last executing test programs: 13m18.239933537s ago: executing program 1 (id=1935): r0 = socket(0x1d, 0x2, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000006400)='/sys/firmware/fdt', 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) write$P9_RSTATu(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0xf0, 0x4}}, 0x18) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1402ae00", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x40080c0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24008041}, 0x800) mkdir(0x0, 0x32) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r4 = openat$mixer(0xffffff9c, &(0x7f0000000080), 0x1c1400, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000040)={0xfffffffffffffffd, r0, 0x80000}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x5761, 0x0) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) timer_create(0x5, &(0x7f00000002c0)={0x0, 0xffffff7f, 0x1, @thr={&(0x7f0000000640)="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", &(0x7f00000004c0)="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"}}, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r14, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(r13, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}}], 0x1, 0x0, 0x0) dup3(r13, r15, 0x0) sendmsg$IPSET_CMD_FLUSH(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4044004) timer_settime(r8, 0x0, &(0x7f00000003c0)={{r9, r10+10000000}, {r11, r12+10000000}}, &(0x7f0000000400)) ioctl$TCSETS(r7, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) 13m4.789548702s ago: executing program 1 (id=1937): r0 = socket$key(0xf, 0x3, 0x2) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="e40000001200200028bd7000ffdbdf250a0806ff4e234e200100000007000000810000000b000000000200000200"/56, @ANYRES64=r1, @ANYRES32=r1], 0xe4}, 0x1, 0x0, 0x0, 0x40004}, 0x8800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0, 0x0) r3 = eventfd(0x7) dup3(r2, r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0xc498, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, 0x0) mkdirat(r3, &(0x7f00000008c0)='./file0\x00', 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x4) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1) syz_open_dev$admmidi(&(0x7f0000002f40), 0xe4ae, 0x20400) dup3(r6, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000100)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$inet6(r1, 0x0, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0x5451, 0x0) dup3(r8, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x40080) 12m59.918600944s ago: executing program 1 (id=1939): r0 = socket$key(0xf, 0x3, 0x2) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="e40000001200200028bd7000ffdbdf250a0806ff4e234e200100000007000000810000000b000000000200000200"/56, @ANYRES64=r1, @ANYRES32=r1], 0xe4}, 0x1, 0x0, 0x0, 0x40004}, 0x8800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0, 0x0) r3 = eventfd(0x7) dup3(r2, r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0xc498, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, 0x0) mkdirat(r3, &(0x7f00000008c0)='./file0\x00', 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x4) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1) syz_open_dev$admmidi(&(0x7f0000002f40), 0xe4ae, 0x20400) dup3(r6, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000100)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$inet6(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x5b0}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0x5451, 0x0) dup3(r8, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x40080) 12m55.109589904s ago: executing program 1 (id=1942): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x8, 0x5, 0xb02, 0x200001}) (fail_nth: 3) 12m52.829957981s ago: executing program 1 (id=1944): r0 = socket(0x1e, 0x80004, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 12m49.911482759s ago: executing program 1 (id=1946): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) syz_io_uring_submit(0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r3 = dup2(r2, r2) sendmmsg$unix(r3, &(0x7f0000008380), 0x400000000000174, 0x4008890) lseek(0xffffffffffffffff, 0x851, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20008041) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$rfkill(r4, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 12m4.605743708s ago: executing program 32 (id=1946): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) syz_io_uring_submit(0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r3 = dup2(r2, r2) sendmmsg$unix(r3, &(0x7f0000008380), 0x400000000000174, 0x4008890) lseek(0xffffffffffffffff, 0x851, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20008041) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$rfkill(r4, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 11m16.48002358s ago: executing program 0 (id=1968): ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[], 0x0) 10m59.460381498s ago: executing program 0 (id=2001): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 10m54.060377435s ago: executing program 0 (id=2005): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r1, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x5010}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x804) 10m46.07127606s ago: executing program 0 (id=2014): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300) 10m37.828152891s ago: executing program 0 (id=2024): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xbb, 0x3a, 'M', 0x3a, '\xcb\x94-\xa8|55a', 0x3a, './file0'}, 0x30) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) 10m35.417601377s ago: executing program 0 (id=2030): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x378, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 9m49.910392639s ago: executing program 33 (id=2030): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x378, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 6m9.73901343s ago: executing program 3 (id=2187): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40202, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000040)) 5m57.249700355s ago: executing program 3 (id=2190): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 5m56.039312763s ago: executing program 3 (id=2191): openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x4000, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f000000dcc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {0x0, 0xc}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xbe5b}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x4000855) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 5m55.813682147s ago: executing program 3 (id=2192): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x56a7}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000200)=0xb) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f00000000c0)) 5m40.430424369s ago: executing program 3 (id=2200): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0203", 0x2, 0x0, 0x0, 0x0) unshare(0x2c020400) r0 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 5m39.845578646s ago: executing program 3 (id=2201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x0, [0x8, 0x6, 0x928]}, &(0x7f0000000040)=0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4) 4m54.691956907s ago: executing program 34 (id=2201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x0, [0x8, 0x6, 0x928]}, &(0x7f0000000040)=0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4) 23.637365487s ago: executing program 4 (id=2337): msgget$private(0x0, 0x100) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) setpriority(0x2, 0x0, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c6) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc00, &(0x7f00000000c0)=',!%]\x00') r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, 0x0, 0x0, 0x40) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x40000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='efivarfs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) 9.231771495s ago: executing program 4 (id=2339): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = socket$packet(0x11, 0x3, 0x300) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname$packet(r1, 0x0, 0x0) 9.020302458s ago: executing program 4 (id=2340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c0017000201"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000042f00fe88a43de1a400000000000000007d01ff0200"/53], 0xfdef) 8.789970213s ago: executing program 4 (id=2341): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)={0x1c, 0x76, 0x1, 0x0, 0x3, "", [@generic="ec5d4a567f5ef7e813"]}, 0x1c}], 0x1}, 0x0) 8.698780739s ago: executing program 4 (id=2342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000004200)='qnx6\x00', 0xa18410, 0x0) 8.388396879s ago: executing program 4 (id=2343): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket(0x200000000000011, 0x2, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x9}, 0x8) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x70) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) dup(0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000200)={r7, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000006, 0x2], [0x4, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) 2.3282355s ago: executing program 2 (id=2347): socket$unix(0x1, 0x5, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$unix(r2, 0x0, 0x0, 0x0) 1.849276761s ago: executing program 2 (id=2348): unshare(0x6020400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') lseek(r0, 0xfffffffffffffffe, 0x0) 1.757953206s ago: executing program 2 (id=2349): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x4010) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) unshare(0x2040400) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x18, r5, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r6, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x180, 0x0) 1.53998252s ago: executing program 2 (id=2350): socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000680)='@', &(0x7f0000000400)=@tcp6=r2, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.309676365s ago: executing program 2 (id=2351): r0 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x0, 0x80}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) write$binfmt_elf64(r2, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=2352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) kernel console output (not intermixed with test programs): <80542ab8>] (should_failslab+0x6c/0x94) [ 1699.595791][T11161] r8:00000000 r7:00000d40 r6:00000000 r5:00000000 r4:83018900 [ 1699.595800][T11161] [<80542a4c>] (should_failslab) from [<8052152c>] (kmem_cache_alloc_noprof+0x54/0x3bc) [ 1699.595825][T11161] [<805214d8>] (kmem_cache_alloc_noprof) from [<807ae260>] (security_inode_alloc+0x30/0x1d0) [ 1699.595861][T11161] r10:8587eb88 r9:00000000 r8:00000000 r7:00000c40 r6:83830c00 r5:8587ea80 [ 1699.595871][T11161] r4:8587ea80 [ 1699.595879][T11161] [<807ae230>] (security_inode_alloc) from [<80599100>] (inode_init_always_gfp+0x188/0x1dc) [ 1699.595911][T11161] r5:00000000 r4:8587ea80 [ 1699.595919][T11161] [<80598f78>] (inode_init_always_gfp) from [<8059c858>] (alloc_inode+0x40/0xd0) [ 1699.595953][T11161] r10:00000119 r9:85696000 r8:8020029c r7:00000010 r6:81e55b00 r5:83830c00 [ 1699.595965][T11161] r4:8587ea80 r3:00000000 [ 1699.595973][T11161] [<8059c818>] (alloc_inode) from [<815b7c6c>] (sock_alloc+0x20/0x70) [ 1699.596006][T11161] r7:00000010 r6:00000000 r5:00000003 r4:00000010 [ 1699.596014][T11161] [<815b7c4c>] (sock_alloc) from [<815b7e68>] (__sock_create+0x80/0x22c) [ 1699.596039][T11161] r5:00000003 r4:00000010 [ 1699.596046][T11161] [<815b7de8>] (__sock_create) from [<815bad0c>] (__sys_socket+0x94/0x118) [ 1699.596076][T11161] r10:00000119 r9:84569800 r8:8020029c r7:00000119 r6:84569800 r5:00000010 [ 1699.596086][T11161] r4:00000003 [ 1699.596094][T11161] [<815bac78>] (__sys_socket) from [<815bada0>] (sys_socket+0x10/0x14) [ 1699.596123][T11161] r6:ffffffff r5:200012c0 r4:76f56e78 [ 1699.596133][T11161] [<815bad90>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1699.596156][T11161] Exception stack(0xdfcd1fa8 to 0xdfcd1ff0) [ 1699.596177][T11161] 1fa0: 76f56e78 200012c0 00000010 00000003 00000010 00000000 [ 1699.596195][T11161] 1fc0: 76f56e78 200012c0 ffffffff 00000119 003462d8 00000000 00000001 76f580dc [ 1699.596208][T11161] 1fe0: 00000000 76f56e44 0001c2e4 001319ec [ 1699.596631][T11161] socket: no more sockets [ 1699.698774][T11160] FAULT_INJECTION: forcing a failure. [ 1699.698774][T11160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1699.755271][T11160] CPU: 0 UID: 0 PID: 11160 Comm: syz.1.1692 Tainted: G L syzkaller #0 PREEMPT [ 1699.755441][T11160] Tainted: [L]=SOFTLOCKUP [ 1699.755464][T11160] Hardware name: ARM-Versatile Express [ 1699.755494][T11160] Call trace: [ 1699.755537][T11160] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1699.755642][T11160] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 1699.755661][T11160] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1699.755711][T11160] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1699.755768][T11160] r7:00000000 r6:00000000 r5:84740000 r4:8295091c [ 1699.755785][T11160] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 1699.755843][T11160] [<809b5160>] (should_fail_ex) from [<809b5398>] (should_fail+0x14/0x18) [ 1699.755905][T11160] r8:00000000 r7:00000000 r6:00000000 r5:86330000 r4:4008af00 [ 1699.755922][T11160] [<809b5384>] (should_fail) from [<809b53b8>] (should_fail_usercopy+0x1c/0x20) [ 1699.755974][T11160] [<809b539c>] (should_fail_usercopy) from [<81401d18>] (vhost_vsock_dev_ioctl+0x228/0x710) [ 1699.756033][T11160] [<81401af0>] (vhost_vsock_dev_ioctl) from [<8058f558>] (sys_ioctl+0x244/0xb5c) [ 1699.756105][T11160] r10:84740000 r9:00000003 r8:83348480 r7:00000000 r6:4008af00 r5:83348481 [ 1699.756127][T11160] r4:00000000 [ 1699.756143][T11160] [<8058f314>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1699.756192][T11160] Exception stack(0xdfc11fa8 to 0xdfc11ff0) [ 1699.756231][T11160] 1fa0: 00000000 00000000 00000003 4008af00 00000000 00000000 [ 1699.756266][T11160] 1fc0: 00000000 00000000 0012e624 00000036 003462d8 00000000 00000001 76f980dc [ 1699.756295][T11160] 1fe0: 76f97e88 76f97e78 00018734 0012fc20 [ 1699.756330][T11160] r10:00000036 r9:84740000 r8:8020029c r7:00000036 r6:0012e624 r5:00000000 [ 1699.756348][T11160] r4:00000000 [ 1701.093820][ T28] audit: type=1400 audit(1700.640:293): avc: denied { nlmsg_write } for pid=11162 comm="syz.0.