last executing test programs: 6m32.814114968s ago: executing program 1 (id=913): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x70000000, 0x2]}, 0x8) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) dup3(r1, r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2d, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x800) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x3}, 0x18) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f00)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[], 0x214}}, 0x40081) syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x191840) creat(&(0x7f0000000200)='./file0\x00', 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004a40)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, 0x0, 0x0) recvfrom$unix(r4, &(0x7f00000001c0)=""/154, 0x9a, 0x0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 6m28.153547651s ago: executing program 1 (id=923): r0 = socket$nl_route(0x10, 0x3, 0x0) keyctl$dh_compute(0x17, &(0x7f0000001ac0), 0x0, 0x0, &(0x7f0000002bc0)={0x0, &(0x7f0000001bc0)="1b8889b8b3b71a3ff0495d55f8c65cc1f95ef064e70bbef6c2001a555c95befebffd5b1e03d25de712be11622b142c7a2b7d9889c828e15be7c32aed31f3f41a4e", 0x41}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$KDGKBMODE(r1, 0x5451, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_NOTIFY_RESEND(r3, &(0x7f0000000fc0)={0x14}, 0x14) r4 = dup(r2) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40186417, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = dup(r5) write$cgroup_netprio_ifpriomap(r6, 0x0, 0x0) write$FUSE_LK(r0, &(0x7f00000050c0)={0x28, 0xfffffffffffffff5, 0x0, {{0x81, 0x5acb}}}, 0x28) 6m26.023718192s ago: executing program 1 (id=928): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) inotify_init1(0x0) (async) r1 = accept4(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000100)=0x80, 0x80000) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = openat$selinux_mls(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0x5450, 0x0) (async) syz_clone3(&(0x7f0000000440)={0x80, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)=0x0, {0x7}, &(0x7f0000000280)=""/158, 0x9e, &(0x7f0000000340)=""/161, &(0x7f0000000400)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0xa, {r0}}, 0x58) (async) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x2404c0e4}, 0x0) (async) timer_create(0x0, &(0x7f00000004c0)={0x0, 0x26, 0x4, @tid=r4}, &(0x7f0000000500)) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000200)={'xfrm0\x00', {0x2, 0x0, @empty}}) ioctl$sock_SIOCADDDLCI(r1, 0x5450, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r7, 0x5451, 0x0) 6m19.381103229s ago: executing program 1 (id=938): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)=""/118, 0x76}], 0x1}, 0xd335}], 0x1, 0x2120, 0x0) 6m14.053595276s ago: executing program 1 (id=939): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "232cdaeb4a02"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2001"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x1, 0xe, "7e1a99617f388885ed05851a69eb"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400f0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m5.806496524s ago: executing program 1 (id=940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x3ff, &(0x7f0000000500)) 5m19.785057399s ago: executing program 32 (id=940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x3ff, &(0x7f0000000500)) 37.323770155s ago: executing program 2 (id=1097): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="500500003e000701feffffff00000000017c0000040042800c00018006000600800a00002c050280280514802405068004"], 0x550}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 37.04192459s ago: executing program 2 (id=1098): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x1) 36.813638792s ago: executing program 2 (id=1099): bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) msgget$private(0x0, 0x458) msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x2000, 0x0) 22.204791659s ago: executing program 2 (id=1105): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) fsopen(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) 17.716397522s ago: executing program 0 (id=1106): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 16.063585027s ago: executing program 0 (id=1107): r0 = semget$private(0x0, 0x4000000009, 0x668) semop(r0, &(0x7f00000002c0)=[{0x0, 0x9b6a, 0x1000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 15.165114674s ago: executing program 0 (id=1108): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 14.611556853s ago: executing program 0 (id=1109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 8.633993023s ago: executing program 2 (id=1110): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000440)={0xc, @dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0x3, 'lc\x00', 0x4, 0x0, 0x1a}, 0xe) socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 8.433065633s ago: executing program 2 (id=1111): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003a80)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) 318.318324ms ago: executing program 0 (id=1112): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x5, 0x481, 0x1, {0x0, 0xea60}, {0x0, 0x2710}, {0x3, 0x0, 0x1, 0x1}, 0x1, @can={{0x2, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "5f1075394a529216"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4044) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r3, {0x1}, {0x9, 0xc}, {0xfff2, 0x6}}}, 0x24}}, 0x40044) socket(0x10, 0x2, 0x0) close(0x4) 0s ago: executing program 0 (id=1113): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) kernel console output (not intermixed with test programs): _t tclass=unix_dgram_socket permissive=1 [ 186.162474][ T4589] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4589 comm=syz.0.226 [ 188.038223][ T4596] capability: warning: `syz.1.228' uses 32-bit capabilities (legacy support in use) [ 188.454733][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 188.622556][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 188.623062][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.623150][ T9] usb 2-1: Product: syz [ 188.623917][ T9] usb 2-1: Manufacturer: syz [ 188.624000][ T9] usb 2-1: SerialNumber: syz [ 190.459476][ T4613] FAULT_INJECTION: forcing a failure. [ 190.459476][ T4613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.461259][ T4613] CPU: 1 UID: 0 PID: 4613 Comm: syz.0.233 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 190.461366][ T4613] Hardware name: ARM-Versatile Express [ 190.461389][ T4613] Call trace: [ 190.461428][ T4613] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 190.461535][ T4613] r7:00000000 r6:00000000 r5:60000013 r4:8225b448 [ 190.461552][ T4613] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 190.461598][ T4613] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 190.461654][ T4613] r5:858ad400 r4:82950610 [ 190.461669][ T4613] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 190.461723][ T4613] [<80964b58>] (should_fail_ex) from [<80964d94>] (should_fail+0x14/0x18) [ 190.461782][ T4613] r8:eb7adeb8 r7:00000000 r6:00000001 r5:76b61f30 r4:00000001 [ 190.461798][ T4613] [<80964d80>] (should_fail) from [<80964db4>] (should_fail_usercopy+0x1c/0x20) [ 190.461844][ T4613] [<80964d98>] (should_fail_usercopy) from [<808bcef8>] (kstrtouint_from_user+0x54/0x13c) [ 190.461891][ T4613] [<808bcea4>] (kstrtouint_from_user) from [<80602b5c>] (proc_fail_nth_write+0x40/0xe8) [ 190.461952][ T4613] r8:eb7adf68 r7:858ad400 r6:00000001 r5:85d25600 r4:00000001 [ 190.461969][ T4613] [<80602b1c>] (proc_fail_nth_write) from [<8054e4c4>] (vfs_write+0xac/0x44c) [ 190.462023][ T4613] r5:85d25600 r4:80602b1c [ 190.462038][ T4613] [<8054e418>] (vfs_write) from [<8054e9d4>] (ksys_write+0x74/0xe8) [ 190.462097][ T4613] r10:00000004 r9:858ad400 r8:8020029c r7:00000000 r6:00000002 r5:85d25600 [ 190.462115][ T4613] r4:85d25603 [ 190.462129][ T4613] [<8054e960>] (ksys_write) from [<8054ea58>] (sys_write+0x10/0x14) [ 190.462184][ T4613] r7:00000004 r6:00000004 r5:76b61f30 r4:00000001 [ 190.462198][ T4613] [<8054ea48>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 190.462240][ T4613] Exception stack(0xeb7adfa8 to 0xeb7adff0) [ 190.462274][ T4613] dfa0: 00000001 76b61f30 00000004 76b61f30 00000001 00000000 [ 190.462306][ T4613] dfc0: 00000001 76b61f30 00000004 00000004 002e0000 00000000 00006364 76b620bc [ 190.462330][ T4613] dfe0: 00000158 76b61ed0 000d7df0 0012ff5c [ 198.239811][ T46] usb 2-1: USB disconnect, device number 2 [ 201.557380][ T31] audit: type=1400 audit(201.480:215): avc: denied { read } for pid=4629 comm="syz.0.236" path="socket:[5248]" dev="sockfs" ino=5248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 205.639026][ T4648] FAULT_INJECTION: forcing a failure. [ 205.639026][ T4648] name fail_futex, interval 1, probability 0, space 0, times 1 [ 205.639609][ T4648] CPU: 1 UID: 0 PID: 4648 Comm: syz.1.237 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 205.639700][ T4648] Hardware name: ARM-Versatile Express [ 205.639723][ T4648] Call trace: [ 205.639764][ T4648] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 205.639872][ T4648] r7:ec199dd0 r6:00000000 r5:60000013 r4:8225b448 [ 205.639891][ T4648] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 205.639940][ T4648] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 205.639990][ T4648] r5:84130c00 r4:828f9bd8 [ 205.640008][ T4648] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 205.640070][ T4648] [<80964b58>] (should_fail_ex) from [<80964d94>] (should_fail+0x14/0x18) [ 205.640132][ T4648] r8:00000000 r7:ec199dd0 r6:00000004 r5:00000000 r4:76af2628 [ 205.640150][ T4648] [<80964d80>] (should_fail) from [<80347d98>] (get_futex_key+0xa4/0x580) [ 205.640204][ T4648] [<80347cf4>] (get_futex_key) from [<8034c0d0>] (futex_wake+0x64/0x1b4) [ 205.640268][ T4648] r10:85cf4000 r9:00000002 r8:ec199e90 r7:ec199dc8 r6:00000001 r5:ffffffff [ 205.640288][ T4648] r4:00000012 [ 205.640303][ T4648] [<8034c06c>] (futex_wake) from [<80348e84>] (do_futex+0x100/0x1b4) [ 205.640363][ T4648] r10:85cf4000 r9:00000002 r8:ec199e90 r7:85cf4000 r6:00000000 r5:b5403587 [ 205.640382][ T4648] r4:00000001 [ 205.640407][ T4648] [<80348d84>] (do_futex) from [<802542f0>] (mm_release+0xc4/0xc8) [ 205.640463][ T4648] r4:84130c00 [ 205.640483][ T4648] [<8025422c>] (mm_release) from [<80255ae8>] (exit_mm_release+0x24/0x28) [ 205.640539][ T4648] r5:84013900 r4:84130c00 [ 205.640557][ T4648] [<80255ac4>] (exit_mm_release) from [<8025f294>] (do_exit+0x1c8/0xaa8) [ 205.640613][ T4648] r5:84130c00 r4:84013900 [ 205.640630][ T4648] [<8025f0cc>] (do_exit) from [<8025fd34>] (do_group_exit+0x40/0x8c) [ 205.640677][ T4648] r7:00131fc0 [ 205.640696][ T4648] [<8025fcf4>] (do_group_exit) from [<80270a44>] (get_signal+0xa14/0xa38) [ 205.640753][ T4648] r7:00131fc0 r4:84130c00 [ 205.640771][ T4648] [<80270030>] (get_signal) from [<8022b8e8>] (do_work_pending+0x118/0x4f8) [ 205.640841][ T4648] r10:00000036 r9:ffffffe7 r8:8020029c r7:00131fc0 r6:8020029c r5:ec199fb0 [ 205.640863][ T4648] r4:84130c00 [ 205.640878][ T4648] [<8022b7d0>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 205.640925][ T4648] Exception stack(0xec199fb0 to 0xec199ff8) [ 205.640959][ T4648] 9fa0: ffffffe7 00007005 00000000 00000000 [ 205.640990][ T4648] 9fc0: 00000000 00000000 0012ff70 00000036 002e0000 00000000 00006364 76af20bc [ 205.641019][ T4648] 9fe0: 76af1ec0 76af1eb0 000193a4 00131fc0 60000010 00000004 [ 205.641056][ T4648] r10:00000036 r9:84130c00 r8:8020029c r7:00000036 r6:0012ff70 r5:00000000 [ 205.641075][ T4648] r4:00000000 [ 205.775676][ T4654] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 205.776225][ T4654] audit: out of memory in audit_log_start [ 207.824394][ T4642] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 208.088644][ T31] audit: type=1400 audit(208.010:216): avc: denied { bind } for pid=4670 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 208.119556][ T4673] FAULT_INJECTION: forcing a failure. [ 208.119556][ T4673] name failslab, interval 1, probability 0, space 0, times 0 [ 208.120232][ T4673] CPU: 1 UID: 0 PID: 4673 Comm: syz.0.243 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 208.120312][ T4673] Hardware name: ARM-Versatile Express [ 208.120340][ T4673] Call trace: [ 208.120389][ T4673] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 208.120491][ T4673] r7:00000c40 r6:00000000 r5:60000013 r4:8225b448 [ 208.120515][ T4673] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 208.120563][ T4673] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 208.120621][ T4673] r5:84130c00 r4:82919a80 [ 208.120638][ T4673] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 208.120694][ T4673] [<80964b58>] (should_fail_ex) from [<8051c1e4>] (should_failslab+0x6c/0x94) [ 208.120761][ T4673] r8:84130c00 r7:00000c40 r6:85d254a8 r5:00001000 r4:830016c0 [ 208.120780][ T4673] [<8051c178>] (should_failslab) from [<80500f78>] (__kmalloc_noprof+0x9c/0x458) [ 208.120827][ T4673] [<80500edc>] (__kmalloc_noprof) from [<807baed4>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 208.120885][ T4673] r10:84130c00 r9:8309e400 r8:00000000 r7:834fe550 r6:85d254a8 r5:00001000 [ 208.120905][ T4673] r4:00000000 [ 208.120920][ T4673] [<807bae98>] (tomoyo_realpath_from_path) from [<807b7018>] (tomoyo_path_number_perm+0xcc/0x22c) [ 208.120980][ T4673] r10:84130c00 r9:00000000 r8:00000003 r7:00005421 r6:00000004 r5:81cd6278 [ 208.120998][ T4673] r4:85d254a8 r3:826c0200 [ 208.121011][ T4673] [<807b6f4c>] (tomoyo_path_number_perm) from [<807bb8f8>] (tomoyo_file_ioctl+0x1c/0x20) [ 208.121069][ T4673] r9:85d25480 r8:00000003 r7:20000a00 r6:20000a00 r5:00005421 r4:85d25480 [ 208.121087][ T4673] [<807bb8dc>] (tomoyo_file_ioctl) from [<8076887c>] (security_file_ioctl+0x64/0x1e4) [ 208.121131][ T4673] [<80768818>] (security_file_ioctl) from [<805678a8>] (sys_ioctl+0x4c/0xdc8) [ 208.121180][ T4673] r7:20000a00 r6:85d25481 r5:00000000 r4:00005421 [ 208.121197][ T4673] [<8056785c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 208.121240][ T4673] Exception stack(0xeb8adfa8 to 0xeb8adff0) [ 208.121279][ T4673] dfa0: 00000000 00000000 00000003 00005421 20000a00 00000000 [ 208.121311][ T4673] dfc0: 00000000 00000000 0012ff70 00000036 002e0000 00000000 00006364 76b620bc [ 208.121336][ T4673] dfe0: 76b61ec0 76b61eb0 000193a4 00131fc0 [ 208.121371][ T4673] r10:00000036 r9:84130c00 r8:8020029c r7:00000036 r6:0012ff70 r5:00000000 [ 208.121388][ T4673] r4:00000000 [ 208.145348][ T4673] ERROR: Out of memory at tomoyo_realpath_from_path. [ 208.322314][ T31] audit: type=1400 audit(208.240:217): avc: denied { setattr } for pid=4676 comm="syz.0.245" name="KCM" dev="sockfs" ino=5300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 208.326269][ T4679] FAULT_INJECTION: forcing a failure. [ 208.326269][ T4679] name failslab, interval 1, probability 0, space 0, times 0 [ 208.327836][ T4679] CPU: 1 UID: 0 PID: 4679 Comm: syz.1.246 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 208.327940][ T4679] Hardware name: ARM-Versatile Express [ 208.327966][ T4679] Call trace: [ 208.328005][ T4679] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 208.328109][ T4679] r7:00000d40 r6:00000000 r5:60000013 r4:8225b448 [ 208.328128][ T4679] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 208.328181][ T4679] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 208.328234][ T4679] r5:858a9800 r4:82919a80 [ 208.328251][ T4679] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 208.328311][ T4679] [<80964b58>] (should_fail_ex) from [<8051c1e4>] (should_failslab+0x6c/0x94) [ 208.328383][ T4679] r8:858a9800 r7:00000d40 r6:85d25628 r5:0000001c r4:83001240 [ 208.328402][ T4679] [<8051c178>] (should_failslab) from [<80500f78>] (__kmalloc_noprof+0x9c/0x458) [ 208.328450][ T4679] [<80500edc>] (__kmalloc_noprof) from [<807baddc>] (tomoyo_encode2+0x64/0xf0) [ 208.328560][ T4679] r10:00000fff r9:8309e400 r8:00000000 r7:834fe088 r6:85d25628 r5:85ddcffc [ 208.328589][ T4679] r4:85ddcfeb [ 208.328632][ T4679] [<807bad78>] (tomoyo_encode2) from [<807bae8c>] (tomoyo_encode+0x24/0x30) [ 208.328696][ T4679] r9:8309e400 r8:00000000 r7:834fe088 r6:85d25628 r5:00001000 r4:85ddcfec [ 208.328712][ T4679] [<807bae68>] (tomoyo_encode) from [<807baf18>] (tomoyo_realpath_from_path+0x80/0x17c) [ 208.328763][ T4679] r5:00001000 r4:85ddc000 [ 208.328778][ T4679] [<807bae98>] (tomoyo_realpath_from_path) from [<807b7018>] (tomoyo_path_number_perm+0xcc/0x22c) [ 208.328846][ T4679] r10:858a9800 r9:00000000 r8:00000003 r7:00005451 r6:00000004 r5:81cd6278 [ 208.328868][ T4679] r4:85d25628 r3:826c0200 [ 208.328886][ T4679] [<807b6f4c>] (tomoyo_path_number_perm) from [<807bb8f8>] (tomoyo_file_ioctl+0x1c/0x20) [ 208.328951][ T4679] r9:85d25600 r8:00000003 r7:00000000 r6:00000000 r5:00005451 r4:85d25600 [ 208.328969][ T4679] [<807bb8dc>] (tomoyo_file_ioctl) from [<8076887c>] (security_file_ioctl+0x64/0x1e4) [ 208.329014][ T4679] [<80768818>] (security_file_ioctl) from [<805678a8>] (sys_ioctl+0x4c/0xdc8) [ 208.329074][ T4679] r7:00000000 r6:85d25601 r5:00000000 r4:00005451 [ 208.329092][ T4679] [<8056785c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 208.329136][ T4679] Exception stack(0xec2adfa8 to 0xec2adff0) [ 208.329172][ T4679] dfa0: 00000000 00000000 00000003 00005451 00000000 00000000 [ 208.329203][ T4679] dfc0: 00000000 00000000 0012ff70 00000036 002e0000 00000000 00006364 76b340bc [ 208.329229][ T4679] dfe0: 76b33ec0 76b33eb0 000193a4 00131fc0 [ 208.329264][ T4679] r10:00000036 r9:858a9800 r8:8020029c r7:00000036 r6:0012ff70 r5:00000000 [ 208.329284][ T4679] r4:00000000 [ 208.349906][ T4679] ERROR: Out of memory at tomoyo_realpath_from_path. [ 208.540955][ T4685] FAULT_INJECTION: forcing a failure. [ 208.540955][ T4685] name failslab, interval 1, probability 0, space 0, times 0 [ 208.542418][ T4685] CPU: 0 UID: 0 PID: 4685 Comm: syz.0.249 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 208.542517][ T4685] Hardware name: ARM-Versatile Express [ 208.542541][ T4685] Call trace: [ 208.542578][ T4685] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 208.542680][ T4685] r7:00000d40 r6:00000000 r5:60000013 r4:8225b448 [ 208.542698][ T4685] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 208.542744][ T4685] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 208.542794][ T4685] r5:84136c00 r4:82919a80 [ 208.542808][ T4685] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 208.542864][ T4685] [<80964b58>] (should_fail_ex) from [<8051c1e4>] (should_failslab+0x6c/0x94) [ 208.542929][ T4685] r8:84136c00 r7:00000d40 r6:85e68c28 r5:0000001d r4:83001240 [ 208.542945][ T4685] [<8051c178>] (should_failslab) from [<80500f78>] (__kmalloc_noprof+0x9c/0x458) [ 208.543014][ T4685] [<80500edc>] (__kmalloc_noprof) from [<807baddc>] (tomoyo_encode2+0x64/0xf0) [ 208.543075][ T4685] r10:00000fff r9:8309f000 r8:00000000 r7:835365d8 r6:85e68c28 r5:85a97ffc [ 208.543094][ T4685] r4:85a97fea [ 208.543108][ T4685] [<807bad78>] (tomoyo_encode2) from [<807bae8c>] (tomoyo_encode+0x24/0x30) [ 208.543163][ T4685] r9:8309f000 r8:00000000 r7:835365d8 r6:85e68c28 r5:00001000 r4:85a97feb [ 208.543179][ T4685] [<807bae68>] (tomoyo_encode) from [<807baf18>] (tomoyo_realpath_from_path+0x80/0x17c) [ 208.543223][ T4685] r5:00001000 r4:85a97000 [ 208.543324][ T4685] [<807bae98>] (tomoyo_realpath_from_path) from [<807b7018>] (tomoyo_path_number_perm+0xcc/0x22c) [ 208.543407][ T4685] r10:84136c00 r9:00000000 r8:00000003 r7:0000541b r6:00000004 r5:81cd6278 [ 208.543429][ T4685] r4:85e68c28 r3:826c0200 [ 208.543445][ T4685] [<807b6f4c>] (tomoyo_path_number_perm) from [<807bb8f8>] (tomoyo_file_ioctl+0x1c/0x20) [ 208.543506][ T4685] r9:85e68c00 r8:00000003 r7:20000080 r6:20000080 r5:0000541b r4:85e68c00 [ 208.543522][ T4685] [<807bb8dc>] (tomoyo_file_ioctl) from [<8076887c>] (security_file_ioctl+0x64/0x1e4) [ 208.543572][ T4685] [<80768818>] (security_file_ioctl) from [<805678a8>] (sys_ioctl+0x4c/0xdc8) [ 208.543628][ T4685] r7:20000080 r6:85e68c01 r5:00000000 r4:0000541b [ 208.543644][ T4685] [<8056785c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 208.543687][ T4685] Exception stack(0xec31dfa8 to 0xec31dff0) [ 208.543720][ T4685] dfa0: 00000000 00000000 00000003 0000541b 20000080 00000000 [ 208.543752][ T4685] dfc0: 00000000 00000000 0012ff70 00000036 002e0000 00000000 00006364 76b620bc [ 208.543776][ T4685] dfe0: 76b61ec0 76b61eb0 000193a4 00131fc0 [ 208.543809][ T4685] r10:00000036 r9:84136c00 r8:8020029c r7:00000036 r6:0012ff70 r5:00000000 [ 208.543828][ T4685] r4:00000000 [ 208.549278][ T4685] ERROR: Out of memory at tomoyo_realpath_from_path. [ 208.788382][ T4687] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 208.809852][ T31] audit: type=1400 audit(208.730:218): avc: denied { ioctl } for pid=4686 comm="syz.0.250" path="socket:[4846]" dev="sockfs" ino=4846 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 209.379353][ T4697] FAULT_INJECTION: forcing a failure. [ 209.379353][ T4697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.385392][ T4697] CPU: 1 UID: 0 PID: 4697 Comm: syz.1.252 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 209.385515][ T4697] Hardware name: ARM-Versatile Express [ 209.385542][ T4697] Call trace: [ 209.385584][ T4697] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 209.385721][ T4697] r7:00000000 r6:00000000 r5:60000013 r4:8225b448 [ 209.385741][ T4697] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 209.385814][ T4697] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 209.385876][ T4697] r5:84134800 r4:82950610 [ 209.385894][ T4697] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 209.385957][ T4697] [<80964b58>] (should_fail_ex) from [<80964d94>] (should_fail+0x14/0x18) [ 209.386021][ T4697] r8:76b33f30 r7:00000000 r6:00000000 r5:ec19df68 r4:00000002 [ 209.386037][ T4697] [<80964d80>] (should_fail) from [<80964db4>] (should_fail_usercopy+0x1c/0x20) [ 209.386087][ T4697] [<80964d98>] (should_fail_usercopy) from [<805895b8>] (simple_read_from_buffer+0x80/0x13c) [ 209.386142][ T4697] [<80589538>] (simple_read_from_buffer) from [<8060181c>] (proc_fail_nth_read+0xb8/0x100) [ 209.386212][ T4697] r10:00000001 r9:80601764 r8:00000002 r7:ec19df68 r6:0000000f r5:76b33f30 [ 209.386235][ T4697] r4:84134800 r3:ec19de9f [ 209.386251][ T4697] [<80601764>] (proc_fail_nth_read) from [<8054dc30>] (vfs_read+0x98/0x320) [ 209.386314][ T4697] r8:76b33f30 r7:ec19df68 r6:84134800 r5:0000000f r4:85d25780 [ 209.386331][ T4697] [<8054db98>] (vfs_read) from [<8054e8d8>] (ksys_read+0x74/0xe8) [ 209.386391][ T4697] r10:00000003 r9:84134800 r8:8020029c r7:00000000 r6:00000000 r5:85d25780 [ 209.386412][ T4697] r4:85d25783 [ 209.386429][ T4697] [<8054e864>] (ksys_read) from [<8054e95c>] (sys_read+0x10/0x14) [ 209.386490][ T4697] r7:00000003 r6:00000004 r5:76b33f30 r4:0000000f [ 209.386506][ T4697] [<8054e94c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 209.386552][ T4697] Exception stack(0xec19dfa8 to 0xec19dff0) [ 209.386590][ T4697] dfa0: 0000000f 76b33f30 00000004 76b33f30 0000000f 00000000 [ 209.386623][ T4697] dfc0: 0000000f 76b33f30 00000004 00000003 002e0000 00000000 00006364 76b340bc [ 209.386655][ T4697] dfe0: 00000158 76b33ed0 000d7df0 0012fe94 [ 210.651552][ T4706] FAULT_INJECTION: forcing a failure. [ 210.651552][ T4706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.652165][ T4706] CPU: 0 UID: 0 PID: 4706 Comm: syz.0.255 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 210.652256][ T4706] Hardware name: ARM-Versatile Express [ 210.652332][ T4706] Call trace: [ 210.652385][ T4706] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 210.652520][ T4706] r7:b5403587 r6:00000000 r5:60000113 r4:8225b448 [ 210.652541][ T4706] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 210.652595][ T4706] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 210.652780][ T4706] r5:84136c00 r4:82950610 [ 210.652889][ T4706] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 210.653018][ T4706] [<80964b58>] (should_fail_ex) from [<80964d94>] (should_fail+0x14/0x18) [ 210.653159][ T4706] r8:00000000 r7:b5403587 r6:00000000 r5:84137430 r4:76b61bb8 [ 210.653499][ T4706] [<80964d80>] (should_fail) from [<80964db4>] (should_fail_usercopy+0x1c/0x20) [ 210.653632][ T4706] [<80964d98>] (should_fail_usercopy) from [<8022b65c>] (setup_sigframe+0x124/0x1c4) [ 210.653728][ T4706] [<8022b538>] (setup_sigframe) from [<8022bac4>] (do_work_pending+0x2f4/0x4f8) [ 210.653802][ T4706] r10:00000128 r9:b5403587 r8:00000000 r7:84137430 r6:76b61bb8 r5:ec33dfb0 [ 210.653824][ T4706] r4:84136c00 [ 210.653840][ T4706] [<8022b7d0>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 210.653890][ T4706] Exception stack(0xec33dfb0 to 0xec33dff8) [ 210.653930][ T4706] dfa0: fffffffc 20002900 00044089 00000000 [ 210.653993][ T4706] dfc0: 00000000 00000000 0012ff70 00000128 002e0000 00000000 00006364 76b620bc [ 210.654024][ T4706] dfe0: 76b61ec0 76b61eb0 000193a4 00131fc0 60000010 00000003 [ 210.654063][ T4706] r10:00000128 r9:84136c00 r8:8020029c r7:00000128 r6:0012ff70 r5:00000000 [ 210.654082][ T4706] r4:00000000 [ 212.662102][ T4735] FAULT_INJECTION: forcing a failure. [ 212.662102][ T4735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.662505][ T4735] CPU: 0 UID: 0 PID: 4735 Comm: syz.1.266 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 212.662551][ T4735] Hardware name: ARM-Versatile Express [ 212.662611][ T4735] Call trace: [ 212.662694][ T4735] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 212.662832][ T4735] r7:00000000 r6:00000000 r5:60000013 r4:8225b448 [ 212.662885][ T4735] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 212.662941][ T4735] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 212.662967][ T4735] r5:84131800 r4:82950610 [ 212.663007][ T4735] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 212.663062][ T4735] [<80964b58>] (should_fail_ex) from [<80964d94>] (should_fail+0x14/0x18) [ 212.663099][ T4735] r8:76b33f30 r7:00000000 r6:00000000 r5:ec619f68 r4:00000002 [ 212.663107][ T4735] [<80964d80>] (should_fail) from [<80964db4>] (should_fail_usercopy+0x1c/0x20) [ 212.663137][ T4735] [<80964d98>] (should_fail_usercopy) from [<805895b8>] (simple_read_from_buffer+0x80/0x13c) [ 212.663238][ T4735] [<80589538>] (simple_read_from_buffer) from [<8060181c>] (proc_fail_nth_read+0xb8/0x100) [ 212.663278][ T4735] r10:00000001 r9:80601764 r8:00000002 r7:ec619f68 r6:0000000f r5:76b33f30 [ 212.663289][ T4735] r4:84131800 r3:ec619e9f [ 212.663297][ T4735] [<80601764>] (proc_fail_nth_read) from [<8054dc30>] (vfs_read+0x98/0x320) [ 212.663329][ T4735] r8:76b33f30 r7:ec619f68 r6:84131800 r5:0000000f r4:85e68a80 [ 212.663337][ T4735] [<8054db98>] (vfs_read) from [<8054e8d8>] (ksys_read+0x74/0xe8) [ 212.663367][ T4735] r10:00000003 r9:84131800 r8:8020029c r7:00000000 r6:00000000 r5:85e68a80 [ 212.663376][ T4735] r4:85e68a83 [ 212.663395][ T4735] [<8054e864>] (ksys_read) from [<8054e95c>] (sys_read+0x10/0x14) [ 212.663469][ T4735] r7:00000003 r6:00000004 r5:76b33f30 r4:0000000f [ 212.663477][ T4735] [<8054e94c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 212.663579][ T4735] Exception stack(0xec619fa8 to 0xec619ff0) [ 212.663612][ T4735] 9fa0: 0000000f 76b33f30 00000004 76b33f30 0000000f 00000000 [ 212.663650][ T4735] 9fc0: 0000000f 76b33f30 00000004 00000003 002e0000 00000000 00006364 76b340bc [ 212.663675][ T4735] 9fe0: 00000158 76b33ed0 000d7df0 0012fe94 [ 226.043670][ T31] audit: type=1400 audit(225.960:219): avc: denied { getopt } for pid=4798 comm="syz.0.277" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 227.331253][ T31] audit: type=1400 audit(227.250:220): avc: denied { setattr } for pid=4803 comm="syz.0.279" name="" dev="pipefs" ino=4978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 229.576820][ T31] audit: type=1400 audit(229.490:221): avc: denied { lock } for pid=4818 comm="syz.1.284" path="/dev/loop0" dev="devtmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 229.815207][ T31] audit: type=1400 audit(229.740:222): avc: denied { connect } for pid=4813 comm="syz.0.283" lport=55943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 230.374196][ T3054] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 230.524424][ T3054] usb 1-1: Using ep0 maxpacket: 32 [ 230.532292][ T3054] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 230.532700][ T3054] usb 1-1: config 0 has no interface number 0 [ 230.545334][ T3054] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 230.545735][ T3054] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.546101][ T3054] usb 1-1: Product: syz [ 230.546175][ T3054] usb 1-1: Manufacturer: syz [ 230.546232][ T3054] usb 1-1: SerialNumber: syz [ 230.556280][ T3054] usb 1-1: config 0 descriptor?? [ 230.563016][ T3054] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 234.351838][ T3054] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 234.425989][ T3054] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 234.519907][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 234.524713][ T3054] usb 1-1: USB disconnect, device number 2 [ 234.533157][ T3054] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 234.544785][ T3054] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 234.546536][ T3054] quatech2 1-1:0.51: device disconnected [ 234.639945][ T31] audit: type=1400 audit(234.560:223): avc: denied { create } for pid=4862 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 234.837029][ T4863] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1011 sclass=netlink_tcpdiag_socket pid=4863 comm=syz.0.289 [ 235.012440][ T4870] FAULT_INJECTION: forcing a failure. [ 235.012440][ T4870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.013091][ T4870] CPU: 0 UID: 0 PID: 4870 Comm: syz.0.290 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 235.013155][ T4870] Hardware name: ARM-Versatile Express [ 235.013322][ T4870] Call trace: [ 235.013497][ T4870] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 235.013679][ T4870] r7:00000000 r6:00000000 r5:60000013 r4:8225b448 [ 235.013773][ T4870] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 235.013877][ T4870] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 235.014127][ T4870] r5:838e0c00 r4:82950610 [ 235.014309][ T4870] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 235.014403][ T4870] [<80964b58>] (should_fail_ex) from [<80964d94>] (should_fail+0x14/0x18) [ 235.014479][ T4870] r8:76b61f30 r7:00000000 r6:00000000 r5:eca89f68 r4:00000002 [ 235.014497][ T4870] [<80964d80>] (should_fail) from [<80964db4>] (should_fail_usercopy+0x1c/0x20) [ 