last executing test programs: 5.519707058s ago: executing program 0 (id=3354): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) close(0xffffffffffffffff) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3}}, 0x30) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) 5.438923562s ago: executing program 0 (id=3355): r0 = openat$selinux_mls(0xffffff9c, 0x0, 0x0, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0xf, @loopback, 0x26}, 0x1c) 5.438499202s ago: executing program 0 (id=3356): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup3(r0, r1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001c40)='gretap0\x00', 0x10) connect$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @local, 0x1}, 0x10) ioctl$BLKZEROOUT(r2, 0x127f, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000180)={0x3, {{0x2, 0x4e23, @loopback}}}, 0x84) 4.809789558s ago: executing program 1 (id=3358): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB='^\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000f7dbdf250700000008000100190000000c009900090000001a00000014000400726f73653000000000000000000000000a0018000303030303030000140004007866726d3000"/86], 0x5c}, 0x1, 0x0, 0x0, 0x20081}, 0x8801) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000002280)={0xc0c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3ff}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0xb9c, 0x8, 0x0, 0x1, [{0x248, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffe}, @WGPEER_A_ALLOWEDIPS={0x23c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}}, {0x5, 0x3, 0x2}}]}]}]}, {0x508, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4d4, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x6}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xe9f1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}, @WGPEER_A_FLAGS={0x8}]}, {0x2d8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4f3438eb15e80ea65ad34d38b46e85c35338401a4ebfd486e23d8478ef216bc1"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x264, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x7}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x40}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x170, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x104, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5fb56278dd79d0db4a6ccd84885c8ab7cb89cb2222633b7b9162a4d27e0dab72"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}]}]}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0xc0c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.759243054s ago: executing program 1 (id=3359): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x6, 0x2, 0x0, 0xede3695794ba2b8d, 0x1, 0x6}, &(0x7f00000000c0)=0x20) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80044121, &(0x7f0000000100)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x0, 'dvmrp1\x00', {0x1}, 0xff}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000180)={{r0}, {@void, @actul_num={@val=0x2d, 0x8, 0x52}}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x100, 0x100, 0x4, [@struct={0xa, 0x8, 0x0, 0x4, 0x0, 0xfff, [{0x0, 0x3, 0xd}, {0x10, 0x3, 0x5}, {0xa, 0x2, 0x37}, {0xe, 0x0, 0x5}, {0x7, 0x1, 0x3}, {0x3, 0x5, 0x3}, {0x0, 0x2}, {0x6, 0x4, 0x6}]}, @restrict={0x1, 0x0, 0x0, 0xb, 0x3}, @union={0x3, 0x7, 0x0, 0x5, 0x1, 0x7fff, [{0xf, 0x3, 0x6cd9}, {0x8, 0x2, 0x1ff}, {0xc, 0x5, 0x1400000}, {0x0, 0x2}, {0x10}, {0xb, 0x5, 0x7}, {0xd, 0x1, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xcad}}, @var={0xb, 0x0, 0x0, 0xe, 0x5, 0x2}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000340)=""/21, 0x11c, 0x15, 0x1, 0x3, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x60, '\x00', 0x0, r2, 0x1, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000440)={0x1, 'batadv_slave_0\x00', {}, 0x2}) r3 = accept$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, &(0x7f00000004c0)=0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000500)={0x8, 'dummy0\x00', {'dvmrp1\x00'}, 0x8}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x2) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000540)=""/19, &(0x7f0000000580)=0x13) open(&(0x7f00000005c0)='./file0\x00', 0x400, 0x107) close(r2) r4 = openat$dlm_plock(0xffffff9c, &(0x7f0000000600), 0x8002, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000640)={0x0, 'ipvlan1\x00', {0x3}, 0x1ff}) close(r4) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000680)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000900)={'wg0\x00'}) 2.66008734s ago: executing program 1 (id=3360): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) close(0xffffffffffffffff) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3}}, 0x30) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) 2.65392222s ago: executing program 1 (id=3361): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x5421, &(0x7f00000000c0)) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='veth1_to_bridge\x00', 0x13) connect$l2tp(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @private=0xa010100, 0x80000001}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x40) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x3) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)=0x1) 2.320934079s ago: executing program 0 (id=3362): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x400, 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x22918f0, &(0x7f00000000c0)=ANY=[]) 2.270054032s ago: executing program 0 (id=3363): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2}, 0x18) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB='^\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000f7dbdf250700000008000100190000000c009900090000001a00000014000400726f73653000000000000000000000000a0018000303030303030000140004007866726d3000"/86], 0x5c}, 0x1, 0x0, 0x0, 0x20081}, 0x8801) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000002280)={0xc0c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3ff}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0xb9c, 0x8, 0x0, 0x1, [{0x248, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffe}, @WGPEER_A_ALLOWEDIPS={0x23c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}}, {0x5, 0x3, 0x2}}]}]}]}, {0x508, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4d4, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x6}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xe9f1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}, @WGPEER_A_FLAGS={0x8}]}, {0x2d8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4f3438eb15e80ea65ad34d38b46e85c35338401a4ebfd486e23d8478ef216bc1"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x264, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x7}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x40}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x170, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x104, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5fb56278dd79d0db4a6ccd84885c8ab7cb89cb2222633b7b9162a4d27e0dab72"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}]}]}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0xc0c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 192.909609ms ago: executing program 0 (id=3364): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r2 = dup3(r1, r0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001c40)='vlan1\x00', 0x10) connect$l2tp(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r3, 0x0, 0x0, 0x20044844, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x1}, 0x80) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x150, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x6f}}}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0xaf, 0x3}, {0x6, 0x2}, {0x4, 0x5}, {0xc, 0x6}, {0x1, 0x4}, {0x0, 0x5}, {0x6}, {0x1, 0x1}, {0x7}, {0x8, 0x8}], "c5df8acf65962127"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x5, 0x5}, {0x61, 0x4}, {0x6, 0x6}, {0xc, 0x7}, {0x3, 0x6}, {0x94, 0x7}, {0x5, 0x1}, {0x2, 0x2}, {0x5, 0x6}, {0x6, 0x2}], "1582eb5781ea039e"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x0, 0x6}, {0x6, 0x7}, {0x6, 0x6}, {0x7, 0x3}, {0xc, 0x6}, {0xa}, {0x7, 0x4}, {0x4, 0x6}, {0x0, 0x4}, {0x1, 0x6}, {0x6, 0x2}, {0x5, 0x7}, {0x6, 0x6}, {0x66, 0x4}, {0x0, 0x5}, {0xf, 0x5}, {0xfa, 0x2}, {0x2, 0x6}, {0x1b, 0x3}, {0x80}, {0x3, 0x3}], "25c7928109167c51"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x80, 0x3}], "41e7c89df9d63fbc"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x3, 0x5}, {0xa1, 0x7}, {0x9, 0x7}, {0x6}, {0x3, 0x5}, {0x6, 0x5}, {0x6, 0x1}, {0x7, 0x2}, {0xd, 0x6}, {0x3, 0x4}, {0xac, 0x1}, {0x5, 0x4}, {0x0, 0x4}], "1dae4f77c29e08fb"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x3}, {0x0, 0x6}, {0x4, 0x4}, {0x9, 0x6}, {0x9}, {0x6, 0x7}, {0xf, 0x1}, {0x6}, {0xf, 0x2}, {0x2, 0x2}, {0x7, 0x4}, {0x6, 0x3}, {0x9}, {0x9, 0x6}, {0x2, 0x5}, {0xb7, 0x5}, {0x2, 0x3}, {0xa, 0x6}, {0x1, 0x1}], "9e9741027dcb7f90"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x80, 0x6}, {0x82, 0x6}], "f23bf8645234fa18"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x2, 0x3}, {0x8, 0x5}, {0xd, 0x5}, {}, {0x7, 0x5}, {0x7f, 0x7}, {0x9, 0x2}, {0x0, 0x5}, {0x7, 0x6}, {0x8}, {0x37}, {0x6}, {0x0, 0x3}, {0x2, 0x1}, {0x4, 0x3}, {0x3, 0x4}, {0x9, 0x1}, {0x32, 0x3}], "377debb3241b31d7"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x40000}, 0x50) mlockall(0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)) bind$unix(r5, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0xb, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x78}}, 0x3400c851) ioctl$FIONCLEX(r0, 0x5450) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) mlockall(0x4) 59.627257ms ago: executing program 1 (id=3365): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x6, 0x2, 0x0, 0xede3695794ba2b8d, 0x1, 0x6}, &(0x7f00000000c0)=0x20) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80044121, &(0x7f0000000100)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x0, 'dvmrp1\x00', {0x1}, 0xff}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000180)={{r0}, {@void, @actul_num={@val=0x2d, 0x8, 0x52}}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x100, 0x100, 0x4, [@struct={0xa, 0x8, 0x0, 0x4, 0x0, 0xfff, [{0x0, 0x3, 0xd}, {0x10, 0x3, 0x5}, {0xa, 0x2, 0x37}, {0xe, 0x0, 0x5}, {0x7, 0x1, 0x3}, {0x3, 0x5, 0x3}, {0x0, 0x2}, {0x6, 0x4, 0x6}]}, @restrict={0x1, 0x0, 0x0, 0xb, 0x3}, @union={0x3, 0x7, 0x0, 0x5, 0x1, 0x7fff, [{0xf, 0x3, 0x6cd9}, {0x8, 0x2, 0x1ff}, {0xc, 0x5, 0x1400000}, {0x0, 0x2}, {0x10}, {0xb, 0x5, 0x7}, {0xd, 0x1, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xcad}}, @var={0xb, 0x0, 0x0, 0xe, 0x5, 0x2}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000340)=""/21, 0x11c, 0x15, 0x1, 0x3, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x60, '\x00', 0x0, r2, 0x1, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000440)={0x1, 'batadv_slave_0\x00', {}, 0x2}) r3 = accept$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, &(0x7f00000004c0)=0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000500)={0x8, 'dummy0\x00', {'dvmrp1\x00'}, 0x8}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x2) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000540)=""/19, &(0x7f0000000580)=0x13) open(&(0x7f00000005c0)='./file0\x00', 0x400, 0x107) close(r2) r4 = openat$dlm_plock(0xffffff9c, &(0x7f0000000600), 0x8002, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000640)={0x0, 'ipvlan1\x00', {0x3}, 0x1ff}) close(r4) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000680)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000900)={'wg0\x00'}) 0s ago: executing program 1 (id=3366): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup3(r0, r1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001c40)='gretap0\x00', 0x10) connect$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @local, 0x1}, 0x10) ioctl$BLKZEROOUT(r2, 0x127f, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000180)={0x3, {{0x2, 0x4e23, @loopback}}}, 0x84) kernel console output (not intermixed with test programs): 13805] dfa0: 0000000f 76af6f30 00000005 76af6f30 0000000f 00000000 [ 1142.213078][T13805] dfc0: 0000000f 76af6f30 00000005 00000003 002d0000 00000000 00006364 76af70bc [ 1142.213108][T13805] dfe0: 00000158 76af6ed0 000d7d68 0012fe04 [ 1142.654182][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.702779][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.769032][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.820714][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.033567][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1143.042661][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1143.048180][ T12] bond0 (unregistering): Released all slaves [ 1143.115435][ T12] hsr_slave_0: left promiscuous mode [ 1143.123144][ T12] hsr_slave_1: left promiscuous mode [ 1143.127755][ T12] veth1_macvtap: left promiscuous mode [ 1143.127980][ T12] veth0_macvtap: left promiscuous mode [ 1143.128198][ T12] veth1_vlan: left promiscuous mode [ 1143.128390][ T12] veth0_vlan: left promiscuous mode [ 1144.389794][T13818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1144.394093][T13818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1144.864482][T13818] hsr_slave_0: entered promiscuous mode [ 1144.867962][T13818] hsr_slave_1: entered promiscuous mode [ 1144.869021][T13818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1144.870614][T13818] Cannot create hsr debugfs directory [ 1145.337962][T13818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1145.345508][T13818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1145.354041][T13818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1145.362064][T13818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1145.882091][T13818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1146.996835][ T31] audit: type=1400 audit(1146.940:362): avc: denied { create } for pid=14248 comm="syz.0.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1147.349771][ T31] audit: type=1400 audit(1147.300:363): avc: denied { create } for pid=14262 comm="syz.0.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1147.655404][T13818] veth0_vlan: entered promiscuous mode [ 1147.670754][T13818] veth1_vlan: entered promiscuous mode [ 1147.709209][T13818] veth0_macvtap: entered promiscuous mode [ 1147.713260][T13818] veth1_macvtap: entered promiscuous mode [ 1147.785754][T13818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.787639][T13818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.789406][T13818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.791124][T13818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.857398][ T31] audit: type=1400 audit(1147.800:364): avc: denied { mounton } for pid=13818 comm="syz-executor" path="/syzkaller.kcZ4Rn/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=29230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1147.868843][ T31] audit: type=1400 audit(1147.820:365): avc: denied { mount } for pid=13818 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1148.026333][ T8462] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1148.030794][T14292] binder: 14291:14292 ioctl 6612 0 returned -22 [ 1148.176648][ T8462] usb 1-1: Using ep0 maxpacket: 8 [ 1148.185095][ T8462] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1148.186673][ T8462] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1148.196841][ T8462] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1148.197613][ T8462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.198439][ T8462] usb 1-1: Product: syz [ 1148.199109][ T8462] usb 1-1: Manufacturer: ꄽ抄⼋쒕媂燵몛䃇㈑熪ꗿ⹑ﳌ檣咑亼유颭뤀暴虺㰪顢 [ 1148.200078][ T8462] usb 1-1: SerialNumber: syz [ 1148.640779][T14285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.643703][T14285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.656356][T14285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.660166][T14285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.670503][T14285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.673171][T14285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.683367][T14285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.687033][T14285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.824952][ T8462] cdc_ncm 1-1:1.0: bind() failure [ 1148.830354][ T8462] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1148.832313][ T8462] cdc_ncm 1-1:1.1: bind() failure [ 1148.837055][ T8462] usb 1-1: USB disconnect, device number 25 [ 1149.864500][T14355] FAULT_INJECTION: forcing a failure. [ 