last executing test programs: 1h28m51.171885818s ago: executing program 1 (id=2): r0 = inotify_init1(0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x82000580) inotify_add_watch(r0, &(0x7f0000005780)='./file0\x00', 0x9400002f) 1h28m50.028691463s ago: executing program 1 (id=3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}}, 0x128}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1h28m49.459488015s ago: executing program 1 (id=4): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c000000090601020000000000000000020000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb0600044000040000050007000600000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1h28m48.687758739s ago: executing program 1 (id=5): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$VT_OPENQRY(r0, 0x4b4c, &(0x7f0000000280)) 1h28m2.970457063s ago: executing program 32 (id=5): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$VT_OPENQRY(r0, 0x4b4c, &(0x7f0000000280)) 1h27m36.48576552s ago: executing program 2 (id=50): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_getattr(0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c040) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711026000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1h27m15.827582952s ago: executing program 2 (id=58): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x158, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x5}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x128, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x8, 0x3, 0x1, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0x10, 0x1, 0x7}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x801}, 0x8040) 1h27m15.497573538s ago: executing program 2 (id=59): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000800), 0x581000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x301802, 0x10) r1 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000002240)={0xf, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, @val=@kprobe_multi=@syms={0x0, 0x2, &(0x7f0000000880)=[0x0, &(0x7f0000001180)='dvmrp1\x00'], 0x0, 0x81}}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8932, &(0x7f0000000840)={'ipvlan1\x00'}) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f0000000080)) pwrite64(r0, 0x0, 0x0, 0x2) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000340)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 1h26m54.736583311s ago: executing program 2 (id=62): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b00)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x57b2}}}}]}, 0x4c}}, 0x0) 1h26m54.493884248s ago: executing program 2 (id=63): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006100), 0x49f, 0x0, 0x0) 1h26m35.017189861s ago: executing program 2 (id=66): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000300), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 1h25m49.499219893s ago: executing program 33 (id=66): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000300), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 1h8m40.177430998s ago: executing program 0 (id=709): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x10, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1h8m27.156595519s ago: executing program 0 (id=715): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_tables_names\x00') syz_fuse_handle_req(r1, &(0x7f0000000cc0)="f773091228a43a58c864f1e0366b07de21fe64fbd0bf85a894f8d30ff6cc5256c4d3abd726c119dbebd0ddca6ad62fdbc55f46668ec0858ba96bf6733f0be147e9108ebf89278ca74e07fed107889459c0a5e30616db71c6973818d14e3571c410aef47e6e54ba02e48ec733ebc921795a1f431faeecbc65696ffb9e08760f45650f650d24af651d9986b956d8dd66017f17012f2358b5f69dd63f9aa5fad2ab7ee6df7c99f0b5601e1dab2ed5ca6aa237c52a838d7d51293628dde608fc4ec691b6e2023ff6a6813c505fc81bd0a0de800a5bd701a401ed07139dfa917e524c7d8fd47094122e9acb0382682d0b2adc54ab61c2d9aac6b5b0d50623187e31ca089585dab35411759db09bc44178011883cd0d5ab3fc6f8be3d0e71f083fb911a229995801eeab83581aa5bde0db85ff5c77aa311fdc9f9b4b4de0a96d371b6371ace3923e5557c7e911f522e132bae799ec6d11a43ff7420d4833d306f261ab6636b1f7d250829700456e3aa69bdfa28f24acd27b4df16cf417a7bbb852fe7b50e3841708110ab82af1e1145c542afb83cd7b542c6e310a86cdb76d492955312ae6665c95f36a0683bd12a394d6a45a0f38fcde7d665c4afbb329f3486e1b21af321b3f933d585d885485e6d9448b35e0f8d825365ce26af6cb8fb7466b66491e34b5313019beb3b2934b369daaa16b73734d3f787dcbe3115a3da3804aca82335ac9b20823728a6ee0d292dbcebb103ecdec0d27ae3a3ad5e0040cb78abfddfe16f98397c5f1f910372454722a612a0cc91ea8f709544f22c4e3bd70840745638d83b74197c0b22331e3b107af26097a37c8dd2b91e5156af1a33e06846eb15aa2fe95b6df98bfa7fe28693e0ed082aacb3181b657f81790d4556506f8f2a3753bfbd2949429dc3cd1e11291e82dc3db974a13d88d9cb4242165201f3d9b130c128d057bb9167f12859fbef6de8216d70eec7d3706b9013f9b8f61d8059ab50904b66a32376840d8c3e714bd6ae87640f352ca2b4fa2c1cd83f28d5de889f1454605fdd49c7a7cf1af226895ad6ce6612063d88ae60f5b8af22ef1306f55205152f0e72f2edee901bd89136eebed01475edd572f5a4da8b34bc6db8f29944cc720cf2b03cd2f768a34a81fdd58693fe859edfb2799b3f90cae32b6d2c577dfb9e03ab2bb25a41f53a42c11c89a615bf1c44f5c61084c70882a55fb3039792e9fff127b323c0783c506b6e4b7079cf27f67fdb191256b7c908e1e30a8f72072ac4323337062da5132369135408bf74e1b1f6c1bae332f75291d7a4f4aad4b9f70be298868305486c519434652da2535ff7924324472fb23c84558a5b1578ae94c8805becdb99eba47add535fcb7a72ad9b5d631b824a35d58807ea066bbe53859c50b5adb3508ccb3ae974ee187e40dbfc09a326b06a6004aa81c6c91eadf97ccc77cf9ccf4ed92199d95c2c8d5c965594e306d4e8b78d99d2ab0d282890c9d34639d719488b8d5fd3832a01f1a5f75449f460688e63825421aecef8a43a187739d8b1e14e54c658d57e4cf607430ea530720b3308609b57a9148ad5b921d94b6bb775880d492bb515bbd30caeb4ab8fc8b0c392a6c76dc63ca136d6e76e49a0878ea9577831e7bb3b4e3915b09222d3ccbec1b3dc4b1fd1515f302ba48d15adb9fd7aeb26fe553a60dcf82ff70b6c5d7389c54194e46bf7768584acbc18c7fd7fe0fdb11dd32a322f0ae97b481da34b47d0abc16c6d12f8e9d12db2dee5a1d66d5876bc6e100e02f3a921088947fc1d0a4d8e4e878e92cee18ceb78c7d9bf0204cc515eb8185b985e967134a1400b6a5b945b3ff86f62c2da8fe6dc8628ad36910b863a4b7cc519d853e6e3c6aff4d91862dc8c1364a8559f0c58f88a90ca4bc4a9d1aa2026229d46482819df72902a8d77615042340d758bb49153eb695823d43ef50e10e700a7303a4b798499464f39412a7b2cd7c460717364c595f3711d9ccb710075ae301100ce9f0c5d8b6ccf4f673112e2a7c2b29e56ab556d3e9dc0e777da840e1e304a24227bc9d1ba3c31f2bfc39b6ffe06e7dfc08ffbb799f56c5e9b4ce9120d10bc52d4d105167b30be7d4afa0007c59c3324121568fd4f48778d7b17a1ef117036520d25367253d763dd2f1369ef6562afeaa89dcbdd433ef80f92c41143cfeaf46325f2191b1b29b6a457e0a88e7a54dfede8e186ad4fd4d3eab77136d9e403dda03ddfb24708d648840427087481424d21b25a52922a359129ce109fec903fd33f03ea6176cb7cb64567d08204902acd1f1d0146c7c8ef5ca24d04209f2b55974ed7e11eb081beed06eb03ddb5ae80e3424d52741a5e7c8c89006a62f6ba37a7e39b75566b8d57cb11fd23ff73f7f251bfcfb74336760296a801488f77a8f0a830eb4ca2987be3ce42e2aad2f4a975d95eaf0834fbab05a7e97837c0d49ba31c93b2cd3ea05319ce1d223df3a08fc35d6d99bbc863602bc84d26926241ff70d7715d27d60b201315264f2ee3ed0ee2d1959228d9b388019151580a4a68449fd37cd2c894d749a0a281c4e458f5bfc76189e7c2ae21e318a99792090e7bb8bc73ead76439a4408b2ca49678ed93ececfdaedde0bea7f8df33910ab08518829435e642bad3aa9e373fdeb80c981e8f6f11602a8cb23b25dd718296c698aa602889638041b286c3234ae10d7d0c8ff1fe301735a467475db85fe88d155f4a8ac86937392129141f2784ff559c7dc79f0fc6a43c940fe735d91c74e3975415969548a9d7e996b5d6a0801e09519ab3852e8c5cc23f380be09fb7fd37e0cbc9f540a613aa289cce31fa3ee913e364a8a8fc1490087863222160b6899e32a391e090d41bfc961943d03f7b2f8e49750a04a20f2e2ca2951498e0fa8cf0d33d022d490704015c0a83ffb9f44114e37a386f2c7f940cce802edca5ff4ddeae0666167c2a466aecd919629185f491a210d407ebd09600406178ecc818a7cc4867ff14234efad41453027f6cbc62b4649fea7b227ede841e9816d98636c2a2c950680983d2375233a7dd64dc71c9733f5502ff4016724506ff026ba71df2623446f083df9e6df6e7fb701da63c640f8599e09cd7ea1b818bc34349a051430fe5791df7724eda9eae0adb53ec1e844565abe44063a465bb2ea15fa53342cd1229f0b6092c7d544dd0ffb9cadda6930115a66a5ae892f3661e32eb3ace734f4386da1ed040dfb0155ee3f079ec72a3bd8da69b943250a3d33fdc8f4666d77c680db12e0aacd2ea7adf4b00f86733ed27d3c7d677f6a7b60c3657a599a7a36c88e5c805eb7bc022613b6ed3489ac3217bc25e862973d9b3f2235049452aeeac96f3e40044df6d2dbde64b819bf1ee67c6a03566e1e5c8d123adc7eb0410be047cfecce48a5eaf41a718f5d1b78c17fbb6fbcf003f6b1dba0a00558ae60e6413c271bb0dbf733aedd68eab4f8d884bb46b5fd833dd718e6c4ea58ff44f4137372494ae1c74d2ce3cd66526518a798f095fa804088d18d2695740e930b8d57eb55ade001c1cc9c734b77da57482e024503a1ea9e2a43943a308b5285d622ab623b860603122b41fcc249f224212cfbdc8dbc15e791ea6f51c44154619c98661664b11a34d20ecec388d69f5b32fc674d0ddf2b1365c8709a529b2eb3ba0a0547bdde3adcd272e0a41de9904999fd890b75fed8e60f1f00bc8aac46d8043ff2451541f644f270d9fc65a0b772078b05a6ce60c0df8b2540d89d052fae472867edf3b03a252bfe8e9ca3d2e31c7950851d2e7e7273c0109f2ac002747d277b6c9e6a9bd51d57c59b178a6e329c81c7bf2f5c5d345b2e990093b2e47f79807a62017fcd34efc671c7c6270a1a80f60fba3fbabb48f294ee3b1425b6e8c0fe7b14c31c2b0100d8c5f50349cff1e4e0d3aaee1f4afe10f5c234c1c4ba670111ba0d29694811f3dc242a73a9b042535f3ae8ec5b94240fd091cdfa157e7d27bf26412cdbe54ef55eb5d7183ca5ef0a9f5e81aa6dbf705e3a0d542a7573ec99ae67293970aceb8ca52c9eb5786196cb61947436581745df8a5ca11706001844f581317d43e29fc6eb1d1b011278eb4d77cc6a2e1defabaf87177a162f6269abd97503cc26aa73a18a5954e88692b63e34ba673a6b302ea2a59679ef60094c3db6f3874dab8affd12a7d12c53e77efa807d3ad845b908438b59461da39c072c6ef2fb1889f9a9e39a9256bdc71179c98399e60df6b8224a30e22ffd9010488cbc101ef020ea78a90977fe35586b4140339bffbcf32d81b04f789a195a44f289f44c714e6163afada072871122aaf6f60da967554de66cc4ecbf50aef5d02af874873ae5a36a576eb5dfd749b6168e395ce5817d6275b25d6c6ecdc6d8c4a39fa98f749d6584ec0312bd781a0a14fca35c8b0ac2cdb5a4b15d03966ce40cae66ded0cf7afbc5f1a580bcc596360f9253a70f05ebf3a58ca30b05b6edf4367d988e6dde2cedf37237ebd56da02edcebd9ba841c210ab52bdd869fbf3a783b44670483a012419a50c0114863a97d9f152e63a3ffffc4c83710ef02a3a9c718450f4e8f918c2c551d477a88e91c67bf1337a52f4d680e9607a295feafe09e1a0c5e3c1a18c5390a6a84fa19dbfa2abe421021b471f1e80811a4ba036a9a457fa323b7fa65e666a08f673ca92a02c03d6eba96604f770444b96297307bc23f6a928f0da3d97f522125592c092bb32f97882a59603b268167e970bda981299524929e111e31b3301285cfd9bbbf0263d7e2e19cd42e56920565eb5f45f99455b0851dcefd6d91575ec4e273afaad0f7e831d46a8d5f95244e06febe9d9c76fe2de20e561b11d39a4884d29e68773aa85327279e667884f8d4f965e8b12815076da686c02d17a32bc97de630508b06b091a7fa705bd705a3b5e85975db69d4198f23547686cbd42dfeb495d2c0c2c4c155dd1c8c0522836b271015c8f23a5c129e49c0def56c0fd2a5d010583b4d2849b97dffa9d28dbf783be484de51b8c1facf821d8f6a295caa97f5245c8b3fbe71b47a3390f2c2ab9f6ee41ab082c6ddaed769ddbd9188c970be2843f4fdfe32d3b9242628e3a1d037746b564b4bf6cbc37824444a78605c010a00f2f8abded984e664c63a10cb24e0c1d2d53873d519475651d73e1e228fba31b3165de6572c3f4ca692b73652bb77c423a191d45e90b122e0a66b956302ff7bacccce85e7428d8c574ef3d78884495c95f1416c3f500f5be2c0a70303ee19d4e81c1360db322a0400f311caffe568d07adaf9d6bd6f136f0886db4fc6c2cb956b79064b61afe3abd2ca638c62bf89ba91cfab89aeb6fb4eee6b8a6a321076ed5efbeb369259390e780454eb1666c4fe8366b00765b5639e20827349f4df49c90bf5dd320b36510fedf5c18f59ee14e1a8e436f02506d6c6c3c8c3328eff00bcb66ea3a99f2e9cb20f0efcfb09876f7860ce4294de8c5ce007604031a8dadaa20955701736218a159845f8cc7a485412bebaf653462459380a2cb0900721d570391f8e62869546a610e8478d9536d473945a46d9a89686d1dba43690a5a4dcad2d4fbacd877e38495d4a1696bbf46ae8fc6a764faf7c67101a785d259ac8a6df1c7fbd006e9327e24d8fa4c569a5e37fc047521cf520e2bf11dff07f6c47442db2fe7a94a7b557454363043ad4fb00d2842a16a2b25fcdd5aa38d585600cf81e9d202822c4571a12668cc202ef3af5704337bd134b99c6df8538316c9e423032e4c3b73b1e26571b9890ee5a5f9885321281c1371614b57464647c8d5387dcc9878ba4f9c4f65cb3d34fcde5b5fa1610c28f50ddf5a1ccd682ddf4590adc3d3f98b8f98fcd1845dadfb142dde12116bf36d7b738d930e10c3317a0222914e059370b463611c7e8d37bab1f834ba690c98af9924540256cb073ce89d05715e50cb79948451c8c4fbb07f497e860ed293803689ba1895af65c8d97c276e2cd0e7bdbe50655293462dbe64499184a7b8a89a454e38219b5e979c98badc75513d7a6862e2db939347d9941d906432ae41b67df54c2c92568d847fbaef8773dd466bdaf52bffde53fdc2514ae006e19a9599e0fde9c5772c3b30ce30d8fd5e0f91fdd8c66a8884575adc7d2970321520722ab1ddeaa64aa21855f9263d0b51d2b2df0ab28cd32d709c0984ed7f0ef4ced427e99230553a0b0453b1f6daa0ff63cd7750cbdb5f3373ea044ead7c91acfcfdac09648c06f4520a6766d530b37ad2aea22b50419b26f3a40df01f4970a104df6893d6e0b6b3cf88eac9c3edd9e724c5357283e933173dce77bbf70c99367b68e55cb0a3e16d1696c571b483640c33b9f229d837fd1d303608ea286643ccf46dfbd26d2484c79827c6cf896e4904a1febc39932c76a17606c0a62010932fe29877c00dcf7d65fb006594d8869bbe7f78138a78a125a475da225920235b47ba8bd631815926f7a5c4ff69d61c39b26b078760dbceefaea9aa5f08c97d2e97bd478d014ee739db93824bfa7d3167f789624e5a98873422a0176c8b2a69eb5a01dfdb22ac1cb7f9294df6ac1245d50ec44fbdfaeb145c9bacad2abc7e160993afbad2abcb9c1019cfe0e358d1c44676cf002cf844d83de959c3c3f074bad5ac0326d0ca4864b2fd724beb5338e81fa81fd178e14e267c06189ac51fc6a248398986d25d6791c98d330b37a59b3d9c46f94e6170ec499fb3f27443c185e261761d9fac5fa44bc4912c41f93a642b89d51afa016c87d086a145255e808082a2036ead976bd2b78079f8410dfd8fbd15048e3264f15491204529f6b0e5dd560caa9113f9491433b9ba54dba2fcd648928717a1499582e6acba3dd28364b368a1e16b13a2cdaf13ef8b0d4046f8c2a5f280d538b0efe3297bcc226c17688be16315383fe043a7c51a8bb02497277bb1dcc9a16db9d04dabfb0bf6eb9f408d18266fa45d2fbbe3b18b89d6dc7c5b947b741925ac93991554216773ac5e0dc903d966e8fab10ae2eb22e002aebdea2d800ba75fe33082561b9222997bcfd8d246dcee7c46ba0a12a361880b6c4bbcf966a2ac0600d69d39c6c43c783859e5212dea9944a658c6fcf33df2be59da18f1385d3425bfcafda04071b83539311884d4cc8db5838dd84c3d8355292fee226e5a69c6c9a31f1b5406cebd486ffd050928f3916d748f159436fe37dbef68656842624063833cd1811151e9f05dc5ca63191587f51274b6ba07ad44e104a20dd2fc6d43e0274c35f926b56591cee7670856d5d5194df8bdbf608f77cd8701f0ef26a0e38e4cca58e4cc699065d27eb74bd6f89755779f3b2a73a3a0d0f655755dc7cb91772bbe0b89d360353335e545d8c3133260b2ade1814e2fb4e9bea7db3e30fb62c936544a91170ec2f86e3ae75319da0d873a05dc9f0e14bc709028e11da854a03d3941a51e6f3e0d363528c9d203fa5166d9aba23a49df941d5c902aaa68a3b99a709e9d9e3adc96b581494fd2c7e4605af5891261533ee403218c6901a37dec5e2d65dcfec9449cefef4eb4c4b793f34c9b0187ac1e9302c880149843a66feddfcfe47c5e33eaf1ab1eb0ed48cab980df0fe3e11c46a27d2be9972af5ecef3081f77ffb8640a8f3694085228f7400dbf177931fed7a9fada79fcb76251e5b64087e3e4d4fe0a5b86d7e6ddf47fcd131f68796de8c9e86bd6b08cf54ffdd5e10389e0d2122d72de173535a09defea837a519f96e1e795e6e767a2ea7ebcb44e96a11a2910bfc1b5221012732bca14534a2a97afb0faca2bee78f96b59930e27b7b410b53889a190ba70fd1b5fa4418f8fe6df52457a9f814eab291bd45471c20fdf973c0f75bb052417b69592e83cf8cb34b7b8189c01ade45736c77cfde6f44448b78e02ef376d75fd2f95fb0dd91f9321837777f5f514f083bab481b66639af323383a4d715a0c3a216536c52d3fb3933895e1709b25a84a8637a125a5fede40a90d84218efed8b65c021bffc279a4b30fd0cb390a95d1225862f37df93bc97f1192e725bc38e81ca4a4d59f18afc9d89793d3834e1781a8d5e4d521aa3c34b4335817f0dd88771a31d3336e14645323ad54c728cf1b0fe515602c064b41885ff14ff394d4deef3c5de136fec1a05e3662cf61f29a74e9da23f116585d85d3806d015fc8783c08916546e18c92c737f31a7d35c72b3bea01fd852e7dc6d68f24bc787ef7b7df2c4acff86981597a7dd2aadbf40e26109a10e856a78929e698c308960d999783134d7f5abf90a9ecf67e496818ee42afe66888b41707047ecf3374be56e6be6d878531057d4b16b7ca749ec672842c057868ca4c0f9e69e6d92432d6331c4c32db2a93d50a690a0659d4c9bc6fd75f7201f943c603bf7caed8d218ebcf947ea685c0710c26aa11ec886480983e06b9be0168313de87b0e068f98bd14f2066e3fc3a058c32ca0da2a1b449814755e935ab360b15bc91f5d44e54ba2a8db07d1c3854f6b38efa006263300f2113c6d3481868e08d406545a25a8dc75b01e429853e26747023913298e7b5b174c8dfd4e36a81061ba46beeaa200d6003b9f0cf50caf3d5b06632d25fe7ba91d2a97f7562555a67876e334c642e48e753ce6f12a78329c381a1349cf5d89413d04a6b93c566aa2e335f4f0732567388a9df0b3084d57f6393eaf5c20fd7c3c29981500dfd3573a16ee4bc56836b5c3e75ebdce347e46f3d1247a936df69a259fb35ff4372b774f960aa4e8d84e4ae54caaea634d37d2d4f3a276e15176e1f00a906b2fe6ceaec16cba278d0eacdfac9dbbe5af60c5f923ce670315bbc29ac72e9f848d2c168949d7fae8d19fb86ac5511c36035c6c101063cd5b8b9902f8f51b6de2e59da3e5ddb25eb6e9dcd0a64492da36f8a61c9e2b33dd731f0423fd407048346d5a19fbb84c1d23e34f5e43afb32f3c6b85c550dae394285b233ec5ae2ac8646e2804f2c59e870caf6fae5d6df810bf6bd64562b288af75a5d42478475dd72e81651453558e4f7370cea3def6439ccc1ff644e7d0e9c5c286b8aa1881b5bf641ceef24f557b68bb7532af2139b5a890cddf0b1e26328070a43fe509609fdc6de4dfcf8f2f4a79ada37a05b9a2bcac4df7774a79f6aa569b4dd4cfcd944d64982c13349f5a880baa7b5f20aa55af6077299c6d53e0c6ea063d45d8217d72104012b5d82ec46fde056dfc94e6cc9d61bbd1bf08401d1ee163f3d7f88d3481c0f395765e6653d6678dd73a71d411e0ea02608b226357ead909c8d5643527dcd1e0f0b7a785cf691b59812593bcba54624fa2ad1db9547b78bdfe0d6ba2dbc3298dd0c539260235adb385a00989685705cf3631ae545dfd8e2813d5a2ae507f357ef3ed5dd46a868e04cfca7d01edf77c19c6d4477b9a57c7629dff4afef542d19a1b559e55488a3083ad29b98019bc54cc59299e30aa5cdf96e073ae593f644ca0e7f334b1979d16b436e624747e9c86cd985d126bc7495dc27d010347f7a76266894de2ec5d2c9e460e723b0857313e17a17a6a2ad9983867cb78dc5dd3eec56056fcf4a76acf11af6e74fa9c08dc30df7590fccc00e8e972736397ba8680fd56f2fd3758d628c3c93c4222ded9de6b2341cd49325af64d48de4e1c62dea24b19e82f3ae3cf1212671774b510d2e2c18141b5b0ca54376d311443bf5bea59d9f07cb83767904e644a5cb77830f4f7f92de93dd6498ad091384d8899fea4d539ea6dd9178b07bcb47704e37ce6412ab52e24108c890848f9ae08f3c7bd72362cea73dfd0ffc8b77baab1fb43f9b2247f3c20e1a67839ddb28ba7ebef67abe121c3f55d1b63cf32698e068ed11b514f23b8762d55e6394613bb895b5f6bd256ca0732acb067f916bdce9120dffa8a9473815ccd35b3d622ee25ffb98bbdbd17955a0694cac0a64254ae997a9a15137b7f923f611a1adaea3fb6ef547d5a3be44a14be44202b1679968ded791d3a7632cdf4cd3c762d022cc3109e0b10b62b3e779836756ca3bb65a1c8a7fff871113f1975b556831aaaba1850acf0953383e223d3371ae4753a323dda2ea9298cf94c15abb084f8548672b257225544adb2b5eb8fa348a32a20f15d6873bf5dabde8fd89a76903d6f75e0c57c4d6918a3c3120ba5e5cb955cf224a17bd49bb08212d585ce979199247a40757ab81d9e1fbddbb14f015908a9aee690382cb07557beb1b157f5a3b279615d5b7c64a83d229a87cd16a6d401c06dc84ae286075c4d634e6f91dc7a284bbfc1795acedb1fd43c5c2e8ed6fa237e3d06a69b4fb83aa47a12e4ef83a5c5741d85d8342247d4d979601b66867313b1b8f19f769d13c9fbf6c1b2e272d0b0e875743c138ef0c014e1d8985642b029d35aa073d283da1367e869561913a1a0463cf3cc6c41835dcb60d69f6f71aafeede9bc6987c4a68c9e0fb3c1986433e6e45d23a5b03ec664b00cf6a207a8e7dccf7d493bee9a44331e8c1ed92d5cec7afd206d3a3cb78f213b4d2aa8c1c9b0730d818747ddf1027aeb8684944c5b9696ea935f55b5be94f69bdcecc50186cff82a73de8bd231314d9217b6089b8cd8a292793f1fdec1c5af1a2df89c1e300d2fb93516d56060e08f7e4c50b5f227325d0908677653d64dc5cf838f39e271ad79f0033b6b2a5611d5d1f9bb984e6f7d735c5bf0924d873e20e5869bd6d94d9f0994a78614dec3f36325299d189293dc5a4df8cbad29d1fd7f9b51c1c9e48e2238aaff3243cd346deb4ba8545af524776300f648c6728b0f97d17f7ec45daddd62478890a166e7db997047df69ded08cc4d9d8297259dc4100c88359c880dc855ffd5ef3b0922a5b00dae3daeb70441e15dffb415adafaaafb5f5c03b610a3c9903662c236e23baf01337a669f5e174cca1ec79ad7f3cd8635fdcea958cb67400bd01dd03a845fe820f0e7f19776867f247e9c2536ad2776de00480246ace33002c284d7a8929d1e708da9059212ae6d7da49afb9222c97983529158f69bbdbd8f502daae24aef87d0d8a4085dd0740ad1f33178b52447f43192acab0b9aa777262142ec29befefc95de9637f3cb7dff186af2020378870015feadf7b4bf66959cc81543ae33312e4ae3e9c152a65eb76df86b788d11a8534227a8d7e330ef48f5a1069ce4152bc6b311e4636d480272527fcc60c5c3aebbb513d06246ef52e33e7cca789f106ca53df689353c3a518c6dd4719a073f83ea70e1b37c312d216ef26f806f13ddb40e12e3c8b31ccab1440fcd2a2f2f7766997a610a1ad51108163ab4da30219c9a5a2545b19041bdff4e2569f3c281784ac3982de68af9405d634ea1c8d814d0f15b946a1e2130a2995e2d2330be135f21bf5abeb851c65cc3227aff2ce2d88325436409d725a5523253a722af8360a0dee622adc4690ae49f6c3445d2bc4ae75595874849b54798724a0a9f6161caeb83ad17c2d7325524d9acb94e80c7626458167e624f62e9dbf2c49ea52f8c978481f6fdce7222a4c353d8a77034d7a3e3237d253ce3402553ae63a4519298e96b534bab3aadba3dbae70c07fa06e03f89b711e1deb0e9f4dacbad30374777a2710dec408fb8531acb5d89376c07b5673cac6e361935", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r1, 