last executing test programs: 37m56.967611612s ago: executing program 0 (id=26): r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, 0x0) unshare(0x60000600) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 37m56.050133409s ago: executing program 0 (id=27): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000180)=@req={0x28, &(0x7f00000000c0)={'veth0_to_bond\x00', @ifru_flags=0x2}}) 37m55.930648s ago: executing program 0 (id=28): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x401, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0x4}, {0xe, 0x6}, {0x5, 0xf}}}, 0x24}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0xc, @remote, 0x9}, 0x1c) sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c05c}}], 0x1, 0x2000c080) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 37m55.805847671s ago: executing program 0 (id=29): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x2710, @host}, 0x10) 37m55.678116202s ago: executing program 0 (id=30): write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/lo/ifindex\x00', 0x0, 0x0) read(r0, &(0x7f0000000500)=""/100, 0x64) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x4000014, 0x0, 0x0) 37m55.556879353s ago: executing program 0 (id=31): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) listen(r1, 0xfffffffe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x5, 0xd, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, 0x20, 0x8, 0x68, 0x83}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', r6, 0x29, 0xe, 0x2, 0x177, 0x4a, @loopback, @private0, 0x10, 0x80, 0x4, 0x1}}) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) sendto$unix(r0, 0x0, 0x0, 0x40000, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r7 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x5, 0x9}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r7, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe8000000000000000000000000000aab0000280090001800c0000000000000008000000000000001b000000000000000800000000000000080000000000000018000280140001800900", @ANYRES16=r7], 0xec}}, 0xc804) 37m9.716118414s ago: executing program 32 (id=31): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) listen(r1, 0xfffffffe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x5, 0xd, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, 0x20, 0x8, 0x68, 0x83}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', r6, 0x29, 0xe, 0x2, 0x177, 0x4a, @loopback, @private0, 0x10, 0x80, 0x4, 0x1}}) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) sendto$unix(r0, 0x0, 0x0, 0x40000, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r7 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x5, 0x9}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r7, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe8000000000000000000000000000aab0000280090001800c0000000000000008000000000000001b000000000000000800000000000000080000000000000018000280140001800900", @ANYRES16=r7], 0xec}}, 0xc804) 36m40.995077691s ago: executing program 2 (id=109): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@local=@item_012={0x2, 0x2, 0x9819c7b9f6db0723, "e58d"}, @global=@item_4={0x3, 0x1, 0x5, "a8915b16"}, @local=@item_4={0x3, 0x2, 0x8, "dc29d297"}, @local=@item_012={0x2, 0x2, 0x3, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0xb, "cdd9add1"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @global=@item_012={0x0, 0x1, 0x6}]}}, 0x0}, 0x0) 36m40.527272915s ago: executing program 2 (id=110): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000001c0)={{0x1, 0x1, 0xe6}, 0x4, 0x5}) 36m40.286515916s ago: executing program 2 (id=111): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="5435c66fe528301eae76ebf92a3bbc244e"], 0x6e) 36m39.81821187s ago: executing program 2 (id=114): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x87) fchdir(r1) fspick(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) 36m36.678008022s ago: executing program 2 (id=120): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e0494993cfc0000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000094231306e53f070c0000002a9000070d00be0083"], 0x0}, 0x0) syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0) clock_getres(0x2, &(0x7f0000000100)) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000004c0)=""/4096) 36m35.997833788s ago: executing program 2 (id=122): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0xd, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x4e, 0xf}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x4e22, 0x5, @private2, 0x3ff}}]}, 0x50}, 0x1, 0x7}, 0x0) inotify_init1(0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffffffffffc2, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount$bind(0x0, &(0x7f0000000100)='./cgroup\x00', 0x0, 0x210ccff, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x40000000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @ptr, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x3e}, 0x20) 36m34.109077041s ago: executing program 1 (id=125): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x48, 0x0, &(0x7f0000000100)) 36m33.908693412s ago: executing program 1 (id=126): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d"], 0x0}, 0x94) 36m33.099437668s ago: executing program 1 (id=127): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x40, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001f00)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=""/4096, 0x1000, 0x1, &(0x7f0000001ec0)=""/41, 0x29}, &(0x7f0000001f40)=0x40) 36m30.507496206s ago: executing program 1 (id=128): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) accept(r0, &(0x7f0000000100)=@isdn, &(0x7f0000000180)=0x80) 36m30.237810438s ago: executing program 1 (id=129): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') lseek(r0, 0x9, 0x1) 36m30.06841194s ago: executing program 1 (id=130): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0xff7ffffc, 0x4) 35m50.9286409s ago: executing program 33 (id=122): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0xd, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x4e, 0xf}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x4e22, 0x5, @private2, 0x3ff}}]}, 0x50}, 0x1, 0x7}, 0x0) inotify_init1(0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffffffffffc2, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount$bind(0x0, &(0x7f0000000100)='./cgroup\x00', 0x0, 0x210ccff, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x40000000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @ptr, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x3e}, 0x20) 35m44.819047565s ago: executing program 34 (id=130): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0xff7ffffc, 0x4) 33m58.208813631s ago: executing program 4 (id=316): preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000140)=""/157, 0x9d}], 0x1, 0x4, 0x3ff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c800, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000032e, 0x0, 0x40, 0x1) 33m58.028340632s ago: executing program 4 (id=319): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='ramfs\x00', &(0x7f0000000040)='),:\x00', 0x0) 33m57.918392803s ago: executing program 4 (id=320): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x20000, 0x0) pread64(r0, &(0x7f0000007cc0)=""/172, 0xac, 0x5) 33m57.797608014s ago: executing program 4 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) 33m57.633774555s ago: executing program 4 (id=326): r0 = io_uring_setup(0x7e98, &(0x7f0000000000)={0x0, 0x87b8, 0x2, 0x3, 0x20e}) io_uring_enter(r0, 0x7270, 0xfc28, 0xc9, 0x0, 0x0) 33m57.237867938s ago: executing program 4 (id=330): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='hfs\x00', 0x0, r0) 33m57.237725728s ago: executing program 35 (id=330): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='hfs\x00', 0x0, r0) 30m38.358919613s ago: executing program 5 (id=728): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/array_size\x00', 0x1, 0x0) lstat(&(0x7f0000000000)='./sys/block/md0/md/array_size\x00', &(0x7f0000000140)) write(r0, &(0x7f0000000100)="31301d", 0x3) 30m37.597330878s ago: executing program 5 (id=730): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x9e}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) 30m36.747145544s ago: executing program 5 (id=731): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010000}, 0x0) r0 = open(&(0x7f0000000080)='./file1\x00', 0x167842, 0x1d5) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x24000}], 0x14, 0x7000, 0x0, 0x3) 30m36.320902088s ago: executing program 5 (id=732): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="fc93603adc"], 0x4) 30m35.773085542s ago: executing program 5 (id=733): setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 30m35.319790755s ago: executing program 5 (id=734): unshare(0x28000600) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) 29m50.168769031s ago: executing program 36 (id=734): unshare(0x28000600) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) 27m9.138079044s ago: executing program 3 (id=997): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x82, 0x180) write(r0, &(0x7f0000000300)='*ub:*', 0x5) 27m9.008038824s ago: executing program 3 (id=998): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$kcm(0x10, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz1\x00'}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() 27m2.397800602s ago: executing program 3 (id=999): openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 27m1.709579857s ago: executing program 3 (id=1002): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x66, 0xf31, 0xfffffff9, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff2, 0xffff}, {0x0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 27m1.419139529s ago: executing program 3 (id=1003): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$kcm(0x10, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz1\x00'}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() 26m55.029029866s ago: executing program 3 (id=1004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x8, 0x240000b4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) 26m9.864190251s ago: executing program 37 (id=1004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x8, 0x240000b4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) 7m25.196895499s ago: executing program 6 (id=2499): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, 0x0, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x164) write(r1, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') 7m25.04848411s ago: executing program 6 (id=2500): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x14, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4044084) 7m24.928703291s ago: executing program 6 (id=2502): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0xfffc, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x80257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x1, 0x2, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x81d17, 0x8200, 0x2, 0x367, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff968}, 0x94) 7m23.520346772s ago: executing program 6 (id=2509): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8a101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x33e7cc3, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 7m23.299235944s ago: executing program 6 (id=2511): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'dt2801\x00', [0x3c4, 0x14, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x8000, 0x8, 0x723, 0x30, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x200, 0x1, 0xd, 0x9, 0x200, 0xe2e0, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) 7m23.157214105s ago: executing program 6 (id=2512): unshare(0x22020400) r0 = socket(0x2b, 0x80801, 0x1) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x1, {0x2, 0x0, 0x2}, 0xaff2834089b449d7}, 0x18) 7m23.157012965s ago: executing program 38 (id=2512): unshare(0x22020400) r0 = socket(0x2b, 0x80801, 0x1) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x1, {0x2, 0x0, 0x2}, 0xaff2834089b449d7}, 0x18) 14.179271446s ago: executing program 7 (id=2969): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) bind(r0, 0x0, 0x0) 14.040482578s ago: executing program 7 (id=2970): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="090000001400000008000000baab000042"], 0x50) 13.900335839s ago: executing program 7 (id=2971): socket$inet6(0xa, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x2281, @empty}, 0x10) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) 3.738749s ago: executing program 7 (id=2979): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f00000002c0)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000003c0)=0x80000000) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0x1118, 0x2, 0x3, 0x800000c5}, 0x0, &(0x7f0000000540)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(0x0, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, &(0x7f0000000340)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000000)) 1.28586523s ago: executing program 8 (id=2980): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.178350521s ago: executing program 8 (id=2981): r0 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xc3) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xe2) keyctl$set_timeout(0xf, r0, 0x9) 1.17810615s ago: executing program 7 (id=2982): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000300)="fe8890", 0x3}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) 1.097639041s ago: executing program 8 (id=2983): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a37055437", 0x1f) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000023c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.036258972s ago: executing program 7 (id=2984): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) close(0x3) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000940)="350ed1871726b5ad4f44da88d4e6d6b1f17217c38a3418909a508cec60ec73e2ab286245ded56fd4bb93db8cef041ac8901cf7fa0171bc6c8778368c89776f4a0bb5446d423e805f9626dfd56a936915f5b671523b633ec3be455e31904a4d4bf66fe47a151ac5d3f27e6652cade7078194ce7dcdf18081557b930dcbcd11dddb73025102dca2baef0fb96fc6ce652ec419dbf21c2f339f1565073f97d7839dffd2ab6c5165a0c19268fd0339ea230703346ddf0c71ca2112ecbb107ab6c5fe95fa98a5b8a", 0xc5}], 0x1}}], 0x1, 0x8081) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) close(0x3) 1.036091922s ago: executing program 8 (id=2985): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x264, 0x23b) 667.263014ms ago: executing program 8 (id=2986): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd29, 0x25dfcbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4048004) 0s ago: executing program 8 (id=2987): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000280)={'8255\x00', [0x4, 0x4, 0x4004, 0x8000, 0xffff, 0x178, 0x4c6b9, 0x8, 0x54c6cff3, 0xfa, 0x5, 0x3, 0x8, 0x400001, 0x10000006, 0x20400, 0x9, 0x7b, 0x3, 0x40000003, 0x0, 0x44, 0x3, 0x0, 0x80003, 0xe69, 0x0, 0x8001, 0x4006, 0x401]}) kernel console output (not intermixed with test programs): yz.7.1748': attribute type 1 has an invalid length. [ 1294.720694][T13726] C: renamed from batadv_slave_0 (while UP) [ 1294.726119][T13726] netlink: 'syz.7.1750': attribute type 1 has an invalid length. [ 1294.830047][T13726] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1750'. [ 1294.830543][T13726] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1308.447682][ T28] audit: type=1400 audit(1308.370:728): avc: denied { ioctl } for pid=13787 comm="syz.6.1772" path="socket:[24479]" dev="sockfs" ino=24479 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1315.349180][T13821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.379663][T13821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.555820][ T28] audit: type=1400 audit(1315.480:729): avc: denied { write } for pid=13819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1315.966321][ T28] audit: type=1400 audit(1315.890:730): avc: denied { write } for pid=13826 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1331.036349][T13877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.037283][T13877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.335873][T13886] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1796'. [ 1332.341394][T13898] FAULT_INJECTION: forcing a failure. [ 1332.341394][T13898] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.341738][T13898] CPU: 1 UID: 0 PID: 13898 Comm: syz.6.1801 Not tainted syzkaller #0 PREEMPT [ 1332.341795][T13898] Hardware name: ARM-Versatile Express [ 1332.341848][T13898] Call trace: [ 1332.341891][T13898] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1332.342045][T13898] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1332.342146][T13898] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1332.342227][T13898] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1332.342327][T13898] r7:84800000 r6:00000000 r5:84800000 r4:82b1ac48 [ 1332.342497][T13898] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1332.342586][T13898] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1332.342663][T13898] r8:00000000 r7:84800000 r6:80618d88 r5:00000dc0 r4:83002c00 [ 1332.342684][T13898] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 1332.342747][T13898] [<80546804>] (kmem_cache_alloc_noprof) from [<80618d88>] (do_epoll_ctl_file+0x224/0xc58) [ 1332.342816][T13898] r10:82a0b770 r9:00000000 r8:81c28128 r7:00000000 r6:869cb180 r5:e034df2c [ 1332.342882][T13898] r4:856c7700 [ 1332.342936][T13898] [<80618b64>] (do_epoll_ctl_file) from [<80619834>] (do_epoll_ctl+0x78/0xdc) [ 1332.343051][T13898] r10:000000fb r9:00000000 r8:856c9b81 r7:856c7701 r6:e034df68 r5:856c9b80 [ 1332.343148][T13898] r4:00000005 [ 1332.343219][T13898] [<806197bc>] (do_epoll_ctl) from [<8061994c>] (sys_epoll_ctl+0xb4/0x108) [ 1332.343317][T13898] r9:84800000 r8:b5403587 r7:00000004 r6:00000005 r5:20000200 r4:00000001 [ 1332.343355][T13898] [<80619898>] (sys_epoll_ctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1332.343530][T13898] Exception stack(0xe034dfa8 to 0xe034dff0) [ 1332.343602][T13898] dfa0: 00000000 00000000 00000004 00000001 00000005 20000200 [ 1332.343683][T13898] dfc0: 00000000 00000000 00356314 000000fb 003562d8 00000000 00000001 76f730dc [ 1332.343717][T13898] dfe0: 76f72e88 76f72e78 00018fa0 00130a50 [ 1332.343818][T13898] r8:8020029c r7:000000fb r6:00356314 r5:00000000 r4:00000000 [ 1340.060350][T13906] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1349.021501][T13934] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1811'. [ 1353.980185][T13927] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1354.110113][ T28] audit: type=1400 audit(1354.030:731): avc: denied { connect } for pid=13944 comm="syz.6.