235.014551][ T4870] [<80964d98>] (should_fail_usercopy) from [<805895b8>] (simple_read_from_buffer+0x80/0x13c) [ 235.014656][ T4870] [<80589538>] (simple_read_from_buffer) from [<8060181c>] (proc_fail_nth_read+0xb8/0x100) [ 235.014732][ T4870] r10:00000001 r9:80601764 r8:00000002 r7:eca89f68 r6:0000000f r5:76b61f30 [ 235.014754][ T4870] r4:838e0c00 r3:eca89e9f [ 235.014770][ T4870] [<80601764>] (proc_fail_nth_read) from [<8054dc30>] (vfs_read+0x98/0x320) [ 235.014836][ T4870] r8:76b61f30 r7:eca89f68 r6:838e0c00 r5:0000000f r4:85d25c00 [ 235.014853][ T4870] [<8054db98>] (vfs_read) from [<8054e8d8>] (ksys_read+0x74/0xe8) [ 235.014918][ T4870] r10:00000003 r9:838e0c00 r8:8020029c r7:00000000 r6:00000000 r5:85d25c00 [ 235.014939][ T4870] r4:85d25c03 [ 235.014953][ T4870] [<8054e864>] (ksys_read) from [<8054e95c>] (sys_read+0x10/0x14) [ 235.015152][ T4870] r7:00000003 r6:00000004 r5:76b61f30 r4:0000000f [ 235.015369][ T4870] [<8054e94c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 235.015673][ T4870] Exception stack(0xeca89fa8 to 0xeca89ff0) [ 235.015752][ T4870] 9fa0: 0000000f 76b61f30 00000004 76b61f30 0000000f 00000000 [ 235.015850][ T4870] 9fc0: 0000000f 76b61f30 00000004 00000003 002e0000 00000000 00006364 76b620bc [ 235.015912][ T4870] 9fe0: 00000158 76b61ed0 000d7df0 0012fe94 [ 235.476401][ T4881] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4881 comm=syz.1.293 [ 240.144163][ T4872] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 243.508544][ T4933] FAULT_INJECTION: forcing a failure. [ 243.508544][ T4933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.509779][ T4933] CPU: 1 UID: 0 PID: 4933 Comm: syz.0.302 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 243.509841][ T4933] Hardware name: ARM-Versatile Express [ 243.509855][ T4933] Call trace: [ 243.509879][ T4933] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 243.509976][ T4933] r7:00000000 r6:00000000 r5:60000013 r4:8225b448 [ 243.509986][ T4933] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 243.510013][ T4933] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 243.510041][ T4933] r5:84130c00 r4:82950610 [ 243.510049][ T4933] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 243.510096][ T4933] [<80964b58>] (should_fail_ex) from [<80964d94>] (should_fail+0x14/0x18) [ 243.510156][ T4933] r8:ecc19eb8 r7:00000000 r6:00000001 r5:76b61f30 r4:00000001 [ 243.510165][ T4933] [<80964d80>] (should_fail) from [<80964db4>] (should_fail_usercopy+0x1c/0x20) [ 243.510192][ T4933] [<80964d98>] (should_fail_usercopy) from [<808bcef8>] (kstrtouint_from_user+0x54/0x13c) [ 243.510220][ T4933] [<808bcea4>] (kstrtouint_from_user) from [<80602b5c>] (proc_fail_nth_write+0x40/0xe8) [ 243.510255][ T4933] r8:ecc19f68 r7:84130c00 r6:00000001 r5:859583c0 r4:00000001 [ 243.510263][ T4933] [<80602b1c>] (proc_fail_nth_write) from [<8054e4c4>] (vfs_write+0xac/0x44c) [ 243.510300][ T4933] r5:859583c0 r4:80602b1c [ 243.510318][ T4933] [<8054e418>] (vfs_write) from [<8054e9d4>] (ksys_write+0x74/0xe8) [ 243.510388][ T4933] r10:00000004 r9:84130c00 r8:8020029c r7:00000000 r6:00000002 r5:859583c0 [ 243.510399][ T4933] r4:859583c3 [ 243.510406][ T4933] [<8054e960>] (ksys_write) from [<8054ea58>] (sys_write+0x10/0x14) [ 243.510438][ T4933] r7:00000004 r6:00000005 r5:76b61f30 r4:00000001 [ 243.510446][ T4933] [<8054ea48>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 243.510469][ T4933] Exception stack(0xecc19fa8 to 0xecc19ff0) [ 243.510488][ T4933] 9fa0: 00000001 76b61f30 00000005 76b61f30 00000001 00000000 [ 243.510505][ T4933] 9fc0: 00000001 76b61f30 00000005 00000004 002e0000 00000000 00006364 76b620bc [ 243.510518][ T4933] 9fe0: 00000158 76b61ed0 000d7df0 0012ff5c [ 243.732919][ T4940] fuse: Unknown parameter '/f0x0000000000000003' [ 246.926588][ T4954] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4954 comm=syz.0.310 [ 246.940530][ T31] audit: type=1400 audit(246.860:224): avc: denied { write } for pid=4953 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 248.309709][ T31] audit: type=1400 audit(248.230:225): avc: denied { setopt } for pid=4962 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 248.750804][ T4956] FAULT_INJECTION: forcing a failure. [ 248.750804][ T4956] name fail_futex, interval 1, probability 0, space 0, times 0 [ 248.751668][ T4956] CPU: 0 UID: 0 PID: 4956 Comm: syz.1.308 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 248.751785][ T4956] Hardware name: ARM-Versatile Express [ 248.751815][ T4956] Call trace: [ 248.751965][ T4956] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 248.752208][ T4956] r7:ed209dd0 r6:00000000 r5:60000013 r4:8225b448 [ 248.752235][ T4956] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 248.752401][ T4956] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 248.752573][ T4956] r5:84134800 r4:828f9bd8 [ 248.752603][ T4956] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 248.752668][ T4956] [<80964b58>] (should_fail_ex) from [<80964d94>] (should_fail+0x14/0x18) [ 248.752871][ T4956] r8:00000000 r7:ed209dd0 r6:00000000 r5:828f9bd8 r4:76ad1000 [ 248.752892][ T4956] [<80964d80>] (should_fail) from [<80347ddc>] (get_futex_key+0xe8/0x580) [ 248.752969][ T4956] [<80347cf4>] (get_futex_key) from [<8034c0d0>] (futex_wake+0x64/0x1b4) [ 248.753061][ T4956] r10:85cf4a80 r9:00000001 r8:ed209e90 r7:ed209dc8 r6:00000001 r5:ffffffff [ 248.753146][ T4956] r4:00000012 [ 248.753418][ T4956] [<8034c06c>] (futex_wake) from [<80348e84>] (do_futex+0x100/0x1b4) [ 248.753671][ T4956] r10:85cf4a80 r9:00000001 r8:ed209e90 r7:85cf4a80 r6:00000000 r5:b5403587 [ 248.753893][ T4956] r4:00000001 [ 248.754088][ T4956] [<80348d84>] (do_futex) from [<802542f0>] (mm_release+0xc4/0xc8) [ 248.754209][ T4956] r4:84134800 [ 248.754230][ T4956] [<8025422c>] (mm_release) from [<80255ae8>] (exit_mm_release+0x24/0x28) [ 248.754290][ T4956] r5:84010600 r4:84134800 [ 248.754306][ T4956] [<80255ac4>] (exit_mm_release) from [<8025f294>] (do_exit+0x1c8/0xaa8) [ 248.754363][ T4956] r5:84134800 r4:84010600 [ 248.754379][ T4956] [<8025f0cc>] (do_exit) from [<8025fd34>] (do_group_exit+0x40/0x8c) [ 248.754425][ T4956] r7:00131fc0 [ 248.754440][ T4956] [<8025fcf4>] (do_group_exit) from [<80270a44>] (get_signal+0xa14/0xa38) [ 248.754503][ T4956] r7:00131fc0 r4:84134800 [ 248.754521][ T4956] [<80270030>] (get_signal) from [<8022b8e8>] (do_work_pending+0x118/0x4f8) [ 248.754671][ T4956] r10:00000036 r9:ffffffe7 r8:8020029c r7:00131fc0 r6:8020029c r5:ed209fb0 [ 248.754732][ T4956] r4:84134800 [ 248.754753][ T4956] [<8022b7d0>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24) [ 248.754802][ T4956] Exception stack(0xed209fb0 to 0xed209ff8) [ 248.754839][ T4956] 9fa0: ffffffe7 0000541c 00000000 00000000 [ 248.754872][ T4956] 9fc0: 00000000 00000000 0012ff70 00000036 002e0000 00000000 00006364 76ad10bc [ 248.754899][ T4956] 9fe0: 76ad0ec0 76ad0eb0 000193a4 00131fc0 60000010 00000004 [ 248.754938][ T4956] r10:00000036 r9:84134800 r8:8020029c r7:00000036 r6:0012ff70 r5:00000000 [ 248.754956][ T4956] r4:00000000 [ 251.182745][ T4979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=4979 comm=syz.0.318 [ 254.685878][ T31] audit: type=1400 audit(254.610:226): avc: denied { write } for pid=4995 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 254.983733][ T5001] cgroup: Unknown subsys name 'cpuset' [ 254.997496][ T5000] Process accounting resumed [ 255.121858][ T5007] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5007 comm=syz.0.328 [ 255.214840][ T5003] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5003 comm=syz.1.326 [ 255.650794][ T5016] FAULT_INJECTION: forcing a failure. [ 255.650794][ T5016] name failslab, interval 1, probability 0, space 0, times 0 [ 255.651412][ T5016] CPU: 1 UID: 0 PID: 5016 Comm: syz.1.330 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 255.651548][ T5016] Hardware name: ARM-Versatile Express [ 255.651576][ T5016] Call trace: [ 255.651700][ T5016] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 255.651877][ T5016] r7:00000c40 r6:00000000 r5:60000013 r4:8225b448 [ 255.651918][ T5016] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 255.651969][ T5016] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 255.652080][ T5016] r5:856e3000 r4:82919a80 [ 255.652140][ T5016] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 255.652277][ T5016] [<80964b58>] (should_fail_ex) from [<8051c1e4>] (should_failslab+0x6c/0x94) [ 255.652383][ T5016] r8:856e3000 r7:00000c40 r6:85958aa8 r5:00001000 r4:830016c0 [ 255.652407][ T5016] [<8051c178>] (should_failslab) from [<80500f78>] (__kmalloc_noprof+0x9c/0x458) [ 255.652511][ T5016] [<80500edc>] (__kmalloc_noprof) from [<807baed4>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 255.652644][ T5016] r10:856e3000 r9:8309e400 r8:00000000 r7:8350d770 r6:85958aa8 r5:00001000 [ 255.652705][ T5016] r4:00000000 [ 255.652724][ T5016] [<807bae98>] (tomoyo_realpath_from_path) from [<807b7018>] (tomoyo_path_number_perm+0xcc/0x22c) [ 255.652853][ T5016] r10:856e3000 r9:00000000 r8:00000003 r7:00005451 r6:00000004 r5:81cd6278 [ 255.652908][ T5016] r4:85958aa8 r3:826c0200 [ 255.652956][ T5016] [<807b6f4c>] (tomoyo_path_number_perm) from [<807bb8f8>] (tomoyo_file_ioctl+0x1c/0x20) [ 255.653109][ T5016] r9:85958a80 r8:00000003 r7:00000000 r6:00000000 r5:00005451 r4:85958a80 [ 255.653137][ T5016] [<807bb8dc>] (tomoyo_file_ioctl) from [<8076887c>] (security_file_ioctl+0x64/0x1e4) [ 255.653221][ T5016] [<80768818>] (security_file_ioctl) from [<805678a8>] (sys_ioctl+0x4c/0xdc8) [ 255.653280][ T5016] r7:00000000 r6:85958a81 r5:00000000 r4:00005451 [ 255.653296][ T5016] [<8056785c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 255.653442][ T5016] Exception stack(0xed419fa8 to 0xed419ff0) [ 255.653503][ T5016] 9fa0: 00000000 00000000 00000003 00005451 00000000 00000000 [ 255.653534][ T5016] 9fc0: 00000000 00000000 0012ff70 00000036 002e0000 00000000 00006364 76b340bc [ 255.653584][ T5016] 9fe0: 76b33ec0 76b33eb0 000193a4 00131fc0 [ 255.653622][ T5016] r10:00000036 r9:856e3000 r8:8020029c r7:00000036 r6:0012ff70 r5:00000000 [ 255.653653][ T5016] r4:00000000 [ 255.715199][ T5016] ERROR: Out of memory at tomoyo_realpath_from_path. [ 255.827356][ T5019] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5019 comm=syz.1.334 [ 256.137265][ T5031] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5031 comm=syz.1.340 [ 256.331005][ T31] audit: type=1400 audit(256.250:227): avc: denied { setattr } for pid=5033 comm="syz.1.341" name="SMC" dev="sockfs" ino=5829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 256.529712][ T31] audit: type=1800 audit(256.450:228): pid=5034 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.341" name="/" dev="pipefs" ino=6271 res=0 errno=0 [ 257.923878][ T5047] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5047 comm=syz.1.345 [ 258.702307][ T5058] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5058 comm=syz.0.350 [ 259.183847][ T5068] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5068 comm=syz.0.355 [ 259.658807][ T5079] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5079 comm=syz.0.360 [ 260.827991][ T31] audit: type=1400 audit(260.750:229): avc: denied { connect } for pid=5098 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 260.832691][ T31] audit: type=1400 audit(260.750:230): avc: denied { ioctl } for pid=5098 comm="syz.0.367" path="socket:[5960]" dev="sockfs" ino=5960 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 266.466876][ T5114] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5114 comm=syz.0.372 [ 269.470042][ T5133] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5133 comm=syz.1.378 [ 275.590489][ T5183] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5183 comm=syz.0.391 [ 277.278710][ T31] audit: type=1400 audit(277.200:231): avc: denied { bind } for pid=5213 comm="syz.0.402" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 277.280407][ T31] audit: type=1400 audit(277.200:232): avc: denied { node_bind } for pid=5213 comm="syz.0.402" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 278.446001][ T31] audit: type=1400 audit(278.370:233): avc: denied { map } for pid=5224 comm="syz.0.405" path="/proc/525/net/snmp" dev="proc" ino=4026532686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 278.462483][ T31] audit: type=1400 audit(278.380:234): avc: denied { read } for pid=5224 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 278.962860][ T31] audit: type=1400 audit(278.880:235): avc: denied { map } for pid=5230 comm="syz.0.407" path="socket:[6458]" dev="sockfs" ino=6458 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 279.166754][ T31] audit: type=1400 audit(279.090:236): avc: denied { create } for pid=5237 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 279.442762][ T31] audit: type=1400 audit(279.360:237): avc: denied { create } for pid=5242 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 279.447024][ T31] audit: type=1400 audit(279.370:238): avc: denied { ioctl } for pid=5242 comm="syz.0.411" path="socket:[7319]" dev="sockfs" ino=7319 ioctlcmd=0x5012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 280.607053][ T31] audit: type=1400 audit(280.530:239): avc: denied { create } for pid=5252 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 280.609322][ T31] audit: type=1400 audit(280.530:240): avc: denied { listen } for pid=5252 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 284.395362][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 284.395896][ T31] audit: type=1400 audit(284.320:243): avc: denied { write } for pid=5260 comm="syz.1.