last executing test programs: 1h8m47.119703135s ago: executing program 0 (id=3199): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) recvmsg$can_raw(r3, 0x0, 0x10020) dup3(r0, 0xffffffffffffffff, 0x0) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) 1h8m46.942777236s ago: executing program 0 (id=3200): r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x60, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5f2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) r2 = openat$vnet(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000040)={{0x2, 0x1}, {0x2, 0xbc}, 0x101, 0x2, 0xfa}) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000380)={0x2, 0x2, 0x3, 0xffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r3) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xa8, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x3}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcc1e}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004058}, 0x80) r6 = dup2(r0, 0xffffffffffffffff) mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r7 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r7, &(0x7f00000001c0), 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_WOL_SET(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9, 0x5, "c61b5fbcb8"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, 0x0) 1h8m43.350617469s ago: executing program 0 (id=3206): r0 = socket(0x2b, 0x1, 0x1) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x1953}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) timer_create(0x7, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 1h8m43.19027455s ago: executing program 0 (id=3207): r0 = openat$mixer(0xffffff9c, &(0x7f00000000c0), 0x141000, 0x0) r1 = dup(r0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000a40)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000, 0x2}) (fail_nth: 3) 1h8m42.691160154s ago: executing program 0 (id=3208): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)={0x2040}, 0x18) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x42}, 0x3}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = dup(r2) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8008550e, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = openat$adsp1(0xffffff9c, &(0x7f0000001440), 0x8000, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000001480)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_INVAL_INODE(r7, &(0x7f0000000000)={0xffffff5e}, 0x0) sendmsg$unix(r1, &(0x7f0000001580)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001400)=[{&(0x7f0000000140)="f61d0cf5a0eae4ccafc4173a0b8bea2ebc404d3518fd02603626d90d06fe973b87602eb2d4b835eb1e116221fa00aea046c9908b8248e76f3c02259ab2ea4d4c123667e5c18b3d2382b73c47381dbbd10baccd85cecc", 0x56}, {&(0x7f0000000000)="f5951e3e10feca08ff64904636752f", 0xf}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="72caed5e0fe025880c357ec4d59ccec8e6ee353f6c929c61580f266ff0786daca70a14ff43a13b8810db414cd5fd259d4ae9c37e443e149a913889766d9a266ffdca924d02435f8637e2d96b346f0c6d2e9378b32ee1448f866e0e0f8e0981783761a9e3f558b836a800c943aff4112260bff83c9b6691393cfe6fff4d83d35f42576c1d67914ea25d3528e829e334d77846406d7e8667b8d35dc87a1b05a4cdeb6a65312822d7bdf85602c7252610e631d4e30d6479df81efaf30e4b13e7cf28b8c0f", 0xc3}, {&(0x7f00000012c0)="89f9977ca12efda3ff45ab367523415324741c17a6c4a77f45bbc548da3ce39d73350c35b03d63ae0568e3eb2ad5b517d429f117192aca79423100c6817680ff5f7a083b06829300fe9752cb000ddb5ff08e404bbf1746eb726571141aeabd1632acde49298088ab81d7a51855ea90e5dfb9f86203cec2b5accd9c3a3580482059f6084d89bbaa9aaf3254d3fe4142bd9cce974f3a0d903fb188cd35b9b85c53c5391bfba22c38a8", 0xa8}, {&(0x7f0000001380)="cba3fc371e7319bd1941e45547dee82634126d131b16df13cc66ef06b846ec3f29fb67ba95b84c30ade5fe91857dafae18e0815348a40b4b46b11e27e8a2e3ffe828f6365908c4e66c9fa287ef5f90fbd9c4e27b55cc2805b8bae05ce39b64c118ae92e136df28f98781a22dc3b46a0d7fe5258997e244ae07568afb0746bb", 0x7f}], 0x6, &(0x7f00000015c0)=ANY=[@ANYBLOB="140000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="140000ff010000000100000014882f87ea2c3d9ee80c317c954cb77f97abaf45d813a08895b1200afbec16e7439e43201a3eb2e4c90c8f97e34b5b4e09629660c2d3b03d6452e9533de40cdbcc2b1afdfae1231d644f789bfad40be3afa3220378c94e96ab9df2bc9444a11ba2c265632efd12cdea557ec9a3632a4bea", @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="2c0000000100000001000000", @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r7, @ANYRES32=r1], 0x70, 0x44048081}, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000080)={0x5e, @multicast2, 0x4e21, 0x2, 'sh\x00', 0x34, 0x0, 0x4f}, 0x2c) 1h8m39.708805636s ago: executing program 0 (id=3211): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x42}, 0x3}, 0x1c) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x1953}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) timer_create(0x7, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 1h7m53.761549174s ago: executing program 32 (id=3211): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x42}, 0x3}, 0x1c) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x1953}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) timer_create(0x7, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 22m6.929528315s ago: executing program 1 (id=7366): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x5450, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000200)={0x1d, r2, 0x1}, 0x18) write$selinux_validatetrans(r1, &(0x7f0000000340)=ANY=[], 0x6e) sendto$llc(r1, 0x0, 0x0, 0x6000010, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000800) 22m5.81872572s ago: executing program 1 (id=7367): r0 = socket(0x2b, 0x1, 0x1) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0x5450, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x3}, 0x62) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'pimreg0\x00'}, 0x18) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 22m3.140487779s ago: executing program 1 (id=7373): mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x3, @local, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) close(r1) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x3, {0x2, 0x1}}, 0x18) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x28, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xcfd, 0x55}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) write$uinput_user_dev(r1, &(0x7f00000003c0)={'syz1\x00', {0x7, 0x1, 0x7, 0x8}, 0x16, [0x81, 0x800, 0xf, 0x0, 0x7, 0x81, 0xfffffffc, 0x3, 0x1, 0x4, 0x7, 0x1, 0x10, 0x8, 0x9, 0xfffffff8, 0x2, 0x1, 0x7, 0x800, 0x10000, 0x287, 0x7, 0x1000, 0x7f, 0x5, 0xe, 0x2, 0x200, 0x1, 0x6, 0xfffeffff, 0x7, 0x7, 0x4, 0x6, 0xd, 0x0, 0x6, 0xd6, 0x6, 0x6, 0x9, 0x0, 0x6, 0x4, 0x6932, 0x10001, 0xf, 0x1, 0x1, 0x5af0, 0x5, 0x5, 0xffff, 0x8, 0xbac5, 0x4, 0x7, 0x0, 0x0, 0xfffffff7, 0xd3, 0xd2d6], [0x44a, 0x2df, 0x401, 0x7, 0x80000000, 0xf29b, 0xfff, 0x2, 0x4, 0xe, 0x43de, 0x0, 0x9, 0x338, 0x3, 0xa, 0x4, 0x4, 0xe, 0x9, 0x9000000, 0x9, 0x55, 0x3, 0x7, 0x6, 0x0, 0x5, 0x4, 0x9, 0xe, 0x0, 0x1a0000, 0x6, 0xfff00000, 0x0, 0x1, 0x471, 0xa, 0x7, 0x8, 0x1ff, 0x82a, 0x0, 0x3, 0x0, 0x1, 0x80, 0x1010, 0xd76, 0x1e, 0x8, 0x8, 0x100, 0x2a, 0x7fff, 0xe, 0x8, 0x48000, 0x0, 0x40, 0x2, 0x26, 0x40], [0x0, 0x6, 0x7, 0xfffffa53, 0x80000000, 0x7f, 0x7, 0x0, 0xf, 0x7, 0x2, 0x9, 0x8000, 0x683, 0x80000000, 0x8001, 0x5, 0x8, 0x234, 0x2, 0x5, 0x5b144012, 0xfffff06d, 0x7f, 0x4, 0xa032, 0x4, 0x6, 0x2, 0x6, 0x7, 0x800, 0xfffffffa, 0x515, 0x8, 0x5, 0x9, 0xffffbcc7, 0x4, 0x7d, 0x9, 0x800000, 0x800, 0x0, 0x7, 0x7, 0x1, 0x1, 0x5, 0x7fffffff, 0x101, 0x7ff, 0x9, 0x4, 0x5, 0x40, 0x2, 0x6b6, 0xb592e62, 0xe885, 0x2, 0x8, 0x10001, 0x88], [0x9, 0x7bf, 0x7, 0xffffc68e, 0x3, 0x1, 0x4, 0x81, 0x1, 0x200, 0x8, 0xfffff304, 0x80000000, 0x8, 0x5, 0x6, 0x76b4, 0x7ff, 0xb9, 0x10, 0x1, 0x7fffffff, 0x0, 0x5, 0x9, 0x7, 0xd, 0x0, 0x0, 0x5, 0x401, 0xb, 0x7, 0x1, 0x3ff, 0x5, 0xab, 0x0, 0x0, 0x8, 0x0, 0x6, 0xfff, 0x80000000, 0x8, 0x0, 0x5, 0x10000, 0x7bc, 0x8, 0x4, 0x7, 0xb6d, 0x6, 0x1, 0x4, 0x9, 0xffffffe2, 0x6, 0x7fff, 0x8, 0xfffffff2, 0x6, 0x9]}, 0x45c) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000040)=0x3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = dup3(r5, r4, 0x0) r7 = accept$packet(r6, 0x0, 0x0) getsockname(r7, 0x0, &(0x7f0000000740)) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x3081e7cbde35ad71}, 0x6409c) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 22m0.344976615s ago: executing program 1 (id=7379): r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r1, &(0x7f0000000240)='./file0/file0\x00', 0x72) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x64, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5f2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) r3 = openat$vnet(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0x5450, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000040)={{0x9, 0x1}, {0x2, 0xbc}, 0x101, 0x2, 0xfe}) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f00000010c0)='.pending_reads\x00', 0x840, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0x5450, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) fcntl$lock(r7, 0x6, &(0x7f0000000380)={0x2, 0x2, 0x3, 0xffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r6) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x78, r8, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcc1e}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004058}, 0x80) dup2(r0, 0xffffffffffffffff) mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 21m58.33255311s ago: executing program 1 (id=7385): r0 = io_uring_setup(0x1ba5, &(0x7f00000002c0)={0x0, 0x7aca, 0x1000}) r1 = socket(0x29, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0xe12e, 0xff, 0xe0, 0x2}, {0x7, 0xd, 0x5, 0x101}, {0x5, 0x1, 0x5, 0x20c3}, {0x4, 0x1, 0x80, 0x2}]}, 0x8) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x4c801}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff92, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8054}, 0x24048001) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x1) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) timer_create(0x1, 0x0, &(0x7f0000000040)) 21m57.915266248s ago: executing program 1 (id=7387): r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x62}, 0x3}, 0x1c) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSFF(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$I2C_FUNCS(r3, 0x705, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r3, 0x80044df9, &(0x7f00000001c0)) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x68}, @void, @val={0xc, 0x99, {0xf90e, 0x23}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{}, "d89cda4fe33fadce", "5056f6ffffff00000000e1e8835d2303", "04161443", "29be63b4d9475742"}, 0x28) 21m57.912484798s ago: executing program 33 (id=7387): r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x62}, 0x3}, 0x1c) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSFF(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$I2C_FUNCS(r3, 0x705, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r3, 0x80044df9, &(0x7f00000001c0)) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x68}, @void, @val={0xc, 0x99, {0xf90e, 0x23}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{}, "d89cda4fe33fadce", "5056f6ffffff00000000e1e8835d2303", "04161443", "29be63b4d9475742"}, 0x28) 17m4.059549994s ago: executing program 3 (id=7936): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000000), 0x0}, 0x20) 17m3.752797794s ago: executing program 3 (id=7938): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 17m2.966155327s ago: executing program 3 (id=7940): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8, 0x0, 0x40}]}}, 0x0, 0x2a}, 0x28) 17m2.700003765s ago: executing program 3 (id=7942): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 17m1.86084043s ago: executing program 3 (id=7944): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80), 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 17m1.471847787s ago: executing program 3 (id=7945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x28, 0x7a, 0x4, 0xfffff228}]}) 17m1.458780837s ago: executing program 34 (id=7945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x28, 0x7a, 0x4, 0xfffff228}]}) 16m37.620783669s ago: executing program 4 (id=7949): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 16m37.522388415s ago: executing program 35 (id=7949): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 15m18.690488008s ago: executing program 2 (id=8157): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 15m18.134960795s ago: executing program 2 (id=8159): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r0, 0x16, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 15m17.710049763s ago: executing program 2 (id=8160): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x38) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6a) 15m17.398435164s ago: executing program 2 (id=8162): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 15m16.622349966s ago: executing program 2 (id=8165): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4a000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 15m15.984094269s ago: executing program 2 (id=8167): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x80000084, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 14m30.861928051s ago: executing program 36 (id=8167): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x80000084, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 7.115667665s ago: executing program 6 (id=9171): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r4 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x6c7, 0x10, 0x1, 0x310}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x440f}}) io_uring_enter(r4, 0xdb4, 0xd44a, 0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6.042011656s ago: executing program 5 (id=9172): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @private1, 0x20, 0x0, 0x38dc586a}}) 5.779203284s ago: executing program 5 (id=9173): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x80) openat$cgroup_pressure(r1, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_dev$usbmon(0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.119891055s ago: executing program 6 (id=9174): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1159b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x200}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x100}]}}}]}, 0x4c}}, 0x0) 3.648179167s ago: executing program 6 (id=9175): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190004000000000000000000ff010000000000000000000000000001ffffffff00000000000000000000000000000005000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000300000000000000ffffffffffffffffffffff7f0000000000000000000000000000000000000200000a00000000000000000000008040000000000000000008000000000000000000000000000000004400050000000000000000000000000000000000000004d23c00000000000000ac"], 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) 2.5468444s ago: executing program 5 (id=9176): r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) 2.372238552s ago: executing program 5 (id=9177): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x5cbb, 0x4000000, 0x0) 2.171405915s ago: executing program 5 (id=9178): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) msgrcv(0x0, 0x0, 0x0, 0x0, 0x3000) 2.051041943s ago: executing program 5 (id=9179): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4008004) 838.487924ms ago: executing program 6 (id=9180): syz_emit_ethernet(0x4e, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x3, 0xa2}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x10000, 0x0]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 299.50975ms ago: executing program 6 (id=9181): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x21, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) 0s ago: executing program 6 (id=9182): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f27, 0x1f, 0x10000, 0x4, 0x3, 0xcc7, 0x4, 0x80008, 0xe, 0x6, 0x2, 0x1, 0x7, 0x1, 0x6, 0x10000105, 0x0, 0x1a44d, 0x3, 0x3fff7fff, 0x89, 0x10, 0x1, 0x20001e58, 0x80000b, 0xe69, 0x3c, 0x8, 0x6, 0xffffffff, 0xeffffff8]}) kernel console output (not intermixed with test programs): 062][ T8522] [<805853c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6198.891121][ T8522] Exception stack(0xea8a9fa8 to 0xea8a9ff0) [ 6198.891183][ T8522] 9fa0: 00000000 00000000 00000003 00008916 20000000 00000000 [ 6198.891228][ T8522] 9fc0: 00000000 00000000 001302c8 00000036 00300000 00000000 00006364 76f960bc [ 6198.891261][ T8522] 9fe0: 76f95ec0 76f95eb0 0001929c 00132320 [ 6198.891302][ T8522] r10:00000036 r9:85c1bc00 r8:8020029c r7:00000036 r6:001302c8 r5:00000000 [ 6198.891325][ T8522] r4:00000000 [ 6201.008462][ T8554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=8554 comm=syz.2.7364 [ 6203.911098][ T8570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6203.914974][ T8570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6203.949038][ T29] audit: type=1400 audit(6459.856:806): avc: denied { setopt } for pid=8569 comm="syz.2.7372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 6206.994186][ T29] audit: type=1400 audit(6462.906:807): avc: denied { create } for pid=8592 comm="syz.2.7378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 6208.515506][ T8608] FAULT_INJECTION: forcing a failure. [ 6208.515506][ T8608] name failslab, interval 