last executing test programs: 7.297898442s ago: executing program 0 (id=2596): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x7fffffff}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000120001000000efbc856d194734db"], 0x28}}, 0x0) 6.687958061s ago: executing program 0 (id=2597): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000001280)=ANY=[@ANYBLOB="01000000270000000100000000000000", @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f00000005c0), 0x10) recvmmsg(r3, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000002ac0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 4.328849729s ago: executing program 1 (id=2599): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x1, 0x0}, 0xfffffffffffffd1b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000380)=0x2000000, &(0x7f0000000780)}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180), 0x12) 3.898996772s ago: executing program 0 (id=2600): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0xfd98, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="83cbd8", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000001200)="5f44cb626b", 0x5}], 0x1}}], 0x2, 0x4000c000) sendto$inet6(r0, &(0x7f00000001c0)="c346", 0x2, 0x0, 0x0, 0x0) 3.70846255s ago: executing program 1 (id=2601): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f000001aa80)=@newchain={0x34, 0x64, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}]}, 0x34}}, 0x4c084) recvmsg(r1, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/8, 0x8}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[], 0x14}}, 0x0) 3.370995695s ago: executing program 0 (id=2602): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) 3.224786074s ago: executing program 0 (id=2603): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000008c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001340)="db", 0x1}], 0x1}}], 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[], 0x578) 2.141970724s ago: executing program 1 (id=2604): syz_open_dev$mouse(&(0x7f0000002600), 0x0, 0x640000) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') write$FUSE_ATTR(r0, &(0x7f0000000040)={0x78, 0xffffffffffffffd1, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ff}}}, 0x78) openat$tun(0xffffff9c, &(0x7f0000000000), 0x8440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ce1}, 0x0, 0x0) 1.228515591s ago: executing program 1 (id=2605): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x1, 0x0}, 0xfffffffffffffd1b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000380)=0x2000000, &(0x7f0000000780)}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180), 0x12) 497.428793ms ago: executing program 0 (id=2606): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a000105000000c93df92089c2e9d2000000000008000a00f0000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000845}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x2, 0x4, 0x5bc, 0xffffffff, 0xc8, 0xc8, 0x0, 0xfeffffff, 0xffffffff, 0x4f4, 0x4f4, 0x4f4, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @local, [], [], 'macsec0\x00', 'rose0\x00'}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0x1fc, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x4, 0x0, 0x40, 0x0, 0x0, 0xf8e74ba, 0xfe8c}}}]}, @common=@unspec=@CONNSECMARK={0x24}}, {{@uncond, 0x0, 0x1dc, 0x20c, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@local, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1, @empty, @mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, @local, @remote, @private1, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x800, 0xd5, 0x2, 0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x618) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)="5d60aa2428ec9d6b0716a586462edcd4acc5a4c05c8abec789779abacfd2e00ed0c9e451350bdca87625dcefff16a1c802377f", 0x33) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x1407, 0x1, 0x2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4c004) r4 = io_uring_setup(0x7d7b, &(0x7f0000000100)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) io_setup(0x22, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000687000/0x4000)=nil, &(0x7f00000b9000/0x3000)=nil, 0x4000}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x500, 0x0, 0x0, 0xce024d}, 0x9c) openat$sw_sync(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) 497.126543ms ago: executing program 1 (id=2607): r0 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r0, &(0x7f0000000000)='E', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x9, @empty, 0x7ff}}, 0x9, 0xffff, 0x8000, 0x6, 0x41, 0x40, 0x58}, 0x0) 0s ago: executing program 1 (id=2608): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d492e4ff000109021b19f1000000d40904150001da40df000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 1.078589][T10234] [<80516a14>] (ksys_read) from [<80516b1c>] (sys_read+0x10/0x14) [ 2031.079032][T10234] r7:00000003 r6:00000004 r5:76bcaf30 r4:0000000f [ 2031.079312][T10234] [<80516b0c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2031.079632][T10234] Exception stack(0xeadc5fa8 to 0xeadc5ff0) [ 2031.079892][T10234] 5fa0: 0000000f 76bcaf30 00000004 76bcaf30 0000000f 00000000 [ 2031.080196][T10234] 5fc0: 0000000f 76bcaf30 00000004 00000003 00000000 00006364 003d0f00 76bcb0bc [ 2031.080600][T10234] 5fe0: 00000158 76bcaed0 000d8408 00130d94 [ 2031.474414][ T31] audit: type=1400 audit(2031.380:362): avc: denied { map } for pid=10237 comm="syz.1.1632" path="socket:[19323]" dev="sockfs" ino=19323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2034.188720][T10262] fuse: Unknown parameter 'group_i00000000000000000000' [ 2034.344503][T10264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10264 comm=syz.0.1638 [ 2037.687208][T10283] fuse: Bad value for 'user_id' [ 2037.687687][T10283] fuse: Bad value for 'user_id' [ 2040.070303][T10296] fuse: Bad value for 'user_id' [ 2040.072012][T10296] fuse: Bad value for 'user_id' [ 2042.015497][T10308] fuse: Bad value for 'user_id' [ 2042.015755][T10308] fuse: Bad value for 'user_id' [ 2044.196351][T10321] fuse: Bad value for 'fd' [ 2045.663743][T10329] fuse: Unknown parameter 'grou00000000000000000000' [ 2046.654210][T10339] fuse: Bad value for 'fd' [ 2048.500430][ T31] audit: type=1400 audit(2048.400:363): avc: denied { write } for pid=10375 comm="syz.0.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2048.512886][ T31] audit: type=1400 audit(2048.410:364): avc: denied { ioctl } for pid=10375 comm="syz.0.1676" path="socket:[20507]" dev="sockfs" ino=20507 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2051.199951][T10397] FAULT_INJECTION: forcing a failure. [ 2051.199951][T10397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2051.202174][T10397] CPU: 1 UID: 0 PID: 10397 Comm: syz.1.1684 Not tainted 6.12.0-rc2-syzkaller #0 [ 2051.202569][T10397] Hardware name: ARM-Versatile Express [ 2051.202813][T10397] Call trace: [ 2051.203031][T10397] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2051.203432][T10397] r7:00000000 r6:00000000 r5:60000013 r4:8203d394 [ 2051.203683][T10397] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2051.204044][T10397] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2051.204449][T10397] r5:00000000 r4:8274e1c4 [ 2051.204654][T10397] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2051.205003][T10397] [<808e5130>] (should_fail_ex) from [<808e5320>] (should_fail+0x14/0x18) [ 2051.205346][T10397] r6:00000000 r5:ec409f68 r4:00000002 [ 2051.205554][T10397] [<808e530c>] (should_fail) from [<808e5340>] (should_fail_usercopy+0x1c/0x20) [ 2051.205901][T10397] [<808e5324>] (should_fail_usercopy) from [<8054e664>] (simple_read_from_buffer+0x8c/0x134) [ 2051.207391][T10397] [<8054e5d8>] (simple_read_from_buffer) from [<805c3164>] (proc_fail_nth_read+0xb8/0x100) [ 2051.207787][T10397] r10:00000001 r9:805c30ac r8:00000002 r7:ec409f68 r6:0000000f r5:76bcaf30 [ 2051.208085][T10397] r4:84160000 r3:ec409e9f [ 2051.208294][T10397] [<805c30ac>] (proc_fail_nth_read) from [<80515ddc>] (vfs_read+0x98/0x324) [ 2051.208682][T10397] r8:76bcaf30 r7:ec409f68 r6:84160000 r5:0000000f r4:84a85300 [ 2051.209026][T10397] [<80515d44>] (vfs_read) from [<80516a8c>] (ksys_read+0x78/0xf8) [ 2051.209803][T10397] r10:00000003 r9:84160000 r8:8020029c r7:00000000 r6:00000000 r5:84a85300 [ 2051.210831][T10397] r4:84a85303 [ 2051.211042][T10397] [<80516a14>] (ksys_read) from [<80516b1c>] (sys_read+0x10/0x14) [ 2051.211733][T10397] r7:00000003 r6:00000004 r5:76bcaf30 r4:0000000f [ 2051.212177][T10397] [<80516b0c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2051.213110][T10397] Exception stack(0xec409fa8 to 0xec409ff0) [ 2051.214397][T10397] 9fa0: 0000000f 76bcaf30 00000004 76bcaf30 0000000f 00000000 [ 2051.214790][T10397] 9fc0: 0000000f 76bcaf30 00000004 00000003 00000000 00006364 003d0f00 76bcb0bc [ 2051.215171][T10397] 9fe0: 00000158 76bcaed0 000d8408 00130d94 [ 2051.329001][T10400] fuse: Bad value for 'user_id' [ 2051.329263][T10400] fuse: Bad value for 'user_id' [ 2053.597196][T10415] fuse: Bad value for 'fd' [ 2054.916051][T10421] FAULT_INJECTION: forcing a failure. [ 2054.916051][T10421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2054.916778][T10421] CPU: 1 UID: 0 PID: 10421 Comm: syz.0.1694 Not tainted 6.12.0-rc2-syzkaller #0 [ 2054.917712][T10421] Hardware name: ARM-Versatile Express [ 2054.918241][T10421] Call trace: [ 2054.918686][T10421] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2054.919789][T10421] r7:00000000 r6:00000000 r5:60000013 r4:8203d394 [ 2054.920120][T10421] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2054.921546][T10421] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2054.922332][T10421] r5:00000000 r4:8274e1c4 [ 2054.922574][T10421] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2054.922960][T10421] [<808e5130>] (should_fail_ex) from [<808e5320>] (should_fail+0x14/0x18) [ 2054.923358][T10421] r6:00000000 r5:ec311f68 r4:00000002 [ 2054.923599][T10421] [<808e530c>] (should_fail) from [<808e5340>] (should_fail_usercopy+0x1c/0x20) [ 2054.923959][T10421] [<808e5324>] (should_fail_usercopy) from [<8054e664>] (simple_read_from_buffer+0x8c/0x134) [ 2054.924442][T10421] [<8054e5d8>] (simple_read_from_buffer) from [<805c3164>] (proc_fail_nth_read+0xb8/0x100) [ 2054.924899][T10421] r10:00000001 r9:805c30ac r8:00000002 r7:ec311f68 r6:0000000f r5:76b8cf30 [ 2054.925251][T10421] r4:83741800 r3:ec311e9f [ 2054.925486][T10421] [<805c30ac>] (proc_fail_nth_read) from [<80515ddc>] (vfs_read+0x98/0x324) [ 2054.925891][T10421] r8:76b8cf30 r7:ec311f68 r6:83741800 r5:0000000f r4:8467c0c0 [ 2054.926204][T10421] [<80515d44>] (vfs_read) from [<80516a8c>] (ksys_read+0x78/0xf8) [ 2054.926587][T10421] r10:00000003 r9:83741800 r8:8020029c r7:00000000 r6:00000000 r5:8467c0c0 [ 2054.926940][T10421] r4:8467c0c3 [ 2054.927138][T10421] [<80516a14>] (ksys_read) from [<80516b1c>] (sys_read+0x10/0x14) [ 2054.927533][T10421] r7:00000003 r6:00000004 r5:76b8cf30 r4:0000000f [ 2054.927817][T10421] [<80516b0c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2054.928198][T10421] Exception stack(0xec311fa8 to 0xec311ff0) [ 2054.928551][T10421] 1fa0: 0000000f 76b8cf30 00000004 76b8cf30 0000000f 00000000 [ 2054.928941][T10421] 1fc0: 0000000f 76b8cf30 00000004 00000003 00000000 00006364 003d0f00 76b8d0bc [ 2054.929589][T10421] 1fe0: 00000158 76b8ced0 000d8408 00130d94 [ 2055.363829][T10425] fuse: Invalid rootmode [ 2055.534440][T10429] fuse: Bad value for 'group_id' [ 2055.534781][T10429] fuse: Bad value for 'group_id' [ 2056.134706][T10437] block nbd1: NBD_DISCONNECT [ 2058.299498][T10454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10454 comm=syz.0.1707 [ 2059.592364][ T31] audit: type=1400 audit(2059.490:365): avc: denied { read } for pid=10460 comm="syz.0.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2064.439591][T10488] FAULT_INJECTION: forcing a failure. [ 2064.439591][T10488] name failslab, interval 1, probability 0, space 0, times 0 [ 2064.440290][T10488] CPU: 0 UID: 0 PID: 10488 Comm: syz.1.1720 Not tainted 6.12.0-rc2-syzkaller #0 [ 2064.441038][T10488] Hardware name: ARM-Versatile Express [ 2064.441480][T10488] Call trace: [ 2064.441738][T10488] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2064.442191][T10488] r7:84163000 r6:00000820 r5:60000013 r4:8203d394 [ 2064.442586][T10488] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2064.443069][T10488] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2064.443497][T10488] r5:00000000 r4:82718bdc [ 2064.443729][T10488] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2064.444158][T10488] [<808e5130>] (should_fail_ex) from [<804e8188>] (should_failslab+0x6c/0x94) [ 2064.444636][T10488] r6:00000820 r5:84a0c180 r4:82f01180 [ 2064.444899][T10488] [<804e811c>] (should_failslab) from [<804cd228>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 2064.445313][T10488] [<804cd1dc>] (kmem_cache_alloc_noprof) from [<8149758c>] (skb_clone+0x60/0x1c8) [ 2064.445877][T10488] r10:00000000 r9:000001a2 r8:84921780 r7:84887000 r6:84a0c180 r5:84a0c180 [ 2064.446242][T10488] r4:00000820 [ 2064.446463][T10488] [<8149752c>] (skb_clone) from [<815a377c>] (__netlink_deliver_tap+0x1e8/0x24c) [ 2064.447049][T10488] r5:84f8ce80 r4:84f8c800 [ 2064.447529][T10488] [<815a3594>] (__netlink_deliver_tap) from [<815a6874>] (netlink_unicast+0x280/0x29c) [ 2064.447964][T10488] r10:00000000 r9:00000000 r8:84500d00 r7:84a0c180 r6:84921780 r5:00000020 [ 2064.448404][T10488] r4:84887000 [ 2064.448642][T10488] [<815a65f4>] (netlink_unicast) from [<815a6a6c>] (netlink_sendmsg+0x1dc/0x43c) [ 2064.449065][T10488] r9:00000000 r8:00000000 r7:845cb800 r6:00000020 r5:84a0c180 r4:f26c9e98 [ 2064.449621][T10488] [<815a6890>] (netlink_sendmsg) from [<81483698>] (__sock_sendmsg+0x44/0x78) [ 2064.450510][T10488] r10:00000122 r9:84163000 r8:00000003 r7:83383400 r6:83383400 r5:f26c9e98 [ 2064.451097][T10488] r4:00000000 [ 2064.451296][T10488] [<81483654>] (__sock_sendmsg) from [<81485cf0>] (__sys_sendto+0x108/0x14c) [ 2064.451732][T10488] r7:83383400 r6:76bc9e1c r5:00000000 r4:00000000 [ 2064.452158][T10488] [<81485be8>] (__sys_sendto) from [<81485d50>] (sys_sendto+0x1c/0x24) [ 2064.452610][T10488] r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76bc9e1c [ 2064.453111][T10488] [<81485d34>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2064.453545][T10488] Exception stack(0xf26c9fa8 to 0xf26c9ff0) [ 2064.453834][T10488] 9fa0: 76bc9e1c 0000000c 00000003 76bc9eb0 00000020 00000000 [ 2064.454631][T10488] 9fc0: 76bc9e1c 0000000c 00000000 00000122 00000003 00000000 76bc9eb0 76bcb0bc [ 2064.455007][T10488] 9fe0: 00000000 76bc9df0 000d8408 00135358 [ 2066.047352][ T31] audit: type=1400 audit(2065.950:366): avc: denied { accept } for pid=10503 comm="syz.0.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2066.063516][ T31] audit: type=1400 audit(2065.970:367): avc: denied { setattr } for pid=10503 comm="syz.0.1726" name="nbd0" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2068.644544][T10528] fuse: Unknown parameter 'grou00000000000000000000' [ 2070.016319][ T31] audit: type=1400 audit(2069.920:368): avc: denied { listen } for pid=10535 comm="syz.1.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 2070.498173][T10546] fuse: Unknown parameter 'grou00000000000000000000' [ 2071.672045][T10558] fuse: Unknown parameter 'grou00000000000000000000' [ 2073.038409][T10569] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10569 comm=syz.1.1749 [ 2073.459317][ T31] audit: type=1400 audit(2073.360:369): avc: denied { setopt } for pid=10581 comm="syz.0.1754" lport=47858 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 2075.711051][ T31] audit: type=1400 audit(2075.610:370): avc: denied { map } for pid=10630 comm="syz.1.1762" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2075.711784][ T31] audit: type=1400 audit(2075.610:371): avc: denied { read write } for pid=10630 comm="syz.1.1762" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2085.897301][T10693] fuse: Unknown parameter 'use00000000000000000000' [ 2085.989011][ T31] audit: type=1400 audit(2085.890:372): avc: denied { create } for pid=10694 comm="syz.1.