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 285.444248][ T5261] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5261 comm=syz.1.418 [ 285.604714][ T5267] FAULT_INJECTION: forcing a failure. [ 285.604714][ T5267] name failslab, interval 1, probability 0, space 0, times 0 [ 285.606829][ T5267] CPU: 0 UID: 0 PID: 5267 Comm: syz.1.420 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 285.606913][ T5267] Hardware name: ARM-Versatile Express [ 285.606938][ T5267] Call trace: [ 285.607000][ T5267] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 285.607106][ T5267] r7:84131800 r6:00000000 r5:60000013 r4:8225b448 [ 285.607127][ T5267] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 285.607175][ T5267] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 285.607222][ T5267] r5:84131800 r4:82919a80 [ 285.607236][ T5267] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 285.607295][ T5267] [<80964b58>] (should_fail_ex) from [<8051c1e4>] (should_failslab+0x6c/0x94) [ 285.607357][ T5267] r8:00000000 r7:84131800 r6:00000cc0 r5:ffffffff r4:832a2000 [ 285.607375][ T5267] [<8051c178>] (should_failslab) from [<80500588>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 285.607423][ T5267] [<80500538>] (kmem_cache_alloc_node_noprof) from [<81537e44>] (__alloc_skb+0x138/0x160) [ 285.607483][ T5267] r10:00000000 r9:00000000 r8:00000cc0 r7:00000000 r6:832a2000 r5:ffffffff [ 285.607504][ T5267] r4:828060c0 [ 285.607519][ T5267] [<81537d0c>] (__alloc_skb) from [<81657c60>] (netlink_alloc_large_skb+0x88/0xa0) [ 285.607583][ T5267] r8:00000000 r7:85bd3000 r6:00000028 r5:852e6000 r4:00000140 [ 285.607611][ T5267] [<81657bd8>] (netlink_alloc_large_skb) from [<816583a0>] (netlink_sendmsg+0x134/0x444) [ 285.607667][ T5267] r5:852e6000 r4:ed949f20 [ 285.607686][ T5267] [<8165826c>] (netlink_sendmsg) from [<8152abe0>] (__sock_sendmsg+0x44/0x78) [ 285.607751][ T5267] r10:00000000 r9:ed949dc4 r8:ed949dc4 r7:00000000 r6:852e6000 r5:ed949f20 [ 285.607771][ T5267] r4:00000000 [ 285.607788][ T5267] [<8152ab9c>] (__sock_sendmsg) from [<8152b3a0>] (____sys_sendmsg+0x298/0x2cc) [ 285.607844][ T5267] r7:00000000 r6:852e6000 r5:00040004 r4:ed949f20 [ 285.607861][ T5267] [<8152b108>] (____sys_sendmsg) from [<8152d1ac>] (___sys_sendmsg+0x9c/0xd0) [ 285.607920][ T5267] r10:ed949e24 r9:20000340 r8:00040004 r7:00000000 r6:852e6000 r5:ed949f20 [ 285.607938][ T5267] r4:00000000 [ 285.607953][ T5267] [<8152d110>] (___sys_sendmsg) from [<8152d644>] (__sys_sendmsg+0x8c/0xe0) [ 285.608013][ T5267] r10:00000128 r9:84131800 r8:85d25180 r7:00040004 r6:20000340 r5:85d25181 [ 285.608034][ T5267] r4:00000003 [ 285.608048][ T5267] [<8152d5b8>] (__sys_sendmsg) from [<8152d6ac>] (sys_sendmsg+0x14/0x18) [ 285.608107][ T5267] r8:8020029c r7:00000128 r6:0012ff70 r5:00000000 r4:00000000 [ 285.608121][ T5267] [<8152d698>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 285.608165][ T5267] Exception stack(0xed949fa8 to 0xed949ff0) [ 285.608199][ T5267] 9fa0: 00000000 00000000 00000003 20000340 00040004 00000000 [ 285.608230][ T5267] 9fc0: 00000000 00000000 0012ff70 00000128 002e0000 00000000 00006364 76b340bc [ 285.608256][ T5267] 9fe0: 76b33ec0 76b33eb0 000193a4 00131fc0 [ 285.955419][ T31] audit: type=1400 audit(285.870:244): avc: denied { setopt } for pid=5271 comm="syz.1.422" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 285.971119][ T5272] dvmrp1: entered allmulticast mode [ 287.746037][ T31] audit: type=1400 audit(287.670:245): avc: denied { create } for pid=5291 comm="syz.1.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 287.746526][ T31] audit: type=1400 audit(287.670:246): avc: denied { write } for pid=5291 comm="syz.1.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 288.454122][ T5304] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5304 comm=syz.0.435 [ 290.672926][ T31] audit: type=1400 audit(290.590:247): avc: denied { getopt } for pid=5297 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 292.299899][ T5321] can: request_module (can-proto-0) failed. [ 292.322622][ T31] audit: type=1400 audit(292.240:248): avc: denied { ioctl } for pid=5320 comm="syz.0.437" path="net:[4026532656]" dev="nsfs" ino=4026532656 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 292.948141][ T31] audit: type=1400 audit(292.870:249): avc: denied { mount } for pid=5326 comm="syz.1.439" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 292.952227][ T31] audit: type=1400 audit(292.870:250): avc: denied { remount } for pid=5326 comm="syz.1.439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 292.970756][ T31] audit: type=1400 audit(292.890:251): avc: denied { unmount } for pid=3105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 293.060114][ T31] audit: type=1400 audit(292.980:252): avc: denied { setattr } for pid=5328 comm="syz.1.440" name="NETLINK" dev="sockfs" ino=6612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 293.148286][ T5331] FAULT_INJECTION: forcing a failure. [ 293.148286][ T5331] name failslab, interval 1, probability 0, space 0, times 0 [ 293.149275][ T5331] CPU: 1 UID: 0 PID: 5331 Comm: syz.1.441 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 293.149362][ T5331] Hardware name: ARM-Versatile Express [ 293.149379][ T5331] Call trace: [ 293.149420][ T5331] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 293.149528][ T5331] r7:00000d40 r6:00000000 r5:60000013 r4:8225b448 [ 293.149546][ T5331] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 293.149595][ T5331] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 293.149646][ T5331] r5:84130c00 r4:82919a80 [ 293.149671][ T5331] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 293.149733][ T5331] [<80964b58>] (should_fail_ex) from [<8051c1e4>] (should_failslab+0x6c/0x94) [ 293.149801][ T5331] r8:84130c00 r7:00000d40 r6:85958da8 r5:0000001d r4:83001240 [ 293.149822][ T5331] [<8051c178>] (should_failslab) from [<80500f78>] (__kmalloc_noprof+0x9c/0x458) [ 293.149856][ T5331] [<80500edc>] (__kmalloc_noprof) from [<807baddc>] (tomoyo_encode2+0x64/0xf0) [ 293.149889][ T5331] r10:00000fff r9:8309e400 r8:00000000 r7:8350dbb0 r6:85958da8 r5:85ddbffc [ 293.149899][ T5331] r4:85ddbfea [ 293.149906][ T5331] [<807bad78>] (tomoyo_encode2) from [<807bae8c>] (tomoyo_encode+0x24/0x30) [ 293.149935][ T5331] r9:8309e400 r8:00000000 r7:8350dbb0 r6:85958da8 r5:00001000 r4:85ddbfeb [ 293.149943][ T5331] [<807bae68>] (tomoyo_encode) from [<807baf18>] (tomoyo_realpath_from_path+0x80/0x17c) [ 293.149967][ T5331] r5:00001000 r4:85ddb000 [ 293.149974][ T5331] [<807bae98>] (tomoyo_realpath_from_path) from [<807b7018>] (tomoyo_path_number_perm+0xcc/0x22c) [ 293.150007][ T5331] r10:84130c00 r9:00000000 r8:00000003 r7:00003ba0 r6:00000004 r5:81cd6278 [ 293.150017][ T5331] r4:85958da8 r3:826c0200 [ 293.150025][ T5331] [<807b6f4c>] (tomoyo_path_number_perm) from [<807bb8f8>] (tomoyo_file_ioctl+0x1c/0x20) [ 293.150056][ T5331] r9:85958d80 r8:00000003 r7:200000c0 r6:200000c0 r5:00003ba0 r4:85958d80 [ 293.150065][ T5331] [<807bb8dc>] (tomoyo_file_ioctl) from [<8076887c>] (security_file_ioctl+0x64/0x1e4) [ 293.150088][ T5331] [<80768818>] (security_file_ioctl) from [<805678a8>] (sys_ioctl+0x4c/0xdc8) [ 293.150117][ T5331] r7:200000c0 r6:85958d81 r5:00000000 r4:00003ba0 [ 293.150125][ T5331] [<8056785c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 293.150147][ T5331] Exception stack(0xee0d1fa8 to 0xee0d1ff0) [ 293.150166][ T5331] 1fa0: 00000000 00000000 00000003 00003ba0 200000c0 00000000 [ 293.150183][ T5331] 1fc0: 00000000 00000000 0012ff70 00000036 002e0000 00000000 00006364 76b340bc [ 293.150195][ T5331] 1fe0: 76b33ec0 76b33eb0 000193a4 00131fc0 [ 293.150213][ T5331] r10:00000036 r9:84130c00 r8:8020029c r7:00000036 r6:0012ff70 r5:00000000 [ 293.150222][ T5331] r4:00000000 [ 293.166232][ T5331] ERROR: Out of memory at tomoyo_realpath_from_path. [ 293.764262][ T3054] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 293.894552][ T3054] usb 2-1: device descriptor read/64, error -71 [ 294.134905][ T3054] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 294.264594][ T3054] usb 2-1: device descriptor read/64, error -71 [ 294.374252][ T3054] usb usb2-port1: attempt power cycle [ 294.714609][ T3054] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 294.736598][ T3054] usb 2-1: device descriptor read/8, error -71 [ 294.974167][ T3054] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 295.010558][ T3054] usb 2-1: device descriptor read/8, error -71 [ 295.123956][ T3054] usb usb2-port1: unable to enumerate USB device [ 303.136061][ T31] audit: type=1400 audit(303.060:253): avc: denied { getopt } for pid=5369 comm="syz.0.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 304.030303][ T31] audit: type=1400 audit(303.930:254): avc: denied { ioctl } for pid=5381 comm="syz.1.453" path="socket:[7509]" dev="sockfs" ino=7509 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 304.214527][ T31] audit: type=1400 audit(304.140:255): avc: denied { compute_member } for pid=5381 comm="syz.1.453" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 305.133994][ T31] audit: type=1400 audit(305.060:256): avc: denied { create } for pid=5389 comm="syz.0.456" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 305.205441][ T5392] FAULT_INJECTION: forcing a failure. [ 305.205441][ T5392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.214261][ T5392] CPU: 1 UID: 0 PID: 5392 Comm: syz.0.457 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 305.214377][ T5392] Hardware name: ARM-Versatile Express [ 305.214402][ T5392] Call trace: [ 305.214442][ T5392] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 305.214554][ T5392] r7:00000000 r6:00000000 r5:60000113 r4:8225b448 [ 305.214573][ T5392] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 305.214634][ T5392] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 305.214685][ T5392] r5:84135400 r4:82950610 [ 305.214699][ T5392] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 305.214756][ T5392] [<80964b58>] (should_fail_ex) from [<80964d94>] (should_fail+0x14/0x18) [ 305.214819][ T5392] r8:76b61f30 r7:00000000 r6:00000000 r5:edf61f68 r4:00000002 [ 305.214836][ T5392] [<80964d80>] (should_fail) from [<80964db4>] (should_fail_usercopy+0x1c/0x20) [ 305.214885][ T5392] [<80964d98>] (should_fail_usercopy) from [<805895b8>] (simple_read_from_buffer+0x80/0x13c) [ 305.214941][ T5392] [<80589538>] (simple_read_from_buffer) from [<8060181c>] (proc_fail_nth_read+0xb8/0x100) [ 305.215035][ T5392] r10:00000001 r9:80601764 r8:00000002 r7:edf61f68 r6:0000000f r5:76b61f30 [ 305.215060][ T5392] r4:84135400 r3:edf61e9f [ 305.215075][ T5392] [<80601764>] (proc_fail_nth_read) from [<8054dc30>] (vfs_read+0x98/0x320) [ 305.215139][ T5392] r8:76b61f30 r7:edf61f68 r6:84135400 r5:0000000f r4:85958c00 [ 305.215155][ T5392] [<8054db98>] (vfs_read) from [<8054e8d8>] (ksys_read+0x74/0xe8) [ 305.215213][ T5392] r10:00000003 r9:84135400 r8:8020029c r7:00000000 r6:00000000 r5:85958c00 [ 305.215232][ T5392] r4:85958c03 [ 305.215247][ T5392] [<8054e864>] (ksys_read) from [<8054e95c>] (sys_read+0x10/0x14) [ 305.215304][ T5392] r7:00000003 r6:00000004 r5:76b61f30 r4:0000000f [ 305.215320][ T5392] [<8054e94c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 305.215363][ T5392] Exception stack(0xedf61fa8 to 0xedf61ff0) [ 305.215401][ T5392] 1fa0: 0000000f 76b61f30 00000004 76b61f30 0000000f 00000000 [ 305.215432][ T5392] 1fc0: 0000000f 76b61f30 00000004 00000003 002e0000 00000000 00006364 76b620bc [ 305.215455][ T5392] 1fe0: 00000158 76b61ed0 000d7df0 0012fe94 [ 309.952881][ T31] audit: type=1400 audit(309.870:257): avc: denied { setopt } for pid=5406 comm="syz.1.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 315.073939][ T31] audit: type=1400 audit(314.990:258): avc: denied { execute } for pid=5421 comm="syz.0.465" path=2F6D656D66643A0B656DDA9952406DFCFE9B232AFF202864656C6574656429 dev="tmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 315.935911][ T5435] FAULT_INJECTION: forcing a failure. [ 315.935911][ T5435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.939564][ T5435] CPU: 1 UID: 0 PID: 5435 Comm: syz.1.470 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 315.939703][ T5435] Hardware name: ARM-Versatile Express [ 315.939730][ T5435] Call trace: [ 315.939774][ T5435] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 315.939891][ T5435] r7:00000000 r6:00000000 r5:60000013 r4:8225b448 [ 315.939911][ T5435] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 315.939968][ T5435] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 315.940026][ T5435] r5:856e0000 r4:82950610 [ 315.940043][ T5435] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 315.940103][ T5435] [<80964b58>] (should_fail_ex) from [<80964d94>] (should_fail+0x14/0x18) [ 315.940173][ T5435] r8:76b33f30 r7:00000000 r6:00000000 r5:dfad1f68 r4:00000002 [ 315.940191][ T5435] [<80964d80>] (should_fail) from [<80964db4>] (should_fail_usercopy+0x1c/0x20) [ 315.940245][ T5435] [<80964d98>] (should_fail_usercopy) from [<805895b8>] (simple_read_from_buffer+0x80/0x13c) [ 315.940309][ T5435] [<80589538>] (simple_read_from_buffer) from [<8060181c>] (proc_fail_nth_read+0xb8/0x100) [ 315.940387][ T5435] r10:00000001 r9:80601764 r8:00000002 r7:dfad1f68 r6:0000000f r5:76b33f30 [ 315.940412][ T5435] r4:856e0000 r3:dfad1e9f [ 315.940430][ T5435] [<80601764>] (proc_fail_nth_read) from [<8054dc30>] (vfs_read+0x98/0x320) [ 315.940501][ T5435] r8:76b33f30 r7:dfad1f68 r6:856e0000 r5:0000000f r4:85958a80 [ 315.940520][ T5435] [<8054db98>] (vfs_read) from [<8054e8d8>] (ksys_read+0x74/0xe8) [ 315.940588][ T5435] r10:00000003 r9:856e0000 r8:8020029c r7:00000000 r6:00000000 r5:85958a80 [ 315.940611][ T5435] r4:85958a83 [ 315.940630][ T5435] [<8054e864>] (ksys_read) from [<8054e95c>] (sys_read+0x10/0x14) [ 315.940706][ T5435] r7:00000003 r6:00000003 r5:76b33f30 r4:0000000f [ 315.940724][ T5435] [<8054e94c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 315.940846][ T5435] Exception stack(0xdfad1fa8 to 0xdfad1ff0) [ 315.940891][ T5435] 1fa0: 0000000f 76b33f30 00000003 76b33f30 0000000f 00000000 [ 315.940923][ T5435] 1fc0: 0000000f 76b33f30 00000003 00000003 002e0000 00000000 00006364 76b340bc [ 315.940947][ T5435] 1fe0: 00000158 76b33ed0 000d7df0 0012fe94 [ 316.100258][ T31] audit: type=1400 audit(316.020:259): avc: denied { bind } for pid=5436 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 316.135672][ T31] audit: type=1400 audit(316.060:260): avc: denied { read } for pid=5436 comm="syz.1.471" path="socket:[6768]" dev="sockfs" ino=6768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 316.557306][ T31] audit: type=1400 audit(316.480:261): avc: denied { setopt } for pid=5441 comm="syz.1.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 316.773142][ T31] audit: type=1400 audit(316.690:262): avc: denied { shutdown } for pid=5446 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 317.414908][ T95] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 317.652031][ T5452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.705183][ T5452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.743117][ T95] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 317.744179][ T95] usb 1-1: can't read configurations, error -71 [ 320.046176][ T31] audit: type=1400 audit(319.970:263): avc: denied { nlmsg_write } for pid=5482 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 320.047283][ T31] audit: type=1400 audit(319.970:264): avc: denied { read } for pid=5482 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 323.129417][ T5512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5512 comm=syz.1.492 [ 325.214398][ T31] audit: type=1400 audit(325.130:265): avc: denied { create } for pid=5526 comm="syz.0.