1149.864500][T14355] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.865343][T14355] CPU: 0 UID: 0 PID: 14355 Comm: syz.0.2500 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1149.865406][T14355] Hardware name: ARM-Versatile Express [ 1149.865419][T14355] Call trace: [ 1149.865439][T14355] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1149.865497][T14355] r7:00000d40 r6:00000000 r5:60000013 r4:82257d44 [ 1149.865507][T14355] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1149.865537][T14355] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1149.865568][T14355] r5:847a3000 r4:8291bcc0 [ 1149.865576][T14355] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1149.865608][T14355] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 1149.865648][T14355] r8:847a3000 r7:00000d40 r6:84f83c28 r5:0000001d r4:83001240 [ 1149.865656][T14355] [<80525620>] (should_failslab) from [<8050a480>] (__kmalloc_noprof+0x9c/0x458) [ 1149.865686][T14355] [<8050a3e4>] (__kmalloc_noprof) from [<807bc1b4>] (tomoyo_encode2+0x64/0xf0) [ 1149.865727][T14355] r10:00000fff r9:8309e800 r8:00000000 r7:835975d8 r6:84f83c28 r5:84efbffc [ 1149.865744][T14355] r4:84efbfea [ 1149.865752][T14355] [<807bc150>] (tomoyo_encode2) from [<807bc264>] (tomoyo_encode+0x24/0x30) [ 1149.865790][T14355] r9:8309e800 r8:00000000 r7:835975d8 r6:84f83c28 r5:00001000 r4:84efbfeb [ 1149.865856][T14355] [<807bc240>] (tomoyo_encode) from [<807bc2f0>] (tomoyo_realpath_from_path+0x80/0x17c) [ 1149.865929][T14355] r5:00001000 r4:84efb000 [ 1149.865938][T14355] [<807bc270>] (tomoyo_realpath_from_path) from [<807b86a0>] (tomoyo_check_open_permission+0x150/0x1c0) [ 1149.865978][T14355] r10:00000037 r9:00000002 r8:8449ac80 r7:00000401 r6:00000000 r5:84f83c28 [ 1149.865990][T14355] r4:00000001 r3:00000001 [ 1149.865998][T14355] [<807b8550>] (tomoyo_check_open_permission) from [<807bd198>] (tomoyo_file_fcntl+0x40/0x4c) [ 1149.866090][T14355] r9:84f83c00 r8:00000003 r7:00050400 r6:00050400 r5:84f83c00 r4:00050400 [ 1149.866101][T14355] [<807bd158>] (tomoyo_file_fcntl) from [<80779f90>] (security_file_fcntl+0x1d8/0x1e4) [ 1149.866135][T14355] r5:00000004 r4:84f83c00 [ 1149.866144][T14355] [<80779db8>] (security_file_fcntl) from [<80569f04>] (sys_fcntl+0x44/0xc4) [ 1149.866177][T14355] r7:00050400 r6:00000004 r5:00000000 r4:84f83c01 [ 1149.866185][T14355] [<80569ec0>] (sys_fcntl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1149.866209][T14355] Exception stack(0xea945fa8 to 0xea945ff0) [ 1149.866229][T14355] 5fa0: 00000000 00000000 00000003 00000004 00050400 00000000 [ 1149.866248][T14355] 5fc0: 00000000 00000000 0012fee0 00000037 002d0000 00000000 00006364 76b2b0bc [ 1149.866262][T14355] 5fe0: 76b2aec0 76b2aeb0 0001939c 00131f30 [ 1149.866281][T14355] r9:847a3000 r8:8020029c r7:00000037 r6:0012fee0 r5:00000000 r4:00000000 [ 1149.882945][T14355] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1150.199154][T14360] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1795 sclass=netlink_audit_socket pid=14360 comm=syz.1.2497 [ 1150.201786][T14360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2497'. [ 1151.742866][T14379] FAULT_INJECTION: forcing a failure. [ 1151.742866][T14379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1151.743233][T14379] CPU: 0 UID: 0 PID: 14379 Comm: syz.1.2507 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1151.743283][T14379] Hardware name: ARM-Versatile Express [ 1151.743296][T14379] Call trace: [ 1151.743315][T14379] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1151.743386][T14379] r7:ea945e20 r6:00000000 r5:60000013 r4:82257d44 [ 1151.743396][T14379] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1151.743426][T14379] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1151.743458][T14379] r5:841ab000 r4:82951710 [ 1151.743466][T14379] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1151.743560][T14379] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 1151.743601][T14379] r8:10000016 r7:ea945e20 r6:20000180 r5:00000000 r4:ea945f20 [ 1151.743625][T14379] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 1151.743658][T14379] [<8095f694>] (should_fail_usercopy) from [<8151c150>] (copy_msghdr_from_user+0x50/0x130) [ 1151.743690][T14379] [<8151c100>] (copy_msghdr_from_user) from [<8151c2a8>] (___sys_sendmsg+0x78/0xd0) [ 1151.743724][T14379] r8:10000016 r7:00000000 r6:83660c80 r5:ea945f20 r4:ea945e64 [ 1151.743733][T14379] [<8151c230>] (___sys_sendmsg) from [<8151c75c>] (__sys_sendmsg+0x8c/0xd8) [ 1151.743770][T14379] r10:00000128 r9:841ab000 r8:84f83480 r7:10000016 r6:20000180 r5:84f83481 [ 1151.743781][T14379] r4:00000003 [ 1151.743806][T14379] [<8151c6d0>] (__sys_sendmsg) from [<8151c7bc>] (sys_sendmsg+0x14/0x18) [ 1151.743841][T14379] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1151.743850][T14379] [<8151c7a8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1151.743876][T14379] Exception stack(0xea945fa8 to 0xea945ff0) [ 1151.743898][T14379] 5fa0: 00000000 00000000 00000003 20000180 10000016 00000000 [ 1151.743917][T14379] 5fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b200bc [ 1151.743931][T14379] 5fe0: 76b1fec0 76b1feb0 0001939c 00131f30 [ 1152.890715][T14388] FAULT_INJECTION: forcing a failure. [ 1152.890715][T14388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1152.890984][T14388] CPU: 1 UID: 0 PID: 14388 Comm: syz.0.2510 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1152.891025][T14388] Hardware name: ARM-Versatile Express [ 1152.891042][T14388] Call trace: [ 1152.891062][T14388] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1152.891118][T14388] r7:00000000 r6:00000000 r5:60000013 r4:82257d44 [ 1152.891128][T14388] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1152.891158][T14388] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1152.891188][T14388] r5:841a8000 r4:82951710 [ 1152.891196][T14388] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1152.891227][T14388] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 1152.891260][T14388] r8:847b9b00 r7:00000000 r6:84712840 r5:000003e8 r4:84712800 [ 1152.891268][T14388] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 1152.891382][T14388] [<8095f694>] (should_fail_usercopy) from [<817a32bc>] (do_arpt_set_ctl+0x3e8/0x814) [ 1152.891517][T14388] [<817a2ed4>] (do_arpt_set_ctl) from [<8166d35c>] (nf_setsockopt+0x60/0x7c) [ 1152.891667][T14388] r10:00000126 r9:841a8000 r8:00000000 r7:84e5b540 r6:8471ae80 r5:817a2ed4 [ 1152.891829][T14388] r4:829e2e04 [ 1152.891890][T14388] [<8166d300>] (nf_setsockopt) from [<817079d4>] (ip_setsockopt+0x88/0x98) [ 1152.892090][T14388] r6:8471ae80 r5:00000438 r4:00000060 [ 1152.892656][T14388] [<81707950>] (ip_setsockopt) from [<81717958>] (tcp_setsockopt+0x3c/0x58) [ 1152.892833][T14388] r6:8363ec80 r5:00000000 r4:8170794c [ 1152.892957][T14388] [<81717920>] (tcp_setsockopt) from [<8151d108>] (sock_common_setsockopt+0x38/0x40) [ 1152.893099][T14388] r4:8171791c [ 1152.893108][T14388] [<8151d0d4>] (sock_common_setsockopt) from [<81518900>] (do_sock_setsockopt+0xb0/0x17c) [ 1152.893136][T14388] r4:8151d0d0 [ 1152.893472][T14388] [<81518850>] (do_sock_setsockopt) from [<8151bdbc>] (__sys_setsockopt+0x7c/0xb4) [ 1152.893852][T14388] r6:84e5b541 r5:00000060 r4:00000000 [ 1152.894086][T14388] [<8151bd40>] (__sys_setsockopt) from [<8151be10>] (sys_setsockopt+0x1c/0x24) [ 1152.894229][T14388] r8:8020029c r7:00000126 r6:0012fee0 r5:00000000 r4:00000438 [ 1152.894323][T14388] [<8151bdf4>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1152.894432][T14388] Exception stack(0xeab69fa8 to 0xeab69ff0) [ 1152.894506][T14388] 9fa0: 00000438 00000000 00000003 00000000 00000060 20000000 [ 1152.894647][T14388] 9fc0: 00000438 00000000 0012fee0 00000126 002d0000 00000000 00006364 76b2b0bc [ 1152.894782][T14388] 9fe0: 76b2aec0 76b2aeb0 0001939c 00131f30 [ 1154.624902][T14414] FAULT_INJECTION: forcing a failure. [ 1154.624902][T14414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1154.625357][T14414] CPU: 0 UID: 0 PID: 14414 Comm: syz.0.2519 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1154.625427][T14414] Hardware name: ARM-Versatile Express [ 1154.625452][T14414] Call trace: [ 1154.625487][T14414] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1154.625585][T14414] r7:76b29e1c r6:00000000 r5:60000013 r4:82257d44 [ 1154.625697][T14414] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1154.625776][T14414] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1154.625967][T14414] r5:851a3c00 r4:82951710 [ 1154.626004][T14414] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1154.626115][T14414] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 1154.626200][T14414] r8:84682181 r7:76b29e1c r6:eac21ee4 r5:0000000c r4:0000000c [ 1154.626218][T14414] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 1154.626274][T14414] [<8095f694>] (should_fail_usercopy) from [<8151a594>] (move_addr_to_kernel+0x34/0xf8) [ 1154.626381][T14414] [<8151a560>] (move_addr_to_kernel) from [<8151babc>] (__sys_sendto+0xd0/0x15c) [ 1154.626446][T14414] r7:76b29e1c r6:83616500 r5:00000000 r4:00000000 [ 1154.626464][T14414] [<8151b9ec>] (__sys_sendto) from [<8151bb64>] (sys_sendto+0x1c/0x24) [ 1154.626531][T14414] r9:851a3c00 r8:8020029c r7:00000122 r6:00000000 r5:0000000c r4:76b29e1c [ 1154.626579][T14414] [<8151bb48>] (sys_sendto) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1154.626663][T14414] Exception stack(0xeac21fa8 to 0xeac21ff0) [ 1154.626780][T14414] 1fa0: 76b29e1c 0000000c 00000003 76b29eb0 00000020 00000000 [ 1154.626855][T14414] 1fc0: 76b29e1c 0000000c 00000000 00000122 00000003 00000000 76b29eb0 76b2b0bc [ 1154.626942][T14414] 1fe0: 00000000 76b29df0 000d7d68 001343c8 [ 1156.115029][ T31] audit: type=1400 audit(1156.060:366): avc: denied { unmount } for pid=10198 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1156.161482][T14433] FAULT_INJECTION: forcing a failure. [ 1156.161482][T14433] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.161753][T14433] CPU: 0 UID: 0 PID: 14433 Comm: syz.0.2524 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1156.161788][T14433] Hardware name: ARM-Versatile Express [ 1156.161800][T14433] Call trace: [ 1156.161820][T14433] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1156.161910][T14433] r7:847a3c00 r6:00000000 r5:60000013 r4:82257d44 [ 1156.161935][T14433] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1156.161976][T14433] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1156.162006][T14433] r5:847a3c00 r4:8291bcc0 [ 1156.162032][T14433] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1156.162066][T14433] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 1156.162103][T14433] r8:00000000 r7:847a3c00 r6:00000cc0 r5:20000000 r4:830a8a80 [ 1156.162111][T14433] [<80525620>] (should_failslab) from [<8050a0fc>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 1156.162139][T14433] [<8050a0b0>] (kmem_cache_alloc_noprof) from [<80560b4c>] (getname_flags.part.0+0x28/0x18c) [ 1156.162176][T14433] r10:00000142 r9:847a3c00 r8:8020029c r7:00000000 r6:8245d848 r5:20000000 [ 1156.162201][T14433] r4:20000000 [ 1156.162247][T14433] [<80560b24>] (getname_flags.part.0) from [<80565c34>] (getname_flags+0x3c/0x50) [ 1156.162289][T14433] r9:847a3c00 r8:8020029c r7:ffffff9c r6:eacd1f58 r5:00000000 r4:20000000 [ 1156.162329][T14433] [<80565bf8>] (getname_flags) from [<8054e734>] (do_sys_openat2+0x60/0xe0) [ 1156.162364][T14433] r5:20000000 r4:00000000 [ 1156.162393][T14433] [<8054e6d4>] (do_sys_openat2) from [<8054eb8c>] (sys_openat+0x98/0xd4) [ 1156.162428][T14433] r7:00000142 r6:0012fee0 r5:20000000 r4:ffffff9c [ 1156.162436][T14433] [<8054eaf4>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1156.162461][T14433] Exception stack(0xeacd1fa8 to 0xeacd1ff0) [ 1156.162480][T14433] 1fa0: 00000000 00000000 ffffff9c 20000000 00000000 00000000 [ 1156.162498][T14433] 1fc0: 00000000 00000000 0012fee0 00000142 002d0000 00000000 00006364 76b2b0bc [ 1156.162512][T14433] 1fe0: 76b2aec0 76b2aeb0 0001939c 00131f30 [ 1156.162533][T14433] r5:00000000 r4:00000000 [ 1158.573238][ T8462] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 1158.856956][ T8462] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1158.859314][ T8462] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.859443][ T8462] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1158.859525][ T8462] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.864916][ T8462] usb 2-1: config 0 descriptor?? [ 1159.221367][T14443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.226371][T14443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.349102][T14443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.366479][T14443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.036368][ T8462] usb 2-1: string descriptor 0 read error: -71 [ 1160.037767][ T8462] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #200: -71 [ 1160.038237][ T8462] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 1160.038357][ T8462] uclogic 0003:256C:006D.000A: failed probing pen v2 parameters: -71 [ 1160.038716][ T8462] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 1160.038877][ T8462] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 1160.049571][ T8462] usb 2-1: USB disconnect, device number 31 [ 1160.499468][T14473] binder: 14472:14473 ioctl 6612 0 returned -22 [ 1162.234433][T14504] binder: 14503:14504 ioctl 6612 0 returned -22 [ 1162.609543][T14502] FAULT_INJECTION: forcing a failure. [ 1162.609543][T14502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1162.610069][T14502] CPU: 1 UID: 0 PID: 14502 Comm: syz.0.2534 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1162.610152][T14502] Hardware name: ARM-Versatile Express [ 1162.610176][T14502] Call trace: [ 1162.610215][T14502] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1162.610319][T14502] r7:00000000 r6:00000000 r5:60000013 r4:82257d44 [ 1162.610338][T14502] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1162.610393][T14502] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1162.610452][T14502] r5:847a3000 r4:82951710 [ 1162.610469][T14502] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1162.610526][T14502] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 1162.610588][T14502] r8:dfac1eb8 r7:00000000 r6:00000001 r5:76b09f30 r4:00000001 [ 1162.610604][T14502] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 1162.610653][T14502] [<8095f694>] (should_fail_usercopy) from [<808b7810>] (kstrtouint_from_user+0x54/0x13c) [ 1162.610707][T14502] [<808b77bc>] (kstrtouint_from_user) from [<80605630>] (proc_fail_nth_write+0x40/0xe8) [ 1162.610787][T14502] r8:dfac1f68 r7:847a3000 r6:00000001 r5:854fea80 r4:00000001 [ 1162.610805][T14502] [<806055f0>] (proc_fail_nth_write) from [<80552030>] (vfs_write+0xac/0x448) [ 1162.610863][T14502] r5:854fea80 r4:806055f0 [ 1162.610878][T14502] [<80551f84>] (vfs_write) from [<80552538>] (ksys_write+0x74/0xe4) [ 1162.610944][T14502] r10:00000004 r9:847a3000 r8:8020029c r7:00000000 r6:00000002 r5:854fea80 [ 1162.610964][T14502] r4:854fea83 [ 1162.610979][T14502] [<805524c4>] (ksys_write) from [<805525b8>] (sys_write+0x10/0x14) [ 1162.611043][T14502] r7:00000004 r6:00000004 r5:76b09f30 r4:00000001 [ 1162.611064][T14502] [<805525a8>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1162.611119][T14502] Exception stack(0xdfac1fa8 to 0xdfac1ff0) [ 1162.611162][T14502] 1fa0: 00000001 76b09f30 00000004 76b09f30 00000001 00000000 [ 1162.611200][T14502] 1fc0: 00000001 76b09f30 00000004 00000004 002d0000 00000000 00006364 76b0a0bc [ 1162.611229][T14502] 1fe0: 00000158 76b09ed0 000d7d68 0012fecc [ 1163.206346][ T721] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1163.336423][ T721] usb 1-1: device descriptor read/64, error -71 [ 1163.418195][T14522] FAULT_INJECTION: forcing a failure. [ 1163.418195][T14522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1163.418459][T14522] CPU: 0 UID: 0 PID: 14522 Comm: syz.1.2544 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1163.418499][T14522] Hardware name: ARM-Versatile Express [ 1163.418513][T14522] Call trace: [ 1163.418532][T14522] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1163.418589][T14522] r7:83660780 r6:00000000 r5:60000013 r4:82257d44 [ 1163.418598][T14522] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1163.418628][T14522] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1163.418657][T14522] r5:847a5400 r4:82951710 [ 1163.418665][T14522] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1163.418830][T14522] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 