T18557] [<8035caa0>] (sys_futex_time32) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5169.355246][T18557] Exception stack(0xdfad9fa8 to 0xdfad9ff0) [ 5169.355292][T18557] 9fa0: 00132578 ffffffff 003562e0 00000080 00000000 00000000 [ 5169.355335][T18557] 9fc0: 00132578 ffffffff 76f3d7d4 000000f0 00340000 00000000 00000001 76f3d0dc [ 5169.355372][T18557] 9fe0: 76f3cf38 76f3cf28 00021de4 001311f0 [ 5169.355413][T18557] r9:845fcb00 r8:8020029c r7:000000f0 r6:76f3d7d4 r5:ffffffff r4:00132578 [ 5170.084195][T18571] FAULT_INJECTION: forcing a failure. [ 5170.084195][T18571] name fail_futex, interval 1, probability 0, space 0, times 0 [ 5170.084355][T18571] CPU: 0 UID: 0 PID: 18571 Comm: syz.1.4082 Not tainted syzkaller #0 PREEMPT [ 5170.084404][T18571] Hardware name: ARM-Versatile Express [ 5170.084426][T18571] Call trace: [ 5170.084468][T18571] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5170.084568][T18571] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5170.084589][T18571] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5170.084640][T18571] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5170.084699][T18571] r7:dfc15e38 r6:00000000 r5:8ce63200 r4:834f6840 [ 5170.084717][T18571] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5170.084769][T18571] [<80a5f334>] (should_fail_ex) from [<80a5f568>] (should_fail+0x14/0x18) [ 5170.084822][T18571] r8:00000000 r7:dfc15e38 r6:00000004 r5:003562e0 r4:00000000 [ 5170.084839][T18571] [<80a5f554>] (should_fail) from [<8035ac9c>] (get_futex_key+0xa4/0x4a8) [ 5170.084893][T18571] [<8035abf8>] (get_futex_key) from [<8036083c>] (futex_wait_setup+0x88/0x29c) [ 5170.084969][T18571] r10:b5003500 r9:b5403587 r8:b5003500 r7:003562e0 r6:003562e0 r5:8ce63200 [ 5170.084997][T18571] r4:7efffffc [ 5170.085018][T18571] [<803607b4>] (futex_wait_setup) from [<80360ad4>] (__futex_wait+0x84/0x110) [ 5170.085089][T18571] r10:00000000 r9:00000000 r8:00000000 r7:00000002 r6:003562e0 r5:00000000 [ 5170.085111][T18571] r4:8ce63200 [ 5170.085131][T18571] [<80360a50>] (__futex_wait) from [<80360be0>] (futex_wait+0x80/0x10c) [ 5170.085204][T18571] r9:00000000 r8:0000c350 r7:003562e0 r6:00000000 r5:00000000 r4:00000002 [ 5170.085238][T18571] [<80360b60>] (futex_wait) from [<8035c308>] (do_futex+0x1b4/0x1d0) [ 5170.085309][T18571] r10:000000f0 r9:00000000 r8:8ce63200 r7:00000000 r6:003562e0 r5:00000080 [ 5170.085333][T18571] r4:00000000 [ 5170.085349][T18571] [<8035c154>] (do_futex) from [<8035cbbc>] (sys_futex_time32+0x11c/0x1bc) [ 5170.085405][T18571] r4:00000000 [ 5170.085425][T18571] [<8035caa0>] (sys_futex_time32) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5170.085482][T18571] Exception stack(0xdfc15fa8 to 0xdfc15ff0) [ 5170.085525][T18571] 5fa0: 00132578 ffffffff 003562e0 00000080 00000000 00000000 [ 5170.085565][T18571] 5fc0: 00132578 ffffffff 76f987d4 000000f0 00340000 00000000 00000001 76f980dc [ 5170.085595][T18571] 5fe0: 76f97f38 76f97f28 00021de4 001311f0 [ 5170.085634][T18571] r9:8ce63200 r8:8020029c r7:000000f0 r6:76f987d4 r5:ffffffff r4:00132578 [ 5172.330803][T18582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5172.332593][T18582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5176.147631][ T29] audit: type=1400 audit(5176.040:817): avc: denied { setopt } for pid=18609 comm="syz.4.4093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 5176.149783][ T29] audit: type=1400 audit(5176.040:818): avc: denied { write } for pid=18609 comm="syz.4.4093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 5176.157422][ T29] audit: type=1400 audit(5176.050:819): avc: denied { bind } for pid=18609 comm="syz.4.4093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 5182.845432][T18651] FAULT_INJECTION: forcing a failure. [ 5182.845432][T18651] name failslab, interval 1, probability 0, space 0, times 0 [ 5182.845531][T18651] CPU: 1 UID: 0 PID: 18651 Comm: syz.4.4111 Not tainted syzkaller #0 PREEMPT [ 5182.845562][T18651] Hardware name: ARM-Versatile Express [ 5182.845576][T18651] Call trace: [ 5182.845601][T18651] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5182.845668][T18651] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5182.845681][T18651] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5182.845726][T18651] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5182.845765][T18651] r7:00000000 r6:00000000 r5:845f6400 r4:835165e4 [ 5182.845776][T18651] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5182.845809][T18651] [<80a5f334>] (should_fail_ex) from [<8059bd74>] (should_failslab+0x6c/0x94) [ 5182.845851][T18651] r8:845f6400 r7:00000000 r6:83c016c0 r5:00000cc0 r4:00000bb8 [ 5182.845862][T18651] [<8059bd08>] (should_failslab) from [<8057a250>] (__kvmalloc_node_noprof+0xb8/0x530) [ 5182.845897][T18651] [<8057a198>] (__kvmalloc_node_noprof) from [<8081da00>] (do_semtimedop+0x138/0x240) [ 5182.845940][T18651] r10:00000bb8 r9:874e3000 r8:00000000 r7:ffffffff r6:00356310 r5:00000bb8 [ 5182.845953][T18651] r4:000001f4 [ 5182.845963][T18651] [<8081d8c8>] (do_semtimedop) from [<8081dd9c>] (sys_semop+0x14/0x18) [ 5182.846001][T18651] r10:0000012a r9:845f6400 r8:8020029c r7:0000012a r6:00356310 r5:00000000 [ 5182.846014][T18651] r4:00000000 [ 5182.846024][T18651] [<8081dd88>] (sys_semop) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5182.846051][T18651] Exception stack(0xe0339fa8 to 0xe0339ff0) [ 5182.846076][T18651] 9fa0: 00000000 00000000 ffffffff 20000080 000001f4 00000000 [ 5182.846098][T18651] 9fc0: 00000000 00000000 00356310 0000012a 003562d8 00000000 00000001 76f3d0dc [ 5182.846116][T18651] 9fe0: 76f3ce88 76f3ce78 00018ff8 001311f0 [ 5190.424470][T18699] batadv_slave_1: entered promiscuous mode [ 5190.428305][T18698] batadv_slave_1: left promiscuous mode [ 5194.302514][T18738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4137'. [ 5195.133281][T18751] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 5195.133913][T18751] SELinux: failed to load policy [ 5198.090279][T18768] netlink: 'syz.1.4149': attribute type 1 has an invalid length. [ 5198.090437][T18768] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4149'. [ 5198.090819][T18768] NCSI netlink: No device for ifindex 0 [ 5198.974722][ T29] audit: type=1400 audit(5198.870:820): avc: denied { read } for pid=18788 comm="syz.4.4159" name="/" dev="configfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 5198.974982][ T29] audit: type=1400 audit(5198.870:821): avc: denied { read open } for pid=18788 comm="syz.4.4159" path="/" dev="configfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 5199.566606][T18799] netlink: 'syz.1.4164': attribute type 10 has an invalid length. [ 5203.079918][T18840] netlink: 'syz.1.4178': attribute type 4 has an invalid length. [ 5203.302310][T18854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4179'. [ 5203.499903][T18858] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4180'. [ 5203.500085][T18858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4180'. [ 5203.500130][T18858] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4180'. [ 5210.852339][T18897] ip: renamed from vlan0 [ 5217.513647][T18951] netlink: 'syz.4.4211': attribute type 21 has an invalid length. [ 5217.516332][T18951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4211'. [ 5221.595954][T18959] FAULT_INJECTION: forcing a failure. [ 5221.595954][T18959] name failslab, interval 1, probability 0, space 0, times 0 [ 5221.596107][T18959] CPU: 1 UID: 0 PID: 18959 Comm: syz.4.4215 Not tainted syzkaller #0 PREEMPT [ 5221.596165][T18959] Hardware name: ARM-Versatile Express [ 5221.596195][T18959] Call trace: [ 5221.596247][T18959] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5221.596367][T18959] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5221.596412][T18959] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5221.596475][T18959] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5221.596542][T18959] r7:00000010 r6:00000000 r5:84d30c80 r4:835165e4 [ 5221.596563][T18959] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5221.596625][T18959] [<80a5f334>] (should_fail_ex) from [<8059bd74>] (should_failslab+0x6c/0x94) [ 5221.596711][T18959] r8:84d30c80 r7:00000010 r6:8091b45c r5:00000cc0 r4:83c01240 [ 5221.596736][T18959] [<8059bd08>] (should_failslab) from [<8057a824>] (__kmalloc_cache_noprof+0x58/0x338) [ 5221.596801][T18959] [<8057a7cc>] (__kmalloc_cache_noprof) from [<8091b45c>] (blk_alloc_queue_stats+0x24/0x40) [ 5221.596880][T18959] r10:84d30c80 r9:86becac0 r8:ea629e0c r7:ffffffff r6:83701478 r5:86becac0 [ 5221.596907][T18959] r4:85194e40 [ 5221.596928][T18959] [<8091b438>] (blk_alloc_queue_stats) from [<80902ab0>] (blk_alloc_queue+0x64/0x1c4) [ 5221.596992][T18959] [<80902a4c>] (blk_alloc_queue) from [<8091827c>] (blk_mq_alloc_queue+0x74/0xd0) [ 5221.597072][T18959] r8:00000000 r7:8372b688 r6:86beca00 r5:86becac0 r4:ea629e0c [ 5221.597095][T18959] [<80918208>] (blk_mq_alloc_queue) from [<80918570>] (__blk_mq_alloc_disk+0x18/0x74) [ 5221.597166][T18959] r6:86becac0 r5:00000002 r4:8372b6a0 [ 5221.597188][T18959] [<80918558>] (__blk_mq_alloc_disk) from [<80c7e6c8>] (loop_add+0x1b0/0x2fc) [ 5221.597265][T18959] r7:8372b688 r6:ffffffe4 r5:00000002 r4:86beca00 [ 5221.597288][T18959] [<80c7e518>] (loop_add) from [<80c80078>] (loop_control_ioctl+0x58/0x230) [ 5221.597363][T18959] r9:00000004 r8:86ccf200 r7:ffffffe4 r6:00004c80 r5:ffffffe4 r4:00000000 [ 5221.597385][T18959] [<80c80020>] (loop_control_ioctl) from [<805f3d14>] (sys_ioctl+0x244/0xb5c) [ 5221.597526][T18959] r6:00004c80 r5:86ccf201 r4:00000000 [ 5221.597556][T18959] [<805f3ad0>] (sys_ioctl) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5221.597618][T18959] Exception stack(0xea629fa8 to 0xea629ff0) [ 5221.597662][T18959] 9fa0: 00000000 00000000 00000004 00004c80 ffffffe4 00000000 [ 5221.597715][T18959] 9fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f3d0dc [ 5221.597750][T18959] 9fe0: 76f3ce88 76f3ce78 00018ff8 001311f0 [ 