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 325.892971][ T5544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5544 comm=syz.0.500 [ 329.353237][ T5566] FAULT_INJECTION: forcing a failure. [ 329.353237][ T5566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.354391][ T5566] CPU: 1 UID: 0 PID: 5566 Comm: syz.0.504 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 329.354475][ T5566] Hardware name: ARM-Versatile Express [ 329.354504][ T5566] Call trace: [ 329.354552][ T5566] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 329.354689][ T5566] r7:00000000 r6:00000000 r5:60000013 r4:8225b448 [ 329.354710][ T5566] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 329.354760][ T5566] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 329.354809][ T5566] r5:858aa400 r4:82950610 [ 329.354823][ T5566] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 329.354879][ T5566] [<80964b58>] (should_fail_ex) from [<80964d94>] (should_fail+0x14/0x18) [ 329.354940][ T5566] r8:76b61f30 r7:00000000 r6:00000000 r5:e039df68 r4:00000002 [ 329.354958][ T5566] [<80964d80>] (should_fail) from [<80964db4>] (should_fail_usercopy+0x1c/0x20) [ 329.355049][ T5566] [<80964d98>] (should_fail_usercopy) from [<805895b8>] (simple_read_from_buffer+0x80/0x13c) [ 329.355109][ T5566] [<80589538>] (simple_read_from_buffer) from [<8060181c>] (proc_fail_nth_read+0xb8/0x100) [ 329.355258][ T5566] r10:00000001 r9:80601764 r8:00000002 r7:e039df68 r6:0000000f r5:76b61f30 [ 329.355289][ T5566] r4:858aa400 r3:e039de9f [ 329.355323][ T5566] [<80601764>] (proc_fail_nth_read) from [<8054dc30>] (vfs_read+0x98/0x320) [ 329.355415][ T5566] r8:76b61f30 r7:e039df68 r6:858aa400 r5:0000000f r4:85955240 [ 329.355436][ T5566] [<8054db98>] (vfs_read) from [<8054e8d8>] (ksys_read+0x74/0xe8) [ 329.355497][ T5566] r10:00000003 r9:858aa400 r8:8020029c r7:00000000 r6:00000000 r5:85955240 [ 329.355516][ T5566] r4:85955243 [ 329.355530][ T5566] [<8054e864>] (ksys_read) from [<8054e95c>] (sys_read+0x10/0x14) [ 329.355584][ T5566] r7:00000003 r6:00000007 r5:76b61f30 r4:0000000f [ 329.355599][ T5566] [<8054e94c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 329.355649][ T5566] Exception stack(0xe039dfa8 to 0xe039dff0) [ 329.355684][ T5566] dfa0: 0000000f 76b61f30 00000007 76b61f30 0000000f 00000000 [ 329.355717][ T5566] dfc0: 0000000f 76b61f30 00000007 00000003 002e0000 00000000 00006364 76b620bc [ 329.355742][ T5566] dfe0: 00000158 76b61ed0 000d7df0 0012fe94 [ 330.357107][ T31] audit: type=1400 audit(330.280:266): avc: denied { lock } for pid=5576 comm="syz.1.508" path="socket:[6974]" dev="sockfs" ino=6974 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 332.981360][ T31] audit: type=1400 audit(332.900:267): avc: denied { write } for pid=5587 comm="syz.0.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 339.208175][ T31] audit: type=1400 audit(339.130:268): avc: denied { name_bind } for pid=5651 comm="syz.0.523" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 341.965174][ T31] audit: type=1400 audit(341.890:269): avc: denied { getopt } for pid=5666 comm="syz.1.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 342.647805][ T31] audit: type=1400 audit(342.570:270): avc: denied { remove_name } for pid=5664 comm="syz.0.528" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 342.650728][ T31] audit: type=1400 audit(342.570:271): avc: denied { unlink } for pid=5664 comm="syz.0.528" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 343.849995][ T5677] FAULT_INJECTION: forcing a failure. [ 343.849995][ T5677] name failslab, interval 1, probability 0, space 0, times 0 [ 343.850432][ T5677] CPU: 0 UID: 0 PID: 5677 Comm: syz.0.533 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 343.850492][ T5677] Hardware name: ARM-Versatile Express [ 343.850514][ T5677] Call trace: [ 343.850552][ T5677] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 343.850720][ T5677] r7:00000dc0 r6:00000000 r5:60000013 r4:8225b448 [ 343.850764][ T5677] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 343.850821][ T5677] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 343.850876][ T5677] r5:84134800 r4:82919a80 [ 343.850890][ T5677] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 343.850966][ T5677] [<80964b58>] (should_fail_ex) from [<8051c1e4>] (should_failslab+0x6c/0x94) [ 343.851069][ T5677] r8:84134800 r7:00000dc0 r6:00000000 r5:00000180 r4:83001480 [ 343.851088][ T5677] [<8051c178>] (should_failslab) from [<80500f78>] (__kmalloc_noprof+0x9c/0x458) [ 343.851263][ T5677] [<80500edc>] (__kmalloc_noprof) from [<8073cbf0>] (fuse_do_ioctl+0xc4/0x820) [ 343.851356][ T5677] r10:00000020 r9:00008933 r8:859d7f80 r7:00000000 r6:00000000 r5:00000000 [ 343.851368][ T5677] r4:00000000 [ 343.851376][ T5677] [<8073cb2c>] (fuse_do_ioctl) from [<8073d40c>] (fuse_file_ioctl+0x54/0x68) [ 343.851406][ T5677] r10:84134800 r9:85e423c0 r8:00000005 r7:852e4280 r6:00000000 r5:00008933 [ 343.851415][ T5677] r4:85e423c0 [ 343.851423][ T5677] [<8073d3b8>] (fuse_file_ioctl) from [<8056798c>] (sys_ioctl+0x130/0xdc8) [ 343.851474][ T5677] r7:00000000 r6:85e423c1 r5:00000000 r4:00008933 [ 343.851489][ T5677] [<8056785c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 343.851551][ T5677] Exception stack(0xea945fa8 to 0xea945ff0) [ 343.851572][ T5677] 5fa0: 00000000 00000000 00000005 00008933 00000000 00000000 [ 343.851589][ T5677] 5fc0: 00000000 00000000 0012ff70 00000036 002e0000 00000000 00006364 76b620bc [ 343.851638][ T5677] 5fe0: 76b61ec0 76b61eb0 000193a4 00131fc0 [ 343.851658][ T5677] r10:00000036 r9:84134800 r8:8020029c r7:00000036 r6:0012ff70 r5:00000000 [ 343.851700][ T5677] r4:00000000 [ 344.323136][ T31] audit: type=1400 audit(344.240:272): avc: denied { map } for pid=5690 comm="syz.0.535" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 344.326815][ T31] audit: type=1400 audit(344.250:273): avc: denied { read write } for pid=5690 comm="syz.0.535" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 349.208871][ T31] audit: type=1400 audit(349.130:274): avc: denied { getopt } for pid=5705 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 360.178614][ T5736] FAULT_INJECTION: forcing a failure. [ 360.178614][ T5736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.179697][ T5736] CPU: 1 UID: 0 PID: 5736 Comm: syz.0.549 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 360.179767][ T5736] Hardware name: ARM-Versatile Express [ 360.179780][ T5736] Call trace: [ 360.179802][ T5736] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 360.179867][ T5736] r7:85497ec0 r6:00000000 r5:60000013 r4:8225b448 [ 360.179877][ T5736] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 360.179904][ T5736] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 360.179930][ T5736] r5:856e6000 r4:82950610 [ 360.179938][ T5736] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 360.179968][ T5736] [<80964b58>] (should_fail_ex) from [<80964d94>] (should_fail+0x14/0x18) [ 360.180000][ T5736] r8:85497ec0 r7:85497ec0 r6:20002c00 r5:85497ec0 r4:85497800 [ 360.180008][ T5736] [<80964d80>] (should_fail) from [<80964db4>] (should_fail_usercopy+0x1c/0x20) [ 360.180034][ T5736] [<80964d98>] (should_fail_usercopy) from [<8188c6a0>] (ip6_tnl_siocdevprivate+0x170/0x444) [ 360.180063][ T5736] [<8188c530>] (ip6_tnl_siocdevprivate) from [<8159cf30>] (dev_ifsioc+0x6e4/0x80c) [ 360.180098][ T5736] r10:20002c00 r9:8188c530 r8:81e7caf8 r7:20002c00 r6:ead01ecc r5:85497800 [ 360.180108][ T5736] r4:000089f3 [ 360.180115][ T5736] [<8159c84c>] (dev_ifsioc) from [<8159d58c>] (dev_ioctl+0x534/0x62c) [ 360.180147][ T5736] r9:ead01ecb r8:00000000 r7:85890000 r6:ead01ecc r5:00000003 r4:000089f3 [ 360.180155][ T5736] [<8159d058>] (dev_ioctl) from [<8152b9b8>] (sock_ioctl+0x464/0x600) [ 360.180189][ T5736] r10:856e6000 r9:85924300 r8:00000003 r7:b5403587 r6:85890000 r5:20002c80 [ 360.180200][ T5736] r4:000089f3 r3:20002c00 [ 360.180208][ T5736] [<8152b554>] (sock_ioctl) from [<8056798c>] (sys_ioctl+0x130/0xdc8) [ 360.180242][ T5736] r9:85924300 r8:00000003 r7:20002c80 r6:85924301 r5:00000000 r4:000089f3 [ 360.180250][ T5736] [<8056785c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 360.180273][ T5736] Exception stack(0xead01fa8 to 0xead01ff0) [ 360.180291][ T5736] 1fa0: 00000000 00000000 00000003 000089f3 20002c80 00000000 [ 360.180308][ T5736] 1fc0: 00000000 00000000 0012ff70 00000036 002e0000 00000000 00006364 76b620bc [ 360.180321][ T5736] 1fe0: 76b61ec0 76b61eb0 000193a4 00131fc0 [ 360.180339][ T5736] r10:00000036 r9:856e6000 r8:8020029c r7:00000036 r6:0012ff70 r5:00000000 [ 360.180349][ T5736] r4:00000000 [ 373.230345][ T31] audit: type=1400 audit(373.150:275): avc: denied { shutdown } for pid=5778 comm="syz.0.559" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 377.375602][ T5794] FAULT_INJECTION: forcing a failure. [ 377.375602][ T5794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.376011][ T5794] CPU: 0 UID: 0 PID: 5794 Comm: syz.0.563 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 377.376082][ T5794] Hardware name: ARM-Versatile Express [ 377.376162][ T5794] Call trace: [ 377.376226][ T5794] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 377.376336][ T5794] r7:00000077 r6:00000000 r5:60000013 r4:8225b448 [ 377.376357][ T5794] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 377.376417][ T5794] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 377.376469][ T5794] r5:84132400 r4:82950610 [ 377.376484][ T5794] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 377.376583][ T5794] [<80964b58>] (should_fail_ex) from [<80964d94>] (should_fail+0x14/0x18) [ 377.376708][ T5794] r8:00000000 r7:00000077 r6:76b61bd8 r5:76b61f20 r4:eaf85fb0 [ 377.376730][ T5794] [<80964d80>] (should_fail) from [<80964db4>] (should_fail_usercopy+0x1c/0x20) [ 377.376826][ T5794] [<80964d98>] (should_fail_usercopy) from [<8022b374>] (restore_sigframe+0x4c/0x210) [ 377.376884][ T5794] [<8022b328>] (restore_sigframe) from [<8022b73c>] (sys_sigreturn+0x40/0x60) [ 377.376946][ T5794] r7:00000077 r6:00000005 r5:76b61f20 r4:eaf85fb0 [ 377.376966][ T5794] [<8022b6fc>] (sys_sigreturn) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 377.377010][ T5794] Exception stack(0xeaf85fa8 to 0xeaf85ff0) [ 377.377042][ T5794] 5fa0: 00000001 76b61f20 00000011 76b61f20 00000001 00000000 [ 377.377094][ T5794] 5fc0: 00000001 76b61f20 00000005 00000077 002e0000 00000000 00006364 76b620bc [ 377.377189][ T5794] 5fe0: 00000158 76b61bd8 000ef1f0 000ef1f8 [ 377.377217][ T5794] r5:76b61f20 r4:00000001 [ 385.920902][ T31] audit: type=1400 audit(385.840:276): avc: denied { bind } for pid=5852 comm="syz.0.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 397.744595][ T31] audit: type=1400 audit(397.660:277): avc: denied { accept } for pid=5906 comm="syz.0.603" laddr=172.20.20.170 lport=36723 faddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 409.904263][ T31] audit: type=1800 audit(409.830:278): pid=5957 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.616" name="/" dev="pipefs" ino=9426 res=0 errno=0 [ 415.171860][ T31] audit: type=1800 audit(415.090:279): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.621" name="/" dev="pipefs" ino=9468 res=0 errno=0 [ 428.069573][ T6063] FAULT_INJECTION: forcing a failure. [ 428.069573][ T6063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.070067][ T6063] CPU: 0 UID: 0 PID: 6063 Comm: syz.1.642 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 428.070148][ T6063] Hardware name: ARM-Versatile Express [ 428.070178][ T6063] Call trace: [ 428.070222][ T6063] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 428.070449][ T6063] r7:00000003 r6:00000000 r5:60000013 r4:8225b448 [ 428.070515][ T6063] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 428.070654][ T6063] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 428.070780][ T6063] r5:84134800 r4:82950610 [ 428.070863][ T6063] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 428.070939][ T6063] [<80964b58>] (should_fail_ex) from [<80964d94>] (should_fail+0x14/0x18) [ 428.071051][ T6063] r8:00000000 r7:00000003 r6:00001000 r5:00000000 r4:20000140 [ 428.071248][ T6063] [<80964d80>] (should_fail) from [<80964db4>] (should_fail_usercopy+0x1c/0x20) [ 428.071416][ T6063] [<80964d98>] (should_fail_usercopy) from [<8096ae80>] (strncpy_from_user+0x20/0x1a0) [ 428.071473][ T6063] [<8096ae60>] (strncpy_from_user) from [<80586f04>] (setxattr_copy+0x2c/0x90) [ 428.071680][ T6063] r10:000000e4 r9:84134800 r8:00000000 r7:00000003 r6:00001000 r5:00000000 [ 428.071860][ T6063] r4:ec235e48 [ 428.072063][ T6063] [<80586ed8>] (setxattr_copy) from [<8058713c>] (path_setxattrat+0x7c/0x17c) [ 428.072224][ T6063] r5:00000000 r4:20000140 [ 428.072459][ T6063] [<805870c0>] (path_setxattrat) from [<8058743c>] (sys_fsetxattr+0x30/0x38) [ 428.072525][ T6063] r8:8020029c r7:000000e4 r6:0012ff70 r5:00000000 r4:00000000 [ 428.072598][ T6063] [<8058740c>] (sys_fsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 428.072804][ T6063] Exception stack(0xec235fa8 to 0xec235ff0) [ 428.072964][ T6063] 5fa0: 00000000 00000000 00000003 20000140 00000000 00000000 [ 428.073027][ T6063] 5fc0: 00000000 00000000 0012ff70 000000e4 002e0000 00000000 00006364 76b340bc [ 428.073128][ T6063] 5fe0: 76b33ec0 76b33eb0 000193a4 00131fc0 [ 447.409083][ T6169] cgroup: fork rejected by pids controller in /syz1 [ 451.715563][ T6262] fuse: Bad value for 'fd' [ 452.306057][ T31] audit: type=1400 audit(452.230:280): avc: denied { accept } for pid=6263 comm="syz.0.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 452.315093][ T31] audit: type=1400 audit(452.230:281): avc: denied { write } for pid=6263 comm="syz.0.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 452.933799][ T31] audit: type=1400 audit(452.850:282): avc: denied { create } for pid=6265 comm="syz.0.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 455.066796][ T6277] fuse: Bad value for 'fd' [ 461.315764][ T31] audit: type=1400 audit(461.240:283): avc: denied { read } for pid=6414 comm="syz.0.705" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 461.316191][ T31] audit: type=1400 audit(461.240:284): avc: denied { open } for pid=6414 comm="syz.0.705" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 474.672250][ T6574] fuse: Bad value for 'fd' [ 475.743889][ T31] audit: type=1400 audit(475.660:285): avc: denied { write } for pid=6578 comm="syz.0.729" name="userfaultfd" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:sendmail_exec_t:s0" [ 475.744381][ T31] audit: type=1400 audit(475.660:286): avc: denied { open } for pid=6578 comm="syz.0.729" path="/dev/userfaultfd" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:sendmail_exec_t:s0" [ 475.757847][ T31] audit: type=1400 audit(475.680:287): avc: denied { ioctl } for pid=6578 comm="syz.0.729" path="/dev/userfaultfd" dev="devtmpfs" ino=84 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:sendmail_exec_t:s0" [ 476.107349][ T31] audit: type=1400 audit(476.030:288): avc: denied { create } for pid=6582 comm="syz.0.730" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 476.117782][ T31] audit: type=1400 audit(476.040:289): avc: denied { read write } for pid=6582 comm="syz.0.730" name="file0" dev="tmpfs" ino=2019 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 476.118330][ T31] audit: type=1400 audit(476.040:290): avc: denied { open } for pid=6582 comm="syz.0.730" path="/379/file0" dev="tmpfs" ino=2019 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 476.163918][ T31] audit: type=1400 audit(476.080:291): avc: denied { unlink } for pid=3104 comm="syz-executor" name="file0" dev="tmpfs" ino=2019 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 476.278367][ T6585] fuse: Bad value for 'fd' [ 479.526945][ T6596] fuse: Bad value for 'fd' [ 479.959206][ T31] audit: type=1400 audit(479.880:292): avc: denied { read } for pid=6602 comm="syz.0.