last executing test programs: 1m43.177057687s ago: executing program 1 (id=3239): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x240002, 0x1e8}, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x90d, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x1a4}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r4, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x3, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x403, 0x100031c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x920b, 0x2, 0x2, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x10, 0x1, 0x902c7, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0f, 0x400, 0x0, 0x400216, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r3, '\x00', {0x0, 0xc8b, 0x0, 0x0}}, 0x0) 1m43.036150173s ago: executing program 1 (id=3240): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x1c3200) ioctl$TIOCCBRK(r1, 0x5428) 1m42.917225977s ago: executing program 1 (id=3241): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003380)={0x2020}, 0x2020) 1m42.776356343s ago: executing program 1 (id=3242): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @empty, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x400000000000136, 0x4000845) 1m42.662949656s ago: executing program 1 (id=3243): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/tracing/trace_pipe\x00', 0x800, 0xc2) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(r2, 0x0, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200), 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) bind$packet(r6, 0x0, 0x0) sendto(r6, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x2, 0x0) ptrace$cont(0x21, r2, 0x8, 0x4) 1m42.370118809s ago: executing program 1 (id=3244): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x240002, 0x1e8}, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x90d, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x1a4}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r4, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x3, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x403, 0x100031c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x920b, 0x2, 0x2, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x10, 0x1, 0x902c7, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0f, 0x400, 0x0, 0x400216, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r3, '\x00', {0x0, 0xc8b, 0x0, 0x0}}, 0x0) 1m33.677476687s ago: executing program 0 (id=3251): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a11, 0x31000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0xfe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40044) 1m33.385254991s ago: executing program 0 (id=3252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) 1m30.579531803s ago: executing program 0 (id=3253): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/101, 0x65}, 0x5}], 0x1, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1m29.853973536s ago: executing program 0 (id=3254): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007af000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r2, 0x4, 0x182400) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) 1m29.691234745s ago: executing program 0 (id=3255): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000640)={0x13, 0x10, 0xfa00, {0x0, r1, 0x1b}}, 0x18) 1m29.572032348s ago: executing program 0 (id=3256): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r2, r0, 0x16, 0x0, @val=@iter={0x0}}, 0x20) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000480)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x14) 52.601865253s ago: executing program 32 (id=3244): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x240002, 0x1e8}, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x90d, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x1a4}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r4, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x3, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x403, 0x100031c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x920b, 0x2, 0x2, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x10, 0x1, 0x902c7, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0f, 0x400, 0x0, 0x400216, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r3, '\x00', {0x0, 0xc8b, 0x0, 0x0}}, 0x0) 40.297435946s ago: executing program 33 (id=3256): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r2, r0, 0x16, 0x0, @val=@iter={0x0}}, 0x20) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000480)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x14) 5.485460675s ago: executing program 2 (id=3398): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711812000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.339857091s ago: executing program 2 (id=3400): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, &(0x7f0000004400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000002180)='./file0/file0/file0\x00', 0x2000, 0x7ff, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x200, 0x81}}, 0x50) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xfffffffffffffff5, r1}, 0x10) 5.072777651s ago: executing program 3 (id=3401): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', 0x0, 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) link(0x0, 0x0) 4.73726717s ago: executing program 3 (id=3402): r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000003000)={&(0x7f0000002000)={0x0}}, 0x1) 4.574226108s ago: executing program 3 (id=3403): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2c41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002100)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x30142, 0x142) pwrite64(r2, &(0x7f0000000180)='T', 0x1, 0x6) 2.458660469s ago: executing program 2 (id=3404): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x48011) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r1, &(0x7f0000002dc0)={0x2020}, 0x2020) 2.212609728s ago: executing program 2 (id=3405): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) read$midi(r0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 1.544437344s ago: executing program 3 (id=3406): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) link(0x0, 0x0) 1.103331254s ago: executing program 3 (id=3407): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffffc4010440, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x40000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b54f1289000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x28) close(r2) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 355.333679ms ago: executing program 2 (id=3408): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x36, 0x20}, 0x20) 151.383532ms ago: executing program 3 (id=3409): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'8255\x00', [0xec, 0x2168, 0x2, 0xd, 0x88d2, 0x8f, 0x80000, 0x10, 0x2, 0xf7fffffc, 0x1ff, 0x2000080, 0xfffffff9, 0x4, 0x7, 0x4, 0x40000009, 0x3, 0x2, 0xffffffff, 0x100, 0x3, 0x80, 0x0, 0x1, 0x1, 0x16362ee8, 0x1c, 0x8, 0x7, 0xecd]}) 0s ago: executing program 2 (id=3410): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x4000000000000) kernel console output (not intermixed with test programs): d { write } for pid=11941 comm="syz.1.1659" name="c.1" dev="configfs" ino=3237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1008.773815][ T28] audit: type=1400 audit(1008.700:518): avc: denied { bind } for pid=11969 comm="syz.1.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1009.010057][ T7787] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1009.159501][ T7787] usb 2-1: Using ep0 maxpacket: 16 [ 1009.162823][ T7787] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1009.170836][ T7787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.171071][ T7787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.171398][ T7787] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1009.171507][ T7787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.177222][ T7787] usb 2-1: config 0 descriptor?? [ 1009.598082][ T7787] hid-generic 0003:0955:7214.0011: unknown main item tag 0x0 [ 1009.598457][ T7787] hid-generic 0003:0955:7214.0011: unknown main item tag 0x0 [ 1009.599379][ T7787] hid-generic 0003:0955:7214.0011: unknown main item tag 0x0 [ 1009.599566][ T7787] hid-generic 0003:0955:7214.0011: unknown main item tag 0x0 [ 1009.600035][ T7787] hid-generic 0003:0955:7214.0011: unknown main item tag 0x0 [ 1009.604932][ T7787] hid-generic 0003:0955:7214.0011: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 1009.809358][ T7787] usb 2-1: USB disconnect, device number 116 [ 1010.281278][T12002] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 1010.282280][T12002] binder: 12001:12002 ioctl 4018620d 20000040 returned -1 [ 1012.393560][ T28] audit: type=1400 audit(1012.217:519): avc: denied { read write } for pid=12011 comm="syz.0.1680" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1012.413729][ T28] audit: type=1400 audit(1012.217:520): avc: denied { open } for pid=12011 comm="syz.0.1680" path="/230/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1015.143609][ T7787] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1015.349115][ T7787] usb 1-1: Using ep0 maxpacket: 8 [ 1015.353267][ T7787] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1015.392690][ T7787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.889777][T12059] IPv6: NLM_F_CREATE should be specified when creating new route [ 1018.174230][ T28] audit: type=1400 audit(1017.544:521): avc: denied { write } for pid=12064 comm="syz.1.1694" name="functions" dev="configfs" ino=3232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1018.180811][ T28] audit: type=1400 audit(1017.553:522): avc: denied { write } for pid=12064 comm="syz.1.1694" name="c.1" dev="configfs" ino=3237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1018.183333][ T28] audit: type=1400 audit(1017.553:523): avc: denied { write } for pid=12064 comm="syz.1.1694" name="c.1" dev="configfs" ino=3237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1018.772096][ T3660] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1018.934414][ T3660] usb 2-1: Using ep0 maxpacket: 16 [ 1018.936215][ T3660] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1018.941405][ T3660] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1018.941675][ T3660] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.941866][ T3660] usb 2-1: config 1 has no interface number 0 [ 1018.942057][ T3660] usb 2-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1018.942260][ T3660] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1018.957631][ T3660] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1018.958240][ T3660] usb 2-1: Product: syz [ 1018.959459][ T3660] usb 2-1: Manufacturer: syz [ 1018.961165][ T3660] usb 2-1: SerialNumber: syz [ 1019.195649][ T3660] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22 [ 1019.202436][ T3660] usb 2-1: USB disconnect, device number 117 [ 1019.574148][ T28] audit: type=1400 audit(1018.836:524): avc: denied { append } for pid=12088 comm="syz.1.1699" name="trace_pipe_raw" dev="tracefs" ino=1097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1019.576573][ T28] audit: type=1804 audit(1018.846:525): pid=12089 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1699" name="/newroot/265/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1097 res=1 errno=0 [ 1026.306208][ T7787] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1026.539111][ T7787] usb 2-1: Using ep0 maxpacket: 32 [ 1026.542283][ T7787] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1026.589764][ T7787] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1026.592628][ T7787] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1026.592728][ T7787] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1026.592776][ T7787] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1026.592819][ T7787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1026.705053][ T7787] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1026.706717][ T7787] usb 2-1: Product: syz [ 1026.706777][ T7787] usb 2-1: Manufacturer: syz [ 1026.706823][ T7787] usb 2-1: SerialNumber: syz [ 1026.720819][ T7787] usb 2-1: config 0 descriptor?? [ 1026.790249][ T7787] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1026.795198][ T7787] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1027.228069][ T7718] usb 2-1: USB disconnect, device number 118 [ 1027.375326][ T7718] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1028.564456][ T7718] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1028.726745][ T7718] usb 2-1: Using ep0 maxpacket: 8 [ 1028.730358][ T7718] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1028.734870][ T7718] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1028.735166][ T7718] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1028.735237][ T7718] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1028.735292][ T7718] usb 2-1: config 250 has no interface number 0 [ 1028.735350][ T7718] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1028.735392][ T7718] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1028.735430][ T7718] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 1028.735469][ T7718] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1028.735504][ T7718] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1028.735545][ T7718] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1028.746835][ T7718] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1028.747104][ T7718] usb 2-1: Product: syz [ 1028.749202][ T7718] usb 2-1: SerialNumber: syz [ 1028.756576][ T7718] hub 2-1:250.228: bad descriptor, ignoring hub [ 1028.756891][ T7718] hub 2-1:250.228: probe with driver hub failed with error -5 [ 1028.978666][ T7718] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 119 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1029.197229][T12138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.198902][T12138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.323532][ T7718] usb 2-1: USB disconnect, device number 119 [ 1029.327897][ T7718] usblp0: removed [ 1029.568420][ T28] audit: type=1400 audit(1028.068:526): avc: denied { write } for pid=12166 comm="syz.1.1718" name="functions" dev="configfs" ino=3232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1029.637461][T12167] UDC core: g1: couldn't find an available UDC or it's busy [ 1030.341949][ T3660] usb 1-1: USB disconnect, device number 9 [ 1033.140187][T12213] syzkaller0: entered promiscuous mode [ 1033.140636][T12213] syzkaller0: entered allmulticast mode [ 1033.313464][T12219] veth0: entered promiscuous mode [ 1033.316193][T12219] veth0: left promiscuous mode [ 1037.349004][T12243] comedi: valid board names for 8255 driver are: [ 1037.350105][T12243] 8255 [ 1037.350930][T12243] comedi: valid board names for vmk80xx driver are: [ 1037.351758][T12243] vmk80xx [ 1037.352418][T12243] comedi: valid board names for usbduxsigma driver are: [ 1037.353444][T12243] usbduxsigma [ 1037.353996][T12243] comedi: valid board names for usbduxfast driver are: [ 1037.354830][T12243] usbduxfast [ 1037.355558][T12243] comedi: valid board names for usbdux driver are: [ 1037.356073][T12243] usbdux [ 1037.356409][T12243] comedi: valid board names for ni6501 driver are: [ 1037.356978][T12243] ni6501 [ 1037.357541][T12243] comedi: valid board names for dt9812 driver are: [ 1037.357965][T12243] dt9812 [ 1037.358286][T12243] comedi: valid board names for ni_labpc_cs driver are: [ 1037.358690][T12243] ni_labpc_cs [ 1037.365017][T12243] comedi: valid board names for ni_daq_700 driver are: [ 1037.365174][T12243] ni_daq_700 [ 1037.365252][T12243] comedi: valid board names for labpc_pci driver are: [ 1037.365322][T12243] labpc_pci [ 1037.365388][T12243] comedi: valid board names for adl_pci9118 driver are: [ 1037.365476][T12243] pci9118dg [ 1037.365569][T12243] pci9118hg [ 1037.365791][T12243] pci9118hr [ 1037.365864][T12243] comedi: valid board names for 8255_pci driver are: [ 1037.365931][T12243] 8255_pci [ 1037.365997][T12243] comedi: valid board names for comedi_parport driver