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1354.132525][T13947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.136215][T13947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.568016][T13946] input: syz1 as /devices/virtual/input/input5 [ 1354.845875][T13963] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1816'. [ 1355.426891][ T28] audit: type=1400 audit(1355.350:732): avc: denied { map } for pid=13962 comm="syz.6.1816" path="socket:[25677]" dev="sockfs" ino=25677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1356.334996][T13971] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1356.336507][T13971] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1356.350237][ T28] audit: type=1400 audit(1356.270:733): avc: denied { firmware_load } for pid=13968 comm="syz.7.1818" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1356.355847][T13971] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1359.892078][T13988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.894065][T13988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.982833][T14035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.985384][T14035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.045461][ T28] audit: type=1400 audit(1382.970:734): avc: denied { write } for pid=14063 comm="syz.6.1848" name="nullb" dev="configfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1384.447472][T14080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.448326][T14080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.017389][T14093] ubi10: attaching mtd0 [ 1386.057928][T14093] ubi10: scanning is finished [ 1386.083598][T14093] ubi10 error: ubi_read_volume_table: the layout volume was not found [ 1386.140822][T14093] ubi10 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1404.601358][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1872'. [ 1412.182863][T14173] gadgetfs: bound to dummy_udc driver [ 1412.413155][T14173] gadgetfs: suspended from state 2 [ 1412.431032][ T6034] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1412.465905][ T28] audit: type=1400 audit(1412.390:735): avc: denied { unmount } for pid=9733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1417.968213][T14189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.972858][T14189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.255263][T14197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.256221][T14197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.016352][T14212] comedi: valid board names for 8255 driver are: [ 1430.017635][T14212] 8255 [ 1430.023282][T14212] comedi: valid board names for vmk80xx driver are: [ 1430.026104][T14212] vmk80xx [ 1430.029703][T14212] comedi: valid board names for usbduxsigma driver are: [ 1430.032528][T14212] usbduxsigma [ 1430.700084][T14212] comedi: valid board names for usbduxfast driver are: [ 1430.700473][T14212] usbduxfast [ 1430.700619][T14212] comedi: valid board names for usbdux driver are: [ 1430.700765][T14212] usbdux [ 1430.700903][T14212] comedi: valid board names for ni6501 driver are: [ 1430.701037][T14212] ni6501 [ 1430.701174][T14212] comedi: valid board names for dt9812 driver are: [ 1430.701315][T14212] dt9812 [ 1430.701453][T14212] comedi: valid board names for ni_labpc_cs driver are: [ 1430.701588][T14212] ni_labpc_cs [ 1430.701717][T14212] comedi: valid board names for ni_daq_700 driver are: [ 1430.701884][T14212] ni_daq_700 [ 1430.702021][T14212] comedi: valid board names for labpc_pci driver are: [ 1430.702153][T14212] labpc_pci [ 1430.702285][T14212] comedi: valid board names for adl_pci9118 driver are: [ 1430.702433][T14212] pci9118dg [ 1430.702612][T14212] pci9118hg [ 1430.702754][T14212] pci9118hr [ 1430.702897][T14212] comedi: valid board names for 8255_pci driver are: [ 1430.703034][T14212] 8255_pci [ 1430.703166][T14212] comedi: valid board names for comedi_parport driver are: [ 1430.703305][T14212] comedi_parport [ 1430.703441][T14212] comedi: valid board names for comedi_test driver are: [ 1430.703583][T14212] comedi_test [ 1430.703752][T14212] comedi: valid board names for comedi_bond driver are: [ 1430.703892][T14212] comedi_bond [ 1443.556603][ T28] audit: type=1400 audit(1443.480:736): avc: denied { accept } for pid=14237 comm="syz.7.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1461.432383][T14262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.435710][T14262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.340568][T14271] FAULT_INJECTION: forcing a failure. [ 1462.340568][T14271] name failslab, interval 1, probability 0, space 0, times 0 [ 1462.342344][T14271] CPU: 0 UID: 0 PID: 14271 Comm: syz.7.1910 Not tainted syzkaller #0 PREEMPT [ 1462.342463][T14271] Hardware name: ARM-Versatile Express [ 1462.342491][T14271] Call trace: [ 1462.342536][T14271] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1462.342642][T14271] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1462.342664][T14271] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1462.342722][T14271] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1462.342785][T14271] r7:000000c8 r6:00000000 r5:847d24c0 r4:82b1ac48 [ 1462.342806][T14271] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1462.342865][T14271] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1462.342938][T14271] r8:847d24c0 r7:000000c8 r6:8030430c r5:00000dc0 r4:830013c0 [ 1462.342959][T14271] [<80568de8>] (should_failslab) from [<805488cc>] (__kmalloc_cache_noprof+0x58/0x338) [ 1462.343016][T14271] [<80548874>] (__kmalloc_cache_noprof) from [<8030430c>] (init_srcu_struct_fields+0x2a8/0x334) [ 1462.343092][T14271] r10:847d24c0 r9:82a0b2d4 r8:856c9980 r7:85a8c52c r6:00000000 r5:07000000 [ 1462.343116][T14271] r4:85a8c4bc [ 1462.343133][T14271] [<80304064>] (init_srcu_struct_fields) from [<803043b0>] (init_srcu_struct+0x18/0x1c) [ 1462.343205][T14271] r10:847d24c0 r9:82a0b2d4 r8:856c9980 r7:85a8c52c r6:07000000 r5:07000000 [ 1462.343227][T14271] r4:85a8c4bc [ 1462.343242][T14271] [<80304398>] (init_srcu_struct) from [<808bdc1c>] (blk_mq_alloc_tag_set+0xd8/0x3f8) [ 1462.343316][T14271] [<808bdb44>] (blk_mq_alloc_tag_set) from [<80c141bc>] (loop_add+0x128/0x2fc) [ 1462.343393][T14271] r10:847d24c0 r9:85a8c4bc r8:856c9980 r7:82d27660 r6:07000000 r5:07000000 [ 1462.343417][T14271] r4:85a8c400 r3:00000044 [ 1462.343436][T14271] [<80c14094>] (loop_add) from [<80c15b64>] (loop_control_ioctl+0x58/0x230) [ 1462.343503][T14271] r9:00000004 r8:856c9980 r7:07000000 r6:00004c80 r5:07000000 r4:00000000 [ 1462.343521][T14271] [<80c15b0c>] (loop_control_ioctl) from [<805bdf78>] (sys_ioctl+0x244/0xb5c) [ 1462.343590][T14271] r6:00004c80 r5:856c9981 r4:00000000 [ 1462.343611][T14271] [<805bdd34>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1462.343661][T14271] Exception stack(0xdfa71fa8 to 0xdfa71ff0) [ 1462.343700][T14271] 1fa0: 00000000 00000000 00000004 00004c80 07000000 00000000 [ 1462.343733][T14271] 1fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f0b0dc [ 1462.343758][T14271] 1fe0: 76f0ae88 76f0ae78 00018fa0 00130a50 [ 1462.343792][T14271] r10:00000036 r9:847d24c0 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 1462.343812][T14271] r4:00000000 [ 1464.636041][T14283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.651401][T14283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.187477][T14283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.191475][T14283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.670100][T14297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.681730][T14297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.536515][ T6034] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1474.563996][ T6034] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1484.394193][ T28] audit: type=1400 audit(1484.320:737): avc: denied { create } for pid=14332 comm="syz.6.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1484.408757][ T28] audit: type=1400 audit(1484.330:738): avc: denied { sys_admin } for pid=14332 comm="syz.6.1928" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1486.763913][T14338] FAULT_INJECTION: forcing a failure. [ 1486.763913][T14338] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.765476][T14338] CPU: 0 UID: 0 PID: 14338 Comm: syz.7.1929 Not tainted syzkaller #0 PREEMPT [ 1486.766626][T14338] Hardware name: ARM-Versatile Express [ 1486.768031][T14338] Call trace: [ 1486.768939][T14338] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1486.769111][T14338] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1486.769133][T14338] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1486.769189][T14338] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1486.769245][T14338] r7:0000001c r6:00000000 r5:86a33d40 r4:82b1ac48 [ 1486.769262][T14338] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1486.769323][T14338] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1486.769484][T14338] r8:86a33d40 r7:0000001c r6:80935300 r5:00000dc0 r4:83001240 [ 1486.769508][T14338] [<80568de8>] (should_failslab) from [<805488cc>] (__kmalloc_cache_noprof+0x58/0x338) [ 1486.769568][T14338] [<80548874>] (__kmalloc_cache_noprof) from [<80935300>] (percpu_ref_init+0x68/0x108) [ 1486.769634][T14338] r10:82b22658 r9:86a33d40 r8:8254352c r7:8061de1c r6:00000000 r5:8658e8cc [ 1486.769655][T14338] r4:00000cc0 [ 1486.769673][T14338] [<80935298>] (percpu_ref_init) from [<8061fe94>] (sys_io_setup+0x1a4/0xb14) [ 1486.769736][T14338] r7:20000040 r6:00008001 r5:8658e8c0 r4:8658e9c0 [ 1486.769754][T14338] [<8061fcf0>] (sys_io_setup) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1486.769804][T14338] Exception stack(0xdf9a1fa8 to 0xdf9a1ff0) [ 1486.769878][T14338] 1fa0: 00000000 00000000 00008001 20000040 00000000 00000000 [ 1486.769917][T14338] 1fc0: 00000000 00000000 0035630c 000000f3 003562d8 00000000 00000001 76f0b0dc [ 1486.769948][T14338] 1fe0: 76f0ae88 76f0ae78 00018fa0 00130a50 [ 1486.769987][T14338] r10:000000f3 r9:86a33d40 r8:8020029c r7:000000f3 r6:0035630c r5:00000000 [ 1486.770008][T14338] r4:00000000 [ 1495.544479][T14367] netlink: 'syz.6.1939': attribute type 1 has an invalid length. [ 1495.544954][T14367] netlink: 'syz.6.1939': attribute type 3 has an invalid length. [ 1495.547452][T14367] [U]  [ 1499.902008][T14395] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1509.625046][T14409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1509.626077][T14409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1524.887244][T14437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1524.920116][T14437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1527.202511][ T28] audit: type=1400 audit(1527.100:739): avc: denied { bind } for pid=14449 comm="syz.7.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1529.594215][ T28] audit: type=1400 audit(1529.520:740): avc: denied { listen } for pid=14455 comm="syz.7.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1529.622751][ T28] audit: type=1400 audit(1529.550:741): avc: denied { setopt } for pid=14455 comm="syz.7.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1531.121024][T14465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1531.122716][T14465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.383247][ T28] audit: type=1400 audit(1532.310:742): avc: denied { create } for pid=14473 comm="syz.7.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1537.412883][T14492] input: syz0 as /devices/virtual/input/input6 [ 1538.443145][T14501] FAULT_INJECTION: forcing a failure. [ 1538.443145][T14501] name failslab, interval 1, probability 0, space 0, times 0 [ 1538.459756][T14501] CPU: 0 UID: 0 PID: 14501 Comm: syz.7.1982 Not tainted syzkaller #0 PREEMPT [ 1538.459923][T14501] Hardware name: ARM-Versatile Express [ 1538.459955][T14501] Call trace: [ 1538.460005][T14501] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1538.460115][T14501] r7:60000113 r6:60000113 r5:82336570 r4:00000000 [ 1538.460160][T14501] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1538.460223][T14501] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1538.460286][T14501] r7:00000034 r6:00000000 r5:847d24c0 r4:82b1ac48 [ 1538.460309][T14501] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1538.460383][T14501] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1538.460455][T14501] r8:847d24c0 r7:00000034 r6:80271590 r5:00000dc0 r4:83001240 [ 1538.460476][T14501] [<80568de8>] (should_failslab) from [<805488cc>] (__kmalloc_cache_noprof+0x58/0x338) [ 1538.460540][T14501] [<80548874>] (__kmalloc_cache_noprof) from [<80271590>] (call_usermodehelper_setup+0x48/0xb8) [ 1538.462397][T14501] r10:85d9c310 r9:84180a00 r8:82af7338 r7:82af7338 r6:864585c0 r5:82af7464 [ 1538.464267][T14501] r4:864585c0 [ 1538.464986][T14501] [<80271548>] (call_usermodehelper_setup) from [<80326750>] (__request_module+0x150/0x2e4) [ 1538.468870][T14501] r7:808a45f4 r6:85e3a880 r5:00000002 r4:864585c0 [ 1538.468937][T14501] [<80326600>] (__request_module) from [<808a45f4>] (elv_iosched_store+0x1bc/0x1ec) [ 1538.469041][T14501] r3:00000000 r2:df9a5d54 r1:8238c318 [ 1538.469072][T14501] r8:00000000 r7:84181abc r6:8417a720 r5:00000002 r4:df9a5d54 [ 1538.469090][T14501] [<808a4438>] (elv_iosched_store) from [<808ab5b8>] (queue_attr_store+0xd4/0xf4) [ 1538.469160][T14501] r8:84180af4 r7:85ad7080 r6:85ad7080 r5:00000002 r4:81cf4040 [ 1538.469179][T14501] [<808ab4e4>] (queue_attr_store) from [<8067e3b4>] (sysfs_kf_write+0x70/0x7c) [ 1538.469247][T14501] r9:00000000 r8:84180af4 r7:85ad7080 r6:81cf3b9c r5:808ab4e4 r4:00000002 [ 1538.469266][T14501] [<8067e344>] (sysfs_kf_write) from [<8067c450>] (kernfs_fop_write_iter+0x134/0x214) [ 1538.469393][T14501] r9:00000000 r8:00000000 r7:df9a5f08 r6:85d9c300 r5:00000002 r4:85ad7080 [ 1538.469415][T14501] [<8067c31c>] (kernfs_fop_write_iter) from [<805a1390>] (vfs_write+0x27c/0x42c) [ 1538.469486][T14501] r10:81c2d60c r9:847d24c0 r8:8067c31c r7:df9a5f68 r6:20000300 r5:85d01880 [ 1538.469508][T14501] r4:00000002 [ 1538.469525][T14501] [<805a1114>] (vfs_write) from [<805a16b4>] (ksys_write+0x74/0xec) [ 1538.469594][T14501] r10:00000004 r9:847d24c0 r8:8020029c r7:00000000 r6:00000000 r5:85d01880 [ 1538.469615][T14501] r4:85d01883 [ 1538.469632][T14501] [<805a1640>] (ksys_write) from [<805a173c>] (sys_write+0x10/0x14) [ 1538.469696][T14501] r7:00000004 r6:00356310 r5:00000000 r4:00000000 [ 1538.469713][T14501] [<805a172c>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1538.469768][T14501] Exception stack(0xdf9a5fa8 to 0xdf9a5ff0) [ 1538.469834][T14501] 5fa0: 00000000 00000000 00000003 20000300 00000002 00000000 [ 1538.469880][T14501] 5fc0: 00000000 00000000 00356310 00000004 003562d8 00000000 00000001 76f0b0dc [ 1538.469911][T14501] 5fe0: 76f0ae88 76f0ae78 00018fa0 00130a50 [ 1540.090439][T14506] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1984'. [ 1541.872135][T10978] cgroup: fork rejected by pids controller in /syz7 [ 1542.087937][ T37] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.460776][ T37] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.548866][ T37] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.641714][ T37] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.510660][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1543.713548][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1543.835395][ T37] bond0 (unregistering): Released all slaves [ 1544.089794][ T37] hsr_slave_0: left promiscuous mode [ 1544.375234][ T37] veth1_macvtap: left promiscuous mode [ 1544.376435][ T37] veth0_macvtap: left promiscuous mode [ 1544.390575][ T37] veth1_vlan: left promiscuous mode [ 1544.391847][ T37] veth0_vlan: left promiscuous mode [ 1545.742928][T14517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1545.773504][T14517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1546.434625][T14517] hsr_slave_0: entered promiscuous mode [ 1546.450570][T14517] hsr_slave_1: entered promiscuous mode [ 1546.642282][ T28] audit: type=1400 audit(1546.570:743): avc: denied { write } for pid=14675 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1547.552194][ T28] audit: type=1400 audit(1547.470:744): avc: denied { write } for pid=14790 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1547.918437][T14517] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1547.983245][T14517] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1548.103531][T14517] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1548.153009][T14517] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1548.156925][T14517] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1548.182491][T14517] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1548.240000][T14517] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1548.271338][T14517] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1549.154343][T14517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1549.727013][ T28] audit: type=1400 audit(1549.650:745): avc: denied { write } for pid=14821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1549.912795][T14517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1550.447847][ T28] audit: type=1400 audit(1550.370:746): avc: denied { write } for pid=14842 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1550.807928][T14517] veth0_vlan: entered promiscuous mode [ 1550.923804][T14517] veth1_vlan: entered promiscuous mode [ 1551.535910][T14517] veth0_macvtap: entered promiscuous mode [ 1551.575716][T14517] veth1_macvtap: entered promiscuous mode [ 1551.990686][ T7890] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.003601][ T136] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.380117][ T7890] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.400024][ T1497] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.118160][ T28] audit: type=1400 audit(1553.040:747): avc: denied { unmount } for pid=14517 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1553.248437][T14875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.250197][T14875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1555.563502][ T28] audit: type=1400 audit(1555.490:748): avc: denied { connect } for pid=14890 comm="syz.6.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1590.776125][T14949] comedi: valid board names for 8255 driver are: [ 1590.789568][T14949] 8255 [ 1590.793801][T14949] comedi: valid board names for vmk80xx driver are: [ 1590.796787][T14949] vmk80xx [ 1590.800732][T14949] comedi: valid board names for usbduxsigma driver are: [ 1590.808367][T14949] usbduxsigma [ 1590.814359][T14949] comedi: valid board names for usbduxfast driver are: [ 1590.818019][T14949] usbduxfast [ 1590.899777][T14949] comedi: valid board names for usbdux driver are: [ 1590.903702][T14949] usbdux [ 1590.905246][T14949] comedi: valid board names for ni6501 driver are: [ 1590.906791][T14949] ni6501 [ 1590.908153][T14949] comedi: valid board names for dt9812 driver are: [ 1590.910422][T14949] dt9812 [ 1590.914140][T14949] comedi: valid board names for ni_labpc_cs driver are: [ 1590.919526][T14949] ni_labpc_cs [ 1590.921313][T14949] comedi: valid board names for ni_daq_700 driver are: [ 1590.922668][T14949] ni_daq_700 [ 1590.926736][T14949] comedi: valid board names for labpc_pci driver are: [ 1590.930932][T14949] labpc_pci [ 1590.940060][T14949] comedi: valid board names for adl_pci9118 driver are: [ 1590.940501][T14949] pci9118dg [ 1590.940681][T14949] pci9118hg [ 1590.940715][T14949] pci9118hr [ 1590.940731][T14949] comedi: valid board names for 8255_pci driver are: [ 1590.940749][T14949] 8255_pci [ 1590.940814][T14949] comedi: valid board names for comedi_parport driver are: [ 1590.940860][T14949] comedi_parport [ 1590.940877][T14949] comedi: valid board names for comedi_test driver are: [ 1590.940893][T14949] comedi_test [ 1590.940909][T14949] comedi: valid board names for comedi_bond driver are: [ 1590.940924][T14949] comedi_bond [ 1592.202548][T14954] netlink: 'syz.7.2014': attribute type 1 has an invalid length. [ 1594.855445][T14960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1594.858220][T14960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1595.040552][T14964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1595.043922][T14964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1595.148735][ T28] audit: type=1400 audit(1595.070:749): avc: denied { ioctl } for pid=14967 comm="syz.7.2018" path="socket:[27798]" dev="sockfs" ino=27798 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1600.508311][T14978] ip6tnl0: Caught tx_queue_len zero misconfig [ 1600.702926][ T28] audit: type=1400 audit(1600.630:750): avc: denied { create } for pid=14980 comm="syz.6.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1612.292649][ T28] audit: type=1400 audit(1612.220:751): avc: denied { write } for pid=15002 comm="syz.6.2027" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1612.421632][T15005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1612.425452][T15005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1617.720523][T15015] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2032'. [ 1617.825085][T15015] ipvlan2: entered allmulticast mode [ 1617.825589][T15015] syz_tun: entered allmulticast mode [ 1622.237240][ T28] audit: type=1400 audit(1622.160:752): avc: denied { getopt } for pid=15030 comm="syz.7.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1636.227336][ T4130] logitech-hidpp-device 0003:046D:C082.0007: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1636.349506][T15064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1636.352298][T15064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1636.436241][T15068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1636.438701][T15068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1638.990027][T15090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1638.995502][T15090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1639.719546][T15094] .: renamed from bond0 (while UP) [ 1639.720158][T15094] FAULT_INJECTION: forcing a failure. [ 1639.720158][T15094] name failslab, interval 1, probability 0, space 0, times 0 [ 1639.720483][T15094] CPU: 0 UID: 0 PID: 15094 Comm: syz.7.2054 Not tainted syzkaller #0 PREEMPT [ 1639.720571][T15094] Hardware name: ARM-Versatile Express [ 1639.720599][T15094] Call trace: [ 1639.720640][T15094] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1639.720787][T15094] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1639.720808][T15094] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1639.720864][T15094] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1639.720921][T15094] r7:ffffffff r6:00000000 r5:847c24c0 r4:82b1ac48 [ 1639.720938][T15094] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1639.720995][T15094] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1639.721060][T15094] r8:847c24c0 r7:ffffffff r6:83001240 r5:00000cc0 r4:00000003 [ 1639.721077][T15094] [<80568de8>] (should_failslab) from [<80547c00>] (__kmalloc_node_track_caller_noprof+0xac/0x3d8) [ 1639.721136][T15094] [<80547b54>] (__kmalloc_node_track_caller_noprof) from [<804d4e30>] (kstrdup+0x3c/0x60) [ 1639.721210][T15094] r10:8613ff40 r9:8301d9c0 r8:8301da00 r7:85f360d8 r6:804d4e84 r5:00000002 [ 1639.721234][T15094] r4:00000cc0 [ 1639.721250][T15094] [<804d4df4>] (kstrdup) from [<804d4e84>] (kstrdup_const+0x30/0x34) [ 1639.721320][T15094] r7:85e01080 r6:85f360d8 r5:83879160 r4:85fdd4d0 [ 1639.721346][T15094] [<804d4e54>] (kstrdup_const) from [<8067c0a4>] (kernfs_rename_ns+0x1cc/0x2f0) [ 1639.721405][T15094] [<8067bed8>] (kernfs_rename_ns) from [<8067ef4c>] (sysfs_rename_dir_ns+0x38/0x50) [ 1639.721467][T15094] r10:85e01000 r9:838b2d0c r8:85d08fc0 r7:85e01080 r6:85f360d8 r5:85f363f0 [ 1639.721489][T15094] r4:83879160 [ 1639.721506][T15094] [<8067ef14>] (sysfs_rename_dir_ns) from [<81b460fc>] (kobject_rename+0xb8/0x144) [ 1639.721569][T15094] r7:85f360d8 r6:85f5b1c0 r5:85d087c0 r4:85f363f0 [ 1639.721588][T15094] [<81b46044>] (kobject_rename) from [<80bd78fc>] (device_rename+0x9c/0x148) [ 1639.721661][T15094] r9:838b2d0c r8:865f6140 r7:85f360d8 r6:00000000 r5:85f363f0 r4:85f363f0 [ 1639.721683][T15094] [<80bd7860>] (device_rename) from [<8166d840>] (netif_change_name+0x148/0x3d8) [ 1639.721748][T15094] r9:0000102e r8:dfb31edc r7:85f360d8 r6:82e3b534 r5:00000000 r4:85f36000 [ 1639.721765][T15094] [<8166d6f8>] (netif_change_name) from [<81673e1c>] (dev_change_name+0x38/0xa0) [ 1639.721884][T15094] r10:00000023 r9:0000102e r8:81d81288 r7:0000102e r6:dfb31ecc r5:dfb31edc [ 1639.721908][T15094] r4:85f36000 [ 1639.721925][T15094] [<81673de4>] (dev_change_name) from [<816a6948>] (dev_ifsioc+0x43c/0x6d0) [ 1639.721990][T15094] r5:00008923 r4:85f36000 [ 1639.722008][T15094] [<816a650c>] (dev_ifsioc) from [<816a6e54>] (dev_ioctl+0x278/0x468) [ 1639.722078][T15094] r9:0000102e r8:dfb31ecb r7:00000000 r6:85e01000 r5:dfb31ecc r4:00008923 [ 1639.722096][T15094] [<816a6bdc>] (dev_ioctl) from [<816314d8>] (sock_ioctl+0x1cc/0x4c0) [ 1639.722172][T15094] r10:847c24c0 r9:81e72d98 r8:dfb31ecc r7:85e01000 r6:20000040 r5:b5403587 [ 1639.722198][T15094] r4:00008923 r3:0000102e [ 1639.722214][T15094] [<8163130c>] (sock_ioctl) from [<805bdf78>] (sys_ioctl+0x244/0xb5c) [ 1639.722282][T15094] r9:00000005 r8:85d01900 r7:20000040 r6:00008923 r5:85d01901 r4:00000000 [ 1639.722303][T15094] [<805bdd34>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1639.722363][T15094] Exception stack(0xdfb31fa8 to 0xdfb31ff0) [ 1639.722404][T15094] 1fa0: 00000000 00000000 00000005 00008923 20000040 00000000 [ 1639.722438][T15094] 1fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f800dc [ 1639.722467][T15094] 1fe0: 76f7fe88 76f7fe78 00018fa0 00130a50 [ 1639.722537][T15094] r10:00000036 r9:847c24c0 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 1639.722559][T15094] r4:00000000 [ 1641.904143][T15101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1641.905042][T15101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1642.124189][T15101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1642.126780][T15101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1648.440492][T15129] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 1654.137363][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2065'. [ 1664.135574][T15154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1664.154963][T15154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1664.768020][T15154] hsr_slave_0: entered promiscuous mode [ 1664.791848][T15154] hsr_slave_1: entered promiscuous mode [ 1664.804878][T15154] debugfs: 'hsr0' already exists in 'hsr' [ 1664.806734][T15154] Cannot create hsr debugfs directory [ 1665.725585][T15154] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1665.735878][T15154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1665.743305][T15154] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1665.756113][T15154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1665.763567][T15154] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1665.773897][T15154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1665.776742][T15154] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1665.785521][T15154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1666.018156][T15154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1666.488414][T15154] veth0_vlan: entered promiscuous mode [ 1666.511971][T15154] veth1_vlan: entered promiscuous mode [ 1666.597704][T15154] veth0_macvtap: entered promiscuous mode [ 1666.615448][T15154] veth1_macvtap: entered promiscuous mode [ 1666.788290][ T7890] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.811005][ T7890] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.811403][ T7890] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.811820][ T7890] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.556262][ T28] audit: type=1400 audit(1667.480:753): avc: denied { bind } for pid=15486 comm="syz.6.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1671.152411][T15504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1671.153373][T15504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1686.240035][T10184] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.240470][T10184] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.240628][T10184] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.240706][T10184] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.865643][T13751] Process accounting resumed [ 1704.647015][ T28] audit: type=1400 audit(1704.570:754): avc: denied { name_bind } for pid=15578 comm="syz.6.2108" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1708.082023][T15587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1708.085433][T15587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1708.314643][T15591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1708.318191][T15591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1712.512881][T15613] syzkaller0: entered promiscuous mode [ 1712.513201][T15613] syzkaller0: entered allmulticast mode [ 1714.311880][T15625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1714.313957][T15625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1714.447962][ T28] audit: type=1326 audit(1714.370:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15628 comm="syz.7.2123" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1714.461329][ T28] audit: type=1326 audit(1714.390:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15628 comm="syz.7.2123" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1714.461874][ T28] audit: type=1326 audit(1714.390:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15628 comm="syz.7.2123" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1714.462232][ T28] audit: type=1326 audit(1714.390:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15628 comm="syz.7.2123" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1714.497237][ T28] audit: type=1326 audit(1714.410:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15628 comm="syz.7.2123" exe="/syz-executor" sig=0 arch=40000028 syscall=172 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1714.500677][ T28] audit: type=1326 audit(1714.420:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15628 comm="syz.7.2123" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1714.505617][ T28] audit: type=1326 audit(1714.420:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15628 comm="syz.7.2123" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1727.459407][ T28] audit: type=1800 audit(1727.380:762): pid=15647 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2130" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1733.774471][ T28] audit: type=1400 audit(1733.680:763): avc: denied { map } for pid=15663 