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2089.027452][T10707] fuse: Unknown parameter 'use00000000000000000000' [ 2089.373747][T10711] FAULT_INJECTION: forcing a failure. [ 2089.373747][T10711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2089.374223][T10711] CPU: 1 UID: 0 PID: 10711 Comm: syz.0.1786 Not tainted 6.12.0-rc2-syzkaller #0 [ 2089.374527][T10711] Hardware name: ARM-Versatile Express [ 2089.374682][T10711] Call trace: [ 2089.374793][T10711] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2089.375011][T10711] r7:20000200 r6:f32dde30 r5:60000013 r4:8203d394 [ 2089.375159][T10711] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2089.375472][T10711] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2089.375703][T10711] r5:00000000 r4:8274e1c4 [ 2089.375821][T10711] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2089.376050][T10711] [<808e5130>] (should_fail_ex) from [<808e5320>] (should_fail+0x14/0x18) [ 2089.376261][T10711] r6:f32dde30 r5:00000000 r4:f32ddf38 [ 2089.376392][T10711] [<808e530c>] (should_fail) from [<808e5340>] (should_fail_usercopy+0x1c/0x20) [ 2089.376669][T10711] [<808e5324>] (should_fail_usercopy) from [<81486488>] (copy_msghdr_from_user+0x50/0x130) [ 2089.377256][T10711] [<81486438>] (copy_msghdr_from_user) from [<814865e0>] (___sys_sendmsg+0x78/0xd0) [ 2089.377527][T10711] r8:00004010 r7:00000000 r6:85007b80 r5:f32ddf38 r4:f32dde74 [ 2089.377715][T10711] [<81486568>] (___sys_sendmsg) from [<81486b1c>] (sys_sendmsg+0x78/0xbc) [ 2089.377938][T10711] r10:00000128 r9:83745400 r8:8020029c r7:00004010 r6:20000200 r5:85007b80 [ 2089.378140][T10711] r4:00000000 [ 2089.378237][T10711] [<81486aa4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2089.378465][T10711] Exception stack(0xf32ddfa8 to 0xf32ddff0) [ 2089.378604][T10711] dfa0: 00000000 00000000 00000004 20000200 00004010 00000000 [ 2089.378820][T10711] dfc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76b8d0bc [ 2089.379009][T10711] dfe0: 76b8cec0 76b8ceb0 00018af8 00132ec0 [ 2089.379162][T10711] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2090.662629][T10719] fuse: Unknown parameter 'user_i00000000000000000000' [ 2091.352232][T10733] fuse: Unknown parameter 'user_i00000000000000000000' [ 2091.444927][T10735] fuse: Bad value for 'fd' [ 2091.717358][T10743] fuse: Unknown parameter 'user_i00000000000000000000' [ 2091.801126][T10745] fuse: Bad value for 'fd' [ 2092.286006][T10757] fuse: Unknown parameter '0x0000000000000003' [ 2095.385556][T10770] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2579 sclass=netlink_xfrm_socket pid=10770 comm=syz.1.1809 [ 2098.110849][ C0] vkms_vblank_simulate: vblank timer overrun [ 2099.109514][T10787] FAULT_INJECTION: forcing a failure. [ 2099.109514][T10787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2099.113943][T10787] CPU: 1 UID: 0 PID: 10787 Comm: syz.0.1815 Not tainted 6.12.0-rc2-syzkaller #0 [ 2099.114559][T10787] Hardware name: ARM-Versatile Express [ 2099.114803][T10787] Call trace: [ 2099.115047][T10787] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2099.115518][T10787] r7:f3511eb8 r6:00000000 r5:60000013 r4:8203d394 [ 2099.115812][T10787] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2099.116211][T10787] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2099.116645][T10787] r5:00000000 r4:8274e1c4 [ 2099.116874][T10787] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2099.117257][T10787] [<808e5130>] (should_fail_ex) from [<808e5320>] (should_fail+0x14/0x18) [ 2099.117657][T10787] r6:00000000 r5:00000001 r4:00000001 [ 2099.117885][T10787] [<808e530c>] (should_fail) from [<808e5340>] (should_fail_usercopy+0x1c/0x20) [ 2099.118233][T10787] [<808e5324>] (should_fail_usercopy) from [<80842ca4>] (kstrtouint_from_user+0x60/0x128) [ 2099.118658][T10787] [<80842c44>] (kstrtouint_from_user) from [<805c4670>] (proc_fail_nth_write+0x40/0xe8) [ 2099.119063][T10787] r8:f3511f68 r7:84166c00 r6:00000001 r5:8467ccc0 r4:00000001 [ 2099.119356][T10787] [<805c4630>] (proc_fail_nth_write) from [<80516674>] (vfs_write+0xac/0x44c) [ 2099.119834][T10787] r5:8467ccc0 r4:805c4630 [ 2099.120045][T10787] [<805165c8>] (vfs_write) from [<80516b98>] (ksys_write+0x78/0xf8) [ 2099.120711][T10787] r10:00000004 r9:84166c00 r8:8020029c r7:00000000 r6:00000002 r5:8467ccc0 [ 2099.121111][T10787] r4:8467ccc3 [ 2099.121502][T10787] [<80516b20>] (ksys_write) from [<80516c28>] (sys_write+0x10/0x14) [ 2099.122367][T10787] r7:00000004 r6:00000005 r5:76b8cf30 r4:00000001 [ 2099.122680][T10787] [<80516c18>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2099.123076][T10787] Exception stack(0xf3511fa8 to 0xf3511ff0) [ 2099.123408][T10787] 1fa0: 00000001 76b8cf30 00000005 76b8cf30 00000001 00000000 [ 2099.123949][T10787] 1fc0: 00000001 76b8cf30 00000005 00000004 00000000 00006364 003d0f00 76b8d0bc [ 2099.124453][T10787] 1fe0: 00000158 76b8ced0 000d8408 00130e5c [ 2099.498881][T10793] FAULT_INJECTION: forcing a failure. [ 2099.498881][T10793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2099.499244][T10793] CPU: 0 UID: 0 PID: 10793 Comm: syz.0.1818 Not tainted 6.12.0-rc2-syzkaller #0 [ 2099.499458][T10793] Hardware name: ARM-Versatile Express [ 2099.499596][T10793] Call trace: [ 2099.499739][T10793] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2099.500038][T10793] r7:84065200 r6:00000000 r5:60000013 r4:8203d394 [ 2099.500283][T10793] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2099.501425][T10793] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2099.501952][T10793] r5:00000000 r4:8274e1c4 [ 2099.502473][T10793] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2099.503043][T10793] [<808e5130>] (should_fail_ex) from [<808e5320>] (should_fail+0x14/0x18) [ 2099.503577][T10793] r6:00000000 r5:f3649f48 r4:0000001c [ 2099.503919][T10793] [<808e530c>] (should_fail) from [<808e5340>] (should_fail_usercopy+0x1c/0x20) [ 2099.504308][T10793] [<808e5324>] (should_fail_usercopy) from [<8083a16c>] (_copy_from_iter+0x68/0x7c8) [ 2099.504773][T10793] [<8083a104>] (_copy_from_iter) from [<815a6a2c>] (netlink_sendmsg+0x19c/0x43c) [ 2099.505213][T10793] r10:00000000 r9:00000003 r8:f3649f48 r7:84aeec00 r6:0000001c r5:84a080c0 [ 2099.505600][T10793] r4:f3649f38 [ 2099.505809][T10793] [<815a6890>] (netlink_sendmsg) from [<81483698>] (__sock_sendmsg+0x44/0x78) [ 2099.506254][T10793] r10:04000000 r9:f3649dd4 r8:f3649dd4 r7:00000000 r6:833c9b80 r5:f3649f38 [ 2099.506643][T10793] r4:00000000 [ 2099.506848][T10793] [<81483654>] (__sock_sendmsg) from [<8148469c>] (____sys_sendmsg+0x2ac/0x2cc) [ 2099.507268][T10793] r7:00000000 r6:00000000 r5:833c9b80 r4:f3649f38 [ 2099.507582][T10793] [<814843f0>] (____sys_sendmsg) from [<81486604>] (___sys_sendmsg+0x9c/0xd0) [ 2099.508023][T10793] r10:f3649e34 r9:20000980 r8:04000000 r7:00000000 r6:833c9b80 r5:f3649f38 [ 2099.508441][T10793] r4:00000000 [ 2099.508654][T10793] [<81486568>] (___sys_sendmsg) from [<81486b1c>] (sys_sendmsg+0x78/0xbc) [ 2099.509064][T10793] r10:00000128 r9:83740c00 r8:8020029c r7:04000000 r6:20000980 r5:833c9b80 [ 2099.509444][T10793] r4:00000000 [ 2099.509657][T10793] [<81486aa4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2099.510082][T10793] Exception stack(0xf3649fa8 to 0xf3649ff0) [ 2099.510477][T10793] 9fa0: 00000000 00000000 00000003 20000980 04000000 00000000 [ 2099.511163][T10793] 9fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76b8d0bc [ 2099.511645][T10793] 9fe0: 76b8cec0 76b8ceb0 00018af8 00132ec0 [ 2099.511952][T10793] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2109.301549][T10837] FAULT_INJECTION: forcing a failure. [ 2109.301549][T10837] name failslab, interval 1, probability 0, space 0, times 0 [ 2109.302383][T10837] CPU: 0 UID: 0 PID: 10837 Comm: syz.0.1831 Not tainted 6.12.0-rc2-syzkaller #0 [ 2109.302983][T10837] Hardware name: ARM-Versatile Express [ 2109.303366][T10837] Call trace: [ 2109.303512][T10837] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2109.303728][T10837] r7:83741800 r6:00000820 r5:60000013 r4:8203d394 [ 2109.303865][T10837] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2109.304064][T10837] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2109.304257][T10837] r5:00000000 r4:82718bdc [ 2109.304604][T10837] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2109.305263][T10837] [<808e5130>] (should_fail_ex) from [<804e8188>] (should_failslab+0x6c/0x94) [ 2109.305700][T10837] r6:00000820 r5:84a08300 r4:82f01180 [ 2109.306200][T10837] [<804e811c>] (should_failslab) from [<804cd228>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 2109.306616][T10837] [<804cd1dc>] (kmem_cache_alloc_noprof) from [<8149758c>] (skb_clone+0x60/0x1c8) [ 2109.306842][T10837] r10:00000000 r9:000001a2 r8:84678480 r7:84ae5800 r6:84a08300 r5:84a08300 [ 2109.307017][T10837] r4:00000820 [ 2109.307105][T10837] [<8149752c>] (skb_clone) from [<815a377c>] (__netlink_deliver_tap+0x1e8/0x24c) [ 2109.307309][T10837] r5:84fc4680 r4:84fc4000 [ 2109.307423][T10837] [<815a3594>] (__netlink_deliver_tap) from [<815a6874>] (netlink_unicast+0x280/0x29c) [ 2109.307632][T10837] r10:00000000 r9:00000000 r8:84501a00 r7:84a08300 r6:84678480 r5:00000020 [ 2109.307809][T10837] r4:84ae5800 [ 2109.307896][T10837] [<815a65f4>] (netlink_unicast) from [<815a6a6c>] (netlink_sendmsg+0x1dc/0x43c) [ 2109.308088][T10837] r9:00000000 r8:00000000 r7:84ae2800 r6:00000020 r5:84a08300 r4:f37dde98 [ 2109.308256][T10837] [<815a6890>] (netlink_sendmsg) from [<81483698>] (__sock_sendmsg+0x44/0x78) [ 2109.308499][T10837] r10:00000122 r9:83741800 r8:00000003 r7:83393180 r6:83393180 r5:f37dde98 [ 2109.308678][T10837] r4:00000000 [ 2109.308765][T10837] [<81483654>] (__sock_sendmsg) from [<81485cf0>] (__sys_sendto+0x108/0x14c) [ 2109.308964][T10837] r7:83393180 r6:76b8be1c r5:00000000 r4:00000000 [ 2109.309102][T10837] [<81485be8>] (__sys_sendto) from [<81485d50>] (sys_sendto+0x1c/0x24) [ 2109.309289][T10837] r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76b8be1c [ 2109.309456][T10837] [<81485d34>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2109.309638][T10837] Exception stack(0xf37ddfa8 to 0xf37ddff0) [ 2109.309825][T10837] dfa0: 76b8be1c 0000000c 00000003 76b8beb0 00000020 00000000 [ 2109.310017][T10837] dfc0: 76b8be1c 0000000c 00000000 00000122 00000003 00000000 76b8beb0 76b8d0bc [ 2109.310196][T10837] dfe0: 00000000 76b8bdf0 000d8408 00135358 [ 2113.588973][T10866] fuse: Bad value for 'rootmode' [ 2115.682795][T10879] fuse: Bad value for 'rootmode' [ 2116.911123][ T31] audit: type=1400 audit(2116.810:373): avc: denied { create } for pid=10873 comm="syz.1.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2118.786691][T10890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10890 comm=syz.1.1849 [ 2119.182349][T10900] fuse: Bad value for 'rootmode' [ 2123.146025][T10918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10918 comm=syz.1.1855 [ 2123.506354][T10926] fuse: Unknown parameter 'use00000000000000000000' [ 2124.585490][T10935] fuse: Unknown parameter 'use00000000000000000000' [ 2124.704159][T10938] fuse: Unknown parameter 'use00000000000000000000' [ 2126.862588][T10947] FAULT_INJECTION: forcing a failure. [ 2126.862588][T10947] name failslab, interval 1, probability 0, space 0, times 0 [ 2126.863343][T10947] CPU: 0 UID: 0 PID: 10947 Comm: syz.0.1863 Not tainted 6.12.0-rc2-syzkaller #0 [ 2126.863648][T10947] Hardware name: ARM-Versatile Express [ 2126.863927][T10947] Call trace: [ 2126.864102][T10947] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2126.864831][T10947] r7:00000d40 r6:84a850e8 r5:60000013 r4:8203d394 [ 2126.865150][T10947] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2126.865512][T10947] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2126.865913][T10947] r5:00000000 r4:82718bdc [ 2126.866079][T10947] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2126.866431][T10947] [<808e5130>] (should_fail_ex) from [<804e8188>] (should_failslab+0x6c/0x94) [ 2126.867037][T10947] r6:84a850e8 r5:00000019 r4:82c01240 [ 2126.867260][T10947] [<804e811c>] (should_failslab) from [<804cd5ac>] (__kmalloc_noprof+0x9c/0x458) [ 2126.867879][T10947] [<804cd510>] (__kmalloc_noprof) from [<80750e68>] (tomoyo_encode2+0x64/0xf0) [ 2126.868430][T10947] r10:00000fff r9:82f19000 r8:00000000 r7:833ea3b8 r6:84a850e8 r5:84f97ffd [ 2126.868832][T10947] r4:84f97fef [ 2126.868971][T10947] [<80750e04>] (tomoyo_encode2) from [<80750f18>] (tomoyo_encode+0x24/0x30) [ 2126.869289][T10947] r9:82f19000 r8:00000000 r7:833ea3b8 r6:84a850e8 r5:00001000 r4:84f97ff0 [ 2126.869557][T10947] [<80750ef4>] (tomoyo_encode) from [<80750fa4>] (tomoyo_realpath_from_path+0x80/0x17c) [ 2126.869899][T10947] r5:00001000 r4:84f97000 [ 2126.870071][T10947] [<80750f24>] (tomoyo_realpath_from_path) from [<8074d0a4>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2126.870688][T10947] r10:83723000 r9:00000000 r8:00000004 r7:00001269 r6:00000004 r5:81ad18e8 [ 2126.871307][T10947] r4:84a850e8 r3:824ba340 [ 2126.871509][T10947] [<8074cfd8>] (tomoyo_path_number_perm) from [<80751970>] (tomoyo_file_ioctl+0x1c/0x20) [ 2126.872075][T10947] r9:84a850c0 r8:00000004 r7:00000000 r6:00000000 r5:00001269 r4:84a850c0 [ 2126.872470][T10947] [<80751954>] (tomoyo_file_ioctl) from [<806fffbc>] (security_file_ioctl+0x64/0x1e4) [ 2126.872867][T10947] [<806fff58>] (security_file_ioctl) from [<8052f570>] (sys_ioctl+0x50/0xda8) [ 2126.873274][T10947] r7:00000000 r6:84a850c1 r5:00000000 r4:00001269 [ 2126.873517][T10947] [<8052f520>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2126.873862][T10947] Exception stack(0xf3c5dfa8 to 0xf3c5dff0) [ 2126.874103][T10947] dfa0: 00000000 00000000 00000004 00001269 00000000 00000000 [ 2126.874419][T10947] dfc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76b090bc [ 2126.874733][T10947] dfe0: 76b08ec0 76b08eb0 00018af8 00132ec0 [ 2126.874975][T10947] r10:00000036 r9:83723000 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 2126.875271][T10947] r4:00000000 [ 2126.890982][T10947] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2128.126040][T10951] fuse: Unknown parameter 'use00000000000000000000' [ 2128.303970][T10957] fuse: Unknown parameter 'use00000000000000000000' [ 2129.182268][ T3773] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2129.341222][ T3773] usb 2-1: Using ep0 maxpacket: 8 [ 2129.371476][ T3773] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2129.372030][ T3773] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2129.372463][ T3773] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2129.388707][ T3773] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2129.389936][ T3773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2129.401452][ T3773] usb 2-1: Product: 䛊ꓮ癎坦㛚쐬 [ 2129.401852][ T3773] usb 2-1: Manufacturer: 䦘可옄䇌駪缄棤詣⚷䋖켪糼憆㮶襶眮ㄨ篌읾⤱䏳᪍양₴ [ 2129.402688][ T3773] usb 2-1: SerialNumber: ㏵虃슓盈曚佝瓐䢛咝呯铏㕺癁淕洼㇀ⵠ쐳氉ᝢ탵娦ᓳ啈臅듊娄쬻폖쁉䅕幞᣷ひ뗞Ἧ峼ꤑ㭾羾₄ป篘瞷ᎆ늃鮈⭑㝌친ㅦ৞돼㜚ꂧ὇⑁ᐝ쁁稅࿤郤廁鳻㴷椳؏븦⎜怰ӕ [ 2132.449620][T10992] fuse: Unknown parameter 'user_i00000000000000000000' [ 2132.883513][T10995] fuse: Unknown parameter 'user_i00000000000000000000' [ 2134.507630][ T3773] usb 2-1: 0:2 : does not exist [ 2135.137545][ T4091] usb 2-1: USB disconnect, device number 26 [ 2136.643546][T11035] fuse: Unknown parameter 'user_i00000000000000000000' [ 2136.898237][T11038] fuse: Unknown parameter 'user_i00000000000000000000' [ 2138.213313][T11048] fuse: Unknown parameter 'user_i00000000000000000000' [ 2138.485531][T11052] fuse: Unknown parameter 'user_i00000000000000000000' [ 2138.582826][T11054] FAULT_INJECTION: forcing a failure. [ 2138.582826][T11054] name failslab, interval 1, probability 0, space 0, times 0 [ 2138.583931][T11054] CPU: 1 UID: 0 PID: 11054 Comm: syz.0.1886 Not tainted 