are: [ 1037.366062][T12243] comedi_parport [ 1037.366126][T12243] comedi: valid board names for comedi_test driver are: [ 1037.366199][T12243] comedi_test [ 1037.366266][T12243] comedi: valid board names for comedi_bond driver are: [ 1037.366469][T12243] comedi_bond [ 1037.375707][ T28] audit: type=1400 audit(1035.278:527): avc: denied { execute } for pid=12241 comm="syz.1.1742" path="/dev/comedi3" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1037.382923][ T28] audit: type=1400 audit(1035.278:528): avc: denied { accept } for pid=12241 comm="syz.1.1742" path="socket:[16902]" dev="sockfs" ino=16902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1042.444419][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1755'. [ 1042.876573][ T7788] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1043.061679][ T7788] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1043.074438][ T7788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.075167][ T7788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.078124][ T7788] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1043.079443][ T7788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.086440][ T7788] usb 2-1: config 0 descriptor?? [ 1043.698483][ T7788] usbhid 2-1:0.0: can't add hid device: -71 [ 1043.699167][ T7788] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1043.702183][ T7788] usb 2-1: USB disconnect, device number 120 [ 1043.761566][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1758'. [ 1050.820800][ T28] audit: type=1400 audit(1047.686:529): avc: denied { write } for pid=12327 comm="syz.1.1774" name="functions" dev="configfs" ino=3232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1050.827147][ T28] audit: type=1400 audit(1047.696:530): avc: denied { write } for pid=12327 comm="syz.1.1774" name="c.1" dev="configfs" ino=3237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1050.829319][ T28] audit: type=1400 audit(1047.696:531): avc: denied { write } for pid=12327 comm="syz.1.1774" name="c.1" dev="configfs" ino=3237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1051.126927][ T43] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1051.295660][ T28] audit: type=1400 audit(1048.129:532): avc: denied { mount } for pid=12342 comm="syz.0.1775" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1051.300872][ T43] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 1051.303495][ T43] usb 1-1: Dual-Role OTG device on HNP port [ 1051.304409][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.322904][ T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1051.349855][ T28] audit: type=1400 audit(1048.176:533): avc: denied { setopt } for pid=12342 comm="syz.0.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1051.826433][T12364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.827092][T12364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.136810][ T28] audit: type=1400 audit(1054.435:534): avc: denied { mounton } for pid=12384 comm="syz.0.1786" path="/proc/626/task" dev="proc" ino=17022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1060.074766][T12399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.076983][T12399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.478815][ T7788] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1062.654184][ T7788] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1062.659866][ T7788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.661912][ T7788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.662389][ T7788] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1062.663016][ T7788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.668351][ T7788] usb 2-1: config 0 descriptor?? [ 1063.131751][ T7788] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1064.549611][ C0] plantronics 0003:047F:FFFF.0012: usb_submit_urb(ctrl) failed: -1 [ 1065.383367][ T88] usb 2-1: USB disconnect, device number 121 [ 1065.719932][T12444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.724155][T12444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.835882][T12482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.837822][T12482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.056000][T12530] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1834'. [ 1084.730245][T12538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.730708][T12538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.277092][T12542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1839'. [ 1085.307155][T12542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1839'. [ 1087.473316][T12556] netlink: 'syz.0.1844': attribute type 58 has an invalid length. [ 1087.473728][T12556] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1844'. [ 1095.259326][ T28] audit: type=1400 audit(1088.713:535): avc: denied { lock } for pid=12607 comm="syz.1.1861" path="socket:[18069]" dev="sockfs" ino=18069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1112.995922][T12695] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12695 comm=syz.0.1886 [ 1120.591791][ T28] audit: type=1400 audit(1112.098:536): avc: denied { watch_reads } for pid=12744 comm="syz.1.1907" path="/362" dev="tmpfs" ino=1910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1122.065865][T12760] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1914'. [ 1122.069436][T12759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1914'. [ 1122.070066][T12759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1914'. [ 1122.070631][T12759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1914'. [ 1122.071145][T12759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1914'. [ 1122.071662][T12759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1914'. [ 1122.072289][T12759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1914'. [ 1122.073718][T12759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1914'. [ 1122.074647][T12759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1914'. [ 1122.098936][T12759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1914'. [ 1124.137071][ T28] audit: type=1400 audit(1115.375:537): avc: denied { sqpoll } for pid=12776 comm="syz.0.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1124.302486][T12787] fuse: Unknown parameter 'grou00000000000000000000' [ 1124.895483][T12797] fuse: Unknown parameter 'grou00000000000000000000' [ 1125.592146][T12800] raw_sendmsg: syz.1.1932 forgot to set AF_INET. Fix it! [ 1127.286548][T12809] fuse: Unknown parameter 'grou00000000000000000000' [ 1128.323913][ T28] audit: type=1400 audit(1119.234:538): avc: denied { read } for pid=12815 comm="syz.0.1939" name="/" dev="configfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1128.328320][ T28] audit: type=1400 audit(1119.244:539): avc: denied { open } for pid=12815 comm="syz.0.1939" path="/sys/kernel/config" dev="configfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1130.882651][T12822] fuse: Unknown parameter 'group_i00000000000000000000' [ 1131.819169][T12833] fuse: Unknown parameter 'group_i00000000000000000000' [ 1134.977568][ T7749] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1135.138965][ T7749] usb 2-1: Using ep0 maxpacket: 16 [ 1135.140851][ T7749] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1135.142999][ T7749] usb 2-1: no configurations [ 1135.144382][ T7749] usb 2-1: can't read configurations, error -22 [ 1135.280103][ T7749] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1135.442397][ T7749] usb 2-1: Using ep0 maxpacket: 16 [ 1135.444609][ T7749] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1135.446734][ T7749] usb 2-1: no configurations [ 1135.448068][ T7749] usb 2-1: can't read configurations, error -22 [ 1135.449701][ T7749] usb usb2-port1: attempt power cycle [ 1135.811432][ T7749] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1135.833115][ T7749] usb 2-1: Using ep0 maxpacket: 16 [ 1135.834557][ T7749] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1135.836260][ T7749] usb 2-1: no configurations [ 1135.837404][ T7749] usb 2-1: can't read configurations, error -22 [ 1135.972938][ T7749] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1135.995541][ T7749] usb 2-1: Using ep0 maxpacket: 16 [ 1135.997310][ T7749] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1135.999024][ T7749] usb 2-1: no configurations [ 1136.000305][ T7749] usb 2-1: can't read configurations, error -22 [ 1136.001842][ T7749] usb usb2-port1: unable to enumerate USB device [ 1140.907362][ T28] audit: type=1400 audit(1130.857:540): avc: denied { setcurrent } for pid=12860 comm="syz.0.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1141.809758][T12647] syz.0.1873 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1141.811396][T12647] CPU: 1 UID: 0 PID: 12647 Comm: syz.0.1873 Tainted: G L syzkaller #0 PREEMPT [ 1141.811663][T12647] Tainted: [L]=SOFTLOCKUP [ 1141.811718][T12647] Hardware name: ARM-Versatile Express [ 1141.811988][T12647] Call trace: [ 1141.812337][T12647] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1141.813409][T12647] r7:60000113 r6:60000113 r5:82336570 r4:00000000 [ 1141.813465][T12647] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1141.813496][T12647] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1141.813525][T12647] r7:81c1e934 r6:8234b67c r5:dfc296c0 r4:dfc296c0 [ 1141.813533][T12647] [<8021ec7c>] (dump_stack) from [<80205cdc>] (dump_header+0x4c/0x1b0) [ 1141.813557][T12647] [<80205c90>] (dump_header) from [<804a91cc>] (oom_kill_process+0x1b4/0x234) [ 1141.813587][T12647] r7:81c1e934 r6:8234b67c r5:dfc296c0 r4:840be200 [ 1141.813597][T12647] [<804a9018>] (oom_kill_process) from [<804a99d8>] (out_of_memory+0x114/0x384) [ 1141.813626][T12647] r7:860372c0 r6:82cd43c4 r5:840be200 r4:dfc296c0 [ 1141.813634][T12647] [<804a98c4>] (out_of_memory) from [<80571d88>] (mem_cgroup_out_of_memory+0xa0/0xb8) [ 1141.813664][T12647] r6:00000cc0 r5:860372c0 r4:00000000 [ 1141.813672][T12647] [<80571ce8>] (mem_cgroup_out_of_memory) from [<80578dd4>] (try_charge_memcg+0x41c/0x578) [ 1141.813700][T12647] r6:860372c0 r5:00000001 r4:00000001 [ 1141.813708][T12647] [<805789b8>] (try_charge_memcg) from [<805791c4>] (charge_memcg+0xcc/0x1d0) [ 1141.813750][T12647] r10:dee75078 r9:00000000 r8:860372c0 r7:00000cc0 r6:860d7180 r5:860372c0 [ 1141.813765][T12647] r4:dee75078 [ 1141.813773][T12647] [<805790f8>] (charge_memcg) from [<8057aaa8>] (__mem_cgroup_charge+0x30/0xc0) [ 1141.813808][T12647] r9:84f67400 r8:8617d680 r7:dfc29838 r6:00000cc0 r5:dee75078 r4:860372c0 [ 1141.813817][T12647] [<8057aa78>] (__mem_cgroup_charge) from [<804d16d8>] (shmem_get_folio_gfp+0x268/0x858) [ 1141.813847][T12647] r7:dfc29838 r6:00006c6c r5:00000002 r4:84147850 [ 1141.813856][T12647] [<804d1470>] (shmem_get_folio_gfp) from [<804d1d54>] (shmem_fault+0x8c/0x370) [ 1141.813885][T12647] r10:00000000 r9:00000000 r8:00000000 r7:840be200 r6:00100cca r5:84147850 [ 1141.813894][T12647] r4:dfc298f0 [ 1141.813901][T12647] [<804d1cc8>] (shmem_fault) from [<804fcb5c>] (__do_fault+0x44/0xfc) [ 1141.813933][T12647] r10:00000000 r9:00000000 r8:00000090 r7:0000009c r6:00000000 r5:8617d680 [ 1141.813942][T12647] r4:dfc298f0 [ 1141.813949][T12647] [<804fcb18>] (__do_fault) from [<80502f30>] (do_fault+0x3d4/0x5e8) [ 1141.813979][T12647] r7:0000009c r6:00000000 r5:8617d680 r4:dfc298f0 [ 1141.813986][T12647] [<80502b5c>] (do_fault) from [<80504d60>] (handle_mm_fault+0x500/0x6b8) [ 1141.814017][T12647] r9:00000000 r8:00000000 r7:00000000 r6:12e9c000 r5:840be200 r4:00000000 [ 1141.814025][T12647] [<80504860>] (handle_mm_fault) from [<804f453c>] (__get_user_pages+0x2bc/0x718) [ 1141.814057][T12647] r10:840be200 r9:00000000 r8:8617d680 r7:00000000 r6:00000000 r5:12e9c000 [ 1141.814066][T12647] r4:0000000e [ 1141.814074][T12647] [<804f4280>] (__get_user_pages) from [<804f7ec8>] (get_dump_page+0xec/0x1ac) [ 1141.814112][T12647] r10:12e9c000 r9:840be200 r8:84f67400 r7:00000000 r6:84f67400 r5:12e9c000 [ 1141.814121][T12647] r4:dfc29a1c [ 1141.814128][T12647] [<804f7ddc>] (get_dump_page) from [<80645750>] (dump_user_range+0x54/0x3dc) [ 1141.814159][T12647] r8:84f67400 r7:00000000 r6:07af0000 r5:dfc29ce0 r4:00000000 [ 1141.814167][T12647] [<806456fc>] (dump_user_range) from [<8063a7b8>] (elf_core_dump+0xe5c/0x118c) [ 1141.814199][T12647] r10:dfc29ce0 r9:00000003 r8:00001000 r7:dfc29ce0 r6:00000018 r5:86d70fc0 [ 1141.814208][T12647] r4:00000005 [ 1141.814216][T12647] [<8063995c>] (elf_core_dump) from [<80644a04>] (vfs_coredump+0xde4/0x1adc) [ 1141.814246][T12647] r10:8440dc80 r9:00000001 r8:dfc29cc8 r7:85249c00 r6:00000012 r5:7efffffc [ 1141.814256][T12647] r4:8538b398 [ 1141.814263][T12647] [<80643c20>] (vfs_coredump) from [<8026a3b0>] (get_signal+0x9ec/0xa8c) [ 1141.814324][T12647] r10:85300540 r9:8436d800 r8:0000000a r7:0000000a r6:400004d8 r5:0000000b [ 1141.814349][T12647] r4:840be200 [ 1141.814371][T12647] [<802699c4>] (get_signal) from [<8022b630>] (do_work_pending+0x124/0x4e0) [ 1141.814424][T12647] r10:b5403587 r9:76f72f20 r8:fffffff2 r7:840bea30 r6:00000000 r5:dfc29fb0 [ 1141.814464][T12647] r4:840be200 [ 1141.814500][T12647] [<8022b50c>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 1141.814579][T12647] Exception stack(0xdfc29fb0 to 0xdfc29ff8) [ 1141.814695][T12647] 9fa0: 00000000 76f73230 76f732b0 76f91dfc [ 1141.814735][T12647] 9fc0: 00000040 0000000b 76f91df0 00000000 003562d8 00000000 00000001 76f920dc [ 1141.814754][T12647] 9fe0: 00000000 76f73218 0001584c 00015850 00000010 ffffffff [ 1141.814822][T12647] r10:00000001 r9:840be200 r8:00000000 r7:840be200 r6:ffffffff r5:00000010 [ 1141.814853][T12647] r4:00015850 [ 1141.858788][T12647] memory: usage 307200kB, limit 307200kB, failcnt 26764 [ 1141.859865][T12647] memory+swap: usage 432076kB, limit 8589934588kB, failcnt 0 [ 1141.860957][T12647] kmem: usage 1244kB, limit 8589934588kB, failcnt 0 [ 1141.861798][T12647] Memory cgroup stats for /syz0: [ 1141.864839][T12647] cache 313061376 [ 1141.878258][T12647] rss 192512 [ 1141.879029][T12647] shmem 313053184 [ 1141.879655][T12647] mapped_file 190648320 [ 1141.880310][T12647] dirty 0 [ 1141.880879][T12647] writeback 8192 [ 1141.881484][T12647] workingset_refault_anon 56 [ 1141.882154][T12647] workingset_refault_file 2253 [ 1141.882815][T12647] swap 127873024 [ 1141.883459][T12647] swapcached 140578816 [ 1141.884183][T12647] pgpgin 587285 [ 1141.884795][T12647] pgpgout 510807 [ 1141.885387][T12647] pgfault 439409 [ 1141.885991][T12647] pgmajfault 13 [ 1141.886686][T12647] inactive_anon 293699584 [ 1141.887967][T12647] active_anon 19546112 [ 1141.889316][T12647] inactive_file 0 [ 1141.890024][T12647] active_file 0 [ 1141.890681][T12647] unevictable 0 [ 1141.891289][T12647] hierarchical_memory_limit 314572800 [ 1141.892022][T12647] hierarchical_memsw_limit 8796093018112 [ 1141.892772][T12647] total_cache 313061376 [ 1141.893535][T12647] total_rss 192512 [ 1141.894209][T12647] total_shmem 313053184 [ 1141.894858][T12647] total_mapped_file 190648320 [ 1141.898215][T12647] total_dirty 0 [ 1141.898914][T12647] total_writeback 8192 [ 1141.899595][T12647] total_workingset_refault_anon 56 [ 1141.901066][T12647] total_workingset_refault_file 2253 [ 1141.901890][T12647] total_swap 127873024 [ 1141.902513][T12647] total_swapcached 140578816 [ 1141.906121][T12647] total_pgpgin 587285 [ 1141.909569][T12647] total_pgpgout 510807 [ 1141.910294][T12647] total_pgfault 439413 [ 1141.910965][T12647] total_pgmajfault 13 [ 1141.912345][T12647] total_inactive_anon 293699584 [ 1141.913075][T12647] total_active_anon 19546112 [ 1141.913768][T12647] total_inactive_file 0 [ 1141.914847][T12647] total_active_file 0 [ 1141.920285][T12647] total_unevictable 0 [ 1141.921009][T12647] anon_cost 0 [ 1141.921665][T12647] file_cost 0 [ 1141.923701][T12647] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1873,pid=12647,uid=0 [ 1142.152179][T12647] Memory cgroup out of memory: Killed process 12647 (syz.0.1873) total-vm:170816kB, anon-rss:28kB, file-rss:3036kB, shmem-rss:95040kB, UID:0 pgtables:256kB oom_score_adj:1000 [ 1142.511371][T12865] syz.0.1958 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1142.511641][T12865] CPU: 