last executing test programs: 2m57.547246506s ago: executing program 1 (id=1432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0xf809, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xff) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64$ublk_bdev(r4, &(0x7f0000004080)=""/4096, 0x1000, 0x3ec) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') getdents64(r5, &(0x7f0000000000)=""/90, 0x5a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="7001000010000100", @ANYRES32=0x0, @ANYBLOB="8db20200211e0100140003006e657464657673696d3000000000000014001680100001800c0007000100000000fcffff08001b00155100000400140014000300776c616e310000000000000000000000f8001680040001803c00018028000100ff0100000180c200000200000000000000000000000000000000000000000000000000001000060007000000131b000005", @ANYRES32=r4], 0x170}, 0x1, 0x0, 0x0, 0x4044085}, 0x200488c0) 2m42.420647268s ago: executing program 1 (id=1452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000064c0)={0x0, 0x0, &(0x7f0000006480)={&(0x7f0000001480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x80001}, 0x800) 2m41.765957844s ago: executing program 1 (id=1454): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000), 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) clock_gettime(0x1, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="3082", 0x2, 0xffffffffffffffff) 2m41.346124132s ago: executing program 1 (id=1456): syz_usb_connect(0x0, 0x34, 0x0, 0x0) epoll_create1(0x0) r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x9000700, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 2m41.114942099s ago: executing program 1 (id=1457): socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2m40.965958806s ago: executing program 1 (id=1458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1m55.485469662s ago: executing program 32 (id=1458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 13.017468781s ago: executing program 0 (id=1623): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = epoll_create(0x90aa) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x10000000}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)=""/80}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12.156281881s ago: executing program 0 (id=1625): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000380)=0x80010001, 0x4) 12.044583293s ago: executing program 0 (id=1626): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12160) read(r0, &(0x7f0000000100)=""/9, 0xfffffd87) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000000)='jffs2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x101042, 0x9d) write(r1, &(0x7f00000005c0)="1f0102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8014) 11.596747275s ago: executing program 0 (id=1627): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x1a, &(0x7f0000000680)=0x200, 0x4) 11.395227808s ago: executing program 0 (id=1628): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'wlan0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "318abbf1bff5c84e21870413d676dce2d58b339b94fc2e8252593b3b7fce882c", "06681859eaa7094721b0aeb9311b780599aa3c1e437edb38fe8f502499cac064", "673deacc06b6bb9731136007aca37dfe28572550bc9c81206a77f2b5cda492de", "9002fed752f29a29e5e7df22ccc382fab6c399a01ac4d6bdd25776181fad2fe1", "6e7bf7abd4980464dc235036bf34cc4a3f0442d37d66ae95bd04cf1450ff66ca", "4933241c420817c7447757b9", 0x538, 0x5, 0x531, 0xffffffff, 0x7d}}) 11.005118163s ago: executing program 0 (id=1629): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) 7.001710684s ago: executing program 2 (id=1632): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1}) 6.825888784s ago: executing program 2 (id=1633): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1000000000000222, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") write(r1, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00snapshot\x00\x00\x00\x00\x00\x00\x00\x007:0 7:1 N 8\x00\x00\x00\x00\x00', 0x38) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x4d, 0x2ba8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000240)={r3}) ioctl(r1, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000007001000038010000010000000000000000000000000000000000000000000000000000006d79706f") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) r5 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='uid', 0x0, 0x0) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, 0x0, &(0x7f00000002c0), &(0x7f0000000240)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) 2.417940572s ago: executing program 2 (id=1634): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 2.160046052s ago: executing program 2 (id=1635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x9244f94c9f514ef7, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4004800) 206.755686ms ago: executing program 2 (id=1636): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xe, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0x8, "62966124"}, @global=@item_012={0x0, 0x1, 0x8}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x80000002, 0xffffffff, 0x2, 0x1, 0xfffff7fc, 0x3e}) 0s ago: executing program 2 (id=1637): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x80042, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'comedi_parport\x00', [0x3c0, 0x10, 0x10000, 0x240004, 0x14000000, 0x3cffd, 0xfffffffc, 0x2f00, 0x3, 0x3, 0x3, 0x10000, 0x3fc, 0x0, 0x5, 0x4100, 0x9, 0x5, 0x7, 0x1, 0xa2, 0x2, 0x8f, 0x10000bc, 0xaa14, 0xfffffffe, 0x8, 0x7fffffe, 0x7, 0x3, 0xb0f]}) kernel console output (not intermixed with test programs): int 0x83 has an invalid bInterval 0, changing to 7 [ 1299.844001][ T9] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1299.848163][ T9] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1299.848282][ T9] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1299.861277][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.861317][ T9] usb 2-1: Product: syz [ 1299.861345][ T9] usb 2-1: Manufacturer: syz [ 1299.861372][ T9] usb 2-1: SerialNumber: syz [ 1299.892532][ T9] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 1299.902828][ T9] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1299.913367][ T9] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1300.106303][ T8751] usb 2-1: USB disconnect, device number 4 [ 1300.164667][ T8751] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1300.194297][ T8751] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1300.195369][ T8751] ti_usb_3410_5052 2-1:2.0: device disconnected [ 1301.152291][ T8751] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1301.315911][ T8751] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1301.329307][ T8751] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1301.363279][ T8751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1301.363315][ T8751] usb 2-1: Product: syz [ 1301.363342][ T8751] usb 2-1: Manufacturer: syz [ 1301.363367][ T8751] usb 2-1: SerialNumber: syz [ 1301.618092][ T8751] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1301.838234][ T8751] usb 2-1: USB disconnect, device number 5 [ 1301.852272][ T8751] usblp0: removed [ 1304.389985][ C1] net_ratelimit: 42 callbacks suppressed [ 1305.143524][ T28] audit: type=1400 audit(1306.065:1007): avc: denied { mount } for pid=11412 comm="syz.0.1385" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1305.182920][ T28] audit: type=1400 audit(1306.105:1008): avc: denied { unmount } for pid=10514 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1305.497715][ T28] audit: type=1400 audit(1306.415:1009): avc: denied { unmount } for pid=9416 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1307.046180][ T44] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1307.255547][ T44] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1307.277311][ T44] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1307.280991][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.584985][ T44] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device [ 1307.914710][ T44] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 86:85:f0:ab:4e:0d [ 1307.954380][ T44] usb 1-1: USB disconnect, device number 11 [ 1308.007967][ T44] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 1309.425694][ T28] audit: type=1400 audit(1310.345:1010): avc: denied { mounton } for pid=11451 comm="syz.0.1392" path="/49/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1309.590118][ C0] net_ratelimit: 20 callbacks suppressed [ 1310.430339][ T28] audit: type=1400 audit(1311.345:1011): avc: denied { write } for pid=11466 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1311.014061][ T28] audit: type=1400 audit(1311.935:1012): avc: denied { write } for pid=11469 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1312.064427][ T28] audit: type=1400 audit(1312.985:1013): avc: denied { write } for pid=11471 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1312.470678][ T44] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1312.517977][ T28] audit: type=1400 audit(1313.435:1014): avc: denied { write } for pid=11485 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1312.631906][T11476] block nbd1: shutting down sockets [ 1312.650960][ T44] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 1312.656737][ T44] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.656862][ T44] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1312.656908][ T44] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1312.656946][ T44] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1312.684100][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.684149][ T44] usb 1-1: Product: syz [ 1312.684183][ T44] usb 1-1: Manufacturer: syz [ 1312.684213][ T44] usb 1-1: SerialNumber: syz [ 1312.943003][ T9] usb 1-1: USB disconnect, device number 12 [ 1313.386588][ T28] audit: type=1400 audit(1314.305:1015): avc: denied { create } for pid=11502 comm="syz.0.1399" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1313.434923][ T28] audit: type=1400 audit(1314.355:1016): avc: denied { unlink } for pid=10514 comm="syz-executor" name="file0" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1313.830645][ T8462] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1313.983041][ T8462] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 1313.986943][ T8462] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.987077][ T8462] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1313.987106][ T8462] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1313.987125][ T8462] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1314.010120][ T8462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.010140][ T8462] usb 1-1: Product: syz [ 1314.010153][ T8462] usb 1-1: Manufacturer: syz [ 1314.010166][ T8462] usb 1-1: SerialNumber: syz [ 1314.259109][ T44] usb 1-1: USB disconnect, device number 13 [ 1314.950121][ C1] net_ratelimit: 20 callbacks suppressed [ 1315.751569][T11542] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1315.940454][ T2982] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1316.973235][ T2982] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 1317.226030][ T2982] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.226200][ T2982] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1317.673872][ T2982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.673916][ T2982] usb 2-1: Product: syz [ 1317.673946][ T2982] usb 2-1: Manufacturer: syz [ 1317.673974][ T2982] usb 2-1: SerialNumber: syz [ 1318.113707][ T44] usb 2-1: USB disconnect, device number 6 [ 1318.372022][T11573] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 1318.830200][ T6962] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1318.981998][ T6962] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 1318.984990][ T6962] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.985056][ T6962] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1318.996453][ T6962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.996494][ T6962] usb 2-1: Product: syz [ 1318.996523][ T6962] usb 2-1: Manufacturer: syz [ 1318.996548][ T6962] usb 2-1: SerialNumber: syz [ 1319.431635][ T9] usb 2-1: USB disconnect, device number 7 [ 1320.230111][ C0] net_ratelimit: 22 callbacks suppressed [ 1324.231203][T11582] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1325.041402][ T6962] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1325.193897][ T6962] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 1325.205865][ T6962] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.205956][ T6962] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1325.238017][ T6962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.238052][ T6962] usb 1-1: Product: syz [ 1325.238081][ T6962] usb 1-1: Manufacturer: syz [ 1325.238107][ T6962] usb 1-1: SerialNumber: syz [ 1325.360122][ C0] net_ratelimit: 18 callbacks suppressed [ 1325.694586][ T6962] usb 1-1: USB disconnect, device number 14 [ 1329.133668][ T7391] bond0: (slave bond_slave_0): interface is now down [ 1329.134095][ T7391] bond0: (slave bond_slave_1): interface is now down [ 1329.152029][ T7391] bond0: (slave bond_slave_0): interface is now down [ 1329.152178][ T7391] bond0: (slave bond_slave_1): interface is now down [ 1329.170620][ T7391] bond0: (slave bond_slave_0): interface is now down [ 1329.170771][ T7391] bond0: (slave bond_slave_1): interface is now down [ 1329.173629][ T7391] bond0: now running without any active interface! [ 1329.784121][ T28] audit: type=1400 audit(1330.705:1017): avc: denied { setopt } for pid=11652 comm="syz.1.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1330.363889][T11654] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1431'. [ 1330.378214][T11654] net_ratelimit: 22 callbacks suppressed [ 1336.230039][ C1] net_ratelimit: 21 callbacks suppressed [ 1336.270360][ T6962] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1336.420161][ T6962] usb 1-1: Using ep0 maxpacket: 32 [ 1336.426545][ T6962] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1336.426671][ T6962] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1336.440847][ T6962] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 1336.440960][ T6962] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.440997][ T6962] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1336.441040][ T6962] usb 1-1: config 128 has no interface number 0 [ 1336.441131][ T6962] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1336.441171][ T6962] usb 1-1: config 128 interface 127 has no altsetting 0 [ 1336.447818][ T6962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.447856][ T6962] usb 1-1: Product: syz [ 1336.447883][ T6962] usb 1-1: Manufacturer: syz [ 1336.447909][ T6962] usb 1-1: SerialNumber: syz [ 1336.734592][ T6962] usb 1-1: USB disconnect, device number 15 [ 1337.550469][ T8868] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1337.710625][ T8868] usb 1-1: Using ep0 maxpacket: 32 [ 1337.729004][ T8868] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1337.729089][ T8868] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1337.737746][ T8868] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 1337.737799][ T8868] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.737818][ T8868] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1337.737835][ T8868] usb 1-1: config 128 has no interface number 0 [ 1337.737881][ T8868] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1337.737903][ T8868] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1337.737948][ T8868] usb 1-1: config 128 interface 127 has no altsetting 0 [ 1337.755401][ T8868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.755419][ T8868] usb 1-1: Product: syz [ 1337.755433][ T8868] usb 1-1: Manufacturer: syz [ 1337.755445][ T8868] usb 1-1: SerialNumber: syz [ 1338.029073][ T8868] usb 1-1: USB disconnect, device number 16 [ 1339.708775][ T28] audit: type=1400 audit(1340.625:1018): avc: denied { transfer } for pid=11721 comm="syz.0.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1339.892050][T11724] ima: rule for LSM 'u' is undefined [ 1339.892833][ T28] audit: type=1807 audit(1340.815:1019): action=measure func=FILE_CHECK obj_type=u res=1 [ 1339.893270][T11723] ima: policy update completed [ 1339.894483][ T28] audit: type=1802 audit(1340.815:1020): pid=11723 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.0.1442" res=1 errno=0 [ 1340.264220][T11726] syzkaller0: entered promiscuous mode [ 1340.264767][T11726] syzkaller0: entered allmulticast mode [ 1341.430090][ C1] net_ratelimit: 19 callbacks suppressed [ 1343.100165][ T28] audit: type=1400 audit(1344.015:1021): avc: denied { read } for pid=11744 comm="syz.0.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1346.880130][ C1] net_ratelimit: 17 callbacks suppressed [ 1351.510401][ T44] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1351.915442][T11763] block nbd0: shutting down sockets [ 1352.079858][ C1] net_ratelimit: 19 callbacks suppressed [ 1356.700486][ T44] usb 1-1: device descriptor read/64, error -110 [ 1357.005095][ T44] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1357.171004][ T44] usb 1-1: device descriptor read/64, error -32 [ 1357.279931][ C1] net_ratelimit: 20 callbacks suppressed [ 1357.300574][ T44] usb usb1-port1: attempt power cycle [ 1357.683885][ T44] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1357.730536][ T44] usb 1-1: device descriptor read/8, error -32 [ 1357.961954][ T44] raw-gadget.0 gadget.0: failed to queue resume event [ 1358.021259][ T44] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1358.041026][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1358.041404][ T44] usb 1-1: device descriptor read/8, error -32 [ 1358.151270][ T44] raw-gadget.0 gadget.0: failed to queue suspend event [ 1358.151960][ T44] usb usb1-port1: unable to enumerate USB device [ 1362.310075][ C0] net_ratelimit: 26 callbacks suppressed [ 1363.226877][T11763] raw-gadget.0 gadget.0: failed to queue disconnect event [ 1367.679958][ C1] net_ratelimit: 28 callbacks suppressed [ 1372.870058][ C1] net_ratelimit: 62 callbacks suppressed [ 1376.265114][T11813] comedi: valid board names for 8255 driver are: [ 1376.265214][T11813] 8255 [ 1376.265235][T11813] comedi: valid board names for vmk80xx driver are: [ 1376.265255][T11813] vmk80xx [ 1376.265272][T11813] comedi: valid board names for usbduxsigma driver are: [ 1376.265291][T11813] usbduxsigma [ 1376.265308][T11813] comedi: valid board names for usbduxfast driver are: [ 1376.265325][T11813] usbduxfast [ 1376.265341][T11813] comedi: valid board names for usbdux driver are: [ 1376.265358][T11813] usbdux [ 1376.265374][T11813] comedi: valid board names for ni6501 driver are: [ 1376.265391][T11813] ni6501 [ 1376.265406][T11813] comedi: valid board names for dt9812 driver are: [ 1376.265425][T11813] dt9812 [ 1376.265440][T11813] comedi: valid board names for ni_labpc_cs driver are: [ 1376.265457][T11813] ni_labpc_cs [ 1376.265475][T11813] comedi: valid board names for ni_daq_700 driver are: [ 1376.265492][T11813] ni_daq_700 [ 1376.265508][T11813] comedi: valid board names for labpc_pci driver are: [ 1376.265526][T11813] labpc_pci [ 1376.265545][T11813] comedi: valid board names for adl_pci9118 driver are: [ 1376.265563][T11813] pci9118dg [ 1376.265578][T11813] pci9118hg [ 1376.265594][T11813] pci9118hr [ 1376.265610][T11813] comedi: valid board names for 8255_pci driver are: [ 1376.265627][T11813] 8255_pci [ 1376.265642][T11813] comedi: valid board names for comedi_parport driver are: [ 1376.265667][T11813] comedi_parport [ 1376.265685][T11813] comedi: valid board names for comedi_test driver are: [ 1376.265704][T11813] comedi_test [ 1376.265720][T11813] comedi: valid board names for comedi_bond driver are: [ 1376.265737][T11813] comedi_bond [ 1376.463919][T11815] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1378.070038][ C1] net_ratelimit: 39 callbacks suppressed [ 1380.158081][T11827] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1473'. [ 1383.270054][ C1] net_ratelimit: 15 callbacks suppressed [ 1388.479821][ C1] net_ratelimit: 16 callbacks suppressed [ 1393.679901][ C1] net_ratelimit: 17 callbacks suppressed [ 1398.869765][ C1] net_ratelimit: 47 callbacks suppressed [ 1400.445790][T11848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1400.456932][T11848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1402.652691][T11848] hsr_slave_0: entered promiscuous mode [ 1402.654504][T11848] hsr_slave_1: entered promiscuous mode [ 1402.655471][T11848] debugfs: 'hsr0' already exists in 'hsr' [ 1402.655511][T11848] Cannot create hsr debugfs directory [ 1403.786277][T11848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1403.805248][T11848] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1403.808020][T11848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1403.825019][T11848] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1403.827582][T11848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1403.853416][T11848] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1403.856067][T11848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1403.889178][T11848] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1404.070046][ C1] net_ratelimit: 