6.12.0-rc2-syzkaller #0 [ 2138.584595][T11054] Hardware name: ARM-Versatile Express [ 2138.584981][T11054] Call trace: [ 2138.585275][T11054] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2138.585761][T11054] r7:83493000 r6:00400cc0 r5:60000013 r4:8203d394 [ 2138.586077][T11054] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2138.586459][T11054] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2138.586859][T11054] r5:00000000 r4:82718bdc [ 2138.587084][T11054] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2138.587513][T11054] [<808e5130>] (should_fail_ex) from [<804e8188>] (should_failslab+0x6c/0x94) [ 2138.587944][T11054] r6:00400cc0 r5:ffffffff r4:82f01180 [ 2138.588194][T11054] [<804e811c>] (should_failslab) from [<804ccbbc>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 2138.588720][T11054] [<804ccb6c>] (kmem_cache_alloc_node_noprof) from [<81490f00>] (__alloc_skb+0x138/0x160) [ 2138.589210][T11054] r10:f3e25d2c r9:00000000 r8:00400cc0 r7:00000000 r6:82f01180 r5:ffffffff [ 2138.589589][T11054] r4:82606000 [ 2138.589797][T11054] [<81490dc8>] (__alloc_skb) from [<814990d4>] (alloc_skb_with_frags+0x44/0x1ec) [ 2138.590231][T11054] r8:802a6dd8 r7:f3e25ccc r6:00000000 r5:00001000 r4:00000003 [ 2138.591513][T11054] [<81499090>] (alloc_skb_with_frags) from [<8148a7d4>] (sock_alloc_send_pskb+0x1f4/0x228) [ 2138.592500][T11054] r10:f3e25d2c r9:00000000 r8:802a6dd8 r7:f3e25ccc r6:83493000 r5:00000000 [ 2138.593137][T11054] r4:84b02700 [ 2138.593509][T11054] [<8148a5e0>] (sock_alloc_send_pskb) from [<8174818c>] (unix_dgram_sendmsg+0x154/0x8b8) [ 2138.594113][T11054] r10:00000000 r9:84b02700 r8:83493000 r7:00000000 r6:00000000 r5:85006780 [ 2138.594555][T11054] r4:f3e25f38 [ 2138.594774][T11054] [<81748038>] (unix_dgram_sendmsg) from [<81748934>] (unix_seqpacket_sendmsg+0x44/0x84) [ 2138.595256][T11054] r10:00048040 r9:f3e25dd4 r8:f3e25dd4 r7:00000000 r6:85006780 r5:f3e25f38 [ 2138.595630][T11054] r4:00000000 [ 2138.595812][T11054] [<817488f0>] (unix_seqpacket_sendmsg) from [<81483698>] (__sock_sendmsg+0x44/0x78) [ 2138.596204][T11054] r5:f3e25f38 r4:00000000 [ 2138.596463][T11054] [<81483654>] (__sock_sendmsg) from [<8148469c>] (____sys_sendmsg+0x2ac/0x2cc) [ 2138.596895][T11054] r7:00000000 r6:00000000 r5:85006780 r4:f3e25f38 [ 2138.597177][T11054] [<814843f0>] (____sys_sendmsg) from [<81486604>] (___sys_sendmsg+0x9c/0xd0) [ 2138.597625][T11054] r10:f3e25e34 r9:20000380 r8:00048040 r7:00000000 r6:85006780 r5:f3e25f38 [ 2138.597987][T11054] r4:00000000 [ 2138.598188][T11054] [<81486568>] (___sys_sendmsg) from [<81486b1c>] (sys_sendmsg+0x78/0xbc) [ 2138.598653][T11054] r10:00000128 r9:83493000 r8:8020029c r7:00048040 r6:20000380 r5:85006780 [ 2138.599017][T11054] r4:00000000 [ 2138.599219][T11054] [<81486aa4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2138.599640][T11054] Exception stack(0xf3e25fa8 to 0xf3e25ff0) [ 2138.599942][T11054] 5fa0: 00000000 00000000 00000003 20000380 00048040 00000000 [ 2138.600330][T11054] 5fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76b8d0bc [ 2138.601244][T11054] 5fe0: 76b8cec0 76b8ceb0 00018af8 00132ec0 [ 2138.601880][T11054] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2139.831883][T11059] fuse: Unknown parameter 'user_id00000000000000000000' [ 2140.963838][T11062] FAULT_INJECTION: forcing a failure. [ 2140.963838][T11062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2140.964268][T11062] CPU: 1 UID: 0 PID: 11062 Comm: syz.0.1889 Not tainted 6.12.0-rc2-syzkaller #0 [ 2140.964554][T11062] Hardware name: ARM-Versatile Express [ 2140.964698][T11062] Call trace: [ 2140.964806][T11062] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2140.965045][T11062] r7:00000000 r6:00000000 r5:60000013 r4:8203d394 [ 2140.965191][T11062] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2140.965407][T11062] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2140.965623][T11062] r5:00000000 r4:8274e1c4 [ 2140.965766][T11062] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2140.966124][T11062] [<808e5130>] (should_fail_ex) from [<808e5320>] (should_fail+0x14/0x18) [ 2140.966465][T11062] r6:00000000 r5:f3fc5f68 r4:00000002 [ 2140.966708][T11062] [<808e530c>] (should_fail) from [<808e5340>] (should_fail_usercopy+0x1c/0x20) [ 2140.967073][T11062] [<808e5324>] (should_fail_usercopy) from [<8054e664>] (simple_read_from_buffer+0x8c/0x134) [ 2140.967492][T11062] [<8054e5d8>] (simple_read_from_buffer) from [<805c3164>] (proc_fail_nth_read+0xb8/0x100) [ 2140.967929][T11062] r10:00000001 r9:805c30ac r8:00000002 r7:f3fc5f68 r6:0000000f r5:76b6bf30 [ 2140.968253][T11062] r4:83493000 r3:f3fc5e9f [ 2140.968488][T11062] [<805c30ac>] (proc_fail_nth_read) from [<80515ddc>] (vfs_read+0x98/0x324) [ 2140.968828][T11062] r8:76b6bf30 r7:f3fc5f68 r6:83493000 r5:0000000f r4:84a8cc00 [ 2140.969205][T11062] [<80515d44>] (vfs_read) from [<80516a8c>] (ksys_read+0x78/0xf8) [ 2140.969568][T11062] r10:00000003 r9:83493000 r8:8020029c r7:00000000 r6:00000000 r5:84a8cc00 [ 2140.969861][T11062] r4:84a8cc03 [ 2140.970019][T11062] [<80516a14>] (ksys_read) from [<80516b1c>] (sys_read+0x10/0x14) [ 2140.970403][T11062] r7:00000003 r6:00000005 r5:76b6bf30 r4:0000000f [ 2140.971015][T11062] [<80516b0c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2140.971430][T11062] Exception stack(0xf3fc5fa8 to 0xf3fc5ff0) [ 2140.971723][T11062] 5fa0: 0000000f 76b6bf30 00000005 76b6bf30 0000000f 00000000 [ 2140.972078][T11062] 5fc0: 0000000f 76b6bf30 00000005 00000003 00000000 00006364 003d0f00 76b6c0bc [ 2140.972453][T11062] 5fe0: 00000158 76b6bed0 000d8408 00130d94 [ 2141.098305][T11064] fuse: Unknown parameter 'user_id00000000000000000000' [ 2143.356477][T11075] FAULT_INJECTION: forcing a failure. [ 2143.356477][T11075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2143.357169][T11075] CPU: 0 UID: 0 PID: 11075 Comm: syz.1.1892 Not tainted 6.12.0-rc2-syzkaller #0 [ 2143.357555][T11075] Hardware name: ARM-Versatile Express [ 2143.357816][T11075] Call trace: [ 2143.358036][T11075] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2143.358463][T11075] r7:76b45e1c r6:0000000c r5:60000013 r4:8203d394 [ 2143.358756][T11075] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2143.359267][T11075] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2143.359682][T11075] r5:00000000 r4:8274e1c4 [ 2143.359921][T11075] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2143.360305][T11075] [<808e5130>] (should_fail_ex) from [<808e5320>] (should_fail+0x14/0x18) [ 2143.361264][T11075] r6:0000000c r5:f4035ee4 r4:0000000c [ 2143.361531][T11075] [<808e530c>] (should_fail) from [<808e5340>] (should_fail_usercopy+0x1c/0x20) [ 2143.362110][T11075] [<808e5324>] (should_fail_usercopy) from [<814846f8>] (move_addr_to_kernel+0x3c/0xe4) [ 2143.363199][T11075] [<814846bc>] (move_addr_to_kernel) from [<81485ca8>] (__sys_sendto+0xc0/0x14c) [ 2143.363677][T11075] r9:84161800 r8:00000004 r7:83391680 r6:76b45e1c r5:00000000 r4:00000000 [ 2143.364031][T11075] [<81485be8>] (__sys_sendto) from [<81485d50>] (sys_sendto+0x1c/0x24) [ 2143.364441][T11075] r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76b45e1c [ 2143.364778][T11075] [<81485d34>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2143.365172][T11075] Exception stack(0xf4035fa8 to 0xf4035ff0) [ 2143.365482][T11075] 5fa0: 76b45e1c 0000000c 00000004 76b45eb0 00000020 00000000 [ 2143.365889][T11075] 5fc0: 76b45e1c 0000000c 00000000 00000122 00000004 00000000 76b45eb0 76b470bc [ 2143.366332][T11075] 5fe0: 00000000 76b45df0 000d8408 00135358 [ 2148.619916][T11096] fuse: Unknown parameter 'user_id00000000000000000000' [ 2149.068847][T11104] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11104 comm=syz.0.1901 [ 2151.645570][T11112] fuse: Bad value for 'fd' [ 2153.591394][T11128] fuse: Bad value for 'fd' [ 2155.193528][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1912'. [ 2155.308585][T11143] fuse: Bad value for 'fd' [ 2157.071638][T11160] fuse: Unknown parameter '0x0000000000000004' [ 2158.993969][T11176] fuse: Unknown parameter '0x0000000000000004' [ 2161.091958][T11192] fuse: Unknown parameter '0x0000000000000004' [ 2163.067433][T11207] fuse: Unknown parameter '0x0000000000000004' [ 2170.954804][ T31] audit: type=1400 audit(2170.860:374): avc: denied { listen } for pid=11242 comm="syz.0.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2177.438609][T11270] FAULT_INJECTION: forcing a failure. [ 2177.438609][T11270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2177.439357][T11270] CPU: 1 UID: 0 PID: 11270 Comm: syz.1.1949 Not tainted 6.12.0-rc2-syzkaller #0 [ 2177.439775][T11270] Hardware name: ARM-Versatile Express [ 2177.440041][T11270] Call trace: [ 2177.440293][T11270] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2177.441083][T11270] r7:00000000 r6:00000000 r5:60000013 r4:8203d394 [ 2177.441524][T11270] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2177.441946][T11270] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2177.442391][T11270] r5:00000000 r4:8274e1c4 [ 2177.442630][T11270] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2177.443208][T11270] [<808e5130>] (should_fail_ex) from [<808e5320>] (should_fail+0x14/0x18) [ 2177.443645][T11270] r6:00000000 r5:f476df68 r4:00000002 [ 2177.443928][T11270] [<808e530c>] (should_fail) from [<808e5340>] (should_fail_usercopy+0x1c/0x20) [ 2177.444367][T11270] [<808e5324>] (should_fail_usercopy) from [<8054e664>] (simple_read_from_buffer+0x8c/0x134) [ 2177.444881][T11270] [<8054e5d8>] (simple_read_from_buffer) from [<805c3164>] (proc_fail_nth_read+0xb8/0x100) [ 2177.445378][T11270] r10:00000001 r9:805c30ac r8:00000002 r7:f476df68 r6:0000000f r5:76bcaf30 [ 2177.445789][T11270] r4:83728000 r3:f476de9f [ 2177.446033][T11270] [<805c30ac>] (proc_fail_nth_read) from [<80515ddc>] (vfs_read+0x98/0x324) [ 2177.446484][T11270] r8:76bcaf30 r7:f476df68 r6:83728000 r5:0000000f r4:84a8c840 [ 2177.446822][T11270] [<80515d44>] (vfs_read) from [<80516a8c>] (ksys_read+0x78/0xf8) [ 2177.447217][T11270] r10:00000003 r9:83728000 r8:8020029c r7:00000000 r6:00000000 r5:84a8c840 [ 2177.447597][T11270] r4:84a8c843 [ 2177.447789][T11270] [<80516a14>] (ksys_read) from [<80516b1c>] (sys_read+0x10/0x14) [ 2177.448183][T11270] r7:00000003 r6:00000004 r5:76bcaf30 r4:0000000f [ 2177.448541][T11270] [<80516b0c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2177.448974][T11270] Exception stack(0xf476dfa8 to 0xf476dff0) [ 2177.449308][T11270] dfa0: 0000000f 76bcaf30 00000004 76bcaf30 0000000f 00000000 [ 2177.449729][T11270] dfc0: 0000000f 76bcaf30 00000004 00000003 00000000 00006364 003d0f00 76bcb0bc [ 2177.450131][T11270] dfe0: 00000158 76bcaed0 000d8408 00130d94 [ 2181.521203][ T31] audit: type=1400 audit(2181.420:375): avc: denied { bind } for pid=11293 comm="syz.0.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2187.331584][T11344] FAULT_INJECTION: forcing a failure. [ 2187.331584][T11344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2187.333244][T11344] CPU: 1 UID: 0 PID: 11344 Comm: syz.0.1968 Not tainted 6.12.0-rc2-syzkaller #0 [ 2187.333519][T11344] Hardware name: ARM-Versatile Express [ 2187.333667][T11344] Call trace: [ 2187.333826][T11344] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2187.334187][T11344] r7:00000000 r6:00000000 r5:60000013 r4:8203d394 [ 2187.334443][T11344] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2187.334775][T11344] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2187.335105][T11344] r5:00000000 r4:8274e1c4 [ 2187.335319][T11344] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2187.335628][T11344] [<808e5130>] (should_fail_ex) from [<808e5320>] (should_fail+0x14/0x18) [ 2187.335912][T11344] r6:00000000 r5:df9bdf68 r4:00000002 [ 2187.336134][T11344] [<808e530c>] (should_fail) from [<808e5340>] (should_fail_usercopy+0x1c/0x20) [ 2187.336514][T11344] [<808e5324>] (should_fail_usercopy) from [<8054e664>] (simple_read_from_buffer+0x8c/0x134) [ 2187.336894][T11344] [<8054e5d8>] (simple_read_from_buffer) from [<805c3164>] (proc_fail_nth_read+0xb8/0x100) [ 2187.337211][T11344] r10:00000001 r9:805c30ac r8:00000002 r7:df9bdf68 r6:0000000f r5:76b8cf30 [ 2187.337501][T11344] r4:83720000 r3:df9bde9f [ 2187.337720][T11344] [<805c30ac>] (proc_fail_nth_read) from [<80515ddc>] (vfs_read+0x98/0x324) [ 2187.337960][T11344] r8:76b8cf30 r7:df9bdf68 r6:83720000 r5:0000000f r4:84a8ca80 [ 2187.338402][T11344] [<80515d44>] (vfs_read) from [<80516a8c>] (ksys_read+0x78/0xf8) [ 2187.338717][T11344] r10:00000003 r9:83720000 r8:8020029c r7:00000000 r6:00000000 r5:84a8ca80 [ 2187.339169][T11344] r4:84a8ca83 [ 2187.339319][T11344] [<80516a14>] (ksys_read) from [<80516b1c>] (sys_read+0x10/0x14) [ 2187.339618][T11344] r7:00000003 r6:00000005 r5:76b8cf30 r4:0000000f [ 2187.339800][T11344] [<80516b0c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2187.340001][T11344] Exception stack(0xdf9bdfa8 to 0xdf9bdff0) [ 2187.340257][T11344] dfa0: 0000000f 76b8cf30 00000005 76b8cf30 0000000f 00000000 [ 2187.340599][T11344] dfc0: 0000000f 76b8cf30 00000005 00000003 00000000 00006364 003d0f00 76b8d0bc [ 2187.340828][T11344] dfe0: 00000158 76b8ced0 000d8408 00130d94 [ 2187.985036][T11352] FAULT_INJECTION: forcing a failure. [ 2187.985036][T11352] name failslab, interval 1, probability 0, space 0, times 0 [ 2187.985653][T11352] CPU: 0 UID: 0 PID: 11352 Comm: syz.1.1972 Not tainted 6.12.0-rc2-syzkaller #0 [ 2187.986264][T11352] Hardware name: ARM-Versatile Express [ 2187.986608][T11352] Call trace: [ 2187.986830][T11352] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2187.987199][T11352] r7:82e59800 r6:00000cc0 r5:60000013 r4:8203d394 [ 2187.987415][T11352] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2187.987717][T11352] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2187.988020][T11352] r5:00000000 r4:82718bdc [ 2187.988183][T11352] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2187.988514][T11352] [<808e5130>] (should_fail_ex) from [<804e8188>] (should_failslab+0x6c/0x94) [ 2187.988825][T11352] r6:00000cc0 r5:ffffffff r4:82f01180 [ 2187.989015][T11352] [<804e811c>] (should_failslab) from [<804ccbbc>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 2187.989357][T11352] [<804ccb6c>] (kmem_cache_alloc_node_noprof) from [<81490f00>] (__alloc_skb+0x138/0x160) [ 2187.989716][T11352] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:82f01180 r5:ffffffff [ 2187.989983][T11352] r4:82606000 [ 2187.990126][T11352] [<81490dc8>] (__alloc_skb) from [<815a63bc>] (netlink_alloc_large_skb+0x88/0xa0) [ 2187.990619][T11352] r8:00000000 r7:84dfb400 r6:00000030 r5:83391b80 r4:00000140 [ 2187.991083][T11352] [<815a6334>] (netlink_alloc_large_skb) from [<815a69c4>] (netlink_sendmsg+0x134/0x43c) [ 2187.991657][T11352] r5:83391b80 r4:df9b9f38 [ 2187.991928][T11352] [<815a6890>] (netlink_sendmsg) from [<81483698>] (__sock_sendmsg+0x44/0x78) [ 2187.992295][T11352] r10:00004000 r9:df9b9dd4 r8:df9b9dd4 r7:00000000 r6:83391b80 r5:df9b9f38 [ 2187.992678][T11352] r4:00000000 [ 2187.992842][T11352] [<81483654>] (__sock_sendmsg) from [<8148469c>] (____sys_sendmsg+0x2ac/0x2cc) [ 2187.993195][T11352] r7:00000000 r6:00000000 r5:83391b80 r4:df9b9f38 [ 2187.993441][T11352] [<814843f0>] (____sys_sendmsg) from [<81486604>] (___sys_sendmsg+0x9c/0xd0) [ 2187.993813][T11352] r10:df9b9e34 r9:20000140 r8:00004000 r7:00000000 r6:83391b80 r5:df9b9f38 [ 2187.994131][T11352] r4:00000000 [ 2187.994295][T11352] [<81486568>] (___sys_sendmsg) from [<81486b1c>] (sys_sendmsg+0x78/0xbc) [ 2187.994704][T11352] r10:00000128 r9:82e59800 r8:8020029c r7:00004000 r6:20000140 r5:83391b80 [ 2187.994997][T11352] r4:00000000 [ 2187.995153][T11352] [<81486aa4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2187.995505][T11352] Exception stack(0xdf9b9fa8 to 0xdf9b9ff0) [ 2187.995761][T11352] 9fa0: 00000000 00000000 00000003 20000140 00004000 00000000 [ 2187.996087][T11352] 9fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76bcb0bc [ 2187.996435][T11352] 9fe0: 76bcaec0 76bcaeb0 00018af8 00132ec0 [ 2187.996699][T11352] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2190.800231][T11368] FAULT_INJECTION: forcing a failure. [ 2190.800231][T11368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2190.809478][T11368] CPU: 0 UID: 0 PID: 11368 Comm: syz.1.1977 Not tainted 6.12.0-rc2-syzkaller #0 [ 2190.809849][T11368] Hardware name: ARM-Versatile Express [ 2190.809973][T11368] Call trace: [ 2190.810068][T11368] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2190.810328][T11368] r7:00000000 r6:00000000 r5:60000013 r4:8203d394 [ 2190.810620][T11368] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2190.810998][T11368] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2190.811222][T11368] r5:00000000 r4:8274e1c4 [ 2190.811343][T11368] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2190.811572][T11368] [<808e5130>] (should_fail_ex) from [<808e5320>] (should_fail+0x14/0x18) [ 2190.811798][T11368] r6:00000000 r5:dfb49f68 r4:00000002 [ 2190.811943][T11368] [<808e530c>] (should_fail) from [<808e5340>] (should_fail_usercopy+0x1c/0x20) [ 2190.812174][T11368] [<808e5324>] (should_fail_usercopy) from [<8054e664>] (simple_read_from_buffer+0x8c/0x134) [ 2190.812457][T11368] [<8054e5d8>] (simple_read_from_buffer) from [<805c3164>] (proc_fail_nth_read+0xb8/0x100) [ 2190.812804][T11368] r10:00000001 r9:805c30ac r8:00000002 r7:dfb49f68 r6:0000000f r5:76bcaf30 [ 2190.813142][T11368] r4:82e5bc00 r3:dfb49e9f [ 2190.813358][T11368] [<805c30ac>] (proc_fail_nth_read) from [<80515ddc>] (vfs_read+0x98/0x324) [ 2190.813604][T11368] r8:76bcaf30 r7:dfb49f68 r6:82e5bc00 r5:0000000f r4:84a853c0 [ 2190.813795][T11368] [<80515d44>] (vfs_read) from [<80516a8c>] (ksys_read+0x78/0xf8) [ 2190.814023][T11368] r10:00000003 r9:82e5bc00 r8:8020029c r7:00000000 r6:00000000 r5:84a853c0 [ 2190.814309][T11368] r4:84a853c3 [ 2190.814515][T11368] [<80516a14>] (ksys_read) from [<80516b1c>] (sys_read+0x10/0x14) [ 2190.814920][T11368] r7:00000003 r6:00000004 r5:76bcaf30 r4:0000000f [ 2190.815215][T11368] [<80516b0c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2190.815636][T11368] Exception stack(0xdfb49fa8 to 0xdfb49ff0) [ 2190.815813][T11368] 9fa0: 0000000f 76bcaf30 00000004 76bcaf30 0000000f 00000000 [ 2190.816036][T11368] 9fc0: 0000000f 76bcaf30 00000004 00000003 00000000 00006364 003d0f00 76bcb0bc [ 2190.816230][T11368] 9fe0: 00000158 76bcaed0 000d8408 00130d94 [ 2190.942537][T11370] FAULT_INJECTION: forcing a failure. [ 2190.942537][T11370] name failslab, interval 1, probability 0, space 0, times 0 [ 2190.942985][T11370] CPU: 0 UID: 0 PID: 11370 Comm: syz.1.1978 Not tainted 6.12.0-rc2-syzkaller #0 [ 2190.943257][T11370] Hardware name: ARM-Versatile Express [ 2190.943397][T11370] Call trace: [ 2190.943517][T11370] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2190.943763][T11370] r7:82e5bc00 r6:00000dc0 r5:60000013 r4:8203d394 [ 2190.943996][T11370] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2190.944267][T11370] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2190.944647][T11370] r5:00000000 r4:82718bdc [ 2190.944852][T11370] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2190.945178][T11370] [<808e5130>] (should_fail_ex) from [<804e8188>] (should_failslab+0x6c/0x94) [ 2190.945551][T11370] r6:00000dc0 r5:84f9f00c r4:82c01240 [ 2190.945785][T11370] [<804e811c>] (should_failslab) from [<804cc5d4>] (__kmalloc_cache_noprof+0x4c/0x344) [ 2190.946181][T11370] [<804cc588>] (__kmalloc_cache_noprof) from [<80260330>] (call_usermodehelper_setup+0x48/0xb8) [ 2190.946484][T11370] r10:82034528 r9:00000000 r8:84f9f000 r7:827f1aa4 r6:84f9f000 r5:84f9f00c [ 2190.946686][T11370] r4:00000000 [ 2190.946785][T11370] [<802602e8>] (call_usermodehelper_setup) from [<81974690>] (kobject_uevent_env+0x678/0x870) [ 2190.947106][T11370] r7:84f9f1bf r6:00000000 r5:00000751 r4:00000000 [ 2190.947283][T11370] [<81974018>] (kobject_uevent_env) from [<8197489c>] (kobject_uevent+0x14/0x18) [ 2190.947544][T11370] r10:83080da0 r9:00000000 r8:82e5bc00 r7:fff7ffff r6:83080d9c r5:83080d40 [ 2190.947750][T11370] r4:83080d9c [ 2190.947853][T11370] [<81974888>] (kobject_uevent) from [<80aa53b8>] (device_del+0x244/0x38c) [ 2190.948255][T11370] [<80aa5174>] (device_del) from [<807dac14>] (del_gendisk+0x1dc/0x328) [ 2190.948718][T11370] r10:82e5bc00 r9:83080cc0 r8:8260ca7c r7:838044e0 r6:82237548 r5:83807a00 [ 2190.949089][T11370] r4:00000008 [ 2190.949243][T11370] [<807daa38>] (del_gendisk) from [<80adf618>] (loop_control_ioctl+0x1c4/0x234) [ 2190.949505][T11370] r9:84a85e40 r8:00000004 r7:00000000 r6:83806b30 r5:83806a00 r4:00000000 [ 2190.949827][T11370] [<80adf454>] (loop_control_ioctl) from [<8052f654>] (sys_ioctl+0x134/0xda8) [ 2190.950267][T11370] r6:84a85e41 r5:00000000 r4:00004c81 [ 2190.950690][T11370] [<8052f520>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2190.950976][T11370] Exception stack(0xdfb49fa8 to 0xdfb49ff0) [ 2190.951247][T11370] 9fa0: 00000000 00000000 00000004 00004c81 00000000 00000000 [ 2190.951562][T11370] 9fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76bcb0bc [ 2190.951892][T11370] 9fe0: 76bcaec0 76bcaeb0 00018af8 00132ec0 [ 2190.952112][T11370] r10:00000036 r9:82e5bc00 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 2190.952451][T11370] r4:00000000 [ 2191.432100][ T31] audit: type=1400 audit(2191.340:376): avc: denied { getopt } for pid=11376 comm="syz.1.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2192.142659][T11381] FAULT_INJECTION: forcing a failure. [ 2192.142659][T11381] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2192.143047][T11381] CPU: 1 UID: 0 PID: 11381 Comm: syz.0.1982 Not tainted 6.12.0-rc2-syzkaller #0 [ 2192.143247][T11381] Hardware name: ARM-Versatile Express [ 2192.143421][T11381] Call trace: [ 2192.143521][T11381] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2192.143744][T11381] r7:dfafdb54 r6:00000000 r5:60000113 r4:8203d394 [ 2192.143871][T11381] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2192.144091][T11381] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2192.144450][T11381] r5:00000000 r4:82718c30 [ 2192.144650][T11381] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2192.144956][T11381] [<808e5130>] (should_fail_ex) from [<804e8218>] (should_fail_alloc_page+0x68/0x74) [ 2192.145158][T11381] r6:00000000 r5:00440dc2 r4:dfafdb60 [ 2192.145274][T11381] [<804e81b0>] (should_fail_alloc_page) from [<804b8e04>] (prepare_alloc_pages.constprop.0+0x88/0x198) [ 2192.145498][T11381] [<804b8d7c>] (prepare_alloc_pages.constprop.0) from [<804bf53c>] (__alloc_pages_noprof+0xb4/0x112c) [ 2192.145771][T11381] r10:dfafdd60 r9:83e7c000 r8:00440dc2 r7:84160c00 r6:00000000 r5:84a21800 [ 2192.145946][T11381] r4:00000000 r3:dfafdb60 [ 2192.146060][T11381] [<804bf488>] (__alloc_pages_noprof) from [<8048e5a4>] (pte_alloc_one+0x24/0xf4) [ 2192.146278][T11381] r10:dfafdd60 r9:83e7c000 r8:84535580 r7:00000000 r6:20000000 r5:84a21800 [ 2192.146467][T11381] r4:83e7c000 [ 2192.146578][T11381] [<8048e580>] (pte_alloc_one) from [<8048f628>] (__pte_alloc+0x2c/0xf8) [ 2192.146851][T11381] r5:84a21800 r4:83e7c000 [ 2192.147026][T11381] [<8048f5fc>] (__pte_alloc) from [<80494b9c>] (handle_mm_fault+0xf50/0x1348) [ 2192.147347][T11381] r5:84160c00 r4:00000214 [ 2192.147522][T11381] [<80493c4c>] (handle_mm_fault) from [<802141b4>] (do_page_fault+0xec/0x3d8) [ 2192.147955][T11381] r10:00000007 r9:83e7c000 r8:00000214 r7:20000000 r6:00000206 r5:20000380 [ 2192.148200][T11381] r4:dfafdd60 [ 2192.148346][T11381] [<802140c8>] (do_page_fault) from [<80214620>] (do_translation_fault+0xfc/0x12c) [ 2192.148780][T11381] r10:dfafde34 r9:84160c00 r8:80214524 r7:dfafdd60 r6:20000380 r5:00000206 [ 2192.148993][T11381] r4:8261cb2c [ 2192.149125][T11381] [<80214524>] (do_translation_fault) from [<80214688>] (do_DataAbort+0x38/0xa8) [ 2192.149386][T11381] r9:84160c00 r8:80214524 r7:dfafdd60 r6:20000380 r5:00000206 r4:8261cb2c [ 2192.149586][T11381] [<80214650>] (do_DataAbort) from [<80200b0c>] (__dabt_svc+0x4c/0x80) [ 2192.149822][T11381] Exception stack(0xdfafdd60 to 0xdfafdda8) [ 2192.150010][T11381] dd60: dfafdde0 20000380 fffffffc 00000000 dfafdf38 00000000 dfafde30 20000380 [ 2192.150231][T11381] dd80: b5403587 20000380 dfafde34 dfafde24 00000004 dfafddb4 814864e8 819683f8 [ 2192.151063][T11381] dda0: 00000013 ffffffff [ 2192.151491][T11381] r8:b5403587 r7:dfafdd94 r6:ffffffff r5:00000013 r4:819683f8 [ 2192.152446][T11381] [<81486438>] (copy_msghdr_from_user) from [<814865e0>] (___sys_sendmsg+0x78/0xd0) [ 2192.152929][T11381] r8:00000800 r7:00000000 r6:85006c80 r5:dfafdf38 r4:dfafde74 [ 2192.153230][T11381] [<81486568>] (___sys_sendmsg) from [<81486b1c>] (sys_sendmsg+0x78/0xbc) [ 2192.153552][T11381] r10:00000128 r9:84160c00 r8:8020029c r7:00000800 r6:20000380 r5:85006c80 [ 2192.153728][T11381] r4:00000000 [ 2192.153828][T11381] [<81486aa4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2192.154075][T11381] Exception stack(0xdfafdfa8 to 0xdfafdff0) [ 2192.154351][T11381] dfa0: 00000000 00000000 00000003 20000380 00000800 00000000 [ 2192.154713][T11381] dfc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76b8d0bc [ 2192.155060][T11381] dfe0: 76b8cec0 76b8ceb0 00018af8 00132ec0 [ 2192.155331][T11381] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2192.805258][T11388] FAULT_INJECTION: forcing a failure. [ 2192.805258][T11388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2192.810047][T11388] CPU: 1 UID: 0 PID: 11388 Comm: syz.0.1984 Not tainted 6.12.0-rc2-syzkaller #0 [ 2192.815478][T11388] Hardware name: ARM-Versatile Express [ 2192.817157][T11388] Call trace: [ 2192.818297][T11388] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2192.819614][T11388] r7:dfc11eb8 r6:00000000 r5:60000013 r4:8203d394 [ 2192.820173][T11388] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2192.820980][T11388] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2192.821404][T11388] r5:00000000 r4:8274e1c4 [ 2192.821694][T11388] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2192.822123][T11388] [<808e5130>] (should_fail_ex) from [<808e5320>] (should_fail+0x14/0x18) [ 2192.822667][T11388] r6:00000000 r5:00000001 r4:00000001 [ 2192.823000][T11388] [<808e530c>] (should_fail) from [<808e5340>] (should_fail_usercopy+0x1c/0x20) [ 2192.823574][T11388] [<808e5324>] (should_fail_usercopy) from [<80842ca4>] (kstrtouint_from_user+0x60/0x128) [ 2192.824037][T11388] [<80842c44>] (kstrtouint_from_user) from [<805c4670>] (proc_fail_nth_write+0x40/0xe8) [ 2192.826278][T11388] r8:dfc11f68 r7:84161800 r6:00000001 r5:84a8cd80 r4:00000001 [ 2192.828061][T11388] [<805c4630>] (proc_fail_nth_write) from [<80516674>] (vfs_write+0xac/0x44c) [ 2192.829601][T11388] r5:84a8cd80 r4:805c4630 [ 2192.831245][T11388] [<805165c8>] (vfs_write) from [<80516b98>] (ksys_write+0x78/0xf8) [ 2192.835222][T11388] r10:00000004 r9:84161800 r8:8020029c r7:00000000 r6:00000002 r5:84a8cd80 [ 2192.839489][T11388] r4:84a8cd83 [ 2192.840656][T11388] [<80516b20>] (ksys_write) from [<80516c28>] (sys_write+0x10/0x14) [ 2192.844274][T11388] r7:00000004 r6:00000004 r5:76b8cf30 r4:00000001 [ 2192.847384][T11388] [<80516c18>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2192.848452][T11388] Exception stack(0xdfc11fa8 to 0xdfc11ff0) [ 2192.849521][T11388] 1fa0: 00000001 76b8cf30 00000004 76b8cf30 00000001 00000000 [ 2192.849912][T11388] 1fc0: 00000001 76b8cf30 00000004 00000004 00000000 00006364 003d0f00 76b8d0bc [ 2192.850398][T11388] 1fe0: 00000158 76b8ced0 000d8408 00130e5c [ 2193.803041][ T31] audit: type=1400 audit(2193.710:377): avc: denied { accept } for pid=11397 comm="syz.0.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2196.564759][T11420] FAULT_INJECTION: forcing a failure. [ 2196.564759][T11420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2196.565194][T11420] CPU: 0 UID: 0 PID: 11420 Comm: syz.0.1993 Not tainted 6.12.0-rc2-syzkaller #0 [ 2196.565402][T11420] Hardware name: ARM-Versatile Express [ 2196.565526][T11420] Call trace: [ 2196.565696][T11420] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2196.565971][T11420] r7:835b2000 r6:c06864a1 r5:60000013 r4:8203d394 [ 2196.566133][T11420] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2196.566357][T11420] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2196.566563][T11420] r5:00000000 r4:8274e1c4 [ 2196.566659][T11420] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2196.566873][T11420] [<808e5130>] (should_fail_ex) from [<808e5320>] (should_fail+0x14/0x18) [ 2196.567086][T11420] r6:c06864a1 r5:00000000 r4:df9b9e64 [ 2196.567222][T11420] [<808e530c>] (should_fail) from [<808e5340>] (should_fail_usercopy+0x1c/0x20) [ 2196.567430][T11420] [<808e5324>] (should_fail_usercopy) from [<80a38334>] (drm_ioctl+0x260/0x564) [ 2196.567641][T11420] [<80a380d4>] (drm_ioctl) from [<8052f654>] (sys_ioctl+0x134/0xda8) [ 2196.567835][T11420] r10:84162400 r9:84a85a80 r8:00000003 r7:20000040 r6:84a85a81 r5:00000000 [ 2196.568009][T11420] r4:c06864a1 [ 2196.568099][T11420] [<8052f520>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2196.568298][T11420] Exception stack(0xdf9b9fa8 to 0xdf9b9ff0) [ 2196.568491][T11420] 9fa0: 00000000 00000000 00000003 c06864a1 20000040 00000000 [ 2196.568701][T11420] 9fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76b8d0bc [ 2196.568932][T11420] 9fe0: 76b8cec0 76b8ceb0 00018af8 00132ec0 [ 2196.569091][T11420] r10:00000036 r9:84162400 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 2196.569238][T11420] r4:00000000 [ 2197.141656][ T31] audit: type=1400 audit(2197.040:378): avc: denied { shutdown } for pid=11415 comm="syz.1.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2198.903096][ T31] audit: type=1400 audit(2198.810:379): avc: denied { create } for pid=11434 comm="syz.1.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2198.909406][ T31] audit: type=1400 audit(2198.810:380): avc: denied { module_request } for pid=11434 comm="syz.1.1997" kmod="net-pf-11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 2202.820128][ T31] audit: type=1400 audit(2202.720:381): avc: denied { read write } for pid=7952 comm="syz-executor" name="loop1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2202.822557][ T31] audit: type=1400 audit(2202.720:382): avc: denied { open } for pid=7952 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2202.824580][ T31] audit: type=1400 audit(2202.720:383): avc: denied { ioctl } for pid=7952 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=636 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2202.917512][T11448] FAULT_INJECTION: forcing a failure. [ 2202.917512][T11448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2202.918419][T11448] CPU: 1 UID: 0 PID: 11448 Comm: syz.0.2000 Not tainted 6.12.0-rc2-syzkaller #0 [ 2202.918850][T11448] Hardware name: ARM-Versatile Express [ 2202.919114][T11448] Call trace: [ 2202.919342][T11448] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2202.919957][T11448] r7:847d5680 r6:00000000 r5:60000013 r4:8203d394 [ 2202.920265][T11448] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2202.921113][T11448] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2202.921653][T11448] r5:00000000 r4:8274e1c4 [ 2202.921886][T11448] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2202.922305][T11448] [<808e5130>] (should_fail_ex) from [<808e5320>] (should_fail+0x14/0x18) [ 2202.922707][T11448] r6:00000000 r5:df9b9f48 r4:00000014 [ 2202.922990][T11448] [<808e530c>] (should_fail) from [<808e5340>] (should_fail_usercopy+0x1c/0x20) [ 2202.923452][T11448] [<808e5324>] (should_fail_usercopy) from [<8083a16c>] (_copy_from_iter+0x68/0x7c8) [ 2202.923908][T11448] [<8083a104>] (_copy_from_iter) from [<815a6a2c>] (netlink_sendmsg+0x19c/0x43c) [ 2202.924497][T11448] r10:00000000 r9:00000000 r8:df9b9f48 r7:854b9000 r6:00000014 r5:84a26540 [ 2202.924908][T11448] r4:df9b9f38 [ 2202.925127][T11448] [<815a6890>] (netlink_sendmsg) from [<81483698>] (__sock_sendmsg+0x44/0x78) [ 2202.925712][T11448] r10:00000040 r9:df9b9dd4 r8:df9b9dd4 r7:00000000 r6:85006780 r5:df9b9f38 [ 2202.926053][T11448] r4:00000000 [ 2202.926238][T11448] [<81483654>] (__sock_sendmsg) from [<8148469c>] (____sys_sendmsg+0x2ac/0x2cc) [ 2202.926720][T11448] r7:00000000 r6:00000000 r5:85006780 r4:df9b9f38 [ 2202.927023][T11448] [<814843f0>] (____sys_sendmsg) from [<81486604>] (___sys_sendmsg+0x9c/0xd0) [ 2202.927444][T11448] r10:df9b9e34 r9:20000180 r8:00000040 r7:00000000 r6:85006780 r5:df9b9f38 [ 2202.927835][T11448] r4:00000000 [ 2202.928040][T11448] [<81486568>] (___sys_sendmsg) from [<81486b1c>] (sys_sendmsg+0x78/0xbc) [ 2202.928464][T11448] r10:00000128 r9:84161800 r8:8020029c r7:00000040 r6:20000180 r5:85006780 [ 2202.928858][T11448] r4:00000000 [ 2202.929074][T11448] [<81486aa4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2202.929501][T11448] Exception stack(0xdf9b9fa8 to 0xdf9b9ff0) [ 2202.929834][T11448] 9fa0: 00000000 00000000 00000003 20000180 00000040 00000000 [ 2202.930227][T11448] 9fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76b8d0bc [ 2202.930994][T11448] 9fe0: 76b8cec0 76b8ceb0 00018af8 00132ec0 [ 2202.931413][T11448] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2203.426798][ T31] audit: type=1400 audit(2203.330:384): avc: denied { setattr } for pid=11457 comm="syz.1.2005" name="ALG" dev="sockfs" ino=23254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2204.038972][ T31] audit: type=1400 audit(2203.940:385): avc: denied { setopt } for pid=11462 comm="syz.1.