0xffffffffffffffff, 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000500)=""/194, 0xc2}], 0x1}, 0x9}], 0x2, 0x10100, 0x0) getpriority(0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 1h8m23.306678s ago: executing program 0 (id=718): r0 = socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, 0x0) 1h8m21.688353576s ago: executing program 0 (id=719): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x884) 1h8m18.188576218s ago: executing program 0 (id=721): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f0000000000)) 1h8m14.929588944s ago: executing program 0 (id=723): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000004}) ppoll(&(0x7f0000000180)=[{r0, 0x4}, {r2, 0x1c}], 0x2, 0x0, 0x0, 0x0) 1h7m39.729783216s ago: executing program 3 (id=736): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 1h7m38.807952476s ago: executing program 3 (id=737): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(r0, &(0x7f0000001640)={0xfc, {"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", 0xffffffffffffffc9}}, 0x1006) 1h7m34.187667361s ago: executing program 3 (id=738): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 1h7m29.14847965s ago: executing program 34 (id=723): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000004}) ppoll(&(0x7f0000000180)=[{r0, 0x4}, {r2, 0x1c}], 0x2, 0x0, 0x0, 0x0) 1h7m15.896628857s ago: executing program 3 (id=740): futex(0x0, 0x9, 0x2, &(0x7f0000000640), 0x0, 0x0) 1h7m15.834387553s ago: executing program 3 (id=741): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05100000000000000109022d00010000000009040000010300000009210000080122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, '\x00\x00'}, @main=@item_012={0x1, 0x0, 0xb, "f2"}]}}, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 1h7m14.838462282s ago: executing program 3 (id=742): r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r3 = userfaultfd(0x80800) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0xfffffffc, 0x80000014}, 0xc) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = fsopen(&(0x7f0000000180)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000002c0)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) read(r4, &(0x7f00000000c0)=""/173, 0x17) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) r5 = io_uring_setup(0x76a9, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x3, 0x1, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) 1h6m29.079588966s ago: executing program 35 (id=742): r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r3 = userfaultfd(0x80800) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0xfffffffc, 0x80000014}, 0xc) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = fsopen(&(0x7f0000000180)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000002c0)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) read(r4, &(0x7f00000000c0)=""/173, 0x17) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) r5 = io_uring_setup(0x76a9, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x3, 0x1, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) 51m50.43507324s ago: executing program 4 (id=2260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000010900010073797a310000000014000480100001800a0001006c696d69740000000900020073797a3200000000050007"], 0x70}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) 51m50.34757273s ago: executing program 4 (id=2261): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020320000b00000000000000000000000100180002070004"], 0x58}}, 0x0) 51m50.233571002s ago: executing program 4 (id=2262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000200aefffffff000000000000020000000c00054000000000020000020900010073"], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 51m50.129758033s ago: executing program 4 (id=2263): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000"], 0x48) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360", 0x41}], 0x1}], 0x1, 0x40800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3b94, &(0x7f0000000180)={0x48}) 51m50.0695841s ago: executing program 4 (id=2264): syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, [], "8029335287b7a081"}}}}}}}, 0x0) 51m50.002749747s ago: executing program 4 (id=2265): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x2000000000000013, &(0x7f0000000840)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000340)='GPL\x00', 0x2, 0xb8, &(0x7f0000000140)=""/184, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca4128654351fb3280df65", 0x800, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, &(0x7f0000000540), 0x6c, r6}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x1c) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="04000000000000ffffffff565e8e1abb0f74ff0000379c7f02d2c909000000000000", @ANYRES16=0x0, @ANYBLOB="030000000800"/28], 0x50) openat$dlm_monitor(0xffffff9c, &(0x7f00000006c0), 0x4900, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x6, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x1, 0x10, 0xa5e, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 51m4.947625456s ago: executing program 36 (id=2265): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x2000000000000013, &(0x7f0000000840)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000340)='GPL\x00', 0x2, 0xb8, &(0x7f0000000140)=""/184, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca4128654351fb3280df65", 0x800, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, &(0x7f0000000540), 0x6c, r6}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x1c) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="04000000000000ffffffff565e8e1abb0f74ff0000379c7f02d2c909000000000000", @ANYRES16=0x0, @ANYBLOB="030000000800"/28], 0x50) openat$dlm_monitor(0xffffff9c, &(0x7f00000006c0), 0x4900, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x6, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x1, 0x10, 0xa5e, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 18m40.797687498s ago: executing program 6 (id=3896): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 18m3.979991882s ago: executing program 6 (id=3904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) 17m30.267341808s ago: executing program 6 (id=3911): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) 17m29.197339724s ago: executing program 6 (id=3912): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket(0x400000000010, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) getpid() getuid() getgid() r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, 0x0, 0x40000) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000d80)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) accept$packet(r0, 0x0, &(0x7f0000000dc0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xffff, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0x0, 0xffffffff, 0xff]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 17m28.756122942s ago: executing program 6 (id=3913): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffff9c, &(0x7f00000000c0), 0x48100, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) userfaultfd(0x80001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7fff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 17m26.002804282s ago: executing program 6 (id=3915): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 16m40.709497567s ago: executing program 37 (id=3915): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 22.578164921s ago: executing program 5 (id=4586): r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000001c0)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[], 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 17.898184201s ago: executing program 5 (id=4589): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x438, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x40c, 0x2, [@TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x0, 0x9, 0xffffffff, 0x3, 0x4, 0x9, 0xfffffffc, 0xff, 0xffff, 0x4, 0x1ff, 0xc3c, 0x4, 0xffff, 0x5, 0x6, 0x2, 0x5, 0xf, 0xf, 0xe4aa, 0xfffffffb, 0x2, 0x8, 0x7, 0x80000000, 0x0, 0xb4, 0x9, 0x55b, 0x8, 0x1, 0x0, 0x800, 0x3, 0x4, 0xfffffff8, 0x77f, 0x8000, 0x5, 0xa892, 0xfffffffc, 0xd, 0x0, 0x0, 0x9, 0x1, 0xc048fab, 0x6, 0x401, 0x0, 0x80000000, 0xcd3f, 0xc, 0x4fe6, 0x7, 0x0, 0xf, 0x6, 0x1, 0x4, 0x7fff, 0x94, 0x1, 0xffa8, 0xfaa, 0x400, 0xfffffff9, 0x22b5f307, 0x4, 0x3, 0x59, 0x9, 0x1, 0x8, 0x2, 0x4, 0x4, 0x1, 0x3, 0xfffffffd, 0x5, 0x68, 0x5, 0x2, 0x8, 0xd2, 0xfffffffb, 0x0, 0x95ef, 0x9, 0x6, 0xfffffffa, 0x80000001, 0x1c00000, 0x68f, 0x3, 0x6, 0xe1a7, 0xcf26, 0xbb0, 0x9, 0x7, 0x1000, 0x6442, 0x3, 0x10000, 0x80000000, 0x4, 0x6, 0x1, 0x3, 0x7, 0x5, 0x8000, 0x8, 0xd0, 0x7, 0x9, 0xab, 0x8, 0xc, 0x9, 0xd, 0x6, 0x3, 0xc, 0x1, 0x9, 0xd, 0x4, 0x4, 0x100, 0x2, 0x5, 0x2cf, 0x2, 0x1d, 0xcb, 0x4, 0x6, 0x4, 0x9, 0x1, 0xa2, 0x0, 0x8, 0xc, 0x7, 0xee, 0x2, 0x80, 0x5, 0x1, 0xffff8b74, 0x8001, 0x10, 0x7e5d, 0xfffffffc, 0x0, 0x4, 0x80, 0x8, 0x7, 0x7, 0x4f5ce71f, 0x64a, 0xd5, 0x7f, 0xed, 0x7ff, 0x0, 0x5, 0x9000000, 0x9, 0x781f1cfe, 0x4, 0x6b4a, 0x1, 0xd23, 0x0, 0x12e, 0x10, 0x9, 0x5a3, 0x600, 0x3, 0x6, 0x5, 0x8, 0x0, 0x2, 0x3, 0xfff, 0xfff, 0xf, 0x3f190c17, 0x4000, 0x7, 0x3ff, 0x4, 0x4, 0x3, 0x8, 0x2, 0x6, 0xf, 0x40000, 0x413, 0x0, 0x8, 0x1, 0x44c, 0x400, 0x7f, 0x3, 0x0, 0xa9b, 0x1, 0x5, 0xfffffbff, 0x4, 0x4, 0xe, 0x7, 0x7, 0xa, 0x31, 0x80, 0x8, 0x8, 0x5, 0x0, 0x10, 0x0, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x5, 0x8, 0xdf0d, 0x0, 0x10ec, 0x7, 0x6, 0x9, 0x0, 0x7fffffff, 0x6, 0x7, 0x1431, 0xcddb]}]}]}}]}, 0x438}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$mouse(&(0x7f0000000d00), 0x0, 0x2042) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 15.950035543s ago: executing program 7 (id=4590): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x2}]}}]}, 0x3c}}, 0x4000) 13.137678069s ago: executing program 5 (id=4591): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000900)={{0x12, 0x1, 0x310, 0xe4, 0x36, 0x40, 0x8, 0x1b80, 0xe400, 0x207e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x75, 0xfc, 0x20, 0x5, "", [{{0x9, 0x4, 0x0, 0xa2, 0x0, 0x63, 0x6f, 0x3f, 0x1a}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f00000002c0)={0x14, 0x0, 0x0}, 0x0) 12.788015037s ago: executing program 7 (id=4592): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x8d4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 9.819156481s ago: executing program 5 (id=4593): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x494, &(0x7f00000008c0)=ANY=[]) 8.738284018s ago: executing program 7 (id=4594): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) ioctl$TCSETSF(r0, 0x5404, 0x0) 6.797168119s ago: executing program 5 (id=4595): ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000140000000800200007001e0018000180140002006e657464657673696d3000000000000008001500000000020800130000000200080014"], 0x4c}}, 0x0) 5.535660397s ago: executing program 7 (id=4596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r1, 0x331, 0x70bd29, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) 3.108360111s ago: executing program 7 (id=4597): r0 = socket(0x10, 0x3, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}]) 2.527174875s ago: executing program 5 (id=4598): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'comedi_parport\x00', [0xd00, 0x1f, 0x6, 0xfff, 0x3, 0xcc7, 0x0, 0x6, 0x5, 0x100ff, 0x2, 0x1, 0x1, 0x2, 0x9, 0x3, 0x6, 0x9, 0x42, 0x40000003, 0xfff, 0x8, 0x7, 0x2000006, 0x800b, 0x32, 0x5, 0x2, 0xd, 0x1, 0xffffff5c]}) ioctl$COMEDI_SETRSUBD(r0, 0x6410) 0s ago: executing program 7 (id=4599): syz_usb_connect(0x2, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d2f6010000400009046a00067af4190009050f080000050801060c8b631b750725010202070009"], 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, 0x0, 0x20000010) sendmsg$netlink(r0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) kernel console output (not intermixed with test programs): r10:b5403587 r9:76f97b80 r8:00000000 r7:83faa16c r6:76f97b00 r5:eae91fb0 [ 3960.626155][T18833] r4:83fa9900 [ 3960.626173][T18833] [<8022a51c>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 3960.626224][T18833] Exception stack(0xeae91fb0 to 0xeae91ff8) [ 3960.626263][T18833] 1fa0: fffffffc 00000000 00000000 00000000 [ 3960.626302][T18833] 1fc0: 00000000 00000000 0012f214 00000150 003462d8 00000000 00000001 76f980dc [ 3960.626363][T18833] 1fe0: 76f97e88 76f97e78 00018ebc 00130810 60000010 00000000 [ 3960.626417][T18833] r10:00000150 r9:83fa9900 r8:8020029c r7:00000150 r6:0012f214 r5:00000000 [ 3960.626444][T18833] r4:00000000 [ 3966.152169][T18842] fuse: fd is not a fuse device [ 3968.300493][T18846] netlink: 124 bytes leftover after parsing attributes in process `syz.5.3531'. [ 3976.369840][T18862] FAULT_INJECTION: forcing a failure. [ 3976.369840][T18862] name failslab, interval 1, probability 0, space 0, times 0 [ 3976.370351][T18862] CPU: 0 UID: 0 PID: 18862 Comm: syz.5.3536 Tainted: G L syzkaller #0 PREEMPT [ 3976.370452][T18862] Tainted: [L]=SOFTLOCKUP [ 3976.370476][T18862] Hardware name: ARM-Versatile Express [ 3976.370502][T18862] Call trace: [ 3976.370545][T18862] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3976.370662][T18862] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 3976.370684][T18862] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 3976.370765][T18862] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 3976.372227][T18862] r7:00000cc0 r6:00000000 r5:8610f080 r4:82b18108 [ 3976.372759][T18862] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 3976.372850][T18862] [<809d864c>] (should_fail_ex) from [<80554524>] (should_failslab+0x6c/0x94) [ 3976.372914][T18862] r8:00000000 r7:00000cc0 r6:00000000 r5:00000000 r4:830c4a80 [ 3976.372932][T18862] [<805544b8>] (should_failslab) from [<805317fc>] (kmem_cache_alloc_noprof+0x54/0x3b8) [ 3976.372992][T18862] [<805317a8>] (kmem_cache_alloc_noprof) from [<80595b78>] (do_getname+0x2c/0x14c) [ 3976.373118][T18862] r10:00000026 r9:8610f080 r8:00000000 r7:00000000 r6:200000c0 r5:825268b8 [ 3976.373173][T18862] r4:8332d180 [ 3976.373193][T18862] [<80595b4c>] (do_getname) from [<8059fa94>] (sys_rename+0x34/0x78) [ 3976.373273][T18862] r10:00000026 r9:8610f080 r8:8020029c r7:00000026 r6:0012f214 r5:200000c0 [ 3976.373301][T18862] r4:8332d180 r3:00000000 [ 3976.373318][T18862] [<8059fa60>] (sys_rename) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3976.373377][T18862] Exception stack(0xeb301fa8 to 0xeb301ff0) [ 3976.373422][T18862] 1fa0: 00000000 00000000 20000100 200000c0 00000000 00000000 [ 3976.374081][T18862] 1fc0: 00000000 00000000 0012f214 00000026 00346418 00000000 003d0f00 76f560dc [ 3976.375782][T18862] 1fe0: 76f55e88 76f55e78 00018ebc 00130810 [ 3976.375836][T18862] r5:00000000 r4:00000000 [ 3982.295127][T18873] FAULT_INJECTION: forcing a failure. [ 3982.295127][T18873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3982.296028][T18873] CPU: 0 UID: 0 PID: 18873 Comm: syz.5.3541 Tainted: G L syzkaller #0 PREEMPT [ 3982.296128][T18873] Tainted: [L]=SOFTLOCKUP [ 3982.296148][T18873] Hardware name: ARM-Versatile Express [ 3982.296644][T18873] Call trace: [ 3982.298643][T18873] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 3982.299850][T18873] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 3982.299886][T18873] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 3982.299953][T18873] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 3982.300021][T18873] r7:20000040 r6:00000000 r5:83fa9900 r4:82b4f348 [ 3982.300057][T18873] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 3982.300172][T18873] [<809d864c>] (should_fail_ex) from [<809d8884>] (should_fail+0x14/0x18) [ 3982.300248][T18873] r8:83336a00 r7:20000040 r6:20000040 r5:831cf800 r4:00004606 [ 3982.300268][T18873] [<809d8870>] (should_fail) from [<809d88a4>] (should_fail_usercopy+0x1c/0x20) [ 3982.300320][T18873] [<809d8888>] (should_fail_usercopy) from [<80a51724>] (do_fb_ioctl+0x390/0x5a8) [ 3982.300400][T18873] [<80a51394>] (do_fb_ioctl) from [<80a51980>] (fb_ioctl+0x44/0x50) [ 3982.300477][T18873] r9:00000003 r8:83336a00 r7:20000040 r6:00004606 r5:83336a01 r4:00000000 [ 3982.300499][T18873] [<80a5193c>] (fb_ioctl) from [<805a1cfc>] (sys_ioctl+0x244/0xb5c) [ 3982.300560][T18873] [<805a1ab8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3982.301683][T18873] Exception stack(0xeb081fa8 to 0xeb081ff0) [ 3982.301758][T18873] 1fa0: 00000000 00000000 00000003 00004606 20000040 00000000 [ 3982.301830][T18873] 1fc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76f980dc [ 3982.303144][T18873] 1fe0: 76f97e88 76f97e78 00018ebc 00130810 [ 3982.303331][T18873] r10:00000036 r9:83fa9900 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 3982.303361][T18873] r4:00000000 [ 3992.240055][T18884] fuse: Bad value for 'fd' [ 4000.047707][T18905] fuse: Bad value for 'fd' [ 4002.626583][ T28] audit: type=1400 audit(4259.531:682): avc: denied { read } for pid=18908 comm="syz.6.3553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 4005.174197][T15296] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4005.450256][T15296] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4005.557310][T15296] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4005.624589][T15296] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4006.270151][T15296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4006.280345][T15296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4006.290467][T15296] bond0 (unregistering): Released all slaves [ 4006.311318][T15296] bond1 (unregistering): Released all slaves [ 4006.446726][T15296] hsr_slave_0: left promiscuous mode [ 4006.449600][T15296] hsr_slave_1: left promiscuous mode [ 4006.467289][T15296] veth1_macvtap: left promiscuous mode [ 4006.467794][T15296] veth0_macvtap: left promiscuous mode [ 4006.468406][T15296] veth1_vlan: left promiscuous mode [ 4006.468558][T15296] veth0_vlan: left promiscuous mode [ 4006.984574][T18947] fuse: Bad value for 'fd' [ 4007.937291][ T28] audit: type=1400 audit(4264.851:683): avc: denied { write } for pid=18988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4008.256700][ T28] audit: type=1400 audit(4265.161:684): avc: denied { write } for pid=19002 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4008.528793][ T2955] 8021q: adding VLAN 0 to HW filter on device eth21 [ 4009.007515][T18919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4009.014443][T18919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4010.124076][ T28] audit: type=1400 audit(4267.031:685): avc: denied { write } for pid=19092 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4010.624536][ T28] audit: type=1400 audit(4267.531:686): avc: denied { write } for pid=19116 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4010.909291][ T2955] 8021q: adding VLAN 0 to HW filter on device eth22 [ 