last executing test programs: 4.879706553s ago: executing program 0 (id=6715): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001300)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@ringbuf_query, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf749}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x8, 0x1000, &(0x7f0000000200)=""/4096, 0x1f00, 0x11, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001240)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001280)=[{0x0, 0x1, 0x1, 0xb}, {0x4, 0x2, 0xc, 0x1}, {0x2, 0x3, 0xb, 0xa}, {0x1, 0x5, 0xc, 0xb}, {0x3, 0x1, 0xe, 0xa}, {0x2, 0x1, 0x5, 0x5}, {0x0, 0x1, 0x1, 0xc}], 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000013c0)=r1}, 0x20) r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000001480), 0x12000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001440), r3) getsockname$packet(r3, &(0x7f00000014c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001500)=0x14) sendmsg$nl_route(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001540)=@mpls_delroute={0xcc, 0x19, 0x4, 0x70bd29, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x8, 0xfd, 0x0, 0xfd, 0x2, 0x900}, [@RTA_VIA={0x14, 0x12, {0x10, "ac15a3d1ceeaab93035647e8bd6c"}}, @RTA_NEWDST={0x84, 0x13, [{0x400, 0x0, 0x1}, {0x4}, {0x3ff, 0x0, 0x1}, {0x40c, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x7ff}, {0x8}, {0x8}, {0x0, 0x0, 0x1}, {0x100}, {0xffffe}, {0x7, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x4}, {0x8, 0x0, 0x1}, {0x8}, {0x4, 0x0, 0x1}, {0x8a3, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x2a1, 0x0, 0x1}, {0xffffe, 0x0, 0x1}, {0xfffe0}, {0x4a6c}, {0xd, 0x0, 0x1}, {0xa32}, {0x7}, {0x1ff, 0x0, 0x1}, {0x4}, {0xe145}, {0xa}, {}, {0x7}]}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x10}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x12, 0x7, r4}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'syztnl2\x00', r4, 0x29, 0x1, 0x9, 0x1, 0x1d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x7800, 0x1, 0x9, 0x1}}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000001780)={r4, 0x1, 0x6, @remote}, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001800), r3) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000001940)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x8c, r6, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001980)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000001a00)={0x6, 0x118, 0xfa00, {{0x138, 0x9, "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", 0x2, 0x4, 0x94, 0xb, 0x4, 0xe, 0x6, 0x1}, r7}}, 0x120) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001b80)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)=@newqdisc={0x2c, 0x24, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff1, 0x10}, {0xfff3, 0x1}, {0xb, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x40084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001fc0)={r3, 0x0, 0xe1, 0x8f, &(0x7f0000001c80)="ff24e95414f6dd5a7d92045cf377365fc2ab4d6cf23eec47219af2553835c9ef1d8c8ab55f3ccad93d3577bc9d84b921736d06b4c8bac993c85bf60cf198370728d28edef35f4135e07e44ac89e282b7f396de6199006bbe9734a0df83baa1a979bc5225757fa365c4ec7132bede223083927000f035f60d08b5ea4b586e11ffadde6d736eb9bc57c860f323882f9a32d757314234b8fb53a6009f9508ca0a68a02be8c78c397fe2e7b9513ca1c546aef3908e3b5c828220e25a4ba236e3d3027fab771acfd8586aaf98ccfba4664ce3d5d03fa6080f530a69a13270c411204c1c", &(0x7f0000001d80)=""/143, 0x8, 0x0, 0xe2, 0x6a, &(0x7f0000001e40)="e0e07a7a7a8b646db3eb96270d95a9b26f5a4a41f702a38252c05ec138d9530179903eb6b774d65cce63b595b2256ec007eea4d485c4c4afddf4d65beef7203aed0dae8936df866286474e92ed5f42e57bc620082435a53b18cf81022b37719a0fae212dd5bafa992cb5b4dbb5f785d1b31b46a587d101f071bc3130b57cfff90526822dbe154ab6734b734f8d43141f07a7fb314ef2cb03a8107c75592517c8e90dba6bdf4e2ce317703764d11fa89401650e40802b809e69b147ecac1ea5c979817f83db88228160f4577fccfc7239661e9e8f5e34a908b892929fe9665d670902", &(0x7f0000001f40)="6f1c8655f5ba29108434287c028253a02878ed097b602bd6e80644b1df4f9fbfd983d73b7563d42875c1171bac5b8bad4f0633d88f2ba2bd93c3a1e79f9d32b6de9064c3aa7137fadc1066f65d250e566409974946d189214ffe57c1927629af2fd14f83d81650f4b903", 0x4, 0x0, 0x6}, 0x50) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000002040)={0x0, 0x4, 0x1, [0x80, 0x800, 0x800, 0x9, 0x6], [0x2, 0x4, 0x7, 0xe, 0xffff, 0xc, 0x10001, 0x8, 0x200, 0x200, 0x7, 0x6, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x7, 0x100000000, 0x180000000, 0x7, 0xffff, 0x69, 0x2, 0xfffffffffffffffc, 0x100, 0x6, 0x9, 0xfffffffffffffffc, 0x2, 0x4c5, 0x4, 0x9, 0x7, 0x0, 0x3, 0x2, 0x2, 0x100000001, 0x5, 0x8, 0x2, 0xffffffffffffff52, 0x5fe6, 0x1, 0x4, 0x63d, 0x7, 0x0, 0x4, 0x8, 0xfffffffffffffffa, 0x0, 0x8, 0x4000, 0x5, 0x40, 0x8, 0x2, 0x5, 0x4, 0x101, 0x3ff, 0x5, 0x95, 0x5, 0x81, 0x8, 0xfffffffffffffffb, 0x10, 0x7ff, 0xfffffffffffffffb, 0x2, 0x1d6, 0x1, 0x6, 0x4, 0xb, 0x4, 0xffffffff, 0x9, 0x8, 0x5b, 0x6, 0x6, 0x6, 0x7, 0x9, 0x3, 0xd, 0x4, 0x100000000, 0x2, 0x8, 0x6, 0xde89, 0x2, 0x9, 0x379174e2, 0xc572, 0x1, 0x2, 0x800, 0x200, 0x2, 0x10001, 0x5, 0x4, 0x6, 0x1, 0x1000, 0xff, 0xffffffff, 0x0, 0x8, 0x3, 0xae01, 0x9, 0x0, 0x100, 0x1, 0x2]}) connect$inet(r3, &(0x7f0000002480)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) r9 = openat2(r3, &(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)={0x80000, 0xc2, 0x34}, 0x18) write$binfmt_elf64(r9, &(0x7f0000002540)={{0x7f, 0x45, 0x4c, 0x46, 0xa0, 0x6, 0x48, 0x80, 0x80000001, 0x3, 0x3e, 0x6, 0x366, 0x40, 0x30f, 0x7, 0x5, 0x38, 0x4, 0x4, 0xb8, 0x7}, [{0x6, 0x9, 0x11c, 0x6, 0x7, 0x8c5, 0x86a, 0xc}, {0x7, 0x6819, 0x6, 0x8, 0xfbd0f25, 0x30, 0x7, 0x7}, {0x5, 0x2, 0x3, 0xe6, 0x1, 0xffffffffffff8001, 0x9b, 0x5}, {0x2, 0xffffffff, 0xb0, 0x8, 0x3, 0x8000000000000001, 0x9, 0x7e}], "5224c0138f6c66aaffc48e54f17350e997aa288de214c0adcc3968ac64b09bae16b63742db041d842aba26b6e4f57acb46deff3dba1c7d", ['\x00', '\x00', '\x00', '\x00']}, 0x557) r10 = openat$cgroup_ro(r3, &(0x7f0000002ac0)='cpuacct.usage_all\x00', 0x0, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000002b00)={0x0, 0x0}) timer_create(0x6, &(0x7f0000002b40)={0x0, 0x31, 0x2, @tid=r11}, &(0x7f0000002b80)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002e00)={r1, 0x0, 0x22, 0xe0, &(0x7f0000002bc0)="272095c540853f31343275b3af4abc3de5a98a975db2528ffafa7f1079daef7d8d0d", &(0x7f0000002c00)=""/224, 0x9, 0x0, 0x3, 0xa9, &(0x7f0000002d00)="4197b9", &(0x7f0000002d40)="b992b2388efc0f7486df05730f6a44de36d62ad97c4c8e91f1c2bd87f0501e477387c5e173b77314b4ad7c8b78da2791bcefdecac533522328631e89e934253a4b2fae098043e2333e81f711db2b3275f01b55c00e0584168dee0233be36b9b90fd07a447bbbaf8948758726aaeae03cc23206b0f4df4a8ac6443000ec2746292dca260e0b0f958c803f5f41328ccd95050159497f665568218865af17da171e78db009019aa8f32ff", 0x3, 0x0, 0x9}, 0x50) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000002e80)=""/155) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) getsockname$packet(r10, &(0x7f0000002f40), &(0x7f0000002f80)=0x14) ioctl$TIOCCONS(r9, 0x541d) 4.707411033s ago: executing program 0 (id=6717): r0 = memfd_create(&(0x7f0000000c40)='-!w]}\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={0x0}}, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) r3 = syz_open_dev$audion(&(0x7f0000000040), 0x9, 0xd3941) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x5451, 0x0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000001c0)=0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0x0, 0x0) pipe(&(0x7f00000014c0)) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x1c0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r5, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x5450, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.149590328s ago: executing program 0 (id=6724): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r1) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x90) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000340), 0x3, 0x42000) write$hidraw(r6, &(0x7f0000000480)="056ef7ba88ad505a6fe286b1d04283d33927c73f6a1385a5d9af80b4ece4e9f3e7edc9fb2359ecd6faa07023416071eb044ef3bb1dd26e5cfc9297aa4f29d9491c2d9030cee540c9632161f69040a75009c0f6c0d0a006f9e65b2dce990472d800d0bf34ab800c107ed0e218474d0233037cd1f09e7d7c817562c7c4a3807627bc033becb8f52b4d21d5d16f6ceb8c648bc37013f0bdb3edb0e1b7443629a1172869669a376917dd1718f92960cf9ac66abbceda1ab449dff7d2cd74189ca8ed720a90a6d12962c5a71a815ee28a9cadcec790879c546c3d7f1b64211b12da8a7610744987e3ef803924", 0xea) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100"], 0x1c}}, 0x0) setreuid(0x0, 0xee00) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munmap(&(0x7f0000094000/0x3000)=nil, 0x3000) 1.94077082s ago: executing program 0 (id=6725): r0 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x2}, 0x18) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r0, @ANYRES16=r2, @ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r3 = openat$selinux_status(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r3, r3, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="fc000000", @ANYRES16, @ANYBLOB="00022bbd7000fddbdf25050000000e0001006e657464657673696d0000000f0002657673696d3000000800030000000000080001007063690011000200303030303a30303a31302e300000000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000080001007063690011000200303030303a30303a31302e300000000008000300010000000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x40840}, 0xc880) 900.501129ms ago: executing program 0 (id=6726): r0 = openat$mixer(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x80000) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0x5451, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000440)=0x8) 840.508762ms ago: executing program 0 (id=6727): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x15, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) timer_settime(r1, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r0, 0x0) read$hiddev(r3, 0x0, 0x0) 649.732333ms ago: executing program 1 (id=6729): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r1) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x90) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000340), 0x3, 0x42000) write$hidraw(r6, &(0x7f0000000480)="056ef7ba88ad505a6fe286b1d04283d33927c73f6a1385a5d9af80b4ece4e9f3e7edc9fb2359ecd6faa07023416071eb044ef3bb1dd26e5cfc9297aa4f29d9491c2d9030cee540c9632161f69040a75009c0f6c0d0a006f9e65b2dce990472d800d0bf34ab800c107ed0e218474d0233037cd1f09e7d7c817562c7c4a3807627bc033becb8f52b4d21d5d16f6ceb8c648bc37013f0bdb3edb0e1b7443629a1172869669a376917dd1718f92960cf9ac66abbceda1ab449dff7d2cd74189ca8ed720a90a6d12962c5a71a815ee28a9cadcec790879c546c3d7f1b64211b12da8a7610744987e3ef803924", 0xea) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100"], 0x1c}}, 0x0) setreuid(0x0, 0xee00) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munmap(&(0x7f0000094000/0x3000)=nil, 0x3000) 459.711334ms ago: executing program 1 (id=6730): openat$vsock(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2}, 0x18) r2 = openat$selinux_status(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r2, r2, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="fc000000", @ANYRES16, @ANYBLOB="00022bbd7000fddbdf25050000000e0001006e657464657673696d0000000f0002657673696d3000000800030000000000080001007063690011000200303030303a30303a31302e300000000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000080001007063690011000200303030303a30303a31302e300000000008000300010000000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x40840}, 0xc880) 398.985177ms ago: executing program 1 (id=6731): r0 = openat$full(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x807}, 0x20000050) r1 = openat$dlm_control(0xffffff9c, &(0x7f0000000340), 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000001c0)={[&(0x7f0000000180)='}*%\x00']}, &(0x7f0000000240)={[&(0x7f0000000200)='+.\x00']}, 0x1000) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0}}, 0x0) r6 = dup2(r4, r3) r7 = accept$inet6(r6, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x541b, &(0x7f0000000040)={@local, 0x4}) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x4e4, 0x2c, 0x20, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc, 0xe}, {0xc, 0x2}, {0xb, 0x6}}, [@f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @local}]}}, @f_tcindex={{0xc}, {0x49c, 0x2, [@TCA_TCINDEX_POLICE={0x468, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd6c1, 0x0, 0x1, 0x6, 0x8001, 0x5, 0xd, 0x9, 0x7ff, 0xf90, 0xfffffff7, 0x6, 0x80, 0xc87e, 0x6, 0xd, 0x9, 0xffffffff, 0x5, 0x9, 0x4, 0x7, 0x3, 0x5978c7a3, 0x1, 0x8d, 0x2, 0x1ff, 0x8, 0x327, 0x8, 0xa, 0x3, 0x2, 0x1ff, 0x9, 0x10001, 0x3, 0x7, 0xd, 0x1, 0x7, 0x7, 0x1, 0x100, 0xc, 0x5, 0x3, 0x80000001, 0x9, 0x9, 0x55e, 0x7, 0x2, 0x4, 0x18, 0x9f7c, 0x7, 0xfffffff7, 0x5, 0x3, 0x0, 0x10, 0x98ec, 0x7, 0x10, 0x80000001, 0x0, 0x9, 0x8, 0xa34, 0xffff, 0xfffffff7, 0xffffffff, 0xb, 0x9, 0x401, 0x0, 0x3, 0x6, 0x4, 0x10, 0xb, 0x5, 0x800, 0x1, 0x0, 0x6, 0x3, 0x9, 0xb12, 0x7c5f3e85, 0x0, 0x80000000, 0x12000, 0x6a8, 0x3b2, 0x0, 0x65, 0x0, 0x5, 0x200, 0x6, 0x7, 0x8, 0x8, 0x26, 0x2a800, 0x0, 0x7ff, 0x8, 0xa11d, 0x28cd, 0x9, 0x40, 0x0, 0x1, 0x4, 0x1c6, 0x4, 0x257, 0x401, 0x95aa, 0x3, 0x8, 0xf626, 0x401, 0x1, 0x7, 0xc, 0x7, 0xf94e, 0x1, 0x6, 0x3, 0xd, 0xfffffff8, 0x2, 0x4, 0xf2, 0x7, 0x5, 0x3, 0x8c1c, 0x9, 0xd, 0x3, 0x5, 0x2, 0x292, 0x5, 0xc, 0x1, 0xffffff5e, 0x2, 0x1, 0xfffffff7, 0x0, 0xfffff801, 0x1, 0x7fff, 0x92c, 0x1, 0xf, 0x8, 0x1, 0x7fffffff, 0x2, 0x7, 0x4, 0x3, 0x3ff, 0x81, 0x1, 0x7, 0xdd, 0x3, 0x4, 0x1, 0x0, 0x6, 0x6, 0x10001, 0x5, 0x0, 0x4, 0x7, 0x80000001, 0x1, 0x9, 0x8001, 0x9, 0x9, 0x4b00, 0x7, 0x12, 0x3, 0x3, 0x9, 0x6, 0xaaed, 0x80000001, 0x200, 0x9, 0x8000, 0x7fffffff, 0x2, 0xe, 0x6, 0x0, 0xa99, 0x5, 0x40, 0x80, 0x6, 0x7, 0x4, 0x3, 0x58, 0x1000, 0x6, 0xffff, 0x1, 0x1, 0x1000, 0x3, 0x6, 0x0, 0xd, 0x3, 0x5, 0x7fffffff, 0x0, 0x78306752, 0x1, 0x2, 0x1, 0x2, 0x0, 0x8, 0x4, 0x6, 0x9, 0x1000, 0x7, 0x80000, 0x380, 0x7ff, 0x7fff, 0x7, 0x7, 0x7ff, 0x7, 0x6, 0x5, 0xb]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x10000000, 0x4, 0x8, 0x6, {0xb, 0x0, 0x3d28, 0x7, 0x7, 0x9}, {0x1, 0x0, 0x2, 0xf0, 0x9, 0xb7}, 0x5, 0x78d, 0xc}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x14}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x86e7}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xda8a}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x10}}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xffff, 0xfff3}}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x2}]}}]}, 0x4e4}, 0x1, 0x0, 0x0, 0x1}, 0x24048000) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5450, 0x0) 310.143562ms ago: executing program 1 (id=6732): r0 = openat$selinux_commit_pending_bools(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) close(r0) openat$sw_sync_info(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) read(r0, 0x0, 0x0) (fail_nth: 1) 238.538216ms ago: executing program 1 (id=6733): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r1) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x90) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000340), 0x3, 0x42000) write$hidraw(r6, &(0x7f0000000480)="056ef7ba88ad505a6fe286b1d04283d33927c73f6a1385a5d9af80b4ece4e9f3e7edc9fb2359ecd6faa07023416071eb044ef3bb1dd26e5cfc9297aa4f29d9491c2d9030cee540c9632161f69040a75009c0f6c0d0a006f9e65b2dce990472d800d0bf34ab800c107ed0e218474d0233037cd1f09e7d7c817562c7c4a3807627bc033becb8f52b4d21d5d16f6ceb8c648bc37013f0bdb3edb0e1b7443629a1172869669a376917dd1718f92960cf9ac66abbceda1ab449dff7d2cd74189ca8ed720a90a6d12962c5a71a815ee28a9cadcec790879c546c3d7f1b64211b12da8a7610744987e3ef803924", 0xea) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100"], 0x1c}}, 0x0) setreuid(0x0, 0xee00) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munmap(&(0x7f0000094000/0x3000)=nil, 0x3000) 0s ago: executing program 1 (id=6734): openat$vsock(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r1 = openat$selinux_status(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r1, r1, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="fc000000", @ANYRES16, @ANYBLOB="00022bbd7000fddbdf25050000000e0001006e657464657673696d0000000f0002657673696d3000000800030000000000080001007063690011000200303030303a30303a31302e300000000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000080001007063690011000200303030303a30303a31302e300000000008000300010000000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x40840}, 0xc880) kernel console output (not intermixed with test programs): me failslab, interval 1, probability 0, space 0, times 0 [ 3270.702501][T25926] CPU: 0 UID: 0 PID: 25926 Comm: syz.1.5836 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3270.702580][T25926] Hardware name: ARM-Versatile Express [ 3270.702607][T25926] Call trace: [ 3270.702667][T25926] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3270.702829][T25926] r7:844a2400 r6:00000000 r5:60000013 r4:82257c34 [ 3270.702921][T25926] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3270.703034][T25926] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3270.703135][T25926] r5:844a2400 r4:8291bcc0 [ 3270.703159][T25926] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3270.703249][T25926] [<8095f3d4>] (should_fail_ex) from [<805257a4>] (should_failslab+0x6c/0x94) [ 3270.703459][T25926] r8:00000000 r7:844a2400 r6:00400cc0 r5:ffffffff r4:830ad9c0 [ 3270.703504][T25926] [<80525738>] (should_failslab) from [<80509b64>] (kmem_cache_alloc_node_noprof+0x50/0x338) [ 3270.703660][T25926] [<80509b14>] (kmem_cache_alloc_node_noprof) from [<81526d70>] (__alloc_skb+0x138/0x160) [ 3270.703795][T25926] r10:dfc35d1c r9:00000000 r8:00400cc0 r7:00000000 r6:830ad9c0 r5:ffffffff [ 3270.703844][T25926] r4:82806040 [ 3270.703907][T25926] [<81526c38>] (__alloc_skb) from [<8152f178>] (alloc_skb_with_frags+0x44/0x1ec) [ 3270.703988][T25926] r8:802ce318 r7:dfc35cbc r6:00000000 r5:00001000 r4:00000003 [ 3270.704057][T25926] [<8152f134>] (alloc_skb_with_frags) from [<8151fb64>] (sock_alloc_send_pskb+0x1f4/0x228) [ 3270.704172][T25926] r10:dfc35d1c r9:00000000 r8:802ce318 r7:dfc35cbc r6:844a2400 r5:7fffffff [ 3270.704285][T25926] r4:85487600 [ 3270.704319][T25926] [<8151f970>] (sock_alloc_send_pskb) from [<817f079c>] (unix_dgram_sendmsg+0x134/0x774) [ 3270.704495][T25926] r10:00000044 r9:844a2400 r8:85487600 r7:00000000 r6:00000044 r5:850d6280 [ 3270.704604][T25926] r4:dfc35f20 [ 3270.704698][T25926] [<817f0668>] (unix_dgram_sendmsg) from [<817f0e20>] (unix_seqpacket_sendmsg+0x44/0x84) [ 3270.704814][T25926] r10:00000000 r9:dfc35dc4 r8:dfc35dc4 r7:00000000 r6:850d6280 r5:dfc35f20 [ 3270.704838][T25926] r4:00000000 [ 3270.704952][T25926] [<817f0ddc>] (unix_seqpacket_sendmsg) from [<81519a34>] (__sock_sendmsg+0x44/0x78) [ 3270.705076][T25926] r5:dfc35f20 r4:00000000 [ 3270.705140][T25926] [<815199f0>] (__sock_sendmsg) from [<8151a2a4>] (____sys_sendmsg+0x298/0x2cc) [ 3270.705235][T25926] r7:00000000 r6:850d6280 r5:04000000 r4:dfc35f20 [ 3270.705317][T25926] [<8151a00c>] (____sys_sendmsg) from [<8151c044>] (___sys_sendmsg+0x9c/0xd0) [ 3270.705541][T25926] r10:dfc35e24 r9:20000200 r8:04000000 r7:00000000 r6:850d6280 r5:dfc35f20 [ 3270.705602][T25926] r4:00000000 [ 3270.705644][T25926] [<8151bfa8>] (___sys_sendmsg) from [<8151c4d4>] (__sys_sendmsg+0x8c/0xd8) [ 3270.705721][T25926] r10:00000128 r9:844a2400 r8:84a02840 r7:04000000 r6:20000200 r5:84a02841 [ 3270.705746][T25926] r4:00000006 [ 3270.705763][T25926] [<8151c448>] (__sys_sendmsg) from [<8151c534>] (sys_sendmsg+0x14/0x18) [ 3270.705857][T25926] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 3270.705878][T25926] [<8151c520>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3270.706017][T25926] Exception stack(0xdfc35fa8 to 0xdfc35ff0) [ 3270.706209][T25926] 5fa0: 00000000 00000000 00000006 20000200 04000000 00000000 [ 3270.706284][T25926] 5fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76bb60bc [ 3270.706415][T25926] 5fe0: 76bb5ec0 76bb5eb0 0001939c 00131f30 [ 3280.568568][T26033] FAULT_INJECTION: forcing a failure. [ 3280.568568][T26033] name failslab, interval 1, probability 0, space 0, times 0 [ 3280.568835][T26033] CPU: 0 UID: 0 PID: 26033 Comm: syz.0.5866 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3280.568884][T26033] Hardware name: ARM-Versatile Express [ 3280.568897][T26033] Call trace: [ 3280.568918][T26033] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3280.569002][T26033] r7:84aed400 r6:00000000 r5:60000013 r4:82257c34 [ 3280.569024][T26033] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3280.569056][T26033] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3280.569086][T26033] r5:84aed400 r4:8291bcc0 [ 3280.569094][T26033] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3280.569124][T26033] [<8095f3d4>] (should_fail_ex) from [<805257a4>] (should_failslab+0x6c/0x94) [ 3280.569161][T26033] r8:00000000 r7:84aed400 r6:00000820 r5:00000020 r4:83001300 [ 3280.569170][T26033] [<80525738>] (should_failslab) from [<80509584>] (__kmalloc_cache_noprof+0x4c/0x33c) [ 3280.569200][T26033] [<80509538>] (__kmalloc_cache_noprof) from [<8155a0e8>] (__hw_addr_add_ex+0x11c/0x1fc) [ 3280.569240][T26033] r10:00000000 r9:00000000 r8:857bba5c r7:00000001 r6:e046ddbc r5:00000020 [ 3280.569280][T26033] r4:00000000 [ 3280.569291][T26033] [<81559fcc>] (__hw_addr_add_ex) from [<8155b110>] (dev_addr_init+0x70/0xa4) [ 3280.569338][T26033] r10:84aed400 r9:00000001 r8:818ed150 r7:e046de84 r6:857bba5c r5:00000000 [ 3280.569350][T26033] r4:857bb800 [ 3280.569358][T26033] [<8155b0a0>] (dev_addr_init) from [<81548c90>] (alloc_netdev_mqs+0x10c/0x4ec) [ 3280.569402][T26033] r6:0000074c r5:00000001 r4:857bb800 [ 3280.569435][T26033] [<81548b84>] (alloc_netdev_mqs) from [<818eb6d0>] (vlan_ioctl_handler+0x3a8/0x4a0) [ 3280.569480][T26033] r10:84aed400 r9:00000001 r8:840c7000 r7:84a31b00 r6:00000000 r5:00000000 [ 3280.569490][T26033] r4:00000000 [ 3280.569519][T26033] [<818eb328>] (vlan_ioctl_handler) from [<8151a650>] (sock_ioctl+0x1f8/0x600) [ 3280.569560][T26033] r9:00000007 r8:84a02840 r7:85006f00 r6:84a31b00 r5:20000080 r4:82c1f8e4 [ 3280.569579][T26033] [<8151a458>] (sock_ioctl) from [<8056b530>] (sys_ioctl+0x138/0xd84) [ 3280.569617][T26033] r9:00000007 r8:84a02840 r7:20000080 r6:84a02841 r5:00000000 r4:00008982 [ 3280.569627][T26033] [<8056b3f8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3280.569675][T26033] Exception stack(0xe046dfa8 to 0xe046dff0) [ 3280.569700][T26033] dfa0: 00000000 00000000 00000007 00008982 20000080 00000000 [ 3280.569720][T26033] dfc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76b970bc [ 3280.569734][T26033] dfe0: 76b96ec0 76b96eb0 0001939c 00131f30 [ 3280.569775][T26033] r10:00000036 r9:84aed400 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 3280.569798][T26033] r4:00000000 [ 3281.040961][T26047] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=26047 comm=syz.1.5865 [ 3285.450923][ T31] audit: type=1400 audit(3285.405:477): avc: denied { watch watch_reads } for pid=26094 comm="syz.1.5881" path="/327/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 3287.431152][T26139] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=263 sclass=netlink_tcpdiag_socket pid=26139 comm=syz.0.5891 [ 3290.726124][T26193] FAULT_INJECTION: forcing a failure. [ 3290.726124][T26193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3290.727032][T26193] CPU: 0 UID: 0 PID: 26193 Comm: syz.0.5904 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3290.727082][T26193] Hardware name: ARM-Versatile Express [ 3290.727096][T26193] Call trace: [ 3290.727122][T26193] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3290.727182][T26193] r7:00000000 r6:00000000 r5:60000013 r4:82257c34 [ 3290.727193][T26193] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3290.727222][T26193] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3290.727254][T26193] r5:84ab8c00 r4:82951710 [ 3290.727262][T26193] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3290.727317][T26193] [<8095f3d4>] (should_fail_ex) from [<8095f610>] (should_fail+0x14/0x18) [ 3290.727373][T26193] r8:76b96f30 r7:00000000 r6:00000000 r5:e479df68 r4:00000002 [ 3290.727384][T26193] [<8095f5fc>] (should_fail) from [<8095f630>] (should_fail_usercopy+0x1c/0x20) [ 3290.727412][T26193] [<8095f614>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 3290.727443][T26193] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 3290.727483][T26193] r10:00000001 r9:8060401c r8:00000002 r7:e479df68 r6:0000000f r5:76b96f30 [ 3290.727496][T26193] r4:84ab8c00 r3:e479de9f [ 3290.727504][T26193] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 3290.727542][T26193] r8:76b96f30 r7:e479df68 r6:84ab8c00 r5:0000000f r4:84a02e40 [ 3290.727551][T26193] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 3290.727587][T26193] r10:00000003 r9:84ab8c00 r8:8020029c r7:00000000 r6:00000000 r5:84a02e40 [ 3290.727597][T26193] r4:84a02e43 [ 3290.727606][T26193] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 3290.727639][T26193] r7:00000003 r6:00000006 r5:76b96f30 r4:0000000f [ 3290.727647][T26193] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3290.727674][T26193] Exception stack(0xe479dfa8 to 0xe479dff0) [ 3290.727695][T26193] dfa0: 0000000f 76b96f30 00000006 76b96f30 0000000f 00000000 [ 3290.727714][T26193] dfc0: 0000000f 76b96f30 00000006 00000003 002d0000 00000000 00006364 76b970bc [ 3290.727728][T26193] dfe0: 00000158 76b96ed0 000d7d68 0012fe04 [ 3293.576912][T26226] FAULT_INJECTION: forcing a failure. [ 3293.576912][T26226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3293.577354][T26226] CPU: 1 UID: 0 PID: 26226 Comm: syz.0.5912 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3293.577465][T26226] Hardware name: ARM-Versatile Express [ 3293.577493][T26226] Call trace: [ 3293.577530][T26226] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3293.577625][T26226] r7:20000080 r6:00000000 r5:60000013 r4:82257c34 [ 3293.577664][T26226] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3293.577717][T26226] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3293.577769][T26226] r5:84aed400 r4:82951710 [ 3293.577783][T26226] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3293.577837][T26226] [<8095f3d4>] (should_fail_ex) from [<8095f610>] (should_fail+0x14/0x18) [ 3293.577894][T26226] r8:00000000 r7:20000080 r6:8599b440 r5:00000000 r4:eaefdf20 [ 3293.577909][T26226] [<8095f5fc>] (should_fail) from [<8095f630>] (should_fail_usercopy+0x1c/0x20) [ 3293.577986][T26226] [<8095f614>] (should_fail_usercopy) from [<808aeb1c>] (_copy_from_iter+0x6c/0x7c8) [ 3293.578039][T26226] [<808aeab0>] (_copy_from_iter) from [<81644f58>] (netlink_sendmsg+0x18c/0x444) [ 3293.578106][T26226] r10:00000000 r9:00000000 r8:eaefdf30 r7:84e34800 r6:00000014 r5:84738c00 [ 3293.578125][T26226] r4:eaefdf20 [ 3293.578140][T26226] [<81644dcc>] (netlink_sendmsg) from [<81519a34>] (__sock_sendmsg+0x44/0x78) [ 3293.578206][T26226] r10:00000000 r9:eaefddc4 r8:eaefddc4 r7:00000000 r6:85062500 r5:eaefdf20 [ 3293.578246][T26226] r4:00000000 [ 3293.578290][T26226] [<815199f0>] (__sock_sendmsg) from [<8151a2a4>] (____sys_sendmsg+0x298/0x2cc) [ 3293.578346][T26226] r7:00000000 r6:85062500 r5:200081c0 r4:eaefdf20 [ 3293.578363][T26226] [<8151a00c>] (____sys_sendmsg) from [<8151c044>] (___sys_sendmsg+0x9c/0xd0) [ 3293.578423][T26226] r10:eaefde24 r9:20000100 r8:200081c0 r7:00000000 r6:85062500 r5:eaefdf20 [ 3293.578499][T26226] r4:00000000 [ 3293.578628][T26226] [<8151bfa8>] (___sys_sendmsg) from [<8151c4d4>] (__sys_sendmsg+0x8c/0xd8) [ 3293.578754][T26226] r10:00000128 r9:84aed400 r8:85ae16c0 r7:200081c0 r6:20000100 r5:85ae16c1 [ 3293.578784][T26226] r4:00000004 [ 3293.578816][T26226] [<8151c448>] (__sys_sendmsg) from [<8151c534>] (sys_sendmsg+0x14/0x18) [ 3293.578882][T26226] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 3293.578918][T26226] [<8151c520>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3293.579047][T26226] Exception stack(0xeaefdfa8 to 0xeaefdff0) [ 3293.579197][T26226] dfa0: 00000000 00000000 00000004 20000100 200081c0 00000000 [ 3293.579266][T26226] dfc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b970bc [ 3293.579389][T26226] dfe0: 76b96ec0 76b96eb0 0001939c 00131f30 [ 3297.141849][T26279] FAULT_INJECTION: forcing a failure. [ 3297.141849][T26279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3297.143469][T26279] CPU: 0 UID: 0 PID: 26279 Comm: syz.1.5924 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3297.143587][T26279] Hardware name: ARM-Versatile Express [ 3297.143613][T26279] Call trace: [ 3297.143656][T26279] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3297.143759][T26279] r7:00000000 r6:00000000 r5:60000013 r4:82257c34 [ 3297.143779][T26279] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3297.143831][T26279] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3297.143894][T26279] r5:84ab8c00 r4:82951710 [ 3297.143912][T26279] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3297.143972][T26279] [<8095f3d4>] (should_fail_ex) from [<8095f610>] (should_fail+0x14/0x18) [ 3297.144038][T26279] r8:76bb5f30 r7:00000000 r6:00000000 r5:eb0edf68 r4:00000002 [ 3297.144055][T26279] [<8095f5fc>] (should_fail) from [<8095f630>] (should_fail_usercopy+0x1c/0x20) [ 3297.144105][T26279] [<8095f614>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 3297.144164][T26279] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 3297.144237][T26279] r10:00000001 r9:8060401c r8:00000002 r7:eb0edf68 r6:0000000f r5:76bb5f30 [ 3297.144260][T26279] r4:84ab8c00 r3:eb0ede9f [ 3297.144276][T26279] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 3297.144345][T26279] r8:76bb5f30 r7:eb0edf68 r6:84ab8c00 r5:0000000f r4:84a02cc0 [ 3297.144366][T26279] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 3297.144436][T26279] r10:00000003 r9:84ab8c00 r8:8020029c r7:00000000 r6:00000000 r5:84a02cc0 [ 3297.144458][T26279] r4:84a02cc0 [ 3297.144475][T26279] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 3297.144538][T26279] r7:00000003 r6:00000004 r5:76bb5f30 r4:0000000f [ 3297.144555][T26279] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3297.144606][T26279] Exception stack(0xeb0edfa8 to 0xeb0edff0) [ 3297.144646][T26279] dfa0: 0000000f 76bb5f30 00000004 76bb5f30 0000000f 00000000 [ 3297.144684][T26279] dfc0: 0000000f 76bb5f30 00000004 00000003 002d0000 00000000 00006364 76bb60bc [ 3297.144716][T26279] dfe0: 00000158 76bb5ed0 000d7d68 0012fe04 [ 3297.837193][T26288] FAULT_INJECTION: forcing a failure. [ 3297.837193][T26288] name failslab, interval 1, probability 0, space 0, times 0 [ 3297.837522][T26288] CPU: 1 UID: 0 PID: 26288 Comm: syz.0.5926 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3297.837579][T26288] Hardware name: ARM-Versatile Express [ 3297.837593][T26288] Call trace: [ 3297.837615][T26288] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3297.837675][T26288] r7:00404dc0 r6:00000000 r5:60000013 r4:82257c34 [ 3297.837685][T26288] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3297.837714][T26288] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3297.837743][T26288] r5:84ae9800 r4:8291bcc0 [ 3297.837751][T26288] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3297.837781][T26288] [<8095f3d4>] (should_fail_ex) from [<805257a4>] (should_failslab+0x6c/0x94) [ 3297.837819][T26288] r8:00404dc0 r7:00404dc0 r6:00000000 r5:83001f00 r4:000000c0 [ 3297.837828][T26288] [<80525738>] (should_failslab) from [<80508d34>] (__kvmalloc_node_noprof+0xe0/0x59c) [ 3297.837863][T26288] [<80508c54>] (__kvmalloc_node_noprof) from [<81548e6c>] (alloc_netdev_mqs+0x2e8/0x4ec) [ 3297.837904][T26288] r10:00000000 r9:00000140 r8:00000000 r7:eb10dd74 r6:00000778 r5:00000001 [ 3297.837916][T26288] r4:8480b800 [ 3297.837924][T26288] [<81548b84>] (alloc_netdev_mqs) from [<81874b94>] (ipip6_tunnel_locate+0x138/0x260) [ 3297.838075][T26288] r10:84ae9800 r9:84cd2a08 r8:00000001 r7:fc030000 r6:84a31b00 r5:eb10ddf4 [ 3297.838094][T26288] r4:00000000 [ 3297.838127][T26288] [<81874a5c>] (ipip6_tunnel_locate) from [<81874de4>] (ipip6_tunnel_ctl+0x128/0x274) [ 3297.838244][T26288] r9:81e72188 r8:eb10decc r7:b5403587 r6:00000000 r5:eb10ddf4 r4:84d88000 [ 3297.838259][T26288] [<81874cbc>] (ipip6_tunnel_ctl) from [<81809ebc>] (addrconf_set_dstaddr+0x164/0x1b8) [ 3297.838344][T26288] r9:81e72188 r8:eb10decc r7:b5403587 r6:00000000 r5:84a31b00 r4:84d88000 [ 3297.838456][T26288] [<81809d58>] (addrconf_set_dstaddr) from [<817f46c8>] (inet6_ioctl+0xd8/0x198) [ 3297.838519][T26288] r7:85062a00 r6:84a31b00 r5:20000080 r4:00008918 [ 3297.838530][T26288] [<817f45f0>] (inet6_ioctl) from [<8151a91c>] (sock_ioctl+0x4c4/0x600) [ 3297.838577][T26288] r7:85062a00 r6:84a31b00 r5:20000080 r4:00008918 [ 3297.838588][T26288] [<8151a458>] (sock_ioctl) from [<8056b530>] (sys_ioctl+0x138/0xd84) [ 3297.838650][T26288] r9:00000003 r8:85ae1a80 r7:20000080 r6:85ae1a81 r5:00000000 r4:00008918 [ 3297.838661][T26288] [<8056b3f8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3297.838716][T26288] Exception stack(0xeb10dfa8 to 0xeb10dff0) [ 3297.838869][T26288] dfa0: 00000000 00000000 00000003 00008918 20000080 00000000 [ 3297.838892][T26288] dfc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76b970bc [ 3297.838950][T26288] dfe0: 76b96ec0 76b96eb0 0001939c 00131f30 [ 3297.839109][T26288] r10:00000036 r9:84ae9800 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 3297.839121][T26288] r4:00000000 [ 3297.917655][ T31] audit: type=1400 audit(3297.875:478): avc: denied { bind } for pid=26289 comm="syz.0.5927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3302.924812][ T31] audit: type=1400 audit(3302.875:479): avc: denied { setcheckreqprot } for pid=26309 comm="syz.1.5932" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 3302.924975][T26310] SELinux: syz.1.5932 (26310) set checkreqprot to 1. This is no longer supported. [ 3303.301238][T26316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26316 comm=syz.0.5934 [ 3303.302063][T26316] FAULT_INJECTION: forcing a failure. [ 3303.302063][T26316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3303.302238][T26316] CPU: 0 UID: 0 PID: 26316 Comm: syz.0.5934 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3303.302332][T26316] Hardware name: ARM-Versatile Express [ 3303.302420][T26316] Call trace: [ 3303.302587][T26316] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3303.302748][T26316] r7:00000000 r6:00000000 r5:60000013 r4:82257c34 [ 3303.302852][T26316] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3303.302947][T26316] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3303.303011][T26316] r5:84ab9800 r4:82951710 [ 3303.303031][T26316] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3303.303095][T26316] [<8095f3d4>] (should_fail_ex) from [<8095f610>] (should_fail+0x14/0x18) [ 3303.303164][T26316] r8:76b96f30 r7:00000000 r6:00000000 r5:eb1edf68 r4:00000002 [ 3303.303223][T26316] [<8095f5fc>] (should_fail) from [<8095f630>] (should_fail_usercopy+0x1c/0x20) [ 3303.303281][T26316] [<8095f614>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 3303.303340][T26316] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 3303.303413][T26316] r10:00000001 r9:8060401c r8:00000002 r7:eb1edf68 r6:0000000f r5:76b96f30 [ 3303.303439][T26316] r4:84ab9800 r3:eb1ede9f [ 