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2210.339009][T11493] FAULT_INJECTION: forcing a failure. [ 2210.339009][T11493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2210.339746][T11493] CPU: 0 UID: 0 PID: 11493 Comm: syz.1.2014 Not tainted 6.12.0-rc2-syzkaller #0 [ 2210.340011][T11493] Hardware name: ARM-Versatile Express [ 2210.340187][T11493] Call trace: [ 2210.340457][T11493] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2210.340950][T11493] r7:00000000 r6:00000000 r5:60000013 r4:8203d394 [ 2210.341186][T11493] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2210.341485][T11493] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2210.341794][T11493] r5:00000000 r4:8274e1c4 [ 2210.341995][T11493] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2210.342310][T11493] [<808e5130>] (should_fail_ex) from [<808e5320>] (should_fail+0x14/0x18) [ 2210.342678][T11493] r6:00000000 r5:e03a1f68 r4:00000002 [ 2210.342878][T11493] [<808e530c>] (should_fail) from [<808e5340>] (should_fail_usercopy+0x1c/0x20) [ 2210.343241][T11493] [<808e5324>] (should_fail_usercopy) from [<8054e664>] (simple_read_from_buffer+0x8c/0x134) [ 2210.343601][T11493] [<8054e5d8>] (simple_read_from_buffer) from [<805c3164>] (proc_fail_nth_read+0xb8/0x100) [ 2210.344005][T11493] r10:00000001 r9:805c30ac r8:00000002 r7:e03a1f68 r6:0000000f r5:76bcaf30 [ 2210.344303][T11493] r4:8416e000 r3:e03a1e9f [ 2210.344516][T11493] [<805c30ac>] (proc_fail_nth_read) from [<80515ddc>] (vfs_read+0x98/0x324) [ 2210.344929][T11493] r8:76bcaf30 r7:e03a1f68 r6:8416e000 r5:0000000f r4:84a85780 [ 2210.345181][T11493] [<80515d44>] (vfs_read) from [<80516a8c>] (ksys_read+0x78/0xf8) [ 2210.347548][T11493] r10:00000003 r9:8416e000 r8:8020029c r7:00000000 r6:00000000 r5:84a85780 [ 2210.348125][T11493] r4:84a85783 [ 2210.348479][T11493] [<80516a14>] (ksys_read) from [<80516b1c>] (sys_read+0x10/0x14) [ 2210.349159][T11493] r7:00000003 r6:00000005 r5:76bcaf30 r4:0000000f [ 2210.349529][T11493] [<80516b0c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2210.349921][T11493] Exception stack(0xe03a1fa8 to 0xe03a1ff0) [ 2210.350442][T11493] 1fa0: 0000000f 76bcaf30 00000005 76bcaf30 0000000f 00000000 [ 2210.350771][T11493] 1fc0: 0000000f 76bcaf30 00000005 00000003 00000000 00006364 003d0f00 76bcb0bc [ 2210.351257][T11493] 1fe0: 00000158 76bcaed0 000d8408 00130d94 [ 2230.254451][ T31] audit: type=1400 audit(2230.160:386): avc: denied { accept } for pid=11576 comm="syz.0.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 2235.108948][ T31] audit: type=1800 audit(2235.010:387): pid=11595 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.2040" name="/sequencer2" dev="devtmpfs" ino=729 res=0 errno=0 [ 2261.248836][T11725] fuse: Bad value for 'group_id' [ 2261.249298][T11725] fuse: Bad value for 'group_id' [ 2262.216811][ T31] audit: type=1400 audit(2262.120:388): avc: denied { execute } for pid=11732 comm="syz.0.2077" path="/selinux/create" dev="selinuxfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 2262.438896][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 2262.575774][ T31] audit: type=1400 audit(2262.480:389): avc: denied { setopt } for pid=11739 comm="syz.0.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2262.720179][ T31] audit: type=1400 audit(2262.620:390): avc: denied { bind } for pid=11739 comm="syz.0.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2262.723047][ T31] audit: type=1400 audit(2262.620:391): avc: denied { node_bind } for pid=11739 comm="syz.0.2079" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 2262.810000][T11744] fuse: Bad value for 'group_id' [ 2262.810260][T11744] fuse: Bad value for 'group_id' [ 2263.617103][T11752] FAULT_INJECTION: forcing a failure. [ 2263.617103][T11752] name failslab, interval 1, probability 0, space 0, times 0 [ 2263.617702][T11752] CPU: 1 UID: 0 PID: 11752 Comm: syz.0.2082 Not tainted 6.12.0-rc2-syzkaller #0 [ 2263.618017][T11752] Hardware name: ARM-Versatile Express [ 2263.618221][T11752] Call trace: [ 2263.618434][T11752] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2263.618813][T11752] r7:84163c00 r6:00000cc0 r5:60000013 r4:8203d394 [ 2263.619038][T11752] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2263.619343][T11752] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2263.619757][T11752] r5:00000000 r4:82718bdc [ 2263.619944][T11752] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2263.620706][T11752] [<808e5130>] (should_fail_ex) from [<804e8188>] (should_failslab+0x6c/0x94) [ 2263.621408][T11752] r6:00000cc0 r5:ffffffff r4:82f01180 [ 2263.621670][T11752] [<804e811c>] (should_failslab) from [<804ccbbc>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 2263.622194][T11752] [<804ccb6c>] (kmem_cache_alloc_node_noprof) from [<81490f00>] (__alloc_skb+0x138/0x160) [ 2263.622661][T11752] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:82f01180 r5:ffffffff [ 2263.622967][T11752] r4:82606000 [ 2263.623125][T11752] [<81490dc8>] (__alloc_skb) from [<815a63bc>] (netlink_alloc_large_skb+0x88/0xa0) [ 2263.623831][T11752] r8:00000000 r7:854b8800 r6:0000000f r5:85006500 r4:00000140 [ 2263.624182][T11752] [<815a6334>] (netlink_alloc_large_skb) from [<815a69c4>] (netlink_sendmsg+0x134/0x43c) [ 2263.624870][T11752] r5:85006500 r4:eb30de68 [ 2263.626016][T11752] [<815a6890>] (netlink_sendmsg) from [<81483698>] (__sock_sendmsg+0x44/0x78) [ 2263.627007][T11752] r10:81c4a080 r9:20000080 r8:00000000 r7:85006500 r6:85006500 r5:eb30de68 [ 2263.627760][T11752] r4:00000000 [ 2263.627942][T11752] [<81483654>] (__sock_sendmsg) from [<8148376c>] (sock_write_iter+0xa0/0xfc) [ 2263.628392][T11752] r7:85006500 r6:84a89f00 r5:eb30df08 r4:eb30def0 [ 2263.628686][T11752] [<814836cc>] (sock_write_iter) from [<80516970>] (vfs_write+0x3a8/0x44c) [ 2263.629045][T11752] r7:84163c00 r6:0000000f r5:84a89f00 r4:00000000 [ 2263.629285][T11752] [<805165c8>] (vfs_write) from [<80516be4>] (ksys_write+0xc4/0xf8) [ 2263.629681][T11752] r10:00000004 r9:84163c00 r8:8020029c r7:0000000f r6:20000080 r5:84a89f00 [ 2263.630021][T11752] r4:84a89f01 [ 2263.630204][T11752] [<80516b20>] (ksys_write) from [<80516c28>] (sys_write+0x10/0x14) [ 2263.630919][T11752] r7:00000004 r6:00130e70 r5:00000000 r4:00000000 [ 2263.631601][T11752] [<80516c18>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2263.632375][T11752] Exception stack(0xeb30dfa8 to 0xeb30dff0) [ 2263.632842][T11752] dfa0: 00000000 00000000 00000005 20000080 0000000f 00000000 [ 2263.633320][T11752] dfc0: 00000000 00000000 00130e70 00000004 00000000 00006364 003d0f00 76b8d0bc [ 2263.633753][T11752] dfe0: 76b8cec0 76b8ceb0 00018af8 00132ec0 [ 2264.705291][T11760] fuse: Bad value for 'group_id' [ 2264.705758][T11760] fuse: Bad value for 'group_id' [ 2264.832757][T11762] FAULT_INJECTION: forcing a failure. [ 2264.832757][T11762] name failslab, interval 1, probability 0, space 0, times 0 [ 2264.833458][T11762] CPU: 0 UID: 0 PID: 11762 Comm: syz.1.2086 Not tainted 6.12.0-rc2-syzkaller #0 [ 2264.833827][T11762] Hardware name: ARM-Versatile Express [ 2264.834059][T11762] Call trace: [ 2264.834244][T11762] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2264.834525][T11762] r7:84160000 r6:00400cc0 r5:60000013 r4:8203d394 [ 2264.834670][T11762] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2264.834842][T11762] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2264.835019][T11762] r5:00000000 r4:82718bdc [ 2264.835117][T11762] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2264.835330][T11762] [<808e5130>] (should_fail_ex) from [<804e8188>] (should_failslab+0x6c/0x94) [ 2264.835717][T11762] r6:00400cc0 r5:ffffffff r4:82f01180 [ 2264.835939][T11762] [<804e811c>] (should_failslab) from [<804ccbbc>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 2264.836385][T11762] [<804ccb6c>] (kmem_cache_alloc_node_noprof) from [<81490f00>] (__alloc_skb+0x138/0x160) [ 2264.836946][T11762] r10:eadb1d2c r9:00000000 r8:00400cc0 r7:00000000 r6:82f01180 r5:ffffffff [ 2264.837257][T11762] r4:82606000 [ 2264.837353][T11762] [<81490dc8>] (__alloc_skb) from [<814990d4>] (alloc_skb_with_frags+0x44/0x1ec) [ 2264.837752][T11762] r8:802a6dd8 r7:eadb1ccc r6:00000000 r5:00001000 r4:00000003 [ 2264.838070][T11762] [<81499090>] (alloc_skb_with_frags) from [<8148a7d4>] (sock_alloc_send_pskb+0x1f4/0x228) [ 2264.838537][T11762] r10:eadb1d2c r9:00000000 r8:802a6dd8 r7:eadb1ccc r6:84160000 r5:7fffffff [ 2264.838745][T11762] r4:8411cf00 [ 2264.838931][T11762] [<8148a5e0>] (sock_alloc_send_pskb) from [<8174818c>] (unix_dgram_sendmsg+0x154/0x8b8) [ 2264.839771][T11762] r10:00000000 r9:8411cf00 r8:84160000 r7:00000000 r6:00000000 r5:83390500 [ 2264.840854][T11762] r4:eadb1f38 [ 2264.841443][T11762] [<81748038>] (unix_dgram_sendmsg) from [<81748934>] (unix_seqpacket_sendmsg+0x44/0x84) [ 2264.842040][T11762] r10:00000000 r9:eadb1dd4 r8:eadb1dd4 r7:00000000 r6:83390500 r5:eadb1f38 [ 2264.842441][T11762] r4:00000000 [ 2264.842632][T11762] [<817488f0>] (unix_seqpacket_sendmsg) from [<81483698>] (__sock_sendmsg+0x44/0x78) [ 2264.842950][T11762] r5:eadb1f38 r4:00000000 [ 2264.843105][T11762] [<81483654>] (__sock_sendmsg) from [<8148469c>] (____sys_sendmsg+0x2ac/0x2cc) [ 2264.843445][T11762] r7:00000000 r6:00000000 r5:83390500 r4:eadb1f38 [ 2264.843627][T11762] [<814843f0>] (____sys_sendmsg) from [<81486604>] (___sys_sendmsg+0x9c/0xd0) [ 2264.843933][T11762] r10:eadb1e34 r9:20000380 r8:00000000 r7:00000000 r6:83390500 r5:eadb1f38 [ 2264.844170][T11762] r4:00000000 [ 2264.844310][T11762] [<81486568>] (___sys_sendmsg) from [<81486b1c>] (sys_sendmsg+0x78/0xbc) [ 2264.844600][T11762] r10:00000128 r9:84160000 r8:8020029c r7:00000000 r6:20000380 r5:83390500 [ 2264.844813][T11762] r4:00000000 [ 2264.844908][T11762] [<81486aa4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2264.845126][T11762] Exception stack(0xeadb1fa8 to 0xeadb1ff0) [ 2264.845254][T11762] 1fa0: 00000000 00000000 00000003 20000380 00000000 00000000 [ 2264.845429][T11762] 1fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76bcb0bc [ 2264.845589][T11762] 1fe0: 76bcaec0 76bcaeb0 00018af8 00132ec0 [ 2264.845757][T11762] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2272.698926][T11824] FAULT_INJECTION: forcing a failure. [ 2272.698926][T11824] name failslab, interval 1, probability 0, space 0, times 0 [ 2272.699880][T11824] CPU: 0 UID: 0 PID: 11824 Comm: syz.1.2103 Not tainted 6.12.0-rc2-syzkaller #0 [ 2272.700760][T11824] Hardware name: ARM-Versatile Express [ 2272.701458][T11824] Call trace: [ 2272.701807][T11824] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2272.702255][T11824] r7:84161800 r6:00000cc0 r5:60000013 r4:8203d394 [ 2272.702584][T11824] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2272.703120][T11824] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2272.703595][T11824] r5:00000000 r4:82718bdc [ 2272.703887][T11824] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2272.704453][T11824] [<808e5130>] (should_fail_ex) from [<804e8188>] (should_failslab+0x6c/0x94) [ 2272.704876][T11824] r6:00000cc0 r5:00000002 r4:82c01240 [ 2272.705165][T11824] [<804e811c>] (should_failslab) from [<804cc5d4>] (__kmalloc_cache_noprof+0x4c/0x344) [ 2272.705592][T11824] [<804cc588>] (__kmalloc_cache_noprof) from [<802f960c>] (__request_module+0xe8/0x2c0) [ 2272.706134][T11824] r10:84161800 r9:84a853c0 r8:826f5ee4 r7:84161800 r6:81484834 r5:00000002 [ 2272.706571][T11824] r4:00000000 [ 2272.706777][T11824] [<802f9524>] (__request_module) from [<81484834>] (br_ioctl_call+0x94/0xa0) [ 2272.707327][T11824] r3:00000000 r2:00008941 r1:821be1b8 [ 2272.707706][T11824] r8:00000000 r7:00008941 r6:00000000 r5:84500d00 r4:82920e90 [ 2272.708108][T11824] [<814847a0>] (br_ioctl_call) from [<81484b00>] (sock_ioctl+0x2c0/0x608) [ 2272.708627][T11824] r8:00000003 r7:83390500 r6:84500d00 r5:00000000 r4:00008941 [ 2272.708975][T11824] [<81484840>] (sock_ioctl) from [<8052f654>] (sys_ioctl+0x134/0xda8) [ 2272.709483][T11824] r9:84a853c0 r8:00000003 r7:00000000 r6:84a853c1 r5:00000000 r4:00008941 [ 2272.709889][T11824] [<8052f520>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2272.710280][T11824] Exception stack(0xeb42dfa8 to 0xeb42dff0) [ 2272.710775][T11824] dfa0: 00000000 00000000 00000003 00008941 00000000 00000000 [ 2272.711479][T11824] dfc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76bcb0bc [ 2272.712406][T11824] dfe0: 76bcaec0 76bcaeb0 00018af8 00132ec0 [ 2272.713412][T11824] r10:00000036 r9:84161800 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 2272.713877][T11824] r4:00000000 [ 2274.955417][T11835] UHID_CREATE from different security context by process 1241 (syz.1.2108), this is not allowed. [ 2284.133888][T11859] fuse: Unknown parameter 'group_i00000000000000000000' [ 2286.202830][T11878] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11878 comm=syz.0.2122 [ 2286.462514][T11884] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11884 comm=syz.0.2125 [ 2292.854420][ T3773] hid-generic 0000:0000:0000.0012: item fetching failed at offset 0/2 [ 2292.855464][ T3773] hid-generic 0000:0000:0000.0012: probe with driver hid-generic failed with error -22 [ 2293.548500][T11932] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11932 comm=syz.0.2140 [ 2304.207105][T12035] FAULT_INJECTION: forcing a failure. [ 2304.207105][T12035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2304.207857][T12035] CPU: 0 UID: 0 PID: 12035 Comm: syz.1.2182 Not tainted 6.12.0-rc2-syzkaller #0 [ 2304.208237][T12035] Hardware name: ARM-Versatile Express [ 2304.208548][T12035] Call trace: [ 2304.208779][T12035] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2304.209397][T12035] r7:00000000 r6:00000000 r5:60000013 r4:8203d394 [ 2304.209715][T12035] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2304.210150][T12035] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2304.211474][T12035] r5:00000000 r4:8274e1c4 [ 2304.211970][T12035] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2304.212929][T12035] [<808e5130>] (should_fail_ex) from [<808e5320>] (should_fail+0x14/0x18) [ 2304.213329][T12035] r6:00000000 r5:f2581f68 r4:00000002 [ 2304.213577][T12035] [<808e530c>] (should_fail) from [<808e5340>] (should_fail_usercopy+0x1c/0x20) [ 2304.213969][T12035] [<808e5324>] (should_fail_usercopy) from [<8054e664>] (simple_read_from_buffer+0x8c/0x134) [ 2304.214546][T12035] [<8054e5d8>] (simple_read_from_buffer) from [<805c3164>] (proc_fail_nth_read+0xb8/0x100) [ 2304.215021][T12035] r10:00000001 r9:805c30ac r8:00000002 r7:f2581f68 r6:0000000f r5:76bcaf30 [ 2304.215430][T12035] r4:84161800 r3:f2581e9f [ 2304.215669][T12035] [<805c30ac>] (proc_fail_nth_read) from [<80515ddc>] (vfs_read+0x98/0x324) [ 2304.216090][T12035] r8:76bcaf30 r7:f2581f68 r6:84161800 r5:0000000f r4:84a85300 [ 2304.216491][T12035] [<80515d44>] (vfs_read) from [<80516a8c>] (ksys_read+0x78/0xf8) [ 2304.216904][T12035] r10:00000003 r9:84161800 r8:8020029c r7:00000000 r6:00000000 r5:84a85300 [ 2304.217298][T12035] r4:84a85303 [ 2304.217505][T12035] [<80516a14>] (ksys_read) from [<80516b1c>] (sys_read+0x10/0x14) [ 2304.217903][T12035] r7:00000003 r6:00000004 r5:76bcaf30 r4:0000000f [ 2304.218205][T12035] [<80516b0c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2304.218659][T12035] Exception stack(0xf2581fa8 to 0xf2581ff0) [ 2304.218966][T12035] 1fa0: 0000000f 76bcaf30 00000004 76bcaf30 0000000f 00000000 [ 2304.219378][T12035] 1fc0: 0000000f 76bcaf30 00000004 00000003 00000000 00006364 003d0f00 76bcb0bc [ 2304.219788][T12035] 1fe0: 00000158 76bcaed0 000d8408 00130d94 [ 2305.099566][T12041] random: crng reseeded on system resumption [ 2313.553814][ T31] audit: type=1400 audit(2313.460:392): avc: denied { watch } for pid=12078 comm="syz.0.2196" path="/473/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 2327.093930][ T31] audit: type=1400 audit(2327.000:393): avc: denied { set_context_mgr } for pid=12142 comm="syz.1.