4011.220690][T18919] hsr_slave_0: entered promiscuous mode [ 4011.222638][T18919] hsr_slave_1: entered promiscuous mode [ 4011.250169][T18919] debugfs: 'hsr0' already exists in 'hsr' [ 4011.253645][T18919] Cannot create hsr debugfs directory [ 4012.124982][ T28] audit: type=1400 audit(4269.031:687): avc: denied { write } for pid=19199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4012.310999][T18919] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 4012.328553][T18919] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4012.331747][T18919] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 4012.349606][T18919] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4012.352657][T18919] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 4012.373048][T18919] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4012.378674][T18919] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 4012.387998][T18919] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4012.686575][ T28] audit: type=1400 audit(4269.591:688): avc: denied { write } for pid=19246 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4014.115156][T18919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4014.890361][ T28] audit: type=1400 audit(4271.801:689): avc: denied { write } for pid=19259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4015.381859][ T28] audit: type=1400 audit(4272.291:690): avc: denied { write } for pid=19267 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4016.305948][ T28] audit: type=1400 audit(4273.211:691): avc: denied { write } for pid=19271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4016.977587][ T28] audit: type=1400 audit(4273.891:692): avc: denied { write } for pid=19280 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4018.043913][ T28] audit: type=1400 audit(4274.951:693): avc: denied { write } for pid=19286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4018.630330][ T28] audit: type=1400 audit(4275.541:694): avc: denied { write } for pid=19294 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4019.504084][ T28] audit: type=1400 audit(4276.411:695): avc: denied { write } for pid=19299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4020.120735][ T28] audit: type=1400 audit(4277.031:696): avc: denied { write } for pid=19310 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4021.047044][ T28] audit: type=1400 audit(4277.941:697): avc: denied { write } for pid=19314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4021.355050][T18919] veth0_vlan: entered promiscuous mode [ 4021.441192][T18919] veth1_vlan: entered promiscuous mode [ 4021.663210][T18919] veth0_macvtap: entered promiscuous mode [ 4021.681374][ T28] audit: type=1400 audit(4278.591:698): avc: denied { write } for pid=19323 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4021.689244][T18919] veth1_macvtap: entered promiscuous mode [ 4021.916993][T11277] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4021.917808][T11277] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4021.918463][T11277] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4021.919714][T11277] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4022.160391][ T28] audit: type=1400 audit(4279.061:699): avc: denied { write } for pid=19325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4022.586758][ T28] audit: type=1400 audit(4279.481:700): avc: denied { write } for pid=19330 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4023.539434][ T28] audit: type=1400 audit(4280.451:701): avc: denied { write } for pid=19335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4023.875231][ T28] audit: type=1400 audit(4280.781:702): avc: denied { write } for pid=19345 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4049.239289][ T28] audit: type=1400 audit(4306.151:703): avc: denied { lock } for pid=19448 comm="syz.6.3606" path="socket:[40659]" dev="sockfs" ino=40659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 4062.352579][T19514] fuse: Bad value for 'group_id' [ 4062.353039][T19514] fuse: Bad value for 'group_id' [ 4069.454502][T19550] SELinux: Context system_u:object_r:scanner_device_t:s0 is not valid (left unmapped). [ 4069.462572][ T28] audit: type=1400 audit(4326.381:704): avc: denied { relabelto } for pid=19549 comm="syz.6.3648" name="blkio.bfq.group_wait_time" dev="tmpfs" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:scanner_device_t:s0" [ 4069.470692][ T28] audit: type=1400 audit(4326.391:705): avc: denied { associate } for pid=19549 comm="syz.6.3648" name="blkio.bfq.group_wait_time" dev="tmpfs" ino=311 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:scanner_device_t:s0" [ 4069.706425][ T28] audit: type=1400 audit(4326.611:706): avc: denied { unlink } for pid=18919 comm="syz-executor" name="blkio.bfq.group_wait_time" dev="tmpfs" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:scanner_device_t:s0" [ 4071.523883][T19565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4071.525236][T19565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4071.772460][T19565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4071.775370][T19565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4071.799670][T19565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4071.806929][T19565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4071.904828][T19565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4071.911484][T19565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4073.482181][T19577] FAULT_INJECTION: forcing a failure. [ 4073.482181][T19577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4073.496656][T19577] CPU: 0 UID: 0 PID: 19577 Comm: syz.6.3655 Tainted: G L syzkaller #0 PREEMPT [ 4073.496806][T19577] Tainted: [L]=SOFTLOCKUP [ 4073.496818][T19577] Hardware name: ARM-Versatile Express [ 4073.496833][T19577] Call trace: [ 4073.496859][T19577] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4073.496932][T19577] r7:60000113 r6:60000113 r5:8231eaf8 r4:00000000 [ 4073.496942][T19577] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4073.496972][T19577] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4073.497013][T19577] r7:85e41000 r6:00000000 r5:84803e80 r4:82b4f348 [ 4073.497035][T19577] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4073.497099][T19577] [<809d864c>] (should_fail_ex) from [<809d8884>] (should_fail+0x14/0x18) [ 4073.497197][T19577] r8:8500ed80 r7:85e41000 r6:20000900 r5:85e41000 r4:82e3425c [ 4073.497218][T19577] [<809d8870>] (should_fail) from [<809d88a4>] (should_fail_usercopy+0x1c/0x20) [ 4073.497285][T19577] [<809d8888>] (should_fail_usercopy) from [<819e37d4>] (vlan_ioctl_handler+0x38/0x47c) [ 4073.497339][T19577] [<819e379c>] (vlan_ioctl_handler) from [<815ed1d0>] (sock_ioctl+0xd4/0x4c0) [ 4073.497390][T19577] r9:00000003 r8:8500ed80 r7:85e41000 r6:20000900 r5:83606f40 r4:82e3425c [ 4073.497421][T19577] [<815ed0fc>] (sock_ioctl) from [<805a1cfc>] (sys_ioctl+0x244/0xb5c) [ 4073.497501][T19577] r9:00000003 r8:8500ed80 r7:20000900 r6:00008983 r5:8500ed81 r4:00000000 [ 4073.497512][T19577] [<805a1ab8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4073.497539][T19577] Exception stack(0xeaf5dfa8 to 0xeaf5dff0) [ 4073.497563][T19577] dfa0: 00000000 00000000 00000003 00008983 20000900 00000000 [ 4073.497582][T19577] dfc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76ffe0dc [ 4073.497597][T19577] dfe0: 76ffde88 76ffde78 00018ebc 00130810 [ 4073.497618][T19577] r10:00000036 r9:84803e80 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 4073.497629][T19577] r4:00000000 [ 4079.017982][ T28] audit: type=1400 audit(4335.931:707): avc: denied { setattr } for pid=19598 comm="syz.6.3662" name="vhost-net" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:logrotate_exec_t:s0" [ 4079.863110][T19601] fuse: Bad value for 'fd' [ 4084.141503][T19623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4084.177521][T19623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4085.017871][T19630] fuse: Bad value for 'group_id' [ 4085.033006][T19630] fuse: Bad value for 'group_id' [ 4094.200515][ T28] audit: type=1400 audit(4351.111:708): avc: denied { ioctl } for pid=19671 comm="syz.6.3688" path="socket:[41986]" dev="sockfs" ino=41986 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 4097.558522][T19683] FAULT_INJECTION: forcing a failure. [ 4097.558522][T19683] name failslab, interval 1, probability 0, space 0, times 0 [ 4097.559122][T19683] CPU: 0 UID: 0 PID: 19683 Comm: syz.5.3690 Tainted: G L syzkaller #0 PREEMPT [ 4097.559227][T19683] Tainted: [L]=SOFTLOCKUP [ 4097.559251][T19683] Hardware name: ARM-Versatile Express [ 4097.559280][T19683] Call trace: [ 4097.559330][T19683] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4097.559453][T19683] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 4097.559477][T19683] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4097.559541][T19683] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4097.560144][T19683] r7:00000000 r6:00000000 r5:847fcb00 r4:82b18108 [ 4097.561003][T19683] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4097.562433][T19683] [<809d864c>] (should_fail_ex) from [<80554524>] (should_failslab+0x6c/0x94) [ 4097.562534][T19683] r8:00000000 r7:00000000 r6:830016c0 r5:00000c40 r4:00001000 [ 4097.562678][T19683] [<805544b8>] (should_failslab) from [<8053274c>] (__kmalloc_noprof+0xa4/0x39c) [ 4097.564133][T19683] [<805326a8>] (__kmalloc_noprof) from [<80816124>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 4097.565191][T19683] r10:00000000 r9:86582000 r8:00000000 r7:8372d6e8 r6:ebf85f54 r5:00001000 [ 4097.565240][T19683] r4:00000000 [ 4097.565262][T19683] [<808160e8>] (tomoyo_realpath_from_path) from [<808121ec>] (tomoyo_path_number_perm+0xcc/0x22c) [ 4097.565355][T19683] r10:00000000 r9:855c5940 r8:82b1f040 r7:00000000 r6:81cda164 r5:00000007 [ 4097.565383][T19683] r4:ebf85f54 r3:828d1400 [ 4097.565402][T19683] [<80812120>] (tomoyo_path_number_perm) from [<80816bf4>] (tomoyo_path_chown+0x4c/0x78) [ 4097.565483][T19683] r10:fffff000 r9:855c5940 r8:82b1f040 r7:0000ee01 r6:ebf85f54 r5:ebf85f54 [ 4097.565507][T19683] r4:00000000 [ 4097.565525][T19683] [<80816ba8>] (tomoyo_path_chown) from [<807cd89c>] (security_path_chown+0x6c/0x1e8) [ 4097.565593][T19683] r5:00000000 r4:0000ee01 [ 4097.565612][T19683] [<807cd830>] (security_path_chown) from [<80582690>] (chown_common+0x160/0x248) [ 4097.565712][T19683] r7:0000ee01 r6:855c58c0 r5:ebf85f54 r4:0000ee01 [ 4097.565738][T19683] [<80582530>] (chown_common) from [<8058284c>] (do_fchownat+0xd4/0x100) [ 4097.565818][T19683] r10:00000001 r9:00000000 r8:00000000 r7:0000ee01 r6:ffffff9c r5:8332c6c0 [ 4097.565842][T19683] r4:00000000 [ 4097.565860][T19683] [<80582778>] (do_fchownat) from [<80582894>] (sys_fchownat+0x1c/0x24) [ 4097.565938][T19683] r10:00000145 r9:847fcb00 r8:8020029c r7:00000145 r6:0012f214 r5:00000000 [ 4097.565963][T19683] r4:00001000 [ 4097.565982][T19683] [<80582878>] (sys_fchownat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4097.566038][T19683] Exception stack(0xebf85fa8 to 0xebf85ff0) [ 4097.566084][T19683] 5fa0: 00001000 00000000 ffffff9c 20000180 0000ee01 00000000 [ 4097.566124][T19683] 5fc0: 00001000 00000000 0012f214 00000145 003462d8 00000000 00000001 76f980dc [ 4097.566158][T19683] 5fe0: 76f97e88 76f97e78 00018ebc 00130810 [ 4097.785178][T19683] ERROR: Out of memory at tomoyo_realpath_from_path. [ 4101.582284][T19699] raw_sendmsg: syz.6.3696 forgot to set AF_INET. Fix it! [ 4101.911526][T17365] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 4101.915264][T17365] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 4102.517958][T19706] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19706 comm=syz.6.3697 [ 4104.567458][T19709] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19709 comm=syz.5.3698 [ 4104.718642][T19714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=19714 comm=syz.6.3699 [ 4104.926376][T19709] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19709 comm=syz.5.3698 [ 4110.606739][T19739] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19739 comm=syz.6.3705 [ 4110.633599][T19739] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=359 sclass=netlink_audit_socket pid=19739 comm=syz.6.3705 [ 4118.360946][T19760] FAULT_INJECTION: forcing a failure. [ 4118.360946][T19760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4118.361589][T19760] CPU: 0 UID: 0 PID: 19760 Comm: syz.5.3710 Tainted: G L syzkaller #0 PREEMPT [ 4118.361683][T19760] Tainted: [L]=SOFTLOCKUP [ 4118.361707][T19760] Hardware name: ARM-Versatile Express [ 4118.361731][T19760] Call trace: [ 4118.361776][T19760] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4118.361897][T19760] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 4118.361921][T19760] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4118.362047][T19760] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4118.362168][T19760] r7:00000000 r6:00000000 r5:83867080 r4:82b4f348 [ 4118.362219][T19760] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4118.362288][T19760] [<809d864c>] (should_fail_ex) from [<809d8884>] (should_fail+0x14/0x18) [ 4118.362358][T19760] r8:ec371eb8 r7:00000000 r6:76f97f08 r5:00000001 r4:00000001 [ 4118.362398][T19760] [<809d8870>] (should_fail) from [<809d88a4>] (should_fail_usercopy+0x1c/0x20) [ 4118.362479][T19760] [<809d8888>] (should_fail_usercopy) from [<809190b8>] (kstrtouint_from_user+0x54/0x13c) [ 4118.362548][T19760] [<80919064>] (kstrtouint_from_user) from [<8064dd08>] (proc_fail_nth_write+0x40/0xf4) [ 4118.362636][T19760] r8:8064dcc8 r7:ec371f68 r6:76f97f08 r5:867a5f00 r4:00000001 [ 4118.362658][T19760] [<8064dcc8>] (proc_fail_nth_write) from [<8058689c>] (vfs_write+0xd4/0x450) [ 4118.362745][T19760] r5:867a5f00 r4:00000001 [ 4118.362764][T19760] [<805867c8>] (vfs_write) from [<80586d8c>] (ksys_write+0x74/0xec) [ 4118.362846][T19760] r10:00000004 r9:83867080 r8:8020029c r7:00000000 r6:00000002 r5:867a5f00 [ 4118.362876][T19760] r4:867a5f03 [ 4118.362891][T19760] [<80586d18>] (ksys_write) from [<80586e14>] (sys_write+0x10/0x14) [ 4118.362970][T19760] r7:00000004 r6:00000000 r5:00000000 r4:00000000 [ 4118.362990][T19760] [<80586e04>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4118.363054][T19760] Exception stack(0xec371fa8 to 0xec371ff0) [ 4118.363127][T19760] 1fa0: 00000000 00000000 00000004 76f97f08 00000001 00000000 [ 4118.363187][T19760] 1fc0: 00000000 00000000 00000000 00000004 003462d8 00000000 00000001 76f980dc [ 4118.363240][T19760] 1fe0: 76f97e58 76f97e44 0010ba34 00112618 [ 4126.930122][ T28] audit: type=1400 audit(4383.841:709): avc: denied { write } for pid=19792 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4127.347011][ T28] audit: type=1400 audit(4384.261:710): avc: denied { write } for pid=19795 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4133.876943][T19817] FAULT_INJECTION: forcing a failure. [ 4133.876943][T19817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4133.881961][T19817] CPU: 1 UID: 0 PID: 19817 Comm: syz.5.3726 Tainted: G L syzkaller #0 PREEMPT [ 4133.882094][T19817] Tainted: [L]=SOFTLOCKUP [ 4133.882119][T19817] Hardware name: ARM-Versatile Express [ 4133.882145][T19817] Call trace: [ 4133.882189][T19817] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4133.882318][T19817] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 4133.882339][T19817] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4133.882397][T19817] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4133.882462][T19817] r7:20002840 r6:00000000 r5:83863200 r4:82b4f348 [ 4133.882480][T19817] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4133.882536][T19817] [<809d864c>] (should_fail_ex) from [<809d8884>] (should_fail+0x14/0x18) [ 4133.882601][T19817] r8:00000007 r7:20002840 r6:00001000 r5:86054a80 r4:00000009 [ 4133.882624][T19817] [<809d8870>] (should_fail) from [<809d88a4>] (should_fail_usercopy+0x1c/0x20) [ 4133.882674][T19817] [<809d8888>] (should_fail_usercopy) from [<804c3020>] (vmemdup_user+0x44/0x168) [ 4133.882733][T19817] [<804c2fdc>] (vmemdup_user) from [<805c2b14>] (path_setxattrat+0x124/0x1bc) [ 4133.882813][T19817] r9:20002840 r8:00000007 r7:00000000 r6:00001000 r5:00000009 r4:0000000c [ 4133.882834][T19817] [<805c29f0>] (path_setxattrat) from [<805c2dac>] (sys_fsetxattr+0x30/0x38) [ 4133.882908][T19817] r10:000000e4 r9:83863200 r8:8020029c r7:000000e4 r6:0012f214 r5:00000000 [ 4133.882930][T19817] r4:00000001 [ 4133.882947][T19817] [<805c2d7c>] (sys_fsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4133.883000][T19817] Exception stack(0xec59dfa8 to 0xec59dff0) [ 4133.883043][T19817] dfa0: 00000001 00000000 00000007 20002800 20002840 00000009 [ 4133.883082][T19817] dfc0: 00000001 00000000 0012f214 000000e4 003462d8 00000000 00000001 76f980dc [ 4133.883112][T19817] dfe0: 76f97e88 76f97e78 00018ebc 00130810 [ 4140.217896][T19837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4140.221062][T19837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4154.084692][T19863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4154.090460][T19863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4162.668680][T19894] FAULT_INJECTION: forcing a failure. [ 4162.668680][T19894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4162.684513][T19894] CPU: 0 UID: 0 PID: 19894 Comm: syz.6.3748 Tainted: G L syzkaller #0 PREEMPT [ 4162.684679][T19894] Tainted: [L]=SOFTLOCKUP [ 4162.684703][T19894] Hardware name: ARM-Versatile Express [ 4162.684741][T19894] Call trace: [ 4162.684788][T19894] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4162.684915][T19894] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 4162.684938][T19894] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4162.685002][T19894] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4162.685078][T19894] r7:8383cc00 r6:00000000 r5:83fa3e80 r4:82b4f348 [ 4162.685102][T19894] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4162.685184][T19894] [<809d864c>] (should_fail_ex) from [<809d8884>] (should_fail+0x14/0x18) [ 4162.685256][T19894] r8:81d3d5cc r7:8383cc00 r6:c06864a1 r5:00000068 r4:83fa46a8 [ 4162.685276][T19894] [<809d8870>] (should_fail) from [<809d88a4>] (should_fail_usercopy+0x1c/0x20) [ 4162.685331][T19894] [<809d8888>] (should_fail_usercopy) from [<80b40504>] (drm_ioctl+0x1c4/0x580) [ 4162.685453][T19894] [<80b40340>] (drm_ioctl) from [<805a1cfc>] (sys_ioctl+0x244/0xb5c) [ 4162.685548][T19894] r10:83fa3e80 r9:00000003 r8:83336f80 r7:200005c0 r6:c06864a1 r5:83336f81 [ 4162.685575][T19894] r4:00000000 [ 4162.685594][T19894] [<805a1ab8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4162.685649][T19894] Exception stack(0xecacdfa8 to 0xecacdff0) [ 4162.685695][T19894] dfa0: 00000000 00000000 00000003 c06864a1 200005c0 00000000 [ 4162.685752][T19894] dfc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76ffe0dc [ 4162.685785][T19894] dfe0: 76ffde88 76ffde78 00018ebc 00130810 [ 4162.685829][T19894] r10:00000036 r9:83fa3e80 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 4162.685852][T19894] r4:00000000 [ 4164.857256][T19899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19899 comm=syz.5.3750 [ 4182.919611][ T28] audit: type=1400 audit(4439.831:711): avc: denied { listen } for pid=19939 