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1702.406632][T11173] FAULT_INJECTION: forcing a failure. [ 1702.406632][T11173] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1702.406932][T11173] CPU: 0 UID: 0 PID: 11173 Comm: syz.0.1698 Tainted: G L syzkaller #0 PREEMPT [ 1702.406991][T11173] Tainted: [L]=SOFTLOCKUP [ 1702.407002][T11173] Hardware name: ARM-Versatile Express [ 1702.407014][T11173] Call trace: [ 1702.407037][T11173] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1702.407092][T11173] r7:60000113 r6:60000113 r5:822a4e64 r4:00000000 [ 1702.407111][T11173] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1702.407140][T11173] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1702.407195][T11173] r7:00000001 r6:00000000 r5:833b8c00 r4:829193e4 [ 1702.407225][T11173] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 1702.407330][T11173] [<809b5160>] (should_fail_ex) from [<80542b48>] (should_fail_alloc_page+0x68/0x74) [ 1702.407450][T11173] r8:e01cdc54 r7:00000001 r6:00000000 r5:00440dc2 r4:e01cdc60 [ 1702.407786][T11173] [<80542ae0>] (should_fail_alloc_page) from [<80509650>] (prepare_alloc_pages+0xf8/0x1b4) [ 1702.407977][T11173] [<80509558>] (prepare_alloc_pages) from [<805129d0>] (__alloc_frozen_pages_noprof+0xb0/0x1644) [ 1702.408033][T11173] r10:00000000 r9:20000000 r8:00000000 r7:00440dc2 r6:833b8c00 r5:00000000 [ 1702.408218][T11173] r4:86784780 [ 1702.408389][T11173] [<80512920>] (__alloc_frozen_pages_noprof) from [<80513f74>] (__alloc_pages_noprof+0x10/0x60) [ 1702.408425][T11173] r10:00000000 r9:20000000 r8:85499b80 r7:e01cdea8 r6:8513fc80 r5:86784780 [ 1702.408770][T11173] r4:86784780 [ 1702.409120][T11173] [<80513f64>] (__alloc_pages_noprof) from [<804d9cc4>] (pte_alloc_one+0x28/0x104) [ 1702.409150][T11173] [<804d9c9c>] (pte_alloc_one) from [<804dbd84>] (__pte_alloc+0x2c/0x130) [ 1702.409176][T11173] r5:85d41800 r4:86784780 [ 1702.409185][T11173] [<804dbd58>] (__pte_alloc) from [<804dddc0>] (do_anonymous_page+0x35c/0x5d0) [ 1702.409212][T11173] r5:833b8c00 r4:e01cdd88 [ 1702.409250][T11173] [<804dda64>] (do_anonymous_page) from [<804e1d64>] (handle_mm_fault+0x5bc/0x6b8) [ 1702.409318][T11173] r10:00000000 r9:86784780 r8:85499b80 r7:e01cdea8 r6:20000000 r5:833b8c00 [ 1702.409542][T11173] r4:00000215 [ 1702.409607][T11173] [<804e17a8>] (handle_mm_fault) from [<80232fcc>] (do_page_fault+0xf0/0x4d0) [ 1702.409698][T11173] r10:00000002 r9:86784780 r8:00000215 r7:20000000 r6:00000a06 r5:200002c0 [ 1702.409717][T11173] r4:e01cdea8 [ 1702.409939][T11173] [<80232edc>] (do_page_fault) from [<802334a4>] (do_translation_fault+0xf8/0x12c) [ 1702.410118][T11173] r10:833b8c00 r9:833b8c00 r8:802333ac r7:e01cdea8 r6:200002c0 r5:00000a06 [ 1702.410261][T11173] r4:8281d380 [ 1702.410502][T11173] [<802333ac>] (do_translation_fault) from [<8023357c>] (do_DataAbort+0x38/0xac) [ 1702.410621][T11173] r9:833b8c00 r8:802333ac r7:e01cdea8 r6:200002c0 r5:00000a06 r4:8281d380 [ 1702.410631][T11173] [<80233544>] (do_DataAbort) from [<80200b2c>] (__dabt_svc+0x4c/0x80) [ 1702.410777][T11173] Exception stack(0xe01cdea8 to 0xe01cdef0) [ 1702.410895][T11173] dea0: 200002c0 7effffff 00000000 b5003500 00000000 200002c0 [ 1702.411112][T11173] dec0: b5403587 200002c0 866780c0 00000003 833b8c00 e01cdf14 a10002c3 e01cdef8 [ 1702.411175][T11173] dee0: 805e0100 81aa9f28 80000013 ffffffff [ 1702.411278][T11173] r8:866780c0 r7:e01cdedc r6:ffffffff r5:80000013 r4:81aa9f28 [ 1702.411308][T11173] [<805e0080>] (fanotify_ioctl) from [<8058f558>] (sys_ioctl+0x244/0xb5c) [ 1702.411368][T11173] r7:200002c0 r6:0000541b r5:866780c1 r4:00000000 [ 1702.411528][T11173] [<8058f314>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1702.411742][T11173] Exception stack(0xe01cdfa8 to 0xe01cdff0) [ 1702.411765][T11173] dfa0: 00000000 00000000 00000003 0000541b 200002c0 00000000 [ 1702.411819][T11173] dfc0: 00000000 00000000 0012e624 00000036 003462d8 00000000 00000001 76f580dc [ 1702.411986][T11173] dfe0: 76f57e88 76f57e78 00018734 0012fc20 [ 1702.412022][T11173] r10:00000036 r9:833b8c00 r8:8020029c r7:00000036 r6:0012e624 r5:00000000 [ 1702.412033][T11173] r4:00000000 [ 1708.405358][T11179] FAULT_INJECTION: forcing a failure. [ 1708.405358][T11179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1708.414991][T11179] CPU: 1 UID: 0 PID: 11179 Comm: syz.0.1699 Tainted: G L syzkaller #0 PREEMPT [ 1708.415087][T11179] Tainted: [L]=SOFTLOCKUP [ 1708.415098][T11179] Hardware name: ARM-Versatile Express [ 1708.415110][T11179] Call trace: [ 1708.415134][T11179] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1708.415192][T11179] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 1708.415203][T11179] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1708.415232][T11179] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1708.415263][T11179] r7:00000000 r6:00000000 r5:84740000 r4:8295091c [ 1708.415272][T11179] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 1708.415304][T11179] [<809b5160>] (should_fail_ex) from [<809b5398>] (should_fail+0x14/0x18) [ 1708.415337][T11179] r8:00000000 r7:00000000 r6:000000b4 r5:20000440 r4:838e6480 [ 1708.415347][T11179] [<809b5384>] (should_fail) from [<809b53b8>] (should_fail_usercopy+0x1c/0x20) [ 1708.415383][T11179] [<809b539c>] (should_fail_usercopy) from [<809bb318>] (strncpy_from_user+0x20/0x1b0) [ 1708.415411][T11179] [<809bb2f8>] (strncpy_from_user) from [<80583484>] (do_getname+0x4c/0x14c) [ 1708.415447][T11179] r10:838e648c r9:84740000 r8:00000000 r7:00000000 r6:20000440 r5:824aa8b0 [ 1708.415458][T11179] r4:838e6480 [ 1708.415467][T11179] [<80583438>] (do_getname) from [<8058c108>] (sys_mkdir+0x1c/0x48) [ 1708.415501][T11179] r10:00000027 r9:84740000 r8:8020029c r7:00000027 r6:0012e624 r5:00000000 [ 1708.415512][T11179] r4:00000000 r3:00000000 [ 1708.415521][T11179] [<8058c0ec>] (sys_mkdir) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1708.415546][T11179] Exception stack(0xe0245fa8 to 0xe0245ff0) [ 1708.415567][T11179] 5fa0: 00000000 00000000 20000440 00000000 00000000 00000000 [ 1708.415585][T11179] 5fc0: 00000000 00000000 0012e624 00000027 00346378 00000000 003d0f00 76f370dc [ 1708.415599][T11179] 5fe0: 76f36e88 76f36e78 00018734 0012fc20 [ 1708.415611][T11179] r5:00000000 r4:00000000 [ 1711.315652][T11185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11185 comm=syz.0.1703 [ 1714.483507][ T7572] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1718.492363][ T7572] usb 2-1: device descriptor read/all, error -71 [ 1720.165793][T11200] FAULT_INJECTION: forcing a failure. [ 1720.165793][T11200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1720.275814][T11200] CPU: 1 UID: 0 PID: 11200 Comm: syz.1.1707 Tainted: G L syzkaller #0 PREEMPT [ 1720.275959][T11200] Tainted: [L]=SOFTLOCKUP [ 1720.275981][T11200] Hardware name: ARM-Versatile Express [ 1720.276006][T11200] Call trace: [ 1720.276050][T11200] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1720.276201][T11200] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 1720.276240][T11200] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1720.276295][T11200] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1720.276354][T11200] r7:00000000 r6:00000000 r5:85108000 r4:8295091c [ 1720.276373][T11200] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 1720.276432][T11200] [<809b5160>] (should_fail_ex) from [<809b5398>] (should_fail+0x14/0x18) [ 1720.276497][T11200] r8:76f97f08 r7:00000000 r6:00000000 r5:e0241f68 r4:00000002 [ 1720.276572][T11200] [<809b5384>] (should_fail) from [<809b53b8>] (should_fail_usercopy+0x1c/0x20) [ 1720.276638][T11200] [<809b539c>] (should_fail_usercopy) from [<805b14d4>] (simple_read_from_buffer+0x80/0x140) [ 1720.276696][T11200] [<805b1454>] (simple_read_from_buffer) from [<80633208>] (proc_fail_nth_read+0xb8/0x108) [ 1720.276764][T11200] r10:80633150 r9:00000001 r8:00000002 r7:e0241f68 r6:0000000f r5:76f97f08 [ 1720.276787][T11200] r4:85108000 r3:e0241e9f [ 1720.276804][T11200] [<80633150>] (proc_fail_nth_read) from [<80573d88>] (vfs_read+0xc0/0x328) [ 1720.276872][T11200] r8:85108000 r7:e0241f68 r6:76f97f08 r5:86675b40 r4:0000000f [ 1720.276891][T11200] [<80573cc8>] (vfs_read) from [<80574a1c>] (ksys_read+0x74/0xec) [ 1720.276985][T11200] r10:00000003 r9:85108000 r8:8020029c r7:00000000 r6:00000000 r5:86675b40 [ 1720.277028][T11200] r4:86675b43 [ 1720.277048][T11200] [<805749a8>] (ksys_read) from [<80574aa4>] (sys_read+0x10/0x14) [ 1720.277119][T11200] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 1720.277138][T11200] [<80574a94>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1720.277189][T11200] Exception stack(0xe0241fa8 to 0xe0241ff0) [ 1720.277231][T11200] 1fa0: 00000000 00000000 00000004 76f97f08 0000000f 00000000 [ 1720.277268][T11200] 1fc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76f980dc [ 1720.277300][T11200] 1fe0: 76f97e58 76f97e44 0010af14 00111af8 [ 1726.756030][T11211] FAULT_INJECTION: forcing a failure. [ 1726.756030][T11211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1726.756290][T11211] CPU: 1 UID: 0 PID: 11211 Comm: syz.0.1712 Tainted: G L syzkaller #0 PREEMPT [ 1726.756347][T11211] Tainted: [L]=SOFTLOCKUP [ 1726.756375][T11211] Hardware name: ARM-Versatile Express [ 1726.756388][T11211] Call trace: [ 1726.756412][T11211] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1726.756468][T11211] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 1726.756477][T11211] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1726.756504][T11211] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1726.756534][T11211] r7:000089e1 r6:00000000 r5:84749800 r4:8295091c [ 1726.756542][T11211] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 1726.756663][T11211] [<809b5160>] (should_fail_ex) from [<809b5398>] (should_fail+0x14/0x18) [ 1726.756769][T11211] r8:20000140 r7:000089e1 r6:85268000 r5:e02f9d70 r4:00000014 [ 1726.756843][T11211] [<809b5384>] (should_fail) from [<809b53b8>] (should_fail_usercopy+0x1c/0x20) [ 1726.756882][T11211] [<809b539c>] (should_fail_usercopy) from [<815befa4>] (sock_ioctl_inout+0x30/0x1b8) [ 1726.756964][T11211] [<815bef74>] (sock_ioctl_inout) from [<8183b338>] (ipmr_sk_ioctl+0x84/0x8c) [ 1726.757027][T11211] r10:84749800 r9:81e75910 r8:e02f9ecc r7:85696000 r6:000089e1 r5:20000140 [ 1726.757068][T11211] r4:00000000 r3:e02f9d70 [ 1726.757145][T11211] [<8183b2b4>] (ipmr_sk_ioctl) from [<815bf2b8>] (sk_ioctl+0x18c/0x1c0) [ 1726.757320][T11211] r4:85268000 [ 1726.757453][T11211] [<815bf12c>] (sk_ioctl) from [<8180d2a4>] (inet_ioctl+0x128/0x24c) [ 1726.757526][T11211] r7:85696000 r6:85268000 r5:20000140 r4:000089e1 [ 1726.757548][T11211] [<8180d17c>] (inet_ioctl) from [<815ba828>] (sock_ioctl+0x138/0x4c0) [ 1726.757608][T11211] r7:85696000 r6:20000140 r5:8699af00 r4:000089e1 [ 1726.757622][T11211] [<815ba6f0>] (sock_ioctl) from [<8058f558>] (sys_ioctl+0x244/0xb5c) [ 1726.757661][T11211] r9:00000003 r8:86675240 r7:20000140 r6:000089e1 r5:86675241 r4:00000000 [ 1726.757671][T11211] [<8058f314>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1726.757700][T11211] Exception stack(0xe02f9fa8 to 0xe02f9ff0) [ 1726.757721][T11211] 9fa0: 00000000 00000000 00000003 000089e1 20000140 00000000 [ 1726.757739][T11211] 9fc0: 00000000 00000000 0012e624 00000036 003462d8 00000000 00000001 76f580dc [ 1726.757812][T11211] 9fe0: 76f57e88 76f57e78 00018734 0012fc20 [ 1726.757848][T11211] r10:00000036 r9:84749800 r8:8020029c r7:00000036 r6:0012e624 r5:00000000 [ 1726.758098][T11211] r4:00000000 [ 1728.779837][T11215] fuse: Unknown parameter 'grou00000000000000000000' [ 1730.079035][T11220] FAULT_INJECTION: forcing a failure. [ 1730.079035][T11220] name failslab, interval 1, probability 0, space 0, times 0 [ 1730.085027][T11220] CPU: 0 UID: 0 PID: 11220 Comm: syz.0.1716 Tainted: G L syzkaller #0 PREEMPT [ 1730.085179][T11220] Tainted: [L]=SOFTLOCKUP [ 1730.085200][T11220] Hardware name: ARM-Versatile Express [ 1730.085224][T11220] Call trace: [ 1730.085268][T11220] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1730.085385][T11220] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 1730.085405][T11220] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1730.085460][T11220] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1730.085520][T11220] r7:00000000 r6:00000000 r5:831dc800 r4:82919390 [ 1730.085537][T11220] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 1730.085596][T11220] [<809b5160>] (should_fail_ex) from [<80542ab8>] (should_failslab+0x6c/0x94) [ 1730.085662][T11220] r8:00000cc0 r7:00000000 r6:00000cc0 r5:00000000 r4:830d5780 [ 1730.085681][T11220] [<80542a4c>] (should_failslab) from [<80521cb4>] (kmem_cache_alloc_node_noprof+0x58/0x3c8) [ 1730.085732][T11220] [<80521c5c>] (kmem_cache_alloc_node_noprof) from [<815ca8c4>] (__alloc_skb+0x74/0x2c0) [ 1730.085907][T11220] r10:00000000 r9:815caa74 r8:00000cc0 r7:00000000 r6:830d5780 r5:ffffffff [ 1730.085929][T11220] r4:dddd0688 [ 1730.085948][T11220] [<815ca850>] (__alloc_skb) from [<816ec1d8>] (netlink_alloc_large_skb+0x8c/0xa8) [ 1730.086022][T11220] r9:00000000 r8:00000000 r7:85ef4c00 r6:00000068 r5:86993180 r4:00000180 [ 1730.086042][T11220] [<816ec14c>] (netlink_alloc_large_skb) from [<816ec998>] (netlink_sendmsg+0x130/0x440) [ 1730.086101][T11220] r5:86993180 r4:e84b5f20 [ 1730.086120][T11220] [<816ec868>] (netlink_sendmsg) from [<815b8e10>] (__sock_sendmsg+0x44/0x78) [ 1730.086188][T11220] r10:00000094 r9:00000000 r8:e84b5dcc r7:00000000 r6:86993180 r5:e84b5f20 [ 1730.086216][T11220] r4:00000000 [ 1730.086235][T11220] [<815b8dcc>] (__sock_sendmsg) from [<815b9cd0>] (____sys_sendmsg+0x238/0x2c4) [ 1730.086294][T11220] r7:00000000 r6:00000000 r5:86993180 r4:e84b5f20 [ 1730.086314][T11220] [<815b9a98>] (____sys_sendmsg) from [<815ba0d0>] (___sys_sendmsg+0x9c/0xd0) [ 1730.086388][T11220] r10:00000128 r9:20001b40 r8:00000094 r7:00000000 r6:86993180 r5:e84b5f20 [ 1730.086412][T11220] r4:00000000 [ 1730.086428][T11220] [<815ba034>] (___sys_sendmsg) from [<815bc138>] (__sys_sendmsg+0x8c/0xe0) [ 1730.086492][T11220] r9:831dc800 r8:866d8cc0 r7:00000094 r6:20001b40 r5:866d8cc1 r4:00000003 [ 1730.086509][T11220] [<815bc0ac>] (__sys_sendmsg) from [<815bc1a0>] (sys_sendmsg+0x14/0x18) [ 1730.086573][T11220] r8:8020029c r7:00000128 r6:0012e624 r5:00000000 r4:00000000 [ 1730.086591][T11220] [<815bc18c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1730.086640][T11220] Exception stack(0xe84b5fa8 to 0xe84b5ff0) [ 1730.086680][T11220] 5fa0: 00000000 00000000 00000003 20001b40 00000094 00000000 [ 1730.086716][T11220] 5fc0: 00000000 00000000 0012e624 00000128 003462d8 00000000 00000001 76f580dc [ 1730.086743][T11220] 5fe0: 76f57e88 76f57e78 00018734 0012fc20 [ 1730.802694][ T28] audit: type=1400 audit(1730.350:294): avc: denied { getopt } for pid=11221 comm="syz.0.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1732.004883][T11227] FAULT_INJECTION: forcing a failure. [ 1732.004883][T11227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1732.006383][T11227] CPU: 0 UID: 0 PID: 11227 Comm: syz.0.1718 Tainted: G L syzkaller #0 PREEMPT [ 1732.006527][T11227] Tainted: [L]=SOFTLOCKUP [ 1732.006554][T11227] Hardware name: ARM-Versatile Express [ 1732.006580][T11227] Call trace: [ 1732.006625][T11227] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1732.006733][T11227] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 1732.006756][T11227] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1732.006815][T11227] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1732.006878][T11227] r7:00000000 r6:00000000 r5:84749800 r4:8295091c [ 1732.006898][T11227] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 1732.006962][T11227] [<809b5160>] (should_fail_ex) from [<809b5398>] (should_fail+0x14/0x18) [ 1732.007032][T11227] r8:00000000 r7:00000000 r6:ea519f68 r5:842df400 r4:00000000 [ 1732.007052][T11227] [<809b5384>] (should_fail) from [<809b53b8>] (should_fail_usercopy+0x1c/0x20) [ 1732.007112][T11227] [<809b539c>] (should_fail_usercopy) from [<80a38e68>] (fb_sys_write+0xb0/0x21c) [ 1732.007177][T11227] [<80a38db8>] (fb_sys_write) from [<80a2bf5c>] (fb_write+0x6c/0xd4) [ 1732.007250][T11227] r10:81d18668 r9:84749800 r8:80a2bef0 r7:ea519f68 r6:00000000 r5:86453240 [ 1732.007273][T11227] r4:80a38db8 [ 1732.007290][T11227] [<80a2bef0>] (fb_write) from [<8057462c>] (vfs_write+0xd4/0x450) [ 1732.007360][T11227] r4:00000000 [ 1732.007380][T11227] [<80574558>] (vfs_write) from [<80574b1c>] (ksys_write+0x74/0xec) [ 1732.007446][T11227] r10:00000004 r9:84749800 r8:8020029c r7:00000000 r6:00000000 r5:86453240 [ 1732.007469][T11227] r4:86453241 [ 1732.007486][T11227] [<80574aa8>] (ksys_write) from [<80574ba4>] (sys_write+0x10/0x14) [ 1732.007547][T11227] r7:00000004 r6:0012e624 r5:00000000 r4:00000000 [ 1732.007565][T11227] [<80574b94>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1732.007615][T11227] Exception stack(0xea519fa8 to 0xea519ff0) [ 1732.007655][T11227] 9fa0: 00000000 00000000 00000003 00000000 00000000 00000000 [ 1732.007693][T11227] 9fc0: 00000000 00000000 0012e624 00000004 003462d8 00000000 00000001 76f580dc [ 1732.007723][T11227] 9fe0: 76f57e88 76f57e78 00018734 0012fc20 [ 1732.674422][T11229] fuse: Unknown parameter 'grou00000000000000000000' [ 1736.755927][T11239] fuse: Unknown parameter 'grou00000000000000000000' [ 1738.141601][T11243] FAULT_INJECTION: forcing a failure. [ 1738.141601][T11243] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.142054][T11243] CPU: 1 UID: 0 PID: 11243 Comm: syz.0.1726 Tainted: G L syzkaller #0 PREEMPT [ 1738.142135][T11243] Tainted: [L]=SOFTLOCKUP [ 1738.142154][T11243] Hardware name: ARM-Versatile Express [ 1738.142178][T11243] Call trace: [ 1738.142276][T11243] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1738.142393][T11243] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 1738.142412][T11243] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1738.142519][T11243] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1738.142596][T11243] r7:00000cc0 r6:00000000 r5:83f51800 r4:82919390 [ 1738.142625][T11243] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 1738.142685][T11243] [<809b5160>] (should_fail_ex) from [<80542ab8>] (should_failslab+0x6c/0x94) [ 1738.142755][T11243] r8:824aa8b4 r7:00000cc0 r6:00000000 r5:00000000 r4:830d5d00 [ 1738.142774][T11243] [<80542a4c>] (should_failslab) from [<8052152c>] (kmem_cache_alloc_noprof+0x54/0x3bc) [ 1738.142969][T11243] [<805214d8>] (kmem_cache_alloc_noprof) from [<8058ed24>] (fasync_helper+0x34/0x8c) [ 1738.143069][T11243] r10:83f51800 r9:00000003 r8:824aa8b4 r7:20002600 r6:00000003 r5:83fac01c [ 