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2327.097390][T12143] binder: 12142:12143 ioctl c0306201 200003c0 returned -22 [ 2341.732105][T12215] fuse: Bad value for 'fd' [ 2341.826110][T12217] FAULT_INJECTION: forcing a failure. [ 2341.826110][T12217] name failslab, interval 1, probability 0, space 0, times 0 [ 2341.826566][T12217] CPU: 0 UID: 0 PID: 12217 Comm: syz.0.2245 Not tainted 6.12.0-rc2-syzkaller #0 [ 2341.826787][T12217] Hardware name: ARM-Versatile Express [ 2341.826946][T12217] Call trace: [ 2341.827092][T12217] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2341.827342][T12217] r7:84160c00 r6:00000cc0 r5:60000013 r4:8203d394 [ 2341.827538][T12217] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2341.828045][T12217] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2341.828362][T12217] r5:00000000 r4:82718bdc [ 2341.828570][T12217] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2341.828879][T12217] [<808e5130>] (should_fail_ex) from [<804e8188>] (should_failslab+0x6c/0x94) [ 2341.829193][T12217] r6:00000cc0 r5:ffffffff r4:82f01180 [ 2341.829415][T12217] [<804e811c>] (should_failslab) from [<804ccbbc>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 2341.829771][T12217] [<804ccb6c>] (kmem_cache_alloc_node_noprof) from [<81490f00>] (__alloc_skb+0x138/0x160) [ 2341.830148][T12217] r10:00000000 r9:fffffffe r8:00000cc0 r7:00000000 r6:82f01180 r5:ffffffff [ 2341.830784][T12217] r4:82606000 [ 2341.830979][T12217] [<81490dc8>] (__alloc_skb) from [<815a6d3c>] (netlink_ack+0x70/0x21c) [ 2341.831487][T12217] r8:84065d40 r7:84a08540 r6:00000000 r5:815a87c4 r4:00000018 [ 2341.831775][T12217] [<815a6ccc>] (netlink_ack) from [<815a6fd4>] (netlink_rcv_skb+0xec/0x120) [ 2341.832096][T12217] r10:00000000 r9:00000000 r8:82920f00 r7:00000014 r6:84065d40 r5:815a87c4 [ 2341.832436][T12217] r4:84a08540 [ 2341.832817][T12217] [<815a6ee8>] (netlink_rcv_skb) from [<815a81a4>] (genl_rcv+0x2c/0x3c) [ 2341.833157][T12217] r7:84a08540 r6:82f08440 r5:827ddde0 r4:84a08540 [ 2341.833420][T12217] [<815a8178>] (genl_rcv) from [<815a6790>] (netlink_unicast+0x19c/0x29c) [ 2341.833757][T12217] r5:00000014 r4:82f19c00 [ 2341.833954][T12217] [<815a65f4>] (netlink_unicast) from [<815a6a6c>] (netlink_sendmsg+0x1dc/0x43c) [ 2341.834366][T12217] r9:00000000 r8:00000000 r7:84dfb000 r6:00000014 r5:84a08540 r4:f2eb5f38 [ 2341.834606][T12217] [<815a6890>] (netlink_sendmsg) from [<81483698>] (__sock_sendmsg+0x44/0x78) [ 2341.834858][T12217] r10:0000c000 r9:f2eb5dd4 r8:f2eb5dd4 r7:00000000 r6:83390500 r5:f2eb5f38 [ 2341.835088][T12217] r4:00000000 [ 2341.835202][T12217] [<81483654>] (__sock_sendmsg) from [<8148469c>] (____sys_sendmsg+0x2ac/0x2cc) [ 2341.835520][T12217] r7:00000000 r6:00000000 r5:83390500 r4:f2eb5f38 [ 2341.835670][T12217] [<814843f0>] (____sys_sendmsg) from [<81486604>] (___sys_sendmsg+0x9c/0xd0) [ 2341.835897][T12217] r10:f2eb5e34 r9:200030c0 r8:0000c000 r7:00000000 r6:83390500 r5:f2eb5f38 [ 2341.836106][T12217] r4:00000000 [ 2341.836195][T12217] [<81486568>] (___sys_sendmsg) from [<81486b1c>] (sys_sendmsg+0x78/0xbc) [ 2341.836403][T12217] r10:00000128 r9:84160c00 r8:8020029c r7:0000c000 r6:200030c0 r5:83390500 [ 2341.836733][T12217] r4:00000000 [ 2341.836843][T12217] [<81486aa4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2341.837092][T12217] Exception stack(0xf2eb5fa8 to 0xf2eb5ff0) [ 2341.837272][T12217] 5fa0: 00000000 00000000 00000003 200030c0 0000c000 00000000 [ 2341.837515][T12217] 5fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76b8d0bc [ 2341.837731][T12217] 5fe0: 76b8cec0 76b8ceb0 00018af8 00132ec0 [ 2341.837891][T12217] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2342.262690][T12227] fuse: Bad value for 'fd' [ 2345.056656][T12240] fuse: Bad value for 'fd' [ 2346.834399][T12257] fuse: Unknown parameter '0x0000000000000003' [ 2347.266285][T12266] FAULT_INJECTION: forcing a failure. [ 2347.266285][T12266] name failslab, interval 1, probability 0, space 0, times 0 [ 2347.266660][T12266] CPU: 0 UID: 0 PID: 12266 Comm: syz.0.2266 Not tainted 6.12.0-rc2-syzkaller #0 [ 2347.266848][T12266] Hardware name: ARM-Versatile Express [ 2347.266968][T12266] Call trace: [ 2347.267067][T12266] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2347.267301][T12266] r7:84163000 r6:00000820 r5:60000013 r4:8203d394 [ 2347.267452][T12266] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2347.267652][T12266] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2347.267849][T12266] r5:00000000 r4:82718bdc [ 2347.267959][T12266] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2347.268166][T12266] [<808e5130>] (should_fail_ex) from [<804e8188>] (should_failslab+0x6c/0x94) [ 2347.268338][T12266] r6:00000820 r5:84a0ca80 r4:82f01180 [ 2347.268503][T12266] [<804e811c>] (should_failslab) from [<804cd228>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 2347.268735][T12266] [<804cd1dc>] (kmem_cache_alloc_noprof) from [<8149758c>] (skb_clone+0x60/0x1c8) [ 2347.268970][T12266] r10:00000000 r9:000001a2 r8:84678480 r7:84ae5800 r6:84a0ca80 r5:84a0ca80 [ 2347.269112][T12266] r4:00000820 [ 2347.269194][T12266] [<8149752c>] (skb_clone) from [<815a377c>] (__netlink_deliver_tap+0x1e8/0x24c) [ 2347.269375][T12266] r5:84fc4680 r4:84fc4000 [ 2347.269472][T12266] [<815a3594>] (__netlink_deliver_tap) from [<815a6874>] (netlink_unicast+0x280/0x29c) [ 2347.269660][T12266] r10:00000000 r9:00000000 r8:84501a00 r7:84a0ca80 r6:84678480 r5:00000068 [ 2347.269814][T12266] r4:84ae5800 [ 2347.269897][T12266] [<815a65f4>] (netlink_unicast) from [<815a6a6c>] (netlink_sendmsg+0x1dc/0x43c) [ 2347.270158][T12266] r9:00000000 r8:00000000 r7:84df8400 r6:00000068 r5:84a0ca80 r4:f329df38 [ 2347.270292][T12266] [<815a6890>] (netlink_sendmsg) from [<81483698>] (__sock_sendmsg+0x44/0x78) [ 2347.270878][T12266] r10:00000010 r9:f329ddd4 r8:f329ddd4 r7:00000000 r6:83390c80 r5:f329df38 [ 2347.271108][T12266] r4:00000000 [ 2347.271390][T12266] [<81483654>] (__sock_sendmsg) from [<8148469c>] (____sys_sendmsg+0x2ac/0x2cc) [ 2347.271592][T12266] r7:00000000 r6:00000000 r5:83390c80 r4:f329df38 [ 2347.271787][T12266] [<814843f0>] (____sys_sendmsg) from [<81486604>] (___sys_sendmsg+0x9c/0xd0) [ 2347.272005][T12266] r10:f329de34 r9:20000280 r8:00000010 r7:00000000 r6:83390c80 r5:f329df38 [ 2347.272197][T12266] r4:00000000 [ 2347.272294][T12266] [<81486568>] (___sys_sendmsg) from [<81486b1c>] (sys_sendmsg+0x78/0xbc) [ 2347.272594][T12266] r10:00000128 r9:84163000 r8:8020029c r7:00000010 r6:20000280 r5:83390c80 [ 2347.272798][T12266] r4:00000000 [ 2347.273021][T12266] [<81486aa4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2347.273246][T12266] Exception stack(0xf329dfa8 to 0xf329dff0) [ 2347.273393][T12266] dfa0: 00000000 00000000 00000003 20000280 00000010 00000000 [ 2347.273581][T12266] dfc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76b8d0bc [ 2347.273815][T12266] dfe0: 76b8cec0 76b8ceb0 00018af8 00132ec0 [ 2347.273978][T12266] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2347.418622][T12268] fuse: Unknown parameter '0x0000000000000003' [ 2347.998729][T12280] fuse: Unknown parameter '0x0000000000000003' [ 2349.567567][T12292] fuse: Unknown parameter '0x0000000000000003' [ 2350.053476][T12300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12300 comm=syz.1.2281 [ 2350.160175][T12302] fuse: Unknown parameter '0x0000000000000003' [ 2353.520175][T12315] fuse: Unknown parameter 'fd0x0000000000000003' [ 2354.815085][T12326] fuse: Unknown parameter 'fd0x0000000000000003' [ 2359.234156][T12347] fuse: Unknown parameter 'fd0x0000000000000003' [ 2367.631943][T12390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5121 sclass=netlink_route_socket pid=12390 comm=syz.1.2312 [ 2369.859338][ T31] audit: type=1400 audit(2369.760:394): avc: denied { getopt } for pid=12395 comm="syz.0.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2374.152261][T12437] dlm: non-version read from control device 83 [ 2375.578404][T12446] FAULT_INJECTION: forcing a failure. [ 2375.578404][T12446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2375.591389][T12446] CPU: 1 UID: 0 PID: 12446 Comm: syz.0.2330 Not tainted 6.12.0-rc2-syzkaller #0 [ 2375.593333][T12446] Hardware name: ARM-Versatile Express [ 2375.593584][T12446] Call trace: [ 2375.593772][T12446] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2375.594119][T12446] r7:84c023a3 r6:00000000 r5:60000113 r4:8203d394 [ 2375.594389][T12446] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2375.594696][T12446] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2375.594988][T12446] r5:00000000 r4:8274e1c4 [ 2375.595155][T12446] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2375.595474][T12446] [<808e5130>] (should_fail_ex) from [<808e5320>] (should_fail+0x14/0x18) [ 2375.595766][T12446] r6:00000000 r5:f3b95f48 r4:00000014 [ 2375.595950][T12446] [<808e530c>] (should_fail) from [<808e5340>] (should_fail_usercopy+0x1c/0x20) [ 2375.596264][T12446] [<808e5324>] (should_fail_usercopy) from [<8083a16c>] (_copy_from_iter+0x68/0x7c8) [ 2375.596673][T12446] [<8083a104>] (_copy_from_iter) from [<8182c8e4>] (isotp_sendmsg+0x25c/0x7fc) [ 2375.597053][T12446] r10:f3b95f38 r9:84c023a3 r8:f3b95f48 r7:00000014 r6:84c00000 r5:84c02000 [ 2375.597379][T12446] r4:00000000 [ 2375.597525][T12446] [<8182c688>] (isotp_sendmsg) from [<81483698>] (__sock_sendmsg+0x44/0x78) [ 2375.597852][T12446] r10:24000000 r9:f3b95dd4 r8:f3b95dd4 r7:00000000 r6:83338a00 r5:f3b95f38 [ 2375.598116][T12446] r4:00000000 [ 2375.598253][T12446] [<81483654>] (__sock_sendmsg) from [<8148469c>] (____sys_sendmsg+0x2ac/0x2cc) [ 2375.598608][T12446] r7:00000000 r6:00000000 r5:83338a00 r4:f3b95f38 [ 2375.598817][T12446] [<814843f0>] (____sys_sendmsg) from [<81486604>] (___sys_sendmsg+0x9c/0xd0) [ 2375.599737][T12446] r10:f3b95e34 r9:20000200 r8:24000000 r7:00000000 r6:83338a00 r5:f3b95f38 [ 2375.600099][T12446] r4:00000000 [ 2375.600283][T12446] [<81486568>] (___sys_sendmsg) from [<81486b1c>] (sys_sendmsg+0x78/0xbc) [ 2375.601347][T12446] r10:00000128 r9:84166c00 r8:8020029c r7:24000000 r6:20000200 r5:83338a00 [ 2375.601737][T12446] r4:00000000 [ 2375.601901][T12446] [<81486aa4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2375.602243][T12446] Exception stack(0xf3b95fa8 to 0xf3b95ff0) [ 2375.602506][T12446] 5fa0: 00000000 00000000 00000003 20000200 24000000 00000000 [ 2375.602846][T12446] 5fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76b8d0bc [ 2375.603163][T12446] 5fe0: 76b8cec0 76b8ceb0 00018af8 00132ec0 [ 2375.603440][T12446] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2375.805351][ T31] audit: type=1400 audit(2375.710:395): avc: denied { connect } for pid=12455 comm="syz.0.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2377.781412][ T31] audit: type=1400 audit(2377.680:396): avc: denied { read } for pid=12467 comm="syz.1.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2379.795002][ T31] audit: type=1400 audit(2379.700:397): avc: denied { map } for pid=12520 comm="syz.1.2341" path="pipe:[26379]" dev="pipefs" ino=26379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 2389.027494][ T31] audit: type=1400 audit(2388.930:398): avc: denied { create } for pid=12578 comm="syz.1.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2392.668277][T12596] random: crng reseeded on system resumption [ 2398.007612][T12616] FAULT_INJECTION: forcing a failure. [ 2398.007612][T12616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2398.008314][T12616] CPU: 1 UID: 0 PID: 12616 Comm: syz.0.2372 Not tainted 6.12.0-rc2-syzkaller #0 [ 2398.008688][T12616] Hardware name: ARM-Versatile Express [ 2398.008934][T12616] Call trace: [ 2398.009150][T12616] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2398.009569][T12616] r7:00000000 r6:00000000 r5:60000013 r4:8203d394 [ 2398.009833][T12616] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2398.010214][T12616] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2398.011209][T12616] r5:00000000 r4:8274e1c4 [ 2398.011490][T12616] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2398.012217][T12616] [<808e5130>] (should_fail_ex) from [<808e5320>] (should_fail+0x14/0x18) [ 2398.012692][T12616] r6:00000000 r5:f4239f68 r4:00000002 [ 2398.013015][T12616] [<808e530c>] (should_fail) from [<808e5340>] (should_fail_usercopy+0x1c/0x20) [ 2398.013518][T12616] [<808e5324>] (should_fail_usercopy) from [<8054e664>] (simple_read_from_buffer+0x8c/0x134) [ 2398.014017][T12616] [<8054e5d8>] (simple_read_from_buffer) from [<805c3164>] (proc_fail_nth_read+0xb8/0x100) [ 2398.014477][T12616] r10:00000001 r9:805c30ac r8:00000002 r7:f4239f68 r6:0000000f r5:76b08f30 [ 2398.014843][T12616] r4:83ea9800 r3:f4239e9f [ 2398.015084][T12616] [<805c30ac>] (proc_fail_nth_read) from [<80515ddc>] (vfs_read+0x98/0x324) [ 2398.015567][T12616] r8:76b08f30 r7:f4239f68 r6:83ea9800 r5:0000000f r4:8467ca80 [ 2398.015936][T12616] [<80515d44>] (vfs_read) from [<80516a8c>] (ksys_read+0x78/0xf8) [ 2398.016402][T12616] r10:00000003 r9:83ea9800 r8:8020029c r7:00000000 r6:00000000 r5:8467ca80 [ 2398.016878][T12616] r4:8467ca83 [ 2398.017079][T12616] [<80516a14>] (ksys_read) from [<80516b1c>] (sys_read+0x10/0x14) [ 2398.017459][T12616] r7:00000003 r6:00000005 r5:76b08f30 r4:0000000f [ 2398.017775][T12616] [<80516b0c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2398.018147][T12616] Exception stack(0xf4239fa8 to 0xf4239ff0) [ 2398.018470][T12616] 9fa0: 0000000f 76b08f30 00000005 76b08f30 0000000f 00000000 [ 2398.018844][T12616] 9fc0: 0000000f 76b08f30 00000005 00000003 00000000 00006364 003d0f00 76b090bc [ 2398.019185][T12616] 9fe0: 00000158 76b08ed0 000d8408 00130d94 [ 2400.813590][ T31] audit: type=1400 audit(2400.720:399): avc: denied { getopt } for pid=12631 comm="syz.0.2380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2404.637002][T12655] fuse: Bad value for 'fd' [ 2406.273092][T12666] FAULT_INJECTION: forcing a failure. [ 2406.273092][T12666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2406.274135][T12666] CPU: 1 UID: 0 PID: 12666 Comm: syz.1.2386 Not tainted 6.12.0-rc2-syzkaller #0 [ 2406.274505][T12666] Hardware name: ARM-Versatile Express [ 2406.274683][T12666] Call trace: [ 2406.274841][T12666] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2406.275164][T12666] r7:20000300 