last executing test programs: 3.328549518s ago: executing program 1 (id=5734): bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') readv(r2, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1) 3.283573776s ago: executing program 1 (id=5735): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) close(r0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x3}, 0x18) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[], 0x14}}, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c}, 0x1c}}, 0x0) 2.116618908s ago: executing program 1 (id=5738): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x143001, 0x0) write$tun(r0, &(0x7f0000000040)={@void, @void, @x25={0x0, 0x66}}, 0x3) 2.116417078s ago: executing program 0 (id=5739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 1.819722475s ago: executing program 1 (id=5740): r0 = landlock_create_ruleset(&(0x7f0000000100)={0x82f8}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$zero(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, 0x0) 1.507062044s ago: executing program 0 (id=5741): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x10}, 0x10}}, 0x0) 1.450356845s ago: executing program 1 (id=5742): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 1.174574647s ago: executing program 1 (id=5743): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = io_uring_setup(0x4d63, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) 1.153156861s ago: executing program 0 (id=5744): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x81) 826.858643ms ago: executing program 0 (id=5745): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000340200000200000008000100", @ANYRES32], 0x1c}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) 268.333569ms ago: executing program 0 (id=5746): r0 = syz_open_dev$audion(&(0x7f0000000580), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) 0s ago: executing program 0 (id=5747): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0'}, 0x4) kernel console output (not intermixed with test programs): ontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2325.495433][T20568] fuse: Unknown parameter 'grou00000000000000000000' [ 2327.644655][T20584] fuse: Unknown parameter 'group_i00000000000000000000' [ 2330.330672][T20631] fuse: Unknown parameter 'group_i00000000000000000000' [ 2331.472503][T20645] nbd1: detected capacity change from 0 to 12 [ 2331.479489][T20645] block nbd1: Send control failed (result -89) [ 2331.480023][T20645] block nbd1: Request send failed, requeueing [ 2331.481333][ T52] block nbd1: Receive control failed (result -32) [ 2331.482651][ T25] block nbd1: Dead connection, failed to find a fallback [ 2331.483076][ T25] block nbd1: shutting down sockets [ 2331.483642][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2331.484193][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2331.485967][T20645] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2331.486896][T20645] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2331.487579][T20645] nbd1: unable to read partition table [ 2331.616371][T20649] fuse: Unknown parameter 'group_i00000000000000000000' [ 2332.348577][T20662] fuse: Unknown parameter 'group_id00000000000000000000' [ 2333.909131][T20679] fuse: Unknown parameter 'group_id00000000000000000000' [ 2334.417316][T20690] serio: Serial port pts0 [ 2335.969246][T20697] fuse: Unknown parameter 'group_id00000000000000000000' [ 2339.621071][T20714] fuse: Bad value for 'user_id' [ 2339.621574][T20714] fuse: Bad value for 'user_id' [ 2343.443865][T20732] fuse: Bad value for 'user_id' [ 2343.444331][T20732] fuse: Bad value for 'user_id' [ 2344.655888][T20746] fuse: Bad value for 'user_id' [ 2344.656274][T20746] fuse: Bad value for 'user_id' [ 2347.294417][T20759] fuse: Bad value for 'fd' [ 2347.949579][T20772] fuse: Bad value for 'fd' [ 2348.609975][T20786] fuse: Bad value for 'fd' [ 2349.054946][T20796] fuse: Bad value for 'fd' [ 2349.522886][T20807] fuse: Bad value for 'fd' [ 2349.969455][T20817] fuse: Bad value for 'fd' [ 2350.397832][T20827] fuse: Invalid rootmode [ 2353.989314][T20847] FAULT_INJECTION: forcing a failure. [ 2353.989314][T20847] name failslab, interval 1, probability 0, space 0, times 0 [ 2353.990247][T20847] CPU: 1 UID: 0 PID: 20847 Comm: syz.1.4168 Not tainted 6.11.0-rc6-syzkaller #0 [ 2353.990562][T20847] Hardware name: ARM-Versatile Express [ 2353.990783][T20847] Call trace: [ 2353.991003][T20847] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2353.991373][T20847] r7:00000d40 r6:8452b730 r5:60000013 r4:8200ca8c [ 2353.991618][T20847] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2353.992390][T20847] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2353.992959][T20847] r5:00000000 r4:8271619c [ 2353.993272][T20847] [<8197af28>] (dump_stack) from [<808be610>] (should_fail_ex+0x18c/0x1dc) [ 2353.993648][T20847] [<808be484>] (should_fail_ex) from [<804db0a0>] (should_failslab+0x6c/0x94) [ 2353.994233][T20847] r6:8452b730 r5:00000024 r4:82c01240 [ 2353.994489][T20847] [<804db034>] (should_failslab) from [<804c0e40>] (__kmalloc_noprof+0x9c/0x458) [ 2353.995381][T20847] [<804c0da4>] (__kmalloc_noprof) from [<807289d0>] (tomoyo_encode2+0x64/0xf0) [ 2353.995871][T20847] r10:00000fff r9:82c9a800 r8:00000000 r7:830d9770 r6:8452b730 r5:847bcffc [ 2353.996308][T20847] r4:847bcfe3 [ 2353.996500][T20847] [<8072896c>] (tomoyo_encode2) from [<80728a80>] (tomoyo_encode+0x24/0x30) [ 2353.997000][T20847] r9:82c9a800 r8:00000000 r7:830d9770 r6:8452b730 r5:00001000 r4:847bcfe4 [ 2353.997320][T20847] [<80728a5c>] (tomoyo_encode) from [<80728b0c>] (tomoyo_realpath_from_path+0x80/0x17c) [ 2353.997734][T20847] r5:00001000 r4:847bc000 [ 2353.998010][T20847] [<80728a8c>] (tomoyo_realpath_from_path) from [<80724c0c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2353.998548][T20847] r10:83600c00 r9:00000000 r8:8452b6c0 r7:c03864bc r6:00000004 r5:81ad0e68 [ 2353.998941][T20847] r4:8452b730 r3:824b7380 [ 2353.999146][T20847] [<80724b40>] (tomoyo_path_number_perm) from [<807294d8>] (tomoyo_file_ioctl+0x1c/0x20) [ 2353.999574][T20847] r9:00000004 r8:8452b6c0 r7:8452b6c0 r6:c03864bc r5:00000000 r4:822071e4 [ 2353.999910][T20847] [<807294bc>] (tomoyo_file_ioctl) from [<806ec490>] (security_file_ioctl+0x40/0x5c) [ 2354.000313][T20847] [<806ec450>] (security_file_ioctl) from [<80520cc8>] (sys_ioctl+0x50/0xda4) [ 2354.000727][T20847] r7:00000000 r6:8452b6c1 r5:00000000 r4:c03864bc [ 2354.001061][T20847] [<80520c78>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2354.001496][T20847] Exception stack(0xeb391fa8 to 0xeb391ff0) [ 2354.002415][T20847] 1fa0: 00000000 00000000 00000004 c03864bc 00000000 00000000 [ 2354.003684][T20847] 1fc0: 00000000 00000000 00130d80 00000036 00000000 00006364 003d0f00 76bf40bc [ 2354.004166][T20847] 1fe0: 76bf3ec0 76bf3eb0 000189f0 00132dd0 [ 2354.004402][T20847] r10:00000036 r9:83600c00 r8:8020029c r7:00000036 r6:00130d80 r5:00000000 [ 2354.004711][T20847] r4:00000000 [ 2354.006312][T20847] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2356.569438][T20902] fuse: Bad value for 'rootmode' [ 2357.075203][T20913] fuse: Bad value for 'rootmode' [ 2359.054538][T20929] fuse: Unknown parameter 'use00000000000000000000' [ 2359.549957][T20940] fuse: Unknown parameter 'use00000000000000000000' [ 2359.962689][ T31] audit: type=1400 audit(2359.904:679): avc: denied { write } for pid=20945 comm="syz.1.4208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2360.284710][T20953] fuse: Unknown parameter 'use00000000000000000000' [ 2361.349964][T20972] FAULT_INJECTION: forcing a failure. [ 2361.349964][T20972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2361.350656][T20972] CPU: 1 UID: 0 PID: 20972 Comm: syz.1.4218 Not tainted 6.11.0-rc6-syzkaller #0 [ 2361.351000][T20972] Hardware name: ARM-Versatile Express [ 2361.351279][T20972] Call trace: [ 2361.351514][T20972] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2361.352132][T20972] r7:00000000 r6:8220582c r5:60000013 r4:8200ca8c [ 2361.352520][T20972] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2361.352930][T20972] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2361.353315][T20972] r5:00000000 r4:8274a3d4 [ 2361.353539][T20972] [<8197af28>] (dump_stack) from [<808be610>] (should_fail_ex+0x18c/0x1dc) [ 2361.353994][T20972] [<808be484>] (should_fail_ex) from [<808be674>] (should_fail+0x14/0x18) [ 2361.354387][T20972] r6:8220582c r5:20000040 r4:82edc000 [ 2361.354661][T20972] [<808be660>] (should_fail) from [<808be694>] (should_fail_usercopy+0x1c/0x20) [ 2361.355064][T20972] [<808be678>] (should_fail_usercopy) from [<808c46dc>] (strncpy_from_user+0x20/0x194) [ 2361.355486][T20972] [<808c46bc>] (strncpy_from_user) from [<805168ac>] (getname_flags.part.0+0x44/0x18c) [ 2361.355947][T20972] r10:00000144 r9:845bbc00 r8:8020029c r7:00000000 r6:8220582c r5:20000040 [ 2361.356300][T20972] r4:82edc000 [ 2361.356489][T20972] [<80516868>] (getname_flags.part.0) from [<8051b8fc>] (getname_flags+0x3c/0x50) [ 2361.356934][T20972] r9:845bbc00 r8:8020029c r7:00000144 r6:00000702 r5:00000000 r4:20000040 [ 2361.357284][T20972] [<8051b8c0>] (getname_flags) from [<8051d6e0>] (sys_mknodat+0x28/0x40) [ 2361.357697][T20972] r5:00000000 r4:00000004 [ 2361.357938][T20972] [<8051d6b8>] (sys_mknodat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2361.358329][T20972] Exception stack(0xec1f5fa8 to 0xec1f5ff0) [ 2361.358645][T20972] 5fa0: 00000000 00000000 00000004 20000040 00000000 00000702 [ 2361.359058][T20972] 5fc0: 00000000 00000000 00130d80 00000144 00000000 00006364 003d0f00 76bf40bc [ 2361.359427][T20972] 5fe0: 76bf3ec0 76bf3eb0 000189f0 00132dd0 [ 2361.359728][T20972] r7:00000144 r6:00130d80 r5:00000000 r4:00000000 [ 2362.478141][T20998] serio: Serial port pts0 [ 2366.095753][ T31] audit: type=1400 audit(2366.034:680): avc: denied { write } for pid=21014 comm="syz.0.4232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2369.876094][ T31] audit: type=1400 audit(2369.814:681): avc: denied { connect } for pid=21040 comm="syz.0.4241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2372.439659][T21083] fuse: Unknown parameter 'user_id00000000000000000000' [ 2372.731238][T21093] fuse: Unknown parameter 'user_id00000000000000000000' [ 2372.813224][T21095] FAULT_INJECTION: forcing a failure. [ 2372.813224][T21095] name failslab, interval 1, probability 0, space 0, times 0 [ 2372.813599][T21095] CPU: 0 UID: 0 PID: 21095 Comm: syz.1.4259 Not tainted 6.11.0-rc6-syzkaller #0 [ 2372.813868][T21095] Hardware name: ARM-Versatile Express [ 2372.814077][T21095] Call trace: [ 2372.814507][T21095] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2372.815156][T21095] r7:845bb000 r6:00000cc0 r5:60000013 r4:8200ca8c [ 2372.815729][T21095] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2372.815955][T21095] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2372.816123][T21095] r5:00000000 r4:8271619c [ 2372.816227][T21095] [<8197af28>] (dump_stack) from [<808be610>] (should_fail_ex+0x18c/0x1dc) [ 2372.816825][T21095] [<808be484>] (should_fail_ex) from [<804db0a0>] (should_failslab+0x6c/0x94) [ 2372.817352][T21095] r6:00000cc0 r5:20000040 r4:82c9fb40 [ 2372.817636][T21095] [<804db034>] (should_failslab) from [<804c0abc>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 2372.817929][T21095] [<804c0a70>] (kmem_cache_alloc_noprof) from [<80516890>] (getname_flags.part.0+0x28/0x18c) [ 2372.818175][T21095] r10:000001b5 r9:845bb000 r8:b5403587 r7:00000000 r6:8220582c r5:20000040 [ 2372.818401][T21095] r4:20000040 [ 2372.818496][T21095] [<80516868>] (getname_flags.part.0) from [<8051ba3c>] (getname+0x38/0x4c) [ 2372.818724][T21095] r9:845bb000 r8:b5403587 r7:ffffff9c r6:00000000 r5:ec625f60 r4:20000040 [ 2372.818913][T21095] [<8051ba04>] (getname) from [<80504710>] (do_sys_openat2+0x80/0xe4) [ 2372.819125][T21095] r5:ec625f60 r4:20000040 [ 2372.819233][T21095] [<80504690>] (do_sys_openat2) from [<80504c64>] (sys_openat2+0xd4/0x14c) [ 2372.819445][T21095] r7:20000040 r6:845bb000 r5:ffffff9c r4:20003540 [ 2372.819597][T21095] [<80504b90>] (sys_openat2) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2372.819819][T21095] Exception stack(0xec625fa8 to 0xec625ff0) [ 2372.819969][T21095] 5fa0: 00000000 00000000 ffffff9c 20000040 20003540 00000018 [ 2372.820174][T21095] 5fc0: 00000000 00000000 00130d80 000001b5 00000000 00006364 003d0f00 76bf40bc [ 2372.820382][T21095] 5fe0: 76bf3ec0 76bf3eb0 000189f0 00132dd0 [ 2372.820527][T21095] r8:8020029c r7:000001b5 r6:00130d80 r5:00000000 r4:00000000 [ 2373.060045][T21105] fuse: Bad value for 'fd' [ 2373.374147][T21118] fuse: Bad value for 'fd' [ 2373.871329][T21135] fuse: Bad value for 'fd' [ 2374.364292][T21146] fuse: Unknown parameter '00000000000000000003' [ 2375.652903][T21169] fuse: Unknown parameter '00000000000000000003' [ 2376.872480][T21185] fuse: Unknown parameter '00000000000000000003' [ 2377.363170][T21197] fuse: Unknown parameter '00000000000000000003' [ 2378.273672][T21213] fuse: Unknown parameter '00000000000000000003' [ 2379.188321][T21230] fuse: Unknown parameter '00000000000000000003' [ 2380.862928][T21241] [U] ^R [ 2381.064883][T21245] fuse: Unknown parameter 'fd00000000000000000003' [ 2384.417296][T21263] fuse: Unknown parameter 'fd00000000000000000003' [ 2384.592323][ T31] audit: type=1400 audit(2384.524:682): avc: denied { ioctl } for pid=21266 comm="syz.0.4317" path="socket:[49334]" dev="sockfs" ino=49334 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2387.626734][T21278] fuse: Unknown parameter 'fd00000000000000000003' [ 2387.786972][T21282] FAULT_INJECTION: forcing a failure. [ 2387.786972][T21282] name failslab, interval 1, probability 0, space 0, times 0 [ 2387.787621][T21282] CPU: 0 UID: 0 PID: 21282 Comm: syz.1.4322 Not tainted 6.11.0-rc6-syzkaller #0 [ 2387.787989][T21282] Hardware name: ARM-Versatile Express [ 2387.788214][T21282] Call trace: [ 2387.788399][T21282] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2387.788769][T21282] r7:00000c40 r6:83c30730 r5:60000013 r4:8200ca8c [ 2387.789194][T21282] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2387.789530][T21282] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2387.789966][T21282] r5:00000000 r4:8271619c [ 2387.790209][T21282] [<8197af28>] (dump_stack) from [<808be610>] (should_fail_ex+0x18c/0x1dc) [ 2387.790555][T21282] [<808be484>] (should_fail_ex) from [<804db0a0>] (should_failslab+0x6c/0x94) [ 2387.790898][T21282] r6:83c30730 r5:00001000 r4:82c016c0 [ 2387.791227][T21282] [<804db034>] (should_failslab) from [<804c0e40>] (__kmalloc_noprof+0x9c/0x458) [ 2387.791598][T21282] [<804c0da4>] (__kmalloc_noprof) from [<80728ac8>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 2387.792378][T21282] r10:836e0000 r9:82c9bc00 r8:00000000 r7:833f9330 r6:83c30730 r5:00001000 [ 2387.792785][T21282] r4:00000000 [ 2387.792952][T21282] [<80728a8c>] (tomoyo_realpath_from_path) from [<80724c0c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2387.793369][T21282] r10:836e0000 r9:00000000 r8:83c306c0 r7:000089a0 r6:00000004 r5:81ad0e68 [ 2387.793801][T21282] r4:83c30730 r3:824b7380 [ 2387.794003][T21282] [<80724b40>] (tomoyo_path_number_perm) from [<807294d8>] (tomoyo_file_ioctl+0x1c/0x20) [ 2387.794537][T21282] r9:00000003 r8:83c306c0 r7:83c306c0 r6:000089a0 r5:00000000 r4:822071e4 [ 2387.794866][T21282] [<807294bc>] (tomoyo_file_ioctl) from [<806ec490>] (security_file_ioctl+0x40/0x5c) [ 