0 UID: 0 PID: 12865 Comm: syz.0.1958 Tainted: G L syzkaller #0 PREEMPT [ 1142.511699][T12865] Tainted: [L]=SOFTLOCKUP [ 1142.511708][T12865] Hardware name: ARM-Versatile Express [ 1142.511721][T12865] Call trace: [ 1142.511742][T12865] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1142.511795][T12865] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1142.511804][T12865] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1142.511831][T12865] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1142.511860][T12865] r7:81c1e934 r6:8234b67c r5:ea611ca0 r4:ea611ca0 [ 1142.511868][T12865] [<8021ec7c>] (dump_stack) from [<80205cdc>] (dump_header+0x4c/0x1b0) [ 1142.511894][T12865] [<80205c90>] (dump_header) from [<804a91cc>] (oom_kill_process+0x1b4/0x234) [ 1142.512092][T12865] r7:81c1e934 r6:8234b67c r5:ea611ca0 r4:85a6a4c0 [ 1142.512138][T12865] [<804a9018>] (oom_kill_process) from [<804a99d8>] (out_of_memory+0x114/0x384) [ 1142.512205][T12865] r7:860372c0 r6:82cd43c4 r5:85a66e40 r4:ea611ca0 [ 1142.512227][T12865] [<804a98c4>] (out_of_memory) from [<80571d88>] (mem_cgroup_out_of_memory+0xa0/0xb8) [ 1142.512277][T12865] r6:00000cc0 r5:860372c0 r4:00000000 [ 1142.512343][T12865] [<80571ce8>] (mem_cgroup_out_of_memory) from [<80578dd4>] (try_charge_memcg+0x41c/0x578) [ 1142.512376][T12865] r6:860372c0 r5:00000001 r4:00000001 [ 1142.512397][T12865] [<805789b8>] (try_charge_memcg) from [<80578f70>] (obj_cgroup_charge_pages+0x40/0x1c8) [ 1142.512479][T12865] r10:840ce200 r9:802501dc r8:00000000 r7:00000cc0 r6:860d7180 r5:00000001 [ 1142.512516][T12865] r4:860372c0 [ 1142.512544][T12865] [<80578f30>] (obj_cgroup_charge_pages) from [<80579784>] (__memcg_kmem_charge_page+0xec/0x190) [ 1142.512612][T12865] r7:00000cc0 r6:deb5ca00 r5:00000000 r4:860d7180 [ 1142.512641][T12865] [<80579698>] (__memcg_kmem_charge_page) from [<8024cf58>] (memcg_charge_kernel_stack+0x34/0x84) [ 1142.512734][T12865] r9:802501dc r8:86f77380 r7:85a66e40 r6:ffffffff r5:86f77380 r4:003d0f00 [ 1142.512753][T12865] [<8024cf24>] (memcg_charge_kernel_stack) from [<8024f360>] (copy_process+0x1054/0x1d78) [ 1142.512796][T12865] r5:ea611ea8 r4:003d0f00 [ 1142.512815][T12865] [<8024e30c>] (copy_process) from [<802501dc>] (kernel_clone+0xc4/0x43c) [ 1142.512859][T12865] r10:85a66e40 r9:85a66e40 r8:00000000 r7:00100000 r6:0000004d r5:ea611ea8 [ 1142.512905][T12865] r4:003d0f00 [ 1142.512915][T12865] [<80250118>] (kernel_clone) from [<80250648>] (__do_sys_clone3+0xf4/0x128) [ 1142.512984][T12865] r10:000001b3 r9:85a66e40 r8:8020029c r7:000001b3 r6:0000004d r5:00000058 [ 1142.513005][T12865] r4:7ea9a680 [ 1142.513049][T12865] [<80250554>] (__do_sys_clone3) from [<80250940>] (sys_clone3+0x10/0x14) [ 1142.513118][T12865] r5:02346500 r4:003274b8 [ 1142.513132][T12865] [<80250930>] (sys_clone3) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1142.513172][T12865] Exception stack(0xea611fa8 to 0xea611ff0) [ 1142.513249][T12865] 1fa0: 003274b8 02346500 7ea9a680 00000058 0010d3ec 76f925c0 [ 1142.513267][T12865] 1fc0: 003274b8 02346500 0000004d 000001b3 76f925c0 7ea9a747 003d0f00 00000000 [ 1142.513290][T12865] 1fe0: 00000000 7ea9a64c 001316ac 0013183c [ 1142.513499][T12865] memory: usage 307200kB, limit 307200kB, failcnt 26953 [ 1142.513532][T12865] memory+swap: usage 432148kB, limit 8589934588kB, failcnt 0 [ 1142.513548][T12865] kmem: usage 1308kB, limit 8589934588kB, failcnt 0 [ 1142.513560][T12865] Memory cgroup stats for /syz0: [ 1142.513705][T12865] cache 312991744 [ 1142.513718][T12865] rss 241664 [ 1142.513725][T12865] shmem 312987648 [ 1142.513731][T12865] mapped_file 124489728 [ 1142.513737][T12865] dirty 0 [ 1142.513743][T12865] writeback 0 [ 1142.513749][T12865] workingset_refault_anon 56 [ 1142.513756][T12865] workingset_refault_file 2311 [ 1142.513762][T12865] swap 127946752 [ 1142.513768][T12865] swapcached 140705792 [ 1142.513774][T12865] pgpgin 587437 [ 1142.513781][T12865] pgpgout 510964 [ 1142.513787][T12865] pgfault 439505 [ 1142.513793][T12865] pgmajfault 14 [ 1142.513799][T12865] inactive_anon 294162432 [ 1142.513805][T12865] active_anon 19066880 [ 1142.513811][T12865] inactive_file 0 [ 1142.513817][T12865] active_file 0 [ 1142.513823][T12865] unevictable 0 [ 1142.513830][T12865] hierarchical_memory_limit 314572800 [ 1142.513836][T12865] hierarchical_memsw_limit 8796093018112 [ 1142.513843][T12865] total_cache 312991744 [ 1142.513849][T12865] total_rss 241664 [ 1142.513856][T12865] total_shmem 312987648 [ 1142.513862][T12865] total_mapped_file 124489728 [ 1142.513868][T12865] total_dirty 0 [ 1142.513874][T12865] total_writeback 0 [ 1142.513880][T12865] total_workingset_refault_anon 56 [ 1142.513886][T12865] total_workingset_refault_file 2311 [ 1142.513893][T12865] total_swap 127946752 [ 1142.513899][T12865] total_swapcached 140705792 [ 1142.513905][T12865] total_pgpgin 587437 [ 1142.513911][T12865] total_pgpgout 510964 [ 1142.513918][T12865] total_pgfault 439509 [ 1142.513923][T12865] total_pgmajfault 14 [ 1142.513929][T12865] total_inactive_anon 294162432 [ 1142.513936][T12865] total_active_anon 19066880 [ 1142.513942][T12865] total_inactive_file 0 [ 1142.513948][T12865] total_active_file 0 [ 1142.513954][T12865] total_unevictable 0 [ 1142.513960][T12865] anon_cost 0 [ 1142.513966][T12865] file_cost 0 [ 1142.513975][T12865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1878,pid=12670,uid=0 [ 1142.514099][T12865] Memory cgroup out of memory: Killed process 12670 (syz.0.1878) total-vm:171080kB, anon-rss:160kB, file-rss:3036kB, shmem-rss:91212kB, UID:0 pgtables:252kB oom_score_adj:1000 [ 1142.634073][T12865] syz.0.1958 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1142.639262][T12865] CPU: 0 UID: 0 PID: 12865 Comm: syz.0.1958 Tainted: G L syzkaller #0 PREEMPT [ 1142.640574][T12865] Tainted: [L]=SOFTLOCKUP [ 1142.640998][T12865] Hardware name: ARM-Versatile Express [ 1142.641508][T12865] Call trace: [ 1142.642338][T12865] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1142.644458][T12865] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1142.644502][T12865] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1142.644600][T12865] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1142.645100][T12865] r7:81c1e934 r6:8234b67c r5:ea611ca0 r4:ea611ca0 [ 1142.645111][T12865] [<8021ec7c>] (dump_stack) from [<80205cdc>] (dump_header+0x4c/0x1b0) [ 1142.645143][T12865] [<80205c90>] (dump_header) from [<804a91cc>] (oom_kill_process+0x1b4/0x234) [ 1142.645176][T12865] r7:81c1e934 r6:8234b67c r5:ea611ca0 r4:85a66e40 [ 1142.645184][T12865] [<804a9018>] (oom_kill_process) from [<804a99d8>] (out_of_memory+0x114/0x384) [ 1142.645212][T12865] r7:860372c0 r6:82cd43c4 r5:85a66e40 r4:ea611ca0 [ 1142.645220][T12865] [<804a98c4>] (out_of_memory) from [<80571d88>] (mem_cgroup_out_of_memory+0xa0/0xb8) [ 1142.645251][T12865] r6:00000cc0 r5:860372c0 r4:00000000 [ 1142.645259][T12865] [<80571ce8>] (mem_cgroup_out_of_memory) from [<80578dd4>] (try_charge_memcg+0x41c/0x578) [ 1142.645725][T12865] r6:860372c0 r5:00000001 r4:00000001 [ 1142.646104][T12865] [<805789b8>] (try_charge_memcg) from [<80578f70>] (obj_cgroup_charge_pages+0x40/0x1c8) [ 1142.647488][T12865] r10:840ce200 r9:802501dc r8:00000000 r7:00000cc0 r6:860d7180 r5:00000001 [ 1142.648192][T12865] r4:860372c0 [ 1142.648626][T12865] [<80578f30>] (obj_cgroup_charge_pages) from [<80579784>] (__memcg_kmem_charge_page+0xec/0x190) [ 1142.650135][T12865] r7:00000cc0 r6:deb5ca00 r5:00000000 r4:860d7180 [ 1142.650539][T12865] [<80579698>] (__memcg_kmem_charge_page) from [<8024cf58>] (memcg_charge_kernel_stack+0x34/0x84) [ 1142.652066][T12865] r9:802501dc r8:86f77380 r7:85a66e40 r6:ffffffff r5:86f77380 r4:003d0f00 [ 1142.652445][T12865] [<8024cf24>] (memcg_charge_kernel_stack) from [<8024f360>] (copy_process+0x1054/0x1d78) [ 1142.653855][T12865] r5:ea611ea8 r4:003d0f00 [ 1142.654079][T12865] [<8024e30c>] (copy_process) from [<802501dc>] (kernel_clone+0xc4/0x43c) [ 1142.654185][T12865] r10:85a66e40 r9:85a66e40 r8:00000000 r7:00100000 r6:0000004d r5:ea611ea8 [ 1142.654581][T12865] r4:003d0f00 [ 1142.654755][T12865] [<80250118>] (kernel_clone) from [<80250648>] (__do_sys_clone3+0xf4/0x128) [ 1142.654814][T12865] r10:000001b3 r9:85a66e40 r8:8020029c r7:000001b3 r6:0000004d r5:00000058 [ 1142.654825][T12865] r4:7ea9a680 [ 1142.654851][T12865] [<80250554>] (__do_sys_clone3) from [<80250940>] (sys_clone3+0x10/0x14) [ 1142.655758][T12865] r5:02346500 r4:003274b8 [ 1142.655869][T12865] [<80250930>] (sys_clone3) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1142.655911][T12865] Exception stack(0xea611fa8 to 0xea611ff0) [ 1142.655946][T12865] 1fa0: 003274b8 02346500 7ea9a680 00000058 0010d3ec 76f925c0 [ 1142.655982][T12865] 1fc0: 003274b8 02346500 0000004d 000001b3 76f925c0 7ea9a747 003d0f00 00000000 [ 1142.656009][T12865] 1fe0: 00000000 7ea9a64c 001316ac 0013183c [ 1142.820050][T12865] memory: usage 304356kB, limit 307200kB, failcnt 27007 [ 1142.820695][T12865] memory+swap: usage 429236kB, limit 8589934588kB, failcnt 0 [ 1142.821165][T12865] kmem: usage 1060kB, limit 8589934588kB, failcnt 0 [ 1142.821583][T12865] Memory cgroup stats for /syz0: [ 1142.822227][T12865] cache 310083584 [ 1142.822694][T12865] rss 237568 [ 1142.822993][T12865] shmem 310079488 [ 1142.823310][T12865] mapped_file 86216704 [ 1142.829761][T12865] dirty 0 [ 1142.830157][T12865] writeback 0 [ 1142.830509][T12865] workingset_refault_anon 56 [ 1142.831390][T12865] workingset_refault_file 2312 [ 1142.831781][T12865] swap 127877120 [ 1142.832156][T12865] swapcached 140832768 [ 1142.832481][T12865] pgpgin 587439 [ 1142.832786][T12865] pgpgout 511676 [ 1142.833109][T12865] pgfault 439509 [ 1142.833444][T12865] pgmajfault 15 [ 1142.833768][T12865] inactive_anon 2129920 [ 1142.834101][T12865] active_anon 308191232 [ 1142.834468][T12865] inactive_file 0 [ 1142.834782][T12865] active_file 0 [ 1142.835245][T12865] unevictable 0 [ 1142.835676][T12865] hierarchical_memory_limit 314572800 [ 1142.836105][T12865] hierarchical_memsw_limit 8796093018112 [ 1142.836469][T12865] total_cache 310083584 [ 1142.836792][T12865] total_rss 237568 [ 1142.837130][T12865] total_shmem 310079488 [ 1142.837450][T12865] total_mapped_file 86216704 [ 1142.837791][T12865] total_dirty 0 [ 1142.838111][T12865] total_writeback 0 [ 1142.838424][T12865] total_workingset_refault_anon 56 [ 1142.838794][T12865] total_workingset_refault_file 2312 [ 1142.839190][T12865] total_swap 127877120 [ 1142.839637][T12865] total_swapcached 140832768 [ 1142.840307][T12865] total_pgpgin 587439 [ 1142.840659][T12865] total_pgpgout 511676 [ 1142.841018][T12865] total_pgfault 439513 [ 1142.841348][T12865] total_pgmajfault 15 [ 1142.841663][T12865] total_inactive_anon 2129920 [ 1142.842006][T12865] total_active_anon 308191232 [ 1142.851138][T12865] total_inactive_file 0 [ 1142.851686][T12865] total_active_file 0 [ 1142.852118][T12865] total_unevictable 0 [ 1142.852452][T12865] anon_cost 0 [ 1142.852785][T12865] file_cost 0 [ 1142.853134][T12865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1958,pid=12865,uid=0 [ 1142.856070][T12865] Memory cgroup out of memory: Killed process 12865 (syz.0.1958) total-vm:39740kB, anon-rss:108kB, file-rss:1216kB, shmem-rss:0kB, UID:0 pgtables:48kB oom_score_adj:1000 [ 1145.746744][T12873] __nla_validate_parse: 23 callbacks suppressed [ 1145.775909][T12873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1960'. [ 1145.896131][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1961'. [ 1145.916943][T12875] ip6gre1: entered promiscuous mode [ 1145.917477][T12875] ip6gre1: entered allmulticast mode [ 1145.928341][T12875] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1146.288624][ T31] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1146.309211][ T31] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1146.315568][ T3660] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1146.881129][ T3660] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1147.422882][ T3660] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1149.395699][T12889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.396909][T12889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.140055][T12903] netlink: 'syz.0.1969': attribute type 15 has an invalid length. [ 1150.141133][T12903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1969'. [ 1150.537910][T12914] FAULT_INJECTION: forcing a failure. [ 1150.537910][T12914] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1150.538812][T12914] CPU: 1 UID: 0 PID: 12914 Comm: syz.0.1974 Tainted: G L syzkaller #0 PREEMPT [ 1150.538875][T12914] Tainted: [L]=SOFTLOCKUP [ 1150.538884][T12914] Hardware name: ARM-Versatile Express [ 1150.538895][T12914] Call trace: [ 1150.538917][T12914] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1150.538971][T12914] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1150.538980][T12914] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1150.539005][T12914] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1150.539034][T12914] r7:00000000 r6:00000000 r5:85a5c980 r4:82afac00 [ 1150.539041][T12914] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1150.539068][T12914] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 1150.539096][T12914] r8:000002e0 r7:00000000 r6:ea611e38 r5:00000000 r4:003562e0 [ 1150.539104][T12914] [<809fdf04>] (should_fail) from [<803544f4>] (get_futex_key+0xa8/0x558) [ 1150.539134][T12914] [<8035444c>] (get_futex_key) from [<80359ec0>] (futex_wait_setup+0x88/0x29c) [ 1150.539164][T12914] r10:b5003500 r9:b5403587 r8:b5003500 r7:003562e0 r6:003562e0 r5:85a5c980 [ 1150.539174][T12914] r4:7efffffc [ 1150.539181][T12914] [<80359e38>] (futex_wait_setup) from [<8035a158>] (__futex_wait+0x84/0x104) [ 1150.539212][T12914] r10:00000000 r9:00000000 r8:00000000 r7:00000002 r6:003562e0 r5:85a5c980 [ 1150.539221][T12914] r4:00000000 [ 1150.539228][T12914] [<8035a0d4>] (__futex_wait) from [<8035a258>] (futex_wait+0x80/0x10c) [ 1150.539258][T12914] r9:00000000 r8:0000c350 r7:003562e0 r6:00000000 r5:00000000 r4:00000002 [ 1150.539266][T12914] [<8035a1d8>] (futex_wait) from [<803559b8>] (do_futex+0x1b4/0x1d0) [ 1150.539296][T12914] r10:000000f0 r9:00000000 r8:85a5c980 r7:00000000 r6:003562e0 r5:00000080 [ 1150.539305][T12914] r4:00000000 [ 1150.539331][T12914] [<80355804>] (do_futex) from [<8035626c>] (sys_futex_time32+0x11c/0x1bc) [ 1150.539359][T12914] r4:00000000 [ 1150.539367][T12914] [<80356150>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1150.539390][T12914] Exception stack(0xea611fa8 to 0xea611ff0) [ 1150.539412][T12914] 1fa0: 00131d58 ffffffff 003562e0 00000080 00000000 00000000 [ 1150.539428][T12914] 1fc0: 00131d58 ffffffff 76f927d4 000000f0 00340000 00000000 00000001 76f920dc [ 1150.539442][T12914] 1fe0: 76f91f38 76f91f28 00021b10 001309d0 [ 1150.539458][T12914] r9:85a5c980 r8:8020029c r7:000000f0 r6:76f927d4 r5:ffffffff r4:00131d58 [ 1150.965174][T12918] tun0: tun_chr_ioctl cmd 1074025675 [ 1150.965480][T12918] tun0: persist enabled [ 1150.969158][T12918] tun0: tun_chr_ioctl cmd 1074025680 [ 1151.062017][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1151.225894][ T28] audit: type=1400 audit(1140.385:541): avc: denied { audit_write } for pid=12921 comm="syz.0.1977" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1154.582211][ T43] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1154.757269][ T43] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1154.772586][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.772765][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1154.772931][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.775727][ T43] usb 2-1: config 0 descriptor?? [ 1154.816994][ T43] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1160.149865][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1163.060111][ T28] audit: type=1400 audit(1151.306:542): avc: denied { bind } for pid=12992 comm="syz.0.