3303.303454][T26316] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 3303.303647][T26316] r8:76b96f30 r7:eb1edf68 r6:84ab9800 r5:0000000f r4:84a02b40 [ 3303.303705][T26316] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 3303.303812][T26316] r10:00000003 r9:84ab9800 r8:8020029c r7:00000000 r6:00000000 r5:84a02b40 [ 3303.303875][T26316] r4:84a02b43 [ 3303.303901][T26316] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 3303.303963][T26316] r7:00000003 r6:00000004 r5:76b96f30 r4:0000000f [ 3303.303979][T26316] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3303.304107][T26316] Exception stack(0xeb1edfa8 to 0xeb1edff0) [ 3303.304157][T26316] dfa0: 0000000f 76b96f30 00000004 76b96f30 0000000f 00000000 [ 3303.304209][T26316] dfc0: 0000000f 76b96f30 00000004 00000003 002d0000 00000000 00006364 76b970bc [ 3303.304240][T26316] dfe0: 00000158 76b96ed0 000d7d68 0012fe04 [ 3303.513502][ T31] audit: type=1326 audit(3303.465:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26318 comm="syz.0.5936" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x131f30 code=0x0 [ 3306.091810][T26333] FAULT_INJECTION: forcing a failure. [ 3306.091810][T26333] name failslab, interval 1, probability 0, space 0, times 0 [ 3306.093520][T26333] CPU: 1 UID: 0 PID: 26333 Comm: syz.1.5939 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3306.093638][T26333] Hardware name: ARM-Versatile Express [ 3306.093664][T26333] Call trace: [ 3306.093704][T26333] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3306.093845][T26333] r7:00000d40 r6:00000000 r5:60000013 r4:82257c34 [ 3306.093873][T26333] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3306.093925][T26333] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3306.094022][T26333] r5:84aee000 r4:8291bcc0 [ 3306.094039][T26333] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3306.094095][T26333] [<8095f3d4>] (should_fail_ex) from [<805257a4>] (should_failslab+0x6c/0x94) [ 3306.094170][T26333] r8:84aee000 r7:00000d40 r6:847d19e8 r5:00000023 r4:83001240 [ 3306.094188][T26333] [<80525738>] (should_failslab) from [<8050a554>] (__kmalloc_noprof+0x9c/0x458) [ 3306.094240][T26333] [<8050a4b8>] (__kmalloc_noprof) from [<807bc004>] (tomoyo_encode2+0x64/0xf0) [ 3306.094307][T26333] r10:00000fff r9:8309e800 r8:00000000 r7:834e12a8 r6:847d19e8 r5:84ff1ffc [ 3306.094327][T26333] r4:84ff1fe4 [ 3306.094343][T26333] [<807bbfa0>] (tomoyo_encode2) from [<807bc0b4>] (tomoyo_encode+0x24/0x30) [ 3306.094406][T26333] r9:8309e800 r8:00000000 r7:834e12a8 r6:847d19e8 r5:00001000 r4:84ff1fe5 [ 3306.094423][T26333] [<807bc090>] (tomoyo_encode) from [<807bc140>] (tomoyo_realpath_from_path+0x80/0x17c) [ 3306.094478][T26333] r5:00001000 r4:84ff1000 [ 3306.094494][T26333] [<807bc0c0>] (tomoyo_realpath_from_path) from [<807b8240>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3306.094560][T26333] r10:84aee000 r9:00000000 r8:847d19c0 r7:0000545c r6:00000004 r5:81cd56c4 [ 3306.094583][T26333] r4:847d19e8 r3:826c0240 [ 3306.094598][T26333] [<807b8174>] (tomoyo_path_number_perm) from [<807bcb20>] (tomoyo_file_ioctl+0x1c/0x20) [ 3306.094664][T26333] r9:00000003 r8:847d19c0 r7:00000000 r6:00000000 r5:0000545c r4:847d19c0 [ 3306.094681][T26333] [<807bcb04>] (tomoyo_file_ioctl) from [<8076a55c>] (security_file_ioctl+0x64/0x1e4) [ 3306.094736][T26333] [<8076a4f8>] (security_file_ioctl) from [<8056b444>] (sys_ioctl+0x4c/0xd84) [ 3306.094795][T26333] r7:00000000 r6:847d19c1 r5:00000000 r4:0000545c [ 3306.094813][T26333] [<8056b3f8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3306.094869][T26333] Exception stack(0xeb7a5fa8 to 0xeb7a5ff0) [ 3306.094907][T26333] 5fa0: 00000000 00000000 00000003 0000545c 00000000 00000000 [ 3306.094943][T26333] 5fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76bb60bc [ 3306.094970][T26333] 5fe0: 76bb5ec0 76bb5eb0 0001939c 00131f30 [ 3306.095005][T26333] r10:00000036 r9:84aee000 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 3306.095024][T26333] r4:00000000 [ 3306.125138][T26333] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3306.956937][T26342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26342 comm=syz.0.5942 [ 3311.772430][T26425] FAULT_INJECTION: forcing a failure. [ 3311.772430][T26425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3311.772869][T26425] CPU: 0 UID: 0 PID: 26425 Comm: syz.1.5952 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3311.773001][T26425] Hardware name: ARM-Versatile Express [ 3311.773029][T26425] Call trace: [ 3311.773067][T26425] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3311.773163][T26425] r7:20001340 r6:00000000 r5:60000013 r4:82257c34 [ 3311.773181][T26425] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3311.773231][T26425] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3311.773281][T26425] r5:84aed400 r4:82951710 [ 3311.773296][T26425] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3311.773349][T26425] [<8095f3d4>] (should_fail_ex) from [<8095f610>] (should_fail+0x14/0x18) [ 3311.773406][T26425] r8:00000000 r7:20001340 r6:84c5f680 r5:00000000 r4:eb8d9f20 [ 3311.773421][T26425] [<8095f5fc>] (should_fail) from [<8095f630>] (should_fail_usercopy+0x1c/0x20) [ 3311.773466][T26425] [<8095f614>] (should_fail_usercopy) from [<808aeb1c>] (_copy_from_iter+0x6c/0x7c8) [ 3311.773535][T26425] [<808aeab0>] (_copy_from_iter) from [<81644f58>] (netlink_sendmsg+0x18c/0x444) [ 3311.773608][T26425] r10:00000000 r9:00000000 r8:eb8d9f30 r7:8457b400 r6:00000014 r5:848d4c00 [ 3311.773628][T26425] r4:eb8d9f20 [ 3311.773642][T26425] [<81644dcc>] (netlink_sendmsg) from [<81519a34>] (__sock_sendmsg+0x44/0x78) [ 3311.773746][T26425] r10:00000000 r9:eb8d9dc4 r8:eb8d9dc4 r7:00000000 r6:85006280 r5:eb8d9f20 [ 3311.773769][T26425] r4:00000000 [ 3311.773801][T26425] [<815199f0>] (__sock_sendmsg) from [<8151a2a4>] (____sys_sendmsg+0x298/0x2cc) [ 3311.773857][T26425] r7:00000000 r6:85006280 r5:00004000 r4:eb8d9f20 [ 3311.773873][T26425] [<8151a00c>] (____sys_sendmsg) from [<8151c044>] (___sys_sendmsg+0x9c/0xd0) [ 3311.773956][T26425] r10:eb8d9e24 r9:20001400 r8:00004000 r7:00000000 r6:85006280 r5:eb8d9f20 [ 3311.773977][T26425] r4:00000000 [ 3311.774047][T26425] [<8151bfa8>] (___sys_sendmsg) from [<8151c4d4>] (__sys_sendmsg+0x8c/0xd8) [ 3311.774165][T26425] r10:00000128 r9:84aed400 r8:84a02f00 r7:00004000 r6:20001400 r5:84a02f01 [ 3311.774186][T26425] r4:00000003 [ 3311.774228][T26425] [<8151c448>] (__sys_sendmsg) from [<8151c534>] (sys_sendmsg+0x14/0x18) [ 3311.774291][T26425] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 3311.774309][T26425] [<8151c520>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3311.774354][T26425] Exception stack(0xeb8d9fa8 to 0xeb8d9ff0) [ 3311.774391][T26425] 9fa0: 00000000 00000000 00000003 20001400 00004000 00000000 [ 3311.774425][T26425] 9fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76bb60bc [ 3311.774452][T26425] 9fe0: 76bb5ec0 76bb5eb0 0001939c 00131f30 [ 3313.189884][T26450] fuse: Bad value for 'user_id' [ 3313.190177][T26450] fuse: Bad value for 'user_id' [ 3315.607652][T26466] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5129 sclass=netlink_audit_socket pid=26466 comm=syz.1.5967 [ 3316.167759][T26482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26482 comm=syz.0.5971 [ 3316.260317][ T31] audit: type=1400 audit(3316.215:481): avc: denied { bind } for pid=26483 comm="syz.1.5970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 3319.658568][T26514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=26514 comm=syz.0.5982 [ 3319.676131][T26514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26514 comm=syz.0.5982 [ 3320.270590][T26530] FAULT_INJECTION: forcing a failure. [ 3320.270590][T26530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3320.271439][T26530] CPU: 1 UID: 0 PID: 26530 Comm: syz.1.5986 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3320.271505][T26530] Hardware name: ARM-Versatile Express [ 3320.271521][T26530] Call trace: [ 3320.271543][T26530] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3320.271604][T26530] r7:00000000 r6:00000000 r5:60000013 r4:82257c34 [ 3320.271613][T26530] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3320.271641][T26530] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3320.271669][T26530] r5:83ae8000 r4:82951710 [ 3320.271677][T26530] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3320.271707][T26530] [<8095f3d4>] (should_fail_ex) from [<8095f610>] (should_fail+0x14/0x18) [ 3320.271741][T26530] r8:76bb5f30 r7:00000000 r6:00000000 r5:ebb71f68 r4:00000002 [ 3320.271749][T26530] [<8095f5fc>] (should_fail) from [<8095f630>] (should_fail_usercopy+0x1c/0x20) [ 3320.271774][T26530] [<8095f614>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 3320.271804][T26530] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 3320.271840][T26530] r10:00000001 r9:8060401c r8:00000002 r7:ebb71f68 r6:0000000f r5:76bb5f30 [ 3320.271860][T26530] r4:83ae8000 r3:ebb71e9f [ 3320.271869][T26530] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 3320.271904][T26530] r8:76bb5f30 r7:ebb71f68 r6:83ae8000 r5:0000000f r4:8488e900 [ 3320.271913][T26530] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 3320.271945][T26530] r10:00000003 r9:83ae8000 r8:8020029c r7:00000000 r6:00000000 r5:8488e900 [ 3320.271955][T26530] r4:8488e903 [ 3320.271963][T26530] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 3320.271992][T26530] r7:00000003 r6:00000005 r5:76bb5f30 r4:0000000f [ 3320.271999][T26530] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3320.272024][T26530] Exception stack(0xebb71fa8 to 0xebb71ff0) [ 3320.272044][T26530] 1fa0: 0000000f 76bb5f30 00000005 76bb5f30 0000000f 00000000 [ 3320.272061][T26530] 1fc0: 0000000f 76bb5f30 00000005 00000003 002d0000 00000000 00006364 76bb60bc [ 3320.272075][T26530] 1fe0: 00000158 76bb5ed0 000d7d68 0012fe04 [ 3322.450242][T26566] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=26566 comm=syz.1.5995 [ 3322.904001][T26574] 8021q: VLANs not supported on wg2 [ 3322.928266][ T31] audit: type=1400 audit(3322.885:482): avc: denied { setattr } for pid=26573 comm="syz.0.5998" name="AF_VSOCK" dev="sockfs" ino=67142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3323.014601][T26578] FAULT_INJECTION: forcing a failure. [ 3323.014601][T26578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3323.014879][T26578] CPU: 1 UID: 0 PID: 26578 Comm: syz.0.5999 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3323.014925][T26578] Hardware name: ARM-Versatile Express [ 3323.014949][T26578] Call trace: [ 3323.014971][T26578] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3323.015030][T26578] r7:00000000 r6:00000000 r5:60000013 r4:82257c34 [ 3323.015040][T26578] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3323.015069][T26578] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3323.015097][T26578] r5:83adc800 r4:82951710 [ 3323.015104][T26578] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3323.015136][T26578] [<8095f3d4>] (should_fail_ex) from [<8095f610>] (should_fail+0x14/0x18) [ 3323.015213][T26578] r8:76b96f30 r7:00000000 r6:00000000 r5:ec6f9f68 r4:00000002 [ 3323.015290][T26578] [<8095f5fc>] (should_fail) from [<8095f630>] (should_fail_usercopy+0x1c/0x20) [ 3323.015321][T26578] [<8095f614>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 3323.015387][T26578] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 3323.015481][T26578] r10:00000001 r9:8060401c r8:00000002 r7:ec6f9f68 r6:0000000f r5:76b96f30 [ 3323.015547][T26578] r4:83adc800 r3:ec6f9e9f [ 3323.015675][T26578] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 3323.015748][T26578] r8:76b96f30 r7:ec6f9f68 r6:83adc800 r5:0000000f r4:8488e540 [ 3323.015786][T26578] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 3323.015870][T26578] r10:00000003 r9:83adc800 r8:8020029c r7:00000000 r6:00000000 r5:8488e540 [ 3323.015897][T26578] r4:8488e543 [ 3323.015968][T26578] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 3323.016041][T26578] r7:00000003 r6:00000004 r5:76b96f30 r4:0000000f [ 3323.016082][T26578] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3323.016111][T26578] Exception stack(0xec6f9fa8 to 0xec6f9ff0) [ 3323.016135][T26578] 9fa0: 0000000f 76b96f30 00000004 76b96f30 0000000f 00000000 [ 3323.016198][T26578] 9fc0: 0000000f 76b96f30 00000004 00000003 002d0000 00000000 00006364 76b970bc [ 3323.016319][T26578] 9fe0: 00000158 76b96ed0 000d7d68 0012fe04 [ 3327.039202][T26591] FAULT_INJECTION: forcing a failure. [ 3327.039202][T26591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3327.040325][T26591] CPU: 0 UID: 0 PID: 26591 Comm: syz.1.6003 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3327.040381][T26591] Hardware name: ARM-Versatile Express [ 3327.040397][T26591] Call trace: [ 3327.040419][T26591] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3327.040478][T26591] r7:00000000 r6:00000000 r5:60000013 r4:82257c34 [ 3327.040488][T26591] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3327.040516][T26591] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3327.040546][T26591] r5:84488c00 r4:82951710 [ 3327.040553][T26591] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3327.040585][T26591] [<8095f3d4>] (should_fail_ex) from [<8095f610>] (should_fail+0x14/0x18) [ 3327.040618][T26591] r8:76bb5f30 r7:00000000 r6:00000000 r5:ec835f68 r4:00000002 [ 3327.040627][T26591] [<8095f5fc>] (should_fail) from [<8095f630>] (should_fail_usercopy+0x1c/0x20) [ 3327.040653][T26591] [<8095f614>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 3327.040683][T26591] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 3327.040722][T26591] r10:00000001 r9:8060401c r8:00000002 r7:ec835f68 r6:0000000f r5:76bb5f30 [ 3327.040734][T26591] r4:84488c00 r3:ec835e9f [ 3327.040742][T26591] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 3327.040778][T26591] r8:76bb5f30 r7:ec835f68 r6:84488c00 r5:0000000f r4:84a029c0 [ 3327.040787][T26591] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 3327.040822][T26591] r10:00000003 r9:84488c00 r8:8020029c r7:00000000 r6:00000000 r5:84a029c0 [ 3327.040832][T26591] r4:84a029c3 [ 3327.040840][T26591] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 3327.040880][T26591] r7:00000003 r6:00000004 r5:76bb5f30 r4:0000000f [ 3327.040888][T26591] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3327.040913][T26591] Exception stack(0xec835fa8 to 0xec835ff0) [ 3327.040934][T26591] 5fa0: 0000000f 76bb5f30 00000004 76bb5f30 0000000f 00000000 [ 3327.040952][T26591] 5fc0: 0000000f 76bb5f30 00000004 00000003 002d0000 00000000 00006364 76bb60bc [ 3327.040966][T26591] 5fe0: 00000158 76bb5ed0 000d7d68 0012fe04 [ 3335.459582][T26692] FAULT_INJECTION: forcing a failure. [ 3335.459582][T26692] name failslab, interval 1, probability 0, space 0, times 0 [ 3335.460101][T26692] CPU: 1 UID: 0 PID: 26692 Comm: syz.1.6027 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3335.460167][T26692] Hardware name: ARM-Versatile Express [ 3335.460205][T26692] Call trace: [ 3335.460250][T26692] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3335.460364][T26692] r7:00000c40 r6:00000000 r5:60000013 r4:82257c34 [ 3335.460387][T26692] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3335.460446][T26692] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3335.460511][T26692] r5:84abd400 r4:8291bcc0 [ 3335.460530][T26692] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3335.460625][T26692] [<8095f3d4>] (should_fail_ex) from [<805257a4>] (should_failslab+0x6c/0x94) [ 3335.460725][T26692] r8:84abd400 r7:00000c40 r6:8574d7a8 r5:00001000 r4:830016c0 [ 3335.460749][T26692] [<80525738>] (should_failslab) from [<8050a554>] (__kmalloc_noprof+0x9c/0x458) [ 3335.460812][T26692] [<8050a4b8>] (__kmalloc_noprof) from [<807bc0fc>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 3335.460912][T26692] r10:84abd400 r9:8309fc00 r8:00000000 r7:83797bb0 r6:8574d7a8 r5:00001000 [ 3335.460963][T26692] r4:00000000 [ 3335.461008][T26692] [<807bc0c0>] (tomoyo_realpath_from_path) from [<807b8240>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3335.461108][T26692] r10:84abd400 r9:00000000 r8:8574d780 r7:00005411 r6:00000004 r5:81cd56c4 [ 3335.461152][T26692] r4:8574d7a8 r3:826c0240 [ 3335.461183][T26692] [<807b8174>] (tomoyo_path_number_perm) from [<807bcb20>] (tomoyo_file_ioctl+0x1c/0x20) [ 3335.461286][T26692] r9:00000000 r8:8574d780 r7:200002c0 r6:200002c0 r5:00005411 r4:8574d780 [ 3335.461311][T26692] [<807bcb04>] (tomoyo_file_ioctl) from [<8076a55c>] (security_file_ioctl+0x64/0x1e4) [ 3335.461375][T26692] [<8076a4f8>] (security_file_ioctl) from [<8056b444>] (sys_ioctl+0x4c/0xd84) [ 3335.461439][T26692] r7:200002c0 r6:8574d781 r5:00000000 r4:00005411 [ 3335.461499][T26692] [<8056b3f8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3335.461561][T26692] Exception stack(0xecf0dfa8 to 0xecf0dff0) [ 3335.461606][T26692] dfa0: 00000000 00000000 00000000 00005411 200002c0 00000000 [ 3335.461663][T26692] dfc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76bb60bc [ 3335.461705][T26692] dfe0: 76bb5ec0 76bb5eb0 0001939c 00131f30 [ 3335.461740][T26692] r10:00000036 r9:84abd400 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 3335.461778][T26692] r4:00000000 [ 3335.461809][T26692] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3335.651565][T26696] FAULT_INJECTION: forcing a failure. [ 3335.651565][T26696] name failslab, interval 1, probability 0, space 0, times 0 [ 3335.652069][T26696] CPU: 1 UID: 0 PID: 26696 Comm: syz.1.6028 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3335.652132][T26696] Hardware name: ARM-Versatile Express [ 3335.652158][T26696] Call trace: [ 3335.652212][T26696] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3335.652326][T26696] r7:84abb000 r6:00000000 r5:60000013 r4:82257c34 [ 3335.652351][T26696] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3335.652407][T26696] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3335.652468][T26696] r5:84abb000 r4:8291bcc0 [ 3335.652486][T26696] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3335.652570][T26696] [<8095f3d4>] (should_fail_ex) from [<805257a4>] (should_failslab+0x6c/0x94) [ 3335.652669][T26696] r8:00000000 r7:84abb000 r6:00000820 r5:84a07780 r4:830ad9c0 [ 3335.652694][T26696] [<80525738>] (should_failslab) from [<8050a1d0>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 3335.652776][T26696] [<8050a184>] (kmem_cache_alloc_noprof) from [<8152d3c4>] (skb_clone+0x60/0x1c8) [ 3335.652852][T26696] r10:000001a2 r9:855abb40 r8:85658c00 r7:84a07780 r6:84a506c0 r5:84a07780 [ 3335.652874][T26696] r4:00000820 [ 3335.652920][T26696] [<8152d364>] (skb_clone) from [<81641bb8>] (__netlink_deliver_tap+0x1f4/0x28c) [ 3335.653005][T26696] r5:00000018 r4:84a50000 [ 3335.653028][T26696] [<816419c4>] (__netlink_deliver_tap) from [<81644db0>] (netlink_unicast+0x280/0x29c) [ 3335.653122][T26696] r10:00000000 r9:00000000 r8:84a32880 r7:84a07780 r6:855abb40 r5:00000018 [ 3335.653148][T26696] r4:85658c00 [ 3335.653167][T26696] [<81644b30>] (netlink_unicast) from [<81644f98>] (netlink_sendmsg+0x1cc/0x444) [ 3335.653254][T26696] r9:00000000 r8:00000000 r7:8548a800 r6:00000018 r5:84a07780 r4:ec9a5e68 [ 3335.653277][T26696] [<81644dcc>] (netlink_sendmsg) from [<81519a34>] (__sock_sendmsg+0x44/0x78) [ 3335.653346][T26696] r10:81e4e040 r9:20000000 r8:00000000 r7:850dac80 r6:850dac80 r5:ec9a5e68 [ 3335.653367][T26696] r4:00000000 [ 3335.653416][T26696] [<815199f0>] (__sock_sendmsg) from [<81519b08>] (sock_write_iter+0xa0/0xfc) [ 3335.653484][T26696] r7:850dac80 r6:8574da80 r5:ec9a5f08 r4:ec9a5ef0 [ 3335.653514][T26696] [<81519a68>] (sock_write_iter) from [<80552440>] (vfs_write+0x3a4/0x448) [ 3335.653585][T26696] r7:84abb000 r6:00000018 r5:8574da80 r4:00000000 [ 3335.653610][T26696] [<8055209c>] (vfs_write) from [<805526ac>] (ksys_write+0xd0/0xe4) [ 3335.653703][T26696] r10:00000004 r9:84abb000 r8:8020029c r7:00000018 r6:20000000 r5:8574da80 [ 3335.653756][T26696] r4:8574da81 [ 3335.653777][T26696] [<805525dc>] (ksys_write) from [<805526d0>] (sys_write+0x10/0x14) [ 3335.653844][T26696] r7:00000004 r6:0012fee0 r5:00000000 r4:00000000 [ 3335.653965][T26696] [<805526c0>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3335.654156][T26696] Exception stack(0xec9a5fa8 to 0xec9a5ff0) [ 3335.654214][T26696] 5fa0: 00000000 00000000 00000003 20000000 00000018 00000000 [ 3335.654264][T26696] 5fc0: 00000000 00000000 0012fee0 00000004 002d0000 00000000 00006364 76bb60bc [ 3335.654318][T26696] 5fe0: 76bb5ec0 76bb5eb0 0001939c 00131f30 [ 3344.765883][ T31] audit: type=1400 audit(3344.725:483): avc: denied { map } for pid=26752 comm="syz.1.6051" path="/422/file0" dev="tmpfs" ino=2238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 3344.767654][ T31] audit: type=1400 audit(3344.725:484): avc: denied { execute } for pid=26752 comm="syz.1.6051" path="/422/file0" dev="tmpfs" ino=2238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 3347.427744][T26812] syz.1.6077 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 3348.258327][ T31] audit: type=1400 audit(3348.215:485): avc: denied { read write } for pid=26818 comm="syz.1.6080" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 3348.263473][ T31] audit: type=1400 audit(3348.215:486): avc: denied { open } for pid=26818 comm="syz.1.6080" path="/443/file0/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 3348.267907][ T31] audit: type=1400 audit(3348.215:487): avc: denied { ioctl } for pid=26818 comm="syz.1.6080" path="/443/file0/file0" dev="fuse" ino=5 ioctlcmd=0x545c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 3349.225154][T22523] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x11 [ 3349.297464][T26841] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6084'. [ 3349.299201][T26841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6084'. [ 3352.796081][T14251] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 3352.977806][T14251] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3352.978284][T14251] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3352.978573][T14251] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3352.978847][T14251] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3352.979075][T14251] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3352.987261][T14251] usb 2-1: config 0 descriptor?? [ 3353.447829][T14251] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 3353.450631][T14251] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 3353.456109][T14251] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 3353.456530][T14251] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 3353.456877][T14251] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 3353.457218][T14251] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 3353.457565][T14251] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 3353.457906][T14251] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 3353.458301][T14251] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 3353.458626][T14251] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 3353.458949][T14251] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 3353.459284][T14251] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 3353.465617][T14251] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 3353.476235][T14251] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 3353.476668][T14251] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 3353.478566][T14251] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 3353.516306][T14251] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 3353.700059][T14288] usb 2-1: USB disconnect, device number 19 [ 3355.223163][ T31] audit: type=1400 audit(3355.175:488): avc: denied { mount } for pid=26884 comm="syz.1.6090" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 3355.307875][ T31] audit: type=1400 audit(3355.255:489): avc: denied { remount } for pid=26884 comm="syz.1.6090" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 3355.487068][ T31] audit: type=1400 audit(3355.435:490): avc: denied { unmount } for pid=22488 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 3356.026739][T26887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6091'. [ 3356.595713][ T31] audit: type=1400 audit(3356.545:491): avc: denied { mounton } for pid=26888 comm="syz.1.6092" path="/proc/1184/task" dev="proc" ino=67573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 3356.854015][T26897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6093'. [ 3356.926739][T14288] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 3357.125585][T14288] usb 2-1: Using ep0 maxpacket: 16 [ 3357.129512][T14288] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3357.129712][T14288] usb 2-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 3357.129834][T14288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3357.131489][T14288] usb 2-1: config 0 descriptor?? [ 3357.406202][T14288] usbhid 2-1:0.0: can't add hid device: -71 [ 3357.406741][T14288] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3357.429849][T14288] usb 2-1: USB disconnect, device number 20 [ 3358.116155][T14251] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 3358.276272][T14251] usb 2-1: Using ep0 maxpacket: 16 [ 3358.287297][T14251] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 3358.288139][T14251] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 3358.300993][T14251] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 3358.301848][T14251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3358.302569][T14251] usb 2-1: Product: syz [ 3358.303072][T14251] usb 2-1: Manufacturer: syz [ 3358.303522][T14251] usb 2-1: SerialNumber: syz [ 3358.313273][T14251] usb 2-1: config 0 descriptor?? [ 3358.617426][T14251] appledisplay 2-1:0.0: Error while getting initial brightness: -110 [ 3358.620180][ C0] usb 2-1: appledisplay_complete - usb_submit_urb failed with result -1 [ 3358.622782][T14251] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110 [ 3358.639954][T14251] usb 2-1: USB disconnect, device number 21 [ 3361.285733][T14252] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 3361.446440][T14252] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3361.447773][T14252] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3361.448967][T14252] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3361.450308][T14252] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3361.451509][T14252] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3361.464303][T14252] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3361.466657][T14252] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3361.467986][T14252] usb 1-1: Product: syz [ 3361.468771][T14252] usb 1-1: Manufacturer: syz [ 3361.487860][T14252] cdc_wdm 1-1:1.0: skipping garbage [ 3361.489692][T14252] cdc_wdm 1-1:1.0: skipping garbage [ 3361.494225][T14252] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 3363.165800][T14252] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 3363.323011][T14252] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3363.335931][T14252] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3363.336665][T14252] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 3363.337064][T14252] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3363.337309][T14252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3363.359540][T14252] hub 2-1:1.0: bad descriptor, ignoring hub [ 3363.360618][T14252] hub 2-1:1.0: probe with driver hub failed with error -5 [ 3363.362674][T14252] cdc_wdm 2-1:1.0: skipping garbage [ 3363.363654][T14252] cdc_wdm 2-1:1.0: skipping garbage [ 3363.364883][T14252] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3363.676426][T22919] usb 2-1: USB disconnect, device number 22 [ 3375.427229][T14251] usb 1-1: USB disconnect, device number 23 [ 3375.761541][T27028] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6120'. [ 3375.762654][T27028] IPv6: NLM_F_CREATE should be specified when creating new route [ 3375.763594][T27028] IPv6: Can't replace route, no match found [ 3377.159625][T27041] syzkaller1: entered promiscuous mode [ 3377.160347][T27041] syzkaller1: entered allmulticast mode [ 3377.938179][ T31] audit: type=1400 audit(3377.895:492): avc: denied { map } for pid=27049 comm="syz.0.6127" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 3377.975553][ T31] audit: type=1400 audit(3377.915:493): avc: denied { call } for pid=27049 comm="syz.0.6127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 3380.753594][T27054] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3380.756953][T27054] bond0: (slave bond1): Enslaving as an active interface with an up link [ 3384.943955][T22919] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 3385.164365][T22919] usb 2-1: Using ep0 maxpacket: 32 [ 3385.196838][T22919] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 3385.198128][T22919] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 3385.198233][T22919] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 3385.198327][T22919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3385.198397][T22919] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3385.198467][T22919] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 3385.198606][T22919] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 3385.198680][T22919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3385.202498][T22919] usb 2-1: config 0 descriptor?? [ 3385.541233][T22919] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 3385.777972][T14251] usb 2-1: USB disconnect, device number 23 [ 3385.782433][T14251] usblp0: removed [ 3387.668208][T27165] lo: entered allmulticast mode [ 3390.210051][T27186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6156'. [ 3391.125774][T14252] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 3391.301616][T14252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3391.306377][T14252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3391.308251][T14252] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3391.309631][T14252] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3391.312863][T14252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3391.318976][T14252] usb 2-1: config 0 descriptor?? [ 3391.849969][T14252] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3391.856138][T14252] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3391.857312][T14252] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3391.861035][T14252] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3391.862203][T14252] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3391.862840][T14252] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3391.863872][T14252] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3391.864459][T14252] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3391.865008][T14252] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3391.866540][T14252] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3391.869873][T14252] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3391.885999][T14252] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3391.886369][T14252] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3391.886584][T14252] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3391.886783][T14252] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 3391.887230][T14252] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 3391.889547][T27227] binder: BINDER_SET_CONTEXT_MGR already set [ 3391.889803][T27227] binder: 27226:27227 ioctl 4018620d 20000040 returned -16 [ 3391.891112][T14252] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 3392.063367][T14288] usb 2-1: USB disconnect, device number 24 [ 3392.378368][T27250] netlink: 'syz.1.6171': attribute type 4 has an invalid length. [ 3392.417226][T27250] netlink: 'syz.1.6171': attribute type 4 has an invalid length. [ 3392.796417][T27252] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6172'. [ 3395.118549][T27279] netlink: 'syz.0.6180': attribute type 1 has an invalid length. [ 3395.199264][T27279] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 3395.213264][T27279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3395.221676][T22189] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 3395.312495][T27279] veth3: entered promiscuous mode [ 3395.329231][T27279] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 3395.337255][T15728] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 3400.956240][T27382] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 3401.139194][T27382] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 3401.144343][T27382] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3401.144734][T27382] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3401.144872][T27382] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3401.153258][T27382] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3401.153619][T27382] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3401.153756][T27382] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3401.161538][T27382] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3401.162005][T27382] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3401.162440][T27382] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3401.179087][T27382] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3401.179513][T27382] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3401.179613][T27382] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3401.195722][T27382] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3401.195988][T27382] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3401.196215][T27382] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3401.205610][T27382] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3401.205835][T27382] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3401.206033][T27382] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3401.216204][T27382] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3401.216439][T27382] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3401.216606][T27382] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3401.221421][T27382] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3401.221607][T27382] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3401.221795][T27382] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3401.247684][T27382] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 3401.247902][T27382] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 3401.248077][T27382] usb 1-1: Product: syz [ 3401.248114][T27382] usb 1-1: Manufacturer: syz [ 3401.248143][T27382] usb 1-1: SerialNumber: syz [ 3401.250603][T27382] usb 1-1: config 0 descriptor?? [ 3401.295564][T27382] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 3401.514600][T27382] usb 1-1: USB disconnect, device number 24 [ 3401.517391][T27382] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 3403.490360][T14252] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 3403.685002][T14252] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 3403.685823][T14252] usb 1-1: config 0 has no interface number 0 [ 3403.686355][T14252] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3403.687849][T14252] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 