19 callbacks suppressed [ 1405.883461][T11848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1409.205071][ T2761] net_ratelimit: 16 callbacks suppressed [ 1411.723275][T12156] FAULT_INJECTION: forcing a failure. [ 1411.723275][T12156] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.723739][T12156] CPU: 1 UID: 0 PID: 12156 Comm: syz.0.1483 Tainted: G L syzkaller #0 PREEMPT [ 1411.723871][T12156] Tainted: [L]=SOFTLOCKUP [ 1411.723901][T12156] Hardware name: ARM-Versatile Express [ 1411.723927][T12156] Call trace: [ 1411.723969][T12156] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1411.724073][T12156] r7:60000013 r6:60000013 r5:8230878c r4:00000000 [ 1411.724093][T12156] [<80201ae4>] (show_stack) from [<8021e834>] (dump_stack_lvl+0x5c/0x70) [ 1411.724147][T12156] [<8021e7d8>] (dump_stack_lvl) from [<8021e860>] (dump_stack+0x18/0x1c) [ 1411.724212][T12156] r7:840dd780 r6:00000000 r5:840dd780 r4:82b1601c [ 1411.724230][T12156] [<8021e848>] (dump_stack) from [<80a210e8>] (should_fail_ex+0x1bc/0x21c) [ 1411.724293][T12156] [<80a20f2c>] (should_fail_ex) from [<8057a600>] (should_failslab+0x6c/0x94) [ 1411.724366][T12156] r8:00000000 r7:840dd780 r6:8025119c r5:00000cc0 r4:830ba0c0 [ 1411.724383][T12156] [<8057a594>] (should_failslab) from [<80557ff8>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 1411.724440][T12156] [<80557f9c>] (kmem_cache_alloc_noprof) from [<8025119c>] (alloc_task_exec_state+0x24/0x170) [ 1411.724515][T12156] r10:84fc9900 r9:84fca310 r8:00000000 r7:840dd780 r6:82a1e300 r5:84fc9900 [ 1411.724537][T12156] r4:858acea0 [ 1411.724553][T12156] [<80251178>] (alloc_task_exec_state) from [<80251380>] (task_exec_state_copy+0x20/0x48) [ 1411.724620][T12156] r7:840dd780 r6:00000000 r5:84fc9900 r4:858acea0 [ 1411.724639][T12156] [<80251360>] (task_exec_state_copy) from [<8024e75c>] (copy_process+0x468/0x1dc8) [ 1411.724707][T12156] r5:e434dea8 r4:00a00400 [ 1411.724724][T12156] [<8024e2f4>] (copy_process) from [<80250214>] (kernel_clone+0xc4/0x440) [ 1411.724794][T12156] r10:840dd780 r9:840dd780 r8:00000000 r7:00000000 r6:00000000 r5:e434dea8 [ 1411.724816][T12156] r4:00a00400 [ 1411.724831][T12156] [<80250150>] (kernel_clone) from [<80250684>] (__do_sys_clone3+0xf4/0x128) [ 1411.724903][T12156] r10:000001b3 r9:840dd780 r8:8020029c r7:000001b3 r6:00000000 r5:00000061 [ 1411.724924][T12156] r4:76f24d78 [ 1411.724940][T12156] [<80250590>] (__do_sys_clone3) from [<8025097c>] (sys_clone3+0x10/0x14) [ 1411.725000][T12156] r5:00a00400 r4:2000dd80 [ 1411.725017][T12156] [<8025096c>] (sys_clone3) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1411.725069][T12156] Exception stack(0xe434dfa8 to 0xe434dff0) [ 1411.725111][T12156] dfa0: 2000dd80 00a00400 76f24d78 00000061 76f24d78 00000061 [ 1411.725149][T12156] dfc0: 2000dd80 00a00400 00000000 000001b3 003562d8 00000000 00000001 76f250dc [ 1411.725180][T12156] dfe0: 76f24d70 76f24d60 00017b6c 00130ac0 [ 1411.916210][T11848] veth0_vlan: entered promiscuous mode [ 1411.948604][T11848] veth1_vlan: entered promiscuous mode [ 1412.095495][T11848] veth0_macvtap: entered promiscuous mode [ 1412.133237][T11848] veth1_macvtap: entered promiscuous mode [ 1412.360525][ T2761] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.360688][ T2761] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.360757][ T2761] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.360817][ T2761] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.476068][ T2761] net_ratelimit: 167 callbacks suppressed [ 1419.600582][ C1] net_ratelimit: 156 callbacks suppressed [ 1420.191377][T12180] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1490'. [ 1425.109966][ C1] net_ratelimit: 31 callbacks suppressed [ 1428.660131][ T6962] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1428.814561][ T6962] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1428.845379][ T6962] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.845523][ T6962] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1428.845560][ T6962] usb 1-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1428.845593][ T6962] usb 1-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1428.868035][ T6962] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.868202][ T6962] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1428.868261][ T6962] usb 1-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1428.868302][ T6962] usb 1-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1428.896672][ T6962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.896710][ T6962] usb 1-1: Product: syz [ 1428.896742][ T6962] usb 1-1: Manufacturer: syz [ 1428.896768][ T6962] usb 1-1: SerialNumber: syz [ 1428.932021][ T6962] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 1428.942660][ T6962] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1428.962805][ T6962] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1429.140575][T12207] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 1429.157614][ T6962] usb 1-1: USB disconnect, device number 21 [ 1429.201021][ T6962] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1429.224778][ T6962] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1429.225829][ T6962] ti_usb_3410_5052 1-1:2.0: device disconnected [ 1430.017323][T12245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.023032][T12245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.309875][ C1] net_ratelimit: 49 callbacks suppressed [ 1430.364843][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1507'. [ 1430.421978][T12249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1507'. [ 1430.433114][T12249] ip6gretap0: entered allmulticast mode [ 1431.490661][T12258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.492351][T12258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.932555][ T9406] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.936198][T12264] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1512'. [ 1432.185384][T12264] bond1: option miimon: invalid value (18446744073709551615) [ 1432.185548][T12264] bond1: option miimon: allowed values 0 - 2147483647 [ 1432.194753][T12264] bond1 (unregistering): Released all slaves [ 1432.443538][ T9406] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.628623][ T9406] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.762482][ T9406] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.730240][T10042] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1433.773734][T10042] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1433.780035][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1433.843219][ T12] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 1434.133774][T12350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.135290][T12350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 PÚÿÿÿ-D ì¿TiÛw UE´±påÖèì‹ùΛ�S¸2é på*÷™Ÿ�Õ W~­âx‘­¨VAgòÇÒî¡ÁÉÆ]ŽXÝîCì4çM3Å »²»!‰,|©•n<¾¨¦�”ÜkÎõóÀïcwM .¥†'óàœf©ÇÑ«ÏO�ŠøBiß(ŠÊ›¿u‚uΖ•%nvMZ‘§WÊ:«Ç^Êÿk�Ú72&ÖìnUÅÄØÏÅÃ8’ºÌ•j6¼ú„�¡µàp§‘tˆ³æ(Ù3—è¸!ñ»]\Eð1kµcФB€ßÕ¤Ö¦WàMf†÷Õ†=W•D®îŽy¾�<Ä˳Թißœ=5Cå¹ +Ün¶ ǯ«{Q‡Ø�½væ!.¢ž‡+sù%({Ü€‹JOŽÇøª¼�²ž!|>ïiØÞ®AAôù½ {Þ“ ç´_B.ša¼¯™É‘FâÓº´w’kÕÒç�LÐì¡3Â2±ècýw™Ûö óg 2>Uèô½6é³Ú,h¢Ž®ÉÊÆˆ´Ý s­ÂJŒzÌ&C™·úËÂô>Ž@¶ÊéøéVÑÛþ%ŸºçZÓbÃTýÖéTò×a_¯Îˆ‹Öör¨ŸÔ1Œ«§eœ B^‰‹÷awðþaÂ}1�YÛ¤/$ldU}'·zï’Š°J{¬£xcÏ™Š*à �<D�Û!ˆ‡Ã ìq„ÈÇ3õÔç²×•éSš[ìø)MlÍw([”�0iÆÆlªbºÆy¼›i‚S˜ÑÂ�×eè‚ú,‡² ÎÈ…«g…Ü"ikaÁ ÿ„¼T“,>[ñ i¦‹Ž33¢m=Ó�ï›À†?¼µÂŠM+€„ñP/ÌÄzL6)Øô¨¾ýµ—ν¥ùO6 1¹P‡Ë¬4wˆ§�è!‡úæªBqœÂ…œ³ àýX§»¦�÷¦zX0qÞòÉ©DVåÙ¬¹ý-ýêRE‚Hœ7{÷õ�”‰…Çi³‚,¶6f�בƦÇRòG\«§{{.�)=Ù¹‘ö>%L˜ÞÉOO=ïOîœÛVÿ;§þjqŒ¾šq%~¨¤�f&`Hü-O1sÔ°K>(+ÓÅ�Ërì8à°}Ø¥A²€~`Z ðz(&e—pˆ¥E—ïЙ|Ydzî»&¨—îÿ>Ç€ãâK# ËäøgÃñT_2�"뎀&g8‘Cj�¹G|›Xë\v¡›�‹&’°ÓV?®TßÈ ØãWì¿‘û~!,¾ñ&!q«¯/a:[µ›x<­GoìPÑl ¬ÀŠY£ ~n?Þp K˜}1Â-J¢•lØYyŸxL%·‡j¢Sß”�÷ã°(uS|p±KÛž-‡¥¡AJ˜S<}æüM""�3¼&±�Ÿv'±LrãÃ�?¢jBå gÜ1/”Ç �QG^Ôª€²Ì°Uz@B+÷1}âýó)g'r:-#º½^#÷Ãíô”+´…¹Z.jºA¸øhO„`TbD�ZOÖmþ›¿€Y ™™´xOOš ô@ )uß…µ„ÈÈùú0•ñ:íáõ-¬˜¾5‹ r¾ÔßqÍ#—>2ayXhÄåѾK*âáâÛ©™�ª`ˆ¯�Èý:âb¨˜ˆ+gØmcöî�Ž!c73¶Ù(úÏ� ¢s„^å³: jëH·Å-;•þsï¯~Èu>à4ŸÛ‡0‘}¢Þ–Ó¸‡¼X?öMþæ~+ßM\ÁÃA¸šÍ=Õm,ì*w ŠIY¤8®6Å(EåÜ¥På9Ú›¢¢í¤›ãóÖÔ·È6f½GY”GÂ�íÒs­¬r&0©@á1kHU=íG+äãP`ZMÕh%²E·ªèSõoyàì1÷µÛ”^ã»’†Zˈ(YŽwDnåÍ‹õç̽–4E ž;âp› ;ÿ.�æT™$3�#kOùsh..ûö±gã³ øÃóÁèÐâq“|‘Œ««PÝtÀ¡¥SüøŠ]õúXñw÷dz¦M�«o ¥–(‰i íqÚ̺çÁ숿t�^KÓóØÄó`ò�?ýøÛ@¬qSý“2zeÏ,E�ȺŸ“‘ëj¦ËB¯øy>G!¯ë=G í¤]­šßÆôý²N¯Æ7’õ\el£|î‚·î8+Ú1׆Öà=L†ÄÊFN#`ÊtxÉî½8Èü}^ê-¹k)×q©mÅÈ„�w[Ì1˜dU]!ìÎ]ˆá¼aŒ}û1°+g0Û~Ú8}Ôιoe‹°ˆè3åosÄXøA9h^ù0”ZQ—Ÿ®«SžId$G ܸ³�W]:>Á2Šö_³BAÛ|³% ŠàÛÄFpÒµÌ:…ØÒ�ÀRVï+îã²ؼàSå\áû+²æ]HŠâD„° .4?ÃTL¥F@fˆ-¶âœì©SžÀ•¢¢ÏÅõ#uü–]áèÓ2"3WÛÊÅù €)ÆM±Ì•ŸwQW�¥d` Šü%>^ÍP½v›E B–Ê è¶;óÓµسöÔBjÀ”M ßöTÅqбþðcʺ4›æ�è»xPÝ4°Á’‘ZÞë@ú­%¨ù¦*Ïa¹D¢qÒgóPÍî"×n<Å–k§BÙÄ8#¯ºtÆ ß _N~&¯r$wt¡ø® ù)niÿ³Ä ©þÑ=&p¹èe¡UBnÕÈ6HÀ­4äoS´UàƒW0þR–h¶óõ+SM¼ð÷B5•Pæ˜ É—„U­³Þ)*ñ*7E>ZIêþ˜ü&ä*lAó€D†·Éb‘ù�¦»×ã,$šI�¨b¤�¡Î\9Öm5ÆílyD |.$ÔŽèqdÀ( �jûS“ÓÖÈÃÀb¬FÑIORÄ\£o¯”‰Nì�qá¾lrVô®èÜV²†#È!ï�&ëð¤2bBX’páBVtÈ%è(⽚äÓIYÛH1�Tÿ硵Šè÷6ºîŽ&àçá·ñ%øÍ™xˆ%ïÐ8ì˜y Õ+ ÓlÇ Ÿ’i¬‡²úDÒEfaÓm‰<ùƚ沸= xml3߆{q%z·N$N>»¬DPiA�âä@£„áoîߎ1egng†d0ëjŠS4bŒ,Ú°2‹°Å0ˆcSùRAÏO;dzOøÇLKïÜpûý¿†‹Ì�e 4µ¿¨1ñ¶†r@FÜÑzÉ΃qžÇF]ÉÕ¼é6v¥Ž÷Úãr!Che­4¬/Ö‘ã³á*îg6ÛÞì›üíø¹ÎÕG%š@G¾‹Ký¦�/ˆM %‟¹ñY ¼³1Ê

¿­_GàÐtáÀË6v�ìgw”ò<6˜½5‡WòBãü“›Ãf�—#óÿá‰Ú½ôë¾Ðsê¹RÈ�žî"# ÇrMrf±W& °‰ŒÝ'N>VУVk]EbIéé.„ãŸaÀìß™ì,Ò0D ý!Ïhòsb�5êG6wuó�  9Y³�Iãg@aü¶GzÓŸwxxºÝ)’|XùZëÞ_í(í4%Pg�ŽÓ*÷4±¤:!õø »§•õª PRb õ°�Úd!¤+|‚€J ¦ïmG«÷oFSƒ'ùCGmš?Å1#=o“ØÜ'ôtW5_’­ö=a{7?º$ò‰W枸¡-6èêì"bú«­û‚KÕü0š,t••…k[‰ º�"¼W�‡é;£¹«¦ÜòopvÀÂâqd5ê%ýIÙliÔû‹¸sÒËÇQF®Ñ&Ÿ�`F#9Íèƒ SY ¾=¿>¬àñê”i¹Zdû×å~¸€ÔB,¿—ÏÃ÷QÔ’5€Ê!óEÏ$¦d™ÎÿÒã�ÄýtÏD†8–)W´ ðÒÁeÁ?þz¡Ýš ,Ôlò³SÝ-,§¸§®ŽÚዺ&›¿þÐÇÔIzîM ‰lö2�vÌê �¾ùTÑ£dLðò¸„0= C®’Åb²þµçÁáZ™ûÝe_¸ö»Ã«Y¿²îÅ·éD6•~Åïóü6ίáC9=v£×5ÏæÉ¶2å-¾dÜe–Š'îŸvÀ­ÙàXGMvx!O[dÉ2�7¾ükvfñ×ä•W;š>œü°ÿïzÅ|5aºÛúAÁåA ¢6Mæ`™ÍóÞÑW”·(áDNýoúWÙT‰Èß‘ûÀW¶mÖÙó ókÉŸ Tí™}Ñ`‹ÎGõÿ�¢Q„ªÍ9ã1Øÿ=ú|-~fzi$œ´€;#÷í)Æ›£Ò¡¸ˆ!ÿïÅ‚VPÅ;cdóŽ ƒõÒ�SuB<ΫÈáÄåVk£ù±v¸XȆ@ÿ޽ÞrV@Òßö¹ ¶Ÿ‡U°ÿvkAͤÃ>âÇ;W™ /UÞs—(³P0+dß,ãêòàÆV ¶ '¬I0v0^—í ô/@²¼»¤«��â[“ oUy ]ÿii¾‚NeÝÇtè†èÒaþtq*1ä°÷r[EY×­'¡¨p&¥»Šr|‰º“7pÔˆ!Amàpß¼Æîá| ½ �Ù@®î+ÔŒ=”g]›œñ¦+¥1§¯݃%ÕûqBèŒM"ݸð'ŽæºˆãaRN)me#­Aˆ°!Úžô¦4í ë ¹Ç&tlŸü2òaí´Hj¡âÚ®Øe%_ÑÒ–þÛ»-ã÷ÁñY5å I+c*Ñ%ª �q½¹Ey&hák&*?×Ë¡¤¸0hÅÄ�Òª¦!È}ŸV!»¤Bü&ƒ�0ÛäãÚ@FÖP;°>’�â]LÔâ¤É<�!ß˲_n,”<È^º�#4cd”•�èÈ‘=YÚþB—g, žtH_ËÏg*X‰¾³Àt¾¿3˜¹|7LîÕ§á­èõØ|¥60zÂYWzŽ•„%1|H-,p‰¿=ƒá#ÑRa PóÀ”I-ç%["ጢÿ&>Ñ—òøæ{q±Å¦ K™‹X麭u «á2Ta}à©:ö$‘ÆÁ�Ë÷hj…©›9é×ÙÈZwä|ŸÐá “, ñ>ò‡´K›pnȪ H¡ ªÅŠ›ƒUèKÈ iŒ%ðÁ.gßpü¾rÜG¢È}Cu>¿Û$̃…âAÙüÓÔ•Z72 ÌÚ�:?üíä#/,Ê›ºÛ¨©5|±ÖÚm›@•}À>Õž¼-5Ž Mñ±“Ç“�ëËX;@Æ!ßqàd°küñêîÊ…5|ѬxþªT»½…Yiwº…>¦†…ôã·VäøSs–Y¢ör’ž�V”B6g·˜ÂNî ÛöLüËQ²¼¤â¥°ß{³z³â…MÇá¸y†jr¥€›V5–ÌŸÓå:½¼ÏÕÛÆb%-Ü\)r#y·PK@ý´]í/é&e,êLH€%­˜­î¾˜ã…«®Ä¹ëM;½^óÝñýrxF©‰U�ÓmOî `��³3%Oì˜AJ,TXžà”)·ËWK‘gïíáÙf¢'¿*ŽB/8hwÓÅUÏç×è­s 6§‹xFG=d�½9½>i‚íG$l7 �·n[ˆÞ #Fû ¸¶µì¶© „xÑ{Z!