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1170.423478][ T43] usb 2-1: USB disconnect, device number 126 [ 1170.528032][T13029] FAULT_INJECTION: forcing a failure. [ 1170.528032][T13029] name failslab, interval 1, probability 0, space 0, times 1 [ 1170.531096][T13029] CPU: 0 UID: 0 PID: 13029 Comm: syz.1.2014 Tainted: G L syzkaller #0 PREEMPT [ 1170.531236][T13029] Tainted: [L]=SOFTLOCKUP [ 1170.531255][T13029] Hardware name: ARM-Versatile Express [ 1170.531280][T13029] Call trace: [ 1170.531322][T13029] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1170.531416][T13029] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1170.531433][T13029] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1170.531505][T13029] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1170.531565][T13029] r7:840e6e40 r6:00000000 r5:840e6e40 r4:82b1ac48 [ 1170.531579][T13029] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1170.531633][T13029] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1170.531701][T13029] r8:00000000 r7:840e6e40 r6:80584788 r5:00000cc0 r4:83e7d3c0 [ 1170.531719][T13029] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 1170.531772][T13029] [<80546804>] (kmem_cache_alloc_noprof) from [<80584788>] (new_userfaultfd+0x4c/0x198) [ 1170.531840][T13029] r10:00000184 r9:840e6e40 r8:8020029c r7:00000000 r6:840e6e40 r5:00000801 [ 1170.531860][T13029] r4:00000801 [ 1170.531876][T13029] [<8058473c>] (new_userfaultfd) from [<8058c754>] (sys_userfaultfd+0x20/0x54) [ 1170.531965][T13029] r7:00000184 r6:00356308 r5:00000000 r4:00000801 [ 1170.531986][T13029] [<8058c734>] (sys_userfaultfd) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1170.532035][T13029] Exception stack(0xdf951fa8 to 0xdf951ff0) [ 1170.532073][T13029] 1fa0: 00000000 00000000 00000801 00000000 00000000 00000000 [ 1170.532106][T13029] 1fc0: 00000000 00000000 00356308 00000184 003562d8 00000000 00000001 76f170dc [ 1170.532134][T13029] 1fe0: 76f16e88 76f16e78 00018fa0 001309d0 [ 1170.532158][T13029] r5:00000000 r4:00000000 [ 1170.653374][T13031] fuse: Bad value for 'rootmode' [ 1171.006738][T13039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.008533][T13039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.132286][T13043] fuse: Unknown parameter 'use00000000000000000000' [ 1171.500814][T13054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.611461][T13054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.737625][ T43] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1172.997030][ T43] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1173.051903][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.052171][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1173.052360][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.056064][ T43] usb 2-1: config 0 descriptor?? [ 1173.093175][ T43] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1175.898633][T13079] FAULT_INJECTION: forcing a failure. [ 1175.898633][T13079] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1175.909419][T13079] CPU: 0 UID: 0 PID: 13079 Comm: syz.0.2032 Tainted: G L syzkaller #0 PREEMPT [ 1175.909568][T13079] Tainted: [L]=SOFTLOCKUP [ 1175.909617][T13079] Hardware name: ARM-Versatile Express [ 1175.909640][T13079] Call trace: [ 1175.909694][T13079] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1175.909854][T13079] r7:60000113 r6:60000113 r5:82336570 r4:00000000 [ 1175.909874][T13079] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1175.909930][T13079] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1175.909988][T13079] r7:00000000 r6:00000000 r5:84fb24c0 r4:82afac00 [ 1175.910005][T13079] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1175.910060][T13079] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 1175.910117][T13079] r8:000002e0 r7:00000000 r6:df985e38 r5:00000000 r4:003562e0 [ 1175.910134][T13079] [<809fdf04>] (should_fail) from [<803544f4>] (get_futex_key+0xa8/0x558) [ 1175.910188][T13079] [<8035444c>] (get_futex_key) from [<80359ec0>] (futex_wait_setup+0x88/0x29c) [ 1175.910278][T13079] r10:b5003500 r9:b5403587 r8:b5003500 r7:003562e0 r6:003562e0 r5:84fb24c0 [ 1175.910298][T13079] r4:7efffffc [ 1175.910316][T13079] [<80359e38>] (futex_wait_setup) from [<8035a158>] (__futex_wait+0x84/0x104) [ 1175.910382][T13079] r10:00000000 r9:00000000 r8:00000000 r7:00000002 r6:003562e0 r5:84fb24c0 [ 1175.910402][T13079] r4:00000000 [ 1175.910420][T13079] [<8035a0d4>] (__futex_wait) from [<8035a258>] (futex_wait+0x80/0x10c) [ 1175.910511][T13079] r9:00000000 r8:0000c350 r7:003562e0 r6:00000000 r5:00000000 r4:00000002 [ 1175.910534][T13079] [<8035a1d8>] (futex_wait) from [<803559b8>] (do_futex+0x1b4/0x1d0) [ 1175.910597][T13079] r10:000000f0 r9:00000000 r8:84fb24c0 r7:00000000 r6:003562e0 r5:00000080 [ 1175.910618][T13079] r4:00000000 [ 1175.910635][T13079] [<80355804>] (do_futex) from [<8035626c>] (sys_futex_time32+0x11c/0x1bc) [ 1175.910694][T13079] r4:00000000 [ 1175.910712][T13079] [<80356150>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1175.910764][T13079] Exception stack(0xdf985fa8 to 0xdf985ff0) [ 1175.910805][T13079] 5fa0: 00131d58 ffffffff 003562e0 00000080 00000000 00000000 [ 1175.910843][T13079] 5fc0: 00131d58 ffffffff 76f927d4 000000f0 00340000 00000000 00000001 76f920dc [ 1175.910874][T13079] 5fe0: 76f91f38 76f91f28 00021b10 001309d0 [ 1175.910910][T13079] r9:84fb24c0 r8:8020029c r7:000000f0 r6:76f927d4 r5:ffffffff r4:00131d58 [ 1176.822066][T13089] netlink: 'syz.0.2037': attribute type 3 has an invalid length. [ 1176.832528][ T28] audit: type=1400 audit(1164.028:543): avc: denied { remount } for pid=13088 comm="syz.0.2037" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1178.878498][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1186.668095][T13125] loop1: detected capacity change from 0 to 7 [ 1188.630089][ T23] usb 2-1: USB disconnect, device number 127 [ 1188.866263][T13154] FAULT_INJECTION: forcing a failure. [ 1188.866263][T13154] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.866997][T13154] CPU: 1 UID: 0 PID: 13154 Comm: syz.1.2055 Tainted: G L syzkaller #0 PREEMPT [ 1188.867175][T13154] Tainted: [L]=SOFTLOCKUP [ 1188.867246][T13154] Hardware name: ARM-Versatile Express [ 1188.867388][T13154] Call trace: [ 1188.867470][T13154] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1188.867571][T13154] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1188.867593][T13154] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1188.867745][T13154] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1188.867960][T13154] r7:85a69880 r6:00000000 r5:85a69880 r4:82b1ac48 [ 1188.868093][T13154] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1188.868191][T13154] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1188.868313][T13154] r8:00000000 r7:85a69880 r6:80584788 r5:00000cc0 r4:83e7d3c0 [ 1188.868338][T13154] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 1188.868411][T13154] [<80546804>] (kmem_cache_alloc_noprof) from [<80584788>] (new_userfaultfd+0x4c/0x198) [ 1188.868524][T13154] r10:00000184 r9:85a69880 r8:8020029c r7:00000000 r6:85a69880 r5:00000801 [ 1188.868594][T13154] r4:00000801 [ 1188.868617][T13154] [<8058473c>] (new_userfaultfd) from [<8058c754>] (sys_userfaultfd+0x20/0x54) [ 1188.868768][T13154] r7:00000184 r6:00356308 r5:00000000 r4:00000801 [ 1188.868815][T13154] [<8058c734>] (sys_userfaultfd) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1188.868920][T13154] Exception stack(0xdfaddfa8 to 0xdfaddff0) [ 1188.869008][T13154] dfa0: 00000000 00000000 00000801 00000000 00000000 00000000 [ 1188.869062][T13154] dfc0: 00000000 00000000 00356308 00000184 003562d8 00000000 00000001 76f170dc [ 1188.869148][T13154] dfe0: 76f16e88 76f16e78 00018fa0 001309d0 [ 1188.869283][T13154] r5:00000000 r4:00000000 [ 1189.201388][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1189.376640][ T23] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1189.383717][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1189.384057][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.389182][ T23] usb 2-1: config 0 descriptor?? [ 1189.400005][ T23] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1190.762519][T13166] netlink: 'syz.0.2058': attribute type 6 has an invalid length. [ 1196.622305][T13193] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2068'. [ 1197.043698][T13209] capability: warning: `syz.0.2074' uses 32-bit capabilities (legacy support in use) [ 1197.253242][ T28] audit: type=1326 audit(1182.870:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13213 comm="syz.0.2076" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x0 [ 1205.237551][ T9] usb 2-1: USB disconnect, device number 2 [ 1206.185442][T13265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.187782][T13265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1207.387625][ T7788] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1207.497074][T13282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1207.498167][T13282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1207.550658][ T7788] usb 2-1: Using ep0 maxpacket: 16 [ 1207.554859][ T7788] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1207.574748][ T7788] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1207.575823][ T7788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.579024][ T7788] usb 2-1: config 1 has no interface number 0 [ 1207.616607][ T7788] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1207.618577][ T7788] usb 2-1: Product: syz [ 1207.618848][ T7788] usb 2-1: Manufacturer: syz [ 1207.619017][ T7788] usb 2-1: SerialNumber: syz [ 1208.902859][T13297] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2103'. [ 1216.313458][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1218.759578][ T23] usb 2-1: USB disconnect, device number 3 [ 1224.482370][T13379] fuse: Bad value for 'fd' [ 1225.201443][T13383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1225.202511][T13383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.110050][T13390] fuse: Bad value for 'fd' [ 1228.511427][ T7749] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1228.689145][ T7749] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1228.697981][ T7749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1228.698400][ T7749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1228.698729][ T7749] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1228.699025][ T7749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.708002][ T7749] usb 2-1: config 0 descriptor?? [ 1229.183387][ T7749] usbhid 2-1:0.0: can't add hid device: -71 [ 1229.183628][ T7749] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1229.185791][ T7749] usb 2-1: USB disconnect, device number 4 [ 1229.504897][T13431] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1233.904711][T13472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61712 sclass=netlink_route_socket pid=13472 comm=syz.0.2169 [ 1233.999158][T13474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.000231][T13474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.996688][T13490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.998444][T13490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.398986][ T7788] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1235.593918][ T7788] usb 2-1: Using ep0 maxpacket: 16 [ 1235.598371][T13494] ip6gre1: entered promiscuous mode [ 1235.599468][ T7788] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1235.600539][T13494] ip6gre1: entered allmulticast mode [ 1235.616863][ T7788] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1235.617187][ T7788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.617952][ T7788] usb 2-1: config 1 has no interface number 0 [ 1235.618041][ T7788] usb 2-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1235.618558][ T7788] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1235.648127][ T7788] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1235.648696][ T7788] usb 2-1: Product: syz [ 1235.648752][ T7788] usb 2-1: Manufacturer: syz [ 1235.648785][ T7788] usb 2-1: SerialNumber: syz [ 1237.247309][T13533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1237.247913][T13533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.339257][T13541] fuse: Bad value for 'fd' [ 1246.832245][ T9] usb 2-1: USB disconnect, device number 5 [ 1246.950117][ T28] audit: type=1400 audit(1228.754:545): avc: denied { setopt } for pid=13616 comm="syz.1.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1247.749054][ T6860] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1248.072394][ T6860] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1248.085285][ T6860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.085917][ T6860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1248.086112][ T6860] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1248.086342][ T6860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.127921][ T6860] usb 2-1: config 0 descriptor?? [ 1248.841198][ T6860] usbhid 2-1:0.0: can't add hid device: -71 [ 1248.841520][ T6860] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1248.847113][ T6860] usb 2-1: USB disconnect, device number 6 [ 1250.145813][T13655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.146733][T13655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.514155][T13691] fuse: Bad value for 'fd' [ 1255.059124][T13703] fuse: Bad value for 'fd' [ 1255.516593][T13713] fuse: Bad value for 'fd' [ 1256.746434][T13724] tmpfs: Unsupported parameter 'huge' [ 1258.102543][ T28] audit: type=1400 audit(1239.047:546): avc: denied { read write } for pid=13745 comm="syz.0.2254" name="file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1258.104677][ T28] audit: type=1400 audit(1239.047:547): avc: denied { open } for pid=13745 comm="syz.0.2254" path="/596/file0/file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1258.110455][ T28] audit: type=1400 audit(1239.056:548): avc: denied { ioctl } for pid=13745 comm="syz.0.2254" path="/596/file0/file0" dev="fuse" ino=67 ioctlcmd=0x545c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1260.324344][T13763] FAULT_INJECTION: forcing a failure. [ 1260.324344][T13763] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1260.325914][T13763] CPU: 0 UID: 0 PID: 13763 Comm: syz.0.2260 Tainted: G L syzkaller #0 PREEMPT [ 1260.326025][T13763] Tainted: [L]=SOFTLOCKUP [ 1260.326046][T13763] Hardware name: ARM-Versatile Express [ 1260.326068][T13763] Call trace: [ 1260.326108][T13763] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1260.326207][T13763] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1260.326225][T13763] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1260.326276][T13763] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1260.326332][T13763] r7:00000000 r6:00000000 r5:85a56200 r4:82afac00 [ 1260.326350][T13763] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1260.326402][T13763] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 1260.326457][T13763] r8:000002e4 r7:00000000 r6:dfb61ed8 r5:00000000 r4:003562e4 [ 1260.326475][T13763] [<809fdf04>] (should_fail) from [<803544f4>] (get_futex_key+0xa8/0x558) [ 1260.326523][T13763] [<8035444c>] (get_futex_key) from [<80358eec>] (futex_wake+0x70/0x25c) [ 1260.326581][T13763] r10:000000f0 r9:00131d58 r8:dfb61ec8 r7:ffffffff r6:003562e4 r5:000f4240 [ 1260.326600][T13763] r4:00000002 [ 1260.326615][T13763] [<80358e7c>] (futex_wake) from [<80355998>] (do_futex+0x194/0x1d0) [ 1260.326687][T13763] r10:000000f0 r9:00000001 r8:85a56200 r7:000f4240 r6:003562e4 r5:00000081 [ 1260.326708][T13763] r4:000f4240 [ 1260.326724][T13763] [<80355804>] (do_futex) from [<8035626c>] (sys_futex_time32+0x11c/0x1bc) [ 1260.326772][T13763] r4:00000000 [ 1260.326791][T13763] [<80356150>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1260.326836][T13763] Exception stack(0xdfb61fa8 to 0xdfb61ff0) [ 1260.326875][T13763] 1fa0: 00131d58 ffffffff 003562e4 00000081 000f4240 00000000 [ 1260.326910][T13763] 1fc0: 00131d58 ffffffff 76f927d4 000000f0 00340000 00000000 00000001 76f920dc [ 1260.326936][T13763] 1fe0: 76f91f38 76f91f28 00021bb4 001309d0 [ 1260.326971][T13763] r9:85a56200 r8:8020029c r7:000000f0 r6:76f927d4 r5:ffffffff r4:00131d58 [ 