last executing test programs: 33m41.339772406s ago: executing program 1 (id=586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020600) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004000)={0x2020}, 0x2020) 33m39.420222804s ago: executing program 1 (id=587): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) io_setup(0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}, 0x18020000}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) 33m26.140969434s ago: executing program 1 (id=592): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000340)=ANY=[]) 33m26.021833949s ago: executing program 1 (id=593): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ad56000081000008000d0000", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x6d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x4008880) 33m25.911243997s ago: executing program 1 (id=594): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r1, &(0x7f0000000f00), 0x100) close_range(r0, 0xffffffffffffffff, 0x0) 33m25.540757172s ago: executing program 1 (id=595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b6a, &(0x7f0000000040)={0x200e, 0x0, 0x1d, 0x0, 0x200c, 0x0}) 33m17.340912905s ago: executing program 0 (id=606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 33m17.109622539s ago: executing program 0 (id=607): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)='D', 0x1, 0x2004c015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 33m16.97059073s ago: executing program 0 (id=608): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ad56000081000008000d0000000000000000", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x6d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x4008880) 33m16.869644009s ago: executing program 0 (id=609): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd2(0x1, 0x80001) socket(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) io_uring_setup(0x3fa5, &(0x7f0000000000)={0x0, 0x6cae, 0x100, 0x1, 0x5a}) epoll_create1(0x0) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040), 0x800) r0 = syz_io_uring_setup(0x34b5, &(0x7f0000000440)={0x0, 0xc3ae, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 33m16.605961761s ago: executing program 0 (id=610): msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000200)={0x2}, 0x8, 0x0) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x2, 0x0, 0x0, 0x0, 0xee01, 0x10, 0x9981}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1000ff, 0x20000002, 0x4, 0x0, 0x4}) 33m16.496669448s ago: executing program 0 (id=611): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = io_uring_setup(0x1f0c, &(0x7f0000000540)={0x0, 0xdfdf, 0x0, 0x1, 0xb}) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f00000005c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x17) 32m40.381784083s ago: executing program 32 (id=595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b6a, &(0x7f0000000040)={0x200e, 0x0, 0x1d, 0x0, 0x200c, 0x0}) 32m31.263344193s ago: executing program 33 (id=611): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = io_uring_setup(0x1f0c, &(0x7f0000000540)={0x0, 0xdfdf, 0x0, 0x1, 0xb}) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f00000005c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x17) 32m13.079576447s ago: executing program 3 (id=621): r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x30, 0x3, 0x0, 0x0, 0x63, 0x0, 0x64, 0x66, 0x0, 0x0, 0x0, 0x0, 0x63]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba30001000000000000bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(r1, r1, 0x2) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) 32m12.538326523s ago: executing program 3 (id=622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x1b, 0x5, 0x19a}) 32m8.649335083s ago: executing program 3 (id=623): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ad56000081000008000d0000000000000000", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x6d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x4008880) 32m8.340542125s ago: executing program 3 (id=624): syz_emit_ethernet(0x46, &(0x7f00000007c0)={@local, @link_local, @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "940845", 0x10, 0x11, 0x1fe, @remote, @ipv4={'\x00', '\xff\xff', @empty}, {[], {0x4e20, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xf7, 0x0, @val=0x80}}}}}}}}, 0x0) 32m8.189747948s ago: executing program 3 (id=625): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x30048010) 32m7.976773595s ago: executing program 3 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setgroups(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, 0x0, 0x0) 31m22.696544358s ago: executing program 34 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setgroups(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, 0x0, 0x0) 24m51.10184785s ago: executing program 4 (id=1803): r0 = openat$selinux_commit_pending_bools(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) close$binfmt(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="11848dc578b153", @ANYRES16=r1, @ANYBLOB="100029bd7000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004006}, 0x80) getgid() r2 = syz_open_dev$vcsu(&(0x7f00000003c0), 0xe6f1, 0x323f43) close$binfmt(r2) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x640140, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000ec0)) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000200)={0x77359400}, 0x8) sendmsg$FOU_CMD_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$int_in(r8, 0x5452, &(0x7f00000004c0)=0x4) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) 24m50.840332959s ago: executing program 4 (id=1804): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNSETLINK(r2, 0x5451, 0x5) close_range(r0, r1, 0x2) 24m50.571522465s ago: executing program 4 (id=1805): r0 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000014) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x1010}, 0x2004c006) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffff9c, &(0x7f0000000280), 0x2a0300, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) 24m49.002311811s ago: executing program 4 (id=1810): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept4$inet(r2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r4, &(0x7f00000000c0)='./file0\x00', 0x32) ioctl$TIOCSETD(r3, 0x5452, &(0x7f0000000000)) r6 = openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000180)={0x10000, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x8, 0x3, 0x6909, 0xf9c, 0x3], &(0x7f0000000100)=[0x0, 0x180, 0x8, 0xff, 0x2, 0xa415, 0xffff], &(0x7f0000000140)=[0x6, 0x40, 0x9, 0x10, 0xfffa, 0x2a7e, 0x9]}) ioctl$F2FS_IOC_COMPRESS_FILE(r6, 0xf518, 0x0) 24m48.718105201s ago: executing program 4 (id=1812): r0 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x208000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0}) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x17b) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000040), 0x210000, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$DEVLINK_CMD_SB_POOL_SET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x810) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getsockname$llc(r6, 0x0, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000580)={0x0, 0x1a, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000680)={r8, 0x1ff, 0x0, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0], [0x80001e, 0x3, 0x1, 0x4000ffd], [0x0, 0x9, 0x1], [0x0, 0x8, 0x9, 0x200004004]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r9, 0x0, 0x0, r10], [0x2b8]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)={0x0}) r12 = creat(&(0x7f0000000240)='./file0\x00', 0x17b) close(r12) r13 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r13, 0xc06864a1, &(0x7f0000000580)={0x0, 0x1a, r14, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f0000000680)={r15, 0x1ff, 0x0, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0], [0x80001e, 0x3, 0x1, 0x4000ffd], [0x0, 0x9, 0x1], [0x0, 0x8, 0x9, 0x200004004]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r12, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r16, 0x0, 0x0, r17], [0x2b8]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000200)={r1, 0x7, 0xa5, 0x3, 0x1, [r2, r16, r11, r2], [0x7f, 0x9, 0x4, 0x10], [0x0, 0x400, 0x8, 0xfb1], [0x800, 0x4c4, 0x6, 0x40]}) r18 = openat$selinux_status(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r18, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 24m48.341636511s ago: executing program 4 (id=1813): r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x5421, &(0x7f0000000180)={'veth1_to_bond\x00', {0x2, 0x0, @multicast2}}) r1 = openat2(0xffffffffffffff9c, &(0x7f0000003500)='./file0\x00', &(0x7f0000003540)={0x149842}, 0x18) r2 = openat$tcp_mem(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) pwritev2(r2, &(0x7f0000001380), 0x0, 0x4, 0x3, 0xe) write(r1, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x24c0, 0x0) read$char_usb(r3, 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x5450, 0x0) lseek(r3, 0x400, 0x4) 24m48.341401971s ago: executing program 35 (id=1813): r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x5421, &(0x7f0000000180)={'veth1_to_bond\x00', {0x2, 0x0, @multicast2}}) r1 = openat2(0xffffffffffffff9c, &(0x7f0000003500)='./file0\x00', &(0x7f0000003540)={0x149842}, 0x18) r2 = openat$tcp_mem(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) pwritev2(r2, &(0x7f0000001380), 0x0, 0x4, 0x3, 0xe) write(r1, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x24c0, 0x0) read$char_usb(r3, 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x5450, 0x0) lseek(r3, 0x400, 0x4) 24m36.58651898s ago: executing program 5 (id=1817): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc, r1}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x4) 24m36.399400635s ago: executing program 5 (id=1828): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000001540), 0x22a000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000000)='ecryptfs\x00', &(0x7f0000000140)='./file0\x00', r4) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x32) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0xc, &(0x7f0000000000)={0x20, 0x21, 0x10, {0x10, 0xd, "c2908d6ab28264ec6d72f4fdc4f9"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x10, &(0x7f00000000c0)={0x20, 0x1, 0xd2, "43bdfbfb1e570d3d87c54f3194c7c0ef71f9c9514b722a6cbaf341b5d542c3ad06f6af87508851a3ba70d71308924439cb94c7013e92ccc9d169cfa8c780647dc8ccc14cb24efdb36980995f55dbdeafd1afb9505969855b9e0110e4515977cc168147b4a68675c5a7165728469269fe57b42eb369557a8a5e18ab7ab22115e928c8c62eb1aabdc5af48bb2b230710aa6a6bb57f43c8b56a2205455e74578ad1cf4ded029d60aa2b617235f57fff7fdd3cd8b8800e43c2b656b112d3afe2cce741fa2a7f93eb99226c8270412876e1f8761a"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x6}}) landlock_restrict_self(r5, 0xe) 24m36.248667677s ago: executing program 5 (id=1829): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00977823a700fbdbdfa913881941099d2615d109e1a3db"], 0x14}, 0x1, 0x0, 0x0, 0x20000095}, 0x4800) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r2, 0x0, &(0x7f00000005c0)) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan3\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x804) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r8) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2010000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="000826bd7000fbdbdf250500000094c8186b9026eb3d0b37a38d"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0xc4, r9, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x944}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xa1, @mcast1, 0x10001}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40001}, 0x1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000827bd7000fddbdf251f00000008000200", @ANYRES32=r4, @ANYBLOB="2a0001007770616e30000000e0b57c61", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x400c052) r10 = socket$key(0xf, 0x3, 0x2) r11 = dup(r10) write$proc_mixer(r11, 0x0, 0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/pm_freeze_timeout', 0x2002, 0x4a) ioctl$TIOCVHANGUP(r12, 0x5451, 0x0) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x20442, 0x0) r14 = fcntl$dupfd(r13, 0x0, r13) ioctl$OCFS2_IOC_GROUP_ADD64(r14, 0x40186f03, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_devices(r11, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) 24m36.05123787s ago: executing program 36 (id=1829): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00977823a700fbdbdfa913881941099d2615d109e1a3db"], 0x14}, 0x1, 0x0, 0x0, 0x20000095}, 0x4800) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r2, 0x0, &(0x7f00000005c0)) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan3\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x804) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r8) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2010000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="000826bd7000fbdbdf250500000094c8186b9026eb3d0b37a38d"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0xc4, r9, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x944}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xa1, @mcast1, 0x10001}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40001}, 0x1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000827bd7000fddbdf251f00000008000200", @ANYRES32=r4, @ANYBLOB="2a0001007770616e30000000e0b57c61", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x400c052) r10 = socket$key(0xf, 0x3, 0x2) r11 = dup(r10) write$proc_mixer(r11, 0x0, 0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/pm_freeze_timeout', 0x2002, 0x4a) ioctl$TIOCVHANGUP(r12, 0x5451, 0x0) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x20442, 0x0) r14 = fcntl$dupfd(r13, 0x0, r13) ioctl$OCFS2_IOC_GROUP_ADD64(r14, 0x40186f03, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_devices(r11, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) 979.76763ms ago: executing program 2 (id=4645): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x18d1, 0x2d04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x3, 0x20, 0x3, {0x8, 0xb, 0x0, 0x1, 0x1, 0x24, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0xa, 0xbd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x8, 0x0, {0xa, 0x25, 0x25, 0x101, 0xfd, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x6, 0x10, {0xa, 0x25, 0x25, 0x83c8, 0x48, 0xb}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x54, 0x1, 0x7, {0xffff, 0x1}, {0x49, 0x2}, @cond=[{0x80, 0x5388, 0x81, 0x800, 0x80cb, 0x7}, {0x1, 0x5, 0x1, 0x7, 0x6, 0xb6}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 979.59892ms ago: executing program 6 (id=4646): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/51, 0x33}, {&(0x7f0000001740)=""/55, 0x37}, {&(0x7f0000001840)=""/76, 0x4c}], 0x4}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}], 0x4, 0x2002, 0x0) 839.781153ms ago: executing program 2 (id=4647): syz_open_dev$ublk_chdev(&(0x7f0000000100), 0x0, 0xeae00) syz_open_dev$ublk_chdev(&(0x7f0000000940), 0x0, 0x80600) 808.31416ms ago: executing program 6 (id=4648): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4841) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00'], 0x64}}, 0x4800) 659.336351ms ago: executing program 2 (id=4649): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x1}], 0x1, &(0x7f00000000c0), 0x0, 0x0) 540.037406ms ago: executing program 6 (id=4650): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='ud', 0x2) 539.833566ms ago: executing program 2 (id=4651): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000200)="bbcf7ba972fed643abcc5d175ee6b3cb564814db74269220a189212f56e95eddcc9df19d73078ef2a06d64e9f4ff01de7a869015d53951e7fdf4288de52e4dee13a65cdd7f549226a30627a75fefc67fd19d2f4f3f96435d034ddee6d5c0de2c1593d850dd1c61171856ad7fc66029d1032758b95745e623bdf5728d03deae9d2f06b46ea39a91bec7b3e694f44a1dbde3b0b2ffa742e4b047fa6b2e04a84f48524a5e2677a470888f0e7de7d3b4c4ddaee586028f9ef9dd1a94658ec355", 0xbe}], 0x1}, 0x0) 308.559569ms ago: executing program 6 (id=4652): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x11) read(r0, 0x0, 0x0) 308.282979ms ago: executing program 2 (id=4653): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb9316", 0x32}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925a", 0x14}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a", 0x83}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)="2588e09c666f7c2e1106c4b4839bf483707b3603c0580d4ea3d894cc071395c4737f5f4840a109613a98c563d9d35e1d30ca9911819a41dbfd9738e9c1125ca897831d701969b199ec46f793e0be4ddb8d9826811efc4e049594868a96ae2daab085b6ba229f384a9463eb764b9ea4c74e5460b9a82983e2d22885fbc6d1d731e8d02f8246b3f0ae936b34987046e18afad35e79c363b701eb8455e1f4ea1c12e4a706789339df763dd4505497e474d21689760747e6d2c3c2d85aa253b1", 0xbe}, {&(0x7f0000000980)="b58e23c2095b3eca9b630c1d411197505e88b68339fc3ca18b0fd3186d253cf0556b7f8b7172a7ecda83c0bfb299b17792211571807b64f65caf151aa7f1b0bd962717d5fd2f9f0ceec19df6106bdba8c3292328dce4b38ecc0c6cbaed777b7d2f6f229a0ee04cc5c0cd92b973485c74f5a33bb3e68099b2de241b322610c87a569eca6f2ba8dcb256", 0x89}], 0x2}}], 0x2, 0x14042082) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 79.43646ms ago: executing program 6 (id=4654): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) semget$private(0x0, 0x7, 0x81) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000200), 0x0) 199.329µs ago: executing program 2 (id=4655): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'multiq3\x00', [0x100, 0x4, 0x0, 0x2, 0x44, 0xf3, 0x79, 0x4, 0x80008, 0x5, 0x2, 0x64, 0xea, 0x1, 0x80006, 0xfd, 0x6, 0x3, 0x3, 0x7fffffff, 0xb740, 0xca9d, 0xdc, 0x20001e58, 0x8, 0xf39c, 0x8003, 0x1539b804, 0x5, 0x1, 0x2]}) 0s ago: executing program 6 (id=4656): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'comedi_parport\x00', [0x140, 0xfffffffc, 0x1000c, 0x2dddc, 0x0, 0x10000, 0x7fff, 0x6, 0x7, 0xc72c, 0x2000004, 0xf, 0xc000, 0x8, 0x4ce, 0x8e99, 0x1, 0xed, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x9, 0xaf, 0x2, 0x283, 0x8001, 0xe43f]}) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): 1fa8 to 0xdfd91ff0) [ 2238.587432][T19975] 1fa0: 00000000 00000000 00000003 40106e80 00000000 00000000 [ 2238.587455][T19975] 1fc0: 00000000 00000000 0012f3e4 00000036 003562d8 00000000 00000001 76fdd0dc [ 2238.587473][T19975] 1fe0: 76fdce88 76fdce78 00018f80 001309e0 [ 2238.587496][T19975] r10:00000036 r9:86d255c0 r8:8020029c r7:00000036 r6:0012f3e4 r5:00000000 [ 2238.587509][T19975] r4:00000000 [ 2238.588326][T19975] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2240.355187][T19989] fuse: Unknown parameter 'group_id00000000000000000000' [ 2241.899320][T20001] fuse: Unknown parameter 'group_id00000000000000000000' [ 2248.952246][T20035] FAULT_INJECTION: forcing a failure. [ 2248.952246][T20035] name failslab, interval 1, probability 0, space 0, times 0 [ 2248.952634][T20035] CPU: 1 UID: 0 PID: 20035 Comm: syz.6.3840 Tainted: G L syzkaller #0 PREEMPT [ 2248.952742][T20035] Tainted: [L]=SOFTLOCKUP [ 2248.952755][T20035] Hardware name: ARM-Versatile Express [ 2248.952772][T20035] Call trace: [ 2248.952796][T20035] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2248.952861][T20035] r7:60000013 r6:60000013 r5:82333084 r4:00000000 [ 2248.952871][T20035] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 2248.952903][T20035] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 2248.952939][T20035] r7:850fbd40 r6:00000000 r5:850fbd40 r4:82b1ac48 [ 2248.952947][T20035] [<8021e610>] (dump_stack) from [<809f29e0>] (should_fail_ex+0x1c0/0x224) [ 2248.952981][T20035] [<809f2820>] (should_fail_ex) from [<80567aac>] (should_failslab+0x6c/0x94) [ 2248.953118][T20035] r8:00000000 r7:850fbd40 r6:830016c0 r5:00000c40 r4:00001000 [ 2248.953224][T20035] [<80567a40>] (should_failslab) from [<8054648c>] (__kmalloc_noprof+0xa8/0x3c8) [ 2248.953730][T20035] [<805463e4>] (__kmalloc_noprof) from [<8083312c>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 2248.953858][T20035] r10:00000000 r9:830bf000 r8:00000000 r7:8368dd48 r6:83896028 r5:00001000 [ 2248.953889][T20035] r4:00000000 [ 2248.953909][T20035] [<808330f0>] (tomoyo_realpath_from_path) from [<8082f1f4>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2248.954019][T20035] r10:00000000 r9:00000003 r8:83896000 r7:00005452 r6:81cdd7ec r5:00000004 [ 2248.954153][T20035] r4:83896028 r3:828d2400 [ 2248.954410][T20035] [<8082f128>] (tomoyo_path_number_perm) from [<80833b48>] (tomoyo_file_ioctl+0x1c/0x20) [ 2248.954696][T20035] r10:850fbd40 r9:00000003 r8:83896000 r7:20000300 r6:20000300 r5:00005452 [ 2248.954759][T20035] r4:83896000 [ 2248.954781][T20035] [<80833b2c>] (tomoyo_file_ioctl) from [<807dea3c>] (security_file_ioctl+0x80/0x1d4) [ 2248.954957][T20035] [<807de9bc>] (security_file_ioctl) from [<805baf1c>] (sys_ioctl+0x4c/0xb5c) [ 2248.955063][T20035] r7:20000300 r6:00005452 r5:83896001 r4:00000000 [ 2248.955144][T20035] [<805baed0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2248.955359][T20035] Exception stack(0xeaa09fa8 to 0xeaa09ff0) [ 2248.955427][T20035] 9fa0: 00000000 00000000 00000003 00005452 20000300 00000000 [ 2248.955568][T20035] 9fc0: 00000000 00000000 0012f3e4 00000036 003562d8 00000000 00000001 76fdd0dc [ 2248.955719][T20035] 9fe0: 76fdce88 76fdce78 00018f80 001309e0 [ 2248.955786][T20035] r10:00000036 r9:850fbd40 r8:8020029c r7:00000036 r6:0012f3e4 r5:00000000 [ 2248.955828][T20035] r4:00000000 [ 2248.965220][T20035] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2256.709475][T20100] FAULT_INJECTION: forcing a failure. [ 2256.709475][T20100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2256.735520][T20100] CPU: 0 UID: 0 PID: 20100 Comm: syz.6.3858 Tainted: G L syzkaller #0 PREEMPT [ 2256.735694][T20100] Tainted: [L]=SOFTLOCKUP [ 2256.735716][T20100] Hardware name: ARM-Versatile Express [ 2256.735742][T20100] Call trace: [ 2256.735795][T20100] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2256.735908][T20100] r7:60000113 r6:60000113 r5:82333084 r4:00000000 [ 2256.735928][T20100] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 2256.735983][T20100] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 2256.736056][T20100] r7:00000000 r6:00000000 r5:87293d40 r4:82b53188 [ 2256.736074][T20100] [<8021e610>] (dump_stack) from [<809f29e0>] (should_fail_ex+0x1c0/0x224) [ 2256.736138][T20100] [<809f2820>] (should_fail_ex) from [<809f2a58>] (should_fail+0x14/0x18) [ 2256.736208][T20100] r8:76fdcf08 r7:00000000 r6:00000000 r5:eacc9f68 r4:00000002 [ 2256.736228][T20100] [<809f2a44>] (should_fail) from [<809f2a78>] (should_fail_usercopy+0x1c/0x20) [ 2256.736289][T20100] [<809f2a5c>] (should_fail_usercopy) from [<805df5b4>] (simple_read_from_buffer+0x80/0x140) [ 2256.736351][T20100] [<805df534>] (simple_read_from_buffer) from [<80663748>] (proc_fail_nth_read+0xb8/0x108) [ 2256.736427][T20100] r10:80663690 r9:00000001 r8:00000002 r7:eacc9f68 r6:0000000f r5:76fdcf08 [ 2256.736455][T20100] r4:87293d40 r3:eacc9e9f [ 2256.736477][T20100] [<80663690>] (proc_fail_nth_read) from [<8059f2b8>] (vfs_read+0xc0/0x328) [ 2256.736558][T20100] r8:87293d40 r7:eacc9f68 r6:76fdcf08 r5:83e3ce80 r4:0000000f [ 2256.736582][T20100] [<8059f1f8>] (vfs_read) from [<8059ff04>] (ksys_read+0x74/0xec) [ 2256.736695][T20100] r10:00000003 r9:87293d40 r8:8020029c r7:00000000 r6:00000000 r5:83e3ce80 [ 2256.736721][T20100] r4:83e3ce83 [ 2256.736743][T20100] [<8059fe90>] (ksys_read) from [<8059ff8c>] (sys_read+0x10/0x14) [ 2256.736871][T20100] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 2256.736896][T20100] [<8059ff7c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2256.736957][T20100] Exception stack(0xeacc9fa8 to 0xeacc9ff0) [ 2256.737005][T20100] 9fa0: 00000000 00000000 00000004 76fdcf08 0000000f 00000000 [ 2256.737056][T20100] 9fc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76fdd0dc [ 2256.737148][T20100] 9fe0: 76fdce58 76fdce44 0010bc04 001127e8 [ 2257.318952][T20102] fuse: Unknown parameter 'group_id00000000000000000000' [ 2258.588372][T20115] FAULT_INJECTION: forcing a failure. [ 2258.588372][T20115] name failslab, interval 1, probability 0, space 0, times 0 [ 2258.588926][T20115] CPU: 1 UID: 0 PID: 20115 Comm: syz.2.3863 Tainted: G L syzkaller #0 PREEMPT [ 2258.589030][T20115] Tainted: [L]=SOFTLOCKUP [ 2258.589056][T20115] Hardware name: ARM-Versatile Express [ 2258.589085][T20115] Call trace: [ 2258.589135][T20115] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2258.589281][T20115] r7:60000013 r6:60000013 r5:82333084 r4:00000000 [ 2258.589311][T20115] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 2258.589403][T20115] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 2258.589507][T20115] r7:ffffffff r6:00000000 r5:86d255c0 r4:82b1ac48 [ 2258.589566][T20115] [<8021e610>] (dump_stack) from [<809f29e0>] (should_fail_ex+0x1c0/0x224) [ 2258.589663][T20115] [<809f2820>] (should_fail_ex) from [<80567aac>] (should_failslab+0x6c/0x94) [ 2258.589757][T20115] r8:86d255c0 r7:ffffffff r6:83002000 r5:00400cc0 r4:0000000d [ 2258.589861][T20115] [<80567a40>] (should_failslab) from [<80546858>] (__kmalloc_node_track_caller_noprof+0xac/0x3d8) [ 2258.589974][T20115] [<805467ac>] (__kmalloc_node_track_caller_noprof) from [<804d3b58>] (kstrdup+0x3c/0x60) [ 2258.590084][T20115] r10:ead29e54 r9:00000015 r8:8301d270 r7:ead29e54 r6:805dced4 r5:0000000c [ 2258.590295][T20115] r4:00400cc0 [ 2258.590378][T20115] [<804d3b1c>] (kstrdup) from [<805dced4>] (simple_xattr_set+0x68/0x984) [ 2258.590481][T20115] r7:843b6210 r6:84c3d180 r5:83e6ee40 r4:ead29e54 [ 2258.590562][T20115] [<805dce6c>] (simple_xattr_set) from [<804cb64c>] (shmem_xattr_handler_set+0x1a0/0x1b4) [ 2258.590675][T20115] r10:ead29e54 r9:00000015 r8:8301d270 r7:00000049 r6:8301d240 r5:843b6230 [ 2258.590747][T20115] r4:8641ab80 [ 2258.590770][T20115] [<804cb4ac>] (shmem_xattr_handler_set) from [<805daf48>] (__vfs_setxattr+0xb4/0xc8) [ 2258.590951][T20115] r10:00000001 r9:804cb4ac r8:00000015 r7:8641ab80 r6:834efc38 r5:82b21e14 [ 2258.590985][T20115] r4:843b6230 [ 2258.591094][T20115] [<805dae94>] (__vfs_setxattr) from [<805db988>] (__vfs_setxattr_noperm+0x7c/0x204) [ 2258.591207][T20115] r9:82b21e14 r8:8641ab80 r7:843b6230 r6:00000000 r5:ead29e54 r4:834efc38 [ 2258.591266][T20115] [<805db90c>] (__vfs_setxattr_noperm) from [<805dbbb4>] (__vfs_setxattr_locked+0xa4/0x12c) [ 2258.591376][T20115] r10:ead29db8 r9:00000000 r8:843b6230 r7:8641ab80 r6:ead29e54 r5:82b21e14 [ 2258.591461][T20115] r4:834efc38 [ 2258.591484][T20115] [<805dbb10>] (__vfs_setxattr_locked) from [<805dbcdc>] (vfs_setxattr+0xa0/0x180) [ 2258.591611][T20115] r8:00000015 r7:8641ab80 r6:834efc38 r5:843b62b0 r4:ead29e40 [ 2258.591679][T20115] [<805dbc3c>] (vfs_setxattr) from [<805dbe50>] (do_setxattr+0x94/0x9c) [ 2258.591804][T20115] r10:00000001 r9:834efc38 r8:82b21e14 r7:8641ab80 r6:00000015 r5:ead29e54 [ 2258.591864][T20115] r4:ead29e40 [ 2258.591927][T20115] [<805dbdbc>] (do_setxattr) from [<805dc08c>] (file_setxattr+0x58/0x78) [ 2258.592032][T20115] r9:200000c0 r8:00000003 r7:8602af81 r6:ead29e40 r5:8602af80 r4:00000000 [ 2258.592185][T20115] [<805dc034>] (file_setxattr) from [<805dc2ec>] (path_setxattrat+0x168/0x1bc) [ 2258.592293][T20115] r7:8602af81 r6:8602af80 r5:8641ab80 r4:0000000c [ 2258.592317][T20115] [<805dc184>] (path_setxattrat) from [<805dc540>] (sys_fsetxattr+0x30/0x38) [ 2258.592424][T20115] r10:000000e4 r9:86d255c0 r8:8020029c r7:000000e4 r6:0012f3e4 r5:00000000 [ 2258.592520][T20115] r4:00000001 [ 2258.592607][T20115] [<805dc510>] (sys_fsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2258.592712][T20115] Exception stack(0xead29fa8 to 0xead29ff0) [ 2258.592763][T20115] 9fa0: 00000001 00000000 00000003 20000080 200000c0 00000015 [ 2258.592827][T20115] 9fc0: 00000001 00000000 0012f3e4 000000e4 003562d8 00000000 00000001 76fa80dc [ 2258.592880][T20115] 9fe0: 76fa7e88 76fa7e78 00018f80 001309e0 [ 2261.390911][T20133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2261.392043][T20133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2261.582605][T20139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2261.589988][T20139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2261.704761][T20139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2261.709919][T20139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2264.089697][T20155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2264.093287][T20155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2265.431471][T20175] fuse: Unknown parameter '0x0000000000000003' [ 2266.185945][T20187] fuse: Unknown parameter '0x0000000000000003' [ 2267.738143][T20201] fuse: Unknown parameter '0x0000000000000003' [ 2268.996685][T20215] fuse: Unknown parameter '0x0000000000000003' [ 2269.936689][T20227] fuse: Unknown parameter 'fd0x0000000000000003' [ 2270.404472][T17841] hid-generic 0007:0009:09B2.0002: item fetching failed at offset 0/1 [ 2270.405342][T17841] hid-generic 0007:0009:09B2.0002: probe with driver hid-generic failed with error -22 [ 2270.628006][T20234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2270.631038][T20234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2270.928104][T20243] fuse: Unknown parameter 'fd0x0000000000000003' [ 2272.462409][T20254] fuse: Unknown parameter 'fd0x0000000000000003' [ 2272.470828][ T28] audit: type=1400 audit(2000001370.020:679): avc: denied { lock } for pid=20248 comm="syz.6.3912" path="socket:[45641]" dev="sockfs" ino=45641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2274.292742][T20261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2274.303409][T20261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2275.914822][T20279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2275.916405][T20279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2275.982186][T20283] netlink: 'syz.2.3923': attribute type 3 has an invalid length. [ 2277.038920][T20300] fuse: Bad value for 'fd' [ 2278.135255][T20315] FAULT_INJECTION: forcing a failure. [ 2278.135255][T20315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2278.135901][T20315] CPU: 1 UID: 0 PID: 20315 Comm: syz.6.3932 Tainted: G L syzkaller #0 PREEMPT [ 2278.136027][T20315] Tainted: [L]=SOFTLOCKUP [ 2278.136053][T20315] Hardware name: ARM-Versatile Express [ 2278.136081][T20315] Call trace: [ 2278.136196][T20315] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2278.136432][T20315] r7:60000013 r6:60000013 r5:82333084 r4:00000000 [ 2278.136495][T20315] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 2278.136700][T20315] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 2278.136800][T20315] r7:20002900 r6:00000000 r5:846aee40 r4:82b53188 [ 2278.136840][T20315] [<8021e610>] (dump_stack) from [<809f29e0>] (should_fail_ex+0x1c0/0x224) [ 2278.136912][T20315] [<809f2820>] (should_fail_ex) from [<809f2a58>] (should_fail+0x14/0x18) [ 2278.136987][T20315] r8:00040081 r7:20002900 r6:ec299e30 r5:00000000 r4:ec299f28 [ 2278.137007][T20315] [<809f2a44>] (should_fail) from [<809f2a78>] (should_fail_usercopy+0x1c/0x20) [ 2278.137071][T20315] [<809f2a5c>] (should_fail_usercopy) from [<81625368>] (copy_msghdr_from_user+0x50/0x1e0) [ 2278.137148][T20315] [<81625318>] (copy_msghdr_from_user) from [<81625570>] (___sys_sendmsg+0x78/0xd0) [ 2278.137244][T20315] r8:00040081 r7:00000000 r6:856bb1c0 r5:ec299f28 r4:ec299e74 [ 2278.137272][T20315] [<816254f8>] (___sys_sendmsg) from [<816276fc>] (__sys_sendmsg+0x8c/0xe0) [ 2278.137456][T20315] r9:846aee40 r8:8602c180 r7:00040081 r6:20002900 r5:8602c181 r4:00000003 [ 2278.137487][T20315] [<81627670>] (__sys_sendmsg) from [<81627764>] (sys_sendmsg+0x14/0x18) [ 2278.137562][T20315] r8:8020029c r7:00000128 r6:0012f3e4 r5:00000000 r4:00000000 [ 2278.137682][T20315] [<81627750>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2278.137757][T20315] Exception stack(0xec299fa8 to 0xec299ff0) [ 2278.137882][T20315] 9fa0: 00000000 00000000 00000003 20002900 00040081 00000000 [ 2278.137965][T20315] 9fc0: 00000000 00000000 0012f3e4 00000128 00356378 00000000 003d0f00 76fbc0dc [ 2278.138004][T20315] 9fe0: 76fbbe88 76fbbe78 00018f80 001309e0 [ 2278.753604][T20318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2278.756661][T20318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2290.736355][T20363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2290.740377][T20363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2292.870278][T20372] fuse: Unknown parameter 'user00000000000000000000' [ 2294.246796][T20387] fuse: Unknown parameter 'user00000000000000000000' [ 2295.953519][T20397] fuse: Unknown parameter 'user00000000000000000000' [ 2297.584117][T20414] fuse: Unknown parameter 'user_i00000000000000000000' [ 2301.728882][ T28] audit: type=1400 audit(2000001399.270:680): avc: denied { unmount } for pid=17329 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2301.881130][T20434] FAULT_INJECTION: forcing a failure. [ 2301.881130][T20434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2301.881785][T20434] CPU: 1 UID: 0 PID: 20434 Comm: syz.6.3972 Tainted: G L syzkaller #0 PREEMPT [ 2301.881902][T20434] Tainted: [L]=SOFTLOCKUP [ 2301.881928][T20434] Hardware name: ARM-Versatile Express [ 2301.881957][T20434] Call trace: [ 2301.882006][T20434] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2301.882212][T20434] r7:60000013 r6:60000013 r5:82333084 r4:00000000 [ 2301.882271][T20434] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 2301.882355][T20434] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 2301.882514][T20434] r7:00000000 r6:00000000 r5:850e8000 r4:82b53188 [ 2301.882567][T20434] [<8021e610>] (dump_stack) from [<809f29e0>] (should_fail_ex+0x1c0/0x224) [ 2301.882683][T20434] [<809f2820>] (should_fail_ex) from [<809f2a58>] (should_fail+0x14/0x18) [ 2301.882790][T20434] r8:76fdcf08 r7:00000000 r6:00000000 r5:ecd7df68 r4:00000002 [ 2301.882866][T20434] [<809f2a44>] (should_fail) from [<809f2a78>] (should_fail_usercopy+0x1c/0x20) [ 2301.882963][T20434] [<809f2a5c>] (should_fail_usercopy) from [<805df5b4>] (simple_read_from_buffer+0x80/0x140) [ 2301.883037][T20434] [<805df534>] (simple_read_from_buffer) from [<80663748>] (proc_fail_nth_read+0xb8/0x108) [ 2301.883222][T20434] r10:80663690 r9:00000001 r8:00000002 r7:ecd7df68 r6:0000000f r5:76fdcf08 [ 2301.883350][T20434] r4:850e8000 r3:ecd7de9f [ 2301.883472][T20434] [<80663690>] (proc_fail_nth_read) from [<8059f2b8>] (vfs_read+0xc0/0x328) [ 2301.883651][T20434] r8:850e8000 r7:ecd7df68 r6:76fdcf08 