1738.143123][T11243] r4:86678180 [ 1738.143163][T11243] [<8058ecf0>] (fasync_helper) from [<810fb8cc>] (evdev_fasync+0x18/0x1c) [ 1738.143249][T11243] r9:00000003 r8:86678180 r7:20002600 r6:00005452 r5:86678181 r4:00000000 [ 1738.143273][T11243] [<810fb8b4>] (evdev_fasync) from [<8058f7d0>] (sys_ioctl+0x4bc/0xb5c) [ 1738.143328][T11243] [<8058f314>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1738.143544][T11243] Exception stack(0xe84b5fa8 to 0xe84b5ff0) [ 1738.143640][T11243] 5fa0: 00000000 00000000 00000003 00005452 20002600 00000000 [ 1738.143799][T11243] 5fc0: 00000000 00000000 0012e624 00000036 003462d8 00000000 00000001 76f580dc [ 1738.143870][T11243] 5fe0: 76f57e88 76f57e78 00018734 0012fc20 [ 1738.144015][T11243] r10:00000036 r9:83f51800 r8:8020029c r7:00000036 r6:0012e624 r5:00000000 [ 1738.144067][T11243] r4:00000000 [ 1742.476830][T11254] fuse: Unknown parameter 'group_i00000000000000000000' [ 1744.683464][T11263] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11263 comm=syz.0.1734 [ 1748.545622][T11269] fuse: Unknown parameter 'group_i00000000000000000000' [ 1753.185226][T11277] FAULT_INJECTION: forcing a failure. [ 1753.185226][T11277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1753.186664][T11277] CPU: 1 UID: 0 PID: 11277 Comm: syz.0.1739 Tainted: G L syzkaller #0 PREEMPT [ 1753.186749][T11277] Tainted: [L]=SOFTLOCKUP [ 1753.186760][T11277] Hardware name: ARM-Versatile Express [ 1753.186774][T11277] Call trace: [ 1753.186796][T11277] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1753.186858][T11277] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 1753.186868][T11277] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1753.186895][T11277] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1753.186926][T11277] r7:20000100 r6:00000000 r5:846f6000 r4:8295091c [ 1753.186935][T11277] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 1753.186966][T11277] [<809b5160>] (should_fail_ex) from [<809b5398>] (should_fail+0x14/0x18) [ 1753.187000][T11277] r8:00000080 r7:20000100 r6:eaa51e28 r5:00000000 r4:eaa51f20 [ 1753.187009][T11277] [<809b5384>] (should_fail) from [<809b53b8>] (should_fail_usercopy+0x1c/0x20) [ 1753.187036][T11277] [<809b539c>] (should_fail_usercopy) from [<815b9ea4>] (copy_msghdr_from_user+0x50/0x1e0) [ 1753.187079][T11277] [<815b9e54>] (copy_msghdr_from_user) from [<815ba0ac>] (___sys_sendmsg+0x78/0xd0) [ 1753.187110][T11277] r8:00000080 r7:00000000 r6:86994c80 r5:eaa51f20 r4:eaa51e6c [ 1753.187119][T11277] [<815ba034>] (___sys_sendmsg) from [<815bc138>] (__sys_sendmsg+0x8c/0xe0) [ 1753.187150][T11277] r9:846f6000 r8:86678600 r7:00000080 r6:20000100 r5:86678601 r4:00000004 [ 1753.187160][T11277] [<815bc0ac>] (__sys_sendmsg) from [<815bc1a0>] (sys_sendmsg+0x14/0x18) [ 1753.187190][T11277] r8:8020029c r7:00000128 r6:0012e624 r5:00000000 r4:00000000 [ 1753.187199][T11277] [<815bc18c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1753.187222][T11277] Exception stack(0xeaa51fa8 to 0xeaa51ff0) [ 1753.187242][T11277] 1fa0: 00000000 00000000 00000004 20000100 00000080 00000000 [ 1753.187261][T11277] 1fc0: 00000000 00000000 0012e624 00000128 003462d8 00000000 00000001 76f580dc [ 1753.187274][T11277] 1fe0: 76f57e88 76f57e78 00018734 0012fc20 [ 1754.396721][T11281] fuse: Unknown parameter 'group_i00000000000000000000' [ 1757.364187][ T28] audit: type=1400 audit(1756.870:295): avc: denied { write } for pid=11285 comm="syz.0.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1757.367459][ T28] audit: type=1400 audit(1756.890:296): avc: denied { read } for pid=11285 comm="syz.0.1743" lport=16382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1761.805213][T11298] fuse: Unknown parameter 'group_id00000000000000000000' [ 1764.289161][ T28] audit: type=1400 audit(1763.840:297): avc: denied { ioctl } for pid=11299 comm="syz.0.1748" path="socket:[22272]" dev="sockfs" ino=22272 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1764.995515][ T28] audit: type=1400 audit(1764.550:298): avc: denied { write } for pid=11299 comm="syz.0.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1766.854795][ T28] audit: type=1400 audit(1766.400:299): avc: denied { read } for pid=11310 comm="syz.0.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1766.869242][T11311] fuse: Bad value for 'group_id' [ 1766.914541][T11311] fuse: Bad value for 'group_id' [ 1768.948286][T11316] fuse: Unknown parameter 'group_id00000000000000000000' [ 1770.846534][T11321] FAULT_INJECTION: forcing a failure. [ 1770.846534][T11321] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.918732][T11321] CPU: 0 UID: 0 PID: 11321 Comm: syz.0.1754 Tainted: G L syzkaller #0 PREEMPT [ 1770.918906][T11321] Tainted: [L]=SOFTLOCKUP [ 1770.918933][T11321] Hardware name: ARM-Versatile Express [ 1770.918960][T11321] Call trace: [ 1770.919006][T11321] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1770.919152][T11321] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 1770.919175][T11321] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1770.919235][T11321] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1770.919306][T11321] r7:00000cc0 r6:00000000 r5:83f51800 r4:82919390 [ 1770.919326][T11321] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 1770.919397][T11321] [<809b5160>] (should_fail_ex) from [<80542ab8>] (should_failslab+0x6c/0x94) [ 1770.919477][T11321] r8:82805d00 r7:00000cc0 r6:00000000 r5:00000000 r4:83018d80 [ 1770.919499][T11321] [<80542a4c>] (should_failslab) from [<8052152c>] (kmem_cache_alloc_noprof+0x54/0x3bc) [ 1770.919557][T11321] [<805214d8>] (kmem_cache_alloc_noprof) from [<80576630>] (alloc_empty_file+0x54/0x13c) [ 1770.919635][T11321] r10:ead19f20 r9:83f51800 r8:82805d00 r7:8411fb80 r6:00000241 r5:8291c54c [ 1770.919661][T11321] r4:824aa8a0 [ 1770.919680][T11321] [<805765dc>] (alloc_empty_file) from [<8058a5cc>] (path_openat+0x44/0x1214) [ 1770.919760][T11321] r8:ead19e58 r7:ffffff9c r6:ead19f20 r5:83f51800 r4:838e5b40 [ 1770.919782][T11321] [<8058a588>] (path_openat) from [<8058b854>] (do_file_open+0xb8/0x150) [ 1770.919860][T11321] r10:00000008 r9:83f51800 r8:00000001 r7:ffffff9c r6:ead19f20 r5:83f51800 [ 1770.919884][T11321] r4:838e5b40 [ 1770.919902][T11321] [<8058b79c>] (do_file_open) from [<80570c94>] (do_sys_openat2+0x8c/0xf0) [ 1770.919983][T11321] r8:8020029c r7:200011c0 r6:ffffff9c r5:838e5b40 r4:00000005 [ 1770.920003][T11321] [<80570c08>] (do_sys_openat2) from [<80571284>] (sys_creat+0x6c/0x90) [ 1770.920072][T11321] r7:00000008 r6:0012e624 r5:00000000 r4:200011c0 [ 1770.920108][T11321] [<80571218>] (sys_creat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1770.920161][T11321] Exception stack(0xead19fa8 to 0xead19ff0) [ 1770.920206][T11321] 9fa0: 00000000 00000000 200011c0 00000000 00000000 00000000 [ 1770.920247][T11321] 9fc0: 00000000 00000000 0012e624 00000008 00346378 00000000 003d0f00 76f370dc [ 1770.920283][T11321] 9fe0: 76f36e88 76f36e78 00018734 0012fc20 [ 1770.920313][T11321] r5:00000000 r4:00000000 [ 1773.738469][T11324] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 1773.739726][T11324] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 1773.740199][T11324] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öóûjg7®(­5O~©q ´ƒ [ 1773.740199][T11324] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 1773.740381][T11324] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜" [ 1773.740570][T11324] CUSE: DEVNAME unspecified [ 1776.977339][T11335] fuse: Unknown parameter 'group_id00000000000000000000' [ 1783.145386][T11354] fuse: Bad value for 'user_id' [ 1783.164082][T11354] fuse: Bad value for 'user_id' [ 1790.345632][T11368] fuse: Bad value for 'user_id' [ 1790.350847][T11368] fuse: Bad value for 'user_id' [ 1794.081413][T11375] netlink: 'syz.0.1772': attribute type 1 has an invalid length. [ 1794.083429][T11375] netlink: 'syz.0.1772': attribute type 1 has an invalid length. [ 1794.093665][T11375] netlink: 'syz.0.1772': attribute type 1 has an invalid length. [ 1794.096724][T11375] netlink: 'syz.0.1772': attribute type 2 has an invalid length. [ 1794.099720][T11375] netlink: 'syz.0.1772': attribute type 1 has an invalid length. [ 1796.755060][T11385] fuse: Bad value for 'user_id' [ 1796.758214][T11385] fuse: Bad value for 'user_id' [ 1805.788971][T11414] FAULT_INJECTION: forcing a failure. [ 1805.788971][T11414] name failslab, interval 1, probability 0, space 0, times 0 [ 1805.789714][T11414] CPU: 1 UID: 0 PID: 11414 Comm: syz.0.1779 Tainted: G L syzkaller #0 PREEMPT [ 1805.790020][T11414] Tainted: [L]=SOFTLOCKUP [ 1805.790061][T11414] Hardware name: ARM-Versatile Express [ 1805.790112][T11414] Call trace: [ 1805.790165][T11414] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1805.790287][T11414] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 1805.790312][T11414] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1805.790393][T11414] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1805.790478][T11414] r7:00000cc0 r6:00000000 r5:84736c00 r4:82919390 [ 1805.790500][T11414] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 1805.790575][T11414] [<809b5160>] (should_fail_ex) from [<80542ab8>] (should_failslab+0x6c/0x94) [ 1805.790643][T11414] r8:82805d00 r7:00000cc0 r6:00000000 r5:00000000 r4:83018d80 [ 1805.790664][T11414] [<80542a4c>] (should_failslab) from [<8052152c>] (kmem_cache_alloc_noprof+0x54/0x3bc) [ 1805.790713][T11414] [<805214d8>] (kmem_cache_alloc_noprof) from [<80576630>] (alloc_empty_file+0x54/0x13c) [ 1805.790779][T11414] r10:eb1ddef8 r9:84736c00 r8:82805d00 r7:84120080 r6:00020020 r5:8291c54c [ 1805.790801][T11414] r4:824aa8a0 [ 1805.790825][T11414] [<805765dc>] (alloc_empty_file) from [<8058a5cc>] (path_openat+0x44/0x1214) [ 1805.790898][T11414] r8:eb1dde30 r7:ffffff9c r6:eb1ddef8 r5:84736c00 r4:838e6180 [ 1805.790919][T11414] [<8058a588>] (path_openat) from [<8058b854>] (do_file_open+0xb8/0x150) [ 1805.790988][T11414] r10:00000183 r9:84736c00 r8:00000001 r7:ffffff9c r6:eb1ddef8 r5:84736c00 [ 1805.791008][T11414] r4:838e6180 [ 1805.791024][T11414] [<8058b79c>] (do_file_open) from [<8057db80>] (do_open_execat+0x64/0x190) [ 1805.791085][T11414] r8:ffffff9c r7:838e6180 r6:84736c00 r5:00010000 r4:00000001 [ 1805.791105][T11414] [<8057db1c>] (do_open_execat) from [<8057dd04>] (alloc_bprm+0x1c/0x20c) [ 1805.791156][T11414] r5:00000000 r4:ffffff9c [ 1805.791173][T11414] [<8057dce8>] (alloc_bprm) from [<8057e6a8>] (do_execveat_common+0x68/0x18c) [ 1805.791236][T11414] r9:84736c00 r8:00000000 r7:00000000 r6:84736c00 r5:838e6180 r4:ffffff9c [ 1805.791253][T11414] [<8057e640>] (do_execveat_common) from [<8057f82c>] (sys_execveat+0x4c/0x68) [ 1805.791311][T11414] r9:84736c00 r8:00000000 r7:00000000 r6:00000000 r5:ffffff9c r4:838e6180 [ 1805.791329][T11414] [<8057f7e0>] (sys_execveat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1805.791371][T11414] Exception stack(0xeb1ddfa8 to 0xeb1ddff0) [ 1805.791422][T11414] dfa0: 00000000 00000000 ffffff9c 20001400 00000000 00000000 [ 1805.791510][T11414] dfc0: 00000000 00000000 0012e624 00000183 00346378 00000000 003d0f00 76f370dc [ 1805.791545][T11414] dfe0: 76f36e88 76f36e78 00018734 0012fc20 [ 1805.791582][T11414] r8:8020029c r7:00000183 r6:0012e624 r5:00000000 r4:00000000 [ 1808.435167][T11086] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1808.760053][T11421] fuse: Bad value for 'fd' [ 1814.314214][T11086] usb 2-1: device descriptor read/all, error -110 [ 1814.444142][T11086] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1815.686781][T11439] fuse: Bad value for 'fd' [ 1815.996915][T11440] FAULT_INJECTION: forcing a failure. [ 1815.996915][T11440] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.997310][T11440] CPU: 0 UID: 0 PID: 11440 Comm: syz.1.1784 Tainted: G L syzkaller #0 PREEMPT [ 1815.997383][T11440] Tainted: [L]=SOFTLOCKUP [ 1815.997396][T11440] Hardware name: ARM-Versatile Express [ 1815.997409][T11440] Call trace: [ 1815.997435][T11440] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1815.997496][T11440] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 1815.997506][T11440] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1815.997535][T11440] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1815.997566][T11440] r7:85ee1c00 r6:00000000 r5:83f42400 r4:82919390 [ 1815.997575][T11440] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 1815.997606][T11440] [<809b5160>] (should_fail_ex) from [<80542ab8>] (should_failslab+0x6c/0x94) [ 1815.997643][T11440] r8:83f42400 r7:85ee1c00 r6:00000cc0 r5:00000000 r4:83018c80 [ 1815.997652][T11440] [<80542a4c>] (should_failslab) from [<805218ec>] (kmem_cache_alloc_lru_noprof+0x58/0x3c8) [ 1815.997680][T11440] [<80521894>] (kmem_cache_alloc_lru_noprof) from [<80593cdc>] (__d_alloc+0x30/0x21c) [ 1815.997715][T11440] r10:00000000 r9:824aa8b8 r8:8590a7f8 r7:85ee1c00 r6:85879900 r5:eb2d9f40 [ 1815.997726][T11440] r4:8590a7f8 [ 1815.997734][T11440] [<80593cac>] (__d_alloc) from [<80593ee0>] (d_alloc+0x18/0x68) [ 1815.997835][T11440] r9:eb2d9f30 r8:8590a7f8 r7:eb2d9f40 r6:85879900 r5:00000000 r4:8590a7f8 [ 1815.997854][T11440] [<80593ec8>] (d_alloc) from [<80583684>] (lookup_one_qstr_excl+0x7c/0xcc) [ 1815.997913][T11440] r7:eb2d9f40 r6:85879900 r5:00000000 r4:00000000 [ 1815.997934][T11440] [<80583608>] (lookup_one_qstr_excl) from [<8058c514>] (filename_unlinkat+0x134/0x2bc) [ 1815.998003][T11440] r9:eb2d9f30 r8:85879980 r7:8590a7f8 r6:00000000 r5:838e6480 r4:eb2d9f40 [ 1815.998026][T11440] [<8058c3e0>] (filename_unlinkat) from [<8058c6dc>] (sys_unlinkat+0x40/0x68) [ 1815.998096][T11440] r10:00000148 r9:83f42400 r8:8020029c r7:00000148 r6:ffffff9c r5:838e6480 [ 1815.998129][T11440] r4:00000000 [ 1815.998149][T11440] [<8058c69c>] (sys_unlinkat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1815.998199][T11440] Exception stack(0xeb2d9fa8 to 0xeb2d9ff0) [ 1815.998238][T11440] 9fa0: 00000000 00000000 ffffff9c 20000040 00000000 00000000 [ 1815.998271][T11440] 9fc0: 00000000 00000000 0012e624 00000148 003462d8 00000000 00000001 76f980dc [ 1815.998298][T11440] 9fe0: 76f97e88 76f97e78 00018734 0012fc20 [ 1815.998329][T11440] r7:00000148 r6:0012e624 r5:00000000 r4:00000000 [ 1818.003941][ T28] audit: type=1400 audit(1817.520:300): avc: denied { read } for pid=11442 comm="syz.0.