1264.401914][T13770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1264.410413][T13770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1264.871462][T13770] hsr_slave_0: entered promiscuous mode [ 1264.876958][T13770] hsr_slave_1: entered promiscuous mode [ 1264.878111][T13770] debugfs: 'hsr0' already exists in 'hsr' [ 1264.879893][T13770] Cannot create hsr debugfs directory [ 1265.095512][T13770] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.142643][T13770] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.198033][T13770] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.266587][T13770] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.355262][T13770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1265.360706][T13770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1265.362788][T13770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1265.366255][T13770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1265.368713][T13770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1265.374292][T13770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1265.376663][T13770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1265.379931][T13770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1265.740969][T13770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1266.923436][ T8103] pim6reg: left allmulticast mode [ 1266.923992][ T8103] lo: left allmulticast mode [ 1267.084882][ T8103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1267.091068][ T8103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1267.105974][ T8103] bond0 (unregistering): Released all slaves [ 1267.202380][ T8103] hsr_slave_0: left promiscuous mode [ 1267.221078][ T8103] hsr_slave_1: left promiscuous mode [ 1267.229639][ T8103] veth1_macvtap: left promiscuous mode [ 1267.229907][ T8103] veth0_macvtap: left promiscuous mode [ 1267.230056][ T8103] veth1_vlan: left promiscuous mode [ 1267.230118][ T8103] veth0_vlan: left promiscuous mode [ 1268.032522][T13770] veth0_vlan: entered promiscuous mode [ 1268.045193][T13770] veth1_vlan: entered promiscuous mode [ 1268.093879][T13770] veth0_macvtap: entered promiscuous mode [ 1268.112022][T13770] veth1_macvtap: entered promiscuous mode [ 1268.199341][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.199712][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.219745][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.220257][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.928927][T14121] input: AT Raw Set 2 keyboard as /devices/platform/bus@8000000/bus@8000000:motherboard-bus/bus@8000000:motherboard-bus:iofpga-bus@300000000/1c060000.kmi/serio0/input/input17 [ 1271.806442][T14149] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2280'. [ 1272.735209][ T28] audit: type=1400 audit(1252.554:549): avc: denied { create } for pid=14152 comm="syz.0.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1272.739446][ T28] audit: type=1400 audit(1252.563:550): avc: denied { sys_admin } for pid=14152 comm="syz.0.2282" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1282.115641][T14231] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2309'. [ 1282.416774][T14238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1282.480746][ T6860] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1282.905119][ T28] audit: type=1400 audit(1261.943:551): avc: denied { map } for pid=14247 comm="syz.1.2315" path="/494/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1283.375520][ T6860] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1287.457456][ T28] audit: type=1326 audit(1266.134:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14285 comm="syz.0.2331" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1287.457772][ T28] audit: type=1326 audit(1266.134:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14285 comm="syz.0.2331" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1287.458230][ T28] audit: type=1326 audit(1266.134:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14285 comm="syz.0.2331" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1287.458807][ T28] audit: type=1326 audit(1266.143:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14285 comm="syz.0.2331" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1287.459018][ T28] audit: type=1326 audit(1266.143:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14285 comm="syz.0.2331" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1287.459224][ T28] audit: type=1326 audit(1266.143:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14285 comm="syz.0.2331" exe="/syz-executor" sig=0 arch=40000028 syscall=10 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1287.460359][ T28] audit: type=1326 audit(1266.143:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14285 comm="syz.0.2331" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1287.460556][ T28] audit: type=1326 audit(1266.143:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14285 comm="syz.0.2331" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1287.460771][ T28] audit: type=1326 audit(1266.143:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14285 comm="syz.0.2331" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1289.739969][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1289.753624][ T28] audit: type=1400 audit(1268.257:564): avc: denied { shutdown } for pid=14292 comm="syz.1.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1294.638641][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1300.912240][T14360] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1300.912652][T14360] block device autoloading is deprecated and will be removed. [ 1300.915206][ T28] audit: type=1400 audit(1278.579:565): avc: denied { ioctl } for pid=14354 comm="syz.0.2354" path="/41/file0/file0" dev="fuse" ino=64 ioctlcmd=0x92b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1301.042386][T14365] fuse: Unknown parameter 'grou00000000000000000000' [ 1301.598129][T14377] fuse: Unknown parameter 'grou00000000000000000000' [ 1302.330303][T14382] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14382 comm=syz.1.2364 [ 1303.266984][T14390] fuse: Unknown parameter 'grou00000000000000000000' [ 1303.768755][T14394] fuse: Unknown parameter 'group_i00000000000000000000' [ 1304.561506][T14404] fuse: Unknown parameter 'group_i00000000000000000000' [ 1308.148775][T14422] syzkaller0: entered promiscuous mode [ 1308.149023][T14422] syzkaller0: entered allmulticast mode [ 1308.597733][ T28] audit: type=1400 audit(1285.669:566): avc: denied { nlmsg_read } for pid=14430 comm="syz.1.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1311.609374][T14451] bond0: no command found in slaves file - use +ifname or -ifname [ 1314.862177][T14474] fuse: Bad value for 'fd' [ 1327.114167][T14546] kernel profiling enabled (shift: 9) [ 1328.244285][T14558] bonding: no command found in bonding_masters - use +ifname or -ifname [ 1328.921866][ T7788] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1329.426829][T14581] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 1329.441969][T14581] bond1: entered allmulticast mode [ 1329.994789][ T7788] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1330.184306][T14621] fuse: Invalid rootmode [ 1331.259894][T14638] fuse: Invalid rootmode [ 1333.295301][T14644] dummy0: Caught tx_queue_len zero misconfig [ 1333.549552][T14650] fuse: Bad value for 'rootmode' [ 1334.289806][T14662] fuse: Bad value for 'rootmode' [ 1336.480697][ T28] audit: type=1326 audit(1311.408:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14669 comm="syz.1.2451" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x0 [ 1337.151311][T14673] fuse: Bad value for 'fd' [ 1337.238333][T14675] fuse: Bad value for 'rootmode' [ 1338.030575][T14686] fuse: Bad value for 'fd' [ 1338.111704][T14688] fuse: Unknown parameter 'use00000000000000000000' [ 1338.461783][T14698] fuse: Bad value for 'fd' [ 1338.515355][T14700] fuse: Unknown parameter 'use00000000000000000000' [ 1339.538302][T14729] fuse: Unknown parameter 'use00000000000000000000' [ 1341.386245][T14751] fuse: Unknown parameter 'user_i00000000000000000000' [ 1341.475758][T14754] fuse: Unknown parameter 'user_i00000000000000000000' [ 1342.952931][T14765] fuse: Unknown parameter 'user_i00000000000000000000' [ 1344.564077][T14773] fuse: Unknown parameter 'user_i00000000000000000000' [ 1346.507566][T14788] fuse: Unknown parameter 'user_id00000000000000000000' [ 1349.748547][T14802] fuse: Unknown parameter 'user_id00000000000000000000' [ 1350.054908][T14810] netlink: 'syz.0.2506': attribute type 4 has an invalid length. [ 1353.176816][T14838] fuse: Bad value for 'fd' [ 1359.658390][T14874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1359.661596][T14874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1361.276426][T15057] fuse: Unknown parameter '0x0000000000000004' [ 1362.589596][T14874] hsr_slave_0: entered promiscuous mode [ 1362.591002][T14874] hsr_slave_1: entered promiscuous mode [ 1362.881128][T14874] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.932406][T14874] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.997003][T14874] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.089970][T14874] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.227959][T14874] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1363.234592][T14874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1363.241686][T14874] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1363.249990][T14874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1363.253357][T14874] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1363.262828][T14874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1363.266125][T14874] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1363.281798][T14874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1363.647508][T14874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1365.104742][T14874] veth0_vlan: entered promiscuous mode [ 1365.119978][T14874] veth1_vlan: entered promiscuous mode [ 1365.181816][T14874] veth0_macvtap: entered promiscuous mode [ 1365.188703][T14874] veth1_macvtap: entered promiscuous mode [ 1365.254792][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.258027][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.259158][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.306477][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.502575][T15224] FAULT_INJECTION: forcing a failure. [ 1365.502575][T15224] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1365.502894][T15224] CPU: 1 UID: 0 PID: 15224 Comm: syz.0.2549 Tainted: G L syzkaller #0 PREEMPT [ 1365.502950][T15224] Tainted: [L]=SOFTLOCKUP [ 1365.502960][T15224] Hardware name: ARM-Versatile Express [ 1365.502973][T15224] Call trace: [ 1365.502999][T15224] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1365.503066][T15224] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1365.503139][T15224] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1365.503204][T15224] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1365.503284][T15224] r7:00000000 r6:00000000 r5:85a68c40 r4:82afac00 [ 1365.503312][T15224] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1365.503424][T15224] [<809fdce0>] (should_fail_ex) from [<809fdf18>] (should_fail+0x14/0x18) [ 1365.503471][T15224] r8:000002e0 r7:00000000 r6:dfd99e38 r5:00000000 r4:003562e0 [ 1365.503489][T15224] [<809fdf04>] (should_fail) from [<803544f4>] (get_futex_key+0xa8/0x558) [ 1365.503544][T15224] [<8035444c>] (get_futex_key) from [<80359ec0>] (futex_wait_setup+0x88/0x29c) [ 1365.503579][T15224] r10:b5003500 r9:b5403587 r8:b5003500 r7:003562e0 r6:003562e0 r5:85a68c40 [ 1365.503589][T15224] r4:7efffffc [ 1365.503597][T15224] [<80359e38>] (futex_wait_setup) from [<8035a158>] (__futex_wait+0x84/0x104) [ 1365.503629][T15224] r10:00000000 r9:00000000 r8:00000000 r7:00000002 r6:003562e0 r5:85a68c40 [ 1365.503667][T15224] r4:00000000 [ 1365.503709][T15224] [<8035a0d4>] (__futex_wait) from [<8035a258>] (futex_wait+0x80/0x10c) [ 1365.503751][T15224] r9:00000000 r8:0000c350 r7:003562e0 r6:00000000 r5:00000000 r4:00000002 [ 1365.503804][T15224] [<8035a1d8>] (futex_wait) from [<803559b8>] (do_futex+0x1b4/0x1d0) [ 1365.503867][T15224] r10:000000f0 r9:00000000 r8:85a68c40 r7:00000000 r6:003562e0 r5:00000080 [ 1365.503892][T15224] r4:00000000 [ 1365.503975][T15224] [<80355804>] (do_futex) from [<8035626c>] (sys_futex_time32+0x11c/0x1bc) [ 1365.504037][T15224] r4:00000000 [ 1365.504048][T15224] [<80356150>] (sys_futex_time32) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1365.504073][T15224] Exception stack(0xdfd99fa8 to 0xdfd99ff0) [ 1365.504158][T15224] 9fa0: 00131d58 ffffffff 003562e0 00000080 00000000 00000000 [ 1365.504178][T15224] 9fc0: 00131d58 ffffffff 76fbf7d4 000000f0 00340000 00000000 00000001 76fbf0dc [ 1365.504242][T15224] 9fe0: 76fbef38 76fbef28 00021b10 001309d0 [ 1365.504262][T15224] r9:85a68c40 r8:8020029c r7:000000f0 r6:76fbf7d4 r5:ffffffff r4:00131d58 [ 1366.528705][T15261] fuse: Unknown parameter 'fd0x0000000000000004' [ 1378.886885][T15440] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2636'. [ 1379.205522][T15456] netlink: 'syz.1.2642': attribute type 9 has an invalid length. [ 1379.260925][ T28] audit: type=1400 audit(1350.902:568): avc: denied { create } for pid=15457 comm="syz.1.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1379.264714][ T28] audit: type=1400 audit(1350.902:569): avc: denied { write } for pid=15457 comm="syz.1.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1379.276971][T15458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2643'. [ 1381.601938][ T28] audit: type=1400 audit(1353.062:570): avc: denied { write } for pid=15508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1382.147345][ T28] audit: type=1400 audit(1353.561:571): avc: denied { write } for pid=15517 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1386.352921][T15547] "syz.1.2660" (15547) uses obsolete ecb(arc4) skcipher [ 1388.718941][T15565] syz.0.2666 (15565): attempted to duplicate a private mapping with mremap. This is not supported. [ 1391.665652][T15581] binfmt_misc: register: failed to install interpreter ./cgroup.cpu/memory.limit_in_bytes [ 1398.652153][T15661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2701'. [ 1400.003896][ T28] audit: type=1326 audit(1370.049:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15678 comm="syz.1.2709" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x0 [ 1404.993238][T15725] fuse: Unknown parameter 'group_i00000000000000000000' [ 1405.428497][T15736] fuse: Unknown parameter 'group_id00000000000000000000' [ 1408.054156][T15748] fuse: Unknown parameter 'group_id00000000000000000000' [ 1408.525391][T15761] fuse: Unknown parameter 'group_id00000000000000000000' [ 1409.011181][T15772] fuse: Bad value for 'user_id' [ 1409.011917][T15772] fuse: Bad value for 'user_id' [ 1409.968121][ T28] audit: type=1400 audit(1379.254:573): avc: denied { getopt } for pid=15799 comm="syz.1.2757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1410.142951][T15806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2760'. [ 1410.395807][ T28] audit: type=1400 audit(1379.641:574): avc: denied { mount } for pid=15811 comm="syz.1.2763" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1410.445103][T15815] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1410.653008][ T28] audit: type=1400 audit(1379.881:575): avc: denied { watch watch_reads } for pid=15820 comm="syz.1.2767" path="/proc/316/task/317/net" dev="proc" ino=26753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1411.581298][T15848] syzkaller0: entered promiscuous mode [ 1411.581610][T15848] syzkaller0: entered allmulticast mode [ 1412.280301][T15856] fuse: Bad value for 'fd' [ 1423.092782][T15930] caif0: tun_chr_ioctl cmd 1074041889 [ 1423.096003][T15930] caif0: tun_chr_ioctl cmd 1074025675 [ 1423.101531][T15930] caif0: persist enabled [ 1428.170906][T15968] "syz.0.2816" (15968) uses obsolete ecb(arc4) skcipher [ 1428.656136][T15982] "syz.0.2821" (15982) uses obsolete ecb(arc4) skcipher [ 1429.610051][T15993] "syz.0.2826" (15993) uses obsolete