last executing test programs: 38.919279143s ago: executing program 0 (id=818): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) openat$ptmx(0xffffff9c, 0x0, 0x200, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) poll(&(0x7f0000000140)=[{r1, 0x2}, {0xffffffffffffffff, 0x1250}], 0x2, 0x9) 36.000494604s ago: executing program 0 (id=819): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x5, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x40a00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0xd0, 0x8, 0xa, 0xf0a, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_USERDATA={0x60, 0x7, 0x1, 0x0, "0f892b485d046c9329fc2fab944957b724197f85e0b5a98c9cf97d548e01e48cfd5373352d833ad95107c3136b851d699740f5d95168482198d966c77773427708690b8b0baec3ee2b13f76b69baca5d85f7378db86267a24b3f7ef9"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14}}, 0xf8}}, 0x8050) 16.559986616s ago: executing program 0 (id=820): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpgrp(0x0) syz_pidfd_open(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x0) 16.300585479s ago: executing program 0 (id=821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 7.080017254s ago: executing program 1 (id=823): socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0x9}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r6}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x4) 6.463099217s ago: executing program 1 (id=824): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) prlimit64(r2, 0xe, &(0x7f0000000140)={0xfff, 0x100008b}, 0x0) setrlimit(0xa, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x22141) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mmap$binder(&(0x7f00000e8000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x28e6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 2.099032991s ago: executing program 1 (id=825): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000640)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x400c0c4) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x5}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x0, 0x5, r2}]}, {0x4}, {0xffffffffffffffae}, {0xc}}}]}]}, 0x64}}, 0x0) 1.419302516s ago: executing program 1 (id=826): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/205, 0xcd}, 0x9}], 0x1, 0x23, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 711.482423ms ago: executing program 0 (id=827): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x8) 547.312001ms ago: executing program 1 (id=828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x0) 507.108033ms ago: executing program 0 (id=829): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) write$binfmt_elf32(r0, 0x0, 0x4cd) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 0s ago: executing program 1 (id=830): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'8255\x00', [0xfffffffb, 0x2166, 0x0, 0x100000, 0x88d6, 0x8f, 0xfffffffd, 0x10, 0x2, 0xffffffff, 0x200, 0xfff, 0x344, 0x1, 0x2, 0x200, 0x9, 0x3, 0x3, 0xe, 0x4, 0x0, 0x80, 0x7ff, 0x1, 0x1, 0xb0c4, 0x7df, 0x8, 0xf3, 0x1]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) kernel console output (not intermixed with test programs): rom [<80b52cc0>] (device_wakeup_enable+0x40/0xf8) [ 278.789276][ T4402] r8:00000000 r7:858d9380 r6:83be1a00 r5:00000001 r4:83f74488 [ 278.789291][ T4402] [<80b52c80>] (device_wakeup_enable) from [<80b52de4>] (device_set_wakeup_enable+0x6c/0x70) [ 278.789352][ T4402] r7:858d9380 r6:83be1a00 r5:00000001 r4:83f74488 [ 278.789367][ T4402] [<80b52d78>] (device_set_wakeup_enable) from [<80e86260>] (usb_hcd_submit_urb+0x550/0x8cc) [ 278.789465][ T4402] r7:858d9380 r6:83be1a00 r5:00000000 r4:858d6240 [ 278.789481][ T4402] [<80e85d10>] (usb_hcd_submit_urb) from [<80e87fac>] (usb_submit_urb+0x1f4/0x5e8) [ 278.789548][ T4402] r10:81d98608 r9:858d9a40 r8:00000000 r7:00000000 r6:83f74400 r5:00000001 [ 278.789567][ T4402] r4:858d6240 [ 278.789624][ T4402] [<80e87db8>] (usb_submit_urb) from [<80e92650>] (usbfs_start_wait_urb+0x64/0x100) [ 278.789710][ T4402] r10:83f74400 r9:858d9a40 r8:858d6240 r7:e4855da0 r6:00000007 r5:e4855df8 [ 278.789732][ T4402] r4:858d6240 [ 278.789748][ T4402] [<80e925ec>] (usbfs_start_wait_urb) from [<80e959c0>] (do_proc_control+0x28c/0x5f8) [ 278.789813][ T4402] r7:84efd400 r6:00000000 r5:82b11e08 r4:e4855ea8 [ 278.789829][ T4402] [<80e95734>] (do_proc_control) from [<80e9729c>] (usbdev_do_ioctl+0x1570/0x2090) [ 278.789913][ T4402] r10:84efd400 r9:83f744cc r8:e4855ea8 r7:83f74488 r6:20000040 r5:b5403587 [ 278.789942][ T4402] r4:858e4f00 [ 278.789958][ T4402] [<80e95d2c>] (usbdev_do_ioctl) from [<80e97dcc>] (usbdev_ioctl+0x10/0x14) [ 278.790031][ T4402] r10:84efd400 r9:85827600 r8:00000003 r7:20000040 r6:85827601 r5:00000000 [ 278.790052][ T4402] r4:c0105500 [ 278.790068][ T4402] [<80e97dbc>] (usbdev_ioctl) from [<8056e2cc>] (sys_ioctl+0x130/0xdc8) [ 278.790125][ T4402] [<8056e19c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 278.790173][ T4402] Exception stack(0xe4855fa8 to 0xe4855ff0) [ 278.790217][ T4402] 5fa0: 00000000 00000000 00000003 c0105500 20000040 00000000 [ 278.790306][ T4402] 5fc0: 00000000 00000000 0012fef0 00000036 002e0000 00000000 00006364 76beb0bc [ 278.790337][ T4402] 5fe0: 76beaec0 76beaeb0 000193a4 00131f40 [ 278.790374][ T4402] r10:00000036 r9:84efd400 r8:8020029c r7:00000036 r6:0012fef0 r5:00000000 [ 278.790393][ T4402] r4:00000000 [ 278.846785][ T4402] kobject: kobject_add_internal failed for wakeup3 (error: -12 parent: wakeup) [ 280.060537][ T4410] FAULT_INJECTION: forcing a failure. [ 280.060537][ T4410] name failslab, interval 1, probability 0, space 0, times 0 [ 280.063569][ T4410] CPU: 0 UID: 0 PID: 4410 Comm: syz.1.206 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 280.063682][ T4410] Hardware name: ARM-Versatile Express [ 280.063731][ T4410] Call trace: [ 280.063780][ T4410] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 280.063899][ T4410] r7:00000c40 r6:00000000 r5:60000013 r4:8225c278 [ 280.063920][ T4410] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 280.063978][ T4410] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 280.064037][ T4410] r5:83ae0000 r4:82919c00 [ 280.064055][ T4410] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 280.064115][ T4410] [<8096add8>] (should_fail_ex) from [<80522b74>] (should_failslab+0x6c/0x94) [ 280.064184][ T4410] r8:83ae0000 r7:00000c40 r6:858277a8 r5:00001000 r4:830016c0 [ 280.064203][ T4410] [<80522b08>] (should_failslab) from [<80507904>] (__kmalloc_noprof+0x9c/0x458) [ 280.064257][ T4410] [<80507868>] (__kmalloc_noprof) from [<807c1164>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 280.064331][ T4410] r10:83ae0000 r9:8309e400 r8:00000000 r7:8342f440 r6:858277a8 r5:00001000 [ 280.064351][ T4410] r4:00000000 [ 280.064370][ T4410] [<807c1128>] (tomoyo_realpath_from_path) from [<807bd2a8>] (tomoyo_path_number_perm+0xcc/0x22c) [ 280.064676][ T4410] r10:83ae0000 r9:00000000 r8:00000003 r7:c0505350 r6:00000004 r5:81cd65f8 [ 280.064958][ T4410] r4:858277a8 r3:826c0200 [ 280.065007][ T4410] [<807bd1dc>] (tomoyo_path_number_perm) from [<807c1b88>] (tomoyo_file_ioctl+0x1c/0x20) [ 280.065101][ T4410] r9:85827780 r8:00000003 r7:20000940 r6:20000940 r5:c0505350 r4:85827780 [ 280.065124][ T4410] [<807c1b6c>] (tomoyo_file_ioctl) from [<8076eb0c>] (security_file_ioctl+0x64/0x1e4) [ 280.065182][ T4410] [<8076eaa8>] (security_file_ioctl) from [<8056e1e8>] (sys_ioctl+0x4c/0xdc8) [ 280.065250][ T4410] r7:20000940 r6:85827781 r5:00000000 r4:c0505350 [ 280.065271][ T4410] [<8056e19c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 280.066516][ T4410] Exception stack(0xe88f5fa8 to 0xe88f5ff0) [ 280.068861][ T4410] 5fa0: 00000000 00000000 00000003 c0505350 20000940 00000000 [ 280.071170][ T4410] 5fc0: 00000000 00000000 0012fef0 00000036 002e0000 00000000 00006364 76af50bc [ 280.072100][ T4410] 5fe0: 76af4ec0 76af4eb0 000193a4 00131f40 [ 280.074103][ T4410] r10:00000036 r9:83ae0000 r8:8020029c r7:00000036 r6:0012fef0 r5:00000000 [ 280.074198][ T4410] r4:00000000 [ 280.106899][ T4410] ERROR: Out of memory at tomoyo_realpath_from_path. [ 284.597568][ T4430] FAULT_INJECTION: forcing a failure. [ 284.597568][ T4430] name failslab, interval 1, probability 0, space 0, times 0 [ 284.599503][ T4430] CPU: 1 UID: 0 PID: 4430 Comm: syz.0.216 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 284.599563][ T4430] Hardware name: ARM-Versatile Express [ 284.599579][ T4430] Call trace: [ 284.599601][ T4430] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 284.599678][ T4430] r7:84ef8000 r6:00000000 r5:60000013 r4:8225c278 [ 284.599692][ T4430] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 284.599724][ T4430] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 284.599759][ T4430] r5:84ef8000 r4:82919c00 [ 284.599768][ T4430] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 284.599870][ T4430] [<8096add8>] (should_fail_ex) from [<80522b74>] (should_failslab+0x6c/0x94) [ 284.599942][ T4430] r8:00000000 r7:84ef8000 r6:00000820 r5:84dcfc00 r4:830ad900 [ 284.600015][ T4430] [<80522b08>] (should_failslab) from [<80507580>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 284.600075][ T4430] [<80507534>] (kmem_cache_alloc_noprof) from [<81544530>] (skb_clone+0x60/0x1c8) [ 284.600163][ T4430] r10:000001a2 r9:84dc67c0 r8:84df1c00 r7:84dcfc00 r6:8544fec0 r5:84dcfc00 [ 284.600187][ T4430] r4:00000820 [ 284.600227][ T4430] [<815444d0>] (skb_clone) from [<8165b22c>] (__netlink_deliver_tap+0x1f4/0x28c) [ 284.600300][ T4430] r5:00000014 r4:8544f800 [ 284.600398][ T4430] [<8165b038>] (__netlink_deliver_tap) from [<8165e518>] (netlink_unicast+0x2e8/0x304) [ 284.600483][ T4430] r10:00000000 r9:00000000 r8:84770d00 r7:84dcfc00 r6:84dc67c0 r5:00000014 [ 284.600550][ T4430] r4:84df1c00 [ 284.600591][ T4430] [<8165e230>] (netlink_unicast) from [<8165e700>] (netlink_sendmsg+0x1cc/0x444) [ 284.600680][ T4430] r9:00000000 r8:00000000 r7:856c3800 r6:00000014 r5:84dcfc00 r4:df9d9f20 [ 284.600799][ T4430] [<8165e534>] (netlink_sendmsg) from [<815308dc>] (__sock_sendmsg+0x44/0x78) [ 284.600845][ T4430] r10:00000000 r9:df9d9dc4 r8:df9d9dc4 r7:00000000 r6:85048a00 r5:df9d9f20 [ 284.600888][ T4430] r4:00000000 [ 284.600897][ T4430] [<81530898>] (__sock_sendmsg) from [<8153114c>] (____sys_sendmsg+0x298/0x2cc) [ 284.600943][ T4430] r7:00000000 r6:85048a00 r5:00000000 r4:df9d9f20 [ 284.600952][ T4430] [<81530eb4>] (____sys_sendmsg) from [<81532f58>] (___sys_sendmsg+0x9c/0xd0) [ 284.601082][ T4430] r10:df9d9e24 r9:200002c0 r8:00000000 r7:00000000 r6:85048a00 r5:df9d9f20 [ 284.601113][ T4430] r4:00000000 [ 284.601165][ T4430] [<81532ebc>] (___sys_sendmsg) from [<815333f0>] (__sys_sendmsg+0x8c/0xe0) [ 284.601245][ T4430] r10:00000128 r9:84ef8000 r8:859bb9c0 r7:00000000 r6:200002c0 r5:859bb9c0 [ 284.601309][ T4430] r4:00000003 [ 284.601331][ T4430] [<81533364>] (__sys_sendmsg) from [<81533458>] (sys_sendmsg+0x14/0x18) [ 284.601582][ T4430] r8:8020029c r7:00000128 r6:0012fef0 r5:00000000 r4:00000000 [ 284.601598][ T4430] [<81533444>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 284.601663][ T4430] Exception stack(0xdf9d9fa8 to 0xdf9d9ff0) [ 284.601707][ T4430] 9fa0: 00000000 00000000 00000003 200002c0 00000000 00000000 [ 284.601763][ T4430] 9fc0: 00000000 00000000 0012fef0 00000128 002e0000 00000000 00006364 76beb0bc [ 284.601842][ T4430] 9fe0: 76beaec0 76beaeb0 000193a4 00131f40 [ 285.376000][ T4434] fuse: Bad value for 'user_id' [ 285.377605][ T4434] fuse: Bad value for 'user_id' [ 285.923077][ T31] audit: type=1400 audit(285.710:198): avc: denied { map } for pid=4435 comm="syz.0.219" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 285.933510][ T31] audit: type=1400 audit(285.710:199): avc: denied { read write } for pid=4435 comm="syz.0.219" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 290.189982][ T31] audit: type=1400 audit(289.980:200): avc: denied { getopt } for pid=4442 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 292.323998][ T4453] fuse: Bad value for 'fd' [ 294.231978][ T4460] FAULT_INJECTION: forcing a failure. [ 294.231978][ T4460] name failslab, interval 1, probability 0, space 0, times 0 [ 294.236742][ T4460] CPU: 1 UID: 0 PID: 4460 Comm: syz.0.225 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 294.236890][ T4460] Hardware name: ARM-Versatile Express [ 294.236969][ T4460] Call trace: [ 294.237137][ T4460] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 294.237305][ T4460] r7:84efb000 r6:00000000 r5:60000013 r4:8225c278 [ 294.237843][ T4460] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 294.238067][ T4460] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 294.238386][ T4460] r5:84efb000 r4:82919c00 [ 294.238613][ T4460] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 294.238910][ T4460] [<8096add8>] (should_fail_ex) from [<80522b74>] (should_failslab+0x6c/0x94) [ 294.239501][ T4460] r8:00000000 r7:84efb000 r6:00000cc0 r5:ffffffff r4:830ad900 [ 294.239795][ T4460] [<80522b08>] (should_failslab) from [<80506f14>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 294.240132][ T4460] [<80506ec4>] (kmem_cache_alloc_node_noprof) from [<8153dc88>] (__alloc_skb+0x138/0x160) [ 294.240323][ T4460] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:830ad900 r5:ffffffff [ 294.240673][ T4460] r4:828060c0 [ 294.240909][ T4460] [<8153db50>] (__alloc_skb) from [<8165df28>] (netlink_alloc_large_skb+0x88/0xa0) [ 294.241161][ T4460] r8:00000000 r7:856c2c00 r6:00000014 r5:85049680 r4:00000140 [ 294.241247][ T4460] [<8165dea0>] (netlink_alloc_large_skb) from [<8165e668>] (netlink_sendmsg+0x134/0x444) [ 294.241538][ T4460] r5:85049680 r4:dfa99f20 [ 294.241647][ T4460] [<8165e534>] (netlink_sendmsg) from [<815308dc>] (__sock_sendmsg+0x44/0x78) [ 294.241796][ T4460] r10:00000000 r9:dfa99dc4 r8:dfa99dc4 r7:00000000 r6:85049680 r5:dfa99f20 [ 294.242029][ T4460] r4:00000000 [ 294.242225][ T4460] [<81530898>] (__sock_sendmsg) from [<8153114c>] (____sys_sendmsg+0x298/0x2cc) [ 294.242402][ T4460] r7:00000000 r6:85049680 r5:00000840 r4:dfa99f20 [ 294.242523][ T4460] [<81530eb4>] (____sys_sendmsg) from [<81532f58>] (___sys_sendmsg+0x9c/0xd0) [ 294.242804][ T4460] r10:dfa99e24 r9:20002ec0 r8:00000840 r7:00000000 r6:85049680 r5:dfa99f20 [ 294.242924][ T4460] r4:00000000 [ 294.242945][ T4460] [<81532ebc>] (___sys_sendmsg) from [<815333f0>] (__sys_sendmsg+0x8c/0xe0) [ 294.243065][ T4460] r10:00000128 r9:84efb000 r8:858dccc0 r7:00000840 r6:20002ec0 r5:858dccc1 [ 294.243184][ T4460] r4:00000004 [ 294.243207][ T4460] [<81533364>] (__sys_sendmsg) from [<81533458>] (sys_sendmsg+0x14/0x18) [ 294.243374][ T4460] r8:8020029c r7:00000128 r6:0012fef0 r5:00000000 r4:00000000 [ 294.243603][ T4460] [<81533444>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 294.243718][ T4460] Exception stack(0xdfa99fa8 to 0xdfa99ff0) [ 294.243992][ T4460] 9fa0: 00000000 00000000 00000004 20002ec0 00000840 00000000 [ 294.244033][ T4460] 9fc0: 00000000 00000000 0012fef0 00000128 002e0000 00000000 00006364 76beb0bc [ 294.244128][ T4460] 9fe0: 76beaec0 76beaeb0 000193a4 00131f40 [ 296.034079][ T4467] fuse: Bad value for 'fd' [ 298.271123][ T4475] FAULT_INJECTION: forcing a failure. [ 298.271123][ T4475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.278264][ T4475] CPU: 1 UID: 0 PID: 4475 Comm: syz.1.231 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 298.278394][ T4475] Hardware name: ARM-Versatile Express [ 298.278430][ T4475] Call trace: [ 298.278540][ T4475] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 298.278706][ T4475] r7:00000000 r6:00000000 r5:60000013 r4:8225c278 [ 298.278732][ T4475] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 298.278797][ T4475] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 298.278866][ T4475] r5:84efb000 r4:82950650 [ 298.278893][ T4475] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 298.278960][ T4475] [<8096add8>] (should_fail_ex) from [<8096b014>] (should_fail+0x14/0x18) [ 298.279033][ T4475] r8:76b36f30 r7:00000000 r6:00000000 r5:e079df68 r4:00000002 [ 298.279053][ T4475] [<8096b000>] (should_fail) from [<8096b034>] (should_fail_usercopy+0x1c/0x20) [ 298.279108][ T4475] [<8096b018>] (should_fail_usercopy) from [<8058fef8>] (simple_read_from_buffer+0x80/0x13c) [ 298.279170][ T4475] [<8058fe78>] (simple_read_from_buffer) from [<80607d50>] (proc_fail_nth_read+0xb8/0x100) [ 298.279248][ T4475] r10:00000001 r9:80607c98 r8:00000002 r7:e079df68 r6:0000000f r5:76b36f30 [ 298.279276][ T4475] r4:84efb000 r3:e079de9f [ 298.279295][ T4475] [<80607c98>] (proc_fail_nth_read) from [<80554570>] (vfs_read+0x98/0x320) [ 298.279368][ T4475] r8:76b36f30 r7:e079df68 r6:84efb000 r5:0000000f r4:858f5300 [ 298.279388][ T4475] [<805544d8>] (vfs_read) from [<80555218>] (ksys_read+0x74/0xe8) [ 298.279457][ T4475] r10:00000003 r9:84efb000 r8:8020029c r7:00000000 r6:00000000 r5:858f5300 [ 298.279483][ T4475] r4:858f5303 [ 298.279502][ T4475] [<805551a4>] (ksys_read) from [<8055529c>] (sys_read+0x10/0x14) [ 298.279575][ T4475] r7:00000003 r6:00000004 r5:76b36f30 r4:0000000f [ 298.279595][ T4475] [<8055528c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 298.279649][ T4475] Exception stack(0xe079dfa8 to 0xe079dff0) [ 298.279701][ T4475] dfa0: 0000000f 76b36f30 00000004 76b36f30 0000000f 00000000 [ 298.279744][ T4475] dfc0: 0000000f 76b36f30 00000004 00000003 002e0000 00000000 00006364 76b370bc [ 298.279775][ T4475] dfe0: 00000158 76b36ed0 000d7d70 0012fe14 [ 298.692545][ T4479] fuse: Bad value for 'fd' [ 299.054504][ T31] audit: type=1400 audit(298.840:201): avc: denied { ioctl } for pid=4480 comm="syz.1.234" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5255 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 299.584620][ T4491] FAULT_INJECTION: forcing a failure. [ 299.584620][ T4491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.592720][ T4491] CPU: 1 UID: 0 PID: 4491 Comm: syz.1.238 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 299.592871][ T4491] Hardware name: ARM-Versatile Express [ 299.592907][ T4491] Call trace: [ 299.592955][ T4491] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 299.593085][ T4491] r7:00000000 r6:00000000 r5:60000013 r4:8225c278 [ 299.593109][ T4491] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 299.593166][ T4491] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 299.593227][ T4491] r5:83ae4800 r4:82950650 [ 299.593244][ T4491] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 299.593311][ T4491] [<8096add8>] (should_fail_ex) from [<8096b014>] (should_fail+0x14/0x18) [ 299.593381][ T4491] r8:76b36f30 r7:00000000 r6:00000000 r5:dfb9df68 r4:00000002 [ 299.593401][ T4491] [<8096b000>] (should_fail) from [<8096b034>] (should_fail_usercopy+0x1c/0x20) [ 299.593497][ T4491] [<8096b018>] (should_fail_usercopy) from [<8058fef8>] (simple_read_from_buffer+0x80/0x13c) [ 299.593562][ T4491] [<8058fe78>] (simple_read_from_buffer) from [<80607d50>] (proc_fail_nth_read+0xb8/0x100) [ 299.593643][ T4491] r10:00000001 r9:80607c98 r8:00000002 r7:dfb9df68 r6:0000000f r5:76b36f30 [ 299.593670][ T4491] r4:83ae4800 r3:dfb9de9f [ 299.593689][ T4491] [<80607c98>] (proc_fail_nth_read) from [<80554570>] (vfs_read+0x98/0x320) [ 299.593779][ T4491] r8:76b36f30 r7:dfb9df68 r6:83ae4800 r5:0000000f r4:858dccc0 [ 299.593799][ T4491] [<805544d8>] (vfs_read) from [<80555218>] (ksys_read+0x74/0xe8) [ 299.593870][ T4491] r10:00000003 r9:83ae4800 r8:8020029c r7:00000000 r6:00000000 r5:858dccc0 [ 299.593893][ T4491] r4:858dccc3 [ 299.593914][ T4491] [<805551a4>] (ksys_read) from [<8055529c>] (sys_read+0x10/0x14) [ 299.593980][ T4491] r7:00000003 r6:00000005 r5:76b36f30 r4:0000000f [ 299.594000][ T4491] [<8055528c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 299.594051][ T4491] Exception stack(0xdfb9dfa8 to 0xdfb9dff0) [ 299.594104][ T4491] dfa0: 0000000f 76b36f30 00000005 76b36f30 0000000f 00000000 [ 299.594146][ T4491] dfc0: 0000000f 76b36f30 00000005 00000003 002e0000 00000000 00006364 76b370bc [ 299.594176][ T4491] dfe0: 00000158 76b36ed0 000d7d70 0012fe14 [ 307.205714][ T4513] FAULT_INJECTION: forcing a failure. [ 307.205714][ T4513] name failslab, interval 1, probability 0, space 0, times 0 [ 307.221638][ T4513] CPU: 1 UID: 0 PID: 4513 Comm: syz.1.245 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 307.221798][ T4513] Hardware name: ARM-Versatile Express [ 307.221829][ T4513] Call trace: [ 307.221885][ T4513] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 307.222021][ T4513] r7:84efc800 r6:00000000 r5:60000013 r4:8225c278 [ 307.222046][ T4513] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 307.222109][ T4513] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 307.222177][ T4513] r5:84efc800 r4:82919c00 [ 307.222196][ T4513] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 307.222261][ T4513] [<8096add8>] (should_fail_ex) from [<80522b74>] (should_failslab+0x6c/0x94) [ 307.222342][ T4513] r8:00000000 r7:84efc800 r6:00000d40 r5:85048a80 r4:830a8600 [ 307.222363][ T4513] [<80522b08>] (should_failslab) from [<80507580>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 307.222428][ T4513] [<80507534>] (kmem_cache_alloc_noprof) from [<807784cc>] (security_inode_alloc+0x30/0x1e8) [ 307.224413][ T4513] r10:85048b88 r9:00000000 r8:00000000 r7:00000c40 r6:8309f400 r5:85048a80 [ 307.224440][ T4513] r4:85048a80 [ 307.224460][ T4513] [<8077849c>] (security_inode_alloc) from [<80577d84>] (inode_init_always_gfp+0x188/0x1dc) [ 307.224531][ T4513] r5:00000000 r4:85048a80 [ 307.224550][ T4513] [<80577bfc>] (inode_init_always_gfp) from [<8057b3f8>] (alloc_inode+0x40/0xcc) [ 307.224623][ T4513] r10:00000119 r9:84770000 r8:8020029c r7:0000003a r6:81e54280 r5:8309f400 [ 307.224648][ T4513] r4:85048a80 r3:00000000 [ 307.225747][ T4513] [<8057b3b8>] (alloc_inode) from [<8152ef84>] (sock_alloc+0x20/0x70) [ 307.226046][ T4513] r7:0000003a r6:00000000 r5:00000003 r4:0000000a [ 307.232151][ T4513] [<8152ef64>] (sock_alloc) from [<8152f180>] (__sock_create+0x80/0x228) [ 307.236050][ T4513] r5:00000003 r4:0000000a [ 307.236075][ T4513] [<8152f100>] (__sock_create) from [<81531a50>] (__sys_socket+0x94/0x10c) [ 307.236151][ T4513] r10:00000119 r9:84efc800 r8:8020029c r7:00000119 r6:84efc800 r5:0000000a [ 307.236172][ T4513] r4:00000003 [ 307.236186][ T4513] [<815319bc>] (__sys_socket) from [<81531ad8>] (sys_socket+0x10/0x14) [ 307.236239][ T4513] r6:0012fef0 r5:00000000 r4:00000000 [ 307.236253][ T4513] [<81531ac8>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 307.236301][ T4513] Exception stack(0xdf9d1fa8 to 0xdf9d1ff0) [ 307.236335][ T4513] 1fa0: 00000000 00000000 0000000a 00000003 0000003a 00000000 [ 307.236365][ T4513] 1fc0: 00000000 00000000 0012fef0 00000119 002e0000 00000000 00006364 76b370bc [ 307.236467][ T4513] 1fe0: 76b36ec0 76b36eb0 000193a4 00131f40 [ 307.260303][ T4513] socket: no more sockets [ 308.900036][ T4524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4524 comm=syz.0.249 [ 311.957302][ T4534] FAULT_INJECTION: forcing a failure. [ 311.957302][ T4534] name failslab, interval 1, probability 0, space 0, times 0 [ 311.968289][ T4534] CPU: 1 UID: 0 PID: 4534 Comm: syz.0.253 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 311.968402][ T4534] Hardware name: ARM-Versatile Express [ 311.968434][ T4534] Call trace: [ 311.968486][ T4534] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 311.968618][ T4534] r7:00000d40 r6:00000000 r5:60000013 r4:8225c278 [ 311.968640][ T4534] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 311.968718][ T4534] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 311.968792][ T4534] r5:83ae2400 r4:82919c00 [ 311.968812][ T4534] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 311.968883][ T4534] [<8096add8>] (should_fail_ex) from [<80522b74>] (should_failslab+0x6c/0x94) [ 311.968970][ T4534] r8:83ae2400 r7:00000d40 r6:858dc4a8 r5:00000021 r4:83001240 [ 311.968994][ T4534] [<80522b08>] (should_failslab) from [<80507904>] (__kmalloc_noprof+0x9c/0x458) [ 311.970207][ T4534] [<80507868>] (__kmalloc_noprof) from [<807c106c>] (tomoyo_encode2+0x64/0xf0) [ 311.970302][ T4534] r10:00000fff r9:8309e400 r8:00000000 r7:834d4660 r6:858dc4a8 r5:838b6ffc [ 311.970330][ T4534] r4:838b6fe6 [ 311.970346][ T4534] [<807c1008>] (tomoyo_encode2) from [<807c111c>] (tomoyo_encode+0x24/0x30) [ 311.970426][ T4534] r9:8309e400 r8:00000000 r7:834d4660 r6:858dc4a8 r5:00001000 r4:838b6fe7 [ 311.970448][ T4534] [<807c10f8>] (tomoyo_encode) from [<807c11a8>] (tomoyo_realpath_from_path+0x80/0x17c) [ 311.970511][ T4534] r5:00001000 r4:838b6000 [ 311.970529][ T4534] [<807c1128>] (tomoyo_realpath_from_path) from [<807bd2a8>] (tomoyo_path_number_perm+0xcc/0x22c) [ 311.970599][ T4534] r10:83ae2400 r9:00000000 r8:00000003 r7:00005450 r6:00000004 r5:81cd65f8 [ 311.970628][ T4534] r4:858dc4a8 r3:826c0200 [ 311.970647][ T4534] [<807bd1dc>] (tomoyo_path_number_perm) from [<807c1b88>] (tomoyo_file_ioctl+0x1c/0x20) [ 311.970737][ T4534] r9:858dc480 r8:00000003 r7:00000000 r6:00000000 r5:00005450 r4:858dc480 [ 311.970763][ T4534] [<807c1b6c>] (tomoyo_file_ioctl) from [<8076eb0c>] (security_file_ioctl+0x64/0x1e4) [ 311.970827][ T4534] [<8076eaa8>] (security_file_ioctl) from [<8056e1e8>] (sys_ioctl+0x4c/0xdc8) [ 311.970894][ T4534] r7:00000000 r6:858dc481 r5:00000000 r4:00005450 [ 311.970916][ T4534] [<8056e19c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 311.970970][ T4534] Exception stack(0xdf9d1fa8 to 0xdf9d1ff0) [ 311.971016][ T4534] 1fa0: 00000000 00000000 00000003 00005450 00000000 00000000 [ 311.971058][ T4534] 1fc0: 00000000 00000000 0012fef0 00000036 002e0000 00000000 00006364 76beb0bc [ 311.971089][ T4534] 1fe0: 76beaec0 76beaeb0 000193a4 00131f40 [ 311.971131][ T4534] r10:00000036 r9:83ae2400 r8:8020029c r7:00000036 r6:0012fef0 r5:00000000 [ 311.971152][ T4534] r4:00000000 [ 311.975808][ T4534] ERROR: Out of memory at tomoyo_realpath_from_path. [ 312.134272][ T31] audit: type=1400 audit(311.920:202): avc: denied { module_load } for pid=4535 comm="syz.0.254" path="/sys/kernel/fscaps" dev="sysfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 312.164138][ T4536] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4536 comm=syz.0.254 [ 312.217289][ T31] audit: type=1400 audit(312.000:203): avc: denied { setopt } for pid=4535 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 312.344546][ T4538] FAULT_INJECTION: forcing a failure. [ 312.344546][ T4538] name failslab, interval 1, probability 0, space 0, times 0 [ 312.346193][ T4538] CPU: 0 UID: 0 PID: 4538 Comm: syz.0.255 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 312.346330][ T4538] Hardware name: ARM-Versatile Express [ 312.346382][ T4538] Call trace: [ 312.346424][ T4538] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 312.346548][ T4538] r7:00400cc0 r6:00000000 r5:60000013 r4:8225c278 [ 312.346569][ T4538] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 312.346624][ T4538] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 312.346676][ T4538] r5:83ae2400 r4:82919c00 [ 312.346706][ T4538] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 312.346808][ T4538] [<8096add8>] (should_fail_ex) from [<80522b74>] (should_failslab+0x6c/0x94) [ 312.346980][ T4538] r8:83ae2400 r7:00400cc0 r6:df9d1e5c r5:00000017 r4:83002000 [ 312.347017][ T4538] [<80522b08>] (should_failslab) from [<805085b8>] (__kmalloc_node_track_caller_noprof+0xa0/0x464) [ 312.347077][ T4538] [<80508518>] (__kmalloc_node_track_caller_noprof) from [<804a049c>] (kstrdup+0x38/0x64) [ 312.347179][ T4538] r10:00000001 r9:df9d1e5c r8:830cd5b0 r7:8058e608 r6:df9d1e5c r5:00000016 [ 312.347206][ T4538] r4:00400cc0 [ 312.347225][ T4538] [<804a0464>] (kstrdup) from [<8058e608>] (simple_xattr_set+0x40/0x184) [ 312.347299][ T4538] r7:83be2638 r6:8588ed80 r5:df9d1e5c r4:8225c278 [ 312.347318][ T4538] [<8058e5c8>] (simple_xattr_set) from [<80497fcc>] (shmem_xattr_handler_set+0x194/0x1a8) [ 312.347392][ T4538] r9:df9d1e5c r8:830cd5b0 r7:0000003e r6:830cd580 r5:83be2658 r4:8225c278 [ 312.347411][ T4538] [<80497e38>] (shmem_xattr_handler_set) from [<8058c7f4>] (__vfs_setxattr+0xb4/0xc8) [ 312.347485][ T4538] r9:80497e38 r8:00000000 r7:8225c278 r6:83425a18 r5:82920b60 r4:83be2658 [ 312.347503][ T4538] [<8058c740>] (__vfs_setxattr) from [<8058d21c>] (__vfs_setxattr_noperm+0x7c/0x204) [ 312.347578][ T4538] r9:82920b60 r8:00000000 r7:83be2658 r6:00000001 r5:df9d1e5c r4:83425a18 [ 312.347599][ T4538] [<8058d1a0>] (__vfs_setxattr_noperm) from [<8058d48c>] (__vfs_setxattr_locked+0xe8/0x118) [ 312.347674][ T4538] r10:df9d1dc0 r9:00000000 r8:83be2658 r7:00000000 r6:df9d1e5c r5:82920b60 [ 312.347708][ T4538] r4:83425a18 [ 312.347750][ T4538] [<8058d3a4>] (__vfs_setxattr_locked) from [<8058d54c>] (vfs_setxattr+0x90/0x180) [ 312.347887][ T4538] r8:82920b60 r7:df9d1e5c r6:83425a18 r5:83be26d8 r4:df9d1e48 [ 312.347963][ T4538] [<8058d4bc>] (vfs_setxattr) from [<8058d6d0>] (do_setxattr+0x94/0x9c) [ 312.348095][ T4538] r10:000000e4 r9:83425a18 r8:82920b60 r7:00000000 r6:00000000 r5:df9d1e5c [ 312.348166][ T4538] r4:df9d1e48 [ 312.348183][ T4538] [<8058d63c>] (do_setxattr) from [<8058d900>] (file_setxattr+0x58/0x78) [ 312.348346][ T4538] r9:83ae2400 r8:00000000 r7:00000003 r6:df9d1e48 r5:858f5f00 r4:00000000 [ 312.348480][ T4538] [<8058d8a8>] (file_setxattr) from [<8058db04>] (path_setxattrat+0x104/0x17c) [ 312.348583][ T4538] r7:00000003 r6:858f5f00 r5:858f5f01 r4:00000000 [ 312.348625][ T4538] [<8058da00>] (path_setxattrat) from [<8058dd7c>] (sys_fsetxattr+0x30/0x38) [ 312.348885][ T4538] r8:8020029c r7:000000e4 r6:0012fef0 r5:00000000 r4:00000001 [ 312.349090][ T4538] [<8058dd4c>] (sys_fsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 312.349325][ T4538] Exception stack(0xdf9d1fa8 to 0xdf9d1ff0) [ 312.349461][ T4538] 1fa0: 00000001 00000000 00000003 20000040 00000000 00000000 [ 312.349568][ T4538] 1fc0: 00000001 00000000 0012fef0 000000e4 002e0000 00000000 00006364 76beb0bc [ 312.349922][ T4538] 1fe0: 76beaec0 76beaeb0 000193a4 00131f40 [ 313.901038][ T31] audit: type=1400 audit(313.690:204): avc: denied { read } for pid=4546 comm="syz.0.257" name="ttyS3" dev="devtmpfs" ino=607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:restorecond_var_run_t:s0" [ 313.901679][ T31] audit: type=1400 audit(313.690:205): avc: denied { open } for pid=4546 comm="syz.0.257" path="/dev/ttyS3" dev="devtmpfs" ino=607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:restorecond_var_run_t:s0" [ 313.927146][ T4547] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4547 comm=syz.0.257 [ 313.929613][ T4547] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4547 comm=syz.0.257 [ 317.180122][ T4516] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4516 comm=syz.1.246 [ 317.863051][ T31] audit: type=1400 audit(317.650:206): avc: denied { write } for pid=4557 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 319.579225][ T4570] FAULT_INJECTION: forcing a failure. [ 319.579225][ T4570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.584522][ T4570] CPU: 1 UID: 0 PID: 4570 Comm: syz.1.264 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 319.584633][ T4570] Hardware name: ARM-Versatile Express [ 319.584665][ T4570] Call trace: [ 319.584707][ T4570] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 319.585252][ T4570] r7:00000000 r6:00000000 r5:60000013 r4:8225c278 [ 319.585276][ T4570] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 319.585335][ T4570] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 319.585393][ T4570] r5:84efa400 r4:82950650 [ 319.585408][ T4570] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 319.585491][ T4570] [<8096add8>] (should_fail_ex) from [<8096b014>] (should_fail+0x14/0x18) [ 319.585548][ T4570] r8:76b15f30 r7:00000000 r6:00000000 r5:dfa15f68 r4:00000002 [ 319.585566][ T4570] [<8096b000>] (should_fail) from [<8096b034>] (should_fail_usercopy+0x1c/0x20) [ 319.585616][ T4570] [<8096b018>] (should_fail_usercopy) from [<8058fef8>] (simple_read_from_buffer+0x80/0x13c) [ 319.585674][ T4570] [<8058fe78>] (simple_read_from_buffer) from [<80607d50>] (proc_fail_nth_read+0xb8/0x100) [ 319.585743][ T4570] r10:00000001 r9:80607c98 r8:00000002 r7:dfa15f68 r6:0000000f r5:76b15f30 [ 319.585768][ T4570] r4:84efa400 r3:dfa15e9f [ 319.585784][ T4570] [<80607c98>] (proc_fail_nth_read) from [<80554570>] (vfs_read+0x98/0x320) [ 319.585863][ T4570] r8:76b15f30 r7:dfa15f68 r6:84efa400 r5:0000000f r4:858dcb40 [ 319.585886][ T4570] [<805544d8>] (vfs_read) from [<80555218>] (ksys_read+0x74/0xe8) [ 319.585949][ T4570] r10:00000003 r9:84efa400 r8:8020029c r7:00000000 r6:00000000 r5:858dcb40 [ 319.585970][ T4570] r4:858dcb43 [ 319.585988][ T4570] [<805551a4>] (ksys_read) from [<8055529c>] (sys_read+0x10/0x14) [ 319.587991][ T4570] r7:00000003 r6:00000004 r5:76b15f30 r4:0000000f [ 319.588019][ T4570] [<8055528c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 319.588074][ T4570] Exception stack(0xdfa15fa8 to 0xdfa15ff0) [ 319.588123][ T4570] 5fa0: 0000000f 76b15f30 00000004 76b15f30 0000000f 00000000 [ 319.588160][ T4570] 5fc0: 0000000f 76b15f30 00000004 00000003 002e0000 00000000 00006364 76b160bc [ 319.588186][ T4570] 5fe0: 00000158 76b15ed0 000d7d70 0012fe14 [ 320.467411][ T4583] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=4583 comm=syz.0.266 [ 323.388186][ T4611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 323.388887][ T4611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.280'. [ 323.410565][ T4611] FAULT_INJECTION: forcing a failure. [ 323.410565][ T4611] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 323.411136][ T4611] CPU: 0 UID: 0 PID: 4611 Comm: syz.0.280 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 323.411231][ T4611] Hardware name: ARM-Versatile Express [ 323.411270][ T4611] Call trace: [ 323.411326][ T4611] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 323.411478][ T4611] r7:00000000 r6:00000000 r5:60000113 r4:8225c278 [ 323.411804][ T4611] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 323.412265][ T4611] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 323.413060][ T4611] r5:84efbc00 r4:82919c54 [ 323.413286][ T4611] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 323.413569][ T4611] [<8096add8>] (should_fail_ex) from [<80522c04>] (should_fail_alloc_page+0x68/0x74) [ 323.414481][ T4611] r8:00000001 r7:00000000 r6:00000000 r5:00140cca r4:dfde1df0 [ 323.414546][ T4611] [<80522b9c>] (should_fail_alloc_page) from [<804f142c>] (prepare_alloc_pages.constprop.0+0x94/0x1b4) [ 323.414971][ T4611] [<804f1398>] (prepare_alloc_pages.constprop.0) from [<804f9790>] (__alloc_frozen_pages_noprof+0xac/0x10d8) [ 323.415282][ T4611] r10:dfde1fb0 r9:00000000 r8:84efbc00 r7:00000040 r6:00140cca r5:84efbc00 [ 323.415375][ T4611] r4:00000000 r3:dfde1df0 [ 323.415526][ T4611] [<804f96e4>] (__alloc_frozen_pages_noprof) from [<804fa830>] (__folio_alloc_noprof+0x14/0x6c) [ 323.415870][ T4611] r10:dfde1fb0 r9:85450f80 r8:00000000 r7:00000040 r6:76be9e84 r5:84efbc00 [ 323.416028][ T4611] r4:00001255 [ 323.416170][ T4611] [<804fa81c>] (__folio_alloc_noprof) from [<804cb46c>] (handle_mm_fault+0xcf4/0x14d8) [ 323.416378][ T4611] r5:84efbc00 r4:00001255 [ 323.416404][ T4611] [<804ca778>] (handle_mm_fault) from [<802342f0>] (do_page_fault+0x1c8/0x49c) [ 323.416533][ T4611] r10:00000002 r9:84045b00 r8:00000255 r7:84efbc00 r6:00000a07 r5:76be9e84 [ 323.416629][ T4611] r4:dfde1fb0 [ 323.416654][ T4611] [<80234128>] (do_page_fault) from [<802347ac>] (do_DataAbort+0x38/0xa8) [ 323.416738][ T4611] r10:00006364 r9:00000000 r8:80234128 r7:dfde1fb0 r6:76be9e84 r5:00000a07 [ 323.416764][ T4611] r4:8281d1b0 [ 323.416786][ T4611] [<80234774>] (do_DataAbort) from [<80200ebc>] (__dabt_usr+0x5c/0x60) [ 323.416841][ T4611] Exception stack(0xdfde1fb0 to 0xdfde1ff8) [ 323.416899][ T4611] 1fa0: 20000040 00000003 00000000 00000000 [ 323.416944][ T4611] 1fc0: 0001bb98 20000040 00000000 00188a58 002e0000 00000000 00006364 76beb0bc [ 323.417063][ T4611] 1fe0: 00000000 76be9e80 00019384 0001bba4 20000010 ffffffff [ 323.417115][ T4611] r8:826b7044 r7:84efbc00 r6:ffffffff r5:20000010 r4:0001bba4 [ 323.431259][ T4611] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 324.252446][ T4625] FAULT_INJECTION: forcing a failure. [ 324.252446][ T4625] name failslab, interval 1, probability 0, space 0, times 0 [ 324.257188][ T4625] CPU: 1 UID: 0 PID: 4625 Comm: syz.0.284 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 324.257321][ T4625] Hardware name: ARM-Versatile Express [ 324.257357][ T4625] Call trace: [ 324.257488][ T4625] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 324.257629][ T4625] r7:83ae2400 r6:00000000 r5:60000013 r4:8225c278 [ 324.257652][ T4625] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 324.257726][ T4625] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 324.257794][ T4625] r5:83ae2400 r4:82919c00 [ 324.257812][ T4625] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 324.257874][ T4625] [<8096add8>] (should_fail_ex) from [<80522b74>] (should_failslab+0x6c/0x94) [ 324.257953][ T4625] r8:00000000 r7:83ae2400 r6:00000cc0 r5:76be9e60 r4:83001300 [ 324.257975][ T4625] [<80522b08>] (should_failslab) from [<80506934>] (__kmalloc_cache_noprof+0x4c/0x33c) [ 324.258037][ T4625] [<805068e8>] (__kmalloc_cache_noprof) from [<81043d80>] (raw_ioctl_init+0x138/0x340) [ 324.258112][ T4625] r10:83ae2400 r9:8245f6c0 r8:859e5400 r7:b5403587 r6:84781800 r5:76be9e60 [ 324.258134][ T4625] r4:00000000 [ 324.258151][ T4625] [<81043c48>] (raw_ioctl_init) from [<810453e4>] (raw_ioctl+0x3f0/0x1094) [ 324.258220][ T4625] r10:83ae2400 r9:858dce40 r8:00000004 r7:76be9e60 r6:76be9e60 r5:00000000 [ 324.258242][ T4625] r4:84781800 [ 324.258260][ T4625] [<81044ff4>] (raw_ioctl) from [<8056e2cc>] (sys_ioctl+0x130/0xdc8) [ 324.258332][ T4625] r10:83ae2400 r9:858dce40 r8:00000004 r7:76be9e60 r6:858dce41 r5:00000000 [ 324.258354][ T4625] r4:41015500 [ 324.258373][ T4625] [<8056e19c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 324.258428][ T4625] Exception stack(0xdfef9fa8 to 0xdfef9ff0) [ 324.258476][ T4625] 9fa0: 00000004 76be9e70 00000004 41015500 76be9e60 76be8e00 [ 324.258514][ T4625] 9fc0: 00000004 76be9e70 76be8e70 00000036 00000002 76be9e60 00000000 00000000 [ 324.258544][ T4625] 9fe0: 00000000 76be8de8 002b9000 0013190c [ 324.258583][ T4625] r10:00000036 r9:83ae2400 r8:8020029c r7:00000036 r6:76be8e70 r5:76be9e70 [ 324.258605][ T4625] r4:00000004 [ 324.366341][ T4627] mqueue: Unknown parameter 'Ø(~Ê$HÕg¹ÉŠ¿2ýà™om*¿fxÈ|A„S' [ 325.491478][ T31] audit: type=1400 audit(325.280:207): avc: denied { execute } for pid=4646 comm="syz.0.293" path="/168/cgroup.controllers" dev="tmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 325.499300][ T31] audit: type=1400 audit(325.290:208): avc: denied { setopt } for pid=4646 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 325.920905][ T31] audit: type=1400 audit(325.710:209): avc: denied { getopt } for pid=4654 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 326.408206][ T3792] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 326.556152][ T3792] usb 2-1: device descriptor read/64, error -71 [ 326.796543][ T3792] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 326.945992][ T3792] usb 2-1: device descriptor read/64, error -71 [ 327.058274][ T3792] usb usb2-port1: attempt power cycle [ 327.161478][ T4677] FAULT_INJECTION: forcing a failure. [ 327.161478][ T4677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.163433][ T4677] CPU: 1 UID: 0 PID: 4677 Comm: syz.0.304 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 327.163566][ T4677] Hardware name: ARM-Versatile Express [ 327.163605][ T4677] Call trace: [ 327.163660][ T4677] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 327.163801][ T4677] r7:00000000 r6:00000000 r5:60000013 r4:8225c278 [ 327.163824][ T4677] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 327.163887][ T4677] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 327.163964][ T4677] r5:84740c00 r4:82950650 [ 327.163982][ T4677] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 327.164050][ T4677] [<8096add8>] (should_fail_ex) from [<8096b014>] (should_fail+0x14/0x18) [ 327.164123][ T4677] r8:76beaf30 r7:00000000 r6:00000000 r5:e03e1f68 r4:00000002 [ 327.164146][ T4677] [<8096b000>] (should_fail) from [<8096b034>] (should_fail_usercopy+0x1c/0x20) [ 327.164208][ T4677] [<8096b018>] (should_fail_usercopy) from [<8058fef8>] (simple_read_from_buffer+0x80/0x13c) [ 327.164268][ T4677] [<8058fe78>] (simple_read_from_buffer) from [<80607d50>] (proc_fail_nth_read+0xb8/0x100) [ 327.164350][ T4677] r10:00000001 r9:80607c98 r8:00000002 r7:e03e1f68 r6:0000000f r5:76beaf30 [ 327.164379][ T4677] r4:84740c00 r3:e03e1e9f [ 327.164399][ T4677] [<80607c98>] (proc_fail_nth_read) from [<80554570>] (vfs_read+0x98/0x320) [ 327.164473][ T4677] r8:76beaf30 r7:e03e1f68 r6:84740c00 r5:0000000f r4:858dccc0 [ 327.164496][ T4677] [<805544d8>] (vfs_read) from [<80555218>] (ksys_read+0x74/0xe8) [ 327.164571][ T4677] r10:00000003 r9:84740c00 r8:8020029c r7:00000000 r6:00000000 r5:858dccc0 [ 327.164594][ T4677] r4:858dccc3 [ 327.164613][ T4677] [<805551a4>] (ksys_read) from [<8055529c>] (sys_read+0x10/0x14) [ 327.164684][ T4677] r7:00000003 r6:00000004 r5:76beaf30 r4:0000000f [ 327.164706][ T4677] [<8055528c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 327.164898][ T4677] Exception stack(0xe03e1fa8 to 0xe03e1ff0) [ 327.164991][ T4677] 1fa0: 0000000f 76beaf30 00000004 76beaf30 0000000f 00000000 [ 327.165065][ T4677] 1fc0: 0000000f 76beaf30 00000004 00000003 002e0000 00000000 00006364 76beb0bc [ 327.165100][ T4677] 1fe0: 00000158 76beaed0 000d7d70 0012fe14 [ 327.407787][ T3792] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 327.440694][ T3792] usb 2-1: device descriptor read/8, error -71 [ 327.582330][ T4683] FAULT_INJECTION: forcing a failure. [ 327.582330][ T4683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.583077][ T4683] CPU: 1 UID: 0 PID: 4683 Comm: syz.0.307 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 327.583159][ T4683] Hardware name: ARM-Versatile Express [ 327.583254][ T4683] Call trace: [ 327.583402][ T4683] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 327.583649][ T4683] r7:e0439e20 r6:00000000 r5:60000013 r4:8225c278 [ 327.583691][ T4683] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 327.583839][ T4683] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 327.583909][ T4683] r5:84746c00 r4:82950650 [ 327.583926][ T4683] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 327.584202][ T4683] [<8096add8>] (should_fail_ex) from [<8096b014>] (should_fail+0x14/0x18) [ 327.584391][ T4683] r8:00040000 r7:e0439e20 r6:20000280 r5:00000000 r4:e0439f20 [ 327.584508][ T4683] [<8096b000>] (should_fail) from [<8096b034>] (should_fail_usercopy+0x1c/0x20) [ 327.584564][ T4683] [<8096b018>] (should_fail_usercopy) from [<81532ddc>] (copy_msghdr_from_user+0x50/0x130) [ 327.584756][ T4683] [<81532d8c>] (copy_msghdr_from_user) from [<81532f34>] (___sys_sendmsg+0x78/0xd0) [ 327.584960][ T4683] r8:00040000 r7:00000000 r6:85049900 r5:e0439f20 r4:e0439e64 [ 327.585111][ T4683] [<81532ebc>] (___sys_sendmsg) from [<815333f0>] (__sys_sendmsg+0x8c/0xe0) [ 327.585195][ T4683] r10:00000128 r9:84746c00 r8:858dcb40 r7:00040000 r6:20000280 r5:858dcb41 [ 327.585263][ T4683] r4:00000003 [ 327.585359][ T4683] [<81533364>] (__sys_sendmsg) from [<81533458>] (sys_sendmsg+0x14/0x18) [ 327.585553][ T4683] r8:8020029c r7:00000128 r6:0012fef0 r5:00000000 r4:00000000 [ 327.585577][ T4683] [<81533444>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 327.585666][ T4683] Exception stack(0xe0439fa8 to 0xe0439ff0) [ 327.585715][ T4683] 9fa0: 00000000 00000000 00000003 20000280 00040000 00000000 [ 327.585756][ T4683] 9fc0: 00000000 00000000 0012fef0 00000128 002e0000 00000000 00006364 76beb0bc [ 327.585788][ T4683] 9fe0: 76beaec0 76beaeb0 000193a4 00131f40 [ 327.676015][ T3792] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 327.697893][ T3792] usb 2-1: device descriptor read/8, error -71 [ 327.808191][ T3792] usb usb2-port1: unable to enumerate USB device [ 327.853616][ T31] audit: type=1400 audit(327.640:210): avc: denied { create } for pid=4686 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 329.235964][ T3792] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 329.398471][ T3792] usb 1-1: device descriptor read/64, error -71 [ 329.636362][ T3792] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 329.766075][ T3792] usb 1-1: device descriptor read/64, error -71 [ 329.878475][ T3792] usb usb1-port1: attempt power cycle [ 330.225740][ T3792] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 330.258916][ T3792] usb 1-1: device descriptor read/8, error -71 [ 330.506658][ T3792] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 330.533835][ T3792] usb 1-1: device descriptor read/8, error -71 [ 330.648166][ T3792] usb usb1-port1: unable to enumerate USB device [ 337.472157][ T31] audit: type=1400 audit(337.260:211): avc: denied { read } for pid=4705 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 338.000414][ T31] audit: type=1400 audit(337.790:212): avc: denied { getopt } for pid=4705 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 339.668093][ T31] audit: type=1400 audit(339.460:213): avc: denied { ioctl } for pid=4716 comm="syz.0.317" path="net:[4026532656]" dev="nsfs" ino=4026532656 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 339.672068][ T31] audit: type=1400 audit(339.460:214): avc: denied { create } for pid=4716 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 339.718056][ T31] audit: type=1400 audit(339.510:215): avc: denied { associate } for pid=4720 comm="syz.1.318" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 339.987774][ T31] audit: type=1400 audit(339.780:216): avc: denied { ioctl } for pid=4726 comm="syz.1.320" path="socket:[4907]" dev="sockfs" ino=4907 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 339.997833][ T4728] capability: warning: `syz.1.320' uses 32-bit capabilities (legacy support in use) [ 346.162777][ T4796] FAULT_INJECTION: forcing a failure. [ 346.162777][ T4796] name failslab, interval 1, probability 0, space 0, times 0 [ 346.163399][ T4796] CPU: 1 UID: 0 PID: 4796 Comm: syz.0.340 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 346.163481][ T4796] Hardware name: ARM-Versatile Express [ 346.163559][ T4796] Call trace: [ 346.163608][ T4796] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 346.163749][ T4796] r7:84efb000 r6:00000000 r5:60000013 r4:8225c278 [ 346.163774][ T4796] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 346.163838][ T4796] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 346.163900][ T4796] r5:84efb000 r4:82919c00 [ 346.163919][ T4796] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 346.163988][ T4796] [<8096add8>] (should_fail_ex) from [<80522b74>] (should_failslab+0x6c/0x94) [ 346.164180][ T4796] r8:00000000 r7:84efb000 r6:00000dc0 r5:830ab000 r4:830a8f00 [ 346.164240][ T4796] [<80522b08>] (should_failslab) from [<80507580>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 346.164401][ T4796] [<80507534>] (kmem_cache_alloc_noprof) from [<80618b9c>] (__kernfs_new_node+0x54/0x204) [ 346.164540][ T4796] r10:830ab000 r9:84efb000 r8:8245f958 r7:859fdec8 r6:822e28b0 r5:830ab000 [ 346.164616][ T4796] r4:859fdec8 [ 346.164737][ T4796] [<80618b48>] (__kernfs_new_node) from [<8061a788>] (kernfs_new_node+0x80/0xa4) [ 346.164984][ T4796] r10:830ab000 r9:822e28b0 r8:00000000 r7:00000004 r6:00000000 r5:0000a1ff [ 346.165090][ T4796] r4:859fdec8 [ 346.165181][ T4796] [<8061a708>] (kernfs_new_node) from [<8061ceac>] (kernfs_create_link+0x44/0xac) [ 346.165307][ T4796] r10:00000000 r9:00000001 r8:00000000 r7:00000000 r6:859fdec8 r5:83337840 [ 346.165332][ T4796] r4:859fdec8 [ 346.165383][ T4796] [<8061ce68>] (kernfs_create_link) from [<8061e4d8>] (sysfs_do_create_link_sd+0x6c/0xe8) [ 346.165488][ T4796] r6:83337840 r5:822e28b0 r4:859fdec8 [ 346.165512][ T4796] [<8061e46c>] (sysfs_do_create_link_sd) from [<8061e584>] (sysfs_create_link+0x30/0x3c) [ 346.165587][ T4796] r9:00000003 r8:00000000 r7:83f74488 r6:8333660c r5:00000000 r4:854d3e00 [ 346.165605][ T4796] [<8061e554>] (sysfs_create_link) from [<80b34b4c>] (device_add+0x204/0x7ec) [ 346.165670][ T4796] [<80b34948>] (device_add) from [<80b53ad8>] (wakeup_source_device_create+0xb4/0xcc) [ 346.165747][ T4796] r9:00000003 r8:00000000 r7:859e5600 r6:83f74488 r5:85886480 r4:854d3e00 [ 346.165765][ T4796] [<80b53a24>] (wakeup_source_device_create) from [<80b53f0c>] (wakeup_source_sysfs_add+0x14/0x24) [ 346.165902][ T4796] r7:859e5600 r6:840babc0 r5:83f74488 r4:85886480 [ 346.165924][ T4796] [<80b53ef8>] (wakeup_source_sysfs_add) from [<80b520e8>] (wakeup_source_register+0x90/0x158) [ 