2387.795314][T21282] [<806ec450>] (security_file_ioctl) from [<80520cc8>] (sys_ioctl+0x50/0xda4) [ 2387.795695][T21282] r7:00000000 r6:83c306c1 r5:00000000 r4:000089a0 [ 2387.796130][T21282] [<80520c78>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2387.796485][T21282] Exception stack(0xecb19fa8 to 0xecb19ff0) [ 2387.796758][T21282] 9fa0: 00000000 00000000 00000003 000089a0 00000000 00000000 [ 2387.797285][T21282] 9fc0: 00000000 00000000 00130d80 00000036 00000000 00006364 003d0f00 76bf40bc [ 2387.797629][T21282] 9fe0: 76bf3ec0 76bf3eb0 000189f0 00132dd0 [ 2387.798034][T21282] r10:00000036 r9:836e0000 r8:8020029c r7:00000036 r6:00130d80 r5:00000000 [ 2387.798446][T21282] r4:00000000 [ 2387.813354][T21282] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2390.886418][T21299] FAULT_INJECTION: forcing a failure. [ 2390.886418][T21299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2390.887053][T21299] CPU: 1 UID: 0 PID: 21299 Comm: syz.1.4327 Not tainted 6.11.0-rc6-syzkaller #0 [ 2390.887375][T21299] Hardware name: ARM-Versatile Express [ 2390.887592][T21299] Call trace: [ 2390.887797][T21299] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2390.888209][T21299] r7:00000000 r6:00000000 r5:60000013 r4:8200ca8c [ 2390.888466][T21299] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2390.888827][T21299] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2390.889149][T21299] r5:00000000 r4:8274a3d4 [ 2390.889329][T21299] [<8197af28>] (dump_stack) from [<808be610>] (should_fail_ex+0x18c/0x1dc) [ 2390.889652][T21299] [<808be484>] (should_fail_ex) from [<808be674>] (should_fail+0x14/0x18) [ 2390.890020][T21299] r6:00000000 r5:ed099f68 r4:00000002 [ 2390.890226][T21299] [<808be660>] (should_fail) from [<808be694>] (should_fail_usercopy+0x1c/0x20) [ 2390.890550][T21299] [<808be678>] (should_fail_usercopy) from [<8053f5cc>] (simple_read_from_buffer+0x8c/0x134) [ 2390.890923][T21299] [<8053f540>] (simple_read_from_buffer) from [<805b43bc>] (proc_fail_nth_read+0xb8/0x100) [ 2390.891328][T21299] r10:00000001 r9:805b4304 r8:00000002 r7:ed099f68 r6:0000000f r5:76bf3f30 [ 2390.891725][T21299] r4:858a2400 r3:ed099e9f [ 2390.892003][T21299] [<805b4304>] (proc_fail_nth_read) from [<805074f4>] (vfs_read+0x98/0x324) [ 2390.892437][T21299] r8:76bf3f30 r7:ed099f68 r6:858a2400 r5:0000000f r4:8452b000 [ 2390.892756][T21299] [<8050745c>] (vfs_read) from [<805081a4>] (ksys_read+0x78/0xf8) [ 2390.893183][T21299] r10:00000003 r9:858a2400 r8:8020029c r7:00000000 r6:00000000 r5:8452b000 [ 2390.893559][T21299] r4:8452b003 [ 2390.893797][T21299] [<8050812c>] (ksys_read) from [<80508234>] (sys_read+0x10/0x14) [ 2390.894418][T21299] r7:00000003 r6:00000004 r5:76bf3f30 r4:0000000f [ 2390.894722][T21299] [<80508224>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2390.895073][T21299] Exception stack(0xed099fa8 to 0xed099ff0) [ 2390.895352][T21299] 9fa0: 0000000f 76bf3f30 00000004 76bf3f30 0000000f 00000000 [ 2390.895713][T21299] 9fc0: 0000000f 76bf3f30 00000004 00000003 00000000 00006364 003d0f00 76bf40bc [ 2390.896053][T21299] 9fe0: 00000158 76bf3ed0 000d8318 00130ca4 [ 2399.136135][T21364] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21364 comm=syz.1.4343 [ 2401.799636][T21371] fuse: blksize only supported for fuseblk [ 2402.256614][T21378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=21378 comm=syz.1.4349 [ 2406.848363][ T31] audit: type=1400 audit(2406.784:683): avc: denied { getopt } for pid=21408 comm="syz.0.4357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2409.635813][T21423] fuse: Bad value for 'rootmode' [ 2410.109485][T21428] FAULT_INJECTION: forcing a failure. [ 2410.109485][T21428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2410.110224][T21428] CPU: 0 UID: 0 PID: 21428 Comm: syz.0.4364 Not tainted 6.11.0-rc6-syzkaller #0 [ 2410.110584][T21428] Hardware name: ARM-Versatile Express [ 2410.110868][T21428] Call trace: [ 2410.111100][T21428] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2410.111506][T21428] r7:00000000 r6:00000000 r5:60000013 r4:8200ca8c [ 2410.112094][T21428] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2410.112912][T21428] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2410.113782][T21428] r5:00000000 r4:8274a3d4 [ 2410.114146][T21428] [<8197af28>] (dump_stack) from [<808be610>] (should_fail_ex+0x18c/0x1dc) [ 2410.114538][T21428] [<808be484>] (should_fail_ex) from [<808be674>] (should_fail+0x14/0x18) [ 2410.114944][T21428] r6:00000000 r5:ed415f68 r4:00000002 [ 2410.115207][T21428] [<808be660>] (should_fail) from [<808be694>] (should_fail_usercopy+0x1c/0x20) [ 2410.115831][T21428] [<808be678>] (should_fail_usercopy) from [<8053f5cc>] (simple_read_from_buffer+0x8c/0x134) [ 2410.116551][T21428] [<8053f540>] (simple_read_from_buffer) from [<805b43bc>] (proc_fail_nth_read+0xb8/0x100) [ 2410.119061][T21428] r10:00000001 r9:805b4304 r8:00000002 r7:ed415f68 r6:0000000f r5:76b98f30 [ 2410.119620][T21428] r4:858a0000 r3:ed415e9f [ 2410.119889][T21428] [<805b4304>] (proc_fail_nth_read) from [<805074f4>] (vfs_read+0x98/0x324) [ 2410.120410][T21428] r8:76b98f30 r7:ed415f68 r6:858a0000 r5:0000000f r4:83c30a80 [ 2410.120970][T21428] [<8050745c>] (vfs_read) from [<805081a4>] (ksys_read+0x78/0xf8) [ 2410.121531][T21428] r10:00000003 r9:858a0000 r8:8020029c r7:00000000 r6:00000000 r5:83c30a80 [ 2410.122816][T21428] r4:83c30a83 [ 2410.123168][T21428] [<8050812c>] (ksys_read) from [<80508234>] (sys_read+0x10/0x14) [ 2410.123652][T21428] r7:00000003 r6:00000005 r5:76b98f30 r4:0000000f [ 2410.123941][T21428] [<80508224>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2410.126006][T21428] Exception stack(0xed415fa8 to 0xed415ff0) [ 2410.126385][T21428] 5fa0: 0000000f 76b98f30 00000005 76b98f30 0000000f 00000000 [ 2410.128138][T21428] 5fc0: 0000000f 76b98f30 00000005 00000003 00000000 00006364 003d0f00 76b990bc [ 2410.128527][T21428] 5fe0: 00000158 76b98ed0 000d8318 00130ca4 [ 2423.446691][T21510] serio: Serial port pts0 [ 2426.976118][T21535] serio: Serial port pts0 [ 2427.106882][T21540] serio: Serial port pts1 [ 2433.494225][ T7529] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2433.557371][ T7529] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2433.658133][ T7529] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2433.737038][ T7529] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2434.029931][ T7529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2434.060698][ T7529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2434.067287][ T7529] bond0 (unregistering): Released all slaves [ 2434.184287][ T7529] hsr_slave_0: left promiscuous mode [ 2434.186906][ T7529] hsr_slave_1: left promiscuous mode [ 2434.200938][ T7529] veth1_macvtap: left promiscuous mode [ 2434.201440][ T7529] veth0_macvtap: left promiscuous mode [ 2434.202863][ T7529] veth1_vlan: left promiscuous mode [ 2435.583426][T21718] serio: Serial port pts0 [ 2435.859724][T21564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2435.870216][T21564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2436.870628][T21564] hsr_slave_0: entered promiscuous mode [ 2436.879871][T21564] hsr_slave_1: entered promiscuous mode [ 2437.513277][T21564] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2437.524032][T21564] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2437.535885][T21564] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2437.545560][T21564] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2438.229944][T21564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2441.303981][T21564] veth0_vlan: entered promiscuous mode [ 2441.334345][T21564] veth1_vlan: entered promiscuous mode [ 2441.404086][T21564] veth0_macvtap: entered promiscuous mode [ 2441.423250][T21564] veth1_macvtap: entered promiscuous mode [ 2441.489958][T21564] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2441.490309][T21564] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2441.490516][T21564] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2441.490762][T21564] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2444.567165][T22025] serio: Serial port pts0 [ 2445.183333][T22037] FAULT_INJECTION: forcing a failure. [ 2445.183333][T22037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2445.186544][T22037] CPU: 1 UID: 0 PID: 22037 Comm: syz.0.4413 Not tainted 6.11.0-rc6-syzkaller #0 [ 2445.187098][T22037] Hardware name: ARM-Versatile Express [ 2445.187332][T22037] Call trace: [ 2445.187523][T22037] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2445.187915][T22037] r7:00000000 r6:00000000 r5:60000013 r4:8200ca8c [ 2445.188226][T22037] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2445.188666][T22037] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2445.189127][T22037] r5:00000000 r4:8274a3d4 [ 2445.189335][T22037] [<8197af28>] (dump_stack) from [<808be610>] (should_fail_ex+0x18c/0x1dc) [ 2445.189705][T22037] [<808be484>] (should_fail_ex) from [<808be674>] (should_fail+0x14/0x18) [ 2445.190156][T22037] r6:00000000 r5:ede8df68 r4:00000002 [ 2445.190393][T22037] [<808be660>] (should_fail) from [<808be694>] (should_fail_usercopy+0x1c/0x20) [ 2445.190771][T22037] [<808be678>] (should_fail_usercopy) from [<8053f5cc>] (simple_read_from_buffer+0x8c/0x134) [ 2445.191296][T22037] [<8053f540>] (simple_read_from_buffer) from [<805b43bc>] (proc_fail_nth_read+0xb8/0x100) [ 2445.192132][T22037] r10:00000001 r9:805b4304 r8:00000002 r7:ede8df68 r6:0000000f r5:76b98f30 [ 2445.192696][T22037] r4:8417b000 r3:ede8de9f [ 2445.193006][T22037] [<805b4304>] (proc_fail_nth_read) from [<805074f4>] (vfs_read+0x98/0x324) [ 2445.193439][T22037] r8:76b98f30 r7:ede8df68 r6:8417b000 r5:0000000f r4:8452b3c0 [ 2445.193809][T22037] [<8050745c>] (vfs_read) from [<805081a4>] (ksys_read+0x78/0xf8) [ 2445.194207][T22037] r10:00000003 r9:8417b000 r8:8020029c r7:00000000 r6:00000000 r5:8452b3c0 [ 2445.194562][T22037] r4:8452b3c3 [ 2445.194763][T22037] [<8050812c>] (ksys_read) from [<80508234>] (sys_read+0x10/0x14) [ 2445.195174][T22037] r7:00000003 r6:00000004 r5:76b98f30 r4:0000000f [ 2445.195456][T22037] [<80508224>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2445.195857][T22037] Exception stack(0xede8dfa8 to 0xede8dff0) [ 2445.196150][T22037] dfa0: 0000000f 76b98f30 00000004 76b98f30 0000000f 00000000 [ 2445.196543][T22037] dfc0: 0000000f 76b98f30 00000004 00000003 00000000 00006364 003d0f00 76b990bc [ 2445.196923][T22037] dfe0: 00000158 76b98ed0 000d8318 00130ca4 [ 2452.132194][ T31] audit: type=1400 audit(2452.064:684): avc: denied { lock } for pid=22077 comm="syz.1.4423" path="socket:[51291]" dev="sockfs" ino=51291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2452.268194][T22083] serio: Serial port pts0 [ 2456.645587][T22108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22108 comm=syz.0.4429 [ 2459.352662][T22128] serio: Serial port pts0 [ 2467.860090][T22170] serio: Serial port pts0 [ 2468.332387][T22174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22174 comm=syz.0.4446 [ 2471.907892][T22193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22193 comm=syz.0.4451 [ 2476.866299][T22246] serio: Serial port pts0 [ 2477.144928][T22250] fuse: Bad value for 'fd' [ 2485.952685][T22279] FAULT_INJECTION: forcing a failure. [ 2485.952685][T22279] name failslab, interval 1, probability 0, space 0, times 0 [ 2485.953456][T22279] CPU: 1 UID: 0 PID: 22279 Comm: syz.0.4476 Not tainted 6.11.0-rc6-syzkaller #0 [ 2485.953899][T22279] Hardware name: ARM-Versatile Express [ 2485.954430][T22279] Call trace: [ 2485.954655][T22279] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2485.955086][T22279] r7:00000c40 r6:85315670 r5:60000013 r4:8200ca8c [ 2485.955416][T22279] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2485.956038][T22279] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2485.956473][T22279] r5:00000000 r4:8271619c [ 2485.956838][T22279] [<8197af28>] (dump_stack) from [<808be610>] (should_fail_ex+0x18c/0x1dc) [ 2485.957197][T22279] [<808be484>] (should_fail_ex) from [<804db0a0>] (should_failslab+0x6c/0x94) [ 2485.957581][T22279] r6:85315670 r5:00001000 r4:82c016c0 [ 2485.957839][T22279] [<804db034>] (should_failslab) from [<804c0e40>] (__kmalloc_noprof+0x9c/0x458) [ 2485.958209][T22279] [<804c0da4>] (__kmalloc_noprof) from [<80728ac8>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 2485.958602][T22279] r10:836ce000 r9:8340cc00 r8:00000000 r7:832d8770 r6:85315670 r5:00001000 [ 2485.958911][T22279] r4:00000000 [ 2485.959097][T22279] [<80728a8c>] (tomoyo_realpath_from_path) from [<80724c0c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2485.959517][T22279] r10:836ce000 r9:00000000 r8:85315600 r7:c0bc5310 r6:00000004 r5:81ad0e68 [ 2485.959821][T22279] r4:85315670 r3:824b7380 [ 2485.960085][T22279] [<80724b40>] (tomoyo_path_number_perm) from [<807294d8>] (tomoyo_file_ioctl+0x1c/0x20) [ 2485.960483][T22279] r9:00000004 r8:85315600 r7:85315600 r6:c0bc5310 r5:00000000 r4:822071e4 [ 2485.962736][T22279] [<807294bc>] (tomoyo_file_ioctl) from [<806ec490>] (security_file_ioctl+0x40/0x5c) [ 2485.963377][T22279] [<806ec450>] (security_file_ioctl) from [<80520cc8>] (sys_ioctl+0x50/0xda4) [ 2485.964356][T22279] r7:00000000 r6:85315601 r5:00000000 r4:c0bc5310 [ 2485.965627][T22279] [<80520c78>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2485.966209][T22279] Exception stack(0xee60dfa8 to 0xee60dff0) [ 2485.966513][T22279] dfa0: 00000000 00000000 00000004 c0bc5310 00000000 00000000 [ 2485.967381][T22279] dfc0: 00000000 00000000 00130d80 00000036 00000000 00006364 003d0f00 76b990bc [ 2485.967937][T22279] dfe0: 76b98ec0 76b98eb0 000189f0 00132dd0 [ 2485.968212][T22279] r10:00000036 r9:836ce000 r8:8020029c r7:00000036 r6:00130d80 r5:00000000 [ 2485.968566][T22279] r4:00000000 [ 2485.973215][T22279] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2486.083441][T22281] serio: Serial port pts0 [ 2492.156230][T22295] serio: Serial port pts0 [ 2511.492388][T19560] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2511.678856][T19560] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2511.680071][T19560] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2511.680815][T19560] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2511.682631][T19560] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2511.683044][T19560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2511.688574][T19560] usb 2-1: config 0 descriptor?? [ 2512.125209][T19560] acrux 0003:1A34:0802.000F: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 2512.126092][T19560] acrux 0003:1A34:0802.000F: no inputs found [ 2512.126748][T19560] acrux 0003:1A34:0802.000F: Failed to enable force feedback support, error: -19 [ 2512.332762][T22471] SELinux: Context /usr/sbin/cups-browsed is not valid (left unmapped). [ 2512.332923][ T31] audit: type=1400 audit(2512.274:685): avc: denied { relabelfrom } for pid=22470 comm="syz.1.4531" name="NETLINK" dev="sockfs" ino=50972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 2512.334795][ T31] audit: type=1400 audit(2512.274:686): avc: denied { relabelto } for pid=22470 comm="syz.1.4531" name="NETLINK" dev="sockfs" ino=50972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_audit_socket permissive=1 trawcon="/usr/sbin/cups-browsed" [ 2512.339688][T22471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2512.343777][T22471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2512.350342][T13418] usb 