r5:8602ac80 r4:0000000f [ 2301.883695][T20434] [<8059f1f8>] (vfs_read) from [<8059ff04>] (ksys_read+0x74/0xec) [ 2301.883831][T20434] r10:00000003 r9:850e8000 r8:8020029c r7:00000000 r6:00000000 r5:8602ac80 [ 2301.883859][T20434] r4:8602ac83 [ 2301.883901][T20434] [<8059fe90>] (ksys_read) from [<8059ff8c>] (sys_read+0x10/0x14) [ 2301.884058][T20434] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 2301.884129][T20434] [<8059ff7c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2301.884207][T20434] Exception stack(0xecd7dfa8 to 0xecd7dff0) [ 2301.884257][T20434] dfa0: 00000000 00000000 00000004 76fdcf08 0000000f 00000000 [ 2301.884373][T20434] dfc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76fdd0dc [ 2301.884502][T20434] dfe0: 76fdce58 76fdce44 0010bc04 001127e8 [ 2302.340595][ T28] audit: type=1400 audit(2000001399.890:681): avc: denied { setattr } for pid=20436 comm="syz.6.3973" name="NETLINK" dev="sockfs" ino=45959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2303.957467][ T28] audit: type=1400 audit(2000001401.500:682): avc: denied { write } for pid=20448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2304.268066][ T28] audit: type=1400 audit(2000001401.810:683): avc: denied { write } for pid=20453 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2305.790674][T20468] fuse: Unknown parameter 'user_id00000000000000000000' [ 2309.040748][T20503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2309.043590][T20503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2309.219455][T20507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2309.223838][T20507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2309.239091][T20507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2309.240066][T20507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2310.597426][T20513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2310.601093][T20513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2313.259065][ T28] audit: type=1400 audit(2000001410.810:684): avc: denied { read write } for pid=20528 comm="syz.6.3997" name="fuse" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2313.261974][ T28] audit: type=1400 audit(2000001410.810:685): avc: denied { open } for pid=20528 comm="syz.6.3997" path="/dev/fuse" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2313.557733][ T28] audit: type=1400 audit(2000001411.100:686): avc: denied { create } for pid=20530 comm="syz.6.3998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2313.598284][ T28] audit: type=1400 audit(2000001411.150:687): avc: denied { ioctl } for pid=20530 comm="syz.6.3998" path="socket:[47114]" dev="sockfs" ino=47114 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2313.618254][ T28] audit: type=1400 audit(2000001411.170:688): avc: denied { bind } for pid=20530 comm="syz.6.3998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2313.633904][ T28] audit: type=1400 audit(2000001411.180:689): avc: denied { write } for pid=20530 comm="syz.6.3998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2314.709912][ T28] audit: type=1400 audit(2000001412.260:690): avc: denied { create } for pid=20533 comm="syz.2.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2314.773900][ T28] audit: type=1400 audit(2000001412.320:691): avc: denied { setattr } for pid=20533 comm="syz.2.3999" name="vcsu" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2314.881831][ T28] audit: type=1400 audit(2000001412.430:692): avc: denied { map_create } for pid=20535 comm="syz.6.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2314.890713][ T28] audit: type=1400 audit(2000001412.440:693): avc: denied { bpf } for pid=20535 comm="syz.6.4000" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2314.960933][T20538] fuse: Bad value for 'fd' [ 2315.129977][T20540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2315.136148][T20540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2316.225418][T20555] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4008'. [ 2316.763060][T20570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2316.766235][T20570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2318.500302][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 2318.502956][ T28] audit: type=1400 audit(2000001416.050:711): avc: denied { create } for pid=20580 comm="syz.2.4013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2318.511921][ T28] audit: type=1400 audit(2000001416.060:712): avc: denied { bind } for pid=20580 comm="syz.2.4013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2318.517883][ T28] audit: type=1400 audit(2000001416.060:713): avc: denied { connect } for pid=20580 comm="syz.2.4013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2318.549638][ T28] audit: type=1400 audit(2000001416.100:714): avc: denied { listen } for pid=20580 comm="syz.2.4013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2318.560418][ T28] audit: type=1400 audit(2000001416.110:715): avc: denied { accept } for pid=20580 comm="syz.2.4013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2318.919488][T20590] FAULT_INJECTION: forcing a failure. [ 2318.919488][T20590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2318.920004][T20590] CPU: 0 UID: 0 PID: 20590 Comm: syz.2.4016 Tainted: G L syzkaller #0 PREEMPT [ 2318.920113][T20590] Tainted: [L]=SOFTLOCKUP [ 2318.920139][T20590] Hardware name: ARM-Versatile Express [ 2318.920166][T20590] Call trace: [ 2318.920214][T20590] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2318.920377][T20590] r7:60000013 r6:60000013 r5:82333084 r4:00000000 [ 2318.920496][T20590] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 2318.920601][T20590] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 2318.920699][T20590] r7:20000240 r6:00000000 r5:83f7bd40 r4:82b53188 [ 2318.920764][T20590] [<8021e610>] (dump_stack) from [<809f29e0>] (should_fail_ex+0x1c0/0x224) [ 2318.920898][T20590] [<809f2820>] (should_fail_ex) from [<809f2a58>] (should_fail+0x14/0x18) [ 2318.921043][T20590] r8:24008010 r7:20000240 r6:ed04de30 r5:00000000 r4:ed04df28 [ 2318.921070][T20590] [<809f2a44>] (should_fail) from [<809f2a78>] (should_fail_usercopy+0x1c/0x20) [ 2318.921138][T20590] [<809f2a5c>] (should_fail_usercopy) from [<81625368>] (copy_msghdr_from_user+0x50/0x1e0) [ 2318.921288][T20590] [<81625318>] (copy_msghdr_from_user) from [<81625570>] (___sys_sendmsg+0x78/0xd0) [ 2318.921413][T20590] r8:24008010 r7:00000000 r6:8567ea40 r5:ed04df28 r4:ed04de74 [ 2318.921471][T20590] [<816254f8>] (___sys_sendmsg) from [<816276fc>] (__sys_sendmsg+0x8c/0xe0) [ 2318.921638][T20590] r9:83f7bd40 r8:86305800 r7:24008010 r6:20000240 r5:86305801 r4:00000003 [ 2318.921719][T20590] [<81627670>] (__sys_sendmsg) from [<81627764>] (sys_sendmsg+0x14/0x18) [ 2318.921832][T20590] r8:8020029c r7:00000128 r6:0012f3e4 r5:00000000 r4:00000000 [ 2318.921964][T20590] [<81627750>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2318.922134][T20590] Exception stack(0xed04dfa8 to 0xed04dff0) [ 2318.922217][T20590] dfa0: 00000000 00000000 00000003 20000240 24008010 00000000 [ 2318.922262][T20590] dfc0: 00000000 00000000 0012f3e4 00000128 003562d8 00000000 00000001 76fa80dc [ 2318.922299][T20590] dfe0: 76fa7e88 76fa7e78 00018f80 001309e0 [ 2319.133254][ T28] audit: type=1400 audit(2000001416.680:716): avc: denied { create } for pid=20591 comm="syz.2.4018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2319.148845][ T28] audit: type=1400 audit(2000001416.690:717): avc: denied { write } for pid=20591 comm="syz.2.4018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2320.288523][ T28] audit: type=1400 audit(2000001417.840:718): avc: denied { lock } for pid=20591 comm="syz.2.4018" path="socket:[47203]" dev="sockfs" ino=47203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2321.730169][ T28] audit: type=1400 audit(2000001419.280:719): avc: denied { read } for pid=20598 comm="syz.6.4019" name="nullb0" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2321.732738][ T28] audit: type=1400 audit(2000001419.280:720): avc: denied { open } for pid=20598 comm="syz.6.4019" path="/dev/nullb0" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2323.453302][T20603] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20603 comm=syz.6.4020 [ 2323.883930][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 2323.884432][ T28] audit: type=1400 audit(2000001421.430:732): avc: denied { ioctl } for pid=20607 comm="syz.2.4022" path="socket:[46862]" dev="sockfs" ino=46862 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2324.878817][ T28] audit: type=1400 audit(2000001422.430:733): avc: denied { read write } for pid=20613 comm="syz.6.4023" name="udmabuf" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:usbtty_device_t:s0" [ 2324.882167][ T28] audit: type=1400 audit(2000001422.430:734): avc: denied { open } for pid=20613 comm="syz.6.4023" path="/dev/udmabuf" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:usbtty_device_t:s0" [ 2324.888656][ T28] audit: type=1400 audit(2000001422.430:735): avc: denied { mac_admin } for pid=20613 comm="syz.6.4023" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2324.892875][ T28] audit: type=1400 audit(2000001422.430:736): avc: denied { relabelto } for pid=20613 comm="syz.6.4023" name="udmabuf" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:usbtty_device_t:s0" [ 2324.908915][ T28] audit: type=1400 audit(2000001422.430:737): avc: denied { associate } for pid=20613 comm="syz.6.4023" name="udmabuf" dev="devtmpfs" ino=665 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:usbtty_device_t:s0" [ 2325.464614][ T28] audit: type=1400 audit(2000001423.010:738): avc: denied { read } for pid=20623 comm="syz.6.4024" dev="nsfs" ino=4026532755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2325.469339][ T28] audit: type=1400 audit(2000001423.020:739): avc: denied { open } for pid=20623 comm="syz.6.4024" path="net:[4026532755]" dev="nsfs" ino=4026532755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2325.472109][ T28] audit: type=1400 audit(2000001423.020:740): avc: denied { create } for pid=20623 comm="syz.6.4024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2325.513219][ T28] audit: type=1400 audit(2000001423.060:741): avc: denied { getopt } for pid=20623 comm="syz.6.4024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2328.345260][T20608] Invalid ELF header magic: != ELF [ 2329.017642][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 2329.018081][ T28] audit: type=1400 audit(2000001426.550:746): avc: denied { bind } for pid=20631 comm="syz.6.4027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2330.356021][ T28] audit: type=1400 audit(2000001427.900:747): avc: denied { setopt } for pid=20639 comm="syz.6.4028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2336.651809][ T28] audit: type=1400 audit(2000001434.200:748): avc: denied { create } for pid=20660 comm="syz.6.4033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2336.909310][T20665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2336.915289][T20665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2336.930858][T20665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2336.937485][T20665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2337.632102][ T28] audit: type=1400 audit(2000001435.170:749): avc: denied { execute } for pid=20680 comm="syz-executor" name="syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 2337.632601][ T28] audit: type=1400 audit(2000001435.170:750): avc: denied { execute_no_trans } for pid=20680 comm="syz-executor" path="/syz-executor" dev="vda" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 2337.693905][ T28] audit: type=1400 audit(2000001435.240:751): avc: denied { mounton } for pid=20683 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 2337.788656][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2337.868986][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2337.974347][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2338.071579][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2338.237796][ T6136] netdevsim netdevsim2 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 2338.238616][ T6136] netdevsim netdevsim2 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 2338.238932][ T6136] netdevsim netdevsim2 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 2338.239009][ T6136] netdevsim netdevsim2 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 2338.399850][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2338.405348][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2338.423106][ T51] bond0 (unregistering): Released all slaves [ 2338.491118][ T51] hsr_slave_0: left promiscuous mode [ 2338.492804][ T51] hsr_slave_1: left promiscuous mode [ 2338.501034][ T51] veth1_macvtap: left promiscuous mode [ 2338.501424][ T51] veth0_macvtap: left promiscuous mode [ 2338.501714][ T51] veth1_vlan: left promiscuous mode [ 2338.501822][ T51] veth0_vlan: left promiscuous mode [ 2339.618847][ T28] audit: type=1400 audit(2000001437.160:752): avc: denied { write } for pid=20735 comm="dhcpcd-run-hook" name="null" dev="devtmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2339.619400][ T28] audit: type=1400 audit(2000001437.160:753): avc: denied { open } for pid=20735 comm="dhcpcd-run-hook" path="/dev/null" dev="devtmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2339.805371][ T28] audit: type=1400 audit(2000001437.350:754): avc: denied { search } for pid=20746 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2339.805853][ T28] audit: type=1400 audit(2000001437.350:755): avc: denied { search } for pid=20746 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=11 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2339.806312][ T28] audit: type=1400 audit(2000001437.350:756): avc: denied { search } for pid=20746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2339.806571][ T28] audit: type=1400 audit(2000001437.350:757): avc: denied { search } for pid=20746 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=16 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2340.589628][ T2960] 8021q: adding VLAN 0 to HW filter on device eth21 [ 2340.620367][T20811] FAULT_INJECTION: forcing a failure. [ 2340.620367][T20811] name failslab, interval 1, probability 0, space 0, times 0 [ 2340.620832][T20811] CPU: 1 UID: 0 PID: 20811 Comm: syz.6.4039 Tainted: G L syzkaller #0 PREEMPT [ 2340.620939][T20811] Tainted: [L]=SOFTLOCKUP [ 2340.620959][T20811] Hardware name: ARM-Versatile Express [ 2340.620984][T20811] Call trace: [ 2340.621027][T20811] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2340.621939][T20811] r7:60000013 r6:60000013 r5:82333084 r4:00000000 [ 2340.621976][T20811] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 2340.622591][T20811] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 2340.622675][T20811] r7:86d255c0 r6:00000000 r5:86d255c0 r4:82b1ac48 [ 2340.622699][T20811] [<8021e610>] (dump_stack) from [<809f29e0>] (should_fail_ex+0x1c0/0x224) [ 2340.622775][T20811] [<809f2820>] (should_fail_ex) from [<80567aac>] (should_failslab+0x6c/0x94) [ 2340.622896][T20811] r8:00000000 r7:86d255c0 r6:830016c0 r5:00000c40 r4:00001000 [ 2340.622967][T20811] [<80567a40>] (should_failslab) from [<8054648c>] (__kmalloc_noprof+0xa8/0x3c8) [ 2340.623081][T20811] [<805463e4>] (__kmalloc_noprof) from [<8083312c>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 2340.623195][T20811] r10:00000000 r9:830bf000 r8:00000000 r7:834a4a18 r6:83899c28 r5:00001000 [ 2340.623235][T20811] r4:00000000 [ 2340.623271][T20811] [<808330f0>] (tomoyo_realpath_from_path) from [<8082f1f4>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2340.623355][T20811] r10:00000000 r9:00000003 r8:83899c00 r7:00008901 r6:81cdd7ec r5:00000004 [ 2340.623384][T20811] r4:83899c28 r3:828d2400 [ 2340.623495][T20811] [<8082f128>] (tomoyo_path_number_perm) from [<80833b48>] (tomoyo_file_ioctl+0x1c/0x20) [ 2340.623594][T20811] r10:86d255c0 r9:00000003 r8:83899c00 r7:20001400 r6:20001400 r5:00008901 [ 2340.623619][T20811] r4:83899c00 [ 2340.623741][T20811] [<80833b2c>] (tomoyo_file_ioctl) from [<807dea3c>] (security_file_ioctl+0x80/0x1d4) [ 2340.623921][T20811] [<807de9bc>] (security_file_ioctl) from [<805baf1c>] (sys_ioctl+0x4c/0xb5c) [ 2340.624101][T20811] r7:20001400 r6:00008901 r5:83899c01 r4:00000000 [ 2340.624135][T20811] [<805baed0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2340.624255][T20811] Exception stack(0xdfb6dfa8 to 0xdfb6dff0) [ 2340.624511][T20811] dfa0: 00000000 00000000 00000003 00008901 20001400 00000000 [ 2340.624681][T20811] dfc0: 00000000 00000000 0012f3e4 00000036 003562d8 00000000 00000001 76fdd0dc [ 2340.624770][T20811] dfe0: 76fdce88 76fdce78 00018f80 001309e0 [ 2340.624894][T20811] r10:00000036 r9:86d255c0 r8:8020029c r7:00000036 r6:0012f3e4 r5:00000000 [ 2340.625008][T20811] r4:00000000 [ 2340.678388][T20811] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2341.038348][T20683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2341.046089][T20683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2341.683439][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 2341.683715][ T28] audit: type=1400 audit(2000001439.230:773): avc: denied { write } for pid=20853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2341.975579][ T28] audit: type=1400 audit(2000001439.520:774): avc: denied { write } for pid=20878 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2342.353211][T20683] hsr_slave_0: entered promiscuous mode [ 2342.355292][T20683] hsr_slave_1: entered promiscuous mode [ 2342.378377][T20683] debugfs: 'hsr0' already exists in 'hsr' [ 2342.378919][T20683] Cannot create hsr debugfs directory [ 2342.439461][ T2960] 8021q: adding VLAN 0 to HW filter on device eth22 [ 2342.972888][T20683] netdevsim netdevsim2 eth24 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2343.079402][T20683] netdevsim netdevsim2 eth23 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2343.150681][T20683] netdevsim netdevsim2 eth22 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2343.203064][T20683] netdevsim netdevsim2 eth21 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2343.345080][T20683] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2343.354320][T20683] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2343.372045][T20683] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2343.383440][T20683] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2343.390900][T20683] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2343.411836][T20683] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2343.416777][T20683] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2343.432810][T20683] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2343.495852][ T28] audit: type=1400 audit(2000001441.040:775): avc: denied { write } for pid=20976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2343.758290][ T28] audit: type=1400 audit(2000001441.280:776): avc: denied { write } for pid=21008 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2343.848995][T21012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2343.878253][T21012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2344.100453][ T28] audit: type=1400 audit(2000001441.650:777): avc: denied { ioctl } for pid=21010 comm="syz.6.4041" path="socket:[48376]" dev="sockfs" ino=48376 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2344.121688][ T28] audit: type=1400 audit(2000001441.670:778): avc: denied { accept } for pid=21010 comm="syz.6.