5221.597791][T18959] r10:00000036 r9:84d30c80 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 5221.597817][T18959] r4:00000000 [ 5222.218175][T18965] syzkaller0: entered promiscuous mode [ 5222.218307][T18965] syzkaller0: entered allmulticast mode [ 5228.905022][ T29] audit: type=1400 audit(5228.800:822): avc: denied { bind } for pid=19025 comm="syz.4.4240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 5228.950202][T19026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4240'. [ 5228.950873][T19026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4240'. [ 5229.553870][T19030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4242'. [ 5236.602679][ T29] audit: type=1400 audit(5236.500:823): avc: denied { write } for pid=19033 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5236.924388][ T29] audit: type=1400 audit(5236.820:824): avc: denied { write } for pid=19036 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5239.690851][T19042] bond0: option arp_validate: invalid value ( I) [ 5243.965179][T19055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4249'. [ 5243.965835][T19055] netlink: 'syz.1.4249': attribute type 2 has an invalid length. [ 5243.965892][T19055] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4249'. [ 5244.911882][T19059] md: array md1 already has disks! [ 5246.114438][T19079] netlink: 'syz.4.4261': attribute type 21 has an invalid length. [ 5248.090549][T19102] netlink: 'syz.4.4271': attribute type 7 has an invalid length. [ 5248.090692][T19102] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4271'. [ 5248.090815][T19102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4271'. [ 5249.796123][T19120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5249.797957][T19120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5252.120121][T19140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5252.120643][T19140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5253.981857][T19157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5253.985452][T19157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5257.722137][T19171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5257.722513][T19171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5258.886539][T19184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5258.892570][T19184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5259.676892][T19194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 5272.074003][T19254] FAULT_INJECTION: forcing a failure. [ 5272.074003][T19254] name failslab, interval 1, probability 0, space 0, times 0 [ 5272.074096][T19254] CPU: 0 UID: 0 PID: 19254 Comm: syz.4.4327 Not tainted syzkaller #0 PREEMPT [ 5272.074127][T19254] Hardware name: ARM-Versatile Express [ 5272.074140][T19254] Call trace: [ 5272.074166][T19254] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5272.074229][T19254] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5272.074240][T19254] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5272.074277][T19254] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5272.074311][T19254] r7:00000000 r6:00000000 r5:855ff080 r4:835165e4 [ 5272.074320][T19254] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5272.074347][T19254] [<80a5f334>] (should_fail_ex) from [<8059bd74>] (should_failslab+0x6c/0x94) [ 5272.074383][T19254] r8:855ff080 r7:00000000 r6:83c01600 r5:00000dc0 r4:000007d0 [ 5272.074393][T19254] [<8059bd08>] (should_failslab) from [<8057a250>] (__kvmalloc_node_noprof+0xb8/0x530) [ 5272.074421][T19254] [<8057a198>] (__kvmalloc_node_noprof) from [<817870e4>] (pfifo_fast_init+0x68/0xcc) [ 5272.074461][T19254] r10:8c842400 r9:000001f4 r8:8c8427c0 r7:00000000 r6:00000000 r5:00000020 [ 5272.074473][T19254] r4:8c842640 [ 5272.074482][T19254] [<8178707c>] (pfifo_fast_init) from [<81789780>] (qdisc_create_dflt+0x74/0x1c8) [ 5272.074517][T19254] r10:ffff0000 r9:00000140 r8:00020001 r7:87b7c800 r6:e03a5c48 r5:8c842400 [ 5272.074528][T19254] r4:8340e3dc [ 5272.074536][T19254] [<8178970c>] (qdisc_create_dflt) from [<8178ac18>] (mq_init_common+0xb0/0x134) [ 5272.074572][T19254] r9:00000140 r8:e03a5c48 r7:00000000 r6:86ea9000 r5:84640000 r4:00000001 [ 5272.074583][T19254] [<8178ab68>] (mq_init_common) from [<8178acb4>] (mq_init+0x18/0x34) [ 5272.074618][T19254] r10:ffffffff r9:00000000 r8:8340e4a4 r7:86ea9000 r6:84640000 r5:84640000 [ 5272.074628][T19254] r4:ffffffff [ 5272.074636][T19254] [<8178ac9c>] (mq_init) from [<8178d308>] (qdisc_create+0x14c/0x624) [ 5272.074665][T19254] r5:00020000 r4:ffffffff [ 5272.074674][T19254] [<8178d1bc>] (qdisc_create) from [<8178fc5c>] (tc_modify_qdisc+0x474/0x8ec) [ 5272.074705][T19254] r10:ffffffff r9:00000000 r8:86ea9000 r7:e03a5c48 r6:873086c0 r5:873e4540 [ 5272.074716][T19254] r4:00000000 [ 5272.074724][T19254] [<8178f7e8>] (tc_modify_qdisc) from [<81723d18>] (rtnetlink_rcv_msg+0x12c/0x340) [ 5272.074763][T19254] r10:00000000 r9:00000000 r8:8383aadc r7:873e4540 r6:8383ac5c r5:00000014 [ 