last executing test programs: 25.361036573s ago: executing program 0 (id=1652): syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000230040120c05000000000000010902"], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1}, 0x4) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/fdt', 0x202, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000001200000000000000009500000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) read$FUSE(r0, &(0x7f0000006140)={0x2020}, 0x2020) 10.06215904s ago: executing program 1 (id=1663): read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x11, 0xa, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x6004085d, &(0x7f0000000000)={0x2, 0x4c21, @multicast1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 9.991926143s ago: executing program 0 (id=1664): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xb2, 0x3) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) brk(0x200100006e61) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) 9.688125489s ago: executing program 1 (id=1665): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='mmap_lock_acquire_returned\x00', r0}, 0x10) mremap(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) 9.003056496s ago: executing program 1 (id=1666): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "63b6bcef"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x9}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, 0x0) 7.482241017s ago: executing program 1 (id=1667): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x28, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x0, "de4fc645"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "e92d"}, @main=@item_012={0x2, 0x0, 0xa, '%y'}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x8, "84e5821a"}]}}, 0x0}, 0x0) 6.040875473s ago: executing program 0 (id=1668): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) 5.688715149s ago: executing program 0 (id=1669): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}, {0x0, 0x1}]}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0x0, "ebab"}, @global=@item_012={0x1, 0x1, 0x0, '\x00'}]}}, 0x0}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001200)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0xfffffffd, 0x6c}, @in=@loopback, {0x0, 0x0, 0xf37, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x2000000000000, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) clock_adjtime(0x0, &(0x7f00000006c0)={0x1b, 0xf423f, 0x4100, 0x0, 0x0, 0x2c43}) 5.281333144s ago: executing program 0 (id=1670): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x3f7, 0x117452281b1ee7e5, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0xfffffffffffffff0, 0x0, 0x2000c024}, 0x8800) 5.019169152s ago: executing program 0 (id=1671): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @local}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000c80)="080027226da0", 0x6}], 0x1}, 0x31c467c443849ffc) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x181401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000380)=""/88, 0x58, 0x0, &(0x7f00000004c0)=""/169, 0xa9}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x4, &(0x7f0000000280)=[{0x94, 0x3, 0x34}, {0x40, 0x1, 0x10, 0x400}, {0xe, 0x1, 0xa6, 0x5}, {0x5, 0x8, 0x1, 0x5}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f00000001c0)={{0x2, 0x1}, 'port1\x00', 0x63, 0x4104c, 0x9, 0x10001, 0x7, 0x8, 0x136a, 0x0, 0x4}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x1, @multicast}, 0x10) close(0xffffffffffffffff) 2.037914823s ago: executing program 1 (id=1672): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x9, 0x6066}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x5, 0x2}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0xfffc, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a00)={0x14, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 0s ago: executing program 1 (id=1673): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="88010000100013070000000002000000ac1414bb0000000000000000000000006401010100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc0100000000000000000000000000020000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000100000000000000000000000a0002000000000000000000480001006372637431306469662d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004f001400636d616328616573290000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000018"], 0x188}}, 0x4000894) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) kernel console output (not intermixed with test programs): nect, device number 54 [ 967.670768][T10094] FAULT_INJECTION: forcing a failure. [ 967.670768][T10094] name failslab, interval 1, probability 0, space 0, times 0 [ 967.671433][T10094] CPU: 1 UID: 0 PID: 10094 Comm: syz.1.1202 Not tainted 6.12.0-rc3-syzkaller #0 [ 967.671772][T10094] Hardware name: ARM-Versatile Express [ 967.672004][T10094] Call trace: [ 967.672214][T10094] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 967.672605][T10094] r7:83638000 r6:00000cc0 r5:60000113 r4:8203d7c4 [ 967.672854][T10094] [<819997f4>] (show_stack) from [<819b7cc4>] (dump_stack_lvl+0x70/0x7c) [ 967.673191][T10094] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 967.673528][T10094] r5:00000000 r4:8271925c [ 967.674173][T10094] [<819b7cd0>] (dump_stack) from [<808e54ec>] (should_fail_ex+0x18c/0x1dc) [ 967.674690][T10094] [<808e5360>] (should_fail_ex) from [<804e82e0>] (should_failslab+0x6c/0x94) [ 967.675153][T10094] r6:00000cc0 r5:00000002 r4:82c01240 [ 967.675456][T10094] [<804e8274>] (should_failslab) from [<804cc728>] (__kmalloc_cache_noprof+0x4c/0x344) [ 967.676031][T10094] [<804cc6dc>] (__kmalloc_cache_noprof) from [<802f9704>] (__request_module+0xe8/0x2c0) [ 967.676496][T10094] r10:00000000 r9:df981ecb r8:826f6564 r7:83638000 r6:814f0570 r5:00000002 [ 967.676831][T10094] r4:00000000 [ 967.677026][T10094] [<802f961c>] (__request_module) from [<814f0570>] (dev_load+0x68/0x8c) [ 967.677407][T10094] r3:00400140 r2:df981ecc r1:820adb4c [ 967.677657][T10094] r8:00000000 r7:846c8d00 r6:df981ecc r5:00000000 r4:df981ecc [ 967.677961][T10094] [<814f0508>] (dev_load) from [<814f1ad4>] (dev_ioctl+0x568/0x678) [ 967.678315][T10094] r5:00000004 r4:000089f4 [ 967.678523][T10094] [<814f156c>] (dev_ioctl) from [<81485354>] (sock_ioctl+0x584/0x608) [ 967.678928][T10094] r10:83638000 r9:843adcc0 r8:00000003 r7:b5403587 r6:846c8d00 r5:200001c0 [ 967.679239][T10094] r4:000089f4 r3:00000000 [ 967.679450][T10094] [<81484dd0>] (sock_ioctl) from [<8052f7ac>] (sys_ioctl+0x134/0xda8) [ 967.679843][T10094] r9:843adcc0 r8:00000003 r7:200001c0 r6:843adcc1 r5:00000000 r4:000089f4 [ 967.680186][T10094] [<8052f678>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 967.680564][T10094] Exception stack(0xdf981fa8 to 0xdf981ff0) [ 967.680844][T10094] 1fa0: 00000000 00000000 00000003 000089f4 200001c0 00000000 [ 967.681214][T10094] 1fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76b550bc [ 967.681560][T10094] 1fe0: 76b54ec0 76b54eb0 00018af8 00132ec0 [ 967.681828][T10094] r10:00000036 r9:83638000 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 967.682143][T10094] r4:00000000 [ 968.010103][ T31] audit: type=1400 audit(1747.917:316): avc: denied { setopt } for pid=10099 comm="syz.1.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 971.008417][T10127] FAULT_INJECTION: forcing a failure. [ 971.008417][T10127] name failslab, interval 1, probability 0, space 0, times 0 [ 971.009200][T10127] CPU: 0 UID: 0 PID: 10127 Comm: syz.0.1217 Not tainted 6.12.0-rc3-syzkaller #0 [ 971.009585][T10127] Hardware name: ARM-Versatile Express [ 971.009908][T10127] Call trace: [ 971.010123][T10127] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 971.010496][T10127] r7:84644800 r6:00000dc0 r5:60000013 r4:8203d7c4 [ 971.010734][T10127] [<819997f4>] (show_stack) from [<819b7cc4>] (dump_stack_lvl+0x70/0x7c) [ 971.011104][T10127] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 971.011495][T10127] r5:00000000 r4:8271925c [ 971.011680][T10127] [<819b7cd0>] (dump_stack) from [<808e54ec>] (should_fail_ex+0x18c/0x1dc) [ 971.012139][T10127] [<808e5360>] (should_fail_ex) from [<804e82e0>] (should_failslab+0x6c/0x94) [ 971.012478][T10127] r6:00000dc0 r5:85270b94 r4:82c01300 [ 971.012740][T10127] [<804e8274>] (should_failslab) from [<804cc728>] (__kmalloc_cache_noprof+0x4c/0x344) [ 971.013146][T10127] [<804cc6dc>] (__kmalloc_cache_noprof) from [<81874788>] (sctp_stream_init_ext+0x2c/0xa4) [ 971.013609][T10127] r10:dfe9dde0 r9:85843e40 r8:84644800 r7:00000003 r6:00000000 r5:85270b94 [ 971.013904][T10127] r4:85270b94 [ 971.014060][T10127] [<8187475c>] (sctp_stream_init_ext) from [<81863eb4>] (sctp_sendmsg_to_asoc+0x5e8/0x684) [ 971.015223][T10127] r7:00000003 r6:85b29000 r5:85270b94 r4:85270800 [ 971.016179][T10127] [<818638cc>] (sctp_sendmsg_to_asoc) from [<8186cae8>] (sctp_sendmsg+0x60c/0x910) [ 971.016628][T10127] r10:00000000 r9:85843e40 r8:00000001 r7:00000003 r6:85b29000 r5:dfe9de98 [ 971.017164][T10127] r4:84898000 [ 971.017333][T10127] [<8186c4dc>] (sctp_sendmsg) from [<816b55b8>] (inet_sendmsg+0x40/0x4c) [ 971.017916][T10127] r10:00000122 r9:84644800 r8:00000003 r7:84cc2000 r6:84898000 r5:00000003 [ 971.018254][T10127] r4:dfe9de98 [ 971.018430][T10127] [<816b5578>] (inet_sendmsg) from [<81483c28>] (__sock_sendmsg+0x44/0x78) [ 971.018993][T10127] r7:84cc2000 r6:84cc2000 r5:dfe9de98 r4:00000000 [ 971.019371][T10127] [<81483be4>] (__sock_sendmsg) from [<81486280>] (__sys_sendto+0x108/0x14c) [ 971.019755][T10127] r7:84cc2000 r6:2005ffe4 r5:00000000 r4:00000000 [ 971.020091][T10127] [<81486178>] (__sys_sendto) from [<814862e0>] (sys_sendto+0x1c/0x24) [ 971.020464][T10127] r8:8020029c r7:00000122 r6:00130e70 r5:0000001c r4:2005ffe4 [ 971.021062][T10127] [<814862c4>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 971.021473][T10127] Exception stack(0xdfe9dfa8 to 0xdfe9dff0) [ 971.024326][T10127] dfa0: 2005ffe4 0000001c 00000003 20000440 00000003 00000000 [ 971.024909][T10127] dfc0: 2005ffe4 0000001c 00130e70 00000122 00000000 00006364 003d0f00 76bc10bc [ 971.030290][T10127] dfe0: 76bc0ec0 76bc0eb0 00018af8 00132ec0 [ 973.246751][T10153] FAULT_INJECTION: forcing a failure. [ 973.246751][T10153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 973.247270][T10153] CPU: 0 UID: 0 PID: 10153 Comm: syz.0.1229 Not tainted 6.12.0-rc3-syzkaller #0 [ 973.247449][T10153] Hardware name: ARM-Versatile Express [ 973.247568][T10153] Call trace: [ 973.247748][T10153] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 973.248057][T10153] r7:20000100 r6:dff29e30 r5:60000013 r4:8203d7c4 [ 973.248542][T10153] [<819997f4>] (show_stack) from [<819b7cc4>] (dump_stack_lvl+0x70/0x7c) [ 973.251988][T10153] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 973.254502][T10153] r5:00000000 r4:8274e844 [ 973.254683][T10153] [<819b7cd0>] (dump_stack) from [<808e54ec>] (should_fail_ex+0x18c/0x1dc) [ 973.255130][T10153] [<808e5360>] (should_fail_ex) from [<808e5550>] (should_fail+0x14/0x18) [ 973.255449][T10153] r6:dff29e30 r5:00000000 r4:dff29f38 [ 973.255657][T10153] [<808e553c>] (should_fail) from [<808e5570>] (should_fail_usercopy+0x1c/0x20) [ 973.255953][T10153] [<808e5554>] (should_fail_usercopy) from [<81486a18>] (copy_msghdr_from_user+0x50/0x130) [ 973.256269][T10153] [<814869c8>] (copy_msghdr_from_user) from [<81486b70>] (___sys_sendmsg+0x78/0xd0) [ 973.256603][T10153] r8:04000040 r7:00000000 r6:84cc2f00 r5:dff29f38 r4:dff29e74 [ 973.257054][T10153] [<81486af8>] (___sys_sendmsg) from [<814870ac>] (sys_sendmsg+0x78/0xbc) [ 973.257536][T10153] r10:00000128 r9:840fc800 r8:8020029c r7:04000040 r6:20000100 r5:84cc2f00 [ 973.257881][T10153] r4:00000000 [ 973.258444][T10153] [<81487034>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 973.259923][T10153] Exception stack(0xdff29fa8 to 0xdff29ff0) [ 973.264405][T10153] 9fa0: 00000000 00000000 00000004 20000100 04000040 00000000 [ 973.265059][T10153] 9fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76bc10bc [ 973.265440][T10153] 9fe0: 76bc0ec0 76bc0eb0 00018af8 00132ec0 [ 973.265931][T10153] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 975.279547][ T31] audit: type=1400 audit(1755.187:317): avc: denied { nlmsg_tty_audit } for pid=10164 comm="syz.0.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 976.166389][T10174] FAULT_INJECTION: forcing a failure. [ 976.166389][T10174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 976.167053][T10174] CPU: 0 UID: 0 PID: 10174 Comm: syz.1.1236 Not tainted 6.12.0-rc3-syzkaller #0 [ 976.167516][T10174] Hardware name: ARM-Versatile Express [ 976.167959][T10174] Call trace: [ 976.168162][T10174] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 976.168550][T10174] r7:b5403587 r6:00000000 r5:60000113 r4:8203d7c4 [ 976.168799][T10174] [<819997f4>] (show_stack) from [<819b7cc4>] (dump_stack_lvl+0x70/0x7c) [ 976.169237][T10174] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 976.169601][T10174] r5:00000000 r4:8274e844 [ 976.169890][T10174] [<819b7cd0>] (dump_stack) from [<808e54ec>] (should_fail_ex+0x18c/0x1dc) [ 976.170269][T10174] [<808e5360>] (should_fail_ex) from [<808e5550>] (should_fail+0x14/0x18) [ 976.170656][T10174] r6:00000000 r5:840fd020 r4:76b54bb8 [ 976.170907][T10174] [<808e553c>] (should_fail) from [<808e5570>] (should_fail_usercopy+0x1c/0x20) [ 976.171406][T10174] [<808e5554>] (should_fail_usercopy) from [<8020b824>] (setup_sigframe+0x124/0x1c4) [ 976.171810][T10174] [<8020b700>] (setup_sigframe) from [<8020bd8c>] (do_work_pending+0x3f4/0x4f8) [ 976.172345][T10174] r10:b5403587 r9:76b54bb8 r8:00000000 r7:840fd020 r6:76b54b38 r5:dff29fb0 [ 976.172821][T10174] r4:840fc800 [ 976.173055][T10174] [<8020b998>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 976.173416][T10174] Exception stack(0xdff29fb0 to 0xdff29ff8) [ 976.173813][T10174] 9fa0: fffffffc 20000080 00000010 00000000 [ 976.174207][T10174] 9fc0: 00000000 00000000 00130e70 0000011b 00000000 00006364 003d0f00 76b550bc [ 976.175173][T10174] 9fe0: 76b54ec0 76b54eb0 00018af8 00132ec0 60000010 00000003 [ 976.175502][T10174] r10:0000011b r9:840fc800 r8:8020029c r7:0000011b r6:00130e70 r5:00000000 [ 976.176196][T10174] r4:00000000 [ 976.607050][T10181] FAULT_INJECTION: forcing a failure. [ 976.607050][T10181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 976.607791][T10181] CPU: 0 UID: 0 PID: 10181 Comm: syz.0.1241 Not tainted 6.12.0-rc3-syzkaller #0 [ 976.608563][T10181] Hardware name: ARM-Versatile Express [ 976.609432][T10181] Call trace: [ 976.609800][T10181] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 976.610261][T10181] r7:dfff5eb8 r6:00000000 r5:60000013 r4:8203d7c4 [ 976.610547][T10181] [<819997f4>] (show_stack) from [<819b7cc4>] (dump_stack_lvl+0x70/0x7c) [ 976.610926][T10181] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 976.611325][T10181] r5:00000000 r4:8274e844 [ 976.611537][T10181] [<819b7cd0>] (dump_stack) from [<808e54ec>] (should_fail_ex+0x18c/0x1dc) [ 976.611924][T10181] [<808e5360>] (should_fail_ex) from [<808e5550>] (should_fail+0x14/0x18) [ 976.612323][T10181] r6:00000000 r5:00000001 r4:00000001 [ 976.612559][T10181] [<808e553c>] (should_fail) from [<808e5570>] (should_fail_usercopy+0x1c/0x20) [ 976.612942][T10181] [<808e5554>] (should_fail_usercopy) from [<80842ed4>] (kstrtouint_from_user+0x60/0x128) [ 976.613415][T10181] [<80842e74>] (kstrtouint_from_user) from [<805c4740>] (proc_fail_nth_write+0x40/0xe8) [ 976.613840][T10181] r8:dfff5f68 r7:84640c00 r6:00000001 r5:85107f00 r4:00000001 [ 976.614166][T10181] [<805c4700>] (proc_fail_nth_write) from [<805167cc>] (vfs_write+0xac/0x44c) [ 976.615001][T10181] r5:85107f00 r4:805c4700 [ 976.615300][T10181] [<80516720>] (vfs_write) from [<80516cf0>] (ksys_write+0x78/0xf8) [ 976.615787][T10181] r10:00000004 r9:84640c00 r8:8020029c r7:00000000 r6:00000002 r5:85107f00 [ 976.616222][T10181] r4:85107f03 [ 976.616462][T10181] [<80516c78>] (ksys_write) from [<80516d80>] (sys_write+0x10/0x14) [ 976.616837][T10181] r7:00000004 r6:00000004 r5:76bc0f30 r4:00000001 [ 976.617130][T10181] [<80516d70>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 976.617478][T10181] Exception stack(0xdfff5fa8 to 0xdfff5ff0) [ 976.617729][T10181] 5fa0: 00000001 76bc0f30 00000004 76bc0f30 00000001 00000000 [ 976.618100][T10181] 5fc0: 00000001 76bc0f30 00000004 00000004 00000000 00006364 003d0f00 76bc10bc [ 976.618480][T10181] 5fe0: 00000158 76bc0ed0 000d8408 00130e5c [ 976.815226][ T3749] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 977.020055][ T3749] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 977.020972][ T3749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 977.021453][ T3749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 977.022030][ T3749] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 977.022642][ T3749] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 977.022953][ T3749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.036709][ T3749] usb 2-1: config 0 descriptor?? [ 977.513128][ T3749] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 977.555430][ T3749] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 981.886987][ T8903] usb 2-1: USB disconnect, device number 55 [ 982.860264][ T31] audit: type=1400 audit(1762.767:318): avc: granted { setsecparam } for pid=10244 comm="syz.0.1257" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 984.508092][ T31] audit: type=1400 audit(1764.407:319): avc: denied { getopt } for pid=10254 comm="syz.0.