r6:f4311e30 r5:60000013 r4:8203d394 [ 2406.275356][T12666] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2406.275643][T12666] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2406.275924][T12666] r5:00000000 r4:8274e1c4 [ 2406.276076][T12666] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2406.276349][T12666] [<808e5130>] (should_fail_ex) from [<808e5320>] (should_fail+0x14/0x18) [ 2406.276664][T12666] r6:f4311e30 r5:00000000 r4:f4311f38 [ 2406.276837][T12666] [<808e530c>] (should_fail) from [<808e5340>] (should_fail_usercopy+0x1c/0x20) [ 2406.277115][T12666] [<808e5324>] (should_fail_usercopy) from [<81486488>] (copy_msghdr_from_user+0x50/0x130) [ 2406.277416][T12666] [<81486438>] (copy_msghdr_from_user) from [<814865e0>] (___sys_sendmsg+0x78/0xd0) [ 2406.277727][T12666] r8:00048810 r7:00000000 r6:8333af00 r5:f4311f38 r4:f4311e74 [ 2406.277946][T12666] [<81486568>] (___sys_sendmsg) from [<81486b1c>] (sys_sendmsg+0x78/0xbc) [ 2406.278224][T12666] r10:00000128 r9:84162400 r8:8020029c r7:00048810 r6:20000300 r5:8333af00 [ 2406.278494][T12666] r4:00000000 [ 2406.278628][T12666] [<81486aa4>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2406.278900][T12666] Exception stack(0xf4311fa8 to 0xf4311ff0) [ 2406.279100][T12666] 1fa0: 00000000 00000000 00000003 20000300 00048810 00000000 [ 2406.279354][T12666] 1fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76bcb0bc [ 2406.279613][T12666] 1fe0: 76bcaec0 76bcaeb0 00018af8 00132ec0 [ 2406.279809][T12666] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 2417.352051][T12712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2417.356107][T12712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2418.233232][T12925] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12925 comm=syz.0.2402 [ 2418.404909][T12712] hsr_slave_0: entered promiscuous mode [ 2418.406346][T12712] hsr_slave_1: entered promiscuous mode [ 2418.407358][T12712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2418.407650][T12712] Cannot create hsr debugfs directory [ 2418.667024][T12712] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2418.737797][T12712] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2418.792048][T12712] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2418.846370][T12712] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2418.955811][T12712] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2418.971563][T12712] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2418.977958][T12712] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2418.987236][T12712] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2419.872218][T12712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2422.431447][T12712] veth0_vlan: entered promiscuous mode [ 2422.443803][T12712] veth1_vlan: entered promiscuous mode [ 2422.509723][T12712] veth0_macvtap: entered promiscuous mode [ 2422.531810][T12712] veth1_macvtap: entered promiscuous mode [ 2422.568271][T12712] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2422.568900][T12712] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2422.569097][T12712] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2422.569321][T12712] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2426.159166][T13045] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.223436][T13045] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.283159][T13045] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.346931][T13045] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.613656][T13045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2426.617003][T13045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2426.619821][T13045] bond0 (unregistering): Released all slaves [ 2426.685883][T13045] hsr_slave_0: left promiscuous mode [ 2426.687847][T13045] hsr_slave_1: left promiscuous mode [ 2426.702381][T13045] veth1_macvtap: left promiscuous mode [ 2426.702827][T13045] veth0_macvtap: left promiscuous mode [ 2426.703184][T13045] veth1_vlan: left promiscuous mode [ 2426.704783][T13045] veth0_vlan: left promiscuous mode [ 2428.042400][T13094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2428.045513][T13094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2429.058941][T13094] hsr_slave_0: entered promiscuous mode [ 2429.069813][T13094] hsr_slave_1: entered promiscuous mode [ 2429.807496][T13094] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2429.818329][T13094] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2429.827939][T13094] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2429.838208][T13094] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2430.576878][T13474] FAULT_INJECTION: forcing a failure. [ 2430.576878][T13474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2430.577540][T13474] CPU: 0 UID: 0 PID: 13474 Comm: syz.1.2417 Not tainted 6.12.0-rc2-syzkaller #0 [ 2430.577968][T13474] Hardware name: ARM-Versatile Express [ 2430.578196][T13474] Call trace: [ 2430.578430][T13474] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2430.578804][T13474] r7:00000000 r6:00000000 r5:60000013 r4:8203d394 [ 2430.579045][T13474] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2430.579386][T13474] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2430.579784][T13474] r5:00000000 r4:8274e1c4 [ 2430.579961][T13474] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2430.580432][T13474] [<808e5130>] (should_fail_ex) from [<808e5320>] (should_fail+0x14/0x18) [ 2430.581189][T13474] r6:00000000 r5:e03a9f68 r4:00000002 [ 2430.581484][T13474] [<808e530c>] (should_fail) from [<808e5340>] (should_fail_usercopy+0x1c/0x20) [ 2430.581852][T13474] [<808e5324>] (should_fail_usercopy) from [<8054e664>] (simple_read_from_buffer+0x8c/0x134) [ 2430.582465][T13474] [<8054e5d8>] (simple_read_from_buffer) from [<805c3164>] (proc_fail_nth_read+0xb8/0x100) [ 2430.582966][T13474] r10:00000001 r9:805c30ac r8:00000002 r7:e03a9f68 r6:0000000f r5:76ba6f30 [ 2430.583638][T13474] r4:83723000 r3:e03a9e9f [ 2430.583878][T13474] [<805c30ac>] (proc_fail_nth_read) from [<80515ddc>] (vfs_read+0x98/0x324) [ 2430.584294][T13474] r8:76ba6f30 r7:e03a9f68 r6:83723000 r5:0000000f r4:84a85f00 [ 2430.584784][T13474] [<80515d44>] (vfs_read) from [<80516a8c>] (ksys_read+0x78/0xf8) [ 2430.585172][T13474] r10:00000003 r9:83723000 r8:8020029c r7:00000000 r6:00000000 r5:84a85f00 [ 2430.585674][T13474] r4:84a85f03 [ 2430.585839][T13474] [<80516a14>] (ksys_read) from [<80516b1c>] (sys_read+0x10/0x14) [ 2430.586221][T13474] r7:00000003 r6:00000004 r5:76ba6f30 r4:0000000f [ 2430.586501][T13474] [<80516b0c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2430.586899][T13474] Exception stack(0xe03a9fa8 to 0xe03a9ff0) [ 2430.587181][T13474] 9fa0: 0000000f 76ba6f30 00000004 76ba6f30 0000000f 00000000 [ 2430.587635][T13474] 9fc0: 0000000f 76ba6f30 00000004 00000003 00000000 00006364 003d0f00 76ba70bc [ 2430.587974][T13474] 9fe0: 00000158 76ba6ed0 000d8408 00130d94 [ 2430.685471][T13094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2431.833344][T13503] FAULT_INJECTION: forcing a failure. [ 2431.833344][T13503] name failslab, interval 1, probability 0, space 0, times 0 [ 2431.833986][T13503] CPU: 0 UID: 0 PID: 13503 Comm: syz.1.2421 Not tainted 6.12.0-rc2-syzkaller #0 [ 2431.834316][T13503] Hardware name: ARM-Versatile Express [ 2431.834684][T13503] Call trace: [ 2431.834937][T13503] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2431.835342][T13503] r7:8416bc00 r6:00400dc0 r5:60000013 r4:8203d394 [ 2431.835690][T13503] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2431.836230][T13503] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2431.836561][T13503] r5:00000000 r4:82718bdc [ 2431.836752][T13503] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2431.837117][T13503] [<808e5130>] (should_fail_ex) from [<804e8188>] (should_failslab+0x6c/0x94) [ 2431.837494][T13503] r6:00400dc0 r5:848f0400 r4:82c02000 [ 2431.837735][T13503] [<804e811c>] (should_failslab) from [<804cc5d4>] (__kmalloc_cache_noprof+0x4c/0x344) [ 2431.838132][T13503] [<804cc588>] (__kmalloc_cache_noprof) from [<806d148c>] (fuse_alloc_forget+0x28/0x2c) [ 2431.838679][T13503] r10:e03a5c24 r9:8499ba40 r8:833e45f0 r7:00000000 r6:00000001 r5:848f0400 [ 2431.839013][T13503] r4:e03a5c28 [ 2431.839170][T13503] [<806d1464>] (fuse_alloc_forget) from [<806c6788>] (fuse_lookup_name+0x64/0x260) [ 2431.839521][T13503] [<806c6724>] (fuse_lookup_name) from [<806c6a04>] (fuse_lookup+0x80/0x160) [ 2431.840017][T13503] r10:000000e2 r9:00000000 r8:00000001 r7:00000000 r6:833e45d8 r5:8501f900 [ 2431.840356][T13503] r4:833e45d8 [ 2431.840678][T13503] [<806c6984>] (fuse_lookup) from [<80525124>] (__lookup_slow+0x8c/0x134) [ 2431.841165][T13503] r8:8501f900 r7:00000001 r6:e03a5d60 r5:833e4ee0 r4:833e45d8 [ 2431.841487][T13503] [<80525098>] (__lookup_slow) from [<80529204>] (walk_component+0x104/0x170) [ 2431.841937][T13503] r8:00000001 r7:00000001 r6:e03a5d58 r5:8501f980 r4:833e4ee0 [ 2431.842515][T13503] [<80529100>] (walk_component) from [<80529e8c>] (path_lookupat+0x7c/0x1a4) [ 2431.843123][T13503] r9:00000000 r8:e03a5e48 r7:00000000 r6:00000001 r5:e03a5e48 r4:e03a5d58 [ 2431.843513][T13503] [<80529e10>] (path_lookupat) from [<8052a378>] (filename_lookup+0xc0/0x190) [ 2431.844065][T13503] r7:00000001 r6:82e48000 r5:8416bc00 r4:ffffff9c [ 2431.844630][T13503] [<8052a2b8>] (filename_lookup) from [<8052a578>] (user_path_at+0x4c/0x64) [ 2431.845070][T13503] r9:8416bc00 r8:e03a5e64 r7:00000000 r6:ffffff9c r5:00000001 r4:82e48000 [ 2431.845740][T13503] [<8052a52c>] (user_path_at) from [<8054c704>] (path_setxattr+0x8c/0x124) [ 2431.846206][T13503] r6:00000000 r5:20000080 r4:00000000 [ 2431.846602][T13503] [<8054c678>] (path_setxattr) from [<8054c900>] (sys_setxattr+0x24/0x2c) [ 2431.847023][T13503] r8:8020029c r7:000000e2 r6:00130e70 r5:00000000 r4:00000002 [ 2431.847372][T13503] [<8054c8dc>] (sys_setxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2431.847661][T13503] Exception stack(0xe03a5fa8 to 0xe03a5ff0) [ 2431.847841][T13503] 5fa0: 00000002 00000000 20000080 20000240 00000000 00000000 [ 2431.848035][T13503] 5fc0: 00000002 00000000 00130e70 000000e2 00000000 00006364 003d0f00 76ba70bc [ 2431.848239][T13503] 5fe0: 76ba6ec0 76ba6eb0 00018af8 00132ec0 [ 2433.922384][T13094] veth0_vlan: entered promiscuous mode [ 2433.948301][T13094] veth1_vlan: entered promiscuous mode [ 2434.019999][T13094] veth0_macvtap: entered promiscuous mode [ 2434.034296][T13094] veth1_macvtap: entered promiscuous mode [ 2434.098375][T13094] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.098989][T13094] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.099324][T13094] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.099672][T13094] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2437.155406][T13569] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=13569 comm=syz.0.2430 [ 2442.628919][T13604] FAULT_INJECTION: forcing a failure. [ 2442.628919][T13604] name failslab, interval 1, probability 0, space 0, times 0 [ 2442.629512][T13604] CPU: 1 UID: 0 PID: 13604 Comm: syz.0.2442 Not tainted 6.12.0-rc2-syzkaller #0 [ 2442.630038][T13604] Hardware name: ARM-Versatile Express [ 2442.630259][T13604] Call trace: [ 2442.630583][T13604] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2442.631008][T13604] r7:00400cc0 r6:00000011 r5:60000013 r4:8203d394 [ 2442.631315][T13604] [<81998ebc>] (show_stack) from [<819b7380>] (dump_stack_lvl+0x70/0x7c) [ 2442.631708][T13604] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2442.632203][T13604] r5:00000000 r4:82718bdc [ 2442.632499][T13604] [<819b738c>] (dump_stack) from [<808e52bc>] (should_fail_ex+0x18c/0x1dc) [ 2442.632876][T13604] [<808e5130>] (should_fail_ex) from [<804e8188>] (should_failslab+0x6c/0x94) [ 2442.633327][T13604] r6:00000011 r5:00000011 r4:82c02000 [ 2442.633581][T13604] [<804e811c>] (should_failslab) from [<804ce260>] (__kmalloc_node_track_caller_noprof+0xa0/0x464) [ 2442.634119][T13604] [<804ce1c0>] (__kmalloc_node_track_caller_noprof) from [<8046cce8>] (kstrdup+0x38/0x5c) [ 2442.634876][T13604] r10:00000002 r9:e4819e64 r8:84423eb0 r7:8054d148 r6:00000011 r5:00400cc0 [ 2442.635396][T13604] r4:e4819e64 [ 2442.635575][T13604] [<8046ccb0>] (kstrdup) from [<8054d148>] (simple_xattr_set+0x40/0x184) [ 2442.635885][T13604] r7:85495238 r6:84410700 r5:e4819e64 r4:84dae080 [ 2442.636120][T13604] [<8054d108>] (simple_xattr_set) from [<80464f2c>] (shmem_xattr_handler_set+0x194/0x1a8) [ 2442.636564][T13604] r9:e4819e64 r8:84423eb0 r7:00000056 r6:84423e80 r5:85495258 r4:84dae080 [ 2442.636954][T13604] [<80464d98>] (shmem_xattr_handler_set) from [<8054b750>] (__vfs_setxattr+0xb4/0xc8) [ 2442.637406][T13604] r9:80464d98 r8:0000001e r7:84dae080 r6:833b1aa0 r5:8271ed74 r4:85495258 [ 2442.637795][T13604] [<8054b69c>] (__vfs_setxattr) from [<8054c010>] (__vfs_setxattr_noperm+0x7c/0x204) [ 2442.638315][T13604] r9:8271ed74 r8:84dae080 r7:85495258 r6:00000000 r5:e4819e64 r4:833b1aa0 [ 2442.638736][T13604] [<8054bf94>] (__vfs_setxattr_noperm) from [<8054c280>] (__vfs_setxattr_locked+0xe8/0x118) [ 2442.639220][T13604] r10:e4819de8 r9:0000001e r8:85495258 r7:84dae080 r6:e4819e64 r5:8271ed74 [ 2442.639828][T13604] r4:833b1aa0 [ 2442.640028][T13604] [<8054c198>] (__vfs_setxattr_locked) from [<8054c340>] (vfs_setxattr+0x90/0x180) [ 2442.640510][T13604] r8:8271ed74 r7:e4819e64 r6:833b1aa0 r5:854952d8 r4:e4819e50 [ 2442.640811][T13604] [<8054c2b0>] (vfs_setxattr) from [<8054c670>] (do_setxattr+0x94/0x9c) [ 2442.641234][T13604] r10:000000e4 r9:833b1aa0 r8:8271ed74 r7:84dae080 r6:0000001e r5:e4819e64 [ 2442.641660][T13604] r4:e4819e50 [ 2442.641860][T13604] [<8054c5dc>] (do_setxattr) from [<8054c8c0>] (__do_sys_fsetxattr+0x124/0x140) [ 2442.642225][T13604] r9:84168c00 r8:84168c00 r7:20000000 r6:8462e240 r5:8462e241 r4:00000000 [ 2442.642710][T13604] [<8054c79c>] (__do_sys_fsetxattr) from [<8054c950>] (sys_fsetxattr+0x1c/0x24) [ 2442.643057][T13604] r8:8020029c r7:000000e4 r6:00130e70 r5:00000000 r4:00000002 [ 2442.643477][T13604] [<8054c934>] (sys_fsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2442.644045][T13604] Exception stack(0xe4819fa8 to 0xe4819ff0) [ 2442.644479][T13604] 9fa0: 00000002 00000000 00000003 20000000 20000040 0000001e [ 2442.645141][T13604] 9fc0: 00000002 00000000 00130e70 000000e4 00000000 00006364 003d0f00 76b030bc [ 2442.645705][T13604] 9fe0: 76b02ec0 76b02eb0 00018af8 00132ec0 [ 2442.794658][ T31] audit: type=1400 audit(2442.700:400): avc: denied { name_bind } for pid=13598 comm="syz.1.2441" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 2447.564075][T13627] sctp: [Deprecated]: syz.0.2447 (pid 13627) Use of int in max_burst socket option deprecated. [ 2447.564075][T13627] Use struct sctp_assoc_value instead [ 2449.389913][ T31] audit: type=1400 audit(2449.290:401): avc: denied { name_bind } for pid=13634 comm="syz.1.2449" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 2450.961535][T13643] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 2451.153834][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2452.275768][T13662] netlink: 'syz.0.2458': attribute type 1 has an invalid length. [ 2453.270141][ T31] audit: type=1400 audit(2453.170:402): avc: denied { read } for pid=13669 comm="syz.0.2459" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2455.746865][ T31] audit: type=1400 audit(2455.650:403): avc: denied { getopt } for pid=13693 comm="syz.0.2464" lport=44512 faddr=::ffff:172.30.