3403.688468][T14252] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3403.689593][T14252] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 3403.690788][T14252] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 3403.691479][T14252] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3403.692943][T14252] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3403.693634][T14252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3403.706411][T14252] usb 1-1: config 0 descriptor?? [ 3403.709155][T27424] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3403.712886][T27424] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3403.729264][T14252] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3404.183730][T24880] usb 1-1: USB disconnect, device number 25 [ 3404.197144][T24880] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 3404.203563][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.206136][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.206719][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.207265][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.213576][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.214362][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.215080][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.216340][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.216864][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.217392][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.217915][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.218514][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.219262][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.219818][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.220532][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.221066][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.221574][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.222433][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.222979][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.223493][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.224014][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.232854][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.233497][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.233748][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.233975][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.234242][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.234440][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.234643][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.234897][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.238191][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.238775][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.239326][T18272] hid-generic 0001:0000:000F.0004: unknown main item tag 0x0 [ 3404.253348][T18272] hid-generic 0001:0000:000F.0004: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 3404.486474][T14252] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 3404.769365][T14252] usb 2-1: config 0 has no interfaces? [ 3404.769717][T14252] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 3404.769980][T14252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3404.775013][T14252] usb 2-1: config 0 descriptor?? [ 3404.996158][T14252] usb 2-1: USB disconnect, device number 25 [ 3406.096280][T14252] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 3406.250691][T14252] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3406.251810][T14252] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3406.255756][T27387] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 3406.258870][T14252] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3406.263197][T14252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3406.489771][T27387] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3406.490445][T27387] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3406.490809][T27387] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 3406.491069][T27387] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 3406.565883][T14252] usb 1-1: usb_control_msg returned -32 [ 3406.567088][T14252] usbtmc 1-1:16.0: can't read capabilities [ 3406.605666][T27387] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 3406.606107][T27387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3406.606438][T27387] usb 2-1: Product: syz [ 3406.606659][T27387] usb 2-1: Manufacturer: syz [ 3406.606873][T27387] usb 2-1: SerialNumber: syz [ 3406.610014][T27387] usb 2-1: config 0 descriptor?? [ 3407.037889][T27387] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 3407.364704][T24880] usb 2-1: USB disconnect, device number 26 [ 3420.100617][T22919] usb 1-1: USB disconnect, device number 26 [ 3420.565712][T22919] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 3420.722390][T22919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3420.722765][T22919] usb 1-1: config 0 has no interfaces? [ 3420.722904][T22919] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3420.722981][T22919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3420.728920][T22919] usb 1-1: config 0 descriptor?? [ 3420.941249][T14251] usb 1-1: USB disconnect, device number 27 [ 3422.036286][T27564] bond0: entered allmulticast mode [ 3422.037059][T27564] bond_slave_0: entered allmulticast mode [ 3422.038429][T27564] bond_slave_1: entered allmulticast mode [ 3429.141789][T27638] FAULT_INJECTION: forcing a failure. [ 3429.141789][T27638] name failslab, interval 1, probability 0, space 0, times 0 [ 3429.143240][T27638] CPU: 0 UID: 0 PID: 27638 Comm: syz.1.6244 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3429.143344][T27638] Hardware name: ARM-Versatile Express [ 3429.143365][T27638] Call trace: [ 3429.143403][T27638] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3429.143505][T27638] r7:00000c40 r6:00000000 r5:60000013 r4:82257c34 [ 3429.143522][T27638] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3429.143568][T27638] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3429.143617][T27638] r5:84150000 r4:8291bcc0 [ 3429.143631][T27638] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3429.143680][T27638] [<8095f3d4>] (should_fail_ex) from [<805257a4>] (should_failslab+0x6c/0x94) [ 3429.143751][T27638] r8:84150000 r7:00000c40 r6:84ce0b68 r5:00001000 r4:830016c0 [ 3429.143767][T27638] [<80525738>] (should_failslab) from [<8050a554>] (__kmalloc_noprof+0x9c/0x458) [ 3429.143813][T27638] [<8050a4b8>] (__kmalloc_noprof) from [<807bc0fc>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 3429.143876][T27638] r10:84150000 r9:8309fc00 r8:00000000 r7:83789a18 r6:84ce0b68 r5:00001000 [ 3429.143894][T27638] r4:00000000 [ 3429.143907][T27638] [<807bc0c0>] (tomoyo_realpath_from_path) from [<807b8240>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3429.143976][T27638] r10:84150000 r9:00000000 r8:84ce0b40 r7:00008918 r6:00000004 r5:81cd56c4 [ 3429.143998][T27638] r4:84ce0b68 r3:826c0240 [ 3429.144011][T27638] [<807b8174>] (tomoyo_path_number_perm) from [<807bcb20>] (tomoyo_file_ioctl+0x1c/0x20) [ 3429.144071][T27638] r9:00000004 r8:84ce0b40 r7:20000040 r6:20000040 r5:00008918 r4:84ce0b40 [ 3429.144086][T27638] [<807bcb04>] (tomoyo_file_ioctl) from [<8076a55c>] (security_file_ioctl+0x64/0x1e4) [ 3429.144135][T27638] [<8076a4f8>] (security_file_ioctl) from [<8056b444>] (sys_ioctl+0x4c/0xd84) [ 3429.144189][T27638] r7:20000040 r6:84ce0b41 r5:00000000 r4:00008918 [ 3429.144204][T27638] [<8056b3f8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3429.144245][T27638] Exception stack(0xdfa49fa8 to 0xdfa49ff0) [ 3429.144283][T27638] 9fa0: 00000000 00000000 00000004 00008918 20000040 00000000 [ 3429.144313][T27638] 9fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76b320bc [ 3429.144338][T27638] 9fe0: 76b31ec0 76b31eb0 0001939c 00131f30 [ 3429.144369][T27638] r10:00000036 r9:84150000 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 3429.144388][T27638] r4:00000000 [ 3429.206034][T27638] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3430.413198][T27666] fuse: Bad value for 'fd' [ 3430.967595][T27675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27675 comm=syz.1.6272 [ 3431.851619][T27708] fuse: Unknown parameter 'fuse' [ 3432.110538][T27715] FAULT_INJECTION: forcing a failure. [ 3432.110538][T27715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3432.112504][T27715] CPU: 0 UID: 0 PID: 27715 Comm: syz.0.6290 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3432.112613][T27715] Hardware name: ARM-Versatile Express [ 3432.112636][T27715] Call trace: [ 3432.112673][T27715] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3432.112769][T27715] r7:00000000 r6:00000000 r5:60000013 r4:82257c34 [ 3432.112788][T27715] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3432.112836][T27715] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3432.112895][T27715] r5:84ae9800 r4:82951710 [ 3432.112910][T27715] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3432.112963][T27715] [<8095f3d4>] (should_fail_ex) from [<8095f610>] (should_fail+0x14/0x18) [ 3432.113021][T27715] r8:76b96f30 r7:00000000 r6:00000000 r5:dffbdf68 r4:00000002 [ 3432.113036][T27715] [<8095f5fc>] (should_fail) from [<8095f630>] (should_fail_usercopy+0x1c/0x20) [ 3432.113081][T27715] [<8095f614>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 3432.113134][T27715] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 3432.113201][T27715] r10:00000001 r9:8060401c r8:00000002 r7:dffbdf68 r6:0000000f r5:76b96f30 [ 3432.113223][T27715] r4:84ae9800 r3:dffbde9f [ 3432.113237][T27715] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 3432.113299][T27715] r8:76b96f30 r7:dffbdf68 r6:84ae9800 r5:0000000f r4:84ce06c0 [ 3432.113316][T27715] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 3432.113374][T27715] r10:00000003 r9:84ae9800 r8:8020029c r7:00000000 r6:00000000 r5:84ce06c0 [ 3432.113392][T27715] r4:84ce06c3 [ 3432.113406][T27715] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 3432.113459][T27715] r7:00000003 r6:00000004 r5:76b96f30 r4:0000000f [ 3432.113473][T27715] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3432.113516][T27715] Exception stack(0xdffbdfa8 to 0xdffbdff0) [ 3432.113552][T27715] dfa0: 0000000f 76b96f30 00000004 76b96f30 0000000f 00000000 [ 3432.113584][T27715] dfc0: 0000000f 76b96f30 00000004 00000003 002d0000 00000000 00006364 76b970bc [ 3432.113610][T27715] dfe0: 00000158 76b96ed0 000d7d68 0012fe04 [ 3432.285008][T27720] block nbd0: NBD_DISCONNECT [ 3436.971768][ T31] audit: type=1400 audit(3436.925:494): avc: denied { getattr } for pid=27759 comm="syz.0.6311" name="[io_uring]" dev="anon_inodefs" ino=69513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3438.410716][T27784] FAULT_INJECTION: forcing a failure. [ 3438.410716][T27784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3438.411133][T27784] CPU: 1 UID: 0 PID: 27784 Comm: syz.0.6321 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3438.411195][T27784] Hardware name: ARM-Versatile Express [ 3438.411218][T27784] Call trace: [ 3438.411254][T27784] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3438.411583][T27784] r7:00000000 r6:00000000 r5:60000013 r4:82257c34 [ 3438.411614][T27784] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3438.411705][T27784] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3438.411880][T27784] r5:83aec800 r4:82951710 [ 3438.412055][T27784] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3438.412131][T27784] [<8095f3d4>] (should_fail_ex) from [<8095f610>] (should_fail+0x14/0x18) [ 3438.412390][T27784] r8:76b96f30 r7:00000000 r6:00000000 r5:e478df68 r4:00000002 [ 3438.412415][T27784] [<8095f5fc>] (should_fail) from [<8095f630>] (should_fail_usercopy+0x1c/0x20) [ 3438.412797][T27784] [<8095f614>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 3438.412900][T27784] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 3438.412979][T27784] r10:00000001 r9:8060401c r8:00000002 r7:e478df68 r6:0000000f r5:76b96f30 [ 3438.413039][T27784] r4:83aec800 r3:e478de9f [ 3438.413104][T27784] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 3438.413179][T27784] r8:76b96f30 r7:e478df68 r6:83aec800 r5:0000000f r4:8574da80 [ 3438.413239][T27784] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 3438.413310][T27784] r10:00000003 r9:83aec800 r8:8020029c r7:00000000 r6:00000000 r5:8574da80 [ 3438.413364][T27784] r4:8574da83 [ 3438.413518][T27784] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 3438.413773][T27784] r7:00000003 r6:00000004 r5:76b96f30 r4:0000000f [ 3438.413956][T27784] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3438.414036][T27784] Exception stack(0xe478dfa8 to 0xe478dff0) [ 3438.414077][T27784] dfa0: 0000000f 76b96f30 00000004 76b96f30 0000000f 00000000 [ 3438.414329][T27784] dfc0: 0000000f 76b96f30 00000004 00000003 002d0000 00000000 00006364 76b970bc [ 3438.414435][T27784] dfe0: 00000158 76b96ed0 000d7d68 0012fe04 [ 3445.926318][T27865] FAULT_INJECTION: forcing a failure. [ 3445.926318][T27865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3445.926802][T27865] CPU: 1 UID: 0 PID: 27865 Comm: syz.0.6355 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3445.926881][T27865] Hardware name: ARM-Versatile Express [ 3445.926910][T27865] Call trace: [ 3445.926954][T27865] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3445.927064][T27865] r7:00000000 r6:00000000 r5:60000013 r4:82257c34 [ 3445.927086][T27865] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3445.927154][T27865] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3445.927217][T27865] r5:8448d400 r4:82951710 [ 3445.927237][T27865] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3445.927328][T27865] [<8095f3d4>] (should_fail_ex) from [<8095f610>] (should_fail+0x14/0x18) [ 3445.927407][T27865] r8:76b96f30 r7:00000000 r6:00000000 r5:eac59f68 r4:00000002 [ 3445.927428][T27865] [<8095f5fc>] (should_fail) from [<8095f630>] (should_fail_usercopy+0x1c/0x20) [ 3445.927486][T27865] [<8095f614>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 3445.927551][T27865] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 3445.927629][T27865] r10:00000001 r9:8060401c r8:00000002 r7:eac59f68 r6:0000000f r5:76b96f30 [ 3445.927702][T27865] r4:8448d400 r3:eac59e9f [ 3445.927915][T27865] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 3445.928002][T27865] r8:76b96f30 r7:eac59f68 r6:8448d400 r5:0000000f r4:8574d300 [ 3445.928024][T27865] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 3445.928106][T27865] r10:00000003 r9:8448d400 r8:8020029c r7:00000000 r6:00000000 r5:8574d300 [ 3445.928131][T27865] r4:8574d303 [ 3445.928148][T27865] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 3445.928216][T27865] r7:00000003 r6:00000004 r5:76b96f30 r4:0000000f [ 3445.928237][T27865] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3445.928330][T27865] Exception stack(0xeac59fa8 to 0xeac59ff0) [ 3445.928383][T27865] 9fa0: 0000000f 76b96f30 00000004 76b96f30 0000000f 00000000 [ 3445.928425][T27865] 9fc0: 0000000f 76b96f30 00000004 00000003 002d0000 00000000 00006364 76b970bc [ 3445.928459][T27865] 9fe0: 00000158 76b96ed0 000d7d68 0012fe04 [ 3446.427356][T27880] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=361 sclass=netlink_audit_socket pid=27880 comm=syz.1.6361 [ 3450.370934][T27935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27935 comm=syz.1.6372 [ 3453.513527][T27961] FAULT_INJECTION: forcing a failure. [ 3453.513527][T27961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3453.518294][T27961] CPU: 0 UID: 0 PID: 27961 Comm: syz.1.6380 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3453.518369][T27961] Hardware name: ARM-Versatile Express [ 3453.518384][T27961] Call trace: [ 3453.518409][T27961] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3453.518477][T27961] r7:00000000 r6:00000000 r5:60000113 r4:82257c34 [ 3453.518487][T27961] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3453.518515][T27961] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3453.518559][T27961] r5:833ae000 r4:82951710 [ 3453.518576][T27961] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3453.518630][T27961] [<8095f3d4>] (should_fail_ex) from [<8095f610>] (should_fail+0x14/0x18) [ 3453.518685][T27961] r8:20000280 r7:00000000 r6:8245d848 r5:20000000 r4:20000000 [ 3453.518703][T27961] [<8095f5fc>] (should_fail) from [<8095f630>] (should_fail_usercopy+0x1c/0x20) [ 3453.518755][T27961] [<8095f614>] (should_fail_usercopy) from [<809656c8>] (strncpy_from_user+0x20/0x1a0) [ 3453.518809][T27961] [<809656a8>] (strncpy_from_user) from [<80560c80>] (getname_flags.part.0+0x44/0x18c) [ 3453.518880][T27961] r10:000000e3 r9:833ae000 r8:20000280 r7:00000000 r6:8245d848 r5:20000000 [ 3453.518905][T27961] r4:833b9000 [ 3453.518923][T27961] [<80560c3c>] (getname_flags.part.0) from [<80565d4c>] (getname_flags+0x3c/0x50) [ 3453.519001][T27961] r9:833ae000 r8:20000280 r7:ffffff9c r6:00000100 r5:00000000 r4:20000000 [ 3453.519018][T27961] [<80565d10>] (getname_flags) from [<8058ab00>] (path_setxattrat+0x158/0x17c) [ 3453.519070][T27961] r5:20000000 r4:00000000 [ 3453.519086][T27961] [<8058a9a8>] (path_setxattrat) from [<8058acec>] (sys_lsetxattr+0x34/0x3c) [ 3453.519138][T27961] r8:8020029c r7:000000e3 r6:0012fee0 r5:00000000 r4:20000080 [ 3453.519155][T27961] [<8058acb8>] (sys_lsetxattr) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3453.519201][T27961] Exception stack(0xeae01fa8 to 0xeae01ff0) [ 3453.519238][T27961] 1fa0: 00000003 00000000 20000000 20000080 20000280 00000024 [ 3453.519267][T27961] 1fc0: 00000003 00000000 0012fee0 000000e3 