last executing test programs: 1h2m53.550515857s ago: executing program 0 (id=153): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000540), 0x6) 1h2m53.459876666s ago: executing program 0 (id=154): syz_open_dev$evdev(&(0x7f0000001640), 0x2, 0x2301) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r0, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe80"], 0xec}}, 0xc804) 1h2m53.330474208s ago: executing program 0 (id=155): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1h2m50.719791868s ago: executing program 0 (id=156): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x80, &(0x7f00000000c0)={0x19, 0x7, 0xfffffff0}) 1h2m50.291703629s ago: executing program 0 (id=157): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 1h2m42.548464683s ago: executing program 0 (id=161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, 0x0, 0x0) 1h1m57.312502367s ago: executing program 32 (id=161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, 0x0, 0x0) 56m41.370333082s ago: executing program 1 (id=635): r0 = socket$inet(0x2, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 56m41.241883933s ago: executing program 1 (id=637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003a80)=@newtfilter={0x1334, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1308, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x3, 0x4}]}}, @TCA_BPF_ACT={0x12e8, 0x1, [@m_tunnel_key={0xbc, 0x7f, 0x0, 0x0, {{0xf}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}]}, {0x73, 0x6, "1aaecf13a9ba72e00cb760a431a2c7102a7832bbd3f70fd5c5cafd041730c7607254e96dc4f9f9b5a3ed9b71f385414f54f704ac8f6cca182045666c870d7b36a76ba5af56a12ac4fd492ceb8823f7b693b628966b5854efd8da84490d8c5f29909538e3a106976c6846c99bca0ac9"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0xec, 0x9, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0xfffffffe, 0x3, 0x9e2, 0x60000}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x8000, 0x2, 0xd713, 0x1ff}, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xf01, 0x3, 0xfca2, 0x7}, @local, @multicast1}}]}, {0x4a, 0x6, "6b5f1b1d57175d3d8d1a0604ffc93ff111fc0950e3afa5fa087bf6681c8488443082be5952306acdac61b894067b6d70aef44aa813d604ea4db22bfd30ea59b46897b92a04a7"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x105c, 0x17, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "a3c997381c91d7bf1b0e8029faa30270"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}]}, {0x1004, 0x6, "09e41f15ed4346edab14759f51b2a166990ba4b6c85ea5dc1a0d327c29806ac7f77a258b80f4d46db92ee8217066b11c72fd16bf43b274645dc7be1b2175a1b1966b1b648a44189d9fa9a1bdd03d5a4bd1515f381d0e7151ba52ea1e4eac41f65facfa455a035dedbd04d851148681a2b9e8f3a72046174dc330cf6d1dc92e3eb90379c3819ceb5566e94b5a0184091bac0db8646d0265254a01520816bc6e8e6e83fbb649b85019282c091b2a481dd7a8f808777da44d0f276ed7e87671851ccce29e74dd2c8c70b70cab030c70f6531ee9b95e3e4ee32b7a4a4c9a300012106c18a5db9d6c9dbc34a90269647c773a1da7d09f4236dfe46eb37f120b355cd8477b7475581663e9d04e2cdf717ee40930853dc47009cbb68ae518d9c7e6dfdb7467601cc59b7b9547b78d23690579cd3328cf70eef06f3cdf970b2d2b3bc186e2d030115bffc964e35f2fb7e19fda3cde652032bff00b8a10aca3c6de7e1b78db3bffc936634526261275af1ccd75176f7062c572c79304b63d066c4abf2a7f04f714af98c8cf253e4011c4a84146c47a85a3601cdaec61ae76db6033322222bfb35323c3881fbc3da73ee0221dc06e57ad740cb3530833c8cd27129621b0395b313d39f93bfea03f923c84492e058b983a524c6827d5a046bbf7f8b6376d273e789d22f6f779e8d351e1fb22c49f0122646f949bfd6c02ec181fe67e9d806901b4be7fd296e11f6f37516e5b3a2259851356f528d9bfdafd35a4d9204c0b3329244c922b1ffc491e9250eda99a6aec17bd9104e55cd498271e76a832ea2f74703698b7438ce41af690144f250c089072aea884a290cc70645956693b4783e420fd7b0e7506deb79f854cf57880e5b48480f1c827dc405f34598e9e2f86946c9295fce2ba47354c329f5f76d2fbdb9c7d1bb657610d2c2cecfd5b323a49f2dc3096ea2da435778b0a5033ac9e8d7df3731feb703135d9da0e27c68c8d6413201a52f3cf101141c638a11f3b9917c369224fd85d801088c2d10fff5a4d786cbf8f12fdd4e8537d3c8a9216f97cbf531934f6dc0a245b1dc3e92659f8b791520d841e1bb94ceb17952ef533492e9b7428620a2b3c241fa5098e471fc7dfe057ef3c23873322b44977e7a838b149179f2a1ce3828be10f4b76946a2d80eebcabd704bc992f70821909412a88da25aa244c1c41d5dbee237052ce76a31f8481e44f0be724009b057a9cbe9038c7e82050b46a5ec2eb1841bc689cb75e13db585b5a1ce59cb664a3728716c17df8a4a954c7956205ead3298314e33ecd8ab29481be6cad2c12572b72108c1bb53dd11586d04251c8aa1eafc08738ae16122bb906592e73e822d4765c00ec83d7e259027b83907c186596a315f8033e0d69fbc397c86136fe71264f36c702e2d4a89c933ce74533721aaed4b42bb266f34a2b9ee213cd8819a09244185a6b27077b157800aabbf92acf0c551fdf625607c96bdfd5d05a9f43257722c0e59bcbcc69f6e56cf0298e70ef5bf7559033dfa1efe8b73edea2b90579825bf71fc7756550448dbdce3c7350342ddd85052261100777a5132601dac0a771d042e0891fe4fe5aa7db6a6261dc4cda5be077d163695813f35479d8b7f1ee0b148bdbfbeda508ae46447217aeea8213393b99a68d6aafe2d31dc4fd2d194976b7447aa5f78df296ba24f46c1532cea2239bd669e285f18554faa7cebd603eb0fc665f0d84a38e92116e8bd91f3c10fe14d690597a220769ee6f0d188d5fd2accbef479762b5e064d75f15e4188e607e527c22c55e140ff18e706d7e2f60164f2660bf7ce61391d8a8915632b9f94bd66c1e268231b494df28981bfcaec83be04e1c58808291a0e12f49f71f33fdc43600e491f59b2519e162a4fc0226635942d834df2249d81eaf3bd172d47fc42ad4a01ee145216e1de2979b42ec582c9d204472b4fb55ab3fa2ecce75302c17e5c717d9d128a9e7c3dfb296178ee995fe0124d2c8200a14b36fb31d705c5b42d3fd578b1f46286d93c4591e482eb0dd5a052c437dc32f68905907203906d308086ce70913f0491712747b092fdb9015cdd41cbf5966a2a96e11d509640691a9787f6d6503166c977fe6ee6b8b7076d6a0b4709ced52d773c6b0bdb5046f1e7732fc2fe0d38665ed6775e695ccc3102ae58bf063083e7a9be624785fb2bf47da7fc60fae986d92f83e4bde02c0c91bdbcdc1336c0aaa59140e975bac299714135fdef6471f978eeb8d6479f7aa2e1ea423136cc7e774ca43c1ad1e4aea2f7541112ef704e646159404bc914f9efbee1f566eecfa8a094c9c8396e241563c172839f34023d50a031f161f78bc291574518e0787fc759cf412dda84ca2c0a6fed9f1f656b405a7c2fafc6aae91c02a62d4c52ef5765395ab78b22182285bbc7fe50a388a3265dfd436e0356c2d2114c67a7ad8afc79232d44771b94fe56c91b8ddef29b49491bccffbbc62664fe11cf87fb48d0a4860f0bb7445c62a6083395af9e9daf009437abc86559ace82b3318967ede940a985ca1457832299da02e1f5dfcd0826c6cdeac46c203a1e1f2e701f858a7b2c6fbb1c11218b4fba6adce0062cd9e298c4c685cd607dfc0669c4b6f7e6c02acd3edf824c6f5064c48edcc2bc7e23768f8f8d4589d935501e8cc81a908b90388eb681cc59a76cac4ee78158f439f6c38c137dbbbde17cac2efd3e04055209880f98a4579ca40045686fdc5c1238878fec19f210c10ef33f4d48a5e709571bca2a36d64f80e0a9383c21653fef8ca8654cd6bc7403c95b49bcc514b4e91d054fab3e2eba8a13d8cc04e25e4d2cac4191b280f03b199827235067735626b7df14fb7db59cd0826b6f80d6ac3c5ecb7c0b182a8e885e4f399fe4738f3316b5ff161d6ecd72e34ddf5dba0888873a92d3d5f2539acee226ccff2bc9b693f7c3b3eac8802d6f94337ef6448326bf199705f7e02f8528b4910779bb45da53b6a7e0497e85169df894113bb20ad9e22e2ae2ef0ba0c4446fb4e436f99051ededa10913d998ce07e16ffdadb0d04b10f40f52a0e6262413c597f34baf0fb19d33c2fb292f97bed6d0cc78d758589552186430ffcf2f2f33432908793d139dfa00364cf456d38dbc5483bc128a37781a281b8513cf117cece3849c3a87db1c545f45fb9560d6df0911865f3d8b13022bdc23104673804831d9a13351892df7d39fbab3c98e271de44df64173c6110d722f18ad35c800247796cced190140010e1023f971826bc03a011071bcc740300e1821ee8948824da1a8c3824b8bdb1d4f01b56a839c85866e1654e01be4985a6e70e7ec687e593cfd6a5195e446259f1e3ece2510404020419cfa5732da3e7e354c9f81d153c200d3234e2ee0bd663c624a1c142399916bd89cf3d67e11fb7247ccbaa930daa683927402aa1ccdde416a957e8b7e0fa243363450e7adb58befb8c90ca494edf61c8c374dc97e401d0f8c39d88ffd3daeb27ca2938dcc081ad65a7823acdc83e319169589d3da9e535108a6b95314c950ddd6944f31eb220933118e550987a9dd929dea8d328e3ac917077de6ac1fde17d8e5d5dae79bc0658a0a0c2649a0e28138dff341368ebc6bf817ca4be2d86c9f4fa5573f05293a6680f09bb88946473ee0c3035c5a2e82dcf41a2b1e7099c8763dd7b5818f872eea2949fb43471c048cc0a0073e78318358ee81264ffbe8e633f50c7fd6c115baf261fee9bbda3d3bcec97e91d6993ca6697295eb4bb59e3f2034e32003ace9e946ed76f51ef1067733604dff68f20247c88e6a0b80a571b0071617c6f2f8eea0f49e5b029b756cae95caf7c73ccaa3f390dea55faa5623190394152049887c881aff3eb71cc79b9e02f2213187ca875d5a07c3fb8237867451ebfa85933783abe9634618f8593a3aee63a36e879be0fad4a666d3897e391e67b3626a63648be6d01c2f6caee57b4f0e4b1b0edd5424af5e608a40591ba0746f3d8c62af54c0c6348620324f5eb1e9e98b3329f47a8c0557bbe036964ee91d2747f14a629ae5418407d13d3c64e31a11a81778e8d219b525bdc804af0cd64421710e9748b23e4291ca1e99d385c4e80bab8bd96defc256bc017122e22d5ca9fb09cb8e0392617cd7788ab6d9d5fe218cc1dca7a34e37c40695ef2c5fa18e8cfda276a1df84d79aa137ff51f8e924cbed0481685bd63f134012dd2a27abb6acced767f11e6ea5e171c62b44e07ba9e51ad7b8644f2a46e3c47d4a5acb40612c09db8f150705dc83d0a1d37ea5b3122df7e45ffc2faf0562ec54f9c4a37769dd7e2598f45535506be98c6f73781d6c2f3bf3ebb034e1a5a8f65c5507fcac232a018bedaf9caa5c3f85b8d9aeed359e848d85d2163689f214183d2cd986642801c7bf20825bdf9d96386849353f1ef7c6afc4327e7df0d4ae588c85b7ea5c43fbf3f67df15f84937f3f30caef4e4fee577d016450cdd66eaa3aa894697cacf26338b002cbdf972a29d6ac9d2aab29759b89bf0c27e831153d71f1a4a927739d755f63775e372a7d21ee509133737ca51b4d9ea9b51910073089235d4e4de0cf58c1fa845729719132743efc980465e685764c693e8b5b150e5306b177fa7fbaca1afef7bb1038138cd13b72684bd1b7958c57daf7080a4ca4123aad542317631a430faa52f51d50f9004856943a0f26ffa875ecd5bef828e14a8fec1aca9b3770c451143539b06ac0a8341372cf974a261d23bc75792307b64649b45be674a9f070880b654db935db775e552533c09e17656b2da81d3bda713c9f3bd3b4783d5f7a122e95e308d7a4ca88f8349d65ab52460e045b458433f1dfca70230aefc35e94096314a48e9da2305adae4c72e96dbef6bdaf6456c9c82e4b7e3347894469ce37b096fc1ce739945422fe00e0a8eaf1d76dc5f3050dfa2dfb654403f4ac1c68c5b35f267585398faa7bd31d411c9db034dd4f247ecc74d34e660dfc5610fe28e41db6cd1edd8ec87debd8b4cf9a1478cf7a59b0a47fd1a22c167d109d95eb53803f9b97ce0a5eedb118ca63e47e2511ec47806283531910cde727e40f0bcf4d70f670b4463da9aa775d4cc95748152477cb5635f7f942f3df28edeb230c35401ac38c47a56a6d7581ac8590ef8a1a1d5d0853b15531c222f7023f99c9d9d1c3cfe5f83dd6ea7c4feac12b3f021a8785265c3627689b1ce01208ff5e0c18facdd34bea005a2c3b9aab8785e58a97451e46720999e96a2b5e05d346148f0305e9b0fee35d6e202d5ea2dec2252705af66115fa8760967dcc25cbf9193c520581a59b683be4c4cf1fd2a9a5a3902ea13ec7f1ac03c9d5028d418f1139ddc674028b0518b38971159efad1100c083bfd98a19a69c49ee62b49dd2b88e4feea6f00aa0355dcc68769eb6ab3f4db4eaef5ab53e1b812ca84102e113960d9860d9fa44ba31ba177b967a5cf087777e327753341404ef36759722ea158edcf4c4f3e9b503f37c59b720b656aaf5bdab069c650abdba440cec7fab812056eeb707212e4b080227b59664c1c6a86055d09c39d459228d31d7c054ff153eac6dd4f28916cc9679afc13e149590215925f8c2be7adcf99a937c40d5809025e145fd20299e4d9efcc6e53d3721a1435836722e70795c9c9b70c70b1543e742600a19b8fcfd5098faadd90373b48541eff977ee8a44b8faaf6adc017b5afe943cdb092548d35482b065192667833e81b74d86774a2646e65fc5e1f26f4f955dd0689a04ed7e014ab0a2b92117f718b0d0c96ee8c998d778762862ca52948a1bf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0xe0, 0x15, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5c72}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0xee8, 0x4e1d, 0x5, 0x2, 0x7}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xda}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}]}, {0x62, 0x6, "248e6ae4b024cbb7235873a46eb55f2be2c16ff5a28b372f1f04c0044394284c957b187553eb87daf1c24308223bccf2216741053d68e414df580e94817f4d4bfc4f83d1606861a1265906a5719d68c5a4e8351c58911c7dbdc997d23e73"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x1334}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 56m40.961303616s ago: executing program 1 (id=639): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 56m21.619608444s ago: executing program 1 (id=672): r0 = socket(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) close(0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x2b, 0x4, 0x19401804, 0x2, 0x1a, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) 56m19.878154889s ago: executing program 1 (id=674): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000001c0)=r2) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000380)) 56m17.996194316s ago: executing program 1 (id=676): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 56m17.981779558s ago: executing program 33 (id=676): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 45m15.496652301s ago: executing program 3 (id=1882): socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = socket$inet(0xa, 0x1, 0x84) listen(r0, 0x0) chroot(0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) 45m14.440573853s ago: executing program 3 (id=1885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) ioctl$MON_IOCG_STATS(r3, 0x80089203, 0x0) 44m53.592431614s ago: executing program 3 (id=1890): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x4e, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 44m53.160547697s ago: executing program 3 (id=1891): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x20, 0x22, 0x8, {0x8, 0x2, "9cf8abdc47d3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 44m52.961147939s ago: executing program 3 (id=1892): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = fanotify_init(0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) fanotify_mark(r3, 0x21, 0x101a, r3, 0x0) fanotify_mark(r3, 0x22, 0x4000103b, r3, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x9) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006080)=@delchain={0x9e4, 0x65, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7, 0x18}, {0xb, 0x17c9cedaef6c3850}, {0x7, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x24, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffff}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x7d}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0xc508}, @TCA_CHAIN={0x8, 0xb, 0x40}, @TCA_RATE={0x6, 0x5, {0x8}}, @filter_kind_options=@f_bpf={{0x8}, {0x8ac, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_ACT={0x6c, 0x1, [@m_police={0x30, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x38, 0x1b, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_POLICE={0x82c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x4c, 0x10, 0x1, 0x0, 0x3, 0x5, 0x8001, 0x5, 0x0, 0x3, 0x4, 0x3, 0x6, 0x8, 0x6, 0x5, 0x71, 0x40, 0x0, 0xfffff000, 0x80000001, 0x9, 0x1, 0x9f1, 0x1, 0x5, 0x7f, 0xf, 0x4, 0x595, 0x8, 0x229, 0xacb, 0xebdf, 0xfffffffc, 0x7, 0x2, 0x2, 0x10001, 0x6, 0x0, 0x1, 0xe, 0x2, 0x6, 0x7fdc1630, 0xffff, 0x2, 0x4, 0x400, 0x5, 0xb, 0x8, 0x0, 0x100, 0x8, 0x0, 0x800, 0x9, 0x0, 0x87, 0x10001, 0x401, 0x8001, 0x4, 0x6, 0x9, 0xd, 0x395, 0x80, 0x0, 0xffff5d22, 0xffffffff, 0xcc6b, 0xe00000, 0x3, 0x0, 0x9, 0x7, 0x9, 0x3, 0x5, 0x8001, 0x4, 0x5a, 0x0, 0x5, 0x4, 0x8, 0x8, 0x1, 0x1, 0x2, 0x60000000, 0x9, 0x4, 0x100, 0x4, 0x3, 0x1, 0x0, 0x7, 0x7, 0x7ca, 0x7fff, 0x4, 0x6, 0x1, 0x1, 0x40e, 0x5, 0x7, 0x9, 0x0, 0x3, 0x6, 0x3255, 0x3497, 0x5, 0x5, 0x2, 0xb0, 0x4, 0x8, 0x8000, 0x7, 0x71, 0x0, 0xfc31, 0x9, 0x5, 0x6, 0x8, 0x8000, 0x5f, 0x76, 0x80, 0x8, 0x4, 0x2, 0x6, 0x3, 0x1, 0x5, 0x7, 0x81, 0x0, 0x2, 0xda, 0x8, 0xffff311c, 0x3, 0x8, 0x5b94, 0x83, 0x6, 0x6, 0x7, 0x7, 0x7, 0xc8, 0x894, 0x5e1, 0x1ff, 0x80, 0x401, 0x691, 0x7f, 0x8001, 0xff, 0x81, 0x4, 0x4a34, 0x3, 0x9, 0x8ed, 0x2e29, 0x49f, 0x1, 0x9, 0x2e, 0xfffffffc, 0x5a, 0x800, 0x6a73a8d3, 0x7cea, 0x7f, 0xffffffff, 0x3, 0x616afe1, 0xa8a, 0x1, 0xffffffff, 0x45, 0x5, 0x3, 0x5, 0x3, 0x8, 0x4, 0x2, 0xbd, 0x3, 0xfb, 0x0, 0x9, 0x9, 0x0, 0x7, 0x1, 0x6, 0x9, 0x8, 0xf353, 0x8, 0xf, 0xc, 0x68a, 0x1000, 0xd9, 0x7f, 0x3, 0xa76f, 0x6, 0x80, 0x6, 0x4, 0x7, 0x4, 0x5, 0x3, 0x6, 0x6, 0x101, 0xe56, 0x7, 0xb, 0x4, 0xe0f6, 0x2, 0x3, 0x80, 0x0, 0x0, 0x5, 0x8, 0xa0f, 0x1, 0x4, 0x3, 0x80, 0x92, 0x1, 0x9, 0x8e7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x69e9a317}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x876a}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0xc, 0x1, 0x0, 0x4, 0x0, 0x81, 0x8000, 0x8, 0x9, 0x3, 0x7, 0xe471, 0x3, 0x1, 0x7f, 0x7, 0x2, 0x4, 0x7, 0x1, 0xfffffff3, 0x8, 0x2, 0x6, 0x1, 0xccdb, 0x0, 0x7fff, 0xb6, 0x4, 0xa, 0xffffffc0, 0x3, 0x7fff, 0x5, 0x0, 0x3, 0x9, 0x81, 0x5, 0x1, 0x3, 0x40, 0x8, 0x7, 0x5, 0x700000, 0x9, 0x2c, 0x800, 0xbf9acc6, 0x6, 0x2, 0x7ff, 0x4, 0x4, 0x53, 0x10, 0x8, 0x10000, 0x679, 0x28, 0x0, 0x6, 0x1, 0x6, 0x1, 0x9, 0xffff, 0x6, 0x6, 0xc6cc, 0x2, 0x7, 0x3, 0x0, 0x7, 0x5, 0x6, 0xa, 0x6, 0x8, 0xb518, 0x5, 0x7fffffff, 0x6a91, 0x6, 0xfffffff9, 0x6, 0xdb, 0x2, 0x261a20ef, 0x5, 0x5, 0x9, 0x800, 0x4, 0x5, 0x1d96bfed, 0x0, 0x6, 0xffffffb8, 0x9, 0x7f, 0x40, 0x9, 0xfffffff6, 0x6, 0x20, 0x3109a588, 0x80000000, 0xf, 0xfffffffc, 0x7, 0x1, 0x4, 0x8001, 0x80000000, 0xd, 0x8000, 0x5, 0x45c5, 0x81, 0xd, 0x9, 0x780, 0x0, 0x7ff, 0x7fff, 0x10001, 0x9, 0x3, 0x9, 0x1, 0x6, 0x3, 0x8000, 0xd, 0x8, 0x81, 0x7, 0xfd09, 0x0, 0xc, 0x0, 0x4, 0x866, 0xd05, 0xce1a, 0x1df, 0x7, 0x4, 0x7f, 0x1000, 0x7ff, 0x98, 0x80000001, 0x4851, 0x5, 0x8, 0x401, 0x0, 0x9, 0x800, 0xf, 0x5, 0x7, 0x4, 0x55, 0x85, 0x2, 0x7fff, 0x10000, 0x4, 0xfffffffe, 0x0, 0x6, 0x0, 0x8, 0x80000000, 0x0, 0x1, 0x7, 0x200, 0x7, 0x8, 0x10, 0x6, 0x76c, 0x2, 0x65, 0xfffffff8, 0xa78, 0xffffffff, 0xffffffff, 0xffffffff, 0x10000, 0x2, 0xfffffff9, 0x1, 0x8, 0x80000001, 0x100, 0x0, 0x9, 0x7, 0x4, 0x7, 0x4, 0x8e9, 0x4, 0x3, 0x7, 0x2cad9d15, 0xfffffff2, 0x8, 0x5798, 0x8, 0xa0b3, 0x6, 0xfffffff3, 0x5, 0x2, 0x6, 0x400, 0x0, 0xf9, 0x3, 0x3ff, 0x4, 0x10001, 0x7f, 0x1, 0xcda, 0x8, 0x4, 0x2a1c, 0x2, 0x800, 0xb4, 0xd0cb, 0x2, 0x4, 0x96, 0x1, 0xbc, 0x8001, 0x800000, 0x8, 0xffff, 0x1, 0x34, 0x5, 0x9]}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0xb}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_basic={{0xa}, {0xa0, 0x2, [@TCA_BASIC_ACT={0x94, 0x3, [@m_nat={0x90, 0x11, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x6, 0x6, 0xeb}, @remote, @local, 0xffffffff, 0x1}}]}, {0x40, 0x6, "dd0f5786dd0b12332010fe53672bced00059efb4616a5dbb49a0f1c638075cac3781f005bc13bd82519fa93cf0913003afef14d8366ef7e7c419ea6a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x7}}]}}]}, 0x9e4}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x40, 0x2, 0x1000, 0xa, 0x5, 0x79, 0x3, 0x80008, 0x0, 0xffffffff, 0x1, 0x808, 0x1, 0x5, 0x9, 0x8, 0xa, 0x3, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0x7fff, 0x0, 0xfff7fff8]}) 44m52.679544353s ago: executing program 3 (id=1893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x62020600) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4000801) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, 