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 480.688594][ T6607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6607 comm=syz.1.735 [ 497.921360][ T31] audit: type=1400 audit(497.840:293): avc: denied { ioctl } for pid=6860 comm="syz.0.755" path="socket:[9123]" dev="sockfs" ino=9123 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 499.292036][ T31] audit: type=1400 audit(499.210:294): avc: denied { write } for pid=6865 comm="syz.0.757" path="socket:[10166]" dev="sockfs" ino=10166 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 510.774105][ T7105] FAULT_INJECTION: forcing a failure. [ 510.774105][ T7105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.784226][ T7105] CPU: 1 UID: 0 PID: 7105 Comm: syz.0.767 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 510.784354][ T7105] Hardware name: ARM-Versatile Express [ 510.784383][ T7105] Call trace: [ 510.784442][ T7105] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 510.784559][ T7105] r7:00000000 r6:00000000 r5:60000113 r4:8225b448 [ 510.784578][ T7105] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 510.784626][ T7105] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 510.784679][ T7105] r5:838e6c00 r4:82950610 [ 510.784693][ T7105] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 510.784750][ T7105] [<80964b58>] (should_fail_ex) from [<80964d94>] (should_fail+0x14/0x18) [ 510.784810][ T7105] r8:76b61f30 r7:00000000 r6:00000000 r5:ed405f68 r4:00000002 [ 510.784827][ T7105] [<80964d80>] (should_fail) from [<80964db4>] (should_fail_usercopy+0x1c/0x20) [ 510.784879][ T7105] [<80964d98>] (should_fail_usercopy) from [<805895b8>] (simple_read_from_buffer+0x80/0x13c) [ 510.784933][ T7105] [<80589538>] (simple_read_from_buffer) from [<8060181c>] (proc_fail_nth_read+0xb8/0x100) [ 510.785000][ T7105] r10:00000001 r9:80601764 r8:00000002 r7:ed405f68 r6:0000000f r5:76b61f30 [ 510.785023][ T7105] r4:838e6c00 r3:ed405e9f [ 510.785041][ T7105] [<80601764>] (proc_fail_nth_read) from [<8054dc30>] (vfs_read+0x98/0x320) [ 510.785105][ T7105] r8:76b61f30 r7:ed405f68 r6:838e6c00 r5:0000000f r4:85955600 [ 510.785123][ T7105] [<8054db98>] (vfs_read) from [<8054e8d8>] (ksys_read+0x74/0xe8) [ 510.785184][ T7105] r10:00000003 r9:838e6c00 r8:8020029c r7:00000000 r6:00000000 r5:85955600 [ 510.785205][ T7105] r4:85955603 [ 510.785223][ T7105] [<8054e864>] (ksys_read) from [<8054e95c>] (sys_read+0x10/0x14) [ 510.785282][ T7105] r7:00000003 r6:00000004 r5:76b61f30 r4:0000000f [ 510.785300][ T7105] [<8054e94c>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 510.785346][ T7105] Exception stack(0xed405fa8 to 0xed405ff0) [ 510.785382][ T7105] 5fa0: 0000000f 76b61f30 00000004 76b61f30 0000000f 00000000 [ 510.785427][ T7105] 5fc0: 0000000f 76b61f30 00000004 00000003 002e0000 00000000 00006364 76b620bc [ 510.785454][ T7105] 5fe0: 00000158 76b61ed0 000d7df0 0012fe94 [ 517.538061][ T7231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7231 comm=syz.0.775 [ 538.964231][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 539.123874][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 539.132959][ T23] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 539.133581][ T23] usb 1-1: config 0 has no interface number 0 [ 539.155769][ T23] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 539.157143][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.158160][ T23] usb 1-1: Product: syz [ 539.159049][ T23] usb 1-1: Manufacturer: syz [ 539.159864][ T23] usb 1-1: SerialNumber: syz [ 539.166373][ T23] usb 1-1: config 0 descriptor?? [ 539.178226][ T23] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 543.033089][ T23] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 543.061085][ T23] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 544.443978][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 544.447360][ T9] usb 1-1: USB disconnect, device number 5 [ 544.456050][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 544.460282][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 544.468586][ T9] quatech2 1-1:0.51: device disconnected [ 548.543861][ T7601] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 549.139324][ T7789] fuse: Bad value for 'group_id' [ 549.139850][ T7789] fuse: Bad value for 'group_id' [ 551.674338][ T7874] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7874 comm=syz.0.810 [ 551.914162][ T95] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 552.097386][ T95] usb 1-1: unable to get BOS descriptor or descriptor too short [ 552.110363][ T95] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x1 is Bulk; changing to Interrupt [ 552.110913][ T95] usb 1-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.111281][ T95] usb 1-1: config 1 interface 0 has no altsetting 0 [ 552.171893][ T95] usb 1-1: string descriptor 0 read error: -22 [ 552.172406][ T95] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 552.172500][ T95] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.192544][ T7874] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 552.415587][ T95] usb 1-1: USB disconnect, device number 6 [ 552.558892][ T7914] fuse: Bad value for 'group_id' [ 552.559195][ T7914] fuse: Bad value for 'group_id' [ 557.204996][ T8003] fuse: Bad value for 'group_id' [ 557.205435][ T8003] fuse: Bad value for 'group_id' [ 562.318625][ T31] audit: type=1400 audit(562.230:295): avc: denied { setattr } for pid=8102 comm="syz.0.823" name="CAN_ISOTP" dev="sockfs" ino=10579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 567.806461][ T8122] FAULT_INJECTION: forcing a failure. [ 567.806461][ T8122] name failslab, interval 1, probability 0, space 0, times 0 [ 567.807027][ T8122] CPU: 0 UID: 0 PID: 8122 Comm: syz.0.828 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 567.807124][ T8122] Hardware name: ARM-Versatile Express [ 567.807160][ T8122] Call trace: [ 567.807219][ T8122] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 567.807332][ T8122] r7:00000d40 r6:00000000 r5:60000013 r4:8225b448 [ 567.807352][ T8122] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 567.807417][ T8122] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 567.807539][ T8122] r5:85635400 r4:82919a80 [ 567.807563][ T8122] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 567.807631][ T8122] [<80964b58>] (should_fail_ex) from [<8051c1e4>] (should_failslab+0x6c/0x94) [ 567.807722][ T8122] r8:85635400 r7:00000d40 r6:85e68568 r5:0000001d r4:83001240 [ 567.807802][ T8122] [<8051c178>] (should_failslab) from [<80500f78>] (__kmalloc_noprof+0x9c/0x458) [ 567.807876][ T8122] [<80500edc>] (__kmalloc_noprof) from [<807baddc>] (tomoyo_encode2+0x64/0xf0) [ 567.807939][ T8122] r10:00000fff r9:8309e400 r8:00000000 r7:8350d770 r6:85e68568 r5:85a97ffc [ 567.807960][ T8122] r4:85a97fea [ 567.807976][ T8122] [<807bad78>] (tomoyo_encode2) from [<807bae8c>] (tomoyo_encode+0x24/0x30) [ 567.808045][ T8122] r9:8309e400 r8:00000000 r7:8350d770 r6:85e68568 r5:00001000 r4:85a97feb [ 567.808064][ T8122] [<807bae68>] (tomoyo_encode) from [<807baf18>] (tomoyo_realpath_from_path+0x80/0x17c) [ 567.808116][ T8122] r5:00001000 r4:85a97000 [ 567.808136][ T8122] [<807bae98>] (tomoyo_realpath_from_path) from [<807b7018>] (tomoyo_path_number_perm+0xcc/0x22c) [ 567.808223][ T8122] r10:85635400 r9:00000000 r8:00000003 r7:00005451 r6:00000004 r5:81cd6278 [ 567.808268][ T8122] r4:85e68568 r3:826c0200 [ 567.808303][ T8122] [<807b6f4c>] (tomoyo_path_number_perm) from [<807bb8f8>] (tomoyo_file_ioctl+0x1c/0x20) [ 567.808383][ T8122] r9:85e68540 r8:00000003 r7:00000000 r6:00000000 r5:00005451 r4:85e68540 [ 567.808403][ T8122] [<807bb8dc>] (tomoyo_file_ioctl) from [<8076887c>] (security_file_ioctl+0x64/0x1e4) [ 567.808454][ T8122] [<80768818>] (security_file_ioctl) from [<805678a8>] (sys_ioctl+0x4c/0xdc8) [ 567.808513][ T8122] r7:00000000 r6:85e68541 r5:00000000 r4:00005451 [ 567.808531][ T8122] [<8056785c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 567.808577][ T8122] Exception stack(0xedef9fa8 to 0xedef9ff0) [ 567.808684][ T8122] 9fa0: 00000000 00000000 00000003 00005451 00000000 00000000 [ 567.808739][ T8122] 9fc0: 00000000 00000000 0012ff70 00000036 002e0000 00000000 00006364 76b620bc [ 567.808782][ T8122] 9fe0: 76b61ec0 76b61eb0 000193a4 00131fc0 [ 567.808819][ T8122] r10:00000036 r9:85635400 r8:8020029c r7:00000036 r6:0012ff70 r5:00000000 [ 567.808842][ T8122] r4:00000000 [ 567.808893][ T8122] ERROR: Out of memory at tomoyo_realpath_from_path. [ 569.022239][ T31] audit: type=1400 audit(568.940:296): avc: denied { setattr } for pid=8125 comm="syz.1.829" name="NFC_LLCP" dev="sockfs" ino=10634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 576.240237][ T31] audit: type=1400 audit(576.160:297): avc: denied { getopt } for pid=8227 comm="syz.0.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 576.327284][ T8241] fuse: Unknown parameter 'grou00000000000000000000' [ 581.465324][ T8285] fuse: Unknown parameter 'grou00000000000000000000' [ 587.667494][ T8416] fuse: Unknown parameter 'group_i00000000000000000000' [ 592.115708][ T8482] fuse: Unknown parameter 'group_id00000000000000000000' [ 595.314721][ T8546] fuse: Unknown parameter 'group_id00000000000000000000' [ 597.587500][ T8553] fuse: Invalid rootmode [ 604.728651][ T8661] fuse: Unknown parameter 'group_id00000000000000000000' [ 608.825754][ T8664] fuse: Bad value for 'rootmode' [ 611.654752][ T8672] fuse: Bad value for 'user_id' [ 611.655310][ T8672] fuse: Bad value for 'user_id' [ 612.128831][ T8677] fuse: Bad value for 'rootmode' [ 612.260429][ T8679] FAULT_INJECTION: forcing a failure. [ 612.260429][ T8679] name failslab, interval 1, probability 0, space 0, times 0 [ 612.260911][ T8679] CPU: 1 UID: 0 PID: 8679 Comm: syz.0.875 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 612.260984][ T8679] Hardware name: ARM-Versatile Express [ 612.261010][ T8679] Call trace: [ 612.261047][ T8679] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 612.261150][ T8679] r7:856e0000 r6:00000000 r5:60000013 r4:8225b448 [ 612.261168][ T8679] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 612.261215][ T8679] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 612.261263][ T8679] r5:856e0000 r4:82919a80 [ 612.261278][ T8679] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 612.261333][ T8679] [<80964b58>] (should_fail_ex) from [<8051c1e4>] (should_failslab+0x6c/0x94) [ 612.261396][ T8679] r8:00000000 r7:856e0000 r6:00000dc0 r5:830ab000 r4:830a8f00 [ 612.261422][ T8679] [<8051c178>] (should_failslab) from [<80500bf4>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 612.261467][ T8679] [<80500ba8>] (kmem_cache_alloc_noprof) from [<80612624>] (__kernfs_new_node+0x54/0x204) [ 612.261532][ T8679] r10:830ab000 r9:856e0000 r8:8245e958 r7:85fd6d68 r6:822e2560 r5:830ab000 [ 612.261550][ T8679] r4:85fd6d68 [ 612.261565][ T8679] [<806125d0>] (__kernfs_new_node) from [<80614210>] (kernfs_new_node+0x80/0xa4) [ 612.261625][ T8679] r10:830ab000 r9:822e2560 r8:00000000 r7:00000002 r6:00000000 r5:00008080 [ 612.261643][ T8679] r4:85fd6d68 [ 612.261658][ T8679] [<80614190>] (kernfs_new_node) from [<806165fc>] (__kernfs_create_file+0x30/0xc8) [ 612.261716][ T8679] r10:856e0000 r9:00000000 r8:00001000 r7:83844100 r6:00000000 r5:81c269c0 [ 612.261734][ T8679] r4:85fd6d68 [ 612.261750][ T8679] [<806165cc>] (__kernfs_create_file) from [<806175ec>] (sysfs_add_file_mode_ns+0x90/0x11c) [ 612.261798][ T8679] r5:8295d7e8 r4:85fd6d68 [ 612.261812][ T8679] [<8061755c>] (sysfs_add_file_mode_ns) from [<8061772c>] (sysfs_create_file_ns+0xb4/0xbc) [ 612.261867][ T8679] r9:85fe8b40 r8:85e675b8 r6:00000000 r5:8295d7e8 r4:85e67580 [ 612.261882][ T8679] [<80617678>] (sysfs_create_file_ns) from [<80b34440>] (driver_create_file+0x20/0x2c) [ 612.261937][ T8679] r6:00000000 r5:85e67580 r4:854b8030 [ 612.261952][ T8679] [<80b34420>] (driver_create_file) from [<80b31c40>] (bus_add_driver+0x158/0x21c) [ 612.261996][ T8679] [<80b31ae8>] (bus_add_driver) from [<80b344d0>] (driver_register+0x84/0x11c) [ 612.262050][ T8679] r8:00000004 r7:854b8004 r6:854b8030 r5:00000000 r4:854b8030 [ 612.262066][ T8679] [<80b3444c>] (driver_register) from [<80fda580>] (usb_gadget_register_driver_owner+0x50/0xf8) [ 612.262118][ T8679] r5:00000000 r4:854b800c [ 612.262133][ T8679] [<80fda530>] (usb_gadget_register_driver_owner) from [<8103fcd8>] (raw_ioctl+0x9dc/0x1094) [ 612.262191][ T8679] r7:854b8004 r6:60000013 r5:00000000 r4:854b8000 [ 612.262207][ T8679] [<8103f2fc>] (raw_ioctl) from [<8056798c>] (sys_ioctl+0x130/0xdc8) [ 612.262272][ T8679] r10:856e0000 r9:85fe8b40 r8:00000004 r7:00000000 r6:85fe8b41 r5:00000000 [ 612.262290][ T8679] r4:00005501 [ 612.262305][ T8679] [<8056785c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 612.262347][ T8679] Exception stack(0xee3b5fa8 to 0xee3b5ff0) [ 612.262383][ T8679] 5fa0: 00000004 76b60e70 00000004 00005501 00000000 76b5fe00 [ 612.262421][ T8679] 5fc0: 00000004 76b60e70 76b5fe70 00000036 00000005 76b60e60 00420000 00000000 [ 612.262446][ T8679] 5fe0: 00000000 76b5fde8 002b9000 0013198c [ 612.262479][ T8679] r10:00000036 r9:856e0000 r8:8020029c r7:00000036 r6:76b5fe70 r5:76b60e70 [ 612.262499][ T8679] r4:00000004 [ 612.294107][ T8679] bus_add_driver: add_bind_files(raw-gadget.0) failed [ 612.504068][ T3814] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 612.664105][ T3814] usb 1-1: Using ep0 maxpacket: 8 [ 612.678300][ T3814] usb 1-1: unable to get BOS descriptor or descriptor too short [ 612.700337][ T3814] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 612.700776][ T3814] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.701059][ T3814] usb 1-1: config 1 interface 0 has no altsetting 0 [ 612.754196][ T3814] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 612.755426][ T3814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.756371][ T3814] usb 1-1: Product: syz [ 612.757087][ T3814] usb 1-1: Manufacturer: syz [ 612.757813][ T3814] usb 1-1: SerialNumber: syz [ 612.794187][ T8679] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 613.146175][ T3814] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 613.166188][ T3814] usb 1-1: USB disconnect, device number 7 [ 613.182377][ T3814] usblp0: removed [ 615.921127][ T8797] fuse: Bad value for 'user_id' [ 615.921463][ T8797] fuse: Bad value for 'user_id' [ 616.117880][ T31] audit: type=1400 audit(616.040:298): avc: denied { setopt } for pid=8799 comm="syz.0.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 616.331378][ T31] audit: type=1400 audit(616.250:299): avc: denied { bind } for pid=8799 comm="syz.0.