1, probability 0, space 0, times 0 [ 6208.516101][ T8608] CPU: 1 UID: 0 PID: 8608 Comm: syz.2.7383 Tainted: G L syzkaller #0 PREEMPT [ 6208.516210][ T8608] Tainted: [L]=SOFTLOCKUP [ 6208.516233][ T8608] Hardware name: ARM-Versatile Express [ 6208.516261][ T8608] Call trace: [ 6208.516307][ T8608] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6208.516444][ T8608] r7:00000c40 r6:00000000 r5:60000013 r4:8229596c [ 6208.516467][ T8608] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6208.516529][ T8608] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6208.516620][ T8608] r5:84c6e000 r4:82918c48 [ 6208.516681][ T8608] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6208.516760][ T8608] [<80999568>] (should_fail_ex) from [<8053a368>] (should_failslab+0x6c/0x94) [ 6208.516839][ T8608] r8:00000000 r7:00000c40 r6:00001000 r5:00001000 r4:830016c0 [ 6208.516864][ T8608] [<8053a2fc>] (should_failslab) from [<80514f74>] (__kmalloc_noprof+0x9c/0x568) [ 6208.516928][ T8608] [<80514ed8>] (__kmalloc_noprof) from [<807e3d48>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 6208.517015][ T8608] r10:84c6e000 r9:830a6000 r8:00000000 r7:8343b770 r6:8c0891a8 r5:00001000 [ 6208.517041][ T8608] r4:00000000 [ 6208.517063][ T8608] [<807e3d0c>] (tomoyo_realpath_from_path) from [<807dfe8c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 6208.517171][ T8608] r10:84c6e000 r9:00000000 r8:8c089180 r7:d000943d r6:00000004 r5:81cd6ac0 [ 6208.517201][ T8608] r4:8c0891a8 r3:826c2240 [ 6208.517222][ T8608] [<807dfdc0>] (tomoyo_path_number_perm) from [<807e476c>] (tomoyo_file_ioctl+0x1c/0x20) [ 6208.517298][ T8608] r9:00000003 r8:8c089180 r7:00000000 r6:00000000 r5:d000943d r4:8c089180 [ 6208.517363][ T8608] [<807e4750>] (tomoyo_file_ioctl) from [<807909d8>] (security_file_ioctl+0x64/0x1e4) [ 6208.517436][ T8608] [<80790974>] (security_file_ioctl) from [<80585410>] (sys_ioctl+0x4c/0xba0) [ 6208.517507][ T8608] r7:00000000 r6:8c089181 r5:00000000 r4:d000943d [ 6208.517683][ T8608] [<805853c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6208.517745][ T8608] Exception stack(0xeabc5fa8 to 0xeabc5ff0) [ 6208.517813][ T8608] 5fa0: 00000000 00000000 00000003 d000943d 00000000 00000000 [ 6208.517869][ T8608] 5fc0: 00000000 00000000 001302c8 00000036 00300000 00000000 00006364 76f960bc [ 6208.517919][ T8608] 5fe0: 76f95ec0 76f95eb0 0001929c 00132320 [ 6208.518118][ T8608] r10:00000036 r9:84c6e000 r8:8020029c r7:00000036 r6:001302c8 r5:00000000 [ 6208.518157][ T8608] r4:00000000 [ 6208.518196][ T8608] ERROR: Out of memory at tomoyo_realpath_from_path. [ 6209.148732][T31866] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6209.206524][T31866] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6209.308457][T31866] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6209.373122][T31866] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6209.694672][T31866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6209.700032][T31866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6209.707362][T31866] bond0 (unregistering): Released all slaves [ 6209.801684][T31866] hsr_slave_0: left promiscuous mode [ 6209.816357][T31866] hsr_slave_1: left promiscuous mode [ 6209.835069][T31866] veth1_macvtap: left promiscuous mode [ 6209.835951][T31866] veth0_macvtap: left promiscuous mode [ 6209.838519][T31866] veth1_vlan: left promiscuous mode [ 6209.844596][T31866] veth0_vlan: left promiscuous mode [ 6212.416853][ T8616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6212.421973][ T8616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6213.439611][ T8616] hsr_slave_0: entered promiscuous mode [ 6213.441181][ T8616] hsr_slave_1: entered promiscuous mode [ 6213.907713][ T8616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 6213.928574][ T8616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 6213.938061][ T8616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 6213.949824][ T8616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 6215.266360][ T8616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6218.791114][ T8616] veth0_vlan: entered promiscuous mode [ 6218.812798][ T8616] veth1_vlan: entered promiscuous mode [ 6218.877853][ T8616] veth0_macvtap: entered promiscuous mode [ 6218.892810][ T8616] veth1_macvtap: entered promiscuous mode [ 6218.959647][T31866] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6218.959997][T31866] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6218.960080][T31866] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6218.960154][T31866] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6221.566630][ T9005] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9005 comm=syz.3.7397 [ 6222.673240][ T9014] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9014 comm=syz.2.7399 [ 6222.682894][ T9014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9014 comm=syz.2.7399 [ 6222.690270][ T9014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9014 comm=syz.2.7399 [ 6222.697825][ T9014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9014 comm=syz.2.7399 [ 6227.081161][ T9031] FAULT_INJECTION: forcing a failure. [ 6227.081161][ T9031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6227.087527][ T9031] CPU: 0 UID: 0 PID: 9031 Comm: syz.2.7403 Tainted: G L syzkaller #0 PREEMPT [ 6227.087630][ T9031] Tainted: [L]=SOFTLOCKUP [ 6227.087641][ T9031] Hardware name: ARM-Versatile Express [ 6227.087655][ T9031] Call trace: [ 6227.087679][ T9031] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6227.087749][ T9031] r7:b5403587 r6:00000000 r5:60080013 r4:8229596c [ 6227.087761][ T9031] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6227.087790][ T9031] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6227.087819][ T9031] r5:84c6b000 r4:8294fc90 [ 6227.087827][ T9031] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6227.087858][ T9031] [<80999568>] (should_fail_ex) from [<809997a4>] (should_fail+0x14/0x18) [ 6227.087893][ T9031] r8:00000000 r7:b5403587 r6:76f95ca0 r5:00000000 r4:eaf6df0c [ 6227.087902][ T9031] [<80999790>] (should_fail) from [<809997c4>] (should_fail_usercopy+0x1c/0x20) [ 6227.087930][ T9031] [<809997a8>] (should_fail_usercopy) from [<8022a4a8>] (restore_vfp_context+0x3c/0xe0) [ 6227.087959][ T9031] [<8022a46c>] (restore_vfp_context) from [<8022a9d0>] (restore_sigframe+0x1fc/0x210) [ 6227.088050][ T9031] r6:76f95ca0 r5:00000000 r4:eaf6dfb0 [ 6227.088061][ T9031] [<8022a7d4>] (restore_sigframe) from [<8022aa24>] (sys_sigreturn+0x40/0x60) [ 6227.088098][ T9031] r7:00000077 r6:001302c8 r5:00000000 r4:eaf6dfb0 [ 6227.088108][ T9031] [<8022a9e4>] (sys_sigreturn) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6227.088135][ T9031] Exception stack(0xeaf6dfa8 to 0xeaf6dff0) [ 6227.088200][ T9031] dfa0: 00000000 00000000 fffffffc 20000280 20000000 00000000 [ 6227.088222][ T9031] dfc0: 00000000 00000000 001302c8 00000128 00300000 00000000 00006364 76f960bc [ 6227.088237][ T9031] dfe0: 76f95ec0 76f95eb0 0001929c 00132320 [ 6227.088250][ T9031] r5:00000000 r4:00000000 [ 6228.812042][ T29] audit: type=1400 audit(6484.726:808): avc: denied { shutdown } for pid=9049 comm="syz.2.7406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 6231.105566][ T9084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9084 comm=syz.2.7410 [ 6235.079955][ T9095] FAULT_INJECTION: forcing a failure. [ 6235.079955][ T9095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6235.083128][ T9095] CPU: 0 UID: 0 PID: 9095 Comm: syz.2.7415 Tainted: G L syzkaller #0 PREEMPT [ 6235.083251][ T9095] Tainted: [L]=SOFTLOCKUP [ 6235.083275][ T9095] Hardware name: ARM-Versatile Express [ 6235.083301][ T9095] Call trace: [ 6235.083424][ T9095] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6235.083630][ T9095] r7:00000000 r6:00000000 r5:60000013 r4:8229596c [ 6235.083655][ T9095] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6235.083721][ T9095] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6235.083786][ T9095] r5:84c6a400 r4:8294fc90 [ 6235.083808][ T9095] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6235.083875][ T9095] [<80999568>] (should_fail_ex) from [<809997a4>] (should_fail+0x14/0x18) [ 6235.084024][ T9095] r8:ebac9eb8 r7:00000000 r6:00000001 r5:76f95f30 r4:00000001 [ 6235.084071][ T9095] [<80999790>] (should_fail) from [<809997c4>] (should_fail_usercopy+0x1c/0x20) [ 6235.084147][ T9095] [<809997a8>] (should_fail_usercopy) from [<808e141c>] (kstrtouint_from_user+0x54/0x13c) [ 6235.084220][ T9095] [<808e13c8>] (kstrtouint_from_user) from [<80625e04>] (proc_fail_nth_write+0x40/0xf0) [ 6235.084300][ T9095] r8:ebac9f68 r7:84c6a400 r6:00000001 r5:8c0ae3c0 r4:00000001 [ 6235.084326][ T9095] [<80625dc4>] (proc_fail_nth_write) from [<8056ae38>] (vfs_write+0xac/0x44c) [ 6235.084396][ T9095] r5:8c0ae3c0 r4:80625dc4 [ 6235.084417][ T9095] [<8056ad8c>] (vfs_write) from [<8056b348>] (ksys_write+0x74/0xe8) [ 6235.084487][ T9095] r10:00000004 r9:84c6a400 r8:8020029c r7:00000000 r6:00000002 r5:8c0ae3c0 [ 6235.084514][ T9095] r4:8c0ae3c3 [ 6235.084534][ T9095] [<8056b2d4>] (ksys_write) from [<8056b3cc>] (sys_write+0x10/0x14) [ 6235.084591][ T9095] r7:00000004 r6:00000004 r5:76f95f30 r4:00000001 [ 6235.084608][ T9095] [<8056b3bc>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6235.084653][ T9095] Exception stack(0xebac9fa8 to 0xebac9ff0) [ 6235.084698][ T9095] 9fa0: 00000001 76f95f30 00000004 76f95f30 00000001 00000000 [ 6235.084741][ T9095] 9fc0: 00000001 76f95f30 00000004 00000004 00300000 00000000 00006364 76f960bc [ 6235.084773][ T9095] 9fe0: 00000158 76f95ed0 000d7fdc 001302b4 [ 6237.819162][ T29] audit: type=1400 audit(6493.736:809): avc: denied { read write } for pid=9117 comm="syz.2.7422" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 6237.822915][ T29] audit: type=1400 audit(6493.736:810): avc: denied { ioctl open } for pid=9117 comm="syz.2.7422" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 6237.834513][ T9118] binder: 9117:9118 ioctl c00c642e 20000600 returned -22 [ 6238.404402][ T29] audit: type=1400 audit(6494.316:811): avc: denied { getattr } for pid=9127 comm="syz.3.7427" name="/" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 6239.072310][ T9139] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9139 comm=syz.3.7430 [ 6245.686731][ T9163] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9163 comm=syz.2.7438 [ 6245.905685][ T29] audit: type=1400 audit(6501.826:812): avc: denied { setopt } for pid=9164 comm="syz.2.7439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 6249.746102][ T9191] FAULT_INJECTION: forcing a failure. [ 6249.746102][ T9191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6249.746711][ T9191] CPU: 1 UID: 0 PID: 9191 Comm: syz.3.7448 Tainted: G L syzkaller #0 PREEMPT [ 6249.746820][ T9191] Tainted: [L]=SOFTLOCKUP [ 6249.746843][ T9191] Hardware name: ARM-Versatile Express [ 6249.746868][ T9191] Call trace: [ 6249.746912][ T9191] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6249.747225][ T9191] r7:00000000 r6:00000000 r5:60000013 r4:8229596c [ 6249.747458][ T9191] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6249.747583][ T9191] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6249.748057][ T9191] r5:845bbc00 r4:8294fc90 [ 6249.748166][ T9191] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6249.748429][ T9191] [<80999568>] (should_fail_ex) from [<809997a4>] (should_fail+0x14/0x18) [ 6249.748533][ T9191] r8:76f75f30 r7:00000000 r6:00000000 r5:ebd05f68 r4:00000002 [ 6249.748556][ T9191] [<80999790>] (should_fail) from [<809997c4>] (should_fail_usercopy+0x1c/0x20) [ 6249.748617][ T9191] [<809997a8>] (should_fail_usercopy) from [<805a6d60>] (simple_read_from_buffer+0x80/0x13c) [ 6249.748675][ T9191] [<805a6ce0>] (simple_read_from_buffer) from [<80624a54>] (proc_fail_nth_read+0xb8/0x108) [ 6249.748807][ T9191] r10:00000001 r9:8062499c r8:00000002 r7:ebd05f68 r6:0000000f r5:76f75f30 [ 6249.748837][ T9191] r4:845bbc00 r3:ebd05e9f [ 6249.748857][ T9191] [<8062499c>] (proc_fail_nth_read) from [<8056a53c>] (vfs_read+0x98/0x324) [ 6249.748923][ T9191] r8:76f75f30 r7:ebd05f68 r6:845bbc00 r5:0000000f r4:851c0d80 [ 6249.748943][ T9191] [<8056a4a4>] (vfs_read) from [<8056b24c>] (ksys_read+0x74/0xe8) [ 6249.749002][ T9191] r10:00000003 r9:845bbc00 r8:8020029c r7:00000000 r6:00000000 r5:851c0d80 [ 6249.749092][ T9191] r4:851c0d83 [ 6249.749538][ T9191] [<8056b1d8>] (ksys_read) from [<8056b2d0>] (sys_read+0x10/0x14) [ 6249.749629][ T9191] r7:00000003 r6:00000005 r5:76f75f30 r4:0000000f [ 6249.749808][ T9191] [<8056b2c0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6249.749876][ T9191] Exception stack(0xebd05fa8 to 0xebd05ff0) [ 6249.749970][ T9191] 5fa0: 0000000f 76f75f30 00000005 76f75f30 0000000f 00000000 [ 6249.750018][ T9191] 5fc0: 0000000f 76f75f30 00000005 00000003 00300000 00000000 00006364 76f760bc [ 6249.750145][ T9191] 5fe0: 00000158 76f75ed0 000d7fdc 001301ec [ 6250.272979][ T29] audit: type=1400 audit(6506.186:813): avc: denied { bind } for pid=9199 comm="syz.3.7452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 6250.279481][ T29] audit: type=1400 audit(6506.196:814): avc: denied { listen } for pid=9199 comm="syz.3.7452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 6250.290585][ T29] audit: type=1400 audit(6506.206:815): avc: denied { connect } for pid=9199 comm="syz.3.7452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 6250.303099][ T29] audit: type=1400 audit(6506.216:816): avc: denied { accept } for pid=9199 comm="syz.3.7452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 6250.310513][ T29] audit: type=1400 audit(6506.226:817): avc: denied { write } for pid=9199 comm="syz.3.7452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 6250.422862][ T9202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=521 sclass=netlink_route_socket pid=9202 comm=syz.3.7453 [ 6255.108154][ T29] audit: type=1400 audit(6511.026:818): avc: denied { write } for pid=9220 comm="syz.3.7460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 6255.421355][ T9222] FAULT_INJECTION: forcing a failure. [ 6255.421355][ T9222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6255.421719][ T9222] CPU: 1 UID: 0 PID: 9222 Comm: syz.2.7458 Tainted: G L syzkaller #0 PREEMPT [ 6255.421812][ T9222] Tainted: [L]=SOFTLOCKUP [ 6255.421834][ T9222] Hardware name: ARM-Versatile Express [ 6255.421849][ T9222] Call trace: [ 6255.421872][ T9222] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6255.421974][ T9222] r7:b5403587 r6:00000000 r5:60000113 r4:8229596c [ 6255.421985][ T9222] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6255.422038][ T9222] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6255.422067][ T9222] r5:845bbc00 r4:8294fc90 [ 6255.422076][ T9222] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6255.422107][ T9222] [<80999568>] (should_fail_ex) from [<809997a4>] (should_fail+0x14/0x18) [ 6255.422139][ T9222] r8:00000000 r7:b5403587 r6:00000000 r5:845bc430 r4:76f74ca0 [ 6255.422148][ T9222] [<80999790>] (should_fail) from [<809997c4>] (should_fail_usercopy+0x1c/0x20) [ 6255.422195][ T9222] [<809997a8>] (should_fail_usercopy) from [<8022a5c4>] (preserve_vfp_context+0x78/0xc4) [ 6255.422225][ T9222] [<8022a54c>] (preserve_vfp_context) from [<8022a77c>] (setup_sigframe+0x16c/0x1c4) [ 6255.422253][ T9222] r5:845bc430 r4:76f74bb8 [ 6255.422261][ T9222] [<8022a610>] (setup_sigframe) from [<8022ae7c>] (do_work_pending+0x3c4/0x4d0) [ 6255.422295][ T9222] r10:b5403587 r9:76f74bb8 r8:00000000 r7:845bc430 r6:76f74b38 r5:dfb8dfb0 [ 6255.422305][ T9222] r4:845bbc00 [ 6255.422314][ T9222] [<8022aab8>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 6255.422338][ T9222] Exception stack(0xdfb8dfb0 to 0xdfb8dff8) [ 6255.422356][ T9222] dfa0: ffffff8e 20000180 24004851 00000000 [ 6255.422376][ T9222] dfc0: 00000000 00000000 001302c8 00000128 00300000 00000000 00006364 76f750bc [ 6255.422398][ T9222] dfe0: 76f74ec0 76f74eb0 0001929c 00132320 60000010 00000003 [ 6255.422516][ T9222] r10:00000128 r9:845bbc00 r8:8020029c r7:00000128 r6:001302c8 r5:00000000 [ 6255.422617][ T9222] r4:00000000 [ 6257.927509][ T29] audit: type=1400 audit(6513.846:819): avc: denied { getattr } for pid=9220 comm="syz.3.7460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 6266.880458][ T29] audit: type=1400 audit(6522.796:820): avc: denied { read } for pid=9274 comm="syz.3.7480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 6273.911810][ T9293] FAULT_INJECTION: forcing a failure. [ 6273.911810][ T9293] name failslab, interval 1, probability 0, space 0, times 0 [ 6273.912750][ T9293] CPU: 0 UID: 0 PID: 9293 Comm: syz.3.7484 Tainted: G L syzkaller #0 PREEMPT [ 6273.912822][ T9293] Tainted: [L]=SOFTLOCKUP [ 6273.912833][ T9293] Hardware name: ARM-Versatile Express [ 6273.912845][ T9293] Call trace: [ 6273.912869][ T9293] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6273.912932][ T9293] r7:00000000 r6:00000000 r5:60000013 r4:8229596c [ 6273.912942][ T9293] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6273.912970][ T9293] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6273.912999][ T9293] r5:84c6a400 r4:82918c48 [ 6273.913007][ T9293] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6273.913037][ T9293] [<80999568>] (should_fail_ex) from [<8053a368>] (should_failslab+0x6c/0x94) [ 6273.913074][ T9293] r8:84c6a400 