1163.418940][T14522] r8:00000000 r7:83660780 r6:0000000a r5:00000084 r4:00000000 [ 1163.418963][T14522] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 1163.419105][T14522] [<8095f694>] (should_fail_usercopy) from [<8151a1a0>] (do_sock_getsockopt+0x1a8/0x29c) [ 1163.419274][T14522] [<81519ff8>] (do_sock_getsockopt) from [<8151beac>] (__sys_getsockopt+0x94/0xcc) [ 1163.419378][T14522] r9:847a5400 r8:84f83a80 r7:dfb61f50 r6:0000000a r5:dfb61f58 r4:84f83a81 [ 1163.419458][T14522] [<8151be18>] (__sys_getsockopt) from [<8151bf00>] (sys_getsockopt+0x1c/0x24) [ 1163.419533][T14522] r8:8020029c r7:00000127 r6:0012fee0 r5:00000000 r4:200001c0 [ 1163.419634][T14522] [<8151bee4>] (sys_getsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1163.419725][T14522] Exception stack(0xdfb61fa8 to 0xdfb61ff0) [ 1163.419999][T14522] 1fa0: 200001c0 00000000 00000003 00000084 0000000a 20000180 [ 1163.420072][T14522] 1fc0: 200001c0 00000000 0012fee0 00000127 002d0000 00000000 00006364 76b200bc [ 1163.420148][T14522] 1fe0: 76b1fec0 76b1feb0 0001939c 00131f30 [ 1163.587213][ T721] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1163.704229][T14527] binder: 14526:14527 ioctl 6612 0 returned -22 [ 1163.726666][ T721] usb 1-1: device descriptor read/64, error -71 [ 1163.836922][ T721] usb usb1-port1: attempt power cycle [ 1164.176324][ T721] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1164.199148][ T721] usb 1-1: device descriptor read/8, error -71 [ 1164.446493][ T721] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1164.467758][ T721] usb 1-1: device descriptor read/8, error -71 [ 1164.576783][ T721] usb usb1-port1: unable to enumerate USB device [ 1164.873407][ T31] audit: type=1400 audit(1164.820:367): avc: denied { create } for pid=14534 comm="syz.1.2548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1164.977717][T14542] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14542 comm=syz.1.2549 [ 1164.988361][T14542] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=14542 comm=syz.1.2549 [ 1165.238920][T14546] binder: 14545:14546 ioctl 6612 0 returned -22 [ 1169.182319][T14563] binder: 14562:14563 ioctl 6612 0 returned -22 [ 1173.484412][T14582] binder: 14581:14582 ioctl 6612 0 returned -22 [ 1175.026275][ T3778] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1175.176165][ T3778] usb 2-1: Using ep0 maxpacket: 16 [ 1175.181533][ T3778] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1175.182441][ T3778] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.183018][ T3778] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1175.189994][ T3778] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1175.190821][ T3778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.191476][ T3778] usb 2-1: Product: syz [ 1175.192100][ T3778] usb 2-1: Manufacturer: syz [ 1175.192495][ T3778] usb 2-1: SerialNumber: syz [ 1175.608167][ T3778] usb 2-1: 0:2 : does not exist [ 1176.020202][ T3778] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1176.043023][ T3778] usb 2-1: USB disconnect, device number 32 [ 1183.030202][T14664] binder: 14663:14664 ioctl 6612 0 returned -22 [ 1184.492236][T14682] binder: 14681:14682 ioctl 6612 0 returned -22 [ 1185.955559][T14696] binder: 14695:14696 ioctl 6612 0 returned -22 [ 1187.158640][T14708] FAULT_INJECTION: forcing a failure. [ 1187.158640][T14708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1187.158978][T14708] CPU: 1 UID: 0 PID: 14708 Comm: syz.1.2590 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1187.159042][T14708] Hardware name: ARM-Versatile Express [ 1187.159057][T14708] Call trace: [ 1187.159076][T14708] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1187.159153][T14708] r7:00000000 r6:00000000 r5:60000013 r4:82257d44 [ 1187.159174][T14708] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1187.159237][T14708] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1187.159277][T14708] r5:841a8000 r4:82951710 [ 1187.159287][T14708] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1187.159319][T14708] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 1187.159417][T14708] r8:76b1ff30 r7:00000000 r6:00000000 r5:e00e9f68 r4:00000002 [ 1187.159437][T14708] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 1187.159475][T14708] [<8095f694>] (should_fail_usercopy) from [<8058cc58>] (simple_read_from_buffer+0x80/0x13c) [ 1187.159548][T14708] [<8058cbd8>] (simple_read_from_buffer) from [<806041f0>] (proc_fail_nth_read+0xb8/0x100) [ 1187.159591][T14708] r10:00000001 r9:80604138 r8:00000002 r7:e00e9f68 r6:0000000f r5:76b1ff30 [ 1187.159617][T14708] r4:841a8000 r3:e00e9e9f [ 1187.159680][T14708] [<80604138>] (proc_fail_nth_read) from [<805517a0>] (vfs_read+0x98/0x320) [ 1187.159800][T14708] r8:76b1ff30 r7:e00e9f68 r6:841a8000 r5:0000000f r4:84c07d80 [ 1187.159812][T14708] [<80551708>] (vfs_read) from [<80552440>] (ksys_read+0x74/0xe4) [ 1187.159862][T14708] r10:00000003 r9:841a8000 r8:8020029c r7:00000000 r6:00000000 r5:84c07d80 [ 1187.159899][T14708] r4:84c07d83 [ 1187.159998][T14708] [<805523cc>] (ksys_read) from [<805524c0>] (sys_read+0x10/0x14) [ 1187.160080][T14708] r7:00000003 r6:00000004 r5:76b1ff30 r4:0000000f [ 1187.160263][T14708] [<805524b0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1187.160365][T14708] Exception stack(0xe00e9fa8 to 0xe00e9ff0) [ 1187.160481][T14708] 9fa0: 0000000f 76b1ff30 00000004 76b1ff30 0000000f 00000000 [ 1187.160544][T14708] 9fc0: 0000000f 76b1ff30 00000004 00000003 002d0000 00000000 00006364 76b200bc [ 1187.160603][T14708] 9fe0: 00000158 76b1fed0 000d7d68 0012fe04 [ 1187.539122][T14717] binder: 14716:14717 ioctl 6612 0 returned -22 [ 1189.462635][ T31] audit: type=1400 audit(1189.410:368): avc: denied { bind } for pid=14739 comm="syz.1.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1190.250033][T14749] FAULT_INJECTION: forcing a failure. [ 1190.250033][T14749] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.250473][T14749] CPU: 1 UID: 0 PID: 14749 Comm: syz.0.2604 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1190.250535][T14749] Hardware name: ARM-Versatile Express [ 1190.250623][T14749] Call trace: [ 1190.250668][T14749] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1190.250793][T14749] r7:83c94800 r6:00000000 r5:60000013 r4:82257d44 [ 1190.250817][T14749] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1190.250875][T14749] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1190.250935][T14749] r5:83c94800 r4:8291bcc0 [ 1190.250966][T14749] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1190.251037][T14749] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 1190.251111][T14749] r8:00000000 r7:83c94800 r6:00400dc0 r5:828245e0 r4:830020c0 [ 1190.251128][T14749] [<80525620>] (should_failslab) from [<805094b0>] (__kmalloc_cache_noprof+0x4c/0x33c) [ 1190.251185][T14749] [<80509464>] (__kmalloc_cache_noprof) from [<8055e4c4>] (alloc_pipe_info+0x6c/0x238) [ 1190.251258][T14749] r10:84c07300 r9:8291ea2c r8:81c1f494 r7:00100000 r6:84c07300 r5:828245e0 [ 1190.251321][T14749] r4:00000000 [ 1190.251343][T14749] [<8055e458>] (alloc_pipe_info) from [<8055e958>] (fifo_open+0xd8/0x324) [ 1190.251416][T14749] r9:00000000 r8:81c1f494 r7:85ce88c0 r6:84c07300 r5:85ce8858 r4:00000000 [ 1190.251436][T14749] [<8055e880>] (fifo_open) from [<8054c588>] (do_dentry_open+0x174/0x630) [ 1190.251592][T14749] r9:00000000 r8:84c07328 r7:8055e880 r6:85ce8858 r5:00000000 r4:84c07300 [ 1190.251620][T14749] [<8054c414>] (do_dentry_open) from [<8054e260>] (vfs_open+0x2c/0xe8) [ 1190.251699][T14749] r8:e0621e58 r7:00000000 r6:84c07328 r5:829225e0 r4:84c07300 [ 1190.251718][T14749] [<8054e234>] (vfs_open) from [<80566f38>] (path_openat+0x7e0/0x11a0) [ 1190.251783][T14749] r6:e0621f20 r5:829225e0 r4:00131200 [ 1190.251799][T14749] [<80566758>] (path_openat) from [<805679a4>] (do_filp_open+0xac/0x148) [ 1190.251872][T14749] r10:00000142 r9:833a0000 r8:00000001 r7:e0621e58 r6:e0621f20 r5:83c94800 [ 1190.251893][T14749] r4:ffffff9c [ 1190.251911][T14749] [<805678f8>] (do_filp_open) from [<8054e764>] (do_sys_openat2+0x90/0xe0) [ 1190.251982][T14749] r9:83c94800 r8:8020029c r7:ffffff9c r6:e0621f58 r5:833a0000 r4:00000004 [ 1190.252000][T14749] [<8054e6d4>] (do_sys_openat2) from [<8054eb8c>] (sys_openat+0x98/0xd4) [ 1190.252072][T14749] r7:00000142 r6:0012fee0 r5:20000040 r4:ffffff9c [ 1190.252089][T14749] [<8054eaf4>] (sys_openat) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1190.252140][T14749] Exception stack(0xe0621fa8 to 0xe0621ff0) [ 1190.252179][T14749] 1fa0: 00000000 00000000 ffffff9c 20000040 00131200 00000000 [ 1190.252219][T14749] 1fc0: 00000000 00000000 0012fee0 00000142 002d0000 00000000 00006364 76b2b0bc [ 1190.252250][T14749] 1fe0: 76b2aec0 76b2aeb0 0001939c 00131f30 [ 1190.252277][T14749] r5:00000000 r4:00000000 [ 1191.694400][T14754] binder: 14753:14754 ioctl 6612 0 returned -22 [ 1199.306536][ T721] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1199.462080][ T721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1199.462558][ T721] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1199.463046][ T721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.469537][ T721] usb 2-1: config 0 descriptor?? [ 1199.885660][ T721] hid-steam 0003:28DE:1142.000B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 1199.946509][ T721] hid-steam 0003:28DE:1142.000B: Steam wireless receiver connected [ 1199.959232][ T721] hid-steam 0003:28DE:1142.000C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 1202.379311][ T31] audit: type=1400 audit(1202.330:369): avc: denied { ioctl } for pid=14832 comm="syz.0.2628" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30913 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1202.943533][T14833] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14833 comm=syz.0.2628 [ 1203.450523][ T31] audit: type=1400 audit(1203.400:370): avc: denied { create } for pid=14832 comm="syz.0.2628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1205.701524][ T31] audit: type=1400 audit(1205.650:371): avc: denied { shutdown } for pid=14842 comm="syz.0.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1206.886503][ T3778] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1207.045166][ T3778] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1207.046708][ T3778] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1207.054868][ T3778] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1207.056472][ T3778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1207.058565][ T3778] usb 1-1: SerialNumber: syz [ 1207.067946][T14857] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1207.307716][T14857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1207.309600][T14857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1207.341992][ T3778] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1207.355150][ T3778] usb 1-1: USB disconnect, device number 30 [ 1210.836223][ T31] audit: type=1400 audit(1210.780:372): avc: denied { create } for pid=14883 comm="syz.0.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1213.625481][ T8462] usb 2-1: USB disconnect, device number 33 [ 1213.633852][ T8462] hid-steam 0003:28DE:1142.000B: Steam wireless receiver disconnected [ 1215.682772][T14927] binder: 14926:14927 ioctl 6612 0 returned -22 [ 1221.121609][T14968] binder: 14967:14968 ioctl 6612 0 returned -22 [ 1225.537347][T14982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=14982 comm=syz.1.2658 [ 1225.858084][T14986] binder: 14985:14986 ioctl 6612 0 returned -22 [ 1230.323590][T15000] FAULT_INJECTION: forcing a failure. [ 1230.323590][T15000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1230.324084][T15000] CPU: 1 UID: 0 PID: 15000 Comm: syz.1.2663 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1230.324159][T15000] Hardware name: ARM-Versatile Express [ 1230.324185][T15000] Call trace: [ 1230.324221][T15000] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1230.324379][T15000] r7:fffffdfd r6:00000000 r5:60000013 r4:82257d44 [ 1230.324516][T15000] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1230.324588][T15000] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1230.324661][T15000] r5:83a76c00 r4:82951710 [ 1230.324708][T15000] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1230.324850][T15000] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 1230.324929][T15000] r8:df979ecc r7:fffffdfd r6:847b8d80 r5:20000500 r4:00008933 [ 1230.325013][T15000] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 1230.325166][T15000] [<8095f694>] (should_fail_usercopy) from [<8151abcc>] (sock_ioctl+0x4ec/0x600) [ 1230.325231][T15000] [<8151a6e0>] (sock_ioctl) from [<8056b418>] (sys_ioctl+0x138/0xd84) [ 1230.325372][T15000] r9:00000003 r8:86234780 r7:20000500 r6:86234781 r5:00000000 r4:00008933 [ 1230.325490][T15000] [<8056b2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1230.325603][T15000] Exception stack(0xdf979fa8 to 0xdf979ff0) [ 1230.325693][T15000] 9fa0: 00000000 00000000 00000003 00008933 20000500 00000000 [ 1230.325766][T15000] 9fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76b200bc [ 1230.325871][T15000] 9fe0: 76b1fec0 76b1feb0 0001939c 00131f30 [ 1230.325938][T15000] r10:00000036 r9:83a76c00 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1230.325985][T15000] r4:00000000 [ 1230.661497][T15004] binder: 15003:15004 ioctl 6612 0 returned -22 [ 1235.286940][T14818] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1235.436922][T14818] usb 2-1: Using ep0 maxpacket: 16 [ 1235.442305][T14818] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1235.442644][T14818] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.442730][T14818] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1235.453163][T14818] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1235.453537][T14818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.453623][T14818] usb 2-1: Product: syz [ 1235.453686][T14818] usb 2-1: Manufacturer: syz [ 1235.453753][T14818] usb 2-1: SerialNumber: syz [ 1235.696848][T14818] usb 2-1: 0:2 : does not exist [ 1235.978744][T14818] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1250.065043][T14818] usb 2-1: USB disconnect, device number 34 [ 1250.248646][T15050] binder: 15049:15050 ioctl 6612 0 returned -22 [ 1250.928501][T15035] FAULT_INJECTION: forcing a failure. [ 1250.928501][T15035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1250.928938][T15035] CPU: 1 UID: 0 PID: 15035 Comm: syz.0.2669 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1250.929020][T15035] Hardware name: ARM-Versatile Express [ 1250.929048][T15035] Call trace: [ 1250.929086][T15035] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1250.929194][T15035] r7:00000000 r6:00000000 r5:60000013 r4:82257d44 [ 1250.929217][T15035] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1250.929380][T15035] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1250.929595][T15035] r5:847a3c00 r4:82951710 [ 1250.929631][T15035] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1250.929731][T15035] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 1250.929871][T15035] r8:76b09f30 r7:00000000 r6:00000000 r5:dfc4df68 r4:00000002 [ 1250.930433][T15035] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 1250.930756][T15035] [<8095f694>] (should_fail_usercopy) from [<8058cc58>] (simple_read_from_buffer+0x80/0x13c) [ 1250.930868][T15035] [<8058cbd8>] (simple_read_from_buffer) from [<806041f0>] (proc_fail_nth_read+0xb8/0x100) [ 1250.931485][T15035] r10:00000001 r9:80604138 r8:00000002 r7:dfc4df68 r6:0000000f r5:76b09f30 [ 1250.931701][T15035] r4:847a3c00 r3:dfc4de9f [ 1250.931920][T15035] [<80604138>] (proc_fail_nth_read) from [<805517a0>] (vfs_read+0x98/0x320) [ 1250.932246][T15035] r8:76b09f30 r7:dfc4df68 r6:847a3c00 r5:0000000f r4:84da9840 [ 1250.932289][T15035] [<80551708>] (vfs_read) from [<80552440>] (ksys_read+0x74/0xe4) [ 1250.932402][T15035] r10:00000003 r9:847a3c00 r8:8020029c r7:00000000 r6:00000000 r5:84da9840 [ 1250.932429][T15035] r4:84da9843 [ 1250.932446][T15035] [<805523cc>] (ksys_read) from [<805524c0>] (sys_read+0x10/0x14) [ 1250.932547][T15035] r7:00000003 r6:00000005 r5:76b09f30 r4:0000000f [ 1250.932567][T15035] [<805524b0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1250.932616][T15035] Exception stack(0xdfc4dfa8 to 0xdfc4dff0) [ 1250.932800][T15035] dfa0: 0000000f 76b09f30 00000005 76b09f30 0000000f 00000000 [ 1250.933338][T15035] dfc0: 0000000f 76b09f30 00000005 00000003 002d0000 00000000 00006364 76b0a0bc [ 1250.933483][T15035] dfe0: 00000158 76b09ed0 000d7d68 0012fe04 [ 1254.816534][T15075] binder: 15074:15075 ioctl 6612 0 returned -22 [ 1256.103239][T15085] ======================================================= [ 1256.103239][T15085] WARNING: The mand mount option has been deprecated and [ 1256.103239][T15085] and is ignored by this kernel. Remove the mand [ 1256.103239][T15085] option from the mount to silence this warning. [ 1256.103239][T15085] ======================================================= [ 1256.266727][ T31] audit: type=1400 audit(1256.210:373): avc: denied { mount } for pid=15091 comm="syz.0.2680" name="/" dev="ramfs" ino=31332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1256.283575][ T31] audit: type=1400 audit(1256.230:374): avc: denied { unmount } for pid=10198 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1256.313143][T15089] binder: 15088:15089 ioctl 6612 0 returned -22 [ 1257.461816][ T31] audit: type=1400 audit(1257.410:375): avc: denied { ioctl } for pid=15104 comm="syz.1.2685" path="socket:[30705]" dev="sockfs" ino=30705 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1257.467802][ T31] audit: type=1400 audit(1257.410:376): avc: denied { setopt } for pid=15104 comm="syz.1.