ecb(arc4) skcipher [ 1437.105469][T16041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.106682][T16041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.763505][T16056] fuse: Bad value for 'group_id' [ 1437.764198][T16056] fuse: Bad value for 'group_id' [ 1439.935302][T16050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1440.360040][T16075] comedi: valid board names for 8255 driver are: [ 1440.360289][T16075] 8255 [ 1440.360470][T16075] comedi: valid board names for vmk80xx driver are: [ 1440.360555][T16075] vmk80xx [ 1440.360624][T16075] comedi: valid board names for usbduxsigma driver are: [ 1440.360703][T16075] usbduxsigma [ 1440.360770][T16075] comedi: valid board names for usbduxfast driver are: [ 1440.360838][T16075] usbduxfast [ 1440.360902][T16075] comedi: valid board names for usbdux driver are: [ 1440.361010][T16075] usbdux [ 1440.361084][T16075] comedi: valid board names for ni6501 driver are: [ 1440.361160][T16075] ni6501 [ 1440.361280][T16075] comedi: valid board names for dt9812 driver are: [ 1440.361352][T16075] dt9812 [ 1440.361437][T16075] comedi: valid board names for ni_labpc_cs driver are: [ 1440.361507][T16075] ni_labpc_cs [ 1440.361572][T16075] comedi: valid board names for ni_daq_700 driver are: [ 1440.361674][T16075] ni_daq_700 [ 1440.361745][T16075] comedi: valid board names for labpc_pci driver are: [ 1440.361814][T16075] labpc_pci [ 1440.361879][T16075] comedi: valid board names for adl_pci9118 driver are: [ 1440.361959][T16075] pci9118dg [ 1440.362046][T16075] pci9118hg [ 1440.362115][T16075] pci9118hr [ 1440.362185][T16075] comedi: valid board names for 8255_pci driver are: [ 1440.362251][T16075] 8255_pci [ 1440.362317][T16075] comedi: valid board names for comedi_parport driver are: [ 1440.362382][T16075] comedi_parport [ 1440.362449][T16075] comedi: valid board names for comedi_test driver are: [ 1440.362514][T16075] comedi_test [ 1440.362579][T16075] comedi: valid board names for comedi_bond driver are: [ 1440.362650][T16075] comedi_bond [ 1443.332115][T16083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.333466][T16083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1444.378865][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1449.455300][T16109] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2862'. [ 1455.431744][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2872'. [ 1464.549653][T16222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.550124][T16222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.713574][T16246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.714668][T16246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1466.974350][T16266] fuse: Unknown parameter '0x0000000000000003' [ 1467.107473][T16270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.109449][T16270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1469.217688][T16283] fuse: Unknown parameter '0x0000000000000003' [ 1471.374386][ T28] audit: type=1400 audit(1435.947:576): avc: denied { create } for pid=16284 comm="syz.0.2911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1472.695010][T16300] fuse: Unknown parameter 'fd0x0000000000000003' [ 1474.868206][T16313] ubi0: attaching mtd0 [ 1474.932688][T16315] fuse: Unknown parameter 'fd0x0000000000000003' [ 1475.104917][T16319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.106601][T16319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1478.203408][T16359] fuse: Unknown parameter 'grou00000000000000000000' [ 1479.375683][ T28] audit: type=1400 audit(1443.324:577): avc: denied { mounton } for pid=16366 comm="syz.1.2936" path="/209/file0" dev="tmpfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1482.421071][T16373] nbd: must specify at least one socket [ 1483.368578][T16377] fuse: Unknown parameter 'grou00000000000000000000' [ 1491.228011][T16388] Mass Storage Function, version: 2009/09/11 [ 1491.228478][T16388] LUN: removable file: (no medium) [ 1491.229098][ T28] audit: type=1400 audit(1454.273:578): avc: denied { write } for pid=16387 comm="syz.1.2941" name="functions" dev="configfs" ino=3232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1493.210942][ T28] audit: type=1400 audit(1456.092:579): avc: denied { write } for pid=16387 comm="syz.1.2941" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1493.211358][ T28] audit: type=1400 audit(1456.092:580): avc: denied { remove_name } for pid=16387 comm="syz.1.2941" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1493.211748][ T28] audit: type=1400 audit(1456.092:581): avc: denied { unlink } for pid=16387 comm="syz.1.2941" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1493.848265][T16397] fuse: Unknown parameter 'group_i00000000000000000000' [ 1498.389051][T16413] fuse: Unknown parameter 'group_i00000000000000000000' [ 1498.525368][T16418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2950'. [ 1498.830861][ T43] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1499.007606][ T43] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1499.026503][ T43] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1499.026881][ T43] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1499.026939][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1499.027009][ T43] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1499.027087][ T43] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1499.055481][ T43] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1499.055872][ T43] usb 2-1: Product: syz [ 1499.055926][ T43] usb 2-1: Manufacturer: syz [ 1499.080027][ T43] cdc_wdm 2-1:1.0: skipping garbage [ 1499.080393][ T43] cdc_wdm 2-1:1.0: skipping garbage [ 1499.086140][ T43] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1499.531262][ T10] usb 2-1: USB disconnect, device number 7 [ 1500.011814][T15422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1500.028419][T15422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1500.035001][T15422] bond0 (unregistering): Released all slaves [ 1500.038642][T15422] bond1 (unregistering): Released all slaves [ 1500.103324][T15422] hsr_slave_0: left promiscuous mode [ 1500.104589][T15422] hsr_slave_1: left promiscuous mode [ 1500.110739][T15422] veth1_macvtap: left promiscuous mode [ 1500.111025][T15422] veth0_macvtap: left promiscuous mode [ 1500.111333][T15422] veth1_vlan: left promiscuous mode [ 1500.111427][T15422] veth0_vlan: left promiscuous mode [ 1502.741648][ T28] audit: type=1400 audit(1464.899:582): avc: denied { create } for pid=16441 comm="syz.1.2954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1504.646355][T16456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.649910][T16456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1510.830591][ T28] audit: type=1400 audit(1472.368:583): avc: denied { mount } for pid=16473 comm="syz.0.2966" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1510.847104][ T28] audit: type=1400 audit(1472.386:584): avc: denied { unmount } for pid=13770 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1511.047124][T16478] fuse: Bad value for 'fd' [ 1511.119584][T16480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1511.120610][T16480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.735986][T16490] fuse: Bad value for 'fd' [ 1512.763985][T16503] fuse: Bad value for 'fd' [ 1512.832362][T16506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1512.833829][T16506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1516.201547][T16525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1516.202663][T16525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1516.455880][T16529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1516.457909][T16529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1516.610389][ T28] audit: type=1400 audit(1477.704:585): avc: denied { lock } for pid=16534 comm="syz.0.2991" path="socket:[28695]" dev="sockfs" ino=28695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1516.799192][T16541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1516.804978][T16541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1516.904572][T16545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=16545 comm=syz.0.2994 [ 1526.473778][ T7788] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1526.635983][ T7788] usb 2-1: Using ep0 maxpacket: 8 [ 1526.639433][ T7788] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1526.644203][ T7788] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1526.644379][ T7788] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1526.644479][ T7788] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1526.644570][ T7788] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1526.644624][ T7788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.883900][ T7788] usb 2-1: usb_control_msg returned -32 [ 1526.884360][ T7788] usbtmc 2-1:16.0: can't read capabilities [ 1526.887661][T16596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.888808][T16596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.908773][ T7788] usb 2-1: USB disconnect, device number 8 [ 1526.988133][T16616] fuse: Bad value for 'fd' [ 1528.140571][T16627] fuse: Bad value for 'fd' [ 1531.976910][T16640] fuse: Bad value for 'fd' [ 1532.788672][ T7788] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1532.951169][ T7788] usb 2-1: Using ep0 maxpacket: 16 [ 1532.953335][ T7788] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1532.956173][ T7788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.956357][ T7788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1532.956584][ T7788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1532.956646][ T7788] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1532.956681][ T7788] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1532.963277][ T7788] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1532.963437][ T7788] usb 2-1: Manufacturer: syz [ 1532.965761][ T7788] usb 2-1: config 0 descriptor?? [ 1533.362574][ T7788] rc_core: IR keymap rc-hauppauge not found [ 1533.362721][ T7788] Registered IR keymap rc-empty [ 1533.362919][ T7788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1533.384250][ T7788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1533.406286][ T7788] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1533.407380][ T7788] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input18 [ 1533.416847][ T7788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1533.439148][ T7788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1533.461028][ T7788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1533.481968][ T7788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1533.503679][ T7788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1533.525356][ T7788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1533.547664][ T7788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1533.569346][ T7788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1533.590144][ T7788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1533.611880][ T7788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1533.635472][ T7788] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1533.635766][ T7788] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1533.782014][ T7788] usb 2-1: USB disconnect, device number 9 [ 1535.989342][ T28] audit: type=1400 audit(1495.595:586): avc: denied { ioctl } for pid=16695 comm="syz.1.3029" path="socket:[27949]" dev="sockfs" ino=27949 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1541.666105][ T28] audit: type=1400 audit(1500.839:587): avc: denied { write } for pid=16729 comm="syz.1.3039" name="functions" dev="configfs" ino=3232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1542.018203][ T7788] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1542.182224][ T7788] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1542.196509][ T7788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.196795][ T7788] usb 2-1: Product: syz [ 1542.197138][ T7788] usb 2-1: Manufacturer: syz [ 1542.197183][ T7788] usb 2-1: SerialNumber: syz [ 1542.664559][ T7788] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1542.665000][ T7788] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1543.549660][ T7788] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 1543.549904][ T7788] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1543.550433][ T7788] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1543.554758][ T7788] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1543.559852][ T7788] usb 2-1: USB disconnect, device number 10 [ 1543.878883][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3043'. [ 1551.403436][T16764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1551.537817][T16782] comedi: valid board names for 8255 driver are: [ 1551.538967][T16782] 8255 [ 1551.553914][T16782] comedi: valid board names for vmk80xx driver are: [ 1551.560315][T16782] vmk80xx [ 1551.560636][T16782] comedi: valid board names for usbduxsigma driver are: [ 1551.560774][T16782] usbduxsigma [ 1551.560810][T16782] comedi: valid board names for usbduxfast driver are: [ 1551.560828][T16782] usbduxfast [ 1551.560841][T16782] comedi: valid board names for usbdux driver are: [ 1551.560860][T16782] usbdux [ 1551.560873][T16782] comedi: valid board names for ni6501 driver are: [ 1551.560888][T16782] ni6501 [ 1551.560901][T16782] comedi: valid board names for dt9812 driver are: [ 1551.560916][T16782] dt9812 [ 1551.560929][T16782] comedi: valid board names for ni_labpc_cs driver are: [ 1551.560983][T16782] ni_labpc_cs [ 1551.561006][T16782] comedi: valid board names for ni_daq_700 driver are: [ 1551.561023][T16782] ni_daq_700 [ 1551.561036][T16782] comedi: valid board names for labpc_pci driver are: [ 1551.561063][T16782] labpc_pci [ 1551.561080][T16782] comedi: valid board names for adl_pci9118 driver are: [ 1551.561108][T16782] pci9118dg [ 1551.561141][T16782] pci9118hg [ 1551.561159][T16782] pci9118hr [ 1551.561172][T16782] comedi: valid board names for 8255_pci driver are: [ 1551.561189][T16782] 8255_pci [ 1551.561214][T16782] comedi: valid board names for comedi_parport driver are: [ 1551.561232][T16782] comedi_parport [ 1551.561246][T16782] comedi: valid board names for comedi_test driver are: [ 1551.561304][T16782] comedi_test [ 1551.561323][T16782] comedi: valid board names for comedi_bond driver are: [ 1551.561361][T16782] comedi_bond [ 1553.502870][ T28] audit: type=1400 audit(1511.760:588): avc: denied { write } for pid=16779 comm="syz.1.3050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1557.282370][T16798] fuse: Bad value for 'group_id' [ 1557.282586][T16798] fuse: Bad value for 'group_id' [ 1557.349429][ T28] audit: type=1400 audit(1515.315:589): avc: denied { ioctl } for pid=16792 comm="syz.1.3052" path="socket:[28996]" dev="sockfs" ino=28996 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1557.471582][T16803] comedi: valid board names for 8255 driver are: [ 1557.472009][T16803] 8255 [ 1557.472326][T16803] comedi: valid board names for vmk80xx driver are: [ 1557.472389][T16803] vmk80xx [ 1557.472413][T16803] comedi: valid board names for usbduxsigma driver are: [ 1557.472432][T16803] usbduxsigma [ 1557.472447][T16803] comedi: valid board names for usbduxfast driver are: [ 1557.472477][T16803] usbduxfast [ 1557.472509][T16803] comedi: valid board names for usbdux driver are: [ 1557.472544][T16803] usbdux [ 1557.472561][T16803] comedi: valid board names for ni6501 driver are: [ 1557.472597][T16803] ni6501 [ 1557.472617][T16803] comedi: valid board names for dt9812 driver are: [ 1557.472633][T16803] dt9812 [ 1557.472647][T16803] comedi: valid board names for ni_labpc_cs driver are: [ 1557.472664][T16803] ni_labpc_cs [ 1557.472679][T16803] comedi: valid board names for ni_daq_700 driver are: [ 1557.472693][T16803] ni_daq_700 [ 1557.472705][T16803] comedi: valid board names for labpc_pci driver are: [ 1557.472720][T16803] labpc_pci [ 1557.472735][T16803] comedi: valid board names for adl_pci9118 driver are: [ 1557.472769][T16803] pci9118dg [ 1557.472786][T16803] pci9118hg [ 1557.472800][T16803] pci9118hr [ 