comm="syz.7.2136" path="socket:[29611]" dev="sockfs" ino=29611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1740.735750][ T28] audit: type=1326 audit(1740.660:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15676 comm="syz.6.2142" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1740.736377][ T28] audit: type=1326 audit(1740.660:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15676 comm="syz.6.2142" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1740.736761][ T28] audit: type=1326 audit(1740.660:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15676 comm="syz.6.2142" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1740.736837][ T28] audit: type=1326 audit(1740.660:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15676 comm="syz.6.2142" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1740.736879][ T28] audit: type=1326 audit(1740.660:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15676 comm="syz.6.2142" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1740.740122][ T28] audit: type=1326 audit(1740.660:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15676 comm="syz.6.2142" exe="/syz-executor" sig=0 arch=40000028 syscall=54 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1740.740246][ T28] audit: type=1326 audit(1740.660:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15676 comm="syz.6.2142" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1740.740292][ T28] audit: type=1326 audit(1740.660:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15676 comm="syz.6.2142" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1740.751917][ T28] audit: type=1326 audit(1740.680:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15676 comm="syz.6.2142" exe="/syz-executor" sig=0 arch=40000028 syscall=234 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1740.752327][ T28] audit: type=1326 audit(1740.680:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15676 comm="syz.6.2142" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1753.430045][T15705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1753.433561][T15705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1753.450230][T15705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1753.455683][T15705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1753.705454][T15705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1753.709464][T15705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1754.393145][T15723] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2157'. [ 1754.403114][T15723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1754.404624][T15723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.194635][T15768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1758.198572][T15768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1764.735327][T15799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1764.737387][T15799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1769.150886][T15834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1769.153880][T15834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.905668][T15847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.907571][T15847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1783.407062][T15889] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 1783.427297][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 1783.430801][ T28] audit: type=1400 audit(1783.350:784): avc: denied { execute } for pid=15888 comm="syz.7.2208" path="/dev/dri/card0" dev="devtmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1783.467741][T15889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1783.470531][T15889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1783.489903][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2208'. [ 1783.527594][T15889] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2208'. [ 1783.536708][T15889] hsr_slave_0: left promiscuous mode [ 1783.547380][T15889] hsr_slave_1: left promiscuous mode [ 1783.637803][T15889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1783.640643][T15889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1783.653202][T15889] can: request_module (can-proto-0) failed. [ 1784.276012][T15918] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2213'. [ 1784.277357][T15918] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2213'. [ 1784.280738][T15918] netlink: 'syz.6.2213': attribute type 11 has an invalid length. [ 1784.290223][T15918] netlink: 'syz.6.2213': attribute type 13 has an invalid length. [ 1785.025891][T15942] input: syz0 as /devices/virtual/input/input7 [ 1785.531253][ T28] audit: type=1326 audit(1785.460:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15953 comm="syz.6.2224" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1785.538269][ T28] audit: type=1326 audit(1785.460:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15953 comm="syz.6.2224" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1785.570795][ T28] audit: type=1326 audit(1785.500:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15953 comm="syz.6.2224" exe="/syz-executor" sig=0 arch=40000028 syscall=296 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1785.580582][ T28] audit: type=1326 audit(1785.500:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15953 comm="syz.6.2224" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1785.582736][ T28] audit: type=1326 audit(1785.500:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15953 comm="syz.6.2224" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1785.680841][ T28] audit: type=1326 audit(1785.610:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15953 comm="syz.6.2224" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1785.683002][ T28] audit: type=1326 audit(1785.610:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15953 comm="syz.6.2224" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1785.684915][ T28] audit: type=1326 audit(1785.610:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15953 comm="syz.6.2224" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1785.731705][ T28] audit: type=1326 audit(1785.660:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15953 comm="syz.6.2224" exe="/syz-executor" sig=0 arch=40000028 syscall=192 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1788.455214][T15962] raw_sendmsg: syz.7.2228 forgot to set AF_INET. Fix it! [ 1794.865702][T15988] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2240'. [ 1794.883057][T15988] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2240'. [ 1794.884888][T15988] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2240'. [ 1795.162827][T15990] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2241'. [ 1795.393020][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 1795.393495][ T28] audit: type=1400 audit(1795.320:811): avc: denied { connect } for pid=15993 comm="syz.7.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1795.966679][ T28] audit: type=1400 audit(1795.890:812): avc: denied { append } for pid=16003 comm="syz.7.2248" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1798.644447][T16011] syzkaller0: entered promiscuous mode [ 1798.647072][T16011] syzkaller0: entered allmulticast mode [ 1800.651082][T16023] netlink: 196 bytes leftover after parsing attributes in process `syz.7.2254'. [ 1800.922246][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2256'. [ 1802.460976][T16032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1802.461908][T16032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1805.225926][T16076] binder: BINDER_SET_CONTEXT_MGR already set [ 1805.226324][T16076] binder: 16074:16076 ioctl 4018620d 20000040 returned -16 [ 1805.950013][T16081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1805.953294][T16081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1806.684466][T16091] input: syz1 as /devices/virtual/input/input8 [ 1806.970647][T16091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1806.971629][T16091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1807.406070][ T28] audit: type=1400 audit(1807.330:813): avc: denied { write } for pid=16088 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1808.643254][ T28] audit: type=1400 audit(1808.570:814): avc: denied { write } for pid=16115 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1808.657629][T16119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1808.673200][T16119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1808.903597][ T28] audit: type=1326 audit(1808.830:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16125 comm="syz.6.2280" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1808.908326][ T28] audit: type=1326 audit(1808.830:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16125 comm="syz.6.2280" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1808.946137][ T28] audit: type=1326 audit(1808.870:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16125 comm="syz.6.2280" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1808.948226][ T28] audit: type=1326 audit(1808.870:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16125 comm="syz.6.2280" exe="/syz-executor" sig=0 arch=40000028 syscall=322 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1808.960709][ T28] audit: type=1326 audit(1808.870:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16125 comm="syz.6.2280" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1808.962425][ T28] audit: type=1326 audit(1808.870:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16125 comm="syz.6.2280" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1808.979584][ T28] audit: type=1326 audit(1808.900:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16125 comm="syz.6.2280" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1809.078588][ T28] audit: type=1326 audit(1808.990:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16125 comm="syz.6.2280" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1810.774368][T16133] capability: warning: `syz.6.2283' uses 32-bit capabilities (legacy support in use) [ 1811.473653][T16136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1811.480065][T16136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1811.841518][T16142] tap0: tun_chr_ioctl cmd 21731 [ 1821.493316][T16219] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2305'. [ 1822.077149][T16227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1822.083783][T16227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1825.584734][T16238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.587189][T16238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1825.643283][T16238] vlan3: entered promiscuous mode [ 1825.645313][T16238] vlan3: entered allmulticast mode [ 1825.648590][T16238] veth1_vlan: entered allmulticast mode [ 1825.693506][T16238] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2313'. [ 1825.705986][T16238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.716579][T16238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1825.741561][T16238] can: request_module (can-proto-0) failed. [ 1827.212397][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 1827.215640][ T28] audit: type=1400 audit(1827.140:834): avc: denied { create } for pid=16280 comm="syz.7.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1827.230714][ T28] audit: type=1400 audit(1827.160:835): avc: denied { bind } for pid=16280 comm="syz.7.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1828.922377][ T28] audit: type=1400 audit(1828.850:836): avc: denied { nlmsg_read } for pid=16315 comm="syz.6.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1829.523195][ T28] audit: type=1326 audit(1829.450:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.7.2337" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1829.525135][ T28] audit: type=1326 audit(1829.450:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.7.2337" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1829.530840][ T28] audit: type=1326 audit(1829.450:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.7.2337" exe="/syz-executor" sig=0 arch=40000028 syscall=120 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1829.544197][ T28] audit: type=1326 audit(1829.470:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.7.2337" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1829.548146][ T28] audit: type=1326 audit(1829.470:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.7.2337" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1829.552486][ T28] audit: type=1326 audit(1829.470:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16322 comm="syz.7.2337" exe="/syz-executor" sig=0 arch=40000028 syscall=265 compat=0 ip=0x112858 code=0x7ffc0000 [ 1829.560186][ T28] audit: type=1326 audit(1829.470:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.7.2337" exe="/syz-executor" sig=0 arch=40000028 syscall=26 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1832.155854][T16326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1832.160613][T16326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1832.622737][T16333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1832.628304][T16333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1844.807405][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1844.807708][ T28] audit: type=1400 audit(1844.730:846): avc: denied { ioctl } for pid=16350 comm="syz.6.2345" path="socket:[30322]" dev="sockfs" ino=30322 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1848.614760][T16359] tc action pedit 'at' offset 5 out of bounds [ 1848.615272][T16359] tc action pedit 'at' offset 5 out of bounds [ 1848.615586][T16359] tc action pedit 'at' offset 5 out of bounds [ 1848.615746][T16359] tc action pedit 'at' offset 5 out of bounds [ 1848.615905][T16359] tc action pedit 'at' offset 5 out of bounds [ 1848.616049][T16359] tc action pedit 'at' offset 5 out of bounds [ 1848.616192][T16359] tc action pedit 'at' offset 5 out of bounds [ 1848.616330][T16359] tc action pedit 'at' offset 5 out of bounds [ 1848.616469][T16359] tc action pedit 'at' offset 5 out of bounds [ 1848.616612][T16359] tc action pedit 'at' offset 5 out of bounds [ 1848.616904][T16359] TC_ACT_REPEAT abuse ? [ 1853.844956][T16381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1853.848463][T16381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.867206][T16381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1853.875066][T16381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.006548][ T28] audit: type=1326 audit(1853.930:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16388 comm="syz.7.2357" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1854.008129][ T28] audit: type=1326 audit(1853.930:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16388 comm="syz.7.2357" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1854.012891][ T28] audit: type=1326 audit(1853.940:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16388 comm="syz.7.2357" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1854.013335][ T28] audit: type=1326 audit(1853.940:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16388 comm="syz.7.2357" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1854.013416][ T28] audit: type=1326 audit(1853.940:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16388 comm="syz.7.2357" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1854.016126][ T28] audit: type=1326 audit(1853.940:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16388 comm="syz.7.2357" exe="/syz-executor" sig=0 arch=40000028 syscall=54 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1854.017653][ T28] audit: type=1326 audit(1853.940:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16388 comm="syz.7.2357" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1854.023313][ T28] audit: type=1326 audit(1853.950:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16388 comm="syz.7.2357" exe="/syz-executor" sig=0 arch=40000028 syscall=281 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1854.023547][ T28] audit: type=1326 audit(1853.950:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16388 comm="syz.7.2357" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1854.023691][ T28] audit: type=1326 audit(1853.950:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16388 comm="syz.7.2357" exe="/syz-executor" sig=0 arch=40000028 syscall=54 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1855.360442][T16422] netlink: 