comm="syz.6.3764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 4189.298111][T19956] FAULT_INJECTION: forcing a failure. [ 4189.298111][T19956] name failslab, interval 1, probability 0, space 0, times 0 [ 4189.306432][T19956] CPU: 0 UID: 0 PID: 19956 Comm: syz.6.3769 Tainted: G L syzkaller #0 PREEMPT [ 4189.306684][T19956] Tainted: [L]=SOFTLOCKUP [ 4189.306711][T19956] Hardware name: ARM-Versatile Express [ 4189.306741][T19956] Call trace: [ 4189.306793][T19956] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4189.306943][T19956] r7:60000113 r6:60000113 r5:8231eaf8 r4:00000000 [ 4189.306970][T19956] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4189.307041][T19956] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4189.307115][T19956] r7:00000000 r6:00000000 r5:83f68000 r4:82b18108 [ 4189.307137][T19956] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4189.307213][T19956] [<809d864c>] (should_fail_ex) from [<80554524>] (should_failslab+0x6c/0x94) [ 4189.307292][T19956] r8:00000000 r7:00000000 r6:83001240 r5:00000d40 r4:00000019 [ 4189.307316][T19956] [<805544b8>] (should_failslab) from [<8053274c>] (__kmalloc_noprof+0xa4/0x39c) [ 4189.307383][T19956] [<805326a8>] (__kmalloc_noprof) from [<80816030>] (tomoyo_encode2+0x64/0xec) [ 4189.307468][T19956] r10:00000fff r9:830bf000 r8:00000000 r7:837252a8 r6:83336fa8 r5:86376ffd [ 4189.307495][T19956] r4:86376fef [ 4189.307516][T19956] [<80815fcc>] (tomoyo_encode2) from [<808160dc>] (tomoyo_encode+0x24/0x30) [ 4189.307592][T19956] r9:830bf000 r8:00000000 r7:837252a8 r6:83336fa8 r5:00001000 r4:86376ff0 [ 4189.307615][T19956] [<808160b8>] (tomoyo_encode) from [<80816168>] (tomoyo_realpath_from_path+0x80/0x16c) [ 4189.307684][T19956] r5:00001000 r4:86376000 [ 4189.307703][T19956] [<808160e8>] (tomoyo_realpath_from_path) from [<808121ec>] (tomoyo_path_number_perm+0xcc/0x22c) [ 4189.307779][T19956] r10:00000000 r9:00000003 r8:83336f80 r7:00008901 r6:81cda164 r5:00000004 [ 4189.307806][T19956] r4:83336fa8 r3:828d1400 [ 4189.307824][T19956] [<80812120>] (tomoyo_path_number_perm) from [<80816b40>] (tomoyo_file_ioctl+0x1c/0x20) [ 4189.307903][T19956] r10:83f68000 r9:00000003 r8:83336f80 r7:20000600 r6:20000600 r5:00008901 [ 4189.307925][T19956] r4:83336f80 [ 4189.307942][T19956] [<80816b24>] (tomoyo_file_ioctl) from [<807c2438>] (security_file_ioctl+0x80/0x1d4) [ 4189.308001][T19956] [<807c23b8>] (security_file_ioctl) from [<805a1b04>] (sys_ioctl+0x4c/0xb5c) [ 4189.308073][T19956] r7:20000600 r6:00008901 r5:83336f81 r4:00000000 [ 4189.308091][T19956] [<805a1ab8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4189.308251][T19956] Exception stack(0xecfddfa8 to 0xecfddff0) [ 4189.308302][T19956] dfa0: 00000000 00000000 00000003 00008901 20000600 00000000 [ 4189.308345][T19956] dfc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76ffe0dc [ 4189.308379][T19956] dfe0: 76ffde88 76ffde78 00018ebc 00130810 [ 4189.308422][T19956] r10:00000036 r9:83f68000 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 4189.308445][T19956] r4:00000000 [ 4189.426275][T19956] ERROR: Out of memory at tomoyo_realpath_from_path. [ 4191.319640][ T28] audit: type=1400 audit(4448.231:712): avc: denied { append } for pid=19960 comm="syz.6.3772" name="pfkey" dev="proc" ino=4026533180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 4191.443992][ T28] audit: type=1400 audit(4448.351:713): avc: denied { create } for pid=19959 comm="syz.5.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 4198.083167][T19978] netlink: 'syz.6.3777': attribute type 2 has an invalid length. [ 4198.097400][T19978] netlink: 'syz.6.3777': attribute type 2 has an invalid length. [ 4198.117512][T19978] netlink: 'syz.6.3777': attribute type 1 has an invalid length. [ 4225.369306][T20045] FAULT_INJECTION: forcing a failure. [ 4225.369306][T20045] name failslab, interval 1, probability 0, space 0, times 0 [ 4225.373305][T20045] CPU: 1 UID: 0 PID: 20045 Comm: syz.6.3797 Tainted: G L syzkaller #0 PREEMPT [ 4225.373436][T20045] Tainted: [L]=SOFTLOCKUP [ 4225.373456][T20045] Hardware name: ARM-Versatile Express [ 4225.373482][T20045] Call trace: [ 4225.373524][T20045] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4225.373632][T20045] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 4225.373664][T20045] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4225.373725][T20045] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4225.373791][T20045] r7:00000d40 r6:00000000 r5:83f68000 r4:82b18108 [ 4225.373809][T20045] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4225.373863][T20045] [<809d864c>] (should_fail_ex) from [<80554524>] (should_failslab+0x6c/0x94) [ 4225.373929][T20045] r8:00000000 r7:00000d40 r6:00000000 r5:00000000 r4:830c4600 [ 4225.373948][T20045] [<805544b8>] (should_failslab) from [<805317fc>] (kmem_cache_alloc_noprof+0x54/0x3b8) [ 4225.374002][T20045] [<805317a8>] (kmem_cache_alloc_noprof) from [<807cca54>] (security_inode_alloc+0x30/0x1d0) [ 4225.374082][T20045] r10:8360ee40 r9:00000000 r8:00000000 r7:00000c40 r6:830bf000 r5:8360ed40 [ 4225.374104][T20045] r4:8360ed40 [ 4225.374121][T20045] [<807cca24>] (security_inode_alloc) from [<805abb14>] (inode_init_always_gfp+0x184/0x1d8) [ 4225.374185][T20045] r5:00000000 r4:8360ed40 [ 4225.374203][T20045] [<805ab990>] (inode_init_always_gfp) from [<805af4bc>] (alloc_inode+0x40/0xd0) [ 4225.374279][T20045] r10:0000016e r9:83f68000 r8:00000000 r7:00000000 r6:81e59f40 r5:830bf000 [ 4225.374304][T20045] r4:8360ed40 r3:00000001 [ 4225.374322][T20045] [<805af47c>] (alloc_inode) from [<815ea3f8>] (sock_alloc+0x20/0x78) [ 4225.374401][T20045] r7:00000000 r6:ed615f44 r5:00000800 r4:8360ef40 [ 4225.374420][T20045] [<815ea3d8>] (sock_alloc) from [<815edd58>] (do_accept+0x64/0x174) [ 4225.374486][T20045] r5:00000800 r4:8360ef40 [ 4225.374505][T20045] [<815edcf4>] (do_accept) from [<815edee4>] (__sys_accept4_file+0x7c/0xe0) [ 4225.374578][T20045] r10:0000016e r9:83f68000 r8:00000000 r7:00000000 r6:858f1880 r5:00000800 [ 4225.374603][T20045] r4:00000005 [ 4225.374619][T20045] [<815ede68>] (__sys_accept4_file) from [<815edff0>] (sys_accept4+0x3c/0x6c) [ 4225.374693][T20045] r8:858f1880 r7:00000800 r6:00000000 r5:00000000 r4:858f1881 [ 4225.374712][T20045] [<815edfb4>] (sys_accept4) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4225.374764][T20045] Exception stack(0xed615fa8 to 0xed615ff0) [ 4225.374809][T20045] 5fa0: 00000000 00000000 00000003 00000000 00000000 00000800 [ 4225.374850][T20045] 5fc0: 00000000 00000000 0012f214 0000016e 003462d8 00000000 00000001 76ffe0dc [ 4225.374885][T20045] 5fe0: 76ffde88 76ffde78 00018ebc 00130810 [ 4225.374929][T20045] r9:83f68000 r8:8020029c r7:0000016e r6:0012f214 r5:00000000 r4:00000000 [ 4231.596710][T20047] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 4236.757260][T20072] FAULT_INJECTION: forcing a failure. [ 4236.757260][T20072] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 4236.760911][T20072] CPU: 1 UID: 0 PID: 20072 Comm: syz.6.3805 Tainted: G L syzkaller #0 PREEMPT [ 4236.761048][T20072] Tainted: [L]=SOFTLOCKUP [ 4236.761071][T20072] Hardware name: ARM-Versatile Express [ 4236.761099][T20072] Call trace: [ 4236.761176][T20072] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4236.761294][T20072] r7:60000113 r6:60000113 r5:8231eaf8 r4:00000000 [ 4236.761315][T20072] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4236.761375][T20072] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4236.761441][T20072] r7:00000001 r6:00000000 r5:83f74b00 r4:82b1815c [ 4236.761460][T20072] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4236.761523][T20072] [<809d864c>] (should_fail_ex) from [<805545b4>] (should_fail_alloc_page+0x68/0x74) [ 4236.761598][T20072] r8:ed539d64 r7:00000001 r6:00000000 r5:00440dc2 r4:ed539d70 [ 4236.761621][T20072] [<8055454c>] (should_fail_alloc_page) from [<8051a158>] (prepare_alloc_pages+0xf8/0x1b4) [ 4236.761692][T20072] [<8051a060>] (prepare_alloc_pages) from [<80523270>] (__alloc_frozen_pages_noprof+0xb0/0x1620) [ 4236.761783][T20072] r10:00000000 r9:83f74b00 r8:8692d640 r7:00470000 r6:00440dc2 r5:00000000 [ 4236.761815][T20072] r4:84d8b0c0 [ 4236.761838][T20072] [<805231c0>] (__alloc_frozen_pages_noprof) from [<805247f0>] (__alloc_pages_noprof+0x10/0x60) [ 4236.761929][T20072] r10:00000040 r9:84d8b0c0 r8:8692d640 r7:00470000 r6:86857280 r5:84d8b0c0 [ 4236.761961][T20072] r4:84d8b0c0 [ 4236.761987][T20072] [<805247e0>] (__alloc_pages_noprof) from [<804e9550>] (pte_alloc_one+0x28/0x108) [ 4236.762055][T20072] [<804e9528>] (pte_alloc_one) from [<804eb438>] (__pte_alloc+0x2c/0x128) [ 4236.762120][T20072] r5:86c7c010 r4:84d8b0c0 [ 4236.762140][T20072] [<804eb40c>] (__pte_alloc) from [<804eee20>] (do_anonymous_page+0x334/0x648) [ 4236.762216][T20072] r5:83f74b00 r4:ed539e90 [ 4236.762242][T20072] [<804eeaec>] (do_anonymous_page) from [<804f1aa4>] (handle_mm_fault+0x5bc/0x6b8) [ 4236.762335][T20072] r10:00000040 r9:84d8b0c0 r8:8692d640 r7:ed539fb0 r6:00470004 r5:83f74b00 [ 4236.762365][T20072] r4:00001255 [ 4236.762386][T20072] [<804f14e8>] (handle_mm_fault) from [<802330dc>] (do_page_fault+0x21c/0x4d0) [ 4236.762477][T20072] r10:00000002 r9:84d8b0c0 r8:00000255 r7:83f74b00 r6:00000a06 r5:00470004 [ 4236.762502][T20072] r4:ed539fb0 [ 4236.762521][T20072] [<80232ec0>] (do_page_fault) from [<802334b0>] (do_translation_fault+0x120/0x128) [ 4236.762598][T20072] r10:00000000 r9:00470000 r8:80233390 r7:ed539fb0 r6:00470004 r5:00000a06 [ 4236.762620][T20072] r4:82a1c740 [ 4236.762637][T20072] [<80233390>] (do_translation_fault) from [<8023355c>] (do_DataAbort+0x38/0xac) [ 4236.762726][T20072] r9:00470000 r8:80233390 r7:ed539fb0 r6:00470004 r5:00000a06 r4:82a1c740 [ 4236.762749][T20072] [<80233524>] (do_DataAbort) from [<80200edc>] (__dabt_usr+0x5c/0x60) [ 4236.762807][T20072] Exception stack(0xed539fb0 to 0xed539ff8) [ 4236.762966][T20072] 9fa0: 00470004 00000000 00000840 00470004 [ 4236.763010][T20072] 9fc0: 00000000 00000005 20000200 00000080 00000005 00470000 00000000 00000000 [ 4236.763045][T20072] 9fe0: 00000000 76ffbdd0 00023990 0011af60 20000010 ffffffff [ 4236.763086][T20072] r8:828c8044 r7:83f74b00 r6:ffffffff r5:20000010 r4:0011af60 [ 4236.833528][T20072] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 4236.853497][T20072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4236.854062][T20072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4251.352353][T20100] fuse: Unknown parameter 'r' [ 4254.461830][T20118] FAULT_INJECTION: forcing a failure. [ 4254.461830][T20118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4254.465535][T20118] CPU: 1 UID: 0 PID: 20118 Comm: syz.6.3819 Tainted: G L syzkaller #0 PREEMPT [ 4254.465691][T20118] Tainted: [L]=SOFTLOCKUP [ 4254.465719][T20118] Hardware name: ARM-Versatile Express [ 4254.465749][T20118] Call trace: [ 4254.465797][T20118] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4254.465919][T20118] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 4254.465944][T20118] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4254.466014][T20118] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4254.466086][T20118] r7:00000000 r6:00000000 r5:847fe400 r4:82b4f348 [ 4254.466107][T20118] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4254.466193][T20118] [<809d864c>] (should_fail_ex) from [<809d8884>] (should_fail+0x14/0x18) [ 4254.466259][T20118] r8:00000000 r7:00000000 r6:000000b4 r5:20000040 r4:8332c600 [ 4254.466278][T20118] [<809d8870>] (should_fail) from [<809d88a4>] (should_fail_usercopy+0x1c/0x20) [ 4254.466325][T20118] [<809d8888>] (should_fail_usercopy) from [<809de828>] (strncpy_from_user+0x20/0x1b0) [ 4254.466380][T20118] [<809de808>] (strncpy_from_user) from [<80595b98>] (do_getname+0x4c/0x14c) [ 4254.466466][T20118] r10:8332c60c r9:00000000 r8:00000000 r7:00000000 r6:20000040 r5:825268b8 [ 4254.466491][T20118] r4:8332c600 [ 4254.466511][T20118] [<80595b4c>] (do_getname) from [<8059b75c>] (getname_flags+0x14/0x18) [ 4254.466594][T20118] r10:00000002 r9:00000000 r8:ffffff9c r7:20000040 r6:00000100 r5:00000000 [ 4254.466626][T20118] r4:00000015 r3:00000015 [ 4254.466651][T20118] [<8059b748>] (getname_flags) from [<805c2b74>] (path_setxattrat+0x184/0x1bc) [ 4254.466726][T20118] [<805c29f0>] (path_setxattrat) from [<805c2d74>] (sys_lsetxattr+0x34/0x3c) [ 4254.466809][T20118] r10:000000e3 r9:847fe400 r8:8020029c r7:000000e3 r6:0012f214 r5:00000000 [ 4254.466834][T20118] r4:200000c0 [ 4254.466852][T20118] [<805c2d40>] (sys_lsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4254.466910][T20118] Exception stack(0xed639fa8 to 0xed639ff0) [ 4254.466958][T20118] 9fa0: 00000002 00000000 20000040 200000c0 00000000 00000000 [ 4254.466994][T20118] 9fc0: 00000002 00000000 0012f214 000000e3 003462d8 00000000 00000001 76ffe0dc [ 4254.467028][T20118] 9fe0: 76ffde88 76ffde78 00018ebc 00130810 [ 4254.467054][T20118] r4:00000002 [ 4267.710292][T20164] fuse: Unknown parameter '€a ŒJ9™gÚ°+md¥È~»À÷–0`²™F©DftüQO⇅ì5P! T8s' [ 4268.807959][T20168] FAULT_INJECTION: forcing a failure. [ 4268.807959][T20168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4268.809714][T20168] CPU: 1 UID: 0 PID: 20168 Comm: syz.6.3836 Tainted: G L syzkaller #0 PREEMPT [ 4268.809850][T20168] Tainted: [L]=SOFTLOCKUP [ 4268.809872][T20168] Hardware name: ARM-Versatile Express [ 4268.809900][T20168] Call trace: [ 4268.809943][T20168] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4268.810062][T20168] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 4268.810085][T20168] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4268.810146][T20168] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4268.810219][T20168] r7:00000000 r6:00000000 r5:83f70000 r4:82b4f348 [ 4268.810238][T20168] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4268.810293][T20168] [<809d864c>] (should_fail_ex) from [<809d8884>] (should_fail+0x14/0x18) [ 4268.810356][T20168] r8:edb2deb8 r7:00000000 r6:76ffdf08 r5:00000001 r4:00000001 [ 4268.810374][T20168] [<809d8870>] (should_fail) from [<809d88a4>] (should_fail_usercopy+0x1c/0x20) [ 4268.810424][T20168] [<809d8888>] (should_fail_usercopy) from [<809190b8>] (kstrtouint_from_user+0x54/0x13c) [ 4268.810547][T20168] [<80919064>] (kstrtouint_from_user) from [<8064dd08>] (proc_fail_nth_write+0x40/0xf4) [ 4268.810628][T20168] r8:8064dcc8 r7:edb2df68 r6:76ffdf08 r5:858f1880 r4:00000001 [ 4268.810657][T20168] [<8064dcc8>] (proc_fail_nth_write) from [<8058689c>] (vfs_write+0xd4/0x450) [ 4268.810731][T20168] r5:858f1880 r4:00000001 [ 4268.810752][T20168] [<805867c8>] (vfs_write) from [<80586d8c>] (ksys_write+0x74/0xec) [ 4268.810828][T20168] r10:00000004 r9:83f70000 r8:8020029c r7:00000000 r6:00000002 r5:858f1880 [ 4268.810851][T20168] r4:858f1883 [ 4268.810869][T20168] [<80586d18>] (ksys_write) from [<80586e14>] (sys_write+0x10/0x14) [ 4268.810940][T20168] r7:00000004 r6:00000000 r5:00000000 r4:00000000 [ 4268.810962][T20168] [<80586e04>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4268.811018][T20168] Exception stack(0xedb2dfa8 to 0xedb2dff0) [ 4268.811063][T20168] dfa0: 00000000 00000000 00000003 76ffdf08 00000001 00000000 [ 4268.811100][T20168] dfc0: 00000000 00000000 00000000 00000004 003462d8 00000000 00000001 76ffe0dc [ 4268.811128][T20168] dfe0: 76ffde58 76ffde44 0010ba34 00112618 [ 4270.559124][T20175] fuse: Unknown parameter 'user_i00000000000000000000' [ 4275.988010][T20189] fuse: Unknown parameter 'user_i00000000000000000000' [ 4278.829463][T20192] FAULT_INJECTION: forcing a failure. [ 4278.829463][T20192] name failslab, interval 1, probability 0, space 0, times 0 [ 4279.078703][T20192] CPU: 1 UID: 0 PID: 20192 Comm: syz.5.3845 Tainted: G L syzkaller #0 PREEMPT [ 4279.078898][T20192] Tainted: [L]=SOFTLOCKUP [ 4279.078923][T20192] Hardware name: ARM-Versatile Express [ 4279.078951][T20192] Call trace: [ 4279.078997][T20192] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4279.079114][T20192] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 4279.079134][T20192] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4279.079199][T20192] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4279.079276][T20192] r7:83879000 r6:00000000 r5:83f77080 r4:82b18108 [ 4279.079296][T20192] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4279.079361][T20192] [<809d864c>] (should_fail_ex) from [<80554524>] (should_failslab+0x6c/0x94) [ 4279.079432][T20192] r8:83f77080 r7:83879000 r6:00000cc0 r5:00000000 r4:830c4b40 [ 4279.079452][T20192] [<805544b8>] (should_failslab) from [<80531bb8>] (kmem_cache_alloc_lru_noprof+0x58/0x3c4) [ 4279.079516][T20192] [<80531b60>] (kmem_cache_alloc_lru_noprof) from [<805a64ac>] (__d_alloc+0x30/0x218) [ 4279.079607][T20192] r10:83879000 r9:825268c0 r8:83368550 r7:83879000 r6:81c24b4c r5:edbe9ec0 [ 4279.079637][T20192] r4:00000802 [ 4279.079659][T20192] [<805a647c>] (__d_alloc) from [<805a9ac4>] (d_alloc_pseudo+0x10/0x3c) [ 4279.079752][T20192] r9:82343a74 r8:83368550 r7:83f77080 r6:81c24b4c r5:83540780 r4:00000802 [ 4279.079773][T20192] [<805a9ab4>] (d_alloc_pseudo) from [<80588a60>] (alloc_file_pseudo+0x6c/0x104) [ 4279.079828][T20192] [<805889f4>] (alloc_file_pseudo) from [<805fce08>] (anon_inode_getfile_fmode+0x74/0xcc) [ 4279.079902][T20192] r10:00000163 r9:00000802 r8:82343a74 r7:86d52a80 r6:83540780 r5:81c24b4c [ 4279.079929][T20192] r4:82526940 [ 4279.079951][T20192] [<805fcd94>] (anon_inode_getfile_fmode) from [<805fd53c>] (do_signalfd4+0xf4/0x1b4) [ 4279.080032][T20192] r9:83f77080 r8:b5403587 r7:86d52a80 r6:00080800 r5:00000005 r4:edbe9f74 [ 4279.080057][T20192] [<805fd448>] (do_signalfd4) from [<805fd6ec>] (sys_signalfd4+0xc4/0xfc) [ 4279.080137][T20192] r10:00000163 r9:83f77080 r8:b5403587 r7:ffffffff r6:00080800 r5:20000140 [ 4279.080169][T20192] r4:00000008 [ 4279.080191][T20192] [<805fd628>] (sys_signalfd4) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4279.080261][T20192] Exception stack(0xedbe9fa8 to 0xedbe9ff0) [ 4279.080309][T20192] 9fa0: 00000000 00000000 ffffffff 20000140 00000008 00080800 [ 4279.080346][T20192] 9fc0: 00000000 00000000 0012f214 00000163 00346378 00000000 003d0f00 769560dc [ 4279.080376][T20192] 9fe0: 76955e88 76955e78 00018ebc 00130810 [ 4279.080414][T20192] r8:8020029c r7:00000163 r6:0012f214 r5:00000000 r4:00000000 [ 4282.446918][T20199] fuse: Unknown parameter 'user_id00000000000000000000' [ 4283.747186][T20203] fuse: Bad value for 'fd' [ 4287.724145][T20215] fuse: Unknown parameter 'user_id00000000000000000000' [ 4290.081579][ T28] audit: type=1400 audit(4546.991:714): avc: denied { lock } for pid=20218 comm="syz.5.3855" path="socket:[42881]" dev="sockfs" ino=42881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 4293.358229][T20231] FAULT_INJECTION: forcing a failure. [ 4293.358229][T20231] name failslab, interval 1, probability 0, space 0, times 0 [ 4293.358879][T20231] CPU: 1 UID: 0 PID: 20231 Comm: syz.5.3860 Tainted: G L syzkaller #0 PREEMPT [ 4293.358997][T20231] Tainted: [L]=SOFTLOCKUP [ 4293.359023][T20231] Hardware name: ARM-Versatile Express [ 4293.359052][T20231] Call trace: [ 4293.359106][T20231] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4293.359241][T20231] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 4293.359316][T20231] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4293.360105][T20231] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4293.362141][T20231] r7:00000000 