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1818.773473][ T28] audit: type=1400 audit(1818.320:301): avc: denied { getattr } for pid=11442 comm="syz.0.1786" path="socket:[23244]" dev="sockfs" ino=23244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1827.034420][T11460] fuse: Bad value for 'fd' [ 1830.533559][ T4703] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1832.157321][T11471] FAULT_INJECTION: forcing a failure. [ 1832.157321][T11471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1832.157649][T11471] CPU: 0 UID: 0 PID: 11471 Comm: syz.1.1792 Tainted: G L syzkaller #0 PREEMPT [ 1832.157709][T11471] Tainted: [L]=SOFTLOCKUP [ 1832.157721][T11471] Hardware name: ARM-Versatile Express [ 1832.157734][T11471] Call trace: [ 1832.157812][T11471] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1832.157876][T11471] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 1832.157887][T11471] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1832.157918][T11471] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1832.157950][T11471] r7:00000000 r6:00000000 r5:831dbc00 r4:8295091c [ 1832.157959][T11471] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 1832.157991][T11471] [<809b5160>] (should_fail_ex) from [<809b5398>] (should_fail+0x14/0x18) [ 1832.158025][T11471] r8:00000000 r7:00000000 r6:000000b4 r5:20000200 r4:838e6480 [ 1832.158034][T11471] [<809b5384>] (should_fail) from [<809b53b8>] (should_fail_usercopy+0x1c/0x20) [ 1832.158061][T11471] [<809b539c>] (should_fail_usercopy) from [<809bb318>] (strncpy_from_user+0x20/0x1b0) [ 1832.158243][T11471] [<809bb2f8>] (strncpy_from_user) from [<80583484>] (do_getname+0x4c/0x14c) [ 1832.158422][T11471] r10:838e648c r9:00000000 r8:00000000 r7:00000000 r6:20000200 r5:824aa8b0 [ 1832.158564][T11471] r4:838e6480 [ 1832.158691][T11471] [<80583438>] (do_getname) from [<80588fb8>] (getname_flags+0x14/0x18) [ 1832.158823][T11471] r10:00000002 r9:00000000 r8:ffffff9c r7:20000200 r6:00000000 r5:00000000 [ 1832.159018][T11471] r4:00000018 r3:00000018 [ 1832.159124][T11471] [<80588fa4>] (getname_flags) from [<805af2c0>] (path_setxattrat+0x184/0x1bc) [ 1832.159208][T11471] [<805af13c>] (path_setxattrat) from [<805af484>] (sys_setxattr+0x34/0x3c) [ 1832.159337][T11471] r10:000000e2 r9:831dbc00 r8:8020029c r7:000000e2 r6:0012e624 r5:00000000 [ 1832.159546][T11471] r4:20000000 [ 1832.159870][T11471] [<805af450>] (sys_setxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1832.160072][T11471] Exception stack(0xeb231fa8 to 0xeb231ff0) [ 1832.160277][T11471] 1fa0: 00000002 00000000 20000200 20000000 00000000 00000000 [ 1832.160407][T11471] 1fc0: 00000002 00000000 0012e624 000000e2 00346418 00000000 00000001 76f560dc [ 1832.160438][T11471] 1fe0: 76f55e88 76f55e78 00018734 0012fc20 [ 1832.160528][T11471] r4:00000002 [ 1836.636464][ T4703] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1836.636849][ T4703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.648106][ T4703] usb 1-1: can't set config #1, error -71 [ 1836.654275][ T4703] usb 1-1: USB disconnect, device number 53 [ 1838.995256][T11488] fuse: Bad value for 'fd' [ 1841.295959][T11486] FAULT_INJECTION: forcing a failure. [ 1841.295959][T11486] name failslab, interval 1, probability 0, space 0, times 0 [ 1841.313651][T11486] CPU: 1 UID: 0 PID: 11486 Comm: syz.1.1793 Tainted: G L syzkaller #0 PREEMPT [ 1841.313860][T11486] Tainted: [L]=SOFTLOCKUP [ 1841.313886][T11486] Hardware name: ARM-Versatile Express [ 1841.313923][T11486] Call trace: [ 1841.313969][T11486] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1841.314077][T11486] r7:60000113 r6:60000113 r5:822a4e64 r4:00000000 [ 1841.314097][T11486] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1841.314193][T11486] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1841.314263][T11486] r7:00000d40 r6:00000000 r5:85108000 r4:82919390 [ 1841.314285][T11486] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 1841.314349][T11486] [<809b5160>] (should_fail_ex) from [<80542ab8>] (should_failslab+0x6c/0x94) [ 1841.314433][T11486] r8:00000000 r7:00000d40 r6:00000000 r5:00000000 r4:83018900 [ 1841.314458][T11486] [<80542a4c>] (should_failslab) from [<8052152c>] (kmem_cache_alloc_noprof+0x54/0x3bc) [ 1841.314508][T11486] [<805214d8>] (kmem_cache_alloc_noprof) from [<807ae260>] (security_inode_alloc+0x30/0x1d0) [ 1841.314581][T11486] r10:859a2908 r9:00000000 r8:00000000 r7:00000c40 r6:83830c00 r5:859a2800 [ 1841.314604][T11486] r4:859a2800 [ 1841.314623][T11486] [<807ae230>] (security_inode_alloc) from [<80599100>] (inode_init_always_gfp+0x188/0x1dc) [ 1841.314686][T11486] r5:00000000 r4:859a2800 [ 1841.314706][T11486] [<80598f78>] (inode_init_always_gfp) from [<8059c858>] (alloc_inode+0x40/0xd0) [ 1841.314777][T11486] r10:00000127 r9:85734000 r8:00000006 r7:00000006 r6:81e55b00 r5:83830c00 [ 1841.314802][T11486] r4:859a2800 r3:00000000 [ 1841.314819][T11486] [<8059c818>] (alloc_inode) from [<815b7c6c>] (sock_alloc+0x20/0x70) [ 1841.314888][T11486] r7:00000006 r6:00000000 r5:00000001 r4:0000000a [ 1841.314910][T11486] [<815b7c4c>] (sock_alloc) from [<815b7e68>] (__sock_create+0x80/0x22c) [ 1841.314963][T11486] r5:00000001 r4:0000000a [ 1841.314981][T11486] [<815b7de8>] (__sock_create) from [<815b807c>] (sock_create_kern+0x24/0x2c) [ 1841.315044][T11486] r10:00000127 r9:20000100 r8:00000006 r7:00000000 r6:eb461e10 r5:86230000 [ 1841.315068][T11486] r4:86230000 [ 1841.315085][T11486] [<815b8058>] (sock_create_kern) from [<81a8702c>] (mptcp_subflow_create_socket+0x54/0x2a0) [ 1841.315147][T11486] [<81a86fd8>] (mptcp_subflow_create_socket) from [<81a786f0>] (__mptcp_nmpc_sk.part.0+0x64/0x1b4) [ 1841.315217][T11486] r8:00000006 r7:00000000 r6:20000100 r5:00000021 r4:86230000 [ 1841.315236][T11486] [<81a7868c>] (__mptcp_nmpc_sk.part.0) from [<81a7aec8>] (__mptcp_nmpc_sk+0x24/0x30) [ 1841.315301][T11486] r7:00000000 r6:20000100 r5:00000021 r4:86230000 [ 1841.315322][T11486] [<81a7aea4>] (__mptcp_nmpc_sk) from [<81a93a54>] (mptcp_getsockopt+0x544/0x598) [ 1841.315506][T11486] [<81a93510>] (mptcp_getsockopt) from [<815bca08>] (sock_common_getsockopt+0x28/0x30) [ 1841.315595][T11486] r9:20000100 r8:00000000 r7:815bc9e0 r6:86995680 r5:00000021 r4:81a93510 [ 1841.315618][T11486] [<815bc9e0>] (sock_common_getsockopt) from [<815b99d0>] (do_sock_getsockopt+0x120/0x1e8) [ 1841.315675][T11486] r4:00000006 [ 1841.315692][T11486] [<815b98b0>] (do_sock_getsockopt) from [<815bbe1c>] (__sys_getsockopt+0x94/0xdc) [ 1841.315758][T11486] r9:85108000 r8:86453d80 r7:eb461f50 r6:00000021 r5:eb461f58 r4:86453d81 [ 1841.315778][T11486] [<815bbd88>] (__sys_getsockopt) from [<815bbe80>] (sys_getsockopt+0x1c/0x24) [ 1841.315842][T11486] r8:8020029c r7:00000127 r6:0012e624 r5:00000000 r4:20000100 [ 1841.315862][T11486] [<815bbe64>] (sys_getsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1841.315911][T11486] Exception stack(0xeb461fa8 to 0xeb461ff0) [ 1841.315953][T11486] 1fa0: 20000100 00000000 00000007 00000006 00000021 00000000 [ 1841.315992][T11486] 1fc0: 20000100 00000000 0012e624 00000127 00346418 00000000 00000001 76f560dc [ 1841.316024][T11486] 1fe0: 76f55e88 76f55e78 00018734 0012fc20 [ 1841.380691][T11486] socket: no more sockets [ 1844.860176][T11498] fuse: Bad value for 'fd' [ 1851.673734][ T7830] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1856.903792][ T7830] usb 1-1: device descriptor read/64, error -110 [ 1857.173939][ T7830] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1857.303664][ T7830] usb 1-1: device descriptor read/64, error -32 [ 1857.424231][ T7830] usb usb1-port1: attempt power cycle [ 1857.784065][ T7830] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1857.796479][T11495] raw-gadget.0 gadget.0: failed to queue disconnect event [ 1858.005702][ T7830] usb 1-1: device not accepting address 56, error -71 [ 1859.714931][T11516] fuse: Bad value for 'fd' [ 1861.715421][ T28] audit: type=1400 audit(1861.260:302): avc: denied { read } for pid=11518 comm="syz.0.1807" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1863.927576][T11523] FAULT_INJECTION: forcing a failure. [ 1863.927576][T11523] name failslab, interval 1, probability 0, space 0, times 0 [ 1863.928080][T11523] CPU: 0 UID: 0 PID: 11523 Comm: syz.1.1808 Tainted: G L syzkaller #0 PREEMPT [ 1863.928172][T11523] Tainted: [L]=SOFTLOCKUP [ 1863.928195][T11523] Hardware name: ARM-Versatile Express [ 1863.928220][T11523] Call trace: [ 1863.928356][T11523] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1863.928610][T11523] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 1863.928639][T11523] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1863.928740][T11523] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1863.928829][T11523] r7:00000dc0 r6:00000000 r5:831dc800 r4:82919390 [ 1863.928851][T11523] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 1863.928916][T11523] [<809b5160>] (should_fail_ex) from [<80542ab8>] (should_failslab+0x6c/0x94) [ 1863.928987][T11523] r8:00000028 r7:00000dc0 r6:00000000 r5:00000000 r4:83001180 [ 1863.929008][T11523] [<80542a4c>] (should_failslab) from [<8051d418>] (__kmalloc_cache_noprof+0x54/0x2f4) [ 1863.929071][T11523] [<8051d3c4>] (__kmalloc_cache_noprof) from [<817c32d8>] (tcp_sendmsg_fastopen+0x94/0x188) [ 1863.929179][T11523] r10:850d8000 r9:20004000 r8:00000000 r7:eb5edcec r6:00000000 r5:eb5edf20 [ 1863.929207][T11523] r4:850d8000 [ 1863.929227][T11523] [<817c3244>] (tcp_sendmsg_fastopen) from [<817c3dac>] (tcp_sendmsg_locked+0x9e0/0x111c) [ 1863.929410][T11523] r8:eb5edf20 r7:00000000 r6:00000000 r5:00000000 r4:00000000 [ 1863.929449][T11523] [<817c33cc>] (tcp_sendmsg_locked) from [<817c4518>] (tcp_sendmsg+0x30/0x48) [ 1863.929520][T11523] r10:20004000 r9:00000000 r8:eb5eddcc r7:00000000 r6:00000000 r5:eb5edf20 [ 1863.929540][T11523] r4:850d8000 [ 1863.929561][T11523] [<817c44e8>] (tcp_sendmsg) from [<818abdb0>] (inet6_sendmsg+0x40/0x4c) [ 1863.929627][T11523] r7:00000000 r6:850d8000 r5:00000000 r4:eb5edf20 [ 1863.929667][T11523] [<818abd70>] (inet6_sendmsg) from [<815b8e10>] (__sock_sendmsg+0x44/0x78) [ 1863.929787][T11523] r7:00000000 r6:837a9400 r5:eb5edf20 r4:00000000 [ 1863.929813][T11523] [<815b8dcc>] (__sock_sendmsg) from [<815b9cd0>] (____sys_sendmsg+0x238/0x2c4) [ 1863.929919][T11523] r7:00000000 r6:00000000 r5:837a9400 r4:eb5edf20 [ 1863.930035][T11523] [<815b9a98>] (____sys_sendmsg) from [<815ba0d0>] (___sys_sendmsg+0x9c/0xd0) [ 1863.930111][T11523] r10:00000128 r9:20000180 r8:20004000 r7:00000000 r6:837a9400 r5:eb5edf20 [ 1863.930135][T11523] r4:00000000 [ 1863.930155][T11523] [<815ba034>] (___sys_sendmsg) from [<815bc138>] (__sys_sendmsg+0x8c/0xe0) [ 1863.930272][T11523] r9:831dc800 r8:866879c0 r7:20004000 r6:20000180 r5:866879c1 r4:00000004 [ 1863.930297][T11523] [<815bc0ac>] (__sys_sendmsg) from [<815bc1a0>] (sys_sendmsg+0x14/0x18) [ 1863.930363][T11523] r8:8020029c r7:00000128 r6:0012e624 r5:00000000 r4:00000000 [ 1863.930383][T11523] [<815bc18c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1863.930449][T11523] Exception stack(0xeb5edfa8 to 0xeb5edff0) [ 1863.930494][T11523] dfa0: 00000000 00000000 00000004 20000180 20004000 00000000 [ 1863.930584][T11523] dfc0: 00000000 00000000 0012e624 00000128 003462d8 00000000 00000001 76f980dc [ 1863.930717][T11523] dfe0: 76f97e88 76f97e78 00018734 0012fc20 [ 1870.335428][T11528] fuse: Invalid rootmode [ 1874.783944][T11472] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1877.687366][T11472] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1877.687680][T11472] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.696907][T11472] usb 1-1: can't set config #1, error -71 [ 1877.701164][T11472] usb 1-1: USB disconnect, device number 58 [ 1878.506860][T11550] fuse: Invalid rootmode [ 1884.865118][T11587] fuse: Invalid rootmode [ 1885.153675][ T3694] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1889.979730][ T3694] usb 1-1: device descriptor read/all, error -71 [ 1892.648721][T11603] FAULT_INJECTION: forcing a failure. [ 1892.648721][T11603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1892.649169][T11603] CPU: 0 UID: 0 PID: 11603 Comm: syz.1.1825 Tainted: G L syzkaller #0 PREEMPT [ 1892.649260][T11603] Tainted: [L]=SOFTLOCKUP [ 1892.649279][T11603] Hardware name: ARM-Versatile Express [ 1892.649301][T11603] Call trace: [ 1892.649342][T11603] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1892.649441][T11603] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 1892.649459][T11603] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1892.649507][T11603] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1892.649563][T11603] r7:00000000 r6:00000000 r5:831d1800 r4:8295091c [ 1892.649583][T11603] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 1892.649646][T11603] [<809b5160>] (should_fail_ex) from [<809b5398>] (should_fail+0x14/0x18) [ 1892.649708][T11603] r8:85649000 r7:00000000 r6:dfbedcd8 r5:20000480 r4:00000004 [ 1892.649724][T11603] [<809b5384>] (should_fail) from [<809b53b8>] (should_fail_usercopy+0x1c/0x20) [ 1892.649806][T11603] [<809b539c>] (should_fail_usercopy) from [<817c0c20>] (copy_from_sockptr_offset+0x60/0x128) [ 1892.649861][T11603] [<817c0bc0>] (copy_from_sockptr_offset) from [<817c93b4>] (do_tcp_getsockopt+0x364/0x1180) [ 1892.649915][T11603] r7:00000000 r6:dfbedeac r5:dfbedce0 r4:dfbedd20 [ 1892.649932][T11603] [<817c9054>] (do_tcp_getsockopt) from [<817ca254>] (tcp_getsockopt+0x64/0x6c) [ 1892.649994][T11603] r10:00000127 r9:20000480 r8:00000000 r7:815bc9e0 r6:86986a00 r5:00000023 [ 1892.650013][T11603] r4:817ca1f0 [ 1892.650028][T11603] [<817ca1f0>] (tcp_getsockopt) from [<815bca08>] (sock_common_getsockopt+0x28/0x30) [ 1892.650158][T11603] r4:817ca1f0 [ 1892.650179][T11603] [<815bc9e0>] (sock_common_getsockopt) from [<815b99d0>] (do_sock_getsockopt+0x120/0x1e8) [ 1892.650254][T11603] r4:00000006 [ 1892.650272][T11603] [<815b98b0>] (do_sock_getsockopt) from [<815bbe1c>] (__sys_getsockopt+0x94/0xdc) [ 1892.650332][T11603] r9:831d1800 r8:86678300 r7:dfbedf50 r6:00000023 r5:dfbedf58 r4:86678301 [ 1892.650350][T11603] [<815bbd88>] (__sys_getsockopt) from [<815bbe80>] (sys_getsockopt+0x1c/0x24) [ 1892.650410][T11603] r8:8020029c r7:00000127 r6:0012e624 r5:00000000 r4:20000480 [ 1892.650427][T11603] [<815bbe64>] (sys_getsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1892.650469][T11603] Exception stack(0xdfbedfa8 to 0xdfbedff0) [ 1892.650512][T11603] dfa0: 20000480 00000000 00000003 00000006 00000023 20000440 [ 1892.650545][T11603] dfc0: 20000480 00000000 0012e624 00000127 003462d8 00000000 00000001 76f980dc [ 1892.650622][T11603] dfe0: 76f97e88 76f97e78 00018734 0012fc20 [ 1894.485072][T11607] fuse: Bad value for 'rootmode' [ 1898.016378][T11614] FAULT_INJECTION: forcing a failure. [ 1898.016378][T11614] name failslab, interval 1, probability 0, space 0, times 0 [ 1898.094166][T11614] CPU: 0 UID: 0 PID: 11614 Comm: syz.1.1830 Tainted: G L syzkaller #0 PREEMPT [ 1898.094351][T11614] Tainted: [L]=SOFTLOCKUP [ 1898.094373][T11614] Hardware name: ARM-Versatile Express [ 1898.094401][T11614] Call trace: [ 1898.094445][T11614] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1898.094564][T11614] r7:60000113 r6:60000113 r5:822a4e64 r4:00000000 [ 1898.094588][T11614] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1898.094644][T11614] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1898.094704][T11614] r7:00000d40 r6:00000000 r5:8473d400 r4:82919390 [ 1898.094722][T11614] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 1898.094781][T11614] [<809b5160>] (should_fail_ex) from [<80542ab8>] (should_failslab+0x6c/0x94) [ 1898.094851][T11614] r8:00000000 r7:00000d40 r6:00000000 r5:00000000 r4:83018900 [ 1898.094872][T11614] [<80542a4c>] (should_failslab) from [<8052152c>] (kmem_cache_alloc_noprof+0x54/0x3bc) [ 1898.094923][T11614] [<805214d8>] (kmem_cache_alloc_noprof) from [<807ae260>] (security_inode_alloc+0x30/0x1d0) [ 1898.094992][T11614] r10:86993d08 r9:00000000 r8:00000000 r7:00000c40 r6:83830c00 r5:86993c00 [ 1898.095012][T11614] r4:86993c00 [ 1898.095030][T11614] [<807ae230>] (security_inode_alloc) from [<80599100>] (inode_init_always_gfp+0x188/0x1dc) [ 1898.095093][T11614] r5:00000000 r4:86993c00 [ 1898.095114][T11614] [<80598f78>] (inode_init_always_gfp) from [<8059c858>] (alloc_inode+0x40/0xd0) [ 1898.095180][T11614] r10:0000011b r9:85734000 r8:8473d400 r7:00000006 r6:81e55b00 r5:83830c00 [ 1898.095203][T11614] r4:86993c00 r3:00000000 [ 1898.095220][T11614] [<8059c818>] (alloc_inode) from [<815b7c6c>] (sock_alloc+0x20/0x70) [ 1898.095283][T11614] r7:00000006 r6:00000000 r5:00000001 r4:00000002 [ 1898.095301][T11614] [<815b7c4c>] (sock_alloc) from [<815b7e68>] (__sock_create+0x80/0x22c) [ 1898.095357][T11614] r5:00000001 r4:00000002 [ 1898.095374][T11614] [<815b7de8>] (__sock_create) from [<815b807c>] (sock_create_kern+0x24/0x2c) [ 1898.095433][T11614] r10:0000011b r9:8473d400 r8:8473d400 r7:00000010 r6:dfd21e00 r5:8622be80 [ 1898.095454][T11614] r4:8622be80 [ 1898.095470][T11614] [<815b8058>] (sock_create_kern) from [<81a8702c>] (mptcp_subflow_create_socket+0x54/0x2a0) [ 1898.095520][T11614] [<81a86fd8>] (mptcp_subflow_create_socket) from [<81a786f0>] (__mptcp_nmpc_sk.part.0+0x64/0x1b4) [ 1898.095585][T11614] r8:8473d400 r7:00000010 r6:dfd21ef4 r5:869a0780 r4:8622be80 [ 1898.095603][T11614] [<81a7868c>] (__mptcp_nmpc_sk.part.0) from [<81a81294>] (mptcp_connect+0x4c/0x314) [ 1898.095665][T11614] r7:00000010 r6:dfd21ef4 r5:869a0780 r4:8622be80 [ 1898.095682][T11614] [<81a81248>] (mptcp_connect) from [<8180d520>] (__inet_stream_connect+0x80/0x3d4) [ 1898.095752][T11614] r9:8473d400 r8:8473d400 r7:00000002 r6:00000010 r5:869a0780 r4:8622be80 [ 1898.095772][T11614] [<8180d4a0>] (__inet_stream_connect) from [<8180d8bc>] (inet_stream_connect+0x48/0x64) [ 1898.095837][T11614] r10:0000011b r9:8473d400 r8:8020029c r7:00000002 r6:00000010 r5:dfd21ef4 [ 1898.095857][T11614] r4:869a0780 [ 1898.095872][T11614] [<8180d874>] (inet_stream_connect) from [<815bb5fc>] (__sys_connect_file+0x6c/0x78) [ 1898.095933][T11614] r7:00000010 r6:dfd21ef4 r5:00000000 r4:8180d874 [ 1898.095951][T11614] [<815bb590>] (__sys_connect_file) from [<815bb6ac>] (__sys_connect+0xa4/0xc8) [ 1898.096009][T11614] r7:200009c0 r6:00000010 r5:86453d81 r4:00000000 [ 1898.096025][T11614] [<815bb608>] (__sys_connect) from [<815bb6e0>] (sys_connect+0x10/0x14) [ 1898.096081][T11614] r7:0000011b r6:0012e624 r5:00000000 r4:00000000 [ 1898.096100][T11614] [<815bb6d0>] (sys_connect) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1898.096146][T11614] Exception stack(0xdfd21fa8 to 0xdfd21ff0) [ 1898.096186][T11614] 1fa0: 00000000 00000000 00000003 200009c0 00000010 00000000 [ 1898.096221][T11614] 1fc0: 00000000 00000000 0012e624 0000011b 003462d8 00000000 00000001 76f980dc [ 1898.096248][T11614] 1fe0: 76f97e88 76f97e78 00018734 0012fc20 [ 1898.364521][T11614] socket: no more sockets [ 1899.449565][T11618] fuse: Bad value for 'rootmode' [ 1908.103892][ T3694] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1913.293800][ T3694] usb 1-1: device descriptor read/64, error -110 [ 1913.543552][ T3694] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1915.114743][T11640] fuse: Bad value for 'rootmode' [ 1918.321517][T11647] cgroup: fork rejected by pids controller in /syz0 [ 1926.265310][T11685] fuse: Unknown parameter 'use00000000000000000000' [ 1938.661592][T11699] fuse: Unknown parameter 'use00000000000000000000' [ 1940.805463][ T28] audit: type=1400 audit(1940.360:303): avc: denied { bind } for pid=11702 comm="syz.1.