002d0000 00000000 00006364 76b950bc [ 3453.519289][T27961] 1fe0: 76b94ec0 76b94eb0 0001939c 00131f30 [ 3453.519310][T27961] r4:00000003 [ 3461.822613][T28154] FAULT_INJECTION: forcing a failure. [ 3461.822613][T28154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3461.823577][T28154] CPU: 0 UID: 0 PID: 28154 Comm: syz.1.6442 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3461.823645][T28154] Hardware name: ARM-Versatile Express [ 3461.823660][T28154] Call trace: [ 3461.823683][T28154] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3461.823748][T28154] r7:20000040 r6:00000000 r5:60000013 r4:82257c34 [ 3461.823758][T28154] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3461.823786][T28154] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3461.823815][T28154] r5:84aea400 r4:82951710 [ 3461.823822][T28154] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3461.823854][T28154] [<8095f3d4>] (should_fail_ex) from [<8095f610>] (should_fail+0x14/0x18) [ 3461.823886][T28154] r8:00000000 r7:20000040 r6:85710000 r5:00000000 r4:eb645f20 [ 3461.823895][T28154] [<8095f5fc>] (should_fail) from [<8095f630>] (should_fail_usercopy+0x1c/0x20) [ 3461.823920][T28154] [<8095f614>] (should_fail_usercopy) from [<808aeb1c>] (_copy_from_iter+0x6c/0x7c8) [ 3461.823949][T28154] [<808aeab0>] (_copy_from_iter) from [<81644f58>] (netlink_sendmsg+0x18c/0x444) [ 3461.823990][T28154] r10:00000000 r9:00000000 r8:eb645f30 r7:84579c00 r6:00000014 r5:85567540 [ 3461.824000][T28154] r4:eb645f20 [ 3461.824008][T28154] [<81644dcc>] (netlink_sendmsg) from [<81519a34>] (__sock_sendmsg+0x44/0x78) [ 3461.824044][T28154] r10:00000000 r9:eb645dc4 r8:eb645dc4 r7:00000000 r6:85026780 r5:eb645f20 [ 3461.824054][T28154] r4:00000000 [ 3461.824062][T28154] [<815199f0>] (__sock_sendmsg) from [<8151a2a4>] (____sys_sendmsg+0x298/0x2cc) [ 3461.824090][T28154] r7:00000000 r6:85026780 r5:00000004 r4:eb645f20 [ 3461.824107][T28154] [<8151a00c>] (____sys_sendmsg) from [<8151c044>] (___sys_sendmsg+0x9c/0xd0) [ 3461.824141][T28154] r10:eb645e24 r9:200000c0 r8:00000004 r7:00000000 r6:85026780 r5:eb645f20 [ 3461.824151][T28154] r4:00000000 [ 3461.824159][T28154] [<8151bfa8>] (___sys_sendmsg) from [<8151c4d4>] (__sys_sendmsg+0x8c/0xd8) [ 3461.824192][T28154] r10:00000128 r9:84aea400 r8:84ac7900 r7:00000004 r6:200000c0 r5:84ac7901 [ 3461.824202][T28154] r4:00000003 [ 3461.824210][T28154] [<8151c448>] (__sys_sendmsg) from [<8151c534>] (sys_sendmsg+0x14/0x18) [ 3461.824240][T28154] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 3461.824249][T28154] [<8151c520>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3461.824274][T28154] Exception stack(0xeb645fa8 to 0xeb645ff0) [ 3461.824294][T28154] 5fa0: 00000000 00000000 00000003 200000c0 00000004 00000000 [ 3461.824312][T28154] 5fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76bb60bc [ 3461.824325][T28154] 5fe0: 76bb5ec0 76bb5eb0 0001939c 00131f30 [ 3463.437666][T28191] FAULT_INJECTION: forcing a failure. [ 3463.437666][T28191] name failslab, interval 1, probability 0, space 0, times 0 [ 3463.438154][T28191] CPU: 1 UID: 0 PID: 28191 Comm: syz.0.6453 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3463.438215][T28191] Hardware name: ARM-Versatile Express [ 3463.438242][T28191] Call trace: [ 3463.438279][T28191] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3463.438428][T28191] r7:00000cc0 r6:00000000 r5:60000013 r4:82257c34 [ 3463.438454][T28191] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3463.438515][T28191] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3463.438597][T28191] r5:83ffd400 r4:8291bcc0 [ 3463.438622][T28191] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3463.438686][T28191] [<8095f3d4>] (should_fail_ex) from [<805257a4>] (should_failslab+0x6c/0x94) [ 3463.438753][T28191] r8:83ffd400 r7:00000cc0 r6:00000000 r5:00000002 r4:83001240 [ 3463.438771][T28191] [<80525738>] (should_failslab) from [<8050a554>] (__kmalloc_noprof+0x9c/0x458) [ 3463.438824][T28191] [<8050a4b8>] (__kmalloc_noprof) from [<81583b8c>] (bpf_prepare_filter+0x2b4/0x604) [ 3463.438897][T28191] r10:eb719eec r9:00000002 r8:00080800 r7:eb775030 r6:00000000 r5:00000001 [ 3463.438975][T28191] r4:eb775000 [ 3463.439097][T28191] [<815838d8>] (bpf_prepare_filter) from [<81585c40>] (__get_filter+0x118/0x138) [ 3463.439184][T28191] r10:eb719eec r9:20000180 r8:b5403587 r7:eb775030 r6:eb775000 r5:00000008 [ 3463.439209][T28191] r4:eb719e9c [ 3463.439225][T28191] [<81585b28>] (__get_filter) from [<81586b58>] (sk_attach_filter+0x14/0x80) [ 3463.439289][T28191] r9:eb719e7c r8:83ffd400 r7:eb719e9c r6:0000001a r5:83850900 r4:83850900 [ 3463.439306][T28191] [<81586b44>] (sk_attach_filter) from [<815236b0>] (sk_setsockopt+0x95c/0x1388) [ 3463.439436][T28191] r7:eb719e9c r6:0000001a r5:83850900 r4:00000000 [ 3463.439553][T28191] [<81522d58>] (sk_setsockopt) from [<81524108>] (sock_setsockopt+0x2c/0x34) [ 3463.439639][T28191] r10:00000126 r9:83ffd400 r8:00000000 r7:8574da80 r6:850daa00 r5:00000000 [ 3463.439819][T28191] r4:00000000 [ 3463.439845][T28191] [<815240e0>] (sock_setsockopt) from [<81518724>] (do_sock_setsockopt+0x15c/0x17c) [ 3463.439908][T28191] [<815185c8>] (do_sock_setsockopt) from [<8151bb34>] (__sys_setsockopt+0x7c/0xb4) [ 3463.440081][T28191] r6:8574da81 r5:0000001a r4:00000001 [ 3463.440292][T28191] [<8151bab8>] (__sys_setsockopt) from [<8151bb88>] (sys_setsockopt+0x1c/0x24) [ 3463.440368][T28191] r8:8020029c r7:00000126 r6:0012fee0 r5:00000000 r4:00000008 [ 3463.440401][T28191] [<8151bb6c>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3463.440542][T28191] Exception stack(0xeb719fa8 to 0xeb719ff0) [ 3463.440819][T28191] 9fa0: 00000008 00000000 00000003 00000001 0000001a 20000240 [ 3463.441129][T28191] 9fc0: 00000008 00000000 0012fee0 00000126 002d0000 00000000 00006364 76b970bc [ 3463.441681][T28191] 9fe0: 76b96ec0 76b96eb0 0001939c 00131f30 [ 3463.932572][T22189] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3464.003053][T22189] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3464.066548][T22189] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3464.122055][T22189] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3464.374262][T22189] bond0 (unregistering): left allmulticast mode [ 3464.374578][T22189] bond_slave_0: left allmulticast mode [ 3464.374755][T22189] bond_slave_1: left allmulticast mode [ 3464.382121][T22189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3464.388246][T22189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3464.392169][T22189] bond0 (unregistering): Released all slaves [ 3464.464249][T22189] hsr_slave_0: left promiscuous mode [ 3464.467193][T22189] hsr_slave_1: left promiscuous mode [ 3464.479404][T22189] veth1_macvtap: left promiscuous mode [ 3464.480621][T22189] veth0_macvtap: left promiscuous mode [ 3464.480970][T22189] veth1_vlan: left promiscuous mode [ 3464.481220][T22189] veth0_vlan: left promiscuous mode [ 3465.697926][T28210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3465.704822][T28210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3466.672836][T28210] hsr_slave_0: entered promiscuous mode [ 3466.674733][T28210] hsr_slave_1: entered promiscuous mode [ 3466.677696][T28210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3466.678355][T28210] Cannot create hsr debugfs directory [ 3467.134711][T28210] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3467.143296][T28573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28573 comm=syz.0.6460 [ 3467.146874][T28210] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3467.156499][T28210] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3467.166099][T28210] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3467.696528][T28210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3470.317779][T28210] veth0_vlan: entered promiscuous mode [ 3470.340051][T28210] veth1_vlan: entered promiscuous mode [ 3470.414654][T28210] veth0_macvtap: entered promiscuous mode [ 3470.431749][T28210] veth1_macvtap: entered promiscuous mode [ 3470.471076][T28210] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3470.471833][T28210] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3470.472894][T28210] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3470.474618][T28210] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3471.556173][T28729] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2050 sclass=netlink_tcpdiag_socket pid=28729 comm=syz.0.6485 [ 3471.795890][T27387] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 3471.960451][T27387] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3471.961446][T27387] usb 1-1: too many configurations: 19, using maximum allowed: 8 [ 3471.971387][T27387] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 3471.972665][T27387] usb 1-1: can't read configurations, error -61 [ 3472.107035][T27387] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 3472.270617][T27387] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3472.272299][T27387] usb 1-1: too many configurations: 19, using maximum allowed: 8 [ 3472.288369][T27387] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 3472.290734][T27387] usb 1-1: can't read configurations, error -61 [ 3472.292435][T27387] usb usb1-port1: attempt power cycle [ 3472.636332][T27387] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 3472.669005][T27387] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3472.671161][T27387] usb 1-1: too many configurations: 19, using maximum allowed: 8 [ 3472.679273][T27387] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 3472.680434][T27387] usb 1-1: can't read configurations, error -61 [ 3472.806008][T27387] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 3472.834320][T27387] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3472.835533][T27387] usb 1-1: too many configurations: 19, using maximum allowed: 8 [ 3472.841181][T27387] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 3472.842220][T27387] usb 1-1: can't read configurations, error -61 [ 3472.843434][T27387] usb usb1-port1: unable to enumerate USB device [ 3483.050923][T28850] fuse: Unknown parameter '0x0000000000000004' [ 3484.365835][T27387] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 3484.532277][T27387] usb 2-1: config 0 has no interfaces? [ 3484.545883][T27387] usb 2-1: New USB device found, idVendor=0ccd, idProduct=8bb3, bcdDevice=2d.ee [ 3484.546332][T27387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3484.546606][T27387] usb 2-1: Product: syz [ 3484.546819][T27387] usb 2-1: Manufacturer: syz [ 3484.547032][T27387] usb 2-1: SerialNumber: syz [ 3484.554202][T27387] usb 2-1: config 0 descriptor?? [ 3484.773406][T24880] usb 2-1: USB disconnect, device number 27 [ 3491.077889][T28882] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3496.882135][ T31] audit: type=1400 audit(3496.835:495): avc: denied { listen } for pid=28954 comm="syz.0.6535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3502.181242][T28990] FAULT_INJECTION: forcing a failure. [ 3502.181242][T28990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3502.183261][T28990] CPU: 1 UID: 0 PID: 28990 Comm: syz.0.6540 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3502.183376][T28990] Hardware name: ARM-Versatile Express [ 3502.183403][T28990] Call trace: [ 3502.183448][T28990] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3502.183561][T28990] r7:84a488c4 r6:00000000 r5:60000013 r4:82257c34 [ 3502.183584][T28990] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3502.183645][T28990] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3502.183707][T28990] r5:8448d400 r4:82951710 [ 3502.183724][T28990] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3502.183787][T28990] [<8095f3d4>] (should_fail_ex) from [<8095f610>] (should_fail+0x14/0x18) [ 3502.183858][T28990] r8:0000002c r7:84a488c4 r6:ffffffa4 r5:ecdb9ec4 r4:20000000 [ 3502.183886][T28990] [<8095f5fc>] (should_fail) from [<8095f630>] (should_fail_usercopy+0x1c/0x20) [ 3502.183942][T28990] [<8095f614>] (should_fail_usercopy) from [<8194eea0>] (copy_from_sockptr_offset.constprop.0+0x48/0xd4) [ 3502.184009][T28990] [<8194ee58>] (copy_from_sockptr_offset.constprop.0) from [<8194f01c>] (smc_setsockopt+0xf0/0x3cc) [ 3502.184074][T28990] r6:ffffffa4 r5:84a48480 r4:00000483 [ 3502.184093][T28990] [<8194ef30>] (smc_setsockopt) from [<81518678>] (do_sock_setsockopt+0xb0/0x17c) [ 3502.184168][T28990] r9:8448d400 r8:00000000 r7:8574df00 r6:85027400 r5:00000000 r4:8194ef2c [ 3502.184188][T28990] [<815185c8>] (do_sock_setsockopt) from [<8151bb34>] (__sys_setsockopt+0x7c/0xb4) [ 3502.184247][T28990] r6:8574df01 r5:00000483 r4:00000000 [ 3502.184269][T28990] [<8151bab8>] (__sys_setsockopt) from [<8151bb88>] (sys_setsockopt+0x1c/0x24) [ 3502.184424][T28990] r8:8020029c r7:00000126 r6:0012fee0 r5:00000000 r4:0000002c [ 3502.184445][T28990] [<8151bb6c>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3502.184508][T28990] Exception stack(0xecdb9fa8 to 0xecdb9ff0) [ 3502.184548][T28990] 9fa0: 0000002c 00000000 00000004 00000000 00000483 20000000 [ 3502.184582][T28990] 9fc0: 0000002c 00000000 0012fee0 00000126 002d0000 00000000 00006364 76b340bc [ 3502.184611][T28990] 9fe0: 76b33ec0 76b33eb0 0001939c 00131f30 [ 3509.155728][T29000] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3516.251986][T29068] FAULT_INJECTION: forcing a failure. [ 3516.251986][T29068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3516.252479][T29068] CPU: 0 UID: 0 PID: 29068 Comm: syz.1.6554 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3516.252578][T29068] Hardware name: ARM-Versatile Express [ 3516.252610][T29068] Call trace: [ 3516.252651][T29068] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3516.252765][T29068] r7:00000000 r6:00000000 r5:60000013 r4:82257c34 [ 3516.252786][T29068] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3516.252844][T29068] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3516.252933][T29068] r5:83983000 r4:82951710 [ 3516.252956][T29068] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3516.253025][T29068] [<8095f3d4>] (should_fail_ex) from [<8095f610>] (should_fail+0x14/0x18) [ 3516.253110][T29068] r8:76b01f30 r7:00000000 r6:00000000 r5:ecf19f68 r4:00000002 [ 3516.253201][T29068] [<8095f5fc>] (should_fail) from [<8095f630>] (should_fail_usercopy+0x1c/0x20) [ 3516.253265][T29068] [<8095f614>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 3516.253327][T29068] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 3516.253404][T29068] r10:00000001 r9:8060401c r8:00000002 r7:ecf19f68 r6:0000000f r5:76b01f30 [ 3516.253432][T29068] r4:83983000 r3:ecf19e9f [ 3516.253451][T29068] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 3516.253524][T29068] r8:76b01f30 r7:ecf19f68 r6:83983000 r5:0000000f r4:84ac7c00 [ 3516.253544][T29068] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 3516.253614][T29068] r10:00000003 r9:83983000 r8:8020029c r7:00000000 r6:00000000 r5:84ac7c00 [ 3516.253635][T29068] r4:84ac7c03 [ 3516.253652][T29068] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 3516.253761][T29068] r7:00000003 r6:00000004 r5:76b01f30 r4:0000000f [ 3516.253784][T29068] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3516.253841][T29068] Exception stack(0xecf19fa8 to 0xecf19ff0) [ 3516.253883][T29068] 9fa0: 0000000f 76b01f30 00000004 76b01f30 0000000f 00000000 [ 3516.253920][T29068] 9fc0: 0000000f 76b01f30 00000004 00000003 002d0000 00000000 00006364 76b020bc [ 3516.253987][T29068] 9fe0: 00000158 76b01ed0 000d7d68 0012fe04 [ 3525.955894][T29097] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3532.054928][T29167] FAULT_INJECTION: forcing a failure. [ 3532.054928][T29167] name failslab, interval 1, probability 0, space 0, times 0 [ 3532.056545][T29167] CPU: 1 UID: 0 PID: 29167 Comm: syz.0.6571 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3532.056615][T29167] Hardware name: ARM-Versatile Express [ 3532.056663][T29167] Call trace: [ 3532.056688][T29167] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3532.056756][T29167] r7:84aec800 r6:00000000 r5:60000013 r4:82257c34 [ 3532.056766][T29167] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3532.056794][T29167] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3532.056823][T29167] r5:84aec800 r4:8291bcc0 [ 3532.056831][T29167] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3532.056861][T29167] [<8095f3d4>] (should_fail_ex) from [<805257a4>] (should_failslab+0x6c/0x94) [ 3532.056906][T29167] r8:00000000 r7:84aec800 r6:00000cc0 r5:8291e994 r4:830a8cc0 [ 3532.056915][T29167] [<80525738>] (should_failslab) from [<8050a1d0>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 3532.056944][T29167] [<8050a184>] (kmem_cache_alloc_noprof) from [<8055403c>] (alloc_empty_file+0x54/0x13c) [ 3532.056986][T29167] r10:829489f4 r9:8309fc00 r8:82805c40 r7:842ffd80 r6:00000802 r5:8291e994 [ 3532.056996][T29167] r4:8245d828 [ 3532.057003][T29167] [<80553fe8>] (alloc_empty_file) from [<805541c4>] (alloc_file_pseudo+0xa0/0x104) [ 3532.057041][T29167] r8:830af610 r7:84aec800 r6:81e4e040 r5:8501f200 r4:00000802 [ 3532.057050][T29167] [<80554124>] (alloc_file_pseudo) from [<81517d58>] (sock_alloc_file+0x48/0xc4) [ 3532.057090][T29167] r10:82948a20 r9:8574d000 r8:00000000 r7:00000000 r6:8501f200 r5:8501f180 [ 3532.057099][T29167] r4:8501e780 [ 3532.057107][T29167] [<81517d10>] (sock_alloc_file) from [<8151b200>] (do_accept+0xa0/0x174) [ 3532.057137][T29167] r6:ed155f5c r5:8501f180 r4:8501e780 [ 3532.057146][T29167] [<8151b160>] (do_accept) from [<8151b35c>] (__sys_accept4+0x88/0xf0) [ 3532.057182][T29167] r10:0000016e r9:8574d000 r8:00000000 