'syz.6.2366': attribute type 10 has an invalid length. [ 1856.926893][T16431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1856.928711][T16431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.288230][T16505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.294558][T16505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.581495][T16511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.583028][T16511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.760923][T16515] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2394'. [ 1875.164021][T16556] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2412'. [ 1875.182105][T16556] netlink: 165 bytes leftover after parsing attributes in process `syz.6.2412'. [ 1875.593784][T16565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1875.610336][T16565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1894.214440][T16621] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2432'. [ 1894.791734][T16629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1894.794486][T16629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1895.237262][T16635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1895.242928][T16635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.390521][T16649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.397030][T16649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.880379][T16659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.881394][T16659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1898.157426][T16657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1898.169737][T16657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1899.813376][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 1899.813888][ T28] audit: type=1400 audit(1899.740:903): avc: denied { write } for pid=16669 comm="syz.6.2450" name="functions" dev="configfs" ino=14789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1907.483119][T16695] block nbd6: shutting down sockets [ 1911.871476][T16723] FAULT_INJECTION: forcing a failure. [ 1911.871476][T16723] name failslab, interval 1, probability 0, space 0, times 0 [ 1911.873371][T16723] CPU: 1 UID: 0 PID: 16723 Comm: syz.6.2468 Tainted: G L syzkaller #0 PREEMPT [ 1911.873643][T16723] Tainted: [L]=SOFTLOCKUP [ 1911.873682][T16723] Hardware name: ARM-Versatile Express [ 1911.873709][T16723] Call trace: [ 1911.873755][T16723] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1911.873909][T16723] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1911.873930][T16723] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1911.873984][T16723] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1911.874049][T16723] r7:855b55c0 r6:00000000 r5:855b55c0 r4:82b1ac48 [ 1911.874067][T16723] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1911.874124][T16723] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1911.874193][T16723] r8:00000000 r7:855b55c0 r6:805c25ec r5:00000cc0 r4:830bdc00 [ 1911.874212][T16723] [<80568de8>] (should_failslab) from [<80546c44>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 1911.874268][T16723] [<80546be4>] (kmem_cache_alloc_lru_noprof) from [<805c25ec>] (__d_alloc+0x30/0x220) [ 1911.874354][T16723] r10:830c2800 r9:82543900 r8:81e613c0 r7:830c2800 r6:830e9d10 r5:df949ed0 [ 1911.874378][T16723] r4:82bfa40c [ 1911.874397][T16723] [<805c25bc>] (__d_alloc) from [<805c5c70>] (d_alloc_pseudo+0x10/0x3c) [ 1911.874465][T16723] r9:855b55c0 r8:81e613c0 r7:00000002 r6:830e9d10 r5:84f625c0 r4:82bfa40c [ 1911.874486][T16723] [<805c5c60>] (d_alloc_pseudo) from [<805a3374>] (alloc_file_pseudo+0x7c/0x154) [ 1911.874539][T16723] [<805a32f8>] (alloc_file_pseudo) from [<8162e1c4>] (sock_alloc_file+0x48/0xc4) [ 1911.874612][T16723] r10:00000000 r9:855b55c0 r8:00000000 r7:00000000 r6:84f625c0 r5:84f62540 [ 1911.874638][T16723] r4:00000000 [ 1911.874657][T16723] [<8162e17c>] (sock_alloc_file) from [<81631b7c>] (__sys_socketpair+0x1bc/0x2ac) [ 1911.874726][T16723] r6:84f62540 r5:84f456c0 r4:00000000 [ 1911.874746][T16723] [<816319c0>] (__sys_socketpair) from [<81631c7c>] (sys_socketpair+0x10/0x14) [ 1911.874815][T16723] r10:00000120 r9:855b55c0 r8:8020029c r7:00000120 r6:00356314 r5:00000000 [ 1911.874840][T16723] r4:00000000 [ 1911.874858][T16723] [<81631c6c>] (sys_socketpair) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1911.874906][T16723] Exception stack(0xdf949fa8 to 0xdf949ff0) [ 1911.874949][T16723] 9fa0: 00000000 00000000 00000001 00000005 00000000 20000180 [ 1911.874987][T16723] 9fc0: 00000000 00000000 00356314 00000120 003562d8 00000000 00000001 76f500dc [ 1911.875019][T16723] 9fe0: 76f4fe88 76f4fe78 00018fa0 00130a50 [ 1912.070261][T16725] netlink: 'syz.6.2469': attribute type 1 has an invalid length. [ 1912.176613][T16725] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1912.254706][T16725] veth3: entered allmulticast mode [ 1912.281777][T16725] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1912.315044][T16725] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1917.320581][T16784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1917.324015][T16784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1921.374084][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2484'. [ 1923.732565][T16834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1923.742093][T16834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1924.068075][T16840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1924.087693][T16840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1928.872186][T16857] FAULT_INJECTION: forcing a failure. [ 1928.872186][T16857] name failslab, interval 1, probability 0, space 0, times 0 [ 1928.873772][T16857] CPU: 1 UID: 0 PID: 16857 Comm: syz.6.2498 Tainted: G L syzkaller #0 PREEMPT [ 1928.873909][T16857] Tainted: [L]=SOFTLOCKUP [ 1928.873930][T16857] Hardware name: ARM-Versatile Express [ 1928.873956][T16857] Call trace: [ 1928.874026][T16857] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1928.874133][T16857] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1928.874154][T16857] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1928.874211][T16857] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1928.874278][T16857] r7:855b6e40 r6:00000000 r5:855b6e40 r4:82b1ac48 [ 1928.874297][T16857] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1928.874360][T16857] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1928.874434][T16857] r8:00000000 r7:855b6e40 r6:83001240 r5:00000d40 r4:00000010 [ 1928.874453][T16857] [<80568de8>] (should_failslab) from [<80547834>] (__kmalloc_noprof+0xa8/0x3c8) [ 1928.874515][T16857] [<8054778c>] (__kmalloc_noprof) from [<808384c0>] (tomoyo_encode2+0x64/0xec) [ 1928.874594][T16857] r10:855b6e40 r9:e0321f6c r8:85af3dc0 r7:85af3dc0 r6:00000000 r5:85af3dc4 [ 1928.874618][T16857] r4:85af3dbf [ 1928.874637][T16857] [<8083845c>] (tomoyo_encode2) from [<8083856c>] (tomoyo_encode+0x24/0x30) [ 1928.874717][T16857] r9:e0321f6c r8:85af3dc0 r7:85af3dc0 r6:00000000 r5:00000000 r4:85af3dc0 [ 1928.874741][T16857] [<80838548>] (tomoyo_encode) from [<80836b08>] (tomoyo_mount_acl+0x80/0x388) [ 1928.874801][T16857] r5:00000000 r4:e0321e58 [ 1928.874819][T16857] [<80836a88>] (tomoyo_mount_acl) from [<80836ef8>] (tomoyo_mount_permission+0xe8/0x208) [ 1928.874889][T16857] r10:855b6e40 r9:80838f6c r8:85af3dc0 r7:e0321f6c r6:00000000 r5:00010008 [ 1928.874911][T16857] r4:00000001 [ 1928.874928][T16857] [<80836e10>] (tomoyo_mount_permission) from [<80838f88>] (tomoyo_sb_mount+0x1c/0x24) [ 1928.874997][T16857] r8:83827000 r7:00010008 r6:85af3dc0 r5:e0321f6c r4:00000000 [ 1928.875016][T16857] [<80838f6c>] (tomoyo_sb_mount) from [<807ed7ac>] (security_sb_mount+0xa4/0x238) [ 1928.875080][T16857] [<807ed708>] (security_sb_mount) from [<805d7ab8>] (path_mount+0x78/0xb70) [ 1928.875156][T16857] r9:83827000 r8:85af3dc0 r7:00010008 r6:e0321f6c r5:20000040 r4:00000000 [ 1928.875175][T16857] [<805d7a40>] (path_mount) from [<805d8d84>] (sys_mount+0x1dc/0x260) [ 1928.875244][T16857] r10:00000015 r9:b5403587 r8:83827000 r7:00000000 r6:85af3dc0 r5:20000040 [ 1928.875293][T16857] r4:00000000 [ 1928.875312][T16857] [<805d8ba8>] (sys_mount) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1928.875367][T16857] Exception stack(0xe0321fa8 to 0xe0321ff0) [ 1928.875411][T16857] 1fa0: 20000040 00000000 00000000 20000000 20000140 00010008 [ 1928.875450][T16857] 1fc0: 20000040 00000000 00356318 00000015 003562d8 00000000 00000001 76f500dc [ 1928.875482][T16857] 1fe0: 76f4fe88 76f4fe78 00018fa0 00130a50 [ 1928.875520][T16857] r10:00000015 r9:855b6e40 r8:8020029c r7:00000015 r6:00356318 r5:00000000 [ 1928.875542][T16857] r4:20000040 [ 1929.101408][T16866] FAULT_INJECTION: forcing a failure. [ 1929.101408][T16866] name failslab, interval 1, probability 0, space 0, times 0 [ 1929.104635][T16866] CPU: 0 UID: 0 PID: 16866 Comm: syz.6.2499 Tainted: G L syzkaller #0 PREEMPT [ 1929.104744][T16866] Tainted: [L]=SOFTLOCKUP [ 1929.104755][T16866] Hardware name: ARM-Versatile Express [ 1929.104768][T16866] Call trace: [ 1929.104792][T16866] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 1929.104858][T16866] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 1929.104868][T16866] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 1929.104894][T16866] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 1929.104923][T16866] r7:84684980 r6:00000000 r5:84684980 r4:82b1ac48 [ 1929.104931][T16866] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 1929.104958][T16866] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 1929.104993][T16866] r8:00000000 r7:84684980 r6:806640dc r5:00000cc0 r4:830e5300 [ 1929.105001][T16866] [<80568de8>] (should_failslab) from [<80546c44>] (kmem_cache_alloc_lru_noprof+0x60/0x3e4) [ 1929.105028][T16866] [<80546be4>] (kmem_cache_alloc_lru_noprof) from [<806640dc>] (proc_alloc_inode+0x24/0x5c) [ 1929.105064][T16866] r10:855a6e40 r9:84d86220 r8:81c2ca68 r7:00000004 r6:81c2a080 r5:8616ac00 [ 1929.105074][T16866] r4:81c2ca64 [ 1929.105081][T16866] [<806640b8>] (proc_alloc_inode) from [<805cb844>] (alloc_inode+0x24/0xd0) [ 1929.105109][T16866] [<805cb820>] (alloc_inode) from [<805cb900>] (new_inode+0x10/0x68) [ 1929.105137][T16866] r7:00000004 r6:0000a1ff r5:855a6e40 r4:81c2ca64 [ 1929.105145][T16866] [<805cb8f0>] (new_inode) from [<8066b4e4>] (proc_pid_make_inode+0x2c/0xd4) [ 1929.105179][T16866] r9:84d86220 r8:81c2ca68 r7:00000004 r6:0000a1ff r5:855a6e40 r4:81c2ca64 [ 1929.105187][T16866] [<8066b4b8>] (proc_pid_make_inode) from [<80673ae8>] (proc_ns_dir_lookup+0x9c/0x140) [ 1929.105217][T16866] r6:81c0614c r5:81c2c9c0 r4:81c2ca64 [ 1929.105225][T16866] [<80673a4c>] (proc_ns_dir_lookup) from [<805b4460>] (lookup_open+0x354/0x7cc) [ 1929.105257][T16866] r10:00000001 r9:00000000 r8:856c8100 r7:00020002 r6:84f70378 r5:82b21e14 [ 1929.105268][T16866] r4:84d86220 r3:80673a4c [ 1929.105276][T16866] [<805b410c>] (lookup_open) from [<805b9de8>] (path_openat+0x640/0xa3c) [ 1929.105310][T16866] r10:00000018 r9:856c8100 r8:84684980 r7:e0321f20 r6:00000000 r5:00000000 [ 1929.105320][T16866] r4:e0321e58 [ 1929.105327][T16866] [<805b97a8>] (path_openat) from [<805ba29c>] (do_file_open+0xb8/0x150) [ 1929.105382][T16866] r10:00000142 r9:84684980 r8:00000001 r7:ffffff9c r6:e0321f20 r5:84684980 [ 1929.105431][T16866] r4:831e5b40 [ 1929.105453][T16866] [<805ba1e4>] (do_file_open) from [<8059d7b0>] (do_sys_openat2+0x8c/0xf0) [ 1929.105516][T16866] r8:8020029c r7:76f4fe00 r6:ffffff9c r5:831e5b40 r4:00000005 [ 1929.105529][T16866] [<8059d724>] (do_sys_openat2) from [<8059dcc8>] (sys_openat+0x88/0xd8) [ 1929.105560][T16866] r7:00000142 r6:00000000 r5:76f4fe00 r4:ffffff9c [ 1929.105568][T16866] [<8059dc40>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1929.105592][T16866] Exception stack(0xe0321fa8 to 0xe0321ff0) [ 1929.105613][T16866] 1fa0: 00000000 00000000 ffffff9c 76f4fe00 00020002 00000000 [ 1929.105630][T16866] 1fc0: 00000000 00000000 00000000 00000142 003562d8 00000000 00000001 76f500dc [ 1929.105644][T16866] 1fe0: 76f4fd88 76f4fd74 0010bc74 00112858 [ 1929.105656][T16866] r5:00000000 r4:00000000 [ 1929.318000][T16872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1929.322366][T16872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1931.521318][T16902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1931.526307][T16902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1931.813698][T16902] hsr_slave_0: entered promiscuous mode [ 1931.823142][T16902] hsr_slave_1: entered promiscuous mode [ 1932.253858][T16902] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1932.265949][T16902] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1932.276742][T16902] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1932.288197][T16902] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1932.297027][T16902] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1932.312626][T16902] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1932.317716][T16902] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1932.334221][T16902] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1932.628062][T16902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1933.402148][T16902] veth0_vlan: entered promiscuous mode [ 1933.441646][T16902] veth1_vlan: entered promiscuous mode [ 1933.494914][T17220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.501317][T17220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1933.511700][T16902] veth0_macvtap: entered promiscuous mode [ 1933.527652][T16902] veth1_macvtap: entered promiscuous mode [ 1933.631273][T17211] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1933.632446][T17211] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1933.636116][T17211] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1933.637171][T17224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.638511][T17224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1933.652292][T17211] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1933.653638][T17224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.658199][T17224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1933.990740][T17230] ERROR: Out of memory at tomoyo_memory_ok. [ 1934.172001][ T28] audit: type=1326 audit(1934.100:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.8.2515" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1934.180537][ T28] audit: type=1326 audit(1934.110:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.8.2515" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1934.180958][ T28] audit: type=1326 audit(1934.110:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.8.2515" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1934.181179][ T28] audit: type=1326 audit(1934.110:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.8.2515" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1934.181394][ T28] audit: type=1326 audit(1934.110:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.8.2515" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1934.181594][ T28] audit: type=1326 audit(1934.110:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.8.2515" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1934.181805][ T28] audit: type=1326 audit(1934.110:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.8.2515" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1934.192860][ T28] audit: type=1326 audit(1934.110:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.8.2515" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1934.193594][ T28] audit: type=1326 audit(1934.110:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.8.2515" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1934.193748][ T28] audit: type=1326 audit(1934.110:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.8.2515" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 1934.203284][T17232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1934.204566][T17232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1934.569936][T17237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1934.572405][T17237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1934.952578][T17237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1934.960138][T17237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1938.590304][T17256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1938.591103][T17256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1939.322334][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 1939.331723][ T28] audit: type=1400 audit(1939.240:957): avc: denied { read } for pid=17261 comm="syz.8.2524" name="UDC" dev="configfs" ino=32594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1939.333583][ T28] audit: type=1800 audit(1939.250:958): pid=17262 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2524" name="UDC" dev="configfs" ino=32594 res=0 errno=0 [ 1939.376551][T17262] configfs-gadget.g1 gadget.0: HOST MAC c6:16:0e:0c:af:28 [ 1939.377764][T17262] configfs-gadget.g1 gadget.0: MAC 9e:fa:ba:7a:d0:f8 [ 1939.620165][T16156] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1939.840076][T16156] usb 1-1: New USB device found, idVendor=0001, idProduct=0000, bcdDevice= 7.02 [ 1939.849659][T16156] usb 1-1: Dual-Role OTG device on HNP port [ 1939.851657][T16156] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.902209][T16156] cdc_ncm 1-1:1.0: MAC-Address: c6:16:0e:0c:af:28 [ 1939.921613][T16156] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), c6:16:0e:0c:af:28 [ 1940.679410][ T28] audit: type=1400 audit(1940.600:959): avc: denied { write } for pid=17282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1941.617411][ T28] audit: type=1400 audit(1941.540:960): avc: denied { write } for pid=17288 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1943.373296][ T28] audit: type=1400 audit(1943.300:961): avc: denied { write } for pid=17293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1944.078339][ T28] audit: type=1400 audit(1944.000:962): avc: denied { write } for pid=17296 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1958.179386][ T28] audit: type=1400 audit(1958.100:963): avc: denied { write } for pid=17314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1958.727422][T17327] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2532'. [ 1958.754797][T17327] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2532'. [ 1958.807833][ T28] audit: type=1400 audit(1958.730:964): avc: denied { write } for pid=17321 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1959.753865][ T28] audit: type=1400 audit(1959.680:965): avc: denied { write } for pid=17331 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1959.975464][ T28] audit: type=1400 audit(1959.900:966): avc: denied { write } for pid=17341 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1964.096129][T17361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1964.103375][T17361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1964.521683][T17369] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 1970.669490][T17387] input: syz1 as /devices/virtual/input/input10 [ 1972.872251][ T28] audit: type=1800 audit(1972.800:967): pid=17396 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2551" name="UDC" dev="configfs" ino=32754 res=0 errno=0 [ 1974.918637][T17412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1974.924414][T17412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1976.070162][T17420] block nbd8: shutting down sockets [ 1977.133340][T17422] syz.8.2560 (17422): drop_caches: 2 [ 1991.638564][T17439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1991.643420][T17439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1992.430196][T17211] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1992.431738][T17211] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1992.434816][T17211] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1992.437039][T17211] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1994.233240][T17457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1994.236249][T17457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2008.896763][T17498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2008.901521][T17498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2008.987320][T17496] v: renamed from veth0_vlan [ 2009.150784][T17509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2009.152267][T17509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2011.183209][ T28] audit: type=1400 audit(2011.110:968): avc: denied { write } for pid=17547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2011.866995][ T28] audit: type=1400 audit(2011.790:969): avc: denied { write } for pid=17556 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2012.342969][ T2963] v: left promiscuous mode [ 2012.355638][ T40] v: entered promiscuous mode [ 2014.811627][ T28] audit: type=1400 audit(2014.740:970): avc: denied { write } for pid=17567 comm="syz.8.2598" name="functions" dev="configfs" ino=14789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2015.692080][ T28] audit: type=1400 audit(2015.610:971): avc: denied { map } for pid=17576 comm="syz.8.2601" path="/dev/nullb0" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2015.710693][ T28] audit: type=1400 audit(2015.620:972): avc: denied { execute } for pid=17576 comm="syz.8.2601" path="/dev/nullb0" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2016.364156][ T28] audit: type=1400 audit(2016.290:973): avc: denied { bind } for pid=17586 comm="syz.7.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2016.656340][T17590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2016.658471][T17590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2018.664570][T17630] netlink: 'syz.7.2612': attribute type 1 has an invalid length. [ 2018.782209][T17630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2019.447343][T17672] syzkaller0: entered promiscuous mode [ 2019.447750][T17672] syzkaller0: entered allmulticast mode [ 2020.737611][T17692] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2618'. [ 2020.776252][T17692] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 2020.807492][T17692] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 2020.891755][T17692] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2618'. [ 2020.923399][T17692] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 2020.931460][T17692] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 2024.233138][ T28] audit: type=1400 audit(2024.160:974): avc: denied { watch watch_reads } for pid=17723 comm="syz.7.2627" path="/299/file1" dev="tmpfs" ino=1550 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2024.860910][ T28] audit: type=1400 audit(2024.780:975): avc: denied { create } for pid=17726 comm="syz.7.2628" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2024.919702][ T28] audit: type=1400 audit(2024.830:976): avc: denied { ioctl } for pid=17726 comm="syz.7.2628" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=33514 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2025.009382][ T28] audit: type=1400 audit(2024.930:977): avc: denied { map } for pid=17726 comm="syz.7.2628" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2025.033253][ T28] audit: type=1400 audit(2024.950:978): avc: denied { read write } for pid=17726 comm="syz.7.2628" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2026.100425][ T28] audit: type=1400 audit(2026.010:979): avc: denied { write } for pid=17725 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2027.265986][ T28] audit: type=1400 audit(2027.170:980): avc: denied { write } for pid=17730 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2030.021701][T17736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2030.026479][T17736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2030.886710][T17750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2030.889869][T17750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2042.037098][T17820] v: left promiscuous mode [ 2042.221220][ T1415] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2042.224152][ T1415] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2042.225548][ T1415] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2042.226971][ T1415] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2042.605871][ T28] audit: type=1400 audit(2042.530:981): avc: denied { write } for pid=17827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2042.897320][ T28] audit: type=1400 audit(2042.820:982): avc: denied { write } for pid=17831 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2045.561242][ T28] audit: type=1400 audit(2045.480:983): avc: denied { write } for pid=17841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2045.830906][T17858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2045.834279][T17858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2047.156164][ T28] audit: type=1400 audit(2047.080:984): avc: denied { write } for pid=17865 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2047.991825][ T28] audit: type=1326 audit(2047.910:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.7.2676" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2048.040584][ T28] audit: type=1326 audit(2047.960:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.7.2676" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2048.042841][ T28] audit: type=1326 audit(2047.960:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.7.2676" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2048.045426][ T28] audit: type=1326 audit(2047.960:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.7.2676" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2048.075321][ T28] audit: type=1326 audit(2048.000:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.7.2676" exe="/syz-executor" sig=0 arch=40000028 syscall=4 compat=0 ip=0x112858 code=0x7ffc0000 [ 2048.083216][ T28] audit: type=1326 audit(2048.000:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.7.2676" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2048.086496][ T28] audit: type=1326 audit(2048.010:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.7.2676" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2048.113113][ T28] audit: type=1326 audit(2048.040:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.7.2676" exe="/syz-executor" sig=0 arch=40000028 syscall=55 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2048.122431][ T28] audit: type=1326 audit(2048.050:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.7.2676" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2048.125001][ T28] audit: type=1326 audit(2048.050:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.7.2676" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2048.760645][T17882] GUP no longer grows the stack in syz.8.2677 (17882): 20004000-20005000 (20001000) [ 2048.761647][T17882] CPU: 1 UID: 0 PID: 17882 Comm: syz.8.2677 Tainted: G L syzkaller #0 PREEMPT [ 2048.761992][T17882] Tainted: [L]=SOFTLOCKUP [ 2048.762047][T17882] Hardware name: ARM-Versatile Express [ 2048.762089][T17882] Call trace: [ 2048.762153][T17882] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2048.762304][T17882] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 2048.762341][T17882] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 2048.762427][T17882] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 2048.762579][T17882] r7:e4449d5c r6:00000002 r5:20001000 r4:20001000 [ 2048.762609][T17882] [<8021ec7c>] (dump_stack) from [<804f2684>] (gup_vma_lookup+0xbc/0xc0) [ 2048.762742][T17882] [<804f25c8>] (gup_vma_lookup) from [<804f4388>] (__get_user_pages+0x108/0x718) [ 2048.762831][T17882] r4:00210002 [ 2048.762861][T17882] [<804f4280>] (__get_user_pages) from [<804f5948>] (__gup_longterm_locked+0xd8/0xb90) [ 2048.762998][T17882] r10:8631f000 r9:e4449ea0 r8:e4449d5c r7:20001000 r6:00000001 r5:00210002 [ 2048.763035][T17882] r4:8631f14c [ 2048.763053][T17882] [<804f5870>] (__gup_longterm_locked) from [<804f6a10>] (gup_fast_fallback+0x610/0x858) [ 2048.763114][T17882] r10:82a1eb9c r9:00000000 r8:20000000 r7:20001000 r6:847b9880 r5:00000001 [ 2048.763222][T17882] r4:ffedc000 [ 2048.763246][T17882] [<804f6400>] (gup_fast_fallback) from [<804f6d0c>] (get_user_pages_fast+0x50/0x60) [ 2048.763352][T17882] r10:00000000 r9:e4449e7c r8:20000000 r7:e4449e44 r6:00000010 r5:20000000 [ 2048.763379][T17882] r4:e4449e9c [ 2048.763396][T17882] [<804f6cbc>] (get_user_pages_fast) from [<8092f160>] (__iov_iter_get_pages_alloc+0xfc/0x738) [ 2048.763558][T17882] r6:20000101 r5:00000000 r4:e4449f20 [ 2048.763592][T17882] [<8092f064>] (__iov_iter_get_pages_alloc) from [<8092f7d0>] (iov_iter_get_pages2+0x34/0x4c) [ 2048.763690][T17882] r10:00000000 r9:e4449e9c r8:00000001 r7:00000001 r6:86064d80 r5:00000000 [ 2048.763715][T17882] r4:863c8000 [ 2048.763733][T17882] [<8092f79c>] (iov_iter_get_pages2) from [<805f3e80>] (vmsplice_to_pipe+0x10c/0x39c) [ 2048.763880][T17882] [<805f3d74>] (vmsplice_to_pipe) from [<805f54f8>] (sys_vmsplice+0x12c/0x154) [ 2048.764028][T17882] r10:00000157 r9:863c8000 r8:00000001 r7:00000001 r6:00000000 r5:863c8001 [ 2048.764067][T17882] r4:20000101 [ 2048.764135][T17882] [<805f53cc>] (sys_vmsplice) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2048.764254][T17882] Exception stack(0xe4449fa8 to 0xe4449ff0) [ 2048.764324][T17882] 9fa0: 00000000 00000000 00000004 20000140 00000001 00000000 [ 2048.764455][T17882] 9fc0: 00000000 00000000 00356314 00000157 003562d8 00000000 00000001 76f8d0dc [ 2048.764508][T17882] 9fe0: 76f8ce88 76f8ce78 00018fa0 00130a50 [ 2048.764609][T17882] r9:847b9880 r8:8020029c r7:00000157 r6:00356314 r5:00000000 r4:00000000 [ 2051.993692][T17909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2051.995890][T17909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2063.601261][T17944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2063.604511][T17944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2070.389998][T17997] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2713'. [ 2073.317455][T18019] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 2074.622069][T18025] syzkaller1: entered promiscuous mode [ 2074.623695][T18025] syzkaller1: entered allmulticast mode [ 2076.246988][T18035] netlink: 83 bytes leftover after parsing attributes in process `syz.7.2727'. [ 2078.276474][T17213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2078.302460][T17213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2078.315994][T17213] bond0 (unregistering): Released all slaves [ 2078.353134][T17213] bond1 (unregistering): (slave veth3): Releasing active interface [ 2078.388472][T17213] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 2078.406325][T17213] bond1 (unregistering): Released all slaves [ 2078.642869][T17213] hsr_slave_0: left promiscuous mode [ 2078.686319][T17213] hsr_slave_1: left promiscuous mode [ 2082.265198][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 2082.267429][ T28] audit: type=1400 audit(2082.190:998): avc: denied { write } for pid=18074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2082.555969][ T28] audit: type=1400 audit(2082.480:999): avc: denied { write } for pid=18081 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2083.104543][ T2963] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2085.072825][ T28] audit: type=1400 audit(2085.000:1000): avc: denied { write } for pid=18088 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2085.851596][T18094] cgroup: fork rejected by pids controller in /syz8 [ 2086.639422][ T28] audit: type=1400 audit(2086.560:1001): avc: denied { write } for pid=18104 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2087.618099][ T2963] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2089.701198][ T28] audit: type=1400 audit(2089.620:1002): avc: denied { write } for pid=18148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2089.954162][ T1393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2089.991819][ T1393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2090.019847][ T1393] bond0 (unregistering): Released all slaves [ 2090.145047][ T1393] hsr_slave_0: left promiscuous mode [ 2090.151654][ T1393] hsr_slave_1: left promiscuous mode [ 2091.107251][ T28] audit: type=1400 audit(2091.030:1003): avc: denied { write } for pid=18180 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2092.134521][T18150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2092.149782][ T2963] 8021q: adding VLAN 0 to HW filter on device eth7 [ 2092.192949][T18150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2092.989564][T18150] hsr_slave_0: entered promiscuous mode [ 2092.996168][T18150] hsr_slave_1: entered promiscuous mode [ 