2-1: USB disconnect, device number 51 [ 2516.325006][T22527] fuse: Bad value for 'group_id' [ 2516.325469][T22527] fuse: Bad value for 'group_id' [ 2517.303343][T22538] fuse: Bad value for 'group_id' [ 2517.305272][T22538] fuse: Bad value for 'group_id' [ 2517.720056][T22546] serio: Serial port pts0 [ 2524.011032][T22575] FAULT_INJECTION: forcing a failure. [ 2524.011032][T22575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2524.012447][T22575] CPU: 1 UID: 0 PID: 22575 Comm: syz.1.4561 Not tainted 6.11.0-rc6-syzkaller #0 [ 2524.012853][T22575] Hardware name: ARM-Versatile Express [ 2524.013089][T22575] Call trace: [ 2524.013319][T22575] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2524.013926][T22575] r7:845d239b r6:00000000 r5:60000013 r4:8200ca8c [ 2524.014289][T22575] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2524.014627][T22575] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2524.014960][T22575] r5:00000000 r4:8274a3d4 [ 2524.015139][T22575] [<8197af28>] (dump_stack) from [<808be610>] (should_fail_ex+0x18c/0x1dc) [ 2524.015485][T22575] [<808be484>] (should_fail_ex) from [<808be674>] (should_fail+0x14/0x18) [ 2524.015956][T22575] r6:00000000 r5:ea8a1f48 r4:00000014 [ 2524.016284][T22575] [<808be660>] (should_fail) from [<808be694>] (should_fail_usercopy+0x1c/0x20) [ 2524.016704][T22575] [<808be678>] (should_fail_usercopy) from [<8080d32c>] (_copy_from_iter+0x64/0x5f8) [ 2524.017073][T22575] [<8080d2c8>] (_copy_from_iter) from [<817f2944>] (isotp_sendmsg+0x25c/0x7fc) [ 2524.017452][T22575] r10:ea8a1f38 r9:845d239b r8:ea8a1f48 r7:00000014 r6:845d0000 r5:845d2000 [ 2524.017832][T22575] r4:00000000 [ 2524.018038][T22575] [<817f26e8>] (isotp_sendmsg) from [<8145011c>] (__sock_sendmsg+0x44/0x78) [ 2524.018466][T22575] r10:00000004 r9:ea8a1dd4 r8:ea8a1dd4 r7:00000000 r6:84c04500 r5:ea8a1f38 [ 2524.018823][T22575] r4:00000000 [ 2524.019012][T22575] [<814500d8>] (__sock_sendmsg) from [<8145108c>] (____sys_sendmsg+0x2ac/0x2cc) [ 2524.019417][T22575] r7:00000000 r6:00000000 r5:84c04500 r4:ea8a1f38 [ 2524.019706][T22575] [<81450de0>] (____sys_sendmsg) from [<81452ff8>] (___sys_sendmsg+0x9c/0xd0) [ 2524.020512][T22575] r10:ea8a1e34 r9:20000540 r8:00000004 r7:00000000 r6:84c04500 r5:ea8a1f38 [ 2524.020966][T22575] r4:00000000 [ 2524.021182][T22575] [<81452f5c>] (___sys_sendmsg) from [<81453510>] (sys_sendmsg+0x78/0xbc) [ 2524.021682][T22575] r10:00000128 r9:84179800 r8:8020029c r7:00000004 r6:20000540 r5:84c04500 [ 2524.022313][T22575] r4:00000000 [ 2524.022511][T22575] [<81453498>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2524.022917][T22575] Exception stack(0xea8a1fa8 to 0xea8a1ff0) [ 2524.023204][T22575] 1fa0: 00000000 00000000 00000003 20000540 00000004 00000000 [ 2524.023579][T22575] 1fc0: 00000000 00000000 00130d80 00000128 00000000 00006364 003d0f00 76b670bc [ 2524.023983][T22575] 1fe0: 76b66ec0 76b66eb0 000189f0 00132dd0 [ 2524.024254][T22575] r7:00000128 r6:00130d80 r5:00000000 r4:00000000 [ 2525.494320][T22621] fuse: Unknown parameter 'grou00000000000000000000' [ 2525.938890][T22628] FAULT_INJECTION: forcing a failure. [ 2525.938890][T22628] name failslab, interval 1, probability 0, space 0, times 0 [ 2525.939277][T22628] CPU: 0 UID: 0 PID: 22628 Comm: syz.1.4574 Not tainted 6.11.0-rc6-syzkaller #0 [ 2525.939501][T22628] Hardware name: ARM-Versatile Express [ 2525.939796][T22628] Call trace: [ 2525.939905][T22628] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2525.940123][T22628] r7:845b8c00 r6:00000cc0 r5:60000013 r4:8200ca8c [ 2525.940377][T22628] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2525.940599][T22628] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2525.940805][T22628] r5:00000000 r4:8271619c [ 2525.941007][T22628] [<8197af28>] (dump_stack) from [<808be610>] (should_fail_ex+0x18c/0x1dc) [ 2525.941221][T22628] [<808be484>] (should_fail_ex) from [<804db0a0>] (should_failslab+0x6c/0x94) [ 2525.941429][T22628] r6:00000cc0 r5:ffffffff r4:82cab780 [ 2525.941597][T22628] [<804db034>] (should_failslab) from [<804c0450>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 2525.942050][T22628] [<804c0400>] (kmem_cache_alloc_node_noprof) from [<8145dd64>] (__alloc_skb+0x138/0x160) [ 2525.942429][T22628] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:82cab780 r5:ffffffff [ 2525.942636][T22628] r4:82606000 [ 2525.942734][T22628] [<8145dc2c>] (__alloc_skb) from [<8156f498>] (netlink_alloc_large_skb+0x88/0xa0) [ 2525.943035][T22628] r8:00000000 r7:85346c00 r6:00000034 r5:83256f00 r4:00000140 [ 2525.943324][T22628] [<8156f410>] (netlink_alloc_large_skb) from [<8156faa0>] (netlink_sendmsg+0x134/0x43c) [ 2525.943850][T22628] r5:83256f00 r4:ea9a9f38 [ 2525.944068][T22628] [<8156f96c>] (netlink_sendmsg) from [<8145011c>] (__sock_sendmsg+0x44/0x78) [ 2525.944431][T22628] r10:00000008 r9:ea9a9dd4 r8:ea9a9dd4 r7:00000000 r6:83256f00 r5:ea9a9f38 [ 2525.944663][T22628] r4:00000000 [ 2525.944875][T22628] [<814500d8>] (__sock_sendmsg) from [<8145108c>] (____sys_sendmsg+0x2ac/0x2cc) [ 2525.945254][T22628] r7:00000000 r6:00000000 r5:83256f00 r4:ea9a9f38 [ 2525.945462][T22628] [<81450de0>] (____sys_sendmsg) from [<81452ff8>] (___sys_sendmsg+0x9c/0xd0) [ 2525.945736][T22628] r10:ea9a9e34 r9:20000140 r8:00000008 r7:00000000 r6:83256f00 r5:ea9a9f38 [ 2525.946046][T22628] r4:00000000 [ 2525.946155][T22628] [<81452f5c>] (___sys_sendmsg) from [<81453510>] (sys_sendmsg+0x78/0xbc) [ 2525.946557][T22628] r10:00000128 r9:845b8c00 r8:8020029c r7:00000008 r6:20000140 r5:83256f00 [ 2525.946987][T22628] r4:00000000 [ 2525.947181][T22628] [<81453498>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2525.947671][T22628] Exception stack(0xea9a9fa8 to 0xea9a9ff0) [ 2525.947921][T22628] 9fa0: 00000000 00000000 00000003 20000140 00000008 00000000 [ 2525.948130][T22628] 9fc0: 00000000 00000000 00130d80 00000128 00000000 00006364 003d0f00 76b670bc [ 2525.948432][T22628] 9fe0: 76b66ec0 76b66eb0 000189f0 00132dd0 [ 2525.948841][T22628] r7:00000128 r6:00130d80 r5:00000000 r4:00000000 [ 2526.617993][T22656] fuse: Unknown parameter 'grou00000000000000000000' [ 2527.006597][T22668] fuse: Unknown parameter 'grou00000000000000000000' [ 2527.395217][T22678] fuse: Unknown parameter 'group_i00000000000000000000' [ 2527.873866][T22688] fuse: Unknown parameter 'group_i00000000000000000000' [ 2528.326052][T22698] fuse: Unknown parameter 'group_i00000000000000000000' [ 2528.989700][T22710] fuse: Unknown parameter 'group_id00000000000000000000' [ 2530.853544][T22726] fuse: Unknown parameter 'group_id00000000000000000000' [ 2531.882600][T22744] fuse: Unknown parameter 'group_id00000000000000000000' [ 2532.333619][T22757] fuse: Bad value for 'user_id' [ 2532.334128][T22757] fuse: Bad value for 'user_id' [ 2532.748490][T22768] fuse: Bad value for 'user_id' [ 2532.748734][T22768] fuse: Bad value for 'user_id' [ 2533.278195][T22780] fuse: Bad value for 'user_id' [ 2533.278633][T22780] fuse: Bad value for 'user_id' [ 2533.753039][T22790] fuse: Bad value for 'fd' [ 2534.305579][ T1619] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2534.495016][ T1619] usb 2-1: Using ep0 maxpacket: 8 [ 2534.509726][ T1619] usb 2-1: config 14 has an invalid interface number: 92 but max is 2 [ 2534.510791][ T1619] usb 2-1: config 14 contains an unexpected descriptor of type 0x2, skipping [ 2534.516437][ T1619] usb 2-1: config 14 contains an unexpected descriptor of type 0x2, skipping [ 2534.516878][ T1619] usb 2-1: config 14 has an invalid descriptor of length 1, skipping remainder of the config [ 2534.517292][ T1619] usb 2-1: config 14 has 1 interface, different from the descriptor's value: 3 [ 2534.517653][ T1619] usb 2-1: config 14 has no interface number 0 [ 2534.518019][ T1619] usb 2-1: config 14 interface 92 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 2534.518737][ T1619] usb 2-1: config 14 interface 92 has no altsetting 0 [ 2534.538070][ T1619] usb 2-1: New USB device found, idVendor=0ace, idProduct=2011, bcdDevice= 1.01 [ 2534.538738][ T1619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2534.539072][ T1619] usb 2-1: Product: ш [ 2534.539287][ T1619] usb 2-1: Manufacturer: 肓嵛荾쒃蹦岮鯒᷉⎄樏亥荴☍鄦◾ⅴｻ횿㝕ᩢﭨ鴞ॐ泝訰鱗鑒큼츰曀䂭ꉪ骘㤒븨ᕯσ₼ړ릜葽ዽ췭꬝˼⛋䱠讦㤮寮㯹늴᪘펛琲㢐ᄔ豚ꍰ㑈卷ⴹꃽ齯䵽᫄䁽禥뀙 [ 2534.540060][ T1619] usb 2-1: SerialNumber: ࠉ [ 2534.908528][ T1619] usb-storage 2-1:14.92: USB Mass Storage device detected [ 2534.924288][ T1619] usb-storage 2-1:14.92: device ignored [ 2534.986581][ T1619] usb 2-1: USB disconnect, device number 52 [ 2535.016288][T22822] fuse: Bad value for 'fd' [ 2535.518203][T22838] FAULT_INJECTION: forcing a failure. [ 2535.518203][T22838] name failslab, interval 1, probability 0, space 0, times 0 [ 2535.518925][T22838] CPU: 1 UID: 0 PID: 22838 Comm: syz.1.4652 Not tainted 6.11.0-rc6-syzkaller #0 [ 2535.519184][T22838] Hardware name: ARM-Versatile Express [ 2535.519384][T22838] Call trace: [ 2535.519511][T22838] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2535.519791][T22838] r7:836e1800 r6:00000dc0 r5:60000013 r4:8200ca8c [ 2535.519950][T22838] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2535.520155][T22838] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2535.520419][T22838] r5:00000000 r4:8271619c [ 2535.520555][T22838] [<8197af28>] (dump_stack) from [<808be610>] (should_fail_ex+0x18c/0x1dc) [ 2535.520772][T22838] [<808be484>] (should_fail_ex) from [<804db0a0>] (should_failslab+0x6c/0x94) [ 2535.521061][T22838] r6:00000dc0 r5:eb255e98 r4:82c01240 [ 2535.521281][T22838] [<804db034>] (should_failslab) from [<804bfe68>] (__kmalloc_cache_noprof+0x4c/0x344) [ 2535.522183][T22838] [<804bfe1c>] (__kmalloc_cache_noprof) from [<81636bac>] (tcp_sendmsg_fastopen+0x94/0x188) [ 2535.522939][T22838] r10:eb255e98 r9:20000000 r8:eb255ee4 r7:eb255ddc r6:00000000 r5:eb255e98 [ 2535.523351][T22838] r4:841939c0 [ 2535.523522][T22838] [<81636b18>] (tcp_sendmsg_fastopen) from [<8163754c>] (tcp_sendmsg_locked+0x8ac/0xc48) [ 2535.523995][T22838] r8:00000005 r7:841939c0 r6:00000000 r5:00000000 r4:841939c0 [ 2535.524458][T22838] [<81636ca0>] (tcp_sendmsg_locked) from [<81637918>] (tcp_sendmsg+0x30/0x44) [ 2535.524948][T22838] r10:00000122 r9:836e1800 r8:00000005 r7:84c05900 r6:00000000 r5:eb255e98 [ 2535.525346][T22838] r4:841939c0 [ 2535.525571][T22838] [<816378e8>] (tcp_sendmsg) from [<81711b14>] (inet6_sendmsg+0x40/0x4c) [ 2535.526011][T22838] r7:84c05900 r6:841939c0 r5:00000000 r4:eb255e98 [ 2535.526270][T22838] [<81711ad4>] (inet6_sendmsg) from [<8145011c>] (__sock_sendmsg+0x44/0x78) [ 2535.526768][T22838] r7:84c05900 r6:84c05900 r5:eb255e98 r4:00000000 [ 2535.527030][T22838] [<814500d8>] (__sock_sendmsg) from [<814526e4>] (__sys_sendto+0x108/0x14c) [ 2535.527412][T22838] r7:84c05900 r6:20000000 r5:20000000 r4:00000000 [ 2535.527605][T22838] [<814525dc>] (__sys_sendto) from [<81452744>] (sys_sendto+0x1c/0x24) [ 2535.527881][T22838] r8:8020029c r7:00000122 r6:00130d80 r5:00000020 r4:20000000 [ 2535.528074][T22838] [<81452728>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2535.528323][T22838] Exception stack(0xeb255fa8 to 0xeb255ff0) [ 2535.528507][T22838] 5fa0: 20000000 00000020 00000005 00000000 00000000 20000000 [ 2535.528734][T22838] 5fc0: 20000000 00000020 00130d80 00000122 00000000 00006364 003d0f00 76b670bc [ 2535.528939][T22838] 5fe0: 76b66ec0 76b66eb0 000189f0 00132dd0 [ 2535.605497][T22840] fuse: Bad value for 'fd' [ 2537.955843][T22862] fuse: Bad value for 'fd' [ 2539.495845][T22875] fuse: Bad value for 'fd' [ 2539.739013][ T31] audit: type=1400 audit(2539.674:687): avc: denied { bind } for pid=22880 comm="syz.1.4667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2540.087601][T22886] fuse: Bad value for 'fd' [ 2540.990003][T22903] fuse: Invalid rootmode [ 2543.986357][ C0] vkms_vblank_simulate: vblank timer overrun [ 2544.638764][T22929] FAULT_INJECTION: forcing a failure. [ 2544.638764][T22929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2544.639535][T22929] CPU: 0 UID: 0 PID: 22929 Comm: syz.1.4681 Not tainted 6.11.0-rc6-syzkaller #0 [ 2544.640219][T22929] Hardware name: ARM-Versatile Express [ 2544.640473][T22929] Call trace: [ 2544.640677][T22929] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2544.641057][T22929] r7:00000000 r6:00000000 r5:60000013 r4:8200ca8c [ 2544.641271][T22929] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2544.641781][T22929] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2544.642210][T22929] r5:00000000 r4:8274a3d4 [ 2544.642597][T22929] [<8197af28>] (dump_stack) from [<808be610>] (should_fail_ex+0x18c/0x1dc) [ 2544.643021][T22929] [<808be484>] (should_fail_ex) from [<808be674>] (should_fail+0x14/0x18) [ 2544.643556][T22929] r6:00000000 r5:eb699f68 r4:00000002 [ 2544.643813][T22929] [<808be660>] (should_fail) from [<808be694>] (should_fail_usercopy+0x1c/0x20) [ 2544.644274][T22929] [<808be678>] (should_fail_usercopy) from [<8053f5cc>] (simple_read_from_buffer+0x8c/0x134) [ 2544.644673][T22929] [<8053f540>] (simple_read_from_buffer) from [<805b43bc>] (proc_fail_nth_read+0xb8/0x100) [ 2544.645148][T22929] r10:00000001 r9:805b4304 r8:00000002 r7:eb699f68 r6:0000000f r5:76b66f30 [ 2544.645452][T22929] r4:836e0c00 r3:eb699e9f [ 2544.645653][T22929] [<805b4304>] (proc_fail_nth_read) from [<805074f4>] (vfs_read+0x98/0x324) [ 2544.646130][T22929] r8:76b66f30 r7:eb699f68 r6:836e0c00 r5:0000000f r4:851b06c0 [ 2544.646387][T22929] [<8050745c>] (vfs_read) from [<805081a4>] (ksys_read+0x78/0xf8) [ 2544.646732][T22929] r10:00000003 r9:836e0c00 r8:8020029c r7:00000000 r6:00000000 r5:851b06c0 [ 2544.647055][T22929] r4:851b06c3 [ 2544.647227][T22929] [<8050812c>] (ksys_read) from [<80508234>] (sys_read+0x10/0x14) [ 2544.647544][T22929] r7:00000003 r6:00000005 r5:76b66f30 r4:0000000f [ 2544.647799][T22929] [<80508224>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2544.648154][T22929] Exception stack(0xeb699fa8 to 0xeb699ff0) [ 2544.648422][T22929] 9fa0: 0000000f 76b66f30 00000005 76b66f30 0000000f 00000000 [ 2544.648753][T22929] 9fc0: 0000000f 76b66f30 00000005 00000003 00000000 00006364 003d0f00 76b670bc [ 2544.649103][T22929] 9fe0: 00000158 76b66ed0 000d8318 00130ca4 [ 2546.089264][T22944] fuse: Invalid rootmode [ 2548.559216][T22963] fuse: Bad value for 'rootmode' [ 2549.013773][T22965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=22965 comm=syz.1.4691 [ 2549.994706][T22974] fuse: Bad value for 'rootmode' [ 2554.549990][T22991] fuse: Bad value for 'rootmode' [ 2554.682744][ T31] audit: type=1400 audit(2554.614:688): avc: denied { getopt } for pid=22992 comm="syz.1.4701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2557.454023][T23007] fuse: Unknown parameter 'use00000000000000000000' [ 2557.551331][T23009] fuse: Bad value for 'fd' [ 2558.210337][T23024] fuse: Unknown parameter 'use00000000000000000000' [ 2558.404716][T23028] fuse: Bad value for 'fd' [ 2558.935992][T23034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23034 comm=syz.1.4713 [ 2559.064618][T23042] fuse: Unknown parameter 'use00000000000000000000' [ 2559.190739][T23045] fuse: Bad value for 'fd' [ 2559.851311][ T31] audit: type=1400 audit(2559.784:689): avc: denied { accept } for pid=23047 comm="syz.1.4717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2560.480218][T23059] fuse: Unknown parameter 'user_i00000000000000000000' [ 2561.142961][T23071] fuse: Unknown parameter 'user_i00000000000000000000' [ 2561.732948][T23083] fuse: Unknown parameter 