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1952.071079][T11714] fuse: Unknown parameter 'use00000000000000000000' [ 1957.906730][T11725] fuse: Unknown parameter 'user_i00000000000000000000' [ 1969.729150][T11744] fuse: Unknown parameter 'user_i00000000000000000000' [ 1970.405655][T11746] FAULT_INJECTION: forcing a failure. [ 1970.405655][T11746] name failslab, interval 1, probability 0, space 0, times 0 [ 1970.406226][T11746] CPU: 0 UID: 0 PID: 11746 Comm: syz.1.1868 Tainted: G L syzkaller #0 PREEMPT [ 1970.406337][T11746] Tainted: [L]=SOFTLOCKUP [ 1970.406358][T11746] Hardware name: ARM-Versatile Express [ 1970.406384][T11746] Call trace: [ 1970.406431][T11746] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1970.406542][T11746] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 1970.406562][T11746] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1970.406614][T11746] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1970.406674][T11746] r7:00000cc0 r6:00000000 r5:84755400 r4:82919390 [ 1970.406692][T11746] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 1970.406751][T11746] [<809b5160>] (should_fail_ex) from [<80542ab8>] (should_failslab+0x6c/0x94) [ 1970.408512][T11746] r8:82805d00 r7:00000cc0 r6:00000000 r5:00000000 r4:83018d80 [ 1970.408536][T11746] [<80542a4c>] (should_failslab) from [<8052152c>] (kmem_cache_alloc_noprof+0x54/0x3bc) [ 1970.408590][T11746] [<805214d8>] (kmem_cache_alloc_noprof) from [<80576630>] (alloc_empty_file+0x54/0x13c) [ 1970.408656][T11746] r10:84755400 r9:84755400 r8:82805d00 r7:83353080 r6:00000009 r5:8291c54c [ 1970.408677][T11746] r4:824aa8a0 [ 1970.408693][T11746] [<805765dc>] (alloc_empty_file) from [<805708e0>] (dentry_open+0x28/0x68) [ 1970.408759][T11746] r8:84755400 r7:866890c0 r6:00000009 r5:ea991e4c r4:00000005 [ 1970.408778][T11746] [<805708b8>] (dentry_open) from [<80a96b68>] (ptm_open_peer+0x98/0x120) [ 1970.408838][T11746] r5:85f13000 r4:00000005 [ 1970.408855][T11746] [<80a96ad0>] (ptm_open_peer) from [<80a8b59c>] (tty_ioctl+0x624/0xaa0) [ 1970.408918][T11746] r8:85f12a00 r7:00000009 r6:866890c0 r5:85f13000 r4:00005441 [ 1970.408937][T11746] [<80a8af78>] (tty_ioctl) from [<8058f558>] (sys_ioctl+0x244/0xb5c) [ 1970.409005][T11746] r10:84755400 r9:00000003 r8:866890c0 r7:00000009 r6:00005441 r5:866890c1 [ 1970.409024][T11746] r4:00000000 [ 1970.409039][T11746] [<8058f314>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1970.409087][T11746] Exception stack(0xea991fa8 to 0xea991ff0) [ 1970.409139][T11746] 1fa0: 00000000 00000000 00000003 00005441 00000009 00000000 [ 1970.409174][T11746] 1fc0: 00000000 00000000 0012e624 00000036 003462d8 00000000 00000001 76f980dc [ 1970.409203][T11746] 1fe0: 76f97e88 76f97e78 00018734 0012fc20 [ 1970.409239][T11746] r10:00000036 r9:84755400 r8:8020029c r7:00000036 r6:0012e624 r5:00000000 [ 1970.409261][T11746] r4:00000000 [ 1972.617688][T11748] FAULT_INJECTION: forcing a failure. [ 1972.617688][T11748] name failslab, interval 1, probability 0, space 0, times 0 [ 1972.618199][T11748] CPU: 0 UID: 0 PID: 11748 Comm: syz.1.1870 Tainted: G L syzkaller #0 PREEMPT [ 1972.618284][T11748] Tainted: [L]=SOFTLOCKUP [ 1972.618303][T11748] Hardware name: ARM-Versatile Express [ 1972.618327][T11748] Call trace: [ 1972.618367][T11748] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1972.618469][T11748] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 1972.618487][T11748] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1972.618536][T11748] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1972.618598][T11748] r7:00000000 r6:00000000 r5:85115400 r4:82919390 [ 1972.618672][T11748] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 1972.618742][T11748] [<809b5160>] (should_fail_ex) from [<80542ab8>] (should_failslab+0x6c/0x94) [ 1972.618844][T11748] r8:00000000 r7:00000000 r6:83001300 r5:00000dc0 r4:00000180 [ 1972.618869][T11748] [<80542a4c>] (should_failslab) from [<80522484>] (__kmalloc_noprof+0xa4/0x39c) [ 1972.618919][T11748] [<805223e0>] (__kmalloc_noprof) from [<807790c4>] (fuse_do_ioctl+0xc0/0x8ec) [ 1972.619016][T11748] r10:00000020 r9:00000000 r8:00000000 r7:84e18680 r6:84e747c0 r5:00000000 [ 1972.619044][T11748] r4:0000b704 [ 1972.619092][T11748] [<80779004>] (fuse_do_ioctl) from [<807799ac>] (fuse_file_ioctl+0x50/0x64) [ 1972.619168][T11748] r10:85115400 r9:00000004 r8:8667a540 r7:85879400 r6:00000000 r5:0000b704 [ 1972.619189][T11748] r4:8667a540 [ 1972.619204][T11748] [<8077995c>] (fuse_file_ioctl) from [<8058f558>] (sys_ioctl+0x244/0xb5c) [ 1972.619268][T11748] r7:00000000 r6:0000b704 r5:8667a541 r4:00000000 [ 1972.619285][T11748] [<8058f314>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1972.619334][T11748] Exception stack(0xeaa1dfa8 to 0xeaa1dff0) [ 1972.619372][T11748] dfa0: 00000000 00000000 00000004 0000b704 00000000 00000000 [ 1972.619407][T11748] dfc0: 00000000 00000000 0012e624 00000036 003462d8 00000000 00000001 76f980dc [ 1972.619433][T11748] dfe0: 76f97e88 76f97e78 00018734 0012fc20 [ 1972.619504][T11748] r10:00000036 r9:85115400 r8:8020029c r7:00000036 r6:0012e624 r5:00000000 [ 1972.619563][T11748] r4:00000000 [ 1979.846209][T11760] fuse: Unknown parameter 'user_i00000000000000000000' [ 1983.658361][T11764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=11764 comm=syz.0.1875 [ 1989.536043][T11771] fuse: Unknown parameter 'user_id00000000000000000000' [ 1991.366264][T11775] FAULT_INJECTION: forcing a failure. [ 1991.366264][T11775] name failslab, interval 1, probability 0, space 0, times 0 [ 1991.366794][T11775] CPU: 0 UID: 0 PID: 11775 Comm: syz.1.1880 Tainted: G L syzkaller #0 PREEMPT [ 1991.366898][T11775] Tainted: [L]=SOFTLOCKUP [ 1991.366923][T11775] Hardware name: ARM-Versatile Express [ 1991.366951][T11775] Call trace: [ 1991.367005][T11775] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1991.367143][T11775] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 1991.367213][T11775] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1991.367284][T11775] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1991.367380][T11775] r7:00000dc0 r6:00000000 r5:83f5a400 r4:82919390 [ 1991.367495][T11775] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 1991.367623][T11775] [<809b5160>] (should_fail_ex) from [<80542ab8>] (should_failslab+0x6c/0x94) [ 1991.367754][T11775] r8:00000178 r7:00000dc0 r6:00000000 r5:00000000 r4:83001300 [ 1991.367779][T11775] [<80542a4c>] (should_failslab) from [<8051d418>] (__kmalloc_cache_noprof+0x54/0x2f4) [ 1991.367876][T11775] [<8051d3c4>] (__kmalloc_cache_noprof) from [<814c1fc0>] (snd_ctl_ioctl+0x7e8/0xe14) [ 1991.368079][T11775] r10:84d7c580 r9:00000003 r8:86666000 r7:839d4040 r6:81785501 r5:20000080 [ 1991.368189][T11775] r4:00000000 [ 1991.368312][T11775] [<814c17d8>] (snd_ctl_ioctl) from [<8058f558>] (sys_ioctl+0x244/0xb5c) [ 1991.368441][T11775] r10:83f5a400 r9:00000003 r8:86666000 r7:20000080 r6:81785501 r5:86666001 [ 1991.368534][T11775] r4:00000000 [ 1991.368592][T11775] [<8058f314>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1991.368703][T11775] Exception stack(0xeabbdfa8 to 0xeabbdff0) [ 1991.368780][T11775] dfa0: 00000000 00000000 00000003 81785501 20000080 00000000 [ 1991.368894][T11775] dfc0: 00000000 00000000 0012e624 00000036 003462d8 00000000 00000001 76f980dc [ 1991.368949][T11775] dfe0: 76f97e88 76f97e78 00018734 0012fc20 [ 1991.369023][T11775] r10:00000036 r9:83f5a400 r8:8020029c r7:00000036 r6:0012e624 r5:00000000 [ 1991.369104][T11775] r4:00000000 [ 1996.698582][T11784] fuse: Unknown parameter 'user_id00000000000000000000' [ 2001.126211][T11789] FAULT_INJECTION: forcing a failure. [ 2001.126211][T11789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2001.203795][T11789] CPU: 0 UID: 0 PID: 11789 Comm: syz.0.1886 Tainted: G L syzkaller #0 PREEMPT [ 2001.203967][T11789] Tainted: [L]=SOFTLOCKUP [ 2001.203990][T11789] Hardware name: ARM-Versatile Express [ 2001.204020][T11789] Call trace: [ 2001.204064][T11789] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 2001.204187][T11789] r7:60000113 r6:60000113 r5:822a4e64 r4:00000000 [ 2001.204206][T11789] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 2001.204259][T11789] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 2001.204319][T11789] r7:20000400 r6:00000000 r5:84755400 r4:8295091c [ 2001.204336][T11789] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 2001.204397][T11789] [<809b5160>] (should_fail_ex) from [<809b5398>] (should_fail+0x14/0x18) [ 2001.204461][T11789] r8:00000000 r7:20000400 r6:00000006 r5:00000000 r4:eac0ddf0 [ 2001.204479][T11789] [<809b5384>] (should_fail) from [<809b53b8>] (should_fail_usercopy+0x1c/0x20) [ 2001.204532][T11789] [<809b539c>] (should_fail_usercopy) from [<808ef6f4>] (_copy_from_iter+0x64/0x7c4) [ 2001.204593][T11789] [<808ef690>] (_copy_from_iter) from [<817c3f0c>] (tcp_sendmsg_locked+0xb40/0x111c) [ 2001.204664][T11789] r10:850d8000 r9:00000006 r8:eac0dde0 r7:00007def r6:84755dcc r5:84fa7a40 [ 2001.204685][T11789] r4:0000fc94 [ 2001.204702][T11789] [<817c33cc>] (tcp_sendmsg_locked) from [<817c4518>] (tcp_sendmsg+0x30/0x48) [ 2001.204765][T11789] r10:00000000 r9:00000001 r8:84755400 r7:86678000 r6:00000006 r5:eac0dde0 [ 2001.204784][T11789] r4:850d8000 [ 2001.204799][T11789] [<817c44e8>] (tcp_sendmsg) from [<818abdb0>] (inet6_sendmsg+0x40/0x4c) [ 2001.204861][T11789] r7:86678000 r6:850d8000 r5:00000006 r4:eac0dde0 [ 2001.204879][T11789] [<818abd70>] (inet6_sendmsg) from [<815b8e10>] (__sock_sendmsg+0x44/0x78) [ 2001.204938][T11789] r7:86678000 r6:86996280 r5:eac0dde0 r4:00000000 [ 2001.204956][T11789] [<815b8dcc>] (__sock_sendmsg) from [<815b8ef8>] (sock_write_iter+0xb4/0x100) [ 2001.205014][T11789] r7:86678000 r6:86996280 r5:eac0de58 r4:eac0ded0 [ 2001.205030][T11789] [<815b8e44>] (sock_write_iter) from [<80571a94>] (do_iter_readv_writev+0x130/0x220) [ 2001.205098][T11789] r7:00000000 r6:00000000 r5:86678000 r4:00004004 [ 2001.205118][T11789] [<80571964>] (do_iter_readv_writev) from [<80573210>] (vfs_writev+0x134/0x3c0) [ 2001.205178][T11789] r10:00000092 r9:00000001 r8:84755400 r7:00000000 r6:86678000 r5:00000000 [ 2001.205198][T11789] r4:815b8e44 [ 2001.205213][T11789] [<805730dc>] (vfs_writev) from [<805735ac>] (do_writev+0x110/0x148) [ 2001.205267][T11789] r9:00000001 r8:20000700 r7:00000000 r6:86678000 r5:86678001 r4:84755400 [ 2001.205286][T11789] [<8057349c>] (do_writev) from [<80574e74>] (sys_writev+0x14/0x18) [ 2001.205345][T11789] r9:84755400 r8:8020029c r7:00000092 r6:0012e624 r5:00000000 r4:00000000 [ 2001.205364][T11789] [<80574e60>] (sys_writev) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2001.205408][T11789] Exception stack(0xeac0dfa8 to 0xeac0dff0) [ 2001.205449][T11789] dfa0: 00000000 00000000 00000003 20000700 00000001 00000000 [ 2001.205484][T11789] dfc0: 00000000 00000000 0012e624 00000092 003462d8 00000000 00000001 76f580dc [ 2001.205512][T11789] dfe0: 76f57e88 76f57e78 00018734 0012fc20 [ 2002.115548][ T4912] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2002.520425][ T4912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2002.520629][ T4912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2002.520836][ T4912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2002.520996][ T4912] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2002.521086][ T4912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2002.523808][ T4912] usb 2-1: config 0 descriptor?? [ 2004.439449][T11791] veth1_macvtap: left promiscuous mode [ 2005.395379][ T28] audit: type=1400 audit(2004.940:304): avc: denied { ioctl } for pid=11790 comm="syz.1.1887" path="socket:[24709]" dev="sockfs" ino=24709 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2005.449420][ T4912] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 2005.450340][ T4912] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 2005.451140][ T4912] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 2005.452103][ T4912] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 2005.452786][ T4912] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 2005.454168][ T4912] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 2005.454929][ T4912] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 2005.457962][ T4912] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2006.984776][ T3694] usb 2-1: reset high-speed USB device number 33 using dummy_hcd [ 2007.757373][T11472] usb 2-1: USB disconnect, device number 33 [ 2008.437484][T11819] fuse: Unknown parameter 'user_id00000000000000000000' [ 2016.936273][T11848] FAULT_INJECTION: forcing a failure. [ 2016.936273][T11848] name failslab, interval 1, probability 0, space 0, times 0 [ 2016.936807][T11848] CPU: 0 UID: 0 PID: 11848 Comm: syz.0.1892 Tainted: G L syzkaller #0 PREEMPT [ 2016.936919][T11848] Tainted: [L]=SOFTLOCKUP [ 2016.936942][T11848] Hardware name: ARM-Versatile Express [ 2016.936967][T11848] Call trace: [ 2016.937012][T11848] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 2016.944074][T11848] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 2016.944119][T11848] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 2016.944203][T11848] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 2016.944269][T11848] r7:00000dc0 r6:00000000 r5:8316a400 r4:82919390 [ 2016.944287][T11848] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 2016.944350][T11848] [<809b5160>] (should_fail_ex) from [<80542ab8>] (should_failslab+0x6c/0x94) [ 2016.944534][T11848] r8:00000110 r7:00000dc0 r6:00000000 r5:00000000 r4:83001300 [ 2016.944556][T11848] [<80542a4c>] (should_failslab) from [<8051d418>] (__kmalloc_cache_noprof+0x54/0x2f4) [ 2016.944617][T11848] [<8051d3c4>] (__kmalloc_cache_noprof) from [<814eac6c>] (snd_mixer_oss_put_volume1_vol+0x7c/0x1b8) [ 2016.944695][T11848] r10:00000000 r9:824aa730 r8:84bd0880 r7:8314c040 r6:8314c1e0 r5:00000005 [ 2016.944717][T11848] r4:00000000 [ 2016.946417][T11848] [<814eabf0>] (snd_mixer_oss_put_volume1_vol) from [<814eb014>] (snd_mixer_oss_put_volume1+0x26c/0x2d0) [ 2016.946565][T11848] r9:814eada8 r8:00000000 r7:84d76340 r6:846df13c r5:847b3c80 r4:00000000 [ 2016.946584][T11848] [<814eada8>] (snd_mixer_oss_put_volume1) from [<814e8dec>] (snd_mixer_oss_ioctl1+0x24c/0xb04) [ 2016.946647][T11848] r8:846df5c8 r7:846df000 r6:20000000 r5:84d76340 r4:00000006 [ 2016.946664][T11848] [<814e8ba0>] (snd_mixer_oss_ioctl1) from [<814e9748>] (snd_mixer_oss_ioctl+0x14/0x18) [ 2016.946727][T11848] r10:8316a400 r9:00000003 r8:86689000 r7:20000000 r6:4004f506 r5:86689001 [ 2016.946748][T11848] r4:00000000 [ 2016.946763][T11848] [<814e9734>] (snd_mixer_oss_ioctl) from [<8058f558>] (sys_ioctl+0x244/0xb5c) [ 2016.946821][T11848] [<8058f314>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2016.946868][T11848] Exception stack(0xeae49fa8 to 0xeae49ff0) [ 2016.946909][T11848] 9fa0: 00000000 00000000 00000003 4004f506 20000000 00000000 [ 2016.946944][T11848] 9fc0: 00000000 00000000 0012e624 00000036 003462d8 00000000 00000001 76f580dc [ 2016.946970][T11848] 9fe0: 76f57e88 76f57e78 00018734 0012fc20 [ 2016.947005][T11848] r10:00000036 r9:8316a400 r8:8020029c r7:00000036 r6:0012e624 r5:00000000 [ 2016.947024][T11848] r4:00000000 [ 2017.951969][T11850] fuse: Bad value for 'fd' [ 2019.189255][T11852] FAULT_INJECTION: forcing a failure. [ 2019.189255][T11852] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2019.303666][T11852] CPU: 1 UID: 0 PID: 11852 Comm: syz.1.1893 Tainted: G L syzkaller #0 PREEMPT [ 2019.303876][T11852] Tainted: [L]=SOFTLOCKUP [ 2019.303901][T11852] Hardware name: ARM-Versatile Express [ 2019.303927][T11852] Call trace: [ 2019.303975][T11852] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 2019.304114][T11852] r7:60000113 r6:60000113 r5:822a4e64 r4:00000000 [ 2019.304135][T11852] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 2019.304187][T11852] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 2019.304245][T11852] r7:00000001 r6:00000000 r5:83f51800 r4:829193e4 [ 2019.304262][T11852] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 