1557.472828][T16803] comedi: valid board names for 8255_pci driver are: [ 1557.472889][T16803] 8255_pci [ 1557.472946][T16803] comedi: valid board names for comedi_parport driver are: [ 1557.472965][T16803] comedi_parport [ 1557.472980][T16803] comedi: valid board names for comedi_test driver are: [ 1557.472995][T16803] comedi_test [ 1557.473009][T16803] comedi: valid board names for comedi_bond driver are: [ 1557.473024][T16803] comedi_bond [ 1558.380474][T16811] fuse: Unknown parameter 'use00000000000000000000' [ 1561.201083][T16829] fuse: Unknown parameter 'use00000000000000000000' [ 1568.411070][T16868] fuse: Bad value for 'group_id' [ 1568.411371][T16868] fuse: Bad value for 'group_id' [ 1568.754602][ T28] audit: type=1800 audit(1525.849:590): pid=16874 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3076" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1569.466252][T16878] fuse: Bad value for 'group_id' [ 1569.466447][T16878] fuse: Bad value for 'group_id' [ 1571.932614][T16896] ptrace attach of "/syz-executor exec"[13770] was attempted by "/syz-executor exec"[16896] [ 1575.180011][T16915] netlink: 'syz.0.3092': attribute type 1 has an invalid length. [ 1575.252016][T16915] bond1: (slave gretap1): making interface the new active one [ 1575.255186][T16915] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1576.646965][ T43] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1576.957074][ T43] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1577.029047][ T43] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1577.041375][ T43] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1577.139167][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.139426][ T43] usb 2-1: Product: syz [ 1577.139572][ T43] usb 2-1: Manufacturer: syz [ 1577.139607][ T43] usb 2-1: SerialNumber: syz [ 1577.165628][ T43] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 1577.179126][ T43] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1577.187288][ T43] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1579.594971][T16963] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 1579.625906][ T7749] usb 2-1: USB disconnect, device number 11 [ 1579.630714][ T7749] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1579.682069][ T7749] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1579.727307][ T7749] ti_usb_3410_5052 2-1:2.0: device disconnected [ 1580.308793][ T7749] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1580.470856][ T7749] usb 2-1: Using ep0 maxpacket: 32 [ 1580.479026][ T7749] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1580.514194][ T7749] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1580.516282][ T7749] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1580.521656][ T7749] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1580.574102][ T7749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.576037][ T7749] usb 2-1: Product: syz [ 1580.583905][ T7749] usb 2-1: Manufacturer: syz [ 1580.593334][ T7749] usb 2-1: SerialNumber: syz [ 1580.646283][ T7749] usb 2-1: config 0 descriptor?? [ 1581.116823][ T7749] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 1581.344028][ T7749] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1581.349822][ T7749] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 1581.574861][ T7749] usb 2-1: USB disconnect, device number 12 [ 1582.023701][ T28] audit: type=1326 audit(1538.099:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17024 comm="syz.1.3105" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1582.043706][ T28] audit: type=1326 audit(1538.109:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17024 comm="syz.1.3105" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1582.056317][ T28] audit: type=1326 audit(1538.118:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17024 comm="syz.1.3105" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1582.071494][ T28] audit: type=1326 audit(1538.136:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17024 comm="syz.1.3105" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1582.079393][ T28] audit: type=1326 audit(1538.127:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17024 comm="syz.1.3105" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1582.086799][ T28] audit: type=1326 audit(1538.155:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17024 comm="syz.1.3105" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1582.106339][ T28] audit: type=1326 audit(1538.164:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17024 comm="syz.1.3105" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1582.114856][ T28] audit: type=1326 audit(1538.173:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17024 comm="syz.1.3105" exe="/syz-executor" sig=0 arch=40000028 syscall=436 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1582.116234][ T28] audit: type=1326 audit(1538.173:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17024 comm="syz.1.3105" exe="/syz-executor" sig=0 arch=40000028 syscall=248 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1583.956308][ T28] audit: type=1400 audit(1539.872:600): avc: denied { create } for pid=17037 comm="syz.1.3112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1586.935975][T17059] fuse: Unknown parameter 'grou00000000000000000000' [ 1588.685039][T17069] fuse: Unknown parameter 'grou00000000000000000000' [ 1589.940169][T17086] fuse: Bad value for 'fd' [ 1593.405125][T17103] fuse: Unknown parameter '0x0000000000000004' [ 1593.500122][ T28] audit: type=1400 audit(1548.688:601): avc: denied { kexec_image_load } for pid=17105 comm="syz.1.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1593.635852][T17110] fuse: Unknown parameter 'group_i00000000000000000000' [ 1598.468397][T17164] fuse: Unknown parameter 'group_id00000000000000000000' [ 1598.824884][ T28] audit: type=1326 audit(1553.609:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17174 comm="syz.1.3161" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1598.826423][ T28] audit: type=1326 audit(1553.609:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17174 comm="syz.1.3161" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1598.829753][ T28] audit: type=1326 audit(1553.609:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17174 comm="syz.1.3161" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1598.837791][ T28] audit: type=1326 audit(1553.618:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17174 comm="syz.1.3161" exe="/syz-executor" sig=0 arch=40000028 syscall=311 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1598.841789][ T28] audit: type=1326 audit(1553.618:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17174 comm="syz.1.3161" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1598.843380][ T28] audit: type=1326 audit(1553.628:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17174 comm="syz.1.3161" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1598.847290][ T28] audit: type=1326 audit(1553.628:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17174 comm="syz.1.3161" exe="/syz-executor" sig=0 arch=40000028 syscall=436 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1598.849277][ T28] audit: type=1326 audit(1553.628:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17174 comm="syz.1.3161" exe="/syz-executor" sig=0 arch=40000028 syscall=248 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1599.161799][ T28] audit: type=1326 audit(1553.914:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17178 comm="syz.1.3163" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1599.163656][ T28] audit: type=1326 audit(1553.914:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17178 comm="syz.1.3163" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1599.168665][ T28] audit: type=1326 audit(1553.914:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17178 comm="syz.1.3163" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1599.177200][ T28] audit: type=1326 audit(1553.923:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17178 comm="syz.1.3163" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1599.177445][ T28] audit: type=1326 audit(1553.923:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17178 comm="syz.1.3163" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1599.177646][ T28] audit: type=1326 audit(1553.923:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17178 comm="syz.1.3163" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1599.177831][ T28] audit: type=1326 audit(1553.923:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17178 comm="syz.1.3163" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1599.178008][ T28] audit: type=1326 audit(1553.923:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17178 comm="syz.1.3163" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1599.178183][ T28] audit: type=1326 audit(1553.923:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17178 comm="syz.1.3163" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1599.178356][ T28] audit: type=1326 audit(1553.923:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17178 comm="syz.1.3163" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1601.065446][T17189] fuse: Bad value for 'user_id' [ 1601.065742][T17189] fuse: Bad value for 'user_id' [ 1602.081527][T17201] fuse: Bad value for 'user_id' [ 1602.104699][T17201] fuse: Bad value for 'user_id' [ 1603.126475][T17212] FAULT_INJECTION: forcing a failure. [ 1603.126475][T17212] name failslab, interval 1, probability 0, space 0, times 0 [ 1603.132156][T17212] CPU: 0 UID: 0 PID: 17212 Comm: syz.1.3176 Tainted: G L syzkaller #0 PREEMPT [ 1603.132304][T17212] Tainted: [L]=SOFTLOCKUP [ 1603.132325][T17212] Hardware name: ARM-Versatile Express [ 1603.132352][T17212] Call trace: [ 1603.132391][T17212] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1603.132494][T17212] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1603.132513][T17212] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1603.132564][T17212] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1603.132623][T17212] r7:85a49880 r6:00000000 r5:85a49880 r4:82b1ac48 [ 1603.132641][T17212] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1603.132694][T17212] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1603.132759][T17212] r8:00000000 r7:85a49880 r6:805b1b34 r5:00000cc0 r4:830bdb40 [ 1603.132779][T17212] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 1603.132830][T17212] [<80546804>] (kmem_cache_alloc_noprof) from [<805b1b34>] (do_getname+0x2c/0x14c) [ 1603.132890][T17212] r10:00000142 r9:85a49880 r8:00000003 r7:00000000 r6:00000000 r5:825438f8 [ 1603.132917][T17212] r4:00000000 [ 1603.132932][T17212] [<805b1b08>] (do_getname) from [<805b7d8c>] (getname_flags+0x14/0x18) [ 1603.132991][T17212] r10:00000142 r9:85a49880 r8:8020029c r7:00000000 r6:ffffff9c r5:e041df58 [ 1603.133011][T17212] r4:00000000 r3:00000003 [ 1603.133027][T17212] [<805b7d78>] (getname_flags) from [<8059d788>] (do_sys_openat2+0x64/0xf0) [ 1603.133073][T17212] [<8059d724>] (do_sys_openat2) from [<8059dcc8>] (sys_openat+0x88/0xd8) [ 1603.133137][T17212] r7:00000142 r6:00356314 r5:00000000 r4:ffffff9c [ 1603.133155][T17212] [<8059dc40>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1603.133202][T17212] Exception stack(0xe041dfa8 to 0xe041dff0) [ 1603.133241][T17212] dfa0: 00000000 00000000 ffffff9c 00000000 00024c01 00000000 [ 1603.133273][T17212] dfc0: 00000000 00000000 00356314 00000142 003562d8 00000000 00000001 76f330dc [ 1603.133299][T17212] dfe0: 76f32e88 76f32e78 00018fa0 001309d0 [ 1603.133323][T17212] r5:00000000 r4:00000000 [ 1605.387800][T17234] fuse: Bad value for 'user_id' [ 1605.405355][T17234] fuse: Bad value for 'user_id' [ 1606.934170][T17248] fuse: Bad value for 'fd' [ 1610.173217][T17269] fuse: Bad value for 'fd' [ 1613.233500][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 1613.233701][ T28] audit: type=1326 audit(1566.903:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17299 comm="syz.0.3207" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1613.236898][ T28] audit: type=1326 audit(1566.903:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17299 comm="syz.0.3207" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1613.243852][ T28] audit: type=1326 audit(1566.912:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17299 comm="syz.0.3207" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1613.247711][ T28] audit: type=1326 audit(1566.912:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17299 comm="syz.0.3207" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1613.248642][ T28] audit: type=1326 audit(1566.912:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17299 comm="syz.0.3207" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1613.250756][ T28] audit: type=1326 audit(1566.912:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17299 comm="syz.0.3207" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1613.252573][ T28] audit: type=1326 audit(1566.912:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17299 comm="syz.0.3207" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1613.254350][ T28] audit: type=1326 audit(1566.912:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17299 comm="syz.0.3207" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1613.256890][ T28] audit: type=1326 audit(1566.922:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17299 comm="syz.0.3207" exe="/syz-executor" sig=0 arch=40000028 syscall=436 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1613.258792][ T28] audit: type=1326 audit(1566.922:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17299 comm="syz.0.3207" exe="/syz-executor" sig=0 arch=40000028 syscall=248 compat=0 ip=0x1309d0 code=0x7ffc0000 [ 1617.645739][T17344] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3223'. [ 1620.756870][T17367] fuse: Invalid rootmode [ 1624.894014][T17389] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1632.832234][T17400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3247'. [ 1632.942710][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3248'. [ 1633.900564][T17411] bond2: option lacp_active: invalid value (254) [ 1633.959918][T17411] bond2 (unregistering): Released all slaves [ 1675.004257][T15420] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.039132][T15420] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.063049][T15420] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.093222][T15420] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.288427][T15420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1675.296760][T15420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1675.299374][T15420] bond0 (unregistering): Released all slaves [ 1675.305656][T15420] bond1 (unregistering): Released all slaves [ 1675.401594][T15420] hsr_slave_0: left promiscuous mode [ 1675.402804][T15420] hsr_slave_1: left promiscuous mode [ 1675.408872][T15420] veth1_macvtap: left promiscuous mode [ 1675.409462][T15420] veth0_macvtap: left promiscuous mode [ 1675.412706][T15420] veth1_vlan: left promiscuous mode [ 1675.413245][T15420] veth0_vlan: left promiscuous mode [ 1676.409266][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 1676.410920][ T28] audit: type=1400 audit(1625.222:706): avc: denied { write } for pid=17512 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1676.707167][ T28] audit: type=1400 audit(1625.508:707): avc: denied { write } for pid=17544 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1676.874995][ T2959] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1677.522048][ T28] audit: type=1400 audit(1626.247:708): avc: denied { write } for pid=17617 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1677.605440][T17491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1677.626447][T17491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1677.805967][ T28] audit: type=1400 audit(1626.514:709): avc: denied { write } for pid=17656 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1678.018054][ T2959] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1678.634878][T17491] hsr_slave_0: entered promiscuous mode [ 1678.642752][T17491] hsr_slave_1: entered promiscuous mode [ 1678.712452][ T28] audit: type=1400 audit(1627.354:710): avc: denied { write } for pid=17682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1679.005247][ T28] audit: type=1400 audit(1627.613:711): avc: denied { write } for pid=17739 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1679.049480][T17491] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1679.065390][T17491] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1679.069498][T17491] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1679.088356][T17491] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1679.091621][T17491] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1679.098590][T17491] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1679.100851][T17491] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1679.117940][T17491] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1679.219429][ T2959] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1679.828391][ T28] audit: type=1400 audit(1628.388:712): avc: denied { write } for pid=17799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1679.930250][T17491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1680.098876][ T28] audit: type=1400 audit(1628.638:713): avc: denied { write } for pid=17805 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1680.280575][ T2959] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1682.820020][T17491] veth0_vlan: entered promiscuous mode [ 1682.834043][T17491] veth1_vlan: entered promiscuous mode [ 1682.881894][T17491] veth0_macvtap: entered promiscuous mode [ 1682.891077][T17491] veth1_macvtap: entered promiscuous mode [ 1682.931321][T15417] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.933525][T15417] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.935119][T15417] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.936222][T15417] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.444781][ T28] audit: type=1400 audit(1631.721:714): avc: denied { name_bind } for pid=17849 comm="syz.2.3260" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 1689.610192][T17861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1689.626449][T17861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1691.199377][T17861] hsr_slave_0: entered promiscuous mode [ 1691.227921][T17861] hsr_slave_1: entered promiscuous mode [ 1691.239113][T17861] debugfs: 'hsr0' already exists in 'hsr' [ 1691.242157][T17861] Cannot create hsr debugfs directory [ 1691.716822][T17861] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1691.737421][T17861] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1691.741040][T17861] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1691.773922][T17861] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1691.777986][T17861] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1691.783758][T17861] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1691.786861][T17861] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1691.801442][T17861] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1693.314311][ T28] audit: type=1400 audit(1640.824:715): avc: denied { write } for pid=18149 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1693.753252][T17861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1693.846384][ T28] audit: type=1400 audit(1641.322:716): avc: denied { write } for pid=18156 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1694.880552][ T28] audit: type=1400 audit(1642.282:717): avc: denied { write } for pid=18170 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1695.166067][T17861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1695.768902][ T28] audit: type=1400 audit(1643.086:718): avc: denied { write } for pid=18177 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1697.097788][ T28] audit: type=1400 audit(1644.323:719): avc: denied { write } for pid=18186 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1697.531504][ T28] audit: type=1400 audit(1644.729:720): avc: denied { write } for pid=18200 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1698.270964][ T28] audit: type=1400 audit(1645.412:721): avc: denied { write } for pid=18212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1698.765296][ T28] audit: type=1400 audit(1645.865:722): avc: denied { write } for pid=18223 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1699.292147][T18237] fuse: Bad value for 'fd' [ 1699.705305][T17861] veth0_vlan: entered promiscuous mode [ 1699.730989][T17861] veth1_vlan: entered promiscuous mode [ 1699.813384][T17861] veth0_macvtap: entered promiscuous mode [ 1699.864653][T17861] veth1_macvtap: entered promiscuous mode [ 1700.015634][T15421] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.016394][T15421] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.016984][T15421] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.017842][T15421] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.173889][T18387] fuse: Bad value for 'group_id' [ 1712.174503][T18387] fuse: Bad value for 'group_id' [ 1712.457681][T18394] tap0: tun_chr_ioctl cmd 1074025677 [ 1712.476445][T18394] tap0: linktype set to 768 [ 1714.351247][T18443] syzkaller0: entered promiscuous mode [ 1714.391120][T18443] syzkaller0: entered allmulticast mode [ 1714.651111][T18455] : renamed from bond_slave_0 (while UP) [ 1717.314493][T18521] syzkaller0: entered promiscuous mode [ 1717.338671][T18521] syzkaller0: entered allmulticast mode [ 1727.215610][T18606] fuse: Unknown parameter 'grou00000000000000000000' [ 1727.573434][T18610] 8<--- cut here --- [ 1727.574133][T18610] Unable to handle kernel paging request at virtual address fee000ef when write [ 1727.579891][ T28] audit: type=1400 audit(1675.457:723): avc: denied { read } for pid=2911 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1727.580136][ T28] audit: type=1400 audit(1675.457:724): avc: denied { search } for pid=2911 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1727.580531][ T28] audit: type=1400 audit(1675.457:725): avc: denied { write search } for pid=2911 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1727.580648][ T28] audit: type=1400 audit(1675.457:726): avc: denied { add_name } for pid=2911 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1727.580757][ T28] audit: type=1400 audit(1675.457:727): avc: denied { create } for pid=2911 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1727.580854][ T28] audit: type=1400 audit(1675.457:728): avc: denied { append open } for pid=2911 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1727.580950][ T28] audit: type=1400 audit(1675.457:729): avc: denied { getattr } for pid=2911 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1727.628447][T18610] [fee000ef] *pgd=80000080007003, *pmd=00000000 [ 1727.631179][T18610] Internal error: Oops: a06 [#1] SMP ARM [ 1727.632259][T18610] Modules linked in: [ 1727.632523][T18610] CPU: 0 UID: 0 PID: 18610 Comm: syz.3.3409 Tainted: G L syzkaller #0 PREEMPT [ 1727.632745][T18610] Tainted: [L]=SOFTLOCKUP [ 1727.632839][T18610] Hardware name: ARM-Versatile Express [ 1727.632967][T18610] PC is at subdev_8255_io+0x60/0x6c [ 1727.633151][T18610] LR is at subdev_8255_io+0x4c/0x6c [ 1727.633285][T18610] pc : [<814ad81c>] lr : [<814ad808>] psr: 60000013 [ 1727.633438][T18610] sp : dfa91cb8 ip : dfa91cb8 fp : dfa91cd4 [ 1727.633570][T18610] r10: 000000ec r9 : 00000004 r8 : dfa91da4 [ 1727.633719][T18610] r7 : 00000000 r6 : 0000009b r5 : 83864e40 r4 : 000000ef [ 1727.633923][T18610] r3 : 0000009b r2 : fee000ef r1 : 00000001 r0 : 83864e40 [ 1727.634134][T18610] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 1727.634370][T18610] Control: 30c5387d Table: 860d4100 DAC: fffffffd [ 1727.634546][T18610] Register r0 information: slab kmalloc-192 start 83864e40 pointer offset 0 size 192 [ 1727.635279][T18610] Register r1 information: non-paged memory [ 1727.635573][T18610] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 1727.635897][T18610] Register r3 information: non-paged memory [ 1727.636078][T18610] Register r4 information: non-paged memory [ 1727.636223][T18610] Register r5 information: slab kmalloc-192 start 83864e40 pointer offset 0 size 192 [ 1727.636448][T18610] Register r6 information: non-paged memory [ 1727.636577][T18610] Register r7 information: NULL pointer [ 1727.636723][T18610] Register r8 information: 2-page vmalloc region starting at 0xdfa90000 allocated at kernel_clone+0xc4/0x43c [ 1727.636967][T18610] Register r9 information: non-paged memory [ 1727.637099][T18610] Register r10 information: non-paged memory [ 1727.637239][T18610] Register r11 information: 2-page vmalloc region starting at 0xdfa90000 allocated at kernel_clone+0xc4/0x43c [ 1727.637464][T18610] Register r12 information: 2-page vmalloc region starting at 0xdfa90000 allocated at kernel_clone+0xc4/0x43c [ 1727.637728][T18610] Process syz.3.3409 (pid: 18610, stack limit = 0xdfa90000) [ 1727.637905][T18610] Stack: (0xdfa91cb8 to 0xdfa92000) [ 1727.638031][T18610] 1ca0: 814ad7bc 000000ec [ 1727.638207][T18610] 1cc0: 83864e40 00000000 dfa91cf4 dfa91cd8 814ad4f8 814ad7c8 000000ec 80547798 [ 1727.638386][T18610] 1ce0: 8b076000 8b076000 dfa91d14 dfa91cf8 814ad8b0 814ad4ac 83864e40 00000000 [ 1727.638564][T18610] 1d00: 8b076000 00000000 dfa91d54 dfa91d18 814ada60 814ad834 ffffffff 00000004 [ 1727.638794][T18610] 1d20: 82a22dc0 00000000 00000000 82bdac60 83864e40 00000000 dfa91d90 83864e40 [ 1727.638972][T18610] 1d40: 00000000 82d32f9c dfa91d8c dfa91d58 8149c3e8 814ad9f8 40946400 00000000 [ 1727.639146][T18610] 1d60: dfa91d7c 20000140 83864e40 b5403587 40946400 00000003 00000003 83183d40 [ 1727.639326][T18610] 1d80: dfa91e4c dfa91d90 81497bec 8149c2ec 35353238 00000000 00000000 00000000 [ 1727.639512][T18610] 1da0: 00000000 000000ec 00002168 00000002 0000000d 000088d2 0000008f 00080000 [ 1727.639697][T18610] 1dc0: 00000010 00000002 f7fffffc 000001ff 02000080 fffffff9 00000004 00000007 [ 1727.639875][T18610] 1de0: 00000004 40000009 00000003 00000002 ffffffff 00000100 00000003 00000080 [ 1727.640097][T18610] 1e00: 00000000 00000001 00000001 16362ee8 0000001c 00000008 00000007 00000ecd [ 1727.640283][T18610] 1e20: 00000000 1b162e62 00000000 83e89180 83864e40 20000140 40946400 00000003 [ 1727.640459][T18610] 1e40: dfa91f14 dfa91e50 81498f14 81497b2c 00000000 1b162e62 00000000 00000000 [ 1727.640635][T18610] 1e60: 8254e844 dfa91ea4 0000005f 8459e408 00000064 83864e70 dfa91ee4 dfa91e88 [ 1727.640811][T18610] 1e80: 8080b76c 80801e24 00000064 00000001 00000000 dfa91ea4 876d6f10 8341a3b8 [ 1727.641023][T18610] 1ea0: 00006400 0000000b dfa91e98 00000000 00000000 1b162e62 00000000 83e89180 [ 1727.641208][T18610] 1ec0: 40946400 20000140 20000140 83e89180 00000003 83183d40 dfa91ef4 dfa91ee8 [ 1727.641386][T18610] 1ee0: 8080b8a0 1b162e62 dfa91f14 00000000 83e89181 40946400 20000140 83e89180 [ 1727.641556][T18610] 1f00: 00000003 83183d40 dfa91fa4 dfa91f18 805bdf78 81498bcc ecac8b10 83183d40 [ 1727.641735][T18610] 1f20: dfa91f3c dfa91f30 81b6ec00 81b6eacc dfa91f54 dfa91f40 8025b878 8028f548 [ 1727.641907][T18610] 1f40: dfa91fb0 40000000 dfa91f84 dfa91f58 80221bdc 8025b834 00000000 82a1eb0c [ 1727.642081][T18610] 1f60: dfa91fb0 0013eb70 ecac8b10 80221b30 00000000 1b162e62 dfa91fac 00000000 [ 1727.642250][T18610] 1f80: 00000000 00356310 00000036 8020029c 83183d40 00000036 00000000 dfa91fa8 [ 1727.642426][T18610] 1fa0: 80200060 805bdd40 00000000 00000000 00000003 40946400 20000140 00000000 [ 1727.642594][T18610] 1fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76fcc0dc [ 1727.642781][T18610] 1fe0: 76fcbe88 76fcbe78 00018fa0 001309d0 60000010 00000003 00000000 00000000 [ 1727.642973][T18610] Call trace: [ 1727.643088][T18610] [<814ad7bc>] (subdev_8255_io) from [<814ad4f8>] (subdev_8255_do_config+0x58/0x60) [ 1727.643302][T18610] r7:00000000 r6:83864e40 r5:000000ec r4:814ad7bc [ 1727.643433][T18610] [<814ad4a0>] (subdev_8255_do_config) from [<814ad8b0>] (subdev_8255_io_init+0x88/0x98) [ 1727.643604][T18610] r4:8b076000 [ 1727.643680][T18610] [<814ad828>] (subdev_8255_io_init) from [<814ada60>] (dev_8255_attach+0x74/0x138) [ 1727.643858][T18610] r7:00000000 r6:8b076000 r5:00000000 r4:83864e40 [ 1727.644017][T18610] [<814ad9ec>] (dev_8255_attach) from [<8149c3e8>] (comedi_device_attach+0x108/0x244) [ 1727.644224][T18610] r10:82d32f9c r9:00000000 r8:83864e40 r7:dfa91d90 r6:00000000 r5:83864e40 [ 1727.644366][T18610] r4:82bdac60 [ 1727.644435][T18610] [<8149c2e0>] (comedi_device_attach) from [<81497bec>] (do_devconfig_ioctl+0xcc/0x218) [ 1727.644626][T18610] r10:83183d40 r9:00000003 r8:00000003 r7:40946400 r6:b5403587 r5:83864e40 [ 1727.644812][T18610] r4:20000140 [ 1727.644887][T18610] [<81497b20>] (do_devconfig_ioctl) from [<81498f14>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 1727.645115][T18610] r8:00000003 r7:40946400 r6:20000140 r5:83864e40 r4:83e89180 [ 1727.645289][T18610] [<81498bc0>] (comedi_unlocked_ioctl) from [<805bdf78>] (sys_ioctl+0x244/0xb5c) [ 1727.645474][T18610] r10:83183d40 r9:00000003 r8:83e89180 r7:20000140 r6:40946400 r5:83e89181 [ 1727.645615][T18610] r4:00000000 [ 1727.645690][T18610] [<805bdd34>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1727.645880][T18610] Exception stack(0xdfa91fa8 to 0xdfa91ff0) [ 1727.645998][T18610] 1fa0: 00000000 00000000 00000003 40946400 20000140 00000000 [ 1727.646152][T18610] 1fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76fcc0dc [ 1727.646298][T18610] 1fe0: 76fcbe88 76fcbe78 00018fa0 001309d0 [ 1727.646407][T18610] r10:00000036 r9:83183d40 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 1727.646547][T18610] r4:00000000 [ 1727.646778][T18610] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 1727.648027][T18610] ---[ end trace 0000000000000000 ]--- [ 1727.735974][T18610] Kernel panic - not syncing: Fatal exception [ 1727.737261][T18610] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:44:56 Registers: info registers vcpu 0 CPU#0 R00=84352440 R01=00000074 R02=eb62f000 R03=eb62f018 R04=8486109a R05=84352440 R06=80b0d898 R07=8486109a R08=80b0d898 R09=000000ee R10=0000142f R11=eb4e1e3c R12=00000002 R13=eb4e1e30 R14=82b5e24c R15=80b0d8a8 PSR=800b0193 N--- A S svc32 s00=77206665 s01=206e6568 d00=206e656877206665 s02=31343735 s03=5b5d3333 d01=5b5d333331343735 s04=36383154 s05=205d3031 d02=205d303136383154 s06=62616e55 s07=7420656c d03=7420656c62616e55 s08=6168206f s09=656c646e d04=656c646e6168206f s10=72656b20 s11=206c656e d05=206c656e72656b20 s12=69676170 s13=7220676e d06=7220676e69676170 s14=65757165 s15=61207473 d07=6120747365757165 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000001 R01=00000040 R02=00000000 R03=30c53879 R04=00000001 R05=00000001 R06=30c0387d R07=82c854a4 R08=80003000 R09=414fc0f0 R10=00000000 R11=df865f64 R12=df865f68 R13=df865f50 R14=00000001 R15=8024bbc4 PSR=a0000193 N-C- A S svc32 s00=000c0000 s01=00160000 d00=00160000000c0000 s02=00000000 s03=00000300 d01=0000030000000000 s04=2d0f1ea5 s05=75a35c2e d02=75a35c2e2d0f1ea5 s06=51faa012 s07=dd5a1895 d03=dd5a189551faa012 s08=a4bb6f44 s09=a18dcbd6 d04=a18dcbd6a4bb6f44 s10=652e422c s11=74da27af d05=74da27af652e422c s12=00000005 s13=00000000 d06=0000000000000005 s14=00000000 s15=5d170000 d07=5d17000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=537d8c8d s33=a4d56beb d16=a4d56beb537d8c8d s34=c7c8b0c6 s35=343bee24 d17=343bee24c7c8b0c6 s36=b255ac50 s37=12eab45d d18=12eab45db255ac50 s38=38605fcb s39=37798e6e d19=37798e6e38605fcb s40=b0d4cc68 s41=6d129a95 d20=6d129a95b0d4cc68 s42=ddad8f96 s43=ad02b578 d21=ad02b578ddad8f96 s44=54634477 s45=261b4489 d22=261b448954634477 s46=f0e6655f s47=ca14160a d23=ca14160af0e6655f s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=003c0000 s53=00140000 d26=00140000003c0000 s54=00080000 s55=00000008 d27=0000000800080000 s56=00080004 s57=03e60000 d28=03e6000000080004 s58=ffca0000 s59=000cffff d29=000cffffffca0000 s60=00160000 s61=00000000 d30=0000000000160000 s62=00000300 s63=ffbe0000 d31=ffbe000000000300 FPSCR: 00000000