2094.462362][T18150] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2094.491274][T18150] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2094.495577][T18150] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2094.511294][T18150] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2094.540327][T18150] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2094.548404][T18150] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2094.571293][T18150] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2094.610155][T18150] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2094.707396][ T28] audit: type=1400 audit(2094.630:1004): avc: denied { write } for pid=18394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2095.430324][T18150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2095.849750][ T28] audit: type=1400 audit(2095.770:1005): avc: denied { write } for pid=18471 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2096.328789][T18150] veth0_vlan: entered promiscuous mode [ 2096.406241][T18150] veth1_vlan: entered promiscuous mode [ 2096.484378][ T2963] 8021q: adding VLAN 0 to HW filter on device eth8 [ 2096.630213][T18150] veth0_macvtap: entered promiscuous mode [ 2096.665150][T18150] veth1_macvtap: entered promiscuous mode [ 2096.990236][T17212] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2096.993276][T17212] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2096.998123][T17212] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.012107][T17212] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2097.135863][ T28] audit: type=1400 audit(2097.060:1006): avc: denied { mount } for pid=18150 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2098.849269][ T28] audit: type=1400 audit(2098.770:1007): avc: denied { write } for pid=18507 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2099.018375][T18515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2099.044985][T18515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2099.529508][ T28] audit: type=1400 audit(2099.450:1008): avc: denied { write } for pid=18518 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2102.327360][T18538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2102.329412][T18538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2103.120214][T18551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2103.123374][T18551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2106.392483][T18562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2106.396151][T18562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2107.091720][T18571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2107.094443][T18571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2107.458602][T18576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2107.460385][T18576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2108.285426][ T28] audit: type=1400 audit(2108.210:1009): avc: denied { write } for pid=18580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2108.897791][T18591] comedi: valid board names for 8255 driver are: [ 2108.898378][T18591] 8255 [ 2108.898822][T18591] comedi: valid board names for vmk80xx driver are: [ 2108.920004][T18591] vmk80xx [ 2108.925774][T18591] comedi: valid board names for usbduxsigma driver are: [ 2108.943941][T18591] usbduxsigma [ 2108.947186][T18591] comedi: valid board names for usbduxfast driver are: [ 2108.959645][T18591] usbduxfast [ 2108.963935][T18591] comedi: valid board names for usbdux driver are: [ 2108.978470][ T28] audit: type=1400 audit(2108.900:1010): avc: denied { write } for pid=18592 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2108.984400][T18591] usbdux [ 2109.000403][T18591] comedi: valid board names for ni6501 driver are: [ 2109.044199][T18591] ni6501 [ 2109.047759][T18591] comedi: valid board names for dt9812 driver are: [ 2109.057088][T18591] dt9812 [ 2109.067555][T18591] comedi: valid board names for ni_labpc_cs driver are: [ 2109.067992][T18591] ni_labpc_cs [ 2109.068165][T18591] comedi: valid board names for ni_daq_700 driver are: [ 2109.068332][T18591] ni_daq_700 [ 2109.068533][T18591] comedi: valid board names for labpc_pci driver are: [ 2109.068682][T18591] labpc_pci [ 2109.068823][T18591] comedi: valid board names for adl_pci9118 driver are: [ 2109.068964][T18591] pci9118dg [ 2109.069101][T18591] pci9118hg [ 2109.069235][T18591] pci9118hr [ 2109.069412][T18591] comedi: valid board names for 8255_pci driver are: [ 2109.093847][T18591] 8255_pci [ 2109.094274][T18591] comedi: valid board names for comedi_parport driver are: [ 2109.094491][T18591] comedi_parport [ 2109.094695][T18591] comedi: valid board names for comedi_test driver are: [ 2109.094877][T18591] comedi_test [ 2109.095052][T18591] comedi: valid board names for comedi_bond driver are: [ 2109.095223][T18591] comedi_bond [ 2112.456811][T18601] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2758'. [ 2115.759910][ T28] audit: type=1400 audit(2115.660:1011): avc: denied { write } for pid=18619 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2116.685287][ T28] audit: type=1400 audit(2116.610:1012): avc: denied { read } for pid=18633 comm="syz.7.2769" name="/" dev="configfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2116.685942][ T28] audit: type=1400 audit(2116.610:1013): avc: denied { read open } for pid=18633 comm="syz.7.2769" path="/" dev="configfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2117.602203][ T28] audit: type=1400 audit(2117.520:1014): avc: denied { write } for pid=18643 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2118.488562][T18648] FAULT_INJECTION: forcing a failure. [ 2118.488562][T18648] name failslab, interval 1, probability 0, space 0, times 0 [ 2118.507441][T18648] CPU: 0 UID: 0 PID: 18648 Comm: syz.7.2772 Tainted: G L syzkaller #0 PREEMPT [ 2118.507631][T18648] Tainted: [L]=SOFTLOCKUP [ 2118.507654][T18648] Hardware name: ARM-Versatile Express [ 2118.507678][T18648] Call trace: [ 2118.507720][T18648] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2118.507838][T18648] r7:60000013 r6:60000013 r5:82336570 r4:00000000 [ 2118.507888][T18648] [<80201a74>] (show_stack) from [<8021ec68>] (dump_stack_lvl+0x5c/0x70) [ 2118.507947][T18648] [<8021ec0c>] (dump_stack_lvl) from [<8021ec94>] (dump_stack+0x18/0x1c) [ 2118.508008][T18648] r7:8ae43100 r6:00000000 r5:8ae43100 r4:82b1ac48 [ 2118.508027][T18648] [<8021ec7c>] (dump_stack) from [<809fdea0>] (should_fail_ex+0x1c0/0x224) [ 2118.508090][T18648] [<809fdce0>] (should_fail_ex) from [<80568e54>] (should_failslab+0x6c/0x94) [ 2118.508209][T18648] r8:00000000 r7:8ae43100 r6:805a3210 r5:00000cc0 r4:830bdd80 [ 2118.508239][T18648] [<80568de8>] (should_failslab) from [<80546860>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 2118.508304][T18648] [<80546804>] (kmem_cache_alloc_noprof) from [<805a3210>] (alloc_empty_file+0x54/0x13c) [ 2118.508375][T18648] r10:830c2800 r9:8ae43100 r8:82a04d00 r7:86a01c00 r6:00000002 r5:82b1dfdc [ 2118.508399][T18648] r4:825438e8 [ 2118.508416][T18648] [<805a31bc>] (alloc_empty_file) from [<805a33a4>] (alloc_file_pseudo+0xac/0x154) [ 2118.508473][T18648] r8:81e613c0 r7:00000002 r6:830e9d10 r5:84f445c0 r4:82bf1fc4 [ 2118.508490][T18648] [<805a32f8>] (alloc_file_pseudo) from [<8162e1c4>] (sock_alloc_file+0x48/0xc4) [ 2118.508564][T18648] r10:00000119 r9:8ae43100 r8:8020029c r7:00000119 r6:84f445c0 r5:84f44540 [ 2118.508589][T18648] r4:00000000 [ 2118.508609][T18648] [<8162e17c>] (sock_alloc_file) from [<81631968>] (__sys_socket+0xd4/0x118) [ 2118.508667][T18648] r6:84f44540 r5:00000005 r4:00000000 [ 2118.508685][T18648] [<81631894>] (__sys_socket) from [<816319bc>] (sys_socket+0x10/0x14) [ 2118.508738][T18648] r6:0000001a r5:00000001 r4:00000000 [ 2118.508754][T18648] [<816319ac>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2118.508869][T18648] Exception stack(0xe84cdfa8 to 0xe84cdff0) [ 2118.508917][T18648] dfa0: 00000000 00000001 0000001a 00000001 00000000 00000000 [ 2118.508959][T18648] dfc0: 00000000 00000001 0000001a 00000119 003562d8 00000000 00000001 76f800dc [ 2118.508986][T18648] dfe0: 76f7fe60 76f7fe50 000164a4 00130a50 [ 2118.929158][ T28] audit: type=1400 audit(2118.850:1015): avc: denied { unmount } for pid=14517 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2123.044339][ T28] audit: type=1400 audit(2122.970:1016): avc: denied { write } for pid=18661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2123.843600][ T28] audit: type=1400 audit(2123.770:1017): avc: denied { write } for pid=18670 comm="syz.7.2781" name="c.1" dev="configfs" ino=14795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2124.179605][ T28] audit: type=1400 audit(2124.100:1018): avc: denied { write } for pid=18674 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2126.109604][ T28] audit: type=1400 audit(2126.030:1019): avc: denied { write } for pid=18683 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2127.548302][ T28] audit: type=1400 audit(2127.470:1020): avc: denied { write } for pid=18688 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2128.450099][T18697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2128.452186][T18697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2135.511013][T18718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2135.515714][T18718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2136.000005][T18723] netlink: 'syz.7.2793': attribute type 1 has an invalid length. [ 2136.009360][T18723] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2793'. [ 2136.015421][T18723] nbd: illegal input index -1 [ 2136.104757][T18724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2136.119975][T18724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2136.890465][T18730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2136.900482][T18730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2137.922717][T18740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2137.941764][T18740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2138.459758][T18745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2138.468292][T18745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2139.230846][T18754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2139.234516][T18754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2161.985439][ T28] audit: type=1400 audit(2161.910:1021): avc: denied { write } for pid=18775 comm="syz.7.2810" name="functions" dev="configfs" ino=14789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2162.190295][ T28] audit: type=1400 audit(2162.110:1022): avc: denied { write } for pid=18775 comm="syz.7.2810" name="target" dev="configfs" ino=224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2162.229569][ T28] audit: type=1400 audit(2162.150:1023): avc: denied { write } for pid=18775 comm="syz.7.2810" name="usb_gadget" dev="configfs" ino=35954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2162.469965][ T28] audit: type=1400 audit(2162.390:1024): avc: denied { write } for pid=18775 comm="syz.7.2810" name="naa.1234567890abcdef" dev="configfs" ino=35956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2162.549652][ T28] audit: type=1400 audit(2162.470:1025): avc: denied { write } for pid=18775 comm="syz.7.2810" name="lun" dev="configfs" ino=37231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2174.857502][T18789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2174.883617][T18789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2176.194740][T18793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2176.231259][T18793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2187.241755][T18813] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2192.324971][T18830] ip6gretap0: entered promiscuous mode [ 2192.359399][T18830] ip6gretap0: entered allmulticast mode [ 2202.209834][T18857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2202.210721][T18857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2202.645319][ T28] audit: type=1400 audit(2202.570:1026): avc: denied { create } for pid=18860 comm="syz.7.2836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2206.852866][ T28] audit: type=1400 audit(2206.720:1027): avc: denied { write } for pid=18871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2208.664223][ T28] audit: type=1400 audit(2208.590:1028): avc: denied { write } for pid=18874 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2219.237941][T18887] comedi: valid board names for 8255 driver are: [ 2219.238445][T18887] 8255 [ 2219.246720][T18887] comedi: valid board names for vmk80xx driver are: [ 2219.262303][T18887] vmk80xx [ 2219.281275][T18887] comedi: valid board names for usbduxsigma driver are: [ 2219.284434][T18887] usbduxsigma [ 2219.287085][T18887] comedi: valid board names for usbduxfast driver are: [ 2219.291113][T18887] usbduxfast [ 2219.295398][T18887] comedi: valid board names for usbdux driver are: [ 2219.296891][T18887] usbdux [ 2219.298304][T18887] comedi: valid board names for ni6501 driver are: [ 2219.298354][T18887] ni6501 [ 2219.298370][T18887] comedi: valid board names for dt9812 driver are: [ 2219.298390][T18887] dt9812 [ 2219.298404][T18887] comedi: valid board names for ni_labpc_cs driver are: [ 2219.298421][T18887] ni_labpc_cs [ 2219.298435][T18887] comedi: valid board names for ni_daq_700 driver are: [ 2219.298464][T18887] ni_daq_700 [ 2219.298493][T18887] comedi: valid board names for labpc_pci driver are: [ 2219.298513][T18887] labpc_pci [ 2219.298538][T18887] comedi: valid board names for adl_pci9118 driver are: [ 2219.298555][T18887] pci9118dg [ 2219.298569][T18887] pci9118hg [ 2219.298581][T18887] pci9118hr [ 2219.298594][T18887] comedi: valid board names for 8255_pci driver are: [ 2219.298609][T18887] 8255_pci [ 2219.298634][T18887] comedi: valid board names for comedi_parport driver are: [ 2219.298650][T18887] comedi_parport [ 2219.298697][T18887] comedi: valid board names for comedi_test driver are: [ 2219.298714][T18887] comedi_test [ 2219.298728][T18887] comedi: valid board names for comedi_bond driver are: [ 2219.298754][T18887] comedi_bond [ 2219.526787][T18889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2219.537272][T18889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2227.676077][T18915] bridge_slave_1: default FDB implementation only supports local addresses [ 2228.219874][T18917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2228.221031][T18917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2230.791318][T18927] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2857'. [ 2233.233641][T18941] usb 1-1: USB disconnect, device number 6 [ 2233.270020][T18941] cdc_ncm 1-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 2233.421932][ T28] audit: type=1400 audit(2233.340:1029): avc: denied { write } for pid=18935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2233.896277][ T28] audit: type=1400 audit(2233.820:1030): avc: denied { write } for pid=18946 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2234.061200][ T2963] veth0_vlan: left promiscuous mode [ 2234.082436][T16666] veth0_vlan: entered promiscuous mode [ 2234.785404][ T28] audit: type=1400 audit(2234.710:1031): avc: denied { write } for pid=18950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2235.301954][ T28] audit: type=1400 audit(2235.230:1032): avc: denied { write } for pid=18963 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2237.033888][ T28] audit: type=1400 audit(2236.960:1033): avc: denied { write } for pid=18968 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2237.312389][ T28] audit: type=1400 audit(2237.240:1034): avc: denied { write } for pid=18975 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2238.102537][T18983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2238.103980][T18983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2238.514259][ T28] audit: type=1400 audit(2238.440:1035): avc: denied { write } for pid=18979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2238.930683][ T28] audit: type=1400 audit(2238.860:1036): avc: denied { write } for pid=18989 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2239.823255][ T28] audit: type=1400 audit(2239.750:1037): avc: denied { write } for pid=18991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2240.207183][ T28] audit: type=1400 audit(2240.130:1038): avc: denied { write } for pid=18994 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2251.544452][T19007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2251.553219][T19007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2268.754680][T19047] netlink: 'syz.8.2885': attribute type 3 has an invalid length. [ 2268.755980][T19047] netlink: 666 bytes leftover after parsing attributes in process `syz.8.2885'. [ 2268.763805][ T28] audit: type=1400 audit(2268.690:1039): avc: denied { accept } for pid=19046 comm="syz.8.