ßu´ŽÌ4†oåÈ– öM_ù(1»“WGKìeàÝ™°ð4å¬^ž�=önÜ¢7ÂØ ¬Ôœk ¼þéÈvÁ^ÜüÍè#µ[aË{%D‡ïŒ‡�¢ Cô­¯%ß4X k9ýKPÅŸ©ÿuú_Ó*®Éªߊ+›‚IRäuÉdS9B»ãAg¡Á]TŽ 1ùir/ gçž�H?o î€úΔ ‰æˆË9Olý)µòHÂÑ÷nÁ)'Uؽ–>:ˆQG/»ÒËs/OÙþó¨û)® —2�sýêõo¢'ž†û•C°@É`ж³§AÉlñð½røHX\³µ}}.*„‘E&õ¦ù‰\õªD%´Ûùõ�7uj!»¢§7ãbwèoÒhöy!ôøú¶�þá7Àxtñ/‰NqâÉ"�¢ˆÐ�VùÛÉoþó’ Uûw=Þráº5óàɇ.3•(&«”ôˆ_~“ŸBÂW>+e”¸ý•:âFŒùͪ’ÏF6(† 5Þóš÷ŠõáTG«pë|v«ê…Aþ´>c-z,ǾñZG0@Hìñ5–� –DΉš­±†¢"K«86$ŒÆtr >¼ë)³èvßA~ç"ó ÅK.eY‹’”@óìCîŸø÷·qhä1&ÑYÕ'”Ú ¶E¯RÜ�É•rs�˜Î¸´ê8Ú}�ÁS̺å‡�êù¤§±C a¶¦Z…6).µ9 ë([-°�ç÷dÖP77HY4tÆÁÜÏËVáÉr€ ŠCreáÆ‚Ëþ×ç'[ÆÃ»ln÷ðùýÑžø/òÈ"„àaõ{!ÓpZÿ—q§Ñ!z~£þÚ ñýÊ”»ïgப=¶ÌÂÐ`÷³7þË-2ñ#“s»8æfË»ó¦—ÆÐéWìg0õ`4Dxšz70M ët/!šwÆÏW�b¥] ê< R�í‹f8Ò³éeËŸ/kÄémÇñÿ¯Üç’bpÝ$,IÌSy/>×ë<¤(±SúÄf¼S „(‡´{€jNöh…ž¹^öŽœ ½k·�ýöù!V›N—úå·íÇa´”Lm�ôß@¼2íƒ�LaÍëz›»hÕ›,À%îÊðkušÁ¹Ýh‚%ЦúIžD6–#brpîöÌU–-Ôÿâý8’�~ƒpEˆ<ɺˆ’«&Z1’O0UÔÞæ�ïð]Ÿëߌpµ°*âkœAàT®7…A‡û¶éúà[ èZ¼€-‹šŠšr±Gá7àØ1’fJˆ£¬¤ûjO W‡² 1¼Yuß¼‹Ïø˜us½±ÊCM“E.gíÆ éžS[³øHˆ�"E ¶üâÖ²ëïŸ$gL1ªÚRxJ {`óQe5có=Î’§-GW¶£y˜®Åg%!¨ðÖj²½ÞQ`6ìGÑö;•´7ÜmZh�Z–<°¨ š_ °59n5%ð«°ÁåÝL“¦Õz¶÷Ý”«>hžU¯ 4‡–*vÌáp×±MGäÙÚ©=äíu_0ÔSD÷$(Œä²%ƒ�ÿUþÏ}Rn ¦ ˆnÉ¡h¿6K” ö5�ñŠUÞŒØÅ©q n3ÒìÐf·™ñKç‡a+�ß H: | PH€$ž(ñàgf¦»Ëvù—uÊ^O“ÇnÚäbÀ�Yb ù…ªUï^xgíÎèØ1ÝmÀþé­¶½Ö>ˆj^U½Å“9 �á�ýŒh[�0k­kz¨k+«\¿GTp„"éŸ�$—ט³ÛV^p›ËºL7l`²+™OèýË%!]PUÌ'ö£SD=] £¬0檀õ÷ðÙJgÉœk"qpx®Ë¢¥™Ú¢¬ÀTÍ¢^9e._ïFNÁš§åèKmã Æsû«ŒD£{û?Ã!¥7À™gé¾8Ûv.3š×­fÜ,ªˆ~J¶r×–?…±L”1åE¸\d'0.þqBðà‰zŒb<å}¢ûÂÑùw/ÔŒ¯Ê )4årƒ>ÖG2ÐQ=ÑöìÅxå¡�ÚåR³¾ þrF×h*Yþšçƒ óÑ€\Fl€Åý?¬Ð4E_hÝ,Ú\Út@Ù!qR¶À]7À�ø4‹q1R¤Wº³öÜ0Èäšc¸Š³ªÇQ€¦3i.5ê—h!iN>¸»M1#}/ÎÒÎUR�¯Îòðà�V-K°á•vÎj·-ê gØí¬‘käëWÿ ˆ[yó}ψ^íÁý”‹aäßI…;ωÕ±DŒ†h”z'“Ð<ã� k´ZlZâ�Ùz`­K\s„ÏBÁÊdÓFµqàµ\¯�þn�¢GªP/ðLŽ)Ê� >Ǩ›Á}º)6ð:€"�q÷™›?'haypïå{€fjÄ™šV޾÷N,¡MðÿoÍGÅ8¾–ªÊeµ;˜Dqä–r´�gÀ¯Á¯ÿæi°ùq‹Ó0XÂ’Û—8t 6%däi½ðaÛÓùÛ‹í‚“Ÿƒ]ôhãëN%÷¨×}�yÄ]Š�\^7±Ó½{^jú®ü�Ùp ø5ûñTW¼Y÷ŒÈïܶӞ8�k(èGBeÌT8€KÕa¤‰Ú‚�Êy-*Á‚ºts1èŠq÷Ý8}8ó{ãb&ÿ¬¼3†;´zî»­êæH¡ &níÒíZ,#ñhu‘˜ª’²¬E¦�òò’`æA£…A°fÓ�ôé\ÑÈçæÿ®€æö)Û9°t–ȨNf¬#!ýž~¿ìõ¿n’-zyûq -BÚÑ‘l›l,PÈý±¯¡›ègÙCî˜÷2þ:6B�ÀöÐëd¢xrÇ¿õ1bV°ô%»Ù¸º||£¿¡ûÉÊ”¹eX�¼‚4=ߎê¥í!7þÁ)5€©Š}x³úò㈆Jv] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1441.274806][T12407] r7:60000013 r6:60000013 r5:8230878c r4:00000000 [ 1441.274824][T12407] [<80201ae4>] (show_stack) from [<8021e834>] (dump_stack_lvl+0x5c/0x70) [ 1441.274877][T12407] [<8021e7d8>] (dump_stack_lvl) from [<8021e860>] (dump_stack+0x18/0x1c) [ 1441.274936][T12407] r7:000000ac r6:00000000 r5:8333d780 r4:82b1601c [ 1441.274953][T12407] [<8021e848>] (dump_stack) from [<80a210e8>] (should_fail_ex+0x1bc/0x21c) [ 1441.275023][T12407] [<80a20f2c>] (should_fail_ex) from [<8057a600>] (should_failslab+0x6c/0x94) [ 1441.275096][T12407] r8:8333d780 r7:000000ac r6:809890d0 r5:00000dc0 r4:83001180 [ 1441.275115][T12407] [<8057a594>] (should_failslab) from [<8055a064>] (__kmalloc_cache_noprof+0x58/0x338) [ 1441.275170][T12407] [<8055a00c>] (__kmalloc_cache_noprof) from [<809890d0>] (assoc_array_insert+0x60/0x924) [ 1441.275242][T12407] r10:8477ad20 r9:00000000 r8:83fd27fc r7:8251d744 r6:00000000 r5:81cda918 [ 1441.275264][T12407] r4:83fd2780 [ 1441.275280][T12407] [<80989070>] (assoc_array_insert) from [<807f46d0>] (__key_link_begin+0x50/0xb0) [ 1441.275351][T12407] r10:8477ad20 r9:fffffff5 r8:00000000 r7:8653afc0 r6:dfaa9ec4 r5:82b4a810 [ 1441.275372][T12407] r4:83fd2780 [ 1441.275387][T12407] [<807f4680>] (__key_link_begin) from [<807f991c>] (request_key_and_link+0x5c4/0x73c) [ 1441.275448][T12407] r7:8653afc0 r6:8477acc0 r5:82b4a810 r4:00000000 [ 1441.275465][T12407] [<807f9358>] (request_key_and_link) from [<807f53d8>] (sys_request_key+0x11c/0x1ac) [ 1441.275529][T12407] r10:00000136 r9:82b4a810 r8:8020029c r7:87167200 r6:83fd2780 r5:8653afc0 [ 1441.275550][T12407] r4:00000005 [ 1441.275568][T12407] [<807f52bc>] (sys_request_key) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1441.275617][T12407] Exception stack(0xdfaa9fa8 to 0xdfaa9ff0) [ 1441.275655][T12407] 9fa0: 00000000 00000000 20000040 20001ffb 20001fee fffffffe [ 1441.275690][T12407] 9fc0: 00000000 00000000 00356314 00000136 003562d8 00000000 00000001 76f430dc [ 1441.275718][T12407] 9fe0: 76f42e88 76f42e78 00019004 00130ac0 [ 1441.275751][T12407] r9:8333d780 r8:8020029c r7:00000136 r6:00356314 r5:00000000 r4:00000000 [ 1441.421310][ T6962] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1441.563238][ T2961] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1441.911079][ T44] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1442.100599][ T6962] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1442.288525][ T6962] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1442.315834][ T6962] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.315988][ T6962] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1442.316031][ T6962] usb 1-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1442.316071][ T6962] usb 1-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1442.333014][ T6962] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.333164][ T6962] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1442.333208][ T6962] usb 1-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1442.333245][ T6962] usb 1-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1442.375419][ T6962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.375458][ T6962] usb 1-1: Product: syz [ 1442.375487][ T6962] usb 1-1: Manufacturer: syz [ 1442.375514][ T6962] usb 1-1: SerialNumber: syz [ 1442.423455][ T6962] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 1442.464005][ T6962] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1442.490273][ T6962] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1442.717231][ T28] audit: type=1400 audit(1443.635:1026): avc: denied { write } for pid=12422 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1442.722687][ T6962] usb 1-1: USB disconnect, device number 22 [ 1442.805353][ T6962] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1442.838257][ T6962] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1442.847578][ T6962] ti_usb_3410_5052 1-1:2.0: device disconnected [ 1443.087647][ T28] audit: type=1400 audit(1444.005:1027): avc: denied { write } for pid=12448 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1443.467348][ T2961] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1443.519115][T12453] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1535'. [ 1443.950774][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1444.122781][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1444.137553][ T9] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.137670][ T9] usb 1-1: config 17 has 0 interfaces, different from the descriptor's value: 1 [ 1444.137782][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.388060][ T8462] usb 1-1: USB disconnect, device number 23 [ 1444.710489][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1444.800594][ T28] audit: type=1400 audit(1445.715:1028): avc: denied { write } for pid=12461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1444.960242][ T28] audit: type=1400 audit(1445.875:1029): avc: denied { write } for pid=12471 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1445.164779][ T2961] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1445.582276][ T44] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1445.670802][T10042] net_ratelimit: 35 callbacks suppressed [ 1445.763085][ T44] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1445.768459][ T44] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.768594][ T44] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1445.768636][ T44] usb 1-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1445.768674][ T44] usb 1-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1445.793254][ T44] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.793393][ T44] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1445.793434][ T44] usb 1-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1445.793470][ T44] usb 1-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1445.808069][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.808108][ T44] usb 1-1: Product: syz [ 1445.808135][ T44] usb 1-1: Manufacturer: syz [ 1445.808160][ T44] usb 1-1: SerialNumber: syz [ 1445.833121][ T44] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 1445.880869][ T44] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1445.894466][ T44] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1446.036294][ T44] usb 1-1: USB disconnect, device number 24 [ 1446.112953][ T44] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1446.157975][ T44] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1446.159076][ T44] ti_usb_3410_5052 1-1:2.0: device disconnected [ 1446.440672][T12506] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1532'. [ 1450.670443][ T8462] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1450.790351][ C1] net_ratelimit: 20 callbacks suppressed [ 1450.823719][ T8462] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1450.826564][ T8462] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.826641][ T8462] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1450.826669][ T8462] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1450.826736][ T8462] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.071965][ T28] audit: type=1400 audit(1451.995:1030): avc: denied { create } for pid=12542 comm="syz.0.