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1258.390451][T15113] binder: 15112:15113 ioctl 6612 0 returned -22 [ 1259.160546][ T31] audit: type=1400 audit(1259.110:377): avc: denied { setattr } for pid=15133 comm="syz.0.2694" name="RAWv6" dev="sockfs" ino=31393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1259.842103][T15149] binder: 15147:15149 ioctl 6612 0 returned -22 [ 1264.478830][T15181] FAULT_INJECTION: forcing a failure. [ 1264.478830][T15181] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.486006][T15181] CPU: 0 UID: 0 PID: 15181 Comm: syz.0.2704 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1264.486140][T15181] Hardware name: ARM-Versatile Express [ 1264.486168][T15181] Call trace: [ 1264.486212][T15181] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1264.486337][T15181] r7:00000c40 r6:00000000 r5:60010013 r4:82257d44 [ 1264.486361][T15181] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1264.486422][T15181] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1264.486487][T15181] r5:83396000 r4:8291bcc0 [ 1264.486507][T15181] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1264.486570][T15181] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 1264.486649][T15181] r8:83396000 r7:00000c40 r6:84682c28 r5:00001000 r4:830016c0 [ 1264.486669][T15181] [<80525620>] (should_failslab) from [<8050a480>] (__kmalloc_noprof+0x9c/0x458) [ 1264.486728][T15181] [<8050a3e4>] (__kmalloc_noprof) from [<807bc2ac>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 1264.486814][T15181] r10:83396000 r9:8309fc00 r8:00000000 r7:8368d220 r6:84682c28 r5:00001000 [ 1264.486841][T15181] r4:00000000 [ 1264.486859][T15181] [<807bc270>] (tomoyo_realpath_from_path) from [<807b83f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1264.486975][T15181] r10:83396000 r9:00000000 r8:84682c00 r7:00004b40 r6:00000004 r5:81cd56c4 [ 1264.487013][T15181] r4:84682c28 r3:826c0240 [ 1264.487034][T15181] [<807b8324>] (tomoyo_path_number_perm) from [<807bccd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 1264.487114][T15181] r9:00000004 r8:84682c00 r7:00000000 r6:00000000 r5:00004b40 r4:84682c00 [ 1264.487140][T15181] [<807bccb4>] (tomoyo_file_ioctl) from [<8076a70c>] (security_file_ioctl+0x64/0x1e4) [ 1264.487207][T15181] [<8076a6a8>] (security_file_ioctl) from [<8056b32c>] (sys_ioctl+0x4c/0xd84) [ 1264.487279][T15181] r7:00000000 r6:84682c01 r5:00000000 r4:00004b40 [ 1264.487301][T15181] [<8056b2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1264.487355][T15181] Exception stack(0xe04adfa8 to 0xe04adff0) [ 1264.487400][T15181] dfa0: 00000000 00000000 00000004 00004b40 00000000 00000000 [ 1264.487443][T15181] dfc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76aa70bc [ 1264.487475][T15181] dfe0: 76aa6ec0 76aa6eb0 0001939c 00131f30 [ 1264.487518][T15181] r10:00000036 r9:83396000 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1264.487541][T15181] r4:00000000 [ 1264.508158][T15181] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1264.647152][T15183] binder: 15182:15183 ioctl 6612 0 returned -22 [ 1266.038052][ T3778] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 1266.167085][ T3778] usb 2-1: device descriptor read/64, error -71 [ 1266.215328][ T31] audit: type=1400 audit(1266.160:378): avc: denied { write } for pid=15203 comm="syz.0.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1266.417067][ T3778] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 1266.546864][ T3778] usb 2-1: device descriptor read/64, error -71 [ 1266.561034][T15218] fuse: Bad value for 'fd' [ 1266.561597][ T31] audit: type=1400 audit(1266.510:379): avc: denied { mounton } for pid=15217 comm="syz.0.2715" path="/560/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1266.563475][ T31] audit: type=1400 audit(1266.510:380): avc: denied { search } for pid=15217 comm="syz.0.2715" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1266.573834][T15218] tracefs: Unknown parameter 'j`1l! [ 1266.573834][T15218] a `΍0m4}5sbX2-+aO6 Z' [ 1266.657006][ T3778] usb usb2-port1: attempt power cycle [ 1266.678914][ T31] audit: type=1400 audit(1266.630:381): avc: denied { bpf } for pid=15221 comm="syz.0.2717" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1266.679210][ T31] audit: type=1400 audit(1266.630:382): avc: denied { perfmon } for pid=15221 comm="syz.0.2717" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1266.897836][T15229] FAULT_INJECTION: forcing a failure. [ 1266.897836][T15229] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.898143][T15229] CPU: 1 UID: 0 PID: 15229 Comm: syz.0.2720 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1266.898178][T15229] Hardware name: ARM-Versatile Express [ 1266.898190][T15229] Call trace: [ 1266.898209][T15229] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1266.898271][T15229] r7:00000c40 r6:00000000 r5:60000013 r4:82257d44 [ 1266.898280][T15229] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1266.898309][T15229] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1266.898339][T15229] r5:841a4800 r4:8291bcc0 [ 1266.898346][T15229] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1266.898392][T15229] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 1266.898466][T15229] r8:841a4800 r7:00000c40 r6:846821a8 r5:00001000 r4:830016c0 [ 1266.898477][T15229] [<80525620>] (should_failslab) from [<8050a480>] (__kmalloc_noprof+0x9c/0x458) [ 1266.898536][T15229] [<8050a3e4>] (__kmalloc_noprof) from [<807bc2ac>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 1266.898588][T15229] r10:841a4800 r9:8309e800 r8:00000000 r7:834362a8 r6:846821a8 r5:00001000 [ 1266.898598][T15229] r4:00000000 [ 1266.898605][T15229] [<807bc270>] (tomoyo_realpath_from_path) from [<807b83f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1266.898654][T15229] r10:841a4800 r9:00000000 r8:84682180 r7:805c4d65 r6:00000004 r5:81cd56c4 [ 1266.898686][T15229] r4:846821a8 r3:826c0240 [ 1266.898695][T15229] [<807b8324>] (tomoyo_path_number_perm) from [<807bccd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 1266.898778][T15229] r9:00000003 r8:84682180 r7:200000c0 r6:200000c0 r5:805c4d65 r4:84682180 [ 1266.898795][T15229] [<807bccb4>] (tomoyo_file_ioctl) from [<8076a70c>] (security_file_ioctl+0x64/0x1e4) [ 1266.898829][T15229] [<8076a6a8>] (security_file_ioctl) from [<8056b32c>] (sys_ioctl+0x4c/0xd84) [ 1266.898871][T15229] r7:200000c0 r6:84682181 r5:00000000 r4:805c4d65 [ 1266.898881][T15229] [<8056b2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1266.898907][T15229] Exception stack(0xe043dfa8 to 0xe043dff0) [ 1266.898927][T15229] dfa0: 00000000 00000000 00000003 805c4d65 200000c0 00000000 [ 1266.898945][T15229] dfc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76b2b0bc [ 1266.898959][T15229] dfe0: 76b2aec0 76b2aeb0 0001939c 00131f30 [ 1266.898977][T15229] r10:00000036 r9:841a4800 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1266.898986][T15229] r4:00000000 [ 1266.899009][T15229] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1266.996370][ T3778] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 1267.027668][ T3778] usb 2-1: device descriptor read/8, error -71 [ 1267.266566][ T3778] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 1267.304129][ T3778] usb 2-1: device descriptor read/8, error -71 [ 1267.407056][ T3778] usb usb2-port1: unable to enumerate USB device [ 1268.114518][T15254] FAULT_INJECTION: forcing a failure. [ 1268.114518][T15254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1268.117571][T15254] CPU: 0 UID: 0 PID: 15254 Comm: syz.0.2730 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1268.117662][T15254] Hardware name: ARM-Versatile Express [ 1268.117684][T15254] Call trace: [ 1268.117729][T15254] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1268.117826][T15254] r7:e065de20 r6:00000000 r5:60000013 r4:82257d44 [ 1268.117843][T15254] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1268.117920][T15254] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1268.117978][T15254] r5:841a5400 r4:82951710 [ 1268.117993][T15254] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1268.118047][T15254] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 1268.118107][T15254] r8:20000001 r7:e065de20 r6:20000180 r5:00000000 r4:e065df20 [ 1268.118122][T15254] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 1268.118169][T15254] [<8095f694>] (should_fail_usercopy) from [<8151c150>] (copy_msghdr_from_user+0x50/0x130) [ 1268.118222][T15254] [<8151c100>] (copy_msghdr_from_user) from [<8151c2a8>] (___sys_sendmsg+0x78/0xd0) [ 1268.118281][T15254] r8:20000001 r7:00000000 r6:8363ea00 r5:e065df20 r4:e065de64 [ 1268.118296][T15254] [<8151c230>] (___sys_sendmsg) from [<8151c75c>] (__sys_sendmsg+0x8c/0xd8) [ 1268.118360][T15254] r10:00000128 r9:841a5400 r8:84e5bd80 r7:20000001 r6:20000180 r5:84e5bd81 [ 1268.118378][T15254] r4:00000003 [ 1268.118392][T15254] [<8151c6d0>] (__sys_sendmsg) from [<8151c7bc>] (sys_sendmsg+0x14/0x18) [ 1268.118449][T15254] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1268.118465][T15254] [<8151c7a8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1268.118510][T15254] Exception stack(0xe065dfa8 to 0xe065dff0) [ 1268.118547][T15254] dfa0: 00000000 00000000 00000003 20000180 20000001 00000000 [ 1268.118581][T15254] dfc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b0a0bc [ 1268.118607][T15254] dfe0: 76b09ec0 76b09eb0 0001939c 00131f30 [ 1275.409229][T15266] sctp: [Deprecated]: syz.0.2734 (pid 15266) Use of int in maxseg socket option. [ 1275.409229][T15266] Use struct sctp_assoc_value instead [ 1276.023015][ T31] audit: type=1400 audit(1275.970:383): avc: denied { accept } for pid=15277 comm="syz.1.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1276.142142][T15281] FAULT_INJECTION: forcing a failure. [ 1276.142142][T15281] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.142627][T15281] CPU: 0 UID: 0 PID: 15281 Comm: syz.1.2737 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1276.142689][T15281] Hardware name: ARM-Versatile Express [ 1276.142714][T15281] Call trace: [ 1276.142760][T15281] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1276.142868][T15281] r7:00000c40 r6:00000000 r5:60000013 r4:82257d44 [ 1276.142889][T15281] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1276.142948][T15281] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1276.143018][T15281] r5:84d84800 r4:8291bcc0 [ 1276.143047][T15281] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1276.143113][T15281] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 1276.143218][T15281] r8:84d84800 r7:00000c40 r6:84682028 r5:00001000 r4:830016c0 [ 1276.143240][T15281] [<80525620>] (should_failslab) from [<8050a480>] (__kmalloc_noprof+0x9c/0x458) [ 1276.143308][T15281] [<8050a3e4>] (__kmalloc_noprof) from [<807bc2ac>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 1276.143394][T15281] r10:84d84800 r9:8309fc00 r8:00000000 r7:8368d330 r6:84682028 r5:00001000 [ 1276.143417][T15281] r4:00000000 [ 1276.143435][T15281] [<807bc270>] (tomoyo_realpath_from_path) from [<807b83f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1276.143513][T15281] r10:84d84800 r9:00000000 r8:84682000 r7:c01064bd r6:00000004 r5:81cd56c4 [ 1276.143554][T15281] r4:84682028 r3:826c0240 [ 1276.143576][T15281] [<807b8324>] (tomoyo_path_number_perm) from [<807bccd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 1276.143657][T15281] r9:00000004 r8:84682000 r7:00000000 r6:00000000 r5:c01064bd r4:84682000 [ 1276.143679][T15281] [<807bccb4>] (tomoyo_file_ioctl) from [<8076a70c>] (security_file_ioctl+0x64/0x1e4) [ 1276.143744][T15281] [<8076a6a8>] (security_file_ioctl) from [<8056b32c>] (sys_ioctl+0x4c/0xd84) [ 1276.143813][T15281] r7:00000000 r6:84682001 r5:00000000 r4:c01064bd [ 1276.143832][T15281] [<8056b2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1276.143886][T15281] Exception stack(0xea8b5fa8 to 0xea8b5ff0) [ 1276.143952][T15281] 5fa0: 00000000 00000000 00000004 c01064bd 00000000 00000000 [ 1276.144006][T15281] 5fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76b200bc [ 1276.144045][T15281] 5fe0: 76b1fec0 76b1feb0 0001939c 00131f30 [ 1276.144090][T15281] r10:00000036 r9:84d84800 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1276.144114][T15281] r4:00000000 [ 1276.144161][T15281] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1276.833490][T15287] FAULT_INJECTION: forcing a failure. [ 1276.833490][T15287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1276.835152][T15287] CPU: 0 UID: 0 PID: 15287 Comm: syz.1.2739 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1276.835218][T15287] Hardware name: ARM-Versatile Express [ 1276.835232][T15287] Call trace: [ 1276.835273][T15287] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1276.835331][T15287] r7:ea8f9e20 r6:00000000 r5:60000013 r4:82257d44 [ 1276.835340][T15287] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1276.835369][T15287] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1276.835400][T15287] r5:8386a400 r4:82951710 [ 1276.835408][T15287] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1276.835438][T15287] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 1276.835471][T15287] r8:04000020 r7:ea8f9e20 r6:20000100 r5:00000000 r4:ea8f9f20 [ 1276.835480][T15287] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 1276.835514][T15287] [<8095f694>] (should_fail_usercopy) from [<8151c150>] (copy_msghdr_from_user+0x50/0x130) [ 1276.835547][T15287] [<8151c100>] (copy_msghdr_from_user) from [<8151c2a8>] (___sys_sendmsg+0x78/0xd0) [ 1276.835581][T15287] r8:04000020 r7:00000000 r6:8363ec80 r5:ea8f9f20 r4:ea8f9e64 [ 1276.835589][T15287] [<8151c230>] (___sys_sendmsg) from [<8151c75c>] (__sys_sendmsg+0x8c/0xd8) [ 1276.835624][T15287] r10:00000128 r9:8386a400 r8:84e5bcc0 r7:04000020 r6:20000100 r5:84e5bcc1 [ 1276.835634][T15287] r4:00000003 [ 1276.835642][T15287] [<8151c6d0>] (__sys_sendmsg) from [<8151c7bc>] (sys_sendmsg+0x14/0x18) [ 1276.835675][T15287] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1276.835683][T15287] [<8151c7a8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1276.835708][T15287] Exception stack(0xea8f9fa8 to 0xea8f9ff0) [ 1276.835727][T15287] 9fa0: 00000000 00000000 00000003 20000100 04000020 00000000 [ 1276.835746][T15287] 9fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76aff0bc [ 1276.835761][T15287] 9fe0: 76afeec0 76afeeb0 0001939c 00131f30 [ 1279.656500][ T721] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1279.823753][ T721] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1279.824168][ T721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.824273][ T721] usb 2-1: Product: syz [ 1279.824348][ T721] usb 2-1: Manufacturer: syz [ 1279.824420][ T721] usb 2-1: SerialNumber: syz [ 1280.670805][T15773] : renamed from ipvlan1 [ 1284.089328][ T31] audit: type=1400 audit(1284.040:384): avc: denied { create } for pid=15783 comm="syz.0.2751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1284.093114][ T31] audit: type=1400 audit(1284.040:385): avc: denied { ioctl } for pid=15783 comm="syz.0.2751" path="socket:[31737]" dev="sockfs" ino=31737 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1284.142285][ T31] audit: type=1400 audit(1284.090:386): avc: granted { setsecparam } for pid=15786 comm="syz.0.2752" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1284.484139][ T31] audit: type=1400 audit(1284.430:387): avc: denied { map } for pid=15800 comm="syz.0.2757" path="/595" dev="tmpfs" ino=3189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1284.484488][ T31] audit: type=1400 audit(1284.430:388): avc: denied { execute } for pid=15800 comm="syz.0.2757" path="/595" dev="tmpfs" ino=3189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1285.655464][T15807] FAULT_INJECTION: forcing a failure. [ 1285.655464][T15807] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1285.658005][T15807] CPU: 0 UID: 0 PID: 15807 Comm: syz.0.2759 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1285.658074][T15807] Hardware name: ARM-Versatile Express [ 1285.658088][T15807] Call trace: [ 1285.658108][T15807] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1285.658174][T15807] r7:00000000 r6:00000000 r5:60000113 r4:82257d44 [ 1285.658184][T15807] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1285.658212][T15807] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1285.658241][T15807] r5:856db000 r4:8291bd14 [ 1285.658249][T15807] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1285.658279][T15807] [<8095f454>] (should_fail_ex) from [<8052571c>] (should_fail_alloc_page+0x68/0x74) [ 1285.658317][T15807] r8:00000001 r7:00000000 r6:00000000 r5:00440dc2 r4:eb3f1cb0 [ 1285.658325][T15807] [<805256b4>] (should_fail_alloc_page) from [<804f445c>] (prepare_alloc_pages.constprop.0+0x94/0x1b4) [ 1285.658355][T15807] [<804f43c8>] (prepare_alloc_pages.constprop.0) from [<804fc3a0>] (__alloc_frozen_pages_noprof+0xb8/0x1138) [ 1285.658392][T15807] r10:eb3f1ec8 r9:00000000 r8:00440dc2 r7:00000000 r6:20000000 r5:8625c800 [ 1285.658403][T15807] r4:00000000 r3:eb3f1cb0 [ 1285.658411][T15807] [<804fc2e8>] (__alloc_frozen_pages_noprof) from [<804fd430>] (__alloc_pages_noprof+0x10/0x60) [ 1285.658447][T15807] r10:eb3f1ec8 r9:84da1d80 r8:862605c0 r7:00000000 r6:20000000 r5:8625c800 [ 1285.658457][T15807] r4:85360900 [ 1285.658464][T15807] [<804fd420>] (__alloc_pages_noprof) from [<804c80e0>] (pte_alloc_one+0x24/0xfc) [ 1285.658494][T15807] [<804c80bc>] (pte_alloc_one) from [<804c9880>] (__pte_alloc+0x2c/0x104) [ 1285.658523][T15807] r5:8625c800 r4:85360900 [ 1285.658531][T15807] [<804c9854>] (__pte_alloc) from [<804cf3e8>] (handle_mm_fault+0xfc8/0x14e4) [ 1285.658561][T15807] r5:856db000 r4:00000214 [ 1285.658569][T15807] [<804ce420>] (handle_mm_fault) from [<802341f4>] (do_page_fault+0xec/0x49c) [ 1285.658605][T15807] r10:00000007 r9:85360900 r8:00000214 r7:20000000 r6:00000206 r5:20000040 [ 1285.658614][T15807] r4:eb3f1ec8 [ 1285.658621][T15807] [<80234108>] (do_page_fault) from [<80234724>] (do_translation_fault+0xfc/0x12c) [ 1285.658655][T15807] r10:856db000 r9:856db000 r8:80234628 r7:eb3f1ec8 r6:20000040 r5:00000206 [ 1285.658665][T15807] r4:8281d160 [ 1285.658672][T15807] [<80234628>] (do_translation_fault) from [<8023478c>] (do_DataAbort+0x38/0xa8) [ 1285.658705][T15807] r9:856db000 r8:80234628 r7:eb3f1ec8 r6:20000040 r5:00000206 r4:8281d160 [ 1285.658713][T15807] [<80234754>] (do_DataAbort) from [<80200b0c>] (__dabt_svc+0x4c/0x80) [ 1285.658743][T15807] Exception stack(0xeb3f1ec8 to 0xeb3f1f10) [ 1285.658768][T15807] 1ec0: 20000040 7effffff a1000043 b5403587 00005421 00000000 [ 1285.658786][T15807] 1ee0: 8621b241 20000040 8621b240 00000003 856db000 eb3f1fa4 eb3f1ef8 eb3f1f18 [ 1285.658800][T15807] 1f00: 8056b3d0 81a1f4f4 80000013 ffffffff [ 1285.658817][T15807] r8:8621b240 r7:eb3f1efc r6:ffffffff r5:80000013 r4:81a1f4f4 [ 1285.658825][T15807] [<8056b2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1285.658852][T15807] Exception stack(0xeb3f1fa8 to 0xeb3f1ff0) [ 1285.658869][T15807] 1fa0: 00000000 00000000 00000003 00005421 20000040 00000000 [ 1285.658886][T15807] 1fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76b2b0bc [ 1285.658900][T15807] 1fe0: 76b2aec0 76b2aeb0 0001939c 00131f30 [ 1285.658918][T15807] r10:00000036 r9:856db000 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1285.658927][T15807] r4:00000000 [ 1289.435696][ T3778] usb 2-1: USB disconnect, device number 39 [ 1289.609855][T15816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1289.617544][T15816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1290.189371][T16048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=519 sclass=netlink_route_socket pid=16048 comm=syz.1.2768 [ 1290.351995][ T31] audit: type=1400 audit(1290.300:389): avc: denied { accept } for pid=16052 comm="syz.1.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1290.393298][T15816] hsr_slave_0: entered promiscuous mode [ 1290.394553][T15816] hsr_slave_1: entered promiscuous mode [ 1290.398109][T15816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1290.398322][T15816] Cannot create hsr debugfs directory [ 1290.544283][ T31] audit: type=1400 audit(1290.490:390): avc: denied { getopt } for pid=16134 comm="syz.1.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1290.552687][T15816] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.608041][T15816] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.653469][T15816] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.715189][T15816] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.812777][T15816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1290.818106][T15816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1290.822029][T15816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1290.828307][T15816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1291.124173][T16145] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=16145 comm=syz.1.2773 [ 1291.269814][T15816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.799705][T15816] veth0_vlan: entered promiscuous mode [ 1292.809436][T15816] veth1_vlan: entered promiscuous mode [ 1292.843372][T15816] veth0_macvtap: entered promiscuous mode [ 1292.850713][T15816] veth1_macvtap: entered promiscuous mode [ 1292.878893][T15816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.879517][T15816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.880248][T15816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.880789][T15816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.132580][T16196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16196 comm=syz.0.2774 [ 1293.221208][T16201] FAULT_INJECTION: forcing a failure. [ 1293.221208][T16201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1293.222859][T16201] CPU: 1 UID: 0 PID: 16201 Comm: syz.0.2776 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1293.222983][T16201] Hardware name: ARM-Versatile Express [ 1293.223012][T16201] Call trace: [ 1293.223053][T16201] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1293.223178][T16201] r7:00000000 r6:00000000 r5:60000013 r4:82257d44 [ 1293.223201][T16201] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1293.223259][T16201] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1293.223321][T16201] r5:8470c800 r4:82951710 [ 1293.223339][T16201] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1293.223396][T16201] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 1293.223461][T16201] r8:76b2af30 r7:00000000 r6:00000000 r5:eb89df68 r4:00000002 [ 1293.223478][T16201] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 1293.223528][T16201] [<8095f694>] (should_fail_usercopy) from [<8058cc58>] (simple_read_from_buffer+0x80/0x13c) [ 1293.223584][T16201] [<8058cbd8>] (simple_read_from_buffer) from [<806041f0>] (proc_fail_nth_read+0xb8/0x100) [ 1293.223662][T16201] r10:00000001 r9:80604138 r8:00000002 r7:eb89df68 r6:0000000f r5:76b2af30 [ 1293.223686][T16201] r4:8470c800 r3:eb89de9f [ 1293.223705][T16201] [<80604138>] (proc_fail_nth_read) from [<805517a0>] (vfs_read+0x98/0x320) [ 1293.223782][T16201] r8:76b2af30 r7:eb89df68 r6:8470c800 r5:0000000f r4:855c5b40 [ 1293.223802][T16201] [<80551708>] (vfs_read) from [<80552440>] (ksys_read+0x74/0xe4) [ 1293.223870][T16201] r10:00000003 r9:8470c800 r8:8020029c r7:00000000 r6:00000000 r5:855c5b40 [ 1293.223892][T16201] r4:855c5b43 [ 1293.223908][T16201] [<805523cc>] (ksys_read) from [<805524c0>] (sys_read+0x10/0x14) [ 1293.223982][T16201] r7:00000003 r6:00000004 r5:76b2af30 r4:0000000f [ 1293.224002][T16201] [<805524b0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1293.224056][T16201] Exception stack(0xeb89dfa8 to 0xeb89dff0) [ 1293.224096][T16201] dfa0: 0000000f 76b2af30 00000004 76b2af30 0000000f 00000000 [ 1293.224132][T16201] dfc0: 0000000f 76b2af30 00000004 00000003 002d0000 00000000 00006364 76b2b0bc [ 1293.224159][T16201] dfe0: 00000158 76b2aed0 000d7d68 0012fe04 [ 1293.877477][T16205] FAULT_INJECTION: forcing a failure. [ 1293.877477][T16205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1293.881645][T16205] CPU: 1 UID: 0 PID: 16205 Comm: syz.1.2778 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1293.881760][T16205] Hardware name: ARM-Versatile Express [ 1293.881790][T16205] Call trace: [ 1293.881834][T16205] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1293.881983][T16205] r7:00000000 r6:00000000 r5:60000013 r4:82257d44 [ 1293.882009][T16205] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1293.882069][T16205] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1293.882131][T16205] r5:84708c00 r4:82951710 [ 1293.882146][T16205] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1293.882205][T16205] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 1293.882267][T16205] r8:eb889eb8 r7:00000000 r6:00000001 r5:76b1ff30 r4:00000001 [ 1293.882287][T16205] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 1293.882346][T16205] [<8095f694>] (should_fail_usercopy) from [<808b7810>] (kstrtouint_from_user+0x54/0x13c) [ 1293.882406][T16205] [<808b77bc>] (kstrtouint_from_user) from [<80605630>] (proc_fail_nth_write+0x40/0xe8) [ 1293.882479][T16205] r8:eb889f68 r7:84708c00 r6:00000001 r5:855c5b40 r4:00000001 [ 1293.882499][T16205] [<806055f0>] (proc_fail_nth_write) from [<80552030>] (vfs_write+0xac/0x448) [ 1293.882634][T16205] r5:855c5b40 r4:806055f0 [ 1293.882669][T16205] [<80551f84>] (vfs_write) from [<80552538>] (ksys_write+0x74/0xe4) [ 1293.882744][T16205] r10:00000004 r9:84708c00 r8:8020029c r7:00000000 r6:00000002 r5:855c5b40 [ 1293.882777][T16205] r4:855c5b43 [ 1293.882793][T16205] [<805524c4>] (ksys_write) from [<805525b8>] (sys_write+0x10/0x14) [ 1293.882898][T16205] r7:00000004 r6:00000006 r5:76b1ff30 r4:00000001 [ 1293.882921][T16205] [<805525a8>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1293.882979][T16205] Exception stack(0xeb889fa8 to 0xeb889ff0) [ 1293.883024][T16205] 9fa0: 00000001 76b1ff30 00000006 76b1ff30 00000001 00000000 [ 1293.883118][T16205] 9fc0: 00000001 76b1ff30 00000006 00000004 002d0000 00000000 00006364 76b200bc [ 1293.883148][T16205] 9fe0: 00000158 76b1fed0 000d7d68 0012fecc [ 1294.828554][T16222] FAULT_INJECTION: forcing a failure. [ 1294.828554][T16222] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.829939][T16222] CPU: 1 UID: 0 PID: 16222 Comm: syz.0.2777 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1294.830050][T16222] Hardware name: ARM-Versatile Express [ 1294.830077][T16222] Call trace: [ 1294.830117][T16222] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1294.830222][T16222] r7:00000d40 r6:00000000 r5:60000013 r4:82257d44 [ 1294.830241][T16222] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1294.830294][T16222] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1294.830352][T16222] r5:84e03c00 r4:8291bcc0 [ 1294.830368][T16222] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1294.830424][T16222] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 1294.830492][T16222] r8:84e03c00 r7:00000d40 r6:8621baa8 r5:00000019 r4:83001240 [ 1294.830503][T16222] [<80525620>] (should_failslab) from [<8050a480>] (__kmalloc_noprof+0x9c/0x458) [ 1294.830535][T16222] [<8050a3e4>] (__kmalloc_noprof) from [<807bc1b4>] (tomoyo_encode2+0x64/0xf0) [ 1294.830574][T16222] r10:00000fff r9:8309fc00 r8:00000000 r7:836aacc0 r6:8621baa8 r5:84c49ffd [ 1294.830584][T16222] r4:84c49fef [ 1294.830592][T16222] [<807bc150>] (tomoyo_encode2) from [<807bc264>] (tomoyo_encode+0x24/0x30) [ 1294.830627][T16222] r9:8309fc00 r8:00000000 r7:836aacc0 r6:8621baa8 r5:00001000 r4:84c49ff0 [ 1294.830636][T16222] [<807bc240>] (tomoyo_encode) from [<807bc2f0>] (tomoyo_realpath_from_path+0x80/0x17c) [ 1294.830666][T16222] r5:00001000 r4:84c49000 [ 1294.830673][T16222] [<807bc270>] (tomoyo_realpath_from_path) from [<807b83f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1294.830709][T16222] r10:84e03c00 r9:00000000 r8:8621ba80 r7:0000890b r6:00000004 r5:81cd56c4 [ 1294.830721][T16222] r4:8621baa8 r3:826c0240 [ 1294.830728][T16222] [<807b8324>] (tomoyo_path_number_perm) from [<807bccd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 1294.830764][T16222] r9:00000004 r8:8621ba80 r7:20000040 r6:20000040 r5:0000890b r4:8621ba80 [ 1294.830772][T16222] [<807bccb4>] (tomoyo_file_ioctl) from [<8076a70c>] (security_file_ioctl+0x64/0x1e4) [ 1294.830812][T16222] [<8076a6a8>] (security_file_ioctl) from [<8056b32c>] (sys_ioctl+0x4c/0xd84) [ 1294.830884][T16222] r7:20000040 r6:8621ba81 r5:00000000 r4:0000890b [ 1294.830902][T16222] [<8056b2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1294.830958][T16222] Exception stack(0xeb92dfa8 to 0xeb92dff0) [ 1294.830999][T16222] dfa0: 00000000 00000000 00000004 0000890b 20000040 00000000 [ 1294.831050][T16222] dfc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76ac80bc [ 1294.831082][T16222] dfe0: 76ac7ec0 76ac7eb0 0001939c 00131f30 [ 1294.831126][T16222] r10:00000036 r9:84e03c00 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1294.831148][T16222] r4:00000000 [ 1294.840048][T16222] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1297.386853][ T31] audit: type=1400 audit(1297.330:391): avc: denied { create } for pid=16238 comm="syz.1.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1297.402491][ T31] audit: type=1400 audit(1297.350:392): avc: denied { ioctl } for pid=16238 comm="syz.1.2789" path="socket:[33062]" dev="sockfs" ino=33062 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1297.409078][ T31] audit: type=1400 audit(1297.360:393): avc: denied { setopt } for pid=16238 comm="syz.1.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1297.413401][ T31] audit: type=1400 audit(1297.360:394): avc: denied { write } for pid=16238 comm="syz.1.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1298.793478][ T31] audit: type=1400 audit(1298.740:395): avc: denied { getopt } for pid=16249 comm="syz.1.