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 2268.972284][T19051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2268.975572][T19051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2273.227891][T19074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2273.232124][T19074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2273.564297][T19085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2273.572665][T19085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2274.585960][T19097] syz_tun: entered allmulticast mode [ 2274.857301][T19101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2274.866662][T19101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2279.073471][T19120] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2908'. [ 2279.735649][T19124] comedi: valid board names for 8255 driver are: [ 2279.740300][T19124] 8255 [ 2279.743627][T19124] comedi: valid board names for vmk80xx driver are: [ 2279.748026][T19124] vmk80xx [ 2279.756402][T19124] comedi: valid board names for usbduxsigma driver are: [ 2279.778480][T19124] usbduxsigma [ 2279.784003][T19124] comedi: valid board names for usbduxfast driver are: [ 2279.786992][T19124] usbduxfast [ 2279.791257][T19124] comedi: valid board names for usbdux driver are: [ 2279.794350][T19124] usbdux [ 2279.797279][T19124] comedi: valid board names for ni6501 driver are: [ 2279.806154][T19124] ni6501 [ 2279.806539][T19124] comedi: valid board names for dt9812 driver are: [ 2279.806693][T19124] dt9812 [ 2279.806834][T19124] comedi: valid board names for ni_labpc_cs driver are: [ 2279.806978][T19124] ni_labpc_cs [ 2279.817137][T19124] comedi: valid board names for ni_daq_700 driver are: [ 2279.818716][T19124] ni_daq_700 [ 2279.822733][T19124] comedi: valid board names for labpc_pci driver are: [ 2279.825355][T19124] labpc_pci [ 2279.829421][T19124] comedi: valid board names for adl_pci9118 driver are: [ 2279.833223][T19124] pci9118dg [ 2279.850017][T19124] pci9118hg [ 2279.850429][T19124] pci9118hr [ 2279.850579][T19124] comedi: valid board names for 8255_pci driver are: [ 2279.850723][T19124] 8255_pci [ 2279.850865][T19124] comedi: valid board names for comedi_parport driver are: [ 2279.851004][T19124] comedi_parport [ 2279.851139][T19124] comedi: valid board names for comedi_test driver are: [ 2279.851286][T19124] comedi_test [ 2279.851425][T19124] comedi: valid board names for comedi_bond driver are: [ 2279.851563][T19124] comedi_bond [ 2282.974868][ T28] audit: type=1400 audit(2282.900:1040): avc: denied { create } for pid=19129 comm="syz.7.2912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2300.773554][T19176] netlink: 'syz.8.2927': attribute type 49 has an invalid length. [ 2302.972144][ T28] audit: type=1326 audit(2302.900:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.7.2932" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2302.974911][ T28] audit: type=1326 audit(2302.900:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.7.2932" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2302.988383][ T28] audit: type=1326 audit(2302.910:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.7.2932" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2302.992293][ T28] audit: type=1326 audit(2302.920:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.7.2932" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2303.000636][ T28] audit: type=1326 audit(2302.930:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.7.2932" exe="/syz-executor" sig=0 arch=40000028 syscall=228 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2303.013158][ T28] audit: type=1326 audit(2302.940:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.7.2932" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2303.014943][ T28] audit: type=1326 audit(2302.940:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.7.2932" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2303.795364][T19193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2303.796462][T19193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2304.610672][T19201] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 2304.622562][T19201] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2311.593121][ T28] audit: type=1326 audit(2311.520:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19209 comm="syz.8.2939" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2311.595305][ T28] audit: type=1326 audit(2311.520:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19209 comm="syz.8.2939" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2311.604723][ T28] audit: type=1326 audit(2311.520:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19209 comm="syz.8.2939" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2311.619843][ T28] audit: type=1326 audit(2311.530:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19209 comm="syz.8.2939" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2311.620233][ T28] audit: type=1326 audit(2311.530:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19209 comm="syz.8.2939" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2311.620462][ T28] audit: type=1326 audit(2311.530:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19209 comm="syz.8.2939" exe="/syz-executor" sig=0 arch=40000028 syscall=192 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2311.622359][ T28] audit: type=1326 audit(2311.530:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19209 comm="syz.8.2939" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2311.625082][ T28] audit: type=1326 audit(2311.540:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19209 comm="syz.8.2939" exe="/syz-executor" sig=0 arch=40000028 syscall=257 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2311.625217][ T28] audit: type=1326 audit(2311.540:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19209 comm="syz.8.2939" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2311.635765][ T28] audit: type=1326 audit(2311.560:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19209 comm="syz.8.2939" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130a50 code=0x7ffc0000 [ 2313.308129][T19216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2313.319928][T19216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2326.731256][T19253] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2954'. [ 2327.272030][T19255] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2327.497303][T19255] md: ram0 does not have a valid v1.2 superblock, not importing! [ 2328.294364][T19257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2328.300356][T19257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2338.114925][T19267] kexec: Could not allocate control_code_buffer [ 2340.845387][T19275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2340.853375][T19275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2345.940556][T19295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2345.943441][T19295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2369.730493][T19322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2369.733943][T19322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2373.145410][T19351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2373.147620][T19351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2374.306579][T19366] 8<--- cut here --- [ 2374.308044][T19366] Unable to handle kernel paging request at virtual address fee00007 when write [ 2374.311168][T19366] [fee00007] *pgd=80000080007003, *pmd=00000000 [ 2374.314314][T19366] Internal error: Oops: a06 [#1] SMP ARM [ 2374.315960][T19366] Modules linked in: [ 2374.316544][T19366] CPU: 1 UID: 0 PID: 19366 Comm: syz.8.2987 Tainted: G L syzkaller #0 PREEMPT [ 2374.316943][T19366] Tainted: [L]=SOFTLOCKUP [ 2374.317116][T19366] Hardware name: ARM-Versatile Express [ 2374.317357][T19366] PC is at subdev_8255_io+0x60/0x6c [ 2374.317652][T19366] LR is at subdev_8255_io+0x4c/0x6c [ 2374.317937][T19366] pc : [<814ad81c>] lr : [<814ad808>] psr: 60000013 [ 2374.318174][T19366] sp : dfd49cb8 ip : dfd49cb8 fp : dfd49cd4 [ 2374.318398][T19366] r10: 00000004 r9 : 00000004 r8 : dfd49da4 [ 2374.318608][T19366] r7 : 00000000 r6 : 0000009b r5 : 84591300 r4 : 00000007 [ 2374.319053][T19366] r3 : 0000009b r2 : fee00007 r1 : 00000001 r0 : 84591300 [ 2374.319483][T19366] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 2374.319808][T19366] Control: 30c5387d Table: 8bcb4780 DAC: 00000000 [ 2374.320148][T19366] Register r0 information: slab kmalloc-192 start 84591300 pointer offset 0 size 192 [ 2374.321368][T19366] Register r1 information: non-paged memory [ 2374.321955][T19366] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 2374.322562][T19366] Register r3 information: non-paged memory [ 2374.322841][T19366] Register r4 information: non-paged memory [ 2374.323098][T19366] Register r5 information: slab kmalloc-192 start 84591300 pointer offset 0 size 192 [ 2374.323607][T19366] Register r6 information: non-paged memory [ 2374.324123][T19366] Register r7 information: NULL pointer [ 2374.324520][T19366] Register r8 information: 2-page vmalloc region starting at 0xdfd48000 allocated at kernel_clone+0xc4/0x43c [ 2374.325491][T19366] Register r9 information: non-paged memory [ 2374.325771][T19366] Register r10 information: non-paged memory [ 2374.326054][T19366] Register r11 information: 2-page vmalloc region starting at 0xdfd48000 allocated at kernel_clone+0xc4/0x43c [ 2374.326623][T19366] Register r12 information: 2-page vmalloc region starting at 0xdfd48000 allocated at kernel_clone+0xc4/0x43c [ 2374.327016][T19366] Process syz.8.2987 (pid: 19366, stack limit = 0xdfd48000) [ 2374.327318][T19366] Stack: (0xdfd49cb8 to 0xdfd4a000) [ 2374.327537][T19366] 9ca0: 814ad7bc 00000004 [ 2374.327830][T19366] 9cc0: 84591300 00000000 dfd49cf4 dfd49cd8 814ad4f8 814ad7c8 00000004 80547798 [ 2374.328092][T19366] 9ce0: 83191000 83191000 dfd49d14 dfd49cf8 814ad8b0 814ad4ac 84591300 00000000 [ 2374.328392][T19366] 9d00: 83191000 00000000 dfd49d54 dfd49d18 814ada60 814ad834 ffffffff 00000004 [ 2374.328681][T19366] 9d20: 82a22dc0 00000000 00000000 82bdac60 84591300 00000000 dfd49d90 84591300 [ 2374.329351][T19366] 9d40: 00000000 82d32f9c dfd49d8c dfd49d58 8149c3e8 814ad9f8 40946400 00000000 [ 2374.329741][T19366] 9d60: dfd49d7c 20000280 84591300 b5403587 40946400 00000003 00000003 8318e200 [ 2374.330093][T19366] 9d80: dfd49e4c dfd49d90 81497bec 8149c2ec 35353238 00000000 00000000 00000000 [ 2374.330413][T19366] 9da0: 00000000 00000004 00000004 00004004 00008000 0000ffff 00000178 0004c6b9 [ 2374.330762][T19366] 9dc0: 00000008 54c6cff3 000000fa 00000005 00000003 00000008 00400001 10000006 [ 2374.331072][T19366] 9de0: 00020400 00000009 0000007b 00000003 40000003 00000000 00000044 00000003 [ 2374.331518][T19366] 9e00: 00000000 00080003 00000e69 00000000 00008001 00004006 00000401 00000000 [ 2374.331928][T19366] 9e20: 00000000 a7b11c1a 00000000 85f56200 84591300 20000280 40946400 00000003 [ 2374.332311][T19366] 9e40: dfd49f14 dfd49e50 81498f14 81497b2c 00000000 a7b11c1a 00000000 00000000 [ 2374.332682][T19366] 9e60: 8254e844 dfd49ea4 0000005f 8462d850 00000064 84591330 dfd49ee4 dfd49e88 [ 2374.333068][T19366] 9e80: 8080b76c 80801e24 00000064 00000001 00000000 dfd49ea4 84a0c010 83438550 [ 2374.333428][T19366] 9ea0: 00006400 0000000b dfd49e98 00000000 00000000 a7b11c1a 00000000 85f56200 [ 2374.333782][T19366] 9ec0: 40946400 20000280 20000280 85f56200 00000003 8318e200 dfd49ef4 dfd49ee8 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2374.334116][T19366] 9ee0: 8080b8a0 a7b11c1a dfd49f14 00000000 85f56201 40946400 20000280 85f56200 [ 2374.334803][T19366] 9f00: 00000003 8318e200 dfd49fa4 dfd49f18 805bdf78 81498bcc ecac8b10 8318e200 [ 2374.335149][T19366] 9f20: dfd49f3c dfd49f30 81b6ec00 81b6eacc dfd49f54 dfd49f40 8025b878 8028f548 [ 2374.335608][T19366] 9f40: dfd49fb0 40000000 dfd49f84 dfd49f58 80221bdc 8025b834 00000000 82a1eb0c [ 2374.335918][T19366] 9f60: dfd49fb0 0013ebf0 ecac8b10 80221b30 00000000 a7b11c1a dfd49fac 00000000 [ 2374.336214][T19366] 9f80: 00000000 00356310 00000036 8020029c 8318e200 00000036 00000000 dfd49fa8 [ 2374.336575][T19366] 9fa0: 80200060 805bdd40 00000000 00000000 00000003 40946400 20000280 00000000 [ 2374.336954][T19366] 9fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76fd70dc [ 2374.337267][T19366] 9fe0: 76fd6e88 76fd6e78 00018fa0 00130a50 60000010 00000003 00000000 00000000 [ 2374.337629][T19366] Call trace: [ 2374.337900][T19366] [<814ad7bc>] (subdev_8255_io) from [<814ad4f8>] (subdev_8255_do_config+0x58/0x60) [ 2374.338253][T19366] r7:00000000 r6:84591300 r5:00000004 r4:814ad7bc [ 2374.338489][T19366] [<814ad4a0>] (subdev_8255_do_config) from [<814ad8b0>] (subdev_8255_io_init+0x88/0x98) [ 2374.338942][T19366] r4:83191000 [ 2374.339109][T19366] [<814ad828>] (subdev_8255_io_init) from [<814ada60>] (dev_8255_attach+0x74/0x138) [ 2374.339550][T19366] r7:00000000 r6:83191000 r5:00000000 r4:84591300 [ 2374.339806][T19366] [<814ad9ec>] (dev_8255_attach) from [<8149c3e8>] (comedi_device_attach+0x108/0x244) [ 2374.340237][T19366] r10:82d32f9c r9:00000000 r8:84591300 r7:dfd49d90 r6:00000000 r5:84591300 [ 2374.340490][T19366] r4:82bdac60 [ 2374.340638][T19366] [<8149c2e0>] (comedi_device_attach) from [<81497bec>] (do_devconfig_ioctl+0xcc/0x218) [ 2374.340913][T19366] r10:8318e200 r9:00000003 r8:00000003 r7:40946400 r6:b5403587 r5:84591300 [ 2374.341123][T19366] r4:20000280 [ 2374.342215][T19366] [<81497b20>] (do_devconfig_ioctl) from [<81498f14>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 2374.346638][T19366] r8:00000003 r7:40946400 r6:20000280 r5:84591300 r4:85f56200 [ 2374.349269][T19366] [<81498bc0>] (comedi_unlocked_ioctl) from [<805bdf78>] (sys_ioctl+0x244/0xb5c) [ 2374.349733][T19366] r10:8318e200 r9:00000003 r8:85f56200 r7:20000280 r6:40946400 r5:85f56201 [ 2374.350073][T19366] r4:00000000 [ 2374.350271][T19366] [<805bdd34>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2374.350589][T19366] Exception stack(0xdfd49fa8 to 0xdfd49ff0) [ 2374.350972][T19366] 9fa0: 00000000 00000000 00000003 40946400 20000280 00000000 [ 2374.351311][T19366] 9fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76fd70dc [ 2374.351636][T19366] 9fe0: 76fd6e88 76fd6e78 00018fa0 00130a50 [ 2374.351890][T19366] r10:00000036 r9:8318e200 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 2374.352326][T19366] r4:00000000 [ 2374.352782][T19366] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 2374.354609][T19366] ---[ end trace 0000000000000000 ]--- [ 2374.356854][T19366] Kernel panic - not syncing: Fatal exception [ 2374.358741][T19366] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:51:47 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=00000003 R02=00000003 R03=00b05680 R04=00519ca4 R05=00b0e578 R06=00000003 R07=00b031d8 R08=00000060 R09=0051101c R10=00000be8 R11=7ef952bc R12=00000000 R13=7ef95160 R14=004ae648 R15=004ada88 PSR=40030010 -Z-- A S usr32 s00=00000000 s01=e80b0000 d00=e80b000000000000 s02=86003072 s03=00080248 d01=0008024886003072 s04=00100006 s05=0406a003 d02=0406a00300100006 s06=80030480 s07=8c080004 d03=8c08000480030480 s08=0880a38c s09=00048803 d04=000488030880a38c s10=b0030208 s11=00100006 d05=00100006b0030208 s12=0006c003 s13=d0030010 d06=d00300100006c003 s14=ffff0406 s15=a003ffff d07=a003ffffffff0406 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=7265646e s33=48860030 d16=488600307265646e s34=08000806 s35=000201c7 d17=000201c708000806 s36=20840800 s37=03000400 d18=0300040020840800 s38=08000c80 s39=b691aa8a d19=b691aa8a08000c80 s40=0c88030e s41=03000800 d20=030008000c88030e s42=10000c90 s43=0ca00300 d21=0ca0030010000c90 s44=9a001000 s45=0606010f d22=0606010f9a001000 s46=00000608 s47=9a080001 d23=9a08000100000608 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=3a5a0493 s53=41bacca2 d26=41bacca23a5a0493 s54=0ac764d7 s55=ff0c5a96 d27=ff0c5a960ac764d7 s56=01208cbf s57=ef17ade2 d28=ef17ade201208cbf s58=5830bd3b s59=54804c47 d29=54804c475830bd3b s60=65a04f77 s61=cd00776b d30=cd00776b65a04f77 s62=3b378e3f s63=411c9522 d31=411c95223b378e3f FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=ddde5680 R01=5b511000 R02=004f0325 R03=81b6f4c0 R04=00000006 R05=82af9c48 R06=82a0b444 R07=82af9c40 R08=855b0000 R09=82af9c48 R10=00000000 R11=eb165dec R12=eb165df0 R13=eb165de0 R14=80349bb4 R15=81b6f4d0 PSR=60000093 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000