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2344.125406][ T28] audit: type=1400 audit(2000001441.670:779): avc: denied { write } for pid=21010 comm="syz.6.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2344.158173][T21012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2344.168687][T21012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2344.672013][T20683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2345.557736][ T28] audit: type=1400 audit(2000001443.100:780): avc: denied { write } for pid=21026 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2346.295425][ T28] audit: type=1400 audit(2000001443.840:781): avc: denied { write } for pid=21037 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2347.137419][ T28] audit: type=1400 audit(2000001444.670:782): avc: denied { write } for pid=21044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2347.589818][ T28] audit: type=1400 audit(2000001445.140:783): avc: denied { write } for pid=21050 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2348.388011][ T28] audit: type=1400 audit(2000001445.930:784): avc: denied { write } for pid=21056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2348.651890][ T28] audit: type=1400 audit(2000001446.200:785): avc: denied { write } for pid=21067 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2349.339366][T20683] veth0_vlan: entered promiscuous mode [ 2349.370523][T20683] veth1_vlan: entered promiscuous mode [ 2349.458995][T20683] veth0_macvtap: entered promiscuous mode [ 2349.475852][T20683] veth1_macvtap: entered promiscuous mode [ 2349.529065][ T28] audit: type=1400 audit(2000001447.080:786): avc: denied { write } for pid=21073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2349.618480][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2349.659367][ T6136] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2349.660362][ T6136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2349.663982][ T6136] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2349.710649][ T28] audit: type=1400 audit(2000001447.260:787): avc: denied { mounton } for pid=20683 comm="syz-executor" path="/syzkaller.9LZmNP/syz-tmp" dev="vda" ino=825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 2349.713483][ T28] audit: type=1400 audit(2000001447.260:788): avc: denied { mount } for pid=20683 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2349.715207][ T28] audit: type=1400 audit(2000001447.260:789): avc: denied { mounton } for pid=20683 comm="syz-executor" path="/syzkaller.9LZmNP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2349.721075][ T28] audit: type=1400 audit(2000001447.270:790): avc: denied { mount } for pid=20683 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2349.729181][ T28] audit: type=1400 audit(2000001447.270:791): avc: denied { mounton } for pid=20683 comm="syz-executor" path="/syzkaller.9LZmNP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 2350.641533][T21089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=21089 comm=syz.2.4045 [ 2354.025834][T21118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2354.034174][T21118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2354.044384][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 2354.049466][ T28] audit: type=1400 audit(2000001451.590:805): avc: denied { bind } for pid=21117 comm="syz.2.4052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2354.300624][ T28] audit: type=1400 audit(2000001451.850:806): avc: denied { remount } for pid=21121 comm="syz.2.4053" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2354.755073][ T28] audit: type=1400 audit(2000001452.300:807): avc: denied { unmount } for pid=20683 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2354.904798][ T28] audit: type=1400 audit(2000001452.450:808): avc: denied { setopt } for pid=21123 comm="syz.2.4054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2355.508075][ T28] audit: type=1400 audit(2000001453.050:809): avc: denied { getopt } for pid=21129 comm="syz.6.4057" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2355.681503][ T28] audit: type=1400 audit(2000001453.230:810): avc: denied { ioctl } for pid=21129 comm="syz.6.4057" path="socket:[47578]" dev="sockfs" ino=47578 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2355.760523][ T28] audit: type=1400 audit(2000001453.310:811): avc: denied { create } for pid=21129 comm="syz.6.4057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2355.773807][ T28] audit: type=1400 audit(2000001453.320:812): avc: denied { write } for pid=21129 comm="syz.6.4057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2355.806001][ T28] audit: type=1400 audit(2000001453.350:813): avc: denied { setattr } for pid=21129 comm="syz.6.4057" name="NETLINK" dev="sockfs" ino=48614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2357.449359][ T28] audit: type=1400 audit(2000001455.000:814): avc: denied { setopt } for pid=21141 comm="syz.6.4059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2361.262138][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 2361.268160][ T28] audit: type=1400 audit(2000001458.810:817): avc: denied { write } for pid=21162 comm="syz.2.4066" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2362.157686][ T28] audit: type=1400 audit(2000001459.700:818): avc: denied { create } for pid=21169 comm="syz.2.4067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2364.898771][ T28] audit: type=1400 audit(2000001462.450:819): avc: denied { lock } for pid=21182 comm="syz.6.4070" path="/dev/uhid" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2364.905935][ T28] audit: type=1400 audit(2000001462.450:820): avc: denied { write } for pid=21182 comm="syz.6.4070" path="socket:[48699]" dev="sockfs" ino=48699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2364.916309][ T28] audit: type=1400 audit(2000001462.460:821): avc: denied { ioctl } for pid=21182 comm="syz.6.4070" path="socket:[48699]" dev="sockfs" ino=48699 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2365.162651][ T28] audit: type=1400 audit(2000001462.710:822): avc: denied { map } for pid=21186 comm="syz.6.4072" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2365.164448][ T28] audit: type=1400 audit(2000001462.710:823): avc: denied { read write } for pid=21186 comm="syz.6.4072" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2365.360221][ T28] audit: type=1400 audit(2000001462.910:824): avc: denied { prog_load } for pid=21186 comm="syz.6.4072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2365.362608][ T28] audit: type=1400 audit(2000001462.910:825): avc: denied { perfmon } for pid=21186 comm="syz.6.4072" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2369.771738][ T28] audit: type=1400 audit(2000001467.320:826): avc: denied { create } for pid=21237 comm="syz.2.4082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2369.802232][ T28] audit: type=1400 audit(2000001467.350:827): avc: denied { write } for pid=21237 comm="syz.2.4082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2369.841324][ T28] audit: type=1400 audit(2000001467.390:828): avc: denied { ioctl } for pid=21237 comm="syz.2.4082" path="socket:[48738]" dev="sockfs" ino=48738 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2369.843592][T21238] ======================================================= [ 2369.843592][T21238] WARNING: The mand mount option has been deprecated and [ 2369.843592][T21238] and is ignored by this kernel. Remove the mand [ 2369.843592][T21238] option from the mount to silence this warning. [ 2369.843592][T21238] ======================================================= [ 2369.846227][ T28] audit: type=1400 audit(2000001467.390:829): avc: denied { mount } for pid=21237 comm="syz.2.4082" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2370.115803][ T28] audit: type=1400 audit(2000001467.660:830): avc: denied { unmount } for pid=20683 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2370.277339][ T28] audit: type=1400 audit(2000001467.820:831): avc: denied { prog_run } for pid=21241 comm="syz.2.4083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2374.316723][ T28] audit: type=1400 audit(2000001471.860:832): avc: denied { name_bind } for pid=21259 comm="syz.2.4088" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 2375.217501][ T28] audit: type=1400 audit(2000001472.760:833): avc: denied { unmount } for pid=17329 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2376.969325][ T28] audit: type=1400 audit(2000001474.520:834): avc: denied { ioctl } for pid=21267 comm="syz.2.4091" path="socket:[47782]" dev="sockfs" ino=47782 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2376.981672][ T28] audit: type=1400 audit(2000001474.530:835): avc: denied { write } for pid=21267 comm="syz.2.4091" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 2379.922522][T21281] FAULT_INJECTION: forcing a failure. [ 2379.922522][T21281] name failslab, interval 1, probability 0, space 0, times 0 [ 2379.923085][T21281] CPU: 0 UID: 0 PID: 21281 Comm: syz.2.4093 Tainted: G L syzkaller #0 PREEMPT [ 2379.923178][T21281] Tainted: [L]=SOFTLOCKUP [ 2379.923203][T21281] Hardware name: ARM-Versatile Express [ 2379.923230][T21281] Call trace: [ 2379.923334][T21281] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2379.923450][T21281] r7:60000013 r6:60000013 r5:82333084 r4:00000000 [ 2379.923490][T21281] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 2379.923555][T21281] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 2379.923627][T21281] r7:850f9880 r6:00000000 r5:850f9880 r4:82b1ac48 [ 2379.923648][T21281] [<8021e610>] (dump_stack) from [<809f29e0>] (should_fail_ex+0x1c0/0x224) [ 2379.923724][T21281] [<809f2820>] (should_fail_ex) from [<80567aac>] (should_failslab+0x6c/0x94) [ 2379.923808][T21281] r8:00000000 r7:850f9880 r6:830016c0 r5:00000c40 r4:00001000 [ 2379.923829][T21281] [<80567a40>] (should_failslab) from [<8054648c>] (__kmalloc_noprof+0xa8/0x3c8) [ 2379.923896][T21281] [<805463e4>] (__kmalloc_noprof) from [<8083312c>] (tomoyo_realpath_from_path+0x3c/0x16c) [ 2379.923980][T21281] r10:00000000 r9:830c0000 r8:00000000 r7:834f0a18 r6:864e9da8 r5:00001000 [ 2379.924005][T21281] r4:00000000 [ 2379.924023][T21281] [<808330f0>] (tomoyo_realpath_from_path) from [<8082f1f4>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2379.924100][T21281] r10:00000000 r9:00000004 r8:864e9d80 r7:40046207 r6:81cdd7ec r5:00000004 [ 2379.924127][T21281] r4:864e9da8 r3:828d2400 [ 2379.924146][T21281] [<8082f128>] (tomoyo_path_number_perm) from [<80833b48>] (tomoyo_file_ioctl+0x1c/0x20) [ 2379.924229][T21281] r10:850f9880 r9:00000004 r8:864e9d80 r7:00000000 r6:00000000 r5:40046207 [ 2379.924253][T21281] r4:864e9d80 [ 2379.924271][T21281] [<80833b2c>] (tomoyo_file_ioctl) from [<807dea3c>] (security_file_ioctl+0x80/0x1d4) [ 2379.924339][T21281] [<807de9bc>] (security_file_ioctl) from [<805baf1c>] (sys_ioctl+0x4c/0xb5c) [ 2379.924415][T21281] r7:00000000 r6:40046207 r5:864e9d81 r4:00000000 [ 2379.924437][T21281] [<805baed0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2379.924496][T21281] Exception stack(0xdf9fdfa8 to 0xdf9fdff0) [ 2379.924540][T21281] dfa0: 00000000 00000000 00000004 40046207 00000000 00000000 [ 2379.924580][T21281] dfc0: 00000000 00000000 0012f3e4 00000036 003562d8 00000000 00000001 76fb40dc [ 2379.924615][T21281] dfe0: 76fb3e88 76fb3e78 00018f80 001309e0 [ 2379.924658][T21281] r10:00000036 r9:850f9880 r8:8020029c r7:00000036 r6:0012f3e4 r5:00000000 [ 2379.924725][T21281] r4:00000000 [ 2379.924767][T21281] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2380.295652][ T28] audit: type=1400 audit(2000001477.840:836): avc: denied { getopt } for pid=21284 comm="syz.2.4095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2382.748992][ T28] audit: type=1400 audit(2000001480.300:837): avc: denied { getopt } for pid=21308 comm="syz.6.4103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2382.798198][ T28] audit: type=1400 audit(2000001480.340:838): avc: denied { ioctl } for pid=21308 comm="syz.6.4103" path="socket:[48872]" dev="sockfs" ino=48872 ioctlcmd=0x4dfe scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2383.259275][ T28] audit: type=1400 audit(2000001480.800:839): avc: denied { connect } for pid=21314 comm="syz.6.4106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2383.260911][ T28] audit: type=1400 audit(2000001480.810:840): avc: denied { getopt } for pid=21314 comm="syz.6.4106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2384.149021][ T28] audit: type=1400 audit(2000001481.700:841): avc: denied { remount } for pid=21321 comm="syz.2.4109" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2384.291663][T21328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2384.294477][T21328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2384.761702][ T28] audit: type=1400 audit(2000001482.310:842): avc: denied { getopt } for pid=21332 comm="syz.2.4112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2385.050443][ T28] audit: type=1400 audit(2000001482.600:843): avc: denied { read } for pid=21343 comm="syz.2.4114" name="kmsg" dev="proc" ino=4026532017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 2385.054308][ T28] audit: type=1400 audit(2000001482.600:844): avc: denied { open } for pid=21343 comm="syz.2.4114" path="/32/dev/kmsg" dev="proc" ino=4026532017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 2385.061449][ T28] audit: type=1400 audit(2000001482.610:845): avc: denied { unmount } for pid=20683 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2386.783527][T21368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2386.787794][T21368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2387.249417][ T28] audit: type=1400 audit(2000001484.800:846): avc: denied { create } for pid=21372 comm="syz.6.4120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2389.259741][ T28] audit: type=1400 audit(2000001486.810:847): avc: denied { ioctl } for pid=21379 comm="syz.2.4121" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2389.553822][T21384] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=21384 comm=syz.2.4122 [ 2393.619441][ T28] audit: type=1400 audit(2000001491.170:848): avc: denied { accept } for pid=21413 comm="syz.6.4131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 2397.899800][ T28] audit: type=1400 audit(2000001495.450:849): avc: denied { setopt } for pid=21433 comm="syz.2.4136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2398.036674][T21438] FAULT_INJECTION: forcing a failure. [ 2398.036674][T21438] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.041702][T21438] CPU: 0 UID: 0 PID: 21438 Comm: syz.2.4138 Tainted: G L syzkaller #0 PREEMPT [ 2398.041854][T21438] Tainted: [L]=SOFTLOCKUP [ 2398.041877][T21438] Hardware name: ARM-Versatile Express [ 2398.041905][T21438] Call trace: [ 