'user_i00000000000000000000' [ 2562.320059][T23099] fuse: Unknown parameter 'user_id00000000000000000000' [ 2562.573001][ T1619] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2562.766081][ T1619] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2562.766642][ T1619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2562.766936][ T1619] usb 2-1: Product: syz [ 2562.767115][ T1619] usb 2-1: Manufacturer: syz [ 2562.767302][ T1619] usb 2-1: SerialNumber: syz [ 2565.575024][T23117] fuse: Unknown parameter 'user_id00000000000000000000' [ 2566.154962][T23130] fuse: Unknown parameter 'user_id00000000000000000000' [ 2566.358977][ T31] audit: type=1400 audit(2566.294:690): avc: denied { getopt } for pid=23133 comm="syz.0.4747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2566.783370][T23142] fuse: Bad value for 'fd' [ 2566.859416][T23144] fuse: Bad value for 'fd' [ 2567.283018][T23154] fuse: Bad value for 'fd' [ 2567.378097][T23156] fuse: Bad value for 'fd' [ 2567.692709][T23164] fuse: Bad value for 'fd' [ 2567.796772][T23166] fuse: Bad value for 'fd' [ 2570.960392][T23183] FAULT_INJECTION: forcing a failure. [ 2570.960392][T23183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2570.960823][T23183] CPU: 1 UID: 0 PID: 23183 Comm: syz.0.4767 Not tainted 6.11.0-rc6-syzkaller #0 [ 2570.961036][T23183] Hardware name: ARM-Versatile Express [ 2570.961223][T23183] Call trace: [ 2570.961341][T23183] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2570.962012][T23183] r7:20000540 r6:0000000c r5:60000013 r4:8200ca8c [ 2570.962398][T23183] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2570.962826][T23183] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2570.963252][T23183] r5:00000000 r4:8274a3d4 [ 2570.963522][T23183] [<8197af28>] (dump_stack) from [<808be610>] (should_fail_ex+0x18c/0x1dc) [ 2570.964211][T23183] [<808be484>] (should_fail_ex) from [<808be674>] (should_fail+0x14/0x18) [ 2570.964662][T23183] r6:0000000c r5:dfebde74 r4:0000000c [ 2570.965099][T23183] [<808be660>] (should_fail) from [<808be694>] (should_fail_usercopy+0x1c/0x20) [ 2570.966584][T23183] [<808be678>] (should_fail_usercopy) from [<814510e8>] (move_addr_to_kernel+0x3c/0xe4) [ 2570.967389][T23183] [<814510ac>] (move_addr_to_kernel) from [<81452e00>] (__copy_msghdr+0xe4/0x110) [ 2570.967976][T23183] r9:200006c0 r8:b5403587 r7:200006c0 r6:dfebde30 r5:dfebdde0 r4:dfebdf38 [ 2570.968535][T23183] [<81452d1c>] (__copy_msghdr) from [<81452efc>] (copy_msghdr_from_user+0xd0/0x130) [ 2570.969184][T23183] r5:00000000 r4:dfebdf38 [ 2570.969438][T23183] [<81452e2c>] (copy_msghdr_from_user) from [<81452fd4>] (___sys_sendmsg+0x78/0xd0) [ 2570.970018][T23183] r8:20000084 r7:00000000 r6:84c04280 r5:dfebdf38 r4:dfebde74 [ 2570.970491][T23183] [<81452f5c>] (___sys_sendmsg) from [<81453510>] (sys_sendmsg+0x78/0xbc) [ 2570.970892][T23183] r10:00000128 r9:845bd400 r8:8020029c r7:20000084 r6:200006c0 r5:84c04280 [ 2570.971211][T23183] r4:00000000 [ 2570.971386][T23183] [<81453498>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2570.971767][T23183] Exception stack(0xdfebdfa8 to 0xdfebdff0) [ 2570.971950][T23183] dfa0: 00000000 00000000 00000003 200006c0 20000084 00000000 [ 2570.972162][T23183] dfc0: 00000000 00000000 00130d80 00000128 00000000 00006364 003d0f00 76b990bc [ 2570.972800][T23183] dfe0: 76b98ec0 76b98eb0 000189f0 00132dd0 [ 2570.973291][T23183] r7:00000128 r6:00130d80 r5:00000000 r4:00000000 [ 2572.307549][T17540] usb 2-1: USB disconnect, device number 53 [ 2573.070119][T23203] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4772'. [ 2573.217237][T23206] FAULT_INJECTION: forcing a failure. [ 2573.217237][T23206] name failslab, interval 1, probability 0, space 0, times 0 [ 2573.218571][T23206] CPU: 1 UID: 0 PID: 23206 Comm: syz.1.4773 Not tainted 6.11.0-rc6-syzkaller #0 [ 2573.218978][T23206] Hardware name: ARM-Versatile Express [ 2573.219214][T23206] Call trace: [ 2573.219425][T23206] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2573.219870][T23206] r7:845be000 r6:00000cc0 r5:60000013 r4:8200ca8c [ 2573.220177][T23206] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2573.220573][T23206] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2573.220982][T23206] r5:00000000 r4:8271619c [ 2573.221213][T23206] [<8197af28>] (dump_stack) from [<808be610>] (should_fail_ex+0x18c/0x1dc) [ 2573.223675][T23206] [<808be484>] (should_fail_ex) from [<804db0a0>] (should_failslab+0x6c/0x94) [ 2573.224176][T23206] r6:00000cc0 r5:ffffffff r4:82cab780 [ 2573.224443][T23206] [<804db034>] (should_failslab) from [<804c0450>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 2573.224894][T23206] [<804c0400>] (kmem_cache_alloc_node_noprof) from [<8145dd64>] (__alloc_skb+0x138/0x160) [ 2573.225339][T23206] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:82cab780 r5:ffffffff [ 2573.225684][T23206] r4:82606000 [ 2573.225882][T23206] [<8145dc2c>] (__alloc_skb) from [<8156f498>] (netlink_alloc_large_skb+0x88/0xa0) [ 2573.226336][T23206] r8:00000000 r7:848f7400 r6:00000014 r5:84c05400 r4:00000140 [ 2573.226652][T23206] [<8156f410>] (netlink_alloc_large_skb) from [<8156faa0>] (netlink_sendmsg+0x134/0x43c) [ 2573.227111][T23206] r5:84c05400 r4:e058df38 [ 2573.227319][T23206] [<8156f96c>] (netlink_sendmsg) from [<8145011c>] (__sock_sendmsg+0x44/0x78) [ 2573.227743][T23206] r10:10004810 r9:e058ddd4 r8:e058ddd4 r7:00000000 r6:84c05400 r5:e058df38 [ 2573.228119][T23206] r4:00000000 [ 2573.228322][T23206] [<814500d8>] (__sock_sendmsg) from [<8145108c>] (____sys_sendmsg+0x2ac/0x2cc) [ 2573.228857][T23206] r7:00000000 r6:00000000 r5:84c05400 r4:e058df38 [ 2573.229164][T23206] [<81450de0>] (____sys_sendmsg) from [<81452ff8>] (___sys_sendmsg+0x9c/0xd0) [ 2573.229641][T23206] r10:e058de34 r9:20001200 r8:10004810 r7:00000000 r6:84c05400 r5:e058df38 [ 2573.230022][T23206] r4:00000000 [ 2573.230201][T23206] [<81452f5c>] (___sys_sendmsg) from [<81453510>] (sys_sendmsg+0x78/0xbc) [ 2573.230607][T23206] r10:00000128 r9:845be000 r8:8020029c r7:10004810 r6:20001200 r5:84c05400 [ 2573.230979][T23206] r4:00000000 [ 2573.231173][T23206] [<81453498>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2573.231628][T23206] Exception stack(0xe058dfa8 to 0xe058dff0) [ 2573.231944][T23206] dfa0: 00000000 00000000 00000003 20001200 10004810 00000000 [ 2573.232334][T23206] dfc0: 00000000 00000000 00130d80 00000128 00000000 00006364 003d0f00 76b670bc [ 2573.232724][T23206] dfe0: 76b66ec0 76b66eb0 000189f0 00132dd0 [ 2573.233102][T23206] r7:00000128 r6:00130d80 r5:00000000 r4:00000000 [ 2574.556135][T23227] fuse: Unknown parameter '0x0000000000000003' [ 2575.142413][T17458] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2575.333257][T17458] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2575.354191][T17458] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2575.354715][T17458] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2575.355048][T17458] usb 2-1: Product: syz [ 2575.355258][T17458] usb 2-1: Manufacturer: syz [ 2575.355476][T17458] usb 2-1: SerialNumber: syz [ 2575.990227][T23185] kexec: Could not allocate control_code_buffer [ 2576.572287][T17458] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2576.573306][T17458] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2576.573507][T17458] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2576.781235][T17458] cdc_ncm 2-1:1.0: setting tx_max = 16384 [ 2576.795606][T17458] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2576.987001][ T31] audit: type=1400 audit(2576.914:691): avc: denied { unmount } for pid=19084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2576.989393][T17458] usb 2-1: USB disconnect, device number 54 [ 2576.990549][T17458] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 2577.160164][T23266] fuse: Unknown parameter '0x0000000000000003' [ 2577.806083][T23282] fuse: Unknown parameter '0x0000000000000003' [ 2578.379652][T23293] FAULT_INJECTION: forcing a failure. [ 2578.379652][T23293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2578.380412][T23293] CPU: 1 UID: 0 PID: 23293 Comm: syz.0.4794 Not tainted 6.11.0-rc6-syzkaller #0 [ 2578.380842][T23293] Hardware name: ARM-Versatile Express [ 2578.381312][T23293] Call trace: [ 2578.381672][T23293] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2578.382380][T23293] r7:00000000 r6:00000000 r5:60000013 r4:8200ca8c [ 2578.382704][T23293] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2578.383268][T23293] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2578.383735][T23293] r5:00000000 r4:8274a3d4 [ 2578.384021][T23293] [<8197af28>] (dump_stack) from [<808be610>] (should_fail_ex+0x18c/0x1dc) [ 2578.384506][T23293] [<808be484>] (should_fail_ex) from [<808be674>] (should_fail+0x14/0x18) [ 2578.384977][T23293] r6:00000000 r5:e474df68 r4:00000002 [ 2578.385321][T23293] [<808be660>] (should_fail) from [<808be694>] (should_fail_usercopy+0x1c/0x20) [ 2578.385705][T23293] [<808be678>] (should_fail_usercopy) from [<8053f5cc>] (simple_read_from_buffer+0x8c/0x134) [ 2578.386428][T23293] [<8053f540>] (simple_read_from_buffer) from [<805b43bc>] (proc_fail_nth_read+0xb8/0x100) [ 2578.387263][T23293] r10:00000001 r9:805b4304 r8:00000002 r7:e474df68 r6:0000000f r5:76b98f30 [ 2578.387834][T23293] r4:836cb000 r3:e474de9f [ 2578.388075][T23293] [<805b4304>] (proc_fail_nth_read) from [<805074f4>] (vfs_read+0x98/0x324) [ 2578.392268][T23293] r8:76b98f30 r7:e474df68 r6:836cb000 r5:0000000f r4:8455da80 [ 2578.392705][T23293] [<8050745c>] (vfs_read) from [<805081a4>] (ksys_read+0x78/0xf8) [ 2578.393178][T23293] r10:00000003 r9:836cb000 r8:8020029c r7:00000000 r6:00000000 r5:8455da80 [ 2578.393528][T23293] r4:8455da83 [ 2578.393738][T23293] [<8050812c>] (ksys_read) from [<80508234>] (sys_read+0x10/0x14) [ 2578.394134][T23293] r7:00000003 r6:00000005 r5:76b98f30 r4:0000000f [ 2578.394406][T23293] [<80508224>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2578.394826][T23293] Exception stack(0xe474dfa8 to 0xe474dff0) [ 2578.395165][T23293] dfa0: 0000000f 76b98f30 00000005 76b98f30 0000000f 00000000 [ 2578.395568][T23293] dfc0: 0000000f 76b98f30 00000005 00000003 00000000 00006364 003d0f00 76b990bc [ 2578.396451][T23293] dfe0: 00000158 76b98ed0 000d8318 00130ca4 [ 2578.888368][T23301] fuse: Unknown parameter '0x0000000000000003' [ 2580.654447][T23325] fuse: Unknown parameter 'fd0x0000000000000003' [ 2582.284683][T23339] fuse: Unknown parameter 'fd0x0000000000000003' [ 2583.541387][T23352] fuse: Unknown parameter 'fd0x0000000000000003' [ 2587.863797][T23377] FAULT_INJECTION: forcing a failure. [ 2587.863797][T23377] name failslab, interval 1, probability 0, space 0, times 0 [ 2587.864731][T23377] CPU: 1 UID: 0 PID: 23377 Comm: syz.1.4822 Not tainted 6.11.0-rc6-syzkaller #0 [ 2587.865163][T23377] Hardware name: ARM-Versatile Express [ 2587.865453][T23377] Call trace: [ 2587.865653][T23377] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2587.866404][T23377] r7:00000d40 r6:837a0d30 r5:60000013 r4:8200ca8c [ 2587.866826][T23377] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2587.867370][T23377] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2587.867723][T23377] r5:00000000 r4:8271619c [ 2587.867934][T23377] [<8197af28>] (dump_stack) from [<808be610>] (should_fail_ex+0x18c/0x1dc) [ 2587.868293][T23377] [<808be484>] (should_fail_ex) from [<804db0a0>] (should_failslab+0x6c/0x94) [ 2587.868852][T23377] r6:837a0d30 r5:0000001c r4:82c01240 [ 2587.869096][T23377] [<804db034>] (should_failslab) from [<804c0e40>] (__kmalloc_noprof+0x9c/0x458) [ 2587.869657][T23377] [<804c0da4>] (__kmalloc_noprof) from [<807289d0>] (tomoyo_encode2+0x64/0xf0) [ 2587.870070][T23377] r10:00000fff r9:82c9a800 r8:00000000 r7:8301b440 r6:837a0d30 r5:83e4bffc [ 2587.870901][T23377] r4:83e4bfeb [ 2587.871084][T23377] [<8072896c>] (tomoyo_encode2) from [<80728a80>] (tomoyo_encode+0x24/0x30) [ 2587.871624][T23377] r9:82c9a800 r8:00000000 r7:8301b440 r6:837a0d30 r5:00001000 r4:83e4bfec [ 2587.872262][T23377] [<80728a5c>] (tomoyo_encode) from [<80728b0c>] (tomoyo_realpath_from_path+0x80/0x17c) [ 2587.872717][T23377] r5:00001000 r4:83e4b000 [ 2587.873102][T23377] [<80728a8c>] (tomoyo_realpath_from_path) from [<80724c0c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2587.873604][T23377] r10:836e1800 r9:00000000 r8:837a0cc0 r7:00005428 r6:00000004 r5:81ad0e68 [ 2587.874485][T23377] r4:837a0d30 r3:824b7380 [ 2587.874858][T23377] [<80724b40>] (tomoyo_path_number_perm) from [<807294d8>] (tomoyo_file_ioctl+0x1c/0x20) [ 2587.875331][T23377] r9:00000004 r8:837a0cc0 r7:837a0cc0 r6:00005428 r5:00000000 r4:822071e4 [ 2587.875751][T23377] [<807294bc>] (tomoyo_file_ioctl) from [<806ec490>] (security_file_ioctl+0x40/0x5c) [ 2587.876220][T23377] [<806ec450>] (security_file_ioctl) from [<80520cc8>] (sys_ioctl+0x50/0xda4) [ 2587.876768][T23377] r7:00000000 r6:837a0cc1 r5:00000000 r4:00005428 [ 2587.877481][T23377] [<80520c78>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2587.878061][T23377] Exception stack(0xdf999fa8 to 0xdf999ff0) [ 2587.878464][T23377] 9fa0: 00000000 00000000 00000004 00005428 00000000 00000000 [ 2587.878912][T23377] 9fc0: 00000000 00000000 00130d80 00000036 00000000 00006364 003d0f00 76b670bc [ 2587.879381][T23377] 9fe0: 76b66ec0 76b66eb0 000189f0 00132dd0 [ 2587.879679][T23377] r10:00000036 r9:836e1800 r8:8020029c r7:00000036 r6:00130d80 r5:00000000 [ 2587.880056][T23377] r4:00000000 [ 2587.888926][T23377] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2587.959476][T23379] fuse: Unknown parameter 'user_id00000000000000000000' [ 2588.347224][T23385] fuse: Bad value for 'group_id' [ 2588.348035][T23385] fuse: Bad value for 'group_id' [ 2588.679112][T23391] fuse: Unknown parameter 'user_id00000000000000000000' [ 2589.124142][T23397] fuse: Bad value for 'group_id' [ 2589.124658][T23397] fuse: Bad value for 'group_id' [ 2589.432672][T23404] fuse: Bad value for 'fd' [ 2589.538228][T23409] fuse: Bad value for 'group_id' [ 2589.538661][T23409] fuse: Bad value for 'group_id' [ 2589.858040][T23419] fuse: Bad value for 'fd' [ 2590.309307][T23430] FAULT_INJECTION: forcing a failure. [ 2590.309307][T23430] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2590.310226][T23430] CPU: 1 UID: 0 PID: 23430 Comm: syz.1.4843 Not tainted 6.11.0-rc6-syzkaller #0 [ 2590.310655][T23430] Hardware name: ARM-Versatile Express [ 2590.310936][T23430] Call trace: [ 2590.311168][T23430] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2590.311818][T23430] r7:dfc6ddec r6:00000000 r5:60000113 r4:8200ca8c [ 2590.312420][T23430] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2590.312855][T23430] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2590.313240][T23430] r5:00000000 r4:827161f0 [ 2590.313471][T23430] [<8197af28>] (dump_stack) from [<808be610>] (should_fail_ex+0x18c/0x1dc) [ 2590.313909][T23430] [<808be484>] (should_fail_ex) from [<804db130>] (should_fail_alloc_page+0x68/0x74) [ 2590.314375][T23430] r6:00000000 r5:00140cca r4:dfc6ddf8 [ 2590.314640][T23430] [<804db0c8>] (should_fail_alloc_page) from [<804acc6c>] (prepare_alloc_pages.constprop.0+0x88/0x198) [ 2590.315113][T23430] [<804acbe4>] (prepare_alloc_pages.constprop.0) from [<804b3308>] (__alloc_pages_noprof+0xb4/0x1170) [ 2590.316291][T23430] r10:00000000 r9:838b1e00 r8:00000000 r7:851d3000 r6:00140cca r5:851d3000 [ 2590.316883][T23430] r4:00000000 r3:dfc6ddf8 [ 2590.317118][T23430] [<804b3254>] (__alloc_pages_noprof) from [<804b49b0>] (__folio_alloc_noprof+0x14/0x2c) [ 2590.317564][T23430] r10:dfc6dfb0 r9:838b1e00 r8:00000000 r7:00000040 r6:76b65e84 r5:851d3000 [ 2590.317933][T23430] r4:00001255 [ 2590.318122][T23430] [<804b499c>] (__folio_alloc_noprof) from [<80489804>] (handle_mm_fault+0xcf8/0x12fc) [ 2590.318541][T23430] r5:851d3000 r4:00001255 [ 2590.318760][T23430] [<80488b0c>] (handle_mm_fault) from [<80214270>] (do_page_fault+0x1c8/0x3d8) [ 2590.319182][T23430] r10:00000002 r9:838b1e00 r8:00000255 r7:851d3000 r6:00000a07 r5:76b65e84 [ 2590.319505][T23430] r4:dfc6dfb0 [ 2590.319915][T23430] [<802140a8>] (do_page_fault) from [<80214668>] (do_DataAbort+0x38/0xa8) [ 2590.320468][T23430] r10:003d0f00 r9:00006364 r8:802140a8 r7:dfc6dfb0 r6:76b65e84 r5:00000a07 [ 2590.320885][T23430] r4:8261cb44 [ 2590.321082][T23430] [<80214630>] (do_DataAbort) from [<80200ebc>] (__dabt_usr+0x5c/0x60) [ 2590.321438][T23430] Exception stack(0xdfc6dfb0 to 0xdfc6dff8) [ 2590.322315][T23430] dfa0: 20000140 00000003 00000000 00000000 [ 2590.322729][T23430] dfc0: 76b65eb0 20000140 00000000 00188a94 00000000 00006364 003d0f00 76b670bc [ 2590.323105][T23430] dfe0: 00000000 76b65e80 000189d0 0001b3a4 20000010 ffffffff [ 2590.323459][T23430] r8:824ae044 r7:851d3000 r6:ffffffff r5:20000010 r4:0001b3a4 [ 2590.332851][T23430] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 2592.331131][T23433] fuse: Bad value for 'fd' [ 2592.878897][T23446] fuse: Unknown parameter '0x0000000000000003' [ 2593.613042][T23461] fuse: Unknown parameter '0x0000000000000003' [ 2594.080982][T23473] fuse: Unknown parameter '0x0000000000000003' [ 2596.008727][T23503] fuse: Unknown parameter 'grou00000000000000000000' [ 2596.500194][T23517] fuse: Unknown parameter 'grou00000000000000000000' [ 2596.734083][T23523] fuse: Unknown parameter 'rootmo0000000000000000040000' [ 2596.946782][T23527] fuse: Unknown parameter 'grou00000000000000000000' [ 2597.236304][ T31] audit: type=1400 audit(2597.174:692): avc: denied { getattr } for pid=23530 comm="syz.1.4882" path="uts:[4026532696]" dev="nsfs" ino=4026532696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2597.853072][T23541] fuse: Unknown parameter '0x0000000000000003' [ 2597.950941][T23543] fuse: Unknown parameter 'group_i00000000000000000000' [ 2598.225633][ T3787] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 2598.229331][ T3787] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2598.367778][T23559] fuse: Unknown parameter 'group_i00000000000000000000' [ 2598.384782][T23560] fuse: Unknown parameter '0x0000000000000003' [ 2601.106465][T23583] FAULT_INJECTION: forcing a failure. [ 2601.106465][T23583] name failslab, interval 1, probability 0, space 0, times 0 [ 2601.110044][T23583] CPU: 1 UID: 0 PID: 23583 Comm: syz.1.4895 Not tainted 6.11.0-rc6-syzkaller #0 [ 2601.110423][T23583] Hardware name: ARM-Versatile Express [ 2601.110813][T23583] Call trace: [ 2601.111116][T23583] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2601.111753][T23583] r7:00000c40 r6:8455d5b0 r5:60000013 r4:8200ca8c [ 2601.112227][T23583] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2601.112645][T23583] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2601.113314][T23583] r5:00000000 r4:8271619c [ 2601.113502][T23583] [<8197af28>] (dump_stack) from [<808be610>] (should_fail_ex+0x18c/0x1dc) [ 2601.113987][T23583] [<808be484>] (should_fail_ex) from [<804db0a0>] (should_failslab+0x6c/0x94) [ 2601.114448][T23583] r6:8455d5b0 r5:00001000 r4:82c016c0 [ 2601.114893][T23583] [<804db034>] (should_failslab) from [<804c0e40>] (__kmalloc_noprof+0x9c/0x458) [ 2601.115451][T23583] [<804c0da4>] (__kmalloc_noprof) from [<80728ac8>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 2601.115891][T23583] r10:836e5400 r9:82c9bc00 r8:00000000 r7:833f9880 r6:8455d5b0 r5:00001000 [ 2601.116287][T23583] r4:00000000 [ 2601.116500][T23583] [<80728a8c>] (tomoyo_realpath_from_path) from [<80724c0c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2601.116996][T23583] r10:836e5400 r9:00000000 r8:8455d540 r7:000089b0 r6:00000004 r5:81ad0e68 [ 2601.117324][T23583] r4:8455d5b0 r3:824b7380 [ 2601.117521][T23583] [<80724b40>] (tomoyo_path_number_perm) from [<807294d8>] (tomoyo_file_ioctl+0x1c/0x20) [ 2601.118112][T23583] r9:00000003 r8:8455d540 r7:8455d540 r6:000089b0 r5:20000300 r4:822071e4 [ 2601.118495][T23583] [<807294bc>] (tomoyo_file_ioctl) from [<806ec490>] (security_file_ioctl+0x40/0x5c) [ 2601.118893][T23583] [<806ec450>] (security_file_ioctl) from [<80520cc8>] (sys_ioctl+0x50/0xda4) [ 2601.119366][T23583] r7:20000300 r6:8455d541 r5:00000000 r4:000089b0 [ 2601.119704][T23583] [<80520c78>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2601.120102][T23583] Exception stack(0xe05a5fa8 to 0xe05a5ff0) [ 2601.120492][T23583] 5fa0: 00000000 00000000 00000003 000089b0 20000300 00000000 [ 2601.120851][T23583] 5fc0: 00000000 00000000 00130d80 00000036 00000000 00006364 003d0f00 76b670bc [ 2601.121243][T23583] 5fe0: 76b66ec0 76b66eb0 000189f0 00132dd0 [ 2601.121512][T23583] r10:00000036 r9:836e5400 r8:8020029c r7:00000036 r6:00130d80 r5:00000000 [ 2601.122201][T23583] r4:00000000 [ 2601.135017][T23583] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2601.300671][T23589] fuse: Unknown parameter 'fd0x0000000000000003' [ 2601.856960][T23602] fuse: Unknown parameter 'fd0x0000000000000003' [ 2601.976182][T23604] FAULT_INJECTION: forcing a failure. [ 2601.976182][T23604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2601.976899][T23604] CPU: 1 UID: 0 PID: 23604 Comm: syz.0.4903 Not tainted 6.11.0-rc6-syzkaller #0 [ 2601.977285][T23604] Hardware name: ARM-Versatile Express [ 2601.977526][T23604] Call trace: [ 2601.977733][T23604] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2601.978151][T23604] r7:200000c0 r6:e063de30 r5:60000013 r4:8200ca8c [ 2601.978398][T23604] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2601.978759][T23604] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2601.979604][T23604] r5:00000000 r4:8274a3d4 [ 2601.979876][T23604] [<8197af28>] (dump_stack) from [<808be610>] (should_fail_ex+0x18c/0x1dc) [ 2601.980321][T23604] [<808be484>] (should_fail_ex) from [<808be674>] (should_fail+0x14/0x18) [ 2601.980764][T23604] r6:e063de30 r5:00000000 r4:e063df38 [ 2601.981109][T23604] [<808be660>] (should_fail) from [<808be694>] (should_fail_usercopy+0x1c/0x20) [ 2601.981482][T23604] [<808be678>] (should_fail_usercopy) from [<81452e7c>] (copy_msghdr_from_user+0x50/0x130) [ 2601.982417][T23604] [<81452e2c>] (copy_msghdr_from_user) from [<81452fd4>] (___sys_sendmsg+0x78/0xd0) [ 2601.983232][T23604] r8:20000040 r7:00000000 r6:84cbaa00 r5:e063df38 r4:e063de74 [ 2601.983551][T23604] [<81452f5c>] (___sys_sendmsg) from [<81453510>] (sys_sendmsg+0x78/0xbc) [ 2601.984047][T23604] r10:00000128 r9:836e0c00 r8:8020029c r7:20000040 r6:200000c0 r5:84cbaa00 [ 2601.984410][T23604] r4:00000000 [ 2601.984613][T23604] [<81453498>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2601.985126][T23604] Exception stack(0xe063dfa8 to 0xe063dff0) [ 2601.985424][T23604] dfa0: 00000000 00000000 00000003 200000c0 20000040 00000000 [ 2601.985803][T23604] dfc0: 00000000 00000000 00130d80 00000128 00000000 00006364 003d0f00 76b990bc [ 2601.986141][T23604] dfe0: 76b98ec0 76b98eb0 000189f0 00132dd0 [ 2601.986391][T23604] r7:00000128 r6:00130d80 r5:00000000 r4:00000000 [ 2604.120308][T23619] fuse: Unknown parameter 'group_id00000000000000000000' [ 2606.163819][T23638] fuse: Unknown parameter 'group_id00000000000000000000' [ 2607.420124][T23652] fuse: Bad value for 'user_id' [ 2607.421089][T23652] fuse: Bad value for 'user_id' [ 2609.349413][T23665] fuse: Bad value for 'user_id' [ 2609.349952][T23665] fuse: Bad value for 'user_id' [ 2610.510037][T23678] fuse: Bad value for 'user_id' [ 2610.510468][T23678] fuse: Bad value for 'user_id' [ 2610.748288][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 2613.497271][T23694] fuse: Bad value for 'fd' [ 2613.637103][T23697] FAULT_INJECTION: forcing a failure. [ 2613.637103][T23697] name failslab, interval 1, probability 0, space 0, times 0 [ 2613.638034][T23697] CPU: 0 UID: 0 PID: 23697 Comm: syz.1.4931 Not tainted 6.11.0-rc6-syzkaller #0 [ 2613.638859][T23697] Hardware name: ARM-Versatile Express [ 2613.639147][T23697] Call trace: [ 2613.639510][T23697] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2613.640168][T23697] r7:00000c40 r6:8455d370 r5:60000013 r4:8200ca8c [ 2613.640664][T23697] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2613.641154][T23697] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2613.641602][T23697] r5:00000000 r4:8271619c [ 2613.642051][T23697] [<8197af28>] (dump_stack) from [<808be610>] (should_fail_ex+0x18c/0x1dc) [ 2613.642687][T23697] [<808be484>] (should_fail_ex) from [<804db0a0>] (should_failslab+0x6c/0x94) [ 2613.643301][T23697] r6:8455d370 r5:00001000 r4:82c016c0 [ 2613.643634][T23697] [<804db034>] (should_failslab) from [<804c0e40>] (__kmalloc_noprof+0x9c/0x458) [ 2613.644140][T23697] [<804c0da4>] (__kmalloc_noprof) from [<80728ac8>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 2613.644782][T23697] r10:851d5400 r9:82c9bc00 r8:00000000 r7:831a62a8 r6:8455d370 r5:00001000 [ 2613.647908][T23697] r4:00000000 [ 2613.648176][T23697] [<80728a8c>] (tomoyo_realpath_from_path) from [<80724c0c>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2613.648746][T23697] r10:851d5400 r9:00000000 r8:8455d300 r7:50009402 r6:00000004 r5:81ad0e68 [ 2613.649134][T23697] r4:8455d370 r3:824b7380 [ 2613.649368][T23697] [<80724b40>] (tomoyo_path_number_perm) from [<807294d8>] (tomoyo_file_ioctl+0x1c/0x20) [ 2613.650045][T23697] r9:00000004 r8:8455d300 r7:8455d300 r6:50009402 r5:00000000 r4:822071e4 [ 2613.650457][T23697] [<807294bc>] (tomoyo_file_ioctl) from [<806ec490>] (security_file_ioctl+0x40/0x5c) [ 2613.651006][T23697] [<806ec450>] (security_file_ioctl) from [<80520cc8>] (sys_ioctl+0x50/0xda4) [ 2613.651455][T23697] r7:00000000 r6:8455d301 r5:00000000 r4:50009402 [ 2613.652017][T23697] [<80520c78>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2613.652685][T23697] Exception stack(0xeadedfa8 to 0xeadedff0) [ 2613.653437][T23697] dfa0: 00000000 00000000 00000004 50009402 00000000 00000000 [ 2613.654174][T23697] dfc0: 00000000 00000000 00130d80 00000036 00000000 00006364 003d0f00 76b040bc [ 2613.654744][T23697] dfe0: 76b03ec0 76b03eb0 000189f0 00132dd0 [ 2613.655072][T23697] r10:00000036 r9:851d5400 r8:8020029c r7:00000036 r6:00130d80 r5:00000000 [ 2613.655454][T23697] r4:00000000 [ 2613.660041][T23697] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2615.259137][T23704] serio: Serial port pts0 [ 2619.435892][T23717] fuse: Bad value for 'fd' [ 2619.640055][T23723] FAULT_INJECTION: forcing a failure. [ 2619.640055][T23723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2619.640568][T23723] CPU: 1 UID: 0 PID: 23723 Comm: syz.0.4940 Not tainted 6.11.0-rc6-syzkaller #0 [ 2619.640828][T23723] Hardware name: ARM-Versatile Express [ 2619.641019][T23723] Call trace: [ 2619.641182][T23723] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2619.641483][T23723] r7:20000580 r6:eaf05e30 r5:60000013 r4:8200ca8c [ 2619.642216][T23723] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2619.644580][T23723] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2619.644959][T23723] r5:00000000 r4:8274a3d4 [ 2619.645165][T23723] [<8197af28>] (dump_stack) from [<808be610>] (should_fail_ex+0x18c/0x1dc) [ 2619.645509][T23723] [<808be484>] (should_fail_ex) from [<808be674>] (should_fail+0x14/0x18) [ 2619.645915][T23723] r6:eaf05e30 r5:00000000 r4:eaf05f38 [ 2619.646147][T23723] [<808be660>] (should_fail) from [<808be694>] (should_fail_usercopy+0x1c/0x20) [ 2619.646502][T23723] [<808be678>] (should_fail_usercopy) from [<81452e7c>] (copy_msghdr_from_user+0x50/0x130) [ 2619.646898][T23723] [<81452e2c>] (copy_msghdr_from_user) from [<81452fd4>] (___sys_sendmsg+0x78/0xd0) [ 2619.647284][T23723] r8:00008880 r7:00000000 r6:84cbb900 r5:eaf05f38 r4:eaf05e74 [ 2619.647569][T23723] [<81452f5c>] (___sys_sendmsg) from [<81453510>] (sys_sendmsg+0x78/0xbc) [ 2619.647958][T23723] r10:00000128 r9:851d3000 r8:8020029c r7:00008880 r6:20000580 r5:84cbb900 [ 2619.648361][T23723] r4:00000000 [ 2619.648541][T23723] [<81453498>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2619.648903][T23723] Exception stack(0xeaf05fa8 to 0xeaf05ff0) [ 2619.649173][T23723] 5fa0: 00000000 00000000 00000003 20000580 00008880 00000000 [ 2619.649509][T23723] 5fc0: 00000000 00000000 00130d80 00000128 00000000 00006364 003d0f00 76b990bc [ 2619.649873][T23723] 5fe0: 76b98ec0 76b98eb0 000189f0 00132dd0 [ 2619.650129][T23723] r7:00000128 r6:00130d80 r5:00000000 r4:00000000 [ 2621.069914][T23731] fuse: Bad value for 'fd' [ 2621.151113][T23733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=23733 comm=syz.1.4943 [ 2621.797517][T23738] FAULT_INJECTION: forcing a failure. [ 2621.797517][T23738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2621.798238][T23738] CPU: 0 UID: 0 PID: 23738 Comm: syz.1.4945 Not tainted 6.11.0-rc6-syzkaller #0 [ 2621.798618][T23738] Hardware name: ARM-Versatile Express [ 2621.798860][T23738] Call trace: [ 2621.798982][T23738] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2621.799234][T23738] r7:00000000 r6:00000000 r5:60000013 r4:8200ca8c [ 2621.799494][T23738] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2621.799766][T23738] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2621.800005][T23738] r5:00000000 r4:8274a3d4 [ 2621.800118][T23738] [<8197af28>] (dump_stack) from [<808be610>] (should_fail_ex+0x18c/0x1dc) [ 2621.800398][T23738] [<808be484>] (should_fail_ex) from [<808be674>] (should_fail+0x14/0x18) [ 2621.800659][T23738] r6:00000000 r5:eaafdf68 r4:00000002 [ 2621.800888][T23738] [<808be660>] (should_fail) from [<808be694>] (should_fail_usercopy+0x1c/0x20) [ 2621.801256][T23738] [<808be678>] (should_fail_usercopy) from [<8053f5cc>] (simple_read_from_buffer+0x8c/0x134) [ 2621.802142][T23738] [<8053f540>] (simple_read_from_buffer) from [<805b43bc>] (proc_fail_nth_read+0xb8/0x100) [ 2621.803038][T23738] r10:00000001 r9:805b4304 r8:00000002 r7:eaafdf68 r6:0000000f r5:76b66f30 [ 2621.803397][T23738] r4:845f0000 r3:eaafde9f [ 2621.803637][T23738] [<805b4304>] (proc_fail_nth_read) from [<805074f4>] (vfs_read+0x98/0x324) [ 2621.804065][T23738] r8:76b66f30 r7:eaafdf68 r6:845f0000 r5:0000000f r4:83c300c0 [ 2621.804383][T23738] [<8050745c>] (vfs_read) from [<805081a4>] (ksys_read+0x78/0xf8) [ 2621.804812][T23738] r10:00000003 r9:845f0000 r8:8020029c r7:00000000 r6:00000000 r5:83c300c0 [ 2621.805177][T23738] r4:83c300c3 [ 2621.805374][T23738] [<8050812c>] (ksys_read) from [<80508234>] (sys_read+0x10/0x14) [ 2621.805788][T23738] r7:00000003 r6:00000004 r5:76b66f30 r4:0000000f [ 2621.806183][T23738] [<80508224>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2621.806579][T23738] Exception stack(0xeaafdfa8 to 0xeaafdff0) [ 2621.806877][T23738] dfa0: 0000000f 76b66f30 00000004 76b66f30 0000000f 00000000 [ 2621.807252][T23738] dfc0: 0000000f 76b66f30 00000004 00000003 00000000 00006364 003d0f00 76b670bc [ 2621.808149][T23738] dfe0: 00000158 76b66ed0 000d8318 00130ca4 [ 2621.889797][T23740] serio: Serial port pts0 [ 2622.339370][T23744] fuse: Bad value for 'fd' [ 2625.992648][T23770] fuse: Bad value for 'fd' [ 2627.737172][T23783] fuse: Bad value for 'fd' [ 2627.939254][T23788] fuse: Unknown parameter '' [ 2628.123221][T23792] serio: Serial port pts0 [ 2631.573608][T23806] fuse: Invalid rootmode [ 2634.952429][T23827] fuse: Invalid rootmode [ 2635.259023][T23834] serio: Serial port pts0 [ 2639.176815][T23847] fuse: Invalid rootmode [ 2642.216963][T23867] fuse: Bad value for 'rootmode' [ 2642.757265][T23875] serio: Serial port pts0 [ 2644.328169][T23887] fuse: Bad value for 'rootmode' [ 2646.634557][T23904] fuse: Bad value for 'rootmode' [ 2662.650004][ T31] audit: type=1400 audit(2662.584:693): avc: denied { checkpoint_restore } for pid=23941 comm="syz.0.5000" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2670.866510][T23987] syz.1.5017[23987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2670.866891][T23987] syz.1.5017[23987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2673.103837][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 2673.909594][T24002] process 'syz.1.5024' launched './file0' with NULL argv: empty string added [ 2673.917826][ T31] audit: type=1400 audit(2673.844:694): avc: denied { execute_no_trans } for pid=24001 comm="syz.1.5024" path="/361/file0" dev="tmpfs" ino=1982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2680.054524][ T31] audit: type=1326 audit(2679.994:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24040 comm="syz.1.5035" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2680.102296][ T31] audit: type=1326 audit(2680.024:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24040 comm="syz.1.5035" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2680.108226][ T31] audit: type=1326 audit(2680.034:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24040 comm="syz.1.5035" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2680.113301][ T31] audit: type=1326 audit(2680.034:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24040 comm="syz.1.5035" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2680.114108][ T31] audit: type=1326 audit(2680.054:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24040 comm="syz.1.5035" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2680.123302][ T31] audit: type=1326 audit(2680.054:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24040 comm="syz.1.5035" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2680.125687][ T31] audit: type=1326 audit(2680.064:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24040 comm="syz.1.5035" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2680.141173][ T31] audit: type=1326 audit(2680.064:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24040 comm="syz.1.5035" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2680.157991][ T31] audit: type=1326 audit(2680.074:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24040 comm="syz.1.5035" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2680.161334][ T31] audit: type=1326 audit(2680.074:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24040 comm="syz.1.5035" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2686.935873][T24050] syz.1.5038[24050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2686.940885][T24050] syz.1.5038[24050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2686.965488][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 2686.965590][ T31] audit: type=1326 audit(2686.904:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24049 comm="syz.1.5038" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2686.969380][ T31] audit: type=1326 audit(2686.904:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24049 comm="syz.1.5038" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2686.992325][ T31] audit: type=1326 audit(2686.914:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24049 comm="syz.1.5038" exe="/syz-executor" sig=0 arch=40000028 syscall=366 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2686.993386][ T31] audit: type=1326 audit(2686.914:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24049 comm="syz.1.5038" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2686.994189][ T31] audit: type=1326 audit(2686.914:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24049 comm="syz.1.5038" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2687.160635][ T31] audit: type=1326 audit(2687.094:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24053 comm="syz.1.5039" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2687.169993][ T31] audit: type=1326 audit(2687.104:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24053 comm="syz.1.5039" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2687.171408][ T31] audit: type=1326 audit(2687.104:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24053 comm="syz.1.5039" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2687.175167][ T31] audit: type=1326 audit(2687.114:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24053 comm="syz.1.5039" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2687.199920][ T31] audit: type=1326 audit(2687.124:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24053 comm="syz.1.5039" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2689.667657][T24130] netlink: 'syz.0.5048': attribute type 4 has an invalid length. [ 2692.630793][T24169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5063'. [ 2698.273954][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 2698.274061][ T31] audit: type=1326 audit(3210.213:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24177 comm="syz.1.5066" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2698.275574][ T31] audit: type=1326 audit(3210.213:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24177 comm="syz.1.5066" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2698.276446][ T31] audit: type=1326 audit(3210.213:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24177 comm="syz.1.5066" exe="/syz-executor" sig=0 arch=40000028 syscall=185 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2698.277139][ T31] audit: type=1326 audit(3210.213:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24177 comm="syz.1.5066" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2700.162307][ T31] audit: type=1326 audit(3212.083:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.1.5070" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2700.163647][ T31] audit: type=1326 audit(3212.083:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.1.5070" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2700.165120][ T31] audit: type=1326 audit(3212.103:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.1.5070" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2700.168164][ T31] audit: type=1326 audit(3212.103:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.1.5070" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2700.169428][ T31] audit: type=1326 audit(3212.103:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.1.5070" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2700.185891][ T31] audit: type=1326 audit(3212.123:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.1.5070" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2703.284883][ T31] kauditd_printk_skb: 32 callbacks suppressed [ 2703.284995][ T31] audit: type=1326 audit(3215.223:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24208 comm="syz.0.5077" exe="/syz-executor" sig=0 arch=40000028 syscall=276 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2703.286265][ T31] audit: type=1326 audit(3215.223:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24208 comm="syz.0.5077" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2703.287255][ T31] audit: type=1326 audit(3215.223:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24208 comm="syz.0.5077" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2704.226145][ T31] audit: type=1326 audit(3216.163:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24200 comm="syz.0.5074" exe="/syz-executor" sig=0 arch=40000028 syscall=1 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2704.266454][ T31] audit: type=1326 audit(3216.203:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24216 comm="syz.0.5080" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2704.267489][ T31] audit: type=1326 audit(3216.203:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24216 comm="syz.0.5080" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2704.268284][ T31] audit: type=1326 audit(3216.203:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24216 comm="syz.0.5080" exe="/syz-executor" sig=0 arch=40000028 syscall=369 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2704.269150][ T31] audit: type=1326 audit(3216.203:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24216 comm="syz.0.5080" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2704.270022][ T31] audit: type=1326 audit(3216.203:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24216 comm="syz.0.5080" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2704.504355][ T31] audit: type=1326 audit(3216.433:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24222 comm="syz.0.5081" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2704.706957][T24225] vlan2: entered promiscuous mode [ 2704.707546][T24225] vlan2: entered allmulticast mode [ 2709.872826][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 2709.872961][ T31] audit: type=1326 audit(3221.813:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24244 comm="syz.0.5086" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2709.874699][ T31] audit: type=1326 audit(3221.813:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24244 comm="syz.0.5086" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2709.881429][ T31] audit: type=1326 audit(3221.813:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24244 comm="syz.0.5086" exe="/syz-executor" sig=0 arch=40000028 syscall=383 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2709.883436][ T31] audit: type=1326 audit(3221.813:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24244 comm="syz.0.5086" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2709.884220][ T31] audit: type=1326 audit(3221.813:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24244 comm="syz.0.5086" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2710.289978][T24248] syz.0.5087[24248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2710.290374][T24248] syz.0.5087[24248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2715.977986][ T31] audit: type=1326 audit(3227.913:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24271 comm="syz.0.5096" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2715.992482][ T31] audit: type=1326 audit(3227.923:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24271 comm="syz.0.5096" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2715.993909][ T31] audit: type=1326 audit(3227.923:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24271 comm="syz.0.5096" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2715.995241][ T31] audit: type=1326 audit(3227.923:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24271 comm="syz.0.5096" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2715.996790][ T31] audit: type=1326 audit(3227.933:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24271 comm="syz.0.5096" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2715.999821][ T31] audit: type=1326 audit(3227.933:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24271 comm="syz.0.5096" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2716.016294][ T31] audit: type=1326 audit(3227.933:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24271 comm="syz.0.5096" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2716.033714][ T31] audit: type=1326 audit(3227.963:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24271 comm="syz.0.5096" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2716.035021][ T31] audit: type=1326 audit(3227.963:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24271 comm="syz.0.5096" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2716.040916][ T31] audit: type=1326 audit(3227.963:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24271 comm="syz.0.5096" exe="/syz-executor" sig=0 arch=40000028 syscall=428 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2724.109495][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 2724.109619][ T31] audit: type=1326 audit(3236.043:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24289 comm="syz.1.5101" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2724.111351][ T31] audit: type=1326 audit(3236.043:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24289 comm="syz.1.5101" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2724.132583][ T31] audit: type=1326 audit(3236.043:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24289 comm="syz.1.5101" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2724.134639][ T31] audit: type=1326 audit(3236.053:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24289 comm="syz.1.5101" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2724.135791][ T31] audit: type=1326 audit(3236.053:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24289 comm="syz.1.5101" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2724.143358][ T31] audit: type=1326 audit(3236.053:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24289 comm="syz.1.5101" exe="/syz-executor" sig=0 arch=40000028 syscall=386 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2724.144975][ T31] audit: type=1326 audit(3236.053:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24289 comm="syz.1.5101" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2724.145851][ T31] audit: type=1326 audit(3236.073:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24289 comm="syz.1.5101" exe="/syz-executor" sig=0 arch=40000028 syscall=185 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2724.146631][ T31] audit: type=1326 audit(3236.073:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24289 comm="syz.1.5101" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2724.147553][ T31] audit: type=1326 audit(3236.073:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24289 comm="syz.1.5101" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x132dd0 code=0x7ffc0000 [ 2724.566104][T24293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5102'. [ 2727.604852][T24323] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2727.705372][T24323] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2727.778598][T24323] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2727.857044][T24323] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2728.004859][T24323] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2728.028900][T24323] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2728.056723][T24323] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2728.097882][T24323] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2735.734572][T24366] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2748.709091][T24419] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5130'. [ 2751.022521][ T31] kauditd_printk_skb: 62 callbacks suppressed [ 2751.022644][ T31] audit: type=1400 audit(3262.953:883): avc: denied { map } for pid=24426 comm="syz.0.5134" path="socket:[56770]" dev="sockfs" ino=56770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2753.821382][T24437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5136'. [ 