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1302.371442][T16275] FAULT_INJECTION: forcing a failure. [ 1302.371442][T16275] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.373257][T16275] CPU: 1 UID: 0 PID: 16275 Comm: syz.0.2800 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1302.373363][T16275] Hardware name: ARM-Versatile Express [ 1302.373383][T16275] Call trace: [ 1302.373416][T16275] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1302.373508][T16275] r7:00000dc0 r6:00000000 r5:60000013 r4:82257d44 [ 1302.373524][T16275] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1302.373571][T16275] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1302.373622][T16275] r5:84e02400 r4:8291bcc0 [ 1302.373635][T16275] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1302.373685][T16275] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 1302.373759][T16275] r8:84e02400 r7:00000dc0 r6:85324d94 r5:00000064 r4:83001300 [ 1302.373777][T16275] [<80525620>] (should_failslab) from [<8050a480>] (__kmalloc_noprof+0x9c/0x458) [ 1302.373824][T16275] [<8050a3e4>] (__kmalloc_noprof) from [<814251cc>] (constrain_params_by_rules+0x88/0x500) [ 1302.373949][T16275] r10:ebaddce0 r9:85324c00 r8:0000000c r7:85095400 r6:85324d94 r5:00000014 [ 1302.373972][T16275] r4:00000000 [ 1302.373986][T16275] [<81425144>] (constrain_params_by_rules) from [<8142582c>] (snd_pcm_hw_refine+0x1e8/0x41c) [ 1302.374050][T16275] r10:ebaddce0 r9:84e02400 r8:0000000c r7:85095630 r6:85324d94 r5:00000014 [ 1302.374067][T16275] r4:85324c00 [ 1302.374080][T16275] [<81425644>] (snd_pcm_hw_refine) from [<8142cfa0>] (snd_pcm_hw_param_first+0x178/0x1ec) [ 1302.374139][T16275] r10:842bc600 r9:84e02400 r8:00000001 r7:842bc600 r6:00000000 r5:00000013 [ 1302.374155][T16275] r4:85324c00 [ 1302.374168][T16275] [<8142ce28>] (snd_pcm_hw_param_first) from [<81427274>] (snd_pcm_hw_params+0x190/0x77c) [ 1302.374226][T16275] r10:842bc600 r9:84e02400 r8:00000013 r7:81e188b4 r6:85324c00 r5:00000009 [ 1302.374244][T16275] r4:00000011 r3:00000000 [ 1302.374257][T16275] [<814270e4>] (snd_pcm_hw_params) from [<814278f0>] (snd_pcm_kernel_ioctl+0x90/0x130) [ 1302.374318][T16275] r10:00000010 r9:00040000 r8:85095400 r7:00000018 r6:00000002 r5:842bc600 [ 1302.374334][T16275] r4:85324c00 [ 1302.374346][T16275] [<81427860>] (snd_pcm_kernel_ioctl) from [<8143ee3c>] (snd_pcm_oss_change_params_locked+0x6ec/0xca8) [ 1302.374390][T16275] [<8143e750>] (snd_pcm_oss_change_params_locked) from [<8143f668>] (snd_pcm_oss_get_active_substream+0x94/0xc0) [ 1302.374448][T16275] r10:84e02400 r9:ebadded4 r8:850956b8 r7:85590780 r6:85590784 r5:842bc600 [ 1302.374464][T16275] r4:842bc600 [ 1302.374476][T16275] [<8143f5d4>] (snd_pcm_oss_get_active_substream) from [<81440bc4>] (snd_pcm_oss_ioctl+0x6b4/0x1004) [ 1302.374533][T16275] r9:850956b8 r8:85590780 r7:85590780 r6:20000640 r5:85095400 r4:00000010 [ 1302.374546][T16275] [<81440510>] (snd_pcm_oss_ioctl) from [<8056b418>] (sys_ioctl+0x138/0xd84) [ 1302.374604][T16275] r10:84e02400 r9:00000003 r8:855c53c0 r7:20000640 r6:855c53c1 r5:00000000 [ 1302.374620][T16275] r4:c0045005 [ 1302.374633][T16275] [<8056b2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1302.374673][T16275] Exception stack(0xebaddfa8 to 0xebaddff0) [ 1302.374707][T16275] dfa0: 00000000 00000000 00000003 c0045005 20000640 00000000 [ 1302.374738][T16275] dfc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76b2b0bc [ 1302.374772][T16275] dfe0: 76b2aec0 76b2aeb0 0001939c 00131f30 [ 1302.374806][T16275] r10:00000036 r9:84e02400 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1302.374822][T16275] r4:00000000 [ 1303.415722][T16299] FAULT_INJECTION: forcing a failure. [ 1303.415722][T16299] name failslab, interval 1, probability 0, space 0, times 0 [ 1303.416658][T16299] CPU: 1 UID: 0 PID: 16299 Comm: syz.1.2808 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1303.416737][T16299] Hardware name: ARM-Versatile Express [ 1303.416789][T16299] Call trace: [ 1303.416828][T16299] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1303.416926][T16299] r7:84e01800 r6:00000000 r5:60000113 r4:82257d44 [ 1303.417060][T16299] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1303.417146][T16299] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1303.417425][T16299] r5:84e01800 r4:8291bcc0 [ 1303.417473][T16299] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1303.418176][T16299] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 1303.418261][T16299] r8:00000000 r7:84e01800 r6:00000cc0 r5:854972f8 r4:83002d80 [ 1303.418284][T16299] [<80525620>] (should_failslab) from [<8050a0fc>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 1303.418890][T16299] [<8050a0b0>] (kmem_cache_alloc_noprof) from [<804e38c0>] (__anon_vma_prepare+0xf0/0x1b0) [ 1303.419125][T16299] r10:ebb31ec8 r9:85621800 r8:82ac1598 r7:85362a00 r6:85621800 r5:854972f8 [ 1303.419547][T16299] r4:00000000 [ 1303.419569][T16299] [<804e37d0>] (__anon_vma_prepare) from [<804caf10>] (__vmf_anon_prepare+0x5c/0xcc) [ 1303.419663][T16299] r10:ebb31ec8 r9:85621800 r8:00000001 r7:00000000 r6:20000000 r5:85621800 [ 1303.420328][T16299] r4:ebb31da0 r3:00000215 [ 1303.420352][T16299] [<804caeb4>] (__vmf_anon_prepare) from [<804cf0e0>] (handle_mm_fault+0xcc0/0x14e4) [ 1303.420617][T16299] r7:00000000 r6:20000000 r5:84e01800 r4:00000215 [ 1303.420727][T16299] [<804ce420>] (handle_mm_fault) from [<802341f4>] (do_page_fault+0xec/0x49c) [ 1303.421130][T16299] r10:00000002 r9:85362a00 r8:00000215 r7:20000000 r6:00000a06 r5:20000080 [ 1303.421189][T16299] r4:ebb31ec8 [ 1303.421932][T16299] [<80234108>] (do_page_fault) from [<80234724>] (do_translation_fault+0xfc/0x12c) [ 1303.422013][T16299] r10:84e01800 r9:84e01800 r8:80234628 r7:ebb31ec8 r6:20000080 r5:00000a06 [ 1303.422036][T16299] r4:8281d160 [ 1303.422051][T16299] [<80234628>] (do_translation_fault) from [<8023478c>] (do_DataAbort+0x38/0xa8) [ 1303.422115][T16299] r9:84e01800 r8:80234628 r7:ebb31ec8 r6:20000080 r5:00000a06 r4:8281d160 [ 1303.422133][T16299] [<80234754>] (do_DataAbort) from [<80200b0c>] (__dabt_svc+0x4c/0x80) [ 1303.422181][T16299] Exception stack(0xebb31ec8 to 0xebb31f10) [ 1303.422312][T16299] 1ec0: 20000080 7effffff 00001000 b5003500 00000002 00000000 [ 1303.422355][T16299] 1ee0: 855c5001 20000080 855c5000 b5403587 84e01800 ebb31fa4 a1000083 ebb31f18 [ 1303.422418][T16299] 1f00: 8056b514 81a206e8 80000013 ffffffff [ 1303.422503][T16299] r8:855c5000 r7:ebb31efc r6:ffffffff r5:80000013 r4:81a206e8 [ 1303.423218][T16299] [<8056b2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1303.423680][T16299] Exception stack(0xebb31fa8 to 0xebb31ff0) [ 1303.424143][T16299] 1fa0: 00000000 00000000 00000003 00000002 20000080 00000000 [ 1303.424450][T16299] 1fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76b200bc [ 1303.424512][T16299] 1fe0: 76b1fec0 76b1feb0 0001939c 00131f30 [ 1303.425134][T16299] r10:00000036 r9:84e01800 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1303.425555][T16299] r4:00000000 [ 1303.610145][ T31] audit: type=1400 audit(1303.560:396): avc: denied { connect } for pid=16300 comm="syz.1.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1303.619856][T16301] binder: 16300:16301 ioctl 6612 0 returned -22 [ 1303.819004][T16304] FAULT_INJECTION: forcing a failure. [ 1303.819004][T16304] name failslab, interval 1, probability 0, space 0, times 0 [ 1303.819906][T16304] CPU: 0 UID: 0 PID: 16304 Comm: syz.0.2804 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1303.819972][T16304] Hardware name: ARM-Versatile Express [ 1303.819985][T16304] Call trace: [ 1303.820006][T16304] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1303.820063][T16304] r7:00000d40 r6:00000000 r5:60000013 r4:82257d44 [ 1303.820073][T16304] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1303.820102][T16304] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1303.820132][T16304] r5:8470d400 r4:8291bcc0 [ 1303.820140][T16304] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1303.820171][T16304] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 1303.820208][T16304] r8:8470d400 r7:00000d40 r6:855c5f28 r5:00000019 r4:83001240 [ 1303.820218][T16304] [<80525620>] (should_failslab) from [<8050a480>] (__kmalloc_noprof+0x9c/0x458) [ 1303.820246][T16304] [<8050a3e4>] (__kmalloc_noprof) from [<807bc1b4>] (tomoyo_encode2+0x64/0xf0) [ 1303.820285][T16304] r10:00000fff r9:8309fc00 r8:00000000 r7:8368d440 r6:855c5f28 r5:85ce0ffd [ 1303.820295][T16304] r4:85ce0fef [ 1303.820303][T16304] [<807bc150>] (tomoyo_encode2) from [<807bc264>] (tomoyo_encode+0x24/0x30) [ 1303.820339][T16304] r9:8309fc00 r8:00000000 r7:8368d440 r6:855c5f28 r5:00001000 r4:85ce0ff0 [ 1303.820348][T16304] [<807bc240>] (tomoyo_encode) from [<807bc2f0>] (tomoyo_realpath_from_path+0x80/0x17c) [ 1303.820378][T16304] r5:00001000 r4:85ce0000 [ 1303.820385][T16304] [<807bc270>] (tomoyo_realpath_from_path) from [<807b83f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1303.820423][T16304] r10:8470d400 r9:00000000 r8:855c5f00 r7:40089416 r6:00000004 r5:81cd56c4 [ 1303.820434][T16304] r4:855c5f28 r3:826c0240 [ 1303.820442][T16304] [<807b8324>] (tomoyo_path_number_perm) from [<807bccd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 1303.820479][T16304] r9:00000003 r8:855c5f00 r7:00000000 r6:00000000 r5:40089416 r4:855c5f00 [ 1303.820487][T16304] [<807bccb4>] (tomoyo_file_ioctl) from [<8076a70c>] (security_file_ioctl+0x64/0x1e4) [ 1303.820518][T16304] [<8076a6a8>] (security_file_ioctl) from [<8056b32c>] (sys_ioctl+0x4c/0xd84) [ 1303.820551][T16304] r7:00000000 r6:855c5f01 r5:00000000 r4:40089416 [ 1303.820558][T16304] [<8056b2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1303.820582][T16304] Exception stack(0xebb11fa8 to 0xebb11ff0) [ 1303.820603][T16304] 1fa0: 00000000 00000000 00000003 40089416 00000000 00000000 [ 1303.820621][T16304] 1fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76ae90bc [ 1303.820635][T16304] 1fe0: 76ae8ec0 76ae8eb0 0001939c 00131f30 [ 1303.820653][T16304] r10:00000036 r9:8470d400 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1303.820663][T16304] r4:00000000 [ 1303.829119][T16304] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1305.303770][T16311] FAULT_INJECTION: forcing a failure. [ 1305.303770][T16311] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.304081][T16311] CPU: 1 UID: 0 PID: 16311 Comm: syz.1.2810 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1305.304125][T16311] Hardware name: ARM-Versatile Express [ 1305.304138][T16311] Call trace: [ 1305.304159][T16311] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1305.304255][T16311] r7:00000d40 r6:00000000 r5:60000013 r4:82257d44 [ 1305.304265][T16311] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1305.304295][T16311] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1305.304325][T16311] r5:84708c00 r4:8291bcc0 [ 1305.304333][T16311] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1305.304364][T16311] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 1305.304402][T16311] r8:84708c00 r7:00000d40 r6:855c5da8 r5:00000019 r4:83001240 [ 1305.304412][T16311] [<80525620>] (should_failslab) from [<8050a480>] (__kmalloc_noprof+0x9c/0x458) [ 1305.304440][T16311] [<8050a3e4>] (__kmalloc_noprof) from [<807bc1b4>] (tomoyo_encode2+0x64/0xf0) [ 1305.304479][T16311] r10:00000fff r9:8309fc00 r8:00000000 r7:8368db28 r6:855c5da8 r5:84c4cffd [ 1305.304491][T16311] r4:84c4cfef [ 1305.304498][T16311] [<807bc150>] (tomoyo_encode2) from [<807bc264>] (tomoyo_encode+0x24/0x30) [ 1305.304536][T16311] r9:8309fc00 r8:00000000 r7:8368db28 r6:855c5da8 r5:00001000 r4:84c4cff0 [ 1305.304547][T16311] [<807bc240>] (tomoyo_encode) from [<807bc2f0>] (tomoyo_realpath_from_path+0x80/0x17c) [ 1305.304577][T16311] r5:00001000 r4:84c4c000 [ 1305.304584][T16311] [<807bc270>] (tomoyo_realpath_from_path) from [<807b83f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1305.304622][T16311] r10:84708c00 r9:00000000 r8:855c5d80 r7:c0c89425 r6:00000004 r5:81cd56c4 [ 1305.304633][T16311] r4:855c5da8 r3:826c0240 [ 1305.304641][T16311] [<807b8324>] (tomoyo_path_number_perm) from [<807bccd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 1305.304679][T16311] r9:00000004 r8:855c5d80 r7:00000000 r6:00000000 r5:c0c89425 r4:855c5d80 [ 1305.304688][T16311] [<807bccb4>] (tomoyo_file_ioctl) from [<8076a70c>] (security_file_ioctl+0x64/0x1e4) [ 1305.304826][T16311] [<8076a6a8>] (security_file_ioctl) from [<8056b32c>] (sys_ioctl+0x4c/0xd84) [ 1305.304911][T16311] r7:00000000 r6:855c5d81 r5:00000000 r4:c0c89425 [ 1305.304993][T16311] [<8056b2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1305.305026][T16311] Exception stack(0xebae1fa8 to 0xebae1ff0) [ 1305.305088][T16311] 1fa0: 00000000 00000000 00000004 c0c89425 00000000 00000000 [ 1305.305146][T16311] 1fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76aff0bc [ 1305.305197][T16311] 1fe0: 76afeec0 76afeeb0 0001939c 00131f30 [ 1305.305309][T16311] r10:00000036 r9:84708c00 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1305.305453][T16311] r4:00000000 [ 1305.306844][T16311] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1306.321235][T16321] binder: 16320:16321 ioctl 6612 0 returned -22 [ 1308.539562][T16339] binder: 16338:16339 ioctl 6612 0 returned -22 [ 1311.667093][T16359] binder: 16357:16359 ioctl 6612 0 returned -22 [ 1314.426372][T16381] FAULT_INJECTION: forcing a failure. [ 1314.426372][T16381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1314.426657][T16381] CPU: 1 UID: 0 PID: 16381 Comm: syz.1.2831 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1314.426689][T16381] Hardware name: ARM-Versatile Express [ 1314.426709][T16381] Call trace: [ 1314.426729][T16381] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1314.426820][T16381] r7:ec6b1e20 r6:00000000 r5:60000013 r4:82257d44 [ 1314.426850][T16381] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1314.426883][T16381] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1314.426913][T16381] r5:84708000 r4:82951710 [ 1314.426921][T16381] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1314.426951][T16381] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 1314.426984][T16381] r8:04000020 r7:ec6b1e20 r6:20000100 r5:00000000 r4:ec6b1f20 [ 1314.426991][T16381] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 1314.427033][T16381] [<8095f694>] (should_fail_usercopy) from [<8151c150>] (copy_msghdr_from_user+0x50/0x130) [ 1314.427066][T16381] [<8151c100>] (copy_msghdr_from_user) from [<8151c2a8>] (___sys_sendmsg+0x78/0xd0) [ 1314.427108][T16381] r8:04000020 r7:00000000 r6:83603900 r5:ec6b1f20 r4:ec6b1e64 [ 1314.427136][T16381] [<8151c230>] (___sys_sendmsg) from [<8151c75c>] (__sys_sendmsg+0x8c/0xd8) [ 1314.427173][T16381] r10:00000128 r9:84708000 r8:847e39c0 r7:04000020 r6:20000100 r5:847e39c1 [ 1314.427185][T16381] r4:00000003 [ 1314.427212][T16381] [<8151c6d0>] (__sys_sendmsg) from [<8151c7bc>] (sys_sendmsg+0x14/0x18) [ 1314.427250][T16381] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1314.427258][T16381] [<8151c7a8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1314.427283][T16381] Exception stack(0xec6b1fa8 to 0xec6b1ff0) [ 1314.427303][T16381] 1fa0: 00000000 00000000 00000003 20000100 04000020 00000000 [ 1314.427322][T16381] 1fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b200bc [ 1314.427335][T16381] 1fe0: 76b1fec0 76b1feb0 0001939c 00131f30 [ 1315.879039][ T31] audit: type=1400 audit(1315.830:397): avc: denied { shutdown } for pid=16388 comm="syz.1.2834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1316.960000][T16402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16402 comm=syz.1.2839 [ 1320.243891][T16415] FAULT_INJECTION: forcing a failure. [ 1320.243891][T16415] name failslab, interval 1, probability 0, space 0, times 0 [ 1320.245325][T16415] CPU: 0 UID: 0 PID: 16415 Comm: syz.0.2842 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1320.245393][T16415] Hardware name: ARM-Versatile Express [ 1320.245407][T16415] Call trace: [ 1320.245427][T16415] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1320.245510][T16415] r7:00000c40 r6:00000000 r5:60000013 r4:82257d44 [ 1320.245519][T16415] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1320.245549][T16415] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1320.245578][T16415] r5:84e01800 r4:8291bcc0 [ 1320.245586][T16415] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1320.245617][T16415] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 1320.245654][T16415] r8:84e01800 r7:00000c40 r6:857833e8 r5:00001000 r4:830016c0 [ 1320.245662][T16415] [<80525620>] (should_failslab) from [<8050a480>] (__kmalloc_noprof+0x9c/0x458) [ 1320.245690][T16415] [<8050a3e4>] (__kmalloc_noprof) from [<807bc2ac>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 1320.245731][T16415] r10:84e01800 r9:8309e800 r8:00000000 r7:83431000 r6:857833e8 r5:00001000 [ 1320.245741][T16415] r4:00000000 [ 1320.245748][T16415] [<807bc270>] (tomoyo_realpath_from_path) from [<807b83f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1320.245786][T16415] r10:84e01800 r9:00000000 r8:857833c0 r7:c0c89425 r6:00000004 r5:81cd56c4 [ 1320.245851][T16415] r4:857833e8 r3:826c0240 [ 1320.245860][T16415] [<807b8324>] (tomoyo_path_number_perm) from [<807bccd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 1320.245956][T16415] r9:00000003 r8:857833c0 r7:00000000 r6:00000000 r5:c0c89425 r4:857833c0 [ 1320.245968][T16415] [<807bccb4>] (tomoyo_file_ioctl) from [<8076a70c>] (security_file_ioctl+0x64/0x1e4) [ 1320.246009][T16415] [<8076a6a8>] (security_file_ioctl) from [<8056b32c>] (sys_ioctl+0x4c/0xd84) [ 1320.246068][T16415] r7:00000000 r6:857833c1 r5:00000000 r4:c0c89425 [ 1320.246095][T16415] [<8056b2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1320.246122][T16415] Exception stack(0xdfaa9fa8 to 0xdfaa9ff0) [ 1320.246143][T16415] 9fa0: 00000000 00000000 00000003 c0c89425 00000000 00000000 [ 1320.246161][T16415] 9fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76b2b0bc [ 1320.246175][T16415] 9fe0: 76b2aec0 76b2aeb0 0001939c 00131f30 [ 1320.246194][T16415] r10:00000036 r9:84e01800 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1320.246204][T16415] r4:00000000 [ 1320.256790][T16415] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1321.216368][ T31] audit: type=1400 audit(1321.160:398): avc: denied { write } for pid=16439 comm="syz.1.