346.165986][ T4796] r5:83f74488 r4:85886480 [ 346.166005][ T4796] [<80b52058>] (wakeup_source_register) from [<80b52cc0>] (device_wakeup_enable+0x40/0xf8) [ 346.166066][ T4796] r8:00000000 r7:859e5600 r6:83be1a00 r5:00000001 r4:83f74488 [ 346.166085][ T4796] [<80b52c80>] (device_wakeup_enable) from [<80b52de4>] (device_set_wakeup_enable+0x6c/0x70) [ 346.166146][ T4796] r7:859e5600 r6:83be1a00 r5:00000001 r4:83f74488 [ 346.166166][ T4796] [<80b52d78>] (device_set_wakeup_enable) from [<80e86260>] (usb_hcd_submit_urb+0x550/0x8cc) [ 346.166243][ T4796] r7:859e5600 r6:83be1a00 r5:00000000 r4:85802b40 [ 346.166264][ T4796] [<80e85d10>] (usb_hcd_submit_urb) from [<80e87fac>] (usb_submit_urb+0x1f4/0x5e8) [ 346.166341][ T4796] r10:81d98608 r9:859e5800 r8:00000000 r7:00000000 r6:83f74400 r5:00000001 [ 346.166409][ T4796] r4:85802b40 [ 346.166432][ T4796] [<80e87db8>] (usb_submit_urb) from [<80e92650>] (usbfs_start_wait_urb+0x64/0x100) [ 346.166519][ T4796] r10:83f74400 r9:859e5800 r8:85802b40 r7:e88d9da0 r6:00000007 r5:e88d9df8 [ 346.166542][ T4796] r4:85802b40 [ 346.166560][ T4796] [<80e925ec>] (usbfs_start_wait_urb) from [<80e959c0>] (do_proc_control+0x28c/0x5f8) [ 346.166634][ T4796] r7:84efb000 r6:00000000 r5:82b11e08 r4:e88d9ea8 [ 346.166716][ T4796] [<80e95734>] (do_proc_control) from [<80e9729c>] (usbdev_do_ioctl+0x1570/0x2090) [ 346.166801][ T4796] r10:84efb000 r9:83f744cc r8:e88d9ea8 r7:83f74488 r6:20000040 r5:b5403587 [ 346.166823][ T4796] r4:85886b80 [ 346.166841][ T4796] [<80e95d2c>] (usbdev_do_ioctl) from [<80e97dcc>] (usbdev_ioctl+0x10/0x14) [ 346.166971][ T4796] r10:84efb000 r9:858dc480 r8:00000003 r7:20000040 r6:858dc481 r5:00000000 [ 346.166997][ T4796] r4:c0105500 [ 346.167015][ T4796] [<80e97dbc>] (usbdev_ioctl) from [<8056e2cc>] (sys_ioctl+0x130/0xdc8) [ 346.167083][ T4796] [<8056e19c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 346.167195][ T4796] Exception stack(0xe88d9fa8 to 0xe88d9ff0) [ 346.167248][ T4796] 9fa0: 00000000 00000000 00000003 c0105500 20000040 00000000 [ 346.167289][ T4796] 9fc0: 00000000 00000000 0012fef0 00000036 002e0000 00000000 00006364 76beb0bc [ 346.167347][ T4796] 9fe0: 76beaec0 76beaeb0 000193a4 00131f40 [ 346.167390][ T4796] r10:00000036 r9:84efb000 r8:8020029c r7:00000036 r6:0012fef0 r5:00000000 [ 346.167412][ T4796] r4:00000000 [ 353.830539][ T31] audit: type=1400 audit(353.620:217): avc: denied { create } for pid=4841 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 353.845397][ T31] audit: type=1400 audit(353.630:218): avc: denied { write } for pid=4841 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 354.233964][ T31] audit: type=1400 audit(354.020:219): avc: denied { read } for pid=4844 comm="syz.1.352" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 354.249125][ T31] audit: type=1400 audit(354.040:220): avc: denied { open } for pid=4844 comm="syz.1.352" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 354.319675][ T31] audit: type=1400 audit(354.110:221): avc: denied { write } for pid=4844 comm="syz.1.352" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 354.325776][ T31] audit: type=1400 audit(354.110:222): avc: denied { setattr } for pid=4844 comm="syz.1.352" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 354.341978][ T31] audit: type=1400 audit(354.130:223): avc: denied { ioctl } for pid=4844 comm="syz.1.352" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 354.351147][ T4845] binder: 4844:4845 ioctl c4009420 20001f00 returned -22 [ 355.079719][ T4849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=4849 comm=syz.1.354 [ 355.928329][ T3792] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 356.076733][ T3792] usb 2-1: device descriptor read/64, error -71 [ 356.326449][ T3792] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 356.466960][ T3792] usb 2-1: device descriptor read/64, error -71 [ 356.580063][ T3792] usb usb2-port1: attempt power cycle [ 356.927008][ T3792] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 356.953011][ T3792] usb 2-1: device descriptor read/8, error -71 [ 357.215681][ T3792] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 357.256262][ T3792] usb 2-1: device descriptor read/8, error -71 [ 357.366444][ T3792] usb usb2-port1: unable to enumerate USB device [ 369.030161][ T4914] FAULT_INJECTION: forcing a failure. [ 369.030161][ T4914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.032111][ T4914] CPU: 0 UID: 0 PID: 4914 Comm: syz.1.367 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 369.032297][ T4914] Hardware name: ARM-Versatile Express [ 369.032333][ T4914] Call trace: [ 369.032375][ T4914] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 369.032500][ T4914] r7:00000000 r6:00000000 r5:60000013 r4:8225c278 [ 369.032520][ T4914] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 369.032580][ T4914] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 369.032647][ T4914] r5:84efd400 r4:82950650 [ 369.032667][ T4914] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 369.032735][ T4914] [<8096add8>] (should_fail_ex) from [<8096b014>] (should_fail+0x14/0x18) [ 369.032808][ T4914] r8:00000004 r7:00000000 r6:859fa541 r5:00000000 r4:c0383e04 [ 369.032832][ T4914] [<8096b000>] (should_fail) from [<8096b034>] (should_fail_usercopy+0x1c/0x20) [ 369.032902][ T4914] [<8096b018>] (should_fail_usercopy) from [<80b9d6a8>] (sync_file_ioctl+0x160/0x810) [ 369.032962][ T4914] [<80b9d548>] (sync_file_ioctl) from [<8056e2cc>] (sys_ioctl+0x130/0xdc8) [ 369.033044][ T4914] r10:84efd400 r9:859fa540 r8:00000004 r7:00000000 r6:859fa541 r5:00000000 [ 369.033070][ T4914] r4:c0383e04 [ 369.033088][ T4914] [<8056e19c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 369.033145][ T4914] Exception stack(0xeacf9fa8 to 0xeacf9ff0) [ 369.033196][ T4914] 9fa0: 00000000 00000000 00000004 c0383e04 00000000 00000000 [ 369.033238][ T4914] 9fc0: 00000000 00000000 0012fef0 00000036 002e0000 00000000 00006364 76b370bc [ 369.033269][ T4914] 9fe0: 76b36ec0 76b36eb0 000193a4 00131f40 [ 369.033313][ T4914] r10:00000036 r9:84efd400 r8:8020029c r7:00000036 r6:0012fef0 r5:00000000 [ 369.033338][ T4914] r4:00000000 [ 370.341629][ T31] audit: type=1400 audit(370.110:224): avc: denied { ioctl } for pid=4921 comm="syz.0.371" path="/dev/ttyS3" dev="devtmpfs" ino=607 ioctlcmd=0x5439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:restorecond_var_run_t:s0" [ 370.834333][ T4929] FAULT_INJECTION: forcing a failure. [ 370.834333][ T4929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.834955][ T4929] CPU: 1 UID: 0 PID: 4929 Comm: syz.0.373 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 370.835031][ T4929] Hardware name: ARM-Versatile Express [ 370.835055][ T4929] Call trace: [ 370.835155][ T4929] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 370.835263][ T4929] r7:00000000 r6:00000000 r5:60000013 r4:8225c278 [ 370.835285][ T4929] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 370.835338][ T4929] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 370.835397][ T4929] r5:832f6c00 r4:82950650 [ 370.835411][ T4929] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 370.835465][ T4929] [<8096add8>] (should_fail_ex) from [<8096b014>] (should_fail+0x14/0x18) [ 370.835615][ T4929] r8:76beaf30 r7:00000000 r6:00000000 r5:eb109f68 r4:00000002 [ 370.835666][ T4929] [<8096b000>] (should_fail) from [<8096b034>] (should_fail_usercopy+0x1c/0x20) [ 370.835780][ T4929] [<8096b018>] (should_fail_usercopy) from [<8058fef8>] (simple_read_from_buffer+0x80/0x13c) [ 370.835978][ T4929] [<8058fe78>] (simple_read_from_buffer) from [<80607d50>] (proc_fail_nth_read+0xb8/0x100) [ 370.836101][ T4929] r10:00000001 r9:80607c98 r8:00000002 r7:eb109f68 r6:0000000f r5:76beaf30 [ 370.836174][ T4929] r4:832f6c00 r3:eb109e9f [ 370.836295][ T4929] [<80607c98>] (proc_fail_nth_read) from [<80554570>] (vfs_read+0x98/0x320) [ 370.836636][ T4929] r8:76beaf30 r7:eb109f68 r6:832f6c00 r5:0000000f r4:859fa240 [ 370.836790][ T4929] [<805544d8>] (vfs_read) from [<80555218>] (ksys_read+0x74/0xe8) [ 370.836859][ T4929] r10:00000003 r9:832f6c00 r8:8020029c r7:00000000 r6:00000000 r5:859fa240 [ 370.836936][ T4929] r4:859fa243 [ 370.837059][ T4929] [<805551a4>] (ksys_read) from [<8055529c>] (sys_read+0x10/0x14) [ 370.837311][ T4929] r7:00000003 r6:00000004 r5:76beaf30 r4:0000000f [ 370.837475][ T4929] [<8055528c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 370.837529][ T4929] Exception stack(0xeb109fa8 to 0xeb109ff0) [ 370.837826][ T4929] 9fa0: 0000000f 76beaf30 00000004 76beaf30 0000000f 00000000 [ 370.837917][ T4929] 9fc0: 0000000f 76beaf30 00000004 00000003 002e0000 00000000 00006364 76beb0bc [ 370.838169][ T4929] 9fe0: 00000158 76beaed0 000d7d70 0012fe14 [ 371.445670][ T4935] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4935 comm=syz.0.376 [ 371.519080][ T31] audit: type=1400 audit(371.310:225): avc: denied { setopt } for pid=4934 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 372.084313][ T4939] FAULT_INJECTION: forcing a failure. [ 372.084313][ T4939] name failslab, interval 1, probability 0, space 0, times 0 [ 372.100850][ T4939] CPU: 1 UID: 0 PID: 4939 Comm: syz.0.378 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 372.101053][ T4939] Hardware name: ARM-Versatile Express [ 372.101086][ T4939] Call trace: [ 372.101138][ T4939] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 372.101286][ T4939] r7:84efbc00 r6:00000000 r5:60000013 r4:8225c278 [ 372.101310][ T4939] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 372.101374][ T4939] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 372.101466][ T4939] r5:84efbc00 r4:82919c00 [ 372.101489][ T4939] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 372.101558][ T4939] [<8096add8>] (should_fail_ex) from [<80522b74>] (should_failslab+0x6c/0x94) [ 372.101631][ T4939] r8:00000000 r7:84efbc00 r6:00000cc0 r5:829e0c74 r4:832a3900 [ 372.101650][ T4939] [<80522b08>] (should_failslab) from [<80507580>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 372.101718][ T4939] [<80507534>] (kmem_cache_alloc_noprof) from [<81533f0c>] (sk_prot_alloc+0x30/0x104) [ 372.101789][ T4939] r10:82c21ce4 r9:00000000 r8:832a3900 r7:00000002 r6:00000dc0 r5:829e0c74 [ 372.101811][ T4939] r4:829e0c74 [ 372.101827][ T4939] [<81533edc>] (sk_prot_alloc) from [<81536f18>] (sk_alloc+0x30/0x20c) [ 372.101896][ T4939] r9:00000000 r8:00000002 r7:00000cc0 r6:829e0c74 r5:84770d00 r4:829e0c74 [ 372.101916][ T4939] [<81536ee8>] (sk_alloc) from [<81773480>] (inet_create+0x104/0x384) [ 372.102004][ T4939] r9:00000001 r8:00000000 r7:84770d00 r6:85073400 r5:00000002 r4:829e0c74 [ 372.102024][ T4939] [<8177337c>] (inet_create) from [<8152f1fc>] (__sock_create+0xfc/0x228) [ 372.102091][ T4939] r10:81e71ad4 r9:84770d00 r8:85073400 r7:00000002 r6:8177337c r5:00000003 [ 372.102112][ T4939] r4:00000002 [ 372.102130][ T4939] [<8152f100>] (__sock_create) from [<81531a50>] (__sys_socket+0x94/0x10c) [ 372.102207][ T4939] r10:00000119 r9:84efbc00 r8:8020029c r7:00000119 r6:84efbc00 r5:00000002 [ 372.102230][ T4939] r4:00000003 [ 372.102247][ T4939] [<815319bc>] (__sys_socket) from [<81531ad8>] (sys_socket+0x10/0x14) [ 372.102318][ T4939] r6:0012fef0 r5:00000000 r4:00000000 [ 372.102336][ T4939] [<81531ac8>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 372.102389][ T4939] Exception stack(0xeb101fa8 to 0xeb101ff0) [ 372.102435][ T4939] 1fa0: 00000000 00000000 00000002 00000003 00000002 00000000 [ 372.102477][ T4939] 1fc0: 00000000 00000000 0012fef0 00000119 002e0000 00000000 00006364 76beb0bc [ 372.102509][ T4939] 1fe0: 76beaec0 76beaeb0 000193a4 00131f40 [ 374.308929][ T4951] FAULT_INJECTION: forcing a failure. [ 374.308929][ T4951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.310527][ T4951] CPU: 0 UID: 0 PID: 4951 Comm: syz.0.382 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 374.310625][ T4951] Hardware name: ARM-Versatile Express [ 374.310648][ T4951] Call trace: [ 374.310683][ T4951] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 374.310788][ T4951] r7:eb6a9e20 r6:00000000 r5:60000013 r4:8225c278 [ 374.310805][ T4951] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 374.310851][ T4951] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 374.310901][ T4951] r5:84ef8000 r4:82950650 [ 374.310915][ T4951] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 374.310964][ T4951] [<8096add8>] (should_fail_ex) from [<8096b014>] (should_fail+0x14/0x18) [ 374.311017][ T4951] r8:00004890 r7:eb6a9e20 r6:20000200 r5:00000000 r4:eb6a9f20 [ 374.311033][ T4951] [<8096b000>] (should_fail) from [<8096b034>] (should_fail_usercopy+0x1c/0x20) [ 374.311074][ T4951] [<8096b018>] (should_fail_usercopy) from [<81532ddc>] (copy_msghdr_from_user+0x50/0x130) [ 374.311127][ T4951] [<81532d8c>] (copy_msghdr_from_user) from [<81532f34>] (___sys_sendmsg+0x78/0xd0) [ 374.311187][ T4951] r8:00004890 r7:00000000 r6:85071400 r5:eb6a9f20 r4:eb6a9e64 [ 374.311200][ T4951] [<81532ebc>] (___sys_sendmsg) from [<815333f0>] (__sys_sendmsg+0x8c/0xe0) [ 374.311265][ T4951] r10:00000128 r9:84ef8000 r8:858f5d80 r7:00004890 r6:20000200 r5:858f5d81 [ 374.311281][ T4951] r4:00000003 [ 374.311295][ T4951] [<81533364>] (__sys_sendmsg) from [<81533458>] (sys_sendmsg+0x14/0x18) [ 374.311355][ T4951] r8:8020029c r7:00000128 r6:0012fef0 r5:00000000 r4:00000000 [ 374.311369][ T4951] [<81533444>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 374.311412][ T4951] Exception stack(0xeb6a9fa8 to 0xeb6a9ff0) [ 374.311446][ T4951] 9fa0: 00000000 00000000 00000003 20000200 00004890 00000000 [ 374.311476][ T4951] 9fc0: 00000000 00000000 0012fef0 00000128 002e0000 00000000 00006364 76bca0bc [ 374.311499][ T4951] 9fe0: 76bc9ec0 76bc9eb0 000193a4 00131f40 [ 383.041631][ T4983] FAULT_INJECTION: forcing a failure. [ 383.041631][ T4983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.043511][ T4983] CPU: 0 UID: 0 PID: 4983 Comm: syz.1.394 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 383.043638][ T4983] Hardware name: ARM-Versatile Express [ 383.043673][ T4983] Call trace: [ 383.043725][ T4983] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 383.043881][ T4983] r7:200000c0 r6:00000000 r5:60000013 r4:8225c278 [ 383.043904][ T4983] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 383.043979][ T4983] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 383.044039][ T4983] r5:84efe000 r4:82950650 [ 383.044057][ T4983] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 383.044119][ T4983] [<8096add8>] (should_fail_ex) from [<8096b014>] (should_fail+0x14/0x18) [ 383.044190][ T4983] r8:00000003 r7:200000c0 r6:857f4800 r5:00000060 r4:81e1f40c [ 383.044210][ T4983] [<8096b000>] (should_fail) from [<8096b034>] (should_fail_usercopy+0x1c/0x20) [ 383.044268][ T4983] [<8096b018>] (should_fail_usercopy) from [<8145ca60>] (snd_seq_ioctl+0x9c/0x27c) [ 383.044338][ T4983] [<8145c9c4>] (snd_seq_ioctl) from [<8056e2cc>] (sys_ioctl+0x130/0xdc8) [ 383.044409][ T4983] r8:00000003 r7:200000c0 r6:858f5d81 r5:00000000 r4:40605346 [ 383.044429][ T4983] [<8056e19c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 383.044485][ T4983] Exception stack(0xdfa69fa8 to 0xdfa69ff0) [ 383.044529][ T4983] 9fa0: 00000000 00000000 00000003 40605346 200000c0 00000000 [ 383.044570][ T4983] 9fc0: 00000000 00000000 0012fef0 00000036 002e0000 00000000 00006364 76af50bc [ 383.044604][ T4983] 9fe0: 76af4ec0 76af4eb0 000193a4 00131f40 [ 383.044648][ T4983] r10:00000036 r9:84efe000 r8:8020029c r7:00000036 r6:0012fef0 r5:00000000 [ 383.044673][ T4983] r4:00000000 [ 384.077507][ T31] audit: type=1400 audit(383.860:226): avc: denied { audit_write } for pid=4989 comm="syz.1.398" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 390.814325][ T5070] FAULT_INJECTION: forcing a failure. [ 390.814325][ T5070] name failslab, interval 1, probability 0, space 0, times 0 [ 390.822151][ T5070] CPU: 1 UID: 0 PID: 5070 Comm: syz.1.424 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 390.822333][ T5070] Hardware name: ARM-Versatile Express [ 390.822361][ T5070] Call trace: [ 390.822404][ T5070] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 390.822528][ T5070] r7:83ae6000 r6:00000000 r5:60000013 r4:8225c278 [ 390.822549][ T5070] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 