0x0) 44m6.893043918s ago: executing program 34 (id=1893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x62020600) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4000801) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, 0x0) 2m16.042272957s ago: executing program 2 (id=5276): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m15.701596562s ago: executing program 2 (id=5277): r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, 0x0, 0x0) socket(0x200000000000011, 0x2, 0xd) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x101440, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) waitid(0x20, 0x0, 0x0, 0x8, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) 2m14.321101766s ago: executing program 2 (id=5278): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000100)='overlay\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) 2m13.941735675s ago: executing program 2 (id=5279): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$inet(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m13.502547495s ago: executing program 2 (id=5280): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r4, &(0x7f0000000100), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r5, &(0x7f0000000180), 0x1000) 1m54.410826223s ago: executing program 2 (id=5283): personality(0x8) uname(&(0x7f0000000180)=""/224) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0xe309b000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) lseek(r3, 0x289e0cb5, 0x0) 1m9.391533053s ago: executing program 35 (id=5283): personality(0x8) uname(&(0x7f0000000180)=""/224) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0xe309b000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) lseek(r3, 0x289e0cb5, 0x0) 20.751800196s ago: executing program 5 (id=5311): r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', 0x0}) 20.050705352s ago: executing program 5 (id=5312): r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, 0x0, 0x0) socket(0x200000000000011, 0x2, 0xd) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x101440, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) waitid(0x20, 0x0, 0x0, 0x8, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r4) 18.327271063s ago: executing program 4 (id=5313): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x200000000000000}) 8.750936759s ago: executing program 5 (id=5314): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) r5 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r5, &(0x7f0000019100)=""/102363, 0x18fdb, 0x6) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000019080)=0x1) r6 = socket$inet(0x2, 0xa, 0x0) sendmmsg$sock(r6, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "653c1b4e82844461df245d602e571157637b2b264d65f76409a869d62cec2666", "2e2bb08b16c51ac62f5a95c880e2467137a74f00e71e64160700", "aed417062feee7c199b98743ad7e98588e00", "9fcc63648d5ca6f91b8d245971ee8a08460e7400", "21acd16f247aae4d9e6d207292339e96294b6d8b1491fae6922d6d21831cdac0", "81f44df52305410a0af0460a", 0x4, 0x5, 0x6, 0x7, 0x7ffffffd}}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x8000, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x571f68543cec8180) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 5.399425299s ago: executing program 4 (id=5315): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x138, 0x10, 0x5, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@remote, 0x1234, 0x32}, @in=@local, {}, {}, {}, 0x2, 0x1234, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x0) 4.121420414s ago: executing program 5 (id=5316): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', 0x0}) 3.880504413s ago: executing program 5 (id=5317): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB='$'], 0x28}, 0xc000) 3.740660914s ago: executing program 4 (id=5318): r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, 0x0, 0x0) socket(0x200000000000011, 0x2, 0xd) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x101440, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) waitid(0x20, 0x0, 0x0, 0x8, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r4) 3.602529343s ago: executing program 5 (id=5319): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x200000000000000}) 2.712982883s ago: executing program 4 (id=5320): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') prlimit64(0x0, 0xa, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$input_event(r0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 91.197752ms ago: executing program 4 (id=5321): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', 0x0}) 0s ago: executing program 4 (id=5322): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4, 0x7, 0x4, 0x1000, 0x8, 0x5, 0x79, 0x3, 0x8000a, 0xfffffffe, 0xffffffff, 0x4, 0x2, 0x4, 0x100, 0x9, 0xfffffffb, 0x10, 0x13, 0x1000, 0x89, 0x3, 0xfffffffe, 0x20001e58, 0x3, 0xf39e, 0x3, 0x8, 0xa, 0x0, 0xfffffff8]}) kernel console output (not intermixed with test programs): 1623ca8>] (__sock_sendmsg) from [<81624d8c>] (____sys_sendmsg+0x238/0x2c4) [ 3140.634037][T21221] r7:00000000 r6:00000000 r5:8359b940 r4:dfa51f28 [ 3140.634054][T21221] [<81624b54>] (____sys_sendmsg) from [<8162518c>] (___sys_sendmsg+0x9c/0xd0) [ 3140.634171][T21221] r10:00000128 r9:20000780 r8:20000001 r7:00000000 r6:8359b940 r5:dfa51f28 [ 3140.634192][T21221] r4:00000000 [ 3140.634211][T21221] [<816250f0>] (___sys_sendmsg) from [<816272f4>] (__sys_sendmsg+0x8c/0xe0) [ 3140.634284][T21221] r9:8477bd40 r8:868fdf80 r7:20000001 r6:20000780 r5:868fdf81 r4:00000004 [ 3140.634303][T21221] [<81627268>] (__sys_sendmsg) from [<8162735c>] (sys_sendmsg+0x14/0x18) [ 3140.634364][T21221] r8:8020029c r7:00000128 r6:0012f344 r5:00000000 r4:00000000 [ 3140.634382][T21221] [<81627348>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3140.634431][T21221] Exception stack(0xdfa51fa8 to 0xdfa51ff0) [ 3140.634470][T21221] 1fa0: 00000000 00000000 00000004 20000780 20000001 00000000 [ 3140.634508][T21221] 1fc0: 00000000 00000000 0012f344 00000128 003562d8 00000000 00000001 76f0d0dc [ 3140.634536][T21221] 1fe0: 76f0ce88 76f0ce78 00018ee8 00130940 [ 3141.387007][T21231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3141.389548][T21231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3141.884654][T21234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3141.891766][T21234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3144.549343][T21202] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3150.626373][T21253] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3158.785010][T21294] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3159.748886][ T28] audit: type=1400 audit(3670.654:1652): avc: denied { write } for pid=21320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3159.781375][ T28] audit: type=1400 audit(3670.684:1653): avc: denied { create } for pid=21320 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3159.781774][ T28] audit: type=1400 audit(3670.684:1654): avc: denied { write open } for pid=21320 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth0.ra" dev="tmpfs" ino=117 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3159.782179][ T28] audit: type=1400 audit(3670.684:1655): avc: denied { append } for pid=21320 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" dev="tmpfs" ino=117 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3159.815309][ T28] audit: type=1400 audit(3670.734:1656): avc: denied { getattr } for pid=21320 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3160.286764][ T28] audit: type=1400 audit(3671.204:1657): avc: denied { read } for pid=21333 comm="cmp" name="resolv.conf" dev="tmpfs" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3160.774998][ T28] audit: type=1400 audit(3671.694:1658): avc: denied { write } for pid=21335 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3160.783811][ T28] audit: type=1400 audit(3671.704:1659): avc: denied { unlink } for pid=21335 comm="rm" name="resolv.conf.eth0.ra" dev="tmpfs" ino=117 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3161.081088][T21331] veth0_vlan: left promiscuous mode [ 3162.431066][T21363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3162.433364][T21363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3165.740579][T21337] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3168.932208][T21405] fuse: Bad value for 'fd' [ 3172.101408][T21432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3172.103386][T21432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3175.420649][T21408] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3176.812405][T21453] FAULT_INJECTION: forcing a failure. [ 3176.812405][T21453] name failslab, interval 1, probability 0, space 0, times 0 [ 3176.814553][T21453] CPU: 0 UID: 0 PID: 21453 Comm: syz.4.4444 Not tainted syzkaller #0 PREEMPT [ 3176.814693][T21453] Hardware name: ARM-Versatile Express [ 3176.814720][T21453] Call trace: [ 3176.814759][T21453] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3176.814870][T21453] r7:60000013 r6:60000013 r5:82332d18 r4:00000000 [ 3176.814892][T21453] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 3176.814950][T21453] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 3176.815017][T21453] r7:855724c0 r6:00000000 r5:855724c0 r4:82b1ac48 [ 3176.815033][T21453] [<8021e610>] (dump_stack) from [<809f2a20>] (should_fail_ex+0x1c0/0x224) [ 3176.815142][T21453] [<809f2860>] (should_fail_ex) from [<80567a4c>] (should_failslab+0x6c/0x94) [ 3176.815230][T21453] r8:00000000 r7:855724c0 r6:830016c0 r5:00000c40 r4:00001000 [ 3176.815250][T21453] [<805679e0>] (should_failslab) from [<8054642c>] (__kmalloc_noprof+0xa8/0x3c8) [ 3176.815309][T21453] [<80546384>] (__kmalloc_noprof) from [<8083317c>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 3176.815384][T21453] r10:00000000 r9:830bfc00 r8:00000000 r7:85c353b8 r6:866a28a8 r5:00001000 [ 3176.815405][T21453] r4:00000000 [ 3176.815421][T21453] [<80833140>] (tomoyo_realpath_from_path) from [<8082f244>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3176.815491][T21453] r10:00000000 r9:00000003 r8:866a2880 r7:00008982 r6:81cdd7ec r5:00000004 [ 3176.815515][T21453] r4:866a28a8 r3:828d2400 [ 3176.815530][T21453] [<8082f178>] (tomoyo_path_number_perm) from [<80833b98>] (tomoyo_file_ioctl+0x1c/0x20) [ 3176.815600][T21453] r10:855724c0 r9:00000003 r8:866a2880 r7:20000000 r6:20000000 r5:00008982 [ 3176.815623][T21453] r4:866a2880 [ 3176.815643][T21453] [<80833b7c>] (tomoyo_file_ioctl) from [<807dea8c>] (security_file_ioctl+0x80/0x1d4) [ 3176.815702][T21453] [<807dea0c>] (security_file_ioctl) from [<805baed4>] (sys_ioctl+0x4c/0xb5c) [ 3176.815769][T21453] r7:20000000 r6:00008982 r5:866a2881 r4:00000000 [ 3176.815787][T21453] [<805bae88>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3176.815841][T21453] Exception stack(0xe04f5fa8 to 0xe04f5ff0) [ 3176.815881][T21453] 5fa0: 00000000 00000000 00000003 00008982 20000000 00000000 [ 3176.815917][T21453] 5fc0: 00000000 00000000 0012f344 00000036 003562d8 00000000 00000001 76f0d0dc [ 3176.815947][T21453] 5fe0: 76f0ce88 76f0ce78 00018ee8 00130940 [ 3176.815984][T21453] r10:00000036 r9:855724c0 r8:8020029c r7:00000036 r6:0012f344 r5:00000000 [ 3176.816004][T21453] r4:00000000 [ 3176.842921][T21453] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3179.194477][T21478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3179.206119][T21478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3182.540854][T21457] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3193.904944][T21520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3193.908433][T21520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3195.178994][T21541] FAULT_INJECTION: forcing a failure. [ 3195.178994][T21541] name failslab, interval 1, probability 0, space 0, times 0 [ 3195.220777][T21541] CPU: 0 UID: 0 PID: 21541 Comm: syz.4.4462 Not tainted syzkaller #0 PREEMPT [ 3195.220935][T21541] Hardware name: ARM-Versatile Express [ 3195.220966][T21541] Call trace: [ 3195.221011][T21541] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3195.221136][T21541] r7:60000113 r6:60000113 r5:82332d18 r4:00000000 [ 3195.221160][T21541] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 3195.221224][T21541] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 3195.221293][T21541] r7:00000000 r6:00000000 r5:83980000 r4:82b1ac48 [ 3195.221313][T21541] [<8021e610>] (dump_stack) from [<809f2a20>] (should_fail_ex+0x1c0/0x224) [ 3195.221379][T21541] [<809f2860>] (should_fail_ex) from [<80567a4c>] (should_failslab+0x6c/0x94) [ 3195.221462][T21541] r8:83980000 r7:00000000 r6:83001300 r5:00000cc0 r4:00000080 [ 3195.221483][T21541] [<805679e0>] (should_failslab) from [<80546ef0>] (__kvmalloc_node_noprof+0xb8/0x530) [ 3195.221548][T21541] [<80546e38>] (__kvmalloc_node_noprof) from [<809130bc>] (io_alloc_cache_init+0x3c/0x6c) [ 3195.221630][T21541] r10:86ac7c14 r9:00000000 r8:00000000 r7:00000060 r6:00000000 r5:00000020 [ 3195.221657][T21541] r4:86ac7e54 [ 3195.221676][T21541] [<80913080>] (io_alloc_cache_init) from [<80919d10>] (io_futex_cache_init+0x20/0x24) [ 3195.221754][T21541] r9:00000000 r8:ffffffff r7:86ac7d00 r6:86ac7ec0 r5:86ac7c00 r4:83980000 [ 3195.221777][T21541] [<80919cf0>] (io_futex_cache_init) from [<808fd850>] (io_uring_setup+0x304/0x87c) [ 3195.221838][T21541] [<808fd54c>] (io_uring_setup) from [<808fde10>] (sys_io_uring_setup+0x48/0x88) [ 3195.221913][T21541] r10:000001a9 r9:83980000 r8:8020029c r7:000001a9 r6:00004175 r5:20000180 [ 3195.221971][T21541] r4:82a0b710 [ 3195.221991][T21541] [<808fddc8>] (sys_io_uring_setup) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3195.222050][T21541] Exception stack(0xea8edfa8 to 0xea8edff0) [ 3195.222097][T21541] dfa0: 00000001 00000003 00004175 20000180 20000400 00320000 [ 3195.222147][T21541] dfc0: 00000001 00000003 0010bb64 000001a9 20000040 00000000 00000001 76f0d0dc [ 3195.222180][T21541] dfe0: 76f0ce48 76f0ce38 00014854 00130940 [ 3195.222217][T21541] r7:000001a9 r6:0010bb64 r5:00000003 r4:00000001 [ 3195.832017][T21546] FAULT_INJECTION: forcing a failure. [ 3195.832017][T21546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3195.838971][T21546] CPU: 0 UID: 0 PID: 21546 Comm: syz.2.4464 Not tainted syzkaller #0 PREEMPT [ 3195.839145][T21546] Hardware name: ARM-Versatile Express [ 3195.839177][T21546] Call trace: [ 3195.839218][T21546] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3195.839328][T21546] r7:60000013 r6:60000013 r5:82332d18 r4:00000000 [ 3195.839350][T21546] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 3195.839403][T21546] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 3195.839672][T21546] r7:00000000 r6:00000000 r5:83fa3100 r4:82b53188 [ 3195.839698][T21546] [<8021e610>] (dump_stack) from [<809f2a20>] (should_fail_ex+0x1c0/0x224) [ 3195.839775][T21546] [<809f2860>] (should_fail_ex) from [<809f2a98>] (should_fail+0x14/0x18) [ 3195.839869][T21546] r8:76f63f08 r7:00000000 r6:00000000 r5:ea92df68 r4:00000002 [ 3195.839887][T21546] [<809f2a84>] (should_fail) from [<809f2ab8>] (should_fail_usercopy+0x1c/0x20) [ 3195.839948][T21546] [<809f2a9c>] (should_fail_usercopy) from [<805df56c>] (simple_read_from_buffer+0x80/0x140) [ 3195.840015][T21546] [<805df4ec>] (simple_read_from_buffer) from [<80663700>] (proc_fail_nth_read+0xb8/0x108) [ 3195.840102][T21546] r10:80663648 r9:00000001 r8:00000002 r7:ea92df68 r6:0000000f r5:76f63f08 [ 3195.840128][T21546] r4:83fa3100 r3:ea92de9f [ 3195.840145][T21546] [<80663648>] (proc_fail_nth_read) from [<8059f270>] (vfs_read+0xc0/0x328) [ 3195.840217][T21546] r8:83fa3100 r7:ea92df68 r6:76f63f08 r5:85712b00 r4:0000000f [ 3195.840236][T21546] [<8059f1b0>] (vfs_read) from [<8059febc>] (ksys_read+0x74/0xec) [ 3195.840307][T21546] r10:00000003 r9:83fa3100 r8:8020029c r7:00000000 r6:00000000 r5:85712b00 [ 3195.840328][T21546] r4:85712b03 [ 3195.840345][T21546] [<8059fe48>] (ksys_read) from [<8059ff44>] (sys_read+0x10/0x14) [ 3195.840410][T21546] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 3195.840427][T21546] [<8059ff34>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3195.840478][T21546] Exception stack(0xea92dfa8 to 0xea92dff0) [ 3195.840523][T21546] dfa0: 00000000 00000000 00000004 76f63f08 0000000f 00000000 [ 3195.840562][T21546] dfc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76f640dc [ 3195.840593][T21546] dfe0: 76f63e58 76f63e44 0010bb64 00112748 [ 3201.661863][T21549] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3202.194364][T21574] FAULT_INJECTION: forcing a failure. [ 3202.194364][T21574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3202.230568][T21574] CPU: 0 UID: 0 PID: 21574 Comm: syz.2.4468 Not tainted syzkaller #0 PREEMPT [ 3202.230734][T21574] Hardware name: ARM-Versatile Express [ 3202.230766][T21574] Call trace: [ 3202.230810][T21574] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3202.230931][T21574] r7:60000113 r6:60000113 r5:82332d18 r4:00000000 [ 3202.230953][T21574] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 3202.231015][T21574] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 3202.231086][T21574] r7:00000000 r6:00000000 r5:840bd5c0 r4:82b53188 [ 3202.231120][T21574] [<8021e610>] (dump_stack) from [<809f2a20>] (should_fail_ex+0x1c0/0x224) [ 3202.231190][T21574] [<809f2860>] (should_fail_ex) from [<809f2a98>] (should_fail+0x14/0x18) [ 3202.231266][T21574] r8:76f63f08 r7:00000000 r6:00000000 r5:ea9e9f68 r4:00000002 [ 3202.231285][T21574] [<809f2a84>] (should_fail) from [<809f2ab8>] (should_fail_usercopy+0x1c/0x20) [ 3202.231348][T21574] [<809f2a9c>] (should_fail_usercopy) from [<805df56c>] (simple_read_from_buffer+0x80/0x140) [ 3202.231414][T21574] [<805df4ec>] (simple_read_from_buffer) from [<80663700>] (proc_fail_nth_read+0xb8/0x108) [ 3202.231495][T21574] r10:80663648 r9:00000001 r8:00000002 r7:ea9e9f68 r6:0000000f r5:76f63f08 [ 3202.231521][T21574] r4:840bd5c0 r3:ea9e9e9f [ 3202.231540][T21574] [<80663648>] (proc_fail_nth_read) from [<8059f270>] (vfs_read+0xc0/0x328) [ 3202.231623][T21574] r8:840bd5c0 r7:ea9e9f68 r6:76f63f08 r5:867fef80 r4:0000000f [ 3202.231646][T21574] [<8059f1b0>] (vfs_read) from [<8059febc>] (ksys_read+0x74/0xec) [ 3202.231724][T21574] r10:00000003 r9:840bd5c0 r8:8020029c r7:00000000 r6:00000000 r5:867fef80 [ 3202.231748][T21574] r4:867fef83 [ 3202.231767][T21574] [<8059fe48>] (ksys_read) from [<8059ff44>] (sys_read+0x10/0x14) [ 3202.231841][T21574] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 3202.231861][T21574] [<8059ff34>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3202.231919][T21574] Exception stack(0xea9e9fa8 to 0xea9e9ff0) [ 3202.231965][T21574] 9fa0: 00000000 00000000 00000005 76f63f08 0000000f 00000000 [ 3202.232007][T21574] 9fc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76f640dc [ 3202.232041][T21574] 9fe0: 76f63e58 76f63e44 0010bb64 00112748 [ 3207.864503][T21612] SELinux: policydb magic number 0x682c0697 does not match expected magic number 0xf97cff8c [ 3207.865464][ T28] audit: type=1400 audit(3718.784:1660): avc: denied { load_policy } for pid=21611 comm="syz.2.4474" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 3207.867369][T21612] SELinux: failed to load policy [ 3211.260635][T21590] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3213.857203][T21638] FAULT_INJECTION: forcing a failure. [ 3213.857203][T21638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3213.858924][T21638] CPU: 0 UID: 0 PID: 21638 Comm: syz.2.4479 Not tainted syzkaller #0 PREEMPT [ 3213.859007][T21638] Hardware name: ARM-Versatile Express [ 3213.859033][T21638] Call trace: [ 3213.859073][T21638] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3213.859194][T21638] r7:60000013 r6:60000013 r5:82332d18 r4:00000000 [ 3213.859217][T21638] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 3213.859277][T21638] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 3213.859347][T21638] r7:00000000 r6:00000000 r5:84193100 r4:82b53188 [ 3213.859367][T21638] [<8021e610>] (dump_stack) from [<809f2a20>] (should_fail_ex+0x1c0/0x224) [ 3213.859432][T21638] [<809f2860>] (should_fail_ex) from [<809f2a98>] (should_fail+0x14/0x18) [ 3213.859505][T21638] r8:76f63f08 r7:00000000 r6:00000000 r5:eac09f68 r4:00000002 [ 3213.859526][T21638] [<809f2a84>] (should_fail) from [<809f2ab8>] (should_fail_usercopy+0x1c/0x20) [ 3213.859588][T21638] [<809f2a9c>] (should_fail_usercopy) from [<805df56c>] (simple_read_from_buffer+0x80/0x140) [ 3213.859654][T21638] [<805df4ec>] (simple_read_from_buffer) from [<80663700>] (proc_fail_nth_read+0xb8/0x108) [ 3213.859794][T21638] r10:80663648 r9:00000001 r8:00000002 r7:eac09f68 r6:0000000f r5:76f63f08 [ 3213.859825][T21638] r4:84193100 r3:eac09e9f [ 3213.859843][T21638] [<80663648>] (proc_fail_nth_read) from [<8059f270>] (vfs_read+0xc0/0x328) [ 3213.859924][T21638] r8:84193100 r7:eac09f68 r6:76f63f08 r5:85715180 r4:0000000f [ 3213.859946][T21638] [<8059f1b0>] (vfs_read) from [<8059febc>] (ksys_read+0x74/0xec) [ 3213.860027][T21638] r10:00000003 r9:84193100 r8:8020029c r7:00000000 r6:00000000 r5:85715180 [ 3213.860049][T21638] r4:85715183 [ 3213.860066][T21638] [<8059fe48>] (ksys_read) from [<8059ff44>] (sys_read+0x10/0x14) [ 3213.860147][T21638] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 3213.860165][T21638] [<8059ff34>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3213.860219][T21638] Exception stack(0xeac09fa8 to 0xeac09ff0) [ 3213.860261][T21638] 9fa0: 00000000 00000000 00000003 76f63f08 0000000f 00000000 [ 3213.860301][T21638] 9fc0: 00000000 00000000 00000000 00000003 003562d8 00000000 003d0f00 76f640dc [ 3213.860332][T21638] 9fe0: 76f63e58 76f63e44 0010bb64 00112748 [ 3214.063665][T21644] FAULT_INJECTION: forcing a failure. [ 3214.063665][T21644] name failslab, interval 1, probability 0, space 0, times 0 [ 3214.071903][T21644] CPU: 0 UID: 0 PID: 21644 Comm: syz.4.4481 Not tainted syzkaller #0 PREEMPT [ 3214.072023][T21644] Hardware name: ARM-Versatile Express [ 3214.072041][T21644] Call trace: [ 3214.072063][T21644] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3214.072128][T21644] r7:60000013 r6:60000013 r5:82332d18 r4:00000000 [ 3214.072140][T21644] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 3214.072168][T21644] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 3214.072200][T21644] r7:84193100 r6:00000000 r5:84193100 r4:82b1ac48 [ 3214.072209][T21644] [<8021e610>] (dump_stack) from [<809f2a20>] (should_fail_ex+0x1c0/0x224) [ 3214.072241][T21644] [<809f2860>] (should_fail_ex) from [<80567a4c>] (should_failslab+0x6c/0x94) [ 3214.072281][T21644] r8:00000000 r7:84193100 r6:83001240 r5:00000d40 r4:0000001d [ 3214.072290][T21644] [<805679e0>] (should_failslab) from [<8054642c>] (__kmalloc_noprof+0xa8/0x3c8) [ 3214.072319][T21644] [<80546384>] (__kmalloc_noprof) from [<80833088>] (tomoyo_encode2+0x64/0xec) [ 3214.072355][T21644] r10:00000fff r9:830c0000 r8:00000000 r7:8343c2a8 r6:857151a8 r5:86221ffc [ 3214.072365][T21644] r4:86221fea [ 3214.072373][T21644] [<80833024>] (tomoyo_encode2) from [<80833134>] (tomoyo_encode+0x24/0x30) [ 3214.072406][T21644] r9:830c0000 r8:00000000 r7:8343c2a8 r6:857151a8 r5:00001000 r4:86221feb [ 3214.072415][T21644] [<80833110>] (tomoyo_encode) from [<808331c0>] (tomoyo_realpath_from_path+0x80/0x16c) [ 3214.072446][T21644] r5:00001000 r4:86221000 [ 3214.072454][T21644] [<80833140>] (tomoyo_realpath_from_path) from [<8082f244>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3214.072489][T21644] r10:00000000 r9:00000003 r8:85715180 r7:80044dff r6:81cdd7ec r5:00000004 [ 3214.072500][T21644] r4:857151a8 r3:828d2400 [ 3214.072508][T21644] [<8082f178>] (tomoyo_path_number_perm) from [<80833b98>] (tomoyo_file_ioctl+0x1c/0x20) [ 3214.072544][T21644] r10:84193100 r9:00000003 r8:85715180 r7:20000040 r6:20000040 r5:80044dff [ 3214.072553][T21644] r4:85715180 [ 3214.072561][T21644] [<80833b7c>] (tomoyo_file_ioctl) from [<807dea8c>] (security_file_ioctl+0x80/0x1d4) [ 3214.072599][T21644] [<807dea0c>] (security_file_ioctl) from [<805baed4>] (sys_ioctl+0x4c/0xb5c) [ 3214.072634][T21644] r7:20000040 r6:80044dff r5:85715181 r4:00000000 [ 3214.072643][T21644] [<805bae88>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3214.072668][T21644] Exception stack(0xeaabdfa8 to 0xeaabdff0) [ 3214.072689][T21644] dfa0: 00000000 00000000 00000003 80044dff 20000040 00000000 [ 3214.072708][T21644] dfc0: 00000000 00000000 0012f344 00000036 003562d8 00000000 00000001 76f0d0dc [ 3214.072722][T21644] dfe0: 76f0ce88 76f0ce78 00018ee8 00130940 [ 3214.072741][T21644] r10:00000036 r9:84193100 r8:8020029c r7:00000036 r6:0012f344 r5:00000000 [ 3214.072751][T21644] r4:00000000 [ 3214.095066][T21644] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3215.363351][T21656] fuse: Bad value for 'rootmode' [ 3215.805259][ T28] audit: type=1400 audit(3726.724:1661): avc: granted { setsecparam } for pid=21657 comm="syz.4.4488" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 3216.063790][T21661] FAULT_INJECTION: forcing a failure. [ 3216.063790][T21661] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3216.070410][T21661] CPU: 0 UID: 0 PID: 21661 Comm: syz.4.4490 Not tainted syzkaller #0 PREEMPT [ 3216.070564][T21661] Hardware name: ARM-Versatile Express [ 3216.070595][T21661] Call trace: [ 3216.070656][T21661] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3216.070771][T21661] r7:60000113 r6:60000113 r5:82332d18 r4:00000000 [ 3216.070794][T21661] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 3216.070855][T21661] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 3216.070924][T21661] r7:00000001 r6:00000000 r5:84773d40 r4:82b1ac9c [ 3216.070943][T21661] [<8021e610>] (dump_stack) from [<809f2a20>] (should_fail_ex+0x1c0/0x224) [ 3216.071009][T21661] [<809f2860>] (should_fail_ex) from [<80567adc>] (should_fail_alloc_page+0x68/0x74) [ 3216.071092][T21661] r8:eb2a9db4 r7:00000001 r6:00000000 r5:00140cca r4:eb2a9dc8 [ 3216.071115][T21661] [<80567a74>] (should_fail_alloc_page) from [<8052c2e8>] (prepare_alloc_pages+0xf8/0x1b8) [ 3216.071182][T21661] [<8052c1f0>] (prepare_alloc_pages) from [<80535158>] (__alloc_frozen_pages_noprof+0xb0/0x1808) [ 3216.071260][T21661] r10:00000000 r9:87036400 r8:84773d40 r7:76f0b000 r6:00000000 r5:00140cca [ 3216.071284][T21661] r4:eb2a9eb8 [ 3216.071302][T21661] [<805350a8>] (__alloc_frozen_pages_noprof) from [<80536924>] (__folio_alloc_noprof+0x14/0x6c) [ 3216.071379][T21661] r10:00000040 r9:87036400 r8:76f0b000 r7:76f0b000 r6:86ffcd80 r5:00000000 [ 3216.071402][T21661] r4:eb2a9eb8 [ 3216.071420][T21661] [<80536910>] (__folio_alloc_noprof) from [<80500c78>] (do_anonymous_page+0xf0/0x650) [ 3216.071489][T21661] r5:00000000 r4:eb2a9eb8 [ 3216.071508][T21661] [<80500b88>] (do_anonymous_page) from [<80503ae4>] (handle_mm_fault+0x5bc/0x6b8) [ 3216.071586][T21661] r10:00000040 r9:00000000 r8:00000000 r7:eb2a9fb0 r6:76f0be4c r5:84773d40 [ 3216.071617][T21661] r4:00001255 [ 3216.071757][T21661] [<80503528>] (handle_mm_fault) from [<802330bc>] (do_page_fault+0x21c/0x4d0) [ 3216.071843][T21661] r10:00000002 r9:87036400 r8:00000255 r7:84773d40 r6:00000a07 r5:76f0be4c [ 3216.071868][T21661] r4:eb2a9fb0 [ 3216.071887][T21661] [<80232ea0>] (do_page_fault) from [<8023353c>] (do_DataAbort+0x38/0xac) [ 3216.071958][T21661] r10:00000001 r9:00000000 r8:80232ea0 r7:eb2a9fb0 r6:76f0be4c r5:00000a07 [ 3216.071982][T21661] r4:82a1ec20 [ 3216.072000][T21661] [<80233504>] (do_DataAbort) from [<80200edc>] (__dabt_usr+0x5c/0x60) [ 3216.072051][T21661] Exception stack(0xeb2a9fb0 to 0xeb2a9ff8) [ 3216.072086][T21661] 9fa0: 200000c0 00000005 00000000 00000000 [ 3216.072124][T21661] 9fc0: 0001cc20 200000c0 00000000 0018f00c 003562d8 00000000 00000001 76f0d0dc [ 3216.072159][T21661] 9fe0: 00000000 76f0be48 00018ec8 0001cc2c 20000010 ffffffff [ 3216.072193][T21661] r8:828c9044 r7:84773d40 r6:ffffffff r5:20000010 r4:0001cc2c [ 3216.110350][T21661] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 3218.843254][T21673] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21673 comm=syz.4.4494 [ 3219.793124][T21681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3219.793755][T21681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3221.329328][ T28] audit: type=1400 audit(3732.244:1662): avc: denied { getattr } for pid=21691 comm="syz.4.4499" name="/" dev="nsfs" ino=4026532835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 3222.544026][T21703] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21703 comm=syz.2.4501 [ 3225.773086][T21728] FAULT_INJECTION: forcing a failure. [ 3225.773086][T21728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3225.774473][T21728] CPU: 0 UID: 0 PID: 21728 Comm: syz.2.4507 Not tainted syzkaller #0 PREEMPT [ 3225.774561][T21728] Hardware name: ARM-Versatile Express [ 3225.774590][T21728] Call trace: [ 3225.774640][T21728] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3225.774738][T21728] r7:60000013 r6:60000013 r5:82332d18 r4:00000000 [ 3225.774755][T21728] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 3225.774803][T21728] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 3225.774859][T21728] r7:20000440 r6:00000000 r5:8416d5c0 r4:82b53188 [ 3225.774873][T21728] [<8021e610>] (dump_stack) from [<809f2a20>] (should_fail_ex+0x1c0/0x224) [ 3225.774926][T21728] [<809f2860>] (should_fail_ex) from [<809f2a98>] (should_fail+0x14/0x18) [ 3225.774988][T21728] r8:00000000 r7:20000440 r6:00000014 r5:00000000 r4:ebd79f38 [ 3225.775002][T21728] [<809f2a84>] (should_fail) from [<809f2ab8>] (should_fail_usercopy+0x1c/0x20) [ 3225.775053][T21728] [<809f2a9c>] (should_fail_usercopy) from [<80929c5c>] (_copy_from_iter+0x64/0x7c4) [ 3225.775115][T21728] [<80929bf8>] (_copy_from_iter) from [<81a10980>] (isotp_sendmsg+0x2e4/0x968) [ 3225.775182][T21728] r10:00000014 r9:ebd79f28 r8:00000000 r7:86f344b8 r6:ebd79f38 r5:86f32000 [ 3225.775200][T21728] r4:00000014 [ 3225.775213][T21728] [<81a1069c>] (isotp_sendmsg) from [<81623cec>] (__sock_sendmsg+0x44/0x78) [ 3225.775278][T21728] r10:00000000 r9:00000000 r8:ebd79dd4 r7:00000000 r6:85c136c0 r5:ebd79f28 [ 3225.775295][T21728] r4:00000000 [ 3225.775309][T21728] [<81623ca8>] (__sock_sendmsg) from [<81624d8c>] (____sys_sendmsg+0x238/0x2c4) [ 3225.775368][T21728] r7:00000000 r6:00000000 r5:85c136c0 r4:ebd79f28 [ 3225.775382][T21728] [<81624b54>] (____sys_sendmsg) from [<8162518c>] (___sys_sendmsg+0x9c/0xd0) [ 3225.775447][T21728] r10:00000128 r9:20000580 r8:00000000 r7:00000000 r6:85c136c0 r5:ebd79f28 [ 3225.775464][T21728] r4:00000000 [ 3225.775477][T21728] [<816250f0>] (___sys_sendmsg) from [<816272f4>] (__sys_sendmsg+0x8c/0xe0) [ 3225.775537][T21728] r9:8416d5c0 r8:83828c80 r7:00000000 r6:20000580 r5:83828c81 r4:00000003 [ 3225.775553][T21728] [<81627268>] (__sys_sendmsg) from [<8162735c>] (sys_sendmsg+0x14/0x18) [ 3225.775609][T21728] r8:8020029c r7:00000128 r6:0012f344 r5:00000000 r4:00000000 [ 3225.775624][T21728] [<81627348>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3225.775666][T21728] Exception stack(0xebd79fa8 to 0xebd79ff0) [ 3225.775701][T21728] 9fa0: 00000000 00000000 00000003 20000580 00000000 00000000 [ 3225.775734][T21728] 9fc0: 00000000 00000000 0012f344 00000128 003562d8 00000000 00000001 76f640dc [ 3225.775758][T21728] 9fe0: 76f63e88 76f63e78 00018ee8 00130940 [ 3234.220991][T21748] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3234.494288][T21781] FAULT_INJECTION: forcing a failure. [ 3234.494288][T21781] name failslab, interval 1, probability 0, space 0, times 0 [ 3234.495327][T21781] CPU: 0 UID: 0 PID: 21781 Comm: syz.4.4519 Not tainted syzkaller #0 PREEMPT [ 3234.495398][T21781] Hardware name: ARM-Versatile Express [ 3234.495412][T21781] Call trace: [ 3234.495434][T21781] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3234.495494][T21781] r7:60000013 r6:60000013 r5:82332d18 r4:00000000 [ 3234.495503][T21781] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 3234.495532][T21781] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 3234.495564][T21781] r7:840c9880 r6:00000000 r5:840c9880 r4:82b1ac48 [ 3234.495573][T21781] [<8021e610>] (dump_stack) from [<809f2a20>] (should_fail_ex+0x1c0/0x224) [ 3234.495609][T21781] [<809f2860>] (should_fail_ex) from [<80567a4c>] (should_failslab+0x6c/0x94) [ 3234.495649][T21781] r8:00000000 r7:840c9880 r6:830016c0 r5:00000c40 r4:00001000 [ 3234.495657][T21781] [<805679e0>] (should_failslab) from [<8054642c>] (__kmalloc_noprof+0xa8/0x3c8) [ 3234.495686][T21781] [<80546384>] (__kmalloc_noprof) from [<8083317c>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 3234.495723][T21781] r10:00000000 r9:830bfc00 r8:00000000 r7:84b5f908 r6:867fe5a8 r5:00001000 [ 3234.495733][T21781] r4:00000000 [ 3234.495741][T21781] [<80833140>] (tomoyo_realpath_from_path) from [<8082f244>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3234.495775][T21781] r10:00000000 r9:00000004 r8:867fe580 r7:00005452 r6:81cdd7ec r5:00000004 [ 3234.495787][T21781] r4:867fe5a8 r3:828d2400 [ 3234.495795][T21781] [<8082f178>] (tomoyo_path_number_perm) from [<80833b98>] (tomoyo_file_ioctl+0x1c/0x20) [ 3234.495832][T21781] r10:840c9880 r9:00000004 r8:867fe580 r7:20003240 r6:20003240 r5:00005452 [ 3234.495842][T21781] r4:867fe580 [ 3234.495850][T21781] [<80833b7c>] (tomoyo_file_ioctl) from [<807dea8c>] (security_file_ioctl+0x80/0x1d4) [ 3234.495879][T21781] [<807dea0c>] (security_file_ioctl) from [<805baed4>] (sys_ioctl+0x4c/0xb5c) [ 3234.495913][T21781] r7:20003240 r6:00005452 r5:867fe581 r4:00000000 [ 3234.495922][T21781] [<805bae88>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3234.495948][T21781] Exception stack(0xebe8dfa8 to 0xebe8dff0) [ 3234.495969][T21781] dfa0: 00000000 00000000 00000004 00005452 20003240 00000000 [ 3234.495988][T21781] dfc0: 00000000 00000000 0012f344 00000036 003562d8 00000000 00000001 76f0d0dc [ 3234.496002][T21781] dfe0: 76f0ce88 76f0ce78 00018ee8 00130940 [ 3234.496021][T21781] r10:00000036 r9:840c9880 r8:8020029c r7:00000036 r6:0012f344 r5:00000000 [ 3234.496030][T21781] r4:00000000 [ 3234.520437][T21781] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3241.420419][T21795] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3242.092971][T21837] FAULT_INJECTION: forcing a failure. [ 3242.092971][T21837] name failslab, interval 1, probability 0, space 0, times 0 [ 3242.095834][T21837] CPU: 0 UID: 0 PID: 21837 Comm: syz.2.4530 Not tainted syzkaller #0 PREEMPT [ 3242.095964][T21837] Hardware name: ARM-Versatile Express [ 3242.095992][T21837] Call trace: [ 3242.096034][T21837] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3242.096159][T21837] r7:60000013 r6:60000013 r5:82332d18 r4:00000000 [ 3242.096181][T21837] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 3242.096235][T21837] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 3242.096298][T21837] r7:000001d4 r6:00000000 r5:83313d40 r4:82b1ac48 [ 3242.096314][T21837] [<8021e610>] (dump_stack) from [<809f2a20>] (should_fail_ex+0x1c0/0x224) [ 3242.096383][T21837] [<809f2860>] (should_fail_ex) from [<80567a4c>] (should_failslab+0x6c/0x94) [ 3242.096463][T21837] r8:83313d40 r7:000001d4 r6:8044a2bc r5:00000dc0 r4:83001480 [ 3242.096484][T21837] [<805679e0>] (should_failslab) from [<805474c4>] (__kmalloc_cache_noprof+0x58/0x338) [ 3242.096549][T21837] [<8054746c>] (__kmalloc_cache_noprof) from [<8044a2bc>] (bpf_trampoline_update.constprop.0+0x30/0x3cc) [ 3242.096630][T21837] r10:8253e73c r9:86a1c100 r8:00000000 r7:df981000 r6:82ccfdac r5:86a1c100 [ 3242.096650][T21837] r4:85b3a8b8 [ 3242.096668][T21837] [<8044a28c>] (bpf_trampoline_update.constprop.0) from [<8044a7e4>] (bpf_trampoline_link_prog+0x18c/0x28c) [ 3242.096745][T21837] r10:00000000 r9:86a1c100 r8:00000000 r7:df981000 r6:82ccfdac r5:86a1c100 [ 3242.096771][T21837] r4:85b3a8b8 [ 3242.096790][T21837] [<8044a658>] (bpf_trampoline_link_prog) from [<803e9310>] (bpf_tracing_prog_attach+0x2c0/0x4f8) [ 3242.096869][T21837] r9:86a1c100 r8:df981000 r7:85b3a880 r6:00000007 r5:00000000 r4:df9a3000 [ 3242.096892][T21837] [<803e9050>] (bpf_tracing_prog_attach) from [<803e965c>] (bpf_raw_tp_link_attach+0x114/0x2a8) [ 3242.096967][T21837] r10:83313d40 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:00000000 [ 3242.096994][T21837] r4:df9a3000 [ 3242.097014][T21837] [<803e9548>] (bpf_raw_tp_link_attach) from [<803e9e88>] (__sys_bpf+0x4b8/0x219c) [ 3242.097090][T21837] r10:83313d40 r9:00000000 r8:00000000 r7:00000000 r6:00000011 r5:df9a3000 [ 3242.097123][T21837] r4:00000000 [ 3242.097144][T21837] [<803e99d0>] (__sys_bpf) from [<803ec17c>] (sys_bpf+0x50/0x6c) [ 3242.097223][T21837] r10:00000182 r9:83313d40 r8:8020029c r7:00000182 r6:0012f344 r5:00000000 [ 3242.097247][T21837] r4:00000000 [ 3242.097267][T21837] [<803ec12c>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3242.097325][T21837] Exception stack(0xdf985fa8 to 0xdf985ff0) [ 3242.097368][T21837] 5fa0: 00000000 00000000 00000011 00000000 00000000 00000000 [ 3242.097410][T21837] 5fc0: 00000000 00000000 0012f344 00000182 003562d8 00000000 00000001 76f640dc [ 3242.097444][T21837] 5fe0: 76f63e88 76f63e78 00018ee8 00130940 [ 3248.780656][T21846] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3266.941711][T21958] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3272.940613][T21992] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3280.060673][T22039] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3287.260802][T22071] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3295.582324][T22115] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3303.580772][T22148] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3312.540986][T22199] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3312.839502][T22224] SELinux: security_context_str_to_sid (stau) failed with errno=-22 [ 3319.341683][T22235] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3332.062460][T22287] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3332.569336][T22314] FAULT_INJECTION: forcing a failure. [ 3332.569336][T22314] name failslab, interval 1, probability 0, space 0, times 0 [ 3332.584605][T22314] CPU: 0 UID: 0 PID: 22314 Comm: syz.4.4630 Not tainted syzkaller #0 PREEMPT [ 3332.584768][T22314] Hardware name: ARM-Versatile Express [ 3332.584798][T22314] Call trace: [ 3332.584845][T22314] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3332.584962][T22314] r7:60000113 r6:60000113 r5:82332d18 r4:00000000 [ 3332.584984][T22314] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 3332.585043][T22314] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 3332.585111][T22314] r7:00000014 r6:00000000 r5:840bd5c0 r4:82b1ac48 [ 3332.585130][T22314] [<8021e610>] (dump_stack) from [<809f2a20>] (should_fail_ex+0x1c0/0x224) [ 3332.585199][T22314] [<809f2860>] (should_fail_ex) from [<80567a4c>] (should_failslab+0x6c/0x94) [ 3332.585280][T22314] r8:840bd5c0 r7:00000014 r6:80325588 r5:00000cc0 r4:83001240 [ 3332.585299][T22314] [<805679e0>] (should_failslab) from [<805474c4>] (__kmalloc_cache_noprof+0x58/0x338) [ 3332.585362][T22314] [<8054746c>] (__kmalloc_cache_noprof) from [<80325588>] (__request_module+0xe8/0x2e4) [ 3332.585436][T22314] r10:00000001 r9:00000000 r8:82af7338 r7:81699ea8 r6:840bd5c0 r5:00000002 [ 3332.585459][T22314] r4:00000000 [ 3332.585477][T22314] [<803254a0>] (__request_module) from [<81699ea8>] (dev_load+0x80/0x8c) [ 3332.585549][T22314] r3:00400140 r2:df9b5ecc r1:824ffe88 [ 3332.585582][T22314] r8:df9b5ecb r7:00000000 r6:86239000 r5:00000000 r4:df9b5ecc [ 3332.585602][T22314] [<81699e28>] (dev_load) from [<8169b428>] (dev_ioctl+0x394/0x468) [ 3332.585671][T22314] r5:df9b5ecc r4:000089f1 [ 3332.585721][T22314] [<8169b094>] (dev_ioctl) from [<81625ba8>] (sock_ioctl+0x3e4/0x4c0) [ 3332.585794][T22314] r10:840bd5c0 r9:00000003 r8:85712580 r7:86239000 r6:20000900 r5:b5403587 [ 3332.585817][T22314] r4:000089f1 r3:00000000 [ 3332.585835][T22314] [<816257c4>] (sock_ioctl) from [<805bb0cc>] (sys_ioctl+0x244/0xb5c) [ 3332.585909][T22314] r9:00000003 r8:85712580 r7:20000900 r6:000089f1 r5:85712581 r4:00000000 [ 3332.585967][T22314] [<805bae88>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3332.586025][T22314] Exception stack(0xdf9b5fa8 to 0xdf9b5ff0) [ 3332.586065][T22314] 5fa0: 00000000 00000000 00000003 000089f1 20000900 00000000 [ 3332.586100][T22314] 5fc0: 00000000 00000000 0012f344 00000036 003562d8 00000000 00000001 76f0d0dc [ 3332.586127][T22314] 5fe0: 76f0ce88 76f0ce78 00018ee8 00130940 [ 3332.586169][T22314] r10:00000036 r9:840bd5c0 r8:8020029c r7:00000036 r6:0012f344 r5:00000000 [ 3332.586191][T22314] r4:00000000 [ 3339.180646][T22324] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3342.283705][T22364] fuse: Bad value for 'fd' [ 3347.980775][T22368] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3348.298027][T22393] fuse: Bad value for 'group_id' [ 3348.310428][T22393] fuse: Bad value for 'group_id' [ 3351.691342][T22399] fuse: Bad value for 'fd' [ 3356.433404][T22418] fuse: Bad value for 'fd' [ 3362.076602][T22426] FAULT_INJECTION: forcing a failure. [ 3362.076602][T22426] name failslab, interval 1, probability 0, space 0, times 0 [ 3362.083335][T22426] CPU: 0 UID: 0 PID: 22426 Comm: syz.2.4652 Tainted: G L syzkaller #0 PREEMPT [ 3362.083577][T22426] Tainted: [L]=SOFTLOCKUP [ 3362.083612][T22426] Hardware name: ARM-Versatile Express [ 3362.083640][T22426] Call trace: [ 3362.083682][T22426] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3362.083793][T22426] r7:60000013 r6:60000013 r5:82332d18 r4:00000000 [ 3362.083814][T22426] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 3362.083870][T22426] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 3362.083934][T22426] r7:855724c0 r6:00000000 r5:855724c0 r4:82b1ac48 [ 3362.083953][T22426] [<8021e610>] (dump_stack) from [<809f2a20>] (should_fail_ex+0x1c0/0x224) [ 3362.084021][T22426] [<809f2860>] (should_fail_ex) from [<80567a4c>] (should_failslab+0x6c/0x94) [ 3362.084109][T22426] r8:00000000 r7:855724c0 r6:830016c0 r5:00000c40 r4:00001000 [ 3362.084129][T22426] [<805679e0>] (should_failslab) from [<8054642c>] (__kmalloc_noprof+0xa8/0x3c8) [ 3362.084191][T22426] [<80546384>] (__kmalloc_noprof) from [<8083317c>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 3362.084267][T22426] r10:00000000 r9:830c0000 r8:00000000 r7:834296e8 r6:866a5528 r5:00001000 [ 3362.084290][T22426] r4:00000000 [ 3362.084307][T22426] [<80833140>] (tomoyo_realpath_from_path) from [<8082f244>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3362.084385][T22426] r10:00000000 r9:00000003 r8:866a5500 r7:d0009412 r6:81cdd7ec r5:00000004 [ 3362.084413][T22426] r4:866a5528 r3:828d2400 [ 3362.084432][T22426] [<8082f178>] (tomoyo_path_number_perm) from [<80833b98>] (tomoyo_file_ioctl+0x1c/0x20) [ 3362.084508][T22426] r10:855724c0 r9:00000003 r8:866a5500 r7:00000000 r6:00000000 r5:d0009412 [ 3362.084533][T22426] r4:866a5500 [ 3362.084554][T22426] [<80833b7c>] (tomoyo_file_ioctl) from [<807dea8c>] (security_file_ioctl+0x80/0x1d4) [ 3362.084622][T22426] [<807dea0c>] (security_file_ioctl) from [<805baed4>] (sys_ioctl+0x4c/0xb5c) [ 3362.084690][T22426] r7:00000000 r6:d0009412 r5:866a5501 r4:00000000 [ 3362.084709][T22426] [<805bae88>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3362.084760][T22426] Exception stack(0xdfad5fa8 to 0xdfad5ff0) [ 3362.084804][T22426] 5fa0: 00000000 00000000 00000003 d0009412 00000000 00000000 [ 3362.084845][T22426] 5fc0: 00000000 00000000 0012f344 00000036 003562d8 00000000 00000001 76f640dc [ 3362.084877][T22426] 5fe0: 76f63e88 76f63e78 00018ee8 00130940 [ 3362.084917][T22426] r10:00000036 r9:855724c0 r8:8020029c r7:00000036 r6:0012f344 r5:00000000 [ 3362.084940][T22426] r4:00000000 [ 3362.153141][T22426] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3366.743228][T22439] FAULT_INJECTION: forcing a failure. [ 3366.743228][T22439] name failslab, interval 1, probability 0, space 0, times 0 [ 3366.751373][T22439] CPU: 0 UID: 0 PID: 22439 Comm: syz.4.4657 Tainted: G L syzkaller #0 PREEMPT [ 3366.751537][T22439] Tainted: [L]=SOFTLOCKUP [ 3366.751559][T22439] Hardware name: ARM-Versatile Express [ 3366.751584][T22439] Call trace: [ 3366.751628][T22439] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3366.751742][T22439] r7:60000013 r6:60000013 r5:82332d18 r4:00000000 [ 3366.751762][T22439] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 3366.751818][T22439] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 3366.751881][T22439] r7:00000018 r6:00000000 r5:83319880 r4:82b1ac48 [ 3366.751898][T22439] [<8021e610>] (dump_stack) from [<809f2a20>] (should_fail_ex+0x1c0/0x224) [ 3366.751957][T22439] [<809f2860>] (should_fail_ex) from [<80567a4c>] (should_failslab+0x6c/0x94) [ 3366.752031][T22439] r8:83319880 r7:00000018 r6:8079c3f0 r5:00400dc0 r4:83002000 [ 3366.752052][T22439] [<805679e0>] (should_failslab) from [<805474c4>] (__kmalloc_cache_noprof+0x58/0x338) [ 3366.752127][T22439] [<8054746c>] (__kmalloc_cache_noprof) from [<8079c3f0>] (fuse_alloc_forget+0x28/0x2c) [ 3366.752207][T22439] r10:00000001 r9:dff3dd64 r8:864b1cc0 r7:861de800 r6:84b413d0 r5:00000000 [ 3366.752230][T22439] r4:dff3dd68 [ 3366.752248][T22439] [<8079c3c8>] (fuse_alloc_forget) from [<807a2f04>] (fuse_lookup_name+0x6c/0x284) [ 3366.752305][T22439] [<807a2e98>] (fuse_lookup_name) from [<807a31a8>] (fuse_lookup+0x8c/0x170) [ 3366.752374][T22439] r10:00000002 r9:00000001 r8:00000001 r7:00000000 r6:84b413b8 r5:834ad440 [ 3366.752399][T22439] r4:84b413b8 [ 3366.752416][T22439] [<807a311c>] (fuse_lookup) from [<805af468>] (__lookup_slow+0x64/0xfc) [ 3366.752489][T22439] r9:00000000 r8:834ad440 r7:00000000 r6:dff3de90 r5:84b5f908 r4:84b413b8 [ 3366.752508][T22439] [<805af404>] (__lookup_slow) from [<805af538>] (lookup_slow+0x38/0x50) [ 3366.752583][T22439] r9:00000000 r8:dff3df5c r7:00000000 r6:dff3de90 r5:84b5f908 r4:834ad4c0 [ 3366.752637][T22439] [<805af500>] (lookup_slow) from [<805b36e4>] (path_lookupat+0x198/0x2a4) [ 3366.752708][T22439] r7:00000100 r6:dff3df5c r5:00000000 r4:dff3de88 [ 3366.752728][T22439] [<805b354c>] (path_lookupat) from [<805b4d8c>] (filename_lookup+0xd8/0x1a8) [ 3366.752801][T22439] r9:00000000 r8:dff3df5c r7:00000000 r6:83319880 r5:833c5300 r4:ffffff9c [ 3366.752822][T22439] [<805b4cb4>] (filename_lookup) from [<805a6a5c>] (do_readlinkat+0x6c/0x150) [ 3366.752889][T22439] r9:00000000 r8:200021c0 r7:ffffff9c r6:00000097 r5:833c5300 r4:00000000 [ 3366.752909][T22439] [<805a69f0>] (do_readlinkat) from [<805a7bd4>] (sys_readlink+0x24/0x28) [ 3366.752977][T22439] r10:00000055 r9:83319880 r8:8020029c r7:00000055 r6:0012f344 r5:00000000 [ 3366.753001][T22439] r4:00000000 [ 3366.753019][T22439] [<805a7bb0>] (sys_readlink) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3366.753083][T22439] Exception stack(0xdff3dfa8 to 0xdff3dff0) [ 3366.753127][T22439] dfa0: 00000000 00000000 20002000 200021c0 00000097 00000000 [ 3366.753168][T22439] dfc0: 00000000 00000000 0012f344 00000055 003562d8 00000000 00000001 76f0d0dc [ 3366.753199][T22439] dfe0: 76f0ce88 76f0ce78 00018ee8 00130940 [ 3376.791074][T22472] FAULT_INJECTION: forcing a failure. [ 3376.791074][T22472] name failslab, interval 1, probability 0, space 0, times 0 [ 3376.792562][T22472] CPU: 0 UID: 0 PID: 22472 Comm: syz.4.4667 Tainted: G L syzkaller #0 PREEMPT [ 3376.792667][T22472] Tainted: [L]=SOFTLOCKUP [ 3376.792689][T22472] Hardware name: ARM-Versatile Express [ 3376.792713][T22472] Call trace: [ 3376.792761][T22472] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3376.792873][T22472] r7:60000113 r6:60000113 r5:82332d18 r4:00000000 [ 3376.792895][T22472] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 3376.792956][T22472] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 3376.793022][T22472] r7:00000034 r6:00000000 r5:840c9880 r4:82b1ac48 [ 3376.793040][T22472] [<8021e610>] (dump_stack) from [<809f2a20>] (should_fail_ex+0x1c0/0x224) [ 3376.793101][T22472] [<809f2860>] (should_fail_ex) from [<80567a4c>] (should_failslab+0x6c/0x94) [ 3376.793181][T22472] r8:840c9880 r7:00000034 r6:802704c0 r5:00000dc0 r4:83001240 [ 3376.793199][T22472] [<805679e0>] (should_failslab) from [<805474c4>] (__kmalloc_cache_noprof+0x58/0x338) [ 3376.793263][T22472] [<8054746c>] (__kmalloc_cache_noprof) from [<802704c0>] (call_usermodehelper_setup+0x48/0xb8) [ 3376.793349][T22472] r10:e0409e38 r9:00000017 r8:82af7338 r7:82af7338 r6:88da1000 r5:82af7464 [ 3376.793374][T22472] r4:88da1000 [ 3376.793392][T22472] [<80270478>] (call_usermodehelper_setup) from [<803255f0>] (__request_module+0x150/0x2e4) [ 3376.793474][T22472] r7:81699e90 r6:8437e080 r5:00000002 r4:88da1000 [ 3376.793493][T22472] [<803254a0>] (__request_module) from [<81699e90>] (dev_load+0x68/0x8c) [ 3376.793559][T22472] r3:00400140 r2:e0409e28 r1:823af378 [ 3376.793589][T22472] r8:00008917 r7:00000000 r6:00000000 r5:00000000 r4:e0409e28 [ 3376.793606][T22472] [<81699e28>] (dev_load) from [<81881cbc>] (devinet_ioctl+0x74/0x788) [ 3376.793674][T22472] r5:86239000 r4:e0409e28 [ 3376.793692][T22472] [<81881c48>] (devinet_ioctl) from [<81884db4>] (inet_ioctl+0xe0/0x24c) [ 3376.793757][T22472] r10:840c9880 r9:81eb3f14 r8:e0409ecc r7:86239000 r6:865e1f40 r5:20000000 [ 3376.793777][T22472] r4:00008917 [ 3376.793793][T22472] [<81884cd4>] (inet_ioctl) from [<816258fc>] (sock_ioctl+0x138/0x4c0) [ 3376.793858][T22472] r7:86239000 r6:20000000 r5:8359e540 r4:00008917 [ 3376.793877][T22472] [<816257c4>] (sock_ioctl) from [<805bb0cc>] (sys_ioctl+0x244/0xb5c) [ 3376.793995][T22472] r9:00000003 r8:85715f80 r7:20000000 r6:00008917 r5:85715f81 r4:00000000 [ 3376.794015][T22472] [<805bae88>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3376.794071][T22472] Exception stack(0xe0409fa8 to 0xe0409ff0) [ 3376.794115][T22472] 9fa0: 00000000 00000000 00000003 00008917 20000000 00000000 [ 3376.794156][T22472] 9fc0: 00000000 00000000 0012f344 00000036 003562d8 00000000 00000001 76f0d0dc [ 3376.794190][T22472] 9fe0: 76f0ce88 76f0ce78 00018ee8 00130940 [ 3376.794232][T22472] r10:00000036 r9:840c9880 r8:8020029c r7:00000036 r6:0012f344 r5:00000000 [ 3376.794257][T22472] r4:00000000 [ 3381.442249][T22484] ======================================================= [ 3381.442249][T22484] WARNING: The mand mount option has been deprecated and [ 3381.442249][T22484] and is ignored by this kernel. Remove the mand [ 3381.442249][T22484] option from the mount to silence this warning. [ 3381.442249][T22484] ======================================================= [ 3381.446488][T22484] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 3392.840765][T22536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=22536 comm=syz.2.4691 [ 3402.728945][T22585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3402.741494][T22585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3404.732517][T22609] FAULT_INJECTION: forcing a failure. [ 3404.732517][T22609] name failslab, interval 1, probability 0, space 0, times 0 [ 3404.783775][T22609] CPU: 0 UID: 0 PID: 22609 Comm: syz.2.4716 Tainted: G L syzkaller #0 PREEMPT [ 3404.783976][T22609] Tainted: [L]=SOFTLOCKUP [ 3404.783999][T22609] Hardware name: ARM-Versatile Express [ 3404.784025][T22609] Call trace: [ 3404.784072][T22609] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3404.784199][T22609] r7:60000013 r6:60000013 r5:82332d18 r4:00000000 [ 3404.784223][T22609] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 3404.784284][T22609] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 3404.784351][T22609] r7:83991880 r6:00000000 r5:83991880 r4:82b1ac48 [ 3404.784371][T22609] [<8021e610>] (dump_stack) from [<809f2a20>] (should_fail_ex+0x1c0/0x224) [ 3404.784434][T22609] [<809f2860>] (should_fail_ex) from [<80567a4c>] (should_failslab+0x6c/0x94) [ 3404.784513][T22609] r8:00000000 r7:83991880 r6:83001240 r5:00000d40 r4:00000019 [ 3404.784533][T22609] [<805679e0>] (should_failslab) from [<8054642c>] (__kmalloc_noprof+0xa8/0x3c8) [ 3404.784593][T22609] [<80546384>] (__kmalloc_noprof) from [<80833088>] (tomoyo_encode2+0x64/0xec) [ 3404.784671][T22609] r10:00000fff r9:830bfc00 r8:00000000 r7:84b5fbb0 r6:838aaba8 r5:83edaffd [ 3404.784694][T22609] r4:83edafef [ 3404.784711][T22609] [<80833024>] (tomoyo_encode2) from [<80833134>] (tomoyo_encode+0x24/0x30) [ 3404.784782][T22609] r9:830bfc00 r8:00000000 r7:84b5fbb0 r6:838aaba8 r5:00001000 r4:83edaff0 [ 3404.784803][T22609] [<80833110>] (tomoyo_encode) from [<808331c0>] (tomoyo_realpath_from_path+0x80/0x16c) [ 3404.784865][T22609] r5:00001000 r4:83eda000 [ 3404.784883][T22609] [<80833140>] (tomoyo_realpath_from_path) from [<8082f244>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3404.784956][T22609] r10:00000000 r9:00000004 r8:838aab80 r7:00008982 r6:81cdd7ec r5:00000004 [ 3404.784984][T22609] r4:838aaba8 r3:828d2400 [ 3404.785002][T22609] [<8082f178>] (tomoyo_path_number_perm) from [<80833b98>] (tomoyo_file_ioctl+0x1c/0x20) [ 3404.785078][T22609] r10:83991880 r9:00000004 r8:838aab80 r7:20004a00 r6:20004a00 r5:00008982 [ 3404.785102][T22609] r4:838aab80 [ 3404.785120][T22609] [<80833b7c>] (tomoyo_file_ioctl) from [<807dea8c>] (security_file_ioctl+0x80/0x1d4) [ 3404.785188][T22609] [<807dea0c>] (security_file_ioctl) from [<805baed4>] (sys_ioctl+0x4c/0xb5c) [ 3404.785260][T22609] r7:20004a00 r6:00008982 r5:838aab81 r4:00000000 [ 3404.785282][T22609] [<805bae88>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3404.785342][T22609] Exception stack(0xe860dfa8 to 0xe860dff0) [ 3404.785386][T22609] dfa0: 00000000 00000000 00000004 00008982 20004a00 00000000 [ 3404.785429][T22609] dfc0: 00000000 00000000 0012f344 00000036 003562d8 00000000 00000001 76f640dc [ 3404.785458][T22609] dfe0: 76f63e88 76f63e78 00018ee8 00130940 [ 3404.785502][T22609] r10:00000036 r9:83991880 r8:8020029c r7:00000036 r6:0012f344 r5:00000000 [ 3404.785524][T22609] r4:00000000 [ 3404.812006][T22609] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3406.357852][T22618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3406.364730][T22618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3408.620401][T22594] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3412.124597][T22645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3412.131861][T22645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3412.525774][T22643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3412.527584][T22643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3412.577625][T22660] fuse: Bad value for 'group_id' [ 3412.624037][T22660] fuse: Bad value for 'group_id' [ 3416.347673][T22693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3416.353559][T22693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3417.981479][T22662] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3418.582612][T22706] fuse: Bad value for 'group_id' [ 3418.640895][T22706] fuse: Bad value for 'group_id' [ 3419.347102][T22703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3419.348861][T22703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3422.478073][T22737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3422.490856][T22737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3422.741404][T22750] fuse: Bad value for 'group_id' [ 3422.748814][T22750] fuse: Bad value for 'group_id' [ 3423.944310][T22753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3423.951394][T22753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3425.340585][T22718] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3425.851513][T22766] FAULT_INJECTION: forcing a failure. [ 3425.851513][T22766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3425.863870][T22766] CPU: 0 UID: 0 PID: 22766 Comm: syz.2.4737 Tainted: G L syzkaller #0 PREEMPT [ 3425.864034][T22766] Tainted: [L]=SOFTLOCKUP [ 3425.864057][T22766] Hardware name: ARM-Versatile Express [ 3425.864085][T22766] Call trace: [ 3425.864128][T22766] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3425.864244][T22766] r7:60000013 r6:60000013 r5:82332d18 r4:00000000 [ 3425.864266][T22766] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 3425.864328][T22766] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 3425.864396][T22766] r7:200004c0 r6:00000000 r5:84759880 r4:82b53188 [ 3425.864415][T22766] [<8021e610>] (dump_stack) from [<809f2a20>] (should_fail_ex+0x1c0/0x224) [ 3425.864480][T22766] [<809f2860>] (should_fail_ex) from [<809f2a98>] (should_fail+0x14/0x18) [ 3425.864565][T22766] r8:20040880 r7:200004c0 r6:eab25e30 r5:00000000 r4:eab25f28 [ 3425.864584][T22766] [<809f2a84>] (should_fail) from [<809f2ab8>] (should_fail_usercopy+0x1c/0x20) [ 3425.864645][T22766] [<809f2a9c>] (should_fail_usercopy) from [<81624f60>] (copy_msghdr_from_user+0x50/0x1e0) [ 3425.864717][T22766] [<81624f10>] (copy_msghdr_from_user) from [<81625168>] (___sys_sendmsg+0x78/0xd0) [ 3425.864794][T22766] r8:20040880 r7:00000000 r6:85c5ca40 r5:eab25f28 r4:eab25e74 [ 3425.864815][T22766] [<816250f0>] (___sys_sendmsg) from [<816272f4>] (__sys_sendmsg+0x8c/0xe0) [ 3425.864889][T22766] r9:84759880 r8:838a8480 r7:20040880 r6:200004c0 r5:838a8481 r4:00000003 [ 3425.864910][T22766] [<81627268>] (__sys_sendmsg) from [<8162735c>] (sys_sendmsg+0x14/0x18) [ 3425.864979][T22766] r8:8020029c r7:00000128 r6:0012f344 r5:00000000 r4:00000000 [ 3425.865001][T22766] [<81627348>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3425.865057][T22766] Exception stack(0xeab25fa8 to 0xeab25ff0) [ 3425.865101][T22766] 5fa0: 00000000 00000000 00000003 200004c0 20040880 00000000 [ 3425.865141][T22766] 5fc0: 00000000 00000000 0012f344 00000128 003562d8 00000000 00000001 76f640dc [ 3425.865172][T22766] 5fe0: 76f63e88 76f63e78 00018ee8 00130940 [ 3426.391546][T22768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3426.398392][T22768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3429.337347][T22801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3429.338924][T22801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3431.823554][T22782] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3432.392133][T22815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3432.412803][T22815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3436.851025][T22854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3436.864200][T22854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3439.022121][T22835] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3439.769368][T22869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3439.772678][T22869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3440.720896][ T28] audit: type=1400 audit(3951.634:1663): avc: denied { ioctl } for pid=22882 comm="syz.2.4752" path="socket:[48719]" dev="sockfs" ino=48719 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3441.784810][T22889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3441.788857][T22889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3444.830714][T22916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3444.841720][T22916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3447.742175][T22935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3447.743824][T22935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3450.604382][T22958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3450.609226][T22958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3451.615732][T22970] fuse: Unknown parameter 'grou00000000000000000000' [ 3453.211637][T22981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3453.222484][T22981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3453.951869][T22991] fuse: Unknown parameter 'grou00000000000000000000' [ 3455.149384][T23001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3455.151778][T23001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3455.696635][T22997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3455.704224][T22997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3456.314947][T23024] fuse: Unknown parameter 'grou00000000000000000000' [ 3457.227531][T23028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3457.229309][T23028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3457.782822][T23046] fuse: Unknown parameter 'group_i00000000000000000000' [ 3458.961211][T23043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3458.964125][T23043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3459.396807][T23057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3459.403968][T23057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3459.867002][T23072] fuse: Unknown parameter 'group_i00000000000000000000' [ 3463.322179][T23090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3463.332895][T23090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3463.679266][T23094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3463.682264][T23094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3463.927153][T23105] fuse: Unknown parameter 'group_i00000000000000000000' [ 3466.187331][T23114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3466.190557][T23114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3466.450601][T23121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3466.454547][T23121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3466.691312][T23132] fuse: Unknown parameter 'group_id00000000000000000000' [ 3468.092259][T23143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3468.093564][T23143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3468.308108][T23154] fuse: Unknown parameter 'group_id00000000000000000000' [ 3471.041538][T23166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3471.042489][T23166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3471.271580][T23177] fuse: Unknown parameter 'group_id00000000000000000000' [ 3474.415366][T23189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3474.417130][T23189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3474.941907][T23203] fuse: Bad value for 'user_id' [ 3474.943534][T23203] fuse: Bad value for 'user_id' [ 3475.971729][T23209] fuse: fd is not a fuse device [ 3476.297488][T23214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3476.299336][T23214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3476.444692][T23225] fuse: Bad value for 'user_id' [ 3476.446400][T23225] fuse: Bad value for 'user_id' [ 3477.970987][T23237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3477.972057][T23237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3478.212394][T23248] fuse: Bad value for 'user_id' [ 3478.224791][T23248] fuse: Bad value for 'user_id' [ 3480.476893][T23257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3480.480548][T23257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3480.781683][T23271] fuse: Bad value for 'fd' [ 3482.531366][T23280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3482.537877][T23280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3482.775750][T23281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3482.779292][T23281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3482.790977][T23280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3482.793270][T23280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3483.199042][T23290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3483.207877][T23290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3483.460240][T23301] fuse: Bad value for 'fd' [ 3484.777599][T23309] FAULT_INJECTION: forcing a failure. [ 3484.777599][T23309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3484.790524][T23309] CPU: 0 UID: 0 PID: 23309 Comm: syz.2.4849 Tainted: G L syzkaller #0 PREEMPT [ 3484.790682][T23309] Tainted: [L]=SOFTLOCKUP [ 3484.790706][T23309] Hardware name: ARM-Versatile Express [ 3484.790732][T23309] Call trace: [ 3484.790772][T23309] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3484.790894][T23309] r7:60000013 r6:60000013 r5:82332d18 r4:00000000 [ 3484.790918][T23309] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 3484.790984][T23309] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 3484.791055][T23309] r7:20000040 r6:00000000 r5:8476d5c0 r4:82b53188 [ 3484.791074][T23309] [<8021e610>] (dump_stack) from [<809f2a20>] (should_fail_ex+0x1c0/0x224) [ 3484.791132][T23309] [<809f2860>] (should_fail_ex) from [<809f2a98>] (should_fail+0x14/0x18) [ 3484.791196][T23309] r8:00000000 r7:20000040 r6:00000118 r5:00000000 r4:ec6fde80 [ 3484.791214][T23309] [<809f2a84>] (should_fail) from [<809f2ab8>] (should_fail_usercopy+0x1c/0x20) [ 3484.791270][T23309] [<809f2a9c>] (should_fail_usercopy) from [<80929c5c>] (_copy_from_iter+0x64/0x7c4) [ 3484.791327][T23309] [<80929bf8>] (_copy_from_iter) from [<81760454>] (netlink_sendmsg+0x188/0x444) [ 3484.791413][T23309] r10:00000000 r9:00000000 r8:ec6fde80 r7:86aca800 r6:00000118 r5:83846cc0 [ 3484.791437][T23309] r4:ec6fde70 [ 3484.791455][T23309] [<817602cc>] (netlink_sendmsg) from [<81623cec>] (__sock_sendmsg+0x44/0x78) [ 3484.791535][T23309] r10:81e60d00 r9:8476d5c0 r8:81623d20 r7:85712580 r6:84bc5940 r5:ec6fde70 [ 3484.791561][T23309] r4:00000000 [ 3484.791579][T23309] [<81623ca8>] (__sock_sendmsg) from [<81623dd0>] (sock_write_iter+0xb0/0xfc) [ 3484.791655][T23309] r7:85712580 r6:84bc5940 r5:ec6fdf08 r4:ec6fdef0 [ 3484.791683][T23309] [<81623d20>] (sock_write_iter) from [<8059fdd4>] (vfs_write+0x3b8/0x42c) [ 3484.791758][T23309] r7:00000000 r6:20000040 r5:85712580 r4:00000118 [ 3484.791777][T23309] [<8059fa1c>] (vfs_write) from [<805a0014>] (ksys_write+0xcc/0xec) [ 3484.791847][T23309] r10:00000004 r9:8476d5c0 r8:8020029c r7:00000118 r6:20000040 r5:85712580 [ 3484.791868][T23309] r4:85712580 [ 3484.791884][T23309] [<8059ff48>] (ksys_write) from [<805a0044>] (sys_write+0x10/0x14) [ 3484.791951][T23309] r7:00000004 r6:0012f344 r5:00000000 r4:00000000 [ 3484.791971][T23309] [<805a0034>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3484.792025][T23309] Exception stack(0xec6fdfa8 to 0xec6fdff0) [ 3484.792066][T23309] dfa0: 00000000 00000000 00000003 20000040 00000118 00000000 [ 3484.792102][T23309] dfc0: 00000000 00000000 0012f344 00000004 003562d8 00000000 00000001 76f640dc [ 3484.792128][T23309] dfe0: 76f63e88 76f63e78 00018ee8 00130940 [ 3485.190669][T23312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3485.193663][T23312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3485.777185][T23326] fuse: Bad value for 'fd' [ 3487.151738][T23334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3487.152828][T23334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3487.832829][T23348] fuse: Bad value for 'fd' [ 3488.878035][T23356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3488.878853][T23356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3490.005759][T23373] fuse: Bad value for 'fd' [ 3490.083987][T23374] FAULT_INJECTION: forcing a failure. [ 3490.083987][T23374] name failslab, interval 1, probability 0, space 0, times 0 [ 3490.111400][T23374] CPU: 0 UID: 0 PID: 23374 Comm: syz.2.4862 Tainted: G L syzkaller #0 PREEMPT [ 3490.111554][T23374] Tainted: [L]=SOFTLOCKUP [ 3490.111577][T23374] Hardware name: ARM-Versatile Express [ 3490.111848][T23374] Call trace: [ 3490.111916][T23374] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3490.112068][T23374] r7:60000013 r6:60000013 r5:82332d18 r4:00000000 [ 3490.112093][T23374] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 3490.112156][T23374] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 3490.112235][T23374] r7:0000001c r6:00000000 r5:8416d5c0 r4:82b1ac48 [ 3490.112255][T23374] [<8021e610>] (dump_stack) from [<809f2a20>] (should_fail_ex+0x1c0/0x224) [ 3490.112329][T23374] [<809f2860>] (should_fail_ex) from [<80567a4c>] (should_failslab+0x6c/0x94) [ 3490.112413][T23374] r8:8416d5c0 r7:0000001c r6:80821e2c r5:00000920 r4:83001240 [ 3490.112435][T23374] [<805679e0>] (should_failslab) from [<805474c4>] (__kmalloc_cache_noprof+0x58/0x338) [ 3490.112508][T23374] [<8054746c>] (__kmalloc_cache_noprof) from [<80821e2c>] (selinux_netlbl_sock_genattr+0x4c/0x140) [ 3490.112592][T23374] r10:86407444 r9:00000000 r8:84c20000 r7:0000000a r6:86945f40 r5:86945f40 [ 3490.112615][T23374] r4:00000000 [ 3490.112634][T23374] [<80821de0>] (selinux_netlbl_sock_genattr) from [<808228a0>] (selinux_netlbl_socket_post_create+0x40/0x80) [ 3490.112709][T23374] r7:0000000a r6:86945f40 r5:00000000 r4:00000002 [ 3490.112731][T23374] [<80822860>] (selinux_netlbl_socket_post_create) from [<807fe7dc>] (selinux_mptcp_add_subflow+0x4c/0x50) [ 3490.112821][T23374] r9:00000000 r8:8416d5c0 r7:eca11f28 r6:eca11cc8 r5:84c20000 r4:84c20000 [ 3490.112845][T23374] [<807fe790>] (selinux_mptcp_add_subflow) from [<807f6fa4>] (security_mptcp_add_subflow+0x54/0x1ac) [ 3490.112909][T23374] r5:84c20000 r4:864072c0 [ 3490.112930][T23374] [<807f6f50>] (security_mptcp_add_subflow) from [<81b064f8>] (mptcp_subflow_create_socket+0xa0/0x2a0) [ 3490.113000][T23374] r5:864072c0 r4:00000000 [ 3490.113020][T23374] [<81b06458>] (mptcp_subflow_create_socket) from [<81af7778>] (__mptcp_nmpc_sk.part.0+0x64/0x1cc) [ 3490.113098][T23374] r8:8416d5c0 r7:eca11f28 r6:20000000 r5:00000000 r4:864072c0 [ 3490.113120][T23374] [<81af7714>] (__mptcp_nmpc_sk.part.0) from [<81affce4>] (mptcp_sendmsg+0x804/0xa94) [ 3490.113200][T23374] r7:eca11f28 r6:20000000 r5:00000000 r4:864072c0 [ 3490.113220][T23374] [<81aff4e0>] (mptcp_sendmsg) from [<81924ccc>] (inet6_sendmsg+0x40/0x4c) [ 3490.113301][T23374] r10:20040010 r9:00000000 r8:eca11dd4 r7:00000000 r6:864072c0 r5:00000000 [ 3490.113325][T23374] r4:eca11f28 [ 3490.113345][T23374] [<81924c8c>] (inet6_sendmsg) from [<81623cec>] (__sock_sendmsg+0x44/0x78) [ 3490.113423][T23374] r7:00000000 r6:84bc5940 r5:eca11f28 r4:00000000 [ 3490.113445][T23374] [<81623ca8>] (__sock_sendmsg) from [<81624d8c>] (____sys_sendmsg+0x238/0x2c4) [ 3490.113518][T23374] r7:00000000 r6:00000000 r5:84bc5940 r4:eca11f28 [ 3490.113541][T23374] [<81624b54>] (____sys_sendmsg) from [<8162518c>] (___sys_sendmsg+0x9c/0xd0) [ 3490.113620][T23374] r10:00000128 r9:200019c0 r8:20040010 r7:00000000 r6:84bc5940 r5:eca11f28 [ 3490.113644][T23374] r4:00000000 [ 3490.113662][T23374] [<816250f0>] (___sys_sendmsg) from [<816272f4>] (__sys_sendmsg+0x8c/0xe0) [ 3490.113737][T23374] r9:8416d5c0 r8:83827500 r7:20040010 r6:200019c0 r5:83827501 r4:00000003 [ 3490.113759][T23374] [<81627268>] (__sys_sendmsg) from [<8162735c>] (sys_sendmsg+0x14/0x18) [ 3490.113830][T23374] r8:8020029c r7:00000128 r6:0012f344 r5:00000000 r4:00000000 [ 3490.113851][T23374] [<81627348>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3490.113905][T23374] Exception stack(0xeca11fa8 to 0xeca11ff0) [ 3490.113981][T23374] 1fa0: 00000000 00000000 00000003 200019c0 20040010 00000000 [ 3490.114024][T23374] 1fc0: 00000000 00000000 0012f344 00000128 003562d8 00000000 00000001 76f640dc [ 3490.114057][T23374] 1fe0: 76f63e88 76f63e78 00018ee8 00130940 [ 3490.862073][T23379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3490.863021][T23379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3493.057147][T23401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3493.058801][T23401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3493.297519][T23408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3493.312715][T23408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3495.844299][T23432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3495.850799][T23432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3496.350850][T23436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3496.361189][T23436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3497.897497][T23449] SELinux: Context system_u:object_r:modules_object_t:s0 is not valid (left unmapped). [ 3497.901617][ T28] audit: type=1400 audit(4008.824:1664): avc: denied { relabelto } for pid=23448 comm="syz.4.4878" name="vcsu" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:modules_object_t:s0" [ 3497.904110][ T28] audit: type=1400 audit(4008.824:1665): avc: denied { associate } for pid=23448 comm="syz.4.4878" name="vcsu" dev="devtmpfs" ino=14 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:modules_object_t:s0" [ 3506.725514][ T28] audit: type=1400 audit(4017.644:1666): avc: denied { lock } for pid=23455 comm="syz.2.4880" path="socket:[49839]" dev="sockfs" ino=49839 