r7:00000000 r6:00000006 r5:00080800 [ 3532.057192][T29167] r4:8574d001 [ 3532.057199][T29167] [<8151b2d4>] (__sys_accept4) from [<8151b3d4>] (sys_accept4+0x10/0x14) [ 3532.057231][T29167] r9:84aec800 r8:8020029c r7:0000016e r6:0012fee0 r5:00000000 r4:00000000 [ 3532.057239][T29167] [<8151b3c4>] (sys_accept4) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3532.057264][T29167] Exception stack(0xed155fa8 to 0xed155ff0) [ 3532.057288][T29167] 5fa0: 00000000 00000000 00000004 00000000 00000000 00080800 [ 3532.057306][T29167] 5fc0: 00000000 00000000 0012fee0 0000016e 002d0000 00000000 00006364 76b970bc [ 3532.057319][T29167] 5fe0: 76b96ec0 76b96eb0 0001939c 00131f30 [ 3551.522296][T29331] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=8 sclass=netlink_audit_socket pid=29331 comm=syz.1.6607 [ 3552.408280][T29341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=29341 comm=syz.0.6611 [ 3554.119785][T29351] fuse: Unknown parameter 'root ' [ 3555.092577][T29370] FAULT_INJECTION: forcing a failure. [ 3555.092577][T29370] name failslab, interval 1, probability 0, space 0, times 0 [ 3555.094010][T29370] CPU: 1 UID: 0 PID: 29370 Comm: syz.1.6619 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3555.094091][T29370] Hardware name: ARM-Versatile Express [ 3555.094107][T29370] Call trace: [ 3555.094133][T29370] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3555.094208][T29370] r7:84abe000 r6:00000000 r5:60000113 r4:82257c34 [ 3555.094219][T29370] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3555.094249][T29370] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3555.094280][T29370] r5:84abe000 r4:8291bcc0 [ 3555.094288][T29370] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3555.094322][T29370] [<8095f3d4>] (should_fail_ex) from [<805257a4>] (should_failslab+0x6c/0x94) [ 3555.094363][T29370] r8:00000000 r7:84abe000 r6:00000cc0 r5:84889d00 r4:83002e40 [ 3555.094372][T29370] [<80525738>] (should_failslab) from [<8050a1d0>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 3555.094439][T29370] [<8050a184>] (kmem_cache_alloc_noprof) from [<804e3938>] (__anon_vma_prepare+0x34/0x1b0) [ 3555.094481][T29370] r10:ed6e9ec8 r9:84889d00 r8:82ac1598 r7:842c6400 r6:84889d00 r5:84889d00 [ 3555.094492][T29370] r4:ed6e9da0 [ 3555.094500][T29370] [<804e3904>] (__anon_vma_prepare) from [<804cb078>] (__vmf_anon_prepare+0x5c/0xcc) [ 3555.094543][T29370] r10:ed6e9ec8 r9:84889d00 r8:00000001 r7:00000000 r6:20002000 r5:84889d00 [ 3555.094555][T29370] r4:ed6e9da0 r3:00000215 [ 3555.094562][T29370] [<804cb01c>] (__vmf_anon_prepare) from [<804cf248>] (handle_mm_fault+0xcc0/0x14e4) [ 3555.094598][T29370] r7:00000000 r6:20002000 r5:84abe000 r4:00000215 [ 3555.094606][T29370] [<804ce588>] (handle_mm_fault) from [<802341f4>] (do_page_fault+0xec/0x49c) [ 3555.094646][T29370] r10:00000002 r9:842c6400 r8:00000215 r7:20002000 r6:00000a06 r5:20002300 [ 3555.094656][T29370] r4:ed6e9ec8 [ 3555.094664][T29370] [<80234108>] (do_page_fault) from [<80234724>] (do_translation_fault+0xfc/0x12c) [ 3555.094700][T29370] r10:84abe000 r9:84abe000 r8:80234628 r7:ed6e9ec8 r6:20002300 r5:00000a06 [ 3555.094711][T29370] r4:8281d160 [ 3555.094718][T29370] [<80234628>] (do_translation_fault) from [<8023478c>] (do_DataAbort+0x38/0xa8) [ 3555.094761][T29370] r9:84abe000 r8:80234628 r7:ed6e9ec8 r6:20002300 r5:00000a06 r4:8281d160 [ 3555.094770][T29370] [<80234754>] (do_DataAbort) from [<80200b0c>] (__dabt_svc+0x4c/0x80) [ 3555.094797][T29370] Exception stack(0xed6e9ec8 to 0xed6e9f10) [ 3555.094819][T29370] 9ec0: 20002300 7effffff 00001000 b5003500 00000002 00000000 [ 3555.094838][T29370] 9ee0: 855e1841 20002300 855e1840 b5403587 84abe000 ed6e9fa4 a1002303 ed6e9f18 [ 3555.094853][T29370] 9f00: 8056b62c 81a20268 80000013 ffffffff [ 3555.094872][T29370] r8:855e1840 r7:ed6e9efc r6:ffffffff r5:80000013 r4:81a20268 [ 3555.094881][T29370] [<8056b3f8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3555.094908][T29370] Exception stack(0xed6e9fa8 to 0xed6e9ff0) [ 3555.094926][T29370] 9fa0: 00000000 00000000 00000003 00000002 20002300 00000000 [ 3555.094944][T29370] 9fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76b020bc [ 3555.094959][T29370] 9fe0: 76b01ec0 76b01eb0 0001939c 00131f30 [ 3555.094978][T29370] r10:00000036 r9:84abe000 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 3555.094989][T29370] r4:00000000 [ 3555.588322][ T31] audit: type=1400 audit(3555.545:496): avc: denied { append } for pid=29382 comm="syz.1.6624" path="socket:[72143]" dev="sockfs" ino=72143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3555.708939][T29387] FAULT_INJECTION: forcing a failure. [ 3555.708939][T29387] name failslab, interval 1, probability 0, space 0, times 0 [ 3555.710451][T29387] CPU: 1 UID: 0 PID: 29387 Comm: syz.0.6626 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3555.710536][T29387] Hardware name: ARM-Versatile Express [ 3555.710552][T29387] Call trace: [ 3555.710578][T29387] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3555.710644][T29387] r7:00000cc0 r6:00000000 r5:60000013 r4:82257c34 [ 3555.710654][T29387] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3555.710682][T29387] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3555.710712][T29387] r5:84162400 r4:8291bcc0 [ 3555.710720][T29387] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3555.710762][T29387] [<8095f3d4>] (should_fail_ex) from [<805257a4>] (should_failslab+0x6c/0x94) [ 3555.710801][T29387] r8:00000cc0 r7:00000cc0 r6:00000000 r5:83001480 r4:00000200 [ 3555.710810][T29387] [<80525738>] (should_failslab) from [<80508d34>] (__kvmalloc_node_noprof+0xe0/0x59c) [ 3555.710839][T29387] [<80508c54>] (__kvmalloc_node_noprof) from [<8089ebe0>] (io_alloc_cache_init+0x38/0x68) [ 3555.710879][T29387] r10:00000000 r9:7fffffff r8:00000090 r7:00000090 r6:00000000 r5:00000080 [ 3555.710889][T29387] r4:84828950 [ 3555.710897][T29387] [<8089eba8>] (io_alloc_cache_init) from [<80888d74>] (io_uring_setup+0x328/0x8f4) [ 3555.710936][T29387] r9:7fffffff r8:ffffffff r7:84828800 r6:84162400 r5:00000000 r4:20000400 [ 3555.710945][T29387] [<80888a4c>] (io_uring_setup) from [<80889388>] (sys_io_uring_setup+0x48/0x88) [ 3555.710981][T29387] r10:000001a9 r9:84162400 r8:8020029c r7:000001a9 r6:00003c0e r5:20000400 [ 3555.710991][T29387] r4:8280cc04 [ 3555.710999][T29387] [<80889340>] (sys_io_uring_setup) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3555.711025][T29387] Exception stack(0xed775fa8 to 0xed775ff0) [ 3555.711046][T29387] 5fa0: 76b96e98 00000000 00003c0e 20000400 0000c002 00000002 [ 3555.711063][T29387] 5fc0: 76b96e98 00000000 00000000 000001a9 00000000 00000000 00006364 76b970bc [ 3555.711078][T29387] 5fe0: 76b96e88 76b96e78 000141b0 00131f30 [ 3555.711094][T29387] r7:000001a9 r6:00000000 r5:00000000 r4:76b96e98 [ 3558.208186][T29395] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29395 comm=syz.1.6629 [ 3558.483962][T29404] FAULT_INJECTION: forcing a failure. [ 3558.483962][T29404] name failslab, interval 1, probability 0, space 0, times 0 [ 3558.484264][T29404] CPU: 0 UID: 0 PID: 29404 Comm: syz.1.6632 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3558.484299][T29404] Hardware name: ARM-Versatile Express [ 3558.484313][T29404] Call trace: [ 3558.484333][T29404] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3558.484703][T29404] r7:84160000 r6:00000000 r5:60000013 r4:82257c34 [ 3558.484712][T29404] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3558.484741][T29404] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3558.484772][T29404] r5:84160000 r4:8291bcc0 [ 3558.484781][T29404] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3558.484811][T29404] [<8095f3d4>] (should_fail_ex) from [<805257a4>] (should_failslab+0x6c/0x94) [ 3558.484847][T29404] r8:00000000 r7:84160000 r6:00000dc0 r5:84df5050 r4:83001240 [ 3558.484856][T29404] [<80525738>] (should_failslab) from [<80509584>] (__kmalloc_cache_noprof+0x4c/0x33c) [ 3558.484900][T29404] [<80509538>] (__kmalloc_cache_noprof) from [<818e9914>] (vlan_vid_add+0xb4/0x1e4) [ 3558.484974][T29404] r10:8245d6c4 r9:84df5000 r8:84ffb800 r7:00000001 r6:00000081 r5:84df5050 [ 3558.485061][T29404] r4:00000001 [ 3558.485094][T29404] [<818e9860>] (vlan_vid_add) from [<818eb0c8>] (register_vlan_dev+0x34/0x294) [ 3558.485199][T29404] r10:84160000 r9:00000001 r8:84ffb800 r7:84ffb800 r6:8443cec0 r5:8443c800 [ 3558.485217][T29404] r4:00000000 [ 3558.485226][T29404] [<818eb094>] (register_vlan_dev) from [<818eb718>] (vlan_ioctl_handler+0x3f0/0x4a0) [ 3558.485265][T29404] r10:84160000 r9:00000001 r8:84ffb800 r7:84914380 r6:00000001 r5:8443c800 [ 3558.485275][T29404] r4:00000000 [ 3558.485282][T29404] [<818eb328>] (vlan_ioctl_handler) from [<8151a650>] (sock_ioctl+0x1f8/0x600) [ 3558.485318][T29404] r9:00000003 r8:85ae1180 r7:85026780 r6:84914380 r5:20000080 r4:82c1f8e4 [ 3558.485327][T29404] [<8151a458>] (sock_ioctl) from [<8056b530>] (sys_ioctl+0x138/0xd84) [ 3558.485388][T29404] r9:00000003 r8:85ae1180 r7:20000080 r6:85ae1181 r5:00000000 r4:00008983 [ 3558.485400][T29404] [<8056b3f8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3558.485452][T29404] Exception stack(0xed849fa8 to 0xed849ff0) [ 3558.485473][T29404] 9fa0: 00000000 00000000 00000003 00008983 20000080 00000000 [ 3558.485491][T29404] 9fc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76b020bc [ 3558.485505][T29404] 9fe0: 76b01ec0 76b01eb0 0001939c 00131f30 [ 3558.485523][T29404] r10:00000036 r9:84160000 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 3558.485533][T29404] r4:00000000 [ 3558.829432][T29410] FAULT_INJECTION: forcing a failure. [ 3558.829432][T29410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3558.829685][T29410] CPU: 0 UID: 0 PID: 29410 Comm: syz.1.6635 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3558.829719][T29410] Hardware name: ARM-Versatile Express [ 3558.829732][T29410] Call trace: [ 3558.829753][T29410] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3558.829821][T29410] r7:00000000 r6:00000000 r5:60000013 r4:82257c34 [ 3558.829883][T29410] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3558.829916][T29410] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3558.829983][T29410] r5:84160000 r4:82951710 [ 3558.829994][T29410] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3558.830027][T29410] [<8095f3d4>] (should_fail_ex) from [<8095f610>] (should_fail+0x14/0x18) [ 3558.830090][T29410] r8:76b01f30 r7:00000000 r6:00000000 r5:ed849f68 r4:00000002 [ 3558.830100][T29410] [<8095f5fc>] (should_fail) from [<8095f630>] (should_fail_usercopy+0x1c/0x20) [ 3558.830128][T29410] [<8095f614>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 3558.830158][T29410] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 3558.830208][T29410] r10:00000001 r9:8060401c r8:00000002 r7:ed849f68 r6:0000000f r5:76b01f30 [ 3558.830232][T29410] r4:84160000 r3:ed849e9f [ 3558.830249][T29410] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 3558.830308][T29410] r8:76b01f30 r7:ed849f68 r6:84160000 r5:0000000f r4:85ae1900 [ 3558.830350][T29410] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 3558.830386][T29410] r10:00000003 r9:84160000 r8:8020029c r7:00000000 r6:00000000 r5:85ae1900 [ 3558.830396][T29410] r4:85ae1903 [ 3558.830404][T29410] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 3558.830434][T29410] r7:00000003 r6:0000000a r5:76b01f30 r4:0000000f [ 3558.830443][T29410] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3558.830467][T29410] Exception stack(0xed849fa8 to 0xed849ff0) [ 3558.830513][T29410] 9fa0: 0000000f 76b01f30 0000000a 76b01f30 0000000f 00000000 [ 3558.830534][T29410] 9fc0: 0000000f 76b01f30 0000000a 00000003 002d0000 00000000 00006364 76b020bc [ 3558.830559][T29410] 9fe0: 00000158 76b01ed0 000d7d68 0012fe04 [ 3558.921336][T29417] FAULT_INJECTION: forcing a failure. [ 3558.921336][T29417] name failslab, interval 1, probability 0, space 0, times 0 [ 3558.921601][T29417] CPU: 0 UID: 0 PID: 29417 Comm: syz.1.6637 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3558.921636][T29417] Hardware name: ARM-Versatile Express [ 3558.921649][T29417] Call trace: [ 3558.921669][T29417] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3558.921763][T29417] r7:84abec00 r6:00000000 r5:60000013 r4:82257c34 [ 3558.921787][T29417] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3558.921829][T29417] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3558.921879][T29417] r5:84abec00 r4:8291bcc0 [ 3558.921890][T29417] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3558.921926][T29417] [<8095f3d4>] (should_fail_ex) from [<805257a4>] (should_failslab+0x6c/0x94) [ 3558.922029][T29417] r8:00000000 r7:84abec00 r6:00000820 r5:855679c0 r4:830ad9c0 [ 3558.922051][T29417] [<80525738>] (should_failslab) from [<8050a1d0>] (kmem_cache_alloc_noprof+0x4c/0x334) [ 3558.922081][T29417] [<8050a184>] (kmem_cache_alloc_noprof) from [<8152d3c4>] (skb_clone+0x60/0x1c8) [ 3558.922118][T29417] r10:81d78b34 r9:00000000 r8:84abec00 r7:84d7c000 r6:00000000 r5:855679c0 [ 3558.922128][T29417] r4:00000820 [ 3558.922159][T29417] [<8152d364>] (skb_clone) from [<80d4f250>] (vxcan_xmit+0x5c/0x178) [ 3558.922214][T29417] r5:84d78000 r4:855679c0 [ 3558.922232][T29417] [<80d4f1f4>] (vxcan_xmit) from [<8154e420>] (dev_hard_start_xmit+0xe0/0x2ac) [ 3558.922283][T29417] r7:84c00800 r6:84d78000 r5:00000000 r4:855679c0 [ 3558.922295][T29417] [<8154e340>] (dev_hard_start_xmit) from [<8154ea80>] (__dev_queue_xmit+0x350/0xfa4) [ 3558.922361][T29417] r10:855679c0 r9:00000000 r8:edab5c18 r7:84d78000 r6:826c2e8c r5:84c00800 [ 3558.922373][T29417] r4:855679c0 [ 3558.922402][T29417] [<8154e730>] (__dev_queue_xmit) from [<818c69b0>] (can_send+0x178/0x388) [ 3558.922443][T29417] r10:855679c0 r9:00000000 r8:00000000 r7:85567540 r6:84e7db80 r5:84818000 [ 3558.922474][T29417] r4:855679c0 [ 3558.922483][T29417] [<818c6838>] (can_send) from [<818d93a8>] (isotp_sendmsg+0x3f4/0x820) [ 3558.922518][T29417] r9:00000000 r8:00000000 r7:00000000 r6:84818000 r5:8481a000 r4:84818280 [ 3558.922527][T29417] [<818d8fb4>] (isotp_sendmsg) from [<81519a34>] (__sock_sendmsg+0x44/0x78) [ 3558.922598][T29417] r10:00000000 r9:edab5dc4 r8:edab5dc4 r7:00000000 r6:85027b80 r5:edab5f20 [ 3558.922654][T29417] r4:00000000 [ 3558.922684][T29417] [<815199f0>] (__sock_sendmsg) from [<8151a2a4>] (____sys_sendmsg+0x298/0x2cc) [ 3558.922717][T29417] r7:00000000 r6:85027b80 r5:20000000 r4:edab5f20 [ 3558.922735][T29417] [<8151a00c>] (____sys_sendmsg) from [<8151c044>] (___sys_sendmsg+0x9c/0xd0) [ 3558.922806][T29417] r10:edab5e24 r9:20000180 r8:20000000 r7:00000000 r6:85027b80 r5:edab5f20 [ 3558.922816][T29417] r4:00000000 [ 3558.922824][T29417] [<8151bfa8>] (___sys_sendmsg) from [<8151c4d4>] (__sys_sendmsg+0x8c/0xd8) [ 3558.922858][T29417] r10:00000128 r9:84abec00 r8:85ae1d80 r7:20000000 r6:20000180 r5:85ae1d81 [ 3558.922878][T29417] r4:00000003 [ 3558.922908][T29417] [<8151c448>] (__sys_sendmsg) from [<8151c534>] (sys_sendmsg+0x14/0x18) [ 3558.922980][T29417] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 3558.923011][T29417] [<8151c520>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3558.923066][T29417] Exception stack(0xedab5fa8 to 0xedab5ff0) [ 3558.923104][T29417] 5fa0: 00000000 00000000 00000003 20000180 20000000 00000000 [ 3558.923164][T29417] 5fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76b020bc [ 3558.923228][T29417] 5fe0: 76b01ec0 76b01eb0 0001939c 00131f30 [ 3562.858263][T29503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=567 sclass=netlink_route_socket pid=29503 comm=syz.0.6658 [ 3568.411092][T29574] FAULT_INJECTION: forcing a failure. [ 3568.411092][T29574] name failslab, interval 1, probability 0, space 0, times 0 [ 3568.411379][T29574] CPU: 0 UID: 0 PID: 29574 Comm: syz.0.6678 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3568.411420][T29574] Hardware name: ARM-Versatile Express [ 3568.411434][T29574] Call trace: [ 3568.411488][T29574] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3568.411586][T29574] r7:00000d40 r6:00000000 r5:60000013 r4:82257c34 [ 3568.411598][T29574] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3568.411626][T29574] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3568.411656][T29574] r5:833ae000 r4:8291bcc0 [ 3568.411664][T29574] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3568.411694][T29574] [<8095f3d4>] (should_fail_ex) from [<805257a4>] (should_failslab+0x6c/0x94) [ 3568.411731][T29574] r8:833ae000 r7:00000d40 r6:8488e568 r5:0000001d r4:83001240 [ 3568.411739][T29574] [<80525738>] (should_failslab) from [<8050a554>] (__kmalloc_noprof+0x9c/0x458) [ 3568.411767][T29574] [<8050a4b8>] (__kmalloc_noprof) from [<807bc004>] (tomoyo_encode2+0x64/0xf0) [ 3568.411811][T29574] r10:00000fff r9:8309e800 r8:00000000 r7:834dbc38 r6:8488e568 r5:848e7ffc [ 3568.411955][T29574] r4:848e7fea [ 3568.412304][T29574] [<807bbfa0>] (tomoyo_encode2) from [<807bc0b4>] (tomoyo_encode+0x24/0x30) [ 3568.412845][T29574] r9:8309e800 r8:00000000 r7:834dbc38 r6:8488e568 r5:00001000 r4:848e7feb [ 3568.413060][T29574] [<807bc090>] (tomoyo_encode) from [<807bc140>] (tomoyo_realpath_from_path+0x80/0x17c) [ 3568.413455][T29574] r5:00001000 r4:848e7000 [ 3568.413697][T29574] [<807bc0c0>] (tomoyo_realpath_from_path) from [<807b8240>] (tomoyo_path_number_perm+0xcc/0x22c) [ 3568.413814][T29574] r10:833ae000 r9:00000000 r8:8488e540 r7:00005608 r6:00000004 r5:81cd56c4 [ 3568.414269][T29574] r4:8488e568 r3:826c0240 [ 3568.414280][T29574] [<807b8174>] (tomoyo_path_number_perm) from [<807bcb20>] (tomoyo_file_ioctl+0x1c/0x20) [ 3568.414320][T29574] r9:00000003 r8:8488e540 r7:00000000 r6:00000000 r5:00005608 