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 985.286438][T10259] FAULT_INJECTION: forcing a failure. [ 985.286438][T10259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 985.287191][T10259] CPU: 1 UID: 0 PID: 10259 Comm: syz.0.1263 Not tainted 6.12.0-rc3-syzkaller #0 [ 985.287541][T10259] Hardware name: ARM-Versatile Express [ 985.287942][T10259] Call trace: [ 985.288122][T10259] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 985.288540][T10259] r7:b5403587 r6:76bc0cc0 r5:60000013 r4:8203d7c4 [ 985.288784][T10259] [<819997f4>] (show_stack) from [<819b7cc4>] (dump_stack_lvl+0x70/0x7c) [ 985.289157][T10259] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 985.289487][T10259] r5:00000000 r4:8274e844 [ 985.289637][T10259] [<819b7cd0>] (dump_stack) from [<808e54ec>] (should_fail_ex+0x18c/0x1dc) [ 985.289960][T10259] [<808e5360>] (should_fail_ex) from [<808e5550>] (should_fail+0x14/0x18) [ 985.290290][T10259] r6:76bc0cc0 r5:00000000 r4:dfe5df0c [ 985.291426][T10259] [<808e553c>] (should_fail) from [<808e5570>] (should_fail_usercopy+0x1c/0x20) [ 985.291775][T10259] [<808e5554>] (should_fail_usercopy) from [<8020b388>] (restore_vfp_context+0x3c/0xe0) [ 985.292122][T10259] [<8020b34c>] (restore_vfp_context) from [<8020b6ec>] (restore_sigframe+0x1fc/0x210) [ 985.292471][T10259] r6:76bc0cc0 r5:00000000 r4:dfe5dfb0 [ 985.292669][T10259] [<8020b4f0>] (restore_sigframe) from [<8020b968>] (sys_rt_sigreturn+0x44/0x74) [ 985.293027][T10259] r7:000000ad r6:00000003 r5:76bc0b58 r4:dfe5dfb0 [ 985.293265][T10259] [<8020b924>] (sys_rt_sigreturn) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 985.293585][T10259] Exception stack(0xdfe5dfa8 to 0xdfe5dff0) [ 985.293819][T10259] dfa0: 00000001 76bc0f20 00000001 76bc0f20 00000001 00000000 [ 985.294128][T10259] dfc0: 00000001 76bc0f20 00000003 00000004 00000000 00006364 003d0f00 76bc10bc [ 985.294911][T10259] dfe0: 00000158 76bc0ed0 000d8408 00130e5c [ 985.295334][T10259] r5:76bc0f20 r4:00000001 [ 988.395480][T10279] fuse: Unknown parameter '' [ 994.505085][ T91] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 994.657929][ T91] usb 1-1: device descriptor read/64, error -71 [ 994.915568][ T91] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 995.069672][ T91] usb 1-1: device descriptor read/64, error -71 [ 995.196716][ T91] usb usb1-port1: attempt power cycle [ 995.565048][ T91] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 995.592708][ T91] usb 1-1: device descriptor read/8, error -71 [ 995.835556][ T91] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 995.876960][ T91] usb 1-1: device descriptor read/8, error -71 [ 995.945452][T10304] raw_sendmsg: syz.1.1283 forgot to set AF_INET. Fix it! [ 995.991214][ T91] usb usb1-port1: unable to enumerate USB device [ 996.826355][ T31] audit: type=1400 audit(1776.727:320): avc: denied { create } for pid=10305 comm="syz.1.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 999.262556][ T3749] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 999.492237][ T3749] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 999.495408][ T3749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.495975][ T3749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.496268][ T3749] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 999.508453][ T3749] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 999.508914][ T3749] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 999.509296][ T3749] usb 2-1: Manufacturer: syz [ 999.526051][ T3749] usb 2-1: config 0 descriptor?? [ 1000.150477][ T3749] usbhid 2-1:0.0: can't add hid device: -71 [ 1000.151176][ T3749] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1000.156163][ T3749] usb 2-1: USB disconnect, device number 56 [ 1004.597023][T10345] FAULT_INJECTION: forcing a failure. [ 1004.597023][T10345] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.597972][T10345] CPU: 1 UID: 0 PID: 10345 Comm: syz.1.1294 Not tainted 6.12.0-rc3-syzkaller #0 [ 1004.598363][T10345] Hardware name: ARM-Versatile Express [ 1004.598594][T10345] Call trace: [ 1004.599078][T10345] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 1004.599529][T10345] r7:84640c00 r6:00000820 r5:60000013 r4:8203d7c4 [ 1004.599787][T10345] [<819997f4>] (show_stack) from [<819b7cc4>] (dump_stack_lvl+0x70/0x7c) [ 1004.600481][T10345] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 1004.600930][T10345] r5:00000000 r4:8271925c [ 1004.601283][T10345] [<819b7cd0>] (dump_stack) from [<808e54ec>] (should_fail_ex+0x18c/0x1dc) [ 1004.601732][T10345] [<808e5360>] (should_fail_ex) from [<804e82e0>] (should_failslab+0x6c/0x94) [ 1004.602231][T10345] r6:00000820 r5:ffffffff r4:82cac780 [ 1004.602457][T10345] [<804e8274>] (should_failslab) from [<804ccd10>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 1004.602988][T10345] [<804cccc0>] (kmem_cache_alloc_node_noprof) from [<81491490>] (__alloc_skb+0x138/0x160) [ 1004.603456][T10345] r10:00000008 r9:00000820 r8:00000820 r7:00000000 r6:82cac780 r5:ffffffff [ 1004.603768][T10345] r4:82606000 [ 1004.603954][T10345] [<81491358>] (__alloc_skb) from [<81853ca4>] (_sctp_make_chunk+0x44/0xd4) [ 1004.604599][T10345] r8:84bc1540 r7:00000001 r6:00000000 r5:847de800 r4:00000000 [ 1004.605153][T10345] [<81853c60>] (_sctp_make_chunk) from [<81853d50>] (sctp_make_control+0x1c/0x74) [ 1004.605547][T10345] r9:84108a00 r8:84bc1540 r7:00000004 r6:00000000 r5:00000820 r4:847de800 [ 1004.606027][T10345] [<81853d34>] (sctp_make_control) from [<8185465c>] (sctp_make_init+0x1dc/0x404) [ 1004.606592][T10345] r6:00000000 r5:00000820 r4:847de800 [ 1004.606916][T10345] [<81854480>] (sctp_make_init) from [<81848700>] (sctp_sf_do_prm_asoc+0x4c/0xdc) [ 1004.607325][T10345] r10:818742fc r9:847de800 r8:df979c3c r7:00000000 r6:00000001 r5:847de800 [ 1004.607656][T10345] r4:df979c3c [ 1004.607839][T10345] [<818486b4>] (sctp_sf_do_prm_asoc) from [<8184abec>] (sctp_do_sm+0xa8/0x1848) [ 1004.608240][T10345] r7:00000000 r6:00000004 r5:81c7fde4 r4:818486b4 [ 1004.608691][T10345] [<8184ab44>] (sctp_do_sm) from [<8186fadc>] (sctp_primitive_ASSOCIATE+0x3c/0x44) [ 1004.609228][T10345] r10:df979de0 r9:84bc1540 r8:84640c00 r7:00000003 r6:858bec00 r5:84108a00 [ 1004.609695][T10345] r4:847de800 [ 1004.609951][T10345] [<8186faa0>] (sctp_primitive_ASSOCIATE) from [<81863b00>] (sctp_sendmsg_to_asoc+0x234/0x684) [ 1004.610458][T10345] [<818638cc>] (sctp_sendmsg_to_asoc) from [<8186cae8>] (sctp_sendmsg+0x60c/0x910) [ 1004.610919][T10345] r10:00000000 r9:84bc1540 r8:00000001 r7:00000003 r6:858bec00 r5:df979e98 [ 1004.611302][T10345] r4:84108a00 [ 1004.611490][T10345] [<8186c4dc>] (sctp_sendmsg) from [<816b55b8>] (inet_sendmsg+0x40/0x4c) [ 1004.611867][T10345] r10:00000122 r9:84640c00 r8:00000003 r7:84cfa000 r6:84108a00 r5:00000003 [ 1004.612195][T10345] r4:df979e98 [ 1004.612386][T10345] [<816b5578>] (inet_sendmsg) from [<81483c28>] (__sock_sendmsg+0x44/0x78) [ 1004.612763][T10345] r7:84cfa000 r6:84cfa000 r5:df979e98 r4:00000000 [ 1004.613078][T10345] [<81483be4>] (__sock_sendmsg) from [<81486280>] (__sys_sendto+0x108/0x14c) [ 1004.613459][T10345] r7:84cfa000 r6:2005ffe4 r5:00000000 r4:00000000 [ 1004.613748][T10345] [<81486178>] (__sys_sendto) from [<814862e0>] (sys_sendto+0x1c/0x24) [ 1004.614135][T10345] r8:8020029c r7:00000122 r6:00130e70 r5:0000001c r4:2005ffe4 [ 1004.614643][T10345] [<814862c4>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1004.615339][T10345] Exception stack(0xdf979fa8 to 0xdf979ff0) [ 1004.615620][T10345] 9fa0: 2005ffe4 0000001c 00000003 20000440 00000003 00000000 [ 1004.616099][T10345] 9fc0: 2005ffe4 0000001c 00130e70 00000122 00000000 00006364 003d0f00 76b550bc [ 1004.616555][T10345] 9fe0: 76b54ec0 76b54eb0 00018af8 00132ec0 [ 1004.767241][T10349] FAULT_INJECTION: forcing a failure. [ 1004.767241][T10349] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.769051][T10349] CPU: 0 UID: 0 PID: 10349 Comm: syz.0.1297 Not tainted 6.12.0-rc3-syzkaller #0 [ 1004.769605][T10349] Hardware name: ARM-Versatile Express [ 1004.769847][T10349] Call trace: [ 1004.770057][T10349] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 1004.770446][T10349] r7:84b76000 r6:00400cc0 r5:60000013 r4:8203d7c4 [ 1004.770695][T10349] [<819997f4>] (show_stack) from [<819b7cc4>] (dump_stack_lvl+0x70/0x7c) [ 1004.771036][T10349] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 1004.771364][T10349] r5:00000000 r4:8271925c [ 1004.771545][T10349] [<819b7cd0>] (dump_stack) from [<808e54ec>] (should_fail_ex+0x18c/0x1dc) [ 1004.771877][T10349] [<808e5360>] (should_fail_ex) from [<804e82e0>] (should_failslab+0x6c/0x94) [ 1004.772226][T10349] r6:00400cc0 r5:ffffffff r4:82cac780 [ 1004.772428][T10349] [<804e8274>] (should_failslab) from [<804ccd10>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 1004.772785][T10349] [<804cccc0>] (kmem_cache_alloc_node_noprof) from [<81491490>] (__alloc_skb+0x138/0x160) [ 1004.773295][T10349] r10:df9c5ddc r9:00000000 r8:00400cc0 r7:00000000 r6:82cac780 r5:ffffffff [ 1004.773603][T10349] r4:82606000 [ 1004.773764][T10349] [<81491358>] (__alloc_skb) from [<81499664>] (alloc_skb_with_frags+0x44/0x1ec) [ 1004.774135][T10349] r8:802a6e90 r7:df9c5d7c r6:00000000 r5:00001000 r4:00000003 [ 1004.774916][T10349] [<81499620>] (alloc_skb_with_frags) from [<8148ad64>] (sock_alloc_send_pskb+0x1f4/0x228) [ 1004.775560][T10349] r10:df9c5ddc r9:00000000 r8:802a6e90 r7:df9c5d7c r6:84b76000 r5:7fffffff [ 1004.776019][T10349] r4:85875800 [ 1004.776206][T10349] [<8148ab70>] (sock_alloc_send_pskb) from [<81748744>] (unix_dgram_sendmsg+0x154/0x8b8) [ 1004.776604][T10349] r10:00000000 r9:85875800 r8:84b76000 r7:00000000 r6:00000000 r5:84cc3900 [ 1004.776909][T10349] r4:df9c5e68 [ 1004.777104][T10349] [<817485f0>] (unix_dgram_sendmsg) from [<81748eec>] (unix_seqpacket_sendmsg+0x44/0x84) [ 1004.777469][T10349] r10:81c4a340 r9:00000000 r8:00000000 r7:84cc3900 r6:84cc3900 r5:df9c5e68 [ 1004.777906][T10349] r4:00000000 [ 1004.778183][T10349] [<81748ea8>] (unix_seqpacket_sendmsg) from [<81483c28>] (__sock_sendmsg+0x44/0x78) [ 1004.778574][T10349] r5:df9c5e68 r4:00000000 [ 1004.778881][T10349] [<81483be4>] (__sock_sendmsg) from [<81483cfc>] (sock_write_iter+0xa0/0xfc) [ 1004.779256][T10349] r7:84cc3900 r6:85107a80 r5:df9c5f08 r4:df9c5ef0 [ 1004.779559][T10349] [<81483c5c>] (sock_write_iter) from [<80516ac8>] (vfs_write+0x3a8/0x44c) [ 1004.779998][T10349] r7:84b76000 r6:00000000 r5:85107a80 r4:00000000 [ 1004.780291][T10349] [<80516720>] (vfs_write) from [<80516d3c>] (ksys_write+0xc4/0xf8) [ 1004.780645][T10349] r10:00000004 r9:84b76000 r8:8020029c r7:00000000 r6:00000000 r5:85107a80 [ 1004.781030][T10349] r4:85107a81 [ 1004.781232][T10349] [<80516c78>] (ksys_write) from [<80516d80>] (sys_write+0x10/0x14) [ 1004.781587][T10349] r7:00000004 r6:00130e70 r5:00000000 r4:00000000 [ 1004.781861][T10349] [<80516d70>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1004.782357][T10349] Exception stack(0xdf9c5fa8 to 0xdf9c5ff0) [ 1004.782667][T10349] 5fa0: 00000000 00000000 00000003 00000000 00000000 00000000 [ 1004.783029][T10349] 5fc0: 00000000 00000000 00130e70 00000004 00000000 00006364 003d0f00 76bc10bc [ 1004.783372][T10349] 5fe0: 76bc0ec0 76bc0eb0 00018af8 00132ec0 [ 1004.958358][ T31] audit: type=1400 audit(1784.867:321): avc: denied { ioctl } for pid=10350 comm="syz.1.1298" path="socket:[15264]" dev="sockfs" ino=15264 ioctlcmd=0xaf02 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1005.550258][T10361] FAULT_INJECTION: forcing a failure. [ 1005.550258][T10361] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.550830][T10361] CPU: 0 UID: 0 PID: 10361 Comm: syz.1.1302 Not tainted 6.12.0-rc3-syzkaller #0 [ 1005.551125][T10361] Hardware name: ARM-Versatile Express [ 1005.551324][T10361] Call trace: [ 1005.551491][T10361] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 1005.552036][T10361] r7:84640c00 r6:00000820 r5:60000013 r4:8203d7c4 [ 1005.552282][T10361] [<819997f4>] (show_stack) from [<819b7cc4>] (dump_stack_lvl+0x70/0x7c) [ 1005.552618][T10361] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 1005.553090][T10361] r5:00000000 r4:8271925c [ 1005.553360][T10361] [<819b7cd0>] (dump_stack) from [<808e54ec>] (should_fail_ex+0x18c/0x1dc) [ 1005.553803][T10361] [<808e5360>] (should_fail_ex) from [<804e82e0>] (should_failslab+0x6c/0x94) [ 1005.554159][T10361] r6:00000820 r5:ffffffff r4:82cac780 [ 1005.554951][T10361] [<804e8274>] (should_failslab) from [<804ccd10>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 1005.555519][T10361] [<804cccc0>] (kmem_cache_alloc_node_noprof) from [<81491490>] (__alloc_skb+0x138/0x160) [ 1005.556004][T10361] r10:850af480 r9:00000820 r8:00000820 r7:00000000 r6:82cac780 r5:ffffffff [ 1005.556323][T10361] r4:82606000 [ 1005.556475][T10361] [<81491358>] (__alloc_skb) from [<81853ca4>] (_sctp_make_chunk+0x44/0xd4) [ 1005.556793][T10361] r8:82fcbb88 r7:00000082 r6:1c835255 r5:85276800 r4:00000000 [ 1005.557078][T10361] [<81853c60>] (_sctp_make_chunk) from [<81853d50>] (sctp_make_control+0x1c/0x74) [ 1005.557407][T10361] r9:82fcbb88 r8:82fcbb88 r7:00000000 r6:1c835255 r5:00000004 r4:85276800 [ 1005.557704][T10361] [<81853d34>] (sctp_make_control) from [<818589f4>] (sctp_make_strreset_resp+0x4c/0xb0) [ 1005.558125][T10361] r6:1c835255 r5:00000004 r4:85276800 [ 1005.558370][T10361] [<818589a8>] (sctp_make_strreset_resp) from [<81875228>] (sctp_process_strreset_outreq+0xf0/0x2d8) [ 1005.558712][T10361] r6:dfa61c68 r5:1c835255 r4:85276800 [ 1005.558922][T10361] [<81875138>] (sctp_process_strreset_outreq) from [<81847b44>] (sctp_sf_do_reconf+0x1dc/0x300) [ 1005.559249][T10361] r10:81874234 r9:82fcbb88 r8:82fcbb84 r7:0000000c r6:85276800 r5:00000000 [ 1005.559541][T10361] r4:dfa61cdc [ 1005.559686][T10361] [<81847968>] (sctp_sf_do_reconf) from [<8184abec>] (sctp_do_sm+0xa8/0x1848) [ 