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1323.588772][T16456] fuse: Unknown parameter 'pcr' [ 1323.957484][ T4615] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1323.995307][T16466] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16466 comm=syz.1.2856 [ 1324.001380][T16466] FAULT_INJECTION: forcing a failure. [ 1324.001380][T16466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1324.001784][T16466] CPU: 1 UID: 0 PID: 16466 Comm: syz.1.2856 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1324.001853][T16466] Hardware name: ARM-Versatile Express [ 1324.001900][T16466] Call trace: [ 1324.001941][T16466] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1324.002076][T16466] r7:00000000 r6:00000000 r5:60000013 r4:82257d44 [ 1324.002156][T16466] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1324.002241][T16466] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1324.002377][T16466] r5:84708c00 r4:82951710 [ 1324.002722][T16466] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1324.002813][T16466] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 1324.002972][T16466] r8:76b1ff30 r7:00000000 r6:00000000 r5:dfdb1f68 r4:00000002 [ 1324.003046][T16466] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 1324.003211][T16466] [<8095f694>] (should_fail_usercopy) from [<8058cc58>] (simple_read_from_buffer+0x80/0x13c) [ 1324.003268][T16466] [<8058cbd8>] (simple_read_from_buffer) from [<806041f0>] (proc_fail_nth_read+0xb8/0x100) [ 1324.003335][T16466] r10:00000001 r9:80604138 r8:00000002 r7:dfdb1f68 r6:0000000f r5:76b1ff30 [ 1324.003374][T16466] r4:84708c00 r3:dfdb1e9f [ 1324.003423][T16466] [<80604138>] (proc_fail_nth_read) from [<805517a0>] (vfs_read+0x98/0x320) [ 1324.003487][T16466] r8:76b1ff30 r7:dfdb1f68 r6:84708c00 r5:0000000f r4:84e5b6c0 [ 1324.003583][T16466] [<80551708>] (vfs_read) from [<80552440>] (ksys_read+0x74/0xe4) [ 1324.003670][T16466] r10:00000003 r9:84708c00 r8:8020029c r7:00000000 r6:00000000 r5:84e5b6c0 [ 1324.003731][T16466] r4:84e5b6c3 [ 1324.003748][T16466] [<805523cc>] (ksys_read) from [<805524c0>] (sys_read+0x10/0x14) [ 1324.003838][T16466] r7:00000003 r6:00000004 r5:76b1ff30 r4:0000000f [ 1324.003905][T16466] [<805524b0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1324.004051][T16466] Exception stack(0xdfdb1fa8 to 0xdfdb1ff0) [ 1324.004243][T16466] 1fa0: 0000000f 76b1ff30 00000004 76b1ff30 0000000f 00000000 [ 1324.004304][T16466] 1fc0: 0000000f 76b1ff30 00000004 00000003 002d0000 00000000 00006364 76b200bc [ 1324.004364][T16466] 1fe0: 00000158 76b1fed0 000d7d68 0012fe04 [ 1324.129050][ T4615] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 8 [ 1324.129385][ T4615] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1324.129464][ T4615] usb 1-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1324.129531][ T4615] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1324.136256][ T4615] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1324.136560][ T4615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1324.136756][ T4615] usb 1-1: SerialNumber: syz [ 1324.159400][T16458] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1324.160620][T16458] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1324.430250][ T4615] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1324.438511][ T4615] usb 1-1: USB disconnect, device number 31 [ 1324.939312][T16503] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16503 comm=syz.1.2865 [ 1325.400720][T16518] FAULT_INJECTION: forcing a failure. [ 1325.400720][T16518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1325.402825][T16518] CPU: 0 UID: 0 PID: 16518 Comm: syz.1.2870 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1325.402904][T16518] Hardware name: ARM-Versatile Express [ 1325.402931][T16518] Call trace: [ 1325.402979][T16518] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1325.403082][T16518] r7:dff55e20 r6:00000000 r5:60000013 r4:82257d44 [ 1325.403104][T16518] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1325.403166][T16518] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1325.403230][T16518] r5:84e06000 r4:82951710 [ 1325.403248][T16518] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1325.403311][T16518] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 1325.403382][T16518] r8:00000004 r7:dff55e20 r6:20000c00 r5:00000000 r4:dff55f20 [ 1325.403400][T16518] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 1325.403457][T16518] [<8095f694>] (should_fail_usercopy) from [<8151c150>] (copy_msghdr_from_user+0x50/0x130) [ 1325.403522][T16518] [<8151c100>] (copy_msghdr_from_user) from [<8151c2a8>] (___sys_sendmsg+0x78/0xd0) [ 1325.403591][T16518] r8:00000004 r7:00000000 r6:8366af00 r5:dff55f20 r4:dff55e64 [ 1325.403611][T16518] [<8151c230>] (___sys_sendmsg) from [<8151c75c>] (__sys_sendmsg+0x8c/0xd8) [ 1325.403684][T16518] r10:00000128 r9:84e06000 r8:84e5bc00 r7:00000004 r6:20000c00 r5:84e5bc01 [ 1325.403709][T16518] r4:00000004 [ 1325.403727][T16518] [<8151c6d0>] (__sys_sendmsg) from [<8151c7bc>] (sys_sendmsg+0x14/0x18) [ 1325.403800][T16518] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1325.403819][T16518] [<8151c7a8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1325.403875][T16518] Exception stack(0xdff55fa8 to 0xdff55ff0) [ 1325.403915][T16518] 5fa0: 00000000 00000000 00000004 20000c00 00000004 00000000 [ 1325.403961][T16518] 5fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b200bc [ 1325.403994][T16518] 5fe0: 76b1fec0 76b1feb0 0001939c 00131f30 [ 1326.480050][T16549] FAULT_INJECTION: forcing a failure. [ 1326.480050][T16549] name failslab, interval 1, probability 0, space 0, times 0 [ 1326.480273][T16549] CPU: 1 UID: 0 PID: 16549 Comm: syz.0.2879 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1326.480306][T16549] Hardware name: ARM-Versatile Express [ 1326.480318][T16549] Call trace: [ 1326.480337][T16549] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1326.480412][T16549] r7:84e04800 r6:00000000 r5:60000013 r4:82257d44 [ 1326.480424][T16549] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1326.480455][T16549] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1326.480484][T16549] r5:84e04800 r4:8291bcc0 [ 1326.480503][T16549] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1326.480537][T16549] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 1326.480575][T16549] r8:00000000 r7:84e04800 r6:00000dc0 r5:830ab000 r4:830a8f00 [ 1326.480584][T16549] [<80525620>] (should_failslab) from [<8050a0fc>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 1326.480613][T16549] [<8050a0b0>] (kmem_cache_alloc_noprof) from [<806152b0>] (__kernfs_new_node+0x54/0x210) [ 1326.480652][T16549] r10:830ab000 r9:84e04800 r8:8245d958 r7:860012c0 r6:822dfa90 r5:830ab000 [ 1326.480661][T16549] r4:860012c0 [ 1326.480669][T16549] [<8061525c>] (__kernfs_new_node) from [<80616e88>] (kernfs_new_node+0x80/0xa4) [ 1326.480726][T16549] r10:830ab000 r9:822dfa90 r8:00000000 r7:00000002 r6:00000000 r5:00008124 [ 1326.480738][T16549] r4:860012c0 [ 1326.480745][T16549] [<80616e08>] (kernfs_new_node) from [<80619288>] (__kernfs_create_file+0x30/0xc8) [ 1326.480784][T16549] r10:ffffee4b r9:00000000 r8:00001000 r7:8295f4cc r6:00000000 r5:81c26080 [ 1326.480793][T16549] r4:860012c0 [ 1326.480800][T16549] [<80619258>] (__kernfs_create_file) from [<8061a278>] (sysfs_add_file_mode_ns+0x90/0x11c) [ 1326.480854][T16549] r5:8295f584 r4:860012c0 [ 1326.480863][T16549] [<8061a1e8>] (sysfs_add_file_mode_ns) from [<8061b37c>] (internal_create_group+0x238/0x51c) [ 1326.480900][T16549] r9:00000001 r8:00000000 r6:84e91800 r5:00000124 r4:81d4c54c [ 1326.480908][T16549] [<8061b144>] (internal_create_group) from [<8061b6e8>] (internal_create_groups+0x50/0x94) [ 1326.480943][T16549] r10:85798008 r9:00000000 r8:00000000 r7:8295f4c0 r6:84e91800 r5:8295f4c0 [ 1326.480973][T16549] r4:84e91800 [ 1326.480982][T16549] [<8061b698>] (internal_create_groups) from [<8061b744>] (sysfs_create_groups+0x18/0x1c) [ 1326.481017][T16549] r9:85743d80 r8:00000000 r7:00000000 r6:833000c0 r5:00000000 r4:84e91800 [ 1326.481025][T16549] [<8061b72c>] (sysfs_create_groups) from [<80b241dc>] (device_add+0x4fc/0x7ec) [ 1326.481052][T16549] [<80b23ce0>] (device_add) from [<80b42364>] (wakeup_source_device_create+0xb4/0xcc) [ 1326.481087][T16549] r9:85743d80 r8:84e5ba80 r7:00000000 r6:00000000 r5:855b6680 r4:84e91800 [ 1326.481116][T16549] [<80b422b0>] (wakeup_source_device_create) from [<80b4279c>] (wakeup_source_sysfs_add+0x14/0x24) [ 1326.481169][T16549] r7:00000000 r6:8280cc34 r5:00000000 r4:855b6680 [ 1326.481195][T16549] [<80b42788>] (wakeup_source_sysfs_add) from [<80b40b44>] (wakeup_source_register+0x50/0x80) [ 1326.481226][T16549] r5:00000000 r4:855b6680 [ 1326.481234][T16549] [<80b40af4>] (wakeup_source_register) from [<805ba270>] (ep_create_wakeup_source+0xac/0xcc) [ 1326.481273][T16549] r5:855b6800 r4:85743d80 [ 1326.481283][T16549] [<805ba1c4>] (ep_create_wakeup_source) from [<805bc474>] (do_epoll_ctl+0x8d4/0xd44) [ 1326.481311][T16549] r5:84e5ba81 r4:84e5b001 [ 1326.481319][T16549] [<805bbba0>] (do_epoll_ctl) from [<805bc9a0>] (sys_epoll_ctl+0xbc/0x108) [ 1326.481376][T16549] r10:000000fb r9:84e04800 r8:b5403587 r7:00000005 r6:00000004 r5:20001200 [ 1326.481388][T16549] r4:00000001 [ 1326.481395][T16549] [<805bc8e4>] (sys_epoll_ctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1326.481422][T16549] Exception stack(0xe0001fa8 to 0xe0001ff0) [ 1326.481441][T16549] 1fa0: 00000000 00000000 00000005 00000001 00000004 20001200 [ 1326.481459][T16549] 1fc0: 00000000 00000000 0012fee0 000000fb 002d0000 00000000 00006364 76b2b0bc [ 1326.481473][T16549] 1fe0: 76b2aec0 76b2aeb0 0001939c 00131f30 [ 1326.481490][T16549] r8:8020029c r7:000000fb r6:0012fee0 r5:00000000 r4:00000000 [ 1326.483906][ T31] audit: type=1400 audit(1326.430:399): avc: denied { block_suspend } for pid=16548 comm="syz.0.2879" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1327.029407][T16562] FAULT_INJECTION: forcing a failure. [ 1327.029407][T16562] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.030482][T16562] CPU: 0 UID: 0 PID: 16562 Comm: syz.1.2882 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1327.030539][T16562] Hardware name: ARM-Versatile Express [ 1327.030552][T16562] Call trace: [ 1327.030572][T16562] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1327.030627][T16562] r7:84e06000 r6:00000000 r5:60000013 r4:82257d44 [ 1327.030636][T16562] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1327.030664][T16562] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1327.030693][T16562] r5:84e06000 r4:8291bcc0 [ 1327.030701][T16562] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1327.030736][T16562] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 1327.030773][T16562] r8:00000000 r7:84e06000 r6:00000820 r5:85358840 r4:830ad9c0 [ 1327.030782][T16562] [<80525620>] (should_failslab) from [<8050a0fc>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 1327.030811][T16562] [<8050a0b0>] (kmem_cache_alloc_noprof) from [<8152d64c>] (skb_clone+0x60/0x1c8) [ 1327.030849][T16562] r10:000001a2 r9:85355d40 r8:85221800 r7:85358840 r6:85064ec0 r5:85358840 [ 1327.030858][T16562] r4:00000820 [ 1327.030866][T16562] [<8152d5ec>] (skb_clone) from [<81642018>] (__netlink_deliver_tap+0x1f4/0x28c) [ 1327.030898][T16562] r5:00000014 r4:85064800 [ 1327.030906][T16562] [<81641e24>] (__netlink_deliver_tap) from [<81645210>] (netlink_unicast+0x280/0x29c) [ 1327.030942][T16562] r10:00000000 r9:00000000 r8:847b8d80 r7:85358840 r6:85355d40 r5:00000014 [ 1327.030951][T16562] r4:85221800 [ 1327.030964][T16562] [<81644f90>] (netlink_unicast) from [<816453f8>] (netlink_sendmsg+0x1cc/0x444) [ 1327.031001][T16562] r9:00000000 r8:00000000 r7:85842000 r6:00000014 r5:85358840 r4:dff19f20 [ 1327.031009][T16562] [<8164522c>] (netlink_sendmsg) from [<81519cbc>] (__sock_sendmsg+0x44/0x78) [ 1327.031044][T16562] r10:00000000 r9:dff19dc4 r8:dff19dc4 r7:00000000 r6:8363e780 r5:dff19f20 [ 1327.031054][T16562] r4:00000000 [ 1327.031061][T16562] [<81519c78>] (__sock_sendmsg) from [<8151a52c>] (____sys_sendmsg+0x298/0x2cc) [ 1327.031091][T16562] r7:00000000 r6:8363e780 r5:00004000 r4:dff19f20 [ 1327.031099][T16562] [<8151a294>] (____sys_sendmsg) from [<8151c2cc>] (___sys_sendmsg+0x9c/0xd0) [ 1327.031131][T16562] r10:dff19e24 r9:200001c0 r8:00004000 r7:00000000 r6:8363e780 r5:dff19f20 [ 1327.031140][T16562] r4:00000000 [ 1327.031148][T16562] [<8151c230>] (___sys_sendmsg) from [<8151c75c>] (__sys_sendmsg+0x8c/0xd8) [ 1327.031181][T16562] r10:00000128 r9:84e06000 r8:86234780 r7:00004000 r6:200001c0 r5:86234781 [ 1327.031191][T16562] r4:00000003 [ 1327.031199][T16562] [<8151c6d0>] (__sys_sendmsg) from [<8151c7bc>] (sys_sendmsg+0x14/0x18) [ 1327.031231][T16562] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 1327.031238][T16562] [<8151c7a8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1327.031263][T16562] Exception stack(0xdff19fa8 to 0xdff19ff0) [ 1327.031282][T16562] 9fa0: 00000000 00000000 00000003 200001c0 00004000 00000000 [ 1327.031299][T16562] 9fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b200bc [ 1327.031313][T16562] 9fe0: 76b1fec0 76b1feb0 0001939c 00131f30 [ 1328.560791][ T31] audit: type=1326 audit(1328.510:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16551 comm="syz.0.2880" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 1328.677776][T16581] syz.1.2887: attempt to access beyond end of device [ 1328.677776][T16581] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1328.678215][T16581] EXT4-fs (loop1): unable to read superblock [ 1332.462644][ T31] audit: type=1400 audit(1332.410:401): avc: denied { create } for pid=16613 comm="syz.0.2899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1332.650591][ T31] audit: type=1400 audit(1332.600:402): avc: denied { bind } for pid=16622 comm="syz.0.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1332.652379][ T31] audit: type=1400 audit(1332.600:403): avc: denied { name_bind } for pid=16622 comm="syz.0.2900" src=687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1332.653780][ T31] audit: type=1400 audit(1332.600:404): avc: denied { node_bind } for pid=16622 comm="syz.0.2900" saddr=1a1f:f382:dfff:3b37:664e:876d:61a5:ad8a src=687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1332.728752][ T31] audit: type=1400 audit(1332.680:405): avc: denied { getopt } for pid=16625 comm="syz.0.