r6:00000000 r5:833a5780 r4:82b18108 [ 4293.364076][T20231] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4293.364554][T20231] [<809d864c>] (should_fail_ex) from [<80554524>] (should_failslab+0x6c/0x94) [ 4293.365958][T20231] r8:00000000 r7:00000000 r6:83001240 r5:00000d40 r4:00000021 [ 4293.366009][T20231] [<805544b8>] (should_failslab) from [<8053274c>] (__kmalloc_noprof+0xa4/0x39c) [ 4293.366125][T20231] [<805326a8>] (__kmalloc_noprof) from [<80816030>] (tomoyo_encode2+0x64/0xec) [ 4293.366216][T20231] r10:00000fff r9:830c0000 r8:00000000 r7:83440ee0 r6:86f71928 r5:86823ffc [ 4293.366239][T20231] r4:86823fe6 [ 4293.366257][T20231] [<80815fcc>] (tomoyo_encode2) from [<808160dc>] (tomoyo_encode+0x24/0x30) [ 4293.366331][T20231] r9:830c0000 r8:00000000 r7:83440ee0 r6:86f71928 r5:00001000 r4:86823fe7 [ 4293.366389][T20231] [<808160b8>] (tomoyo_encode) from [<80816168>] (tomoyo_realpath_from_path+0x80/0x16c) [ 4293.366463][T20231] r5:00001000 r4:86823000 [ 4293.366484][T20231] [<808160e8>] (tomoyo_realpath_from_path) from [<808121ec>] (tomoyo_path_number_perm+0xcc/0x22c) [ 4293.366634][T20231] r10:00000000 r9:00000003 r8:86f71900 r7:40406f06 r6:81cda164 r5:00000004 [ 4293.366676][T20231] r4:86f71928 r3:828d1400 [ 4293.366700][T20231] [<80812120>] (tomoyo_path_number_perm) from [<80816b40>] (tomoyo_file_ioctl+0x1c/0x20) [ 4293.366787][T20231] r10:833a5780 r9:00000003 r8:86f71900 r7:00000000 r6:00000000 r5:40406f06 [ 4293.366815][T20231] r4:86f71900 [ 4293.366836][T20231] [<80816b24>] (tomoyo_file_ioctl) from [<807c2438>] (security_file_ioctl+0x80/0x1d4) [ 4293.366903][T20231] [<807c23b8>] (security_file_ioctl) from [<805a1b04>] (sys_ioctl+0x4c/0xb5c) [ 4293.366984][T20231] r7:00000000 r6:40406f06 r5:86f71901 r4:00000000 [ 4293.367010][T20231] [<805a1ab8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4293.367065][T20231] Exception stack(0xedf01fa8 to 0xedf01ff0) [ 4293.367111][T20231] 1fa0: 00000000 00000000 00000003 40406f06 00000000 00000000 [ 4293.367151][T20231] 1fc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76f980dc [ 4293.367183][T20231] 1fe0: 76f97e88 76f97e78 00018ebc 00130810 [ 4293.367222][T20231] r10:00000036 r9:833a5780 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 4293.367246][T20231] r4:00000000 [ 4293.616422][T20231] ERROR: Out of memory at tomoyo_realpath_from_path. [ 4300.549910][T20251] fuse: Bad value for 'fd' [ 4307.052881][ T28] audit: type=1400 audit(4563.961:715): avc: denied { setattr } for pid=20270 comm="syz.6.3878" name="loop1" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 4307.076774][T20267] fuse: Bad value for 'fd' [ 4311.608280][T20285] FAULT_INJECTION: forcing a failure. [ 4311.608280][T20285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4311.608862][T20285] CPU: 1 UID: 0 PID: 20285 Comm: syz.6.3883 Tainted: G L syzkaller #0 PREEMPT [ 4311.608963][T20285] Tainted: [L]=SOFTLOCKUP [ 4311.608979][T20285] Hardware name: ARM-Versatile Express [ 4311.609004][T20285] Call trace: [ 4311.609045][T20285] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4311.609183][T20285] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 4311.609205][T20285] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4311.610042][T20285] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4311.610371][T20285] r7:00000000 r6:00000000 r5:83f77080 r4:82b4f348 [ 4311.610744][T20285] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4311.610802][T20285] [<809d864c>] (should_fail_ex) from [<809d8884>] (should_fail+0x14/0x18) [ 4311.610881][T20285] r8:76ffdf08 r7:00000000 r6:00000000 r5:ee44df68 r4:00000002 [ 4311.611722][T20285] [<809d8870>] (should_fail) from [<809d88a4>] (should_fail_usercopy+0x1c/0x20) [ 4311.611769][T20285] [<809d8888>] (should_fail_usercopy) from [<805c59c0>] (simple_read_from_buffer+0x80/0x140) [ 4311.611819][T20285] [<805c5940>] (simple_read_from_buffer) from [<8064ca04>] (proc_fail_nth_read+0xb8/0x10c) [ 4311.614664][T20285] r10:8064c94c r9:00000001 r8:00000002 r7:ee44df68 r6:0000000f r5:76ffdf08 [ 4311.614699][T20285] r4:83f77080 r3:ee44de9f [ 4311.614718][T20285] [<8064c94c>] (proc_fail_nth_read) from [<80585ff8>] (vfs_read+0xc0/0x328) [ 4311.615156][T20285] r8:83f77080 r7:ee44df68 r6:76ffdf08 r5:85008a80 r4:0000000f [ 4311.615230][T20285] [<80585f38>] (vfs_read) from [<80586c8c>] (ksys_read+0x74/0xec) [ 4311.615388][T20285] r10:00000003 r9:83f77080 r8:8020029c r7:00000000 r6:00000000 r5:85008a80 [ 4311.615540][T20285] r4:85008a83 [ 4311.615619][T20285] [<80586c18>] (ksys_read) from [<80586d14>] (sys_read+0x10/0x14) [ 4311.615769][T20285] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 4311.615857][T20285] [<80586d04>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4311.615927][T20285] Exception stack(0xee44dfa8 to 0xee44dff0) [ 4311.616002][T20285] dfa0: 00000000 00000000 00000005 76ffdf08 0000000f 00000000 [ 4311.616049][T20285] dfc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76ffe0dc [ 4311.616085][T20285] dfe0: 76ffde58 76ffde44 0010ba34 00112618 [ 4319.038659][ C0] vxcan0: j1939_tp_rxtimer: 0x85f64200: rx timeout, send abort [ 4319.040049][ C0] vxcan0: j1939_xtp_rx_abort_one: 0x85f64200: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 4319.048570][ T28] audit: type=1400 audit(4575.951:716): avc: denied { search } for pid=2907 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4319.231370][T20306] fuse: Unknown parameter '0x0000000000000003' [ 4320.020262][T20308] FAULT_INJECTION: forcing a failure. [ 4320.020262][T20308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4320.020756][T20308] CPU: 0 UID: 0 PID: 20308 Comm: syz.6.3893 Tainted: G L syzkaller #0 PREEMPT [ 4320.020859][T20308] Tainted: [L]=SOFTLOCKUP [ 4320.020884][T20308] Hardware name: ARM-Versatile Express [ 4320.020972][T20308] Call trace: [ 4320.021031][T20308] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4320.021376][T20308] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 4320.021495][T20308] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4320.021586][T20308] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4320.021739][T20308] r7:20000200 r6:00000000 r5:83f9d780 r4:82b4f348 [ 4320.021829][T20308] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4320.021949][T20308] [<809d864c>] (should_fail_ex) from [<809d8884>] (should_fail+0x14/0x18) [ 4320.022021][T20308] r8:00000040 r7:20000200 r6:eea31e28 r5:00000000 r4:eea31f20 [ 4320.022041][T20308] [<809d8870>] (should_fail) from [<809d88a4>] (should_fail_usercopy+0x1c/0x20) [ 4320.022115][T20308] [<809d8888>] (should_fail_usercopy) from [<815ec8b4>] (copy_msghdr_from_user+0x50/0x1e0) [ 4320.022237][T20308] [<815ec864>] (copy_msghdr_from_user) from [<815ecabc>] (___sys_sendmsg+0x78/0xd0) [ 4320.022432][T20308] r8:00000040 r7:00000000 r6:856a5940 r5:eea31f20 r4:eea31e6c [ 4320.022517][T20308] [<815eca44>] (___sys_sendmsg) from [<815eec30>] (__sys_sendmsg+0x8c/0xe0) [ 4320.022662][T20308] r9:83f9d780 r8:867a5200 r7:00000040 r6:20000200 r5:867a5201 r4:00000003 [ 4320.022765][T20308] [<815eeba4>] (__sys_sendmsg) from [<815eec98>] (sys_sendmsg+0x14/0x18) [ 4320.022863][T20308] r8:8020029c r7:00000128 r6:0012f214 r5:00000000 r4:00000000 [ 4320.022971][T20308] [<815eec84>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4320.023066][T20308] Exception stack(0xeea31fa8 to 0xeea31ff0) [ 4320.023141][T20308] 1fa0: 00000000 00000000 00000003 20000200 00000040 00000000 [ 4320.023212][T20308] 1fc0: 00000000 00000000 0012f214 00000128 003462d8 00000000 00000001 76ffe0dc [ 4320.023379][T20308] 1fe0: 76ffde88 76ffde78 00018ebc 00130810 [ 4392.450318][T20359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4392.458928][T20359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4427.592439][T20402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4427.593740][T20402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4438.666332][T20411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4438.669767][T20411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4443.239572][T19308] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4443.398569][T19308] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4443.859037][T19308] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4443.993558][T19308] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4444.016900][T20426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4444.039245][T20426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4445.064625][T19308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4445.108683][T19308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4445.114688][T19308] bond0 (unregistering): Released all slaves [ 4445.283360][T19308] hsr_slave_0: left promiscuous mode [ 4445.341412][T19308] hsr_slave_1: left promiscuous mode [ 4445.368826][T19308] veth1_macvtap: left promiscuous mode [ 4445.370273][T19308] veth0_macvtap: left promiscuous mode [ 4445.377876][T19308] veth1_vlan: left promiscuous mode [ 4445.379174][T19308] veth0_vlan: left promiscuous mode [ 4449.659143][ T28] audit: type=1400 audit(4706.561:717): avc: denied { write } for pid=20492 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4450.044099][ T28] audit: type=1400 audit(4706.941:718): avc: denied { write } for pid=20550 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4450.308179][ T2955] 8021q: adding VLAN 0 to HW filter on device eth21 [ 4450.612337][T20417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4450.633206][T20417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4451.651772][ T28] audit: type=1400 audit(4708.561:719): avc: denied { write } for pid=20590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4451.950875][ T28] audit: type=1400 audit(4708.861:720): avc: denied { write } for pid=20612 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4452.331011][ T2955] 8021q: adding VLAN 0 to HW filter on device eth22 [ 4452.742814][T20417] hsr_slave_0: entered promiscuous mode [ 4452.751349][T20417] hsr_slave_1: entered promiscuous mode [ 4452.753530][T20417] debugfs: 'hsr0' already exists in 'hsr' [ 4452.758628][T20417] Cannot create hsr debugfs directory [ 4453.534676][T20417] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 4453.602292][T20417] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4453.612861][T20417] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 4453.620703][T20417] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4453.624568][T20417] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 4453.643923][T20417] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4453.650449][T20417] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 4453.659965][T20417] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4453.843746][ T28] audit: type=1400 audit(4710.751:721): avc: denied { write } for pid=20670 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4454.321775][ T28] audit: type=1400 audit(4711.231:722): avc: denied { write } for pid=20729 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4454.747557][ T2955] 8021q: adding VLAN 0 to HW filter on device eth23 [ 4455.709602][T20417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4456.216491][ T28] audit: type=1400 audit(4713.101:723): avc: denied { write } for pid=20737 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4456.614801][ T28] audit: type=1400 audit(4713.521:724): avc: denied { write } for pid=20744 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4456.949468][ T2955] 8021q: adding VLAN 0 to HW filter on device eth24 [ 4462.633928][T20417] veth0_vlan: entered promiscuous mode [ 4462.673190][T20417] veth1_vlan: entered promiscuous mode [ 4462.760067][T20417] veth0_macvtap: entered promiscuous mode [ 4462.782983][T20417] veth1_macvtap: entered promiscuous mode [ 4462.969473][T20487] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4462.971828][T20487] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4462.980995][T20487] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4462.981512][T20487] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4465.237678][T20800] comedi: valid board names for 8255 driver are: [ 4465.250842][T20800] 8255 [ 4465.253805][T20800] comedi: valid board names for vmk80xx driver are: [ 4465.267149][T20800] vmk80xx [ 4465.267552][T20800] comedi: valid board names for usbduxsigma driver are: [ 4465.267732][T20800] usbduxsigma [ 4465.267895][T20800] comedi: valid board names for usbduxfast driver are: [ 4465.268059][T20800] usbduxfast [ 4465.268235][T20800] comedi: valid board names for usbdux driver are: [ 4465.268406][T20800] usbdux [ 4465.268563][T20800] comedi: valid board names for ni6501 driver are: [ 4465.268728][T20800] ni6501 [ 4465.268891][T20800] comedi: valid board names for dt9812 driver are: [ 4465.269056][T20800] dt9812 [ 4465.269303][T20800] comedi: valid board names for ni_labpc_cs driver are: [ 4465.269471][T20800] ni_labpc_cs [ 4465.269701][T20800] comedi: valid board names for ni_daq_700 driver are: [ 4465.269893][T20800] ni_daq_700 [ 4465.270082][T20800] comedi: valid board names for labpc_pci driver are: [ 4465.270253][T20800] labpc_pci [ 4465.270416][T20800] comedi: valid board names for adl_pci9118 driver are: [ 4465.270578][T20800] pci9118dg [ 4465.270738][T20800] pci9118hg [ 4465.270901][T20800] pci9118hr [ 4465.271071][T20800] comedi: valid board names for 8255_pci driver are: [ 4465.271234][T20800] 8255_pci [ 4465.271374][T20800] comedi: valid board names for comedi_parport driver are: [ 4465.271520][T20800] comedi_parport [ 4465.271667][T20800] comedi: valid board names for comedi_test driver are: [ 4465.271822][T20800] comedi_test [ 4465.271975][T20800] comedi: valid board names for comedi_bond driver are: [ 4465.272143][T20800] comedi_bond [ 4465.609365][T20805] netlink: 'syz.7.3935': attribute type 1 has an invalid length. [ 4465.858041][T20807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4465.868399][T20807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4466.308632][T20815] syz_tun: entered allmulticast mode [ 4467.923106][T20826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4467.924955][T20826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4469.123447][ T28] audit: type=1400 audit(4726.031:725): avc: denied { write } for pid=20836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4469.187461][T20840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4469.188409][T20840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4469.615239][ T28] audit: type=1400 audit(4726.511:726): avc: denied { write } for pid=20843 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4470.177744][T20846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4470.180481][T20846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4471.517566][ T28] audit: type=1400 audit(4728.421:727): avc: denied { write } for pid=20850 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4472.243951][ T28] audit: type=1400 audit(4729.161:728): avc: denied { write } for pid=20853 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4474.759392][ T28] audit: type=1400 audit(4731.661:729): avc: denied { write } for pid=20868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4475.616810][ T28] audit: type=1400 audit(4732.521:730): avc: denied { write } for pid=20872 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4476.550369][ T28] audit: type=1400 audit(4733.461:731): avc: denied { write } for pid=20875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4476.851817][ T28] audit: type=1400 audit(4733.761:732): avc: denied { write } for pid=20878 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4488.573284][T20889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4488.574528][T20889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4489.996686][T20897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4489.999990][T20897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4493.922861][T20933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4493.924053][T20933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4513.750919][ T28] audit: type=1400 audit(4770.661:733): avc: denied { mount } for pid=20952 comm="syz.7.3965" name="/" dev="pipefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 4527.793462][T20962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4527.798272][T20962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4531.578260][ T28] audit: type=1400 audit(4788.491:734): avc: denied { read } for pid=20980 comm="syz.7.3975" dev="sockfs" ino=44028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 4543.908385][T21000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4543.916987][T21000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4544.496564][T21010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4544.526561][T21010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4550.825968][ T28] audit: type=1326 audit(4807.731:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.5.3992" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 4550.834406][ T28] audit: type=1326 audit(4807.741:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.5.3992" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 4550.838289][ T28] audit: type=1326 audit(4807.751:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.5.3992" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 4550.841505][ T28] audit: type=1326 audit(4807.751:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.5.3992" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 4550.844206][ T28] audit: type=1326 audit(4807.751:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.5.3992" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 4550.847494][ T28] audit: type=1326 audit(4807.761:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.5.3992" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x130810 code=0x7ffc0000 [ 4550.849955][ T28] audit: type=1326 audit(4807.761:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.5.3992" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 4550.852930][ T28] audit: type=1326 audit(4807.761:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.5.3992" exe="/syz-executor" sig=0 arch=40000028 syscall=436 compat=0 ip=0x130810 code=0x7ffc0000 [ 4550.854864][ T28] audit: type=1326 audit(4807.761:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.5.3992" exe="/syz-executor" sig=0 arch=40000028 syscall=248 compat=0 ip=0x130810 code=0x7ffc0000 [ 4565.308816][T21066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4565.309493][T21066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4573.618697][T21075] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 4573.619395][T21075] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 4573.619690][T21075] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 4579.362519][T21103] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 4581.158285][T21111] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4020'. [ 4595.815337][T21151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4595.824370][T21151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4621.734770][ T28] audit: type=1400 audit(4878.611:744): avc: denied { setattr } for pid=21226 