1005.560430][T10361] r9:85276800 r8:dfa61cdc r7:850afb40 r6:00000001 r5:81c7f97c r4:81847968 [ 1005.561026][T10361] [<8184ab44>] (sctp_do_sm) from [<8184f89c>] (sctp_assoc_bh_rcv+0x108/0x204) [ 1005.561551][T10361] r10:00000082 r9:846c8d00 r8:85b29000 r7:00000003 r6:85276800 r5:85276820 [ 1005.561996][T10361] r4:850afb40 [ 1005.562147][T10361] [<8184f794>] (sctp_assoc_bh_rcv) from [<8185aa20>] (sctp_inq_push+0x78/0x88) [ 1005.562492][T10361] r10:821f7c14 r9:85276814 r8:85044900 r7:85b29000 r6:85276814 r5:85276814 [ 1005.562799][T10361] r4:850afb40 [ 1005.562992][T10361] [<8185a9a8>] (sctp_inq_push) from [<818716f4>] (sctp_backlog_rcv+0x54/0x2ec) [ 1005.563388][T10361] r7:85b29000 r6:8489a300 r5:85276800 r4:8489a300 [ 1005.563671][T10361] [<818716a0>] (sctp_backlog_rcv) from [<8148bdd0>] (__release_sock+0x64/0xf8) [ 1005.564097][T10361] r9:8489a3ec r8:827fbad1 r7:00000000 r6:8489a300 r5:85044900 r4:00000000 [ 1005.564824][T10361] [<8148bd6c>] (__release_sock) from [<8148bedc>] (release_sock+0x30/0xbc) [ 1005.565263][T10361] r10:0001000f r9:b5403587 r8:84640c00 r7:0001000f r6:85be0000 r5:8489a3ec [ 1005.565538][T10361] r4:8489a300 r3:85044900 [ 1005.565767][T10361] [<8148beac>] (release_sock) from [<8186a3ec>] (sctp_setsockopt+0x590/0x2680) [ 1005.566091][T10361] r5:00000000 r4:8489a300 [ 1005.566257][T10361] [<81869e60>] (sctp_setsockopt) from [<81487ab8>] (sock_common_setsockopt+0x38/0x40) [ 1005.566573][T10361] r10:00000126 r9:84640c00 r8:8020029c r7:00000000 r6:84cc2500 r5:00000000 [ 1005.566874][T10361] r4:81869e5c [ 1005.567006][T10361] [<81487a84>] (sock_common_setsockopt) from [<81483114>] (do_sock_setsockopt+0xb0/0x17c) [ 1005.567312][T10361] r4:81487a80 [ 1005.567457][T10361] [<81483064>] (do_sock_setsockopt) from [<814865d8>] (sys_setsockopt+0x78/0xbc) [ 1005.567780][T10361] r6:84cc2500 r5:00000077 r4:00000084 [ 1005.568025][T10361] [<81486560>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1005.568317][T10361] Exception stack(0xdfa61fa8 to 0xdfa61ff0) [ 1005.568540][T10361] 1fa0: 0001000f 00000000 00000003 00000084 00000077 20000040 [ 1005.568889][T10361] 1fc0: 0001000f 00000000 00130e70 00000126 00000000 00006364 003d0f00 76b550bc [ 1005.569189][T10361] 1fe0: 76b54ec0 76b54eb0 00018af8 00132ec0 [ 1005.569397][T10361] r7:00000126 r6:00130e70 r5:00000000 r4:0001000f [ 1008.152413][T10387] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10387 comm=syz.0.1312 [ 1008.172271][ T31] audit: type=1400 audit(1788.077:322): avc: denied { ioctl } for pid=10386 comm="syz.0.1312" path="socket:[15892]" dev="sockfs" ino=15892 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1008.225769][T10387] ucma_write: process 1254 (syz.0.1312) changed security contexts after opening file descriptor, this is not allowed. [ 1010.240730][T10414] FAULT_INJECTION: forcing a failure. [ 1010.240730][T10414] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.241807][T10414] CPU: 0 UID: 0 PID: 10414 Comm: syz.1.1318 Not tainted 6.12.0-rc3-syzkaller #0 [ 1010.242266][T10414] Hardware name: ARM-Versatile Express [ 1010.242596][T10414] Call trace: [ 1010.242882][T10414] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 1010.243438][T10414] r7:840fd400 r6:00400dc0 r5:60000013 r4:8203d7c4 [ 1010.243702][T10414] [<819997f4>] (show_stack) from [<819b7cc4>] (dump_stack_lvl+0x70/0x7c) [ 1010.244070][T10414] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 1010.246434][T10414] r5:00000000 r4:8271925c [ 1010.246713][T10414] [<819b7cd0>] (dump_stack) from [<808e54ec>] (should_fail_ex+0x18c/0x1dc) [ 1010.247201][T10414] [<808e5360>] (should_fail_ex) from [<804e82e0>] (should_failslab+0x6c/0x94) [ 1010.247743][T10414] r6:00400dc0 r5:84af9400 r4:82c020c0 [ 1010.247993][T10414] [<804e8274>] (should_failslab) from [<804cc728>] (__kmalloc_cache_noprof+0x4c/0x344) [ 1010.248648][T10414] [<804cc6dc>] (__kmalloc_cache_noprof) from [<806cb0f8>] (fuse_file_alloc+0x30/0xec) [ 1010.249269][T10414] r10:00000000 r9:00000010 r8:85b28800 r7:00000000 r6:822376bc r5:84af9400 [ 1010.249646][T10414] r4:84af9400 [ 1010.249966][T10414] [<806cb0c8>] (fuse_file_alloc) from [<806cb290>] (fuse_file_open+0xb8/0x230) [ 1010.250385][T10414] r9:00000010 r8:85b28800 r7:00000000 r6:00000000 r5:00000001 r4:84af9400 [ 1010.250762][T10414] [<806cb1d8>] (fuse_file_open) from [<806cb564>] (fuse_open+0x84/0x2fc) [ 1010.251212][T10414] r10:00000000 r9:84af9400 r8:00000000 r7:83496180 r6:00000000 r5:00000000 [ 1010.251569][T10414] r4:833da280 [ 1010.251764][T10414] [<806cb4e0>] (fuse_open) from [<80510cb0>] (do_dentry_open+0x144/0x4c0) [ 1010.252935][T10414] r10:00000000 r9:83496180 r8:834961a8 r7:806cb4e0 r6:833da280 r5:00000000 [ 1010.253738][T10414] r4:83496180 [ 1010.254020][T10414] [<80510b6c>] (do_dentry_open) from [<80512b24>] (vfs_open+0x2c/0xec) [ 1010.255050][T10414] r9:83496180 r8:dfcf5e58 r7:00000001 r6:834961a8 r5:8271f3f4 r4:83496180 [ 1010.255633][T10414] [<80512af8>] (vfs_open) from [<8052b248>] (path_openat+0x770/0x11a4) [ 1010.256115][T10414] r6:dfcf5f20 r5:8271f3f4 r4:00040280 [ 1010.256637][T10414] [<8052aad8>] (path_openat) from [<8052bd18>] (do_filp_open+0x9c/0x138) [ 1010.257085][T10414] r10:00000005 r9:840fd400 r8:00000001 r7:dfcf5e58 r6:dfcf5f20 r5:840fd400 [ 1010.257494][T10414] r4:82e4b000 [ 1010.257658][T10414] [<8052bc7c>] (do_filp_open) from [<80512fd0>] (do_sys_openat2+0xbc/0xe4) [ 1010.258346][T10414] r8:8020029c r7:ffffff9c r6:00000008 r5:dfcf5f58 r4:82e4b000 [ 1010.259119][T10414] [<80512f14>] (do_sys_openat2) from [<80513304>] (sys_open+0x94/0xd0) [ 1010.259570][T10414] r7:00000005 r6:00130e70 r5:00000000 r4:20000000 [ 1010.259915][T10414] [<80513270>] (sys_open) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1010.260528][T10414] Exception stack(0xdfcf5fa8 to 0xdfcf5ff0) [ 1010.260998][T10414] 5fa0: 00000000 00000000 20000000 000c0280 00000000 00000000 [ 1010.261476][T10414] 5fc0: 00000000 00000000 00130e70 00000005 00000000 00006364 003d0f00 76b340bc [ 1010.261895][T10414] 5fe0: 76b33ec0 76b33eb0 00018af8 00132ec0 [ 1010.262258][T10414] r5:00000000 r4:00000000 [ 1011.016513][T10430] FAULT_INJECTION: forcing a failure. [ 1011.016513][T10430] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.017262][T10430] CPU: 0 UID: 0 PID: 10430 Comm: syz.0.1325 Not tainted 6.12.0-rc3-syzkaller #0 [ 1011.017701][T10430] Hardware name: ARM-Versatile Express [ 1011.017993][T10430] Call trace: [ 1011.018233][T10430] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 1011.018698][T10430] r7:00000c40 r6:85121f28 r5:60000013 r4:8203d7c4 [ 1011.019011][T10430] [<819997f4>] (show_stack) from [<819b7cc4>] (dump_stack_lvl+0x70/0x7c) [ 1011.019401][T10430] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 1011.020043][T10430] r5:00000000 r4:8271925c [ 1011.020259][T10430] [<819b7cd0>] (dump_stack) from [<808e54ec>] (should_fail_ex+0x18c/0x1dc) [ 1011.021057][T10430] [<808e5360>] (should_fail_ex) from [<804e82e0>] (should_failslab+0x6c/0x94) [ 1011.021708][T10430] r6:85121f28 r5:00001000 r4:82c016c0 [ 1011.021951][T10430] [<804e8274>] (should_failslab) from [<804cd700>] (__kmalloc_noprof+0x9c/0x458) [ 1011.022355][T10430] [<804cd664>] (__kmalloc_noprof) from [<80751010>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 1011.022794][T10430] r10:84b71800 r9:83e81400 r8:00000000 r7:832684c8 r6:85121f28 r5:00001000 [ 1011.023124][T10430] r4:00000000 [ 1011.023315][T10430] [<80750fd4>] (tomoyo_realpath_from_path) from [<8074d154>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1011.023773][T10430] r10:84b71800 r9:00000000 r8:00000003 r7:00005421 r6:00000004 r5:81ad1868 [ 1011.024704][T10430] r4:85121f28 r3:824ba340 [ 1011.025159][T10430] [<8074d088>] (tomoyo_path_number_perm) from [<80751a20>] (tomoyo_file_ioctl+0x1c/0x20) [ 1011.025716][T10430] r9:85121f00 r8:00000003 r7:20000380 r6:20000380 r5:00005421 r4:85121f00 [ 1011.026142][T10430] [<80751a04>] (tomoyo_file_ioctl) from [<8070006c>] (security_file_ioctl+0x64/0x1e4) [ 1011.026632][T10430] [<80700008>] (security_file_ioctl) from [<8052f6c8>] (sys_ioctl+0x50/0xda8) [ 1011.027204][T10430] r7:20000380 r6:85121f01 r5:00000000 r4:00005421 [ 1011.027571][T10430] [<8052f678>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1011.028024][T10430] Exception stack(0xdfe25fa8 to 0xdfe25ff0) [ 1011.028384][T10430] 5fa0: 00000000 00000000 00000003 00005421 20000380 00000000 [ 1011.028870][T10430] 5fc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76bc10bc [ 1011.029403][T10430] 5fe0: 76bc0ec0 76bc0eb0 00018af8 00132ec0 [ 1011.029787][T10430] r10:00000036 r9:84b71800 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 1011.030237][T10430] r4:00000000 [ 1011.060208][T10430] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1011.280939][ T31] audit: type=1400 audit(1791.187:323): avc: denied { connect } for pid=10418 comm="syz.1.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1012.256310][ T31] audit: type=1400 audit(1792.167:324): avc: denied { create } for pid=10446 comm="syz.0.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1012.855394][ T31] audit: type=1400 audit(1792.757:325): avc: denied { accept } for pid=10446 comm="syz.0.1333" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1013.238190][T10455] FAULT_INJECTION: forcing a failure. [ 1013.238190][T10455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1013.238845][T10455] CPU: 0 UID: 0 PID: 10455 Comm: syz.0.1335 Not tainted 6.12.0-rc3-syzkaller #0 [ 1013.239175][T10455] Hardware name: ARM-Versatile Express [ 1013.239314][T10455] Call trace: [ 1013.239423][T10455] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 1013.239702][T10455] r7:00000000 r6:00000000 r5:60000013 r4:8203d7c4 [ 1013.239895][T10455] [<819997f4>] (show_stack) from [<819b7cc4>] (dump_stack_lvl+0x70/0x7c) [ 1013.240106][T10455] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 1013.240308][T10455] r5:00000000 r4:8274e844 [ 1013.240419][T10455] [<819b7cd0>] (dump_stack) from [<808e54ec>] (should_fail_ex+0x18c/0x1dc) [ 1013.240635][T10455] [<808e5360>] (should_fail_ex) from [<808e5550>] (should_fail+0x14/0x18) [ 1013.240793][T10455] r6:00000000 r5:dffcdf68 r4:00000002 [ 1013.240922][T10455] [<808e553c>] (should_fail) from [<808e5570>] (should_fail_usercopy+0x1c/0x20) [ 1013.241179][T10455] [<808e5554>] (should_fail_usercopy) from [<8054e7d4>] (simple_read_from_buffer+0x8c/0x134) [ 1013.241409][T10455] [<8054e748>] (simple_read_from_buffer) from [<805c3234>] (proc_fail_nth_read+0xb8/0x100) [ 1013.241641][T10455] r10:00000001 r9:805c317c r8:00000002 r7:dffcdf68 r6:0000000f r5:76bc0f30 [ 1013.241801][T10455] r4:840fc800 r3:dffcde9f [ 1013.241896][T10455] [<805c317c>] (proc_fail_nth_read) from [<80515f34>] (vfs_read+0x98/0x324) [ 1013.242222][T10455] r8:76bc0f30 r7:dffcdf68 r6:840fc800 r5:0000000f r4:851210c0 [ 1013.242486][T10455] [<80515e9c>] (vfs_read) from [<80516be4>] (ksys_read+0x78/0xf8) [ 1013.242799][T10455] r10:00000003 r9:840fc800 r8:8020029c r7:00000000 r6:00000000 r5:851210c0 [ 1013.243087][T10455] r4:851210c3 [ 1013.243260][T10455] [<80516b6c>] (ksys_read) from [<80516c74>] (sys_read+0x10/0x14) [ 1013.243577][T10455] r7:00000003 r6:00000007 r5:76bc0f30 r4:0000000f [ 1013.243824][T10455] [<80516c64>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1013.244117][T10455] Exception stack(0xdffcdfa8 to 0xdffcdff0) [ 1013.244537][T10455] dfa0: 0000000f 76bc0f30 00000007 76bc0f30 0000000f 00000000 [ 1013.244919][T10455] dfc0: 0000000f 76bc0f30 00000007 00000003 00000000 00006364 003d0f00 76bc10bc [ 1013.245326][T10455] dfe0: 00000158 76bc0ed0 000d8408 00130d94 [ 1015.255434][T10478] fuse: Bad value for 'group_id' [ 1015.255679][T10478] fuse: Bad value for 'group_id' [ 1016.001031][T10481] netlink: 'syz.0.1348': attribute type 27 has an invalid length. [ 1016.117716][ T31] audit: type=1400 audit(1796.027:326): avc: denied { read } for pid=10479 comm="syz.1.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1016.656808][ T31] audit: type=1400 audit(1796.567:327): avc: denied { getopt } for pid=10479 comm="syz.1.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1017.161999][T10481] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.162604][T10481] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.162982][T10481] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.163529][T10481] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.208475][T10481] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1017.209115][T10481] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1017.391734][T10483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.406813][T10483] dummy0: left promiscuous mode [ 1017.616674][T10483] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1017.617260][T10483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1017.620947][T10483] veth1_vlan: left promiscuous mode [ 1017.628508][T10483] veth0_vlan: left promiscuous mode [ 1017.629891][T10483] veth0_vlan: entered promiscuous mode [ 1017.632490][T10483] veth1_vlan: entered promiscuous mode [ 1017.647539][T10483] veth1_macvtap: left promiscuous mode [ 1017.653885][T10483] veth0_macvtap: left promiscuous mode [ 1017.658986][T10483] veth0_macvtap: entered promiscuous mode [ 1017.660373][T10483] veth1_macvtap: entered promiscuous mode [ 1017.662059][T10483] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.663506][T10483] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.663926][T10483] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.668954][T10483] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.747198][T10483] dummy0: entered promiscuous mode [ 1017.777655][ T8572] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1018.185095][ T3749] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1018.601200][ T31] audit: type=1400 audit(1798.507:328): avc: denied { accept } for pid=10491 comm="syz.0.1351" lport=42931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1018.646123][ T3175] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1018.968400][T10495] FAULT_INJECTION: forcing a failure. [ 1018.968400][T10495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.968632][T10495] CPU: 0 UID: 0 PID: 10495 Comm: syz.0.1353 Not tainted 6.12.0-rc3-syzkaller #0 [ 1018.968697][T10495] Hardware name: ARM-Versatile Express [ 1018.968726][T10495] Call trace: [ 1018.968782][T10495] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 1018.968906][T10495] r7:b5403587 r6:20000040 r5:60000013 r4:8203d7c4 [ 1018.968933][T10495] [<819997f4>] (show_stack) from [<819b7cc4>] (dump_stack_lvl+0x70/0x7c) [ 1018.969046][T10495] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 1018.969116][T10495] r5:00000000 r4:8274e844 [ 1018.969152][T10495] [<819b7cd0>] (dump_stack) from [<808e54ec>] (should_fail_ex+0x18c/0x1dc) [ 1018.969218][T10495] [<808e5360>] (should_fail_ex) from [<808e5550>] (should_fail+0x14/0x18) [ 1018.969280][T10495] r6:20000040 r5:b5003500 r4:844b6400 [ 1018.969300][T10495] [<808e553c>] (should_fail) from [<808e5570>] (should_fail_usercopy+0x1c/0x20) [ 1018.969344][T10495] [<808e5554>] (should_fail_usercopy) from [<8186e2fc>] (sctp_getsockopt+0x4ec/0x1c90) [ 1018.969403][T10495] [<8186de10>] (sctp_getsockopt) from [<81487a04>] (sock_common_getsockopt+0x28/0x30) [ 1018.969482][T10495] r10:00000127 r9:200000c0 r8:00000000 r7:84cc4a00 r6:0000001e r5:00000084 [ 1018.969511][T10495] r4:8186de10 [ 1018.969533][T10495] [<814879dc>] (sock_common_getsockopt) from [<814847f4>] (do_sock_getsockopt+0x10c/0x298) [ 1018.969596][T10495] r4:814879dc [ 1018.969617][T10495] [<814846e8>] (do_sock_getsockopt) from [<81486780>] (sys_getsockopt+0x90/0xd4) [ 1018.969691][T10495] r9:84642400 