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 3507.978435][T23458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3507.991145][T23458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3510.013881][T23469] FAULT_INJECTION: forcing a failure. [ 3510.013881][T23469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3510.015495][T23469] CPU: 0 UID: 0 PID: 23469 Comm: syz.2.4883 Tainted: G L syzkaller #0 PREEMPT [ 3510.015622][T23469] Tainted: [L]=SOFTLOCKUP [ 3510.015643][T23469] Hardware name: ARM-Versatile Express [ 3510.015668][T23469] Call trace: [ 3510.015710][T23469] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3510.015815][T23469] r7:60000013 r6:60000013 r5:82332d18 r4:00000000 [ 3510.015837][T23469] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 3510.015892][T23469] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 3510.015953][T23469] r7:20000680 r6:00000000 r5:85580c40 r4:82b53188 [ 3510.015974][T23469] [<8021e610>] (dump_stack) from [<809f2a20>] (should_fail_ex+0x1c0/0x224) [ 3510.016035][T23469] [<809f2860>] (should_fail_ex) from [<809f2a98>] (should_fail+0x14/0x18) [ 3510.016099][T23469] r8:20000000 r7:20000680 r6:df9ade30 r5:00000000 r4:df9adf28 [ 3510.016129][T23469] [<809f2a84>] (should_fail) from [<809f2ab8>] (should_fail_usercopy+0x1c/0x20) [ 3510.016241][T23469] [<809f2a9c>] (should_fail_usercopy) from [<81624f60>] (copy_msghdr_from_user+0x50/0x1e0) [ 3510.016312][T23469] [<81624f10>] (copy_msghdr_from_user) from [<81625168>] (___sys_sendmsg+0x78/0xd0) [ 3510.016382][T23469] r8:20000000 r7:00000000 r6:8359b6c0 r5:df9adf28 r4:df9ade74 [ 3510.016401][T23469] [<816250f0>] (___sys_sendmsg) from [<816272f4>] (__sys_sendmsg+0x8c/0xe0) [ 3510.016472][T23469] r9:85580c40 r8:85715f80 r7:20000000 r6:20000680 r5:85715f81 r4:00000003 [ 3510.016492][T23469] [<81627268>] (__sys_sendmsg) from [<8162735c>] (sys_sendmsg+0x14/0x18) [ 3510.016552][T23469] r8:8020029c r7:00000128 r6:0012f344 r5:00000000 r4:00000000 [ 3510.016570][T23469] [<81627348>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3510.016622][T23469] Exception stack(0xdf9adfa8 to 0xdf9adff0) [ 3510.016661][T23469] dfa0: 00000000 00000000 00000003 20000680 20000000 00000000 [ 3510.016698][T23469] dfc0: 00000000 00000000 0012f344 00000128 003562d8 00000000 00000001 76f640dc [ 3510.016727][T23469] dfe0: 76f63e88 76f63e78 00018ee8 00130940 [ 3514.101281][T23475] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=272 sclass=netlink_audit_socket pid=23475 comm=syz.4.4885 [ 3515.385331][T23477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3515.401359][T23477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3520.731389][ T28] audit: type=1400 audit(4031.644:1667): avc: denied { read } for pid=23498 comm="syz.4.4890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3524.739680][T23502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3524.764540][T23502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3537.811343][T23528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3537.812756][T23528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3539.210658][ T28] audit: type=1400 audit(4050.124:1668): avc: denied { setattr } for pid=23537 comm="syz.2.4900" name="RAW" dev="sockfs" ino=50041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3540.927070][T23546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3540.928490][T23546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3541.993611][T23563] FAULT_INJECTION: forcing a failure. [ 3541.993611][T23563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3541.994882][T23563] CPU: 0 UID: 0 PID: 23563 Comm: syz.2.4907 Tainted: G L syzkaller #0 PREEMPT [ 3541.994960][T23563] Tainted: [L]=SOFTLOCKUP [ 3541.994972][T23563] Hardware name: ARM-Versatile Express [ 3541.994985][T23563] Call trace: [ 3541.995007][T23563] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3541.995068][T23563] r7:60000013 r6:60000013 r5:82332d18 r4:00000000 [ 3541.995082][T23563] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 3541.995113][T23563] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 3541.995147][T23563] r7:00000000 r6:00000000 r5:83313d40 r4:82b53188 [ 3541.995156][T23563] [<8021e610>] (dump_stack) from [<809f2a20>] (should_fail_ex+0x1c0/0x224) [ 3541.995190][T23563] [<809f2860>] (should_fail_ex) from [<809f2a98>] (should_fail+0x14/0x18) [ 3541.995243][T23563] r8:76f63f08 r7:00000000 r6:00000000 r5:dff85f68 r4:00000002 [ 3541.995264][T23563] [<809f2a84>] (should_fail) from [<809f2ab8>] (should_fail_usercopy+0x1c/0x20) [ 3541.995325][T23563] [<809f2a9c>] (should_fail_usercopy) from [<805df56c>] (simple_read_from_buffer+0x80/0x140) [ 3541.995371][T23563] [<805df4ec>] (simple_read_from_buffer) from [<80663700>] (proc_fail_nth_read+0xb8/0x108) [ 3541.995411][T23563] r10:80663648 r9:00000001 r8:00000002 r7:dff85f68 r6:0000000f r5:76f63f08 [ 3541.995424][T23563] r4:83313d40 r3:dff85e9f [ 3541.995432][T23563] [<80663648>] (proc_fail_nth_read) from [<8059f270>] (vfs_read+0xc0/0x328) [ 3541.995472][T23563] r8:83313d40 r7:dff85f68 r6:76f63f08 r5:866a5680 r4:0000000f [ 3541.995481][T23563] [<8059f1b0>] (vfs_read) from [<8059febc>] (ksys_read+0x74/0xec) [ 3541.995528][T23563] r10:00000003 r9:83313d40 r8:8020029c r7:00000000 r6:00000000 r5:866a5680 [ 3541.995553][T23563] r4:866a5683 [ 3541.995570][T23563] [<8059fe48>] (ksys_read) from [<8059ff44>] (sys_read+0x10/0x14) [ 3541.995619][T23563] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 3541.995628][T23563] [<8059ff34>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3541.995662][T23563] Exception stack(0xdff85fa8 to 0xdff85ff0) [ 3541.995702][T23563] 5fa0: 00000000 00000000 00000004 76f63f08 0000000f 00000000 [ 3541.995738][T23563] 5fc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76f640dc [ 3541.995769][T23563] 5fe0: 76f63e58 76f63e44 0010bb64 00112748 [ 3545.773671][T23572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3545.778908][T23572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3554.953512][T23612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3554.962414][T23612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3555.030683][T23591] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3557.008278][T23626] binder: 23620:23626 ioctl 400c620e 20001680 returned -22 [ 3559.443104][T23632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3559.444339][T23632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3564.860690][T23643] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3568.880469][T23668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3568.882844][T23668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3574.383069][T23679] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3575.900895][T23721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3575.907237][T23721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3583.110807][T23740] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3584.101087][T23777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3584.110876][T23777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3588.347941][T23801] fuse: Unknown parameter 'fd0x0000000000000003' [ 3592.324575][T23816] fuse: Unknown parameter 'fd0x0000000000000003' [ 3600.096456][T23834] fuse: Unknown parameter 'fd0x0000000000000003' [ 3601.861186][T23838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3601.862356][T23838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3603.852630][ T28] audit: type=1400 audit(4114.774:1669): avc: denied { read } for pid=23843 comm="syz.2.4956" path="socket:[50561]" dev="sockfs" ino=50561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 3604.358197][ T28] audit: type=1400 audit(4115.274:1670): avc: denied { accept } for pid=23843 comm="syz.2.4956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 3607.845004][T23866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3607.863007][T23866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3608.570770][T23880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3608.575447][T23880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3608.630709][T23880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3608.632087][T23880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3610.114430][T23886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3610.116376][T23886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3614.111265][ T28] audit: type=1400 audit(4125.024:1671): avc: denied { write } for pid=23918 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3614.700519][ T28] audit: type=1400 audit(4125.614:1672): avc: denied { write } for pid=23926 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3616.313672][T23898] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3617.571897][T23933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3617.573513][T23933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3619.383847][T23947] FAULT_INJECTION: forcing a failure. [ 3619.383847][T23947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3619.393189][T23947] CPU: 0 UID: 0 PID: 23947 Comm: syz.4.4973 Tainted: G L syzkaller #0 PREEMPT [ 3619.393291][T23947] Tainted: [L]=SOFTLOCKUP [ 3619.393302][T23947] Hardware name: ARM-Versatile Express [ 3619.393320][T23947] Call trace: [ 3619.393343][T23947] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 3619.393408][T23947] r7:60000113 r6:60000113 r5:82332d18 r4:00000000 [ 3619.393417][T23947] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 3619.393446][T23947] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 3619.393477][T23947] r7:00000000 r6:00000000 r5:8416d5c0 r4:82b53188 [ 3619.393486][T23947] [<8021e610>] (dump_stack) from [<809f2a20>] (should_fail_ex+0x1c0/0x224) [ 3619.393517][T23947] [<809f2860>] (should_fail_ex) from [<809f2a98>] (should_fail+0x14/0x18) [ 3619.393552][T23947] r8:76f0cf08 r7:00000000 r6:00000000 r5:eac1df68 r4:00000002 [ 3619.393561][T23947] [<809f2a84>] (should_fail) from [<809f2ab8>] (should_fail_usercopy+0x1c/0x20) [ 3619.393589][T23947] [<809f2a9c>] (should_fail_usercopy) from [<805df56c>] (simple_read_from_buffer+0x80/0x140) [ 3619.393619][T23947] [<805df4ec>] (simple_read_from_buffer) from [<80663700>] (proc_fail_nth_read+0xb8/0x108) [ 3619.393659][T23947] r10:80663648 r9:00000001 r8:00000002 r7:eac1df68 r6:0000000f r5:76f0cf08 [ 3619.393672][T23947] r4:8416d5c0 r3:eac1de9f [ 3619.393680][T23947] [<80663648>] (proc_fail_nth_read) from [<8059f270>] (vfs_read+0xc0/0x328) [ 3619.393718][T23947] r8:8416d5c0 r7:eac1df68 r6:76f0cf08 r5:868e4600 r4:0000000f [ 3619.393727][T23947] [<8059f1b0>] (vfs_read) from [<8059febc>] (ksys_read+0x74/0xec) [ 3619.393762][T23947] r10:00000003 r9:8416d5c0 r8:8020029c r7:00000000 r6:00000000 r5:868e4600 [ 3619.393773][T23947] r4:868e4603 [ 3619.393782][T23947] [<8059fe48>] (ksys_read) from [<8059ff44>] (sys_read+0x10/0x14) [ 3619.393815][T23947] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 3619.393824][T23947] [<8059ff34>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3619.393850][T23947] Exception stack(0xeac1dfa8 to 0xeac1dff0) [ 3619.393870][T23947] dfa0: 00000000 00000000 00000005 76f0cf08 0000000f 00000000 [ 3619.393889][T23947] dfc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76f0d0dc [ 3619.393904][T23947] dfe0: 76f0ce58 76f0ce44 0010bb64 00112748 [ 3621.922316][T23973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3621.924630][T23973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3625.421120][T23954] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3631.287176][T24027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3631.293954][T24027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3634.230919][T24003] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3634.648160][T24041] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24041 comm=syz.4.4984 [ 3638.375550][T24068] Invalid ELF header len 7 [ 3638.376649][ T28] audit: type=1400 audit(4149.294:1673): avc: denied { module_load } for pid=24067 comm="syz.2.4989" path="/464/bus" dev="tmpfs" ino=2459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 3638.803839][T24072] random: crng reseeded on system resumption [ 3640.578430][T24084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3640.601950][T24084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3641.141172][T24089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3641.142100][T24089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3643.782504][T24105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3643.785652][T24105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3652.243479][T24137] binder: 24135:24137 ioctl c0306201 20000300 returned -22 [ 3653.210929][T24148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3653.212723][T24148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3653.293909][T24151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3653.294661][T24151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3653.452578][T24156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3653.454952][T24156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3655.161396][T24173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3655.164687][T24173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3656.025500][T24183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3656.029308][T24183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3657.903199][T24201] binder: 24199:24201 ioctl c018620c 200001c0 returned -22 [ 3658.691307][T24207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3658.693898][T24207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3659.727176][T24216] binder: 24215:24216 ioctl c018620c 0 returned -14 [ 3661.685021][T24228] binder: BINDER_SET_CONTEXT_MGR already set [ 3661.686682][T24228] binder: 24225:24228 ioctl 4018620d 20000180 returned -16 [ 3661.788972][T24227] syzkaller0: entered promiscuous mode [ 3661.796620][T24227] syzkaller0: entered allmulticast mode [ 3661.914439][T24227] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 3665.104106][T24311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3665.111710][T24311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3666.831672][T24348] binder: 24344:24348 ioctl c0306201 200003c0 returned -14 [ 3667.251083][T24352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3667.268432][T24352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3669.567535][ T28] audit: type=1400 audit(4180.484:1674): avc: denied { write } for pid=24377 comm="syz.4.5069" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 3669.572787][ T28] audit: type=1400 audit(4180.494:1675): avc: denied { open } for pid=24377 comm="syz.4.5069" path="/598/my_tracefs/events/task/task_rename/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 3669.895645][T24380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3669.896337][T24380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3670.133194][T24380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3670.137519][T24380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3670.568161][T13292] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3670.618509][T13292] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3670.714697][T13292] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3670.764801][T13292] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3671.274756][T13292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3671.306504][T13292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3671.323839][T13292] bond0 (unregistering): Released all slaves [ 3671.394949][T13292] hsr_slave_0: left promiscuous mode [ 3671.400946][T13292] hsr_slave_1: left promiscuous mode [ 3671.431291][T13292] veth1_macvtap: left promiscuous mode [ 3671.431540][T13292] veth0_macvtap: left promiscuous mode [ 3671.431785][T13292] veth1_vlan: left promiscuous mode [ 3671.431947][T13292] veth0_vlan: left promiscuous mode [ 3671.894578][T24376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3671.934774][T24376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3673.215554][T24415] syzkaller1: entered promiscuous mode [ 3673.217412][T24415] syzkaller1: entered allmulticast mode [ 3673.822310][ T28] audit: type=1400 audit(4184.724:1676): avc: denied { write } for pid=24416 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3674.085817][T24461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3674.089050][T24461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3674.650465][ T28] audit: type=1400 audit(4185.554:1677): avc: denied { write } for pid=24469 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3674.924916][ T2960] 8021q: adding VLAN 0 to HW filter on device eth13 [ 3675.564533][T16860] hid-generic 8001:0080:0009.0005: unknown main item tag 0x0 [ 3675.573195][T16860] hid-generic 8001:0080:0009.0005: unknown main item tag 0x0 [ 3675.577254][T16860] hid-generic 8001:0080:0009.0005: unknown main item tag 0x0 [ 3675.583557][T16860] hid-generic 8001:0080:0009.0005: unknown main item tag 0x0 [ 3675.590553][T16860] hid-generic 8001:0080:0009.0005: unknown main item tag 0x0 [ 3675.593490][T16860] hid-generic 8001:0080:0009.0005: unknown main item tag 0x0 [ 3675.600916][T16860] hid-generic 8001:0080:0009.0005: unknown main item tag 0x0 [ 3675.607202][T16860] hid-generic 8001:0080:0009.0005: unknown main item tag 0x0 [ 3675.610813][T16860] hid-generic 8001:0080:0009.0005: unknown main item tag 0x0 [ 3675.613635][T16860] hid-generic 8001:0080:0009.0005: unknown main item tag 0x0 [ 3675.701540][T16860] hid-generic 8001:0080:0009.0005: hidraw0: HID v0.08 Device [syz0] on syz0 [ 3676.484290][T24388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3676.503387][T24388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3676.869098][ T28] audit: type=1400 audit(4187.784:1678): avc: denied { write } for pid=24542 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3676.931797][T24580] binder: 24578:24580 ioctl 400c620e 0 returned -14 [ 3677.615537][ T28] audit: type=1400 audit(4188.524:1679): avc: denied { write } for pid=24584 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3678.195916][ T2960] 8021q: adding VLAN 0 to HW filter on device eth14 [ 3678.895386][T24388] hsr_slave_0: entered promiscuous mode [ 3678.913989][T24388] hsr_slave_1: entered promiscuous mode [ 3678.923069][T24388] debugfs: 'hsr0' already exists in 'hsr' [ 3678.929286][T24388] Cannot create hsr debugfs directory [ 3679.120557][T24650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3679.152111][T24650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3679.750346][T24700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3679.752922][T24700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3680.213836][ T28] audit: type=1400 audit(4191.114:1680): avc: denied { write } for pid=24653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3680.237348][T24388] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3680.264624][T24388] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3680.273445][T24388] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3680.299057][T24388] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3680.313027][T24388] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3680.341468][T24388] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3680.352788][T24388] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3680.383161][T24388] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3681.116789][ T28] audit: type=1400 audit(4192.034:1681): avc: denied { write } for pid=24749 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3681.503346][T24754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3681.505953][T24754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3683.091318][T24388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3684.012593][ T28] audit: type=1400 audit(4194.914:1682): avc: denied { write } for pid=24768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3684.889400][ T28] audit: type=1400 audit(4195.804:1683): avc: denied { write } for pid=24778 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3686.412078][ T28] audit: type=1400 audit(4197.314:1684): avc: denied { write } for pid=24785 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3687.006590][ T28] audit: type=1400 audit(4197.924:1685): avc: denied { write } for pid=24797 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3687.931731][ T28] audit: type=1400 audit(4198.844:1686): avc: denied { write } for pid=24803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3688.390866][ T28] audit: type=1400 audit(4199.304:1687): avc: denied { write } for pid=24814 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3689.511557][T24827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3689.513467][T24827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3689.660959][ T28] audit: type=1400 audit(4200.574:1688): avc: denied { write } for pid=24822 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3690.573048][ T28] audit: type=1400 audit(4201.494:1689): avc: denied { write } for pid=24836 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3691.214162][T24842] syzkaller1: entered promiscuous mode [ 3691.215022][T24842] syzkaller1: entered allmulticast mode [ 3691.731756][ T28] audit: type=1400 audit(4202.644:1690): avc: denied { write } for pid=24843 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3692.530746][ T28] audit: type=1400 audit(4203.444:1691): avc: denied { write } for pid=24856 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3693.115801][T24388] veth0_vlan: entered promiscuous mode [ 3693.146174][T24388] veth1_vlan: entered promiscuous mode [ 3693.281327][T24388] veth0_macvtap: entered promiscuous mode [ 3693.298294][T24388] veth1_macvtap: entered promiscuous mode [ 3693.444682][T13292] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3693.444996][T13292] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3693.445165][T13292] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3693.445288][T13292] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3693.587132][ T28] audit: type=1400 audit(4204.504:1692): avc: denied { write } for pid=24860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3694.088023][T24867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3694.094773][T24867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3694.479483][T24871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3694.481852][ T28] audit: type=1400 audit(4205.374:1693): avc: denied { write } for pid=24866 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3694.484297][T24871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3694.900749][T24878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3694.913882][T24878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3695.750962][T24887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3695.752604][T24887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3696.211144][ T28] audit: type=1400 audit(4207.124:1694): avc: denied { write } for pid=24881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3697.040690][ T28] audit: type=1400 audit(4207.954:1695): avc: denied { write } for pid=24900 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3699.116593][T24921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3699.117693][T24921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3699.777566][T24926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3699.787489][T24926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3700.253240][T24933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3700.261124][T24933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3701.592431][T24945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3701.597405][T24945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3707.092056][T16860] hid_parser_main: 213 callbacks suppressed [ 3707.097621][T16860] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3707.112019][T16860] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3707.908275][T24978] SELinux: failed to load policy [ 3708.291918][T24980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3708.294682][T24980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3709.312580][ T28] audit: type=1400 audit(4220.234:1696): avc: denied { shutdown } for pid=24983 comm="syz.2.5129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3712.016014][T24993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3712.017200][T24993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3713.010385][T25004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3713.011474][T25004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3713.544504][ T28] audit: type=1400 audit(4224.464:1697): avc: denied { read } for pid=25012 comm="syz.4.5137" name="file2" dev="tmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3752.054764][T25021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3752.069608][T25021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3752.343340][T25026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5142'. [ 3752.983832][T25030] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5144'. [ 3753.222693][T25036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3753.230938][T25036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3753.451913][T25041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3753.455079][T25041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3755.341848][ T28] audit: type=1400 audit(4266.264:1698): avc: denied { watch watch_reads } for pid=25044 comm="syz.2.5148" path="/file0" dev="ramfs" ino=52837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 3755.700852][T25052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3755.702652][T25052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3756.149377][T25056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5150'. [ 3756.532170][T25062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3756.547214][T25062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3757.345275][T25071] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5157'. [ 3762.174008][T25092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3762.177655][T25092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3762.262088][T25092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3762.265422][T25092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3762.403082][T16860] hid-generic 8001:0080:0006.0007: unknown main item tag 0x2 [ 3762.408154][T16860] hid-generic 8001:0080:0006.0007: unknown main item tag 0x3 [ 3762.414613][T16860] hid-generic 8001:0080:0006.0007: unknown main item tag 0x3 [ 3762.421726][T16860] hid-generic 8001:0080:0006.0007: unknown main item tag 0x3 [ 3762.424817][T16860] hid-generic 8001:0080:0006.0007: unknown main item tag 0x3 [ 3762.427087][T16860] hid-generic 8001:0080:0006.0007: unknown main item tag 0x3 [ 3762.431462][T16860] hid-generic 8001:0080:0006.0007: unknown main item tag 0x3 [ 3762.435911][T16860] hid-generic 8001:0080:0006.0007: unknown main item tag 0x2 [ 3762.440619][T16860] hid-generic 8001:0080:0006.0007: unknown main item tag 0x3 [ 3762.443079][T16860] hid-generic 8001:0080:0006.0007: unknown main item tag 0x3 [ 3762.459152][T16860] hid-generic 8001:0080:0006.0007: item fetching failed at offset 221/223 [ 3762.470690][T16860] hid-generic 8001:0080:0006.0007: probe with driver hid-generic failed with error -22 [ 3765.391197][T25141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3765.395269][T25141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3766.322563][T25153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3766.325390][T25153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3766.993314][T25162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3767.003187][T25162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3767.391886][T25169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3767.400978][T25169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3767.616616][T25169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3767.617737][T25169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3767.678760][T25173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3767.712482][T25173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3768.778322][T25184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3768.795898][T25184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3769.597204][T25191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5187'. [ 3770.323448][T25199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5189'. [ 3774.394701][ T28] audit: type=1326 audit(4285.314:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25215 comm="syz.2.5195" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x130940 code=0x0 [ 3778.724137][T25224] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 3784.002923][T25230] syz.4.5200 (25230): drop_caches: 2 [ 3785.674422][T25245] comedi: valid board names for 8255 driver are: [ 3785.675210][T25245] 8255 [ 3785.676765][T25245] comedi: valid board names for vmk80xx driver are: [ 3785.678385][T25245] vmk80xx [ 3785.679879][T25245] comedi: valid board names for usbduxsigma driver are: [ 3785.682957][T25245] usbduxsigma [ 3785.684244][T25245] comedi: valid board names for usbduxfast driver are: [ 3785.685604][T25245] usbduxfast [ 3785.687280][T25245] comedi: valid board names for usbdux driver are: [ 3785.688903][T25245] usbdux [ 3785.693104][T25245] comedi: valid board names for ni6501 driver are: [ 3785.693279][T25245] ni6501 [ 3785.693352][T25245] comedi: valid board names for dt9812 driver are: [ 3785.693424][T25245] dt9812 [ 3785.693524][T25245] comedi: valid board names for ni_labpc_cs driver are: [ 3785.693605][T25245] ni_labpc_cs [ 3785.693670][T25245] comedi: valid board names for ni_daq_700 driver are: [ 3785.693735][T25245] ni_daq_700 [ 3785.693799][T25245] comedi: valid board names for labpc_pci driver are: [ 3785.693864][T25245] labpc_pci [ 3785.693967][T25245] comedi: valid board names for adl_pci9118 driver are: [ 3785.694096][T25245] pci9118dg [ 3785.694210][T25245] pci9118hg [ 3785.694297][T25245] pci9118hr [ 3785.694366][T25245] comedi: valid board names for 8255_pci driver are: [ 3785.694432][T25245] 8255_pci [ 3785.694495][T25245] comedi: valid board names for comedi_parport driver are: [ 3785.694567][T25245] comedi_parport [ 3785.694639][T25245] comedi: valid board names for comedi_test driver are: [ 3785.694705][T25245] comedi_test [ 3785.694769][T25245] comedi: valid board names for comedi_bond driver are: [ 3785.694834][T25245] comedi_bond [ 3786.854443][T25258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3786.871113][T25258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3787.905231][T25271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3787.906944][T25271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3814.365044][T25297] syzkaller0: entered promiscuous mode [ 3814.391362][T25297] syzkaller0: entered allmulticast mode [ 3817.170698][T25308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3817.181279][T25308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3839.010359][T25373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3839.011441][T25373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3839.643756][T25377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3839.646461][T25377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3841.459713][T25390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3841.482018][T25390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3854.098798][T25420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3854.099762][T25420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3858.975040][ T28] audit: type=1326 audit(4369.894:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25431 comm="syz.2.5257" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130940 code=0x7ffc0000 [ 3858.977687][ T28] audit: type=1326 audit(4369.894:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25431 comm="syz.2.5257" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130940 code=0x7ffc0000 [ 3858.990819][ T28] audit: type=1326 audit(4369.904:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25431 comm="syz.2.5257" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130940 code=0x7ffc0000 [ 3858.994451][ T28] audit: type=1326 audit(4369.914:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25431 comm="syz.2.5257" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130940 code=0x7ffc0000 [ 3858.996169][ T28] audit: type=1326 audit(4369.914:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25431 comm="syz.2.5257" exe="/syz-executor" sig=0 arch=40000028 syscall=426 compat=0 ip=0x130940 code=0x7ffc0000 [ 3859.017018][ T28] audit: type=1326 audit(4369.934:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25431 comm="syz.2.5257" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130940 code=0x7ffc0000 [ 3859.017252][ T28] audit: type=1326 audit(4369.934:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25431 comm="syz.2.5257" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130940 code=0x7ffc0000 [ 3859.017520][ T28] audit: type=1326 audit(4369.934:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25431 comm="syz.2.5257" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x130940 code=0x7ffc0000 [ 3859.017744][ T28] audit: type=1326 audit(4369.934:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25431 comm="syz.2.5257" exe="/syz-executor" sig=0 arch=40000028 syscall=436 compat=0 ip=0x130940 code=0x7ffc0000 [ 3859.017973][ T28] audit: type=1326 audit(4369.934:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25431 comm="syz.2.5257" exe="/syz-executor" sig=0 arch=40000028 syscall=248 compat=0 ip=0x130940 code=0x7ffc0000 [ 3859.735080][T25434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3859.735666][T25434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3861.440962][T25439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5259'. [ 3862.983285][T20702] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3863.047736][T20702] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3863.226762][T20702] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3863.293431][T20702] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3863.979387][T20702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3864.009189][T20702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3864.032593][T20702] bond0 (unregistering): Released all slaves [ 3864.150582][T20702] hsr_slave_0: left promiscuous mode [ 3864.160354][T20702] hsr_slave_1: left promiscuous mode [ 3864.172956][T20702] veth1_macvtap: left promiscuous mode [ 3864.173191][T20702] veth0_macvtap: left promiscuous mode [ 3864.174703][T20702] veth1_vlan: left promiscuous mode [ 3867.321174][ T28] audit: type=1400 audit(4378.224:1710): avc: denied { write } for pid=25476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3868.460909][ T28] audit: type=1400 audit(4379.354:1711): avc: denied { write } for pid=25519 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3869.011827][ T2960] 8021q: adding VLAN 0 to HW filter on device eth13 [ 3870.758866][T25454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3870.807698][T25454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3870.908907][ T28] audit: type=1400 audit(4381.824:1712): avc: denied { write } for pid=25588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3871.482536][T25590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5264'. [ 3871.766502][ T28] audit: type=1400 audit(4382.674:1713): avc: denied { write } for pid=25629 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3872.258457][ T2960] 8021q: adding VLAN 0 to HW filter on device eth14 [ 3872.784038][ T28] audit: type=1400 audit(4383.704:1714): avc: denied { mounton } for pid=25660 comm="syz.4.5265" path="/96/file0" dev="tmpfs" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3873.756754][T25454] hsr_slave_0: entered promiscuous mode [ 3873.774218][T25454] hsr_slave_1: entered promiscuous mode [ 3874.309053][ T28] audit: type=1400 audit(4385.224:1715): avc: denied { write } for pid=25667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3874.868605][ T28] audit: type=1400 audit(4385.784:1716): avc: denied { write } for pid=25768 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3874.926365][T25454] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3874.941571][T25454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3874.944729][T25454] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3874.954869][T25454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3874.957431][T25454] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3874.967820][T25454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3874.973428][T25454] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3874.983669][T25454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3876.536153][T25454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3876.711191][ T28] audit: type=1400 audit(4387.624:1717): avc: denied { write } for pid=25799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3877.217521][ T28] audit: type=1400 audit(4388.134:1718): avc: denied { write } for pid=25805 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3878.418259][ T28] audit: type=1400 audit(4389.334:1719): avc: denied { write } for pid=25810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3878.816063][ T28] audit: type=1400 audit(4389.734:1720): avc: denied { write } for pid=25816 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3879.560564][ T28] audit: type=1400 audit(4390.464:1721): avc: denied { write } for pid=25821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3880.204630][ T28] audit: type=1400 audit(4391.124:1722): avc: denied { write } for pid=25828 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3881.270878][ T28] audit: type=1400 audit(4392.164:1723): avc: denied { write } for pid=25833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3881.822130][ T28] audit: type=1400 audit(4392.744:1724): avc: denied { write } for pid=25840 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3882.485104][ T28] audit: type=1400 audit(4393.404:1725): avc: denied { write } for pid=25845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3882.552018][T25454] veth0_vlan: entered promiscuous mode [ 3882.592539][T25454] veth1_vlan: entered promiscuous mode [ 3882.683163][T25454] veth0_macvtap: entered promiscuous mode [ 3882.706828][T25454] veth1_macvtap: entered promiscuous mode [ 3882.812585][T20700] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3882.814561][T20700] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3882.816266][T20700] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3882.817509][T20700] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3883.021758][ T28] audit: type=1400 audit(4393.934:1726): avc: denied { write } for pid=25850 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3884.268817][ T28] audit: type=1400 audit(4395.174:1727): avc: denied { write } for pid=25854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3885.354877][ T28] audit: type=1400 audit(4396.274:1728): avc: denied { write } for pid=25868 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3886.027428][T25866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5268'. [ 3886.918838][ T28] audit: type=1400 audit(4397.834:1729): avc: denied { write } for pid=25880 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3888.111634][ T28] audit: type=1400 audit(4399.024:1730): avc: denied { write } for pid=25891 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3894.225830][ T28] audit: type=1400 audit(4405.144:1731): avc: denied { read } for pid=25909 comm="syz.2.5280" name="trace" dev="tracefs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 3912.184247][T25930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3912.185101][T25930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3914.589095][ T46] block nbd0: Receive control failed (result -32) [ 3962.689684][T25955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3962.713987][T25955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3964.144274][T25955] hsr_slave_0: entered promiscuous mode [ 3964.157597][T25955] hsr_slave_1: entered promiscuous mode [ 3964.168503][T25955] debugfs: 'hsr0' already exists in 'hsr' [ 3964.168893][T25955] Cannot create hsr debugfs directory [ 3964.963108][T25955] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3964.978970][T25955] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3964.981907][T25955] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3964.987137][T25955] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3964.994186][T25955] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3965.005082][T25955] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3965.009609][T25955] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3965.037835][T25955] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3966.339257][T25955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3972.487374][T25955] veth0_vlan: entered promiscuous mode [ 3972.581688][T25955] veth1_vlan: entered promiscuous mode [ 3972.679462][T25955] veth0_macvtap: entered promiscuous mode [ 3972.715320][T25955] veth1_macvtap: entered promiscuous mode [ 3972.868392][T13289] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3972.868703][T13289] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3972.868899][T13289] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3972.869065][T13289] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3977.022602][T26301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3977.025944][T26301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3981.361569][T26319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3981.362894][T26319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3982.691001][T20702] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3982.864908][T20702] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3983.136372][T20702] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3983.188122][T20702] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3983.774233][T20702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3983.795416][T20702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3983.799363][T20702] bond0 (unregistering): Released all slaves [ 3983.873874][T20702] hsr_slave_0: left promiscuous mode [ 3983.875430][T20702] hsr_slave_1: left promiscuous mode [ 3983.912429][T20702] veth1_macvtap: left promiscuous mode [ 3983.912731][T20702] veth0_macvtap: left promiscuous mode [ 3983.912992][T20702] veth1_vlan: left promiscuous mode [ 3983.913173][T20702] veth0_vlan: left promiscuous mode [ 3986.480767][ T28] audit: type=1400 audit(4497.384:1732): avc: denied { write } for pid=26355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3987.275650][ T28] audit: type=1400 audit(4498.194:1733): avc: denied { write } for pid=26359 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3987.872027][ T2960] 8021q: adding VLAN 0 to HW filter on device eth13 [ 3989.854328][ T28] audit: type=1400 audit(4500.774:1734): avc: denied { write } for pid=26363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3990.398387][T25151] hid_parser_main: 50 callbacks suppressed [ 3990.405993][T25151] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 3990.409119][T25151] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 3990.412630][T25151] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 3990.415072][T25151] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 3990.428189][T25151] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 3990.432912][T25151] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 3990.434023][T25151] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 3990.438777][T25151] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 3990.441565][T25151] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 3990.443557][T25151] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 3990.483369][T25151] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.03 Device [syz1] on syz1 [ 3990.560344][ T28] audit: type=1400 audit(4501.474:1735): avc: denied { write } for pid=26367 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3990.901631][ T2960] 8021q: adding VLAN 0 to HW filter on device eth14 [ 3992.479287][ T28] audit: type=1400 audit(4503.394:1736): avc: denied { write } for pid=26378 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3993.310376][ T28] audit: type=1400 audit(4504.224:1737): avc: denied { write } for pid=26381 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3993.868827][ T2960] 8021q: adding VLAN 0 to HW filter on device eth15 [ 3995.595381][ T28] audit: type=1400 audit(4506.514:1738): avc: denied { write } for pid=26385 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3996.076286][ T28] audit: type=1400 audit(4506.994:1739): avc: denied { write } for pid=26388 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3996.410761][ T2960] 8021q: adding VLAN 0 to HW filter on device eth16 [ 4007.620531][ T28] audit: type=1400 audit(4518.534:1740): avc: denied { write } for pid=26411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4008.144152][ T28] audit: type=1400 audit(4519.054:1741): avc: denied { write } for pid=26417 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4009.287567][ T28] audit: type=1400 audit(4520.204:1742): avc: denied { write } for pid=26421 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4009.669018][ T28] audit: type=1400 audit(4520.584:1743): avc: denied { write } for pid=26424 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4010.325879][ T28] audit: type=1400 audit(4521.244:1744): avc: denied { write } for pid=26427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4010.514521][ T28] audit: type=1400 audit(4521.434:1745): avc: denied { write } for pid=26430 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4010.965190][ T28] audit: type=1400 audit(4521.884:1746): avc: denied { write } for pid=26433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4011.289388][ T28] audit: type=1400 audit(4522.204:1747): avc: denied { write } for pid=26436 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4026.204837][T26475] 8<--- cut here --- [ 4026.211281][T26475] Unable to handle kernel paging request at virtual address fee00004 when write [ 4026.224211][T26475] [fee00004] *pgd=80000080007003 [ 4026.226978][ T28] audit: type=1400 audit(4537.144:1748): avc: denied { search } for pid=2912 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 4026.229617][T26475] , *pmd=00000000 [ 4026.245293][T26475] Internal error: Oops: a06 [#1] SMP ARM [ 4026.247150][T26475] Modules linked in: [ 4026.247596][T26475] CPU: 0 UID: 0 PID: 26475 Comm: syz.4.5322 Tainted: G L syzkaller #0 PREEMPT [ 4026.247949][T26475] Tainted: [L]=SOFTLOCKUP [ 4026.248110][T26475] Hardware name: ARM-Versatile Express [ 4026.248325][T26475] PC is at parport_attach+0x5c/0x1e8 [ 4026.248565][T26475] LR is at parport_attach+0x50/0x1e8 [ 4026.248785][T26475] pc : [<81494ec0>] lr : [<81494eb4>] psr: 60000013 [ 4026.249028][T26475] sp : ea6add30 ip : ea6add30 fp : ea6add54 [ 4026.249247][T26475] r10: 82d30dfc r9 : 00000003 r8 : 831d0240 [ 4026.249469][T26475] r7 : ea6add90 r6 : ea6add90 r5 : 831d0240 r4 : 00000000 [ 4026.249733][T26475] r3 : fee00004 r2 : 00000000 r1 : 00000000 r0 : 00000000 [ 4026.250103][T26475] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 4026.250417][T26475] Control: 30c5387d Table: 85bd3340 DAC: fffffffd [ 4026.250704][T26475] Register r0 information: NULL pointer [ 4026.251383][T26475] Register r1 information: NULL pointer [ 4026.251603][T26475] Register r2 information: NULL pointer [ 4026.251822][T26475] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 4026.252357][T26475] Register r4 information: NULL pointer [ 4026.252588][T26475] Register r5 information: slab kmalloc-192 start 831d0240 pointer offset 0 size 192 [ 4026.253547][T26475] Register r6 information: 2-page vmalloc region starting at 0xea6ac000 allocated at kernel_clone+0xc4/0x43c [ 4026.254005][T26475] Register r7 information: 2-page vmalloc region starting at 0xea6ac000 allocated at kernel_clone+0xc4/0x43c [ 4026.254417][T26475] Register r8 information: slab kmalloc-192 start 831d0240 pointer offset 0 size 192 [ 4026.254828][T26475] Register r9 information: non-paged memory [ 4026.255091][T26475] Register r10 information: non-slab/vmalloc memory [ 4026.255412][T26475] Register r11 information: 2-page vmalloc region starting at 0xea6ac000 allocated at kernel_clone+0xc4/0x43c [ 4026.255795][T26475] Register r12 information: 2-page vmalloc region starting at 0xea6ac000 allocated at kernel_clone+0xc4/0x43c [ 4026.256189][T26475] Process syz.4.5322 (pid: 26475, stack limit = 0xea6ac000) [ 4026.256469][T26475] Stack: (0xea6add30 to 0xea6ae000) [ 4026.256676][T26475] dd20: ffffffff 00000004 82bd8ea0 81e2e428 [ 4026.256991][T26475] dd40: 00000000 ea6add90 ea6add8c ea6add58 81490b50 81494e70 40946400 00000000 [ 4026.257266][T26475] dd60: ea6add7c 200000c0 831d0240 b5403587 40946400 00000003 00000003 8557d5c0 [ 4026.257543][T26475] dd80: ea6ade4c ea6add90 8148c354 81490a54 656d6f63 705f6964 6f707261 00007472 [ 4026.257888][T26475] dda0: 00000000 00000004 00000007 00000004 00001000 00000008 00000005 00000079 [ 4026.258212][T26475] ddc0: 00000003 0008000a fffffffe ffffffff 00000004 00000002 00000004 00000100 [ 4026.258492][T26475] dde0: 00000009 fffffffb 00000010 00000013 00001000 00000089 00000003 fffffffe [ 4026.258783][T26475] de00: 20001e58 00000003 0000f39e 00000003 00000008 0000000a 00000000 fffffff8 [ 4026.259057][T26475] de20: 00000000 3c387197 00000000 867fed80 831d0240 200000c0 40946400 00000003 [ 4026.259338][T26475] de40: ea6adf14 ea6ade50 8148d67c 8148c294 00000000 3c387197 00000000 00000000 [ 4026.259623][T26475] de60: 82549844 ea6adea4 0000005f 84150f18 00000064 831d0270 ea6adee4 ea6ade88 [ 4026.259911][T26475] de80: 8080664c 807fcd04 00000064 00000001 00000000 ea6adea4 85a08410 835b8cc0 [ 4026.260190][T26475] dea0: 00006400 0000000b ea6ade98 00000000 00000000 3c387197 00000000 867fed80 [ 4026.260459][T26475] dec0: 40946400 200000c0 200000c0 867fed80 00000003 8557d5c0 ea6adef4 ea6adee8 [ 4026.260721][T26475] dee0: 80806780 3c387197 ea6adf14 00000000 867fed81 40946400 200000c0 867fed80 [ 4026.260977][T26475] df00: 00000003 8557d5c0 ea6adfa4 ea6adf18 805bb0cc 8148d334 ecac8b10 8557d5c0 [ 4026.261233][T26475] df20: ea6adf3c ea6adf30 81b5b1a0 81b5b06c ea6adf54 ea6adf40 8025a7a8 8028e490 [ 4026.261493][T26475] df40: ea6adfb0 40000000 ea6adf84 ea6adf58 80220bdc 8025a764 00000000 82a1eb0c [ 4026.261778][T26475] df60: ea6adfb0 0013eae0 ecac8b10 80220b30 00000000 3c387197 ea6adfac 00000000 [ 4026.262086][T26475] df80: 00000000 00356310 00000036 8020029c 8557d5c0 00000036 00000000 ea6adfa8 [ 4026.262360][T26475] dfa0: 80200060 805bae94 00000000 00000000 00000003 40946400 200000c0 00000000 [ 4026.262595][T26475] dfc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f410dc [ 4026.262857][T26475] dfe0: 76f40e88 76f40e78 00018ee8 00130940 60000010 00000003 00000000 00000000 [ 4026.263194][T26475] Call trace: [ 4026.263393][T26475] [<81494e64>] (parport_attach) from [<81490b50>] (comedi_device_attach+0x108/0x244) [ 4026.263806][T26475] r7:ea6add90 r6:00000000 r5:81e2e428 r4:82bd8ea0 [ 4026.264051][T26475] [<81490a48>] (comedi_device_attach) from [<8148c354>] (do_devconfig_ioctl+0xcc/0x218) [ 4026.264454][T26475] r10:8557d5c0 r9:00000003 r8:00000003 r7:40946400 r6:b5403587 r5:831d0240 [ 4026.264715][T26475] r4:200000c0 [ 4026.264855][T26475] [<8148c288>] (do_devconfig_ioctl) from [<8148d67c>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 4026.265177][T26475] r8:00000003 r7:40946400 r6:200000c0 r5:831d0240 r4:867fed80 [ 4026.265386][T26475] [<8148d328>] (comedi_unlocked_ioctl) from [<805bb0cc>] (sys_ioctl+0x244/0xb5c) [ 4026.265730][T26475] r10:8557d5c0 r9:00000003 r8:867fed80 r7:200000c0 r6:40946400 r5:867fed81 [ 4026.266052][T26475] r4:00000000 [ 4026.266202][T26475] [<805bae88>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 4026.266531][T26475] Exception stack(0xea6adfa8 to 0xea6adff0) [ 4026.266794][T26475] dfa0: 00000000 00000000 00000003 40946400 200000c0 00000000 [ 4026.267111][T26475] dfc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f410dc [ 4026.267424][T26475] dfe0: 76f40e88 76f40e78 00018ee8 00130940 [ 4026.267691][T26475] r10:00000036 r9:8557d5c0 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 4026.267979][T26475] r4:00000000 [ 4026.268375][T26475] Code: ebb67f58 e5953064 e7f33053 e2433612 (e5c34000) [ 4026.270380][T26475] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 4026.405870][T26475] Kernel panic - not syncing: Fatal exception [ 4026.407288][T26475] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:31:23 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=7ecac2bc R02=00000000 R03=00000008 R04=00000000 R05=00000002 R06=00000000 R07=000000af R08=00000fba R09=00000000 R10=00000001 R11=7ecac2bc R12=00505eb4 R13=df96dff8 R14=769f5ad0 R15=769f5ad0 PSR=40030093 -Z-- A S svc32 s00=34303030 s01=65687720 d00=6568772034303030 s02=32545b5d s03=35373436 d01=3537343632545b5d s04=6e55205d s05=656c6261 d02=656c62616e55205d s06=206f7420 s07=646e6168 d03=646e6168206f7420 s08=6b20656c s09=656e7265 d04=656e72656b20656c s10=6170206c s11=676e6967 d05=676e69676170206c s12=71657220 s13=74736575 d06=7473657571657220 s14=20746120 s15=74726976 d07=7472697620746120 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000001 R01=00000040 R02=00000000 R03=30c53879 R04=00000001 R05=00000001 R06=30c0387d R07=82c834a4 R08=80003000 R09=414fc0f0 R10=00000000 R11=df865f64 R12=df865f68 R13=df865f50 R14=00000001 R15=8024abc0 PSR=a0000193 N-C- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000