390.822606][ T5070] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 390.822667][ T5070] r5:83ae6000 r4:82919c00 [ 390.822683][ T5070] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 390.822746][ T5070] [<8096add8>] (should_fail_ex) from [<80522b74>] (should_failslab+0x6c/0x94) [ 390.822821][ T5070] r8:00000000 r7:83ae6000 r6:00000cc0 r5:829e5970 r4:84a04300 [ 390.822842][ T5070] [<80522b08>] (should_failslab) from [<80507580>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 390.822903][ T5070] [<80507534>] (kmem_cache_alloc_noprof) from [<81533f0c>] (sk_prot_alloc+0x30/0x104) [ 390.822993][ T5070] r10:00000000 r9:00000000 r8:84a04300 r7:0000000a r6:00000dc0 r5:829e5970 [ 390.823016][ T5070] r4:829e5958 [ 390.823032][ T5070] [<81533edc>] (sk_prot_alloc) from [<81536f18>] (sk_alloc+0x30/0x20c) [ 390.823099][ T5070] r9:00000000 r8:0000000a r7:00000cc0 r6:829e5970 r5:84770000 r4:829e5958 [ 390.823118][ T5070] [<81536ee8>] (sk_alloc) from [<8180f204>] (inet6_create+0x100/0x3d8) [ 390.823189][ T5070] r9:84770000 r8:00000001 r7:85073180 r6:0000003a r5:829e5970 r4:829e5958 [ 390.823208][ T5070] [<8180f104>] (inet6_create) from [<8152f1fc>] (__sock_create+0xfc/0x228) [ 390.823279][ T5070] r10:81e78504 r9:84770000 r8:85073180 r7:0000003a r6:8180f104 r5:00000003 [ 390.823299][ T5070] r4:0000000a [ 390.823315][ T5070] [<8152f100>] (__sock_create) from [<81531a50>] (__sys_socket+0x94/0x10c) [ 390.823384][ T5070] r10:00000119 r9:83ae6000 r8:8020029c r7:00000119 r6:83ae6000 r5:0000000a [ 390.823405][ T5070] r4:00000003 [ 390.823421][ T5070] [<815319bc>] (__sys_socket) from [<81531ad8>] (sys_socket+0x10/0x14) [ 390.823503][ T5070] r6:0012fef0 r5:00000000 r4:00000000 [ 390.823519][ T5070] [<81531ac8>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 390.823572][ T5070] Exception stack(0xdfd69fa8 to 0xdfd69ff0) [ 390.823617][ T5070] 9fa0: 00000000 00000000 0000000a 00000003 0000003a 00000000 [ 390.823655][ T5070] 9fc0: 00000000 00000000 0012fef0 00000119 002e0000 00000000 00006364 76b370bc [ 390.823683][ T5070] 9fe0: 76b36ec0 76b36eb0 000193a4 00131f40 [ 393.201659][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.455477][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.953759][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.217767][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.416776][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.018063][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.505765][ T5158] FAULT_INJECTION: forcing a failure. [ 400.505765][ T5158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.506297][ T5158] CPU: 1 UID: 0 PID: 5158 Comm: syz.0.449 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 400.506390][ T5158] Hardware name: ARM-Versatile Express [ 400.506422][ T5158] Call trace: [ 400.506471][ T5158] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 400.506604][ T5158] r7:00000000 r6:00000000 r5:60000013 r4:8225c278 [ 400.506626][ T5158] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 400.506699][ T5158] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 400.506972][ T5158] r5:84efbc00 r4:82950650 [ 400.507255][ T5158] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 400.507325][ T5158] [<8096add8>] (should_fail_ex) from [<8096b014>] (should_fail+0x14/0x18) [ 400.507390][ T5158] r8:76beaf30 r7:00000000 r6:00000000 r5:e0085f68 r4:00000002 [ 400.507409][ T5158] [<8096b000>] (should_fail) from [<8096b034>] (should_fail_usercopy+0x1c/0x20) [ 400.507461][ T5158] [<8096b018>] (should_fail_usercopy) from [<8058fef8>] (simple_read_from_buffer+0x80/0x13c) [ 400.507516][ T5158] [<8058fe78>] (simple_read_from_buffer) from [<80607d50>] (proc_fail_nth_read+0xb8/0x100) [ 400.507587][ T5158] r10:00000001 r9:80607c98 r8:00000002 r7:e0085f68 r6:0000000f r5:76beaf30 [ 400.507611][ T5158] r4:84efbc00 r3:e0085e9f [ 400.507627][ T5158] [<80607c98>] (proc_fail_nth_read) from [<80554570>] (vfs_read+0x98/0x320) [ 400.507701][ T5158] r8:76beaf30 r7:e0085f68 r6:84efbc00 r5:0000000f r4:859fad80 [ 400.507719][ T5158] [<805544d8>] (vfs_read) from [<80555218>] (ksys_read+0x74/0xe8) [ 400.507782][ T5158] r10:00000003 r9:84efbc00 r8:8020029c r7:00000000 r6:00000000 r5:859fad80 [ 400.507804][ T5158] r4:859fad83 [ 400.507819][ T5158] [<805551a4>] (ksys_read) from [<8055529c>] (sys_read+0x10/0x14) [ 400.507877][ T5158] r7:00000003 r6:00000004 r5:76beaf30 r4:0000000f [ 400.507893][ T5158] [<8055528c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 400.507942][ T5158] Exception stack(0xe0085fa8 to 0xe0085ff0) [ 400.507988][ T5158] 5fa0: 0000000f 76beaf30 00000004 76beaf30 0000000f 00000000 [ 400.508029][ T5158] 5fc0: 0000000f 76beaf30 00000004 00000003 002e0000 00000000 00006364 76beb0bc [ 400.508059][ T5158] 5fe0: 00000158 76beaed0 000d7d70 0012fe14 [ 401.331563][ T5168] FAULT_INJECTION: forcing a failure. [ 401.331563][ T5168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.332081][ T5168] CPU: 1 UID: 0 PID: 5168 Comm: syz.0.452 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 401.332161][ T5168] Hardware name: ARM-Versatile Express [ 401.332185][ T5168] Call trace: [ 401.332227][ T5168] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 401.332333][ T5168] r7:00000000 r6:00000000 r5:60000013 r4:8225c278 [ 401.332352][ T5168] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 401.332403][ T5168] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 401.332865][ T5168] r5:83ace000 r4:82950650 [ 401.333256][ T5168] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 401.334390][ T5168] [<8096add8>] (should_fail_ex) from [<8096b014>] (should_fail+0x14/0x18) [ 401.335013][ T5168] r8:76beaf30 r7:00000000 r6:00000000 r5:dff09f68 r4:00000002 [ 401.335036][ T5168] [<8096b000>] (should_fail) from [<8096b034>] (should_fail_usercopy+0x1c/0x20) [ 401.335087][ T5168] [<8096b018>] (should_fail_usercopy) from [<8058fef8>] (simple_read_from_buffer+0x80/0x13c) [ 401.335139][ T5168] [<8058fe78>] (simple_read_from_buffer) from [<80607d50>] (proc_fail_nth_read+0xb8/0x100) [ 401.335206][ T5168] r10:00000001 r9:80607c98 r8:00000002 r7:dff09f68 r6:0000000f r5:76beaf30 [ 401.335229][ T5168] r4:83ace000 r3:dff09e9f [ 401.335245][ T5168] [<80607c98>] (proc_fail_nth_read) from [<80554570>] (vfs_read+0x98/0x320) [ 401.335308][ T5168] r8:76beaf30 r7:dff09f68 r6:83ace000 r5:0000000f r4:859fa540 [ 401.335351][ T5168] [<805544d8>] (vfs_read) from [<80555218>] (ksys_read+0x74/0xe8) [ 401.335415][ T5168] r10:00000003 r9:83ace000 r8:8020029c r7:00000000 r6:00000000 r5:859fa540 [ 401.335434][ T5168] r4:859fa543 [ 401.335449][ T5168] [<805551a4>] (ksys_read) from [<8055529c>] (sys_read+0x10/0x14) [ 401.335499][ T5168] r7:00000003 r6:00000004 r5:76beaf30 r4:0000000f [ 401.335515][ T5168] [<8055528c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 401.335574][ T5168] Exception stack(0xdff09fa8 to 0xdff09ff0) [ 401.335614][ T5168] 9fa0: 0000000f 76beaf30 00000004 76beaf30 0000000f 00000000 [ 401.335647][ T5168] 9fc0: 0000000f 76beaf30 00000004 00000003 002e0000 00000000 00006364 76beb0bc [ 401.335674][ T5168] 9fe0: 00000158 76beaed0 000d7d70 0012fe14 [ 408.646642][ T5234] fuse: Bad value for 'fd' [ 419.163385][ T31] audit: type=1400 audit(418.950:227): avc: denied { write } for pid=5297 comm="syz.0.497" path="socket:[7383]" dev="sockfs" ino=7383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 421.047850][ T31] audit: type=1400 audit(420.820:228): avc: denied { setopt } for pid=5314 comm="syz.0.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 421.938186][ T5330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 421.938762][ T5330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.508'. [ 421.960714][ T5330] FAULT_INJECTION: forcing a failure. [ 421.960714][ T5330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.961331][ T5330] CPU: 1 UID: 0 PID: 5330 Comm: syz.1.508 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 421.961410][ T5330] Hardware name: ARM-Versatile Express [ 421.961467][ T5330] Call trace: [ 421.961617][ T5330] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 421.961811][ T5330] r7:76b35e1c r6:00000000 r5:60000013 r4:8225c278 [ 421.962052][ T5330] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 421.962465][ T5330] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 421.962632][ T5330] r5:8324c800 r4:82950650 [ 421.962711][ T5330] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 421.962945][ T5330] [<8096add8>] (should_fail_ex) from [<8096b014>] (should_fail+0x14/0x18) [ 421.963109][ T5330] r8:859fa601 r7:76b35e1c r6:eabb1ee4 r5:0000000c r4:0000000c [ 421.963135][ T5330] [<8096b000>] (should_fail) from [<8096b034>] (should_fail_usercopy+0x1c/0x20) [ 421.963186][ T5330] [<8096b018>] (should_fail_usercopy) from [<815311b4>] (move_addr_to_kernel+0x34/0xf8) [ 421.963356][ T5330] [<81531180>] (move_addr_to_kernel) from [<8153270c>] (__sys_sendto+0xd0/0x160) [ 421.963671][ T5330] r7:76b35e1c r6:85073900 r5:00000000 r4:00000000 [ 421.963858][ T5330] [<8153263c>] (__sys_sendto) from [<815327b8>] (sys_sendto+0x1c/0x24) [ 421.963986][ T5330] r9:8324c800 r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76b35e1c [ 421.964045][ T5330] [<8153279c>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 421.964295][ T5330] Exception stack(0xeabb1fa8 to 0xeabb1ff0) [ 421.964382][ T5330] 1fa0: 76b35e1c 0000000c 00000003 76b35eb0 00000020 00000000 [ 421.964420][ T5330] 1fc0: 76b35e1c 0000000c 00000000 00000122 00000003 00000000 76b35eb0 76b370bc [ 421.964479][ T5330] 1fe0: 00000000 76b35df0 000d7d70 001343d8 [ 422.201831][ T5335] netlink: 100 bytes leftover after parsing attributes in process `syz.1.510'. [ 423.423260][ T5348] FAULT_INJECTION: forcing a failure. [ 423.423260][ T5348] name failslab, interval 1, probability 0, space 0, times 0 [ 423.423755][ T5348] CPU: 1 UID: 0 PID: 5348 Comm: syz.1.514 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 423.423841][ T5348] Hardware name: ARM-Versatile Express [ 423.423867][ T5348] Call trace: [ 423.423918][ T5348] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 423.424030][ T5348] r7:832f6c00 r6:00000000 r5:60000013 r4:8225c278 [ 423.424048][ T5348] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 423.424194][ T5348] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 423.424265][ T5348] r5:832f6c00 r4:82919c00 [ 423.424283][ T5348] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 423.424355][ T5348] [<8096add8>] (should_fail_ex) from [<80522b74>] (should_failslab+0x6c/0x94) [ 423.424436][ T5348] r8:00000000 r7:832f6c00 r6:00000cc0 r5:00000009 r4:83001300 [ 423.424455][ T5348] [<80522b08>] (should_failslab) from [<80506934>] (__kmalloc_cache_noprof+0x4c/0x33c) [ 423.424517][ T5348] [<805068e8>] (__kmalloc_cache_noprof) from [<81043dd0>] (raw_ioctl_init+0x188/0x340) [ 423.427089][ T5348] r10:832f6c00 r9:8245f6c0 r8:858a3140 r7:85886100 r6:84782000 r5:00000009 [ 423.427645][ T5348] r4:00000000 [ 423.427671][ T5348] [<81043c48>] (raw_ioctl_init) from [<810453e4>] (raw_ioctl+0x3f0/0x1094) [ 423.427743][ T5348] r10:832f6c00 r9:859fa3c0 r8:00000004 r7:76b35e60 r6:76b35e60 r5:00000000 [ 423.427763][ T5348] r4:84782000 [ 423.427778][ T5348] [<81044ff4>] (raw_ioctl) from [<8056e2cc>] (sys_ioctl+0x130/0xdc8) [ 423.427850][ T5348] r10:832f6c00 r9:859fa3c0 r8:00000004 r7:76b35e60 r6:859fa3c1 r5:00000000 [ 423.427958][ T5348] r4:41015500 [ 423.427978][ T5348] [<8056e19c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 423.428036][ T5348] Exception stack(0xeabb1fa8 to 0xeabb1ff0) [ 423.428083][ T5348] 1fa0: 00000004 76b35e70 00000004 41015500 76b35e60 76b34e00 [ 423.429538][ T5348] 1fc0: 00000004 76b35e70 76b34e70 00000036 00000002 76b35e60 00000000 00000000 [ 423.429652][ T5348] 1fe0: 00000000 76b34de8 002b9000 0013190c [ 423.429796][ T5348] r10:00000036 r9:832f6c00 r8:8020029c r7:00000036 r6:76b34e70 r5:76b35e70 [ 423.429990][ T5348] r4:00000004 [ 424.162166][ T5350] tmpfs: Unknown parameter '' [ 425.032470][ T5356] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5356 comm=syz.0.517 [ 425.468316][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.676191][ T31] audit: type=1400 audit(425.470:229): avc: denied { read } for pid=5373 comm="syz.0.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 427.020959][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.393790][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.585008][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.727988][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.814291][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.085050][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.363601][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.700222][ T31] audit: type=1400 audit(433.490:230): avc: denied { set_context_mgr } for pid=5426 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 437.502092][ T5463] FAULT_INJECTION: forcing a failure. [ 437.502092][ T5463] name failslab, interval 1, probability 0, space 0, times 0 [ 437.502659][ T5463] CPU: 1 UID: 0 PID: 5463 Comm: syz.1.553 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 437.502750][ T5463] Hardware name: ARM-Versatile Express [ 437.502783][ T5463] Call trace: [ 437.502829][ T5463] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 437.502957][ T5463] r7:83aca400 r6:00000000 r5:60000013 r4:8225c278 [ 437.502979][ T5463] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 437.503034][ T5463] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 437.504915][ T5463] r5:83aca400 r4:82919c00 [ 437.505458][ T5463] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 437.505538][ T5463] [<8096add8>] (should_fail_ex) from [<80522b74>] (should_failslab+0x6c/0x94) [ 437.505642][ T5463] r8:00000000 r7:83aca400 r6:00000dc0 r5:8245f6c0 r4:83001480 [ 437.505664][ T5463] [<80522b08>] (should_failslab) from [<80506934>] (__kmalloc_cache_noprof+0x4c/0x33c) [ 437.505725][ T5463] [<805068e8>] (__kmalloc_cache_noprof) from [<81451f80>] (snd_mixer_oss_get_volume1_sw.constprop.0+0x5c/0x188) [ 437.505835][ T5463] r10:00000000 r9:838a51e0 r8:eb1cde48 r7:eb1cde44 r6:84197900 r5:8245f6c0 [ 437.505858][ T5463] r4:00000006 [ 437.505876][ T5463] [<81451f24>] (snd_mixer_oss_get_volume1_sw.constprop.0) from [<814520f8>] (snd_mixer_oss_get_recsrc1_sw+0x4c/0x8c) [ 437.505953][ T5463] r9:838ad13c r8:00000000 r7:00000000 r6:20004000 r5:00000000 r4:eb1cde70 [ 437.505973][ T5463] [<814520ac>] (snd_mixer_oss_get_recsrc1_sw) from [<81450e44>] (snd_mixer_oss_ioctl1+0x484/0xae4) [ 437.506035][ T5463] r5:858d3040 r4:00000006 [ 437.506052][ T5463] [<814509c0>] (snd_mixer_oss_ioctl1) from [<81451548>] (snd_mixer_oss_ioctl+0x14/0x18) [ 437.506120][ T5463] r10:83aca400 r9:859fa780 r8:00000003 r7:20004000 r6:859fa781 r5:00000000 [ 437.506146][ T5463] r4:c0044dff [ 437.506163][ T5463] [<81451534>] (snd_mixer_oss_ioctl) from [<8056e2cc>] (sys_ioctl+0x130/0xdc8) [ 437.506222][ T5463] [<8056e19c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 437.506387][ T5463] Exception stack(0xeb1cdfa8 to 0xeb1cdff0) [ 437.506440][ T5463] dfa0: 00000000 00000000 00000003 c0044dff 20004000 00000000 [ 437.506479][ T5463] dfc0: 00000000 00000000 0012fef0 00000036 002e0000 00000000 00006364 76b370bc [ 437.506509][ T5463] dfe0: 76b36ec0 76b36eb0 000193a4 00131f40 [ 437.506546][ T5463] r10:00000036 r9:83aca400 r8:8020029c r7:00000036 r6:0012fef0 r5:00000000 [ 437.506639][ T5463] r4:00000000 [ 439.203965][ T94] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 439.254389][ T94] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 441.690916][ T31] audit: type=1400 audit(441.480:231): avc: denied { sqpoll } for pid=5498 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 441.980091][ T5507] FAULT_INJECTION: forcing a failure. [ 441.980091][ T5507] name failslab, interval 1, probability 0, space 0, times 0 [ 441.980567][ T5507] CPU: 1 UID: 0 PID: 5507 Comm: syz.0.569 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 441.980629][ T5507] Hardware name: ARM-Versatile Express [ 441.980657][ T5507] Call trace: [ 441.980698][ T5507] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 441.980823][ T5507] r7:00000dc0 r6:00000000 r5:60000013 r4:8225c278 [ 441.980844][ T5507] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 