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1452.071732][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1454.725009][ T28] audit: type=1326 audit(1455.645:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12561 comm="syz.2.1549" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 1454.725195][ T28] audit: type=1326 audit(1455.645:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12561 comm="syz.2.1549" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 1454.735362][ T28] audit: type=1326 audit(1455.655:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12561 comm="syz.2.1549" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 1454.736615][ T28] audit: type=1326 audit(1455.655:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12561 comm="syz.2.1549" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 1454.737354][ T28] audit: type=1326 audit(1455.655:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12561 comm="syz.2.1549" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 1454.738537][ T28] audit: type=1326 audit(1455.655:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12561 comm="syz.2.1549" exe="/syz-executor" sig=0 arch=40000028 syscall=192 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 1454.747859][ T28] audit: type=1326 audit(1455.665:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12561 comm="syz.2.1549" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 1454.749049][ T28] audit: type=1326 audit(1455.665:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12561 comm="syz.2.1549" exe="/syz-executor" sig=0 arch=40000028 syscall=6 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 1454.753588][ T28] audit: type=1326 audit(1455.665:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12561 comm="syz.2.1549" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 1455.347342][T12565] comedi: valid board names for 8255 driver are: [ 1455.347452][T12565] 8255 [ 1455.347474][T12565] comedi: valid board names for vmk80xx driver are: [ 1455.347494][T12565] vmk80xx [ 1455.347511][T12565] comedi: valid board names for usbduxsigma driver are: [ 1455.347556][T12565] usbduxsigma [ 1455.347580][T12565] comedi: valid board names for usbduxfast driver are: [ 1455.347599][T12565] usbduxfast [ 1455.347616][T12565] comedi: valid board names for usbdux driver are: [ 1455.347635][T12565] usbdux [ 1455.347653][T12565] comedi: valid board names for ni6501 driver are: [ 1455.347687][T12565] ni6501 [ 1455.347703][T12565] comedi: valid board names for dt9812 driver are: [ 1455.347719][T12565] dt9812 [ 1455.347734][T12565] comedi: valid board names for ni_labpc_cs driver are: [ 1455.347752][T12565] ni_labpc_cs [ 1455.347769][T12565] comedi: valid board names for ni_daq_700 driver are: [ 1455.347785][T12565] ni_daq_700 [ 1455.347800][T12565] comedi: valid board names for labpc_pci driver are: [ 1455.347815][T12565] labpc_pci [ 1455.347829][T12565] comedi: valid board names for adl_pci9118 driver are: [ 1455.347846][T12565] pci9118dg [ 1455.347860][T12565] pci9118hg [ 1455.347875][T12565] pci9118hr [ 1455.347892][T12565] comedi: valid board names for 8255_pci driver are: [ 1455.347910][T12565] 8255_pci [ 1455.347926][T12565] comedi: valid board names for comedi_parport driver are: [ 1455.347944][T12565] comedi_parport [ 1455.347959][T12565] comedi: valid board names for comedi_test driver are: [ 1455.347976][T12565] comedi_test [ 1455.347992][T12565] comedi: valid board names for comedi_bond driver are: [ 1455.348010][T12565] comedi_bond [ 1455.801733][ T2961] net_ratelimit: 15 callbacks suppressed [ 1458.601323][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1458.601444][ T28] audit: type=1400 audit(1459.425:1043): avc: denied { write } for pid=12580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1458.975389][ T28] audit: type=1400 audit(1459.895:1044): avc: denied { write } for pid=12583 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1459.923346][ T28] audit: type=1400 audit(1460.845:1045): avc: denied { write } for pid=12586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1460.182944][ T28] audit: type=1400 audit(1461.105:1046): avc: denied { write } for pid=12589 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1460.467882][T12579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.468922][T12579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.880068][ C0] net_ratelimit: 12 callbacks suppressed [ 1460.950630][ T28] audit: type=1400 audit(1461.865:1047): avc: denied { write } for pid=12595 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1461.194145][ T28] audit: type=1400 audit(1462.105:1048): avc: denied { write } for pid=12598 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1461.390612][T12579] block nbd2: shutting down sockets [ 1461.855163][ T28] audit: type=1400 audit(1462.775:1049): avc: denied { write } for pid=12601 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1462.105048][ T28] audit: type=1400 audit(1463.025:1050): avc: denied { write } for pid=12605 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1464.998133][ T9] usb 1-1: USB disconnect, device number 25 [ 1465.990245][ C1] net_ratelimit: 12 callbacks suppressed [ 1466.800526][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1467.888890][ T28] audit: type=1400 audit(1468.805:1051): avc: denied { map } for pid=12637 comm="syz.2.1562" path="/dev/nullb0" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1467.893535][ T28] audit: type=1400 audit(1468.805:1052): avc: denied { execute } for pid=12637 comm="syz.2.1562" path="/dev/nullb0" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1467.924936][T12638] Trying to write to read-only block-device nullb0 [ 1468.276286][ T28] audit: type=1400 audit(1469.195:1053): avc: denied { read } for pid=12642 comm="syz.2.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1470.899488][T12646] FAULT_INJECTION: forcing a failure. [ 1470.899488][T12646] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.900276][T12646] CPU: 1 UID: 0 PID: 12646 Comm: syz.2.1565 Tainted: G L syzkaller #0 PREEMPT [ 1470.900361][T12646] Tainted: [L]=SOFTLOCKUP [ 1470.900381][T12646] Hardware name: ARM-Versatile Express [ 1470.900407][T12646] Call trace: [ 1470.900454][T12646] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1470.900560][T12646] r7:60000013 r6:60000013 r5:8230878c r4:00000000 [ 1470.900595][T12646] [<80201ae4>] (show_stack) from [<8021e834>] (dump_stack_lvl+0x5c/0x70) [ 1470.900677][T12646] [<8021e7d8>] (dump_stack_lvl) from [<8021e860>] (dump_stack+0x18/0x1c) [ 1470.900761][T12646] r7:00000040 r6:00000000 r5:84fde400 r4:82b1601c [ 1470.900783][T12646] [<8021e848>] (dump_stack) from [<80a210e8>] (should_fail_ex+0x1bc/0x21c) [ 1470.900845][T12646] [<80a20f2c>] (should_fail_ex) from [<8057a600>] (should_failslab+0x6c/0x94) [ 1470.900912][T12646] r8:84fde400 r7:00000040 r6:808b6af0 r5:00000dc0 r4:83001240 [ 1470.900930][T12646] [<8057a594>] (should_failslab) from [<8055a064>] (__kmalloc_cache_noprof+0x58/0x338) [ 1470.900986][T12646] [<8055a00c>] (__kmalloc_cache_noprof) from [<808b6af0>] (x509_cert_parse+0x7c/0x204) [ 1470.901063][T12646] r10:83fd2780 r9:82364644 r8:82c1fd60 r7:00000001 r6:85f4b380 r5:85d35900 [ 1470.901088][T12646] r4:8251d744 [ 1470.901104][T12646] [<808b6a74>] (x509_cert_parse) from [<808b7b18>] (x509_key_preparse+0x18/0x1d8) [ 1470.901155][T12646] r7:dfb15ec0 r6:82b4a864 r5:dfb15ec0 r4:82b4a88c [ 1470.901192][T12646] [<808b7b00>] (x509_key_preparse) from [<808b4c38>] (asymmetric_key_preparse+0x6c/0xf8) [ 1470.901280][T12646] r10:83fd2780 r9:82364644 r8:82c1fd60 r7:dfb15ec0 r6:82b4a864 r5:00000000 [ 1470.901304][T12646] r4:82b4a88c r3:808b7b00 [ 1470.901320][T12646] [<808b4bcc>] (asymmetric_key_preparse) from [<807f28bc>] (__key_create_or_update+0x1a0/0x560) [ 1470.901393][T12646] r9:82b3d784 r8:84fde400 r7:85f4b380 r6:83fd2781 r5:00000000 r4:82b4a810 [ 1470.901440][T12646] [<807f271c>] (__key_create_or_update) from [<807f2cb0>] (key_create_or_update+0x34/0x3c) [ 1470.901508][T12646] r10:00000135 r9:84fde400 r8:85f4b380 r7:83fd2781 r6:00000000 r5:00000001 [ 1470.901529][T12646] r4:b5403587 [ 1470.901547][T12646] [<807f2c7c>] (key_create_or_update) from [<807f5170>] (sys_add_key+0x134/0x280) [ 1470.901596][T12646] [<807f503c>] (sys_add_key) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1470.901644][T12646] Exception stack(0xdfb15fa8 to 0xdfb15ff0) [ 1470.901680][T12646] 5fa0: ffffffff 00000000 20000000 00000000 20000200 00000001 [ 1470.901730][T12646] 5fc0: ffffffff 00000000 00356318 00000135 003562d8 00000000 00000001 76f430dc [ 1470.901764][T12646] 5fe0: 76f42e88 76f42e78 00019004 00130ac0 [ 1470.901797][T12646] r8:8020029c r7:00000135 r6:00356318 r5:00000000 r4:ffffffff [ 1471.011406][ T28] audit: type=1400 audit(1471.935:1054): avc: denied { validate_trans } for pid=12647 comm="syz.2.1566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1471.270573][ C0] net_ratelimit: 8 callbacks suppressed [ 1471.790790][ T8868] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1471.940440][ T8868] usb 1-1: Using ep0 maxpacket: 8 [ 1471.943244][ T8868] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1471.950417][ T8868] usb 1-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 1471.950524][ T8868] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1471.950573][ T8868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1471.950692][ T8868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.954807][ T8868] usb 1-1: config 0 descriptor?? [ 1472.407663][ T8868] nintendo 0003:057E:200E.0011: ignoring exceeding usage max [ 1472.409370][ T8868] nintendo 0003:057E:200E.0011: unknown main item tag 0x2 [ 1472.409488][ T8868] nintendo 0003:057E:200E.0011: unknown main item tag 0x0 [ 1472.427880][ T8868] nintendo 0003:057E:200E.0011: hidraw0: USB HID v80.01 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 1472.494063][ T8868] nintendo 0003:057E:200E.0011: Failed charging grip handshake [ 1472.494577][ T8868] nintendo 0003:057E:200E.0011: Failed to initialize controller; ret=-110 [ 1472.503967][ T8868] nintendo 0003:057E:200E.0011: probe - fail = -110 [ 1472.504214][ T8868] nintendo 0003:057E:200E.0011: probe with driver nintendo failed with error -110 [ 1472.593156][ T2982] usb 1-1: USB disconnect, device number 26 [ 1472.937418][ T28] audit: type=1400 audit(1473.855:1055): avc: denied { write } for pid=12679 comm="syz.0.1570" name="usb_gadget" dev="configfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1472.938758][ T28] audit: type=1400 audit(1473.855:1056): avc: denied { write } for pid=12679 comm="syz.0.1570" name="configs" dev="configfs" ino=16316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1472.963053][ T28] audit: type=1400 audit(1473.885:1057): avc: denied { write } for pid=12679 comm="syz.0.1570" name="functions" dev="configfs" ino=16315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1472.964285][ T28] audit: type=1400 audit(1473.885:1058): avc: denied { write } for pid=12679 comm="syz.0.1570" name="c.1" dev="configfs" ino=16722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1472.965330][ T28] audit: type=1400 audit(1473.885:1059): avc: denied { write } for pid=12679 comm="syz.0.1570" name="c.1" dev="configfs" ino=16722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1472.985098][T12680] UDC core: g1: couldn't find an available UDC or it's busy [ 1473.011993][T12680] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1570'. [ 1473.123676][T12684] FAULT_INJECTION: forcing a failure. [ 1473.123676][T12684] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.123831][T12684] CPU: 1 UID: 0 PID: 12684 Comm: syz.0.1571 Tainted: G L syzkaller #0 PREEMPT [ 1473.123888][T12684] Tainted: [L]=SOFTLOCKUP [ 1473.123904][T12684] Hardware name: ARM-Versatile Express [ 1473.123926][T12684] Call trace: [ 1473.123963][T12684] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1473.124061][T12684] r7:60000013 r6:60000013 r5:8230878c r4:00000000 [ 1473.124084][T12684] [<80201ae4>] (show_stack) from [<8021e834>] (dump_stack_lvl+0x5c/0x70) [ 