2755.621320][T24442] netlink: 'syz.0.5137': attribute type 27 has an invalid length. [ 2761.873049][ T31] audit: type=1400 audit(3273.813:884): avc: denied { bind } for pid=24459 comm="syz.0.5141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2769.922189][T24509] input: syz0 as /devices/virtual/input/input16 [ 2797.565112][ T1619] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 2797.782649][ T1619] usb 1-1: Using ep0 maxpacket: 16 [ 2797.793321][ T1619] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2797.794285][ T1619] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 2797.795281][ T1619] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 2797.832817][ T1619] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2797.839193][ T1619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2797.862338][ T1619] usb 1-1: Product: syz [ 2797.864268][ T1619] usb 1-1: Manufacturer: syz [ 2797.865428][ T1619] usb 1-1: SerialNumber: syz [ 2798.106151][T24620] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2798.107475][T24620] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2798.548084][ T1619] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 2798.548738][ T1619] cdc_ncm 1-1:1.0: bind() failure [ 2798.566838][ T1619] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2798.567370][ T1619] cdc_ncm 1-1:1.1: bind() failure [ 2798.587418][ T1619] usb 1-1: USB disconnect, device number 61 [ 2799.662685][T24647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24647 comm=syz.0.5195 [ 2806.233260][T24651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2806.237001][T24651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2807.052457][T23996] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 2807.274136][T23996] usb 1-1: Using ep0 maxpacket: 32 [ 2807.314430][T23996] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2807.336492][T23996] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2807.338670][T23996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2807.340389][T23996] usb 1-1: Product: syz [ 2807.340613][T23996] usb 1-1: Manufacturer: syz [ 2807.340829][T23996] usb 1-1: SerialNumber: syz [ 2807.834352][T23996] usb 1-1: USB disconnect, device number 62 [ 2808.702580][T23996] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 2808.967497][T24651] hsr_slave_0: entered promiscuous mode [ 2808.975684][T24651] hsr_slave_1: entered promiscuous mode [ 2808.983720][T24651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2808.984242][T24651] Cannot create hsr debugfs directory [ 2809.013636][T23996] usb 1-1: Using ep0 maxpacket: 32 [ 2809.034247][T23996] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2809.046924][T23996] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2809.051090][T23996] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2809.072840][T23996] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2809.073400][T23996] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2809.073805][T23996] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 2809.126510][T23996] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2809.127125][T23996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2809.127610][T23996] usb 1-1: Product: syz [ 2809.127823][T23996] usb 1-1: Manufacturer: syz [ 2809.128168][T23996] usb 1-1: SerialNumber: syz [ 2809.492955][T23996] cdc_ncm 1-1:1.0: bind() failure [ 2809.508963][T23996] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2809.512394][T23996] cdc_ncm 1-1:1.1: bind() failure [ 2809.543679][T23996] usb 1-1: USB disconnect, device number 63 [ 2809.746700][T24651] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2809.854755][T24651] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2809.935996][T24651] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2810.010034][T24651] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2810.363494][T24651] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2810.378062][T24651] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2810.413330][T24651] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2810.433064][T24651] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2812.458109][T24651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2812.845822][T25029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25029 comm=syz.0.5210 [ 2818.483492][T25077] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=25077 comm=syz.0.5223 [ 2820.716039][T24651] veth0_vlan: entered promiscuous mode [ 2820.775384][T24651] veth1_vlan: entered promiscuous mode [ 2820.985621][T24651] veth0_macvtap: entered promiscuous mode [ 2821.014430][T24651] veth1_macvtap: entered promiscuous mode [ 2821.148412][T24651] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2821.148950][T24651] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2821.149299][T24651] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2821.149669][T24651] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2821.855817][T25109] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25109 comm=syz.0.5235 [ 2822.029564][T17685] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2822.133607][T17685] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2822.249198][T17685] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2822.382712][T17685] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2823.296832][T17685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2823.318401][T17685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2823.325994][T17685] bond0 (unregistering): Released all slaves [ 2823.527321][T17685] hsr_slave_0: left promiscuous mode [ 2823.533957][T17685] hsr_slave_1: left promiscuous mode [ 2823.570382][T17685] veth1_macvtap: left promiscuous mode [ 2823.571061][T17685] veth0_macvtap: left promiscuous mode [ 2823.594166][T17685] veth1_vlan: left promiscuous mode [ 2823.626410][T17685] veth0_vlan: left promiscuous mode [ 2828.705880][T25113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2828.710969][T25113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2831.626497][T25113] hsr_slave_0: entered promiscuous mode [ 2831.630818][T25113] hsr_slave_1: entered promiscuous mode [ 2831.663757][T25113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2831.664277][T25113] Cannot create hsr debugfs directory [ 2833.003220][T25113] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2833.038318][T25113] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2833.136180][T25113] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2833.165514][T25113] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2835.276115][T25113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2836.930004][T25113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2842.678657][T25113] veth0_vlan: entered promiscuous mode [ 2842.728617][T25113] veth1_vlan: entered promiscuous mode [ 2842.893071][T25113] veth0_macvtap: entered promiscuous mode [ 2842.920070][T25113] veth1_macvtap: entered promiscuous mode [ 2843.068619][T25113] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2843.069185][T25113] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2843.069546][T25113] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2843.069947][T25113] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2848.744106][T23996] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 2848.998375][T23996] usb 1-1: Using ep0 maxpacket: 8 [ 2849.014870][T23996] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2849.015427][T23996] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2849.015850][T23996] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2849.016236][T23996] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2849.016601][T23996] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2849.017228][T23996] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2849.017622][T23996] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2849.319927][T23996] usb 1-1: usb_control_msg returned -32 [ 2849.332759][T23996] usbtmc 1-1:16.0: can't read capabilities [ 2852.919077][T25505] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 2852.919775][T25505] syz.1.5255: vmalloc error: size 536870912, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 2852.920486][T25505] CPU: 1 UID: 0 PID: 25505 Comm: syz.1.5255 Not tainted 6.11.0-rc6-syzkaller #0 [ 2852.920848][T25505] Hardware name: ARM-Versatile Express [ 2852.921085][T25505] Call trace: [ 2852.921284][T25505] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2852.922023][T25505] r7:ff800000 r6:82025a24 r5:60000013 r4:8200ca8c [ 2852.922589][T25505] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2852.922990][T25505] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2852.923371][T25505] r5:836fe000 r4:00000000 [ 2852.923587][T25505] [<8197af28>] (dump_stack) from [<804b31b4>] (warn_alloc+0xd8/0x178) [ 2852.924009][T25505] [<804b30dc>] (warn_alloc) from [<804aa378>] (__vmalloc_node_range_noprof+0xcc/0x56c) [ 2852.924429][T25505] r3:20000000 r2:82025a24 [ 2852.924658][T25505] r6:00000dc0 r5:00000001 r4:20000000 [ 2852.924913][T25505] [<804aa2ac>] (__vmalloc_node_range_noprof) from [<80461724>] (__kvmalloc_node_noprof+0xc0/0x110) [ 2852.925383][T25505] r10:e05b5d00 r9:8582d000 r8:81606038 r7:ffffffff r6:00000dc0 r5:20000000 [ 2852.925792][T25505] r4:00000000 [ 2852.926039][T25505] [<80461664>] (__kvmalloc_node_noprof) from [<81606038>] (xt_alloc_entry_offsets+0x24/0x30) [ 2852.926485][T25505] r8:b5403587 r7:00000000 r6:200002e0 r5:8582d040 r4:08000000 [ 2852.926829][T25505] [<81606014>] (xt_alloc_entry_offsets) from [<816bea14>] (translate_table+0x70/0x78c) [ 2852.927259][T25505] [<816be9a4>] (translate_table) from [<816bfbd0>] (do_replace+0xe8/0x5a0) [ 2852.927650][T25505] r10:00000126 r9:8582d040 r8:b5403587 r7:000001f8 r6:200002e0 r5:8582d000 [ 2852.928006][T25505] r4:84762700 [ 2852.928195][T25505] [<816bfae8>] (do_replace) from [<816c01bc>] (do_ipt_set_ctl+0x134/0x2a0) [ 2852.928607][T25505] r10:00000126 r9:81453ee8 r8:84bd1ac0 r7:00000258 r6:e05b5da8 r5:844aae80 [ 2852.928959][T25505] r4:00000040 [ 2852.929160][T25505] [<816c0088>] (do_ipt_set_ctl) from [<81593af8>] (nf_setsockopt+0x60/0x7c) [ 2852.929586][T25505] r10:00000126 r9:81453ee8 r8:84bd1ac0 r7:00000258 r6:844aae80 r5:816c0088 [ 2852.930021][T25505] r4:827e0520 [ 2852.930262][T25505] [<81593a9c>] (nf_setsockopt) from [<8162bcd4>] (ip_setsockopt+0x88/0x98) [ 2852.930666][T25505] r6:844aae80 r5:00000258 r4:00000040 [ 2852.930941][T25505] [<8162bc50>] (ip_setsockopt) from [<8163b778>] (tcp_setsockopt+0x3c/0x58) [ 2852.931346][T25505] r6:00000000 r5:84bd1680 r4:8162bc4c [ 2852.931613][T25505] [<8163b740>] (tcp_setsockopt) from [<81453f20>] (sock_common_setsockopt+0x38/0x40) [ 2852.932378][T25505] r4:8163b73c [ 2852.932575][T25505] [<81453eec>] (sock_common_setsockopt) from [<81867628>] (smc_setsockopt+0xa8/0x3c8) [ 2852.933033][T25505] r4:00000040 [ 2852.933233][T25505] [<81867584>] (smc_setsockopt) from [<8144f53c>] (do_sock_setsockopt+0xb0/0x17c) [ 2852.933649][T25505] r9:836fe000 r8:8020029c r7:00000000 r6:84c06780 r5:00000000 r4:81867580 [ 2852.934036][T25505] [<8144f48c>] (do_sock_setsockopt) from [<81452a3c>] (sys_setsockopt+0x78/0xbc) [ 2852.934463][T25505] r6:84c06780 r5:00000040 r4:00000000 [ 2852.934920][T25505] [<814529c4>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2852.935313][T25505] Exception stack(0xe05b5fa8 to 0xe05b5ff0) [ 2852.935600][T25505] 5fa0: 00000258 00000000 00000003 00000000 00000040 20000280 [ 2852.936004][T25505] 5fc0: 00000258 00000000 002762f8 00000126 00000000 00006364 003d0f00 76b5f0bc [ 2852.936378][T25505] 5fe0: 76b5eec0 76b5eeb0 000189f0 00132dd0 [ 2852.936737][T25505] r7:00000126 r6:002762f8 r5:00000000 r4:00000258 [ 2852.952203][T25505] Mem-Info: [ 2852.952584][T25505] active_anon:1294 inactive_anon:0 isolated_anon:0 [ 2852.952584][T25505] active_file:64 inactive_file:39425 isolated_file:0 [ 2852.952584][T25505] unevictable:768 dirty:28 writeback:0 [ 2852.952584][T25505] slab_reclaimable:1047 slab_unreclaimable:6398 [ 2852.952584][T25505] mapped:1741 shmem:833 pagetables:227 [ 2852.952584][T25505] sec_pagetables:0 bounce:0 [ 2852.952584][T25505] kernel_misc_reclaimable:0 [ 2852.952584][T25505] free:438076 free_pcp:1269 free_cma:4032 [ 2852.954050][T25505] Node 0 active_anon:5176kB inactive_anon:0kB active_file:256kB inactive_file:157700kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:6964kB dirty:112kB writeback:0kB shmem:3332kB writeback_tmp:0kB kernel_stack:2088kB pagetables:908kB sec_pagetables:0kB all_unreclaimable? no [ 2852.955062][T25505] Normal free:1385920kB boost:0kB min:4776kB low:6204kB high:7632kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:860kB unevictable:0kB writepending:80kB present:1556480kB managed:1430068kB mlocked:0kB bounce:0kB free_pcp:5076kB local_pcp:2488kB free_cma:0kB [ 2852.955943][T25505] lowmem_reserve[]: 0 4224 0 [ 2852.956258][T25505] Normal: 92*4kB (UME) 14*8kB (UM) 24*16kB (UME) 17*32kB (UME) 13*64kB (ME) 10*128kB (ME) 6*256kB (UM) 7*512kB (UM) 11*1024kB (UME) 9*2048kB (UME) 329*4096kB (UM) = 1385920kB [ 2852.957375][T25505] 40287 total pagecache pages [ 2852.957576][T25505] 0 pages in swap cache [ 2852.957845][T25505] Free swap = 124428kB [ 2852.958036][T25505] Total swap = 124996kB [ 2852.958237][T25505] 524288 pages RAM [ 2852.958411][T25505] 135168 pages HighMem/MovableOnly [ 2852.958627][T25505] 31603 pages reserved [ 2852.958839][T25505] 4096 pages cma reserved [ 2854.266628][T25641] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 2859.359288][T25666] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=272 sclass=netlink_audit_socket pid=25666 comm=syz.1.5293 [ 2860.120794][T24683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2860.135944][T24683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2860.141328][T24683] bond0 (unregistering): Released all slaves [ 2860.159343][T24683] bond1 (unregistering): Released all slaves [ 2860.315035][T24683] hsr_slave_0: left promiscuous mode [ 2860.318796][T24683] hsr_slave_1: left promiscuous mode [ 2860.327837][T24683] veth1_macvtap: left promiscuous mode [ 2860.328393][T24683] veth0_macvtap: left promiscuous mode [ 2860.328866][T24683] veth1_vlan: left promiscuous mode [ 2860.329296][T24683] veth0_vlan: left promiscuous mode [ 2862.898229][T24317] usb 1-1: USB disconnect, device number 64 [ 2865.086016][T25714] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25714 comm=syz.1.5309 [ 2867.526558][T25746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=25746 comm=syz.1.5325 [ 2869.983814][T24324] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2870.224511][T24324] usb 2-1: Using ep0 maxpacket: 32 [ 2870.304530][T24324] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 2870.309296][T24324] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2870.315337][T24324] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2870.315919][T24324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2870.316281][T24324] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2870.317010][T24324] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2870.317494][T24324] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2870.317990][T24324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2870.325496][T24324] usb 2-1: config 0 descriptor?? [ 