r8:84cc4a00 r7:20000040 r6:0000001e r5:00000084 r4:00000000 [ 1018.969714][T10495] [<814866f0>] (sys_getsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1018.969772][T10495] Exception stack(0xe0571fa8 to 0xe0571ff0) [ 1018.969819][T10495] 1fa0: 200000c0 00000000 00000003 00000084 0000001e 20000040 [ 1018.969865][T10495] 1fc0: 200000c0 00000000 00130e70 00000127 00000000 00006364 003d0f00 76bc10bc [ 1018.969905][T10495] 1fe0: 76bc0ec0 76bc0eb0 00018af8 00132ec0 [ 1018.969947][T10495] r8:8020029c r7:00000127 r6:00130e70 r5:00000000 r4:200000c0 [ 1019.697252][ T3175] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1019.698109][ T3175] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1019.985349][ T8802] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1021.346343][T10509] FAULT_INJECTION: forcing a failure. [ 1021.346343][T10509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1021.346786][T10509] CPU: 1 UID: 0 PID: 10509 Comm: syz.0.1358 Not tainted 6.12.0-rc3-syzkaller #0 [ 1021.347000][T10509] Hardware name: ARM-Versatile Express [ 1021.347128][T10509] Call trace: [ 1021.347239][T10509] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 1021.347501][T10509] r7:00000000 r6:00000000 r5:60000013 r4:8203d7c4 [ 1021.347688][T10509] [<819997f4>] (show_stack) from [<819b7cc4>] (dump_stack_lvl+0x70/0x7c) [ 1021.347945][T10509] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 1021.348134][T10509] r5:00000000 r4:8274e844 [ 1021.348238][T10509] [<819b7cd0>] (dump_stack) from [<808e54ec>] (should_fail_ex+0x18c/0x1dc) [ 1021.348451][T10509] [<808e5360>] (should_fail_ex) from [<808e5550>] (should_fail+0x14/0x18) [ 1021.348632][T10509] r6:00000000 r5:df9c5f68 r4:00000002 [ 1021.348744][T10509] [<808e553c>] (should_fail) from [<808e5570>] (should_fail_usercopy+0x1c/0x20) [ 1021.348947][T10509] [<808e5554>] (should_fail_usercopy) from [<8054e7d4>] (simple_read_from_buffer+0x8c/0x134) [ 1021.349223][T10509] [<8054e748>] (simple_read_from_buffer) from [<805c3234>] (proc_fail_nth_read+0xb8/0x100) [ 1021.349424][T10509] r10:00000001 r9:805c317c r8:00000002 r7:df9c5f68 r6:0000000f r5:76bc0f30 [ 1021.349576][T10509] r4:83e93c00 r3:df9c5e9f [ 1021.349669][T10509] [<805c317c>] (proc_fail_nth_read) from [<80515f34>] (vfs_read+0x98/0x324) [ 1021.349962][T10509] r8:76bc0f30 r7:df9c5f68 r6:83e93c00 r5:0000000f r4:850edcc0 [ 1021.350100][T10509] [<80515e9c>] (vfs_read) from [<80516be4>] (ksys_read+0x78/0xf8) [ 1021.350267][T10509] r10:00000003 r9:83e93c00 r8:8020029c r7:00000000 r6:00000000 r5:850edcc0 [ 1021.350410][T10509] r4:850edcc3 [ 1021.350491][T10509] [<80516b6c>] (ksys_read) from [<80516c74>] (sys_read+0x10/0x14) [ 1021.350668][T10509] r7:00000003 r6:00000005 r5:76bc0f30 r4:0000000f [ 1021.350845][T10509] [<80516c64>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1021.351028][T10509] Exception stack(0xdf9c5fa8 to 0xdf9c5ff0) [ 1021.351163][T10509] 5fa0: 0000000f 76bc0f30 00000005 76bc0f30 0000000f 00000000 [ 1021.351315][T10509] 5fc0: 0000000f 76bc0f30 00000005 00000003 00000000 00006364 003d0f00 76bc10bc [ 1021.351474][T10509] 5fe0: 00000158 76bc0ed0 000d8408 00130d94 [ 1021.915289][ T8808] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1022.125181][ T8808] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1022.126488][ T8808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1022.134950][ T8808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1022.135256][ T8808] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1022.135590][ T8808] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1022.135803][ T8808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.165975][ T8808] usb 2-1: config 0 descriptor?? [ 1022.715798][ T8808] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 1022.738027][ T8808] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1023.455752][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1030.966505][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1032.940427][ T8802] usb 2-1: USB disconnect, device number 57 [ 1034.604935][ T6810] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1034.820012][ T6810] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1034.820734][ T6810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1034.842192][ T6810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1034.843052][ T6810] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1034.843754][ T6810] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1034.844124][ T6810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.858620][ T6810] usb 1-1: config 0 descriptor?? [ 1035.308520][ T6810] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 1035.313746][ T6810] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1039.298268][ T31] audit: type=1400 audit(1819.207:329): avc: denied { wake_alarm } for pid=10610 comm="syz.1.1385" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1039.632402][ T31] audit: type=1400 audit(1819.537:330): avc: denied { ioctl } for pid=10615 comm="syz.1.1386" path="socket:[16360]" dev="sockfs" ino=16360 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1040.482909][ T31] audit: type=1400 audit(1820.377:331): avc: denied { create } for pid=10628 comm="syz.1.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1040.666308][ T31] audit: type=1400 audit(1820.577:332): avc: denied { ioctl } for pid=10633 comm="syz.0.1390" path="socket:[16723]" dev="sockfs" ino=16723 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1040.671666][ T31] audit: type=1400 audit(1820.577:333): avc: denied { read } for pid=10633 comm="syz.0.1390" path="socket:[16724]" dev="sockfs" ino=16724 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1041.155152][ T8812] usb 1-1: reset high-speed USB device number 52 using dummy_hcd [ 1043.485392][ T8830] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1043.695869][ T8830] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1043.697356][ T8830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1043.699092][ T8830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1043.700346][ T8830] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1043.701721][ T8830] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1043.702809][ T8830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.729828][ T8830] usb 2-1: config 0 descriptor?? [ 1044.192578][ T8830] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 1044.225924][ T8830] plantronics 0003:047F:FFFF.0011: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1045.695040][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1046.947411][ T31] audit: type=1400 audit(1826.857:334): avc: denied { lock } for pid=10660 comm="syz.0.1394" path="/dev/full" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1047.388083][ T8572] usb 1-1: USB disconnect, device number 52 [ 1052.890117][T10691] FAULT_INJECTION: forcing a failure. [ 1052.890117][T10691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.890818][T10691] CPU: 0 UID: 0 PID: 10691 Comm: syz.0.1401 Not tainted 6.12.0-rc3-syzkaller #0 [ 1052.891176][T10691] Hardware name: ARM-Versatile Express [ 1052.891485][T10691] Call trace: [ 1052.891724][T10691] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 1052.892173][T10691] r7:00000000 r6:8223783c r5:60000013 r4:8203d7c4 [ 1052.892474][T10691] [<819997f4>] (show_stack) from [<819b7cc4>] (dump_stack_lvl+0x70/0x7c) [ 1052.893607][T10691] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 1052.894021][T10691] r5:00000000 r4:8274e844 [ 1052.894545][T10691] [<819b7cd0>] (dump_stack) from [<808e54ec>] (should_fail_ex+0x18c/0x1dc) [ 1052.895101][T10691] [<808e5360>] (should_fail_ex) from [<808e5550>] (should_fail+0x14/0x18) [ 1052.895514][T10691] r6:8223783c r5:00000000 r4:82e49000 [ 1052.895760][T10691] [<808e553c>] (should_fail) from [<808e5570>] (should_fail_usercopy+0x1c/0x20) [ 1052.896159][T10691] [<808e5554>] (should_fail_usercopy) from [<808eb5bc>] (strncpy_from_user+0x20/0x194) [ 1052.896600][T10691] [<808eb59c>] (strncpy_from_user) from [<805250a8>] (getname_flags.part.0+0x44/0x18c) [ 1052.897129][T10691] r10:00000009 r9:83628000 r8:8020029c r7:00000000 r6:8223783c r5:00000000 [ 1052.897487][T10691] r4:82e49000 [ 1052.897657][T10691] [<80525064>] (getname_flags.part.0) from [<8052a148>] (getname_flags+0x3c/0x50) [ 1052.898047][T10691] r9:83628000 r8:8020029c r7:00000009 r6:00130e70 r5:00000000 r4:00000000 [ 1052.898357][T10691] [<8052a10c>] (getname_flags) from [<8052cb54>] (sys_link+0x2c/0x50) [ 1052.898705][T10691] r5:00000000 r4:82e4d000 [ 1052.898946][T10691] [<8052cb28>] (sys_link) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1052.899298][T10691] Exception stack(0xdfa21fa8 to 0xdfa21ff0) [ 1052.899578][T10691] 1fa0: 00000000 00000000 20000280 00000000 00000000 00000000 [ 1052.899944][T10691] 1fc0: 00000000 00000000 00130e70 00000009 00000000 00006364 003d0f00 76bc10bc [ 1052.900281][T10691] 1fe0: 76bc0ec0 76bc0eb0 00018af8 00132ec0 [ 1052.900535][T10691] r5:00000000 r4:00000000 [ 1056.169203][T10701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10701 comm=syz.0.1403 [ 1057.972902][ T8812] usb 2-1: USB disconnect, device number 58 [ 1058.101662][T10723] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10723 comm=syz.1.1406 [ 1070.296226][ T8572] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1070.469917][ T8572] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1070.470543][ T8572] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.470989][ T8572] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.471347][ T8572] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1070.501197][ T8572] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1070.503354][ T8572] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1070.505279][ T8572] usb 2-1: Manufacturer: syz [ 1070.515858][ T8572] usb 2-1: config 0 descriptor?? [ 1071.026744][ T8572] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 1071.027946][ T8572] appleir 0003:05AC:8243.0012: No inputs registered, leaving [ 1071.038234][ T8572] appleir 0003:05AC:8243.0012: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1072.208232][ T3175] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.287219][ T3175] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.358531][ T3175] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.436458][ T3175] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.678836][T10774] FAULT_INJECTION: forcing a failure. [ 1072.678836][T10774] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.679631][T10774] CPU: 0 UID: 0 PID: 10774 Comm: syz.1.1411 Not tainted 6.12.0-rc3-syzkaller #0 [ 1072.680052][T10774] Hardware name: ARM-Versatile Express [ 1072.680267][T10774] Call trace: [ 1072.680469][T10774] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 1072.680825][T10774] r7:82e44800 r6:00000cc0 r5:60000013 r4:8203d7c4 [ 1072.681120][T10774] [<819997f4>] (show_stack) from [<819b7cc4>] (dump_stack_lvl+0x70/0x7c) [ 1072.681443][T10774] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 1072.681761][T10774] r5:00000000 r4:8271925c [ 1072.681947][T10774] [<819b7cd0>] (dump_stack) from [<808e54ec>] (should_fail_ex+0x18c/0x1dc) [ 1072.682270][T10774] [<808e5360>] (should_fail_ex) from [<804e82e0>] (should_failslab+0x6c/0x94) [ 1072.682597][T10774] r6:00000cc0 r5:20000300 r4:82ca8b40 [ 1072.682792][T10774] [<804e8274>] (should_failslab) from [<804cd37c>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 1072.683136][T10774] [<804cd330>] (kmem_cache_alloc_noprof) from [<8052508c>] (getname_flags.part.0+0x28/0x18c) [ 1072.683526][T10774] r10:00000142 r9:82e44800 r8:8020029c r7:00000000 r6:8223783c r5:20000300 [ 1072.683826][T10774] r4:20000300 [ 1072.683985][T10774] [<80525064>] (getname_flags.part.0) from [<8052a288>] (getname+0x38/0x4c) [ 1072.684629][T10774] r9:82e44800 r8:8020029c r7:ffffff9c r6:00000000 r5:dff0df58 r4:20000300 [ 1072.685076][T10774] [<8052a250>] (getname) from [<80512f94>] (do_sys_openat2+0x80/0xe4) [ 1072.686089][T10774] r5:dff0df58 r4:20000300 [ 1072.686328][T10774] [<80512f14>] (do_sys_openat2) from [<805133d8>] (sys_openat+0x98/0xd4) [ 1072.686725][T10774] r7:00000142 r6:00130e70 r5:20000300 r4:ffffff9c [ 1072.687061][T10774] [<80513340>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1072.687430][T10774] Exception stack(0xdff0dfa8 to 0xdff0dff0) [ 1072.687714][T10774] dfa0: 00000000 00000000 ffffff9c 20000300 00000000 00000000 [ 1072.688173][T10774] dfc0: 00000000 00000000 00130e70 00000142 00000000 00006364 003d0f00 76b550bc [ 1072.688542][T10774] dfe0: 76b54ec0 76b54eb0 00018af8 00132ec0 [ 1072.688819][T10774] r5:00000000 r4:00000000 [ 1072.772289][ T3175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1072.815163][ T3175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1072.818133][ T3175] bond0 (unregistering): Released all slaves [ 1072.967883][ T3175] hsr_slave_0: left promiscuous mode [ 1072.970249][ T3175] hsr_slave_1: left promiscuous mode [ 1072.985906][ T3175] dummy0: left promiscuous mode [ 1072.986385][ T3175] veth1_macvtap: left promiscuous mode [ 1072.986649][ T3175] veth0_macvtap: left promiscuous mode [ 1072.987128][ T3175] veth1_vlan: left promiscuous mode [ 1072.987419][ T3175] veth0_vlan: left promiscuous mode [ 1073.104098][ T8830] usb 2-1: USB disconnect, device number 59 [ 1073.701123][T10788] fuse: Unknown parameter 'grou±Êu›Ü„‚ËIp_id' [ 1079.133658][T10754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.157332][T10754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1081.905582][T10754] hsr_slave_0: entered promiscuous mode [ 1081.917209][T10754] hsr_slave_1: entered promiscuous mode [ 1083.060359][T10754] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1083.081553][T10754] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1083.100575][T10754] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1083.121092][T10754] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1084.405782][ T8830] atkbd serio7: keyboard reset failed on [ 1084.415845][T10754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1088.277638][T11221] FAULT_INJECTION: forcing a failure. [ 1088.277638][T11221] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.278372][T11221] CPU: 1 UID: 0 PID: 11221 Comm: syz.1.1424 Not tainted 6.12.0-rc3-syzkaller #0 [ 1088.278846][T11221] Hardware name: ARM-Versatile Express [ 1088.279125][T11221] Call trace: [ 1088.279314][T11221] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 1088.279772][T11221] r7:00000d40 r6:83496868 r5:60000013 r4:8203d7c4 [ 1088.280002][T11221] [<819997f4>] (show_stack) from [<819b7cc4>] (dump_stack_lvl+0x70/0x7c) [ 1088.280366][T11221] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 1088.280784][T11221] r5:00000000 r4:8271925c [ 1088.281007][T11221] [<819b7cd0>] (dump_stack) from [<808e54ec>] (should_fail_ex+0x18c/0x1dc) [ 1088.281402][T11221] [<808e5360>] (should_fail_ex) from [<804e82e0>] (should_failslab+0x6c/0x94) [ 1088.281798][T11221] r6:83496868 r5:00000024 r4:82c01240 [ 1088.282046][T11221] [<804e8274>] (should_failslab) from [<804cd700>] (__kmalloc_noprof+0x9c/0x458) [ 1088.282438][T11221] [<804cd664>] (__kmalloc_noprof) from [<80750f18>] (tomoyo_encode2+0x64/0xf0) [ 1088.282712][T11221] r10:00000fff r9:82c9e800 r8:00000000 r7:83027908 r6:83496868 r5:844c8ffc [ 1088.283066][T11221] r4:844c8fe3 [ 1088.283327][T11221] [<80750eb4>] (tomoyo_encode2) from [<80750fc8>] (tomoyo_encode+0x24/0x30) [ 1088.284012][T11221] r9:82c9e800 r8:00000000 r7:83027908 r6:83496868 r5:00001000 r4:844c8fe4 [ 1088.285352][T11221] [<80750fa4>] (tomoyo_encode) from [<80751054>] (tomoyo_realpath_from_path+0x80/0x17c) [ 1088.285931][T11221] r5:00001000 r4:844c8000 [ 1088.286221][T11221] [<80750fd4>] (tomoyo_realpath_from_path) from [<8074d558>] (tomoyo_path_perm+0xe4/0x200) [ 1088.286658][T11221] r10:0000006c r9:8484b000 r8:00000001 r7:00000000 r6:00000005 r5:00000000 [ 1088.286991][T11221] r4:00000000 r3:00000000 [ 1088.287213][T11221] [<8074d474>] (tomoyo_path_perm) from [<8075184c>] (tomoyo_inode_getattr+0x1c/0x20) [ 1088.287719][T11221] r8:8020029c r7:000007ff r6:dfaf9ec0 r5:83496868 r4:83496868 [ 1088.288037][T11221] [<80751830>] (tomoyo_inode_getattr) from [<8070c03c>] (security_inode_getattr+0x64/0x1ac) [ 1088.288542][T11221] [<8070bfd8>] (security_inode_getattr) from [<8051d284>] (vfs_getattr+0x24/0x7c) [ 1088.289036][T11221] r5:83496868 r4:00000000 [ 1088.289277][T11221] [<8051d260>] (vfs_getattr) from [<8051dcf0>] (vfs_fstat+0x38/0x64) [ 1088.289674][T11221] r7:0000006c r6:83496840 r5:dfaf9ec0 r4:83496841 [ 1088.290005][T11221] [<8051dcb8>] (vfs_fstat) from [<8051dd60>] (__do_sys_newfstat+0x44/0x80) [ 1088.290480][T11221] r7:0000006c r6:00130e70 r5:20000280 r4:00000003 [ 1088.290835][T11221] [<8051dd1c>] (__do_sys_newfstat) from [<8051e210>] (sys_newfstat+0x10/0x14) [ 1088.291319][T11221] r5:00000000 r4:00000000 [ 1088.291721][T11221] [<8051e200>] (sys_newfstat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1088.292185][T11221] Exception stack(0xdfaf9fa8 to 0xdfaf9ff0) [ 1088.292497][T11221] 9fa0: 00000000 00000000 00000003 20000280 00000000 00000000 [ 1088.292852][T11221] 9fc0: 00000000 00000000 00130e70 0000006c 00000000 00006364 003d0f00 76b550bc [ 1088.293287][T11221] 9fe0: 76b54ec0 76b54eb0 00018af8 00132ec0 [ 1088.385952][T11221] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1088.545860][T10754] veth0_vlan: entered promiscuous mode [ 1088.571617][T10754] veth1_vlan: entered promiscuous mode [ 1088.647945][T10754] veth0_macvtap: entered promiscuous mode [ 1088.663009][T10754] veth1_macvtap: entered promiscuous mode [ 1088.766679][T10754] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.767275][T10754] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.767620][T10754] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.768000][T10754] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.883753][ T31] audit: type=1400 audit(1868.787:335): avc: denied { mounton } for pid=10754 comm="syz-executor" path="/syzkaller.kiCZfU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=17123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1088.911295][ T31] audit: type=1400 audit(1868.817:336): avc: denied { mount } for pid=10754 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1089.046628][ T31] audit: type=1400 audit(1868.957:337): avc: denied { create } for pid=11228 comm="syz.1.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1089.049691][ T31] audit: type=1400 audit(1868.957:338): avc: denied { setopt } for pid=11228 comm="syz.1.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1089.325229][ T8572] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1089.497605][ T8572] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1089.498412][ T8572] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1089.498856][ T8572] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1089.499241][ T8572] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1089.499731][ T8572] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1089.500080][ T8572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.509415][ T8572] usb 1-1: config 0 descriptor?? [ 1089.978298][ T8572] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 1089.995383][ T8572] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1090.638222][ T31] audit: type=1400 audit(1870.547:339): avc: denied { bind } for pid=11253 comm="syz.1.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1092.152457][T11276] FAULT_INJECTION: forcing a failure. [ 1092.152457][T11276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1092.160230][T11276] CPU: 0 UID: 0 PID: 11276 Comm: syz.1.1429 Not tainted 6.12.0-rc3-syzkaller #0 [ 1092.160743][T11276] Hardware name: ARM-Versatile Express [ 1092.161002][T11276] Call trace: [ 1092.161201][T11276] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 1092.161543][T11276] r7:00000000 r6:8223783c r5:60000013 r4:8203d7c4 [ 1092.161694][T11276] [<819997f4>] (show_stack) from [<819b7cc4>] (dump_stack_lvl+0x70/0x7c) [ 1092.162016][T11276] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 1092.162328][T11276] r5:00000000 r4:8274e844 [ 1092.162479][T11276] [<819b7cd0>] (dump_stack) from [<808e54ec>] (should_fail_ex+0x18c/0x1dc) [ 1092.162819][T11276] [<808e5360>] (should_fail_ex) from [<808e5550>] (should_fail+0x14/0x18) [ 1092.163155][T11276] r6:8223783c r5:20000180 r4:82e4c000 [ 1092.163379][T11276] [<808e553c>] (should_fail) from [<808e5570>] (should_fail_usercopy+0x1c/0x20) [ 1092.163713][T11276] [<808e5554>] (should_fail_usercopy) from [<808eb5bc>] (strncpy_from_user+0x20/0x194) [ 1092.164062][T11276] [<808eb59c>] (strncpy_from_user) from [<805250a8>] (getname_flags.part.0+0x44/0x18c) [ 1092.164539][T11276] r10:000001ad r9:84b74800 r8:20000040 r7:00000000 r6:8223783c r5:20000180 [ 1092.165210][T11276] r4:82e4c000 [ 1092.165380][T11276] [<80525064>] (getname_flags.part.0) from [<8052a148>] (getname_flags+0x3c/0x50) [ 1092.165820][T11276] r9:84b74800 r8:20000040 r7:20000180 r6:ffffff9c r5:00000000 r4:20000180 [ 1092.166123][T11276] [<8052a10c>] (getname_flags) from [<8052a6b0>] (user_path_at+0x2c/0x64) [ 1092.166452][T11276] r5:00000000 r4:dfa71f6c [ 1092.166637][T11276] [<8052a684>] (user_path_at) from [<80546e38>] (sys_move_mount+0xcc/0x358) [ 1092.166876][T11276] r6:ffffff9c r5:00000000 r4:00000000 [ 1092.167303][T11276] [<80546d6c>] (sys_move_mount) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1092.168407][T11276] Exception stack(0xdfa71fa8 to 0xdfa71ff0) [ 1092.168653][T11276] 1fa0: 00000000 00000000 00000005 20000040 ffffff9c 20000180 [ 1092.169064][T11276] 1fc0: 00000000 00000000 00130e70 000001ad 00000000 00006364 003d0f00 76b340bc [ 1092.169953][T11276] 1fe0: 76b33ec0 76b33eb0 00018af8 00132ec0 [ 1092.170308][T11276] r10:000001ad r9:84b74800 r8:8020029c r7:000001ad r6:00130e70 r5:00000000 [ 1092.170683][T11276] r4:00000000 [ 1095.014957][ T8812] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1095.280950][ T8812] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1095.281517][ T8812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.281863][ T8812] usb 2-1: Product: syz [ 1095.282080][ T8812] usb 2-1: Manufacturer: syz [ 1095.282300][ T8812] usb 2-1: SerialNumber: syz [ 1095.599827][ T8830] usb 1-1: USB disconnect, device number 53 [ 1097.981969][ T31] audit: type=1400 audit(1877.887:340): avc: denied { listen } for pid=11309 comm="syz.0.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1098.503093][ T31] audit: type=1400 audit(1878.407:341): avc: denied { setattr } for pid=11309 comm="syz.0.1433" path="socket:[18072]" dev="sockfs" ino=18072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1098.639018][ T31] audit: type=1400 audit(1878.547:342): avc: denied { setattr } for pid=11309 comm="syz.0.1433" path="socket:[18073]" dev="sockfs" ino=18073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1099.615025][ T8830] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1099.774126][ T8830] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1099.775120][ T8830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1099.775553][ T8830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1099.775944][ T8830] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1099.776451][ T8830] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1099.776802][ T8830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.787059][ T8830] usb 1-1: config 0 descriptor?? [ 1100.252001][ T8830] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 1100.256338][ T8830] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1104.241373][ T3749] usb 1-1: USB disconnect, device number 54 [ 1104.283660][ T8572] usb 2-1: USB disconnect, device number 60 [ 1105.885022][ T8808] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1106.052138][ T8808] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1106.052496][ T8808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1106.052711][ T8808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1106.052932][ T8808] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1106.053278][ T8808] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1106.053474][ T8808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.061202][ T8808] usb 2-1: config 0 descriptor?? [ 1106.508359][ T8808] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 1106.521749][ T8808] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1110.499451][ T8808] usb 2-1: USB disconnect, device number 61 [ 1116.315234][ T8808] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1116.486871][ T8808] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1116.487492][ T8808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1116.487969][ T8808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1116.488336][ T8808] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1116.489073][ T8808] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1116.489430][ T8808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.494022][ T8808] usb 1-1: config 0 descriptor?? [ 1117.000614][ T8808] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 1117.004026][ T8808] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1118.998082][ T3749] usb 1-1: USB disconnect, device number 55 [ 1120.072413][T11515] fuse: Bad value for 'user_id' [ 1120.072661][T11515] fuse: Bad value for 'user_id' [ 1120.455242][ T8572] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1120.619766][ T8572] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1120.620401][ T8572] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1120.621404][ T8572] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1120.621771][ T8572] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1120.622259][ T8572] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1120.622611][ T8572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.636221][ T8572] usb 2-1: config 0 descriptor?? [ 1121.136222][ T8572] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 1121.141233][ T8572] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1122.055294][ T8572] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1122.204874][ T8572] usb 1-1: Using ep0 maxpacket: 8 [ 1122.217189][ T8572] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.217707][ T8572] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1122.218757][ T8572] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1122.219204][ T8572] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1122.219673][ T8572] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1122.245055][ T8572] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1122.245608][ T8572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1122.246151][ T8572] usb 1-1: Product: syz [ 1122.246373][ T8572] usb 1-1: Manufacturer: syz [ 1122.246594][ T8572] usb 1-1: SerialNumber: syz [ 1122.260191][ T8572] usb 1-1: config 0 descriptor?? [ 1122.508395][ T8572] usb 1-1: USB disconnect, device number 56 [ 1124.975997][T11571] fuse: Unknown parameter 'obj_user' [ 1125.149803][ T8808] usb 2-1: USB disconnect, device number 62 [ 1126.855741][ T8812] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1126.886408][ T8808] atkbd serio8: keyboard reset failed on [ 1127.016194][ T8812] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1127.018452][ T8812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1127.018736][ T8812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1127.019065][ T8812] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1127.019434][ T8812] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1127.019948][ T8812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.023033][ T8812] usb 2-1: config 0 descriptor?? [ 1127.495809][ T8812] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 1127.499682][ T8812] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1127.881069][ T31] audit: type=1400 audit(1907.787:343): avc: granted { setsecparam } for pid=11616 comm="syz.0.1486" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1127.892723][ T31] audit: type=1400 audit(1907.797:344): avc: granted { setsecparam } for pid=11616 comm="syz.0.1486" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1127.903529][ T31] audit: type=1400 audit(1907.807:345): avc: granted { setsecparam } for pid=11616 comm="syz.0.1486" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1127.991398][T11622] FAULT_INJECTION: forcing a failure. [ 1127.991398][T11622] name failslab, interval 1, probability 0, space 0, times 0 [ 1127.991982][T11622] CPU: 1 UID: 0 PID: 11622 Comm: syz.0.1487 Not tainted 6.12.0-rc3-syzkaller #0 [ 1127.992269][T11622] Hardware name: ARM-Versatile Express [ 1127.992468][T11622] Call trace: [ 1127.992634][T11622] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 1127.992971][T11622] r7:840e6000 r6:00400dd0 r5:60000013 r4:8203d7c4 [ 1127.993224][T11622] [<819997f4>] (show_stack) from [<819b7cc4>] (dump_stack_lvl+0x70/0x7c) [ 1127.993505][T11622] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 1127.993784][T11622] r5:00000000 r4:8271925c [ 1127.993948][T11622] [<819b7cd0>] (dump_stack) from [<808e54ec>] (should_fail_ex+0x18c/0x1dc) [ 1127.994355][T11622] [<808e5360>] (should_fail_ex) from [<804e82e0>] (should_failslab+0x6c/0x94) [ 1127.994882][T11622] r6:00400dd0 r5:eb059e68 r4:82c01900 [ 1127.995162][T11622] [<804e8274>] (should_failslab) from [<804cc728>] (__kmalloc_cache_noprof+0x4c/0x344) [ 1127.995813][T11622] [<804cc6dc>] (__kmalloc_cache_noprof) from [<806c4cf8>] (fuse_dentry_init+0x2c/0x40) [ 1127.996250][T11622] r10:00000000 r9:00000005 r8:82237830 r7:00000000 r6:00000000 r5:eb059e68 [ 1127.996544][T11622] r4:84c11440 [ 1127.996692][T11622] [<806c4ccc>] (fuse_dentry_init) from [<80534154>] (__d_alloc+0x10c/0x228) [ 1127.997050][T11622] r5:eb059e68 r4:84c11440 [ 1127.997235][T11622] [<80534048>] (__d_alloc) from [<80534288>] (d_alloc+0x18/0x68) [ 1127.997540][T11622] r9:840e6000 r8:90d0ebc2 r7:00000000 r6:eb059e68 r5:83268d48 r4:83268d48 [ 1127.997815][T11622] [<80534270>] (d_alloc) from [<80537670>] (d_alloc_parallel+0x58/0x494) [ 1127.998153][T11622] r7:00000000 r6:eb059e68 r5:83268d48 r4:000003be [ 1127.998380][T11622] [<80537618>] (d_alloc_parallel) from [<8052524c>] (__lookup_slow+0x5c/0x134) [ 1127.998721][T11622] r10:00000000 r9:00000000 r8:83075680 r7:00000000 r6:eb059e68 r5:83268d48 [ 1127.999043][T11622] r4:83268d48 [ 1127.999182][T11622] [<805251f0>] (__lookup_slow) from [<8052935c>] (walk_component+0x104/0x170) [ 1127.999524][T11622] r8:00000000 r7:00000001 r6:eb059e60 r5:83075700 r4:83268d48 [ 1127.999782][T11622] [<80529258>] (walk_component) from [<80529fe4>] (path_lookupat+0x7c/0x1a4) [ 1128.000111][T11622] r9:00000000 r8:eb059f44 r7:00000000 r6:00000001 r5:eb059f44 r4:eb059e60 [ 1128.000390][T11622] [<80529f68>] (path_lookupat) from [<8052a4d0>] (filename_lookup+0xc0/0x190) [ 1128.000708][T11622] r7:00000000 r6:85a50000 r5:840e6000 r4:ffffff9c [ 1128.000941][T11622] [<8052a410>] (filename_lookup) from [<8052c8c8>] (do_linkat+0x7c/0x27c) [ 1128.001307][T11622] r9:840e6000 r8:00000000 r7:00000009 r6:fffffff2 r5:85a50000 r4:00000000 [ 1128.001592][T11622] [<8052c84c>] (do_linkat) from [<8052cb70>] (sys_link+0x48/0x50) [ 