5272.074778][T19254] r4:873086c0 [ 5272.074786][T19254] [<81723bec>] (rtnetlink_rcv_msg) from [<818075b8>] (netlink_rcv_skb+0xc0/0x120) [ 5272.074826][T19254] r10:8340f6b0 r9:86de7000 r8:8ca26c80 r7:873086c0 r6:81723bec r5:873e4540 [ 5272.074837][T19254] r4:00000000 [ 5272.074846][T19254] [<818074f8>] (netlink_rcv_skb) from [<817226cc>] (rtnetlink_rcv+0x18/0x1c) [ 5272.074880][T19254] r7:87b84464 r6:873e4540 r5:0000002c r4:87b84400 [ 5272.074889][T19254] [<817226b4>] (rtnetlink_rcv) from [<81806dec>] (netlink_unicast+0x3a0/0x420) [ 5272.074916][T19254] [<81806a4c>] (netlink_unicast) from [<81807048>] (netlink_sendmsg+0x1dc/0x46c) [ 5272.074952][T19254] r10:00000000 r9:8c847c00 r8:00000000 r7:00000000 r6:0000002c r5:873e4540 [ 5272.074970][T19254] r4:e03a5f28 [ 5272.074979][T19254] [<81806e6c>] (netlink_sendmsg) from [<816cee88>] (__sock_sendmsg+0x44/0xb0) [ 5272.075017][T19254] r10:00000000 r9:00000000 r8:e03a5dd4 r7:00000000 r6:866ae7c0 r5:e03a5f28 [ 5272.075028][T19254] r4:00000000 [ 5272.075036][T19254] [<816cee44>] (__sock_sendmsg) from [<816cfd7c>] (____sys_sendmsg+0x238/0x2fc) [ 5272.075068][T19254] r7:00000000 r6:00000000 r5:866ae7c0 r4:e03a5f28 [ 5272.075077][T19254] [<816cfb44>] (____sys_sendmsg) from [<816d01b4>] (___sys_sendmsg+0x9c/0xd0) [ 5272.075112][T19254] r10:00000128 r9:20000240 r8:00000000 r7:00000000 r6:866ae7c0 r5:e03a5f28 [ 5272.075123][T19254] r4:00000000 [ 5272.075132][T19254] [<816d0118>] (___sys_sendmsg) from [<816d2648>] (__sys_sendmsg+0x8c/0xe0) [ 5272.075167][T19254] r9:855ff080 r8:86cb2e00 r7:00000000 r6:20000240 r5:86cb2e01 r4:00000004 [ 5272.075177][T19254] [<816d25bc>] (__sys_sendmsg) from [<816d26b0>] (sys_sendmsg+0x14/0x18) [ 5272.075211][T19254] r8:8020029c r7:00000128 r6:00356310 r5:00000000 r4:00000000 [ 5272.075220][T19254] [<816d269c>] (sys_sendmsg) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5272.075246][T19254] Exception stack(0xe03a5fa8 to 0xe03a5ff0) [ 5272.075274][T19254] 5fa0: 00000000 00000000 00000004 20000240 00000000 00000000 [ 5272.075294][T19254] 5fc0: 00000000 00000000 00356310 00000128 003562d8 00000000 00000001 76f3d0dc [ 5272.075308][T19254] 5fe0: 76f3ce88 76f3ce78 00018ff8 001311f0 [ 5272.815453][ T29] audit: type=1400 audit(5272.710:825): avc: granted { setsecparam } for pid=19261 comm="syz.4.4330" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 5276.696648][ T29] audit: type=1400 audit(5276.580:826): avc: denied { attach_queue } for pid=19291 comm="syz.4.4341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 5278.962353][T19312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5278.962850][T19312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5279.543647][T19318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4349'. [ 5279.543812][T19318] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4349'. [ 5280.224571][T19328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5280.229158][T19328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5282.406350][T19352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5282.413603][T19352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5285.495669][T19369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5285.496733][T19369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5288.153355][T19379] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 5294.212190][T19390] FAULT_INJECTION: forcing a failure. [ 5294.212190][T19390] name failslab, interval 1, probability 0, space 0, times 0 [ 5294.212388][T19390] CPU: 0 UID: 0 PID: 19390 Comm: syz.1.4371 Not tainted syzkaller #0 PREEMPT [ 5294.212452][T19390] Hardware name: ARM-Versatile Express [ 5294.212481][T19390] Call trace: [ 5294.212529][T19390] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5294.212661][T19390] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5294.212690][T19390] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5294.212757][T19390] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5294.212846][T19390] r7:85e62580 r6:00000000 r5:85e62580 r4:835165e4 [ 5294.212867][T19390] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5294.212930][T19390] [<80a5f334>] (should_fail_ex) from [<8059bd74>] (should_failslab+0x6c/0x94) [ 5294.213003][T19390] r8:00000000 r7:85e62580 r6:8066abb0 r5:00000cc0 r4:83cba900 [ 5294.213026][T19390] [<8059bd08>] (should_failslab) from [<805787b8>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 5294.213089][T19390] [<8057875c>] (kmem_cache_alloc_noprof) from [<8066abb0>] (locks_get_lock_context+0x44/0x23c) [ 5294.213172][T19390] r10:85e62580 r9:00000001 r8:860e6f10 r7:827609c4 r6:00000001 r5:860e6f10 [ 5294.213199][T19390] r4:dfad9ef8 [ 5294.213218][T19390] [<8066ab6c>] (locks_get_lock_context) from [<8066ade4>] (flock_lock_inode+0x3c/0x558) [ 5294.213296][T19390] r9:00000001 r8:860e6f10 r7:dfad9f14 r6:84685981 r5:dfad9e78 r4:dfad9ef8 [ 5294.213320][T19390] [<8066ada8>] (flock_lock_inode) from [<8066c51c>] (locks_lock_inode_wait+0x58/0x1ac) [ 5294.213396][T19390] r10:0000008f