r4:8488e540 [ 3568.414337][T29574] [<807bcb04>] (tomoyo_file_ioctl) from [<8076a55c>] (security_file_ioctl+0x64/0x1e4) [ 3568.414370][T29574] [<8076a4f8>] (security_file_ioctl) from [<8056b444>] (sys_ioctl+0x4c/0xd84) [ 3568.414402][T29574] r7:00000000 r6:8488e541 r5:00000000 r4:00005608 [ 3568.414411][T29574] [<8056b3f8>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3568.414435][T29574] Exception stack(0xedcfdfa8 to 0xedcfdff0) [ 3568.414456][T29574] dfa0: 00000000 00000000 00000003 00005608 00000000 00000000 [ 3568.414474][T29574] dfc0: 00000000 00000000 0012fee0 00000036 002d0000 00000000 00006364 76b970bc [ 3568.414488][T29574] dfe0: 76b96ec0 76b96eb0 0001939c 00131f30 [ 3568.414507][T29574] r10:00000036 r9:833ae000 r8:8020029c r7:00000036 r6:0012fee0 r5:00000000 [ 3568.414593][T29574] r4:00000000 [ 3568.417100][T29574] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3569.109499][ T31] audit: type=1400 audit(3569.065:497): avc: denied { bind } for pid=29569 comm="syz.1.6676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3572.758566][T29611] FAULT_INJECTION: forcing a failure. [ 3572.758566][T29611] name failslab, interval 1, probability 0, space 0, times 0 [ 3572.761270][T29611] CPU: 1 UID: 0 PID: 29611 Comm: syz.1.6686 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3572.761430][T29611] Hardware name: ARM-Versatile Express [ 3572.761461][T29611] Call trace: [ 3572.761513][T29611] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3572.761639][T29611] r7:84160c00 r6:00000000 r5:60000013 r4:82257c34 [ 3572.761665][T29611] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3572.761728][T29611] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3572.761793][T29611] r5:84160c00 r4:8291bcc0 [ 3572.761812][T29611] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3572.761875][T29611] [<8095f3d4>] (should_fail_ex) from [<805257a4>] (should_failslab+0x6c/0x94) [ 3572.761989][T29611] r8:00000000 r7:84160c00 r6:00000dc0 r5:ee371f20 r4:83001240 [ 3572.762013][T29611] [<80525738>] (should_failslab) from [<80509584>] (__kmalloc_cache_noprof+0x4c/0x33c) [ 3572.762079][T29611] [<80509538>] (__kmalloc_cache_noprof) from [<81712070>] (tcp_sendmsg_fastopen+0x94/0x188) [ 3572.762160][T29611] r10:00000000 r9:ee371f20 r8:00000000 r7:ee371cc4 r6:00000000 r5:ee371f20 [ 3572.762185][T29611] r4:857d5280 [ 3572.762206][T29611] [<81711fdc>] (tcp_sendmsg_fastopen) from [<81712a24>] (tcp_sendmsg_locked+0x8c0/0xdb4) [ 3572.762285][T29611] r8:857d5280 r7:2404c0d0 r6:00000000 r5:ee371f20 r4:00000000 [ 3572.762308][T29611] [<81712164>] (tcp_sendmsg_locked) from [<81712f48>] (tcp_sendmsg+0x30/0x44) [ 3572.762385][T29611] r10:00000000 r9:ee371dc4 r8:ee371dc4 r7:00000000 r6:00000000 r5:ee371f20 [ 3572.762408][T29611] r4:857d5280 [ 3572.762428][T29611] [<81712f18>] (tcp_sendmsg) from [<817f3b50>] (inet6_sendmsg+0x40/0x4c) [ 3572.762507][T29611] r7:00000000 r6:857d5280 r5:00000000 r4:ee371f20 [ 3572.762527][T29611] [<817f3b10>] (inet6_sendmsg) from [<8194ea7c>] (smc_sendmsg+0x84/0x278) [ 3572.762606][T29611] r7:00000000 r6:ee371f20 r5:00000000 r4:8580ed00 [ 3572.762629][T29611] [<8194e9f8>] (smc_sendmsg) from [<81519a34>] (__sock_sendmsg+0x44/0x78) [ 3572.762715][T29611] r9:ee371dc4 r8:ee371dc4 r7:00000000 r6:85027b80 r5:ee371f20 r4:00000000 [ 3572.762740][T29611] [<815199f0>] (__sock_sendmsg) from [<8151a2a4>] (____sys_sendmsg+0x298/0x2cc) [ 3572.762808][T29611] r7:00000000 r6:85027b80 r5:2404c0d0 r4:ee371f20 [ 3572.762831][T29611] [<8151a00c>] (____sys_sendmsg) from [<8151c044>] (___sys_sendmsg+0x9c/0xd0) [ 3572.762907][T29611] r10:ee371e24 r9:20000240 r8:2404c0d0 r7:00000000 r6:85027b80 r5:ee371f20 [ 3572.762933][T29611] r4:00000000 [ 3572.762962][T29611] [<8151bfa8>] (___sys_sendmsg) from [<8151c4d4>] (__sys_sendmsg+0x8c/0xd8) [ 3572.763042][T29611] r10:00000128 r9:84160c00 r8:8488e480 r7:2404c0d0 r6:20000240 r5:8488e481 [ 3572.763069][T29611] r4:00000004 [ 3572.763090][T29611] [<8151c448>] (__sys_sendmsg) from [<8151c534>] (sys_sendmsg+0x14/0x18) [ 3572.763164][T29611] r8:8020029c r7:00000128 r6:0012fee0 r5:00000000 r4:00000000 [ 3572.763187][T29611] [<8151c520>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3572.763246][T29611] Exception stack(0xee371fa8 to 0xee371ff0) [ 3572.763294][T29611] 1fa0: 00000000 00000000 00000004 20000240 2404c0d0 00000000 [ 3572.763334][T29611] 1fc0: 00000000 00000000 0012fee0 00000128 002d0000 00000000 00006364 76ae10bc [ 3572.763364][T29611] 1fe0: 76ae0ec0 76ae0eb0 0001939c 00131f30 [ 3578.062489][T29658] fuse: Bad value for 'fd' [ 3578.539755][T29665] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=29665 comm=syz.0.6705 [ 3579.171569][ T31] audit: type=1400 audit(3579.125:498): avc: denied { accept } for pid=29653 comm="syz.0.6705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 3582.139418][T29715] FAULT_INJECTION: forcing a failure. [ 3582.139418][T29715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3582.139739][T29715] CPU: 0 UID: 0 PID: 29715 Comm: syz.1.6721 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3582.139784][T29715] Hardware name: ARM-Versatile Express [ 3582.139798][T29715] Call trace: [ 3582.139820][T29715] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3582.139891][T29715] r7:00000000 r6:00000000 r5:60000013 r4:82257c34 [ 3582.139902][T29715] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3582.139929][T29715] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3582.139959][T29715] r5:84aed400 r4:82951710 [ 3582.139968][T29715] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3582.140157][T29715] [<8095f3d4>] (should_fail_ex) from [<8095f610>] (should_fail+0x14/0x18) [ 3582.140327][T29715] r8:76b01f30 r7:00000000 r6:00000000 r5:ee6e9f68 r4:00000002 [ 3582.140608][T29715] [<8095f5fc>] (should_fail) from [<8095f630>] (should_fail_usercopy+0x1c/0x20) [ 3582.140695][T29715] [<8095f614>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 3582.140774][T29715] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 3582.140894][T29715] r10:00000001 r9:8060401c r8:00000002 r7:ee6e9f68 r6:0000000f r5:76b01f30 [ 3582.141047][T29715] r4:84aed400 r3:ee6e9e9f [ 3582.141058][T29715] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 3582.141116][T29715] r8:76b01f30 r7:ee6e9f68 r6:84aed400 r5:0000000f r4:8488e600 [ 3582.141129][T29715] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 3582.141164][T29715] r10:00000003 r9:84aed400 r8:8020029c r7:00000000 r6:00000000 r5:8488e600 [ 3582.141174][T29715] r4:8488e603 [ 3582.141182][T29715] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 3582.141212][T29715] r7:00000003 r6:00000004 r5:76b01f30 r4:0000000f [ 3582.141220][T29715] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3582.141245][T29715] Exception stack(0xee6e9fa8 to 0xee6e9ff0) [ 3582.141268][T29715] 9fa0: 0000000f 76b01f30 00000004 76b01f30 0000000f 00000000 [ 3582.141287][T29715] 9fc0: 0000000f 76b01f30 00000004 00000003 002d0000 00000000 00006364 76b020bc [ 3582.141301][T29715] 9fe0: 00000158 76b01ed0 000d7d68 0012fe04 [ 3584.837721][T22523] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3584.891744][T22523] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3584.952054][T22523] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3584.987046][T22523] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3585.146181][T22523] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 3585.147653][T22523] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 3585.150548][T22523] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 8a:fb:4a:33:b5:ef - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 3585.159498][T29776] FAULT_INJECTION: forcing a failure. [ 3585.159498][T29776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3585.159866][T29776] CPU: 0 UID: 0 PID: 29776 Comm: syz.1.6732 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3585.159952][T29776] Hardware name: ARM-Versatile Express [ 3585.159982][T29776] Call trace: [ 3585.160034][T29776] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3585.160264][T29776] r7:00000000 r6:00000000 r5:60000013 r4:82257c34 [ 3585.160387][T29776] [<80201ac8>] (show_stack) from [<8022003c>] (dump_stack_lvl+0x70/0x7c) [ 3585.160550][T29776] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3585.160778][T29776] r5:84163000 r4:82951710 [ 3585.160866][T29776] [<80220048>] (dump_stack) from [<8095f598>] (should_fail_ex+0x1c4/0x228) [ 3585.161015][T29776] [<8095f3d4>] (should_fail_ex) from [<8095f610>] (should_fail+0x14/0x18) [ 3585.161208][T29776] r8:76b01f30 r7:00000000 r6:00000000 r5:eca01f68 r4:00000002 [ 3585.161230][T29776] [<8095f5fc>] (should_fail) from [<8095f630>] (should_fail_usercopy+0x1c/0x20) [ 3585.161320][T29776] [<8095f614>] (should_fail_usercopy) from [<8058cd44>] (simple_read_from_buffer+0x80/0x13c) [ 3585.161451][T29776] [<8058ccc4>] (simple_read_from_buffer) from [<806040d4>] (proc_fail_nth_read+0xb8/0x100) [ 3585.161550][T29776] r10:00000001 r9:8060401c r8:00000002 r7:eca01f68 r6:0000000f r5:76b01f30 [ 3585.161639][T29776] r4:84163000 r3:eca01e9f [ 3585.161664][T29776] [<8060401c>] (proc_fail_nth_read) from [<805518b8>] (vfs_read+0x98/0x320) [ 3585.161783][T29776] r8:76b01f30 r7:eca01f68 r6:84163000 r5:0000000f r4:8488ec00 [ 3585.161807][T29776] [<80551820>] (vfs_read) from [<80552558>] (ksys_read+0x74/0xe4) [ 3585.161983][T29776] r10:00000003 r9:84163000 r8:8020029c r7:00000000 r6:00000000 r5:8488ec00 [ 3585.162127][T29776] r4:8488ec03 [ 3585.162163][T29776] [<805524e4>] (ksys_read) from [<805525d8>] (sys_read+0x10/0x14) [ 3585.162273][T29776] r7:00000003 r6:00000004 r5:76b01f30 r4:0000000f [ 3585.162376][T29776] [<805525c8>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3585.162456][T29776] Exception stack(0xeca01fa8 to 0xeca01ff0) [ 3585.162668][T29776] 1fa0: 0000000f 76b01f30 00000004 76b01f30 0000000f 00000000 [ 3585.162743][T29776] 1fc0: 0000000f 76b01f30 00000004 00000003 002d0000 00000000 00006364 76b020bc [ 3585.162861][T29776] 1fe0: 00000158 76b01ed0 000d7d68 0012fe04 [ 3585.230923][T22523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3585.236062][T22523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3585.240967][T22523] bond0 (unregistering): (slave bond1): Releasing backup interface [ 3585.243964][T22523] bond0 (unregistering): Released all slaves [ 3585.249390][T22523] bond1 (unregistering): Released all slaves [ 3585.261269][T22523] bond2 (unregistering): (slave veth3): Releasing backup interface [ 3585.264627][T22523] bond2 (unregistering): Released all slaves [ 3585.332091][T22523] hsr_slave_0: left promiscuous mode [ 3585.333562][T22523] hsr_slave_1: left promiscuous mode [ 3585.346195][T22523] veth1_macvtap: left promiscuous mode [ 3585.346532][T22523] veth0_macvtap: left promiscuous mode [ 3585.346714][T22523] veth1_vlan: left promiscuous mode [ 3585.346822][T22523] veth0_vlan: left promiscuous mode [ 3585.468203][T22523] ------------[ cut here ]------------ [ 3585.468569][T22523] WARNING: CPU: 1 PID: 22523 at lib/ref_tracker.c:228 ref_tracker_free+0x190/0x298 [ 3585.469174][T22523] Modules linked in: [ 3585.469763][T22523] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3585.470179][T22523] CPU: 1 UID: 0 PID: 22523 Comm: kworker/u8:3 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 3585.470627][T22523] Hardware name: ARM-Versatile Express [ 3585.470914][T22523] Workqueue: netns cleanup_net [ 3585.471133][T22523] Call trace: [ 3585.471253][T22523] [<802019e4>] (dump_backtrace) from [<80201ae0>] (show_stack+0x18/0x1c) [ 3585.471599][T22523] r7:00000000 r6:828227fc r5:00000000 r4:82257c34 [ 3585.471796][T22523] [<80201ac8>] (show_stack) from [<80220020>] (dump_stack_lvl+0x54/0x7c) [ 3585.472909][T22523] [<8021ffcc>] (dump_stack_lvl) from [<80220060>] (dump_stack+0x18/0x1c) [ 3585.473610][T22523] r5:00000000 r4:82a70d4c [ 3585.473760][T22523] [<80220048>] (dump_stack) from [<802025f8>] (panic+0x120/0x374) [ 3585.474226][T22523] [<802024d8>] (panic) from [<802619e8>] (get_taint+0x0/0x1c) [ 3585.474456][T22523] r3:8280c604 r2:00000001 r1:8223e7fc r0:822462fc [ 3585.474635][T22523] r7:809673f4 [ 3585.474744][T22523] [<80261974>] (check_panic_on_warn) from [<80261b4c>] (__warn+0x80/0x188) [ 3585.474985][T22523] [<80261acc>] (__warn) from [<80261dcc>] (warn_slowpath_fmt+0x178/0x1f4) [ 3585.475239][T22523] r8:00000009 r7:822b2274 r6:e06e9b54 r5:84151800 r4:00000000 [ 3585.475437][T22523] [<80261c58>] (warn_slowpath_fmt) from [<809673f4>] (ref_tracker_free+0x190/0x298) [ 3585.476040][T22523] r10:00000000 r9:84a31b00 r8:84f63c00 r7:00000000 r6:00000000 r5:854c5988 [ 3585.476515][T22523] r4:84ce19cc [ 3585.476638][T22523] [<80967264>] (ref_tracker_free) from [<8155d35c>] (neigh_parms_release+0x7c/0xc4) [ 3585.476977][T22523] r8:84f63c00 r7:00000000 r6:00000000 r5:84ce1680 r4:854c5980 [ 3585.477184][T22523] [<8155d2e0>] (neigh_parms_release) from [<81804d0c>] (addrconf_ifdown+0x6ac/0x764) [ 3585.477451][T22523] r5:84f63b84 r4:84f63c00 [ 3585.477579][T22523] [<81804660>] (addrconf_ifdown) from [<8180aee0>] (addrconf_notify+0x98/0x770) [ 3585.477835][T22523] r10:e06e9d90 r9:84a67000 r8:8180ae48 r7:00000006 r6:84a31b00 r5:84f63c00 [ 3585.478089][T22523] r4:84c9e000 [ 3585.478196][T22523] [<8180ae48>] (addrconf_notify) from [<802926cc>] (notifier_call_chain+0x60/0x1b4) [ 3585.478465][T22523] r10:e06e9d90 r9:84a67000 r8:8180ae48 r7:00000000 r6:ffffffd1 r5:829e490c [ 3585.478721][T22523] r4:829e5764 [ 3585.478823][T22523] [<8029266c>] (notifier_call_chain) from [<80292904>] (raw_notifier_call_chain+0x20/0x28) [ 3585.479164][T22523] r10:00000000 r9:84a67000 r8:847e6080 r7:00000000 r6:84a31b00 r5:00000006 [ 3585.479389][T22523] r4:e06e9d90 [ 3585.479492][T22523] [<802928e4>] (raw_notifier_call_chain) from [<8154bb5c>] (call_netdevice_notifiers_info+0x54/0xa0) [ 3585.479788][T22523] [<8154bb08>] (call_netdevice_notifiers_info) from [<81557090>] (unregister_netdevice_many_notify+0x54c/0xbc4) [ 3585.480114][T22523] r6:00000001 r5:84c9e000 r4:000000c0 [ 3585.480261][T22523] [<81556b44>] (unregister_netdevice_many_notify) from [<8155846c>] (default_device_exit_batch+0x304/0x384) [ 3585.480577][T22523] r10:e06e9e70 r9:829d1ec4 r8:e06e9e90 r7:82c1f980 r6:e06e9e70 r5:84a31bf8 [ 3585.480809][T22523] r4:84a31afc [ 3585.480914][T22523] [<81558168>] (default_device_exit_batch) from [<81539c88>] (ops_exit_list+0x64/0x68) [ 3585.481200][T22523] r10:84914380 r9:829d1ec4 r8:829d1ec4 r7:e06e9e90 r6:829d2584 r5:e06e9e90 [ 3585.481456][T22523] r4:829d2584 [ 3585.481581][T22523] [<81539c24>] (ops_exit_list) from [<8153c0e8>] (cleanup_net+0x2b0/0x49c) [ 3585.481843][T22523] r7:e06e9e90 r6:829d1e80 r5:82c1f940 r4:829d2584 [ 3585.482024][T22523] [<8153be38>] (cleanup_net) from [<802873bc>] (process_one_work+0x1b4/0x4f4) [ 3585.482284][T22523] r10:8300f070 r9:8301bc15 r8:84151800 r7:8300e600 r6:8301bc00 r5:829d1e98 [ 3585.482511][T22523] r4:85556800 [ 3585.482618][T22523] [<80287208>] (process_one_work) from [<80288004>] (worker_thread+0x1fc/0x3d8) [ 3585.482878][T22523] r10:61c88647 r9:84151800 r8:8555682c r7:82804d40 r6:8300e600 r5:8300e620 [ 3585.483111][T22523] r4:85556800 [ 3585.483221][T22523] [<80287e08>] (worker_thread) from [<8028f074>] (kthread+0x12c/0x280) [ 3585.483466][T22523] r10:00000000 r9:85556800 r8:80287e08 r7:eb221e60 r6:85556e00 r5:84151800 [ 3585.483696][T22523] r4:00000001 [ 3585.483791][T22523] [<8028ef48>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3585.484016][T22523] Exception stack(0xe06e9fb0 to 0xe06e9ff8) [ 3585.484202][T22523] 9fa0: 00000000 00000000 00000000 00000000 [ 3585.484437][T22523] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3585.484672][T22523] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3585.484881][T22523] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8028ef48 [ 3585.485121][T22523] r4:8556ee80 [ 3585.487238][T22523] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:46:00 Registers: info registers vcpu 0 CPU#0 R00=0000003e R01=dddd27c0 R02=0000003e R03=812cc138 R04=dddd27c0 R05=000003e8 R06=0000000a R07=00000000 R08=0000001f R09=cc1f4070 R10=dddc6000 R11=ee885bfc R12=ee885c00 R13=ee885be0 R14=80344638 R15=812cc148 PSR=20000093 --C- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=84045440 R01=00000073 R02=eb129000 R03=eb129018 R04=82ab4139 R05=84045440 R06=80a627e8 R07=82ab4149 R08=8282a2b8 R09=00000000 R10=00002927 R11=e06e9828 R12=00000002 R13=e06e981c R14=8295b2ec R15=80a627f8 PSR=80000093 N--- A S svc32 s00=8008004a s01=000101c0 d00=000101c08008004a s02=00060800 s03=80032008 d01=8003200800060800 s04=ffe50801 s05=ffffffff d02=ffffffffffe50801 s06=01ffffff s07=2e323038 d03=2e32303801ffffff s08=342e3531 s09=43414d20 d04=43414d20342e3531 s10=016efa00 s11=01800204 d05=01800204016efa00 s12=00000806 s13=3ce60100 d06=3ce6010000000806 s14=08000201 s15=013e9202 d07=013e920208000201 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=fff70804 s33=ffffffff d16=fffffffffff70804 s34=01ffffff s35=0063666e d17=0063666e01ffffff s36=040e6f8e s37=06048002 d18=06048002040e6f8e s38=00000008 s39=05800301 d19=0580030100000008 s40=ffffff02 s41=880303ff d20=880303ffffffff02 s42=00080005 s43=02059003 d21=0205900300080005 s44=80030680 s45=09800206 d22=0980020680030680 s46=08098003 s47=00001c08 d23=00001c0808098003 s48=00000001 s49=00000000 d24=0000000000000001 s50=00000000 s51=00000000 d25=0000000000000000 s52=c6e06869 s53=7429e7f8 d26=7429e7f8c6e06869 s54=36ef85bd s55=01d024e4 d27=01d024e436ef85bd s56=6c91e4f2 s57=0dcd32b6 d28=0dcd32b66c91e4f2 s58=74edc2b0 s59=57318273 d29=5731827374edc2b0 s60=e49715d3 s61=6043d7e5 d30=6043d7e5e49715d3 s62=abf16927 s63=f6946343 d31=f6946343abf16927 FPSCR: 00000000