2019.304325][T11852] [<809b5160>] (should_fail_ex) from [<80542b48>] (should_fail_alloc_page+0x68/0x74) [ 2019.304391][T11852] r8:ead65c5c r7:00000001 r6:00000000 r5:00140cca r4:ead65c68 [ 2019.304410][T11852] [<80542ae0>] (should_fail_alloc_page) from [<80509650>] (prepare_alloc_pages+0xf8/0x1b4) [ 2019.304464][T11852] [<80509558>] (prepare_alloc_pages) from [<805129d0>] (__alloc_frozen_pages_noprof+0xb0/0x1644) [ 2019.304524][T11852] r10:20001000 r9:85032580 r8:00000000 r7:00140cca r6:83f51800 r5:00000000 [ 2019.304546][T11852] r4:ead65d60 [ 2019.304565][T11852] [<80512920>] (__alloc_frozen_pages_noprof) from [<80513fd8>] (__folio_alloc_noprof+0x14/0x6c) [ 2019.304629][T11852] r10:20001000 r9:85032580 r8:00000000 r7:00000000 r6:863f1800 r5:00000001 [ 2019.304651][T11852] r4:ead65d60 [ 2019.304667][T11852] [<80513fc4>] (__folio_alloc_noprof) from [<804ddb54>] (do_anonymous_page+0xf0/0x5d0) [ 2019.304724][T11852] r5:00000001 r4:ead65d60 [ 2019.304741][T11852] [<804dda64>] (do_anonymous_page) from [<804e1d64>] (handle_mm_fault+0x5bc/0x6b8) [ 2019.304803][T11852] r10:00000000 r9:00000000 r8:00000000 r7:ead65e58 r6:20001000 r5:83f51800 [ 2019.304825][T11852] r4:00000215 [ 2019.304844][T11852] [<804e17a8>] (handle_mm_fault) from [<80232fcc>] (do_page_fault+0xf0/0x4d0) [ 2019.304911][T11852] r10:00000002 r9:85032580 r8:00000215 r7:20001000 r6:00000a07 r5:20001b00 [ 2019.304932][T11852] r4:ead65e58 [ 2019.304948][T11852] [<80232edc>] (do_page_fault) from [<8023357c>] (do_DataAbort+0x38/0xac) [ 2019.305011][T11852] r10:00000127 r9:83f51800 r8:80232edc r7:ead65e58 r6:20001b00 r5:00000a07 [ 2019.305033][T11852] r4:8281d390 [ 2019.305050][T11852] [<80233544>] (do_DataAbort) from [<80200b2c>] (__dabt_svc+0x4c/0x80) [ 2019.305118][T11852] Exception stack(0xead65e58 to 0xead65ea0) [ 2019.305153][T11852] 5e40: 20001b00 ead65ed4 [ 2019.305186][T11852] 5e60: ffffffe4 00000000 00000000 b5003500 85eed000 20001b00 200009c0 b5403587 [ 2019.305218][T11852] 5e80: 00000127 ead65efc 0000001c ead65eac 00000000 81aa7ce4 00000013 ffffffff [ 2019.305252][T11852] r8:200009c0 r7:ead65e8c r6:ffffffff r5:00000013 r4:81aa7ce4 [ 2019.305272][T11852] [<8166b550>] (llc_ui_getsockopt) from [<815b99d0>] (do_sock_getsockopt+0x120/0x1e8) [ 2019.305353][T11852] r9:200009c0 r8:00000000 r7:8166b550 r6:83753680 r5:00000002 r4:0000010c [ 2019.305373][T11852] [<815b98b0>] (do_sock_getsockopt) from [<815bbe1c>] (__sys_getsockopt+0x94/0xdc) [ 2019.305438][T11852] r9:83f51800 r8:86666000 r7:ead65f50 r6:00000002 r5:ead65f58 r4:86666001 [ 2019.305457][T11852] [<815bbd88>] (__sys_getsockopt) from [<815bbe80>] (sys_getsockopt+0x1c/0x24) [ 2019.305521][T11852] r8:8020029c r7:00000127 r6:0012e624 r5:00000000 r4:200009c0 [ 2019.305539][T11852] [<815bbe64>] (sys_getsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2019.305585][T11852] Exception stack(0xead65fa8 to 0xead65ff0) [ 2019.305620][T11852] 5fa0: 200009c0 00000000 00000004 0000010c 00000002 20001b00 [ 2019.305657][T11852] 5fc0: 200009c0 00000000 0012e624 00000127 003462d8 00000000 00000001 76f980dc [ 2019.305688][T11852] 5fe0: 76f97e88 76f97e78 00018734 0012fc20 [ 2022.497118][T11854] FAULT_INJECTION: forcing a failure. [ 2022.497118][T11854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2022.497634][T11854] CPU: 0 UID: 0 PID: 11854 Comm: syz.0.1895 Tainted: G L syzkaller #0 PREEMPT [ 2022.497774][T11854] Tainted: [L]=SOFTLOCKUP [ 2022.497803][T11854] Hardware name: ARM-Versatile Express [ 2022.497832][T11854] Call trace: [ 2022.497886][T11854] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 2022.498004][T11854] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 2022.498030][T11854] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 2022.498091][T11854] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 2022.498169][T11854] r7:83e70400 r6:00000000 r5:8316a400 r4:8295091c [ 2022.498191][T11854] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 2022.498470][T11854] [<809b5160>] (should_fail_ex) from [<809b5398>] (should_fail+0x14/0x18) [ 2022.498615][T11854] r8:81d3c5fc r7:83e70400 r6:c03864bc r5:00000038 r4:8316abe8 [ 2022.498811][T11854] [<809b5384>] (should_fail) from [<809b53b8>] (should_fail_usercopy+0x1c/0x20) [ 2022.501994][T11854] [<809b539c>] (should_fail_usercopy) from [<80b1aa10>] (drm_ioctl+0x1c4/0x580) [ 2022.503003][T11854] [<80b1a84c>] (drm_ioctl) from [<8058f558>] (sys_ioctl+0x244/0xb5c) [ 2022.503147][T11854] r10:8316a400 r9:0000000f r8:86687a80 r7:20000180 r6:c03864bc r5:86687a81 [ 2022.503360][T11854] r4:00000000 [ 2022.503408][T11854] [<8058f314>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2022.503474][T11854] Exception stack(0xeae49fa8 to 0xeae49ff0) [ 2022.503521][T11854] 9fa0: 00000000 00000000 0000000f c03864bc 20000180 00000000 [ 2022.503559][T11854] 9fc0: 00000000 00000000 0012e624 00000036 003462d8 00000000 00000001 76f580dc [ 2022.503593][T11854] 9fe0: 76f57e88 76f57e78 00018734 0012fc20 [ 2022.503631][T11854] r10:00000036 r9:8316a400 r8:8020029c r7:00000036 r6:0012e624 r5:00000000 [ 2022.503653][T11854] r4:00000000 [ 2030.216954][T11888] fuse: Bad value for 'fd' [ 2034.022025][T11894] FAULT_INJECTION: forcing a failure. [ 2034.022025][T11894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2034.173708][T11894] CPU: 0 UID: 0 PID: 11894 Comm: syz.1.1902 Tainted: G L syzkaller #0 PREEMPT [ 2034.173927][T11894] Tainted: [L]=SOFTLOCKUP [ 2034.173952][T11894] Hardware name: ARM-Versatile Express [ 2034.173981][T11894] Call trace: [ 2034.174030][T11894] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 2034.174162][T11894] r7:60000113 r6:60000113 r5:822a4e64 r4:00000000 [ 2034.174184][T11894] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 2034.174240][T11894] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 2034.174306][T11894] r7:846f142c r6:00000000 r5:846f0c00 r4:8295091c [ 2034.174324][T11894] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 2034.174393][T11894] [<809b5160>] (should_fail_ex) from [<809b5398>] (should_fail+0x14/0x18) [ 2034.174466][T11894] r8:b5003587 r7:846f142c r6:76f97b20 r5:eb405f58 r4:76f97b00 [ 2034.174485][T11894] [<809b5384>] (should_fail) from [<809b53b8>] (should_fail_usercopy+0x1c/0x20) [ 2034.174541][T11894] [<809b539c>] (should_fail_usercopy) from [<802690b8>] (copy_siginfo_to_user+0x1c/0xa4) [ 2034.174602][T11894] [<8026909c>] (copy_siginfo_to_user) from [<8022a87c>] (do_work_pending+0x338/0x4e8) [ 2034.174673][T11894] r9:0012fc20 r8:b5003587 r7:846f142c r6:76f97b00 r5:eb405fb0 r4:846f0c00 [ 2034.174694][T11894] [<8022a544>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 2034.174753][T11894] Exception stack(0xeb405fb0 to 0xeb405ff8) [ 2034.174792][T11894] 5fa0: 00000003 20000240 00004000 00000000 [ 2034.174831][T11894] 5fc0: 00000000 00000000 0012e624 00000128 003462d8 00000000 00000001 76f980dc [ 2034.174867][T11894] 5fe0: 76f97e88 76f97e78 00018734 0012fc1c 60000010 00000003 [ 2034.174907][T11894] r10:00000128 r9:846f0c00 r8:8020029c r7:00000128 r6:0012e624 r5:00000000 [ 2034.174927][T11894] r4:00000000 [ 2037.868291][T11898] FAULT_INJECTION: forcing a failure. [ 2037.868291][T11898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2037.868564][T11898] CPU: 0 UID: 0 PID: 11898 Comm: syz.0.1903 Tainted: G L syzkaller #0 PREEMPT [ 2037.868622][T11898] Tainted: [L]=SOFTLOCKUP [ 2037.868632][T11898] Hardware name: ARM-Versatile Express [ 2037.868645][T11898] Call trace: [ 2037.868671][T11898] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 2037.868743][T11898] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 2037.868767][T11898] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 2037.868820][T11898] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 2037.868870][T11898] r7:00000000 r6:00000000 r5:83f7ec00 r4:8295091c [ 2037.868878][T11898] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 2037.869204][T11898] [<809b5160>] (should_fail_ex) from [<809b5398>] (should_fail+0x14/0x18) [ 2037.869395][T11898] r8:76f57f08 r7:00000000 r6:00000000 r5:eb135f68 r4:00000002 [ 2037.869421][T11898] [<809b5384>] (should_fail) from [<809b53b8>] (should_fail_usercopy+0x1c/0x20) [ 2037.869681][T11898] [<809b539c>] (should_fail_usercopy) from [<805b14d4>] (simple_read_from_buffer+0x80/0x140) [ 2037.869883][T11898] [<805b1454>] (simple_read_from_buffer) from [<80633208>] (proc_fail_nth_read+0xb8/0x108) [ 2037.870172][T11898] r10:80633150 r9:00000001 r8:00000002 r7:eb135f68 r6:0000000f r5:76f57f08 [ 2037.870220][T11898] r4:83f7ec00 r3:eb135e9f [ 2037.870243][T11898] [<80633150>] (proc_fail_nth_read) from [<80573d88>] (vfs_read+0xc0/0x328) [ 2037.870532][T11898] r8:83f7ec00 r7:eb135f68 r6:76f57f08 r5:8667a3c0 r4:0000000f [ 2037.870677][T11898] [<80573cc8>] (vfs_read) from [<80574a1c>] (ksys_read+0x74/0xec) [ 2037.871040][T11898] r10:00000003 r9:83f7ec00 r8:8020029c r7:00000000 r6:00000000 r5:8667a3c0 [ 2037.871174][T11898] r4:8667a3c3 [ 2037.871203][T11898] [<805749a8>] (ksys_read) from [<80574aa4>] (sys_read+0x10/0x14) [ 2037.871438][T11898] r7:00000003 r6:00000000 r5:00000000 r4:00000000 [ 2037.871783][T11898] [<80574a94>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2037.872022][T11898] Exception stack(0xeb135fa8 to 0xeb135ff0) [ 2037.872390][T11898] 5fa0: 00000000 00000000 00000004 76f57f08 0000000f 00000000 [ 2037.872431][T11898] 5fc0: 00000000 00000000 00000000 00000003 003462d8 00000000 00000001 76f580dc [ 2037.872480][T11898] 5fe0: 76f57e58 76f57e44 0010af14 00111af8 [ 2042.139462][T11904] fuse: Bad value for 'fd' [ 2052.352712][T11935] FAULT_INJECTION: forcing a failure. [ 2052.352712][T11935] name failslab, interval 1, probability 0, space 0, times 0 [ 2052.407519][T11935] CPU: 1 UID: 0 PID: 11935 Comm: syz.0.1909 Tainted: G L syzkaller #0 PREEMPT [ 2052.407649][T11935] Tainted: [L]=SOFTLOCKUP [ 2052.407666][T11935] Hardware name: ARM-Versatile Express [ 2052.407689][T11935] Call trace: [ 2052.407727][T11935] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 2052.407829][T11935] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 2052.407846][T11935] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 2052.407890][T11935] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 2052.407941][T11935] r7:00000000 r6:00000000 r5:84743c00 r4:82919390 [ 2052.407955][T11935] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 2052.408006][T11935] [<809b5160>] (should_fail_ex) from [<80542ab8>] (should_failslab+0x6c/0x94) [ 2052.408066][T11935] r8:eb491ef0 r7:00000000 r6:83001180 r5:00000cc0 r4:00000001 [ 2052.408084][T11935] [<80542a4c>] (should_failslab) from [<80522484>] (__kmalloc_noprof+0xa4/0x39c) [ 2052.408128][T11935] [<805223e0>] (__kmalloc_noprof) from [<8064734c>] (kernfs_fop_write_iter+0xc4/0x214) [ 2052.408191][T11935] r10:81c29844 r9:84743c00 r8:eb491ef0 r7:eb491f08 r6:84df4880 r5:00000000 [ 2052.408210][T11935] r4:00000000 [ 2052.408224][T11935] [<80647288>] (kernfs_fop_write_iter) from [<805747d4>] (vfs_write+0x27c/0x450) [ 2052.408288][T11935] r10:81c29844 r9:84743c00 r8:80647288 r7:eb491f68 r6:00000000 r5:86688f00 [ 2052.408305][T11935] r4:00000000 [ 2052.408319][T11935] [<80574558>] (vfs_write) from [<80574b1c>] (ksys_write+0x74/0xec) [ 2052.408379][T11935] r10:00000004 r9:84743c00 r8:8020029c r7:00000000 r6:00000000 r5:86688f00 [ 2052.408397][T11935] r4:86688f03 [ 2052.408411][T11935] [<80574aa8>] (ksys_write) from [<80574ba4>] (sys_write+0x10/0x14) [ 2052.408460][T11935] r7:00000004 r6:0012e624 r5:00000000 r4:00000000 [ 2052.408474][T11935] [<80574b94>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2052.408512][T11935] Exception stack(0xeb491fa8 to 0xeb491ff0) [ 2052.408547][T11935] 1fa0: 00000000 00000000 00000003 00000000 00000000 00000000 [ 2052.408577][T11935] 1fc0: 00000000 00000000 0012e624 00000004 003462d8 00000000 00000001 76f580dc [ 2052.408601][T11935] 1fe0: 76f57e88 76f57e78 00018734 0012fc20 [ 2056.134425][T11937] fuse: Unknown parameter '0x0000000000000003' [ 2072.655525][T11973] fuse: Unknown parameter '0x0000000000000003' [ 2072.917172][T11970] FAULT_INJECTION: forcing a failure. [ 2072.917172][T11970] name failslab, interval 1, probability 0, space 0, times 0 [ 2072.925348][T11970] CPU: 1 UID: 0 PID: 11970 Comm: syz.1.1914 Tainted: G L syzkaller #0 PREEMPT [ 2072.925514][T11970] Tainted: [L]=SOFTLOCKUP [ 2072.925539][T11970] Hardware name: ARM-Versatile Express [ 2072.925568][T11970] Call trace: [ 2072.925617][T11970] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 2072.925733][T11970] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 2072.925799][T11970] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 2072.925866][T11970] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 2072.925935][T11970] r7:00000000 r6:00000000 r5:83f8ec00 r4:82919390 [ 2072.925957][T11970] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 2072.926026][T11970] [<809b5160>] (should_fail_ex) from [<80542ab8>] (should_failslab+0x6c/0x94) [ 2072.926106][T11970] r8:00000000 r7:00000000 r6:83001300 r5:00000dc0 r4:00000180 [ 2072.926133][T11970] [<80542a4c>] (should_failslab) from [<80522484>] (__kmalloc_noprof+0xa4/0x39c) [ 2072.926192][T11970] [<805223e0>] (__kmalloc_noprof) from [<807790c4>] (fuse_do_ioctl+0xc0/0x8ec) [ 2072.926270][T11970] r10:00000020 r9:00000000 r8:00000000 r7:84e1a280 r6:85521900 r5:00000000 [ 2072.926300][T11970] r4:0000f501 [ 2072.926320][T11970] [<80779004>] (fuse_do_ioctl) from [<807799ac>] (fuse_file_ioctl+0x50/0x64) [ 2072.926409][T11970] r10:83f8ec00 r9:00000003 r8:866886c0 r7:85879900 r6:00000000 r5:0000f501 [ 2072.926435][T11970] r4:866886c0 [ 2072.926454][T11970] [<8077995c>] (fuse_file_ioctl) from [<8058f558>] (sys_ioctl+0x244/0xb5c) [ 2072.926531][T11970] r7:00000000 r6:0000f501 r5:866886c1 r4:00000000 [ 2072.926554][T11970] [<8058f314>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2072.926612][T11970] Exception stack(0xeb659fa8 to 0xeb659ff0) [ 2072.926658][T11970] 9fa0: 00000000 00000000 00000003 0000f501 00000000 00000000 [ 2072.926699][T11970] 9fc0: 00000000 00000000 0012e624 00000036 003462d8 00000000 00000001 76f980dc [ 2072.926732][T11970] 9fe0: 76f97e88 76f97e78 00018734 0012fc20 [ 2072.926775][T11970] r10:00000036 r9:83f8ec00 r8:8020029c r7:00000036 r6:0012e624 r5:00000000 [ 2072.926800][T11970] r4:00000000 [ 2076.453987][ T7830] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2076.704735][ T7830] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2076.705014][ T7830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2076.705281][ T7830] usb 2-1: Product: syz [ 2076.705450][ T7830] usb 2-1: Manufacturer: syz [ 2076.705602][ T7830] usb 2-1: SerialNumber: syz [ 2077.482026][ T7830] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2077.484063][ T7830] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2077.500683][ T7830] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2077.502645][ T7830] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2077.507321][ T7830] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2077.512955][ T7830] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 2087.871376][ T4912] usb 2-1: USB disconnect, device number 34 [ 2090.157387][ T28] audit: type=1400 audit(2089.710:305): avc: denied { create } for pid=12119 comm="syz.1.