441.980933][ T5507] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 441.980991][ T5507] r5:838bb000 r4:82919c00 [ 441.981004][ T5507] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 441.981069][ T5507] [<8096add8>] (should_fail_ex) from [<80522b74>] (should_failslab+0x6c/0x94) [ 441.981137][ T5507] r8:838bb000 r7:00000dc0 r6:856d6994 r5:00000058 r4:83001300 [ 441.981186][ T5507] [<80522b08>] (should_failslab) from [<80507904>] (__kmalloc_noprof+0x9c/0x458) [ 441.981251][ T5507] [<80507868>] (__kmalloc_noprof) from [<8143b8e0>] (constrain_params_by_rules+0x88/0x500) [ 441.981327][ T5507] r10:eb2e1ce8 r9:856d6800 r8:0000000c r7:856d7800 r6:856d6994 r5:00000014 [ 441.981347][ T5507] r4:00000000 [ 441.981362][ T5507] [<8143b858>] (constrain_params_by_rules) from [<8143bf40>] (snd_pcm_hw_refine+0x1e8/0x41c) [ 441.981473][ T5507] r10:eb2e1ce8 r9:00000001 r8:0000000c r7:856d7a30 r6:856d6994 r5:00000014 [ 441.981500][ T5507] r4:856d6800 [ 441.981530][ T5507] [<8143bd58>] (snd_pcm_hw_refine) from [<814436bc>] (snd_pcm_hw_param_first+0x178/0x1ec) [ 441.981606][ T5507] r10:00000001 r9:00000004 r8:856d6840 r7:84193000 r6:00000000 r5:00000002 [ 441.981628][ T5507] r4:856d6800 [ 441.981644][ T5507] [<81443544>] (snd_pcm_hw_param_first) from [<8143d988>] (snd_pcm_hw_params+0x190/0x77c) [ 441.981721][ T5507] r10:84193000 r9:838bb000 r8:00000002 r7:81e1e09c r6:856d6800 r5:00000000 [ 441.981744][ T5507] r4:00000001 r3:00000000 [ 441.981760][ T5507] [<8143d7f8>] (snd_pcm_hw_params) from [<8143e004>] (snd_pcm_kernel_ioctl+0x90/0x130) [ 441.981827][ T5507] r10:00001000 r9:00010000 r8:856d7800 r7:00000001 r6:00000010 r5:84193000 [ 441.981848][ T5507] r4:856d6800 [ 441.981865][ T5507] [<8143df74>] (snd_pcm_kernel_ioctl) from [<814554e0>] (snd_pcm_oss_change_params_locked+0x6ec/0xc84) [ 441.981941][ T5507] [<81454df4>] (snd_pcm_oss_change_params_locked) from [<81455f70>] (snd_pcm_oss_make_ready+0x4c/0xac) [ 441.982047][ T5507] r10:838bb000 r9:859fa300 r8:00000000 r7:856d7ab8 r6:856d7800 r5:84193000 [ 441.982070][ T5507] r4:84193000 [ 441.982087][ T5507] [<81455f24>] (snd_pcm_oss_make_ready) from [<814575ec>] (snd_pcm_oss_ioctl+0xa5c/0x1004) [ 441.982238][ T5507] r7:858cfd40 r6:20000040 r5:00000000 r4:84193000 [ 441.982290][ T5507] [<81456b90>] (snd_pcm_oss_ioctl) from [<8056e2cc>] (sys_ioctl+0x130/0xdc8) [ 441.982373][ T5507] r10:838bb000 r9:859fa300 r8:00000003 r7:20000040 r6:859fa301 r5:00000000 [ 441.982399][ T5507] r4:80045017 [ 441.982415][ T5507] [<8056e19c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 441.982470][ T5507] Exception stack(0xeb2e1fa8 to 0xeb2e1ff0) [ 441.982513][ T5507] 1fa0: 00000000 00000000 00000003 80045017 20000040 00000000 [ 441.982551][ T5507] 1fc0: 00000000 00000000 0012fef0 00000036 002e0000 00000000 00006364 76beb0bc [ 441.982581][ T5507] 1fe0: 76beaec0 76beaeb0 000193a4 00131f40 [ 441.982620][ T5507] r10:00000036 r9:838bb000 r8:8020029c r7:00000036 r6:0012fef0 r5:00000000 [ 441.982664][ T5507] r4:00000000 [ 443.026155][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 443.186366][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 443.222369][ T23] usb 1-1: config 1 has an invalid descriptor of length 254, skipping remainder of the config [ 443.222883][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.250233][ T23] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 443.250649][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.266441][ T23] usb 1-1: Product: syz [ 443.266862][ T23] usb 1-1: Manufacturer: syz [ 443.267137][ T23] usb 1-1: SerialNumber: syz [ 443.598165][ T23] usb 1-1: 0:2 : does not exist [ 443.717754][ T23] usb 1-1: USB disconnect, device number 6 [ 444.277798][ T5551] fuse: Bad value for 'group_id' [ 444.278530][ T5551] fuse: Bad value for 'group_id' [ 444.730570][ T5556] FAULT_INJECTION: forcing a failure. [ 444.730570][ T5556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.737459][ T5556] CPU: 1 UID: 0 PID: 5556 Comm: syz.0.581 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 444.737601][ T5556] Hardware name: ARM-Versatile Express [ 444.737630][ T5556] Call trace: [ 444.737676][ T5556] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 444.737815][ T5556] r7:85073b80 r6:00000000 r5:60000013 r4:8225c278 [ 444.737835][ T5556] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 444.737917][ T5556] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 444.737998][ T5556] r5:84742400 r4:82950650 [ 444.738015][ T5556] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 444.738075][ T5556] [<8096add8>] (should_fail_ex) from [<8096b014>] (should_fail+0x14/0x18) [ 444.738143][ T5556] r8:00000000 r7:85073b80 r6:00000021 r5:00000029 r4:00000000 [ 444.738162][ T5556] [<8096b000>] (should_fail) from [<8096b034>] (should_fail_usercopy+0x1c/0x20) [ 444.738214][ T5556] [<8096b018>] (should_fail_usercopy) from [<81530dc0>] (do_sock_getsockopt+0x1a8/0x29c) [ 444.738275][ T5556] [<81530c18>] (do_sock_getsockopt) from [<81532b1c>] (__sys_getsockopt+0x94/0xdc) [ 444.738352][ T5556] r9:84742400 r8:859fa240 r7:eb691f50 r6:00000021 r5:eb691f58 r4:859fa241 [ 444.738372][ T5556] [<81532a88>] (__sys_getsockopt) from [<81532b80>] (sys_getsockopt+0x1c/0x24) [ 444.738446][ T5556] r8:8020029c r7:00000127 r6:0012fef0 r5:00000000 r4:20000100 [ 444.738464][ T5556] [<81532b64>] (sys_getsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 444.738520][ T5556] Exception stack(0xeb691fa8 to 0xeb691ff0) [ 444.738566][ T5556] 1fa0: 20000100 00000000 00000003 00000029 00000021 00000000 [ 444.738606][ T5556] 1fc0: 20000100 00000000 0012fef0 00000127 002e0000 00000000 00006364 76beb0bc [ 444.738636][ T5556] 1fe0: 76beaec0 76beaeb0 000193a4 00131f40 [ 445.917029][ T5567] fuse: Bad value for 'group_id' [ 445.919088][ T5567] fuse: Bad value for 'group_id' [ 446.295643][ T31] audit: type=1400 audit(446.080:232): avc: denied { create } for pid=5569 comm="syz.1.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 447.016037][ T5581] fuse: Bad value for 'group_id' [ 447.018956][ T5581] fuse: Bad value for 'group_id' [ 447.046635][ T5583] FAULT_INJECTION: forcing a failure. [ 447.046635][ T5583] name failslab, interval 1, probability 0, space 0, times 0 [ 447.047236][ T5583] CPU: 0 UID: 0 PID: 5583 Comm: syz.0.592 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 447.047323][ T5583] Hardware name: ARM-Versatile Express [ 447.047356][ T5583] Call trace: [ 447.047404][ T5583] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 447.051604][ T5583] r7:00000c40 r6:00000000 r5:60000013 r4:8225c278 [ 447.051701][ T5583] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 447.054851][ T5583] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 447.055030][ T5583] r5:84efe000 r4:82919c00 [ 447.055056][ T5583] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 447.055132][ T5583] [<8096add8>] (should_fail_ex) from [<80522b74>] (should_failslab+0x6c/0x94) [ 447.055214][ T5583] r8:84efe000 r7:00000c40 r6:858f5b68 r5:00001000 r4:830016c0 [ 447.055236][ T5583] [<80522b08>] (should_failslab) from [<80507904>] (__kmalloc_noprof+0x9c/0x458) [ 447.055305][ T5583] [<80507868>] (__kmalloc_noprof) from [<807c1164>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 447.055389][ T5583] r10:84efe000 r9:8309e400 r8:00000000 r7:8342f220 r6:858f5b68 r5:00001000 [ 447.055412][ T5583] r4:00000000 [ 447.055430][ T5583] [<807c1128>] (tomoyo_realpath_from_path) from [<807bd2a8>] (tomoyo_path_number_perm+0xcc/0x22c) [ 447.055507][ T5583] r10:84efe000 r9:00000000 r8:00000003 r7:00005450 r6:00000004 r5:81cd65f8 [ 447.055537][ T5583] r4:858f5b68 r3:826c0200 [ 447.055555][ T5583] [<807bd1dc>] (tomoyo_path_number_perm) from [<807c1b88>] (tomoyo_file_ioctl+0x1c/0x20) [ 447.055632][ T5583] r9:858f5b40 r8:00000003 r7:00000000 r6:00000000 r5:00005450 r4:858f5b40 [ 447.055653][ T5583] [<807c1b6c>] (tomoyo_file_ioctl) from [<8076eb0c>] (security_file_ioctl+0x64/0x1e4) [ 447.055727][ T5583] [<8076eaa8>] (security_file_ioctl) from [<8056e1e8>] (sys_ioctl+0x4c/0xdc8) [ 447.055802][ T5583] r7:00000000 r6:858f5b41 r5:00000000 r4:00005450 [ 447.055821][ T5583] [<8056e19c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 447.055879][ T5583] Exception stack(0xeb7b9fa8 to 0xeb7b9ff0) [ 447.055935][ T5583] 9fa0: 00000000 00000000 00000003 00005450 00000000 00000000 [ 447.055983][ T5583] 9fc0: 00000000 00000000 0012fef0 00000036 002e0000 00000000 00006364 76beb0bc [ 447.056014][ T5583] 9fe0: 76beaec0 76beaeb0 000193a4 00131f40 [ 447.056057][ T5583] r10:00000036 r9:84efe000 r8:8020029c r7:00000036 r6:0012fef0 r5:00000000 [ 447.056083][ T5583] r4:00000000 [ 447.059234][ T5583] ERROR: Out of memory at tomoyo_realpath_from_path. [ 447.624704][ T5591] FAULT_INJECTION: forcing a failure. [ 447.624704][ T5591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.636268][ T5591] CPU: 0 UID: 0 PID: 5591 Comm: syz.1.595 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 447.636397][ T5591] Hardware name: ARM-Versatile Express [ 447.636429][ T5591] Call trace: [ 447.636480][ T5591] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 447.636609][ T5591] r7:00000000 r6:00000000 r5:60000113 r4:8225c278 [ 447.636632][ T5591] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 447.636714][ T5591] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 447.636778][ T5591] r5:84742400 r4:82950650 [ 447.636795][ T5591] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 447.636858][ T5591] [<8096add8>] (should_fail_ex) from [<8096b014>] (should_fail+0x14/0x18) [ 447.636926][ T5591] r8:76b36f30 r7:00000000 r6:00000000 r5:eb63df68 r4:00000002 [ 447.636952][ T5591] [<8096b000>] (should_fail) from [<8096b034>] (should_fail_usercopy+0x1c/0x20) [ 447.637006][ T5591] [<8096b018>] (should_fail_usercopy) from [<8058fef8>] (simple_read_from_buffer+0x80/0x13c) [ 447.637064][ T5591] [<8058fe78>] (simple_read_from_buffer) from [<80607d50>] (proc_fail_nth_read+0xb8/0x100) [ 447.637139][ T5591] r10:00000001 r9:80607c98 r8:00000002 r7:eb63df68 r6:0000000f r5:76b36f30 [ 447.637163][ T5591] r4:84742400 r3:eb63de9f [ 447.637180][ T5591] [<80607c98>] (proc_fail_nth_read) from [<80554570>] (vfs_read+0x98/0x320) [ 447.637250][ T5591] r8:76b36f30 r7:eb63df68 r6:84742400 r5:0000000f r4:859fad80 [ 447.637269][ T5591] [<805544d8>] (vfs_read) from [<80555218>] (ksys_read+0x74/0xe8) [ 447.637335][ T5591] r10:00000003 r9:84742400 r8:8020029c r7:00000000 r6:00000000 r5:859fad80 [ 447.637358][ T5591] r4:859fad83 [ 447.637375][ T5591] [<805551a4>] (ksys_read) from [<8055529c>] (sys_read+0x10/0x14) [ 447.637473][ T5591] r7:00000003 r6:00000004 r5:76b36f30 r4:0000000f [ 447.637494][ T5591] [<8055528c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 447.637545][ T5591] Exception stack(0xeb63dfa8 to 0xeb63dff0) [ 447.637594][ T5591] dfa0: 0000000f 76b36f30 00000004 76b36f30 0000000f 00000000 [ 447.637634][ T5591] dfc0: 0000000f 76b36f30 00000004 00000003 002e0000 00000000 00006364 76b370bc [ 447.637664][ T5591] dfe0: 00000158 76b36ed0 000d7d70 0012fe14 [ 456.706738][ T31] audit: type=1400 audit(456.500:233): avc: denied { ioctl } for pid=5651 comm="syz.0.618" path="socket:[8601]" dev="sockfs" ino=8601 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 456.727229][ T5652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5652 comm=syz.0.618 [ 457.771809][ T31] audit: type=1400 audit(457.560:234): avc: denied { create } for pid=5667 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 460.120517][ T5685] FAULT_INJECTION: forcing a failure. [ 460.120517][ T5685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.126834][ T5685] CPU: 1 UID: 0 PID: 5685 Comm: syz.0.629 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 460.126969][ T5685] Hardware name: ARM-Versatile Express [ 460.127007][ T5685] Call trace: [ 460.127061][ T5685] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 460.127213][ T5685] r7:20000940 r6:00000000 r5:60000013 r4:8225c278 [ 460.127239][ T5685] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 460.127306][ T5685] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 460.127370][ T5685] r5:84740c00 r4:82950650 [ 460.127390][ T5685] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 460.127452][ T5685] [<8096add8>] (should_fail_ex) from [<8096b014>] (should_fail+0x14/0x18) [ 460.127519][ T5685] r8:00000003 r7:20000940 r6:85805e00 r5:00000050 r4:81e1f434 [ 460.127543][ T5685] [<8096b000>] (should_fail) from [<8096b034>] (should_fail_usercopy+0x1c/0x20) [ 460.127602][ T5685] [<8096b018>] (should_fail_usercopy) from [<8145ca60>] (snd_seq_ioctl+0x9c/0x27c) [ 460.127691][ T5685] [<8145c9c4>] (snd_seq_ioctl) from [<8056e2cc>] (sys_ioctl+0x130/0xdc8) [ 460.127777][ T5685] r8:00000003 r7:20000940 r6:858f3181 r5:00000000 r4:c0505350 [ 460.127801][ T5685] [<8056e19c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 460.127859][ T5685] Exception stack(0xec4e5fa8 to 0xec4e5ff0) [ 460.127915][ T5685] 5fa0: 00000000 00000000 00000003 c0505350 20000940 00000000 [ 460.127956][ T5685] 5fc0: 00000000 00000000 0012fef0 00000036 002e0000 00000000 00006364 76ba90bc [ 460.127987][ T5685] 5fe0: 76ba8ec0 76ba8eb0 000193a4 00131f40 [ 460.128033][ T5685] r10:00000036 r9:84740c00 r8:8020029c r7:00000036 r6:0012fef0 r5:00000000 [ 460.128059][ T5685] r4:00000000 [ 460.314379][ T5684] FAULT_INJECTION: forcing a failure. [ 460.314379][ T5684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.316999][ T5684] CPU: 1 UID: 0 PID: 5684 Comm: syz.1.630 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 460.317103][ T5684] Hardware name: ARM-Versatile Express [ 460.317132][ T5684] Call trace: [ 460.317182][ T5684] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 460.317299][ T5684] r7:00006364 r6:00000000 r5:60000013 r4:8225c278 [ 460.317322][ T5684] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 460.317384][ T5684] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 460.317486][ T5684] r5:84efbc00 r4:82950650 [ 460.317506][ T5684] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 460.317572][ T5684] [<8096add8>] (should_fail_ex) from [<8096b014>] (should_fail+0x14/0x18) [ 460.317644][ T5684] r8:00000000 r7:00006364 r6:76b370bc r5:84efc430 r4:76b36bb8 [ 460.317664][ T5684] [<8096b000>] (should_fail) from [<8096b034>] (should_fail_usercopy+0x1c/0x20) [ 460.317743][ T5684] [<8096b018>] (should_fail_usercopy) from [<8022b61c>] (setup_sigframe+0xe4/0x1c4) [ 460.317807][ T5684] [<8022b538>] (setup_sigframe) from [<8022bac4>] (do_work_pending+0x2f4/0x4f8) [ 460.317890][ T5684] r10:00000188 r9:b5403587 r8:00000000 r7:84efc430 r6:76b36bb8 r5:ec47dfb0 [ 460.317915][ T5684] r4:84efbc00 [ 460.317930][ T5684] [<8022b7d0>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 460.317989][ T5684] Exception stack(0xec47dfb0 to 0xec47dff8) [ 460.318034][ T5684] dfa0: fffffffc 200001c0 00000001 fffffffc [ 460.318074][ T5684] dfc0: 00000005 00000000 0012fef0 00000188 002e0000 00000000 00006364 76b370bc [ 460.318108][ T5684] dfe0: 76b36ec0 76b36eb0 000193a4 00131f40 60000010 00000003 [ 460.318152][ T5684] r10:00000188 r9:84efbc00 r8:8020029c r7:00000188 r6:0012fef0 r5:00000000 [ 460.318174][ T5684] r4:00000005 [ 460.511545][ T5687] fuse: Unknown parameter 'grou00000000000000000003' [ 460.866770][ T5692] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5692 comm=syz.0.634 [ 466.658596][ T5701] fuse: Unknown parameter 'grou00000000000000000003' [ 468.367100][ T31] audit: type=1400 audit(468.160:235): avc: denied { create } for pid=5716 comm="syz.0.