1128.001903][T11622] r10:00000009 r9:840e6000 r8:8020029c r7:00000009 r6:00130e70 r5:00000000 [ 1128.002245][T11622] r4:85a50000 [ 1128.002394][T11622] [<8052cb28>] (sys_link) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1128.002704][T11622] Exception stack(0xeb059fa8 to 0xeb059ff0) [ 1128.002952][T11622] 9fa0: 00000000 00000000 20000280 00000000 00000000 00000000 [ 1128.003260][T11622] 9fc0: 00000000 00000000 00130e70 00000009 00000000 00006364 003d0f00 76b900bc [ 1128.003568][T11622] 9fe0: 76b8fec0 76b8feb0 00018af8 00132ec0 [ 1128.003790][T11622] r5:00000000 r4:00000000 [ 1131.466539][T11634] FAULT_INJECTION: forcing a failure. [ 1131.466539][T11634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1131.467258][T11634] CPU: 1 UID: 0 PID: 11634 Comm: syz.0.1490 Not tainted 6.12.0-rc3-syzkaller #0 [ 1131.467594][T11634] Hardware name: ARM-Versatile Express [ 1131.467831][T11634] Call trace: [ 1131.468058][T11634] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 1131.468447][T11634] r7:20000180 r6:eb041e30 r5:60000013 r4:8203d7c4 [ 1131.468710][T11634] [<819997f4>] (show_stack) from [<819b7cc4>] (dump_stack_lvl+0x70/0x7c) [ 1131.469103][T11634] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 1131.469570][T11634] r5:00000000 r4:8274e844 [ 1131.469797][T11634] [<819b7cd0>] (dump_stack) from [<808e54ec>] (should_fail_ex+0x18c/0x1dc) [ 1131.470214][T11634] [<808e5360>] (should_fail_ex) from [<808e5550>] (should_fail+0x14/0x18) [ 1131.471754][T11634] r6:eb041e30 r5:00000000 r4:eb041f38 [ 1131.472049][T11634] [<808e553c>] (should_fail) from [<808e5570>] (should_fail_usercopy+0x1c/0x20) [ 1131.472439][T11634] [<808e5554>] (should_fail_usercopy) from [<81486a18>] (copy_msghdr_from_user+0x50/0x130) [ 1131.472857][T11634] [<814869c8>] (copy_msghdr_from_user) from [<81486b70>] (___sys_sendmsg+0x78/0xd0) [ 1131.473318][T11634] r8:00000080 r7:00000000 r6:833d7b80 r5:eb041f38 r4:eb041e74 [ 1131.473626][T11634] [<81486af8>] (___sys_sendmsg) from [<814870ac>] (sys_sendmsg+0x78/0xbc) [ 1131.474031][T11634] r10:00000128 r9:840e5400 r8:8020029c r7:00000080 r6:20000180 r5:833d7b80 [ 1131.474944][T11634] r4:00000000 [ 1131.475150][T11634] [<81487034>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1131.476162][T11634] Exception stack(0xeb041fa8 to 0xeb041ff0) [ 1131.476478][T11634] 1fa0: 00000000 00000000 00000003 20000180 00000080 00000000 [ 1131.476848][T11634] 1fc0: 00000000 00000000 00130e70 00000128 00000000 00006364 003d0f00 76b900bc [ 1131.477253][T11634] 1fe0: 76b8fec0 76b8feb0 00018af8 00132ec0 [ 1131.477522][T11634] r7:00000128 r6:00130e70 r5:00000000 r4:00000000 [ 1137.017023][T11651] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11651 comm=syz.0.1494 [ 1137.020194][T11651] fuse: Unknown parameter 'gro' [ 1140.386570][T11673] FAULT_INJECTION: forcing a failure. [ 1140.386570][T11673] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.387226][T11673] CPU: 0 UID: 0 PID: 11673 Comm: syz.0.1500 Not tainted 6.12.0-rc3-syzkaller #0 [ 1140.387594][T11673] Hardware name: ARM-Versatile Express [ 1140.387824][T11673] Call trace: [ 1140.388033][T11673] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 1140.388419][T11673] r7:00000dc0 r6:84bc6810 r5:60000013 r4:8203d7c4 [ 1140.388665][T11673] [<819997f4>] (show_stack) from [<819b7cc4>] (dump_stack_lvl+0x70/0x7c) [ 1140.389265][T11673] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 1140.389691][T11673] r5:00000000 r4:8271925c [ 1140.389938][T11673] [<819b7cd0>] (dump_stack) from [<808e54ec>] (should_fail_ex+0x18c/0x1dc) [ 1140.390414][T11673] [<808e5360>] (should_fail_ex) from [<804e82e0>] (should_failslab+0x6c/0x94) [ 1140.390930][T11673] r6:84bc6810 r5:00000028 r4:82c01240 [ 1140.391217][T11673] [<804e8274>] (should_failslab) from [<804cd700>] (__kmalloc_noprof+0x9c/0x458) [ 1140.391691][T11673] [<804cd664>] (__kmalloc_noprof) from [<80763038>] (ima_write_template_field_data+0x2c/0xcc) [ 1140.392189][T11673] r10:84bc6810 r9:84bc6fc4 r8:eb161a73 r7:00000001 r6:84bc6810 r5:00000004 [ 1140.392550][T11673] r4:00000028 [ 1140.392740][T11673] [<8076300c>] (ima_write_template_field_data) from [<80763190>] (ima_eventdigest_init_common+0xb8/0x158) [ 1140.393254][T11673] r9:84bc6fc4 r8:81ad248c r7:00000001 r6:00000020 r5:00000004 r4:00000008 [ 1140.393599][T11673] [<807630d8>] (ima_eventdigest_init_common) from [<80763838>] (ima_eventdigest_ng_init+0x54/0x5c) [ 1140.394054][T11673] r10:833dac80 r9:0000000a r8:00000000 r7:8273cac8 r6:eb161bc4 r5:eb161bc8 [ 1140.394770][T11673] r4:00000000 [ 1140.395054][T11673] [<807637e4>] (ima_eventdigest_ng_init) from [<8075e688>] (ima_alloc_init_template+0x10c/0x1a8) [ 1140.395956][T11673] [<8075e57c>] (ima_alloc_init_template) from [<8075ed34>] (ima_store_measurement+0x98/0x180) [ 1140.396464][T11673] r9:0000000a r8:00000000 r7:00000400 r6:82e4cfee r5:843adf00 r4:84267e58 [ 1140.396813][T11673] [<8075ec9c>] (ima_store_measurement) from [<8075c348>] (process_measurement+0x874/0xab8) [ 1140.397326][T11673] r10:00000004 r9:00000000 r8:84267e58 r7:ffffff95 r6:00000001 r5:00000000 [ 1140.397679][T11673] r4:843adf00 [ 1140.397875][T11673] [<8075bad4>] (process_measurement) from [<8075c878>] (ima_file_check+0x68/0x8c) [ 1140.398281][T11673] r10:00000000 r9:843adf00 r8:eb161e58 r7:00000000 r6:843adf00 r5:00000000 [ 1140.398609][T11673] r4:00000000 [ 1140.398833][T11673] [<8075c810>] (ima_file_check) from [<8070042c>] (security_file_post_open+0x5c/0x1bc) [ 1140.399288][T11673] r7:00000001 r6:eb161f20 r5:00000006 r4:843adf00 [ 1140.399572][T11673] [<807003d0>] (security_file_post_open) from [<8052ae98>] (path_openat+0x3c0/0x11a4) [ 1140.400068][T11673] r5:8271f3f4 r4:00040280 [ 1140.400334][T11673] [<8052aad8>] (path_openat) from [<8052bd18>] (do_filp_open+0x9c/0x138) [ 1140.400765][T11673] r10:00000005 r9:840e1800 r8:00000001 r7:eb161e58 r6:eb161f20 r5:840e1800 [ 1140.401144][T11673] r4:82e4b000 [ 1140.401366][T11673] [<8052bc7c>] (do_filp_open) from [<80512fd0>] (do_sys_openat2+0xbc/0xe4) [ 1140.401844][T11673] r8:8020029c r7:ffffff9c r6:00000008 r5:eb161f58 r4:82e4b000 [ 1140.402189][T11673] [<80512f14>] (do_sys_openat2) from [<80513304>] (sys_open+0x94/0xd0) [ 1140.402666][T11673] r7:00000005 r6:00130e70 r5:00000000 r4:20000000 [ 1140.402995][T11673] [<80513270>] (sys_open) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1140.403404][T11673] Exception stack(0xeb161fa8 to 0xeb161ff0) [ 1140.403701][T11673] 1fa0: 00000000 00000000 20000000 000c0280 00000000 00000000 [ 1140.404083][T11673] 1fc0: 00000000 00000000 00130e70 00000005 00000000 00006364 003d0f00 76b6f0bc [ 1140.405041][T11673] 1fe0: 76b6eec0 76b6eeb0 00018af8 00132ec0 [ 1140.405566][T11673] r5:00000000 r4:00000000 [ 1140.418188][ T31] audit: type=1804 audit(1920.327:346): pid=11673 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=add_template_measure cause=ENOMEM comm="syz.0.1500" name="/newroot/48/file0" dev="fuse" ino=1 res=0 errno=0 [ 1141.029152][ T31] audit: type=1400 audit(1920.937:347): avc: denied { accept } for pid=11684 comm="syz.0.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1141.220451][ T8802] usb 2-1: USB disconnect, device number 63 [ 1142.014724][ T8802] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1142.183339][ T8802] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1142.188498][ T8802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1142.189802][ T8802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1142.190167][ T8802] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1142.190649][ T8802] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1142.191001][ T8802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.205986][ T8802] usb 1-1: config 0 descriptor?? [ 1142.648231][ T8802] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 1142.659090][ T8802] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1144.959770][T11738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1517'. [ 1144.961993][ T31] audit: type=1400 audit(1924.867:348): avc: denied { read } for pid=11737 comm="syz.1.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1154.925077][ T8802] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1155.090627][ T8802] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1155.091259][ T8802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.091690][ T8802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.092422][ T8802] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1155.114609][ T8802] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1155.115237][ T8802] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1155.115570][ T8802] usb 2-1: Manufacturer: syz [ 1155.119262][ T8802] usb 2-1: config 0 descriptor?? [ 1155.556817][ T8802] appleir 0003:05AC:8243.001A: unknown main item tag 0x0 [ 1155.558246][ T8802] appleir 0003:05AC:8243.001A: No inputs registered, leaving [ 1155.562452][ T8802] appleir 0003:05AC:8243.001A: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1156.078597][ T8572] usb 1-1: USB disconnect, device number 57 [ 1156.985036][ T8572] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1157.149047][ T8572] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1157.149624][ T8572] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1157.149994][ T8572] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1157.150304][ T8572] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1157.150724][ T8572] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1157.151024][ T8572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.165400][ T8572] usb 1-1: config 0 descriptor?? [ 1157.602484][ T8572] plantronics 0003:047F:FFFF.001B: unknown global tag 0xd [ 1157.616101][ T8572] plantronics 0003:047F:FFFF.001B: item 0 0 1 13 parsing failed [ 1157.617223][ T8572] plantronics 0003:047F:FFFF.001B: parse failed [ 1157.617806][ T8572] plantronics 0003:047F:FFFF.001B: probe with driver plantronics failed with error -22 [ 1157.807729][ T8572] usb 1-1: USB disconnect, device number 58 [ 1161.355116][ T8830] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1161.523324][ T8830] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1161.523937][ T8830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1161.524379][ T8830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1161.525538][ T8830] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1161.526873][ T8830] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1161.527229][ T8830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.537200][ T8830] usb 1-1: config 0 descriptor?? [ 1161.967227][ T8830] plantronics 0003:047F:FFFF.001C: unknown global tag 0xd [ 1161.967619][ T8830] plantronics 0003:047F:FFFF.001C: item 0 0 1 13 parsing failed [ 1161.968188][ T8830] plantronics 0003:047F:FFFF.001C: parse failed [ 1161.968533][ T8830] plantronics 0003:047F:FFFF.001C: probe with driver plantronics failed with error -22 [ 1162.171156][ T8830] usb 1-1: USB disconnect, device number 59 [ 1162.626971][ T31] audit: type=1400 audit(1942.537:349): avc: denied { ioctl } for pid=11857 comm="syz.0.1540" path="socket:[18768]" dev="sockfs" ino=18768 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1163.225148][ T8] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1163.382399][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1163.383063][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1163.383490][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1163.383866][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1163.397775][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1163.398300][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.402023][ T8] usb 1-1: config 0 descriptor?? [ 1163.826592][ T8] plantronics 0003:047F:FFFF.001D: unknown global tag 0xd [ 1163.826879][ T8] plantronics 0003:047F:FFFF.001D: item 0 0 1 13 parsing failed [ 1163.827207][ T8] plantronics 0003:047F:FFFF.001D: parse failed [ 1163.827388][ T8] plantronics 0003:047F:FFFF.001D: probe with driver plantronics failed with error -22 [ 1164.039241][ T8830] usb 1-1: USB disconnect, device number 60 [ 1164.644821][ T8830] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1164.818413][ T8830] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1164.819041][ T8830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1164.819442][ T8830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1164.819807][ T8830] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1164.820313][ T8830] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1164.820674][ T8830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.829258][ T8830] usb 1-1: config 0 descriptor?? [ 1165.061908][T11886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.065882][T11886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.093238][ T31] audit: type=1400 audit(1944.997:350): avc: denied { bind } for pid=11885 comm="syz.0.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1166.221067][ T8802] usb 2-1: USB disconnect, device number 64 [ 1166.377101][ T31] audit: type=1400 audit(1946.287:351): avc: denied { read write } for pid=7482 comm="syz-executor" name="loop1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1166.378686][ T31] audit: type=1400 audit(1946.287:352): avc: denied { open } for pid=7482 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1166.380217][ T31] audit: type=1400 audit(1946.287:353): avc: denied { ioctl } for pid=7482 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=636 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1166.835104][ T31] audit: type=1400 audit(1946.737:354): avc: denied { map } for pid=11905 comm="syz.1.1547" path="socket:[18784]" dev="sockfs" ino=18784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1166.837298][ T31] audit: type=1400 audit(1946.737:355): avc: denied { read } for pid=11905 comm="syz.1.1547" path="socket:[18784]" dev="sockfs" ino=18784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1166.838982][ T31] audit: type=1400 audit(1946.747:356): avc: denied { module_request } for pid=11905 comm="syz.1.1547" kmod="nfnetlink-subsys-6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1167.688116][ T8808] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1167.892105][ T8808] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1167.893595][ T8808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1167.895847][ T8808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1167.896534][ T8808] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1167.897600][ T8808] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1167.898309][ T8808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.923189][ T8808] usb 2-1: config 0 descriptor?? [ 1168.553371][ T8808] plantronics 0003:047F:FFFF.001E: unknown global tag 0xd [ 1168.561079][ T8808] plantronics 0003:047F:FFFF.001E: item 0 0 1 13 parsing failed [ 1168.562962][ T8808] plantronics 0003:047F:FFFF.001E: parse failed [ 1168.564041][ T8808] plantronics 0003:047F:FFFF.001E: probe with driver plantronics failed with error -22 [ 1168.782638][ T8808] usb 2-1: USB disconnect, device number 65 [ 1169.174951][T11886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.177692][T11886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.450520][ T8830] usbhid 1-1:0.0: can't add hid device: -71 [ 1170.451212][ T8830] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1170.465144][ T8830] usb 1-1: USB disconnect, device number 61 [ 1170.792455][ T31] audit: type=1400 audit(1950.697:357): avc: denied { getopt } for pid=11942 comm="syz.1.