r7:00000000 r6:00000000 r5:00400cc0 r4:000000ef [ 6273.913084][ T9293] [<8053a2fc>] (should_failslab) from [<8051b4cc>] (__kvmalloc_node_noprof+0xf0/0x700) [ 6273.913110][ T9293] [<8051b3dc>] (__kvmalloc_node_noprof) from [<805a52c4>] (simple_xattr_alloc+0x34/0x60) [ 6273.913148][ T9293] r10:00000001 r9:e0239e5c r8:830bff30 r7:8433ddc0 r6:8595e500 r5:e0239e5c [ 6273.913165][ T9293] r4:000000db [ 6273.913174][ T9293] [<805a5290>] (simple_xattr_alloc) from [<805a53b8>] (simple_xattr_set+0x28/0x184) [ 6273.913209][ T9293] r7:8433ddc0 r6:8595e500 r5:e0239e5c r4:8595e500 [ 6273.913218][ T9293] [<805a5390>] (simple_xattr_set) from [<804a40c4>] (shmem_xattr_handler_set+0x194/0x1a8) [ 6273.913256][ T9293] r9:e0239e5c r8:830bff30 r7:00000118 r6:830bff00 r5:8433dde0 r4:8595e500 [ 6273.913266][ T9293] [<804a3f30>] (shmem_xattr_handler_set) from [<805a35bc>] (__vfs_setxattr+0xb4/0xc8) [ 6273.913301][ T9293] r9:804a3f30 r8:000000db r7:8595e500 r6:8343b770 r5:8291fa94 r4:8433dde0 [ 6273.913312][ T9293] [<805a3508>] (__vfs_setxattr) from [<805a3fdc>] (__vfs_setxattr_noperm+0x7c/0x204) [ 6273.913348][ T9293] r9:8291fa94 r8:8595e500 r7:8433dde0 r6:00000001 r5:e0239e5c r4:8343b770 [ 6273.913432][ T9293] [<805a3f60>] (__vfs_setxattr_noperm) from [<805a4248>] (__vfs_setxattr_locked+0xe4/0x114) [ 6273.913500][ T9293] r10:e0239dc0 r9:000000db r8:8433dde0 r7:8595e500 r6:e0239e5c r5:8291fa94 [ 6273.913571][ T9293] r4:8343b770 [ 6273.913591][ T9293] [<805a4164>] (__vfs_setxattr_locked) from [<805a4308>] (vfs_setxattr+0x90/0x17c) [ 6273.913653][ T9293] r8:8291fa94 r7:e0239e5c r6:8343b770 r5:8433de60 r4:e0239e48 [ 6273.913670][ T9293] [<805a4278>] (vfs_setxattr) from [<805a4488>] (do_setxattr+0x94/0x9c) [ 6273.913730][ T9293] r10:000000e4 r9:8343b770 r8:8291fa94 r7:8595e500 r6:000000db r5:e0239e5c [ 6273.913799][ T9293] r4:e0239e48 [ 6273.913820][ T9293] [<805a43f4>] (do_setxattr) from [<805a46c4>] (file_setxattr+0x58/0x78) [ 6273.913889][ T9293] r9:84c6a400 r8:20000200 r7:0000000b r6:e0239e48 r5:8c089480 r4:00000000 [ 6273.913911][ T9293] [<805a466c>] (file_setxattr) from [<805a48c8>] (path_setxattrat+0x104/0x17c) [ 6273.913971][ T9293] r7:0000000b r6:8c089480 r5:8c089481 r4:00000000 [ 6273.913988][ T9293] [<805a47c4>] (path_setxattrat) from [<805a4b40>] (sys_fsetxattr+0x30/0x38) [ 6273.914052][ T9293] r8:8020029c r7:000000e4 r6:001302c8 r5:00000000 r4:00000001 [ 6273.914072][ T9293] [<805a4b10>] (sys_fsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6273.914124][ T9293] Exception stack(0xe0239fa8 to 0xe0239ff0) [ 6273.914161][ T9293] 9fa0: 00000001 00000000 0000000b 200001c0 20000200 000000db [ 6273.914198][ T9293] 9fc0: 00000001 00000000 001302c8 000000e4 00300000 00000000 00006364 76f760bc [ 6273.914227][ T9293] 9fe0: 76f75ec0 76f75eb0 0001929c 00132320 [ 6280.014647][ T9323] SELinux: Context system_u:object_r:semanage_trans_lock_t:s0 is not valid (left unmapped). [ 6280.017928][ T29] audit: type=1400 audit(6535.936:821): avc: denied { relabelto } for pid=9322 comm="syz.3.7493" name="file0" dev="tmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_trans_lock_t:s0" [ 6280.019774][ T29] audit: type=1400 audit(6535.936:822): avc: denied { associate } for pid=9322 comm="syz.3.7493" name="file0" dev="tmpfs" ino=266 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_trans_lock_t:s0" [ 6280.696919][ T9327] FAULT_INJECTION: forcing a failure. [ 6280.696919][ T9327] name failslab, interval 1, probability 0, space 0, times 0 [ 6280.697358][ T9327] CPU: 0 UID: 0 PID: 9327 Comm: syz.3.7494 Tainted: G L syzkaller #0 PREEMPT [ 6280.697457][ T9327] Tainted: [L]=SOFTLOCKUP [ 6280.697478][ T9327] Hardware name: ARM-Versatile Express [ 6280.697500][ T9327] Call trace: [ 6280.697539][ T9327] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6280.697811][ T9327] r7:00000d40 r6:00000000 r5:60000013 r4:8229596c [ 6280.698206][ T9327] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6280.698342][ T9327] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6280.698447][ T9327] r5:84c6e000 r4:82918c48 [ 6280.698790][ T9327] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6280.698887][ T9327] [<80999568>] (should_fail_ex) from [<8053a368>] (should_failslab+0x6c/0x94) [ 6280.699023][ T9327] r8:00000000 r7:00000d40 r6:00000019 r5:84fd0ffd r4:83001240 [ 6280.699048][ T9327] [<8053a2fc>] (should_failslab) from [<80514f74>] (__kmalloc_noprof+0x9c/0x568) [ 6280.699462][ T9327] [<80514ed8>] (__kmalloc_noprof) from [<807e3c50>] (tomoyo_encode2+0x64/0xf0) [ 6280.700118][ T9327] r10:00000fff r9:830a7400 r8:00000000 r7:855da088 r6:851b64a8 r5:84fd0ffd [ 6280.700383][ T9327] r4:84fd0fef [ 6280.700411][ T9327] [<807e3bec>] (tomoyo_encode2) from [<807e3d00>] (tomoyo_encode+0x24/0x30) [ 6280.700622][ T9327] r9:830a7400 r8:00000000 r7:855da088 r6:851b64a8 r5:00001000 r4:84fd0ff0 [ 6280.700663][ T9327] [<807e3cdc>] (tomoyo_encode) from [<807e3d8c>] (tomoyo_realpath_from_path+0x80/0x17c) [ 6280.700749][ T9327] r5:00001000 r4:84fd0000 [ 6280.700771][ T9327] [<807e3d0c>] (tomoyo_realpath_from_path) from [<807dfe8c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 6280.700901][ T9327] r10:84c6e000 r9:00000000 r8:851b6480 r7:0000890b r6:00000004 r5:81cd6ac0 [ 6280.701093][ T9327] r4:851b64a8 r3:826c2240 [ 6280.701227][ T9327] [<807dfdc0>] (tomoyo_path_number_perm) from [<807e476c>] (tomoyo_file_ioctl+0x1c/0x20) [ 6280.701331][ T9327] r9:00000003 r8:851b6480 r7:00000000 r6:00000000 r5:0000890b r4:851b6480 [ 6280.701651][ T9327] [<807e4750>] (tomoyo_file_ioctl) from [<807909d8>] (security_file_ioctl+0x64/0x1e4) [ 6280.701771][ T9327] [<80790974>] (security_file_ioctl) from [<80585410>] (sys_ioctl+0x4c/0xba0) [ 6280.702732][ T9327] r7:00000000 r6:851b6481 r5:00000000 r4:0000890b [ 6280.703102][ T9327] [<805853c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6280.703734][ T9327] Exception stack(0xe843dfa8 to 0xe843dff0) [ 6280.704228][ T9327] dfa0: 00000000 00000000 00000003 0000890b 00000000 00000000 [ 6280.704288][ T9327] dfc0: 00000000 00000000 001302c8 00000036 00300000 00000000 00006364 76f550bc [ 6280.704337][ T9327] dfe0: 76f54ec0 76f54eb0 0001929c 00132320 [ 6280.704373][ T9327] r10:00000036 r9:84c6e000 r8:8020029c r7:00000036 r6:001302c8 r5:00000000 [ 6280.704405][ T9327] r4:00000000 [ 6280.707366][ T9327] ERROR: Out of memory at tomoyo_realpath_from_path. [ 6285.821917][ T9350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6285.822595][ T9350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6286.267064][ T9361] FAULT_INJECTION: forcing a failure. [ 6286.267064][ T9361] name failslab, interval 1, probability 0, space 0, times 0 [ 6286.268084][ T9361] CPU: 1 UID: 0 PID: 9361 Comm: syz.2.7503 Tainted: G L syzkaller #0 PREEMPT [ 6286.268168][ T9361] Tainted: [L]=SOFTLOCKUP [ 6286.268181][ T9361] Hardware name: ARM-Versatile Express [ 6286.268195][ T9361] Call trace: [ 6286.268217][ T9361] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6286.268287][ T9361] r7:00000cc0 r6:00000000 r5:60000013 r4:8229596c [ 6286.268298][ T9361] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6286.268329][ T9361] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6286.268361][ T9361] r5:85bca400 r4:82918c48 [ 6286.268370][ T9361] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6286.268407][ T9361] [<80999568>] (should_fail_ex) from [<8053a368>] (should_failslab+0x6c/0x94) [ 6286.268448][ T9361] r8:00000000 r7:00000cc0 r6:0000000d r5:0000000c r4:83001240 [ 6286.268458][ T9361] [<8053a2fc>] (should_failslab) from [<8051c0f0>] (__kmalloc_node_track_caller_noprof+0xa0/0x574) [ 6286.268487][ T9361] [<8051c050>] (__kmalloc_node_track_caller_noprof) from [<804ac700>] (kstrdup+0x38/0x64) [ 6286.268528][ T9361] r10:85bca400 r9:00000000 r8:828f57c0 r7:8031f298 r6:e0239d40 r5:0000000c [ 6286.268540][ T9361] r4:00000cc0 [ 6286.268549][ T9361] [<804ac6c8>] (kstrdup) from [<8031f298>] (__request_module+0xfc/0x2c0) [ 6286.268588][ T9361] r7:85bca400 r6:8160a8ec r5:00000002 r4:851e96c0 [ 6286.268598][ T9361] [<8031f19c>] (__request_module) from [<8160a8ec>] (dev_load+0x80/0x8c) [ 6286.268634][ T9361] r3:00400140 r2:e0239e28 r1:8245d324 [ 6286.268651][ T9361] r8:e0239e38 r7:00008916 r6:00000000 r5:00000000 r4:e0239e28 [ 6286.268662][ T9361] [<8160a86c>] (dev_load) from [<817e4a68>] (devinet_ioctl+0x70/0x788) [ 6286.268692][ T9361] r5:84d7dd00 r4:e0239e28 [ 6286.268701][ T9361] [<817e49f8>] (devinet_ioctl) from [<817e7bd0>] (inet_ioctl+0x1b0/0x268) [ 6286.268737][ T9361] r10:85bca400 r9:81e69250 r8:e0239ecc r7:84d7dd00 r6:20000000 r5:845da200 [ 6286.268749][ T9361] r4:00008916 [ 6286.268758][ T9361] [<817e7a20>] (inet_ioctl) from [<81598168>] (sock_ioctl+0x4c4/0x600) [ 6286.268795][ T9361] r7:854ba500 r6:84d7dd00 r5:20000000 r4:00008916 [ 6286.268804][ T9361] [<81597ca4>] (sock_ioctl) from [<805854f4>] (sys_ioctl+0x130/0xba0) [ 6286.268848][ T9361] r9:00000003 r8:851c0600 r7:20000000 r6:851c0601 r5:00000000 r4:00008916 [ 6286.268859][ T9361] [<805853c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6286.268887][ T9361] Exception stack(0xe0239fa8 to 0xe0239ff0) [ 6286.268910][ T9361] 9fa0: 00000000 00000000 00000003 00008916 20000000 00000000 [ 6286.268932][ T9361] 9fc0: 00000000 00000000 001302c8 00000036 00300000 00000000 00006364 76f960bc [ 6286.268949][ T9361] 9fe0: 76f95ec0 76f95eb0 0001929c 00132320 [ 6286.268970][ T9361] r10:00000036 r9:85bca400 r8:8020029c r7:00000036 r6:001302c8 r5:00000000 [ 6286.268982][ T9361] r4:00000000 [ 6295.882286][ T9426] netlink: 'syz.3.7524': attribute type 2 has an invalid length. [ 6296.209410][ T9433] random: crng reseeded on system resumption [ 6296.228466][ T9433] PM: hibernation: Image mismatch: kernel version [ 6296.771648][ T29] audit: type=1400 audit(6552.686:823): avc: denied { setattr } for pid=9432 comm="syz.3.7526" name="KCM" dev="sockfs" ino=88530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 6309.901870][ T9480] fuse: Bad value for 'fd' [ 6309.910596][ T9480] fuse: Bad value for 'user_id' [ 6309.911270][ T9480] fuse: Bad value for 'user_id' [ 6309.919328][ T9480] fuse: Bad value for 'fd' [ 6310.525247][ T29] audit: type=1400 audit(6566.446:824): avc: denied { map } for pid=9481 comm="syz.2.7542" path="socket:[88612]" dev="sockfs" ino=88612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 6312.797493][ T9495] FAULT_INJECTION: forcing a failure. [ 6312.797493][ T9495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6312.799771][ T9495] CPU: 1 UID: 0 PID: 9495 Comm: syz.2.7546 Tainted: G L syzkaller #0 PREEMPT [ 6312.799892][ T9495] Tainted: [L]=SOFTLOCKUP [ 6312.799915][ T9495] Hardware name: ARM-Versatile Express [ 6312.799940][ T9495] Call trace: [ 6312.799982][ T9495] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6312.800104][ T9495] r7:00000000 r6:00000000 r5:60000013 r4:8229596c [ 6312.800126][ T9495] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6312.800185][ T9495] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6312.800246][ T9495] r5:84c6a400 r4:8294fc90 [ 6312.800264][ T9495] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6312.800324][ T9495] [<80999568>] (should_fail_ex) from [<809997a4>] (should_fail+0x14/0x18) [ 6312.800393][ T9495] r8:76f95f30 r7:00000000 r6:00000000 r5:eabb9f68 r4:00000002 [ 6312.800541][ T9495] [<80999790>] (should_fail) from [<809997c4>] (should_fail_usercopy+0x1c/0x20) [ 6312.800603][ T9495] [<809997a8>] (should_fail_usercopy) from [<805a6d60>] (simple_read_from_buffer+0x80/0x13c) [ 6312.800667][ T9495] [<805a6ce0>] (simple_read_from_buffer) from [<80624a54>] (proc_fail_nth_read+0xb8/0x108) [ 6312.800743][ T9495] r10:00000001 r9:8062499c r8:00000002 r7:eabb9f68 r6:0000000f r5:76f95f30 [ 6312.800772][ T9495] r4:84c6a400 r3:eabb9e9f [ 6312.800801][ T9495] [<8062499c>] (proc_fail_nth_read) from [<8056a53c>] (vfs_read+0x98/0x324) [ 6312.800928][ T9495] r8:76f95f30 r7:eabb9f68 r6:84c6a400 r5:0000000f r4:851b6480 [ 6312.800950][ T9495] [<8056a4a4>] (vfs_read) from [<8056b24c>] (ksys_read+0x74/0xe8) [ 6312.801017][ T9495] r10:00000003 r9:84c6a400 r8:8020029c r7:00000000 r6:00000000 r5:851b6480 [ 6312.801039][ T9495] r4:851b6483 [ 6312.801059][ T9495] [<8056b1d8>] (ksys_read) from [<8056b2d0>] (sys_read+0x10/0x14) [ 6312.801234][ T9495] r7:00000003 r6:00000005 r5:76f95f30 r4:0000000f [ 6312.801255][ T9495] [<8056b2c0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6312.801302][ T9495] Exception stack(0xeabb9fa8 to 0xeabb9ff0) [ 6312.801428][ T9495] 9fa0: 0000000f 76f95f30 00000005 76f95f30 0000000f 00000000 [ 6312.801474][ T9495] 9fc0: 0000000f 76f95f30 00000005 00000003 00300000 00000000 00006364 76f960bc [ 6312.801506][ T9495] 9fe0: 00000158 76f95ed0 000d7fdc 001301ec [ 6323.041115][ T9564] FAULT_INJECTION: forcing a failure. [ 6323.041115][ T9564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6323.043260][ T9564] CPU: 1 UID: 0 PID: 9564 Comm: syz.3.7564 Tainted: G L syzkaller #0 PREEMPT [ 6323.043466][ T9564] Tainted: [L]=SOFTLOCKUP [ 6323.043489][ T9564] Hardware name: ARM-Versatile Express [ 6323.043514][ T9564] Call trace: [ 6323.043556][ T9564] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6323.043677][ T9564] r7:00000000 r6:00000000 r5:60000013 r4:8229596c [ 6323.043770][ T9564] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6323.043833][ T9564] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6323.043893][ T9564] r5:85c1bc00 r4:8294fc90 [ 6323.043910][ T9564] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6323.043975][ T9564] [<80999568>] (should_fail_ex) from [<809997a4>] (should_fail+0x14/0x18) [ 6323.044041][ T9564] r8:76f75f30 r7:00000000 r6:00000000 r5:eac79f68 r4:00000002 [ 6323.044060][ T9564] [<80999790>] (should_fail) from [<809997c4>] (should_fail_usercopy+0x1c/0x20) [ 6323.044119][ T9564] [<809997a8>] (should_fail_usercopy) from [<805a6d60>] (simple_read_from_buffer+0x80/0x13c) [ 6323.044175][ T9564] [<805a6ce0>] (simple_read_from_buffer) from [<80624a54>] (proc_fail_nth_read+0xb8/0x108) [ 6323.044245][ T9564] r10:00000001 r9:8062499c r8:00000002 r7:eac79f68 r6:0000000f r5:76f75f30 [ 6323.044270][ T9564] r4:85c1bc00 r3:eac79e9f [ 6323.044288][ T9564] [<8062499c>] (proc_fail_nth_read) from [<8056a53c>] (vfs_read+0x98/0x324) [ 6323.044362][ T9564] r8:76f75f30 r7:eac79f68 r6:85c1bc00 r5:0000000f r4:851c0480 [ 6323.044383][ T9564] [<8056a4a4>] (vfs_read) from [<8056b24c>] (ksys_read+0x74/0xe8) [ 6323.044445][ T9564] r10:00000003 r9:85c1bc00 r8:8020029c r7:00000000 r6:00000000 r5:851c0480 [ 6323.044469][ T9564] r4:851c0483 [ 6323.044487][ T9564] [<8056b1d8>] (ksys_read) from [<8056b2d0>] (sys_read+0x10/0x14) [ 6323.044547][ T9564] r7:00000003 r6:00000004 r5:76f75f30 r4:0000000f [ 6323.044564][ T9564] [<8056b2c0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6323.044609][ T9564] Exception stack(0xeac79fa8 to 0xeac79ff0) [ 6323.044649][ T9564] 9fa0: 0000000f 76f75f30 00000004 76f75f30 0000000f 00000000 [ 6323.044688][ T9564] 9fc0: 0000000f 76f75f30 00000004 00000003 00300000 00000000 00006364 76f760bc [ 6323.044717][ T9564] 9fe0: 00000158 76f75ed0 000d7fdc 001301ec [ 6330.729185][ T9603] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9603 comm=syz.2.7574 [ 6331.291776][ T29] audit: type=1400 audit(6587.206:825): avc: denied { mount } for pid=9621 comm="syz.2.7580" name="/" dev="ramfs" ino=89826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 6332.953385][ T9637] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9637 comm=syz.3.7586 [ 6334.694692][ T29] audit: type=1400 audit(6590.616:826): avc: denied { bind } for pid=9641 comm="syz.2.7588" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 6334.704234][ T29] audit: type=1400 audit(6590.616:827): avc: denied { name_bind } for pid=9641 comm="syz.2.7588" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 6334.705814][ T29] audit: type=1400 audit(6590.616:828): avc: denied { node_bind } for pid=9641 comm="syz.2.7588" saddr=::ffff:224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 6334.714840][ T9643] FAULT_INJECTION: forcing a failure. [ 6334.714840][ T9643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6334.715105][ T9643] CPU: 1 UID: 0 PID: 9643 Comm: syz.3.7587 Tainted: G L syzkaller #0 PREEMPT [ 6334.715190][ T9643] Tainted: [L]=SOFTLOCKUP [ 6334.715203][ T9643] Hardware name: ARM-Versatile Express [ 6334.715216][ T9643] Call trace: [ 6334.715239][ T9643] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6334.715312][ T9643] r7:ead45e20 r6:00000000 r5:60000013 r4:8229596c [ 6334.715381][ T9643] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6334.715449][ T9643] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6334.715482][ T9643] r5:84c6b000 r4:8294fc90 [ 6334.715497][ T9643] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6334.715572][ T9643] [<80999568>] (should_fail_ex) from [<809997a4>] (should_fail+0x14/0x18) [ 6334.715642][ T9643] r8:00000800 r7:ead45e20 r6:20000440 r5:00000000 r4:ead45f20 [ 6334.715715][ T9643] [<80999790>] (should_fail) from [<809997c4>] (should_fail_usercopy+0x1c/0x20) [ 6334.715774][ T9643] [<809997a8>] (should_fail_usercopy) from [<815996dc>] (copy_msghdr_from_user+0x50/0x130) [ 6334.715917][ T9643] [<8159968c>] (copy_msghdr_from_user) from [<81599834>] (___sys_sendmsg+0x78/0xd0) [ 6334.715960][ T9643] r8:00000800 r7:00000000 r6:8554a500 r5:ead45f20 r4:ead45e64 [ 6334.715969][ T9643] [<815997bc>] (___sys_sendmsg) from [<81599cf0>] (__sys_sendmsg+0x8c/0xe0) [ 6334.716053][ T9643] r10:00000128 r9:84c6b000 r8:851c0d80 r7:00000800 r6:20000440 r5:851c0d81 [ 6334.716116][ T9643] r4:00000003 [ 6334.716235][ T9643] [<81599c64>] (__sys_sendmsg) from [<81599d58>] (sys_sendmsg+0x14/0x18) [ 6334.716361][ T9643] r8:8020029c r7:00000128 r6:001302c8 r5:00000000 r4:00000000 [ 6334.716401][ T9643] [<81599d44>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6334.716601][ T9643] Exception stack(0xead45fa8 to 0xead45ff0) [ 6334.716671][ T9643] 5fa0: 00000000 00000000 00000003 20000440 00000800 00000000 [ 6334.716767][ T9643] 5fc0: 00000000 00000000 001302c8 00000128 00300000 00000000 00006364 76f760bc [ 6334.716831][ T9643] 5fe0: 76f75ec0 76f75eb0 0001929c 00132320 [ 6349.096040][ T29] audit: type=1400 audit(6605.016:829): avc: denied { create } for pid=9701 comm="syz.3.7607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 6349.669493][ T9712] FAULT_INJECTION: forcing a failure. [ 6349.669493][ T9712] name failslab, interval 1, probability 0, space 0, times 0 [ 6349.670927][ T9712] CPU: 0 UID: 0 PID: 9712 Comm: syz.3.7611 Tainted: G L syzkaller #0 PREEMPT [ 6349.671006][ T9712] Tainted: [L]=SOFTLOCKUP [ 6349.671017][ T9712] Hardware name: ARM-Versatile Express [ 6349.671030][ T9712] Call trace: [ 6349.671054][ T9712] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6349.671123][ T9712] r7:00000000 r6:00000000 r5:60000013 r4:8229596c [ 6349.671133][ T9712] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6349.671163][ T9712] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6349.671202][ T9712] r5:84c6a400 r4:82918c48 [ 6349.671211][ T9712] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6349.671244][ T9712] [<80999568>] (should_fail_ex) from [<8053a368>] (should_failslab+0x6c/0x94) [ 6349.671284][ T9712] r8:00000914 r7:00000000 r6:00000dc0 r5:00000000 r4:830016c0 [ 6349.671301][ T9712] [<8053a2fc>] (should_failslab) from [<8051a4f4>] (__kmalloc_cache_noprof+0x4c/0x44c) [ 6349.671398][ T9712] [<8051a4a8>] (__kmalloc_cache_noprof) from [<81a8a818>] (kobject_uevent_env+0xd0/0x8e0) [ 6349.671455][ T9712] r10:824704fc r9:00000000 r8:8c089d80 r7:00000000 r6:83343540 r5:00000000 [ 6349.671467][ T9712] r4:85ea5c00 [ 6349.671476][ T9712] [<81a8a748>] (kobject_uevent_env) from [<81a8b03c>] (kobject_uevent+0x14/0x18) [ 6349.671512][ T9712] r10:84c6a400 r9:00000004 r8:8c089d80 r7:84b81804 r6:84b81830 r5:00000000 [ 6349.671523][ T9712] r4:84b81830 [ 6349.671532][ T9712] [<81a8b028>] (kobject_uevent) from [<80b740d0>] (driver_register+0xb4/0x11c) [ 6349.671563][ T9712] [<80b7401c>] (driver_register) from [<810395a0>] (usb_gadget_register_driver_owner+0x50/0xf8) [ 6349.671598][ T9712] r5:00000000 r4:84b8180c [ 6349.671606][ T9712] [<81039550>] (usb_gadget_register_driver_owner) from [<810a06f4>] (raw_ioctl+0x9d0/0x1238) [ 6349.671644][ T9712] r7:84b81804 r6:60000013 r5:00000000 r4:84b81800 [ 6349.671654][ T9712] [<8109fd24>] (raw_ioctl) from [<805854f4>] (sys_ioctl+0x130/0xba0) [ 6349.671696][ T9712] r10:84c6a400 r9:00000004 r8:8c089d80 r7:00000000 r6:8c089d81 r5:00000000 [ 6349.671720][ T9712] r4:00005501 [ 6349.671741][ T9712] [<805853c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6349.671791][ T9712] Exception stack(0xdfafdfa8 to 0xdfafdff0) [ 6349.671830][ T9712] dfa0: 00000004 76f74e70 00000004 00005501 00000000 76f73e00 [ 6349.671850][ T9712] dfc0: 00000004 76f74e70 76f73e70 00000036 00000002 76f74e60 00440000 00000000 [ 6349.671865][ T9712] dfe0: 00000000 76f73de8 002e8000 00131cec [ 6349.671885][ T9712] r10:00000036 r9:84c6a400 r8:8020029c r7:00000036 r6:76f73e70 r5:76f74e70 [ 6349.671896][ T9712] r4:00000004 [ 6349.691897][ T9712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6349.692880][ T9712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6351.800480][ T9723] FAULT_INJECTION: forcing a failure. [ 6351.800480][ T9723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6351.801083][ T9723] CPU: 1 UID: 0 PID: 9723 Comm: syz.2.7616 Tainted: G L syzkaller #0 PREEMPT [ 6351.801198][ T9723] Tainted: [L]=SOFTLOCKUP [ 6351.801221][ T9723] Hardware name: ARM-Versatile Express [ 6351.801248][ T9723] Call trace: [ 6351.801291][ T9723] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6351.801498][ T9723] r7:00000000 r6:00000000 r5:60000013 r4:8229596c [ 6351.801546][ T9723] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6351.801718][ T9723] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6351.801854][ T9723] r5:85c1b000 r4:8294fc90 [ 6351.801934][ T9723] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6351.802053][ T9723] [<80999568>] (should_fail_ex) from [<809997a4>] (should_fail+0x14/0x18) [ 6351.802139][ T9723] r8:76f95f30 r7:00000000 r6:00000000 r5:dfb85f68 r4:00000002 [ 6351.802245][ T9723] [<80999790>] (should_fail) from [<809997c4>] (should_fail_usercopy+0x1c/0x20) [ 6351.802414][ T9723] [<809997a8>] (should_fail_usercopy) from [<805a6d60>] (simple_read_from_buffer+0x80/0x13c) [ 6351.802615][ T9723] [<805a6ce0>] (simple_read_from_buffer) from [<80624a54>] (proc_fail_nth_read+0xb8/0x108) [ 6351.803067][ T9723] r10:00000001 r9:8062499c r8:00000002 r7:dfb85f68 r6:0000000f r5:76f95f30 [ 6351.803495][ T9723] r4:85c1b000 r3:dfb85e9f [ 6351.803969][ T9723] [<8062499c>] (proc_fail_nth_read) from [<8056a53c>] (vfs_read+0x98/0x324) [ 6351.804071][ T9723] r8:76f95f30 r7:dfb85f68 r6:85c1b000 r5:0000000f r4:851c0900 [ 6351.804097][ T9723] [<8056a4a4>] (vfs_read) from [<8056b24c>] (ksys_read+0x74/0xe8) [ 6351.804162][ T9723] r10:00000003 r9:85c1b000 r8:8020029c r7:00000000 r6:00000000 r5:851c0900 [ 6351.804184][ T9723] r4:851c0903 [ 6351.804203][ T9723] [<8056b1d8>] (ksys_read) from [<8056b2d0>] (sys_read+0x10/0x14) [ 6351.804264][ T9723] r7:00000003 r6:00000004 r5:76f95f30 r4:0000000f [ 6351.804284][ T9723] [<8056b2c0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6351.804379][ T9723] Exception stack(0xdfb85fa8 to 0xdfb85ff0) [ 6351.804423][ T9723] 5fa0: 0000000f 76f95f30 00000004 76f95f30 0000000f 00000000 [ 6351.804464][ T9723] 5fc0: 0000000f 76f95f30 00000004 00000003 00300000 00000000 00006364 76f960bc [ 6351.804493][ T9723] 5fe0: 00000158 76f95ed0 000d7fdc 001301ec [ 6353.379891][ T9736] FAULT_INJECTION: forcing a failure. [ 6353.379891][ T9736] name failslab, interval 1, probability 0, space 0, times 0 [ 6353.382698][ T9736] CPU: 0 UID: 0 PID: 9736 Comm: syz.2.7620 Tainted: G L syzkaller #0 PREEMPT [ 6353.382849][ T9736] Tainted: [L]=SOFTLOCKUP [ 6353.382873][ T9736] Hardware name: ARM-Versatile Express [ 6353.382901][ T9736] Call trace: [ 6353.382945][ T9736] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6353.383059][ T9736] r7:00400cc0 r6:00000000 r5:60000013 r4:8229596c [ 6353.383081][ T9736] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6353.383165][ T9736] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6353.383223][ T9736] r5:84c6e000 r4:82918c48 [ 6353.383241][ T9736] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6353.383310][ T9736] [<80999568>] (should_fail_ex) from [<8053a368>] (should_failslab+0x6c/0x94) [ 6353.383421][ T9736] r8:00000000 r7:00400cc0 r6:00000016 r5:00000015 r4:83002000 [ 6353.383448][ T9736] [<8053a2fc>] (should_failslab) from [<8051c0f0>] (__kmalloc_node_track_caller_noprof+0xa0/0x574) [ 6353.383551][ T9736] [<8051c050>] (__kmalloc_node_track_caller_noprof) from [<804ac700>] (kstrdup+0x38/0x64) [ 6353.383633][ T9736] r10:00000001 r9:dfcb9e5c r8:830bff30 r7:805a53d0 r6:dfcb9e5c r5:00000015 [ 6353.383662][ T9736] r4:00400cc0 [ 6353.383682][ T9736] [<804ac6c8>] (kstrdup) from [<805a53d0>] (simple_xattr_set+0x40/0x184) [ 6353.383763][ T9736] r7:8433ddc0 r6:8332a600 r5:dfcb9e5c r4:85ef5400 [ 6353.383787][ T9736] [<805a5390>] (simple_xattr_set) from [<804a40c4>] (shmem_xattr_handler_set+0x194/0x1a8) [ 6353.383865][ T9736] r9:dfcb9e5c r8:830bff30 r7:00000118 r6:830bff00 r5:8433dde0 r4:85ef5400 [ 6353.384019][ T9736] [<804a3f30>] (shmem_xattr_handler_set) from [<805a35bc>] (__vfs_setxattr+0xb4/0xc8) [ 6353.384111][ T9736] r9:804a3f30 r8:000000db r7:85ef5400 r6:8343b770 r5:8291fa94 r4:8433dde0 [ 6353.384139][ T9736] [<805a3508>] (__vfs_setxattr) from [<805a3fdc>] (__vfs_setxattr_noperm+0x7c/0x204) [ 6353.384218][ T9736] r9:8291fa94 r8:85ef5400 r7:8433dde0 r6:00000001 r5:dfcb9e5c r4:8343b770 [ 6353.384240][ T9736] [<805a3f60>] (__vfs_setxattr_noperm) from [<805a4248>] (__vfs_setxattr_locked+0xe4/0x114) [ 6353.384317][ T9736] r10:dfcb9dc0 r9:000000db r8:8433dde0 r7:85ef5400 r6:dfcb9e5c r5:8291fa94 [ 6353.384341][ T9736] r4:8343b770 [ 6353.384362][ T9736] [<805a4164>] (__vfs_setxattr_locked) from [<805a4308>] (vfs_setxattr+0x90/0x17c) [ 6353.384433][ T9736] r8:8291fa94 r7:dfcb9e5c r6:8343b770 r5:8433de60 r4:dfcb9e48 [ 6353.384456][ T9736] [<805a4278>] (vfs_setxattr) from [<805a4488>] (do_setxattr+0x94/0x9c) [ 6353.384534][ T9736] r10:000000e4 r9:8343b770 r8:8291fa94 r7:85ef5400 r6:000000db r5:dfcb9e5c [ 6353.384562][ T9736] r4:dfcb9e48 [ 6353.384581][ T9736] [<805a43f4>] (do_setxattr) from [<805a46c4>] (file_setxattr+0x58/0x78) [ 6353.384651][ T9736] r9:84c6e000 r8:20000200 r7:0000000b r6:dfcb9e48 r5:8c089cc0 r4:00000000 [ 6353.384674][ T9736] [<805a466c>] (file_setxattr) from [<805a48c8>] (path_setxattrat+0x104/0x17c) [ 6353.384741][ T9736] r7:0000000b r6:8c089cc0 r5:8c089cc1 r4:00000000 [ 6353.384761][ T9736] [<805a47c4>] (path_setxattrat) from [<805a4b40>] (sys_fsetxattr+0x30/0x38) [ 6353.384830][ T9736] r8:8020029c r7:000000e4 r6:001302c8 r5:00000000 r4:00000001 [ 6353.384850][ T9736] [<805a4b10>] (sys_fsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6353.384901][ T9736] Exception stack(0xdfcb9fa8 to 0xdfcb9ff0) [ 6353.384942][ T9736] 9fa0: 00000001 00000000 0000000b 200001c0 20000200 000000db [ 6353.384982][ T9736] 9fc0: 00000001 00000000 001302c8 000000e4 00300000 00000000 00006364 76f960bc [ 6353.385014][ T9736] 9fe0: 76f95ec0 76f95eb0 0001929c 00132320 [ 6360.491431][ T9774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9774 comm=syz.2.7633 [ 6362.018603][ T9784] FAULT_INJECTION: forcing a failure. [ 6362.018603][ T9784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6362.019162][ T9784] CPU: 1 UID: 0 PID: 9784 Comm: syz.2.7636 Tainted: G L syzkaller #0 PREEMPT [ 6362.019271][ T9784] Tainted: [L]=SOFTLOCKUP [ 6362.019295][ T9784] Hardware name: ARM-Versatile Express [ 6362.019321][ T9784] Call trace: [ 6362.019377][ T9784] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6362.019562][ T9784] r7:fffffdfd r6:00000000 r5:60000113 r4:8229596c [ 6362.019590][ T9784] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6362.019649][ T9784] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6362.019712][ T9784] r5:84c6e000 r4:8294fc90 [ 6362.019730][ T9784] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6362.019796][ T9784] [<80999568>] (should_fail_ex) from [<809997a4>] (should_fail+0x14/0x18) [ 6362.019870][ T9784] r8:e02c9ecc r7:fffffdfd r6:84d7dd00 r5:00000000 r4:0000890b [ 6362.019890][ T9784] [<80999790>] (should_fail) from [<809997c4>] (should_fail_usercopy+0x1c/0x20) [ 6362.019947][ T9784] [<809997a8>] (should_fail_usercopy) from [<81598190>] (sock_ioctl+0x4ec/0x600) [ 6362.020013][ T9784] [<81597ca4>] (sock_ioctl) from [<805854f4>] (sys_ioctl+0x130/0xba0) [ 6362.020184][ T9784] r9:00000003 r8:8c0889c0 r7:00000000 r6:8c0889c1 r5:00000000 r4:0000890b [ 6362.020232][ T9784] [<805853c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6362.020294][ T9784] Exception stack(0xe02c9fa8 to 0xe02c9ff0) [ 6362.020337][ T9784] 9fa0: 00000000 00000000 00000003 0000890b 00000000 00000000 [ 6362.020388][ T9784] 9fc0: 00000000 00000000 001302c8 00000036 00300000 00000000 00006364 76f750bc [ 6362.020424][ T9784] 9fe0: 76f74ec0 76f74eb0 0001929c 00132320 [ 6362.020471][ T9784] r10:00000036 r9:84c6e000 r8:8020029c r7:00000036 r6:001302c8 r5:00000000 [ 6362.020497][ T9784] r4:00000000 [ 6366.324747][ T29] audit: type=1400 audit(6622.246:830): avc: denied { getopt } for pid=9795 comm="syz.2.7641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 6366.695131][ T29] audit: type=1400 audit(6622.616:831): avc: denied { sqpoll } for pid=9802 comm="syz.2.7643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 6367.125706][ T29] audit: type=1400 audit(6623.046:832): avc: denied { listen } for pid=9805 comm="syz.3.7644" path=2F3132352FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 6367.310275][ T9809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6367.312858][ T9809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6367.550567][ T29] audit: type=1400 audit(6623.466:833): avc: denied { read } for pid=9815 comm="syz.2.7647" name="card1" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 6367.569883][ T29] audit: type=1400 audit(6623.486:834): avc: denied { open } for pid=9815 comm="syz.2.7647" path="/dev/dri/card1" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 6367.581824][ T29] audit: type=1400 audit(6623.496:835): avc: denied { ioctl } for pid=9815 comm="syz.2.7647" path="/dev/dri/card1" dev="devtmpfs" ino=615 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 6368.221560][ T29] audit: type=1400 audit(6624.136:836): avc: denied { setattr } for pid=9818 comm="syz.3.7648" name="SMC" dev="sockfs" ino=90365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 6369.467195][ T9829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=9829 comm=syz.2.7650 [ 6371.156713][ T9837] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9837 comm=syz.2.7653 [ 6371.429158][ T29] audit: type=1400 audit(6627.346:837): avc: denied { read } for pid=9838 comm="syz.2.7654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 6371.578187][ T29] audit: type=1400 audit(6627.486:838): avc: denied { mounton } for pid=9841 comm="syz.2.7655" path="/507/file0" dev="tmpfs" ino=2661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 6379.860410][ T29] audit: type=1400 audit(6635.776:839): avc: denied { ioctl } for pid=9882 comm="syz.2.7668" path="socket:[90491]" dev="sockfs" ino=90491 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 6381.048735][ T9892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9892 comm=syz.2.7670 [ 6381.794274][ T29] audit: type=1400 audit(6637.706:840): avc: denied { write } for pid=9893 comm="syz.3.7671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 6389.681635][ T9934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9934 comm=syz.2.7683 [ 6391.567146][ T9950] FAULT_INJECTION: forcing a failure. [ 6391.567146][ T9950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6391.576952][ T9950] CPU: 1 UID: 0 PID: 9950 Comm: syz.3.7686 Tainted: G L syzkaller #0 PREEMPT [ 6391.577107][ T9950] Tainted: [L]=SOFTLOCKUP [ 6391.577130][ T9950] Hardware name: ARM-Versatile Express [ 6391.577158][ T9950] Call trace: [ 6391.577207][ T9950] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6391.577334][ T9950] r7:00000000 r6:00000000 r5:60000113 r4:8229596c [ 6391.577356][ T9950] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6391.577428][ T9950] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6391.577495][ T9950] r5:84fb4800 r4:8294fc90 [ 6391.577515][ T9950] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6391.577580][ T9950] [<80999568>] (should_fail_ex) from [<809997a4>] (should_fail+0x14/0x18) [ 6391.577649][ T9950] r8:ea969eb8 r7:00000000 r6:00000001 r5:76f54f30 r4:00000001 [ 6391.577668][ T9950] [<80999790>] (should_fail) from [<809997c4>] (should_fail_usercopy+0x1c/0x20) [ 6391.577721][ T9950] [<809997a8>] (should_fail_usercopy) from [<808e141c>] (kstrtouint_from_user+0x54/0x13c) [ 6391.577807][ T9950] [<808e13c8>] (kstrtouint_from_user) from [<80625e04>] (proc_fail_nth_write+0x40/0xf0) [ 6391.577884][ T9950] r8:ea969f68 r7:84fb4800 r6:00000001 r5:8c088840 r4:00000001 [ 6391.577905][ T9950] [<80625dc4>] (proc_fail_nth_write) from [<8056ae38>] (vfs_write+0xac/0x44c) [ 6391.577967][ T9950] r5:8c088840 r4:80625dc4 [ 6391.577988][ T9950] [<8056ad8c>] (vfs_write) from [<8056b348>] (ksys_write+0x74/0xe8) [ 6391.578054][ T9950] r10:00000004 r9:84fb4800 r8:8020029c r7:00000000 r6:00000002 r5:8c088840 [ 6391.578078][ T9950] r4:8c088843 [ 6391.578097][ T9950] [<8056b2d4>] (ksys_write) from [<8056b3cc>] (sys_write+0x10/0x14) [ 6391.578153][ T9950] r7:00000004 r6:00000004 r5:76f54f30 r4:00000001 [ 6391.578173][ T9950] [<8056b3bc>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6391.578225][ T9950] Exception stack(0xea969fa8 to 0xea969ff0) [ 6391.578272][ T9950] 9fa0: 00000001 76f54f30 00000004 76f54f30 00000001 00000000 [ 6391.578311][ T9950] 9fc0: 00000001 76f54f30 00000004 00000004 00300000 00000000 00006364 76f550bc [ 6391.578343][ T9950] 9fe0: 00000158 76f54ed0 000d7fdc 001302b4 [ 6391.832925][ T9948] fuse: Bad value for 'fd' [ 6392.426774][ T9966] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=262 sclass=netlink_audit_socket pid=9966 comm=syz.3.7694 [ 6392.616916][ T9966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26967 sclass=netlink_route_socket pid=9966 comm=syz.3.7694 [ 6400.568825][T10020] FAULT_INJECTION: forcing a failure. [ 6400.568825][T10020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6400.570532][T10020] CPU: 1 UID: 0 PID: 10020 Comm: syz.3.7711 Tainted: G L syzkaller #0 PREEMPT [ 6400.570597][T10020] Tainted: [L]=SOFTLOCKUP [ 6400.570608][T10020] Hardware name: ARM-Versatile Express [ 6400.570622][T10020] Call