comm="syz.7.4057" path="/proc/218/task/220" dev="proc" ino=45417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 4635.496736][T21314] fuse: root generation should be zero [ 4636.454588][T21318] FAULT_INJECTION: forcing a failure. [ 4636.454588][T21318] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 4636.456094][T21318] CPU: 0 UID: 0 PID: 21318 Comm: syz.7.4086 Tainted: G L syzkaller #0 PREEMPT [ 4636.456185][T21318] Tainted: [L]=SOFTLOCKUP [ 4636.456196][T21318] Hardware name: ARM-Versatile Express [ 4636.456208][T21318] Call trace: [ 4636.456257][T21318] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4636.456320][T21318] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 4636.456330][T21318] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4636.456357][T21318] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4636.456388][T21318] r7:00000001 r6:00000000 r5:83f68c80 r4:82b1815c [ 4636.456396][T21318] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4636.456445][T21318] [<809d864c>] (should_fail_ex) from [<805545b4>] (should_fail_alloc_page+0x68/0x74) [ 4636.456484][T21318] r8:ea651dbc r7:00000001 r6:00000000 r5:00140cca r4:ea651dc8 [ 4636.456495][T21318] [<8055454c>] (should_fail_alloc_page) from [<8051a158>] (prepare_alloc_pages+0xf8/0x1b4) [ 4636.456526][T21318] [<8051a060>] (prepare_alloc_pages) from [<80523270>] (__alloc_frozen_pages_noprof+0xb0/0x1620) [ 4636.456564][T21318] r10:00000000 r9:83f68c80 r8:76f09000 r7:76f09000 r6:00140cca r5:00000000 [ 4636.456575][T21318] r4:ea651eb8 [ 4636.456582][T21318] [<805231c0>] (__alloc_frozen_pages_noprof) from [<80524854>] (__folio_alloc_noprof+0x14/0x6c) [ 4636.456620][T21318] r10:00000040 r9:847be940 r8:76f09000 r7:76f09000 r6:86867080 r5:00000000 [ 4636.456657][T21318] r4:ea651eb8 [ 4636.456669][T21318] [<80524840>] (__folio_alloc_noprof) from [<804eebdc>] (do_anonymous_page+0xf0/0x648) [ 4636.456705][T21318] r5:00000000 r4:ea651eb8 [ 4636.456713][T21318] [<804eeaec>] (do_anonymous_page) from [<804f1aa4>] (handle_mm_fault+0x5bc/0x6b8) [ 4636.456752][T21318] r10:00000040 r9:00000000 r8:00000000 r7:ea651fb0 r6:76f09e4c r5:83f68c80 [ 4636.456762][T21318] r4:00001255 [ 4636.456770][T21318] [<804f14e8>] (handle_mm_fault) from [<802330dc>] (do_page_fault+0x21c/0x4d0) [ 4636.456808][T21318] r10:00000002 r9:847be940 r8:00000255 r7:83f68c80 r6:00000a07 r5:76f09e4c [ 4636.456817][T21318] r4:ea651fb0 [ 4636.456826][T21318] [<80232ec0>] (do_page_fault) from [<8023355c>] (do_DataAbort+0x38/0xac) [ 4636.456858][T21318] r10:00000001 r9:00000000 r8:80232ec0 r7:ea651fb0 r6:76f09e4c r5:00000a07 [ 4636.456867][T21318] r4:82a1c750 [ 4636.456875][T21318] [<80233524>] (do_DataAbort) from [<80200edc>] (__dabt_usr+0x5c/0x60) [ 4636.456897][T21318] Exception stack(0xea651fb0 to 0xea651ff8) [ 4636.456915][T21318] 1fa0: 20000140 00000004 00000000 00000000 [ 4636.456933][T21318] 1fc0: 0001cbf8 20000140 00000000 0018eedc 003462d8 00000000 00000001 76f0b0dc [ 4636.456948][T21318] 1fe0: 00000000 76f09e48 00018e9c 0001cc04 20000010 ffffffff [ 4636.456965][T21318] r8:828c8044 r7:83f68c80 r6:ffffffff r5:20000010 r4:0001cc04 [ 4636.480045][T21318] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 4640.526088][ T28] audit: type=1400 audit(4897.431:745): avc: denied { wake_alarm } for pid=21338 comm="syz.7.4095" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 4641.050532][T21341] syzkaller0: entered promiscuous mode [ 4641.077083][T21341] syzkaller0: entered allmulticast mode [ 4641.363818][T21348] fuse: Bad value for 'group_id' [ 4641.364035][T21348] fuse: Bad value for 'group_id' [ 4644.228399][T21357] FAULT_INJECTION: forcing a failure. [ 4644.228399][T21357] name failslab, interval 1, probability 0, space 0, times 0 [ 4644.228928][T21357] CPU: 1 UID: 0 PID: 21357 Comm: syz.7.4100 Tainted: G L syzkaller #0 PREEMPT [ 4644.229051][T21357] Tainted: [L]=SOFTLOCKUP [ 4644.229082][T21357] Hardware name: ARM-Versatile Express [ 4644.229171][T21357] Call trace: [ 4644.229307][T21357] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4644.229422][T21357] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 4644.229492][T21357] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4644.229585][T21357] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4644.229684][T21357] r7:00000000 r6:00000000 r5:84803e80 r4:82b18108 [ 4644.229762][T21357] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4644.229857][T21357] [<809d864c>] (should_fail_ex) from [<80554524>] (should_failslab+0x6c/0x94) [ 4644.229932][T21357] r8:00000000 r7:00000000 r6:830016c0 r5:00000c40 r4:00001000 [ 4644.229995][T21357] [<805544b8>] (should_failslab) from [<8053274c>] (__kmalloc_noprof+0xa4/0x39c) [ 4644.230099][T21357] [<805326a8>] (__kmalloc_noprof) from [<80816124>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 4644.230212][T21357] r10:00000000 r9:830c0000 r8:00000000 r7:83435330 r6:83336628 r5:00001000 [ 4644.230315][T21357] r4:00000000 [ 4644.230347][T21357] [<808160e8>] (tomoyo_realpath_from_path) from [<808121ec>] (tomoyo_path_number_perm+0xcc/0x22c) [ 4644.230428][T21357] r10:00000000 r9:00000003 r8:83336600 r7:8008662c r6:81cda164 r5:00000004 [ 4644.230505][T21357] r4:83336628 r3:828d1400 [ 4644.230557][T21357] [<80812120>] (tomoyo_path_number_perm) from [<80816b40>] (tomoyo_file_ioctl+0x1c/0x20) [ 4644.230747][T21357] r10:84803e80 r9:00000003 r8:83336600 r7:00000000 r6:00000000 r5:8008662c [ 4644.230809][T21357] r4:83336600 [ 4644.230852][T21357] [<80816b24>] (tomoyo_file_ioctl) from [<807c2438>] (security_file_ioctl+0x80/0x1d4) [ 4644.230961][T21357] [<807c23b8>] (security_file_ioctl) from [<805a1b04>] (sys_ioctl+0x4c/0xb5c) [ 4644.231062][T21357] r7:00000000 r6:8008662c r5:83336601 r4:00000000 [ 4644.231115][T21357] [<805a1ab8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4644.231187][T21357] Exception stack(0xea845fa8 to 0xea845ff0) [ 4644.231267][T21357] 5fa0: 00000000 00000000 00000003 8008662c 00000000 00000000 [ 4644.231341][T21357] 5fc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76f0b0dc [ 4644.231381][T21357] 5fe0: 76f0ae88 76f0ae78 00018ebc 00130810 [ 4644.231465][T21357] r10:00000036 r9:84803e80 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 4644.231509][T21357] r4:00000000 [ 4644.232047][T21357] ERROR: Out of memory at tomoyo_realpath_from_path. [ 4644.575010][ T28] audit: type=1400 audit(4901.481:746): avc: denied { mount } for pid=21358 comm="syz.7.4101" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 4644.590183][ T28] audit: type=1400 audit(4901.501:747): avc: denied { remount } for pid=21358 comm="syz.7.4101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 4644.604406][T21359] SELinux: Context system_u:object_r:apt_exec_t:s0 is not valid (left unmapped). [ 4644.608456][ T28] audit: type=1400 audit(4901.521:748): avc: denied { relabelto } for pid=21358 comm="syz.7.4101" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:apt_exec_t:s0" [ 4644.622456][ T28] audit: type=1400 audit(4901.531:749): avc: denied { associate } for pid=21358 comm="syz.7.4101" name="/" dev="debugfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_exec_t:s0" [ 4644.682538][ T28] audit: type=1400 audit(4901.591:750): avc: denied { unmount } for pid=20417 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 4644.804165][ T28] audit: type=1400 audit(4901.711:751): avc: denied { compute_member } for pid=21363 comm="syz.7.4103" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 4650.865113][T21397] can: request_module (can-proto-4) failed. [ 4652.194907][T21408] FAULT_INJECTION: forcing a failure. [ 4652.194907][T21408] name failslab, interval 1, probability 0, space 0, times 0 [ 4652.205973][T21408] CPU: 0 UID: 0 PID: 21408 Comm: syz.7.4118 Tainted: G L syzkaller #0 PREEMPT [ 4652.206071][T21408] Tainted: [L]=SOFTLOCKUP [ 4652.206082][T21408] Hardware name: ARM-Versatile Express [ 4652.206095][T21408] Call trace: [ 4652.206116][T21408] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4652.206176][T21408] r7:60000113 r6:60000113 r5:8231eaf8 r4:00000000 [ 4652.206185][T21408] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4652.206213][T21408] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4652.206245][T21408] r7:00000000 r6:00000000 r5:84782580 r4:82b18108 [ 4652.206253][T21408] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4652.206280][T21408] [<809d864c>] (should_fail_ex) from [<80554524>] (should_failslab+0x6c/0x94) [ 4652.206311][T21408] r8:00000000 r7:00000000 r6:830016c0 r5:00000c40 r4:00001000 [ 4652.206320][T21408] [<805544b8>] (should_failslab) from [<8053274c>] (__kmalloc_noprof+0xa4/0x39c) [ 4652.206346][T21408] [<805326a8>] (__kmalloc_noprof) from [<80816124>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 4652.206381][T21408] r10:00000000 r9:830c0000 r8:00000000 r7:83437660 r6:850086a8 r5:00001000 [ 4652.206391][T21408] r4:00000000 [ 4652.206399][T21408] [<808160e8>] (tomoyo_realpath_from_path) from [<808121ec>] (tomoyo_path_number_perm+0xcc/0x22c) [ 4652.206435][T21408] r10:00000000 r9:00000003 r8:85008680 r7:c0109414 r6:81cda164 r5:00000004 [ 4652.206446][T21408] r4:850086a8 r3:828d1400 [ 4652.206454][T21408] [<80812120>] (tomoyo_path_number_perm) from [<80816b40>] (tomoyo_file_ioctl+0x1c/0x20) [ 4652.206488][T21408] r10:84782580 r9:00000003 r8:85008680 r7:00000000 r6:00000000 r5:c0109414 [ 4652.206498][T21408] r4:85008680 [ 4652.206505][T21408] [<80816b24>] (tomoyo_file_ioctl) from [<807c2438>] (security_file_ioctl+0x80/0x1d4) [ 4652.206531][T21408] [<807c23b8>] (security_file_ioctl) from [<805a1b04>] (sys_ioctl+0x4c/0xb5c) [ 4652.206562][T21408] r7:00000000 r6:c0109414 r5:85008681 r4:00000000 [ 4652.206571][T21408] [<805a1ab8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4652.206595][T21408] Exception stack(0xea999fa8 to 0xea999ff0) [ 4652.206616][T21408] 9fa0: 00000000 00000000 00000003 c0109414 00000000 00000000 [ 4652.206634][T21408] 9fc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76f0b0dc [ 4652.206648][T21408] 9fe0: 76f0ae88 76f0ae78 00018ebc 00130810 [ 4652.206667][T21408] r10:00000036 r9:84782580 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 4652.206677][T21408] r4:00000000 [ 4652.219891][T21408] ERROR: Out of memory at tomoyo_realpath_from_path. [ 4652.542945][ T28] audit: type=1400 audit(4909.451:752): avc: denied { create } for pid=21409 comm="syz.7.4120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 4653.384874][T21413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21413 comm=syz.5.4119 [ 4655.476522][ T28] audit: type=1400 audit(4912.381:753): avc: denied { write } for pid=21421 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4656.044876][ T28] audit: type=1400 audit(4912.951:754): avc: denied { write } for pid=21427 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4656.180734][ T28] audit: type=1400 audit(4913.091:755): avc: denied { mounton } for pid=21426 comm="syz.7.4123" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 4656.236905][T21428] binder: Unknown parameter 'subj_type' [ 4671.846879][T21486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4671.848632][T21486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4674.597028][T21498] FAULT_INJECTION: forcing a failure. [ 4674.597028][T21498] name failslab, interval 1, probability 0, space 0, times 0 [ 4674.597393][T21498] CPU: 1 UID: 0 PID: 21498 Comm: syz.5.4147 Tainted: G L syzkaller #0 PREEMPT [ 4674.597448][T21498] Tainted: [L]=SOFTLOCKUP [ 4674.597458][T21498] Hardware name: ARM-Versatile Express [ 4674.597471][T21498] Call trace: [ 4674.597494][T21498] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4674.597553][T21498] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 4674.597562][T21498] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4674.597589][T21498] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4674.597655][T21498] r7:00000000 r6:00000000 r5:84782580 r4:82b18108 [ 4674.597690][T21498] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4674.597724][T21498] [<809d864c>] (should_fail_ex) from [<80554524>] (should_failslab+0x6c/0x94) [ 4674.597769][T21498] r8:00000000 r7:00000000 r6:830016c0 r5:00000c40 r4:00001000 [ 4674.597787][T21498] [<805544b8>] (should_failslab) from [<8053274c>] (__kmalloc_noprof+0xa4/0x39c) [ 4674.597826][T21498] [<805326a8>] (__kmalloc_noprof) from [<80816124>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 4674.597865][T21498] r10:00000000 r9:830c0000 r8:00000000 r7:83429088 r6:861ae1a8 r5:00001000 [ 4674.597888][T21498] r4:00000000 [ 4674.597911][T21498] [<808160e8>] (tomoyo_realpath_from_path) from [<808121ec>] (tomoyo_path_number_perm+0xcc/0x22c) [ 4674.597960][T21498] r10:00000000 r9:00000004 r8:861ae180 r7:80084504 r6:81cda164 r5:00000004 [ 4674.597972][T21498] r4:861ae1a8 r3:828d1400 [ 4674.597994][T21498] [<80812120>] (tomoyo_path_number_perm) from [<80816b40>] (tomoyo_file_ioctl+0x1c/0x20) [ 4674.598050][T21498] r10:84782580 r9:00000004 r8:861ae180 r7:00000000 r6:00000000 r5:80084504 [ 4674.598069][T21498] r4:861ae180 [ 4674.598078][T21498] [<80816b24>] (tomoyo_file_ioctl) from [<807c2438>] (security_file_ioctl+0x80/0x1d4) [ 4674.598114][T21498] [<807c23b8>] (security_file_ioctl) from [<805a1b04>] (sys_ioctl+0x4c/0xb5c) [ 4674.598180][T21498] r7:00000000 r6:80084504 r5:861ae181 r4:00000000 [ 4674.598200][T21498] [<805a1ab8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4674.598232][T21498] Exception stack(0xdfb89fa8 to 0xdfb89ff0) [ 4674.598253][T21498] 9fa0: 00000000 00000000 00000004 80084504 00000000 00000000 [ 4674.598282][T21498] 9fc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76f980dc [ 4674.598324][T21498] 9fe0: 76f97e88 76f97e78 00018ebc 00130810 [ 4674.598402][T21498] r10:00000036 r9:84782580 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 4674.598452][T21498] r4:00000000 [ 4674.598631][T21498] ERROR: Out of memory at tomoyo_realpath_from_path. [ 4680.312525][T21513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4680.313980][T21513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4680.899881][T21514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4680.916435][T21514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4681.037854][T21514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4681.039556][T21514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4686.011051][T21567] FAULT_INJECTION: forcing a failure. [ 4686.011051][T21567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4686.011356][T21567] CPU: 1 UID: 0 PID: 21567 Comm: syz.7.4170 Tainted: G L syzkaller #0 PREEMPT [ 4686.011410][T21567] Tainted: [L]=SOFTLOCKUP [ 4686.011420][T21567] Hardware name: ARM-Versatile Express [ 4686.011432][T21567] Call trace: [ 4686.011454][T21567] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4686.011521][T21567] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 4686.011530][T21567] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4686.011558][T21567] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4686.012009][T21567] r7:00000000 r6:00000000 r5:84825780 r4:82b4f348 [ 4686.012044][T21567] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4686.012149][T21567] [<809d864c>] (should_fail_ex) from [<809d8884>] (should_fail+0x14/0x18) [ 4686.012520][T21567] r8:76f0af08 r7:00000000 r6:00000000 r5:e43bdf68 r4:00000002 [ 4686.012895][T21567] [<809d8870>] (should_fail) from [<809d88a4>] (should_fail_usercopy+0x1c/0x20) [ 4686.012934][T21567] [<809d8888>] (should_fail_usercopy) from [<805c59c0>] (simple_read_from_buffer+0x80/0x140) [ 4686.013333][T21567] [<805c5940>] (simple_read_from_buffer) from [<8064ca04>] (proc_fail_nth_read+0xb8/0x10c) [ 4686.013543][T21567] r10:8064c94c r9:00000001 r8:00000002 r7:e43bdf68 r6:0000000f r5:76f0af08 [ 4686.013774][T21567] r4:84825780 r3:e43bde9f [ 4686.014223][T21567] [<8064c94c>] (proc_fail_nth_read) from [<80585ff8>] (vfs_read+0xc0/0x328) [ 4686.014276][T21567] r8:84825780 r7:e43bdf68 r6:76f0af08 r5:858f1100 r4:0000000f [ 4686.014288][T21567] [<80585f38>] (vfs_read) from [<80586c8c>] (ksys_read+0x74/0xec) [ 4686.014351][T21567] r10:00000003 r9:84825780 r8:8020029c r7:00000000 r6:00000000 r5:858f1100 [ 4686.014617][T21567] r4:858f1103 [ 4686.014827][T21567] [<80586c18>] (ksys_read) from [<80586d14>] (sys_read+0x10/0x14) [ 4686.015120][T21567] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 4686.015404][T21567] [<80586d04>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4686.015595][T21567] Exception stack(0xe43bdfa8 to 0xe43bdff0) [ 4686.015652][T21567] dfa0: 00000000 00000000 00000004 76f0af08 0000000f 00000000 [ 4686.015678][T21567] dfc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76f0b0dc [ 4686.015697][T21567] dfe0: 76f0ae58 76f0ae44 0010ba34 00112618 [ 4686.326611][ T28] audit: type=1400 audit(4943.241:756): avc: denied { listen } for pid=21568 comm="syz.7.4171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 4694.268845][T21597] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21597 comm=syz.7.4181 [ 4705.968494][T21653] dlm: non-version read from control device 8224 [ 4706.719107][T21658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4706.719931][T21658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4713.648769][T21697] FAULT_INJECTION: forcing a failure. [ 4713.648769][T21697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4713.649638][T21697] CPU: 0 UID: 0 PID: 21697 Comm: syz.7.4215 Tainted: G L syzkaller #0 PREEMPT [ 4713.649704][T21697] Tainted: [L]=SOFTLOCKUP [ 4713.649714][T21697] Hardware name: ARM-Versatile Express [ 4713.649727][T21697] Call trace: [ 4713.649747][T21697] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4713.649805][T21697] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 4713.649814][T21697] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4713.649841][T21697] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4713.649872][T21697] r7:20000440 r6:00000000 r5:84778c80 r4:82b4f348 [ 4713.649880][T21697] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4713.649907][T21697] [<809d864c>] (should_fail_ex) from [<809d8884>] (should_fail+0x14/0x18) [ 4713.649936][T21697] r8:00000000 r7:20000440 r6:00000014 r5:00000000 r4:eaac5f30 [ 4713.649944][T21697] [<809d8870>] (should_fail) from [<809d88a4>] (should_fail_usercopy+0x1c/0x20) [ 4713.649966][T21697] [<809d8888>] (should_fail_usercopy) from [<80910424>] (_copy_from_iter+0x64/0x7c4) [ 4713.649994][T21697] [<809103c0>] (_copy_from_iter) from [<817250f4>] (netlink_sendmsg+0x188/0x444) [ 4713.650034][T21697] r10:00000000 r9:00000000 r8:eaac5f30 r7:87812c00 r6:00000014 r5:86ccd240 [ 4713.650045][T21697] r4:eaac5f20 [ 4713.650053][T21697] [<81724f6c>] (netlink_sendmsg) from [<815eb6b0>] (__sock_sendmsg+0x44/0x78) [ 4713.650092][T21697] r10:00040004 r9:00000000 r8:eaac5dcc r7:00000000 r6:8360d6c0 r5:eaac5f20 [ 4713.650102][T21697] r4:00000000 [ 4713.650110][T21697] [<815eb66c>] (__sock_sendmsg) from [<815ec6e0>] (____sys_sendmsg+0x238/0x2c4) [ 4713.650155][T21697] r7:00000000 r6:00000000 r5:8360d6c0 r4:eaac5f20 [ 4713.650164][T21697] [<815ec4a8>] (____sys_sendmsg) from [<815ecae0>] (___sys_sendmsg+0x9c/0xd0) [ 4713.650198][T21697] r10:00000128 r9:200004c0 r8:00040004 r7:00000000 r6:8360d6c0 r5:eaac5f20 [ 4713.650207][T21697] r4:00000000 [ 4713.650215][T21697] [<815eca44>] (___sys_sendmsg) from [<815eec30>] (__sys_sendmsg+0x8c/0xe0) [ 