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 618.651875][ T8812] fuse: Bad value for 'rootmode' [ 620.739346][ T8820] fuse: Bad value for 'user_id' [ 620.739835][ T8820] fuse: Bad value for 'user_id' [ 621.400624][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.885'. [ 629.559511][ T8949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=8949 comm=syz.0.891 [ 630.275887][ T8952] fuse: Bad value for 'fd' [ 633.191576][ T8959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65498 sclass=netlink_route_socket pid=8959 comm=syz.1.894 [ 634.969415][ T8965] fuse: Bad value for 'fd' [ 642.469072][ T9091] fuse: Bad value for 'fd' [ 647.878294][ T9101] fuse: Unknown parameter 'user_id00000000000000000000' [ 649.646637][ T9109] fuse: Bad value for 'fd' [ 652.425745][ T9118] fuse: Unknown parameter 'user_id00000000000000000000' [ 653.810816][ T9126] fuse: Bad value for 'fd' [ 654.187056][ T9130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9130 comm=syz.0.918 [ 654.341955][ T9132] fuse: Unknown parameter 'user_id00000000000000000000' [ 655.666313][ T9138] fuse: Bad value for 'fd' [ 655.968483][ T9142] fuse: Bad value for 'fd' [ 657.321516][ T9150] fuse: Invalid rootmode [ 657.620599][ T9147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65525 sclass=netlink_route_socket pid=9147 comm=syz.1.923 [ 660.038321][ T9169] fuse: Bad value for 'fd' [ 660.338946][ T9179] fuse: Invalid rootmode [ 660.559976][ T9183] FAULT_INJECTION: forcing a failure. [ 660.559976][ T9183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.560405][ T9183] CPU: 0 UID: 0 PID: 9183 Comm: syz.0.932 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 660.560471][ T9183] Hardware name: ARM-Versatile Express [ 660.560497][ T9183] Call trace: [ 660.560535][ T9183] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 660.560650][ T9183] r7:e0401e20 r6:00000000 r5:60000013 r4:8225b448 [ 660.560667][ T9183] [<80201ae4>] (show_stack) from [<8021fe10>] (dump_stack_lvl+0x70/0x7c) [ 660.560710][ T9183] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 660.561311][ T9183] r5:85630000 r4:82950610 [ 660.562069][ T9183] [<8021fe1c>] (dump_stack) from [<80964d1c>] (should_fail_ex+0x1c4/0x228) [ 660.562885][ T9183] [<80964b58>] (should_fail_ex) from [<80964d94>] (should_fail+0x14/0x18) [ 660.563504][ T9183] r8:00000040 r7:e0401e20 r6:20001740 r5:00000000 r4:e0401f20 [ 660.563858][ T9183] [<80964d80>] (should_fail) from [<80964db4>] (should_fail_usercopy+0x1c/0x20) [ 660.563929][ T9183] [<80964d98>] (should_fail_usercopy) from [<8152d030>] (copy_msghdr_from_user+0x50/0x130) [ 660.563994][ T9183] [<8152cfe0>] (copy_msghdr_from_user) from [<8152d188>] (___sys_sendmsg+0x78/0xd0) [ 660.564054][ T9183] r8:00000040 r7:00000000 r6:852f9900 r5:e0401f20 r4:e0401e64 [ 660.564074][ T9183] [<8152d110>] (___sys_sendmsg) from [<8152d644>] (__sys_sendmsg+0x8c/0xe0) [ 660.564228][ T9183] r10:00000128 r9:85630000 r8:85e68840 r7:00000040 r6:20001740 r5:85e68841 [ 660.564286][ T9183] r4:00000003 [ 660.564308][ T9183] [<8152d5b8>] (__sys_sendmsg) from [<8152d6ac>] (sys_sendmsg+0x14/0x18) [ 660.564375][ T9183] r8:8020029c r7:00000128 r6:0012ff70 r5:00000000 r4:00000000 [ 660.564393][ T9183] [<8152d698>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 660.564437][ T9183] Exception stack(0xe0401fa8 to 0xe0401ff0) [ 660.565217][ T9183] 1fa0: 00000000 00000000 00000003 20001740 00000040 00000000 [ 660.565687][ T9183] 1fc0: 00000000 00000000 0012ff70 00000128 002e0000 00000000 00006364 76b620bc [ 660.566019][ T9183] 1fe0: 76b61ec0 76b61eb0 000193a4 00131fc0 [ 673.535133][ T3794] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 673.915788][ T3794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.916224][ T3794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.916423][ T3794] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 673.916506][ T3794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.920056][ T3794] usb 2-1: config 0 descriptor?? [ 674.560283][ T3794] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 674.560946][ T3794] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x2 [ 674.592949][ T3794] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 675.631007][ T3794] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00 [ 677.510119][ T3814] usb 2-1: USB disconnect, device number 7 [ 679.104524][ T3794] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 679.279752][ T3794] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 679.280214][ T3794] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 679.341566][ T3794] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 679.341925][ T3794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.342147][ T3794] usb 1-1: Product: syz [ 679.342343][ T3794] usb 1-1: Manufacturer: syz [ 679.342547][ T3794] usb 1-1: SerialNumber: syz [ 679.355427][ T3794] usb 1-1: config 0 descriptor?? [ 679.370537][ T9315] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 679.376841][ T9315] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 679.624600][ T9315] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 679.651546][ T9315] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 679.992606][ T3794] Error reading MAC address [ 680.010776][ T3794] usb 1-1: USB disconnect, device number 8 [ 693.375143][ T9453] Invalid ELF header magic: != ELF [ 693.376883][ T31] audit: type=1400 audit(693.290:300): avc: denied { module_load } for pid=9452 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 693.456752][ T31] audit: type=1400 audit(693.380:301): avc: denied { read write } for pid=3104 comm="syz-executor" name="loop0" dev="devtmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 693.473946][ T31] audit: type=1400 audit(693.390:302): avc: denied { open } for pid=3104 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 693.474793][ T31] audit: type=1400 audit(693.390:303): avc: denied { ioctl } for pid=3104 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=633 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 694.530957][ T9459] mmap: syz.0.950 (9459) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 694.532375][ T31] audit: type=1400 audit(694.450:304): avc: denied { map } for pid=9458 comm="syz.0.950" path="/dev/fb0" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 694.535315][ T31] audit: type=1400 audit(694.450:305): avc: denied { execute } for pid=9458 comm="syz.0.950" path="/dev/fb0" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 707.729789][ T31] audit: type=1400 audit(707.650:306): avc: denied { connect } for pid=9474 comm="syz.0.955" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 719.624282][ T3814] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 719.784126][ T3814] usb 1-1: Using ep0 maxpacket: 16 [ 719.792933][ T3814] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 719.793689][ T3814] usb 1-1: config 0 has no interface number 0 [ 719.793935][ T3814] usb 1-1: config 0 interface 66 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 719.808151][ T3814] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0192, bcdDevice= 1.08 [ 719.808448][ T3814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.808684][ T3814] usb 1-1: Product: syz [ 719.808821][ T3814] usb 1-1: Manufacturer: syz [ 719.808929][ T3814] usb 1-1: SerialNumber: syz [ 719.814350][ T3814] usb 1-1: config 0 descriptor?? [ 719.822787][ T9481] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 719.827381][ T3814] ftdi_sio 1-1:0.66: FTDI USB Serial Device converter detected [ 719.829866][ T3814] usb 1-1: Detected SIO [ 719.835032][ T3814] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 720.036719][ T3814] usb 1-1: USB disconnect, device number 9 [ 720.046149][ T3814] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 720.054337][ T3814] ftdi_sio 1-1:0.66: device disconnected [ 727.908027][ T9510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.922292][ T9510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.875633][ T9510] hsr_slave_0: entered promiscuous mode [ 729.879994][ T9510] hsr_slave_1: entered promiscuous mode [ 729.899806][ T9510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 729.901035][ T9510] Cannot create hsr debugfs directory [ 730.479843][ T9510] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 730.517256][ T9510] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 730.540317][ T9510] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 730.567441][ T9510] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 731.761904][ T9510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.871305][ T9510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 736.698195][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.776302][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.847254][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.947308][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.501881][ T12] dvmrp1 (unregistering): left allmulticast mode [ 737.557532][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.572065][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.580926][ T12] bond0 (unregistering): Released all slaves [ 737.712026][ T12] hsr_slave_0: left promiscuous mode [ 737.718423][ T12] hsr_slave_1: left promiscuous mode [ 737.729951][ T12] veth1_macvtap: left promiscuous mode [ 737.730660][ T12] veth0_macvtap: left promiscuous mode [ 737.731028][ T12] veth1_vlan: left promiscuous mode [ 737.733247][ T12] veth0_vlan: left promiscuous mode [ 738.649794][ T31] audit: type=1400 audit(738.570:307): avc: denied { setopt } for pid=9873 comm="syz.0.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 738.662118][ T31] audit: type=1400 audit(738.580:308): avc: denied { read } for pid=9873 comm="syz.0.961" path="socket:[13485]" dev="sockfs" ino=13485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 739.454803][ T9510] veth0_vlan: entered promiscuous mode [ 739.479049][ T9510] veth1_vlan: entered promiscuous mode [ 739.547391][ T9510] veth0_macvtap: entered promiscuous mode [ 739.560297][ T9510] veth1_macvtap: entered promiscuous mode [ 739.637727][ T9510] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.638177][ T9510] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.640508][ T9510] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.640814][ T9510] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.722147][ T9901] ªªªªª2q>wvÓÄÂ: renamed from lo (while UP) [ 741.931644][ T31] audit: type=1400 audit(741.850:309): avc: denied { ioctl } for pid=9902 comm="syz.0.964" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 741.946332][ T31] audit: type=1400 audit(741.850:310): avc: denied { set_context_mgr } for pid=9902 comm="syz.0.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 743.157635][ T31] audit: type=1400 audit(743.060:311): avc: denied { bind } for pid=9913 comm="syz.0.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 743.495490][ T9915] comedi: valid board names for 8255 driver are: [ 743.496079][ T9915] 8255 [ 743.496570][ T9915] comedi: valid board names for vmk80xx driver are: [ 743.496783][ T9915] vmk80xx [ 743.496966][ T9915] comedi: valid board names for usbduxsigma driver are: [ 743.497153][ T9915] usbduxsigma [ 743.497359][ T9915] comedi: valid board names for usbduxfast driver are: [ 743.497562][ T9915] usbduxfast [ 743.497756][ T9915] comedi: valid board names for usbdux driver are: [ 743.497953][ T9915] usbdux [ 743.498141][ T9915] comedi: valid board names for ni6501 driver are: [ 743.498324][ T9915] ni6501 [ 743.498515][ T9915] comedi: valid board names for dt9812 driver are: [ 743.498711][ T9915] dt9812 [ 743.498903][ T9915] comedi: valid board names for ni_labpc_cs driver are: [ 743.499138][ T9915] ni_labpc_cs [ 743.500454][ T9915] comedi: valid board names for ni_daq_700 driver are: [ 743.500671][ T9915] ni_daq_700 [ 743.500868][ T9915] comedi: valid board names for labpc_pci driver are: [ 743.501069][ T9915] labpc_pci [ 743.501260][ T9915] comedi: valid board names for adl_pci9118 driver are: [ 743.501558][ T9915] pci9118dg [ 743.501798][ T9915] pci9118hg [ 743.501995][ T9915] pci9118hr [ 743.502186][ T9915] comedi: valid board names for 8255_pci driver are: [ 743.502377][ T9915] 8255_pci [ 743.502589][ T9915] comedi: valid board names for comedi_parport driver are: [ 743.502782][ T9915] comedi_parport [ 743.503011][ T9915] comedi: valid board names for comedi_test driver are: [ 743.514106][ T9915] comedi_test [ 743.514328][ T9915] comedi: valid board names for comedi_bond driver are: [ 743.514380][ T9915] comedi_bond [ 745.210804][ T9924] Illegal XDP return value 4294967294 on prog (id 16) dev N/A, expect packet loss! [ 755.420692][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.481445][ T31] audit: type=1400 audit(769.390:312): avc: denied { create } for pid=9980 comm="syz.0.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 769.486349][ T31] audit: type=1400 audit(769.400:313): avc: denied { sys_admin } for pid=9980 comm="syz.0.975" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 772.850149][ T9987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.854098][ T9987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.680452][ T95] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 779.979126][ T95] usb 1-1: Using ep0 maxpacket: 8 [ 780.038284][ T95] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 780.054486][ T95] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 780.054930][ T95] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 780.055162][ T95] usb 1-1: Product: syz [ 780.055345][ T95] usb 1-1: Manufacturer: syz [ 780.066117][ T95] usb 1-1: SerialNumber: syz [ 780.321679][ T95] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 780.322270][ T95] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 780.322644][ T95] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 780.322872][ T95] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 780.524904][ T95] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 780.528260][ T95] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 780.545485][ T95] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 780.727740][ T9886] usb 1-1: USB disconnect, device number 10 [ 780.732610][ T9886] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 780.769866][ T9886] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 780.770820][ T9886] visor 1-1:1.0: device disconnected [ 781.097198][ T31] audit: type=1400 audit(781.020:314): avc: denied { nlmsg_read } for pid=10028 comm="syz.0.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 796.604456][ T2890] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 796.756284][ T2890] usb 1-1: Using ep0 maxpacket: 8 [ 796.807276][ T2890] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 796.808622][ T2890] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 796.809957][ T2890] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 796.811009][ T2890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.848106][ T2890] usbtmc 1-1:16.0: bulk endpoints not found [ 797.054338][ T3054] usb 1-1: USB disconnect, device number 11 [ 797.926053][T10059] block device autoloading is deprecated and will be removed. [ 797.928188][T10059] syz.0.986: attempt to access beyond end of device [ 797.928188][T10059] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 798.743075][T10070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.768186][T10070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.808632][T10070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.813066][T10070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.851819][T10070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.852830][T10070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.879471][T10070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.906019][T10070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.368653][T10070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.371391][T10070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.412589][T10070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.425449][T10070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.381646][ T31] audit: type=1400 audit(811.300:315): avc: denied { bind } for pid=10095 comm="syz.0.