trace: [ 6400.570644][T10020] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6400.570717][T10020] r7:b5403587 r6:00000000 r5:60000013 r4:8229596c [ 6400.570729][T10020] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6400.570757][T10020] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6400.570796][T10020] r5:84c6b000 r4:8294fc90 [ 6400.570806][T10020] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6400.570839][T10020] [<80999568>] (should_fail_ex) from [<809997a4>] (should_fail+0x14/0x18) [ 6400.570873][T10020] r8:00000000 r7:b5403587 r6:00000000 r5:84c6b830 r4:76f75bb8 [ 6400.570882][T10020] [<80999790>] (should_fail) from [<809997c4>] (should_fail_usercopy+0x1c/0x20) [ 6400.570909][T10020] [<809997a8>] (should_fail_usercopy) from [<8022a734>] (setup_sigframe+0x124/0x1c4) [ 6400.570938][T10020] [<8022a610>] (setup_sigframe) from [<8022ad7c>] (do_work_pending+0x2c4/0x4d0) [ 6400.570972][T10020] r10:00000077 r9:b5403587 r8:00000000 r7:84c6b830 r6:76f75bb8 r5:eac5dfb0 [ 6400.570984][T10020] r4:84c6b000 [ 6400.571007][T10020] [<8022aab8>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 6400.571081][T10020] Exception stack(0xeac5dfb0 to 0xeac5dff8) [ 6400.571102][T10020] dfa0: fffffffc 20000280 20000000 00000000 [ 6400.571121][T10020] dfc0: 00000000 00000000 001302c8 00000128 00300000 00000000 00006364 76f760bc [ 6400.571138][T10020] dfe0: 76f75ec0 76f75eb0 0001929c 00132320 60000010 00000011 [ 6400.571157][T10020] r10:00000077 r9:84c6b000 r8:00000000 r7:00000077 r6:001302c8 r5:00000000 [ 6400.571176][T10020] r4:00000000 [ 6402.542594][T10030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10030 comm=syz.2.7714 [ 6405.815693][T10045] FAULT_INJECTION: forcing a failure. [ 6405.815693][T10045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6405.816066][T10045] CPU: 0 UID: 0 PID: 10045 Comm: syz.2.7718 Tainted: G L syzkaller #0 PREEMPT [ 6405.816192][T10045] Tainted: [L]=SOFTLOCKUP [ 6405.816214][T10045] Hardware name: ARM-Versatile Express [ 6405.816236][T10045] Call trace: [ 6405.816275][T10045] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6405.816374][T10045] r7:b5403587 r6:00000000 r5:60000013 r4:8229596c [ 6405.816391][T10045] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6405.816436][T10045] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6405.816505][T10045] r5:83ff9800 r4:8294fc90 [ 6405.816520][T10045] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6405.816958][T10045] [<80999568>] (should_fail_ex) from [<809997a4>] (should_fail+0x14/0x18) [ 6405.817084][T10045] r8:00000000 r7:b5403587 r6:00000000 r5:83ffa030 r4:76f95ca0 [ 6405.817157][T10045] [<80999790>] (should_fail) from [<809997c4>] (should_fail_usercopy+0x1c/0x20) [ 6405.817384][T10045] [<809997a8>] (should_fail_usercopy) from [<8022a5c4>] (preserve_vfp_context+0x78/0xc4) [ 6405.817476][T10045] [<8022a54c>] (preserve_vfp_context) from [<8022a77c>] (setup_sigframe+0x16c/0x1c4) [ 6405.817913][T10045] r5:83ffa030 r4:76f95bb8 [ 6405.817967][T10045] [<8022a610>] (setup_sigframe) from [<8022ad7c>] (do_work_pending+0x2c4/0x4d0) [ 6405.818029][T10045] r10:00000077 r9:b5403587 r8:00000000 r7:83ffa030 r6:76f95bb8 r5:eae5dfb0 [ 6405.818049][T10045] r4:83ff9800 [ 6405.818107][T10045] [<8022aab8>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 6405.818152][T10045] Exception stack(0xeae5dfb0 to 0xeae5dff8) [ 6405.818506][T10045] dfa0: fffffffc 20000680 00008000 00000000 [ 6405.818671][T10045] dfc0: 00000000 00000000 001302c8 00000128 00300000 00000000 00006364 76f960bc [ 6405.818737][T10045] dfe0: 76f95ec0 76f95eb0 0001929c 00132320 60000010 00000011 [ 6405.818894][T10045] r10:00000077 r9:83ff9800 r8:00000000 r7:00000077 r6:001302c8 r5:00000000 [ 6405.819245][T10045] r4:00000000 [ 6411.034582][ T29] audit: type=1400 audit(6666.956:841): avc: denied { lock } for pid=10067 comm="syz.3.7726" path="socket:[90736]" dev="sockfs" ino=90736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 6411.088873][ T29] audit: type=1400 audit(6667.006:842): avc: denied { map } for pid=10067 comm="syz.3.7726" path="socket:[90737]" dev="sockfs" ino=90737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 6415.749863][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6415.750393][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6416.306966][T10112] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10112 comm=syz.3.7741 [ 6420.668389][T10157] FAULT_INJECTION: forcing a failure. [ 6420.668389][T10157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6420.670878][T10157] CPU: 1 UID: 0 PID: 10157 Comm: syz.3.7757 Tainted: G L syzkaller #0 PREEMPT [ 6420.671031][T10157] Tainted: [L]=SOFTLOCKUP [ 6420.671057][T10157] Hardware name: ARM-Versatile Express [ 6420.671083][T10157] Call trace: [ 6420.671131][T10157] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6420.671270][T10157] r7:20005540 r6:00000000 r5:60000013 r4:8229596c [ 6420.671296][T10157] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6420.671360][T10157] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6420.671426][T10157] r5:83eebc00 r4:8294fc90 [ 6420.671446][T10157] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6420.671521][T10157] [<80999568>] (should_fail_ex) from [<809997a4>] (should_fail+0x14/0x18) [ 6420.671599][T10157] r8:00000000 r7:20005540 r6:861ef8c0 r5:00000000 r4:ebcb5e68 [ 6420.671624][T10157] [<80999790>] (should_fail) from [<809997c4>] (should_fail_usercopy+0x1c/0x20) [ 6420.671688][T10157] [<809997a8>] (should_fail_usercopy) from [<808d869c>] (_copy_from_iter+0x6c/0x7d8) [ 6420.671757][T10157] [<808d8630>] (_copy_from_iter) from [<816c9788>] (netlink_sendmsg+0x18c/0x444) [ 6420.671834][T10157] r10:00000000 r9:00000000 r8:ebcb5e78 r7:86127000 r6:00000028 r5:8637dd80 [ 6420.671863][T10157] r4:ebcb5e68 [ 6420.671884][T10157] [<816c95fc>] (netlink_sendmsg) from [<815969ec>] (__sock_sendmsg+0x44/0x78) [ 6420.671963][T10157] r10:81e4b200 r9:20005540 r8:00000000 r7:85562f00 r6:85562f00 r5:ebcb5e68 [ 6420.671989][T10157] r4:00000000 [ 6420.672009][T10157] [<815969a8>] (__sock_sendmsg) from [<81596ad8>] (sock_write_iter+0xb8/0x104) [ 6420.672101][T10157] r7:85562f00 r6:8c0ae3c0 r5:ebcb5f08 r4:ebcb5ef0 [ 6420.672123][T10157] [<81596a20>] (sock_write_iter) from [<8056b130>] (vfs_write+0x3a4/0x44c) [ 6420.672202][T10157] r7:83eebc00 r6:00000028 r5:8c0ae3c0 r4:00004004 [ 6420.672223][T10157] [<8056ad8c>] (vfs_write) from [<8056b39c>] (ksys_write+0xc8/0xe8) [ 6420.672289][T10157] r10:00000004 r9:83eebc00 r8:8020029c r7:00000028 r6:20005540 r5:8c0ae3c0 [ 6420.672314][T10157] r4:8c0ae3c1 [ 6420.672331][T10157] [<8056b2d4>] (ksys_write) from [<8056b3cc>] (sys_write+0x10/0x14) [ 6420.672396][T10157] r7:00000004 r6:001302c8 r5:00000000 r4:00000000 [ 6420.672419][T10157] [<8056b3bc>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6420.672473][T10157] Exception stack(0xebcb5fa8 to 0xebcb5ff0) [ 6420.672520][T10157] 5fa0: 00000000 00000000 00000003 20005540 00000028 00000000 [ 6420.672566][T10157] 5fc0: 00000000 00000000 001302c8 00000004 00300000 00000000 00006364 76f760bc [ 6420.672601][T10157] 5fe0: 76f75ec0 76f75eb0 0001929c 00132320 [ 6422.274348][ T29] audit: type=1400 audit(6678.186:843): avc: denied { read } for pid=10167 comm="syz.3.7762" dev="sockfs" ino=90908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 6424.535021][T10191] fuse: Bad value for 'user_id' [ 6424.535439][T10191] fuse: Bad value for 'user_id' [ 6441.556708][ T29] audit: type=1400 audit(6697.476:844): avc: denied { accept } for pid=10261 comm="syz.2.7795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 6443.706809][T10298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10298 comm=syz.2.7798 [ 6446.456853][T26344] hid (null): unknown global tag 0xc [ 6446.457538][T26344] hid (null): unknown global tag 0xe [ 6446.466361][T26344] hid_parser_main: 141 callbacks suppressed [ 6446.468047][T26344] hid-generic 0101:0002:0002.0002: unknown main item tag 0x1 [ 6446.468578][T26344] hid-generic 0101:0002:0002.0002: unknown global tag 0xc [ 6446.468713][T26344] hid-generic 0101:0002:0002.0002: item 0 2 1 12 parsing failed [ 6446.469324][T26344] hid-generic 0101:0002:0002.0002: probe with driver hid-generic failed with error -22 [ 6449.982525][T10334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10334 comm=syz.3.7806 [ 6455.215646][T10356] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10356 comm=syz.2.7813 [ 6455.670989][T10357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10357 comm=syz.3.7814 [ 6457.440080][T10368] FAULT_INJECTION: forcing a failure. [ 6457.440080][T10368] name failslab, interval 1, probability 0, space 0, times 0 [ 6457.441075][T10368] CPU: 1 UID: 0 PID: 10368 Comm: syz.3.7818 Tainted: G L syzkaller #0 PREEMPT [ 6457.441157][T10368] Tainted: [L]=SOFTLOCKUP [ 6457.441169][T10368] Hardware name: ARM-Versatile Express [ 6457.441182][T10368] Call trace: [ 6457.441204][T10368] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6457.441268][T10368] r7:00000000 r6:00000000 r5:60000013 r4:8229596c [ 6457.441278][T10368] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6457.441307][T10368] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6457.441335][T10368] r5:84fdec00 r4:82918c48 [ 6457.441344][T10368] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6457.441375][T10368] [<80999568>] (should_fail_ex) from [<8053a368>] (should_failslab+0x6c/0x94) [ 6457.441411][T10368] r8:00000034 r7:00000000 r6:00000dc0 r5:861a500c r4:83001240 [ 6457.441421][T10368] [<8053a2fc>] (should_failslab) from [<8051a4f4>] (__kmalloc_cache_noprof+0x4c/0x44c) [ 6457.441450][T10368] [<8051a4a8>] (__kmalloc_cache_noprof) from [<80270cbc>] (call_usermodehelper_setup+0x48/0xb8) [ 6457.441491][T10368] r10:824704fc r9:00000000 r8:861a5000 r7:82a003a0 r6:861a5000 r5:861a500c [ 6457.441502][T10368] r4:00000000 [ 6457.441511][T10368] [<80270c74>] (call_usermodehelper_setup) from [<81a8ae18>] (kobject_uevent_env+0x6d0/0x8e0) [ 6457.441548][T10368] r7:861a518c r6:00000000 r5:00000784 r4:00000000 [ 6457.441557][T10368] [<81a8a748>] (kobject_uevent_env) from [<81a8b03c>] (kobject_uevent+0x14/0x18) [ 6457.441590][T10368] r10:84fdec00 r9:00000004 r8:851b6a80 r7:852d5004 r6:852d5030 r5:00000000 [ 6457.441601][T10368] r4:852d5030 [ 6457.441609][T10368] [<81a8b028>] (kobject_uevent) from [<80b740d0>] (driver_register+0xb4/0x11c) [ 6457.441639][T10368] [<80b7401c>] (driver_register) from [<810395a0>] (usb_gadget_register_driver_owner+0x50/0xf8) [ 6457.441671][T10368] r5:00000000 r4:852d500c [ 6457.441679][T10368] [<81039550>] (usb_gadget_register_driver_owner) from [<810a06f4>] (raw_ioctl+0x9d0/0x1238) [ 6457.441714][T10368] r7:852d5004 r6:60000013 r5:00000000 r4:852d5000 [ 6457.441724][T10368] [<8109fd24>] (raw_ioctl) from [<805854f4>] (sys_ioctl+0x130/0xba0) [ 6457.441762][T10368] r10:84fdec00 r9:00000004 r8:851b6a80 r7:00000000 r6:851b6a81 r5:00000000 [ 6457.441773][T10368] r4:00005501 [ 6457.441803][T10368] [<805853c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6457.441831][T10368] Exception stack(0xec43dfa8 to 0xec43dff0) [ 6457.441853][T10368] dfa0: 00000004 76f74e70 00000004 00005501 00000000 76f73e00 [ 6457.441873][T10368] dfc0: 00000004 76f74e70 76f73e70 00000036 00000002 76f74e60 00440000 00000000 [ 6457.441888][T10368] dfe0: 00000000 76f73de8 002e8000 00131cec [ 6457.441908][T10368] r10:00000036 r9:84fdec00 r8:8020029c r7:00000036 r6:76f73e70 r5:76f74e70 [ 6457.441919][T10368] r4:00000004 [ 6457.464152][T10368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6457.465206][T10368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6458.822430][T10386] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10386 comm=syz.2.7825 [ 6458.827861][T10386] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10386 comm=syz.2.7825 [ 6458.837624][T10386] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2 sclass=netlink_audit_socket pid=10386 comm=syz.2.7825 [ 6459.392301][T10390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10390 comm=syz.3.7821 [ 6460.453076][T10398] FAULT_INJECTION: forcing a failure. [ 6460.453076][T10398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6460.454711][T10398] CPU: 1 UID: 0 PID: 10398 Comm: syz.2.7829 Tainted: G L syzkaller #0 PREEMPT [ 6460.454788][T10398] Tainted: [L]=SOFTLOCKUP [ 6460.454801][T10398] Hardware name: ARM-Versatile Express [ 6460.454815][T10398] Call trace: [ 6460.454838][T10398] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6460.454902][T10398] r7:00000000 r6:00000000 r5:60000013 r4:8229596c [ 6460.454913][T10398] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6460.454942][T10398] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6460.454974][T10398] r5:84fde000 r4:8294fc90 [ 6460.454983][T10398] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6460.455018][T10398] [<80999568>] (should_fail_ex) from [<809997a4>] (should_fail+0x14/0x18) [ 6460.455055][T10398] r8:76f95f30 r7:00000000 r6:00000000 r5:ec609f68 r4:00000002 [ 6460.455064][T10398] [<80999790>] (should_fail) from [<809997c4>] (should_fail_usercopy+0x1c/0x20) [ 6460.455093][T10398] [<809997a8>] (should_fail_usercopy) from [<805a6d60>] (simple_read_from_buffer+0x80/0x13c) [ 6460.455124][T10398] [<805a6ce0>] (simple_read_from_buffer) from [<80624a54>] (proc_fail_nth_read+0xb8/0x108) [ 6460.455171][T10398] r10:00000001 r9:8062499c r8:00000002 r7:ec609f68 r6:0000000f r5:76f95f30 [ 6460.455185][T10398] r4:84fde000 r3:ec609e9f [ 6460.455195][T10398] [<8062499c>] (proc_fail_nth_read) from [<8056a53c>] (vfs_read+0x98/0x324) [ 6460.455261][T10398] r8:76f95f30 r7:ec609f68 r6:84fde000 r5:0000000f r4:851b6240 [ 6460.455283][T10398] [<8056a4a4>] (vfs_read) from [<8056b24c>] (ksys_read+0x74/0xe8) [ 6460.455338][T10398] r10:00000003 r9:84fde000 r8:8020029c r7:00000000 r6:00000000 r5:851b6240 [ 6460.455350][T10398] r4:851b6243 [ 6460.455360][T10398] [<8056b1d8>] (ksys_read) from [<8056b2d0>] (sys_read+0x10/0x14) [ 6460.455390][T10398] r7:00000003 r6:0000000c r5:76f95f30 r4:0000000f [ 6460.455405][T10398] [<8056b2c0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6460.455457][T10398] Exception stack(0xec609fa8 to 0xec609ff0) [ 6460.455503][T10398] 9fa0: 0000000f 76f95f30 0000000c 76f95f30 0000000f 00000000 [ 6460.455530][T10398] 9fc0: 0000000f 76f95f30 0000000c 00000003 00300000 00000000 00006364 76f960bc [ 6460.455546][T10398] 9fe0: 00000158 76f95ed0 000d7fdc 001301ec [ 6461.871778][T10407] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10407 comm=syz.2.7833 [ 6465.477256][T10420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10420 comm=syz.3.7836 [ 6466.932139][T31866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6466.997635][T31866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6467.080146][T31866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6467.130926][T31866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6467.460126][T31866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6467.471671][T31866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6467.481067][T31866] bond0 (unregistering): Released all slaves [ 6467.569945][T31866] hsr_slave_0: left promiscuous mode [ 6467.571990][T31866] hsr_slave_1: left promiscuous mode [ 6467.588395][T31866] veth1_macvtap: left promiscuous mode [ 6467.589062][T31866] veth0_macvtap: left promiscuous mode [ 6467.589757][T31866] veth1_vlan: left promiscuous mode [ 6467.590389][T31866] veth0_vlan: left promiscuous mode [ 6469.456827][T10437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6469.461409][T10437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6469.898017][ T29] audit: type=1400 audit(6725.816:845): avc: denied { write } for pid=10515 comm="syz.3.7845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 6470.709321][T10437] hsr_slave_0: entered promiscuous mode [ 6470.715806][T10437] hsr_slave_1: entered promiscuous mode [ 6470.718425][T10437] debugfs: 'hsr0' already exists in 'hsr' [ 6470.720894][T10437] Cannot create hsr debugfs directory [ 6471.437016][T10437] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 6471.456579][T10437] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 6471.468730][T10437] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 6471.476660][T10437] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 6472.221409][T10437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6473.146824][ T29] audit: type=1400 audit(6729.066:846): avc: denied { bind } for pid=10791 comm="syz.3.7848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 6476.091726][T10437] veth0_vlan: entered promiscuous mode [ 6476.106628][T10437] veth1_vlan: entered promiscuous mode [ 6476.157893][T10437] veth0_macvtap: entered promiscuous mode [ 6476.171946][T10437] veth1_macvtap: entered promiscuous mode [ 6476.241077][ T4588] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6476.241697][ T4588] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6476.241973][ T4588] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6476.242051][ T4588] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6477.898939][T10854] FAULT_INJECTION: forcing a failure. [ 6477.898939][T10854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 6477.910635][T10854] CPU: 1 UID: 0 PID: 10854 Comm: syz.2.7852 Tainted: G L syzkaller #0 PREEMPT [ 6477.910815][T10854] Tainted: [L]=SOFTLOCKUP [ 6477.910840][T10854] Hardware