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1170.895012][ T8830] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1171.072058][ T8830] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1171.072689][ T8830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.073142][ T8830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.073531][ T8830] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1171.092357][ T8830] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1171.093006][ T8830] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1171.093567][ T8830] usb 1-1: Manufacturer: syz [ 1171.099455][ T8830] usb 1-1: config 0 descriptor?? [ 1171.384883][ T8] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1171.550507][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1171.553195][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1171.553596][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1171.554492][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1171.560234][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1171.564408][ T8830] appleir 0003:05AC:8243.001F: unknown main item tag 0x0 [ 1171.565421][ T8830] appleir 0003:05AC:8243.001F: No inputs registered, leaving [ 1171.569051][ T8830] appleir 0003:05AC:8243.001F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1171.572073][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.586709][ T8] usb 2-1: config 0 descriptor?? [ 1172.043616][ T8] plantronics 0003:047F:FFFF.0020: unknown global tag 0xd [ 1172.045647][ T8] plantronics 0003:047F:FFFF.0020: item 0 0 1 13 parsing failed [ 1172.046731][ T8] plantronics 0003:047F:FFFF.0020: parse failed [ 1172.047546][ T8] plantronics 0003:047F:FFFF.0020: probe with driver plantronics failed with error -22 [ 1172.239355][ T8] usb 2-1: USB disconnect, device number 66 [ 1172.918984][T11941] raw-gadget.0 gadget.0: fail, usb_ep_queue returned -108 [ 1172.970847][T11985] FAULT_INJECTION: forcing a failure. [ 1172.970847][T11985] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.971649][T11985] CPU: 1 UID: 0 PID: 11985 Comm: syz.1.1555 Not tainted 6.12.0-rc3-syzkaller #0 [ 1172.972027][T11985] Hardware name: ARM-Versatile Express [ 1172.972357][T11985] Call trace: [ 1172.972683][T11985] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 1172.973213][T11985] r7:00000d40 r6:851210e8 r5:60000013 r4:8203d7c4 [ 1172.973471][T11985] [<819997f4>] (show_stack) from [<819b7cc4>] (dump_stack_lvl+0x70/0x7c) [ 1172.973986][T11985] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 1172.974472][T11985] r5:00000000 r4:8271925c [ 1172.974736][T11985] [<819b7cd0>] (dump_stack) from [<808e54ec>] (should_fail_ex+0x18c/0x1dc) [ 1172.975202][T11985] [<808e5360>] (should_fail_ex) from [<804e82e0>] (should_failslab+0x6c/0x94) [ 1172.975728][T11985] r6:851210e8 r5:00000024 r4:82c01240 [ 1172.976004][T11985] [<804e8274>] (should_failslab) from [<804cd700>] (__kmalloc_noprof+0x9c/0x458) [ 1172.976440][T11985] [<804cd664>] (__kmalloc_noprof) from [<80750f18>] (tomoyo_encode2+0x64/0xf0) [ 1172.976864][T11985] r10:00000fff r9:82c9e800 r8:00000000 r7:8301aaa0 r6:851210e8 r5:844ceffc [ 1172.977257][T11985] r4:844cefe3 [ 1172.977441][T11985] [<80750eb4>] (tomoyo_encode2) from [<80750fc8>] (tomoyo_encode+0x24/0x30) [ 1172.977841][T11985] r9:82c9e800 r8:00000000 r7:8301aaa0 r6:851210e8 r5:00001000 r4:844cefe4 [ 1172.978192][T11985] [<80750fa4>] (tomoyo_encode) from [<80751054>] (tomoyo_realpath_from_path+0x80/0x17c) [ 1172.978616][T11985] r5:00001000 r4:844ce000 [ 1172.978877][T11985] [<80750fd4>] (tomoyo_realpath_from_path) from [<8074d154>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1172.979486][T11985] r10:840f8c00 r9:00000000 r8:00000003 r7:00008983 r6:00000004 r5:81ad1868 [ 1172.979834][T11985] r4:851210e8 r3:824ba340 [ 1172.980064][T11985] [<8074d088>] (tomoyo_path_number_perm) from [<80751a20>] (tomoyo_file_ioctl+0x1c/0x20) [ 1172.980502][T11985] r9:851210c0 r8:00000003 r7:00000000 r6:00000000 r5:00008983 r4:851210c0 [ 1172.980838][T11985] [<80751a04>] (tomoyo_file_ioctl) from [<8070006c>] (security_file_ioctl+0x64/0x1e4) [ 1172.981296][T11985] [<80700008>] (security_file_ioctl) from [<8052f6c8>] (sys_ioctl+0x50/0xda8) [ 1172.981685][T11985] r7:00000000 r6:851210c1 r5:00000000 r4:00008983 [ 1172.981965][T11985] [<8052f678>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1172.982322][T11985] Exception stack(0xec60dfa8 to 0xec60dff0) [ 1172.982597][T11985] dfa0: 00000000 00000000 00000003 00008983 00000000 00000000 [ 1172.982976][T11985] dfc0: 00000000 00000000 00130e70 00000036 00000000 00006364 003d0f00 76b550bc [ 1172.983336][T11985] dfe0: 76b54ec0 76b54eb0 00018af8 00132ec0 [ 1172.983611][T11985] r10:00000036 r9:840f8c00 r8:8020029c r7:00000036 r6:00130e70 r5:00000000 [ 1172.983965][T11985] r4:00000000 [ 1173.055283][T11985] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1173.156698][ T31] audit: type=1400 audit(1953.067:358): avc: denied { ioctl } for pid=11986 comm="syz.0.1556" path="socket:[19860]" dev="sockfs" ino=19860 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1173.755207][ T8830] usb 1-1: reset high-speed USB device number 62 using dummy_hcd [ 1173.855104][ T8812] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1173.907658][ T8830] usb 1-1: device firmware changed [ 1173.909229][ T8808] usb 1-1: USB disconnect, device number 62 [ 1174.026210][ T8812] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1174.026826][ T8812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.027609][ T8812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.028201][ T8812] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1174.037425][ T8812] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1174.038104][ T8812] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1174.038690][ T8812] usb 2-1: Manufacturer: syz [ 1174.046420][ T8812] usb 2-1: config 0 descriptor?? [ 1174.068731][ T8808] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1174.220928][ T8808] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1174.222979][ T8808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1174.223990][ T8808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1174.235978][ T8808] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1174.237131][ T8808] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1174.237974][ T8808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.249691][ T8808] usb 1-1: config 0 descriptor?? [ 1174.507759][ T8812] appleir 0003:05AC:8243.0021: unknown main item tag 0x0 [ 1174.510522][ T8812] appleir 0003:05AC:8243.0021: No inputs registered, leaving [ 1174.535761][ T8812] appleir 0003:05AC:8243.0021: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1174.687990][ T8808] plantronics 0003:047F:FFFF.0022: unknown global tag 0xd [ 1174.688474][ T8808] plantronics 0003:047F:FFFF.0022: item 0 0 1 13 parsing failed [ 1174.689126][ T8808] plantronics 0003:047F:FFFF.0022: parse failed [ 1174.689456][ T8808] plantronics 0003:047F:FFFF.0022: probe with driver plantronics failed with error -22 [ 1174.888137][ T8808] usb 1-1: USB disconnect, device number 63 [ 1183.865298][T12064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12064 comm=syz.0.1574 [ 1184.721998][ T8808] usb 2-1: USB disconnect, device number 67 [ 1186.208934][ T31] audit: type=1400 audit(1966.117:359): avc: denied { unlink } for pid=12083 comm="syz.1.1578" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1186.275565][ T8] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1186.448413][ T8] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1186.449102][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.449520][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.449940][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1186.475218][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1186.475860][ T8] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1186.476205][ T8] usb 1-1: Manufacturer: syz [ 1186.479718][ T8] usb 1-1: config 0 descriptor?? [ 1186.908076][ T8] appleir 0003:05AC:8243.0023: unknown main item tag 0x0 [ 1186.909060][ T8] appleir 0003:05AC:8243.0023: No inputs registered, leaving [ 1186.919218][ T8] appleir 0003:05AC:8243.0023: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1188.005368][ T3749] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1188.145158][ T3749] usb 2-1: device descriptor read/64, error -71 [ 1188.395375][ T3749] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1188.525443][ T3749] usb 2-1: device descriptor read/64, error -71 [ 1188.635898][ T3749] usb usb2-port1: attempt power cycle [ 1188.975115][ T3749] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1188.997999][ T3749] usb 2-1: device descriptor read/8, error -71 [ 1189.235289][ T3749] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1189.268456][ T3749] usb 2-1: device descriptor read/8, error -71 [ 1189.375134][ T3749] usb usb2-port1: unable to enumerate USB device [ 1197.127942][ T8] usb 1-1: USB disconnect, device number 64 [ 1198.445093][ T8808] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1198.632940][ T8808] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1198.633796][ T8808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1198.644666][ T8808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1198.645336][ T8808] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1198.660459][ T8808] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1198.660894][ T8808] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1198.661272][ T8808] usb 2-1: Manufacturer: syz [ 1198.668690][ T8808] usb 2-1: config 0 descriptor?? [ 1199.112806][ T8808] appleir 0003:05AC:8243.0024: unknown main item tag 0x0 [ 1199.113472][ T8808] appleir 0003:05AC:8243.0024: No inputs registered, leaving [ 1199.125278][ T8808] appleir 0003:05AC:8243.0024: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1209.343885][ T8] usb 2-1: USB disconnect, device number 72 [ 1209.784924][ T8] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1209.946231][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1209.946582][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1209.946807][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1209.947226][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1209.947532][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1209.947709][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.950017][ T8] usb 2-1: config 0 descriptor?? [ 1210.268828][T12175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.281354][T12175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.053383][ T8] usbhid 2-1:0.0: can't add hid device: -32 [ 1215.054010][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1222.926257][ T8809] usb 2-1: USB disconnect, device number 73 [ 1225.038668][T10486] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.147776][T10486] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.307756][T10486] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.376885][T10486] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.805076][T10486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1225.813691][T10486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.817805][T10486] bond0 (unregistering): Released all slaves [ 1226.006224][T10486] hsr_slave_0: left promiscuous mode [ 1226.055232][T10486] hsr_slave_1: left promiscuous mode [ 1226.062242][T10486] veth1_macvtap: left promiscuous mode [ 1226.062693][T10486] veth0_macvtap: left promiscuous mode [ 1226.063737][T10486] veth1_vlan: left promiscuous mode [ 1226.064118][T10486] veth0_vlan: left promiscuous mode [ 1232.278430][T12257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1232.327210][T12257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1233.825474][T12257] hsr_slave_0: entered promiscuous mode [ 1233.827771][T12257] hsr_slave_1: entered promiscuous mode [ 1234.710131][T12257] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1234.718970][T12257] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1234.739217][T12257] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1234.749163][T12257] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1235.934133][T12257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1240.258211][T12680] netlink: 'syz.1.1625': attribute type 5 has an invalid length. [ 1240.292549][ T31] audit: type=1400 audit(2020.197:360): avc: denied { accept } for pid=12678 comm="syz.1.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1242.517052][T12257] veth0_vlan: entered promiscuous mode [ 1242.532312][T12257] veth1_vlan: entered promiscuous mode [ 1242.700183][T12257] veth0_macvtap: entered promiscuous mode [ 1242.720780][T12257] veth1_macvtap: entered promiscuous mode [ 1242.977712][T12257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.979804][T12257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.980159][T12257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.980474][T12257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.020558][T12715] Illegal XDP return value 2395721600 on prog (id 111) dev syz_tun, expect packet loss! [ 1249.328639][T12738] netlink: 'syz.0.1633': attribute type 4 has an invalid length. [ 1249.379246][T12738] netlink: 'syz.0.1633': attribute type 4 has an invalid length. [ 1250.864930][ T91] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1251.044017][ T91] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1251.045075][ T91] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1251.045490][ T91] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1251.045963][ T91] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1251.046329][ T91] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.051968][ T91] usb 1-1: config 0 descriptor?? [ 1251.060278][T12752] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1251.497760][ T91] plantronics 0003:047F:FFFF.0025: unknown main item tag 0xd [ 1251.506244][ T91] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1251.506632][ T91] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1251.506988][ T91] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1251.507343][ T91] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1251.507691][ T91] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1251.508402][ T91] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 1251.585668][ T91] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1251.775724][ T91] usb 1-1: USB disconnect, device number 65 [ 1252.297341][ T8572] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1252.514060][ T8572] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.515307][ T8572] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.516940][ T8572] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1252.523348][ T8572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.535145][ T8572] usb 1-1: config 0 descriptor?? [ 1253.024744][ T8572] usbhid 1-1:0.0: can't add hid device: -71 [ 1253.025524][ T8572] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1253.035471][ T8572] usb 1-1: USB disconnect, device number 66 [ 1253.586963][T12803] *** NOT YET: opcode db *** [ 1254.093261][ T8] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1254.093839][ T8] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1254.136045][ T8] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1255.560072][T12818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1646'. [ 1256.975019][ T8] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1257.171327][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 1257.195973][ T8] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 1257.196536][ T8] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1257.196942][ T8] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1257.197407][ T8] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1257.256842][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1257.274827][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.275922][ T8] usb 1-1: Product: syz [ 1257.279938][ T8] usb 1-1: Manufacturer: syz [ 1257.282539][ T8] usb 1-1: SerialNumber: syz [ 1257.501642][ T8] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1257.502147][ T8] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 1257.550398][ T8] usb 1-1: USB disconnect, device number 67 [ 1258.588054][ T3175] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.697582][ T3175] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.817339][ T3175] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.920141][ T3175] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.416593][ T3175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1259.456736][ T3175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1259.469121][ T3175] bond0 (unregistering): Released all slaves [ 1259.605399][ T3175] hsr_slave_0: left promiscuous mode [ 1259.627707][ T3175] hsr_slave_1: left promiscuous mode [ 1259.639637][ T3175] veth1_macvtap: left promiscuous mode [ 1259.640064][ T3175] veth0_macvtap: left promiscuous mode [ 1259.640453][ T3175] veth1_vlan: left promiscuous mode [ 1259.640752][ T3175] veth0_vlan: left promiscuous mode [ 1263.918564][T12866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1263.929023][T12866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1265.887166][T12866] hsr_slave_0: entered promiscuous mode [ 1265.898190][T12866] hsr_slave_1: entered promiscuous mode [ 1266.637555][T12866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1266.647648][T12866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1266.657827][T12866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1266.663649][T12866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1267.815595][T12866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1271.867766][T12866] veth0_vlan: entered promiscuous mode [ 1271.885604][T12866] veth1_vlan: entered promiscuous mode [ 1271.937719][T12866] veth0_macvtap: entered promiscuous mode [ 1271.941867][T12866] veth1_macvtap: entered promiscuous mode [ 1271.988309][T12866] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.988609][T12866] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.988823][T12866] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.989030][T12866] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.297915][T13285] input: syz0 as /devices/virtual/input/input17 [ 1272.725686][ T8830] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1272.897296][ T8830] usb 1-1: config 0 has no interfaces? [ 1272.897732][ T8830] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1272.898062][ T8830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.902646][ T8830] usb 1-1: config 0 descriptor?? [ 1275.777615][ T3175] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.867861][ T3175] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.025677][ T3175] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.119200][ T3175] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.389172][ T3175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1276.393114][ T3175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1276.399640][ T3175] bond0 (unregistering): Released all slaves [ 1276.456489][ T3175] hsr_slave_0: left promiscuous mode [ 1276.457953][ T3175] hsr_slave_1: left promiscuous mode [ 1276.465044][ T3175] veth1_macvtap: left promiscuous mode [ 1276.465245][ T3175] veth0_macvtap: left promiscuous mode [ 1276.465423][ T3175] veth1_vlan: left promiscuous mode [ 1276.465596][ T3175] veth0_vlan: left promiscuous mode [ 1276.897160][T13312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1276.913698][T13312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1278.356285][T13312] hsr_slave_0: entered promiscuous mode [ 1278.360330][T13312] hsr_slave_1: entered promiscuous mode [ 1278.362950][T13312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1278.363493][T13312] Cannot create hsr debugfs directory [ 1278.982454][T13312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1278.992123][T13312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1279.008824][T13312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1279.018599][T13312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1280.186374][T13312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.808223][T13312] veth0_vlan: entered promiscuous mode [ 1283.829888][T13312] veth1_vlan: entered promiscuous mode [ 1283.894908][T13312] veth0_macvtap: entered promiscuous mode [ 1283.910378][T13312] veth1_macvtap: entered promiscuous mode [ 1283.983961][T13312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.984551][T13312] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.984841][T13312] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.985190][T13312] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.839223][T13722] Device name cannot be null; rc = [-22] [ 1285.455232][ T91] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1285.639178][ T91] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1285.639701][ T91] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.651237][ T91] usb 2-1: config 0 descriptor?? [ 1287.137976][ T91] usb 2-1: Cannot set autoneg [ 1287.139753][ T91] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1287.150270][ T91] usb 2-1: USB disconnect, device number 74 [ 1287.429874][ T91] usb 1-1: USB disconnect, device number 68 [ 1289.105252][ T8830] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1289.386658][ T8830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1289.387256][ T8830] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1289.387858][ T8830] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1289.388271][ T8830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.405504][ T8830] usb 2-1: config 0 descriptor?? [ 1289.861466][ T8830] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 1289.880343][ T8830] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1290.151987][ T8572] usb 2-1: USB disconnect, device number 75 [ 1290.645553][ T8572] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1290.805136][ T8572] usb 2-1: Using ep0 maxpacket: 16 [ 1290.826485][ T8572] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.827339][ T8572] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1290.827741][ T8572] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1290.828236][ T8572] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1290.828582][ T8572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.868301][ T8572] usb 2-1: config 0 descriptor?? [ 1292.938068][ T31] audit: type=1400 audit(2072.847:361): avc: denied { write } for pid=13796 comm="syz.0.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1295.220195][ T8572] microsoft 0003:045E:07DA.0028: unbalanced collection at end of report description [ 1295.220834][ T8572] microsoft 0003:045E:07DA.0028: parse failed [ 1295.221086][ T8572] microsoft 0003:045E:07DA.0028: probe with driver microsoft failed with error -22 [ 1295.475149][ T8830] usb 2-1: USB disconnect, device number 76 [ 1296.030867][ T8830] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1296.367937][ T8830] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1296.399434][ T8830] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1296.400098][ T8830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.404545][ T8830] usb 2-1: Product: syz [ 1296.404926][ T8830] usb 2-1: Manufacturer: syz [ 1296.405161][ T8830] usb 2-1: SerialNumber: syz [ 1297.476767][ T8830] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1297.477456][ T8830] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1297.477674][ T8830] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1297.678090][ T8830] cdc_ncm 2-1:1.0: setting tx_max = 60 [ 1297.698524][ T8830] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1297.727701][ T8830] usb 2-1: USB disconnect, device number 77 [ 1297.729286][ T8830] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 1297.848457][ T8830] ------------[ cut here ]------------ [ 1297.849114][ T8830] WARNING: CPU: 1 PID: 8830 at lib/debugobjects.c:514 debug_print_object+0xc4/0xd8 [ 1297.849521][ T8830] ODEBUG: free active (active state 0) object: 851adfcc object type: work_struct hint: usbnet_deferred_kevent+0x0/0x394 [ 1297.850638][ T8830] Modules linked in: [ 1297.851357][ T8830] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1297.852737][ T8830] CPU: 1 UID: 0 PID: 8830 Comm: kworker/1:13 Not tainted 6.12.0-rc3-syzkaller #0 [ 1297.853719][ T8830] Hardware name: ARM-Versatile Express [ 1297.854454][ T8830] Workqueue: usb_hub_wq hub_event [ 1297.854988][ T8830] Call trace: [ 1297.855289][ T8830] [<81999710>] (dump_backtrace) from [<8199980c>] (show_stack+0x18/0x1c) [ 1297.856056][ T8830] r7:00000000 r6:82622f44 r5:00000000 r4:8203d7c4 [ 1297.856614][ T8830] [<819997f4>] (show_stack) from [<819b7ca8>] (dump_stack_lvl+0x54/0x7c) [ 1297.857301][ T8830] [<819b7c54>] (dump_stack_lvl) from [<819b7ce8>] (dump_stack+0x18/0x1c) [ 1297.857830][ T8830] r5:00000000 r4:82870d18 [ 1297.858055][ T8830] [<819b7cd0>] (dump_stack) from [<8199a338>] (panic+0x120/0x374) [ 1297.858922][ T8830] [<8199a218>] (panic) from [<802420e0>] (get_taint+0x0/0x1c) [ 1297.859437][ T8830] r3:8260c5c4 r2:00000001 r1:82025b98 r0:8202d600 [ 1297.859949][ T8830] r7:80854740 [ 1297.860321][ T8830] [<8024206c>] (check_panic_on_warn) from [<80242244>] (__warn+0x80/0x188) [ 1297.860916][ T8830] [<802421c4>] (__warn) from [<80242534>] (warn_slowpath_fmt+0x1e8/0x1f4) [ 1297.861393][ T8830] r8:00000009 r7:8208c8c0 r6:e0031a8c r5:84649800 r4:00000000 [ 1297.861792][ T8830] [<80242350>] (warn_slowpath_fmt) from [<80854740>] (debug_print_object+0xc4/0xd8) [ 1297.862405][ T8830] r10:00000005 r9:851ad800 r8:81a01c24 r7:820b76b0 r6:828dd084 r5:e0031b34 [ 1297.862878][ T8830] r4:8260cda4 [ 1297.863054][ T8830] [<8085467c>] (debug_print_object) from [<80855fd0>] (debug_check_no_obj_freed+0x254/0x2a0) [ 1297.863948][ T8830] r8:851ae000 r7:851adfcc r6:00000100 r5:00000003 r4:00000000 [ 1297.864351][ T8830] [<80855d7c>] (debug_check_no_obj_freed) from [<804c9154>] (kfree+0x190/0x394) [ 1297.865088][ T8830] r10:8277e5bc r9:8413a080 r8:851ad800 r7:8046d128 r6:82c023c0 r5:ddeb0ba0 [ 1297.865661][ T8830] r4:851ad800 [ 1297.865852][ T8830] [<804c8fc4>] (kfree) from [<8046d128>] (kvfree+0x2c/0x30) [ 1297.866349][ T8830] r10:8277e5bc r9:8413a080 r8:851ad800 r7:00000000 r6:84bacb40 r5:85618c00 [ 1297.866653][ T8830] r4:851ad800 [ 1297.866843][ T8830] [<8046d0fc>] (kvfree) from [<814fbb48>] (netdev_release+0x2c/0x34) [ 1297.867180][ T8830] r5:85618c00 r4:851ad800 [ 1297.867366][ T8830] [<814fbb1c>] (netdev_release) from [<80aa3a6c>] (device_release+0x38/0xa8) [ 1297.868007][ T8830] r5:85618c00 r4:851adbc0 [ 1297.868260][ T8830] [<80aa3a34>] (device_release) from [<8197356c>] (kobject_put+0xa0/0x1f4) [ 1297.868628][ T8830] r5:81b4c9c4 r4:851adbc0 [ 1297.868813][ T8830] [<819734cc>] (kobject_put) from [<80aa3c98>] (put_device+0x18/0x1c) [ 1297.869216][ T8830] r7:8413bc00 r6:00000000 r5:851ad800 r4:00000000 [ 1297.869458][ T8830] [<80aa3c80>] (put_device) from [<814b01e8>] (free_netdev+0x134/0x1ac) [ 1297.869865][ T8830] [<814b00b4>] (free_netdev) from [<80d87a18>] (usbnet_disconnect+0xb8/0xfc) [ 1297.870436][ T8830] r6:851adf94 r5:851ade80 r4:00000000 [ 1297.870712][ T8830] [<80d87960>] (usbnet_disconnect) from [<80df0108>] (usb_unbind_interface+0x84/0x2c4) [ 1297.871193][ T8830] r8:00000044 r7:8413bc30 r6:8277e5bc r5:00000000 r4:8413bc00 [ 1297.871487][ T8830] [<80df0084>] (usb_unbind_interface) from [<80aabb5c>] (device_remove+0x64/0x6c) [ 1297.871861][ T8830] r10:00000000 r9:8413a080 r8:00000044 r7:8413bc74 r6:8277e5bc r5:00000000 [ 1297.872293][ T8830] r4:8413bc30 [ 1297.872537][ T8830] [<80aabaf8>] (device_remove) from [<80aad048>] (device_release_driver_internal+0x18c/0x200) [ 1297.872931][ T8830] r5:00000000 r4:8413bc30 [ 1297.873149][ T8830] [<80aacebc>] (device_release_driver_internal) from [<80aad0d4>] (device_release_driver+0x18/0x1c) [ 1297.873810][ T8830] r9:8413a080 r8:82f98e40 r7:82f98e38 r6:82f98e0c r5:8413bc30 r4:82f98e30 [ 1297.874221][ T8830] [<80aad0bc>] (device_release_driver) from [<80aab1b8>] (bus_remove_device+0xcc/0x120) [ 1297.874608][ T8830] [<80aab0ec>] (bus_remove_device) from [<80aa54f4>] (device_del+0x148/0x38c) [ 1297.875147][ T8830] r9:8413a080 r8:84649800 r7:04208060 r6:00000000 r5:8413bc30 r4:8413bc74 [ 1297.875851][ T8830] [<80aa53ac>] (device_del) from [<80dedb24>] (usb_disable_device+0xdc/0x1f0) [ 1297.876363][ T8830] r10:00000000 r9:00000000 r8:8413bc00 r7:8413a000 r6:84bab708 r5:00000001 [ 1297.876811][ T8830] r4:00000038 [ 1297.877085][ T8830] [<80deda48>] (usb_disable_device) from [<80de2988>] (usb_disconnect+0xec/0x29c) [ 1297.877534][ T8830] r10:00000001 r9:846f8200 r8:8413a0c4 r7:83e60400 r6:8413a080 r5:8413a000 [ 1297.878110][ T8830] r4:60000113 [ 1297.878313][ T8830] [<80de289c>] (usb_disconnect) from [<80de5638>] (hub_event+0xe78/0x194c) [ 1297.879191][ T8830] r10:00000001 r9:00000100 r8:83ba3500 r7:8413a000 r6:83e5fc00 r5:83e60610 [ 1297.880178][ T8830] r4:00000001 [ 1297.880483][ T8830] [<80de47c0>] (hub_event) from [<80266034>] (process_one_work+0x1b4/0x4f4) [ 1297.881062][ T8830] r10:82e70a05 r9:84649800 r8:01800000 r7:ddde40c0 r6:82e70a00 r5:83ba3500 [ 1297.881643][ T8830] r4:84adc380 [ 1297.881872][ T8830] [<80265e80>] (process_one_work) from [<80266c18>] (worker_thread+0x1ec/0x3bc) [ 1297.882555][ T8830] r10:84649800 r9:84adc3ac r8:61c88647 r7:ddde40e0 r6:82604d40 r5:ddde40c0 [ 1297.883082][ T8830] r4:84adc380 [ 1297.883275][ T8830] [<80266a2c>] (worker_thread) from [<8026fc94>] (kthread+0x104/0x134) [ 1297.883901][ T8830] r10:00000000 r9:dfe8de78 r8:843f7500 r7:84adc380 r6:80266a2c r5:84649800 [ 1297.884418][ T8830] r4:843f75c0 [ 1297.884897][ T8830] [<8026fb90>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 1297.885952][ T8830] Exception stack(0xe0031fb0 to 0xe0031ff8) [ 1297.886620][ T8830] 1fa0: 00000000 00000000 00000000 00000000 [ 1297.887190][ T8830] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 1297.887763][ T8830] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 1297.888157][ T8830] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fb90 r4:843f75c0 [ 1297.890545][ T8830] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:50:23 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=00000000 R02=00000002 R03=819b9b18 R04=826f89c8 R05=826f89c0 R06=00000028 R07=00000006 R08=826f89c8 R09=00000000 R10=83dffd00 R11=dffc1e24 R12=dffc1e28 R13=dffc1e18 R14=819b87ac R15=819b9b28 PSR=40000093 -Z-- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000003 s17=7e94faf0 d08=7e94faf000000003 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=84114c40 R01=0000006c R02=eb0b1000 R03=eb0b1018 R04=8287344d R05=84114c40 R06=809e8814 R07=82873457 R08=8287341c R09=0000003c R10=00000001 R11=e00317cc R12=00000002 R13=e00317c0 R14=827584a4 R15=809e8824 PSR=80000193 N--- A S svc32 s00=e0000000 s01=4010b126 d00=4010b126e0000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=ffffffff s13=7fefffff d06=7fefffffffffffff s14=e0000000 s15=4010b126 d07=4010b126e0000000 s16=00000003 s17=00518d4f d08=00518d4f00000003 s18=00518d3e s19=00000000 d09=0000000000518d3e s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 80000010