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 2456.875533][ T31] audit: type=1400 audit(2456.780:404): avc: denied { shutdown } for pid=13702 comm="syz.1.2467" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2456.890939][ T31] audit: type=1400 audit(2456.790:405): avc: denied { name_connect } for pid=13702 comm="syz.1.2467" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 2458.081176][ T31] audit: type=1326 audit(2457.980:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13711 comm="syz.1.2472" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x132ec0 code=0x0 [ 2466.655866][T13745] process 'syz.0.2478' launched './file2' with NULL argv: empty string added [ 2466.660111][ T31] audit: type=1400 audit(2466.560:407): avc: denied { execute_no_trans } for pid=13741 comm="syz.0.2478" path="/28/file2" dev="tmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2470.181981][T13549] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2470.334369][T13549] usb 1-1: Using ep0 maxpacket: 8 [ 2470.350695][T13549] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 2470.351168][T13549] usb 1-1: config 179 has no interface number 0 [ 2470.351467][T13549] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2470.352042][T13549] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2470.352445][T13549] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2470.352807][T13549] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2470.353147][T13549] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2470.353632][T13549] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2470.353979][T13549] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2470.362527][T13754] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2472.740230][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2472.740985][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2472.750980][T13549] usb 1-1: USB disconnect, device number 18 [ 2472.847092][T13772] netlink: 'syz.0.2482': attribute type 2 has an invalid length. [ 2474.214423][T13784] input: syz0 as /devices/virtual/input/input8 [ 2486.114254][ T31] audit: type=1400 audit(2486.020:408): avc: denied { lock } for pid=13800 comm="syz.1.2489" path="socket:[29298]" dev="sockfs" ino=29298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 2486.126487][ T31] audit: type=1400 audit(2486.030:409): avc: denied { read } for pid=2928 comm="syslogd" name="log" dev="vda" ino=671 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2490.675802][T13819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2495'. [ 2490.865944][ T31] audit: type=1400 audit(2490.770:410): avc: denied { create } for pid=13812 comm="syz.0.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2490.867058][ T31] audit: type=1400 audit(2490.770:411): avc: denied { setopt } for pid=13812 comm="syz.0.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2490.892881][T13820] fuse: Bad value for 'fd' [ 2492.311984][ T31] audit: type=1400 audit(2492.220:412): avc: denied { remount } for pid=13828 comm="syz.1.2498" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2492.346887][ T31] audit: type=1400 audit(2492.250:413): avc: denied { unmount } for pid=12712 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2530.645407][ T31] audit: type=1400 audit(2530.550:414): avc: denied { setopt } for pid=13859 comm="syz.1.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2531.925786][ T31] audit: type=1400 audit(2531.830:415): avc: denied { module_load } for pid=13869 comm="syz.1.2514" path=2F6D656D66643ACEBAE4EDC9FB921B6D1069DE6C91FBE08CE0406C1437FA23ABBCE80104202864656C6574656429 dev="tmpfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 2531.926746][T13870] Invalid architecture in ELF header: 62 [ 2534.061639][ T4069] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 2534.276755][ T4069] usb 1-1: No LPM exit latency info found, disabling LPM. [ 2534.318511][ T4069] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 2534.335881][ T4069] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x82 is Bulk; changing to Interrupt [ 2534.336625][ T4069] usb 1-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2534.337121][ T4069] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2534.407065][ T4069] usb 1-1: string descriptor 0 read error: -22 [ 2534.407643][ T4069] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2534.408007][ T4069] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2534.452606][T13882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2534.469474][T13882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2534.471986][T13882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2534.477728][ T4069] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 2534.733494][ T4069] usb 1-1: USB disconnect, device number 19 [ 2536.312176][ T31] audit: type=1400 audit(2792.213:416): avc: denied { nlmsg_read } for pid=13906 comm="syz.0.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2555.378134][ T31] audit: type=1400 audit(2811.273:417): avc: denied { map } for pid=13933 comm="syz.0.2528" path="socket:[29998]" dev="sockfs" ino=29998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2593.667708][T14003] input: syz1 as /devices/virtual/input/input9 [ 2594.331882][T13739] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2594.481805][T13739] usb 2-1: Using ep0 maxpacket: 16 [ 2594.493763][T13739] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2594.494504][T13739] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2594.495149][T13739] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2594.495529][T13739] usb 2-1: config 1 has no interface number 1 [ 2594.497756][T13739] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2594.498623][T13739] usb 2-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x19, changing to 0x9 [ 2594.499217][T13739] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 2594.521990][T13739] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2594.525547][T13739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2594.525908][T13739] usb 2-1: Product: syz [ 2594.526164][T13739] usb 2-1: Manufacturer: syz [ 2594.526456][T13739] usb 2-1: SerialNumber: syz [ 2594.774588][T13739] usb 2-1: USB disconnect, device number 27 [ 2595.081861][T14049] input: syz0 as /devices/virtual/input/input10 [ 2595.716698][T14072] loop2: detected capacity change from 0 to 7 [ 2596.040819][ T4069] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2596.221646][ T4069] usb 1-1: Using ep0 maxpacket: 16 [ 2596.228758][ T4069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2596.229611][ T4069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2596.230000][ T4069] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2596.231293][ T4069] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2596.231603][ T4069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2596.242756][ T4069] usb 1-1: config 0 descriptor?? [ 2596.664334][ T4069] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 2596.665740][ T4069] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 2596.666097][ T4069] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 2596.666439][ T4069] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 2596.666765][ T4069] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 2596.667136][ T4069] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 2596.667467][ T4069] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 2596.667793][ T4069] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 2596.668113][ T4069] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 2596.668484][ T4069] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 2596.668809][ T4069] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 2596.673147][ T4069] microsoft 0003:045E:07DA.0013: No inputs registered, leaving [ 2596.688506][ T4069] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 2596.690086][ T4069] microsoft 0003:045E:07DA.0013: no inputs found [ 2596.691438][ T4069] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway [ 2596.865476][T13739] usb 1-1: USB disconnect, device number 20 [ 2597.331194][ T4069] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2597.503959][ T4069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2597.504645][ T4069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2597.508124][ T4069] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2597.508677][ T4069] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2597.508983][ T4069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2597.524061][ T4069] usb 1-1: config 0 descriptor?? [ 2597.944287][ T4069] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 2597.945479][ T4069] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 2597.955333][ T4069] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2599.234308][T14100] usb 1-1: string descriptor 0 read error: -2 [ 2600.161855][ T3773] usb 1-1: reset high-speed USB device number 21 using dummy_hcd [ 2600.170045][ T3773] usb 1-1: device reset changed ep0 maxpacket size! [ 2600.173721][T13549] usb 1-1: USB disconnect, device number 21 [ 2600.341361][T13549] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2600.494434][T13549] usb 1-1: Using ep0 maxpacket: 8 [ 2600.504247][T13549] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 2600.504597][T13549] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2600.504800][T13549] usb 1-1: config 0 has no interface number 0 [ 2600.505038][T13549] usb 1-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2600.505265][T13549] usb 1-1: config 0 interface 113 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 2600.523242][T13549] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 2600.523665][T13549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2600.523829][T13549] usb 1-1: Product: syz [ 2600.523929][T13549] usb 1-1: Manufacturer: syz [ 2600.524036][T13549] usb 1-1: SerialNumber: syz [ 2600.549167][T13549] usb 1-1: config 0 descriptor?? [ 2600.561312][T13549] usbhid 1-1:0.113: couldn't find an input interrupt endpoint [ 2600.780912][T13739] usb 1-1: USB disconnect, device number 22 [ 2601.284484][T13739] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2601.521124][T13739] usb 1-1: Using ep0 maxpacket: 8 [ 2601.566215][T13739] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2601.566615][T13739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2601.566796][T13739] usb 1-1: Product: syz [ 2601.568120][T13739] usb 1-1: Manufacturer: syz [ 2601.582613][T13739] usb 1-1: SerialNumber: syz [ 2601.592933][T13739] usb 1-1: config 0 descriptor?? [ 2611.886886][T11895] usb 1-1: USB disconnect, device number 23 [ 2612.198218][ T31] audit: type=1400 audit(2868.093:418): avc: denied { connect } for pid=14160 comm="syz.0.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2612.955223][T14169] netlink: 'syz.0.2576': attribute type 1 has an invalid length. [ 2613.955012][T14174] ucma_write: process 221 (syz.0.2578) changed security contexts after opening file descriptor, this is not allowed. [ 2618.621795][T13739] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2618.771354][T13739] usb 1-1: Using ep0 maxpacket: 32 [ 2618.808646][T14194] netlink: 'syz.0.2585': attribute type 15 has an invalid length. [ 2618.808995][T14194] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2585'. [ 2618.817626][T13739] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2618.819553][T13739] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2618.819887][T13739] usb 1-1: can't read configurations, error -71 [ 2621.101631][ T3773] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2621.251348][ T3773] usb 2-1: Using ep0 maxpacket: 32 [ 2621.288294][ T3773] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 2621.288754][ T3773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2621.293980][ T3773] usb 2-1: config 0 descriptor?? [ 2631.534165][T13549] usb 2-1: USB disconnect, device number 28 [ 2632.095015][T14242] loop2: detected capacity change from 0 to 7 [ 2637.191538][T11895] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2637.381053][T11895] usb 2-1: Using ep0 maxpacket: 8 [ 2637.438904][T11895] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 2637.439500][T11895] usb 2-1: config 0 has too many interfaces: 241, using maximum allowed: 32 [ 2637.439881][T11895] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 241 [ 2637.440224][T11895] usb 2-1: config 0 has no interface number 0 [ 2637.465671][T11895] usb 2-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2637.481801][T11895] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2637.482590][T11895] usb 2-1: New USB device strings: Mfr=228, Product=255, SerialNumber=0 [ 2637.482945][T11895] usb 2-1: Product: syz [ 2637.483164][T11895] usb 2-1: Manufacturer: syz [ 2637.487689][T11895] usb 2-1: config 0 descriptor?? [ 2637.602348][T14276] ------------[ cut here ]------------ [ 2637.602764][T14276] WARNING: CPU: 1 PID: 14276 at mm/highmem.c:622 kunmap_local_indexed+0x20c/0x224 [ 2637.603431][T14276] Modules linked in: [ 2637.604278][T14276] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2637.604777][T14276] CPU: 1 UID: 0 PID: 14276 Comm: syz.0.2606 Not tainted 6.12.0-rc2-syzkaller #0 [ 2637.605121][T14276] Hardware name: ARM-Versatile Express [ 2637.606919][T14276] Call trace: [ 2637.610495][T14276] [<81998dd8>] (dump_backtrace) from [<81998ed4>] (show_stack+0x18/0x1c) [ 2637.610809][T14276] r7:00000000 r6:826228c4 r5:00000000 r4:8203d394 [ 2637.611098][T14276] [<81998ebc>] (show_stack) from [<819b7364>] (dump_stack_lvl+0x54/0x7c) [ 2637.612493][T14276] [<819b7310>] (dump_stack_lvl) from [<819b73a4>] (dump_stack+0x18/0x1c) [ 2637.613124][T14276] r5:00000000 r4:82870d18 [ 2637.613372][T14276] [<819b738c>] (dump_stack) from [<81999a00>] (panic+0x120/0x374) [ 2637.613683][T14276] [<819998e0>] (panic) from [<802420e0>] (get_taint+0x0/0x1c) [ 2637.613901][T14276] r3:8260c5c4 r2:00000001 r1:82025774 r0:8202d1dc [ 2637.615475][T14276] r7:8048c614 [ 2637.617499][T14276] [<8024206c>] (check_panic_on_warn) from [<80242244>] (__warn+0x80/0x188) [ 2637.620444][T14276] [<802421c4>] (__warn) from [<802424c4>] (warn_slowpath_fmt+0x178/0x1f4) [ 2637.620932][T14276] r8:00000009 r7:82054dd8 r6:dfb81d24 r5:8482e000 r4:00000000 [ 2637.621178][T14276] [<80242350>] (warn_slowpath_fmt) from [<8048c614>] (kunmap_local_indexed+0x20c/0x224) [ 2637.621596][T14276] r10:ffedc438 r9:83e7c000 r8:200b9000 r7:00000000 r6:00000003 r5:8482e000 [ 2637.621805][T14276] r4:ffedc000 [ 2637.621914][T14276] [<8048c408>] (kunmap_local_indexed) from [<80505a48>] (move_pages+0x7e8/0x149c) [ 2637.622156][T14276] r7:00000000 r6:841eec60 r5:ded274dc r4:ffeda5c8 [ 2637.622320][T14276] [<80505260>] (move_pages) from [<80581c70>] (userfaultfd_ioctl+0x114c/0x2080) [ 2637.622573][T14276] r10:83e7c000 r9:dfb81e98 r8:00000001 r7:2068b000 r6:00000000 r5:20000080 [ 2637.622774][T14276] r4:84c75080 [ 2637.622875][T14276] [<80580b24>] (userfaultfd_ioctl) from [<8052f654>] (sys_ioctl+0x134/0xda8) [ 2637.623176][T14276] r10:8482e000 r9:84da3900 r8:00000005 r7:20000080 r6:84da3901 r5:00000000 [ 2637.623409][T14276] r4:c028aa05 [ 2637.623543][T14276] [<8052f520>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2637.624110][T14276] Exception stack(0xdfb81fa8 to 0xdfb81ff0) [ 2637.624381][T14276] 1fa0: 00000000 00000000 00000005 c028aa05 20000080 00000000 [ 2637.624780][T14276] 1fc0: 00000000 00000000 00286380 00000036 00000000 00006364 003d0f00 76ae10bc [ 2637.627199][T14276] 1fe0: 76ae0ec0 76ae0eb0 00018af8 00132ec0 [ 2637.629354][T14276] r10:00000036 r9:8482e000 r8:8020029c r7:00000036 r6:00286380 r5:00000000 [ 2637.630759][T14276] r4:00000000 [ 2637.632882][T14276] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:32:52 Registers: info registers vcpu 0 CPU#0 R00=b2c0d000 R01=dfc97000 R02=00000001 R03=802199d8 R04=7f02b000 R05=00000001 R06=828c1b28 R07=7f02b000 R08=dfc97000 R09=8260cad0 R10=828c274c R11=dfd75dbc R12=dfd75dc0 R13=dfd75d90 R14=802109dc R15=802199f0 PSR=80000013 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=60000093 R01=5b928000 R02=00000001 R03=824b1500 R04=00000000 R05=60000093 R06=ffffffff R07=82622918 R08=00000000 R09=8482e000 R10=00000001 R11=dfb81b7c R12=dfb81b80 R13=dfb81b70 R14=802bded4 R15=802c1314 PSR=60000093 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000