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1332.991361][T16636] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=16636 comm=syz.1.2905 [ 1333.007292][T16637] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=16637 comm=syz.1.2905 [ 1333.094898][T16641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16641 comm=syz.1.2907 [ 1333.302045][ T31] audit: type=1400 audit(1333.250:406): avc: denied { name_bind } for pid=16649 comm="syz.1.2909" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1333.714681][T16662] fuse: Bad value for 'user_id' [ 1333.715382][T16662] fuse: Bad value for 'user_id' [ 1336.380935][T16688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=152 sclass=netlink_route_socket pid=16688 comm=syz.1.2923 [ 1337.422369][T16704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=136 sclass=netlink_route_socket pid=16704 comm=syz.0.2922 [ 1339.072657][ T31] audit: type=1400 audit(1339.020:407): avc: denied { shutdown } for pid=16714 comm="syz.0.2933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1341.098695][T16735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=136 sclass=netlink_route_socket pid=16735 comm=syz.1.2935 [ 1344.790095][T16774] binder: 16773:16774 ioctl 6612 0 returned -22 [ 1345.935649][T16811] fuse: Unknown parameter 'ff>Bw۴)' [ 1346.492208][T16827] binder: 16824:16827 ioctl 6612 0 returned -22 [ 1349.474385][T16884] binder: 16883:16884 ioctl 6612 0 returned -22 [ 1352.552847][T16929] binder: 16928:16929 ioctl 6612 0 returned -22 [ 1357.149449][T16960] binder: 16959:16960 ioctl 6612 0 returned -22 [ 1358.539091][T16973] fuse: Unknown parameter 'f0x0000000000000003' [ 1360.632440][T16986] binder: 16985:16986 ioctl 6612 0 returned -22 [ 1361.698923][T16994] random: crng reseeded on system resumption [ 1364.596615][ T721] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1364.752218][ T721] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1364.755589][ T721] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 8 [ 1364.757090][ T721] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1364.762679][ T721] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1364.763254][ T721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.763797][ T721] usb 1-1: Product: syz [ 1364.764233][ T721] usb 1-1: Manufacturer: syz [ 1364.764605][ T721] usb 1-1: SerialNumber: syz [ 1364.769245][T17012] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1364.997947][ T721] usb 1-1: USB disconnect, device number 32 [ 1368.966645][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1369.123236][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1369.130352][ T10] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 8 [ 1369.130597][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1369.138611][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1369.139356][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.139562][ T10] usb 2-1: Product: syz [ 1369.139694][ T10] usb 2-1: Manufacturer: syz [ 1369.139817][ T10] usb 2-1: SerialNumber: syz [ 1369.152211][T17046] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1369.371998][ T10] usb 2-1: USB disconnect, device number 40 [ 1369.433320][T17062] FAULT_INJECTION: forcing a failure. [ 1369.433320][T17062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1369.433574][T17062] CPU: 0 UID: 0 PID: 17062 Comm: syz.1.3007 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1369.433616][T17062] Hardware name: ARM-Versatile Express [ 1369.433629][T17062] Call trace: [ 1369.433648][T17062] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1369.433721][T17062] r7:00000000 r6:00000000 r5:60000013 r4:82257d44 [ 1369.433731][T17062] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1369.433762][T17062] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1369.433791][T17062] r5:83c93000 r4:82951710 [ 1369.433800][T17062] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1369.433942][T17062] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 1369.434017][T17062] r8:00000000 r7:00000000 r6:8245d848 r5:20000080 r4:20000080 [ 1369.434079][T17062] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 1369.434142][T17062] [<8095f694>] (should_fail_usercopy) from [<80965748>] (strncpy_from_user+0x20/0x1a0) [ 1369.434175][T17062] [<80965728>] (strncpy_from_user) from [<80560b68>] (getname_flags.part.0+0x44/0x18c) [ 1369.434242][T17062] r10:000000e2 r9:83c93000 r8:00000000 r7:00000000 r6:8245d848 r5:20000080 [ 1369.434284][T17062] r4:83249000 [ 1369.434392][T17062] [<80560b24>] (getname_flags.part.0) from [<80565c34>] (getname_flags+0x3c/0x50) [ 1369.434458][T17062] r9:83c93000 r8:00000000 r7:ffffff9c r6:00000000 r5:00000000 r4:20000080 [ 1369.434581][T17062] [<80565bf8>] (getname_flags) from [<8058aa14>] (path_setxattrat+0x158/0x17c) [ 1369.434617][T17062] r5:20000080 r4:00000000 [ 1369.434625][T17062] [<8058a8bc>] (path_setxattrat) from [<8058abc4>] (sys_setxattr+0x34/0x3c) [ 1369.434658][T17062] r8:8020029c r7:000000e2 r6:0012fee0 r5:00000000 r4:20000140 [ 1369.434703][T17062] [<8058ab90>] (sys_setxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1369.434971][T17062] Exception stack(0xdfcd1fa8 to 0xdfcd1ff0) [ 1369.434995][T17062] 1fa0: 00000001 00000000 20000080 20000140 00000000 00000000 [ 1369.435013][T17062] 1fc0: 00000001 00000000 0012fee0 000000e2 002d0000 00000000 00006364 76b200bc [ 1369.435029][T17062] 1fe0: 76b1fec0 76b1feb0 0001939c 00131f30 [ 1369.435184][T17062] r4:00000001 [ 1371.176760][T14818] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1371.333343][T14818] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1371.339076][T14818] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 8 [ 1371.339725][T14818] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1371.349579][T14818] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1371.351373][T14818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.354671][T14818] usb 1-1: Product: syz [ 1371.358424][T14818] usb 1-1: Manufacturer: syz [ 1371.359655][T14818] usb 1-1: SerialNumber: syz [ 1371.365525][T17102] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1371.598022][T14818] usb 1-1: USB disconnect, device number 33 [ 1372.036605][ T8462] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1372.186552][ T8462] usb 1-1: Using ep0 maxpacket: 8 [ 1372.195335][ T8462] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1372.195729][ T8462] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1372.196143][ T8462] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1372.208153][ T8462] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1372.208375][ T8462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.208520][ T8462] usb 1-1: Product: ␊ [ 1372.208559][ T8462] usb 1-1: Manufacturer: 氥덦繈䡊ቇ昞獍텕✽䍬묗塚뷦ꋵ䦟攮쿮๾枻톬ē慎⪩ᗆ埅쑡尭쫵５鑆놘ᕶ됕痹禺≏ￏᩏ걱頋鸘긏駉涿픰㶩蘁龕䤇탁㢣ਵ⒊碌ⶵ흤恢蠫⅘ꏿ㨀睑ꔓ␢녃ښ浄᭙ћ컀௃恱 [ 1372.208602][ T8462] usb 1-1: SerialNumber: syz [ 1372.217207][T17121] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1372.217595][T17121] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1372.636749][ T8462] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1372.645428][ T8462] usb 1-1: USB disconnect, device number 34 [ 1373.326603][ T8462] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1373.508682][ T8462] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1373.515293][ T8462] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 8 [ 1373.515589][ T8462] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1373.532915][ T8462] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1373.533723][ T8462] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.534117][ T8462] usb 2-1: Product: syz [ 1373.534195][ T8462] usb 2-1: Manufacturer: syz [ 1373.534255][ T8462] usb 2-1: SerialNumber: syz [ 1373.547408][T17139] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1373.772993][ T8462] usb 2-1: USB disconnect, device number 41 [ 1376.971561][T17172] FAULT_INJECTION: forcing a failure. [ 1376.971561][T17172] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.973141][T17172] CPU: 1 UID: 0 PID: 17172 Comm: syz.1.3018 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1376.973246][T17172] Hardware name: ARM-Versatile Express [ 1376.973271][T17172] Call trace: [ 1376.973313][T17172] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1376.973410][T17172] r7:00000d40 r6:00000000 r5:60000013 r4:82257d44 [ 1376.973426][T17172] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1376.973471][T17172] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1376.973520][T17172] r5:84d80000 r4:8291bcc0 [ 1376.973534][T17172] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1376.973582][T17172] [<8095f454>] (should_fail_ex) from [<8052568c>] (should_failslab+0x6c/0x94) [ 1376.973644][T17172] r8:84d80000 r7:00000d40 r6:86234ce8 r5:00000019 r4:83001240 [ 1376.973658][T17172] [<80525620>] (should_failslab) from [<8050a480>] (__kmalloc_noprof+0x9c/0x458) [ 1376.973703][T17172] [<8050a3e4>] (__kmalloc_noprof) from [<807bc1b4>] (tomoyo_encode2+0x64/0xf0) [ 1376.973795][T17172] r10:00000fff r9:8309fc00 r8:00000000 r7:836aad48 r6:86234ce8 r5:84c40ffd [ 1376.973814][T17172] r4:84c40fef [ 1376.973827][T17172] [<807bc150>] (tomoyo_encode2) from [<807bc264>] (tomoyo_encode+0x24/0x30) [ 1376.973907][T17172] r9:8309fc00 r8:00000000 r7:836aad48 r6:86234ce8 r5:00001000 r4:84c40ff0 [ 1376.973923][T17172] [<807bc240>] (tomoyo_encode) from [<807bc2f0>] (tomoyo_realpath_from_path+0x80/0x17c) [ 1376.973974][T17172] r5:00001000 r4:84c40000 [ 1376.973986][T17172] [<807bc270>] (tomoyo_realpath_from_path) from [<807b83f0>] (tomoyo_path_number_perm+0xcc/0x22c) [ 1376.974054][T17172] r10:84d80000 r9:00000000 r8:86234cc0 r7:c4009420 r6:00000004 r5:81cd56c4 [ 1376.974073][T17172] r4:86234ce8 r3:826c0240 [ 1376.974086][T17172] [<807b8324>] (tomoyo_path_number_perm) from [<807bccd0>] (tomoyo_file_ioctl+0x1c/0x20) [ 1376.974147][T17172] r9:00000003 r8:86234cc0 r7:00000000 r6:00000000 r5:c4009420 r4:86234cc0 [ 1376.974161][T17172] [<807bccb4>] (tomoyo_file_ioctl) from [<8076a70c>] (security_file_ioctl+0x64/0x1e4) [ 1376.974211][T17172] [<8076a6a8>] (security_file_ioctl) from [<8056b32c>] (sys_ioctl+0x4c/0xd84) [ 1376.974264][T17172] r7:00000000 r6:86234cc1 r5:00000000 r4:c4009420 [ 1376.974277][T17172] [<8056b2e0>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1376.974316][T17172] Exception stack(0xdff29fa8 to 0xdff29ff0) [ 1376.974349][T17172] 9fa0: 00000000 00000000 00000003 c4009420 00000000 00000000 [ 1376.974380][T17172] 9fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76a9c0bc [ 1376.974403][T17172] 9fe0: 76a9bec0 76a9beb0 0001939c 00131f30 [ 1376.974436][T17172] r10:00000036 r9:84d80000 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 1376.974452][T17172] r4:00000000 [ 1376.994494][T17172] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1378.346322][ T721] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1378.511967][ T721] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1378.519610][ T721] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 8 [ 1378.519909][ T721] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1378.533616][ T721] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1378.534041][ T721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.534138][ T721] usb 2-1: Product: syz [ 1378.534204][ T721] usb 2-1: Manufacturer: syz [ 1378.534267][ T721] usb 2-1: SerialNumber: syz [ 1378.538266][T17176] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1378.756533][ T721] usb 2-1: USB disconnect, device number 42 [ 1378.824868][T17190] fuse: Unknown parameter '0x0000000000000003' [ 1378.841315][T17190] geneve0: entered allmulticast mode [ 1378.845301][T17190] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=261 sclass=netlink_audit_socket pid=17190 comm=syz.1.3022 [ 1382.366369][ T721] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1382.533995][ T721] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1382.538715][ T721] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 8 [ 1382.538937][ T721] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1382.549350][ T721] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1382.549588][ T721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.551406][ T721] usb 2-1: Product: syz [ 1382.551638][ T721] usb 2-1: Manufacturer: syz [ 1382.551779][ T721] usb 2-1: SerialNumber: syz [ 1382.561662][T17208] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1382.776851][ T721] usb 2-1: USB disconnect, device number 43 [ 1398.317229][T17291] FAULT_INJECTION: forcing a failure. [ 1398.317229][T17291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1398.318604][T17291] CPU: 0 UID: 0 PID: 17291 Comm: syz.0.3044 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT [ 1398.318670][T17291] Hardware name: ARM-Versatile Express [ 1398.318729][T17291] Call trace: [ 1398.318753][T17291] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 1398.318820][T17291] r7:00000002 r6:00000000 r5:60000013 r4:82257d44 [ 1398.318830][T17291] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 1398.318862][T17291] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 1398.318891][T17291] r5:856d3c00 r4:82951710 [ 1398.318899][T17291] [<80220048>] (dump_stack) from [<8095f618>] (should_fail_ex+0x1c4/0x228) [ 1398.318929][T17291] [<8095f454>] (should_fail_ex) from [<8095f690>] (should_fail+0x14/0x18) [ 1398.318966][T17291] r8:8020029c r7:00000002 r6:856d3c00 r5:20000140 r4:20000040 [ 1398.318975][T17291] [<8095f67c>] (should_fail) from [<8095f6b0>] (should_fail_usercopy+0x1c/0x20) [ 1398.319001][T17291] [<8095f694>] (should_fail_usercopy) from [<80756f48>] (sys_mq_open+0x50/0x33c) [ 1398.319030][T17291] [<80756ef8>] (sys_mq_open) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1398.319055][T17291] Exception stack(0xdffd9fa8 to 0xdffd9ff0) [ 1398.319075][T17291] 9fa0: 00000000 00000000 20000040 00000002 00000101 20000140 [ 1398.319093][T17291] 9fc0: 00000000 00000000 0012fee0 00000112 002d0000 00000000 00006364 76b2b0bc [ 1398.319107][T17291] 9fe0: 76b2aec0 76b2aeb0 0001939c 00131f30 [ 1398.319126][T17291] r10:00000112 r9:856d3c00 r8:8020029c r7:00000112 r6:0012fee0 r5:00000000 [ 1398.319136][T17291] r4:00000000 [ 1404.207820][T17316] binder: 17315:17316 ioctl 6612 0 returned -22 [ 1407.584865][T17337] binder: 17336:17337 ioctl 6612 0 returned -22 [ 1410.921005][T17355] binder: 17353:17355 ioctl 6612 0 returned -22 [ 1415.150456][T17379] binder: 17378:17379 ioctl 6612 0 returned -22 [ 1420.776400][T17405] binder: 17404:17405 ioctl 6612 0 returned -22 [ 1426.842162][T17434] binder: 17433:17434 ioctl 6612 0 returned -22 [ 1432.211445][T17459] binder: 17458:17459 ioctl 6612 0 returned -22 [ 1444.796842][T17517] binder: 17516:17517 ioctl 6612 0 returned -22 [ 1446.597577][T17532] binder: 17531:17532 ioctl 6612 0 returned -22 [ 1449.319601][T17552] binder: 17551:17552 ioctl 6612 0 returned -22 [ 1451.017332][T17566] binder: 17565:17566 ioctl 6612 0 returned -22 [ 1453.935586][T17587] binder: 17586:17587 ioctl 6612 0 returned -22 [ 1458.164797][T17605] binder: 17604:17605 ioctl 6612 0 returned -22 [ 1462.002335][T17630] binder: 17629:17630 ioctl 6612 0 returned -22 [ 1466.411320][T17651] binder: 17650:17651 ioctl 6612 0 returned -22 [ 1470.041535][T17671] binder: 17670:17671 ioctl 6612 0 returned -22 [ 1474.536675][T17700] binder: 17699:17700 ioctl 6612 0 returned -22 [ 1477.072115][T17719] binder: 17718:17719 ioctl 6612 0 returned -22 [ 1478.954517][T17736] binder: 17735:17736 ioctl 6612 0 returned -22 [ 1480.016941][T17744] fuse: Bad value for 'fd' [ 1481.461116][T17754] binder: 17753:17754 ioctl 6612 0 returned -22 [ 1485.465792][T17778] binder: 17777:17778 ioctl 6612 0 returned -22 [ 1531.694008][T18102] binder: 18101:18102 ioctl 6612 0 returned -22 [ 1532.978156][T18111] binder: 18109:18111 ioctl 6612 0 returned -22 [ 1534.449739][T18134] binder: 18133:18134 ioctl 6612 0 returned -22 [ 1535.881958][T18149] binder: 18148:18149 ioctl 6612 0 returned -22 [ 1539.841477][T18178] binder: 18177:18178 ioctl 6612 0 returned -22 [ 1541.282678][T18195] binder: 18194:18195 ioctl 6612 0 returned -22 [ 1542.727536][T18210] binder: 18209:18210 ioctl 6612 0 returned -22 [ 1546.673616][T18236] binder: 18235:18236 ioctl 6612 0 returned -22 [ 1547.076782][T18240] fuse: Bad value for 'group_id' [ 1547.077573][T18240] fuse: Bad value for 'group_id' [ 1549.214341][T18255] fuse: Bad value for 'group_id' [ 1549.215681][T18255] fuse: Bad value for 'group_id' [ 1549.354827][T18257] binder: 18256:18257 ioctl 6612 0 returned -22 [ 1551.161852][T18273] binder: 18272:18273 ioctl 6612 0 returned -22 [ 1554.587778][T18291] binder: 18290:18291 ioctl 6612 0 returned -22 [ 1557.817319][T18310] fuse: Bad value for 'group_id' [ 1557.817577][T18310] fuse: Bad value for 'group_id' [ 1564.036457][ T12] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) VM DIAGNOSIS: 03:00:15 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=82257d44 R02=00146781 R03=80239c60 R04=8281b4c0 R05=00000000 R06=8281b4c0 R07=8280c650 R08=00000000 R09=00000000 R10=00000000 R11=82801f34 R12=82801f38 R13=82801f28 R14=80228704 R15=80239c68 PSR=60000093 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000000 R01=00000000 R02=00000000 R03=83868c00 R04=847187c0 R05=00000084 R06=00000002 R07=00000000 R08=84da9e40 R09=83868c00 R10=00000125 R11=df96df4c R12=df96dd48 R13=df96df38 R14=81a5bf34 R15=81715cac PSR=60010013 -ZC- A S svc32 s00=26080006 s01=000d8003 d00=000d800326080006 s02=84030404 s03=0004000d d01=0004000d84030404 s04=00080044 s05=0201c708 d02=0201c70800080044 s06=08000a80 s07=00040000 d03=0004000008000a80 s08=040c8003 s09=ffffffff d04=ffffffff040c8003 s10=0c900303 s11=03000800 d05=030008000c900303 s12=08000c98 s13=0112e600 d06=0112e60008000c98 s14=00080606 s15=00010000 d07=0001000000080606 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=258e0b89 s33=ddfde201 d16=ddfde201258e0b89 s34=0a8b1106 s35=21c353b9 d17=21c353b90a8b1106 s36=5dac2f14 s37=2d114d19 d18=2d114d195dac2f14 s38=21dfaa4b s39=1936e997 d19=1936e99721dfaa4b s40=591f0db4 s41=0ab867e6 d20=0ab867e6591f0db4 s42=d63122ae s43=21fab5bc d21=21fab5bcd63122ae s44=db44273d s45=b5280d8a d22=b5280d8adb44273d s46=98c6cd5f s47=c2004f89 d23=c2004f8998c6cd5f s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000300 d26=0000030000000000 s54=ff360000 s55=000cffff d27=000cffffff360000 s56=00090000 s57=00000000 d28=0000000000090000 s58=00000300 s59=ff4a0000 d29=ff4a000000000300 s60=000cffff s61=00090000 d30=00090000000cffff s62=00000000 s63=00000300 d31=0000030000000000 FPSCR: 00000000