r9:00000001 r8:860e6f10 r7:dfad9f14 r6:84685981 r5:dfad9ef8 [ 5294.213421][T19390] r4:00000002 [ 5294.213439][T19390] [<8066c4c4>] (locks_lock_inode_wait) from [<8066c7ec>] (__do_sys_flock+0x17c/0x1c8) [ 5294.213523][T19390] r9:00000001 r8:84685980 r7:85e62580 r6:84685981 r5:00000000 r4:00000002 [ 5294.213550][T19390] [<8066c670>] (__do_sys_flock) from [<8066e098>] (sys_flock+0x10/0x14) [ 5294.213639][T19390] r9:85e62580 r8:8020029c r7:0000008f r6:0035630c r5:00000000 r4:00000000 [ 5294.213686][T19390] [<8066e088>] (sys_flock) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5294.213753][T19390] Exception stack(0xdfad9fa8 to 0xdfad9ff0) [ 5294.213814][T19390] 9fa0: 00000000 00000000 00000003 00000002 00000000 00000000 [ 5294.213862][T19390] 9fc0: 00000000 00000000 0035630c 0000008f 003562d8 00000000 00000001 76f980dc [ 5294.213896][T19390] 9fe0: 76f97e88 76f97e78 00018ff8 001311f0 [ 5294.697780][T19394] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4373'. [ 5294.698094][T19394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4373'. [ 5302.206622][T19406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4377'. [ 5306.140235][T19422] FAULT_INJECTION: forcing a failure. [ 5306.140235][T19422] name failslab, interval 1, probability 0, space 0, times 0 [ 5306.140395][T19422] CPU: 0 UID: 0 PID: 19422 Comm: syz.4.4383 Not tainted syzkaller #0 PREEMPT [ 5306.140457][T19422] Hardware name: ARM-Versatile Express [ 5306.140486][T19422] Call trace: [ 5306.140557][T19422] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5306.140681][T19422] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5306.140716][T19422] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5306.140789][T19422] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5306.140868][T19422] r7:83fb7080 r6:00000000 r5:83fb7080 r4:835165e4 [ 5306.140926][T19422] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5306.141002][T19422] [<80a5f334>] (should_fail_ex) from [<8059bd74>] (should_failslab+0x6c/0x94) [ 5306.141088][T19422] r8:00000000 r7:83fb7080 r6:806b32b4 r5:00000dc0 r4:83cf5000 [ 5306.141111][T19422] [<8059bd08>] (should_failslab) from [<805787b8>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 5306.141177][T19422] [<8057875c>] (kmem_cache_alloc_noprof) from [<806b32b4>] (__kernfs_new_node+0x54/0x25c) [ 5306.141267][T19422] r10:83c1d9c0 r9:83fb7080 r8:82760a50 r7:86b6e630 r6:826f73c4 r5:83c1d9c0 [ 5306.141299][T19422] r4:86b6e630 [ 5306.141321][T19422] [<806b3260>] (__kernfs_new_node) from [<806b4c20>] (kernfs_new_node+0x7c/0x84) [ 5306.141395][T19422] r10:83c1d9c0 r9:00000000 r8:00000004 r7:826f73c4 r6:00000000 r5:0000a1ff [ 5306.141424][T19422] r4:86b6e630 [ 5306.141448][T19422] [<806b4ba4>] (kernfs_new_node) from [<806b7668>] (kernfs_create_link+0x88/0xf0) [ 5306.141530][T19422] r10:83fb7080 r9:00000000 r8:00000000 r7:826f73c4 r6:86b6e630 r5:83c1da14 [ 5306.141562][T19422] r4:874f58f0 [ 5306.141587][T19422] [<806b75e0>] (kernfs_create_link) from [<806b8be8>] (sysfs_do_create_link_sd+0x6c/0xec) [ 5306.141668][T19422] r9:00000004 r8:00000001 r7:00000000 r6:874f58f0 r5:826f73c4 r4:86b6e630 [ 5306.141694][T19422] [<806b8b7c>] (sysfs_do_create_link_sd) from [<806b8d9c>] (sysfs_create_link+0x30/0x3c) [ 5306.141768][T19422] r9:00000004 r8:853db138 r7:00000000 r6:868b9830 r5:83f26600 r4:874f15c0 [ 5306.141791][T19422] [<806b8d6c>] (sysfs_create_link) from [<80c69c48>] (module_add_driver+0x38/0x138) [ 5306.141876][T19422] [<80c69c10>] (module_add_driver) from [<80c49130>] (bus_add_driver+0x120/0x248) [ 5306.141960][T19422] r7:00000000 r6:853db100 r5:83f26600 r4:868b9830 [ 5306.141988][T19422] [<80c49010>] (bus_add_driver) from [<80c4bbb8>] (driver_register+0x88/0x124) [ 5306.142073][T19422] r8:84685a80 r7:868b9804 r6:868b9830 r5:84685a81 r4:868b9830 [ 5306.142101][T19422] [<80c4bb30>] (driver_register) from [<8113c3b0>] (usb_gadget_register_driver_owner+0x54/0xec) [ 5306.142177][T19422] r5:84685a81 r4:868b980c [ 5306.142201][T19422] [<8113c35c>] (usb_gadget_register_driver_owner) from [<811a5cbc>] (raw_ioctl+0x9f0/0x1228) [ 5306.142282][T19422] r7:868b9804 r6:60000013 r5:84685a81 r4:868b9800 [ 5306.142311][T19422] [<811a52cc>] (raw_ioctl) from [<805f3d14>] (sys_ioctl+0x244/0xb5c) [ 5306.142406][T19422] r10:83fb7080 r9:00000004 r8:84685a80 r7:00000000 r6:00005501 r5:84685a81 [ 5306.142441][T19422] r4:00000000 [ 5306.142464][T19422] [<805f3ad0>] (sys_ioctl) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5306.142530][T19422] Exception stack(0xdfb85fa8 to 0xdfb85ff0) [ 5306.142575][T19422] 5fa0: 00000000 76f3be38 00000004 00005501 00000000 76f3adc8 [ 5306.142618][T19422] 5fc0: 00000000 76f3be38 76f3ae38 00000036 00000000 76f3ae00 00000004 00480000 [ 5306.142651][T19422] 5fe0: 00000000 76f3adb0 00320000 00130cfc [ 5306.142692][T19422] r10:00000036 r9:83fb7080 r8:8020029c r7:00000036 r6:76f3ae38 r5:76f3be38 [ 5306.142715][T19422] r4:00000000 [ 5306.233762][T19422] bus_add_driver: failed to create module