1473.124142][T12684] [<8021e7d8>] (dump_stack_lvl) from [<8021e860>] (dump_stack+0x18/0x1c) [ 1473.124212][T12684] r7:846e5780 r6:00000000 r5:846e5780 r4:82b1601c [ 1473.124234][T12684] [<8021e848>] (dump_stack) from [<80a210e8>] (should_fail_ex+0x1bc/0x21c) [ 1473.124299][T12684] [<80a20f2c>] (should_fail_ex) from [<8057a600>] (should_failslab+0x6c/0x94) [ 1473.124378][T12684] r8:00000000 r7:846e5780 r6:83002000 r5:00400dc0 r4:00000020 [ 1473.124397][T12684] [<8057a594>] (should_failslab) from [<80558fcc>] (__kmalloc_noprof+0xa8/0x3c8) [ 1473.124457][T12684] [<80558f24>] (__kmalloc_noprof) from [<8080807c>] (lsm_blob_alloc+0x28/0x3c) [ 1473.124535][T12684] r10:846e5780 r9:00000005 r8:81cda964 r7:00400cc0 r6:846f8f00 r5:846f8700 [ 1473.124558][T12684] r4:846f8764 [ 1473.124576][T12684] [<80808054>] (lsm_blob_alloc) from [<8081311c>] (security_prepare_creds+0x2c/0x21c) [ 1473.124638][T12684] r5:846f8700 r4:846f8700 [ 1473.124657][T12684] [<808130f0>] (security_prepare_creds) from [<80288988>] (prepare_creds+0x234/0x3c8) [ 1473.124730][T12684] r7:82a1e400 r6:82a1f620 r5:846f8f00 r4:846f8700 [ 1473.124749][T12684] [<80288754>] (prepare_creds) from [<807f7fd0>] (join_session_keyring+0x18/0x148) [ 1473.124818][T12684] r7:00000001 r6:00000000 r5:00000003 r4:00000001 [ 1473.124837][T12684] [<807f7fb8>] (join_session_keyring) from [<807f8638>] (lookup_user_key+0x538/0x720) [ 1473.124908][T12684] r7:00000001 r6:fffffffd r5:00000003 r4:00000001 [ 1473.124929][T12684] [<807f8100>] (lookup_user_key) from [<807f5140>] (sys_add_key+0x104/0x280) [ 1473.125007][T12684] r10:00000135 r9:846e5780 r8:86987140 r7:20000200 r6:00000000 r5:00000002 [ 1473.125030][T12684] r4:b5403587 [ 1473.125048][T12684] [<807f503c>] (sys_add_key) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1473.125102][T12684] Exception stack(0xdf9bdfa8 to 0xdf9bdff0) [ 1473.125145][T12684] dfa0: fffffffd 00000000 20000000 00000000 20000200 00000002 [ 1473.125183][T12684] dfc0: fffffffd 00000000 00356318 00000135 003562d8 00000000 00000001 76f250dc [ 1473.125216][T12684] dfe0: 76f24e88 76f24e78 00019004 00130ac0 [ 1473.125252][T12684] r8:8020029c r7:00000135 r6:00356318 r5:00000000 r4:fffffffd [ 1473.680707][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1473.865989][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1473.870347][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1473.887685][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1473.887739][ T9] usb 1-1: Product: syz [ 1473.887812][ T9] usb 1-1: Manufacturer: syz [ 1473.887843][ T9] usb 1-1: SerialNumber: syz [ 1474.153607][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1474.415915][ T2982] usb 1-1: USB disconnect, device number 27 [ 1474.444904][ T2982] usblp0: removed [ 1475.149362][T12727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.159022][T12727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.091361][ T2982] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1476.252722][ T2982] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1476.256212][ T2982] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1476.268957][ T2982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1476.268991][ T2982] usb 1-1: Product: syz [ 1476.269018][ T2982] usb 1-1: Manufacturer: syz [ 1476.269042][ T2982] usb 1-1: SerialNumber: syz [ 1476.469980][ C0] net_ratelimit: 37 callbacks suppressed [ 1476.505895][ T2982] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1476.724325][ T2982] usb 1-1: USB disconnect, device number 28 [ 1476.730505][ T2982] usblp0: removed [ 1477.577625][T12768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.587895][T12768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.835566][T12774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.837658][T12774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1480.566715][ T28] audit: type=1326 audit(1481.485:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12787 comm="syz.2.1599" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 1480.582112][ T28] audit: type=1326 audit(1481.505:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12787 comm="syz.2.1599" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 1480.586367][ T28] audit: type=1326 audit(1481.505:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12787 comm="syz.2.1599" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 1480.598372][ T28] audit: type=1326 audit(1481.515:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12787 comm="syz.2.1599" exe="/syz-executor" sig=0 arch=40000028 syscall=156 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 1480.600258][ T28] audit: type=1326 audit(1481.515:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12787 comm="syz.2.1599" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 1480.987129][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1601'. [ 1481.491963][T12116] net_ratelimit: 5 callbacks suppressed [ 1481.939395][T12798] futex_wake_op: syz.0.1602 tries to shift op by 144; fix this program [ 1482.107866][ T28] audit: type=1400 audit(1483.015:1065): avc: denied { write } for pid=12792 comm="syz.0.1602" name="functions" dev="configfs" ino=16315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1486.553605][ T9406] net_ratelimit: 9 callbacks suppressed [ 1487.025312][ T28] audit: type=1326 audit(1487.925:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12813 comm="syz.2.1609" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 1487.025469][ T28] audit: type=1326 audit(1487.945:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12813 comm="syz.2.1609" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 1487.025522][ T28] audit: type=1326 audit(1487.945:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12813 comm="syz.2.1609" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 1487.025567][ T28] audit: type=1326 audit(1487.945:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12813 comm="syz.2.1609" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 1487.037589][ T28] audit: type=1326 audit(1487.955:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12813 comm="syz.2.1609" exe="/syz-executor" sig=0 arch=40000028 syscall=192 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 1487.040313][ T28] audit: type=1326 audit(1487.955:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12813 comm="syz.2.1609" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 1487.043627][ T28] audit: type=1326 audit(1487.965:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12813 comm="syz.2.1609" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 1487.046210][ T28] audit: type=1326 audit(1487.965:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12813 comm="syz.2.1609" exe="/syz-executor" sig=0 arch=40000028 syscall=227 compat=0 ip=0x130ac0 code=0x7ffc0000 [ 1487.054256][T12814] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 1487.064465][ T28] audit: type=1400 audit(1487.985:1074): avc: denied { relabelto } for pid=12813 comm="syz.2.1609" name="61" dev="tmpfs" ino=329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1487.064607][ T28] audit: type=1400 audit(1487.985:1075): avc: denied { associate } for pid=12813 comm="syz.2.1609" name="61" dev="tmpfs" ino=329 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 1491.830169][ C0] net_ratelimit: 9 callbacks suppressed [ 1492.037638][T12820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.038280][T12820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.266728][T12824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.268854][T12824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.445756][T12828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.470794][T12828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1496.004210][T12840] FAULT_INJECTION: forcing a failure. [ 1496.004210][T12840] name failslab, interval 1, probability 0, space 0, times 0 [ 1496.004373][T12840] CPU: 0 UID: 0 PID: 12840 Comm: syz.2.1618 Tainted: G L syzkaller #0 PREEMPT [ 1496.004431][T12840] Tainted: [L]=SOFTLOCKUP [ 1496.004449][T12840] Hardware name: ARM-Versatile Express [ 1496.004470][T12840] Call trace: [ 1496.004509][T12840] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1496.004610][T12840] r7:60000013 r6:60000013 r5:8230878c r4:00000000 [ 1496.004631][T12840] [<80201ae4>] (show_stack) from [<8021e834>] (dump_stack_lvl+0x5c/0x70) [ 1496.004694][T12840] [<8021e7d8>] (dump_stack_lvl) from [<8021e860>] (dump_stack+0x18/0x1c) [ 1496.004758][T12840] r7:ffffffff r6:00000000 r5:84fd1900 r4:82b1601c [ 1496.004775][T12840] [<8021e848>] (dump_stack) from [<80a210e8>] (should_fail_ex+0x1bc/0x21c) [ 1496.004835][T12840] [<80a20f2c>] (should_fail_ex) from [<8057a600>] (should_failslab+0x6c/0x94) [ 1496.004906][T12840] r8:84fd1900 r7:ffffffff r6:83001240 r5:00000dc0 r4:0000000c [ 1496.004924][T12840] [<8057a594>] (should_failslab) from [<80558bf8>] (__kmalloc_node_noprof+0xac/0x3d8) [ 1496.004977][T12840] [<80558b4c>] (__kmalloc_node_noprof) from [<805338e4>] (__vmalloc_node_range_noprof+0x15c/0x6bc) [ 1496.005048][T12840] r10:00000001 r9:00000dc0 r8:00000003 r7:86a51300 r6:ffffffff r5:df800000 [ 1496.005068][T12840] r4:0000000c [ 1496.005084][T12840] [<80533788>] (__vmalloc_node_range_noprof) from [<805340ac>] (vzalloc_noprof+0x6c/0x74) [ 1496.005167][T12840] r10:00000000 r9:84e4c780 r8:85bf9da8 r7:83822300 r6:86313d24 r5:86313c00 [ 1496.005190][T12840] r4:00000000 [ 1496.005207][T12840] [<80534040>] (vzalloc_noprof) from [<80afc044>] (n_tty_open+0x18/0x84) [ 1496.005269][T12840] r4:86313c00 [ 1496.005286][T12840] [<80afc02c>] (n_tty_open) from [<80b0005c>] (tty_ldisc_open+0x48/0x88) [ 1496.005354][T12840] r7:83822300 r6:86313d24 r5:86c65480 r4:86313c00 [ 1496.005372][T12840] [<80b00014>] (tty_ldisc_open) from [<80b009a4>] (tty_ldisc_setup+0x1c/0x58) [ 1496.005429][T12840] r7:83822300 r6:86313c00 r5:8694be00 r4:86313c00 [ 1496.005446][T12840] [<80b00988>] (tty_ldisc_setup) from [<80afa400>] (tty_init_dev.part.0+0xa0/0x1d0) [ 1496.005509][T12840] r7:83822300 r6:00000000 r5:00000000 r4:86313c00 [ 1496.005526][T12840] [<80afa360>] (tty_init_dev.part.0) from [<80afa568>] (tty_init_dev+0x38/0x3c) [ 1496.005590][T12840] r7:82d1ec9c r6:841a90f0 r5:00000000 r4:83822300 [ 1496.005608][T12840] [<80afa530>] (tty_init_dev) from [<80b04754>] (ptmx_open+0xb4/0x164) [ 1496.005678][T12840] r5:85bf9d80 r4:00000000 [ 1496.005695][T12840] [<80b046a0>] (ptmx_open) from [<805bc470>] (chrdev_open+0xbc/0x234) [ 1496.005764][T12840] r9:85bf9d80 r8:85bf9da8 r7:8252c94c r6:85bf9d80 r5:841a90f0 r4:82d1ecb4 [ 1496.005783][T12840] [<805bc3b4>] (chrdev_open) from [<805aede8>] (do_dentry_open+0x138/0x50c) [ 1496.005849][T12840] r9:85bf9d80 r8:85bf9da8 r7:805bc3b4 r6:841a90f0 r5:00000000 r4:85bf9d80 [ 1496.005867][T12840] [<805aecb0>] (do_dentry_open) from [<805b0968>] (vfs_open+0x2c/0xe8) [ 1496.005931][T12840] r9:85bf9d80 r8:84fd1900 r7:df959f20 r6:85bf9da8 r5:82b1d1d4 r4:85bf9d80 [ 1496.005949][T12840] [<805b093c>] (vfs_open) from [<805cd26c>] (path_openat+0x430/0xa3c) [ 1496.006035][T12840] r6:00000000 r5:82b1d1d4 r4:df959e58 [ 1496.006053][T12840] [<805cce3c>] (path_openat) from [<805cd930>] (do_file_open+0xb8/0x150) [ 1496.006125][T12840] r10:00000142 r9:84fd1900 r8:00000001 r7:ffffff9c r6:df959f20 r5:84fd1900 [ 1496.006148][T12840] r4:83894840 [ 1496.006164][T12840] [<805cd878>] (do_file_open) from [<805b0e54>] (do_sys_openat2+0x8c/0xf0) [ 1496.006228][T12840] r8:8020029c r7:20000040 r6:ffffff9c r5:83894840 r4:00000004 [ 1496.006246][T12840] [<805b0dc8>] (do_sys_openat2) from [<805b136c>] (sys_openat+0x88/0xd8) [ 1496.006341][T12840] r7:00000142 r6:00356314 r5:20000040 r4:ffffff9c [ 1496.006365][T12840] [<805b12e4>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1496.006416][T12840] Exception stack(0xdf959fa8 to 0xdf959ff0) [ 1496.006455][T12840] 9fa0: 00000000 00000000 ffffff9c 20000040 00000800 00000000 [ 1496.006491][T12840] 9fc0: 00000000 00000000 00356314 00000142 003562d8 00000000 00000001 76f430dc [ 1496.006519][T12840] 9fe0: 76f42e88 76f42e78 00019004 00130ac0 [ 1496.006545][T12840] r5:00000000 r4:00000000 [ 1496.006773][T12840] syz.2.1618: vmalloc error: size 12288, failed to allocated page array size 12, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1496.007883][T12840] CPU: 0 UID: 0 PID: 12840 Comm: syz.2.1618 Tainted: G L syzkaller #0 PREEMPT [ 1496.007934][T12840] Tainted: [L]=SOFTLOCKUP [ 1496.007950][T12840] Hardware name: ARM-Versatile Express [ 1496.007968][T12840] Call trace: [ 1496.007995][T12840] [<80201a08>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1496.008061][T12840] r7:60000013 r6:60000013 r5:8230878c r4:00000000 [ 1496.008079][T12840] [<80201ae4>] (show_stack) from [<8021e834>] (dump_stack_lvl+0x5c/0x70) [ 1496.008129][T12840] [<8021e7d8>] (dump_stack_lvl) from [<8021e860>] (dump_stack+0x18/0x1c) [ 1496.008191][T12840] r7:86a51300 r6:8232b344 r5:84fd1900 r4:00000000 [ 1496.008210][T12840] [<8021e848>] (dump_stack) from [<80547634>] (warn_alloc+0xdc/0xf8) [ 1496.008260][T12840] [<80547558>] (warn_alloc) from [<80533df8>] (__vmalloc_node_range_noprof+0x670/0x6bc) [ 1496.008318][T12840] r3:00003000 r2:8232b344 [ 1496.008342][T12840] r6:ffffffff r5:df800000 r4:0000000c [ 1496.008359][T12840] [<80533788>] (__vmalloc_node_range_noprof) from [<805340ac>] (vzalloc_noprof+0x6c/0x74) [ 1496.008439][T12840] r10:00000000 r9:84e4c780 r8:85bf9da8 r7:83822300 r6:86313d24 r5:86313c00 [ 1496.008460][T12840] r4:00000000 [ 1496.008476][T12840] [<80534040>] (vzalloc_noprof) from [<80afc044>] (n_tty_open+0x18/0x84) [ 1496.008534][T12840] r4:86313c00 [ 1496.008550][T12840] [<80afc02c>] (n_tty_open) from [<80b0005c>] (tty_ldisc_open+0x48/0x88) [ 1496.008611][T12840] r7:83822300 r6:86313d24 r5:86c65480 r4:86313c00 [ 1496.008628][T12840] [<80b00014>] (tty_ldisc_open) from [<80b009a4>] (tty_ldisc_setup+0x1c/0x58) [ 1496.008695][T12840] r7:83822300 r6:86313c00 r5:8694be00 r4:86313c00 [ 1496.008712][T12840] [<80b00988>] (tty_ldisc_setup) from [<80afa400>] (tty_init_dev.part.0+0xa0/0x1d0) [ 1496.008839][T12840] r7:83822300 r6:00000000 r5:00000000 r4:86313c00 [ 1496.008860][T12840] [<80afa360>] (tty_init_dev.part.0) from [<80afa568>] (tty_init_dev+0x38/0x3c) [ 1496.008928][T12840] r7:82d1ec9c r6:841a90f0 r5:00000000 r4:83822300 [ 1496.008946][T12840] [<80afa530>] (tty_init_dev) from [<80b04754>] (ptmx_open+0xb4/0x164) [ 1496.009002][T12840] r5:85bf9d80 r4:00000000 [ 1496.009018][T12840] [<80b046a0>] (ptmx_open) from [<805bc470>] (chrdev_open+0xbc/0x234) [ 1496.009086][T12840] r9:85bf9d80 r8:85bf9da8 r7:8252c94c r6:85bf9d80 r5:841a90f0 r4:82d1ecb4 [ 1496.009104][T12840] [<805bc3b4>] (chrdev_open) from [<805aede8>] (do_dentry_open+0x138/0x50c) [ 1496.009169][T12840] r9:85bf9d80 r8:85bf9da8 r7:805bc3b4 r6:841a90f0 r5:00000000 r4:85bf9d80 [ 1496.009188][T12840] [<805aecb0>] (do_dentry_open) from [<805b0968>] (vfs_open+0x2c/0xe8) [ 1496.009253][T12840] r9:85bf9d80 r8:84fd1900 r7:df959f20 r6:85bf9da8 r5:82b1d1d4 r4:85bf9d80 [ 1496.009271][T12840] [<805b093c>] (vfs_open) from [<805cd26c>] (path_openat+0x430/0xa3c) [ 1496.009329][T12840] r6:00000000 r5:82b1d1d4 r4:df959e58 [ 1496.009346][T12840] [<805cce3c>] (path_openat) from [<805cd930>] (do_file_open+0xb8/0x150) [ 1496.009408][T12840] r10:00000142 r9:84fd1900 r8:00000001 r7:ffffff9c r6:df959f20 r5:84fd1900 [ 1496.009429][T12840] r4:83894840 [ 1496.009445][T12840] [<805cd878>] (do_file_open) from [<805b0e54>] (do_sys_openat2+0x8c/0xf0) [ 1496.009552][T12840] r8:8020029c r7:20000040 r6:ffffff9c r5:83894840 r4:00000004 [ 1496.009589][T12840] [<805b0dc8>] (do_sys_openat2) from [<805b136c>] (sys_openat+0x88/0xd8) [ 1496.009665][T12840] r7:00000142 r6:00356314 r5:20000040 r4:ffffff9c [ 1496.009683][T12840] [<805b12e4>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1496.009726][T12840] Exception stack(0xdf959fa8 to 0xdf959ff0) [ 1496.009759][T12840] 9fa0: 00000000 00000000 ffffff9c 20000040 00000800 00000000 [ 1496.009792][T12840] 9fc0: 00000000 00000000 00356314 00000142 003562d8 00000000 00000001 76f430dc [ 1496.009818][T12840] 9fe0: 76f42e88 76f42e78 00019004 00130ac0 [ 1496.009843][T12840] r5:00000000 r4:00000000 [ 1496.020572][T12840] Mem-Info: [ 1496.020960][T12840] active_anon:5097 inactive_anon:0 isolated_anon:0 [ 1496.020960][T12840] active_file:1266 inactive_file:40626 isolated_file:0 [ 1496.020960][T12840] unevictable:768 dirty:17 writeback:0 [ 1496.020960][T12840] slab_reclaimable:1256 slab_unreclaimable:9134 [ 1496.020960][T12840] mapped:2507 shmem:3661 pagetables:475 [ 1496.020960][T12840] sec_pagetables:0 bounce:0 [ 1496.020960][T12840] kernel_misc_reclaimable:0 [ 1496.020960][T12840] free:422849 free_pcp:2867 free_cma:4032 [ 1496.021365][T12840] Node 0 active_anon:20388kB inactive_anon:0kB active_file:5064kB inactive_file:162504kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:10028kB dirty:68kB writeback:0kB shmem:14644kB kernel_stack:1696kB pagetables:1900kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1496.021788][T12840] Normal free:1354876kB boost:0kB min:4768kB low:6188kB high:7608kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:2476kB unevictable:0kB writepending:44kB zspages:0kB present:1556480kB managed:1424828kB mlocked:0kB bounce:0kB free_pcp:2728kB local_pcp:1268kB free_cma:0kB [ 1496.021883][T12840] lowmem_reserve[]: 0 4224 4224 [ 1496.022027][T12840] HighMem free:336520kB boost:0kB min:512kB low:1052kB high:1592kB reserved_highatomic:0kB free_highatomic:0kB active_anon:20344kB inactive_anon:0kB active_file:5064kB inactive_file:160028kB unevictable:3072kB writepending:24kB zspages:0kB present:540672kB managed:540672kB mlocked:0kB bounce:0kB free_pcp:8740kB local_pcp:372kB free_cma:16128kB [ 1496.022102][T12840] lowmem_reserve[]: 0 0 0 [ 1496.022387][T12840] Normal: 1*4kB (M) 1*8kB (U) 1*16kB (M) 1*32kB (E) 3*64kB (UME) 3*128kB (UME) 2*256kB (UM) 6*512kB (UME) 9*1024kB (ME) 3*2048kB (UME) 326*4096kB (UM) = 1354876kB [ 1496.023070][T12840] HighMem: 7*4kB (UM) 13*8kB (UM) 13*16kB (UM) 6*32kB (UM) 12*64kB (UM) 5*128kB (U) 9*256kB (UMC) 9*512kB (UMC) 2*1024kB (MC) 3*2048kB (UMC) 78*4096kB (UMC) = 336532kB [ 1496.023646][T12840] 45553 total pagecache pages [ 1496.023731][T12840] 0 pages in swap cache [ 1496.023768][T12840] Free swap = 124996kB [ 1496.023812][T12840] Total swap = 124996kB [ 1496.023950][T12840] 524288 pages RAM [ 1496.024044][T12840] 135168 pages HighMem/MovableOnly [ 1496.024094][T12840] 32913 pages reserved [ 1496.024128][T12840] 4096 pages cma reserved [ 1496.030188][T12840] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1496.285058][T12844] netlink: 'syz.2.1620': attribute type 1 has an invalid length. [ 1496.635237][T12844] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1496.651609][T12844] bond1: (slave bond2): making interface the new active one [ 1496.654433][T12844] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1496.880051][ C1] net_ratelimit: 9 callbacks suppressed [ 1496.880540][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1497.042916][T12844] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1497.060764][T12844] bond1: (slave bond3): Enslaving as a backup interface with an up link [ 1497.631142][T12957] binder_alloc: 12956: binder_alloc_buf, no vma [ 1501.989840][ C1] net_ratelimit: 12 callbacks suppressed [ 1502.236872][T12950] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1502.578132][T12978] block2mtd: error: cannot open device /d [ 1502.729095][T12980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1502.737451][T12980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1507.190827][ C1] net_ratelimit: 2 callbacks suppressed [ 1509.716349][T13003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1509.722182][T13003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1509.970049][T13007] 8<--- cut here --- [ 1509.970195][T13007] Unable to handle kernel paging request at virtual address fee003c0 when write [ 1509.970350][T13007] [fee003c0] *pgd=80000080007003, *pmd=00000000 [ 1509.971402][T13007] Internal error: Oops: a06 [#1] SMP ARM [ 1509.973728][T13007] Modules linked in: [ 1509.974280][T13007] CPU: 1 UID: 0 PID: 13007 Comm: syz.2.1637 Tainted: G L syzkaller #0 PREEMPT [ 1509.974738][T13007] Tainted: [L]=SOFTLOCKUP [ 1509.974920][T13007] Hardware name: ARM-Versatile Express [ 1509.975158][T13007] PC is at parport_attach+0x5c/0x1e8 [ 1509.975418][ C0] virtqueue callback for 8381fcc0 (80e1cec8) [ 1509.975603][ C0] virtqueue interrupt with no work for 8381fc00 [ 1509.975633][ C0] virtqueue interrupt with no work for 8381fb40 [ 1509.975750][ C0] No more buffers in queue [ 1509.975835][ C0] Receiving skb proto 0x0800 len 76 type 0 [ 1509.975884][ C0] No more buffers in queue [ 1509.975916][ C0] Added buffer head 821 to 8381fcc0 [ 1509.975950][ C0] Added buffer head 820 to 8381fcc0 [ 1509.975969][ C0] Added buffer head 795 to 8381fcc0 [ 1509.975983][ C0] Added buffer head 794 to 8381fcc0 [ 1509.975998][ C0] Added buffer head 793 to 8381fcc0 [ 1509.976012][ C0] Added buffer head 792 to 8381fcc0 [ 1509.976027][ C0] Added buffer head 791 to 8381fcc0 [ 1509.976054][ C0] Added buffer head 790 to 8381fcc0 [ 1509.976104][ C0] Added buffer head 789 to 8381fcc0 [ 1509.976165][ C0] Added