2398.041951][T21438] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2398.042160][T21438] r7:60000013 r6:60000013 r5:82333084 r4:00000000 [ 2398.042235][T21438] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 2398.042327][T21438] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 2398.042429][T21438] r7:840d6200 r6:00000000 r5:840d6200 r4:82b1ac48 [ 2398.042491][T21438] [<8021e610>] (dump_stack) from [<809f29e0>] (should_fail_ex+0x1c0/0x224) [ 2398.042639][T21438] [<809f2820>] (should_fail_ex) from [<80567aac>] (should_failslab+0x6c/0x94) [ 2398.042770][T21438] r8:00000000 r7:840d6200 r6:8163924c r5:00000820 r4:830e4c00 [ 2398.042796][T21438] [<80567a40>] (should_failslab) from [<805454b8>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 2398.042917][T21438] [<8054545c>] (kmem_cache_alloc_noprof) from [<8163924c>] (skb_clone+0x60/0x1c8) [ 2398.043036][T21438] r10:86386184 r9:8616cc40 r8:86df3c00 r7:833b3300 r6:865a9700 r5:833b3300 [ 2398.043096][T21438] r4:00000820 [ 2398.043261][T21438] [<816391ec>] (skb_clone) from [<8175e6b0>] (__netlink_deliver_tap+0x1e4/0x27c) [ 2398.043379][T21438] r7:833b3300 r6:865a9700 r5:86df3c64 r4:865a9000 [ 2398.043407][T21438] [<8175e4cc>] (__netlink_deliver_tap) from [<817606e0>] (netlink_unicast+0x35c/0x380) [ 2398.043541][T21438] r10:86386184 r9:85b20000 r8:833b3300 r7:8616cc40 r6:00000014 r5:86df3c64 [ 2398.043567][T21438] r4:86df3c00 [ 2398.043586][T21438] [<81760384>] (netlink_unicast) from [<817608cc>] (netlink_sendmsg+0x1c8/0x444) [ 2398.043682][T21438] r10:00000000 r9:00000000 r8:00000000 r7:86386000 r6:00000014 r5:833b3300 [ 2398.043815][T21438] r4:e4429f28 [ 2398.043863][T21438] [<81760704>] (netlink_sendmsg) from [<816240f4>] (__sock_sendmsg+0x44/0x78) [ 2398.044107][T21438] r10:00000044 r9:00000000 r8:e4429dd4 r7:00000000 r6:856b9440 r5:e4429f28 [ 2398.044173][T21438] r4:00000000 [ 2398.044206][T21438] [<816240b0>] (__sock_sendmsg) from [<81625194>] (____sys_sendmsg+0x238/0x2c4) [ 2398.044308][T21438] r7:00000000 r6:00000000 r5:856b9440 r4:e4429f28 [ 2398.044400][T21438] [<81624f5c>] (____sys_sendmsg) from [<81625594>] (___sys_sendmsg+0x9c/0xd0) [ 2398.044540][T21438] r10:00000128 r9:20000100 r8:00000044 r7:00000000 r6:856b9440 r5:e4429f28 [ 2398.044636][T21438] r4:00000000 [ 2398.044748][T21438] [<816254f8>] (___sys_sendmsg) from [<816276fc>] (__sys_sendmsg+0x8c/0xe0) [ 2398.044931][T21438] r9:840d6200 r8:8602c200 r7:00000044 r6:20000100 r5:8602c201 r4:00000004 [ 2398.045025][T21438] [<81627670>] (__sys_sendmsg) from [<81627764>] (sys_sendmsg+0x14/0x18) [ 2398.045128][T21438] r8:8020029c r7:00000128 r6:0012f3e4 r5:00000000 r4:00000000 [ 2398.045147][T21438] [<81627750>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2398.045234][T21438] Exception stack(0xe4429fa8 to 0xe4429ff0) [ 2398.045316][T21438] 9fa0: 00000000 00000000 00000004 20000100 00000044 00000000 [ 2398.045479][T21438] 9fc0: 00000000 00000000 0012f3e4 00000128 003562d8 00000000 00000001 76fb40dc [ 2398.045560][T21438] 9fe0: 76fb3e88 76fb3e78 00018f80 001309e0 [ 2400.575629][T21453] FAULT_INJECTION: forcing a failure. [ 2400.575629][T21453] name failslab, interval 1, probability 0, space 0, times 0 [ 2400.602692][T21453] CPU: 1 UID: 0 PID: 21453 Comm: syz.6.4141 Tainted: G L syzkaller #0 PREEMPT [ 2400.602860][T21453] Tainted: [L]=SOFTLOCKUP [ 2400.602882][T21453] Hardware name: ARM-Versatile Express [ 2400.602956][T21453] Call trace: [ 2400.603006][T21453] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2400.603119][T21453] r7:60000013 r6:60000013 r5:82333084 r4:00000000 [ 2400.603143][T21453] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 2400.603219][T21453] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 2400.603293][T21453] r7:850f1880 r6:00000000 r5:850f1880 r4:82b1ac48 [ 2400.603316][T21453] [<8021e610>] (dump_stack) from [<809f29e0>] (should_fail_ex+0x1c0/0x224) [ 2400.603386][T21453] [<809f2820>] (should_fail_ex) from [<80567aac>] (should_failslab+0x6c/0x94) [ 2400.603468][T21453] r8:00000000 r7:850f1880 r6:8163924c r5:00000820 r4:830e4c00 [ 2400.603489][T21453] [<80567a40>] (should_failslab) from [<805454b8>] (kmem_cache_alloc_noprof+0x5c/0x3e0) [ 2400.603550][T21453] [<8054545c>] (kmem_cache_alloc_noprof) from [<8163924c>] (skb_clone+0x60/0x1c8) [ 2400.603636][T21453] r10:86396184 r9:86470640 r8:85901c00 r7:86d140c0 r6:86a8f700 r5:86d140c0 [ 2400.603665][T21453] r4:00000820 [ 2400.603687][T21453] [<816391ec>] (skb_clone) from [<8175e6b0>] (__netlink_deliver_tap+0x1e4/0x27c) [ 2400.603766][T21453] r7:86d140c0 r6:86a8f700 r5:85901c64 r4:86a8f000 [ 2400.603790][T21453] [<8175e4cc>] (__netlink_deliver_tap) from [<817606e0>] (netlink_unicast+0x35c/0x380) [ 2400.603872][T21453] r10:86396184 r9:858d2000 r8:86d140c0 r7:86470640 r6:00000018 r5:85901c64 [ 2400.603895][T21453] r4:85901c00 [ 2400.603912][T21453] [<81760384>] (netlink_unicast) from [<817608cc>] (netlink_sendmsg+0x1c8/0x444) [ 2400.603990][T21453] r10:00000000 r9:00000000 r8:00000000 r7:86396000 r6:00000018 r5:86d140c0 [ 2400.604036][T21453] r4:e84d5e70 [ 2400.604056][T21453] [<81760704>] (netlink_sendmsg) from [<816240f4>] (__sock_sendmsg+0x44/0x78) [ 2400.604136][T21453] r10:81e60e00 r9:850f1880 r8:81624128 r7:867a5c80 r6:856bca40 r5:e84d5e70 [ 2400.604158][T21453] r4:00000000 [ 2400.604175][T21453] [<816240b0>] (__sock_sendmsg) from [<816241d8>] (sock_write_iter+0xb0/0xfc) [ 2400.604253][T21453] r7:867a5c80 r6:856bca40 r5:e84d5f08 r4:e84d5ef0 [ 2400.604272][T21453] [<81624128>] (sock_write_iter) from [<8059fe1c>] (vfs_write+0x3b8/0x42c) [ 2400.604345][T21453] r7:00000000 r6:20000940 r5:867a5c80 r4:00000018 [ 2400.604365][T21453] [<8059fa64>] (vfs_write) from [<805a005c>] (ksys_write+0xcc/0xec) [ 2400.604440][T21453] r10:00000004 r9:850f1880 r8:8020029c r7:00000018 r6:20000940 r5:867a5c80 [ 2400.604461][T21453] r4:867a5c81 [ 2400.604479][T21453] [<8059ff90>] (ksys_write) from [<805a008c>] (sys_write+0x10/0x14) [ 2400.604545][T21453] r7:00000004 r6:0012f3e4 r5:00000000 r4:00000000 [ 2400.604564][T21453] [<805a007c>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2400.604620][T21453] Exception stack(0xe84d5fa8 to 0xe84d5ff0) [ 2400.604663][T21453] 5fa0: 00000000 00000000 00000003 20000940 00000018 00000000 [ 2400.604703][T21453] 5fc0: 00000000 00000000 0012f3e4 00000004 003562d8 00000000 00000001 76fdd0dc [ 2400.604734][T21453] 5fe0: 76fdce88 76fdce78 00018f80 001309e0 [ 2400.887305][ T28] audit: type=1400 audit(2000001498.430:850): avc: denied { ioctl } for pid=21455 comm="syz.6.4142" path="/dev/udmabuf" dev="devtmpfs" ino=665 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:usbtty_device_t:s0" [ 2401.161207][T21454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2401.161957][T21454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2411.905355][ T28] audit: type=1400 audit(2000001509.450:851): avc: denied { read } for pid=21501 comm="syz.6.4153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2413.359889][T21512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21512 comm=syz.6.4156 [ 2415.792348][ T28] audit: type=1400 audit(2000001513.340:852): avc: denied { mount } for pid=21538 comm="syz.2.4163" name="/" dev="ramfs" ino=49258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2416.723389][T21548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2416.724388][T21548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2419.004323][ T28] audit: type=1400 audit(2000001516.550:853): avc: denied { mounton } for pid=21561 comm="syz.6.4169" path="/472/file0" dev="tmpfs" ino=2524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 2419.011358][ T28] audit: type=1400 audit(2000001516.560:854): avc: denied { mount } for pid=21561 comm="syz.6.4169" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2419.474901][T21566] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21566 comm=syz.6.4171 [ 2419.495346][T21566] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21566 comm=syz.6.4171 [ 2419.541924][T21566] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21566 comm=syz.6.4171 [ 2420.307879][ T28] audit: type=1400 audit(2000001517.850:855): avc: denied { setopt } for pid=21557 comm="syz.2.4168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2421.148647][T21575] FAULT_INJECTION: forcing a failure. [ 2421.148647][T21575] name failslab, interval 1, probability 0, space 0, times 0 [ 2421.150354][T21575] CPU: 1 UID: 0 PID: 21575 Comm: syz.2.4174 Tainted: G L syzkaller #0 PREEMPT [ 2421.150482][T21575] Tainted: [L]=SOFTLOCKUP [ 2421.150507][T21575] Hardware name: ARM-Versatile Express [ 2421.150531][T21575] Call trace: [ 2421.150562][T21575] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2421.150677][T21575] r7:60000013 r6:60000013 r5:82333084 r4:00000000 [ 2421.150701][T21575] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 2421.150796][T21575] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 2421.150836][T21575] r7:8478a4c0 r6:00000000 r5:8478a4c0 r4:82b1ac48 [ 2421.150856][T21575] [<8021e610>] (dump_stack) from [<809f29e0>] (should_fail_ex+0x1c0/0x224) [ 2421.150928][T21575] [<809f2820>] (should_fail_ex) from [<80567aac>] (should_failslab+0x6c/0x94) [ 2421.151015][T21575] r8:00000000 r7:8478a4c0 r6:83001240 r5:00000d40 r4:0000001d [ 2421.151035][T21575] [<80567a40>] (should_failslab) from [<8054648c>] (__kmalloc_noprof+0xa8/0x3c8) [ 2421.151080][T21575] [<805463e4>] (__kmalloc_noprof) from [<80833038>] (tomoyo_encode2+0x64/0xec) [ 2421.151122][T21575] r10:00000fff r9:830c0000 r8:00000000 r7:834f02a8 r6:873b0fa8 r5:84195ffc [ 2421.151133][T21575] r4:84195fea [ 2421.151142][T21575] [<80832fd4>] (tomoyo_encode2) from [<808330e4>] (tomoyo_encode+0x24/0x30) [ 2421.151222][T21575] r9:830c0000 r8:00000000 r7:834f02a8 r6:873b0fa8 r5:00001000 r4:84195feb [ 2421.151246][T21575] [<808330c0>] (tomoyo_encode) from [<80833170>] (tomoyo_realpath_from_path+0x80/0x16c) [ 2421.151314][T21575] r5:00001000 r4:84195000 [ 2421.151336][T21575] [<808330f0>] (tomoyo_realpath_from_path) from [<8082f1f4>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2421.151409][T21575] r10:00000000 r9:00000003 r8:873b0f80 r7:00005421 r6:81cdd7ec r5:00000004 [ 2421.151431][T21575] r4:873b0fa8 r3:828d2400 [ 2421.151448][T21575] [<8082f128>] (tomoyo_path_number_perm) from [<80833b48>] (tomoyo_file_ioctl+0x1c/0x20) [ 2421.151490][T21575] r10:8478a4c0 r9:00000003 r8:873b0f80 r7:200000c0 r6:200000c0 r5:00005421 [ 2421.151515][T21575] r4:873b0f80 [ 2421.151534][T21575] [<80833b2c>] (tomoyo_file_ioctl) from [<807dea3c>] (security_file_ioctl+0x80/0x1d4) [ 2421.151599][T21575] [<807de9bc>] (security_file_ioctl) from [<805baf1c>] (sys_ioctl+0x4c/0xb5c) [ 2421.151677][T21575] r7:200000c0 r6:00005421 r5:873b0f81 r4:00000000 [ 2421.151703][T21575] [<805baed0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2421.151815][T21575] Exception stack(0xea9bdfa8 to 0xea9bdff0) [ 2421.151860][T21575] dfa0: 00000000 00000000 00000003 00005421 200000c0 00000000 [ 2421.151897][T21575] dfc0: 00000000 00000000 0012f3e4 00000036 003562d8 00000000 00000001 76fb40dc [ 2421.151925][T21575] dfe0: 76fb3e88 76fb3e78 00018f80 001309e0 [ 2421.151963][T21575] r10:00000036 r9:8478a4c0 r8:8020029c r7:00000036 r6:0012f3e4 r5:00000000 [ 2421.151987][T21575] r4:00000000 [ 2421.168704][T21575] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2421.823289][ T28] audit: type=1400 audit(2000001519.370:856): avc: denied { ioctl } for pid=21582 comm="syz.2.4178" path="socket:[49334]" dev="sockfs" ino=49334 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2421.832276][ T28] audit: type=1400 audit(2000001519.380:857): avc: denied { bind } for pid=21582 comm="syz.2.4178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2421.872177][T21583] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21583 comm=syz.2.4178 [ 2421.889446][ T28] audit: type=1400 audit(2000001519.440:858): avc: denied { nlmsg_write } for pid=21582 comm="syz.2.4178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2421.897377][ T28] audit: type=1400 audit(2000001519.440:859): avc: denied { read } for pid=21582 comm="syz.2.4178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2422.325456][T21583] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21583 comm=syz.2.4178 [ 2424.538467][ T28] audit: type=1400 audit(2000001522.090:860): avc: denied { write } for pid=21615 comm="syz.2.4190" name="psched" dev="proc" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2425.887695][ T28] audit: type=1400 audit(2000001523.430:861): avc: denied { ioctl } for pid=21624 comm="syz.2.4193" path="socket:[49400]" dev="sockfs" ino=49400 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2426.352921][T21643] random: crng reseeded on system resumption [ 2426.868704][T21659] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=770 sclass=netlink_audit_socket pid=21659 comm=syz.2.4202 [ 2428.798170][ T28] audit: type=1400 audit(2000001526.340:862): avc: denied { write } for pid=21677 comm="syz.2.4208" path="socket:[50523]" dev="sockfs" ino=50523 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2433.143301][T21719] FAULT_INJECTION: forcing a failure. [ 2433.143301][T21719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2433.145843][T21719] CPU: 0 UID: 0 PID: 21719 Comm: syz.2.4220 Tainted: G L syzkaller #0 PREEMPT [ 2433.145980][T21719] Tainted: [L]=SOFTLOCKUP [ 2433.146004][T21719] Hardware name: ARM-Versatile Express [ 2433.146066][T21719] Call trace: [ 2433.146159][T21719] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2433.146280][T21719] r7:60000013 r6:60000013 r5:82333084 r4:00000000 [ 2433.146306][T21719] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 2433.146369][T21719] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 2433.146442][T21719] r7:200001c0 r6:00000000 r5:86d20000 r4:82b53188 [ 2433.146463][T21719] [<8021e610>] (dump_stack) from [<809f29e0>] (should_fail_ex+0x1c0/0x224) [ 2433.146531][T21719] [<809f2820>] (should_fail_ex) from [<809f2a58>] (should_fail+0x14/0x18) [ 2433.146608][T21719] r8:02008000 r7:200001c0 r6:eb205e30 r5:00000000 r4:eb205f28 [ 2433.146637][T21719] [<809f2a44>] (should_fail) from [<809f2a78>] (should_fail_usercopy+0x1c/0x20) [ 2433.146705][T21719] [<809f2a5c>] (should_fail_usercopy) from [<81625368>] (copy_msghdr_from_user+0x50/0x1e0) [ 2433.146837][T21719] [<81625318>] (copy_msghdr_from_user) from [<81625570>] (___sys_sendmsg+0x78/0xd0) [ 2433.146928][T21719] r8:02008000 r7:00000000 r6:856be2c0 r5:eb205f28 r4:eb205e74 [ 2433.146953][T21719] [<816254f8>] (___sys_sendmsg) from [<816276fc>] (__sys_sendmsg+0x8c/0xe0) [ 2433.147029][T21719] r9:86d20000 r8:867a6580 r7:02008000 r6:200001c0 r5:867a6581 r4:00000003 [ 2433.147053][T21719] [<81627670>] (__sys_sendmsg) from [<81627764>] (sys_sendmsg+0x14/0x18) [ 2433.147120][T21719] r8:8020029c r7:00000128 r6:0012f3e4 r5:00000000 r4:00000000 [ 2433.147142][T21719] [<81627750>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2433.147228][T21719] Exception stack(0xeb205fa8 to 0xeb205ff0) [ 2433.147279][T21719] 5fa0: 00000000 00000000 00000003 200001c0 02008000 00000000 [ 2433.147321][T21719] 5fc0: 00000000 00000000 0012f3e4 00000128 003562d8 00000000 00000001 76fb40dc [ 2433.147353][T21719] 5fe0: 76fb3e88 76fb3e78 00018f80 001309e0 [ 2436.358659][T21739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21739 comm=syz.2.4226 [ 2436.539039][ T28] audit: type=1400 audit(2000001534.090:863): avc: denied { ioctl } for pid=21738 comm="syz.2.4226" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=49566 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2448.091093][T21772] FAULT_INJECTION: forcing a failure. [ 2448.091093][T21772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2448.094797][T21772] CPU: 0 UID: 0 PID: 21772 Comm: syz.2.4235 Tainted: G L syzkaller #0 PREEMPT [ 2448.094938][T21772] Tainted: [L]=SOFTLOCKUP [ 2448.094962][T21772] Hardware name: ARM-Versatile Express [ 2448.094991][T21772] Call trace: [ 2448.095049][T21772] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2448.095172][T21772] r7:60000013 r6:60000013 r5:82333084 r4:00000000 [ 2448.095194][T21772] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 2448.095252][T21772] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 2448.095320][T21772] r7:200003c0 r6:00000000 r5:86d20000 r4:82b53188 [ 2448.095338][T21772] [<8021e610>] (dump_stack) from [<809f29e0>] (should_fail_ex+0x1c0/0x224) [ 2448.095402][T21772] [<809f2820>] (should_fail_ex) from [<809f2a58>] (should_fail+0x14/0x18) [ 2448.095478][T21772] r8:00000000 r7:200003c0 r6:00000010 r5:00000000 r4:ebc81f38 [ 2448.095499][T21772] [<809f2a44>] (should_fail) from [<809f2a78>] (should_fail_usercopy+0x1c/0x20) [ 2448.095564][T21772] [<809f2a5c>] (should_fail_usercopy) from [<80929c28>] (_copy_from_iter+0x64/0x7c4) [ 2448.095629][T21772] [<80929bc4>] (_copy_from_iter) from [<81a113dc>] (isotp_sendmsg+0x28c/0xa8c) [ 2448.095708][T21772] r10:86d80000 r9:ebc81f28 r8:00000000 r7:00000002 r6:86d844c8 r5:00000010 [ 2448.095731][T21772] r4:86d82000 [ 2448.095752][T21772] [<81a11150>] (isotp_sendmsg) from [<816240f4>] (__sock_sendmsg+0x44/0x78) [ 2448.095831][T21772] r10:00000040 r9:00000000 r8:ebc81dd4 r7:00000000 r6:856bd6c0 r5:ebc81f28 [ 2448.095853][T21772] r4:00000000 [ 2448.095873][T21772] [<816240b0>] (__sock_sendmsg) from [<81625194>] (____sys_sendmsg+0x238/0x2c4) [ 2448.095943][T21772] r7:00000000 r6:00000000 r5:856bd6c0 r4:ebc81f28 [ 2448.095965][T21772] [<81624f5c>] (____sys_sendmsg) from [<81625594>] (___sys_sendmsg+0x9c/0xd0) [ 2448.096055][T21772] r10:00000128 r9:20001600 r8:00000040 r7:00000000 r6:856bd6c0 r5:ebc81f28 [ 2448.096078][T21772] r4:00000000 [ 2448.096098][T21772] [<816254f8>] (___sys_sendmsg) from [<816276fc>] (__sys_sendmsg+0x8c/0xe0) [ 2448.096175][T21772] r9:86d20000 r8:873b0000 r7:00000040 r6:20001600 r5:873b0001 r4:00000003 [ 2448.096197][T21772] [<81627670>] (__sys_sendmsg) from [<81627764>] (sys_sendmsg+0x14/0x18) [ 2448.096261][T21772] r8:8020029c r7:00000128 r6:0012f3e4 r5:00000000 r4:00000000 [ 2448.096281][T21772] [<81627750>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2448.096332][T21772] Exception stack(0xebc81fa8 to 0xebc81ff0) [ 2448.096375][T21772] 1fa0: 00000000 00000000 00000003 20001600 00000040 00000000 [ 2448.096414][T21772] 1fc0: 00000000 00000000 0012f3e4 00000128 003562d8 00000000 00000001 76fb40dc [ 2448.096445][T21772] 1fe0: 76fb3e88 76fb3e78 00018f80 001309e0 [ 2448.767724][ T28] audit: type=1400 audit(2000001546.310:864): avc: denied { write } for pid=21776 comm="syz.2.4237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2449.046553][ T28] audit: type=1400 audit(2000001546.590:865): avc: denied { ioctl } for pid=21776 comm="syz.2.4237" path="socket:[50657]" dev="sockfs" ino=50657 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2449.760203][ T28] audit: type=1400 audit(2000001547.310:866): avc: denied { setattr } for pid=21776 comm="syz.2.4237" name="NETLINK" dev="sockfs" ino=50657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2452.683792][T21815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2452.686093][T21815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2457.466391][T21853] FAULT_INJECTION: forcing a failure. [ 2457.466391][T21853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2457.466869][T21853] CPU: 0 UID: 0 PID: 21853 Comm: syz.6.4259 Tainted: G L syzkaller #0 PREEMPT [ 2457.467007][T21853] Tainted: [L]=SOFTLOCKUP [ 2457.467035][T21853] Hardware name: ARM-Versatile Express [ 2457.467063][T21853] Call trace: [ 2457.467113][T21853] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2457.467256][T21853] r7:60000013 r6:60000013 r5:82333084 r4:00000000 [ 2457.467281][T21853] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 2457.467346][T21853] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 2457.467457][T21853] r7:00000000 r6:00000000 r5:86d24980 r4:82b53188 [ 2457.467493][T21853] [<8021e610>] (dump_stack) from [<809f29e0>] (should_fail_ex+0x1c0/0x224) [ 2457.467593][T21853] [<809f2820>] (should_fail_ex) from [<809f2a58>] (should_fail+0x14/0x18) [ 2457.467700][T21853] r8:76fdcf08 r7:00000000 r6:00000000 r5:ebe3df68 r4:00000002 [ 2457.467766][T21853] [<809f2a44>] (should_fail) from [<809f2a78>] (should_fail_usercopy+0x1c/0x20) [ 2457.467899][T21853] [<809f2a5c>] (should_fail_usercopy) from [<805df5b4>] (simple_read_from_buffer+0x80/0x140) [ 2457.467991][T21853] [<805df534>] (simple_read_from_buffer) from [<80663748>] (proc_fail_nth_read+0xb8/0x108) [ 2457.468084][T21853] r10:80663690 r9:00000001 r8:00000002 r7:ebe3df68 r6:0000000f r5:76fdcf08 [ 2457.468123][T21853] r4:86d24980 r3:ebe3de9f [ 2457.468142][T21853] [<80663690>] (proc_fail_nth_read) from [<8059f2b8>] (vfs_read+0xc0/0x328) [ 2457.468233][T21853] r8:86d24980 r7:ebe3df68 r6:76fdcf08 r5:8602aa80 r4:0000000f [ 2457.468255][T21853] [<8059f1f8>] (vfs_read) from [<8059ff04>] (ksys_read+0x74/0xec) [ 2457.468358][T21853] r10:00000003 r9:86d24980 r8:8020029c r7:00000000 r6:00000000 r5:8602aa80 [ 2457.468414][T21853] r4:8602aa83 [ 2457.468447][T21853] [<8059fe90>] (ksys_read) from [<8059ff8c>] (sys_read+0x10/0x14) [ 2457.468521][T21853] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 2457.468668][T21853] [<8059ff7c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2457.468732][T21853] Exception stack(0xebe3dfa8 to 0xebe3dff0) [ 2457.468804][T21853] dfa0: 00000000 00000000 00000005 76fdcf08 0000000f 00000000 [ 2457.468845][T21853] dfc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76fdd0dc [ 2457.468877][T21853] dfe0: 76fdce58 76fdce44 0010bc04 001127e8 [ 2458.586487][ T28] audit: type=1400 audit(2000001556.130:867): avc: denied { read } for pid=21866 comm="syz.6.4264" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2458.598771][ T28] audit: type=1400 audit(2000001556.150:868): avc: denied { write } for pid=21866 comm="syz.6.4264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2460.260509][T21892] FAULT_INJECTION: forcing a failure. [ 2460.260509][T21892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2460.277841][T21892] CPU: 1 UID: 0 PID: 21892 Comm: syz.2.4273 Tainted: G L syzkaller #0 PREEMPT [ 2460.278012][T21892] Tainted: [L]=SOFTLOCKUP [ 2460.278066][T21892] Hardware name: ARM-Versatile Express [ 2460.278096][T21892] Call trace: [ 2460.278174][T21892] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2460.278313][T21892] r7:60000113 r6:60000113 r5:82333084 r4:00000000 [ 2460.278338][T21892] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 2460.278401][T21892] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 2460.278464][T21892] r7:00000000 r6:00000000 r5:86d24980 r4:82b53188 [ 2460.278487][T21892] [<8021e610>] (dump_stack) from [<809f29e0>] (should_fail_ex+0x1c0/0x224) [ 2460.278550][T21892] [<809f2820>] (should_fail_ex) from [<809f2a58>] (should_fail+0x14/0x18) [ 2460.278619][T21892] r8:76fb3f08 r7:00000000 r6:00000000 r5:ec2f5f68 r4:00000002 [ 2460.278640][T21892] [<809f2a44>] (should_fail) from [<809f2a78>] (should_fail_usercopy+0x1c/0x20) [ 2460.278699][T21892] [<809f2a5c>] (should_fail_usercopy) from [<805df5b4>] (simple_read_from_buffer+0x80/0x140) [ 2460.278760][T21892] [<805df534>] (simple_read_from_buffer) from [<80663748>] (proc_fail_nth_read+0xb8/0x108) [ 2460.278834][T21892] r10:80663690 r9:00000001 r8:00000002 r7:ec2f5f68 r6:0000000f r5:76fb3f08 [ 2460.278862][T21892] r4:86d24980 r3:ec2f5e9f [ 2460.278881][T21892] [<80663690>] (proc_fail_nth_read) from [<8059f2b8>] (vfs_read+0xc0/0x328) [ 2460.279033][T21892] r8:86d24980 r7:ec2f5f68 r6:76fb3f08 r5:8602c600 r4:0000000f [ 2460.279059][T21892] [<8059f1f8>] (vfs_read) from [<8059ff04>] (ksys_read+0x74/0xec) [ 2460.279138][T21892] r10:00000003 r9:86d24980 r8:8020029c r7:00000000 r6:00000000 r5:8602c600 [ 2460.279162][T21892] r4:8602c600 [ 2460.279181][T21892] [<8059fe90>] (ksys_read) from [<8059ff8c>] (sys_read+0x10/0x14) [ 2460.279386][T21892] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 2460.279409][T21892] [<8059ff7c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2460.279467][T21892] Exception stack(0xec2f5fa8 to 0xec2f5ff0) [ 2460.279514][T21892] 5fa0: 00000000 00000000 00000004 76fb3f08 0000000f 00000000 [ 2460.279557][T21892] 5fc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76fb40dc [ 2460.279590][T21892] 5fe0: 76fb3e58 76fb3e44 0010bc04 001127e8 [ 2460.675095][ T28] audit: type=1400 audit(2000001558.220:869): avc: denied { map } for pid=21895 comm="syz.2.4274" path="socket:[49785]" dev="sockfs" ino=49785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 2461.293258][T21904] FAULT_INJECTION: forcing a failure. [ 2461.293258][T21904] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2461.296295][T21904] CPU: 1 UID: 0 PID: 21904 Comm: syz.2.4277 Tainted: G L syzkaller #0 PREEMPT [ 2461.296440][T21904] Tainted: [L]=SOFTLOCKUP [ 2461.296466][T21904] Hardware name: ARM-Versatile Express [ 2461.296492][T21904] Call trace: [ 2461.296545][T21904] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2461.296664][T21904] r7:60000113 r6:60000113 r5:82333084 r4:00000000 [ 2461.296688][T21904] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 2461.296863][T21904] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 2461.296943][T21904] r7:00000001 r6:00000000 r5:87293d40 r4:82b1ac9c [ 2461.296964][T21904] [<8021e610>] (dump_stack) from [<809f29e0>] (should_fail_ex+0x1c0/0x224) [ 2461.297040][T21904] [<809f2820>] (should_fail_ex) from [<80567b3c>] (should_fail_alloc_page+0x68/0x74) [ 2461.297127][T21904] r8:ebfa1d5c r7:00000001 r6:00000000 r5:00440dc2 r4:ebfa1d70 [ 2461.297148][T21904] [<80567ad4>] (should_fail_alloc_page) from [<8052c348>] (prepare_alloc_pages+0xf8/0x1b8) [ 2461.297248][T21904] [<8052c250>] (prepare_alloc_pages) from [<805351b8>] (__alloc_frozen_pages_noprof+0xb0/0x1808) [ 2461.297339][T21904] r10:00000000 r9:869f5800 r8:87293d40 r7:00480000 r6:00000000 r5:00440dc2 [ 2461.297365][T21904] r4:869f5800 [ 2461.297386][T21904] [<80535108>] (__alloc_frozen_pages_noprof) from [<80536920>] (__alloc_pages_noprof+0x10/0x60) [ 2461.297469][T21904] r10:00000040 r9:869f5800 r8:868fb300 r7:00480000 r6:86220b80 r5:869f5800 [ 2461.297495][T21904] r4:869f5800 [ 2461.297515][T21904] [<80536910>] (__alloc_pages_noprof) from [<804fb760>] (pte_alloc_one+0x28/0x108) [ 2461.297584][T21904] [<804fb738>] (pte_alloc_one) from [<804fd5f8>] (__pte_alloc+0x2c/0x128) [ 2461.297648][T21904] r5:87474010 r4:869f5800 [ 2461.297668][T21904] [<804fd5cc>] (__pte_alloc) from [<80500f1c>] (do_anonymous_page+0x334/0x650) [ 2461.297751][T21904] r5:87293d40 r4:ebfa1e90 [ 2461.297776][T21904] [<80500be8>] (do_anonymous_page) from [<80503b44>] (handle_mm_fault+0x5bc/0x6b8) [ 2461.297859][T21904] r10:00000040 r9:869f5800 r8:868fb300 r7:ebfa1fb0 r6:00480004 r5:87293d40 [ 2461.297886][T21904] r4:00001255 [ 2461.297907][T21904] [<80503588>] (handle_mm_fault) from [<802330bc>] (do_page_fault+0x21c/0x4d0) [ 2461.297995][T21904] r10:00000002 r9:869f5800 r8:00000255 r7:87293d40 r6:00000a06 r5:00480004 [ 2461.298021][T21904] r4:ebfa1fb0 [ 2461.298072][T21904] [<80232ea0>] (do_page_fault) from [<80233490>] (do_translation_fault+0x120/0x128) [ 2461.298153][T21904] r10:00000000 r9:00480000 r8:80233370 r7:ebfa1fb0 r6:00480004 r5:00000a06 [ 2461.298181][T21904] r4:82a1ec10 [ 2461.298203][T21904] [<80233370>] (do_translation_fault) from [<8023353c>] (do_DataAbort+0x38/0xac) [ 2461.298288][T21904] r9:00480000 r8:80233370 r7:ebfa1fb0 r6:00480004 r5:00000a06 r4:82a1ec10 [ 2461.298313][T21904] [<80233504>] (do_DataAbort) from [<80200edc>] (__dabt_usr+0x5c/0x60) [ 2461.298378][T21904] Exception stack(0xebfa1fb0 to 0xebfa1ff8) [ 2461.298425][T21904] 1fa0: 00480004 00000000 00000840 00480004 [ 2461.298470][T21904] 1fc0: 20000dc0 00000005 20000880 0000006e 00000005 00480000 00000000 00000000 [ 2461.298510][T21904] 1fe0: 00000000 76fb1dd0 00023a58 0011b130 20000010 ffffffff [ 2461.298554][T21904] r8:828c9044 r7:87293d40 r6:ffffffff r5:20000010 r4:0011b130 [ 2461.328022][T21904] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 2461.333340][T21904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2461.350338][T21904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2463.451551][T21923] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21923 comm=syz.6.4283 [ 2463.860406][ T28] audit: type=1400 audit(2000001561.410:870): avc: denied { setattr } for pid=21910 comm="syz.2.4279" name="CAN_BCM" dev="sockfs" ino=49824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2465.710149][ T28] audit: type=1400 audit(2000001563.260:871): avc: denied { accept } for pid=21932 comm="syz.6.4287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2465.763588][T21933] dlm: non-version read from control device 242 [ 2466.054281][T21940] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21940 comm=syz.6.4288 [ 2466.734008][ T28] audit: type=1400 audit(2000001564.280:872): avc: denied { read } for pid=21943 comm="syz.2.4290" path="socket:[51033]" dev="sockfs" ino=51033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2467.886860][T21954] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21954 comm=syz.2.4293 [ 2468.853142][T21959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21959 comm=syz.6.4295 [ 2471.034416][T21982] FAULT_INJECTION: forcing a failure. [ 2471.034416][T21982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2471.034916][T21982] CPU: 0 UID: 0 PID: 21982 Comm: syz.6.4304 Tainted: G L syzkaller #0 PREEMPT [ 2471.035016][T21982] Tainted: [L]=SOFTLOCKUP [ 2471.035040][T21982] Hardware name: ARM-Versatile Express [ 2471.035069][T21982] Call trace: [ 2471.035120][T21982] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2471.035237][T21982] r7:60000013 r6:60000013 r5:82333084 r4:00000000 [ 2471.035260][T21982] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 2471.035320][T21982] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 2471.035421][T21982] r7:00000000 r6:00000000 r5:840e6e40 r4:82b53188 [ 2471.035445][T21982] [<8021e610>] (dump_stack) from [<809f29e0>] (should_fail_ex+0x1c0/0x224) [ 2471.035614][T21982] [<809f2820>] (should_fail_ex) from [<809f2a58>] (should_fail+0x14/0x18) [ 2471.035749][T21982] r8:76fdcf08 r7:00000000 r6:00000000 r5:ec581f68 r4:00000002 [ 2471.035824][T21982] [<809f2a44>] (should_fail) from [<809f2a78>] (should_fail_usercopy+0x1c/0x20) [ 2471.035997][T21982] [<809f2a5c>] (should_fail_usercopy) from [<805df5b4>] (simple_read_from_buffer+0x80/0x140) [ 2471.036177][T21982] [<805df534>] (simple_read_from_buffer) from [<80663748>] (proc_fail_nth_read+0xb8/0x108) [ 2471.036270][T21982] r10:80663690 r9:00000001 r8:00000002 r7:ec581f68 r6:0000000f r5:76fdcf08 [ 2471.036300][T21982] r4:840e6e40 r3:ec581e9f [ 2471.036428][T21982] [<80663690>] (proc_fail_nth_read) from [<8059f2b8>] (vfs_read+0xc0/0x328) [ 2471.036532][T21982] r8:840e6e40 r7:ec581f68 r6:76fdcf08 r5:83e3c400 r4:0000000f [ 2471.036654][T21982] [<8059f1f8>] (vfs_read) from [<8059ff04>] (ksys_read+0x74/0xec) [ 2471.036784][T21982] r10:00000003 r9:840e6e40 r8:8020029c r7:00000000 r6:00000000 r5:83e3c400 [ 2471.037029][T21982] r4:83e3c403 [ 2471.037077][T21982] [<8059fe90>] (ksys_read) from [<8059ff8c>] (sys_read+0x10/0x14) [ 2471.037183][T21982] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 2471.037220][T21982] [<8059ff7c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2471.037303][T21982] Exception stack(0xec581fa8 to 0xec581ff0) [ 2471.037349][T21982] 1fa0: 00000000 00000000 00000004 76fdcf08 0000000f 00000000 [ 2471.037390][T21982] 1fc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76fdd0dc [ 2471.037423][T21982] 1fe0: 76fdce58 76fdce44 0010bc04 001127e8 [ 2471.196500][ T28] audit: type=1400 audit(2000001568.740:873): avc: denied { create } for pid=21983 comm="syz.6.4305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2471.598202][T21990] veth1: entered allmulticast mode [ 2478.276026][T22059] SELinux: syz.6.4326 (22059) wrote to user. This is no longer supported. [ 2478.283124][ T28] audit: type=1400 audit(2000001575.830:874): avc: denied { getopt } for pid=22058 comm="syz.6.4326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2479.200220][T22066] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=770 sclass=netlink_audit_socket pid=22066 comm=syz.6.4329 [ 2480.049464][ T28] audit: type=1400 audit(2000001577.600:875): avc: denied { setopt } for pid=22069 comm="syz.6.4331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2483.525489][T22099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2483.529877][T22099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2484.585548][T22110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2484.589897][T22110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2484.693614][T22114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2484.694714][T22114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2485.241064][T22122] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22122 comm=syz.2.4348 [ 2485.951571][T22127] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1548 sclass=netlink_audit_socket pid=22127 comm=syz.6.4351 [ 2489.865982][T22155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2489.866675][T22155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2497.004859][T22209] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22209 comm=syz.2.4386 [ 2497.226324][T22211] kernel profiling enabled (shift: 0) [ 2498.346805][T22219] FAULT_INJECTION: forcing a failure. [ 2498.346805][T22219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2498.367364][T22219] CPU: 0 UID: 0 PID: 22219 Comm: syz.2.4391 Tainted: G L syzkaller #0 PREEMPT [ 2498.367452][T22219] Tainted: [L]=SOFTLOCKUP [ 2498.367462][T22219] Hardware name: ARM-Versatile Express [ 2498.367475][T22219] Call trace: [ 2498.367499][T22219] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2498.367561][T22219] r7:60000013 r6:60000013 r5:82333084 r4:00000000 [ 2498.367572][T22219] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 2498.373332][T22219] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 2498.373522][T22219] r7:00000000 r6:00000000 r5:87293d40 r4:82b53188 [ 2498.373549][T22219] [<8021e610>] (dump_stack) from [<809f29e0>] (should_fail_ex+0x1c0/0x224) [ 2498.373636][T22219] [<809f2820>] (should_fail_ex) from [<809f2a58>] (should_fail+0x14/0x18) [ 2498.373711][T22219] r8:76fb3f08 r7:00000000 r6:00000000 r5:ecde1f68 r4:00000002 [ 2498.373739][T22219] [<809f2a44>] (should_fail) from [<809f2a78>] (should_fail_usercopy+0x1c/0x20) [ 