2870.694965][T24324] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2870.717731][T24324] usb 2-1: USB disconnect, device number 55 [ 2870.731026][T24324] usblp0: removed [ 2871.342851][T24324] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2871.522082][T24324] usb 2-1: Using ep0 maxpacket: 32 [ 2871.542892][T24324] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 2871.543445][T24324] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2871.543819][T24324] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2871.544186][T24324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2871.544550][T24324] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2871.545274][T24324] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2871.545906][T24324] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2871.546505][T24324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2871.551384][T24324] usb 2-1: config 0 descriptor?? [ 2871.783741][T24324] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2871.791333][T24324] usb 2-1: USB disconnect, device number 56 [ 2871.808392][T24324] usblp0: removed [ 2872.775349][ T31] audit: type=1400 audit(3384.713:885): avc: denied { setopt } for pid=25821 comm="syz.1.5346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2874.586877][T25846] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=25846 comm=syz.0.5356 [ 2879.757634][T25885] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=25885 comm=syz.0.5374 [ 2888.305037][T25973] serio: Serial port pts0 [ 2901.763038][ T31] audit: type=1400 audit(3413.703:886): avc: denied { create } for pid=26030 comm="syz.1.5441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 2901.792145][ T31] audit: type=1400 audit(3413.723:887): avc: denied { write } for pid=26030 comm="syz.1.5441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 2903.609548][T26051] serio: Serial port pts0 [ 2905.546872][T26068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26068 comm=syz.1.5454 [ 2906.549930][T26090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26090 comm=syz.0.5465 [ 2910.002186][T26130] serio: Serial port pts0 [ 2917.416458][T26170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26170 comm=syz.0.5498 [ 2919.329897][T26186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26186 comm=syz.0.5505 [ 2924.873326][ T31] audit: type=1400 audit(3436.803:888): avc: denied { remount } for pid=26216 comm="syz.0.5516" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2926.702222][T26253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26253 comm=syz.0.5532 [ 2929.161886][ T31] audit: type=1400 audit(3441.093:889): avc: denied { setopt } for pid=26291 comm="syz.0.5549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2930.178658][T26306] input: syz0 as /devices/virtual/input/input18 [ 2939.383734][T26320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26320 comm=syz.1.5561 [ 2939.676128][T26328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26328 comm=syz.1.5565 [ 2953.223869][T26417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=26417 comm=syz.1.5605 [ 2958.760827][T26472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=26472 comm=syz.1.5630 [ 2964.786169][T26481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2964.788993][T26481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2967.460772][T26481] hsr_slave_0: entered promiscuous mode [ 2967.471254][T26481] hsr_slave_1: entered promiscuous mode [ 2967.613845][T23996] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2967.834941][T23996] usb 2-1: Using ep0 maxpacket: 8 [ 2967.847018][T23996] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2967.847434][T23996] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2967.847681][T23996] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2967.847892][T23996] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2967.848172][T23996] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2967.850471][T23996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2967.910826][T26481] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2968.078801][T26481] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2968.106690][T23996] usb 2-1: GET_CAPABILITIES returned 0 [ 2968.108446][T23996] usbtmc 2-1:16.0: can't read capabilities [ 2968.174157][T26481] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2968.315334][T26481] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2968.335054][T24285] usb 2-1: USB disconnect, device number 57 [ 2968.544076][T26481] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2968.558840][T26481] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2968.602497][T26481] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2968.621505][T26481] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2970.308291][T26481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2976.852091][T26481] veth0_vlan: entered promiscuous mode [ 2976.954505][T26481] veth1_vlan: entered promiscuous mode [ 2977.093732][T26481] veth0_macvtap: entered promiscuous mode [ 2977.115725][T26481] veth1_macvtap: entered promiscuous mode [ 2977.242170][T26481] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2977.242697][T26481] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2977.243031][T26481] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2977.243342][T26481] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2987.960299][T26955] serio: Serial port pts0 [ 2995.932869][T26883] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 2995.933914][T26883] warn_alloc: 1 callbacks suppressed [ 2995.933953][T26883] syz.1.5665: vmalloc error: size 536870912, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 2995.935321][T26883] CPU: 1 UID: 0 PID: 26883 Comm: syz.1.5665 Not tainted 6.11.0-rc6-syzkaller #0 [ 2995.935662][T26883] Hardware name: ARM-Versatile Express [ 2995.936034][T26883] Call trace: [ 2995.936227][T26883] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 2995.936725][T26883] r7:ff800000 r6:82025a24 r5:60000113 r4:8200ca8c [ 2995.937040][T26883] [<8195d1c4>] (show_stack) from [<8197af1c>] (dump_stack_lvl+0x70/0x7c) [ 2995.937462][T26883] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 2995.937904][T26883] r5:85389800 r4:00000000 [ 2995.938109][T26883] [<8197af28>] (dump_stack) from [<804b31b4>] (warn_alloc+0xd8/0x178) [ 2995.938526][T26883] [<804b30dc>] (warn_alloc) from [<804aa378>] (__vmalloc_node_range_noprof+0xcc/0x56c) [ 2995.938924][T26883] r3:20000000 r2:82025a24 [ 2995.939124][T26883] r6:00000dc0 r5:00000001 r4:20000000 [ 2995.939392][T26883] [<804aa2ac>] (__vmalloc_node_range_noprof) from [<80461724>] (__kvmalloc_node_noprof+0xc0/0x110) [ 2995.939899][T26883] r10:dfdcdd00 r9:847f6c00 r8:81606038 r7:ffffffff r6:00000dc0 r5:20000000 [ 2995.940283][T26883] r4:00000000 [ 2995.940458][T26883] [<80461664>] (__kvmalloc_node_noprof) from [<81606038>] (xt_alloc_entry_offsets+0x24/0x30) [ 2995.940910][T26883] r8:b5403587 r7:00000000 r6:20000360 r5:847f6c40 r4:08000000 [ 2995.941186][T26883] [<81606014>] (xt_alloc_entry_offsets) from [<816bea14>] (translate_table+0x70/0x78c) [ 2995.941852][T26883] [<816be9a4>] (translate_table) from [<816bfbd0>] (do_replace+0xe8/0x5a0) [ 2995.942578][T26883] r10:00000126 r9:847f6c40 r8:b5403587 r7:00000238 r6:20000360 r5:847f6c00 [ 2995.943073][T26883] r4:84762700 [ 2995.943299][T26883] [<816bfae8>] (do_replace) from [<816c01bc>] (do_ipt_set_ctl+0x134/0x2a0) [ 2995.943792][T26883] r10:00000126 r9:81453ee8 r8:84bd0440 r7:00000298 r6:dfdcdda8 r5:844a8000 [ 2995.944168][T26883] r4:00000040 [ 2995.944350][T26883] [<816c0088>] (do_ipt_set_ctl) from [<81593af8>] (nf_setsockopt+0x60/0x7c) [ 2995.944969][T26883] r10:00000126 r9:81453ee8 r8:84bd0440 r7:00000298 r6:844a8000 r5:816c0088 [ 2995.945537][T26883] r4:827e0520 [ 2995.945830][T26883] [<81593a9c>] (nf_setsockopt) from [<8162bcd4>] (ip_setsockopt+0x88/0x98) [ 2995.946386][T26883] r6:844a8000 r5:00000298 r4:00000040 [ 2995.946765][T26883] [<8162bc50>] (ip_setsockopt) from [<8163b778>] (tcp_setsockopt+0x3c/0x58) [ 2995.947156][T26883] r6:00000000 r5:84bd0000 r4:8162bc4c [ 2995.947406][T26883] [<8163b740>] (tcp_setsockopt) from [<81453f20>] (sock_common_setsockopt+0x38/0x40) [ 2995.947893][T26883] r4:8163b73c [ 2995.948068][T26883] [<81453eec>] (sock_common_setsockopt) from [<81867628>] (smc_setsockopt+0xa8/0x3c8) [ 2995.948572][T26883] r4:00000040 [ 2995.948777][T26883] [<81867584>] (smc_setsockopt) from [<8144f53c>] (do_sock_setsockopt+0xb0/0x17c) [ 2995.949206][T26883] r9:85389800 r8:8020029c r7:00000000 r6:83244280 r5:00000000 r4:81867580 [ 2995.949674][T26883] [<8144f48c>] (do_sock_setsockopt) from [<81452a3c>] (sys_setsockopt+0x78/0xbc) [ 2995.950162][T26883] r6:83244280 r5:00000040 r4:00000000 [ 2995.950405][T26883] [<814529c4>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2995.950890][T26883] Exception stack(0xdfdcdfa8 to 0xdfdcdff0) [ 2995.951275][T26883] dfa0: 00000298 00000000 00000003 00000000 00000040 20000300 [ 2995.951810][T26883] dfc0: 00000298 00000000 002762f8 00000126 00000000 00006364 003d0f00 76b5f0bc [ 2995.952234][T26883] dfe0: 76b5eec0 76b5eeb0 000189f0 00132dd0 [ 2995.952493][T26883] r7:00000126 r6:002762f8 r5:00000000 r4:00000298 [ 2995.974457][T26883] Mem-Info: [ 2995.974844][T26883] active_anon:1311 inactive_anon:0 isolated_anon:0 [ 2995.974844][T26883] active_file:64 inactive_file:39413 isolated_file:0 [ 2995.974844][T26883] unevictable:768 dirty:17 writeback:0 [ 2995.974844][T26883] slab_reclaimable:1047 slab_unreclaimable:6390 [ 2995.974844][T26883] mapped:1754 shmem:838 pagetables:222 [ 2995.974844][T26883] sec_pagetables:0 bounce:0 [ 2995.974844][T26883] kernel_misc_reclaimable:0 [ 2995.974844][T26883] free:439008 free_pcp:602 free_cma:4032 [ 2995.976711][T26883] Node 0 active_anon:5244kB inactive_anon:0kB active_file:256kB inactive_file:157652kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:7016kB dirty:68kB writeback:0kB shmem:3352kB writeback_tmp:0kB kernel_stack:2096kB pagetables:888kB sec_pagetables:0kB all_unreclaimable? no [ 2995.978204][T26883] Normal free:1388636kB boost:0kB min:4776kB low:6204kB high:7632kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:812kB unevictable:0kB writepending:56kB present:1556480kB managed:1430068kB mlocked:0kB bounce:0kB free_pcp:2408kB local_pcp:1216kB free_cma:0kB [ 2995.979103][T26883] lowmem_reserve[]: 0 4224 0 [ 2995.979400][T26883] Normal: 13*4kB (UME) 29*8kB (UME) 40*16kB (UME) 34*32kB (UME) 22*64kB (UME) 16*128kB (UME) 7*256kB (UM) 8*512kB (UM) 11*1024kB (UME) 9*2048kB (UME) 329*4096kB (UM) = 1388636kB [ 2995.980493][T26883] 40266 total pagecache pages [ 2995.980717][T26883] 0 pages in swap cache [ 2995.980932][T26883] Free swap = 124428kB [ 2995.981128][T26883] Total swap = 124996kB [ 2995.981339][T26883] 524288 pages RAM [ 2995.981502][T26883] 135168 pages HighMem/MovableOnly [ 2995.982707][T26883] 31603 pages reserved [ 2995.982976][T26883] 4096 pages cma reserved [ 2996.964529][T27029] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=512 sclass=netlink_xfrm_socket pid=27029 comm=syz.1.5717 [ 3004.264273][T27092] ------------[ cut here ]------------ [ 3004.264838][T27092] WARNING: CPU: 0 PID: 27092 at mm/highmem.c:622 kunmap_local_indexed+0x210/0x228 [ 3004.265389][T27092] Modules linked in: [ 3004.267453][T27092] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3004.268171][T27092] CPU: 0 UID: 0 PID: 27092 Comm: syz.1.5743 Not tainted 6.11.0-rc6-syzkaller #0 [ 3004.269114][T27092] Hardware name: ARM-Versatile Express [ 3004.270101][T27092] Call trace: [ 3004.270783][T27092] [<8195d0e0>] (dump_backtrace) from [<8195d1dc>] (show_stack+0x18/0x1c) [ 3004.271240][T27092] r7:00000000 r6:826228c4 r5:00000000 r4:8200ca8c [ 3004.271553][T27092] [<8195d1c4>] (show_stack) from [<8197af00>] (dump_stack_lvl+0x54/0x7c) [ 3004.272176][T27092] [<8197aeac>] (dump_stack_lvl) from [<8197af40>] (dump_stack+0x18/0x1c) [ 3004.272847][T27092] r5:00000000 r4:8286dd18 [ 3004.273109][T27092] [<8197af28>] (dump_stack) from [<8195dc84>] (panic+0x120/0x368) [ 3004.273512][T27092] [<8195db64>] (panic) from [<802421e4>] (get_taint+0x0/0x1c) [ 3004.273905][T27092] r3:8260c5c4 r2:00000001 r1:81ff52b0 r0:81ffd088 [ 3004.274200][T27092] r7:80481844 [ 3004.274477][T27092] [<80242170>] (check_panic_on_warn) from [<80242338>] (__warn+0x7c/0x180) [ 3004.274946][T27092] [<802422bc>] (__warn) from [<802425b4>] (warn_slowpath_fmt+0x178/0x1f4) [ 3004.275332][T27092] r8:00000009 r7:820245c0 r6:dfa29d14 r5:84851800 r4:00000000 [ 3004.275648][T27092] [<80242440>] (warn_slowpath_fmt) from [<80481844>] (kunmap_local_indexed+0x210/0x228) [ 3004.276128][T27092] r10:ffefd0a8 r9:8410a700 r8:20508000 r7:fffffffe r6:00000003 r5:84851800 [ 3004.276635][T27092] r4:ffefd000 [ 3004.276820][T27092] [<80481634>] (kunmap_local_indexed) from [<804f7ecc>] (move_pages+0x7e8/0x149c) [ 3004.277239][T27092] r7:fffffffe r6:00000000 r5:99d6a810 r4:ffefb840 [ 3004.277499][T27092] [<804f76e4>] (move_pages) from [<80572ee4>] (userfaultfd_ioctl+0x1260/0x2314) [ 3004.278019][T27092] r10:20c16000 r9:dfa29e98 r8:20000080 r7:8410a700 r6:00000001 r5:00000000 [ 3004.278357][T27092] r4:8526b000 [ 3004.278537][T27092] [<80571c84>] (userfaultfd_ioctl) from [<80520dac>] (sys_ioctl+0x134/0xda4) [ 3004.279048][T27092] r10:84851800 r9:00000003 r8:84744240 r7:20000080 r6:84744241 r5:00000000 [ 3004.279519][T27092] r4:c028aa05 [ 3004.279862][T27092] [<80520c78>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3004.280307][T27092] Exception stack(0xdfa29fa8 to 0xdfa29ff0) [ 3004.280654][T27092] 9fa0: 00000000 00000000 00000003 c028aa05 20000080 00000000 [ 3004.281292][T27092] 9fc0: 00000000 00000000 00276380 00000036 00000000 00006364 003d0f00 76b3e0bc [ 3004.281983][T27092] 9fe0: 76b3dec0 76b3deb0 000189f0 00132dd0 [ 3004.282291][T27092] r10:00000036 r9:84851800 r8:8020029c r7:00000036 r6:00276380 r5:00000000 [ 3004.283017][T27092] r4:00000000 [ 3004.284995][T27092] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:40:07 Registers: info registers vcpu 0 CPU#0 R00=00000001 R01=1e5c1e5b R02=00000002 R03=eb8d7030 R04=8389dc40 R05=00000001 R06=20000093 R07=dfa29b38 R08=82870458 R09=0000003c R10=60000093 R11=dfa29ab4 R12=dfa29a78 R13=dfa29a90 R14=81987ccc R15=809bafc8 PSR=80000093 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000c1f R01=0000002f R02=00000000 R03=00000000 R04=0057da07 R05=00000000 R06=0057df15 R07=00000014 R08=0057dae3 R09=00000000 R10=7e928bd4 R11=005b2afc R12=005b0924 R13=df815ff8 R14=76baacec R15=76baacec PSR=40000093 -Z-- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=005727e9 s17=00000000 d08=00000000005727e9 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=0002e803 s33=f0030008 d16=f00300080002e803 s34=ffff0402 s35=0303ffff d17=0303ffffffff0402 s36=ff040380 s37=03ffffff d18=03ffffffff040380 s38=00039003 s39=98032008 d19=9803200800039003 s40=00080003 s41=060001fc d20=060001fc00080003 s42=020a0800 s43=08000180 d21=08000180020a0800 s44=800302a0 s45=ffed0808 d22=ffed0808800302a0 s46=ffffffff s47=01ffffff d23=01ffffffffffffff s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=376b6349 s53=ca64c695 d26=ca64c695376b6349 s54=0321597d s55=5f5693c6 d27=5f5693c60321597d s56=63ebbde2 s57=ebad9b89 d28=ebad9b8963ebbde2 s58=91f8e784 s59=38d1f407 d29=38d1f40791f8e784 s60=f59cfc4c s61=b182e935 d30=b182e935f59cfc4c s62=24b1cc4e s63=4cc2d4db d31=4cc2d4db24b1cc4e FPSCR: 00000000