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 2090.167216][ T28] audit: type=1400 audit(2089.720:306): avc: denied { lock } for pid=12119 comm="syz.1.1920" path="socket:[24254]" dev="sockfs" ino=24254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 2091.675553][T12136] fuse: Unknown parameter '0x0000000000000003' [ 2102.555491][T12261] fuse: Unknown parameter 'Ôy' [ 2103.696797][ T28] audit: type=1400 audit(2103.250:307): avc: denied { setattr } for pid=12257 comm="syz.0.1925" name="" dev="pipefs" ino=25006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 2105.224674][T12266] fuse: Unknown parameter '0x0000000000000003' [ 2120.985233][ T28] audit: type=1400 audit(2120.510:308): avc: denied { read } for pid=12403 comm="syz.1.1931" dev="sockfs" ino=24308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2121.094115][T12404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12404 comm=syz.1.1931 [ 2123.086173][T12406] fuse: Unknown parameter '0x0000000000000003' [ 2128.116164][T12410] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 2128.117319][ T28] audit: type=1400 audit(2127.670:309): avc: denied { relabelto } for pid=12409 comm="syz.0.1933" name="zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 2128.117660][ T28] audit: type=1400 audit(2127.670:310): avc: denied { associate } for pid=12409 comm="syz.0.1933" name="zero" dev="devtmpfs" ino=5 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 2137.754409][ T28] audit: type=1400 audit(2137.300:311): avc: denied { associate } for pid=12414 comm="syz.0.1936" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2146.585038][T12553] fuse: Unknown parameter '0x0000000000000003' [ 2152.918092][T12560] FAULT_INJECTION: forcing a failure. [ 2152.918092][T12560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2152.918623][T12560] CPU: 0 UID: 0 PID: 12560 Comm: syz.1.1942 Tainted: G L syzkaller #0 PREEMPT [ 2152.918733][T12560] Tainted: [L]=SOFTLOCKUP [ 2152.918754][T12560] Hardware name: ARM-Versatile Express [ 2152.918780][T12560] Call trace: [ 2152.918831][T12560] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 2152.918949][T12560] r7:60000013 r6:60000013 r5:822a4e64 r4:00000000 [ 2152.918970][T12560] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 2152.919022][T12560] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 2152.919096][T12560] r7:830b8400 r6:00000000 r5:83f8bc00 r4:8295091c [ 2152.919115][T12560] [<8021e468>] (dump_stack) from [<809b5320>] (should_fail_ex+0x1c0/0x224) [ 2152.919174][T12560] [<809b5160>] (should_fail_ex) from [<809b5398>] (should_fail+0x14/0x18) [ 2152.919240][T12560] r8:81d3c46c r7:830b8400 r6:c01c64a3 r5:0000001c r4:83f8c3e8 [ 2152.919257][T12560] [<809b5384>] (should_fail) from [<809b53b8>] (should_fail_usercopy+0x1c/0x20) [ 2152.923788][T12560] [<809b539c>] (should_fail_usercopy) from [<80b1aa10>] (drm_ioctl+0x1c4/0x580) [ 2152.923955][T12560] [<80b1a84c>] (drm_ioctl) from [<8058f558>] (sys_ioctl+0x244/0xb5c) [ 2152.924037][T12560] r10:83f8bc00 r9:00000003 r8:86687180 r7:20000000 r6:c01c64a3 r5:86687181 [ 2152.924061][T12560] r4:00000000 [ 2152.924080][T12560] [<8058f314>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2152.924265][T12560] Exception stack(0xec869fa8 to 0xec869ff0) [ 2152.924312][T12560] 9fa0: 00000000 00000000 00000003 c01c64a3 20000000 00000000 [ 2152.924350][T12560] 9fc0: 00000000 00000000 0012e624 00000036 003462d8 00000000 00000001 76f980dc [ 2152.924383][T12560] 9fe0: 76f97e88 76f97e78 00018734 0012fc20 [ 2152.924422][T12560] r10:00000036 r9:83f8bc00 r8:8020029c r7:00000036 r6:0012e624 r5:00000000 [ 2152.924444][T12560] r4:00000000 [ 2168.854760][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1948'. [ 2205.045191][T12697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2205.052599][T12697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2206.692678][T12697] hsr_slave_0: entered promiscuous mode [ 2206.698380][T12697] hsr_slave_1: entered promiscuous mode [ 2206.704317][T12697] debugfs: 'hsr0' already exists in 'hsr' [ 2206.705160][T12697] Cannot create hsr debugfs directory [ 2207.248059][T12697] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2207.341541][T12697] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2207.357995][T12697] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2207.369261][T12697] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2209.035323][T12697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2214.089393][ T5306] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2214.427024][ T5306] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2214.498740][ T5306] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2214.591177][ T5306] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2215.160934][ T5306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2215.167752][ T5306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2215.178767][ T5306] bond0 (unregistering): Released all slaves [ 2215.256600][ T5306] hsr_slave_0: left promiscuous mode [ 2215.273813][ T5306] hsr_slave_1: left promiscuous mode [ 2215.304911][ T5306] veth0_macvtap: left promiscuous mode [ 2215.305468][ T5306] veth1_vlan: left promiscuous mode [ 2215.309534][ T5306] veth0_vlan: left promiscuous mode [ 2216.107239][T12697] veth0_vlan: entered promiscuous mode [ 2216.161866][T12697] veth1_vlan: entered promiscuous mode [ 2216.287168][T12697] veth0_macvtap: entered promiscuous mode [ 2216.297930][T12697] veth1_macvtap: entered promiscuous mode [ 2216.349610][T11737] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.365420][T11737] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.379502][T11737] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.385579][T11737] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.693492][ T28] audit: type=1400 audit(2229.240:312): avc: denied { override_creds } for pid=13068 comm="syz.2.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2235.747719][T13095] input: syz1 as /devices/virtual/input/input13 [ 2249.405222][T13122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1967'. [ 2255.921847][T13162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2255.925597][T13162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2263.333898][T13192] input: syz0 as /devices/virtual/input/input14 [ 2270.675605][ T28] audit: type=1400 audit(2270.210:313): avc: denied { create } for pid=13210 comm="syz.2.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2272.732165][T13220] input: syz0 as /devices/virtual/input/input15 [ 2273.134013][T13228] netlink: 'syz.2.2008': attribute type 10 has an invalid length. [ 2273.500213][ T28] audit: type=1326 audit(2273.050:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13230 comm="syz.2.2009" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2273.510325][ T28] audit: type=1326 audit(2273.060:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13230 comm="syz.2.2009" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2273.512224][ T28] audit: type=1326 audit(2273.060:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13230 comm="syz.2.2009" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2273.519823][ T28] audit: type=1326 audit(2273.070:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13230 comm="syz.2.2009" exe="/syz-executor" sig=0 arch=40000028 syscall=444 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2273.529555][ T28] audit: type=1326 audit(2273.080:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13230 comm="syz.2.2009" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2273.535535][ T28] audit: type=1326 audit(2273.080:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13230 comm="syz.2.2009" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2273.539525][ T28] audit: type=1326 audit(2273.090:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13230 comm="syz.2.2009" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2273.543312][ T28] audit: type=1326 audit(2273.090:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13230 comm="syz.2.2009" exe="/syz-executor" sig=0 arch=40000028 syscall=436 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2273.545020][ T28] audit: type=1326 audit(2273.090:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13230 comm="syz.2.2009" exe="/syz-executor" sig=0 arch=40000028 syscall=248 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2277.175764][T13232] netlink: 'syz.0.2005': attribute type 10 has an invalid length. [ 2281.342262][T13317] binder: 13316:13317 unknown command 0 [ 2281.343431][T13317] binder: 13316:13317 ioctl c0306201 20000080 returned -22 [ 2281.352376][ T28] audit: type=1400 audit(2280.900:323): avc: denied { map } for pid=13316 comm="syz.2.2016" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2281.366118][ T28] audit: type=1400 audit(2280.920:324): avc: denied { call } for pid=13316 comm="syz.2.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2282.075466][ T28] audit: type=1326 audit(2281.630:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13321 comm="syz.2.2018" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2282.078955][ T28] audit: type=1326 audit(2281.630:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13321 comm="syz.2.2018" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2282.081162][ T28] audit: type=1326 audit(2281.630:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13321 comm="syz.2.2018" exe="/syz-executor" sig=0 arch=40000028 syscall=380 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2282.134372][ T28] audit: type=1326 audit(2281.690:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13321 comm="syz.2.2018" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2282.304438][ T28] audit: type=1326 audit(2281.860:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13321 comm="syz.2.2018" exe="/syz-executor" sig=0 arch=40000028 syscall=387 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2282.579333][ T28] audit: type=1326 audit(2282.130:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13321 comm="syz.2.2018" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2282.579830][ T28] audit: type=1326 audit(2282.130:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13321 comm="syz.2.2018" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2282.591039][ T28] audit: type=1326 audit(2282.140:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13321 comm="syz.2.2018" exe="/syz-executor" sig=0 arch=40000028 syscall=220 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2287.527479][T13332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2287.544968][T13332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2289.698557][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 2289.699029][ T28] audit: type=1400 audit(2289.250:348): avc: denied { cmd } for pid=13339 comm="syz.2.2025" path="socket:[26742]" dev="sockfs" ino=26742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2292.847986][ T28] audit: type=1400 audit(2292.400:349): avc: denied { watch } for pid=13358 comm="syz.2.2032" path="/proc/149" dev="proc" ino=26101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2296.530806][T13378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2296.539180][T13378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2297.508924][T13390] netlink: 'syz.2.2039': attribute type 4 has an invalid length. [ 2299.871064][T13422] binder_alloc: 13420: binder_alloc_buf, no vma [ 2300.178854][T13426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2300.184345][T13426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2301.350712][T13457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13457 comm=syz.2.2047 [ 2302.270309][T13475] syzkaller0: entered promiscuous mode [ 2302.271094][T13475] syzkaller0: entered allmulticast mode [ 2305.505444][ T28] audit: type=1400 audit(2305.060:350): avc: denied { map } for pid=13499 comm="syz.2.2055" path="/dev/nullb0" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2321.047677][T13511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2059'. [ 2321.422424][T13513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2321.427252][T13513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2321.642212][T13517] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2061'. [ 2322.576406][T13519] IPv6: sit1: Disabled Multicast RS [ 2322.806989][ T28] audit: type=1400 audit(2322.360:351): avc: denied { relabelfrom } for pid=13525 comm="syz.2.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2322.819147][ T28] audit: type=1400 audit(2322.370:352): avc: denied { relabelto } for pid=13525 comm="syz.2.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2332.349820][T13559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2332.351624][T13559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2336.666536][ T28] audit: type=1400 audit(2336.220:353): avc: denied { watch watch_reads } for pid=13565 comm="syz.2.2074" path="/106/file0" dev="tmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2340.035940][T13574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2340.051217][T13574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2341.208259][T13574] hsr_slave_0: entered promiscuous mode [ 2341.210104][T13574] hsr_slave_1: entered promiscuous mode [ 2341.211776][T13574] debugfs: 'hsr0' already exists in 'hsr' [ 2341.211913][T13574] Cannot create hsr debugfs directory [ 2341.640752][T13574] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2341.655583][T13574] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2341.668486][T13574] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2341.682681][T13574] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2342.502470][T13574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2344.774470][T13302] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2344.866542][T13302] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2344.929441][T13302] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2345.000799][T13302] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2345.326491][T13302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2345.342034][T13302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2345.354983][T13302] bond0 (unregistering): Released all slaves [ 2345.436309][T13302] hsr_slave_0: left promiscuous mode [ 2345.440590][T13302] hsr_slave_1: left promiscuous mode [ 2345.455062][T13302] veth1_macvtap: left promiscuous mode [ 2345.455488][T13302] veth0_macvtap: left promiscuous mode [ 2345.459405][T13302] veth1_vlan: left promiscuous mode [ 2345.459906][T13302] veth0_vlan: left promiscuous mode [ 2346.520284][T13574] veth0_vlan: entered promiscuous mode [ 2346.547919][T13574] veth1_vlan: entered promiscuous mode [ 2346.626126][T13574] veth0_macvtap: entered promiscuous mode [ 2346.648610][T13574] veth1_macvtap: entered promiscuous mode [ 2346.728636][T13282] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2346.734207][T13282] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2346.742316][T13282] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2346.748002][T13282] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2364.258841][T13963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2364.262367][T13963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2364.405313][T13967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2364.407154][T13967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2368.488222][T13981] syzkaller0: entered promiscuous mode [ 2368.488736][T13981] syzkaller0: entered allmulticast mode [ 2371.046695][T13998] ======================================================= [ 2371.046695][T13998] WARNING: The mand mount option has been deprecated and [ 2371.046695][T13998] and is ignored by this kernel. Remove the mand [ 2371.046695][T13998] option from the mount to silence this warning. [ 2371.046695][T13998] ======================================================= [ 2371.048943][ T28] audit: type=1400 audit(2370.600:354): avc: denied { mount } for pid=13971 comm="syz.2.2086" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2371.160418][ T28] audit: type=1400 audit(2370.710:355): avc: denied { unmount } for pid=13971 comm="syz.2.2086" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2387.624374][ T28] audit: type=1400 audit(2387.170:356): avc: denied { bind } for pid=14040 comm="syz.2.