links for raw-gadget.0 [ 5306.234219][T19422] UDC core: USB Raw Gadget: driver registration failed: -12 [ 5306.234320][T19422] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 5310.032547][T19432] FAULT_INJECTION: forcing a failure. [ 5310.032547][T19432] name failslab, interval 1, probability 0, space 0, times 0 [ 5310.032680][T19432] CPU: 0 UID: 0 PID: 19432 Comm: syz.4.4387 Not tainted syzkaller #0 PREEMPT [ 5310.032730][T19432] Hardware name: ARM-Versatile Express [ 5310.032787][T19432] Call trace: [ 5310.032822][T19432] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 5310.032890][T19432] r7:60000013 r6:60000013 r5:82542828 r4:00000000 [ 5310.032903][T19432] [<80201ae4>] (show_stack) from [<8021f600>] (dump_stack_lvl+0x5c/0x70) [ 5310.032934][T19432] [<8021f5a4>] (dump_stack_lvl) from [<8021f62c>] (dump_stack+0x18/0x1c) [ 5310.032968][T19432] r7:855e3200 r6:00000000 r5:855e3200 r4:835165e4 [ 5310.032978][T19432] [<8021f614>] (dump_stack) from [<80a5f4f4>] (should_fail_ex+0x1c0/0x220) [ 5310.033041][T19432] [<80a5f334>] (should_fail_ex) from [<8059bd74>] (should_failslab+0x6c/0x94) [ 5310.033103][T19432] r8:00000000 r7:855e3200 r6:80840a14 r5:00000d40 r4:83cba6c0 [ 5310.033116][T19432] [<8059bd08>] (should_failslab) from [<805787b8>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 5310.033148][T19432] [<8057875c>] (kmem_cache_alloc_noprof) from [<80840a14>] (security_inode_alloc+0x30/0x1d0) [ 5310.033192][T19432] r10:86093c00 r9:00000000 r8:00000000 r7:00000c40 r6:8727b000 r5:86093b00 [ 5310.033204][T19432] r4:86093b00 [ 5310.033215][T19432] [<808409e4>] (security_inode_alloc) from [<805fe014>] (inode_init_always_gfp+0x184/0x1d8) [ 5310.033251][T19432] r5:00000000 r4:86093b00 [ 5310.033261][T19432] [<805fde90>] (inode_init_always_gfp) from [<80601a6c>] (alloc_inode+0x40/0xd0) [ 5310.033297][T19432] r10:00000000 r9:826716f8 r8:871645a8 r7:00008180 r6:81ff390c r5:8727b000 [ 5310.033322][T19432] r4:86093b00 r3:855e3200 [ 5310.033334][T19432] [<80601a2c>] (alloc_inode) from [<80601b0c>] (new_inode+0x10/0x68) [ 5310.033369][T19432] r7:00008180 r6:87164580 r5:81ff3a08 r4:871645a8 [ 5310.033379][T19432] [<80601afc>] (new_inode) from [<811a1094>] (gadgetfs_make_inode+0x30/0xb8) [ 5310.033420][T19432] r9:826716f8 r8:871645a8 r7:00008180 r6:87164580 r5:81ff3a08 r4:871645a8 [ 5310.033431][T19432] [<811a1064>] (gadgetfs_make_inode) from [<811a1158>] (gadgetfs_create_file+0x3c/0x8c) [ 5310.033465][T19432] r7:83cef1f4 r6:8727b000 r5:872f4604 r4:871645a8 [ 5310.033475][T19432] [<811a111c>] (gadgetfs_create_file) from [<811a1f74>] (gadgetfs_bind+0x128/0x32c) [ 5310.033508][T19432] r7:83cef1f4 r6:872f4600 r5:872f4604 r4:87164580 [ 5310.033518][T19432] [<811a1e4c>] (gadgetfs_bind) from [<8113eae8>] (gadget_bind_driver+0x90/0x2b0) [ 5310.033573][T19432] r10:81ff397c r9:00000000 r8:0000011a r7:83cef6f8 r6:835a3764 r5:835a3740 [ 5310.033609][T19432] r4:854fe400 [ 5310.033627][T19432] [<8113ea58>] (gadget_bind_driver) from [<80c4a1e8>] (really_probe+0xd8/0x40c) [ 5310.033676][T19432] r9:00000000 r8:0000011a r7:00000000 r6:835a3764 r5:00000000 r4:83cef6f8 [ 5310.033688][T19432] [<80c4a110>] (really_probe) from [<80c4a5bc>] (__driver_probe_device+0xa0/0x228) [ 5310.033727][T19432] r8:0000011a r7:83cef6f8 r6:835a3764 r5:8372b1e4 r4:83cef6f8 [ 5310.033738][T19432] [<80c4a51c>] (__driver_probe_device) from [<80c4a83c>] (driver_probe_device+0x3c/0xc0) [ 5310.033780][T19432] r9:00000000 r8:0000011a r7:83cef6f8 r6:83cef744 r5:8372b1e4 r4:8372b1d4 [ 5310.033796][T19432] [<80c4a800>] (driver_probe_device) from [<80c4aac4>] (__driver_attach+0xcc/0x208) [ 5310.033843][T19432] r9:00000000 r8:84ec75b8 r7:00000000 r6:83cef744 r5:835a3764 r4:83cef6f8 [ 5310.033854][T19432] [<80c4a9f8>] (__driver_attach) from [<80c479a4>] (bus_for_each_dev+0x84/0xd4) [ 5310.033890][T19432] r7:00000000 r6:83f26600 r5:80c4a9f8 r4:835a3764 [ 5310.033900][T19432] [<80c47920>] (bus_for_each_dev) from [<80c498e4>] (driver_attach+0x24/0x28) [ 5310.033936][T19432] r7:00000000 r6:84ec7580 r5:83f26600 r4:835a3764 [ 5310.033946][T19432] [<80c498c0>] (driver_attach) from [<80c491ac>] (bus_add_driver+0x19c/0x248) [ 5310.033977][T19432] [<80c49010>] (bus_add_driver) from [<80c4bbb8>] (driver_register+0x88/0x124) [ 5310.034011][T19432] r8:00000048 r7:00000012 r6:835a3764 r5:00000000 r4:835a3764 [ 5310.034022][T19432] [<80c4bb30>] (driver_register) from [<8113c3b0>] (usb_gadget_register_driver_owner+0x54/0xec) [ 5310.034056][T19432] r5:00000000 r4:835a3740 [ 5310.034067][T19432] [<8113c35c>] (usb_gadget_register_driver_owner) from [<811a3168>] (dev_config+0x2ec/0x618) [ 5310.034104][T19432] r7:00000012 r6:84f40a00 r5:00000000 r4:872f4600 [ 5310.034114][T19432] [<811a2e7c>] (dev_config) from [<805d76c8>] (vfs_write+0xd4/0x42c) [ 5310.034198][T19432] r10:81ff397c r9:855e3200 r8:811a2e7c r7:dfa05f68 r6:200002c0 r5:84685980 [ 5310.034229][T19432] r4:00000048 [ 5310.034240][T19432] [<805d75f4>] (vfs_write) from [<805d7b94>] (ksys_write+0x74/0xec) [ 