name: ARM-Versatile Express [ 6477.910869][T10854] Call trace: [ 6477.910914][T10854] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6477.911037][T10854] r7:00000000 r6:00000000 r5:60000013 r4:8229596c [ 6477.911060][T10854] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6477.911117][T10854] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6477.911196][T10854] r5:83ffe000 r4:8294fc90 [ 6477.911217][T10854] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6477.911279][T10854] [<80999568>] (should_fail_ex) from [<809997a4>] (should_fail+0x14/0x18) [ 6477.911348][T10854] r8:76fa2f30 r7:00000000 r6:00000000 r5:ec9e9f68 r4:00000002 [ 6477.911369][T10854] [<80999790>] (should_fail) from [<809997c4>] (should_fail_usercopy+0x1c/0x20) [ 6477.911424][T10854] [<809997a8>] (should_fail_usercopy) from [<805a6d60>] (simple_read_from_buffer+0x80/0x13c) [ 6477.911486][T10854] [<805a6ce0>] (simple_read_from_buffer) from [<80624a54>] (proc_fail_nth_read+0xb8/0x108) [ 6477.911598][T10854] r10:00000001 r9:8062499c r8:00000002 r7:ec9e9f68 r6:0000000f r5:76fa2f30 [ 6477.911655][T10854] r4:83ffe000 r3:ec9e9e9f [ 6477.911679][T10854] [<8062499c>] (proc_fail_nth_read) from [<8056a53c>] (vfs_read+0x98/0x324) [ 6477.911759][T10854] r8:76fa2f30 r7:ec9e9f68 r6:83ffe000 r5:0000000f r4:86071b40 [ 6477.911780][T10854] [<8056a4a4>] (vfs_read) from [<8056b24c>] (ksys_read+0x74/0xe8) [ 6477.911848][T10854] r10:00000003 r9:83ffe000 r8:8020029c r7:00000000 r6:00000000 r5:86071b40 [ 6477.911873][T10854] r4:86071b43 [ 6477.911891][T10854] [<8056b1d8>] (ksys_read) from [<8056b2d0>] (sys_read+0x10/0x14) [ 6477.911953][T10854] r7:00000003 r6:00000004 r5:76fa2f30 r4:0000000f [ 6477.911972][T10854] [<8056b2c0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6477.912021][T10854] Exception stack(0xec9e9fa8 to 0xec9e9ff0) [ 6477.912110][T10854] 9fa0: 0000000f 76fa2f30 00000004 76fa2f30 0000000f 00000000 [ 6477.912165][T10854] 9fc0: 0000000f 76fa2f30 00000004 00000003 00300000 00000000 00006364 76fa30bc [ 6477.912197][T10854] 9fe0: 00000158 76fa2ed0 000d7fdc 001301ec [ 6479.140183][T10875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6479.142699][T10875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6479.152378][T10875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6479.155539][T10875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6481.846231][T10893] FAULT_INJECTION: forcing a failure. [ 6481.846231][T10893] name failslab, interval 1, probability 0, space 0, times 0 [ 6481.847713][T10893] CPU: 0 UID: 0 PID: 10893 Comm: syz.2.7866 Tainted: G L syzkaller #0 PREEMPT [ 6481.847820][T10893] Tainted: [L]=SOFTLOCKUP [ 6481.847843][T10893] Hardware name: ARM-Versatile Express [ 6481.847868][T10893] Call trace: [ 6481.847913][T10893] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 6481.848031][T10893] r7:00000000 r6:00000000 r5:60000013 r4:8229596c [ 6481.848054][T10893] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 6481.848109][T10893] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 6481.848182][T10893] r5:83ffa400 r4:82918c48 [ 6481.848204][T10893] [<8021ee40>] (dump_stack) from [<8099972c>] (should_fail_ex+0x1c4/0x228) [ 6481.848274][T10893] [<80999568>] (should_fail_ex) from [<8053a368>] (should_failslab+0x6c/0x94) [ 6481.848348][T10893] r8:00000014 r7:00000000 r6:00000cc0 r5:00000002 r4:83001240 [ 6481.848375][T10893] [<8053a2fc>] (should_failslab) from [<8051a4f4>] (__kmalloc_cache_noprof+0x4c/0x44c) [ 6481.848439][T10893] [<8051a4a8>] (__kmalloc_cache_noprof) from [<8031f284>] (__request_module+0xe8/0x2c0) [ 6481.848516][T10893] r10:83ffa400 r9:00000000 r8:828f57c0 r7:83ffa400 r6:8160a8d4 r5:00000002 [ 6481.848541][T10893] r4:00000000 [ 6481.848552][T10893] [<8031f19c>] (__request_module) from [<8160a8d4>] (dev_load+0x68/0x8c) [ 6481.848591][T10893] r3:00400140 r2:ecb89e28 r1:8230ffc0 [ 6481.848608][T10893] r8:ecb89e38 r7:00008916 r6:00000000 r5:00000000 r4:ecb89e28 [ 6481.848618][T10893] [<8160a86c>] (dev_load) from [<817e4a68>] (devinet_ioctl+0x70/0x788) [ 6481.848648][T10893] r5:85c16c80 r4:ecb89e28 [ 6481.848657][T10893] [<817e49f8>] (devinet_ioctl) from [<817e7bd0>] (inet_ioctl+0x1b0/0x268) [ 6481.848692][T10893] r10:83ffa400 r9:81e69250 r8:ecb89ecc r7:85c16c80 r6:20000000 r5:8629c880 [ 6481.848703][T10893] r4:00008916 [ 6481.848712][T10893] [<817e7a20>] (inet_ioctl) from [<81598168>] (sock_ioctl+0x4c4/0x600) [ 6481.848749][T10893] r7:855c9900 r6:85c16c80 r5:20000000 r4:00008916 [ 6481.848759][T10893] [<81597ca4>] (sock_ioctl) from [<805854f4>] (sys_ioctl+0x130/0xba0) [ 6481.848801][T10893] r9:00000003 r8:86071900 r7:20000000 r6:86071901 r5:00000000 r4:00008916 [ 6481.848811][T10893] [<805853c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 6481.848840][T10893] Exception stack(0xecb89fa8 to 0xecb89ff0) [ 6481.848864][T10893] 9fa0: 00000000 00000000 00000003 00008916 20000000 00000000 [ 6481.848885][T10893] 9fc0: 00000000 00000000 001302c8 00000036 00300000 00000000 00006364 76fc40bc [ 6481.848901][T10893] 9fe0: 76fc3ec0 76fc3eb0 0001929c 00132320 [ 6481.848923][T10893] r10:00000036 r9:83ffa400 r8:8020029c r7:00000036 r6:001302c8 r5:00000000 [ 6481.848934][T10893] r4:00000000 [ 6488.407652][ T9657] hid (null): global environment stack underflow [ 6488.422549][ T9657] hid-generic 0000:7FFF:0007.0003: unknown main item tag 0x1 [ 6488.426652][ T9657] hid-generic 0000:7FFF:0007.0003: unknown main item tag 0x7 [ 6488.428664][ T9657] hid-generic 0000:7FFF:0007.0003: collection stack underflow [ 6488.429754][ T9657] hid-generic 0000:7FFF:0007.0003: item 0 4 0 12 parsing failed [ 6488.431175][ T9657] hid-generic 0000:7FFF:0007.0003: probe with driver hid-generic failed with error -22 [ 6489.675084][T10963] faux_driver vkms: [drm] Unknown color mode 2676; guessing buffer size. [ 6493.936328][T11019] syzkaller0: entered promiscuous mode [ 6493.936762][T11019] syzkaller0: entered allmulticast mode [ 6494.375122][T11031] Driver unsupported XDP return value 0 on prog (id 125) dev N/A, expect packet loss! [ 6494.855092][T11043] pim6reg1: entered promiscuous mode [ 6494.855918][T11043] pim6reg1: entered allmulticast mode [ 6495.100103][T11050] pim6reg1: entered promiscuous mode [ 6495.100786][T11050] pim6reg1: entered allmulticast mode [ 6498.577586][ T29] audit: type=1400 audit(6754.496:847): avc: denied { relabelfrom } for pid=11100 comm="syz.2.7921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 6498.584993][ T29] audit: type=1400 audit(6754.496:848): avc: denied { relabelto } for pid=11100 comm="syz.2.7921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 6500.289349][T11120] pim6reg1: entered promiscuous mode [ 6500.290193][T11120] pim6reg1: entered allmulticast mode [ 6501.827538][T11138] veth0_vlan: entered allmulticast mode [ 6504.082228][T11187] pim6reg1: entered promiscuous mode [ 6504.105072][T11187] pim6reg1: entered allmulticast mode [ 6504.160368][T11192] pim6reg1: entered promiscuous mode [ 6504.166989][T11192] pim6reg1: entered allmulticast mode [ 6505.839788][T32155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6505.929536][T32155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6506.029384][T32155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6506.108592][T32155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6507.256763][T32155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6507.324654][T32155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6507.338073][T32155] bond0 (unregistering): Released all slaves [ 6507.546220][T32155] hsr_slave_0: left promiscuous mode [ 6507.566309][T32155] hsr_slave_1: left promiscuous mode [ 6507.606500][T32155] veth1_macvtap: left promiscuous mode [ 6507.608484][T32155] veth0_macvtap: left promiscuous mode [ 6507.612472][T32155] veth1_vlan: left promiscuous mode [ 6507.615562][T32155] veth0_vlan: left promiscuous mode [ 6515.682861][T11250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6515.706077][T11250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6517.922849][T11250] hsr_slave_0: entered promiscuous mode [ 6517.929203][T11250] hsr_slave_1: entered promiscuous mode [ 6519.298185][T11250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 6519.350945][T11250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 6519.382677][T11250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 6519.421363][T11250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 6520.385703][T11654] pim6reg1: entered promiscuous mode [ 6520.387225][T11654] pim6reg1: entered allmulticast mode [ 6521.675920][T11250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6526.237869][T11721] pim6reg1: entered promiscuous mode [ 6526.238432][T11721] pim6reg1: entered allmulticast mode [ 6530.566826][T32155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6530.617327][T32155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6530.635631][T32155] bond0 (unregistering): Released all slaves [ 6530.779197][T32155] hsr_slave_0: left promiscuous mode [ 6530.787713][T32155] hsr_slave_1: left promiscuous mode [ 6532.207048][T11855] veth1_macvtap: left promiscuous mode [ 6532.211225][T11855] macsec0: entered promiscuous mode [ 6538.594835][T11847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6538.612560][T11847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6543.584901][T11847] hsr_slave_0: entered promiscuous mode [ 6543.589855][T11847] hsr_slave_1: entered promiscuous mode [ 6545.549111][T11847] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 6545.611449][T11847] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 6545.758639][T11847] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 6545.937602][T11847] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 6549.719297][T11847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6564.246080][T11847] veth0_vlan: entered promiscuous mode [ 6564.284523][T11847] veth1_vlan: entered promiscuous mode [ 6564.346759][T11847] veth0_macvtap: entered promiscuous mode [ 6564.377544][T11847] veth1_macvtap: entered promiscuous mode [ 6564.558554][ T5961] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6564.559049][ T5961] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6564.559146][ T5961] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6564.559212][ T5961] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6565.858879][T12243] pim6reg1: entered promiscuous mode [ 6565.860521][T12243] pim6reg1: entered allmulticast mode [ 6571.202988][T12304] pim6reg1: entered promiscuous mode [ 6571.208252][T12304] pim6reg1: entered allmulticast mode [ 6572.469665][T12320] veth1_macvtap: left promiscuous mode [ 6572.470614][T12320] macsec0: entered promiscuous mode [ 6574.646005][T12341] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 6574.677687][T12341] syzkaller0: linktype set to 774 [ 6574.999815][T12348] pim6reg1: entered promiscuous mode [ 6575.000311][T12348] pim6reg1: entered allmulticast mode [ 6576.020817][T12368] pim6reg1: entered promiscuous mode [ 6576.021470][T12368] pim6reg1: entered allmulticast mode [ 6582.998798][T12432] pim6reg1: entered promiscuous mode [ 6583.010531][T12432] pim6reg1: entered allmulticast mode [ 6583.308203][T12440] pim6reg1: entered promiscuous mode [ 6583.309545][T12440] pim6reg1: entered allmulticast mode [ 6586.891519][T12502] *** NOT YET: opcode c3 *** [ 6586.950528][T12503] syzkaller0: entered promiscuous mode [ 6586.964475][T12503] syzkaller0: entered allmulticast mode [ 6587.765607][T12511] pim6reg1: entered promiscuous mode [ 6587.767273][T12511] pim6reg1: entered allmulticast mode [ 6589.940371][T12530] pim6reg1: entered promiscuous mode [ 6589.940772][T12530] pim6reg1: entered allmulticast mode [ 6593.206584][T12567] pim6reg1: entered promiscuous mode [ 6593.216055][T12567] pim6reg1: entered allmulticast mode [ 6596.706442][T12597] pim6reg1: entered promiscuous mode [ 6596.722948][T12597] pim6reg1: entered allmulticast mode [ 6608.242304][T12771] pim6reg1: entered promiscuous mode [ 6608.242981][T12771] pim6reg1: entered allmulticast mode [ 6609.338498][T12788] pim6reg1: entered promiscuous mode [ 6609.338894][T12788] pim6reg1: entered allmulticast mode [ 6611.128541][T12815] pim6reg1: entered promiscuous mode [ 6611.129876][T12815] pim6reg1: entered allmulticast mode [ 6627.721682][T12951] pim6reg1: entered promiscuous mode [ 6627.722164][T12951] pim6reg1: entered allmulticast mode [ 6638.347037][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8226'. [ 6638.347408][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8226'. [ 6638.347559][T13033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8226'. [ 6653.027611][T13173] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8254'. [ 6655.449489][ T29] audit: type=1400 audit(6911.366:849): avc: denied { create } for pid=13190 comm="syz.5.8260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 6660.258398][T13283] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8272'. [ 6661.623318][T13204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6661.650700][T13204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6663.671504][T13204] hsr_slave_0: entered promiscuous mode [ 6663.704349][T13204] hsr_slave_1: entered promiscuous mode [ 6663.706753][T13204] debugfs: 'hsr0' already exists in 'hsr' [ 6663.710384][T13204] Cannot create hsr debugfs directory [ 6664.838388][T13204] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 6664.865372][T13204] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 6664.905983][T13204] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 6664.925915][T13204] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 6666.611577][T13204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6670.868308][T13588] netlink: 'syz.5.8297': attribute type 19 has an invalid length. [ 6670.870575][T13588] netlink: 'syz.5.8297': attribute type 28 has an invalid length. [ 6670.870813][T13588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8297'. [ 6673.154756][T13613] netlink: 'syz.5.8303': attribute type 3 has an invalid length. [ 6674.743410][T13204] veth0_vlan: entered promiscuous mode [ 6674.790904][T13204] veth1_vlan: entered promiscuous mode [ 6674.951336][T13204] veth0_macvtap: entered promiscuous mode [ 6674.996701][T13204] veth1_macvtap: entered promiscuous mode [ 6675.169849][T13157] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6675.189255][T13157] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6675.189675][T13157] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6675.197221][T13157] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6677.741943][T13657] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8318'. [ 6678.958044][ T29] audit: type=1400 audit(6934.876:850): avc: denied { create } for pid=13670 comm="syz.6.8324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 6678.965718][ T29] audit: type=1400 audit(6934.876:851): avc: denied { sys_admin } for pid=13670 comm="syz.6.8324" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 6679.421011][T13676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6679.454836][T13676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6681.637188][T13704] syzkaller1: entered promiscuous mode [ 6681.637955][T13704] syzkaller1: entered allmulticast mode [ 6682.148117][T13715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6682.155233][ T29] audit: type=1400 audit(6938.066:852): avc: denied { set_context_mgr } for pid=13713 comm="syz.6.8336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 6682.177364][ T29] audit: type=1400 audit(6938.096:853): avc: denied { map } for pid=13713 comm="syz.6.8336" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 6682.186579][T13715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6682.202063][ T29] audit: type=1400 audit(6938.116:854): avc: denied { call } for pid=13713 comm="syz.6.8336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 6682.232478][T13715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6682.246348][T13715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6682.249601][T13714] binder_alloc: 13713: binder_alloc_buf, no vma [ 6682.252596][ T29] audit: type=1400 audit(6938.166:855): avc: denied { execute } for pid=13712 comm="syz.5.8337" path="/dev/snd/pcmC3D0p" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 6683.152057][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8340'. [ 6683.154762][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8340'. [ 6683.745073][T13736] process 'syz.5.8343' launched './file0' with NULL argv: empty string added [ 6683.750667][T13738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6683.753406][T13738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6683.755949][ T29] audit: type=1400 audit(6939.666:856): avc: denied { execute_no_trans } for pid=13735 comm="syz.5.8343" path="/230/file0" dev="tmpfs" ino=1178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 6684.733287][T13746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6684.755727][T13746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6685.674872][T13760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6685.676884][T13760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6685.990095][T13765] syzkaller1: entered promiscuous mode [ 6685.990783][T13765] syzkaller1: entered allmulticast mode [ 6686.704674][T13760] i2c i2c-1: sendbytes: error -110 [ 6688.318412][T13788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6688.319728][T13788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6689.018146][T13796] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 6690.715800][ T29] audit: type=1400 audit(6946.636:857): avc: denied { name_bind } for pid=13814 comm="syz.6.8368" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 6691.108604][T13819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6691.109168][T13819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6696.655803][T13869] pim6reg1: entered allmulticast mode [ 6698.979440][T13905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6698.982018][T13905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6702.342072][T13931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6702.355332][T13931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6707.576873][T13949] netlink: 6 bytes leftover after parsing attributes in process `syz.6.8414'. [ 6724.896762][T13970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6724.899896][T13970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6725.125975][ T29] audit: type=1400 audit(6981.046:858): avc: denied { watch watch_reads } for pid=13973 comm="syz.5.8423" path="/266" dev="tmpfs" ino=1354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 6727.983077][T13991] could not allocate digest TFM handle crct10dif [ 6729.723191][T14008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6729.733032][T14008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6730.114508][ T29] audit: type=1400 audit(6986.026:859): avc: denied { block_suspend } for pid=14017 comm="syz.5.8441" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 6734.291340][T13157] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6734.389965][T13157] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6734.508450][T13157] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6734.647145][T13157] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6735.200022][T13157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6735.217321][T13157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6735.236789][T13157] bond0 (unregistering): Released all slaves [ 6735.329928][T13157] hsr_slave_0: left promiscuous mode [ 6735.332829][T13157] hsr_slave_1: left promiscuous mode [ 6735.350625][T13157] veth0_macvtap: left promiscuous mode [ 6735.351843][T13157] veth1_vlan: left promiscuous mode [ 6735.352891][T13157] veth0_vlan: left promiscuous mode [ 6759.530191][T14125] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8473'. [ 6765.827059][ T29] audit: type=1400 audit(7021.746:860): avc: denied { create } for pid=14138 comm="syz.5.8480" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 6765.852834][ T29] audit: type=1400 audit(7021.766:861): avc: denied { read } for pid=14138 comm="syz.5.8480" name="file0" dev="tmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 6765.867706][ T29] audit: type=1400 audit(7021.786:862): avc: denied { open } for pid=14138 comm="syz.5.8480" path="/303/file0" dev="tmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 6766.061496][ T29] audit: type=1400 audit(7021.976:863): avc: denied { unlink } for pid=11847 comm="syz-executor" name="file0" dev="tmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 6766.308528][T14141] syzkaller0: entered promiscuous mode [ 6766.324978][T14141] syzkaller0: entered allmulticast mode [ 6767.128368][T14147] could not allocate digest TFM handle crct10dif [ 6767.267476][T14151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6767.267975][T14151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6777.914226][T14162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6777.915437][T14162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6785.105093][T14162] i2c i2c-1: died at extended address code [ 6788.630678][T14181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6788.648046][T14181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6801.775958][T14208] netlink: 'syz.6.8499': attribute type 27 has an invalid length. [ 6807.940242][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8503'. [ 6817.885443][T14231] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8507'. [ 6817.886776][T14231] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8507'. [ 6819.774738][ T29] audit: type=1400 audit(7075.676:864): avc: denied { listen } for pid=14234 comm="syz.6.8509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 6820.509597][T14253] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8517'. [ 6820.954432][T14257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6820.957174][T14257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6835.444026][T14304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6835.446353][T14304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6843.201558][T14320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8541'. [ 6844.753071][T14329] syzkaller0: entered promiscuous mode [ 6844.764379][T14329] syzkaller0: entered allmulticast mode [ 6855.476097][T14347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6855.477959][T14347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6857.864422][ T29] audit: type=1400 audit(7113.776:865): avc: denied { bind } for pid=14369 comm="syz.6.8560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 6858.765847][T14374] sit0: entered promiscuous mode [ 6858.856487][T14374] netlink: 'syz.6.8561': attribute type 1 has an invalid length. [ 6858.857725][T14374] netlink: 1 bytes leftover after parsing attributes in process `syz.6.8561'. [ 6860.186332][T14377] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8562'. [ 6860.410188][T14379] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8563'. [ 6863.400520][T14428] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 6868.347377][T14443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6868.383058][T14443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6890.867828][T14493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6890.871312][T14493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6890.886507][T14493] dummy0: entered promiscuous mode [ 6891.074432][T14499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6891.076389][T14499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6892.996892][T14509] x_tables: ip_tables: limit.0 match: invalid size 32 (kernel) != (user) 40 [ 6893.415211][T14511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6893.416026][T14511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6918.354271][T14634] syzkaller0: entered promiscuous mode [ 6918.355414][T14634] syzkaller0: entered allmulticast mode [ 6936.416991][T14677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6936.419857][T14677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6949.587137][T14731] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8652'. [ 6966.101152][T11275] hid-generic 0001:2043D8E7:05F6.0004: unknown main item tag 0x0 [ 6966.114191][T11275] hid-generic 0001:2043D8E7:05F6.0004: unknown main item tag 0x0 [ 6966.130986][T11275] hid-generic 0001:2043D8E7:05F6.0004: unknown main item tag 0x0 [ 6966.152355][T11275] hid-generic 0001:2043D8E7:05F6.0004: unknown main item tag 0x0 [ 6966.164205][T11275] hid-generic 0001:2043D8E7:05F6.0004: unknown main item tag 0x0 [ 6966.165225][T11275] hid-generic 0001:2043D8E7:05F6.0004: unknown main item tag 0x0 [ 6966.166196][T11275] hid-generic 0001:2043D8E7:05F6.0004: unknown main item tag 0x0 [ 6966.167135][T11275] hid-generic 0001:2043D8E7:05F6.0004: unknown main item tag 0x0 [ 6966.168159][T11275] hid-generic 0001:2043D8E7:05F6.0004: unknown main item tag 0x0 [ 6966.169199][T11275] hid-generic 0001:2043D8E7:05F6.0004: unknown main item tag 0x0 [ 6966.175629][T11275] hid-generic 0001:2043D8E7:05F6.0004: hidraw0: HID ved.d9 Device [syz0] on syz0 [ 6966.717562][T14797] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8657'. [ 6986.519065][T14887] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8669'. [ 6989.335500][T14942] netlink: 'syz.6.8672': attribute type 1 has an invalid length. [ 6989.962930][T14942] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 6989.992953][T14942] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8672'. [ 6990.061360][T14942] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 6990.082758][T14942] bond1 (unregistering): Released all slaves [ 6990.682366][T15016] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8673'. [ 6991.793965][T15024] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8677'. [ 6997.297413][T15077] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8682'. [ 7003.955118][T15128] binder: 15127:15128 ioctl c00c620f 200000c0 returned -22 [ 7004.113095][T15130] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8688'. [ 7007.455116][T15172] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8689'. [ 7007.748788][T15174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7007.751452][T15174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7008.368219][T15182] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8693'. [ 7028.335877][ T29] audit: type=1326 audit(7284.256:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15232 comm="syz.5.8697" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132320 code=0x7ffc0000 [ 7028.342095][ T29] audit: type=1326 audit(7284.256:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15232 comm="syz.5.8697" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132320 code=0x7ffc0000 [ 7028.350404][ T29] audit: type=1326 audit(7284.266:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15232 comm="syz.5.8697" exe="/syz-executor" sig=0 arch=40000028 syscall=172 compat=0 ip=0x132320 code=0x7ffc0000 [ 7028.357100][ T29] audit: type=1326 audit(7284.276:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15232 comm=77DEA305FF07 exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132320 code=0x7ffc0000 [ 7028.361966][ T29] audit: type=1326 audit(7284.276:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15232 comm=77DEA305FF07 exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132320 code=0x7ffc0000 [ 7028.876810][T15238] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8699'. [ 7032.654785][T15253] comedi: valid board names for 8255 driver are: [ 7032.655111][T15253] 8255 [ 7032.655313][T15253] comedi: valid board names for vmk80xx driver are: [ 7032.655396][T15253] vmk80xx [ 7032.655514][T15253] comedi: valid board names for usbduxsigma driver are: [ 7032.655584][T15253] usbduxsigma [ 7032.655651][T15253] comedi: valid board names for usbduxfast driver are: [ 7032.655717][T15253] usbduxfast [ 7032.655823][T15253] comedi: valid board names for usbdux driver are: [ 7032.655896][T15253] usbdux [ 7032.655962][T15253] comedi: valid board names for ni6501 driver are: [ 7032.656029][T15253] ni6501 [ 7032.656096][T15253] comedi: valid board names for dt9812 driver are: [ 7032.656202][T15253] dt9812 [ 7032.656280][T15253] comedi: valid board names for ni_labpc_cs driver are: [ 7032.656402][T15253] ni_labpc_cs [ 7032.656481][T15253] comedi: valid board names for ni_daq_700 driver are: [ 7032.656575][T15253] ni_daq_700 [ 7032.656646][T15253] comedi: valid board names for labpc_pci driver are: [ 7032.656713][T15253] labpc_pci [ 7032.656778][T15253] comedi: valid board names for adl_pci9118 driver are: [ 7032.656892][T15253] pci9118dg [ 7032.656986][T15253] pci9118hg [ 7032.657055][T15253] pci9118hr [ 7032.657121][T15253] comedi: valid board names for 8255_pci driver are: [ 7032.657198][T15253] 8255_pci [ 7032.657267][T15253] comedi: valid board names for comedi_parport driver are: [ 7032.657333][T15253] comedi_parport [ 7032.657398][T15253] comedi: valid board names for comedi_test driver are: [ 7032.657468][T15253] comedi_test [ 7032.657533][T15253] comedi: valid board names for comedi_bond driver are: [ 7032.657599][T15253] comedi_bond [ 7032.684960][T15288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7032.689144][T15288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7041.387484][ T29] audit: type=1400 audit(7297.306:871): avc: denied { checkpoint_restore } for pid=15321 comm="syz.5.8711" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 7049.019508][T15335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7049.020747][T15335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7061.735370][T15407] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8736'. [ 7066.667654][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8749'. [ 7066.667918][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8749'. [ 7066.708514][T15439] ip6tnl1: entered promiscuous mode [ 7066.708742][T15439] ip6tnl1: entered allmulticast mode [ 7086.872381][ T29] audit: type=1400 audit(7342.786:872): avc: denied { kexec_image_load } for pid=15465 comm="syz.5.8757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 7087.829833][T15472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8760'. [ 7095.490516][T15494] syzkaller0: entered promiscuous mode [ 7095.491735][T15494] syzkaller0: entered allmulticast mode [ 7095.856148][ T29] audit: type=1400 audit(7351.776:873): avc: denied { mounton } for pid=15500 comm="syz.5.8768" path="/proc/1019/task" dev="proc" ino=101958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 7095.987262][T15504] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8769'. [ 7105.088905][T15579] trusted_key: encrypted_key: insufficient parameters specified [ 7105.276368][T15581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7105.280253][T15581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7109.994062][ T29] audit: type=1326 audit(7365.906:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15596 comm="syz.6.8788" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132320 code=0x7ffc0000 [ 7110.004874][ T29] audit: type=1326 audit(7365.926:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15596 comm="syz.6.8788" exe="/syz-executor" sig=0 arch=40000028 syscall=47 compat=0 ip=0x132320 code=0x7ffc0000 [ 7110.005889][ T29] audit: type=1326 audit(7365.926:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15596 comm="syz.6.8788" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132320 code=0x7ffc0000 [ 7110.009600][ T29] audit: type=1326 audit(7365.926:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15596 comm="syz.6.8788" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132320 code=0x7ffc0000 [ 7122.255841][T15635] tmpfs: Unsupported parameter 'huge' [ 7135.012298][T15641] IPv6: addrconf: prefix option has invalid lifetime [ 7147.335703][ T29] audit: type=1400 audit(7403.256:878): avc: denied { bind } for pid=15743 comm="syz.5.8817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 7151.710615][T15804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8824'. [ 7158.151071][T15900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7158.152166][T15900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7158.756937][ T29] audit: type=1400 audit(7414.676:879): avc: denied { map } for pid=15905 comm="syz.6.8836" path="socket:[102606]" dev="sockfs" ino=102606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 7169.968619][ T29] audit: type=1326 audit(7425.886:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15922 comm="syz.5.8843" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132320 code=0x7ffc0000 [ 7169.971690][ T29] audit: type=1326 audit(7425.886:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15922 comm="syz.5.8843" exe="/syz-executor" sig=0 arch=40000028 syscall=114 compat=0 ip=0x132320 code=0x7ffc0000 [ 7169.975865][ T29] audit: type=1326 audit(7425.896:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15922 comm="syz.5.8843" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132320 code=0x7ffc0000 [ 7170.321033][T15925] kernel profiling enabled (shift: 9) [ 7174.481731][ T29] audit: type=1400 audit(7430.396:883): avc: denied { setattr } for pid=15929 comm="syz.5.8846" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 7175.925255][T15938] syzkaller0: entered promiscuous mode [ 7175.927249][T15938] syzkaller0: entered allmulticast mode [ 7177.930618][T15953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7177.946785][T15953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7203.787890][T16006] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8869'. [ 7203.933964][T16015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7203.935723][T16015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7219.886277][T16046] syz_tun: entered allmulticast mode [ 7219.901898][T16045] syz_tun: left allmulticast mode [ 7220.194616][T16052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7220.196456][T16052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7243.414973][T16084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7243.434457][T16084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7244.814427][T16096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7244.815522][T16096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7245.844384][T16096] i2c i2c-1: sendbytes: error -110 [ 7269.260386][T16165] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 7274.356775][T16189] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8922'. [ 