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 468.510098][ T5721] fuse: Unknown parameter 'group_i00000000000000000003' [ 469.568434][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.799607][ T5734] fuse: Bad value for 'fd' [ 470.499948][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.716771][ C1] vkms_vblank_simulate: vblank timer overrun [ 475.827177][ T5754] fuse: Unknown parameter 'group_i00000000000000000003' [ 485.197322][ T5779] fuse: Unknown parameter 'group_i00000000000000000003' [ 488.900363][ T5792] fuse: Unknown parameter 'group_id00000000000000000003' [ 491.545864][ T5805] fuse: Unknown parameter 'group_id00000000000000000003' [ 491.696034][ T5809] FAULT_INJECTION: forcing a failure. [ 491.696034][ T5809] name failslab, interval 1, probability 0, space 0, times 0 [ 491.696469][ T5809] CPU: 0 UID: 0 PID: 5809 Comm: syz.0.666 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 491.696529][ T5809] Hardware name: ARM-Versatile Express [ 491.696558][ T5809] Call trace: [ 491.696595][ T5809] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 491.696722][ T5809] r7:00000dc0 r6:00000000 r5:60000013 r4:8225c278 [ 491.696861][ T5809] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 491.696945][ T5809] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 491.697080][ T5809] r5:838c6c00 r4:82919c00 [ 491.697098][ T5809] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 491.697154][ T5809] [<8096add8>] (should_fail_ex) from [<80522b74>] (should_failslab+0x6c/0x94) [ 491.697257][ T5809] r8:838c6c00 r7:00000dc0 r6:00000dc0 r5:00000018 r4:83001240 [ 491.697275][ T5809] [<80522b08>] (should_failslab) from [<80507904>] (__kmalloc_noprof+0x9c/0x458) [ 491.697332][ T5809] [<80507868>] (__kmalloc_noprof) from [<8077489c>] (lsm_blob_alloc+0x28/0x3c) [ 491.697403][ T5809] r10:00000002 r9:00000458 r8:846320c0 r7:0000002b r6:00000dc0 r5:0000002b [ 491.697421][ T5809] r4:85984aec [ 491.697461][ T5809] [<80774874>] (lsm_blob_alloc) from [<80786010>] (security_sk_alloc+0x2c/0x224) [ 491.697520][ T5809] r5:0000002b r4:85984900 [ 491.697534][ T5809] [<80785fe4>] (security_sk_alloc) from [<81533f58>] (sk_prot_alloc+0x7c/0x104) [ 491.697594][ T5809] r7:0000002b r6:00000dc0 r5:829ea3ec r4:85984900 [ 491.697610][ T5809] [<81533edc>] (sk_prot_alloc) from [<81536f18>] (sk_alloc+0x30/0x20c) [ 491.697669][ T5809] r9:00000000 r8:0000002b r7:00000cc0 r6:829ea3ec r5:84770d00 r4:0000002b [ 491.697686][ T5809] [<81536ee8>] (sk_alloc) from [<8192e814>] (smc_create+0x68/0x114) [ 491.697764][ T5809] r9:00000001 r8:00000000 r7:00000000 r6:84770d00 r5:85034a00 r4:0000002b [ 491.697846][ T5809] [<8192e7ac>] (smc_create) from [<8152f1fc>] (__sock_create+0xfc/0x228) [ 491.697921][ T5809] r10:81e8b19c r9:84770d00 r8:85034a00 r7:00000000 r6:8192e7ac r5:00000001 [ 491.697939][ T5809] r4:0000002b [ 491.697954][ T5809] [<8152f100>] (__sock_create) from [<81531a50>] (__sys_socket+0x94/0x10c) [ 491.698037][ T5809] r10:00000119 r9:838c6c00 r8:8020029c r7:00000119 r6:838c6c00 r5:0000002b [ 491.698058][ T5809] r4:00000001 [ 491.698103][ T5809] [<815319bc>] (__sys_socket) from [<81531ad8>] (sys_socket+0x10/0x14) [ 491.698164][ T5809] r6:0012fef0 r5:00000000 r4:00000000 [ 491.698178][ T5809] [<81531ac8>] (sys_socket) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 491.698234][ T5809] Exception stack(0xdfb81fa8 to 0xdfb81ff0) [ 491.698271][ T5809] 1fa0: 00000000 00000000 0000002b 00000001 00000000 00000000 [ 491.698303][ T5809] 1fc0: 00000000 00000000 0012fef0 00000119 002e0000 00000000 00006364 76beb0bc [ 491.698328][ T5809] 1fe0: 76beaec0 76beaeb0 000193a4 00131f40 [ 492.120285][ T5814] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5814 comm=syz.1.669 [ 493.296991][ T31] audit: type=1400 audit(493.070:236): avc: denied { mounton } for pid=5813 comm="syz.1.669" path="/303/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 495.403502][ T5822] fuse: Unknown parameter 'group_id00000000000000000003' [ 500.093937][ T5830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5830 comm=syz.1.674 [ 500.424699][ T5832] fuse: Bad value for 'user_id' [ 500.435848][ T5832] fuse: Bad value for 'user_id' [ 505.054118][ T5840] FAULT_INJECTION: forcing a failure. [ 505.054118][ T5840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.055605][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: syz.1.679 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 505.055677][ T5840] Hardware name: ARM-Versatile Express [ 505.055706][ T5840] Call trace: [ 505.055728][ T5840] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 505.055800][ T5840] r7:00000000 r6:00000000 r5:60000013 r4:8225c278 [ 505.055810][ T5840] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 505.055837][ T5840] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 505.055868][ T5840] r5:83ad5400 r4:82950650 [ 505.055875][ T5840] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 505.055904][ T5840] [<8096add8>] (should_fail_ex) from [<8096b014>] (should_fail+0x14/0x18) [ 505.055937][ T5840] r8:76b36f30 r7:00000000 r6:00000000 r5:dff99f68 r4:00000002 [ 505.055950][ T5840] [<8096b000>] (should_fail) from [<8096b034>] (should_fail_usercopy+0x1c/0x20) [ 505.055975][ T5840] [<8096b018>] (should_fail_usercopy) from [<8058fef8>] (simple_read_from_buffer+0x80/0x13c) [ 505.056003][ T5840] [<8058fe78>] (simple_read_from_buffer) from [<80607d50>] (proc_fail_nth_read+0xb8/0x100) [ 505.056040][ T5840] r10:00000001 r9:80607c98 r8:00000002 r7:dff99f68 r6:0000000f r5:76b36f30 [ 505.056052][ T5840] r4:83ad5400 r3:dff99e9f [ 505.056060][ T5840] [<80607c98>] (proc_fail_nth_read) from [<80554570>] (vfs_read+0x98/0x320) [ 505.056096][ T5840] r8:76b36f30 r7:dff99f68 r6:83ad5400 r5:0000000f r4:858f3a80 [ 505.056104][ T5840] [<805544d8>] (vfs_read) from [<80555218>] (ksys_read+0x74/0xe8) [ 505.056154][ T5840] r10:00000003 r9:83ad5400 r8:8020029c r7:00000000 r6:00000000 r5:858f3a80 [ 505.056174][ T5840] r4:858f3a83 [ 505.056190][ T5840] [<805551a4>] (ksys_read) from [<8055529c>] (sys_read+0x10/0x14) [ 505.056240][ T5840] r7:00000003 r6:00000006 r5:76b36f30 r4:0000000f [ 505.056255][ T5840] [<8055528c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 505.056300][ T5840] Exception stack(0xdff99fa8 to 0xdff99ff0) [ 505.056341][ T5840] 9fa0: 0000000f 76b36f30 00000006 76b36f30 0000000f 00000000 [ 505.056377][ T5840] 9fc0: 0000000f 76b36f30 00000006 00000003 002e0000 00000000 00006364 76b370bc [ 505.056403][ T5840] 9fe0: 00000158 76b36ed0 000d7d70 0012fe14 [ 505.833682][ T5846] fuse: Bad value for 'user_id' [ 505.834198][ T5846] fuse: Bad value for 'user_id' [ 510.772543][ T5859] fuse: Bad value for 'user_id' [ 510.775872][ T5859] fuse: Bad value for 'user_id' [ 511.522610][ T31] audit: type=1400 audit(511.310:237): avc: granted { setsecparam } for pid=5866 comm="syz.0.689" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 512.461034][ T5872] fuse: Bad value for 'fd' [ 516.269076][ T31] audit: type=1400 audit(516.030:238): avc: denied { create } for pid=5882 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 516.269712][ T31] audit: type=1400 audit(516.060:239): avc: denied { bind } for pid=5882 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 521.508054][ T31] audit: type=1400 audit(521.300:240): avc: denied { write } for pid=5898 comm="syz.1.699" path="socket:[8981]" dev="sockfs" ino=8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 522.593149][ T5901] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=42 sclass=netlink_audit_socket pid=5901 comm=syz.1.699 [ 527.656430][ T5908] fuse: Bad value for 'fd' [ 530.142533][ T31] audit: type=1400 audit(529.920:241): avc: granted { setsecparam } for pid=5917 comm="syz.1.705" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 530.892198][ T5924] FAULT_INJECTION: forcing a failure. [ 530.892198][ T5924] name failslab, interval 1, probability 0, space 0, times 0 [ 530.894039][ T5924] CPU: 1 UID: 0 PID: 5924 Comm: syz.1.706 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 530.894151][ T5924] Hardware name: ARM-Versatile Express [ 530.894179][ T5924] Call trace: [ 530.894220][ T5924] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 530.894346][ T5924] r7:00000d40 r6:00000000 r5:60000013 r4:8225c278 [ 530.894362][ T5924] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 530.894415][ T5924] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 530.894475][ T5924] r5:84efa400 r4:82919c00 [ 530.894491][ T5924] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 530.894574][ T5924] [<8096add8>] (should_fail_ex) from [<80522b74>] (should_failslab+0x6c/0x94) [ 530.894649][ T5924] r8:84efa400 r7:00000d40 r6:858f3da8 r5:0000001d r4:83001240 [ 530.894669][ T5924] [<80522b08>] (should_failslab) from [<80507904>] (__kmalloc_noprof+0x9c/0x458) [ 530.894726][ T5924] [<80507868>] (__kmalloc_noprof) from [<807c106c>] (tomoyo_encode2+0x64/0xf0) [ 530.894799][ T5924] r10:00000fff r9:8309e400 r8:00000000 r7:834d8440 r6:858f3da8 r5:847bcffc [ 530.894819][ T5924] r4:847bcfea [ 530.894834][ T5924] [<807c1008>] (tomoyo_encode2) from [<807c111c>] (tomoyo_encode+0x24/0x30) [ 530.894957][ T5924] r9:8309e400 r8:00000000 r7:834d8440 r6:858f3da8 r5:00001000 r4:847bcfeb [ 530.894975][ T5924] [<807c10f8>] (tomoyo_encode) from [<807c11a8>] (tomoyo_realpath_from_path+0x80/0x17c) [ 530.895032][ T5924] r5:00001000 r4:847bc000 [ 530.895049][ T5924] [<807c1128>] (tomoyo_realpath_from_path) from [<807bd2a8>] (tomoyo_path_number_perm+0xcc/0x22c) [ 530.895116][ T5924] r10:84efa400 r9:00000000 r8:00000003 r7:80041270 r6:00000004 r5:81cd65f8 [ 530.895138][ T5924] r4:858f3da8 r3:826c0200 [ 530.895154][ T5924] [<807bd1dc>] (tomoyo_path_number_perm) from [<807c1b88>] (tomoyo_file_ioctl+0x1c/0x20) [ 530.895223][ T5924] r9:858f3d80 r8:00000003 r7:20000040 r6:20000040 r5:80041270 r4:858f3d80 [ 530.895241][ T5924] [<807c1b6c>] (tomoyo_file_ioctl) from [<8076eb0c>] (security_file_ioctl+0x64/0x1e4) [ 530.895296][ T5924] [<8076eaa8>] (security_file_ioctl) from [<8056e1e8>] (sys_ioctl+0x4c/0xdc8) [ 530.895365][ T5924] r7:20000040 r6:858f3d81 r5:00000000 r4:80041270 [ 530.895382][ T5924] [<8056e19c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 530.895433][ T5924] Exception stack(0xdfab5fa8 to 0xdfab5ff0) [ 530.895474][ T5924] 5fa0: 00000000 00000000 00000003 80041270 20000040 00000000 [ 530.895511][ T5924] 5fc0: 00000000 00000000 0012fef0 00000036 002e0000 00000000 00006364 76b370bc [ 530.895540][ T5924] 5fe0: 76b36ec0 76b36eb0 000193a4 00131f40 [ 530.895576][ T5924] r10:00000036 r9:84efa400 r8:8020029c r7:00000036 r6:0012fef0 r5:00000000 [ 530.895596][ T5924] r4:00000000 [ 530.937108][ T5924] ERROR: Out of memory at tomoyo_realpath_from_path. [ 531.313298][ T31] audit: type=1400 audit(531.100:242): avc: denied { connect } for pid=5925 comm="syz.0.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 531.835404][ T31] audit: type=1400 audit(531.620:243): avc: denied { create } for pid=5925 comm="syz.0.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 532.217783][ T5935] fuse: Bad value for 'fd' [ 533.904808][ T31] audit: type=1400 audit(533.690:244): avc: denied { setopt } for pid=5939 comm="syz.1.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 536.587750][ T31] audit: type=1400 audit(536.380:245): avc: denied { write } for pid=5947 comm="syz.0.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 536.810969][ T5952] FAULT_INJECTION: forcing a failure. [ 536.810969][ T5952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.825929][ T5952] CPU: 1 UID: 0 PID: 5952 Comm: syz.0.715 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 536.826057][ T5952] Hardware name: ARM-Versatile Express [ 536.826083][ T5952] Call trace: [ 536.826120][ T5952] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 536.826258][ T5952] r7:200003c0 r6:00000000 r5:60000113 r4:8225c278 [ 536.826282][ T5952] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 536.826342][ T5952] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 536.826400][ T5952] r5:84efd400 r4:82950650 [ 536.826417][ T5952] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 536.826482][ T5952] [<8096add8>] (should_fail_ex) from [<8096b014>] (should_fail+0x14/0x18) [ 536.826554][ T5952] r8:00000000 r7:200003c0 r6:84ac0240 r5:00000000 r4:dfa25f20 [ 536.826573][ T5952] [<8096b000>] (should_fail) from [<8096b034>] (should_fail_usercopy+0x1c/0x20) [ 536.826621][ T5952] [<8096b018>] (should_fail_usercopy) from [<808ba568>] (_copy_from_iter+0x6c/0x7c8) [ 536.826686][ T5952] [<808ba4fc>] (_copy_from_iter) from [<8165e6c0>] (netlink_sendmsg+0x18c/0x444) [ 536.826774][ T5952] r10:00000000 r9:00000000 r8:dfa25f30 r7:856d5800 r6:00000028 r5:84dc2240 [ 536.826799][ T5952] r4:dfa25f20 [ 536.826816][ T5952] [<8165e534>] (netlink_sendmsg) from [<815308dc>] (__sock_sendmsg+0x44/0x78) [ 536.826914][ T5952] r10:00000000 r9:dfa25dc4 r8:dfa25dc4 r7:00000000 r6:85072c80 r5:dfa25f20 [ 536.826939][ T5952] r4:00000000 [ 536.826959][ T5952] [<81530898>] (__sock_sendmsg) from [<8153114c>] (____sys_sendmsg+0x298/0x2cc) [ 536.827036][ T5952] r7:00000000 r6:85072c80 r5:00004814 r4:dfa25f20 [ 536.827057][ T5952] [<81530eb4>] (____sys_sendmsg) from [<81532f58>] (___sys_sendmsg+0x9c/0xd0) [ 536.827139][ T5952] r10:dfa25e24 r9:20000440 r8:00004814 r7:00000000 r6:85072c80 r5:dfa25f20 [ 536.827165][ T5952] r4:00000000 [ 536.827188][ T5952] [<81532ebc>] (___sys_sendmsg) from [<815333f0>] (__sys_sendmsg+0x8c/0xe0) [ 536.827276][ T5952] r10:00000128 r9:84efd400 r8:858f3840 r7:00004814 r6:20000440 r5:858f3841 [ 536.827300][ T5952] r4:00000004 [ 536.827318][ T5952] [<81533364>] (__sys_sendmsg) from [<81533458>] (sys_sendmsg+0x14/0x18) [ 536.827395][ T5952] r8:8020029c r7:00000128 r6:0012fef0 r5:00000000 r4:00000000 [ 536.827418][ T5952] [<81533444>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 536.827480][ T5952] Exception stack(0xdfa25fa8 to 0xdfa25ff0) [ 536.827528][ T5952] 5fa0: 00000000 00000000 00000004 20000440 00004814 00000000 [ 536.827562][ T5952] 5fc0: 00000000 00000000 0012fef0 00000128 002e0000 00000000 00006364 76beb0bc [ 536.827621][ T5952] 5fe0: 76beaec0 76beaeb0 000193a4 00131f40 [ 537.701777][ T31] audit: type=1400 audit(537.490:246): avc: denied { ioctl } for pid=5953 comm="syz.0.716" path="socket:[9062]" dev="sockfs" ino=9062 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 541.282772][ T5965] fuse: Unknown parameter 'use00000000000000000000' [ 543.181270][ T31] audit: type=1400 audit(542.970:247): avc: denied { getopt } for pid=5971 comm="syz.0.722" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 544.449879][ T5977] fuse: Unknown parameter 'use00000000000000000000' [ 546.479625][ T31] audit: type=1400 audit(546.270:248): avc: denied { shutdown } for pid=5985 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 546.525826][ T31] audit: type=1400 audit(546.290:249): avc: denied { create } for pid=5985 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 548.714202][ T5995] fuse: Unknown parameter 'use00000000000000000000' [ 552.959090][ T6008] fuse: Unknown parameter 'user_i00000000000000000000' [ 553.357853][ T31] audit: type=1400 audit(553.150:250): avc: denied { append } for pid=6009 comm="syz.0.735" name="nullb0" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 553.474351][ T6010] ucma_write: process 921 (syz.0.735) changed security contexts after opening file descriptor, this is not allowed. [ 556.036965][ T6020] fuse: Unknown parameter 'user_i00000000000000000000' [ 559.462251][ T6045] fuse: Unknown parameter 'user_i00000000000000000000' [ 562.066557][ T31] audit: type=1400 audit(561.810:251): avc: denied { accept } for pid=6052 comm="syz.0.