5310.034280][T19432] r10:00000004 r9:855e3200 r8:8020029c r7:00000000 r6:00000000 r5:84685980 [ 5310.034292][T19432] r4:84685983 [ 5310.034302][T19432] [<805d7b20>] (ksys_write) from [<805d7c1c>] (sys_write+0x10/0x14) [ 5310.034346][T19432] r7:00000004 r6:00356310 r5:00000000 r4:00000000 [ 5310.034357][T19432] [<805d7c0c>] (sys_write) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5310.034385][T19432] Exception stack(0xdfa05fa8 to 0xdfa05ff0) [ 5310.034409][T19432] 5fa0: 00000000 00000000 00000004 200002c0 00000048 00000000 [ 5310.034429][T19432] 5fc0: 00000000 00000000 00356310 00000004 003562d8 00000000 00000001 76f3d0dc [ 5310.034445][T19432] 5fe0: 76f3ce88 76f3ce78 00018ff8 001311f0 [ 5310.263887][T19432] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 5310.264100][T19432] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 5310.340183][T19432] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 5310.486079][ T29] audit: type=1400 audit(5310.380:827): avc: denied { unmount } for pid=17032 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 5311.613883][T19445] 8<--- cut here --- [ 5311.614018][T19445] Unable to handle kernel paging request at virtual address fee03f03 when write [ 5311.614091][T19445] [fee03f03] *pgd=80000080007003, *pmd=00000000 [ 5311.614798][T19445] Internal error: Oops: a06 [#1] SMP ARM [ 5311.617113][T19445] Modules linked in: [ 5311.617506][T19445] CPU: 0 UID: 0 PID: 19445 Comm: syz.4.4391 Not tainted syzkaller #0 PREEMPT [ 5311.617779][T19445] Hardware name: ARM-Versatile Express [ 5311.618021][T19445] PC is at subdev_8255_io+0x60/0x6c [ 5311.618500][T19445] LR is at subdev_8255_io+0x4c/0x6c [ 5311.618704][T19445] pc : [<8155a8c0>] lr : [<8155a8ac>] psr: 60000013 [ 5311.618943][T19445] sp : dfa05cb8 ip : dfa05cb8 fp : dfa05cd4 [ 5311.619164][T19445] r10: 00003f00 r9 : 00000004 r8 : dfa05da4 [ 5311.619400][T19445] r7 : 00000000 r6 : 0000009b r5 : 85346f00 r4 : 00003f03 [ 5311.619680][T19445] r3 : 0000009b r2 : fee03f03 r1 : 00000001 r0 : 85346f00 [ 5311.619998][T19445] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 5311.620286][T19445] Control: 30c5387d Table: 8ca3a000 DAC: fffffffd [ 5311.620447][T19445] Register r0 information: slab kmalloc-192 start 85346f00 pointer offset 0 size 192 [ 5311.621373][T19445] Register r1 information: non-paged memory [ 5311.621665][T19445] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 5311.622318][T19445] Register r3 information: non-paged memory [ 5311.622444][T19445] Register r4 information: non-paged memory [ 5311.622575][T19445] Register r5 information: slab kmalloc-192 start 85346f00 pointer offset 0 size 192 [ 5311.622986][T19445] Register r6 information: non-paged memory [ 5311.623127][T19445] Register r7 information: NULL pointer [ 5311.623251][T19445] Register r8 information: 2-page vmalloc region starting at 0xdfa04000 allocated at kernel_clone+0xc4/0x440 [ 5311.623539][T19445] Register r9 information: non-paged memory [ 5311.623666][T19445] Register r10 information: non-paged memory [ 5311.623781][T19445] Register r11 information: 2-page vmalloc region starting at 0xdfa04000 allocated at kernel_clone+0xc4/0x440 [ 5311.623992][T19445] Register r12 information: 2-page vmalloc region starting at 0xdfa04000 allocated at kernel_clone+0xc4/0x440 [ 5311.624220][T19445] Process syz.4.4391 (pid: 19445, stack limit = 0xdfa04000) [ 5311.624383][T19445] Stack: (0xdfa05cb8 to 0xdfa06000) [ 5311.624488][T19445] 5ca0: 8155a860 00003f00 [ 5311.624639][T19445] 5cc0: 85346f00 00000000 dfa05cf4 dfa05cd8 8155a59c 8155a86c 00003f00 805796f0 [ 5311.624791][T19445] 5ce0: 87bbf000 87bbf000 dfa05d14 dfa05cf8 8155a954 8155a550 85346f00 00000000 [ 5311.624961][T19445] 5d00: 87bbf000 00000000 dfa05d54 dfa05d18 8155ab04 8155a8d8 ffffffff 00000004 [ 5311.625144][T19445] 5d20: 8341e340 00000000 00000000 835dfbe8 85346f00 00000000 dfa05d90 85346f00 [ 5311.625303][T19445] 5d40: 00000000 83737400 dfa05d8c dfa05d58 815494fc 8155aa9c 40946400 00000000 [ 5311.625459][T19445] 5d60: dfa05d7c 200001c0 85346f00 b5403587 40946400 00000001 00000003 83fb7080 [ 5311.625607][T19445] 5d80: dfa05e4c dfa05d90 81544d18 81549400 35353238 00000000 00000000 00000000 [ 5311.625761][T19445] 5da0: 00000000 00003f00 00000005 0000d09a ffffffff 00000005 fffffffe 20000004 [ 5311.625924][T19445] 5dc0: 00000004 00001002 7fffbfff 00000005 00000002 00000407 fffffffe 00000004 [ 5311.626076][T19445] 5de0: 00000004 00000005 00000000 00100830 00000008 00010000 00000008 00000000 [ 5311.626227][T19445] 5e00: 80000001 20000002 00008001 00000004 00000151 00000000 00000002 00000006 [ 5311.626396][T19445] 5e20: 00000000 6f9d95e4 00000000 84684780 85346f00 200001c0 40946400 00000001 [ 5311.626550][T19445] 5e40: dfa05f14 dfa05e50 81546028 81544c58 8276ba64 851be5e0 00000064 8537b51c [ 5311.626705][T19445] 5e60: dfa05ee4 dfa05e70 8085e85c 80854bbc 00000064 85346f30 00000000 dfa05e90 [ 5311.626858][T19445] 5e80: 00000000 844eb010 841002a8 40946400 0000000b 00000000 dfa05e84 