buffer head 788 to 8381fcc0 [ 1509.976199][ C0] Added buffer head 787 to 8381fcc0 [ 1509.976391][ C0] Added buffer head 786 to 8381fcc0 [ 1509.976416][ C0] Added buffer head 784 to 8381fcc0 [ 1509.976432][ C0] Added buffer head 895 to 8381fcc0 [ 1509.976448][ C0] Added buffer head 625 to 8381fcc0 [ 1509.976462][ C0] Added buffer head 624 to 8381fcc0 [ 1509.976477][ C0] Added buffer head 623 to 8381fcc0 [ 1509.976511][ C0] Added buffer head 622 to 8381fcc0 [ 1509.976530][ C0] Added buffer head 621 to 8381fcc0 [ 1509.976543][ C0] Added buffer head 620 to 8381fcc0 [ 1509.976558][ C0] Added buffer head 721 to 8381fcc0 [ 1509.976573][ C0] Added buffer head 651 to 8381fcc0 [ 1509.976587][ C0] Added buffer head 766 to 8381fcc0 [ 1509.976602][ C0] Added buffer head 765 to 8381fcc0 [ 1509.976616][ C0] Added buffer head 764 to 8381fcc0 [ 1509.976631][ C0] Added buffer head 763 to 8381fcc0 [ 1509.976645][ C0] Added buffer head 762 to 8381fcc0 [ 1509.976658][ C0] Added buffer head 761 to 8381fcc0 [ 1509.976672][ C0] Added buffer head 857 to 8381fcc0 [ 1509.976686][ C0] Added buffer head 856 to 8381fcc0 [ 1509.976711][ C0] Added buffer head 855 to 8381fcc0 [ 1509.976746][ C0] Added buffer head 770 to 8381fcc0 [ 1509.976763][ C0] Added buffer head 769 to 8381fcc0 [ 1509.977308][ C0] eth0: xmit 87179300 52:55:0a:00:02:02 [ 1509.977362][ C0] Added buffer head 40 to 8381fc00 [ 1509.977562][ C0] virtqueue interrupt with no work for 8381fcc0 [ 1509.977602][ C0] virtqueue callback for 8381fc00 (80e1f460) [ 1509.977626][ C0] virtqueue interrupt with no work for 8381fb40 [ 1509.977716][ C0] Sent skb 87179300 [ 1509.977749][ C0] No more buffers in queue [ 1509.984753][T13007] LR is at parport_attach+0x50/0x1e8 [ 1509.985062][T13007] pc : [<814d6a00>] lr : [<814d69f4>] psr: 60000013 [ 1509.985337][T13007] sp : e01b1d30 ip : e01b1d30 fp : e01b1d54 [ 1509.985566][T13007] r10: 82d307a0 r9 : 00000003 r8 : 846000c0 [ 1509.985815][T13007] r7 : e01b1d90 r6 : e01b1d90 r5 : 846000c0 r4 : 00000000 [ 1509.986120][T13007] r3 : fee003c0 r2 : 00000000 r1 : 00000000 r0 : 00000000 [ 1509.986497][T13007] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 1509.986787][T13007] Control: 30c5387d Table: 866bd680 DAC: 00000000 [ 1509.987073][T13007] Register r0 information: NULL pointer [ 1509.987705][T13007] Register r1 information: NULL pointer [ 1509.987920][T13007] Register r2 information: NULL pointer [ 1509.988126][T13007] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 1509.988679][T13007] Register r4 information: NULL pointer [ 1509.988896][T13007] Register r5 information: slab kmalloc-192 start 846000c0 pointer offset 0 size 192 [ 1509.989771][T13007] Register r6 information: 2-page vmalloc region starting at 0xe01b0000 allocated at kernel_clone+0xc4/0x440 [ 1509.990221][T13007] Register r7 information: 2-page vmalloc region starting at 0xe01b0000 allocated at kernel_clone+0xc4/0x440 [ 1509.990627][T13007] Register r8 information: slab kmalloc-192 start 846000c0 pointer offset 0 size 192 [ 1509.991013][T13007] Register r9 information: non-paged memory [ 1509.991274][T13007] Register r10 information: non-slab/vmalloc memory [ 1509.991581][T13007] Register r11 information: 2-page vmalloc region starting at 0xe01b0000 allocated at kernel_clone+0xc4/0x440 [ 1509.991962][T13007] Register r12 information: 2-page vmalloc region starting at 0xe01b0000 allocated at kernel_clone+0xc4/0x440 [ 1509.992385][T13007] Process syz.2.1637 (pid: 13007, stack limit = 0xe01b0000) [ 1509.992670][T13007] Stack: (0xe01b1d30 to 0xe01b2000) [ 1509.992873][T13007] 1d20: ffffffff 00000004 82bd8280 81e32f28 [ 1509.993178][T13007] 1d40: 00000000 e01b1d90 e01b1d8c e01b1d58 814d2690 814d69b0 40946400 00000000 [ 1509.993464][T13007] 1d60: e01b1d7c 20000080 846000c0 b5403587 40946400 00000001 00000003 8319d780 [ 1509.993748][T13007] 1d80: e01b1e4c e01b1d90 814cde94 814d2594 656d6f63 705f6964 6f707261 00007472 [ 1509.994021][T13007] 1da0: 00000000 000003c0 00000010 00010000 00240004 14000000 0003cffd fffffffc [ 1509.994350][T13007] 1dc0: 00002f00 00000003 00000003 00000003 00010000 000003fc 00000000 00000005 [ 1509.994692][T13007] 1de0: 00004100 00000009 00000005 00000007 00000001 000000a2 00000002 0000008f [ 1509.995045][T13007] 1e00: 010000bc 0000aa14 fffffffe 00000008 07fffffe 00000007 00000003 00000b0f [ 1509.995387][T13007] 1e20: 00000000 0b0412c2 00000000 85bf9d80 846000c0 20000080 40946400 00000001 [ 1509.996397][T13007] 1e40: e01b1f14 e01b1e50 814cf1bc 814cddd4 00000000 0b0412c2 00000000 00000000 [ 1510.001582][T13007] 1e60: 8252884c e01b1ea4 0000005f 842b4f18 00000064 846000f0 e01b1ee4 e01b1e88 [ 1510.001999][T13007] 1e80: 80829954 8081fce0 00000064 00000001 00000000 e01b1ea4 86ad1710 8343b220 [ 1510.002338][T13007] 1ea0: 00006400 0000000b e01b1e98 00000000 00000000 0b0412c2 00000000 85bf9d80 [ 1510.002647][T13007] 1ec0: 40946400 20000080 20000080 85bf9d80 00000003 8319d780 e01b1ef4 e01b1ee8 [ 1510.002949][T13007] 1ee0: 80829a88 0b0412c2 e01b1f14 00000000 85bf9d81 40946400 20000080 85bf9d80 [ 1510.003252][T13007] 1f00: 00000003 8319d780 e01b1fa4 e01b1f18 805d160c 814cee74 ecac8b10 8319d780 [ 1510.003553][T13007] 1f20: e01b1f3c e01b1f30 81bacb20 81bac9ec e01b1f54 e01b1f40 8025b9d4 8028f744 [ 1510.003848][T13007] 1f40: e01b1fb0 40000000 e01b1f84 e01b1f58 80221bdc 8025b98c 00000000 82a1a04c [ 1510.004136][T13007] 1f60: e01b1fb0 0013ec60 ecac8b10 80221b30 00000000 0b0412c2 e01b1fac 00000000 [ 1510.004435][T13007] 1f80: 00000000 00356310 00000036 8020029c 8319d780 00000036 00000000 e01b1fa8 [ 1510.004734][T13007] 1fa0: 80200060 805d13d4 00000000 00000000 00000003 40946400 20000080 00000000 [ 1510.005028][T13007] 1fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f430dc [ 1510.005340][T13007] 1fe0: 76f42e88 76f42e78 00019004 00130ac0 60000010 00000003 00000000 00000000 [ 1510.005668][T13007] Call trace: [ 1510.005864][T13007] [<814d69a4>] (parport_attach) from [<814d2690>] (comedi_device_attach+0x108/0x244) [ 1510.006282][T13007] r7:e01b1d90 r6:00000000 r5:81e32f28 r4:82bd8280 [ 1510.006532][T13007] [<814d2588>] (comedi_device_attach) from [<814cde94>] (do_devconfig_ioctl+0xcc/0x218) [ 1510.006894][T13007] r10:8319d780 r9:00000003 r8:00000001 r7:40946400 r6:b5403587 r5:846000c0 [ 1510.007165][T13007] r4:20000080 [ 1510.007313][T13007] [<814cddc8>] (do_devconfig_ioctl) from [<814cf1bc>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 1510.007673][T13007] r8:00000001 r7:40946400 r6:20000080 r5:846000c0 r4:85bf9d80 [ 1510.007917][T13007] [<814cee68>] (comedi_unlocked_ioctl) from [<805d160c>] (sys_ioctl+0x244/0xb5c) [ 1510.008273][T13007] r10:8319d780 r9:00000003 r8:85bf9d80 r7:20000080 r6:40946400 r5:85bf9d81 [ 1510.008550][T13007] r4:00000000 [ 1510.008686][T13007] [<805d13c8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1510.008959][T13007] Exception stack(0xe01b1fa8 to 0xe01b1ff0) [ 1510.009169][T13007] 1fa0: 00000000 00000000 00000003 40946400 20000080 00000000 [ 1510.009481][T13007] 1fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f430dc [ 1510.009897][T13007] 1fe0: 76f42e88 76f42e78 00019004 00130ac0 [ 1510.010279][T13007] r10:00000036 r9:8319d780 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 1510.010608][T13007] r4:00000000 [ 1510.011028][T13007] Code: ebb57c95 e5953064 e7f33053 e2433612 (e5c34000) [ 1510.012423][T13007] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc [ 1510.033482][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 1510.033598][ T28] audit: type=1400 audit(1510.955:1101): avc: denied { read } for pid=2913 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1510.045511][ T3100] eth0: xmit 84fa5940 52:55:0a:00:02:02 [ 1510.045672][ T3100] Added buffer head 40 to 8381fc00 [ 1510.046158][ C0] virtqueue callback for 8381fcc0 (80e1cec8) [ 1510.046408][ C0] virtqueue callback for 8381fc00 (80e1f460) [ 1510.046455][ C0] virtqueue interrupt with no work for 8381fb40 [ 1510.046622][ C0] Sent skb 84fa5940 [ 1510.046677][ C0] No more buffers in queue [ 1510.046788][ C0] Receiving skb proto 0x0800 len 46 type 0 [ 1510.046858][ C0] No more buffers in queue [ 1510.047227][ C0] No more buffers in queue [ 1510.063682][ T28] audit: type=1400 audit(1510.975:1102): avc: denied { search } for pid=2913 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1510.063852][ T28] audit: type=1400 audit(1510.975:1103): avc: denied { write search } for pid=2913 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1510.063902][ T28] audit: type=1400 audit(1510.975:1104): avc: denied { add_name } for pid=2913 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1510.063946][ T28] audit: type=1400 audit(1510.975:1105): avc: denied { create } for pid=2913 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1510.063992][ T28] audit: type=1400 audit(1510.975:1106): avc: denied { append open } for pid=2913 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1510.064035][ T28] audit: type=1400 audit(1510.975:1107): avc: denied { getattr } for pid=2913 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1510.082469][ T3100] eth0: xmit 84eca600 52:55:0a:00:02:02 [ 1510.082638][ T3100] Added buffer head 40 to 8381fc00 [ 1510.083021][ C0] virtqueue callback for 8381fcc0 (80e1cec8) [ 1510.083184][ C0] virtqueue callback for 8381fc00 (80e1f460) [ 1510.083222][ C0] virtqueue interrupt with no work for 8381fb40 [ 1510.083313][ C0] Sent skb 84eca600 [ 1510.083364][ C0] No more buffers in queue [ 1510.083478][ C0] Receiving skb proto 0x0800 len 46 type 0 [ 1510.083583][ C0] Receiving skb proto 0x0800 len 76 type 0 [ 1510.083634][ C0] No more buffers in queue [ 1510.084464][ C0] eth0: xmit 833e2900 52:55:0a:00:02:02 [ 1510.084579][ C0] Added buffer head 40 to 8381fc00 [ 1510.084735][ C0] No more buffers in queue [ 1510.084794][ C0] Sent skb 833e2900 [ 1510.084842][ C0] No more buffers in queue [ 1510.175335][T13007] Kernel panic - not syncing: Fatal exception [ 1510.177656][T13007] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:35:44 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=8230878c R02=00000100 R03=81bad3e0 R04=00000006 R05=82af5288 R06=dddc6415 R07=82af5280 R08=83189900 R09=82af5288 R10=00000000 R11=df801a14 R12=df801a18 R13=df801a08 R14=8034cb64 R15=81bad3f0 PSR=800f0193 N--- A S svc32 s00=696c6573 s01=0078756e d00=0078756e696c6573 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=84804840 R01=00000039 R02=eb17f000 R03=eb17f018 R04=84833007 R05=84804840 R06=80b32ee0 R07=8483302f R08=00000000 R09=00000000 R10=0002e4dd R11=e01b1984 R12=00000002 R13=e01b1978 R14=82b5bab4 R15=80b32ef0 PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000