2498.373806][T22219] [<809f2a5c>] (should_fail_usercopy) from [<805df5b4>] (simple_read_from_buffer+0x80/0x140) [ 2498.373871][T22219] [<805df534>] (simple_read_from_buffer) from [<80663748>] (proc_fail_nth_read+0xb8/0x108) [ 2498.373961][T22219] r10:80663690 r9:00000001 r8:00000002 r7:ecde1f68 r6:0000000f r5:76fb3f08 [ 2498.373991][T22219] r4:87293d40 r3:ecde1e9f [ 2498.374025][T22219] [<80663690>] (proc_fail_nth_read) from [<8059f2b8>] (vfs_read+0xc0/0x328) [ 2498.374137][T22219] r8:87293d40 r7:ecde1f68 r6:76fb3f08 r5:86305980 r4:0000000f [ 2498.374162][T22219] [<8059f1f8>] (vfs_read) from [<8059ff04>] (ksys_read+0x74/0xec) [ 2498.374238][T22219] r10:00000003 r9:87293d40 r8:8020029c r7:00000000 r6:00000000 r5:86305980 [ 2498.374260][T22219] r4:86305983 [ 2498.374279][T22219] [<8059fe90>] (ksys_read) from [<8059ff8c>] (sys_read+0x10/0x14) [ 2498.374346][T22219] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 2498.374365][T22219] [<8059ff7c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2498.374464][T22219] Exception stack(0xecde1fa8 to 0xecde1ff0) [ 2498.374539][T22219] 1fa0: 00000000 00000000 00000005 76fb3f08 0000000f 00000000 [ 2498.374598][T22219] 1fc0: 00000000 00000000 00000000 00000003 003562d8 00000000 00000001 76fb40dc [ 2498.374632][T22219] 1fe0: 76fb3e58 76fb3e44 0010bc04 001127e8 [ 2501.473825][T14316] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2501.537497][T14316] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2501.569917][T22257] FAULT_INJECTION: forcing a failure. [ 2501.569917][T22257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2501.570345][T22257] CPU: 0 UID: 0 PID: 22257 Comm: syz.2.4404 Tainted: G L syzkaller #0 PREEMPT [ 2501.570422][T22257] Tainted: [L]=SOFTLOCKUP [ 2501.570434][T22257] Hardware name: ARM-Versatile Express [ 2501.570449][T22257] Call trace: [ 2501.570475][T22257] [<80201998>] (dump_backtrace) from [<80201a8c>] (show_stack+0x18/0x1c) [ 2501.570547][T22257] r7:60000013 r6:60000013 r5:82333084 r4:00000000 [ 2501.570558][T22257] [<80201a74>] (show_stack) from [<8021e5fc>] (dump_stack_lvl+0x5c/0x70) [ 2501.570612][T22257] [<8021e5a0>] (dump_stack_lvl) from [<8021e628>] (dump_stack+0x18/0x1c) [ 2501.570728][T22257] r7:20000500 r6:00000000 r5:831855c0 r4:82b53188 [ 2501.570760][T22257] [<8021e610>] (dump_stack) from [<809f29e0>] (should_fail_ex+0x1c0/0x224) [ 2501.570829][T22257] [<809f2820>] (should_fail_ex) from [<809f2a58>] (should_fail+0x14/0x18) [ 2501.571023][T22257] r8:20000841 r7:20000500 r6:ecf85e30 r5:00000000 r4:ecf85f28 [ 2501.571142][T22257] [<809f2a44>] (should_fail) from [<809f2a78>] (should_fail_usercopy+0x1c/0x20) [ 2501.571199][T22257] [<809f2a5c>] (should_fail_usercopy) from [<81625368>] (copy_msghdr_from_user+0x50/0x1e0) [ 2501.571393][T22257] [<81625318>] (copy_msghdr_from_user) from [<81625570>] (___sys_sendmsg+0x78/0xd0) [ 2501.571506][T22257] r8:20000841 r7:00000000 r6:856c4f40 r5:ecf85f28 r4:ecf85e74 [ 2501.571547][T22257] [<816254f8>] (___sys_sendmsg) from [<816276fc>] (__sys_sendmsg+0x8c/0xe0) [ 2501.571611][T22257] r9:831855c0 r8:83e3c780 r7:20000841 r6:20000500 r5:83e3c781 r4:00000003 [ 2501.571623][T22257] [<81627670>] (__sys_sendmsg) from [<81627764>] (sys_sendmsg+0x14/0x18) [ 2501.571660][T22257] r8:8020029c r7:00000128 r6:0012f3e4 r5:00000000 r4:00000000 [ 2501.571670][T22257] [<81627750>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2501.571754][T22257] Exception stack(0xecf85fa8 to 0xecf85ff0) [ 2501.571834][T22257] 5fa0: 00000000 00000000 00000003 20000500 20000841 00000000 [ 2501.571879][T22257] 5fc0: 00000000 00000000 0012f3e4 00000128 003562d8 00000000 00000001 76fb40dc [ 2501.571938][T22257] 5fe0: 76fb3e88 76fb3e78 00018f80 001309e0 [ 2501.600052][T14316] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2501.664074][T14316] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2501.833047][ T50] netdevsim netdevsim6 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 2501.835752][ T8776] netdevsim netdevsim6 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 2501.836190][ T8776] netdevsim netdevsim6 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 2501.836327][ T8776] netdevsim netdevsim6 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 2501.995647][T14316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2502.003997][T14316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2502.013264][T14316] bond0 (unregistering): Released all slaves [ 2502.082965][T14316] hsr_slave_0: left promiscuous mode [ 2502.093505][T14316] hsr_slave_1: left promiscuous mode [ 2502.104821][T14316] veth1_macvtap: left promiscuous mode [ 2502.105143][T14316] veth0_macvtap: left promiscuous mode [ 2502.106240][T14316] veth1_vlan: left promiscuous mode [ 2502.106492][T14316] veth0_vlan: left promiscuous mode [ 2503.056096][ T28] audit: type=1400 audit(2000001600.600:876): avc: denied { write } for pid=22313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2503.291407][ T28] audit: type=1400 audit(2000001600.840:877): avc: denied { write } for pid=22360 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2503.404811][ T2960] 8021q: adding VLAN 0 to HW filter on device eth21 [ 2503.807794][T22244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2503.816486][T22244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2504.069046][ T28] audit: type=1400 audit(2000001601.620:878): avc: denied { write } for pid=22382 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2504.525284][ T28] audit: type=1400 audit(2000001602.070:879): avc: denied { write } for pid=22421 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2504.760914][ T2960] 8021q: adding VLAN 0 to HW filter on device eth22 [ 2505.126420][T22244] hsr_slave_0: entered promiscuous mode [ 2505.131069][T22244] hsr_slave_1: entered promiscuous mode [ 2505.735360][T22244] netdevsim netdevsim6 eth24 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2505.837945][T22244] netdevsim netdevsim6 eth23 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2505.945245][T22244] netdevsim netdevsim6 eth22 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2506.002826][T22244] netdevsim netdevsim6 eth21 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2506.031677][ T28] audit: type=1400 audit(2000001603.580:880): avc: denied { write } for pid=22490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2506.200777][T22244] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2506.219474][T22244] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2506.222703][T22244] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2506.251100][T22244] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2506.259380][T22244] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2506.278989][T22244] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2506.281920][T22244] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2506.299089][T22244] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2506.429568][ T28] audit: type=1400 audit(2000001603.970:881): avc: denied { write } for pid=22570 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2507.049409][T22244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2507.375278][ T28] audit: type=1400 audit(2000001604.920:882): avc: denied { write } for pid=22587 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2507.540488][ T28] audit: type=1400 audit(2000001605.090:883): avc: denied { write } for pid=22593 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2508.061661][ T28] audit: type=1400 audit(2000001605.610:884): avc: denied { write } for pid=22597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2508.432240][ T28] audit: type=1400 audit(2000001605.980:885): avc: denied { write } for pid=22604 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2509.148565][ T28] audit: type=1400 audit(2000001606.690:886): avc: denied { write } for pid=22612 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2509.454488][ T28] audit: type=1400 audit(2000001607.000:887): avc: denied { write } for pid=22619 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2510.155086][ T28] audit: type=1400 audit(2000001607.700:888): avc: denied { write } for pid=22625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2510.528507][ T28] audit: type=1400 audit(2000001608.080:889): avc: denied { write } for pid=22633 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2511.033039][ T28] audit: type=1400 audit(2000001608.580:890): avc: denied { write } for pid=22637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2511.052027][T22645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2511.053145][T22645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2511.237567][T22645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2511.239760][T22645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2511.292691][ T28] audit: type=1400 audit(2000001608.840:891): avc: denied { write } for pid=22650 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2511.599283][T22244] veth0_vlan: entered promiscuous mode [ 2511.664029][T22244] veth1_vlan: entered promiscuous mode [ 2511.739610][ T28] audit: type=1400 audit(2000001609.290:892): avc: denied { write } for pid=22659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2511.810940][T22244] veth0_macvtap: entered promiscuous mode [ 2511.824477][T22244] veth1_macvtap: entered promiscuous mode [ 2511.932439][T14316] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2511.934189][T14316] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2511.951101][T14316] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2512.018025][ T51] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2512.165366][ T28] audit: type=1400 audit(2000001609.710:893): avc: denied { write } for pid=22662 comm="rm" name="hook-state" dev="tmpfs" ino=15 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2516.070581][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 2516.073938][ T28] audit: type=1400 audit(2000001613.620:896): avc: denied { ioctl } for pid=22697 comm="syz.6.4424" path="socket:[51956]" dev="sockfs" ino=51956 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2533.195873][T22827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22827 comm=syz.2.4468 [ 2534.464432][ T28] audit: type=1400 audit(2000001632.010:897): avc: denied { mount } for pid=22832 comm="syz.6.4470" name="/" dev="configfs" ino=1042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2534.466726][ T28] audit: type=1400 audit(2000001632.010:898): avc: denied { search } for pid=22832 comm="syz.6.4470" name="/" dev="configfs" ino=1042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2534.478640][ T28] audit: type=1400 audit(2000001632.010:899): avc: denied { search } for pid=22832 comm="syz.6.4470" name="usb_gadget" dev="configfs" ino=1328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2534.478916][ T28] audit: type=1400 audit(2000001632.010:900): avc: denied { search } for pid=22832 comm="syz.6.4470" name="g1" dev="configfs" ino=4887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2534.479036][ T28] audit: type=1400 audit(2000001632.010:901): avc: denied { search } for pid=22832 comm="syz.6.4470" name="functions" dev="configfs" ino=4888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2534.479144][ T28] audit: type=1400 audit(2000001632.010:902): avc: denied { write search } for pid=22832 comm="syz.6.4470" name="functions" dev="configfs" ino=4888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2534.479197][ T28] audit: type=1400 audit(2000001632.010:903): avc: denied { add_name } for pid=22832 comm="syz.6.4470" name="SourceSink.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2534.479224][ T28] audit: type=1400 audit(2000001632.010:904): avc: denied { create } for pid=22832 comm="syz.6.4470" name="SourceSink.0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 2534.503256][ T28] audit: type=1400 audit(2000001632.050:905): avc: denied { unmount } for pid=22244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2534.849654][ T28] audit: type=1400 audit(2000001632.400:906): avc: denied { mount } for pid=22839 comm="syz.6.4473" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 2534.869046][T22839] ima: policy update failed [ 2535.009370][T22842] veth0_macvtap: left promiscuous mode [ 2535.015252][T22842] macvtap0: entered allmulticast mode [ 2535.878287][T22853] comedi comedi0: 8255: I/O base address not correctly aligned [ 2537.853483][T22872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2537.855707][T22872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2544.453661][T22892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4489'. [ 2544.548793][T22894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2544.551519][T22894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2544.662078][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 2544.662638][ T28] audit: type=1400 audit(2000001642.180:911): avc: denied { mount } for pid=22897 comm="syz.2.4491" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2544.673430][T22898] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2544.676619][ T28] audit: type=1400 audit(2000001642.220:912): avc: denied { search } for pid=22897 comm="syz.2.4491" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2544.683609][ T28] audit: type=1400 audit(2000001642.220:913): avc: denied { read } for pid=22897 comm="syz.2.4491" name="trace_pipe" dev="tracefs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 2544.688602][ T28] audit: type=1400 audit(2000001642.230:914): avc: denied { open } for pid=22897 comm="syz.2.4491" path="/218/debug/tracing/trace_pipe" dev="tracefs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 2544.708519][ T28] audit: type=1400 audit(2000001642.250:915): avc: denied { unmount } for pid=20683 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2544.792473][T22900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2544.794323][T22900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2545.287844][ T28] audit: type=1400 audit(2000001642.830:916): avc: denied { read write } for pid=22909 comm="syz.2.4495" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2545.294890][ T28] audit: type=1400 audit(2000001642.840:917): avc: denied { open } for pid=22909 comm="syz.2.4495" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2545.303813][ T28] audit: type=1400 audit(2000001642.850:918): avc: denied { ioctl } for pid=22909 comm="syz.2.4495" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2545.311386][ T28] audit: type=1400 audit(2000001642.860:919): avc: denied { set_context_mgr } for pid=22909 comm="syz.2.4495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2545.317490][T22910] binder: 22909:22910 ioctl c0306201 20000080 returned -14 [ 2545.324253][ T28] audit: type=1400 audit(2000001642.870:920): avc: denied { map } for pid=22909 comm="syz.2.4495" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2545.332263][T22910] binder: 22909:22910 ioctl c0306201 200003c0 returned -14 [ 2545.518971][T22914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2545.521184][T22914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2546.570885][T22934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2546.574168][T22934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2547.330750][T22945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2547.333614][T22945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2547.780326][T22958] gadgetfs: bound to dummy_udc driver [ 2549.095023][T22986] syzkaller1: entered promiscuous mode [ 2549.095356][T22986] syzkaller1: entered allmulticast mode [ 2550.630409][T23008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2550.631603][T23008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2551.263747][T23019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2551.264967][T23019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2551.944484][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 2551.957424][ T28] audit: type=1326 audit(2000001649.480:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23029 comm="syz.6.4534" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x1309e0 code=0x0 [ 2553.213334][ T28] audit: type=1400 audit(2000001650.760:930): avc: denied { connect } for pid=23034 comm="syz.2.4536" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2553.311885][T23035] syzkaller1: entered promiscuous mode [ 2553.317955][T23035] syzkaller1: entered allmulticast mode [ 2553.964991][T23041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2553.966024][T23041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2555.209990][T23054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2555.213571][T23054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2555.559346][ T28] audit: type=1400 audit(2000001653.110:931): avc: denied { mounton } for pid=23057 comm="syz.2.4543" path="/file0" dev="ramfs" ino=54369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 2556.492808][T23063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2556.520356][T23063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2556.924836][T23069] comedi: valid board names for 8255 driver are: [ 2556.925315][T23069] 8255 [ 