4713.650245][T21697] r9:84778c80 r8:86c76d80 r7:00040004 r6:200004c0 r5:86c76d81 r4:00000004 [ 4713.650254][T21697] [<815eeba4>] (__sys_sendmsg) from [<815eec98>] (sys_sendmsg+0x14/0x18) [ 4713.650284][T21697] r8:8020029c r7:00000128 r6:0012f214 r5:00000000 r4:00000000 [ 4713.650292][T21697] [<815eec84>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4713.650314][T21697] Exception stack(0xeaac5fa8 to 0xeaac5ff0) [ 4713.650334][T21697] 5fa0: 00000000 00000000 00000004 200004c0 00040004 00000000 [ 4713.650352][T21697] 5fc0: 00000000 00000000 0012f214 00000128 003462d8 00000000 00000001 76f0b0dc [ 4713.650365][T21697] 5fe0: 76f0ae88 76f0ae78 00018ebc 00130810 [ 4720.810456][T21727] fuse: Unknown parameter 'group_id00000000000000000000' [ 4727.108503][T21754] fuse: Unknown parameter 'group_id00000000000000000000' [ 4731.983372][T21778] fuse: Bad value for 'user_id' [ 4731.983603][T21778] fuse: Bad value for 'user_id' [ 4739.878592][T21803] fuse: Bad value for 'user_id' [ 4739.891207][T21803] fuse: Bad value for 'user_id' [ 4744.119378][T21814] FAULT_INJECTION: forcing a failure. [ 4744.119378][T21814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4744.156780][T21814] CPU: 0 UID: 0 PID: 21814 Comm: syz.5.4250 Tainted: G L syzkaller #0 PREEMPT [ 4744.156916][T21814] Tainted: [L]=SOFTLOCKUP [ 4744.156932][T21814] Hardware name: ARM-Versatile Express [ 4744.156953][T21814] Call trace: [ 4744.156989][T21814] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4744.157081][T21814] r7:60000113 r6:60000113 r5:8231eaf8 r4:00000000 [ 4744.157096][T21814] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4744.157173][T21814] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4744.157228][T21814] r7:20000580 r6:00000000 r5:84809900 r4:82b4f348 [ 4744.157241][T21814] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4744.157285][T21814] [<809d864c>] (should_fail_ex) from [<809d8884>] (should_fail+0x14/0x18) [ 4744.157333][T21814] r8:81913f40 r7:20000580 r6:ebd39dac r5:00000004 r4:00000004 [ 4744.157347][T21814] [<809d8870>] (should_fail) from [<809d88a4>] (should_fail_usercopy+0x1c/0x20) [ 4744.157383][T21814] [<809d8888>] (should_fail_usercopy) from [<81912718>] (copy_from_sockptr_offset.constprop.0+0x5c/0x11c) [ 4744.157432][T21814] [<819126bc>] (copy_from_sockptr_offset.constprop.0) from [<81912fc8>] (do_ipv6_setsockopt+0x100/0x1018) [ 4744.157489][T21814] r8:81913f40 r7:20000580 r6:0000002a r5:862b5f80 r4:862b6380 [ 4744.157503][T21814] [<81912ecc>] (do_ipv6_setsockopt) from [<81913f40>] (ipv6_setsockopt+0x60/0xbc) [ 4744.157563][T21814] r10:00000126 r9:84809900 r8:00000084 r7:85566f40 r6:00000084 r5:862b5f80 [ 4744.157580][T21814] r4:0000002a [ 4744.157593][T21814] [<81913ee4>] (ipv6_setsockopt) from [<815ef560>] (sock_common_setsockopt+0x38/0x40) [ 4744.157652][T21814] r6:0000002a r5:00000029 r4:81913ee0 [ 4744.157666][T21814] [<815ef52c>] (sock_common_setsockopt) from [<815ea960>] (do_sock_setsockopt+0x70/0xc8) [ 4744.157713][T21814] r4:815ef528 [ 4744.157726][T21814] [<815ea8f0>] (do_sock_setsockopt) from [<815ee814>] (__sys_setsockopt+0x7c/0xc4) [ 4744.157779][T21814] r8:00000000 r7:861aca80 r6:861aca81 r5:0000002a r4:00000029 [ 4744.157793][T21814] [<815ee798>] (__sys_setsockopt) from [<815ee878>] (sys_setsockopt+0x1c/0x24) [ 4744.157843][T21814] r8:8020029c r7:00000126 r6:0012f214 r5:00000000 r4:00000084 [ 4744.157857][T21814] [<815ee85c>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4744.157932][T21814] Exception stack(0xebd39fa8 to 0xebd39ff0) [ 4744.157966][T21814] 9fa0: 00000084 00000000 00000003 00000029 0000002a 20000580 [ 4744.157995][T21814] 9fc0: 00000084 00000000 0012f214 00000126 003462d8 00000000 00000001 76f980dc [ 4744.158019][T21814] 9fe0: 76f97e88 76f97e78 00018ebc 00130810 [ 4748.747586][ T28] audit: type=1400 audit(5005.661:757): avc: denied { shutdown } for pid=21832 comm="syz.7.4258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 4749.266704][ T28] audit: type=1400 audit(5006.181:758): avc: denied { read } for pid=21832 comm="syz.7.4258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 4766.070087][T21892] FAULT_INJECTION: forcing a failure. [ 4766.070087][T21892] name failslab, interval 1, probability 0, space 0, times 0 [ 4766.070390][T21892] CPU: 0 UID: 0 PID: 21892 Comm: syz.7.4278 Tainted: G L syzkaller #0 PREEMPT [ 4766.070438][T21892] Tainted: [L]=SOFTLOCKUP [ 4766.070447][T21892] Hardware name: ARM-Versatile Express [ 4766.070459][T21892] Call trace: [ 4766.070480][T21892] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4766.070574][T21892] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 4766.070587][T21892] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4766.070615][T21892] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4766.070652][T21892] r7:00000000 r6:00000000 r5:83f63200 r4:82b18108 [ 4766.070660][T21892] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4766.070699][T21892] [<809d864c>] (should_fail_ex) from [<80554524>] (should_failslab+0x6c/0x94) [ 4766.070733][T21892] r8:00000000 r7:00000000 r6:830016c0 r5:00000c40 r4:00001000 [ 4766.070741][T21892] [<805544b8>] (should_failslab) from [<8053274c>] (__kmalloc_noprof+0xa4/0x39c) [ 4766.070768][T21892] [<805326a8>] (__kmalloc_noprof) from [<80816124>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 4766.070835][T21892] r10:00000000 r9:830c0000 r8:00000000 r7:83440ee0 r6:869289a8 r5:00001000 [ 4766.070846][T21892] r4:00000000 [ 4766.070855][T21892] [<808160e8>] (tomoyo_realpath_from_path) from [<808121ec>] (tomoyo_path_number_perm+0xcc/0x22c) [ 4766.070893][T21892] r10:00000000 r9:00000004 r8:86928980 r7:80285442 r6:81cda164 r5:00000004 [ 4766.070928][T21892] r4:869289a8 r3:828d1400 [ 4766.070966][T21892] [<80812120>] (tomoyo_path_number_perm) from [<80816b40>] (tomoyo_file_ioctl+0x1c/0x20) [ 4766.071029][T21892] r10:83f63200 r9:00000004 r8:86928980 r7:00000000 r6:00000000 r5:80285442 [ 4766.071041][T21892] r4:86928980 [ 4766.071049][T21892] [<80816b24>] (tomoyo_file_ioctl) from [<807c2438>] (security_file_ioctl+0x80/0x1d4) [ 4766.071076][T21892] [<807c23b8>] (security_file_ioctl) from [<805a1b04>] (sys_ioctl+0x4c/0xb5c) [ 4766.071106][T21892] r7:00000000 r6:80285442 r5:86928981 r4:00000000 [ 4766.071114][T21892] [<805a1ab8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4766.071140][T21892] Exception stack(0xec4f9fa8 to 0xec4f9ff0) [ 4766.071161][T21892] 9fa0: 00000000 00000000 00000004 80285442 00000000 00000000 [ 4766.071191][T21892] 9fc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76f0b0dc [ 4766.071206][T21892] 9fe0: 76f0ae88 76f0ae78 00018ebc 00130810 [ 4766.071224][T21892] r10:00000036 r9:83f63200 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 4766.071233][T21892] r4:00000000 [ 4766.071260][T21892] ERROR: Out of memory at tomoyo_realpath_from_path. [ 4767.182759][T21898] FAULT_INJECTION: forcing a failure. [ 4767.182759][T21898] name failslab, interval 1, probability 0, space 0, times 0 [ 4767.183073][T21898] CPU: 0 UID: 0 PID: 21898 Comm: syz.7.4282 Tainted: G L syzkaller #0 PREEMPT [ 4767.183131][T21898] Tainted: [L]=SOFTLOCKUP [ 4767.183142][T21898] Hardware name: ARM-Versatile Express [ 4767.183154][T21898] Call trace: [ 4767.183176][T21898] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4767.183235][T21898] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 4767.183281][T21898] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4767.183335][T21898] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4767.183397][T21898] r7:00000000 r6:00000000 r5:83f6e400 r4:82b18108 [ 4767.183466][T21898] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4767.183531][T21898] [<809d864c>] (should_fail_ex) from [<80554524>] (should_failslab+0x6c/0x94) [ 4767.183567][T21898] r8:00000000 r7:00000000 r6:830016c0 r5:00000c40 r4:00001000 [ 4767.183597][T21898] [<805544b8>] (should_failslab) from [<8053274c>] (__kmalloc_noprof+0xa4/0x39c) [ 4767.183640][T21898] [<805326a8>] (__kmalloc_noprof) from [<80816124>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 4767.183721][T21898] r10:00000000 r9:830bf000 r8:00000000 r7:8372b550 r6:8500ec28 r5:00001000 [ 4767.183772][T21898] r4:00000000 [ 4767.183781][T21898] [<808160e8>] (tomoyo_realpath_from_path) from [<808121ec>] (tomoyo_path_number_perm+0xcc/0x22c) [ 4767.183831][T21898] r10:00000000 r9:00000003 r8:8500ec00 r7:00008933 r6:81cda164 r5:00000004 [ 4767.183905][T21898] r4:8500ec28 r3:828d1400 [ 4767.183942][T21898] [<80812120>] (tomoyo_path_number_perm) from [<80816b40>] (tomoyo_file_ioctl+0x1c/0x20) [ 4767.183983][T21898] r10:83f6e400 r9:00000003 r8:8500ec00 r7:20000140 r6:20000140 r5:00008933 [ 4767.184004][T21898] r4:8500ec00 [ 4767.184046][T21898] [<80816b24>] (tomoyo_file_ioctl) from [<807c2438>] (security_file_ioctl+0x80/0x1d4) [ 4767.184101][T21898] [<807c23b8>] (security_file_ioctl) from [<805a1b04>] (sys_ioctl+0x4c/0xb5c) [ 4767.184164][T21898] r7:20000140 r6:00008933 r5:8500ec01 r4:00000000 [ 4767.184202][T21898] [<805a1ab8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4767.184255][T21898] Exception stack(0xec4f9fa8 to 0xec4f9ff0) [ 4767.184356][T21898] 9fa0: 00000000 00000000 00000003 00008933 20000140 00000000 [ 4767.184397][T21898] 9fc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76f0b0dc [ 4767.184412][T21898] 9fe0: 76f0ae88 76f0ae78 00018ebc 00130810 [ 4767.184441][T21898] r10:00000036 r9:83f6e400 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 4767.184472][T21898] r4:00000000 [ 4767.246542][T21898] ERROR: Out of memory at tomoyo_realpath_from_path. [ 4772.726775][T21930] FAULT_INJECTION: forcing a failure. [ 4772.726775][T21930] name failslab, interval 1, probability 0, space 0, times 0 [ 4772.727184][T21930] CPU: 0 UID: 0 PID: 21930 Comm: syz.7.4290 Tainted: G L syzkaller #0 PREEMPT [ 4772.727253][T21930] Tainted: [L]=SOFTLOCKUP [ 4772.727264][T21930] Hardware name: ARM-Versatile Express [ 4772.727277][T21930] Call trace: [ 4772.727302][T21930] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4772.727364][T21930] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 4772.727387][T21930] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4772.727420][T21930] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4772.727469][T21930] r7:00000000 r6:00000000 r5:846b0000 r4:82b18108 [ 4772.727478][T21930] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4772.727522][T21930] [<809d864c>] (should_fail_ex) from [<80554524>] (should_failslab+0x6c/0x94) [ 4772.727557][T21930] r8:00000000 r7:00000000 r6:830016c0 r5:00000c40 r4:00001000 [ 4772.727566][T21930] [<805544b8>] (should_failslab) from [<8053274c>] (__kmalloc_noprof+0xa4/0x39c) [ 4772.727592][T21930] [<805326a8>] (__kmalloc_noprof) from [<80816124>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 4772.727638][T21930] r10:00000000 r9:830bf000 r8:00000000 r7:85644cc0 r6:869289a8 r5:00001000 [ 4772.727649][T21930] r4:00000000 [ 4772.727657][T21930] [<808160e8>] (tomoyo_realpath_from_path) from [<808121ec>] (tomoyo_path_number_perm+0xcc/0x22c) [ 4772.727693][T21930] r10:00000000 r9:00000003 r8:86928980 r7:00008942 r6:81cda164 r5:00000004 [ 4772.727704][T21930] r4:869289a8 r3:828d1400 [ 4772.727712][T21930] [<80812120>] (tomoyo_path_number_perm) from [<80816b40>] (tomoyo_file_ioctl+0x1c/0x20) [ 4772.727747][T21930] r10:846b0000 r9:00000003 r8:86928980 r7:20001380 r6:20001380 r5:00008942 [ 4772.727766][T21930] r4:86928980 [ 4772.727775][T21930] [<80816b24>] (tomoyo_file_ioctl) from [<807c2438>] (security_file_ioctl+0x80/0x1d4) [ 4772.727801][T21930] [<807c23b8>] (security_file_ioctl) from [<805a1b04>] (sys_ioctl+0x4c/0xb5c) [ 4772.727832][T21930] r7:20001380 r6:00008942 r5:86928981 r4:00000000 [ 4772.727841][T21930] [<805a1ab8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4772.727875][T21930] Exception stack(0xec6ddfa8 to 0xec6ddff0) [ 4772.727907][T21930] dfa0: 00000000 00000000 00000003 00008942 20001380 00000000 [ 4772.727926][T21930] dfc0: 00000000 00000000 0012f214 00000036 003462d8 00000000 00000001 76f0b0dc [ 4772.727939][T21930] dfe0: 76f0ae88 76f0ae78 00018ebc 00130810 [ 4772.727957][T21930] r10:00000036 r9:846b0000 r8:8020029c r7:00000036 r6:0012f214 r5:00000000 [ 4772.727967][T21930] r4:00000000 [ 4772.728001][T21930] ERROR: Out of memory at tomoyo_realpath_from_path. [ 4779.118565][T21957] FAULT_INJECTION: forcing a failure. [ 4779.118565][T21957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4779.118892][T21957] CPU: 0 UID: 0 PID: 21957 Comm: syz.7.4300 Tainted: G L syzkaller #0 PREEMPT [ 4779.118948][T21957] Tainted: [L]=SOFTLOCKUP [ 4779.118958][T21957] Hardware name: ARM-Versatile Express [ 4779.118971][T21957] Call trace: [ 4779.118993][T21957] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4779.119112][T21957] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 4779.119124][T21957] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4779.119177][T21957] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4779.119217][T21957] r7:00000000 r6:00000000 r5:83398c80 r4:82b4f348 [ 4779.119237][T21957] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4779.119306][T21957] [<809d864c>] (should_fail_ex) from [<809d8884>] (should_fail+0x14/0x18) [ 4779.119362][T21957] r8:76f0af08 r7:00000000 r6:00000000 r5:ed035f68 r4:00000002 [ 4779.119446][T21957] [<809d8870>] (should_fail) from [<809d88a4>] (should_fail_usercopy+0x1c/0x20) [ 4779.119471][T21957] [<809d8888>] (should_fail_usercopy) from [<805c59c0>] (simple_read_from_buffer+0x80/0x140) [ 4779.119513][T21957] [<805c5940>] (simple_read_from_buffer) from [<8064ca04>] (proc_fail_nth_read+0xb8/0x10c) [ 4779.119563][T21957] r10:8064c94c r9:00000001 r8:00000002 r7:ed035f68 r6:0000000f r5:76f0af08 [ 4779.119639][T21957] r4:83398c80 r3:ed035e9f [ 4779.119657][T21957] [<8064c94c>] (proc_fail_nth_read) from [<80585ff8>] (vfs_read+0xc0/0x328) [ 4779.119741][T21957] r8:83398c80 r7:ed035f68 r6:76f0af08 r5:858f1600 r4:0000000f [ 4779.119799][T21957] [<80585f38>] (vfs_read) from [<80586c8c>] (ksys_read+0x74/0xec) [ 4779.119872][T21957] r10:00000003 r9:83398c80 r8:8020029c r7:00000000 r6:00000000 r5:858f1600 [ 4779.119884][T21957] r4:858f1603 [ 4779.119991][T21957] [<80586c18>] (ksys_read) from [<80586d14>] (sys_read+0x10/0x14) [ 4779.120068][T21957] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 4779.120097][T21957] [<80586d04>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4779.120150][T21957] Exception stack(0xed035fa8 to 0xed035ff0) [ 4779.120186][T21957] 5fa0: 00000000 00000000 00000004 76f0af08 0000000f 00000000 [ 4779.120212][T21957] 5fc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76f0b0dc [ 4779.120226][T21957] 5fe0: 76f0ae58 76f0ae44 0010ba34 00112618 [ 4786.442460][ T28] audit: type=1400 audit(5043.351:759): avc: denied { create } for pid=21987 comm="syz.7.4308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 4792.916623][T22014] fuse: Invalid rootmode [ 4800.261018][T22033] fuse: Invalid rootmode [ 4805.747445][T22049] FAULT_INJECTION: forcing a failure. [ 4805.747445][T22049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 4805.747723][T22049] CPU: 0 UID: 0 PID: 22049 Comm: syz.5.4324 Tainted: G L syzkaller #0 PREEMPT [ 4805.747777][T22049] Tainted: [L]=SOFTLOCKUP [ 4805.747787][T22049] Hardware name: ARM-Versatile Express [ 4805.747799][T22049] Call trace: [ 4805.747820][T22049] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 4805.747877][T22049] r7:60000013 r6:60000013 r5:8231eaf8 r4:00000000 [ 4805.747886][T22049] [<80201af0>] (show_stack) from [<8021e384>] (dump_stack_lvl+0x5c/0x70) [ 4805.747913][T22049] [<8021e328>] (dump_stack_lvl) from [<8021e3b0>] (dump_stack+0x18/0x1c) [ 4805.747983][T22049] r7:00000000 r6:00000000 r5:84782580 r4:82b4f348 [ 4805.748003][T22049] [<8021e398>] (dump_stack) from [<809d880c>] (should_fail_ex+0x1c0/0x224) [ 4805.748057][T22049] [<809d864c>] (should_fail_ex) from [<809d8884>] (should_fail+0x14/0x18) [ 4805.748132][T22049] r8:76f97f08 r7:00000000 r6:00000000 r5:ed261f68 r4:00000002 [ 4805.748142][T22049] [<809d8870>] (should_fail) from [<809d88a4>] (should_fail_usercopy+0x1c/0x20) [ 4805.748202][T22049] [<809d8888>] (should_fail_usercopy) from [<805c59c0>] (simple_read_from_buffer+0x80/0x140) [ 4805.748276][T22049] [<805c5940>] (simple_read_from_buffer) from [<8064ca04>] (proc_fail_nth_read+0xb8/0x10c) [ 4805.748323][T22049] r10:8064c94c r9:00000001 r8:00000002 r7:ed261f68 r6:0000000f r5:76f97f08 [ 4805.748342][T22049] r4:84782580 r3:ed261e9f [ 4805.748379][T22049] [<8064c94c>] (proc_fail_nth_read) from [<80585ff8>] (vfs_read+0xc0/0x328) [ 4805.748452][T22049] r8:84782580 r7:ed261f68 r6:76f97f08 r5:85e9b900 r4:0000000f [ 4805.748487][T22049] [<80585f38>] (vfs_read) from [<80586c8c>] (ksys_read+0x74/0xec) [ 4805.748542][T22049] r10:00000003 r9:84782580 r8:8020029c r7:00000000 r6:00000000 r5:85e9b900 [ 4805.748574][T22049] r4:85e9b903 [ 4805.748621][T22049] [<80586c18>] (ksys_read) from [<80586d14>] (sys_read+0x10/0x14) [ 4805.748672][T22049] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 4805.748742][T22049] [<80586d04>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4805.748775][T22049] Exception stack(0xed261fa8 to 0xed261ff0) [ 4805.748795][T22049] 1fa0: 00000000 00000000 00000006 76f97f08 0000000f 00000000 [ 4805.748813][T22049] 1fc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76f980dc [ 4805.748826][T22049] 1fe0: 76f97e58 76f97e44 0010ba34 00112618 [ 4806.206748][T22051] fuse: Invalid rootmode [ 4817.937467][T20764] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 4817.937791][T20764] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 4817.940232][T20764] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 4817.940499][T20764] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 4817.940677][T20764] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 4817.940758][T20764] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 4817.940826][T20764] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 4817.940912][T20764] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 4817.940982][T20764] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 4817.941072][T20764] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 4818.006539][T20764] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 4830.720653][T22117] fuse: Unknown parameter '6' [ 4876.791093][T22189] fuse: Unknown parameter 'user_id00000000000000000000' [ 4881.486192][ T28] audit: type=1400 audit(5138.361:760): avc: denied { write } for pid=22196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4881.891844][ T28] audit: type=1400 audit(5138.801:761): avc: denied { write } for pid=22201 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4930.077617][T22271] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 4949.307502][T22317] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 4950.367046][T22317] syzkaller0: entered promiscuous mode [ 4950.367530][T22317] syzkaller0: entered allmulticast mode [ 4961.449496][T22348] netlink: 'syz.7.4407': attribute type 1 has an invalid length. [ 4961.450129][T22348] nbd: couldn't find device at index 131080 [ 4974.917339][T22371] misc userio: Can't change port type on an already running userio instance [ 4980.636978][ T28] audit: type=1400 audit(5237.541:762): avc: denied { read write } for pid=22392 comm="syz.7.4416" name="file0" dev="fuse" ino=1073741830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 4980.637514][ T28] audit: type=1400 audit(5237.541:763): avc: denied { open } for pid=22392 comm="syz.7.4416" path="/318/file0/file0" dev="fuse" ino=1073741830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 4992.628923][ T28] audit: type=1400 audit(5249.541:764): avc: denied { mounton } for pid=22410 comm="syz.7.4421" path="/322/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=sock_file permissive=1 [ 5004.608337][ T28] audit: type=1400 audit(5261.521:765): avc: denied { setopt } for pid=22436 comm="syz.7.