7278.060662][T16225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7278.063193][T16225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7280.866918][T16265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7280.875400][T16265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7283.259207][ T29] audit: type=1400 audit(7539.176:884): avc: denied { create } for pid=16271 comm="syz.6.8933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 7284.621831][T16284] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8937'. [ 7289.771991][T16331] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8942'. [ 7295.629992][T16384] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8947'. [ 7299.024827][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8948'. [ 7306.602058][T16431] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8952'. [ 7309.918075][T16481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7309.926582][T16481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7310.221260][T16487] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8957'. [ 7310.272210][T16490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7310.282824][T16490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7311.270145][T16506] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8961'. [ 7328.895380][T16569] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8968'. [ 7330.802392][ T29] audit: type=1326 audit(7586.716:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16595 comm="syz.6.8969" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132320 code=0x7ffc0000 [ 7330.812724][ T29] audit: type=1326 audit(7586.726:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16595 comm="syz.6.8969" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132320 code=0x7ffc0000 [ 7330.818965][ T29] audit: type=1326 audit(7586.736:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16595 comm="syz.6.8969" exe="/syz-executor" sig=0 arch=40000028 syscall=424 compat=0 ip=0x132320 code=0x7ffc0000 [ 7330.820402][ T29] audit: type=1326 audit(7586.736:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16595 comm="syz.6.8969" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132320 code=0x7ffc0000 [ 7330.821376][ T29] audit: type=1326 audit(7586.736:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16595 comm="syz.6.8969" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132320 code=0x7ffc0000 [ 7332.707613][T16631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7332.709698][T16631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7333.059549][T16637] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8976'. [ 7336.674376][ T29] audit: type=1400 audit(7592.526:890): avc: denied { mount } for pid=16628 comm="syz.6.8973" name="/" dev="configfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 7336.676560][ T29] audit: type=1400 audit(7592.536:891): avc: denied { read } for pid=16628 comm="syz.6.8973" name="/" dev="configfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 7336.678593][ T29] audit: type=1400 audit(7592.536:892): avc: denied { open } for pid=16628 comm="syz.6.8973" path="/337/file0" dev="configfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 7339.253084][T16694] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8981'. [ 7343.781858][ T29] audit: type=1400 audit(7599.696:893): avc: denied { remount } for pid=16754 comm="syz.5.8985" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 7343.942031][T16759] vlan2: entered allmulticast mode [ 7343.942444][T16759] macsec0: entered allmulticast mode [ 7344.033812][T16759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8986'. [ 7345.058801][T16794] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8992'. [ 7345.061938][T16794] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8992'. [ 7348.523316][ T29] audit: type=1400 audit(7604.436:894): avc: denied { unmount } for pid=13204 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 7350.151781][T16807] netlink: 128 bytes leftover after parsing attributes in process `syz.6.8997'. [ 7362.106870][T16873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7362.109399][T16873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7368.452019][T16889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9025'. [ 7369.292261][T16894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7369.305382][T16894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7369.568974][T16900] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9029'. [ 7372.835059][T16936] netlink: 'syz.5.9030': attribute type 28 has an invalid length. [ 7373.782790][T16944] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9034'. [ 7380.719671][T16991] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9040'. [ 7384.444992][T17034] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9045'. [ 7390.055960][T17093] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9056'. [ 7397.045213][T17141] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9061'. [ 7409.611988][T17184] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9066'. [ 7411.749224][ T8633] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7411.805023][ T8633] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7411.970597][ T8633] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7412.073462][ T8633] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7413.460930][ T8633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 7413.515642][ T8633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 7413.519975][ T8633] bond0 (unregistering): Released all slaves [ 7413.644249][ T8633] hsr_slave_0: left promiscuous mode [ 7413.675286][ T8633] hsr_slave_1: left promiscuous mode [ 7413.735843][ T8633] veth0_macvtap: left promiscuous mode [ 7413.736522][ T8633] veth1_vlan: left promiscuous mode [ 7413.737092][ T8633] veth0_vlan: left promiscuous mode [ 7418.994357][T17207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 7419.000817][T17207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 7421.118998][T17207] hsr_slave_0: entered promiscuous mode [ 7421.121997][T17207] hsr_slave_1: entered promiscuous mode [ 7422.446212][T17207] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 7422.468780][T17207] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 7422.499218][T17207] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 7422.520269][T17207] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 7423.850798][T17207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 7429.916679][T17207] veth0_vlan: entered promiscuous mode [ 7429.931279][T17207] veth1_vlan: entered promiscuous mode [ 7429.988800][T17207] veth0_macvtap: entered promiscuous mode [ 7429.997887][T17207] veth1_macvtap: entered promiscuous mode [ 7430.045386][ T5928] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 7430.045674][ T5928] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 7430.045729][ T5928] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 7430.045761][ T5928] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 7431.819198][T17598] syzkaller0: entered promiscuous mode [ 7431.819569][T17598] syzkaller0: entered allmulticast mode [ 7438.391303][T17642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7438.396548][T17642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7439.354424][T17651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7439.357150][T17651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7440.031683][ T29] audit: type=1400 audit(7695.946:895): avc: denied { override_creds } for pid=17656 comm="syz.6.9098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 7470.430514][T17702] comedi comedi2: comedi_config --init_data is deprecated [ 7472.651197][ T29] audit: type=1400 audit(7728.566:896): avc: denied { recv } for pid=3093 comm="syz-executor" saddr=127.0.0.1 src=38082 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 7472.696363][ T29] audit: type=1400 audit(7728.616:897): avc: denied { recv } for pid=14 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=38082 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 7472.918279][T17722] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9119'. [ 7473.597318][T11823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 7474.438816][ T29] audit: type=1400 audit(7730.356:898): avc: denied { write } for pid=17735 comm="syz.6.9125" name="card1" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 7474.475944][T11825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 7479.881123][ T29] audit: type=1400 audit(7735.796:899): avc: denied { remount } for pid=17740 comm="syz.6.9127" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 7479.895528][T17743] devpts: Unknown parameter '0x000000000000ee00' [ 7487.571250][ T29] audit: type=1400 audit(7743.486:900): avc: denied { unmount } for pid=13204 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 7488.255510][T17755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7488.257605][T17755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7489.678308][T17767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7489.680020][T17767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7492.208709][T17781] netlink: 'syz.6.9142': attribute type 10 has an invalid length. [ 7501.420104][T17855] netlink: 182 bytes leftover after parsing attributes in process `syz.5.9159'. [ 7502.614768][T17862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7502.619287][T17862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7503.340515][T17872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7503.342773][T17872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7521.099422][T17951] binder: 17948:17951 ioctl 5000943a 0 returned -22 [ 7522.389176][ T29] audit: type=1326 audit(7778.306:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17956 comm="syz.5.9173" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x132320 code=0x0 [ 7523.517765][T17980] ip6erspan0: entered promiscuous mode [ 7527.423495][T18029] genirq: Flags mismatch irq 31. 00200001 (comedi_parport) vs. 00200081 (virtio0) [ 7527.438440][T18029] 8<--- cut here --- [ 7527.438843][T18029] Unable to handle kernel paging request at virtual address fee04f27 when write [ 7527.439157][T18029] [fee04f27] *pgd=80000080007003, *pmd=00000000 [ 7527.446152][T18029] Internal error: Oops: a06 [#1] SMP ARM [ 7527.448406][T18029] Modules linked in: [ 7527.448873][T18029] CPU: 0 UID: 0 PID: 18029 Comm: syz.6.9182 Tainted: G L syzkaller #0 PREEMPT [ 7527.449294][T18029] Tainted: [L]=SOFTLOCKUP [ 7527.449493][T18029] Hardware name: ARM-Versatile Express [ 7527.449760][T18029] PC is at parport_attach+0x174/0x1d0 [ 7527.450129][T18029] LR is at parport_attach+0x164/0x1d0 [ 7527.450390][T18029] pc : [<81408878>] lr : [<81408868>] psr: 60000013 [ 7527.450691][T18029] sp : dfbe1d28 ip : dfbe1d28 fp : dfbe1d4c [ 7527.450964][T18029] r10: 82b28ad8 r9 : 00000003 r8 : 844f5f00 [ 7527.451261][T18029] r7 : dfbe1d88 r6 : 844f5f00 r5 : 00000000 r4 : 00000000 [ 7527.451570][T18029] r3 : fee04f27 r2 : 81e1a338 r1 : 00000001 r0 : 814084e8 [ 7527.451985][T18029] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 7527.452343][T18029] Control: 30c5387d Table: 850c46c0 DAC: fffffffd [ 7527.452715][T18029] Register r0 information: non-slab/vmalloc memory [ 7527.454072][T18029] Register r1 information: non-paged memory [ 7527.454548][T18029] Register r2 information: non-slab/vmalloc memory [ 7527.455247][T18029] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 7527.456026][T18029] Register r4 information: NULL pointer [ 7527.461961][T18029] Register r5 information: NULL pointer [ 7527.463960][T18029] Register r6 information: slab kmalloc-192 start 844f5f00 pointer offset 0 size 192 [ 7527.465145][T18029] Register r7 information: 2-page vmalloc region starting at 0xdfbe0000 allocated at kernel_clone+0xac/0x3ec [ 7527.465679][T18029] Register r8 information: slab kmalloc-192 start 844f5f00 pointer offset 0 size 192 [ 7527.466201][T18029] Register r9 information: non-paged memory [ 7527.466478][T18029] Register r10 information: non-slab/vmalloc memory [ 7527.466785][T18029] Register r11 information: 2-page vmalloc region starting at 0xdfbe0000 allocated at kernel_clone+0xac/0x3ec [ 7527.467284][T18029] Register r12 information: 2-page vmalloc region starting at 0xdfbe0000 allocated at kernel_clone+0xac/0x3ec [ 7527.467809][T18029] Process syz.6.9182 (pid: 18029, stack limit = 0xdfbe0000) [ 7527.468195][T18029] Stack: (0xdfbe1d28 to 0xdfbe2000) [ 7527.468473][T18029] 1d20: 82432d94 844f5f00 829d3f08 829d3f08 81e1a7f8 844f5f44 [ 7527.468843][T18029] 1d40: dfbe1d84 dfbe1d50 81404520 81408710 844f5f30 00000000 dfbe1d74 200000c0 [ 7527.469215][T18029] 1d60: 844f5f00 b5403587 844f5f30 86142400 40946400 00000003 dfbe1e44 dfbe1d88 [ 7527.469563][T18029] 1d80: 813ffe78 81404424 656d6f63 705f6964 6f707261 00007472 00000000 00004f27 [ 7527.469899][T18029] 1da0: 0000001f 00010000 00000004 00000003 00000cc7 00000004 00080008 0000000e [ 7527.470260][T18029] 1dc0: 00000006 00000002 00000001 00000007 00000001 00000006 10000105 00000000 [ 7527.470599][T18029] 1de0: 0001a44d 00000003 3fff7fff 00000089 00000010 00000001 20001e58 0080000b [ 7527.470950][T18029] 1e00: 00000e69 0000003c 00000008 00000006 ffffffff effffff8 00000000 bec5c67f [ 7527.471323][T18029] 1e20: 00000000 861d2240 844f5f00 200000c0 844f5f30 86142400 dfbe1f14 dfbe1e48 [ 7527.471682][T18029] 1e40: 81400e6c 813ffd84 00000000 00000000 00000000 00000000 00000000 bec5c67f [ 7527.472037][T18029] 1e60: 00000000 00000000 824a35ec 0000005f 84344838 00000064 844e3c24 86142400 [ 7527.472435][T18029] 1e80: dfbe1ee4 dfbe1e90 807b7d38 807ae25c 00000064 00000001 00000000 dfbe1eac [ 7527.472790][T18029] 1ea0: 85df8250 8343b660 00006400 0000000b dfbe1ea0 00000000 00000000 bec5c67f [ 7527.473128][T18029] 1ec0: 861d2240 40946400 200000c0 200000c0 861d2240 00000003 dfbe1ef4 dfbe1ee8 [ 7527.473619][T18029] 1ee0: 807b7e58 bec5c67f dfbe1f14 40946400 00000000 861d2241 200000c0 861d2240 [ 7527.473979][T18029] 1f00: 00000003 86142400 dfbe1fa4 dfbe1f18 805854f4 814008bc ecac8b10 86142400 [ 7527.475075][T18029] 1f20: dfbe1f3c dfbe1f30 81aaf31c 81aaf1ec dfbe1f54 dfbe1f40 8025bcbc 8028e07c [ 7527.479225][T18029] 1f40: dfbe1fb0 40000000 dfbe1f84 dfbe1f58 80221a38 8025bc78 00000000 8281d17c [ 7527.483999][T18029] 1f60: dfbe1fb0 0014c880 ecac8b10 8022198c 00000000 bec5c67f dfbe1fac 00000000 [ 7527.484439][T18029] 1f80: 00000000 00316310 00000036 8020029c 86142400 00000036 00000000 dfbe1fa8 [ 7527.484941][T18029] 1fa0: 80200060 805853d0 00000000 00000000 00000003 40946400 200000c0 00000000 [ 7527.489021][T18029] 1fc0: 00000000 00000000 00316310 00000036 00300000 00000000 00006364 76f080bc [ 7527.494021][T18029] 1fe0: 76f07ec0 76f07eb0 0001929c 00132320 60000010 00000003 00000000 00000000 [ 7527.494651][T18029] Call trace: [ 7527.494887][T18029] [<81408704>] (parport_attach) from [<81404520>] (comedi_device_attach+0x108/0x250) [ 7527.495960][T18029] r6:844f5f44 r5:81e1a7f8 r4:829d3f08 [ 7527.496250][T18029] [<81404418>] (comedi_device_attach) from [<813ffe78>] (do_devconfig_ioctl+0x100/0x220) [ 7527.496707][T18029] r10:00000003 r9:40946400 r8:86142400 r7:844f5f30 r6:b5403587 r5:844f5f00 [ 7527.497011][T18029] r4:200000c0 [ 7527.497190][T18029] [<813ffd78>] (do_devconfig_ioctl) from [<81400e6c>] (comedi_unlocked_ioctl+0x5bc/0x1c2c) [ 7527.497580][T18029] r8:86142400 r7:844f5f30 r6:200000c0 r5:844f5f00 r4:861d2240 [ 7527.497907][T18029] [<814008b0>] (comedi_unlocked_ioctl) from [<805854f4>] (sys_ioctl+0x130/0xba0) [ 7527.498282][T18029] r10:86142400 r9:00000003 r8:861d2240 r7:200000c0 r6:861d2241 r5:00000000 [ 7527.498581][T18029] r4:40946400 [ 7527.498755][T18029] [<805853c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 7527.499100][T18029] Exception stack(0xdfbe1fa8 to 0xdfbe1ff0) [ 7527.499345][T18029] 1fa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 7527.499669][T18029] 1fc0: 00000000 00000000 00316310 00000036 00300000 00000000 00006364 76f080bc [ 7527.499983][T18029] 1fe0: 76f07ec0 76f07eb0 0001929c 00132320 [ 7527.500238][T18029] r10:00000036 r9:86142400 r8:8020029c r7:00000036 r6:00316310 r5:00000000 [ 7527.500535][T18029] r4:00000000 [ 7527.500986][T18029] Code: e596306c e3a04000 e7f33053 e2433612 (e5c34000) [ 7527.502978][T18029] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 7527.539578][ T29] audit: type=1400 audit(7783.446:902): avc: denied { write } for pid=3093 comm="syz-executor" path="pipe:[768]" dev="pipefs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 7527.581071][T18029] Kernel panic - not syncing: Fatal exception [ 7527.583611][T18029] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:49:05 Registers: info registers vcpu 0 CPU#0 R00=85a28000 R01=00000000 R02=000016a2 R03=00000102 R04=82b0ca2c R05=80000113 R06=00000100 R07=00000008 R08=85a30000 R09=85a28000 R10=00080000 R11=df801b6c R12=82af514c R13=df801be8 R14=80504628 R15=80502090 PSR=00000113 ---- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=84fdb000 R01=00000000 R02=84fdb000 R03=85aa8d00 R04=85d87f80 R05=00000001 R06=84fdb000 R07=9a3bae90 R08=00000000 R09=00000000 R10=84fdb000 R11=df805e0c R12=df805e10 R13=df805d70 R14=81aaf2fc R15=802aa464 PSR=60000193 -ZC- A S svc32 s00=62696c2f s01=646f6d2f d00=646f6d2f62696c2f s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000