2556.925708][T23069] comedi: valid board names for vmk80xx driver are: [ 2556.925792][T23069] vmk80xx [ 2556.925810][T23069] comedi: valid board names for usbduxsigma driver are: [ 2556.925826][T23069] usbduxsigma [ 2556.925847][T23069] comedi: valid board names for usbduxfast driver are: [ 2556.925863][T23069] usbduxfast [ 2556.925880][T23069] comedi: valid board names for usbdux driver are: [ 2556.925897][T23069] usbdux [ 2556.925914][T23069] comedi: valid board names for ni6501 driver are: [ 2556.925959][T23069] ni6501 [ 2556.925978][T23069] comedi: valid board names for dt9812 driver are: [ 2556.925997][T23069] dt9812 [ 2556.926012][T23069] comedi: valid board names for ni_labpc_cs driver are: [ 2556.926083][T23069] ni_labpc_cs [ 2556.926134][T23069] comedi: valid board names for ni_daq_700 driver are: [ 2556.926157][T23069] ni_daq_700 [ 2556.926175][T23069] comedi: valid board names for labpc_pci driver are: [ 2556.926192][T23069] labpc_pci [ 2556.926207][T23069] comedi: valid board names for adl_pci9118 driver are: [ 2556.926248][T23069] pci9118dg [ 2556.926292][T23069] pci9118hg [ 2556.926307][T23069] pci9118hr [ 2556.926344][T23069] comedi: valid board names for 8255_pci driver are: [ 2556.926365][T23069] 8255_pci [ 2556.926391][T23069] comedi: valid board names for comedi_parport driver are: [ 2556.926411][T23069] comedi_parport [ 2556.926427][T23069] comedi: valid board names for comedi_test driver are: [ 2556.926444][T23069] comedi_test [ 2556.926457][T23069] comedi: valid board names for comedi_bond driver are: [ 2556.926470][T23069] comedi_bond [ 2557.028135][T23071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2557.029614][T23071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2558.563667][ T28] audit: type=1400 audit(2000001656.110:932): avc: denied { mount } for pid=23084 comm="syz.2.4552" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 2558.589010][ T28] audit: type=1400 audit(2000001656.140:933): avc: denied { unmount } for pid=20683 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 2558.716664][T23089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2558.718872][T23089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2558.913990][T23095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2558.916759][T23095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2559.311788][T23105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2559.312816][T23105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2559.637980][T23111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2559.640335][T23111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2559.729233][T23115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2559.730863][T23115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2560.355253][ T28] audit: type=1400 audit(2000001657.900:934): avc: denied { write } for pid=23134 comm="syz.2.4568" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 2560.822092][T23137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2560.822877][T23137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2561.197693][T23141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2561.198820][T23141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2561.638661][T23145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2561.639516][T23145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2566.151400][T23177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2566.152236][T23177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2566.268457][T23181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2566.273298][T23181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2566.380577][ T28] audit: type=1400 audit(2000001663.930:935): avc: denied { write } for pid=23184 comm="syz.2.4584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2566.519771][ T28] audit: type=1400 audit(2000001664.070:936): avc: denied { block_suspend } for pid=23174 comm="syz.6.4581" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2566.582781][T23192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2566.584285][T23192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2566.763259][T23200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2566.765277][T23200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2566.889889][T23205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2566.893023][T23205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2567.585601][T23215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2567.586597][T23215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2567.681196][T23219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2567.683106][T23219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2567.983707][T23223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2567.984916][T23223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2568.101345][T23227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2568.103726][T23227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2569.051057][T23244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2569.053872][T23244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2569.710160][T23258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2569.711149][T23258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2571.044417][ T28] audit: type=1400 audit(2000001668.590:937): avc: denied { write } for pid=23281 comm="syz.6.4616" name="c.1" dev="configfs" ino=4893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2574.600994][T23290] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2574.712756][T23307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2574.719233][T23307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2575.061454][T23316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2575.062463][T23316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2575.648496][T23326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2575.648983][T23326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2576.501487][T23334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2576.517830][T23334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2577.581698][T23341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2577.585611][T23341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2580.191826][T23360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2580.228464][T23360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2580.357893][T23364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2580.359027][T23364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2580.479379][T23360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2580.480422][T23360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2580.809818][T23373] syzkaller1: entered promiscuous mode [ 2580.811334][T23373] syzkaller1: entered allmulticast mode [ 2580.828385][T23373] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 2581.040248][T23381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2581.044509][T23381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2581.748074][T23399] can0: slcan on ttyprintk. [ 2581.809126][T23398] can0 (unregistered): slcan off ttyprintk. [ 2582.032796][T23413] comedi: valid board names for 8255 driver are: [ 2582.037683][T23413] 8255 [ 2582.041354][T23413] comedi: valid board names for vmk80xx driver are: [ 2582.044166][T23413] vmk80xx [ 2582.046705][T23413] comedi: valid board names for usbduxsigma driver are: [ 2582.057488][T23413] usbduxsigma [ 2582.060622][T23413] comedi: valid board names for usbduxfast driver are: [ 2582.063351][T23413] usbduxfast [ 2582.066053][T23413] comedi: valid board names for usbdux driver are: [ 2582.069660][T23413] usbdux [ 2582.072264][T23413] comedi: valid board names for ni6501 driver are: [ 2582.074999][T23413] ni6501 [ 2582.078348][T23413] comedi: valid board names for dt9812 driver are: [ 2582.081445][T23413] dt9812 [ 2582.084314][T23413] comedi: valid board names for ni_labpc_cs driver are: [ 2582.088364][T23413] ni_labpc_cs [ 2582.097728][T23413] comedi: valid board names for ni_daq_700 driver are: [ 2582.101386][T23413] ni_daq_700 [ 2582.104392][T23413] comedi: valid board names for labpc_pci driver are: [ 2582.111019][T23413] labpc_pci [ 2582.114586][T23413] comedi: valid board names for adl_pci9118 driver are: [ 2582.122741][T23413] pci9118dg [ 2582.125932][T23413] pci9118hg [ 2582.130577][T23413] pci9118hr [ 2582.133424][T23413] comedi: valid board names for 8255_pci driver are: [ 2582.136544][T23413] 8255_pci [ 2582.139944][T23413] comedi: valid board names for comedi_parport driver are: [ 2582.142891][T23413] comedi_parport [ 2582.145854][T23413] comedi: valid board names for comedi_test driver are: [ 2582.149458][T23413] comedi_test [ 2582.153123][T23413] comedi: valid board names for comedi_bond driver are: [ 2582.156336][T23413] comedi_bond [ 2582.164085][T23414] 8<--- cut here --- [ 2582.164605][T23414] Unable to handle kernel paging request at virtual address fee00140 when write [ 2582.165022][T23414] [fee00140] *pgd=80000080007003, *pmd=00000000 [ 2582.166096][T23414] Internal error: Oops: a06 [#1] SMP ARM [ 2582.170326][T23414] Modules linked in: [ 2582.171083][T23414] CPU: 0 UID: 0 PID: 23414 Comm: syz.6.4656 Tainted: G L syzkaller #0 PREEMPT [ 2582.171672][T23414] Tainted: [L]=SOFTLOCKUP [ 2582.171836][T23414] Hardware name: ARM-Versatile Express [ 2582.172085][T23414] PC is at parport_attach+0x5c/0x1e8 [ 2582.172390][T23414] LR is at parport_attach+0x50/0x1e8 [ 2582.172625][T23414] pc : [<81495128>] lr : [<8149511c>] psr: 60000013 [ 2582.172983][T23414] sp : dfa09d30 ip : dfa09d30 fp : dfa09d54 [ 2582.173256][T23414] r10: 82d30dfc r9 : 00000003 r8 : 845d60c0 [ 2582.173494][T23414] r7 : dfa09d90 r6 : dfa09d90 r5 : 845d60c0 r4 : 00000000 [ 2582.173843][T23414] r3 : fee00140 r2 : 00000000 r1 : 00000000 r0 : 00000000 [ 2582.174211][T23414] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 2582.174541][T23414] Control: 30c5387d Table: 863fe540 DAC: fffffffd [ 2582.174853][T23414] Register r0 information: NULL pointer [ 2582.175570][T23414] Register r1 information: NULL pointer [ 2582.175846][T23414] Register r2 information: NULL pointer [ 2582.176069][T23414] Register r3 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 2582.176719][T23414] Register r4 information: NULL pointer [ 2582.177094][T23414] Register r5 information: slab kmalloc-192 start 845d60c0 pointer offset 0 size 192 [ 2582.178097][T23414] Register r6 information: 2-page vmalloc region starting at 0xdfa08000 allocated at kernel_clone+0xc4/0x43c [ 2582.178573][T23414] Register r7 information: 2-page vmalloc region starting at 0xdfa08000 allocated at kernel_clone+0xc4/0x43c [ 2582.179079][T23414] Register r8 information: slab kmalloc-192 start 845d60c0 pointer offset 0 size 192 [ 2582.179513][T23414] Register r9 information: non-paged memory [ 2582.179808][T23414] Register r10 information: non-slab/vmalloc memory [ 2582.180134][T23414] Register r11 information: 2-page vmalloc region starting at 0xdfa08000 allocated at kernel_clone+0xc4/0x43c [ 2582.180632][T23414] Register r12 information: 2-page vmalloc region starting at 0xdfa08000 allocated at kernel_clone+0xc4/0x43c [ 2582.181115][T23414] Process syz.6.4656 (pid: 23414, stack limit = 0xdfa08000) [ 2582.181449][T23414] Stack: (0xdfa09d30 to 0xdfa0a000) [ 2582.181697][T23414] 9d20: ffffffff 00000004 82bd8ea0 81e2e448 [ 2582.182013][T23414] 9d40: 00000000 dfa09d90 dfa09d8c dfa09d58 81490db4 814950d8 40946400 00000000 [ 2582.182379][T23414] 9d60: dfa09d7c 200003c0 845d60c0 b5403587 40946400 00000002 00000003 83e10c40 [ 2582.182765][T23414] 9d80: dfa09e4c dfa09d90 8148c5b8 81490cb8 656d6f63 705f6964 6f707261 00007472 [ 2582.183126][T23414] 9da0: 00000000 00000140 fffffffc 0001000c 0002dddc 00000000 00010000 00007fff [ 2582.183471][T23414] 9dc0: 00000006 00000007 0000c72c 02000004 0000000f 0000c000 00000008 000004ce [ 2582.183795][T23414] 9de0: 00008e99 00000001 000000ed 00000006 00000008 00000004 00000000 0000000a [ 2582.184118][T23414] 9e00: 00000009 00000ffd 00000009 000000af 00000002 00000283 00008001 0000e43f [ 2582.184454][T23414] 9e20: 00000000 e7f7cfd7 00000000 867a5080 845d60c0 200003c0 40946400 00000002 [ 2582.184783][T23414] 9e40: dfa09f14 dfa09e50 8148d8e0 8148c4f8 00000000 e7f7cfd7 00000000 00000000 [ 2582.185093][T23414] 9e60: 8254a844 dfa09ea4 0000005f 843b8b68 00000064 845d60f0 dfa09ee4 dfa09e88 [ 2582.185591][T23414] 9e80: 808065fc 807fccb4 00000064 00000001 00000000 dfa09ea4 8537ea10 834f0908 [ 2582.186001][T23414] 9ea0: 00006400 0000000b dfa09e98 00000000 00000000 e7f7cfd7 00000000 867a5080 [ 2582.186363][T23414] 9ec0: 40946400 200003c0 200003c0 867a5080 00000003 83e10c40 dfa09ef4 dfa09ee8 [ 2582.186807][T23414] 9ee0: 80806730 e7f7cfd7 dfa09f14 00000000 867a5081 40946400 200003c0 867a5080 [ 2582.187291][T23414] 9f00: 00000003 83e10c40 dfa09fa4 dfa09f18 805bb114 8148d598 ecac8b10 83e10c40 [ 2582.187682][T23414] 9f20: dfa09f3c dfa09f30 81b5c4e0 81b5c3ac dfa09f54 dfa09f40 8025a7a8 8028e490 [ 2582.188063][T23414] 9f40: dfa09fb0 40000000 dfa09f84 dfa09f58 80220bdc 8025a764 00000000 82a1eb0c [ 2582.188400][T23414] 9f60: dfa09fb0 0013eb80 ecac8b10 80220b30 00000000 e7f7cfd7 dfa09fac 00000000 [ 2582.188779][T23414] 9f80: 00000000 00356310 00000036 8020029c 83e10c40 00000036 00000000 dfa09fa8 [ 2582.189204][T23414] 9fa0: 80200060 805baedc 00000000 00000000 00000003 40946400 200003c0 00000000 [ 2582.189536][T23414] 9fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f200dc [ 2582.189936][T23414] 9fe0: 76f1fe88 76f1fe78 00018f80 001309e0 60000010 00000003 00000000 00000000 [ 2582.190328][T23414] Call trace: [ 2582.190595][T23414] [<814950cc>] (parport_attach) from [<81490db4>] (comedi_device_attach+0x108/0x244) [ 2582.191100][T23414] r7:dfa09d90 r6:00000000 r5:81e2e448 r4:82bd8ea0 [ 2582.191375][T23414] [<81490cac>] (comedi_device_attach) from [<8148c5b8>] (do_devconfig_ioctl+0xcc/0x218) [ 2582.191825][T23414] r10:83e10c40 r9:00000003 r8:00000002 r7:40946400 r6:b5403587 r5:845d60c0 [ 2582.192182][T23414] r4:200003c0 [ 2582.192364][T23414] [<8148c4ec>] (do_devconfig_ioctl) from [<8148d8e0>] (comedi_unlocked_ioctl+0x354/0x1db8) [ 2582.193016][T23414] r8:00000002 r7:40946400 r6:200003c0 r5:845d60c0 r4:867a5080 [ 2582.194728][T23414] [<8148d58c>] (comedi_unlocked_ioctl) from [<805bb114>] (sys_ioctl+0x244/0xb5c) [ 2582.195170][T23414] r10:83e10c40 r9:00000003 r8:867a5080 r7:200003c0 r6:40946400 r5:867a5081 [ 2582.195548][T23414] r4:00000000 [ 2582.195718][T23414] [<805baed0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2582.196092][T23414] Exception stack(0xdfa09fa8 to 0xdfa09ff0) [ 2582.196400][T23414] 9fa0: 00000000 00000000 00000003 40946400 200003c0 00000000 [ 2582.196769][T23414] 9fc0: 00000000 00000000 00356310 00000036 003562d8 00000000 00000001 76f200dc [ 2582.197773][T23414] 9fe0: 76f1fe88 76f1fe78 00018f80 001309e0 [ 2582.198202][T23414] r10:00000036 r9:83e10c40 r8:8020029c r7:00000036 r6:00356310 r5:00000000 [ 2582.198618][T23414] r4:00000000 [ 2582.199147][T23414] Code: ebb67ebe e5953064 e7f33053 e2433612 (e5c34000) [ 2582.203282][T23414] ---[ end trace 0000000000000000 ]--- [ 2582.204619][ T28] audit: type=1400 audit(2000001679.710:938): avc: denied { read } for pid=2912 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2582.204968][ T28] audit: type=1400 audit(2000001679.710:939): avc: denied { search } for pid=2912 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2582.205242][ T28] audit: type=1400 audit(2000001679.710:940): avc: denied { append } for pid=2912 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2582.205507][ T28] audit: type=1400 audit(2000001679.710:941): avc: denied { open } for pid=2912 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2582.206025][ T28] audit: type=1400 audit(2000001679.710:942): avc: denied { getattr } for pid=2912 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2582.237762][ T28] audit: type=1400 audit(2000001679.780:943): avc: denied { write } for pid=3098 comm="syz-executor" path="pipe:[724]" dev="pipefs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2582.331345][T23414] Kernel panic - not syncing: Fatal exception [ 2582.333762][T23414] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:20:37 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=00000000 R02=00000002 R03=00000000 R04=82b5cc80 R05=00000000 R06=00001e75 R07=82a288f0 R08=80000193 R09=00000000 R10=00000000 R11=dfa09ab4 R12=00000000 R13=dfa09a58 R14=00000002 R15=802ec5a4 PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000000 R01=84625c00 R02=00000000 R03=00000101 R04=00020d41 R05=872bd84c R06=837d0550 R07=00000008 R08=fa37ff3b R09=8602b500 R10=837d0550 R11=ebc11dbc R12=8545c250 R13=ebc11dc0 R14=73656761 R15=805b6370 PSR=800f0013 N--- A S svc32 s00=72656820 s01=2d2d2065 d00=2d2d206572656820 s02=00000000 s03=00000000 d01=0000000000000000 s04=ef0cee00 s05=ef0cee00 d02=ef0cee00ef0cee00 s06=08040200 s07=80402000 d03=8040200008040200 s08=00000c00 s09=c0200c03 d04=c0200c0300000c00 s10=08040201 s11=80402000 d05=8040200008040201 s12=08040201 s13=80402010 d06=8040201008040201 s14=08040201 s15=80402010 d07=8040201008040201 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000