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 5009.456977][T22447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4429'. [ 5010.473080][T22447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4429'. [ 5012.227951][T22452] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 5023.687452][T22469] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 5025.676432][T22481] comedi: valid board names for 8255 driver are: [ 5025.677936][T22481] 8255 [ 5025.678525][T22481] comedi: valid board names for vmk80xx driver are: [ 5025.679159][T22481] vmk80xx [ 5025.679605][T22481] comedi: valid board names for usbduxsigma driver are: [ 5025.680200][T22481] usbduxsigma [ 5025.680630][T22481] comedi: valid board names for usbduxfast driver are: [ 5025.757649][T22481] usbduxfast [ 5025.758043][T22481] comedi: valid board names for usbdux driver are: [ 5025.758090][T22481] usbdux [ 5025.758106][T22481] comedi: valid board names for ni6501 driver are: [ 5025.758126][T22481] ni6501 [ 5025.758141][T22481] comedi: valid board names for dt9812 driver are: [ 5025.758203][T22481] dt9812 [ 5025.758250][T22481] comedi: valid board names for ni_labpc_cs driver are: [ 5025.758300][T22481] ni_labpc_cs [ 5025.758315][T22481] comedi: valid board names for ni_daq_700 driver are: [ 5025.758330][T22481] ni_daq_700 [ 5025.758344][T22481] comedi: valid board names for labpc_pci driver are: [ 5025.758359][T22481] labpc_pci [ 5025.758374][T22481] comedi: valid board names for adl_pci9118 driver are: [ 5025.758405][T22481] pci9118dg [ 5025.758420][T22481] pci9118hg [ 5025.758434][T22481] pci9118hr [ 5025.758446][T22481] comedi: valid board names for 8255_pci driver are: [ 5025.758462][T22481] 8255_pci [ 5025.758475][T22481] comedi: valid board names for comedi_parport driver are: [ 5025.758490][T22481] comedi_parport [ 5025.758503][T22481] comedi: valid board names for comedi_test driver are: [ 5025.758516][T22481] comedi_test [ 5025.758545][T22481] comedi: valid board names for comedi_bond driver are: [ 5025.758565][T22481] comedi_bond [ 5044.384289][T22509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5044.388884][T22509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5049.827467][ T28] audit: type=1400 audit(5306.741:766): avc: denied { name_bind } for pid=22517 comm="syz.5.4453" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 5082.165377][ T28] audit: type=1326 audit(5339.071:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22580 comm="syz.5.4469" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x0 [ 5100.356534][T22602] fuseblk: Bad value for 'fd' [ 5100.359648][T22603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5100.366558][T22603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5105.702468][T22610] syzkaller0: entered promiscuous mode [ 5105.713661][T22610] syzkaller0: entered allmulticast mode [ 5115.427761][T22630] fuseblk: Bad value for 'fd' [ 5134.764087][ T28] audit: type=1400 audit(5391.671:768): avc: denied { write } for pid=22671 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5135.429293][ T28] audit: type=1400 audit(5392.341:769): avc: denied { write } for pid=22675 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 5155.082436][ T28] audit: type=1326 audit(5411.991:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22703 comm="syz.7.4494" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x0 [ 5159.117416][T22706] syzkaller0: entered promiscuous mode [ 5159.119358][T22706] syzkaller0: entered allmulticast mode [ 5162.936978][T22716] netlink: 'syz.7.4495': attribute type 4 has an invalid length. [ 5168.784396][ T28] audit: type=1400 audit(5425.431:771): avc: denied { listen } for pid=22738 comm="syz.7.4497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 5183.409864][T22747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5183.411213][T22747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5205.181860][T22765] comedi: valid board names for 8255 driver are: [ 5205.182340][T22765] 8255 [ 5205.184097][T22765] comedi: valid board names for vmk80xx driver are: [ 5205.184152][T22765] vmk80xx [ 5205.184313][T22765] comedi: valid board names for usbduxsigma driver are: [ 5205.184677][T22765] usbduxsigma [ 5205.184698][T22765] comedi: valid board names for usbduxfast driver are: [ 5205.184716][T22765] usbduxfast [ 5205.184730][T22765] comedi: valid board names for usbdux driver are: [ 5205.185145][T22765] usbdux [ 5205.185466][T22765] comedi: valid board names for ni6501 driver are: [ 5205.198092][T22765] ni6501 [ 5205.198187][T22765] comedi: valid board names for dt9812 driver are: [ 5205.198216][T22765] dt9812 [ 5205.198733][T22765] comedi: valid board names for ni_labpc_cs driver are: [ 5205.198788][T22765] ni_labpc_cs [ 5205.199595][T22765] comedi: valid board names for ni_daq_700 driver are: [ 5205.199624][T22765] ni_daq_700 [ 5205.200188][T22765] comedi: valid board names for labpc_pci driver are: [ 5205.200217][T22765] labpc_pci [ 5205.200817][T22765] comedi: valid board names for adl_pci9118 driver are: [ 5205.200849][T22765] pci9118dg [ 5205.200926][T22765] pci9118hg [ 5205.201596][T22765] pci9118hr [ 5205.202283][T22765] comedi: valid board names for 8255_pci driver are: [ 5205.202314][T22765] 8255_pci [ 5205.202985][T22765] comedi: valid board names for comedi_parport driver are: [ 5205.203010][T22765] comedi_parport [ 5205.203026][T22765] comedi: valid board names for comedi_test driver are: [ 5205.203596][T22765] comedi_test [ 5205.204547][T22765] comedi: valid board names for comedi_bond driver are: [ 5205.204571][T22765] comedi_bond [ 5205.488169][T22758] TC_ACT_REPEAT abuse ? [ 5219.118946][ C1] vcan0: j1939_tp_rxtimer: 0x86d18400: rx timeout, send abort [ 5219.619053][ C1] vcan0: j1939_tp_rxtimer: 0x860a1000: rx timeout, send abort [ 5219.621032][ C1] vcan0: j1939_tp_rxtimer: 0x86d18400: abort rx timeout. Force session deactivation [ 5220.098247][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0x860a1000: connection exists (fe ff). last cmd: 20 [ 5220.348092][ C1] vcan0: j1939_tp_rxtimer: 0x86f76e00: rx timeout, send abort [ 5220.848737][ C1] vcan0: j1939_tp_rxtimer: 0x86f76e00: abort rx timeout. Force session deactivation [ 5226.360251][ T28] audit: type=1400 audit(5483.271:772): avc: denied { setattr } for pid=22791 comm="syz.5.4513" name="NETLINK" dev="sockfs" ino=49553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 5231.078361][ T28] audit: type=1326 audit(5487.991:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22798 comm="syz.7.4515" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 5231.102044][ T28] audit: type=1326 audit(5488.011:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22798 comm="syz.7.4515" exe="/syz-executor" sig=0 arch=40000028 syscall=125 compat=0 ip=0x130810 code=0x7ffc0000 [ 5231.102489][ T28] audit: type=1326 audit(5488.011:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22798 comm="syz.7.4515" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 5231.102782][ T28] audit: type=1326 audit(5488.011:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22798 comm="syz.7.4515" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 5231.542237][ T28] audit: type=1326 audit(5488.441:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22798 comm="syz.7.4515" exe="/syz-executor" sig=0 arch=40000028 syscall=294 compat=0 ip=0x130810 code=0x7ffc0000 [ 5231.542685][ T28] audit: type=1326 audit(5488.441:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22798 comm="syz.7.4515" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 5231.545150][ T28] audit: type=1326 audit(5488.441:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22798 comm="syz.7.4515" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 5231.666937][ T28] audit: type=1326 audit(5488.581:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22798 comm="syz.7.4515" exe="/syz-executor" sig=0 arch=40000028 syscall=430 compat=0 ip=0x130810 code=0x7ffc0000 [ 5231.669301][ T28] audit: type=1326 audit(5488.581:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22798 comm="syz.7.4515" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 5231.672349][ T28] audit: type=1326 audit(5488.581:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22798 comm="syz.7.4515" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130810 code=0x7ffc0000 [ 5244.727851][T22810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5244.732470][T22810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5259.485971][T22829] netlink: 'syz.5.4526': attribute type 1 has an invalid length. [ 5261.257668][T22829] bond1: entered promiscuous mode [ 5261.259972][T22829] bond1: entered allmulticast mode [ 5261.268436][T22829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 5262.012414][T22872] fuse: Bad value for 'fd' [ 5266.819202][T22876] netlink: 64535 bytes leftover after parsing attributes in process `syz.7.4529'. [ 5269.571042][T22883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5269.827605][T22883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5280.137888][T22900] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4534'. [ 5288.091484][T22914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5288.177525][T22914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5292.111599][T22918] netlink: 'syz.7.4539': attribute type 19 has an invalid length. [ 5303.337547][T22930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5303.377867][T22930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5314.747457][T22945] tmpfs: Unsupported parameter 'mpol' [ 5321.266614][T22953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5321.269473][T22953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5334.361486][T22971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5334.362913][T22971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5347.107674][T22981] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4560'. [ 5360.608447][T22997] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4562'. [ 5361.081939][T22997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4562'. [ 5376.497218][T23014] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4569'. [ 5380.599095][T23019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5380.601272][T23019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5384.876859][T23024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5384.881295][T23024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5401.572438][T23040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5401.883561][T23040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5422.993397][T23093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5422.998891][T23093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5426.016886][T23101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5426.022130][T23101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5431.854031][T23110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5431.858494][T23110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5434.056308][T23114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5434.058873][T23114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5442.197447][T23127] genirq: Flags mismatch irq 31. 00200001 (comedi_parport) vs. 00200081 (virtio0) [ 5442.223371][T23127] 8<--- cut here --- [ 5442.226363][T23127] Unable to handle kernel paging request at virtual address fee00d00 when write [ 5442.243984][T23127] [fee00d00] *pgd=80000080007003, *pmd=00000000 [ 5442.259552][T23127] Internal error: Oops: a06 [#1] SMP ARM [ 5442.261603][T23127] Modules linked in: [ 5442.262080][T23127] CPU: 1 UID: 0 PID: 23127 Comm: syz.5.4598 Tainted: G L syzkaller #0 PREEMPT [ 5442.262533][T23127] Tainted: [L]=SOFTLOCKUP [ 5442.262787][T23127] Hardware name: ARM-Versatile Express [ 5442.262976][T23127] PC is at parport_attach+0x184/0x1e0 [ 5442.263199][T23127] LR is at parport_attach+0x174/0x1e0 [ 5442.263387][T23127] pc : [<8145a0ac>] lr : [<8145a09c>] psr: 60000113 [ 5442.263590][T23127] sp : dfa8dd30 ip : dfa8dd30 fp : dfa8dd54 [ 5442.263781][T23127] r10: 82d2cdd4 r9 : 00000003 r8 : 8301ab40 [ 5442.263968][T23127] r7 : dfa8dd90 r6 : 8301ab40 r5 : 00000000 r4 : 00000000 [ 5442.264180][T23127] r3 : fee00d00 r2 : 81e277a8 r1 : 00000001 r0 : 81459d0c [ 5442.264468][T23127] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 5442.264728][T23127] Control: 30c5387d Table: 87898f00 DAC: 00000000 [ 5442.264970][T23127] Register r0 information: non-slab/vmalloc memory [ 5442.265829][T23127] Register r1 information: non-paged memory [ 5442.266122][T23127] Register r2 information: non-slab/vmalloc memory [ 5442.266358][T23127] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 5442.266830][T23127] Register r4 information: NULL pointer [ 5442.267085][T23127] Register r5 information: NULL pointer [ 5442.267305][T23127] Register r6 information: slab kmalloc-192 start 8301ab40 pointer offset 0 size 192 [ 5442.268098][T23127] Register r7 information: 2-page vmalloc region starting at 0xdfa8c000 allocated at kernel_clone+0xbc/0x43c [ 5442.268439][T23127] Register r8 information: slab kmalloc-192 start 8301ab40 pointer offset 0 size 192 [ 5442.268767][T23127] Register r9 information: non-paged memory [ 5442.268947][T23127] Register r10 information: non-slab/vmalloc memory [ 5442.269174][T23127] Register r11 information: 2-page vmalloc region starting at 0xdfa8c000 allocated at kernel_clone+0xbc/0x43c [ 5442.269497][T23127] Register r12 information: 2-page vmalloc region starting at 0xdfa8c000 allocated at kernel_clone+0xbc/0x43c [ 5442.269832][T23127] Process syz.5.4598 (pid: 23127, stack limit = 0xdfa8c000) [ 5442.270063][T23127] Stack: (0xdfa8dd30 to 0xdfa8e000) [ 5442.270231][T23127] dd20: 824bd160 8301ab40 00000000 82bd2c7c [ 5442.270459][T23127] dd40: 81e27c68 00000000 dfa8dd8c dfa8dd58 81455c0c 81459f34 40946400 00000000 [ 5442.270685][T23127] dd60: dfa8dd7c 20000180 8301ab40 b5403587 40946400 00000003 00000003 87996400 [ 5442.270986][T23127] dd80: dfa8de4c dfa8dd90 81451418 81455b10 656d6f63 705f6964 6f707261 00007472 [ 5442.271238][T23127] dda0: 00000000 00000d00 0000001f 00000006 00000fff 00000003 00000cc7 00000000 [ 5442.271473][T23127] ddc0: 00000006 00000005 000100ff 00000002 00000001 00000001 00000002 00000009 [ 5442.271725][T23127] dde0: 00000003 00000006 00000009 00000042 40000003 00000fff 00000008 00000007 [ 5442.271955][T23127] de00: 02000006 0000800b 00000032 00000005 00000002 0000000d 00000001 ffffff5c [ 5442.272182][T23127] de20: 00000000 8a6787c5 00000000 83336480 8301ab40 20000180 40946400 00000003 [ 5442.272413][T23127] de40: dfa8df14 dfa8de50 8145273c 81451350 00000000 8a6787c5 00000000 00000000 [ 5442.272640][T23127] de60: 82531804 dfa8dea4 0000005f 848b0b68 00000064 8301ab70 dfa8dee4 dfa8de88 [ 5442.272875][T23127] de80: 807ea3b4 807e06c8 00000064 00000001 00000000 dfa8dea4 83365010 83441330 [ 5442.273101][T23127] dea0: 00006400 0000000b dfa8de98 00000000 00000000 8a6787c5 00000000 83336480 [ 5442.273360][T23127] dec0: 40946400 20000180 20000180 83336480 00000003 87996400 dfa8def4 dfa8dee8 [ 5442.273594][T23127] dee0: 807ea4e8 8a6787c5 dfa8df14 00000000 83336481 40946400 20000180 83336480 [ 5442.273846][T23127] df00: 00000003 87996400 dfa8dfa4 dfa8df18 805a1cfc 814523f4 ecac8b10 87996400 [ 5442.274077][T23127] df20: dfa8df3c dfa8df30 81b189d4 81b188a0 dfa8df54 dfa8df40 8025a6bc 8028e2a4 [ 5442.274309][T23127] df40: dfa8dfb0 40000000 dfa8df84 dfa8df58 80220be0 8025a678 00000000 82a1c63c [ 5442.274537][T23127] df60: dfa8dfb0 0013e9b0 ecac8b10 80220b34 00000000 8a6787c5 dfa8dfac 00000000 [ 5442.274770][T23127] df80: 00000000 00346310 00000036 8020029c 87996400 00000036 00000000 dfa8dfa8 [ 5442.274998][T23127] dfa0: 80200060 805a1ac4 00000000 00000000 00000003 40946400 20000180 00000000 [ 5442.275273][T23127] dfc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f980dc [ 5442.275643][T23127] dfe0: 76f97e88 76f97e78 00018ebc 00130810 60000010 00000003 00000000 00000000 [ 5442.275932][T23127] Call trace: [ 5442.276193][T23127] [<81459f28>] (parport_attach) from [<81455c0c>] (comedi_device_attach+0x108/0x244) [ 5442.276553][T23127] r6:00000000 r5:81e27c68 r4:82bd2c7c [ 5442.276774][T23127] [<81455b04>] (comedi_device_attach) from [<81451418>] (do_devconfig_ioctl+0xd4/0x21c) [ 5442.277244][T23127] r10:87996400 r9:00000003 r8:00000003 r7:40946400 r6:b5403587 r5:8301ab40 [ 5442.277541][T23127] r4:20000180 [ 5442.277722][T23127] [<81451344>] (do_devconfig_ioctl) from [<8145273c>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 5442.278049][T23127] r8:00000003 r7:40946400 r6:20000180 r5:8301ab40 r4:83336480 [ 5442.278283][T23127] [<814523e8>] (comedi_unlocked_ioctl) from [<805a1cfc>] (sys_ioctl+0x244/0xb5c) [ 5442.278606][T23127] r10:87996400 r9:00000003 r8:83336480 r7:20000180 r6:40946400 r5:83336481 [ 5442.278882][T23127] r4:00000000 [ 5442.279009][T23127] [<805a1ab8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 5442.279277][T23127] Exception stack(0xdfa8dfa8 to 0xdfa8dff0) [ 5442.279513][T23127] dfa0: 00000000 00000000 00000003 40946400 20000180 00000000 [ 5442.279809][T23127] dfc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f980dc [ 5442.280092][T23127] dfe0: 76f97e88 76f97e78 00018ebc 00130810 [ 5442.280319][T23127] r10:00000036 r9:87996400 r8:8020029c r7:00000036 r6:00346310 r5:00000000 [ 5442.280541][T23127] r4:00000000 [ 5442.280893][T23127] Code: e5963064 e3a04000 e7f33053 e2433612 (e5c34000) [ 5442.282617][T23127] ---[ end trace 0000000000000000 ]--- [ 5442.556688][T23127] Kernel panic - not syncing: Fatal exception [ 5442.559022][T23127] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:40:18 Registers: info registers vcpu 0 CPU#0 R00=8334d9c0 R01=00000400 R02=00000001 R03=df9d1400 R04=8334d9c0 R05=831cb000 R06=846bd000 R07=00000000 R08=83878800 R09=83878808 R10=83878800 R11=df801644 R12=df801630 R13=df801630 R14=80a8b6ec R15=80a8b6f4 PSR=60000113 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=ebdedd18 R01=83714e88 R02=00000000 R03=08200080 R04=00020d41 R05=83714e58 R06=00000000 R07=835cb908 R08=ebdede50 R09=8500cf00 R10=ebdedf18 R11=ebdede4c R12=ebdedd58 R13=ebdeddc0 R14=8059d104 R15=8059ce0c PSR=600f0013 -ZC- A S svc32 s00=72656820 s01=2d2d2065 d00=2d2d206572656820 s02=00000000 s03=00000000 d01=0000000000000000 s04=ef0cee00 s05=ef0cee00 d02=ef0cee00ef0cee00 s06=08040200 s07=80402000 d03=8040200008040200 s08=00000c00 s09=c0200c03 d04=c0200c0300000c00 s10=08040201 s11=80402000 d05=8040200008040201 s12=08040201 s13=80402010 d06=8040201008040201 s14=08040201 s15=80402010 d07=8040201008040201 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000