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 811.388805][ T31] audit: type=1400 audit(811.300:316): avc: denied { name_bind } for pid=10095 comm="syz.0.992" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 811.412118][ T31] audit: type=1400 audit(811.300:317): avc: denied { node_bind } for pid=10095 comm="syz.0.992" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 811.688756][T10098] binder: 10097:10098 ioctl c0306201 0 returned -14 [ 812.096227][ T3054] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 812.155907][ T31] audit: type=1400 audit(812.080:318): avc: denied { module_request } for pid=10104 comm="syz.2.995" kmod="net-pf-16-proto-16-family-nl80211" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 812.244412][ T3054] usb 1-1: Using ep0 maxpacket: 16 [ 812.296945][ T3054] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 812.297211][ T3054] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 812.329964][ T3054] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 812.331615][ T3054] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.344786][ T3054] usb 1-1: Product: syz [ 812.345129][ T3054] usb 1-1: Manufacturer: syz [ 812.345341][ T3054] usb 1-1: SerialNumber: syz [ 812.382847][ T3054] usb 1-1: config 0 descriptor?? [ 816.826088][ T31] audit: type=1400 audit(816.750:319): avc: denied { mounton } for pid=10110 comm="syz.2.996" path="/10/file0" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 816.834123][T10114] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 822.672025][ T2890] usb 1-1: USB disconnect, device number 12 [ 823.153998][ T95] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 823.342516][ T95] usb 1-1: config 1 interface 0 has no altsetting 0 [ 823.387127][ T95] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 823.387553][ T95] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.387874][ T95] usb 1-1: Product: syz [ 823.388090][ T95] usb 1-1: Manufacturer: syz [ 823.388296][ T95] usb 1-1: SerialNumber: syz [ 823.843970][ T95] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 837.582459][ T9886] usb 1-1: USB disconnect, device number 13 [ 837.586284][ T9886] usblp0: removed [ 838.842171][T10161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.849508][T10161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.620082][ T31] audit: type=1400 audit(839.540:320): avc: denied { mounton } for pid=10168 comm="syz.2.1008" path="/" dev="gadgetfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 840.120603][T10174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.140496][T10174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.392489][T10174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.394140][T10174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.105927][ T3814] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 878.315123][ T3814] usb 1-1: Using ep0 maxpacket: 16 [ 878.362885][ T3814] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 878.364497][ T3814] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.365668][ T3814] usb 1-1: config 0 has no interface number 0 [ 878.397496][ T3814] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 878.398562][ T3814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.403923][ T3814] usb 1-1: Product: syz [ 878.404861][ T3814] usb 1-1: Manufacturer: syz [ 878.405677][ T3814] usb 1-1: SerialNumber: syz [ 878.409831][ T3814] usb 1-1: config 0 descriptor?? [ 878.641165][ T9885] usb 1-1: USB disconnect, device number 14 [ 879.897532][ C0] vkms_vblank_simulate: vblank timer overrun [ 880.659835][ C0] vkms_vblank_simulate: vblank timer overrun [ 891.332714][T10269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.346795][T10269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.214012][T10289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.216663][T10289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.166847][T10311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 901.179142][T10311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 907.046006][ T31] audit: type=1400 audit(906.940:321): avc: denied { setopt } for pid=10305 comm="syz.0.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 921.845134][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.908278][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.020157][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.091342][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.359593][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.391832][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.422212][ T12] bond0 (unregistering): Released all slaves [ 922.548356][ T12] hsr_slave_0: left promiscuous mode [ 922.550151][ T12] hsr_slave_1: left promiscuous mode [ 922.564864][ T12] veth1_macvtap: left promiscuous mode [ 922.565275][ T12] veth0_macvtap: left promiscuous mode [ 922.565642][ T12] veth1_vlan: left promiscuous mode [ 922.565813][ T12] veth0_vlan: left promiscuous mode [ 924.212018][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 924.255743][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1057'. [ 924.736916][T10452] netlink: 'syz.2.1059': attribute type 10 has an invalid length. [ 924.746260][T10452] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1059'. [ 924.761892][T10452] vxcan0: entered promiscuous mode [ 924.762945][T10452] vxcan0: entered allmulticast mode [ 924.769760][T10452] A link change request failed with some changes committed already. Interface vxcan0 may have been left with an inconsistent configuration, please check. [ 927.030073][T10529] pimreg: entered allmulticast mode [ 927.041578][T10344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.082778][T10344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.107887][T10529] pimreg: left allmulticast mode [ 928.200886][T10572] nvme_fabrics: missing parameter 'transport=%s' [ 928.201356][T10572] nvme_fabrics: missing parameter 'nqn=%s' [ 930.856780][T10344] hsr_slave_0: entered promiscuous mode [ 930.859249][T10344] hsr_slave_1: entered promiscuous mode [ 932.989335][T10344] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 933.010465][T10344] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 933.026726][T10344] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 933.050268][T10344] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 934.521051][T10344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.365649][T10344] veth0_vlan: entered promiscuous mode [ 940.414656][T10344] veth1_vlan: entered promiscuous mode [ 940.511406][T10344] veth0_macvtap: entered promiscuous mode [ 940.530000][T10344] veth1_macvtap: entered promiscuous mode [ 940.629186][T10344] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.629609][T10344] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.645647][T10344] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.645976][T10344] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.380016][ T9885] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 941.544194][ T9885] usb 1-1: Using ep0 maxpacket: 8 [ 941.617097][ T9885] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 941.618271][ T9885] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 941.621135][ T9885] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 941.624888][ T9885] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 941.634160][ T9885] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 941.637028][ T9885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.911522][ T9885] usb 1-1: GET_CAPABILITIES returned 0 [ 941.912355][ T9885] usbtmc 1-1:16.0: can't read capabilities [ 942.132926][ T9885] usb 1-1: USB disconnect, device number 15 [ 943.183715][ C1] vkms_vblank_simulate: vblank timer overrun [ 943.771434][ T9885] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 944.041364][ T9885] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.084735][ T9885] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 944.087762][ T9885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.088754][ T9885] usb 1-1: Product: syz [ 944.089545][ T9885] usb 1-1: Manufacturer: syz [ 944.090308][ T9885] usb 1-1: SerialNumber: syz [ 944.219876][ C1] vkms_vblank_simulate: vblank timer overrun [ 944.815697][ C1] vkms_vblank_simulate: vblank timer overrun [ 945.324069][ T9885] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 945.325091][ T9885] cdc_ncm 1-1:1.0: dwNtbInMaxSize=20 is too small. Using 2048 [ 945.325516][ T9885] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 945.567111][ T9885] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 945.608766][ T9885] usb 1-1: USB disconnect, device number 16 [ 945.610671][ T9885] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 946.160887][T10860] syzkaller0: entered promiscuous mode [ 946.174935][T10860] syzkaller0: entered allmulticast mode [ 979.836234][T10918] input: syz0 as /devices/virtual/input/input5 [ 986.364405][ T31] audit: type=1400 audit(986.290:322): avc: denied { name_bind } for pid=10925 comm="syz.0.1081" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 989.643331][T10943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.647847][T10943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.225796][ T31] audit: type=1400 audit(997.150:323): avc: denied { create } for pid=10964 comm="syz.0.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 997.237370][ T31] audit: type=1400 audit(997.160:324): avc: denied { write } for pid=10964 comm="syz.0.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1010.455652][ T31] audit: type=1400 audit(1010.380:325): avc: denied { mount } for pid=10980 comm="syz.0.1100" name="/" dev="configfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1010.486879][ T31] audit: type=1400 audit(1010.400:326): avc: denied { search } for pid=10980 comm="syz.0.1100" name="/" dev="configfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1010.582530][ T31] audit: type=1400 audit(1010.500:327): avc: denied { search } for pid=10980 comm="syz.0.1100" name="/" dev="configfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1010.606117][ T31] audit: type=1400 audit(1010.530:328): avc: denied { read open } for pid=10980 comm="syz.0.1100" path="/" dev="configfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1010.911586][T10985] IPv6: Can't replace route, no match found [ 1011.384113][ T3814] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1011.544057][ T3814] usb 1-1: Using ep0 maxpacket: 8 [ 1011.553494][ T3814] usb 1-1: config 162 has an invalid interface number: 246 but max is 1 [ 1011.554865][ T3814] usb 1-1: config 162 has an invalid interface number: 245 but max is 1 [ 1011.555848][ T3814] usb 1-1: config 162 has no interface number 0 [ 1011.556653][ T3814] usb 1-1: config 162 has no interface number 1 [ 1011.557471][ T3814] usb 1-1: config 162 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1011.564626][ T3814] usb 1-1: config 162 interface 245 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1011.565924][ T3814] usb 1-1: config 162 interface 245 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1011.567169][ T3814] usb 1-1: config 162 interface 245 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1011.568581][ T3814] usb 1-1: config 162 interface 245 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1011.569868][ T3814] usb 1-1: config 162 interface 245 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1011.571083][ T3814] usb 1-1: config 162 interface 246 has no altsetting 0 [ 1011.572121][ T3814] usb 1-1: config 162 interface 245 has no altsetting 0 [ 1011.589285][ T3814] usb 1-1: New USB device found, idVendor=8087, idProduct=0a5a, bcdDevice=5f.2c [ 1011.590337][ T3814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.591476][ T3814] usb 1-1: Product: syz [ 1011.592661][ T3814] usb 1-1: Manufacturer: syz [ 1011.593994][ T3814] usb 1-1: SerialNumber: syz [ 1011.854259][ T3814] usb 1-1: USB disconnect, device number 17 [ 1043.824155][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'. [ 1044.132829][ T31] audit: type=1400 audit(1044.050:329): avc: denied { ioctl } for pid=11036 comm="syz.0.1113" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15393 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1044.172473][T11037] ------------[ cut here ]------------ [ 1044.175855][T11037] WARNING: CPU: 0 PID: 11037 at mm/highmem.c:622 kunmap_local_indexed+0x20c/0x224 [ 1044.185678][T11037] Modules linked in: [ 1044.187646][T11037] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1044.188217][T11037] CPU: 0 UID: 0 PID: 11037 Comm: syz.0.1113 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT [ 1044.188621][T11037] Hardware name: ARM-Versatile Express [ 1044.188893][T11037] Call trace: [ 1044.189086][T11037] [<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c) [ 1044.189488][T11037] r7:00000000 r6:8282083c r5:00000000 r4:8225b448 [ 1044.189764][T11037] [<80201ae4>] (show_stack) from [<8021fdf4>] (dump_stack_lvl+0x54/0x7c) [ 1044.190144][T11037] [<8021fda0>] (dump_stack_lvl) from [<8021fe34>] (dump_stack+0x18/0x1c) [ 1044.190501][T11037] r5:00000000 r4:82a6dd18 [ 1044.190702][T11037] [<8021fe1c>] (dump_stack) from [<80202614>] (panic+0x120/0x374) [ 1044.191251][T11037] [<802024f4>] (panic) from [<80258578>] (get_taint+0x0/0x1c) [ 1044.193146][T11037] r3:8280c684 r2:00000001 r1:82241f90 r0:82249928 [ 1044.195227][T11037] r7:804bc0f4 [ 1044.196255][T11037] [<80258504>] (check_panic_on_warn) from [<802586dc>] (__warn+0x80/0x188) [ 1044.197717][T11037] [<8025865c>] (__warn) from [<8025895c>] (warn_slowpath_fmt+0x178/0x1f4) [ 1044.198162][T11037] r8:00000009 r7:82275220 r6:df9f9d1c r5:85636000 r4:00000000 [ 1044.198660][T11037] [<802587e8>] (warn_slowpath_fmt) from [<804bc0f4>] (kunmap_local_indexed+0x20c/0x224) [ 1044.199221][T11037] r10:00000000 r9:deb6d728 r8:dedda36c r7:00a00000 r6:00000003 r5:85636000 [ 1044.199760][T11037] r4:ffefd000 [ 1044.199969][T11037] [<804bbee8>] (kunmap_local_indexed) from [<80537368>] (move_pages+0xb24/0x19c8) [ 1044.200576][T11037] r7:00a00000 r6:00000000 r5:8594f6e4 r4:84011b00 [ 1044.200924][T11037] [<80536844>] (move_pages) from [<805be47c>] (userfaultfd_ioctl+0xff8/0x21c4) [ 1044.201392][T11037] r10:84011b00 r9:df9f9e98 r8:21000000 r7:00000001 r6:00000000 r5:20000040 [ 1044.201790][T11037] r4:85557000 [ 1044.202486][T11037] [<805bd484>] (userfaultfd_ioctl) from [<8056798c>] (sys_ioctl+0x130/0xdc8) [ 1044.204217][T11037] r10:85636000 r9:85db36c0 r8:00000003 r7:20000040 r6:85db36c1 r5:00000000 [ 1044.205800][T11037] r4:c028aa05 [ 1044.206449][T11037] [<8056785c>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1044.208059][T11037] Exception stack(0xdf9f9fa8 to 0xdf9f9ff0) [ 1044.211083][T11037] 9fa0: 00000000 00000000 00000003 c028aa05 20000040 00000000 [ 1044.211556][T11037] 9fc0: 00000000 00000000 002f6300 00000036 002e0000 00000000 00006364 76be70bc [ 1044.211932][T11037] 9fe0: 76be6ec0 76be6eb0 000193a4 00131fc0 [ 1044.212236][T11037] r10:00000036 r9:85636000 r8:8020029c r7:00000036 r6:002f6300 r5:00000000 [ 1044.212607][T11037] r4:00000000 [ 1044.215459][T11037] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:39:01 Registers: info registers vcpu 0 CPU#0 R00=82b046c0 R01=80000093 R02=85636000 R03=00002846 R04=82b046b8 R05=80000093 R06=00000f01 R07=00000000 R08=82828458 R09=00000000 R10=00000b6a R11=df9f9ac4 R12=df9f9ac8 R13=df9f9ab8 R14=809ea530 R15=81a30a34 PSR=60000093 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000000 R01=7effffff R02=00000000 R03=b5403587 R04=dfab5ec0 R05=200b39e0 R06=000059c9 R07=00000002 R08=00000000 R09=85633c00 R10=00010106 R11=dfab5f5c R12=a10b39ff R13=dfab5e80 R14=8152d3dc R15=8152d3e4 PSR=80000013 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000