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 564.844590][ T6058] fuse: Unknown parameter 'user_id00000000000000000000' [ 566.396289][ T6076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6076 comm=syz.0.753 [ 566.410507][ T6076] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6076 comm=syz.0.753 [ 567.029616][ T6081] FAULT_INJECTION: forcing a failure. [ 567.029616][ T6081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.031259][ T6081] CPU: 0 UID: 0 PID: 6081 Comm: syz.0.755 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 567.031357][ T6081] Hardware name: ARM-Versatile Express [ 567.031379][ T6081] Call trace: [ 567.031413][ T6081] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 567.031525][ T6081] r7:dfa3de20 r6:00000000 r5:60000013 r4:8225c278 [ 567.031542][ T6081] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 567.031592][ T6081] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 567.031657][ T6081] r5:84ef8c00 r4:82950650 [ 567.031671][ T6081] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 567.031724][ T6081] [<8096add8>] (should_fail_ex) from [<8096b014>] (should_fail+0x14/0x18) [ 567.031781][ T6081] r8:00000000 r7:dfa3de20 r6:20000280 r5:00000000 r4:dfa3df20 [ 567.031796][ T6081] [<8096b000>] (should_fail) from [<8096b034>] (should_fail_usercopy+0x1c/0x20) [ 567.031839][ T6081] [<8096b018>] (should_fail_usercopy) from [<81532ddc>] (copy_msghdr_from_user+0x50/0x130) [ 567.031894][ T6081] [<81532d8c>] (copy_msghdr_from_user) from [<81532f34>] (___sys_sendmsg+0x78/0xd0) [ 567.031961][ T6081] r8:00000000 r7:00000000 r6:85035180 r5:dfa3df20 r4:dfa3de64 [ 567.031977][ T6081] [<81532ebc>] (___sys_sendmsg) from [<815333f0>] (__sys_sendmsg+0x8c/0xe0) [ 567.032047][ T6081] r10:00000128 r9:84ef8c00 r8:859fad80 r7:00000000 r6:20000280 r5:859fad81 [ 567.032073][ T6081] r4:00000003 [ 567.032093][ T6081] [<81533364>] (__sys_sendmsg) from [<81533458>] (sys_sendmsg+0x14/0x18) [ 567.032173][ T6081] r8:8020029c r7:00000128 r6:0012fef0 r5:00000000 r4:00000000 [ 567.032196][ T6081] [<81533444>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 567.032258][ T6081] Exception stack(0xdfa3dfa8 to 0xdfa3dff0) [ 567.032305][ T6081] dfa0: 00000000 00000000 00000003 20000280 00000000 00000000 [ 567.032344][ T6081] dfc0: 00000000 00000000 0012fef0 00000128 002e0000 00000000 00006364 76beb0bc [ 567.032375][ T6081] dfe0: 76beaec0 76beaeb0 000193a4 00131f40 [ 567.343574][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.342434][ T6091] FAULT_INJECTION: forcing a failure. [ 572.342434][ T6091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.344143][ T6091] CPU: 0 UID: 0 PID: 6091 Comm: syz.0.759 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 572.344251][ T6091] Hardware name: ARM-Versatile Express [ 572.344276][ T6091] Call trace: [ 572.344319][ T6091] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 572.344437][ T6091] r7:859f8700 r6:00000000 r5:60000013 r4:8225c278 [ 572.344460][ T6091] [<80201ae4>] (show_stack) from [<8021fe00>] (dump_stack_lvl+0x70/0x7c) [ 572.344524][ T6091] [<8021fd90>] (dump_stack_lvl) from [<8021fe24>] (dump_stack+0x18/0x1c) [ 572.344594][ T6091] r5:838bc800 r4:82950650 [ 572.344611][ T6091] [<8021fe0c>] (dump_stack) from [<8096af9c>] (should_fail_ex+0x1c4/0x228) [ 572.344672][ T6091] [<8096add8>] (should_fail_ex) from [<8096b014>] (should_fail+0x14/0x18) [ 572.344728][ T6091] r8:854b2f00 r7:859f8700 r6:000200cc r5:0000000e r4:00000000 [ 572.344744][ T6091] [<8096b000>] (should_fail) from [<8096b034>] (should_fail_usercopy+0x1c/0x20) [ 572.344788][ T6091] [<8096b018>] (should_fail_usercopy) from [<803cf1a0>] (generic_map_update_batch+0x1b8/0x46c) [ 572.344901][ T6091] [<803cefe8>] (generic_map_update_batch) from [<803ca584>] (bpf_map_do_batch+0x220/0x240) [ 572.344968][ T6091] r10:859fa300 r9:20000680 r8:859f8700 r7:859fa301 r6:803cefe8 r5:dfc65ec0 [ 572.344987][ T6091] r4:859f8790 [ 572.345005][ T6091] [<803ca364>] (bpf_map_do_batch) from [<803d1968>] (__sys_bpf+0x5f8/0x1fd0) [ 572.345070][ T6091] r10:b5403587 r9:20000680 r8:00000000 r7:00000000 r6:0000001a r5:dfc65e90 [ 572.345091][ T6091] r4:00000038 r3:00000000 [ 572.345106][ T6091] [<803d1370>] (__sys_bpf) from [<803d38e0>] (sys_bpf+0x2c/0x48) [ 572.345169][ T6091] r10:00000182 r9:838bc800 r8:8020029c r7:00000182 r6:0012fef0 r5:00000000 [ 572.345190][ T6091] r4:00000000 [ 572.345205][ T6091] [<803d38b4>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 572.345253][ T6091] Exception stack(0xdfc65fa8 to 0xdfc65ff0) [ 572.345291][ T6091] 5fa0: 00000000 00000000 0000001a 20000680 00000038 00000000 [ 572.345324][ T6091] 5fc0: 00000000 00000000 0012fef0 00000182 002e0000 00000000 00006364 76beb0bc [ 572.345350][ T6091] 5fe0: 76beaec0 76beaeb0 000193a4 00131f40 [ 573.236116][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 573.416229][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 573.453962][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 573.455898][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.456864][ T10] usb 1-1: Product: syz [ 573.457511][ T10] usb 1-1: Manufacturer: syz [ 573.458180][ T10] usb 1-1: SerialNumber: syz [ 573.466180][ T10] usb 1-1: config 0 descriptor?? [ 583.730971][ T23] usb 1-1: USB disconnect, device number 7 [ 607.367180][ T31] audit: type=1400 audit(607.160:252): avc: denied { append } for pid=6127 comm="syz.0.769" name="ttyS3" dev="devtmpfs" ino=607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:restorecond_var_run_t:s0" [ 609.060620][ T6132] syzkaller0: entered promiscuous mode [ 609.063393][ T6132] syzkaller0: entered allmulticast mode [ 610.005806][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 610.186276][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 610.225531][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 610.244054][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 610.246013][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.247317][ T9] usb 2-1: Product: syz [ 610.248169][ T9] usb 2-1: Manufacturer: syz [ 610.249112][ T9] usb 2-1: SerialNumber: syz [ 610.263320][ T9] usb 2-1: config 0 descriptor?? [ 612.268976][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'. [ 612.936102][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 613.095651][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 613.155558][ T9] usb 1-1: config 0 has no interfaces? [ 613.156014][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 613.156246][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.167798][ T9] usb 1-1: config 0 descriptor?? [ 613.605885][ T3053] usb 1-1: USB disconnect, device number 8 [ 615.475651][ T31] audit: type=1400 audit(615.250:253): avc: denied { connect } for pid=6168 comm="syz.0.776" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 615.476167][ T31] audit: type=1400 audit(615.260:254): avc: denied { write } for pid=6168 comm="syz.0.776" laddr=fe80::a4aa:48ff:fe74:7cb6 lport=60 faddr=ff02::1 fport=65533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 620.704888][ T9] usb 2-1: USB disconnect, device number 14 [ 631.781517][ T6198] netlink: 'syz.0.785': attribute type 2 has an invalid length. [ 631.782042][ T6198] netlink: 'syz.0.785': attribute type 1 has an invalid length. [ 633.278592][ T31] audit: type=1400 audit(633.070:255): avc: denied { create } for pid=6203 comm="syz.0.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 633.345748][ T31] audit: type=1400 audit(633.100:256): avc: denied { setopt } for pid=6203 comm="syz.0.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 636.570461][ T31] audit: type=1400 audit(636.360:257): avc: denied { connect } for pid=6210 comm="syz.0.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 636.574099][ T31] audit: type=1400 audit(636.360:258): avc: denied { bind } for pid=6210 comm="syz.0.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 636.839212][ T31] audit: type=1400 audit(636.580:259): avc: denied { getopt } for pid=6210 comm="syz.0.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 637.874034][ T6216] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 658.276279][ T31] audit: type=1400 audit(658.060:260): avc: denied { create } for pid=6234 comm="syz.1.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 662.326758][ T6245] netlink: 64 bytes leftover after parsing attributes in process `syz.1.801'. [ 683.359373][ T31] audit: type=1400 audit(683.150:261): avc: denied { accept } for pid=6256 comm="syz.0.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 684.061832][ T6270] syz.0.806 uses obsolete (PF_INET,SOCK_PACKET) [ 702.975482][ T6299] process 'syz.0.815' launched './file2' with NULL argv: empty string added [ 703.005275][ T31] audit: type=1400 audit(702.770:262): avc: denied { execute_no_trans } for pid=6298 comm="syz.0.815" path="/454/file2" dev="tmpfs" ino=2391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 704.241490][ T6304] bpf setsockopt: ignoring program buffer with optlen=64993 (max_optlen=4096) [ 704.577605][ T6306] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 714.745603][ T31] audit: type=1400 audit(714.490:263): avc: denied { write } for pid=6311 comm="syz.0.819" name="ttyS3" dev="devtmpfs" ino=607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:restorecond_var_run_t:s0" [ 714.746122][ T31] audit: type=1400 audit(714.520:264): avc: denied { setopt } for pid=6311 comm="syz.0.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 737.087475][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'. [ 742.241068][ T6343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.825'. [ 742.244123][ T6343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.825'. [ 743.018466][ T31] audit: type=1400 audit(742.800:265): avc: denied { name_bind } for pid=6348 comm="syz.1.826" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 744.261526][ T6358] comedi comedi3: 8255: I/O port conflict (0xfffffffb,4) [ 744.297572][ T6358] 8<--- cut here --- [ 744.297837][ T6358] Unable to handle kernel paging request at virtual address fee02169 when write [ 744.297970][ T6358] [fee02169] *pgd=80000080007003, *pmd=00000000 [ 744.298897][ T6358] Internal error: Oops: a06 [#1] SMP ARM [ 744.300267][ T6358] Modules linked in: [ 744.300737][ T6358] CPU: 0 UID: 0 PID: 6358 Comm: syz.1.830 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT [ 744.301099][ T6358] Hardware name: ARM-Versatile Express [ 744.301380][ T6358] PC is at subdev_8255_io+0x60/0x6c [ 744.301794][ T6358] LR is at subdev_8255_io+0x4c/0x6c [ 744.302095][ T6358] pc : [<813a4c38>] lr : [<813a4c24>] psr: 60000013 [ 744.302683][ T6358] sp : dfa89cc0 ip : dfa89cc0 fp : dfa89cdc [ 744.303299][ T6358] r10: 00000001 r9 : 00000000 r8 : 00000084 [ 744.303649][ T6358] r7 : 00002166 r6 : 0000009b r5 : 840c4300 r4 : 00002169 [ 744.304238][ T6358] r3 : 0000009b r2 : fee02169 r1 : 00000001 r0 : 840c4300 [ 744.304666][ T6358] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 744.305396][ T6358] Control: 30c5387d Table: 858df1c0 DAC: fffffffd [ 744.306411][ T6358] Register r0 information: slab kmalloc-192 start 840c4300 pointer offset 0 size 192 [ 744.316219][ T6358] Register r1 information: non-paged memory [ 744.317072][ T6358] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 744.317801][ T6358] Register r3 information: non-paged memory [ 744.318128][ T6358] Register r4 information: non-paged memory [ 744.318458][ T6358] Register r5 information: slab kmalloc-192 start 840c4300 pointer offset 0 size 192 [ 744.319069][ T6358] Register r6 information: non-paged memory [ 744.319379][ T6358] Register r7 information: non-paged memory [ 744.319694][ T6358] Register r8 information: non-paged memory [ 744.320028][ T6358] Register r9 information: NULL pointer [ 744.320328][ T6358] Register r10 information: non-paged memory [ 744.320653][ T6358] Register r11 information: 2-page vmalloc region starting at 0xdfa88000 allocated at kernel_clone+0xac/0x3e4 [ 744.321256][ T6358] Register r12 information: 2-page vmalloc region starting at 0xdfa88000 allocated at kernel_clone+0xac/0x3e4 [ 744.321993][ T6358] Process syz.1.830 (pid: 6358, stack limit = 0xdfa88000) [ 744.322407][ T6358] Stack: (0xdfa89cc0 to 0xdfa8a000) [ 744.323644][ T6358] 9cc0: 813a4bd8 840c4300 00002166 00002166 dfa89cfc dfa89ce0 813a4910 813a4be4 [ 744.326120][ T6358] 9ce0: 00002166 80507874 85507884 85507884 dfa89d1c dfa89d00 813a4cd0 813a48c4 [ 744.329753][ T6358] 9d00: 85507884 840c4300 dfa89db0 00002166 dfa89d5c dfa89d20 813a4ec4 813a4c50 [ 744.335193][ T6358] 9d20: 00000013 85441b00 82822670 00000000 00000000 829c53f0 840c4300 00000000 [ 744.337136][ T6358] 9d40: dfa89d98 840c4300 00000000 82b15078 dfa89d94 dfa89d60 81393de8 813a4e14 [ 744.340300][ T6358] 9d60: 20000140 00000000 dfa89d84 20000140 840c4300 b5403587 20000140 83ae3c00 [ 744.342409][ T6358] 9d80: 40946400 00000003 dfa89e4c dfa89d98 8138fa78 81393cf0 35353238 00000000 [ 744.343514][ T6358] 9da0: 00000000 00000000 00000000 fffffffb 00002166 00000000 00100000 000088d6 [ 744.343961][ T6358] 9dc0: 0000008f fffffffd 00000010 00000002 ffffffff 00000200 00000fff 00000344 [ 744.344351][ T6358] 9de0: 00000001 00000002 00000200 00000009 00000003 00000003 0000000e 00000004 [ 744.344729][ T6358] 9e00: 00000000 00000080 000007ff 00000001 00000001 0000b0c4 000007df 00000008 [ 744.345724][ T6358] 9e20: 000000f3 00000001 00000000 8d3af1d3 00000000 859fa840 840c4300 20000140 [ 744.346441][ T6358] 9e40: dfa89f14 dfa89e50 81390a2c 8138f9ac 00000000 00000000 00000000 8d3af1d3 [ 744.346854][ T6358] 9e60: 00000000 00000000 8246a3fc 0000005f 83bed858 840c4330 840e9e64 83ae3c00 [ 744.354778][ T6358] 9e80: dfa89ee4 dfa89e90 80795a14 8078bd04 00000064 00000001 00000000 dfa89eac [ 744.355799][ T6358] 9ea0: 857dab50 8342f880 00006400 0000000b dfa89ea0 00000000 00000000 8d3af1d3 [ 744.356257][ T6358] 9ec0: 859fa840 40946400 20000140 20000140 00000003 859fa840 dfa89ef4 dfa89ee8 [ 744.356655][ T6358] 9ee0: 80795b34 8d3af1d3 dfa89f14 40946400 00000000 859fa841 20000140 00000003 [ 744.357048][ T6358] 9f00: 859fa840 83ae3c00 dfa89fa4 dfa89f18 8056e2cc 8139045c ecac8b10 83ae3c00 [ 744.357470][ T6358] 9f20: dfa89f3c dfa89f30 81a2d0a8 81a2cf78 dfa89f54 dfa89f40 80261ffc 80293598 [ 744.357873][ T6358] 9f40: dfa89fb0 40000000 dfa89f84 dfa89f58 802229ec 80261fb8 00000000 8281d09c [ 744.358286][ T6358] 9f60: dfa89fb0 0014c4a0 ecac8b10 80222940 00000000 8d3af1d3 dfa89fac 00000000 [ 744.358668][ T6358] 9f80: 00000000 002f6300 00000036 8020029c 83ae3c00 00000036 00000000 dfa89fa8 [ 744.359104][ T6358] 9fa0: 80200060 8056e1a8 00000000 00000000 00000003 40946400 20000140 00000000 [ 744.359526][ T6358] 9fc0: 00000000 00000000 002f6300 00000036 002e0000 00000000 00006364 76b370bc [ 744.359833][ T6358] 9fe0: 76b36ec0 76b36eb0 000193a4 00131f40 60000010 00000003 00000000 00000000 [ 744.360223][ T6358] Call trace: [ 744.360507][ T6358] [<813a4bd8>] (subdev_8255_io) from [<813a4910>] (subdev_8255_do_config+0x58/0x60) [ 744.361028][ T6358] r7:00002166 r6:00002166 r5:840c4300 r4:813a4bd8 [ 744.361351][ T6358] [<813a48b8>] (subdev_8255_do_config) from [<813a4cd0>] (subdev_8255_io_init+0x8c/0x9c) [ 744.361843][ T6358] r4:85507884 [ 744.362080][ T6358] [<813a4c44>] (subdev_8255_io_init) from [<813a4ec4>] (dev_8255_attach+0xbc/0x114) [ 744.362582][ T6358] r7:00002166 r6:dfa89db0 r5:840c4300 r4:85507884 [ 744.362885][ T6358] [<813a4e08>] (dev_8255_attach) from [<81393de8>] (comedi_device_attach+0x104/0x240) [ 744.363546][ T6358] r10:82b15078 r9:00000000 r8:840c4300 r7:dfa89d98 r6:00000000 r5:840c4300 [ 744.363954][ T6358] r4:829c53f0 [ 744.364186][ T6358] [<81393ce4>] (comedi_device_attach) from [<8138fa78>] (do_devconfig_ioctl+0xd8/0x1e0) [ 744.364641][ T6358] r10:00000003 r9:40946400 r8:83ae3c00 r7:20000140 r6:b5403587 r5:840c4300 [ 744.366380][ T6358] r4:20000140 [ 744.367661][ T6358] [<8138f9a0>] (do_devconfig_ioctl) from [<81390a2c>] (comedi_unlocked_ioctl+0x5dc/0x1b94) [ 744.374100][ T6358] r6:20000140 r5:840c4300 r4:859fa840 [ 744.375373][ T6358] [<81390450>] (comedi_unlocked_ioctl) from [<8056e2cc>] (sys_ioctl+0x130/0xdc8) [ 744.387469][ T6358] r10:83ae3c00 r9:859fa840 r8:00000003 r7:20000140 r6:859fa841 r5:00000000 [ 744.387951][ T6358] r4:40946400 [ 744.388183][ T6358] [<8056e19c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 744.388616][ T6358] Exception stack(0xdfa89fa8 to 0xdfa89ff0) [ 744.388948][ T6358] 9fa0: 00000000 00000000 00000003 40946400 20000140 00000000 [ 744.389367][ T6358] 9fc0: 00000000 00000000 002f6300 00000036 002e0000 00000000 00006364 76b370bc [ 744.389816][ T6358] 9fe0: 76b36ec0 76b36eb0 000193a4 00131f40 [ 744.390156][ T6358] r10:00000036 r9:83ae3c00 r8:8020029c r7:00000036 r6:002f6300 r5:00000000 [ 744.390519][ T6358] r4:00000000 [ 744.391006][ T6358] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 744.391743][ T6358] ---[ end trace 0000000000000000 ]--- [ 744.392583][ T6358] Kernel panic - not syncing: Fatal exception [ 744.394918][ T6358] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:09:10 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=00000000 R02=00000000 R03=60000193 R04=00000000 R05=83ae3c00 R06=82820850 R07=00000000 R08=00000000 R09=83ae3c00 R10=00000001 R11=dfa89a84 R12=dfa89a88 R13=dfa89a00 R14=802e5e30 R15=802e438c PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=ffffffff R01=00000004 R02=000001e4 R03=00000000 R04=00000000 R05=00000069 R06=00000000 R07=00000000 R08=002e0000 R09=00000000 R10=00006364 R11=76beb0bc R12=200001e0 R13=200001e0 R14=00019440 R15=00019440 PSR=20000010 --C- A S usr32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000