00000000 [ 5311.627009][T19445] 5ea0: 00000000 00000000 00000000 00000000 00000000 6f9d95e4 dfa05efc 84684780 [ 5311.627164][T19445] 5ec0: 40946400 200001c0 200001c0 84684780 00000003 83fb7080 dfa05ef4 dfa05ee8 [ 5311.627323][T19445] 5ee0: 8085e98c 6f9d95e4 dfa05f14 00000000 84684781 40946400 200001c0 84684780 [ 5311.627553][T19445] 5f00: 00000003 83fb7080 dfa05fa4 dfa05f18 805f3d14 81545ce0 83cb28c0 00000036 [ 5311.627710][T19445] 5f20: dfa05fb0 8020029c 83fb7080 00400000 dfa05f7c dfa05f40 80228ff4 803b0c3c [ 5311.627860][T19445] 5f40: dfa05fb0 83c1ea80 87598bb0 83cb28c0 87598bb4 00000000 00000000 6f9d95e4 [ 5311.628012][T19445] 5f60: 83fb7080 dfa05fb0 873411c8 00000036 dfa05fa4 6f9d95e4 8022a210 00000000 [ 5311.628163][T19445] 5f80: 00000000 00356310 00000036 8020029c 83fb7080 00000036 00000000 dfa05fa8 [ 5311.628322][T19445] 5fa0: 8020028c 805f3adc 00000000 00000000 00000003 40946400 200001c0 00000000 [ 5311.628477][T19445] 5fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f3d0dc [ 5311.628637][T19445] 5fe0: 76f3ce88 76f3ce78 00018ff8 001311f0 60000010 00000003 00000000 00000000 [ 5311.628800][T19445] Call trace: [ 5311.628899][T19445] [<8155a860>] (subdev_8255_io) from [<8155a59c>] (subdev_8255_do_config+0x58/0x60) [ 5311.629089][T19445] r7:00000000 r6:85346f00 r5:00003f00 r4:8155a860 [ 5311.629199][T19445] [<8155a544>] (subdev_8255_do_config) from [<8155a954>] (subdev_8255_io_init+0x88/0x98) [ 5311.629379][T19445] r4:87bbf000 [ 5311.629456][T19445] [<8155a8cc>] (subdev_8255_io_init) from [<8155ab04>] (dev_8255_attach+0x74/0x138) [ 5311.629624][T19445] r7:00000000 r6:87bbf000 r5:00000000 r4:85346f00 [ 5311.629732][T19445] [<8155aa90>] (dev_8255_attach) from [<815494fc>] (comedi_device_attach+0x108/0x244) [ 5311.629908][T19445] r10:83737400 r9:00000000 r8:85346f00 r7:dfa05d90 r6:00000000 r5:85346f00 [ 5311.630049][T19445] r4:835dfbe8 [ 5311.630115][T19445] [<815493f4>] (comedi_device_attach) from [<81544d18>] (do_devconfig_ioctl+0xcc/0x218) [ 5311.630303][T19445] r10:83fb7080 r9:00000003 r8:00000001 r7:40946400 r6:b5403587 r5:85346f00 [ 5311.630464][T19445] r4:200001c0 [ 5311.630529][T19445] [<81544c4c>] (do_devconfig_ioctl) from [<81546028>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 5311.630720][T19445] r8:00000001 r7:40946400 r6:200001c0 r5:85346f00 r4:84684780 [ 5311.630851][T19445] [<81545cd4>] (comedi_unlocked_ioctl) from [<805f3d14>] (sys_ioctl+0x244/0xb5c) [ 5311.631024][T19445] r10:83fb7080 r9:00000003 r8:84684780 r7:200001c0 r6:40946400 r5:84684781 [ 5311.631201][T19445] r4:00000000 [ 5311.631265][T19445] [<805f3ad0>] (sys_ioctl) from [<8020028c>] (__sys_trace_return+0x0/0x10) [ 5311.631413][T19445] Exception stack(0xdfa05fa8 to 0xdfa05ff0) [ 5311.631553][T19445] 5fa0: 00000000 00000000 00000003 40946400 200001c0 00000000 [ 5311.631707][T19445] 5fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f3d0dc [ 5311.631867][T19445] 5fe0: 76f3ce88 76f3ce78 00018ff8 001311f0 [ 5311.631970][T19445] r10:00000036 r9:83fb7080 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 5311.632114][T19445] r4:00000000 [ 5311.632357][T19445] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 5311.635564][T19445] ---[ end trace 0000000000000000 ]--- [ 5311.671885][ T29] audit: type=1400 audit(5311.560:828): avc: denied { read } for pid=2919 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 5311.675754][ T29] audit: type=1400 audit(5311.570:829): avc: denied { search } for pid=2919 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5311.675853][ T29] audit: type=1400 audit(5311.570:830): avc: denied { write search } for pid=2919 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5311.690250][ T29] audit: type=1400 audit(5311.570:831): avc: denied { add_name } for pid=2919 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5311.690674][ T29] audit: type=1400 audit(5311.580:832): avc: denied { create } for pid=2919 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 5311.690729][ T29] audit: type=1400 audit(5311.580:833): avc: denied { append open } for pid=2919 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 5311.690772][ T29] audit: type=1400 audit(5311.580:834): avc: denied { getattr } for pid=2919 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 5311.855822][T19445] Kernel panic - not syncing: Fatal exception [ 5311.858639][T19445] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:01:36 Registers: info registers vcpu 0 CPU#0 R00=855d8040 R01=00000069 R02=eb45f000 R03=eb45f018 R04=8564b01a R05=855d8040 R06=80b73af0 R07=8564b081 R08=00000000 R09=00000000 R10=00001901 R11=dfa0591c R12=00000002 R13=dfa05910 R14=8355ee14 R15=80b73b00 PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000001 R01=00000040 R02=00000000 R03=30c53879 R04=00000001 R05=00000001 R06=30c0387d R07=836884e4 R08=80003000 R09=414fc0f0 R10=00000000 R11=df869f64 R12=df869f68 R13=df869f50 R14=00000001 R15=8024bd44 PSR=a0000193 N-C- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000