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2388.380846][T14048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2388.394769][T14048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2417.178177][ T28] audit: type=1326 audit(2416.730:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14131 comm="syz.3.2105" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2417.188451][ T28] audit: type=1326 audit(2416.740:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14131 comm="syz.3.2105" exe="/syz-executor" sig=0 arch=40000028 syscall=187 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2417.197435][ T28] audit: type=1326 audit(2416.750:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14131 comm="syz.3.2105" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2436.121063][T14156] syzkaller0: entered promiscuous mode [ 2436.133402][T14156] syzkaller0: entered allmulticast mode [ 2436.142256][T13288] syzkaller0: tun_net_xmit 48 [ 2436.172384][T14156] syzkaller0: create flow: hash 3031648205 index 1 [ 2436.199604][T14155] syzkaller0: delete flow: hash 3031648205 index 1 [ 2449.988114][T14180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2449.995572][T14180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2452.311891][T14209] syzkaller0: entered promiscuous mode [ 2452.312339][T14209] syzkaller0: entered allmulticast mode [ 2465.055964][T14245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2465.061077][T14245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2477.898980][T14262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2477.902063][T14262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2480.154777][ T28] audit: type=1326 audit(2479.710:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14267 comm="syz.3.2139" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x0 [ 2507.779832][ T28] audit: type=1326 audit(2507.330:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14309 comm="syz.2.2152" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2507.815034][ T28] audit: type=1326 audit(2507.340:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14309 comm="syz.2.2152" exe="/syz-executor" sig=0 arch=40000028 syscall=4 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2507.815552][ T28] audit: type=1326 audit(2507.350:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14309 comm="syz.2.2152" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2507.815893][ T28] audit: type=1326 audit(2507.350:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14309 comm="syz.2.2152" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2507.816114][ T28] audit: type=1326 audit(2507.350:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14309 comm="syz.2.2152" exe="/syz-executor" sig=0 arch=40000028 syscall=6 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2507.816329][ T28] audit: type=1326 audit(2507.350:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14309 comm="syz.2.2152" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2507.816558][ T28] audit: type=1326 audit(2507.350:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14309 comm="syz.2.2152" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2507.854055][ T28] audit: type=1326 audit(2507.360:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14309 comm="syz.2.2152" exe="/syz-executor" sig=0 arch=40000028 syscall=54 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2507.854477][ T28] audit: type=1326 audit(2507.360:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14309 comm="syz.2.2152" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2507.854987][ T28] audit: type=1326 audit(2507.360:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14309 comm="syz.2.2152" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2526.248203][T14325] pimreg: entered allmulticast mode [ 2528.797546][T14329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2528.827938][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2157'. [ 2531.568423][T14376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2531.586917][T14376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2546.065837][T14409] kernel profiling enabled (shift: 31) [ 2546.066263][T14409] profiling shift: 31 too large [ 2547.931796][T14422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2547.934469][T14422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2554.616240][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 2554.616661][ T28] audit: type=1400 audit(2554.170:376): avc: denied { write } for pid=14433 comm="syz.3.2184" path="socket:[28871]" dev="sockfs" ino=28871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2570.447699][T14469] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2580.595021][ T28] audit: type=1400 audit(2580.150:377): avc: denied { ioctl } for pid=14478 comm="syz.2.2195" path="/173/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 2580.849157][ T28] audit: type=1400 audit(2580.370:378): avc: denied { mount } for pid=14483 comm="syz.2.2196" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2586.009461][ T28] audit: type=1326 audit(2585.560:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14494 comm="syz.3.2200" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2586.016349][ T28] audit: type=1326 audit(2585.560:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14494 comm="syz.3.2200" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2586.027227][ T28] audit: type=1326 audit(2585.580:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14494 comm="syz.3.2200" exe="/syz-executor" sig=0 arch=40000028 syscall=290 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2586.047571][ T28] audit: type=1326 audit(2585.600:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14494 comm="syz.3.2200" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2586.051096][ T28] audit: type=1326 audit(2585.600:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14494 comm="syz.3.2200" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2586.095270][ T28] audit: type=1326 audit(2585.650:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14494 comm="syz.3.2200" exe="/syz-executor" sig=0 arch=40000028 syscall=337 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2586.109399][ T28] audit: type=1326 audit(2585.650:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14494 comm="syz.3.2200" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2586.223878][ T28] audit: type=1326 audit(2585.730:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14494 comm="syz.3.2200" exe="/syz-executor" sig=0 arch=40000028 syscall=303 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2586.224307][ T28] audit: type=1326 audit(2585.730:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14494 comm="syz.3.2200" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2586.227576][ T28] audit: type=1326 audit(2585.730:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14494 comm="syz.3.2200" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 2586.238264][T14493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2586.239506][T14493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2621.316270][T14532] syz.2.2207 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2626.832138][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 2626.832558][ T28] audit: type=1400 audit(2626.330:398): avc: denied { mount } for pid=14535 comm="syz.2.2209" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2626.833319][ T28] audit: type=1400 audit(2626.330:399): avc: denied { remount } for pid=14535 comm="syz.2.2209" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2636.777822][T14540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2636.790659][T14540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2638.221486][T14540] hsr_slave_0: entered promiscuous mode [ 2638.223587][T14540] hsr_slave_1: entered promiscuous mode [ 2638.729061][T14540] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2638.769493][T14540] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2638.805905][T14540] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2638.830798][T14540] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2640.257551][ T28] audit: type=1400 audit(2639.810:400): avc: denied { unmount } for pid=12697 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2641.396697][T14540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2642.228377][T14848] netlink: 'syz.2.2212': attribute type 21 has an invalid length. [ 2642.233733][T14848] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2212'. [ 2642.244809][T14848] netlink: 'syz.2.2212': attribute type 4 has an invalid length. [ 2642.249127][T14848] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2212'. [ 2645.264230][T14865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2645.265166][T14865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2649.457367][T14540] veth0_vlan: entered promiscuous mode [ 2649.482505][T14540] veth1_vlan: entered promiscuous mode [ 2649.605160][T14540] veth0_macvtap: entered promiscuous mode [ 2649.644552][T14540] veth1_macvtap: entered promiscuous mode [ 2649.765999][T13297] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2649.766412][T13297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2649.767278][T13297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2649.767631][T13297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2662.487427][T14917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2662.614012][T14917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2662.792132][T14921] comedi: valid board names for 8255 driver are: [ 2662.802304][T14921] 8255 [ 2662.802534][T14921] comedi: valid board names for vmk80xx driver are: [ 2662.802622][T14921] vmk80xx [ 2662.802691][T14921] comedi: valid board names for usbduxsigma driver are: [ 2662.802791][T14921] usbduxsigma [ 2662.808384][T14921] comedi: valid board names for usbduxfast driver are: [ 2662.810684][T14921] usbduxfast [ 2662.810892][T14921] comedi: valid board names for usbdux driver are: [ 2662.810973][T14921] usbdux [ 2662.811041][T14921] comedi: valid board names for ni6501 driver are: [ 2662.811142][T14921] ni6501 [ 2662.811235][T14921] comedi: valid board names for dt9812 driver are: [ 2662.811304][T14921] dt9812 [ 2662.811375][T14921] comedi: valid board names for ni_labpc_cs driver are: [ 2662.811442][T14921] ni_labpc_cs [ 2662.811506][T14921] comedi: valid board names for ni_daq_700 driver are: [ 2662.811617][T14921] ni_daq_700 [ 2662.811754][T14921] comedi: valid board names for labpc_pci driver are: [ 2662.811852][T14921] labpc_pci [ 2662.811918][T14921] comedi: valid board names for adl_pci9118 driver are: [ 2662.811984][T14921] pci9118dg [ 2662.812080][T14921] pci9118hg [ 2662.812148][T14921] pci9118hr [ 2662.812213][T14921] comedi: valid board names for 8255_pci driver are: [ 2662.834215][T14921] 8255_pci [ 2662.834312][T14921] comedi: valid board names for comedi_parport driver are: [ 2662.834386][T14921] comedi_parport [ 2662.834451][T14921] comedi: valid board names for comedi_test driver are: [ 2662.834515][T14921] comedi_test [ 2662.834579][T14921] comedi: valid board names for comedi_bond driver are: [ 2662.834643][T14921] comedi_bond [ 2670.167941][T14930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2670.170129][T14930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2695.741092][T14960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2695.747358][T14960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2700.392674][T14966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2232'. [ 2700.396060][T14966] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2232'. [ 2714.948570][ T28] audit: type=1400 audit(2714.500:401): avc: denied { mount } for pid=15011 comm="syz.4.2245" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2724.496517][T15020] syzkaller0: entered promiscuous mode [ 2724.498925][T15020] syzkaller0: entered allmulticast mode [ 2726.190992][T15028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2726.197308][T15028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2730.644294][T15047] pimreg: left allmulticast mode [ 2731.994301][T15046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2731.995454][T15046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2732.445960][T15053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2732.447886][T15053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2741.060572][T15062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2741.068116][T15062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2744.509658][T15078] ªªªªªª: renamed from vlan0 (while UP) [ 2758.484377][T15097] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2271'. [ 2841.230128][ T28] audit: type=1400 audit(2840.780:402): avc: denied { rename } for pid=15178 comm="syz.4.2295" name="file0" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2853.399231][ T28] audit: type=1800 audit(2852.950:403): pid=15200 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2299" name="/" dev="fuse" ino=4 res=0 errno=0 [ 2857.021383][T15220] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 2860.289367][T15235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2860.330356][T15235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2862.529437][T15249] netlink: 'syz.2.2317': attribute type 4 has an invalid length. [ 2863.604273][ T28] audit: type=1400 audit(2863.150:404): avc: denied { create } for pid=15250 comm="syz.4.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2863.684264][ T28] audit: type=1400 audit(2863.230:405): avc: denied { write } for pid=15250 comm="syz.4.2318" path="socket:[30874]" dev="sockfs" ino=30874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2879.476235][T15277] syzkaller0: entered promiscuous mode [ 2879.476819][T15277] syzkaller0: entered allmulticast mode [ 2917.620761][T15357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2341'. [ 2920.428247][ T28] audit: type=1400 audit(2919.980:406): avc: denied { connect } for pid=15365 comm="syz.2.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2933.599245][T15386] ------------[ cut here ]------------ [ 2933.599876][T15386] WARNING: kernel/bpf/verifier.c:2763 at reg_bounds_sanity_check+0x3c0/0x428, CPU#0: syz.2.2352/15386 [ 2933.604219][T15386] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 2933.605611][T15386] Modules linked in: [ 2933.606677][T15386] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2933.607278][T15386] CPU: 0 UID: 0 PID: 15386 Comm: syz.2.2352 Tainted: G L syzkaller #0 PREEMPT [ 2933.608074][T15386] Tainted: [L]=SOFTLOCKUP [ 2933.608295][T15386] Hardware name: ARM-Versatile Express [ 2933.608624][T15386] Call trace: [ 2933.608954][T15386] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 2933.609649][T15386] r7:8281f900 r6:00000000 r5:822a4e64 r4:00000001 [ 2933.609945][T15386] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 2933.610409][T15386] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 2933.610881][T15386] r7:8281f900 r6:00000000 r5:85112400 r4:82a7fd14 [ 2933.611250][T15386] [<8021e468>] (dump_stack) from [<802025f4>] (vpanic+0x114/0x320) [ 2933.611593][T15386] [<802024e0>] (vpanic) from [<80202834>] (trace_suspend_resume+0x0/0x104) [ 2933.612025][T15386] r7:803e024c [ 2933.612248][T15386] [<80202800>] (panic) from [<80250a68>] (get_taint+0x0/0x1c) [ 2933.612629][T15386] r3:8280c544 r2:00000001 r1:8228bc08 r0:822934c0 [ 2933.613268][T15386] [<802509f0>] (check_panic_on_warn) from [<80250be4>] (__warn+0x98/0x1ac) [ 2933.613868][T15386] [<80250b4c>] (__warn) from [<80250ee0>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 2933.614241][T15386] r8:00000009 r7:822ab79c r6:dfca98c4 r5:85112400 r4:00000000 [ 2933.614531][T15386] [<80250cfc>] (warn_slowpath_fmt) from [<803e024c>] (reg_bounds_sanity_check+0x3c0/0x428) [ 2933.614934][T15386] r10:87378000 r9:ffffdfcd r8:80000000 r7:ffffdfcd r6:ffffdfcc r5:822abf00 [ 2933.615241][T15386] r4:855c3a30 [ 2933.615399][T15386] [<803dfe8c>] (reg_bounds_sanity_check) from [<803ecf74>] (reg_set_min_max+0x1c4/0x288) [ 2933.615779][T15386] r10:00000001 r9:00000010 r8:87378000 r7:85d02310 r6:855c3b10 r5:855c3a30 [ 2933.616076][T15386] r4:85d02230 [ 2933.616234][T15386] [<803ecdb0>] (reg_set_min_max) from [<803fdbb8>] (check_cond_jmp_op+0xc7c/0x1980) [ 2933.616736][T15386] r10:855c3800 r9:00000010 r8:863b2680 r7:ffffffff r6:80000000 r5:838afc00 [ 2933.617055][T15386] r4:dfc030c0 r3:85d02230 [ 2933.617240][T15386] [<803fcf3c>] (check_cond_jmp_op) from [<80404228>] (do_check_common+0x259c/0x3228) [ 2933.617696][T15386] r10:863b2680 r9:87378000 r8:dfc030c0 r7:8737e000 r6:00000018 r5:dfc03078 [ 2933.618040][T15386] r4:dfc03000 [ 2933.618214][T15386] [<80401c8c>] (do_check_common) from [<80407e7c>] (bpf_check+0x22e4/0x2d30) [ 2933.618592][T15386] r10:8737e000 r9:00000001 r8:87378000 r7:00000a7b r6:873788bc r5:00000000 [ 2933.618897][T15386] r4:00000016 [ 2933.619053][T15386] [<80405b98>] (bpf_check) from [<803d959c>] (bpf_prog_load+0x5b8/0xdec) [ 2933.619412][T15386] r10:dfc03000 r9:85112400 r8:8743f330 r7:dfca9d18 r6:00000000 r5:00000000 [ 2933.619716][T15386] r4:dfca9eb0 [ 2933.619868][T15386] [<803d8fe4>] (bpf_prog_load) from [<803dadc4>] (__sys_bpf+0x2d8/0x2008) [ 2933.620204][T15386] r10:00000005 r9:00000000 r8:dfca9e50 r7:00000048 r6:85112400 r5:200054c0 [ 2933.620658][T15386] r4:00000000 [ 2933.620896][T15386] [<803daaec>] (__sys_bpf) from [<803dd08c>] (sys_bpf+0x2c/0x48) [ 2933.621247][T15386] r10:00000182 r9:85112400 r8:8020029c r7:00000182 r6:00346450 r5:00000000 [ 2933.621574][T15386] r4:00000000 [ 2933.621727][T15386] [<803dd060>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2933.622099][T15386] Exception stack(0xdfca9fa8 to 0xdfca9ff0) [ 2933.622364][T15386] 9fa0: 00000000 00000000 00000005 200054c0 00000048 00000000 [ 2933.622701][T15386] 9fc0: 00000000 00000000 00346450 00000182 00346418 00000000 003d0f00 76f150dc [ 2933.623250][T15386] 9fe0: 76f14e88 76f14e78 00018734 0012fc20 [ 2933.625868][T15386] Rebooting in 86400 seconds..